last executing test programs: 3m49.86360709s ago: executing program 3 (id=12): r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1, 0x5, 0x29fd, 0x84, 0x105, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x800, r3}, 0x38) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0x5}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0xfea8, 0xa) 3m48.417118476s ago: executing program 3 (id=18): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="500000000202030000000000000000000a0000003c0002802c00010300000300fe80000000000000000000000002000014000400000000000000ffffac1e00010c000280050001"], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000240)=ANY=[@ANYRES8, @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB="000000010000000000000000000000000000000000000000000000009e9d97e2775cca7e454c09af98103a8c40d8395b06846bb868f946519aac82ba3fb0160cc1d5df206df88db6890295c56c6082dcbd6e9009df29f12afcdcdc2090c03378d19b72113cd95effbc63ec08bd3393739ce411a0ec8865f92c062519c66ddea792a1f037fdc1aa96"], 0x48) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x1000002, 0x6031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ceb000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) getpid() r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000106a053103000000000001090224ff00000080000904000201030001000921f3ff000122f80409058103"], 0x0) syz_clone(0x400, &(0x7f0000000000)="dc919afb9cff6fa60fa0ab5526c94e73820d945117c4cb9638a403f7335d224b04c244490895d3ea1d68028f71c7422eab263b63d058ff91b959", 0x3a, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000380)="5c6c733465f21a260679450c698b1b07015e8f138b0ff3ed201288f4d159823234a7cf66ee7d28d37358de5ae04e05b19c93c867505869d6aaa9a76f6dd86357989aa6802af53cb22079a21ae26b236ca113d386fbfb91e01ea2d0581d3c5b221a2d1116a60dc9f6c137c201d723c0f0406b93eab7c8df3c0ab87bf42b6ca3708218c7b967dc3e615ef0ce6d907ba423c6e4c30b722149ff7078bfffaba04b764739965ae66d2aa7659871bab96bbcc7e89e28ad1cef918cf8962d7bd70c8767a22b42d8483a30d58f3fbbb4cc5e3ddbd2878a44dbcb5de26b5284b8549158936647550bb5f969d21c4bfc6afba27c4a49a71e") syz_usb_control_io(r1, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) 3m44.612183899s ago: executing program 3 (id=34): ioperm(0x9, 0xfff, 0x6) r0 = shmat(0x0, &(0x7f0000fed000/0x3000)=nil, 0x400c) io_uring_setup(0x51d2, &(0x7f0000000140)={0x0, 0x3957, 0x1000, 0x2, 0x402d7}) shmdt(r0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r4, @ANYBLOB="1f003300d000000008021100000108021100000050505050505000000f"], 0x3c}}, 0x10) 3m44.308583987s ago: executing program 3 (id=38): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) chdir(&(0x7f0000000140)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000080)='./file1\x00') ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, 0x0) 3m43.408673899s ago: executing program 3 (id=42): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x8, 0x3, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000001200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r1 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x80) r3 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000003c0)={r0, r2}, 0x10) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x8, 0x3, &(0x7f0000001300)=ANY=[], &(0x7f0000001200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000003c0)={r4, r6}, 0x10) dup3(r5, r3, 0x0) 3m40.619996927s ago: executing program 3 (id=53): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) unshare(0x64000600) r2 = socket$nl_generic(0x10, 0x3, 0x10) unshare(0x2040400) r3 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)={0x38, r4, 0x601, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x24, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x5, 0x2}]}]}]}, 0x38}}, 0x0) sendmsg$TIPC_NL_NET_SET(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000740)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000000f000000180007800800020001"], 0x2c}}, 0x0) 3m40.168649043s ago: executing program 32 (id=53): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) unshare(0x64000600) r2 = socket$nl_generic(0x10, 0x3, 0x10) unshare(0x2040400) r3 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)={0x38, r4, 0x601, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x24, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x5, 0x2}]}]}]}, 0x38}}, 0x0) sendmsg$TIPC_NL_NET_SET(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000740)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000000f000000180007800800020001"], 0x2c}}, 0x0) 1m32.165566185s ago: executing program 1 (id=490): socket(0x848000000015, 0x805, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_mptcp(0xa, 0x1, 0x106) socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$kcm(0x10, 0x3, 0x10) socket$packet(0x11, 0x2, 0x300) socket$alg(0x26, 0x5, 0x0) socket(0x1e, 0x805, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c00000010001ffe00989837a182138b00268f1c", @ANYRES32=0x0, @ANYBLOB="ff7f000080000000140012800a00010076786c616e0000000400028008000a00", @ANYRES64=r0], 0x3c}, 0x1, 0x8000a0ffffffff}, 0x0) 1m30.620893837s ago: executing program 1 (id=494): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r1}, 0x18) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r2}, 0x8) close(r3) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000e40)=ANY=[@ANYRES32=r0, @ANYRES32=r4, @ANYBLOB="0200"], 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000006112000000000000950000000000000051fa7824c74186dc02ec0696c37b64e3b24da3180100000005345c0f63cdc2e82818254950ee03568b8809a1f04c7c4750eabfafcb9531b31e6a86827d1010c5a909ab98e00e19644a88e95ba26d1c9eecddb2d11c541418ceeb29b9b6829c6e433822bdb3cc85244aab66c1aae9314d7381fcfeb970bea672010000000000000043144648a07a975bd89dc398712376610faa54f12495b4659be8673086f6f3543205d4bc4ce05b8b961103673dff7f158052e62bfbdcddde6985f3f1ac5d9a94cc53207899762a07282a1914452d11858e795a3ca30a101af5574f9035f2b5f703e5be7e4acf8b78c2834ae5805fffee38a9a0033d520bcf6b08ede50899d4b9bdf85c71c5ed44039aab46419496362e54cfad05b4004ac71a003d7b85d07191bed4e5a8908263722d4146f7ed569985439baa355cf3d8731f5e7a237bc06d035a8d601f21746d880819f38b34a495040000000071c2f0cce8c93cc17e9afa314fcb2ba15d646c5b9f87d988c9fbd2b9d9b4e2d71753b1549fa734f0b2e5fcf9549804cddad721971637f9c9730a9cc384eed30345979db9c93e1c52f42cad0a4d4f9436d3f39b0ed09c395dc6e970366087a8e4daeeb1b017006f25caf0cbcefd13d68839893e39c588eb032905f91cafa4996dbf0cc8228d02a3092c0830b8f587a5624515298b2d4eb2bde6f9a2eb83d53f710c490ecd085d2811a7555c53030000007f00000000bfa6478eb96b079c277e2910b7ccdc3d672ed34aa65278c549e2abb549ad954884289130bc71cee2b7de62bf48129ae1af052a2d46a6165eb0954dac7265f1f425735acf6377793946b3229e861d8ea49806b3b533345d36ecef9df700000000f337b1ceb2d8a65dcdcd895d7ba37098d2593fdaaef445af5bee02019c000000aaae37f044bcadeb0f6846582b7653665aa336db9f0384d3c7ddf79c2e0000000000000000000000000000000000000000000000e154aa0d3e41986a668ee1e5ef93a8ceac75f44aae95e26742f895f287111f8ee86f7e3ffb63cfb0e345cf7fc63dd2b0d30977899c6f03640040af4db71f7452bfc79a05118d8bb42b63b195771e42f9942ec626bd4b5461b74324012164e8"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000680)=ANY=[@ANYRES32=r6, @ANYRES32=r5, @ANYBLOB="0200000006"], 0x10) 1m29.391260635s ago: executing program 1 (id=498): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = socket$nl_rdma(0x10, 0x3, 0x14) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020148100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) pwritev(r1, &(0x7f0000000800)=[{&(0x7f0000000280)="ebcadc6e7535e427cf9730b6f3ca21b2a12c03a279932fd3a0e91c09d5527badb6cf55adc3a2380bd50dabe43f1822d31a4cb9615404f0450b1189a197ba344d2decdafbb96d99bd99a999d37e064e85d24610358d77014d3df1e4e9403a7ce20907", 0x62}, {&(0x7f0000000200)="f60dd410adfcd531859866bf26eef6e0beb3", 0x12}, {&(0x7f00000003c0)="4c55f2a90ceab58bdcb365c92ea1b77163356ab4ba28e8f50b7a10e94f66776222fd3b5396ee4fbc059d201611002f3b33614d2f406e3c34666ef0faf2e69c27810d1866b961a3e36f65d97995c30491248b2b88283ac6be4e5723dba8936ba653982d353d4efd180a88433ae4b16e87bcba11d107e20c70f2650d440eac96b31005b6ae6bef62176b5c5b7b89db036d152a5f757185873b98e1999af2e0747e1e062dfbfaa835", 0xa7}, {&(0x7f0000000480)="1f421e9d68d5a5bc60c0246f83be96e5ead3622e397a6f72507d7a3148713a3fae6b96750bfff887ce04434ba7971546e0c218dddfd99110e2057c7b1b4a0c42a1fe43473fc73f6180757a7b157efe52dcf7d1cac48855c24225bd74af82b7", 0x5f}, {&(0x7f0000000500)="19eb394f3fbb2d5251c33546b13d6177184ee4d23f689f5a84fd0188e9d3a0bb8fd0b04d0958ee236a5f92cf2a019695fe40c0ff92a336f5abd4150fd9df075e309d02003d1d0ca3ae55a86ef5bc06b0a1b6803d4827919d08efc28f1d473f8b8303faaa058641dc0c4202cc713220e431c813067542373a7e3fc70eaec8bbdeeeeebf8bcc6b592aa88d14ab429597b99beec378e3c84a81ae85faf822698fcb8214bbfe66130fa2cb9f6b691aec71f3ecd4459904cf024cb0c8e7686aa461b1e2", 0xc1}, {&(0x7f0000000600)="c5ea4b1f1ff4acb274d4dcb9355b61a95172024e662e1684058a7bc5eae7740f9085da03b71da81fec86d5d0d1e4305bd114b3fb23314b6b2bc2f51503a7d76f6d94da64f8d8c069e40b2f7e0725fdc2f0d775619f7faf10416babfb34b2f87ea5bd6feddf564312bd774ba108cdc294374a926a0573662ce13df8a46a0eedbdd5c329ce5c6afa0406ba9dba90bf454f562fc6198d64e185215b8535515927e372b3dc4cc6f1e4ce092d318ff2fa661da841d9d8ca5cfe086a914832e561034768c27177a9bb732e", 0xc8}, {&(0x7f0000000700)="adc48a164199e5d1138b4b7084101b0e2c7ca080e8040f5173bc7543494f4544375fedba0e9694494df1c8b875f25e2656a45b5c015316a0092ebc38d9cd78e86f5d7960c2ce7b98b70e810b180ecf4f659538c877d3b1e873d4ed69ae659f256ea65e669215be80d4aced432d7e0cc8f36e3abad51831d5d86aa7efe150159557443c2146e2bd115596404afaa89276c5f31225f64abfdbb9ac4716c456222ec3d8138c898e87c3ec69faa04f545f758ee8479401f5b7bf0de61bf2657fbd34c96f", 0xc2}], 0x7, 0x3, 0x569) splice(r0, &(0x7f0000000880)=0x77, r0, &(0x7f00000008c0)=0xe, 0x8, 0x3) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000080)='kfree\x00', r2, 0x0, 0x2}, 0x18) unshare(0x2040400) fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r3, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x101, 0x300, 0x0, 0x101, 0x300}}) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x38, 0x1403, 0x1, 0x70bd2d, 0x25dfdbff, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth0_to_bridge\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0xc080}, 0x20000010) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x4, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x2c}, [@call={0x85, 0x0, 0x0, 0x88}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 1m28.419846578s ago: executing program 1 (id=501): write$sysctl(0xffffffffffffffff, 0x0, 0x0) prctl$PR_GET_TSC(0x43, &(0x7f0000000040)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) syz_init_net_socket$ax25(0x3, 0x3, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(0xffffffffffffffff, 0xc0487c04, &(0x7f00000001c0)={0x0, 0x3, 0x0, &(0x7f00000002c0)=[{}, {}, {}], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x50, &(0x7f0000000280)={0x0, &(0x7f0000000080)}, 0x10) 54.841883613s ago: executing program 1 (id=501): write$sysctl(0xffffffffffffffff, 0x0, 0x0) prctl$PR_GET_TSC(0x43, &(0x7f0000000040)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) syz_init_net_socket$ax25(0x3, 0x3, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(0xffffffffffffffff, 0xc0487c04, &(0x7f00000001c0)={0x0, 0x3, 0x0, &(0x7f00000002c0)=[{}, {}, {}], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x50, &(0x7f0000000280)={0x0, &(0x7f0000000080)}, 0x10) 22.184889875s ago: executing program 2 (id=690): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$BTRFS_IOC_RM_DEV(r2, 0x5000940b, &(0x7f0000000a80)={{r0}, "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"}) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x7) syz_kvm_setup_cpu$x86(r6, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, 0x0}], 0x1, 0x50, 0x0, 0x0) 19.851588219s ago: executing program 2 (id=693): setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x10, 0x5, 0x490, 0x210, 0x210, 0xffffffff, 0x120, 0x120, 0x438, 0x438, 0xffffffff, 0x438, 0x438, 0x5, 0x0, {[{{@ipv6={@private0, @private2, [], [], 'wlan1\x00', 'ip6erspan0\x00'}, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x1, @ipv4=@loopback, @ipv6=@private0, @gre_key, @icmp_id}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@loopback, @ipv4=@dev, @icmp_id, @gre_key}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv4, @port, @gre_key}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv4, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @port, @icmp_id}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4f0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000000)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) write$FUSE_GETXATTR(r2, &(0x7f0000000480)={0x18}, 0x18) write$FUSE_INIT(r2, &(0x7f0000000600)={0x50, 0x0, 0x0, {0x7, 0x29, 0x3, 0x0, 0x4, 0x53b, 0x7, 0x0, 0x0, 0x0, 0xa0, 0x200}}, 0x50) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x80, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_fscache}]}}) r3 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1, 0x12, r3, 0x75e7f000) write$FUSE_INIT(r3, &(0x7f0000000200)={0x50, 0x0, 0x0, {0x7, 0x29, 0x1282, 0x400c6001, 0x5, 0x8, 0x10, 0xc40b, 0x0, 0x0, 0x40, 0x6}}, 0x50) 18.782880774s ago: executing program 2 (id=696): socket$packet(0x11, 0x2, 0x300) socket$inet_smc(0x2b, 0x1, 0x0) socket$inet6(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0x707b, 0x800, 0x4, 0x8}, &(0x7f0000000340)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r1, 0x3516, 0x0, 0x4, 0x0, 0x0) 17.73924117s ago: executing program 1 (id=501): write$sysctl(0xffffffffffffffff, 0x0, 0x0) prctl$PR_GET_TSC(0x43, &(0x7f0000000040)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) syz_init_net_socket$ax25(0x3, 0x3, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(0xffffffffffffffff, 0xc0487c04, &(0x7f00000001c0)={0x0, 0x3, 0x0, &(0x7f00000002c0)=[{}, {}, {}], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x50, &(0x7f0000000280)={0x0, &(0x7f0000000080)}, 0x10) 12.312959099s ago: executing program 2 (id=706): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='pids.current\x00', 0x275a, 0x0) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r0, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000000000002000040"]) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) syz_clone(0x50807100, 0x0, 0x0, 0x0, 0x0, 0x0) 9.956024631s ago: executing program 0 (id=710): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'rose0\x00', 0x112}) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) socket$inet(0x2, 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0}, 0x18) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2c00000010008100000000000080000000000000", @ANYRES32=0x0, @ANYBLOB="0a043cbf", @ANYRES32, @ANYBLOB="0a001b"], 0x2c}], 0x1}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) syz_usb_connect$hid(0x2, 0x0, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x4c, 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) 9.892436479s ago: executing program 4 (id=711): socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000faffffff850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x12, 0x8, 0x4, 0x7cb4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000740)=ANY=[], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) openat$uinput(0xffffffffffffff9c, &(0x7f0000000180), 0x802, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, @void, @value}, 0x94) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000d40)={0x64, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_CIDR={0x5, 0x3, 0x1f}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x64}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="400000000906010200000000000a0000000000000900020073797a31000000000500010007000000180007800c00018008000140ffffffff080009"], 0x40}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) 9.38036822s ago: executing program 4 (id=712): sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000b40)="83", 0x1}], 0x1}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)) r0 = syz_io_uring_setup(0x460, &(0x7f0000000280)={0x0, 0x40000022, 0x10, 0x0, 0x34d}, &(0x7f00000000c0)=0x0, &(0x7f0000000000)=0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SYMLINKAT={0x26, 0x21, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0) 8.186395239s ago: executing program 4 (id=714): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = syz_clone(0x904000, 0x0, 0x5f, 0x0, 0x0, 0x0) setpgid(r0, 0x0) r1 = getpgid(r0) setpgid(0x0, r1) lsetxattr$security_ima(&(0x7f00000003c0)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0, 0x2) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r3 = open(&(0x7f0000000000)='.\x00', 0x0, 0x244) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc0189379, &(0x7f0000000200)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) 7.852916342s ago: executing program 4 (id=715): pipe(&(0x7f0000000080)) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="900000001f0001"], 0x90}, 0x1, 0x0, 0x0, 0x44}, 0x4000) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b708000000002d007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 7.539981228s ago: executing program 0 (id=717): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000400)='rcu_utilization\x00', r3, 0x0, 0x1}, 0x18) r4 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r4, &(0x7f00000032c0)=[{&(0x7f0000002e40)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)="03", 0x1}], 0x1}], 0x1, 0x0) 6.584519781s ago: executing program 0 (id=718): bpf$TOKEN_CREATE(0x24, &(0x7f0000000400), 0x8) r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r0}, 0x8) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f0000000140)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f0000000000)=0x2, 0x4) r2 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) syz_emit_ethernet(0x3e, &(0x7f00000016c0)={@random="e33110495bfd", @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb653e", 0x8, 0x3a, 0x0, @dev, @local, {[], @echo_request}}}}}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r3, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000000c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x40}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\f\n5', 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x7}}}}}}}, 0x0) 5.487864696s ago: executing program 4 (id=720): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xc) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000400)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f00000009c0)=""/251, 0x0, 0x100000}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) unshare(0x64000600) syz_usb_connect(0x3, 0x24, 0x0, 0x0) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000200)=&(0x7f0000000180)) 5.484124145s ago: executing program 0 (id=730): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) sendfile(r2, r2, 0x0, 0x40000f63c) io_uring_register$IORING_REGISTER_SYNC_CANCEL(0xffffffffffffffff, 0x18, 0x0, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mq_notify(0xffffffffffffffff, 0x0) sendmsg(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) 3.610663299s ago: executing program 2 (id=723): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0x1e, 0x4, 0x0) connect$tipc(r3, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) sendmmsg$unix(r3, &(0x7f0000004400), 0x400000000000203, 0x0) 3.464990467s ago: executing program 5 (id=724): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x6, 0x1f, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x7fff, 0x8, 0x100}) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000340)={0xda2, 0x8169, 0x6}) r4 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000000)={0x8, 0x2, 0x7}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x49, 0x7fff, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000200)={0x10001, 0x401f, 0x3}) dup(r2) close_range(r0, 0xffffffffffffffff, 0x0) 3.191035314s ago: executing program 5 (id=725): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000600)={0x44, &(0x7f0000000340)={0x40, 0xf, 0x1, 'V'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000780)={0x18, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x18, &(0x7f0000000400)={0x40, 0x17}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) 2.999400131s ago: executing program 0 (id=726): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, 0xffffffffffffffff, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0x40485404, &(0x7f0000000180)={{0x3, 0x3, 0x1, 0x1, 0x7}, 0x0, 0x0, 0x3}) 1.975970826s ago: executing program 5 (id=727): socket$packet(0x11, 0x3, 0x300) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) userfaultfd(0x1) socket$xdp(0x2c, 0x3, 0x0) socket(0x80000000000000a, 0x2, 0x0) socket$inet(0x2b, 0x801, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$xdp(0x2c, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c00000000010104000000000000000002001000240002801400018008000100e000000108000200e00000010c00028005000100000000001c0010800800014000000000d97405010000000008000240000000000800", @ANYRES64=r1], 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) 1.920014407s ago: executing program 0 (id=728): r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r4}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001c40)=@newtaction={0xf0, 0x30, 0x1, 0xe4ff, 0x0, {}, [{0xdc, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x81000000, 0x800, 0x0, 0x0, {0x0, 0x1}, {}, 0xffffffff}}]]}, {0x4}, {0xc}, {0xc}}}, @m_police={0x6c, 0x2, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x1, 0x0, 0x0, 0x0, 0x400000, {0x0, 0x0, 0x0, 0x0, 0xffff}, {0x4}}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0xf0}}, 0x0) 1.794213805s ago: executing program 5 (id=729): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e0000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xe, 0xe, &(0x7f0000001300)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x143, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 366.868067ms ago: executing program 5 (id=731): ioctl$IOMMU_VFIO_GET_API_VERSION(0xffffffffffffffff, 0x3b64) socket$packet(0x11, 0x3, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000e00)=ANY=[@ANYBLOB="18000000030000000000000026d0000095002b000000000093adffa87d2255f674412d020000000000005ab527ee3697f1ec4436dd1164aa93cc5800075557165397000a63f6b9b3f427f6ba6b34f98125f30e697fffffffffffffffa30b273683626e0003254d570dca6b78ad833488cfe4109eaf009edd3e69613d3cd6aaa300006eee8501000000520a0000151d010000000100bf00000000cc587424363dc6ad7f3bbd424c6e6cafbe9309aba218a52001a3cd000041f0db74596fd72c002a60c1bc7dc8c38b7d2e13c50424b9dd1145d03ff45f70685c6bd9ff41c69b7de4758c1096a1dc52f29e470a000517ebc406e89dcbb7677e6528b0856e31ed9474ac24cf609068f645ce971fc0480737a55ebb0bd701f7ff21e88b3cfc22df01e4bac9d97328fa2a82b5e8741e02056d933bed759ff232cebc68b91af50479387467824262852c7939db5672d07cdbe8e14abf56497e5d56d06c759da324a39f7f51b870b2851c3f0a1aab71587a21c8f1b3369ebfcba105a6ccdd01b0f04edb256c604f068773f6ff000000000000006ffbfe5ca32142b0195531458b7d1e341c6f864f983d745f5865aad41d2915aae7602a2d6cd415e8351ebc4223f54d6bec664709ff03f1aa3dc7f1580ace9bf2afd28d7157e67fb98d121ad6eb372713255012e028cb2654d493a0b4b35faae176c89b745eda2967199cc936859a537e8e4871d4acf3e3dc10e13ef227f627a40000ad1fa253d33fa74f172d3407ae4e1e347c0cff28235a3cbb5d33b09bc30cf2880c586272c3f4d79bc36305745cb1cb385e6add14652003c7cdd3324f07d134d3ed07f1c10900000009dd872ec66ea6c718bbd1aa59114000f0be4c6f8df084c5e9734ae30aa9afdc719bf01ab03a9b1074407136b4506000f0916a39d3057d50183612b39e73aeeb6eaf14652dda68e98ef938e6515a94a71836469e2051d9b7eb85f3f2d5ae2c51944da8d7391d6d6b97419a3b7660df4c5124ca425d374b371867a79b31c6617fc3327191fbf514573f0e30d1d60be2168fe6c2f3dccd599a2cb77f124e22f87673675805494db821f39b50d938d5fd8c6b2a3a324c257b84000000b749ccd74089ed6b86f81ca3d247d8f71d290ed1b1a11f7a67125170c88c3b6a50696332226401b110da9c786eeca22debc99335583b54c13c3130978fa069af8223b38ced735c2d905f51ca85ffa4add5647489b3960127696cf2f16625c0c102000000000000009ef52134842e64171f3963841086e3797a4825d081f2d987f05c5341877386ec55d7dc958fd235d6071619a65d4b82d9c162f3556076b80550d961ca74f1ffdaccf0ea5f02e0fca8b27ff3983ab74fd3d560700a1fbb44e77e312b3b129e000302d613916c9bcf9f0000fac73adb6bfb27f88dba816020be760f7b45e001efada800000000000000fdaf4660402f7b3b79a433e08074ea2462974ab2cbd247eb1cfa2638f56daee57ed14bc74de0fd87a9ce638190f3570e0b4c80ef682df22237270955afb6008846557ee3bc09fda6dbb6542e597300eb82a184c96ffde5a30e5433d86666cb045bdd02c804c22ff2635c7bfbf5c0d586cda5e1e88a4d41dee7cc74f822278d124638fec58faeb48afe324369cc51204158bb440df2a694f4cdcaa4f65c22f000000000000000000000000000d503d79906958102000000000000000000001ffff0ef89b2a635edb2dd163e863315e84498dfb52b7f54da6398cbedaa42cc17c4563c859656a357770289a61faa95a82bf1cfb7f2fd7252e9322abe282c3344fc6738b4467893b9bf0d1c8130ae6b226900110635376413c29f7c6f7b7e29b9f4bddd5e328661f4046e01f7d7dc22174e5e627a6f608ad53a4168d4d8f7fbc71104512efe8e5d7d934aa289b4db2b870000000000000000000000000000000000000000009b777883a0f9cf4ad155110cd3ace2b322ac31bfa27847dc99c8a69a1ea5b98e525e6393ad7fd9795170e7b11e4fa990b9386910a6a1a66a70eaff01247603c2ff49d3979676bffb3049166ab84a0f061991bd57c2566c10c282352a5105b6164e3f2491e4793e590dcc71de10da96fdff40dd44a2c9882d3aa0f8a797b8fea6efcfb5046b7679f15559cdaa977504c40b2f777acb907ebf5fc14add71d0bca37405ded69b77ab4a3d7487fd50c5e22ade17556abb722d9c085b189b5fd1f30e8dc813f60400fde1f88d830b11002135e8e7262f299ed7923bfbe00ad88be179e56b41ff3792cee2fc37eee739c3e3af923e8738d93d583a9cf00b946960fc38cf85aae7cf708f9a9d166f2e352a06d99b8be476d1cc2a53a859ae4fdab2a987925d12422474ac044ffe9fe2bf9bf9bbdf36c4ca89c516647542ac45545337829fa7039d155ebda42d4c14f4ca7f8b5d5842658c62d0a03092b94fa1b19f190000000000000000000000000000009e75a32b9fafeffd890f2759b0fe3add33fa43a4c3995458f86a926ad56b23571c46728c039cd3b4bb7d69dfa27782b953a7b81cc161912b3e5716360686e126311a7e21bfa2efd0f57b90c203528c8f620d3c7b31c7abcffae382f53500f7cd5d00159e5f741d3e2d2cbd1a04b3f39b50a4683daa7d117b7f4a149c954d69d8ab001339e464c8eb5f0c63899010757c9a3b69f4920531b83f71d5a34ef9405819afee15b77c015ea755c95127ff2274bb9a8463ce4b8c08ad70596ad2b2b044e660ed144b9dce372450ea69d25da2b6deed67fac26e765aa7d5532ba1044f62db049486acde2294127cb767c23da7d8f9844d3be5b6aa83ee4ce1876af5130efe1b64ccb6bbd349bcc0e8deec8ab3bd1b35bbc8ab8a152771744baa576b9223d26b5603a7f091be1264cabaf661fe2dbe7990a61f710f923f2337818a3983d06c11a6bee7fccb78a53c56db5c18f920d2194374db665dcadf53b8d0014e682ec721d67a7ab6c817fe53c86f8900000000000000000000000000000060b7b827c56e973a2ab5bc5c558ada68c4ec3762f5957b20b919af5d53c87de056a397bdcb614c34761e2c815698e1f9f5521a385c2910850929040a4eba573e91ca21fc855358120ecd79a5d7007693ef3ff9d2b993d114443d53c53094e516f675b2a7074584714e7a2015e05e507811b4ca89c39281c9ada5f58ceb55893cca783ab09c9a19836a3a2c715b10436a5731549e364679ecd8461a68433ab52b1108831edb9654dc602183c1170d6881647f6dca15d57fb76357d815c5f1000000000000000000f49e327c0b6e511494466cec78650f0a6267"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x7, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r2 = socket$kcm(0x29, 0x2, 0x0) r3 = socket$inet6(0xa, 0x803, 0x6) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000180)={r3, r1}) sendmmsg$inet(r2, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000440)}], 0x1}}, {{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000480)="d9", 0x1}], 0x1}}], 0x2, 0x0) 220.192462ms ago: executing program 4 (id=732): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) timer_create(0x3, 0x0, &(0x7f0000000100)=0x0) timer_gettime(r4, &(0x7f00000000c0)) 133.940101ms ago: executing program 2 (id=733): mkdir(0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x9, 0x0, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/oops_count', 0x2b8242, 0x142) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000440)=[@text64={0x40, &(0x7f0000000180)="66baa000ecc744240011000000c7442402b16e0000ff2c2443f466baf80cb8f2c96789ef66bafc0c66ed0f072e0f01c248b820450000000000000f23d00f21f835000000010f23f8c46289900cabb9f9080000b8c93c0000ba000000000f30c4816857a601000000", 0x68}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 0s ago: executing program 5 (id=734): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000001c0)) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) openat(0xffffffffffffffff, 0x0, 0x400002, 0x97) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000000)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000779000/0x1000)=nil, 0x400000, 0x3, 0x2}) signalfd(0xffffffffffffffff, &(0x7f00000002c0)={[0x7fffffff]}, 0x8) gettid() r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) fallocate(r2, 0x0, 0x2000000, 0x10fff9) lseek(r2, 0x1, 0x4) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.10.28' (ED25519) to the list of known hosts. [ 81.344970][ T5807] cgroup: Unknown subsys name 'net' [ 81.458949][ T5807] cgroup: Unknown subsys name 'cpuset' [ 81.468372][ T5807] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 83.006142][ T5807] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 85.640058][ T5821] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 85.668326][ T5832] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 85.676431][ T5832] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 85.684669][ T5832] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 85.691334][ T5827] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 85.693624][ T5832] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 85.708378][ T5832] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 85.716151][ T5832] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 85.716434][ T5827] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 85.724430][ T5832] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 85.737854][ T5836] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 85.745941][ T5836] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 85.746531][ T5827] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 85.767972][ T5834] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 85.776680][ T5827] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 85.785382][ T5834] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 85.792927][ T5834] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 85.807815][ T5834] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 85.812707][ T5832] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 85.815426][ T5834] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 85.829522][ T55] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 85.837278][ T5834] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 85.838347][ T5832] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 85.858938][ T5834] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 85.870584][ T5834] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 86.501599][ T5817] chnl_net:caif_netlink_parms(): no params data found [ 86.543163][ T5818] chnl_net:caif_netlink_parms(): no params data found [ 86.651837][ T5823] chnl_net:caif_netlink_parms(): no params data found [ 86.714644][ T5831] chnl_net:caif_netlink_parms(): no params data found [ 86.794107][ T5826] chnl_net:caif_netlink_parms(): no params data found [ 86.952757][ T5818] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.964455][ T5818] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.973463][ T5818] bridge_slave_0: entered allmulticast mode [ 86.984637][ T5818] bridge_slave_0: entered promiscuous mode [ 87.000119][ T5818] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.008235][ T5818] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.018811][ T5818] bridge_slave_1: entered allmulticast mode [ 87.026601][ T5818] bridge_slave_1: entered promiscuous mode [ 87.161152][ T5818] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.177595][ T5817] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.185342][ T5817] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.192614][ T5817] bridge_slave_0: entered allmulticast mode [ 87.199950][ T5817] bridge_slave_0: entered promiscuous mode [ 87.242224][ T5818] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.265986][ T5817] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.273136][ T5817] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.280885][ T5817] bridge_slave_1: entered allmulticast mode [ 87.288403][ T5817] bridge_slave_1: entered promiscuous mode [ 87.308431][ T5826] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.315668][ T5826] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.322828][ T5826] bridge_slave_0: entered allmulticast mode [ 87.331655][ T5826] bridge_slave_0: entered promiscuous mode [ 87.419500][ T5826] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.427025][ T5826] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.434207][ T5826] bridge_slave_1: entered allmulticast mode [ 87.441873][ T5826] bridge_slave_1: entered promiscuous mode [ 87.452456][ T5818] team0: Port device team_slave_0 added [ 87.458916][ T5823] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.467550][ T5823] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.474894][ T5823] bridge_slave_0: entered allmulticast mode [ 87.482326][ T5823] bridge_slave_0: entered promiscuous mode [ 87.492771][ T5817] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.502236][ T5831] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.509507][ T5831] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.516975][ T5831] bridge_slave_0: entered allmulticast mode [ 87.524242][ T5831] bridge_slave_0: entered promiscuous mode [ 87.546121][ T5818] team0: Port device team_slave_1 added [ 87.566524][ T5823] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.573737][ T5823] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.581452][ T5823] bridge_slave_1: entered allmulticast mode [ 87.588978][ T5823] bridge_slave_1: entered promiscuous mode [ 87.599151][ T5817] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.608572][ T5831] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.615989][ T5831] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.623168][ T5831] bridge_slave_1: entered allmulticast mode [ 87.630576][ T5831] bridge_slave_1: entered promiscuous mode [ 87.654615][ T5826] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.733736][ T5818] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.741504][ T5818] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.767949][ T5818] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.782308][ T5826] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.815688][ T5834] Bluetooth: hci0: command tx timeout [ 87.837892][ T5831] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.850628][ T5831] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.861291][ T5818] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.868925][ T5818] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.894942][ T5818] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.905555][ T5834] Bluetooth: hci4: command tx timeout [ 87.905563][ T5821] Bluetooth: hci1: command tx timeout [ 87.905910][ T5821] Bluetooth: hci2: command tx timeout [ 87.938763][ T5823] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.950909][ T5817] team0: Port device team_slave_0 added [ 87.960624][ T5817] team0: Port device team_slave_1 added [ 87.975156][ T5821] Bluetooth: hci3: command tx timeout [ 88.016280][ T5826] team0: Port device team_slave_0 added [ 88.026400][ T5823] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.051792][ T5831] team0: Port device team_slave_0 added [ 88.073487][ T5826] team0: Port device team_slave_1 added [ 88.107708][ T5831] team0: Port device team_slave_1 added [ 88.114155][ T5817] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.121375][ T5817] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.147453][ T5817] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.164404][ T5818] hsr_slave_0: entered promiscuous mode [ 88.173500][ T5818] hsr_slave_1: entered promiscuous mode [ 88.249505][ T5817] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.257506][ T5817] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.284226][ T5817] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.305524][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.312497][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.338685][ T5826] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.352896][ T5823] team0: Port device team_slave_0 added [ 88.362052][ T5823] team0: Port device team_slave_1 added [ 88.368712][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.375762][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.401900][ T5831] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.416545][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.423507][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.449456][ T5831] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.473441][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.480501][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.507019][ T5826] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.605707][ T5817] hsr_slave_0: entered promiscuous mode [ 88.612804][ T5817] hsr_slave_1: entered promiscuous mode [ 88.619183][ T5817] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 88.626999][ T5817] Cannot create hsr debugfs directory [ 88.656874][ T5823] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.663871][ T5823] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.690154][ T5823] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.702702][ T5823] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.709839][ T5823] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.736447][ T5823] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.837418][ T5826] hsr_slave_0: entered promiscuous mode [ 88.843869][ T5826] hsr_slave_1: entered promiscuous mode [ 88.850444][ T5826] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 88.859156][ T5826] Cannot create hsr debugfs directory [ 88.880072][ T5831] hsr_slave_0: entered promiscuous mode [ 88.886454][ T5831] hsr_slave_1: entered promiscuous mode [ 88.892501][ T5831] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 88.900447][ T5831] Cannot create hsr debugfs directory [ 89.099774][ T5823] hsr_slave_0: entered promiscuous mode [ 89.106207][ T5823] hsr_slave_1: entered promiscuous mode [ 89.112274][ T5823] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 89.120648][ T5823] Cannot create hsr debugfs directory [ 89.517918][ T5818] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 89.537393][ T5818] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 89.549798][ T5818] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 89.571126][ T5818] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 89.629941][ T5817] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 89.647251][ T5817] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 89.669955][ T5817] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 89.680925][ T5817] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 89.739644][ T5826] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 89.751899][ T5826] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 89.775877][ T5826] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 89.786951][ T5826] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 89.895414][ T5821] Bluetooth: hci0: command tx timeout [ 89.938455][ T5831] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 89.973432][ T5831] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 89.980917][ T5830] Bluetooth: hci1: command tx timeout [ 89.981229][ T5834] Bluetooth: hci2: command tx timeout [ 89.986961][ T5821] Bluetooth: hci4: command tx timeout [ 90.001893][ T5831] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 90.012516][ T5831] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 90.029702][ T5818] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.055195][ T5821] Bluetooth: hci3: command tx timeout [ 90.111771][ T5818] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.148948][ T5823] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 90.161427][ T5823] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 90.172522][ T5823] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 90.189677][ T5817] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.200621][ T72] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.207943][ T72] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.226073][ T5823] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 90.259184][ T72] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.266351][ T72] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.358908][ T5826] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.377910][ T5817] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.398087][ T72] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.405269][ T72] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.452135][ T72] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.459325][ T72] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.552921][ T5826] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.573410][ T5831] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.638114][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.645353][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.671800][ T1015] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.678984][ T1015] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.729480][ T5831] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.751874][ T5823] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.811135][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.818457][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.848190][ T5823] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.871317][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.879013][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.924408][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.931660][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.973345][ T5818] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.033872][ T149] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.041102][ T149] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.179099][ T5817] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.201863][ T5818] veth0_vlan: entered promiscuous mode [ 91.234424][ T5818] veth1_vlan: entered promiscuous mode [ 91.327989][ T5826] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.460402][ T5818] veth0_macvtap: entered promiscuous mode [ 91.513318][ T5818] veth1_macvtap: entered promiscuous mode [ 91.604088][ T5818] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.628235][ T5826] veth0_vlan: entered promiscuous mode [ 91.653463][ T5818] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.699854][ T5826] veth1_vlan: entered promiscuous mode [ 91.719953][ T5818] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.730402][ T5818] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.741428][ T5818] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.750974][ T5818] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.773077][ T5831] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.822624][ T979] cfg80211: failed to load regulatory.db [ 91.857890][ T5823] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.976749][ T5817] veth0_vlan: entered promiscuous mode [ 91.985689][ T5821] Bluetooth: hci0: command tx timeout [ 91.992341][ T5826] veth0_macvtap: entered promiscuous mode [ 91.999278][ T1015] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.007796][ T1015] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.032003][ T5826] veth1_macvtap: entered promiscuous mode [ 92.055983][ T5821] Bluetooth: hci2: command tx timeout [ 92.057376][ T5834] Bluetooth: hci4: command tx timeout [ 92.061403][ T5830] Bluetooth: hci1: command tx timeout [ 92.098430][ T5831] veth0_vlan: entered promiscuous mode [ 92.127790][ T5823] veth0_vlan: entered promiscuous mode [ 92.133829][ T5826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.146414][ T5826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.146468][ T5830] Bluetooth: hci3: command tx timeout [ 92.160356][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.170007][ T5817] veth1_vlan: entered promiscuous mode [ 92.193935][ T5823] veth1_vlan: entered promiscuous mode [ 92.202177][ T5826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.214324][ T5826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.226675][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.234381][ T5831] veth1_vlan: entered promiscuous mode [ 92.249166][ T1015] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.266491][ T1015] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.286937][ T5826] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.297543][ T5826] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.307974][ T5826] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.317091][ T5826] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.370821][ T5817] veth0_macvtap: entered promiscuous mode [ 92.403620][ T5831] veth0_macvtap: entered promiscuous mode [ 92.426995][ T5817] veth1_macvtap: entered promiscuous mode [ 92.436553][ T5818] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 92.441449][ T5831] veth1_macvtap: entered promiscuous mode [ 92.502835][ T5823] veth0_macvtap: entered promiscuous mode [ 92.538553][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.552604][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.564668][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.578496][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.592302][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.601094][ T5817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.632414][ T5817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.642634][ T5817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.653576][ T5817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.664654][ T5817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.676596][ T5817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.724178][ T5817] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.788129][ T5823] veth1_macvtap: entered promiscuous mode [ 92.903371][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.915348][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.925561][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.013442][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.229540][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.288819][ T5823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.299641][ T5823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.314827][ T5823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.335238][ T5823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.354851][ T5823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.372624][ T5823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.383189][ T5823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.396382][ T5823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.417149][ T5823] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.439071][ T5817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.464990][ T5817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.485193][ T5817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.499718][ T5817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.509909][ T5817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.528538][ T5909] syz.2.3 (5909): drop_caches: 2 [ 93.535248][ T5817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.549667][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 93.564411][ T5817] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.581127][ T5831] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.583371][ T2977] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.590251][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 93.611013][ T2977] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.634826][ T5831] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.643568][ T5831] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.661162][ T5831] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.693288][ T5817] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.712264][ T5817] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.721543][ T5817] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.731021][ T5817] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.756069][ T5823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.767307][ T5823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.782897][ T5823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.793849][ T5823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.807799][ T5823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.819022][ T5823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.832848][ T5823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.843940][ T5823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.860443][ T5823] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.930989][ T5823] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.956229][ T5823] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.972574][ T5823] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.982595][ T5823] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.032858][ T2977] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.046146][ T2977] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.055325][ T5830] Bluetooth: hci0: command tx timeout [ 94.124516][ T2977] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.135752][ T5830] Bluetooth: hci4: command tx timeout [ 94.141247][ T5830] Bluetooth: hci2: command tx timeout [ 94.156425][ T2977] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.215656][ T5830] Bluetooth: hci3: command tx timeout [ 94.339781][ T2977] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.369298][ T2977] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.484917][ T1015] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.492799][ T1015] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.982118][ T5920] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 95.107393][ T72] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.125027][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 95.135177][ T72] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.212093][ T72] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.256604][ T72] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.298055][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.343668][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.436489][ T5924] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 95.802808][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 95.841086][ T5933] netlink: 'syz.4.5': attribute type 4 has an invalid length. [ 96.456961][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 96.500948][ T30] audit: type=1326 audit(1745865116.338:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5936 comm="syz.0.1" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efdfa58e969 code=0x7ffc0000 [ 96.530111][ T30] audit: type=1326 audit(1745865116.348:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5936 comm="syz.0.1" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efdfa58e969 code=0x7ffc0000 [ 96.530193][ T30] audit: type=1326 audit(1745865116.348:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5936 comm="syz.0.1" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efdfa58e969 code=0x7ffc0000 [ 96.538446][ T30] audit: type=1326 audit(1745865116.378:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5936 comm="syz.0.1" exe="/root/syz-executor" sig=0 arch=c000003e syscall=323 compat=0 ip=0x7efdfa58e969 code=0x7ffc0000 [ 96.538526][ T30] audit: type=1326 audit(1745865116.378:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5936 comm="syz.0.1" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efdfa58e969 code=0x7ffc0000 [ 96.538598][ T30] audit: type=1326 audit(1745865116.378:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5936 comm="syz.0.1" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efdfa58e969 code=0x7ffc0000 [ 96.544323][ T30] audit: type=1326 audit(1745865116.378:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5936 comm="syz.0.1" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7efdfa58e969 code=0x7ffc0000 [ 96.574944][ T30] audit: type=1326 audit(1745865116.408:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5936 comm="syz.0.1" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efdfa58e969 code=0x7ffc0000 [ 96.575096][ T30] audit: type=1326 audit(1745865116.408:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5936 comm="syz.0.1" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efdfa58e969 code=0x7ffc0000 [ 96.575182][ T30] audit: type=1326 audit(1745865116.408:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5936 comm="syz.0.1" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7efdfa58e969 code=0x7ffc0000 [ 97.543129][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 97.552397][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 97.655329][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 97.816358][ T5830] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 97.825481][ T5830] Bluetooth: hci1: Injecting HCI hardware error event [ 97.834278][ T5830] Bluetooth: hci1: hardware error 0x00 [ 98.145559][ T5955] netlink: 'syz.0.14': attribute type 10 has an invalid length. [ 98.177654][ T5955] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.193132][ T5955] bond0: (slave team0): Enslaving as an active interface with an up link [ 99.444174][ T5979] syzkaller0: entered promiscuous mode [ 99.470173][ T5979] syzkaller0: entered allmulticast mode [ 99.694027][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 99.747825][ T979] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 100.015551][ T979] usb 4-1: Using ep0 maxpacket: 16 [ 100.124239][ T979] usb 4-1: config index 0 descriptor too short (expected 65316, got 36) [ 100.154996][ T5830] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 100.173564][ T979] usb 4-1: config 0 has an invalid interface number: 0 but max is -1 [ 100.188464][ T979] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 100.198313][ T979] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 100.210803][ T979] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 100.221389][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 100.229950][ T979] usb 4-1: config 0 interface 0 has no altsetting 0 [ 100.237006][ T979] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 100.246503][ T979] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.480583][ T979] usb 4-1: config 0 descriptor?? [ 101.150041][ T979] hid (null): unknown global tag 0x6c [ 101.174807][ T979] hid (null): unknown global tag 0xc [ 101.187791][ T979] hid (null): unknown global tag 0xd [ 101.217753][ T979] hid (null): unknown global tag 0xd [ 101.697194][ T6007] netlink: 24 bytes leftover after parsing attributes in process `syz.1.31'. [ 101.874113][ T6009] netlink: 'syz.1.32': attribute type 1 has an invalid length. [ 102.030409][ T6010] ip6erspan0: entered promiscuous mode [ 102.710797][ T6032] ieee802154 phy0 wpan0: encryption failed: -22 [ 103.330975][ T5887] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 103.494908][ T5887] usb 2-1: Using ep0 maxpacket: 8 [ 103.545178][ T5887] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 103.585840][ T5887] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 103.604881][ T5887] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 103.620577][ T5887] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 103.642973][ T5887] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 103.662929][ T5887] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 103.673295][ T5887] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.923535][ T5887] usb 2-1: GET_CAPABILITIES returned 0 [ 103.934244][ T5887] usbtmc 2-1:16.0: can't read capabilities [ 104.681915][ T5834] Bluetooth: hci4: command 0x0405 tx timeout [ 104.919896][ T6024] usbtmc 2-1:16.0: usb_control_msg returned -71 [ 104.935071][ T5874] usb 2-1: USB disconnect, device number 2 [ 105.277428][ T5905] usb 4-1: USB disconnect, device number 2 [ 105.350599][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 105.350615][ T30] audit: type=1400 audit(1745865125.188:18): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="*" object="_" requested=w pid=6042 comm="syz.2.44" netif=wpan0 [ 105.559260][ T13] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.848190][ T13] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.090345][ T13] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.166913][ T6064] netlink: 4 bytes leftover after parsing attributes in process `syz.4.51'. [ 106.218244][ T6064] netlink: 4 bytes leftover after parsing attributes in process `syz.4.51'. [ 106.287958][ T13] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.590865][ T5830] Bluetooth: hci3: connection err: -111 [ 106.603031][ T13] bridge_slave_1: left allmulticast mode [ 106.623316][ T13] bridge_slave_1: left promiscuous mode [ 106.644494][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.690000][ T13] bridge_slave_0: left allmulticast mode [ 106.699243][ T13] bridge_slave_0: left promiscuous mode [ 106.710761][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.889182][ T6077] overlayfs: failed to resolve './file1': -2 [ 108.026780][ T6080] process 'syz.0.57' launched './file0' with NULL argv: empty string added [ 109.488403][ T5834] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 109.500365][ T5834] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 109.528629][ T5834] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 109.544058][ T5834] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 109.554533][ T5834] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 109.971805][ T6102] netlink: 'syz.0.64': attribute type 2 has an invalid length. [ 110.056363][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 110.069602][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 110.081986][ T13] bond0 (unregistering): Released all slaves [ 111.657212][ T5834] Bluetooth: hci4: command tx timeout [ 113.370536][ T6135] netlink: 12 bytes leftover after parsing attributes in process `syz.1.72'. [ 113.734794][ T5834] Bluetooth: hci4: command tx timeout [ 114.064123][ T13] hsr_slave_0: left promiscuous mode [ 114.075656][ T13] hsr_slave_1: left promiscuous mode [ 114.081744][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 114.137514][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 114.156390][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 114.170304][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 114.242432][ T13] veth1_macvtap: left promiscuous mode [ 114.267092][ T13] veth0_macvtap: left promiscuous mode [ 114.272928][ T13] veth1_vlan: left promiscuous mode [ 114.283112][ T13] veth0_vlan: left promiscuous mode [ 114.289210][ T6159] netlink: 8 bytes leftover after parsing attributes in process `syz.1.76'. [ 115.188874][ T979] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 115.445929][ T979] usb 1-1: Using ep0 maxpacket: 32 [ 115.826542][ T5834] Bluetooth: hci4: command tx timeout [ 116.160822][ T979] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 116.174177][ T979] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 116.258330][ T6171] xt_hashlimit: size too large, truncated to 1048576 [ 116.308601][ T979] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 116.320248][ T979] usb 1-1: Product: syz [ 116.344284][ T979] usb 1-1: Manufacturer: syz [ 116.349383][ T979] usb 1-1: SerialNumber: syz [ 116.363874][ T6172] xt_hashlimit: size too large, truncated to 1048576 [ 116.381636][ T979] usb 1-1: config 0 descriptor?? [ 116.410089][ T6164] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 116.509696][ T6174] ======================================================= [ 116.509696][ T6174] WARNING: The mand mount option has been deprecated and [ 116.509696][ T6174] and is ignored by this kernel. Remove the mand [ 116.509696][ T6174] option from the mount to silence this warning. [ 116.509696][ T6174] ======================================================= [ 116.740324][ T5875] usb 1-1: USB disconnect, device number 2 [ 117.181926][ T13] team0 (unregistering): Port device team_slave_1 removed [ 117.236689][ T13] team0 (unregistering): Port device team_slave_0 removed [ 117.895875][ T5834] Bluetooth: hci4: command tx timeout [ 118.597778][ T5834] Bluetooth: Frame is too long (len 16, expected len 4) [ 118.914390][ T6095] chnl_net:caif_netlink_parms(): no params data found [ 119.614850][ T979] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 119.729047][ T6219] xt_nat: multiple ranges no longer supported [ 120.505689][ T6095] bridge0: port 1(bridge_slave_0) entered blocking state [ 120.530179][ T979] usb 1-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 120.548745][ T6095] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.559746][ T979] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.578487][ T6095] bridge_slave_0: entered allmulticast mode [ 120.591573][ T979] usb 1-1: Product: syz [ 120.606749][ T6095] bridge_slave_0: entered promiscuous mode [ 120.625399][ T979] usb 1-1: Manufacturer: syz [ 120.654881][ T979] usb 1-1: SerialNumber: syz [ 120.663976][ T6095] bridge0: port 2(bridge_slave_1) entered blocking state [ 120.682193][ T6095] bridge0: port 2(bridge_slave_1) entered disabled state [ 120.704874][ T979] r8152-cfgselector 1-1: Unknown version 0x0000 [ 120.711272][ T979] r8152-cfgselector 1-1: config 0 descriptor?? [ 120.717761][ T6095] bridge_slave_1: entered allmulticast mode [ 120.742195][ T6095] bridge_slave_1: entered promiscuous mode [ 121.859923][ T6095] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 121.877516][ T6095] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 122.200357][ T979] r8152-cfgselector 1-1: Unknown version 0x0000 [ 122.226428][ T979] r8152-cfgselector 1-1: bad CDC descriptors [ 122.354959][ T5874] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 122.673602][ T5874] usb 2-1: config 0 has no interfaces? [ 122.908551][ T5874] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 123.167070][ T6095] team0: Port device team_slave_0 added [ 123.230353][ T6095] team0: Port device team_slave_1 added [ 123.244804][ T5874] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.267331][ T5874] usb 2-1: config 0 descriptor?? [ 124.423003][ T6240] netlink: 8 bytes leftover after parsing attributes in process `syz.1.96'. [ 124.446323][ T6095] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 124.453368][ T6095] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 124.494823][ T883] usb 2-1: USB disconnect, device number 3 [ 124.538631][ T5874] r8152-cfgselector 1-1: USB disconnect, device number 3 [ 124.635852][ T6095] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 124.669809][ T6260] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 124.693235][ T6095] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 124.703050][ T6095] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 124.760076][ T6095] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 124.899773][ T6095] hsr_slave_0: entered promiscuous mode [ 124.917914][ T6095] hsr_slave_1: entered promiscuous mode [ 124.926179][ T6095] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 124.934449][ T6095] Cannot create hsr debugfs directory [ 127.714300][ T6095] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 127.796875][ T6095] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 127.947589][ T6095] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 128.075856][ T6095] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 130.304838][ T883] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 130.342434][ T6095] 8021q: adding VLAN 0 to HW filter on device bond0 [ 130.635761][ T883] usb 3-1: Using ep0 maxpacket: 16 [ 130.684282][ T6095] 8021q: adding VLAN 0 to HW filter on device team0 [ 130.914963][ T5874] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 130.915109][ T883] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 130.980647][ T72] bridge0: port 1(bridge_slave_0) entered blocking state [ 130.987937][ T72] bridge0: port 1(bridge_slave_0) entered forwarding state [ 131.008164][ T883] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=7b.55 [ 131.088166][ T883] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.115174][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 131.122384][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 131.132217][ T883] usb 3-1: Product: syz [ 131.158245][ T5874] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 131.162756][ T883] usb 3-1: Manufacturer: syz [ 131.188873][ T5874] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 131.220996][ T883] usb 3-1: SerialNumber: syz [ 131.223100][ T5874] usb 1-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0x76, changing to 0x6 [ 131.256124][ T883] usb 3-1: config 0 descriptor?? [ 131.308852][ T5874] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 26984, setting to 64 [ 131.314782][ T883] usb 3-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 131.320081][ T5874] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 131.339828][ T5874] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.361774][ T6355] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 131.380531][ T5874] hub 1-1:1.0: bad descriptor, ignoring hub [ 131.400908][ T5874] hub 1-1:1.0: probe with driver hub failed with error -5 [ 131.447028][ T5874] cdc_wdm 1-1:1.0: skipping garbage [ 131.475112][ T5874] cdc_wdm 1-1:1.0: skipping garbage [ 131.490915][ T5874] cdc_wdm 1-1:1.0: probe with driver cdc_wdm failed with error -22 [ 131.711886][ T979] usb 3-1: USB disconnect, device number 2 [ 131.712359][ T5919] usb 3-1: Failed to submit usb control message: -71 [ 131.765995][ T5874] usb 1-1: USB disconnect, device number 4 [ 131.777295][ T5919] usb 3-1: unable to send the bmi data to the device: -71 [ 131.809061][ T5919] usb 3-1: unable to get target info from device [ 131.832513][ T5919] usb 3-1: could not get target info (-71) [ 131.871687][ T5919] usb 3-1: could not probe fw (-71) [ 131.969908][ T6095] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 132.046241][ T30] audit: type=1326 audit(1745865151.888:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6379 comm="syz.4.125" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2a6d58e969 code=0x0 [ 132.671381][ T6095] veth0_vlan: entered promiscuous mode [ 132.729161][ T6095] veth1_vlan: entered promiscuous mode [ 132.780618][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.789185][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.852247][ T6095] veth0_macvtap: entered promiscuous mode [ 132.920198][ T6095] veth1_macvtap: entered promiscuous mode [ 133.003270][ T6095] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 133.362113][ T6095] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.376867][ T6095] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 133.394649][ T6095] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.418537][ T6095] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 133.443303][ T6095] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.474882][ T6095] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 133.504943][ T883] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 133.512029][ T6095] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.532748][ T6095] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 133.619994][ T6095] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 133.660441][ T6095] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.667217][ T883] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 133.714139][ T883] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 64 [ 133.844985][ T6095] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 133.915243][ T6095] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.927671][ T6095] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 133.941243][ T883] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 133.958254][ T883] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.966468][ T883] usb 5-1: Product: syz [ 133.970666][ T883] usb 5-1: Manufacturer: syz [ 133.975158][ T6095] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.000045][ T883] usb 5-1: SerialNumber: syz [ 134.058700][ T6095] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 134.094818][ T6095] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.136874][ T6095] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 134.183805][ T6095] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.235117][ T6412] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 134.285162][ T6095] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.294021][ T6095] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.339301][ T6095] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.659320][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 134.677414][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 134.829987][ T2977] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 134.892473][ T2977] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 134.977567][ T6412] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 135.194826][ T5887] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 135.213277][ T883] cdc_ncm 5-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 135.219950][ T883] cdc_ncm 5-1:1.0: dwNtbInMaxSize=14 is too small. Using 2048 [ 135.242798][ T883] cdc_ncm 5-1:1.0: setting rx_max = 2048 [ 135.398791][ T5887] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 135.439455][ T5887] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 135.464237][ T883] cdc_ncm 5-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.4-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 135.468797][ T5887] usb 2-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 135.737096][ T5887] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.768088][ T5887] usb 2-1: config 0 descriptor?? [ 135.790023][ T883] usb 5-1: USB disconnect, device number 2 [ 135.819535][ T883] cdc_ncm 5-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.4-1, CDC NCM (NO ZLP) [ 136.264097][ T5887] hid-steam 0003:28DE:1142.0002: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.1-1/input0 [ 136.379391][ T5887] hid-steam 0003:28DE:1142.0002: Steam wireless receiver connected [ 136.431291][ T5887] hid-steam 0003:28DE:1142.0003: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.1-1/input0 [ 136.808473][ T6467] kvm: pic: level sensitive irq not supported [ 136.816297][ T5875] usb 2-1: USB disconnect, device number 4 [ 136.888368][ T5875] hid-steam 0003:28DE:1142.0002: Steam wireless receiver disconnected [ 137.206362][ T6478] netlink: 'syz.5.143': attribute type 1 has an invalid length. [ 139.214998][ T6512] netlink: 24 bytes leftover after parsing attributes in process `syz.0.149'. [ 140.778965][ T5834] Bluetooth: hci4: command tx timeout [ 141.157818][ T6549] netlink: 24 bytes leftover after parsing attributes in process `syz.1.159'. [ 141.285895][ T6549] netlink: 'syz.1.159': attribute type 39 has an invalid length. [ 142.414376][ T30] audit: type=1800 audit(1745865162.248:20): pid=6559 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.5.162" name="/" dev="9p" ino=2 res=0 errno=0 [ 144.558506][ T6581] input: syz0 as /devices/virtual/input/input5 [ 144.811806][ T5830] Bluetooth: hci4: command 0x0405 tx timeout [ 145.665777][ T6596] netlink: 'syz.1.169': attribute type 1 has an invalid length. [ 145.850686][ T6598] kvm: pic: non byte write [ 145.920014][ T6601] 8021q: adding VLAN 0 to HW filter on device bond2 [ 145.930632][ T6601] bond1: (slave bond2): making interface the new active one [ 145.939863][ T6601] bond1: (slave bond2): Enslaving as an active interface with an up link [ 145.999875][ T6596] netlink: 28 bytes leftover after parsing attributes in process `syz.1.169'. [ 146.026672][ T6596] 8021q: adding VLAN 0 to HW filter on device bond1 [ 147.866757][ T6642] netlink: 24 bytes leftover after parsing attributes in process `syz.2.180'. [ 147.892502][ T30] audit: type=1804 audit(1745865167.728:21): pid=6641 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz.0.181" name="/newroot/46/bus/file1" dev="overlay" ino=265 res=1 errno=0 [ 147.892757][ T6641] evm: overlay not supported [ 148.155668][ T5887] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 150.855710][ T883] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 151.074801][ T883] usb 1-1: Using ep0 maxpacket: 8 [ 151.103430][ T883] usb 1-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 151.131286][ T883] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 151.193483][ T883] usb 1-1: config 0 descriptor?? [ 151.265507][ T6684] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 151.501102][ T883] asix 1-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 151.639656][ T6691] netlink: 4 bytes leftover after parsing attributes in process `syz.1.193'. [ 151.800618][ T6691] hsr_slave_1 (unregistering): left promiscuous mode [ 151.905642][ T59] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 152.271954][ T59] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 152.286918][ T59] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 152.425221][ T59] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 152.589562][ T59] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.186140][ T59] usb 5-1: config 0 descriptor?? [ 153.817422][ T59] usb 5-1: string descriptor 0 read error: -22 [ 154.168331][ T883] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 154.180724][ T883] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0088: ffffffb9 [ 154.187954][ T59] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:256C:006D.0004/input/input6 [ 154.193699][ T883] asix 1-1:0.0: probe with driver asix failed with error -71 [ 155.012981][ T883] usb 1-1: USB disconnect, device number 5 [ 155.240508][ T59] uclogic 0003:256C:006D.0004: input,hidraw0: USB HID v0.00 Device [HID 256c:006d] on usb-dummy_hcd.4-1/input0 [ 155.314502][ T59] usb 5-1: USB disconnect, device number 4 [ 155.578414][ T6750] syz.0.211: attempt to access beyond end of device [ 155.578414][ T6750] nbd0: rw=0, sector=0, nr_sectors = 1 limit=0 [ 156.514894][ T10] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 156.698685][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 156.721132][ T10] usb 5-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 156.734888][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.753271][ T10] usb 5-1: Product: syz [ 156.763382][ T10] usb 5-1: Manufacturer: syz [ 156.775104][ T10] usb 5-1: SerialNumber: syz [ 156.788851][ T10] usb 5-1: config 0 descriptor?? [ 156.807657][ T10] gspca_main: se401-2.14.0 probing 047d:5003 [ 157.899480][ T10] gspca_se401: read req failed req 0x06 error -19 [ 157.929265][ T10] usb 5-1: USB disconnect, device number 5 [ 158.625333][ T6814] tipc: Failed to remove unknown binding: 66,1,1/0:258292320/258292322 [ 158.642197][ T6814] tipc: Failed to remove unknown binding: 66,1,1/0:258292320/258292322 [ 158.910511][ T6819] capability: warning: `syz.4.224' uses 32-bit capabilities (legacy support in use) [ 160.132396][ T6838] random: crng reseeded on system resumption [ 161.054606][ T6839] netlink: 28 bytes leftover after parsing attributes in process `syz.4.228'. [ 161.198793][ T6848] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 162.634783][ T883] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 163.330186][ T883] usb 1-1: Using ep0 maxpacket: 8 [ 163.378119][ T883] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 163.414872][ T883] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 163.424669][ T883] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 164.225840][ T883] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 164.235806][ T883] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 164.256016][ T883] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 164.265179][ T883] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.648532][ T883] usb 1-1: GET_CAPABILITIES returned 0 [ 164.654080][ T883] usbtmc 1-1:16.0: can't read capabilities [ 164.957359][ T6861] usbtmc 1-1:16.0: usb_control_msg returned -71 [ 164.964396][ T883] usb 1-1: USB disconnect, device number 6 [ 166.010573][ T6913] bridge_slave_0: left allmulticast mode [ 166.111588][ T6913] bridge_slave_0: left promiscuous mode [ 166.148573][ T6913] bridge0: port 1(bridge_slave_0) entered disabled state [ 166.258913][ T6913] bridge_slave_1: left allmulticast mode [ 166.289484][ T6913] bridge_slave_1: left promiscuous mode [ 166.312821][ T6913] bridge0: port 2(bridge_slave_1) entered disabled state [ 166.407913][ T6913] bond0: (slave bond_slave_0): Releasing backup interface [ 166.474178][ T6913] bond0: (slave bond_slave_1): Releasing backup interface [ 166.533875][ T6913] team0: Port device team_slave_0 removed [ 166.580168][ T6913] team0: Port device team_slave_1 removed [ 166.588284][ T6913] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 166.611747][ T6913] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 166.636611][ T6913] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 166.665333][ T6913] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 166.813481][ T6916] team0: Mode "" not found [ 167.610995][ T6951] No such timeout policy "syz0" [ 169.938207][ T30] audit: type=1800 audit(1745865189.768:22): pid=6965 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.2.255" name="/" dev="9p" ino=2 res=0 errno=0 [ 170.368804][ T6977] x_tables: unsorted underflow at hook 1 [ 170.932652][ T6978] bridge_slave_0: left allmulticast mode [ 170.961086][ T6978] bridge_slave_0: left promiscuous mode [ 170.997545][ T6978] bridge0: port 1(bridge_slave_0) entered disabled state [ 171.211841][ T6978] bridge_slave_1: left allmulticast mode [ 171.287440][ T6978] bridge_slave_1: left promiscuous mode [ 171.348844][ T6978] bridge0: port 2(bridge_slave_1) entered disabled state [ 171.564349][ T6978] bond0: (slave bond_slave_0): Releasing backup interface [ 171.719907][ T6978] bond0: (slave bond_slave_1): Releasing backup interface [ 171.817756][ T30] audit: type=1800 audit(1745865191.658:23): pid=6999 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.5.265" name="nullb0" dev="tmpfs" ino=138 res=0 errno=0 [ 171.828310][ T6978] team0: Port device team_slave_0 removed [ 171.881820][ T6978] team0: Port device team_slave_1 removed [ 171.906665][ T6978] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 171.929790][ T6978] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 171.966042][ T6978] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 171.984855][ T6978] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 172.109531][ T6996] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 172.117146][ T6996] IPv6: NLM_F_CREATE should be set when creating new route [ 172.141642][ T7000] lo: entered allmulticast mode [ 172.183580][ T7000] tunl0: entered allmulticast mode [ 172.270337][ T7000] gre0: entered allmulticast mode [ 173.139893][ T7000] gretap0: entered allmulticast mode [ 173.165703][ T7000] erspan0: entered allmulticast mode [ 173.211764][ T7000] ip_vti0: entered allmulticast mode [ 173.282004][ T7000] ip6_vti0: entered allmulticast mode [ 173.326458][ T7000] sit0: entered allmulticast mode [ 173.375296][ T7000] ip6tnl0: entered allmulticast mode [ 173.427403][ T7000] ip6gre0: entered allmulticast mode [ 173.491332][ T7000] ip6gretap0: entered allmulticast mode [ 173.552147][ T7000] bridge0: port 2(bridge_slave_1) entered disabled state [ 173.559945][ T7000] bridge0: port 1(bridge_slave_0) entered disabled state [ 174.110804][ T7000] bridge0: entered allmulticast mode [ 174.204766][ T7000] vcan0: entered allmulticast mode [ 174.218209][ T7000] bond0: entered allmulticast mode [ 174.223371][ T7000] bond_slave_0: entered allmulticast mode [ 174.316064][ T7000] bond_slave_1: entered allmulticast mode [ 174.341607][ T7000] team0: entered allmulticast mode [ 174.364622][ T7000] team_slave_0: entered allmulticast mode [ 174.385884][ T7000] team_slave_1: entered allmulticast mode [ 174.422562][ T7000] dummy0: entered allmulticast mode [ 174.494067][ T7000] nlmon0: entered allmulticast mode [ 174.561852][ T7000] caif0: entered allmulticast mode [ 174.581303][ T7000] batadv0: entered allmulticast mode [ 174.607702][ T7000] vxcan0: entered allmulticast mode [ 174.613178][ T7032] syz.0.274 uses obsolete (PF_INET,SOCK_PACKET) [ 174.620722][ T7000] vxcan1: entered allmulticast mode [ 174.638788][ T7000] veth0: entered allmulticast mode [ 174.696298][ T7000] veth1: entered allmulticast mode [ 174.734351][ T7000] wg0: entered allmulticast mode [ 174.783112][ T7000] wg1: entered allmulticast mode [ 174.838766][ T7000] wg2: entered allmulticast mode [ 174.863476][ T7000] veth0_to_bridge: entered allmulticast mode [ 174.880023][ T7040] netlink: 4 bytes leftover after parsing attributes in process `syz.5.276'. [ 174.901120][ T7000] veth1_to_bridge: entered allmulticast mode [ 174.914058][ T7000] veth0_to_bond: entered allmulticast mode [ 174.932275][ T7000] veth1_to_bond: entered allmulticast mode [ 174.950911][ T7000] veth0_to_team: entered allmulticast mode [ 174.987374][ T7000] veth1_to_team: entered allmulticast mode [ 175.025350][ T7000] veth0_to_batadv: entered allmulticast mode [ 175.037282][ T7000] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 175.045443][ T7000] batadv_slave_0: entered allmulticast mode [ 175.055129][ T7000] veth1_to_batadv: entered allmulticast mode [ 175.065713][ T7000] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 175.084559][ T7000] batadv_slave_1: entered allmulticast mode [ 175.101144][ T7000] xfrm0: entered allmulticast mode [ 175.120260][ T7000] veth0_to_hsr: entered allmulticast mode [ 175.136161][ T7000] hsr_slave_0: entered allmulticast mode [ 175.145356][ T7000] hsr0: entered allmulticast mode [ 175.154299][ T7000] veth1_virt_wifi: entered allmulticast mode [ 175.188666][ T7000] veth0_virt_wifi: entered allmulticast mode [ 175.214437][ T7000] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 175.224481][ T7000] veth1_vlan: entered allmulticast mode [ 175.239375][ T7000] veth0_vlan: entered allmulticast mode [ 175.266562][ T7000] vlan0: entered allmulticast mode [ 175.273715][ T7000] vlan1: entered allmulticast mode [ 175.285729][ T7000] macvlan0: entered allmulticast mode [ 175.300345][ T7000] macvlan1: entered allmulticast mode [ 175.313478][ T7000] ipvlan0: entered allmulticast mode [ 175.325284][ T7000] ipvlan1: entered allmulticast mode [ 175.360867][ T7000] veth1_macvtap: entered allmulticast mode [ 175.538278][ T7000] veth0_macvtap: entered allmulticast mode [ 176.093272][ T7000] macvtap0: entered allmulticast mode [ 176.130069][ T7000] macsec0: entered allmulticast mode [ 176.149206][ T7000] geneve0: entered allmulticast mode [ 176.170378][ T7000] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.221568][ T7000] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.251684][ T7000] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.261986][ T7000] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.272808][ T7000] geneve1: entered allmulticast mode [ 176.283525][ T7000] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 176.302152][ T7000] netdevsim netdevsim1 netdevsim1: entered allmulticast mode [ 176.321046][ T7000] netdevsim netdevsim1 netdevsim2: entered allmulticast mode [ 176.331183][ T7000] netdevsim netdevsim1 netdevsim3: entered allmulticast mode [ 176.353385][ T7000] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode [ 176.378496][ T7000] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode [ 176.413564][ T7000] bond1: entered allmulticast mode [ 176.421381][ T7000] bond2: entered allmulticast mode [ 176.431413][ T7053] overlayfs: failed to get inode (-116) [ 176.453119][ T7053] overlayfs: failed to get inode (-116) [ 177.526046][ T7066] netlink: zone id is out of range [ 177.526144][ T7066] netlink: zone id is out of range [ 177.527830][ T7066] netlink: zone id is out of range [ 177.527861][ T7066] netlink: zone id is out of range [ 177.527870][ T7066] netlink: zone id is out of range [ 177.527895][ T7066] netlink: zone id is out of range [ 177.527903][ T7066] netlink: zone id is out of range [ 177.527927][ T7066] netlink: zone id is out of range [ 177.527936][ T7066] netlink: zone id is out of range [ 177.527960][ T7066] netlink: zone id is out of range [ 177.861374][ T7072] netlink: 'syz.2.286': attribute type 11 has an invalid length. [ 178.984795][ T5872] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 179.151392][ T5872] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 179.187552][ T5872] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 179.212310][ T5872] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 179.234854][ T5872] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.269463][ T5872] usb 3-1: config 0 descriptor?? [ 179.715040][ T5872] cp2112 0003:10C4:EA90.0005: unknown main item tag 0x0 [ 179.738166][ T5872] cp2112 0003:10C4:EA90.0005: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.2-1/input0 [ 179.975094][ T5872] cp2112 0003:10C4:EA90.0005: Part Number: 0x82 Device Version: 0xFE [ 181.425551][ T5876] usb 3-1: reset high-speed USB device number 3 using dummy_hcd [ 182.295733][ T7138] ip6gretap0: entered promiscuous mode [ 182.315321][ T7138] vlan2: entered promiscuous mode [ 182.462178][ T7150] netlink: 'syz.1.312': attribute type 10 has an invalid length. [ 182.726881][ T7150] hsr0: left allmulticast mode [ 182.731983][ T7150] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 182.765191][ T7150] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 182.955220][ T883] usb 3-1: USB disconnect, device number 3 [ 183.568447][ T7142] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 183.824851][ T7150] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 184.105065][ T7161] netlink: 36 bytes leftover after parsing attributes in process `syz.2.304'. [ 184.116485][ T7161] netlink: 12 bytes leftover after parsing attributes in process `syz.2.304'. [ 184.126463][ T7161] netlink: 16 bytes leftover after parsing attributes in process `syz.2.304'. [ 184.605726][ T7158] Zero length message leads to an empty skb [ 184.965367][ T7169] bond0: entered promiscuous mode [ 186.270461][ T7198] ieee802154 phy0 wpan0: encryption failed: -22 [ 187.055356][ T59] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 187.244850][ T59] usb 3-1: Using ep0 maxpacket: 32 [ 187.306320][ T7213] netlink: 52 bytes leftover after parsing attributes in process `syz.1.320'. [ 187.314863][ T59] usb 3-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 187.396236][ T59] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 187.639619][ T59] usb 3-1: config 0 descriptor?? [ 187.806916][ T59] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 189.401561][ T59] gspca_vc032x: reg_w err -110 [ 189.406622][ T59] gspca_vc032x: I2c Bus Busy Wait 00 [ 189.425207][ T59] gspca_vc032x: I2c Bus Busy Wait 00 [ 189.431283][ T59] gspca_vc032x: I2c Bus Busy Wait 00 [ 189.437439][ T59] gspca_vc032x: I2c Bus Busy Wait 00 [ 189.455155][ T59] gspca_vc032x: I2c Bus Busy Wait 00 [ 189.460674][ T59] gspca_vc032x: I2c Bus Busy Wait 00 [ 189.467156][ T59] gspca_vc032x: I2c Bus Busy Wait 00 [ 189.474227][ T59] gspca_vc032x: I2c Bus Busy Wait 00 [ 189.480172][ T59] gspca_vc032x: I2c Bus Busy Wait 00 [ 189.565667][ T59] gspca_vc032x: I2c Bus Busy Wait 00 [ 189.572400][ T59] gspca_vc032x: I2c Bus Busy Wait 00 [ 189.580832][ T59] gspca_vc032x: I2c Bus Busy Wait 00 [ 189.590247][ T59] gspca_vc032x: I2c Bus Busy Wait 00 [ 189.595749][ T59] gspca_vc032x: I2c Bus Busy Wait 00 [ 189.602800][ T59] gspca_vc032x: I2c Bus Busy Wait 00 [ 189.608653][ T59] gspca_vc032x: I2c Bus Busy Wait 00 [ 189.614782][ T59] gspca_vc032x: I2c Bus Busy Wait 00 [ 189.743364][ T59] gspca_vc032x: I2c Bus Busy Wait 00 [ 189.749134][ T59] gspca_vc032x: Unknown sensor... [ 189.754576][ T59] vc032x 3-1:0.0: probe with driver vc032x failed with error -22 [ 190.328892][ T7256] Bluetooth: MGMT ver 1.23 [ 190.572027][ T10] usb 3-1: USB disconnect, device number 4 [ 191.540379][ T7266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 191.589431][ T7266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.612270][ T7266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 191.630216][ T7266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.345905][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.352216][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.480688][ T30] audit: type=1800 audit(1745865214.318:24): pid=7284 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.4.343" name="bus" dev="ramfs" ino=17368 res=0 errno=0 [ 197.489794][ T7316] PKCS7: Unknown OID: [4] 0.38.35.0.121826293(bad) [ 197.496710][ T7316] PKCS7: Only support pkcs7_signedData type [ 200.542710][ T883] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 200.905309][ T883] usb 1-1: Using ep0 maxpacket: 8 [ 200.919249][ T883] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 200.952686][ T883] usb 1-1: too many endpoints for config 0 interface 0 altsetting 4: 65, using maximum allowed: 30 [ 200.988363][ T883] usb 1-1: config 0 interface 0 altsetting 4 has 0 endpoint descriptors, different from the interface descriptor's value: 65 [ 201.046333][ T883] usb 1-1: config 0 interface 0 has no altsetting 0 [ 201.061382][ T883] usb 1-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 201.119146][ T883] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 201.199187][ T883] usb 1-1: config 0 descriptor?? [ 201.271738][ T883] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 201.424839][ T7352] syz_tun: entered allmulticast mode [ 201.547231][ T883] usb 1-1: USB disconnect, device number 7 [ 204.550504][ T7388] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 204.557970][ T7388] IPv6: NLM_F_CREATE should be set when creating new route [ 204.565275][ T7388] IPv6: NLM_F_CREATE should be set when creating new route [ 204.575664][ T7388] capability: warning: `syz.4.373' uses deprecated v2 capabilities in a way that may be insecure [ 205.862060][ T7413] netlink: 8 bytes leftover after parsing attributes in process `syz.0.382'. [ 205.871536][ T7413] netlink: 8 bytes leftover after parsing attributes in process `syz.0.382'. [ 208.363973][ T7432] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 208.363973][ T7432] program syz.2.389 not setting count and/or reply_len properly [ 209.141799][ T30] audit: type=1326 audit(1745865228.978:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7441 comm="syz.2.393" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7a4b18e969 code=0x0 [ 211.231746][ T5832] Bluetooth: hci4: command 0x0405 tx timeout [ 211.690640][ T5834] Bluetooth: hci3: command 0x0406 tx timeout [ 211.698875][ T5834] Bluetooth: hci0: command 0x0406 tx timeout [ 211.705150][ T5834] Bluetooth: hci2: command 0x0406 tx timeout [ 212.023468][ T7471] program syz.2.399 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 212.994865][ T7482] netlink: 'syz.0.405': attribute type 30 has an invalid length. [ 213.911917][ T7505] netlink: 20 bytes leftover after parsing attributes in process `syz.2.410'. [ 214.586381][ T7516] netlink: 48 bytes leftover after parsing attributes in process `syz.0.413'. [ 214.596631][ T7516] netlink: 48 bytes leftover after parsing attributes in process `syz.0.413'. [ 215.418841][ T7524] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 215.598037][ T10] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 215.795148][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 215.817224][ T10] usb 5-1: config 0 has no interfaces? [ 215.830691][ T10] usb 5-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 215.858073][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 215.859107][ T7536] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 215.889669][ T10] usb 5-1: config 0 descriptor?? [ 216.144572][ T7522] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 216.154020][ T7522] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 216.344265][ T5887] usb 5-1: USB disconnect, device number 6 [ 218.083031][ T7598] netlink: 1272 bytes leftover after parsing attributes in process `syz.1.433'. [ 220.746683][ T7644] bridge_slave_0: default FDB implementation only supports local addresses [ 222.074112][ T7657] netlink: 8 bytes leftover after parsing attributes in process `syz.5.442'. [ 223.953502][ T7679] bridge: RTM_NEWNEIGH with invalid ether address [ 224.968888][ T7692] netlink: 36 bytes leftover after parsing attributes in process `syz.5.453'. [ 225.254874][ T7692] netlink: 16 bytes leftover after parsing attributes in process `syz.5.453'. [ 225.263973][ T7692] netlink: 36 bytes leftover after parsing attributes in process `syz.5.453'. [ 225.495929][ T7689] usb usb2: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 225.503545][ T7689] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 225.534993][ T7692] netlink: 36 bytes leftover after parsing attributes in process `syz.5.453'. [ 225.584819][ T30] audit: type=1326 audit(1745865245.398:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7685 comm="syz.2.456" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7a4b18e969 code=0x0 [ 225.934839][ T5876] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 226.106326][ T5876] usb 5-1: Using ep0 maxpacket: 8 [ 226.139930][ T5876] usb 5-1: unable to get BOS descriptor or descriptor too short [ 226.179301][ T5876] usb 5-1: config 1 interface 0 altsetting 129 bulk endpoint 0x82 has invalid maxpacket 32 [ 226.218031][ T5876] usb 5-1: config 1 interface 0 altsetting 129 bulk endpoint 0x3 has invalid maxpacket 1023 [ 226.377358][ T5876] usb 5-1: config 1 interface 0 altsetting 129 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 226.390958][ T5876] usb 5-1: config 1 interface 0 has no altsetting 0 [ 226.418748][ T5876] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 226.431291][ T5876] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 226.439761][ T5876] usb 5-1: Product: syz [ 226.444031][ T5876] usb 5-1: Manufacturer: syz [ 226.466580][ T5876] usb 5-1: SerialNumber: syz [ 226.510384][ T7717] sctp: [Deprecated]: syz.0.463 (pid 7717) Use of struct sctp_assoc_value in delayed_ack socket option. [ 226.510384][ T7717] Use struct sctp_sack_info instead [ 227.068751][ T7698] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 227.155085][ T7698] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 227.429625][ T5876] usb 5-1: bad CDC descriptors [ 227.454193][ T5876] usb 5-1: USB disconnect, device number 7 [ 229.635609][ T7753] Illegal XDP return value 7753 on prog (id 115) dev N/A, expect packet loss! [ 231.684151][ T7791] Malformed UNC in devname [ 231.684151][ T7791] [ 231.692060][ T7791] CIFS: VFS: Malformed UNC in devname [ 232.303450][ T7761] bridge_slave_0: left allmulticast mode [ 232.354862][ T7761] bridge_slave_0: left promiscuous mode [ 232.360746][ T7761] bridge0: port 1(bridge_slave_0) entered disabled state [ 234.768534][ T7761] bridge_slave_1: left allmulticast mode [ 234.844912][ T7761] bridge_slave_1: left promiscuous mode [ 234.851006][ T7761] bridge0: port 2(bridge_slave_1) entered disabled state [ 234.953851][ T7761] bond0: (slave bond_slave_0): Releasing backup interface [ 235.114514][ T7761] bond0: (slave bond_slave_1): Releasing backup interface [ 235.750118][ T7761] team0: Port device team_slave_0 removed [ 235.790760][ T7761] team0: Port device team_slave_1 removed [ 235.816012][ T7761] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 235.824346][ T7761] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 235.841096][ T7761] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 235.884888][ T7761] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 235.922306][ T7814] bridge0: port 3(vxlan0) entered blocking state [ 235.959519][ T7814] bridge0: port 3(vxlan0) entered disabled state [ 235.966266][ T7814] vxlan0: entered allmulticast mode [ 235.973537][ T7814] vxlan0: entered promiscuous mode [ 235.989318][ T7815] lo: entered allmulticast mode [ 236.026342][ T7821] lo: left allmulticast mode [ 240.269483][ T7864] netlink: 12 bytes leftover after parsing attributes in process `syz.5.508'. [ 241.785673][ T2977] vxlan0: left allmulticast mode [ 241.825475][ T2977] vxlan0: left promiscuous mode [ 241.895522][ T2977] bridge0: port 3(vxlan0) entered disabled state [ 241.915545][ T5830] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 242.426655][ T5830] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 242.436564][ T5830] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 242.688620][ T2977] bridge_slave_1: left promiscuous mode [ 242.694474][ T2977] bridge0: port 2(bridge_slave_1) entered disabled state [ 242.759339][ T5830] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 242.770369][ T5830] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 243.503700][ T2977] bridge_slave_0: left promiscuous mode [ 243.510904][ T2977] bridge0: port 1(bridge_slave_0) entered disabled state [ 243.573467][ T7870] tipc: Failed to remove unknown binding: 66,3,3/0:2302254570/2302254571 [ 245.575085][ T5131] Bluetooth: hci3: command tx timeout [ 246.601153][ T2977] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 246.787443][ T2977] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 246.798008][ T2977] bond0 (unregistering): Released all slaves [ 247.656748][ T5131] Bluetooth: hci3: command tx timeout [ 247.924454][ T2977] bond1 (unregistering): (slave bond2): Releasing backup interface [ 247.934828][ T2977] bond1 (unregistering): Released all slaves [ 248.698516][ T2977] bond2 (unregistering): Released all slaves [ 249.933863][ T52] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 249.975164][ T5131] Bluetooth: hci3: command tx timeout [ 250.175287][ T52] usb 3-1: Using ep0 maxpacket: 16 [ 250.278208][ T52] usb 3-1: config 0 has no interfaces? [ 250.381270][ T52] usb 3-1: New USB device found, idVendor=0b57, idProduct=2bbd, bcdDevice=e7.cc [ 250.622604][ T52] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 250.632426][ T52] usb 3-1: Product: syz [ 250.636976][ T52] usb 3-1: Manufacturer: syz [ 250.641604][ T52] usb 3-1: SerialNumber: syz [ 250.675928][ T52] usb 3-1: config 0 descriptor?? [ 251.030910][ T2977] hsr_slave_0: left promiscuous mode [ 251.058495][ T10] usb 3-1: USB disconnect, device number 5 [ 251.085871][ T2977] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 251.116233][ T2977] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 251.201028][ T7990] netlink: 36 bytes leftover after parsing attributes in process `syz.0.542'. [ 251.244013][ T7990] netlink: 16 bytes leftover after parsing attributes in process `syz.0.542'. [ 251.306625][ T7990] netlink: 36 bytes leftover after parsing attributes in process `syz.0.542'. [ 251.407442][ T7990] netlink: 36 bytes leftover after parsing attributes in process `syz.0.542'. [ 252.235110][ T5131] Bluetooth: hci3: command tx timeout [ 252.905678][ T2977] team0 (unregistering): Port device team_slave_1 removed [ 253.804056][ T2977] team0 (unregistering): Port device team_slave_0 removed [ 254.984952][ T8020] bridge0: port 2(bridge_slave_1) entered disabled state [ 255.168645][ T7875] chnl_net:caif_netlink_parms(): no params data found [ 255.663131][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.669579][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.928587][ T7875] bridge0: port 1(bridge_slave_0) entered blocking state [ 255.939318][ T7875] bridge0: port 1(bridge_slave_0) entered disabled state [ 255.951716][ T7875] bridge_slave_0: entered allmulticast mode [ 255.994014][ T7875] bridge_slave_0: entered promiscuous mode [ 256.039736][ T7875] bridge0: port 2(bridge_slave_1) entered blocking state [ 256.088435][ T7875] bridge0: port 2(bridge_slave_1) entered disabled state [ 256.095880][ T7875] bridge_slave_1: entered allmulticast mode [ 256.103725][ T7875] bridge_slave_1: entered promiscuous mode [ 256.667716][ T7875] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 256.825634][ T7875] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 256.982862][ T7875] team0: Port device team_slave_0 added [ 256.998502][ T7875] team0: Port device team_slave_1 added [ 257.162720][ T7875] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 257.185999][ T7875] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 257.254237][ T7875] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 257.277288][ T7875] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 257.284282][ T7875] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 257.322836][ T7875] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 257.347147][ T8067] bridge0: port 1(batadv_slave_0) entered blocking state [ 257.354356][ T8067] bridge0: port 1(batadv_slave_0) entered disabled state [ 257.365387][ T8067] batadv_slave_0: entered allmulticast mode [ 257.376006][ T8067] batadv_slave_0: entered promiscuous mode [ 257.447392][ T8067] bridge0: port 1(batadv_slave_0) entered blocking state [ 257.454579][ T8067] bridge0: port 1(batadv_slave_0) entered forwarding state [ 258.002163][ T7875] hsr_slave_0: entered promiscuous mode [ 258.010058][ T7875] hsr_slave_1: entered promiscuous mode [ 258.016737][ T7875] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 258.024404][ T7875] Cannot create hsr debugfs directory [ 258.994324][ T8095] netlink: 'syz.0.568': attribute type 4 has an invalid length. [ 262.676809][ T7875] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 262.709218][ T7875] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 262.737024][ T7875] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 262.788456][ T7875] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 262.977137][ T8141] overlayfs: failed to clone upperpath [ 263.910859][ T7875] 8021q: adding VLAN 0 to HW filter on device bond0 [ 263.945633][ T7875] 8021q: adding VLAN 0 to HW filter on device team0 [ 264.000601][ T7588] bridge0: port 1(bridge_slave_0) entered blocking state [ 264.007842][ T7588] bridge0: port 1(bridge_slave_0) entered forwarding state [ 264.054080][ T7591] bridge0: port 2(bridge_slave_1) entered blocking state [ 264.061345][ T7591] bridge0: port 2(bridge_slave_1) entered forwarding state [ 267.327058][ T7875] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 267.549727][ T7875] veth0_vlan: entered promiscuous mode [ 267.760970][ T7875] veth1_vlan: entered promiscuous mode [ 268.074908][ T5830] Bluetooth: hci4: command 0x0405 tx timeout [ 268.452518][ T7875] veth0_macvtap: entered promiscuous mode [ 268.463056][ T7875] veth1_macvtap: entered promiscuous mode [ 268.480936][ T7875] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 268.534422][ T7875] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 268.594973][ T7875] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 268.759197][ T7875] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 268.795520][ T7875] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 268.808219][ T7875] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 268.832785][ T8215] lo: entered allmulticast mode [ 268.853361][ T8209] lo: left allmulticast mode [ 268.863590][ T7875] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.896462][ T7875] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.914809][ T7875] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.923575][ T7875] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.361110][ T8231] warning: `syz.4.599' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 270.622737][ T7556] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 270.652664][ T7556] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 270.750304][ T7591] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 270.811119][ T7591] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 271.861762][ T8266] Smack: duplicate mount options [ 272.370299][ T8273] netlink: 'syz.5.607': attribute type 1 has an invalid length. [ 272.516764][ T8275] netlink: 28 bytes leftover after parsing attributes in process `syz.5.607'. [ 272.590410][ T7556] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.819615][ T8274] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 272.966279][ T8274] ip6gretap1: entered allmulticast mode [ 273.268533][ T8273] bond1: entered promiscuous mode [ 273.273643][ T8273] bond1: entered allmulticast mode [ 273.486215][ T8275] bond1: left promiscuous mode [ 273.507384][ T8275] bond1: left allmulticast mode [ 273.533095][ T8275] 8021q: adding VLAN 0 to HW filter on device bond1 [ 274.643687][ T7556] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.142481][ T7556] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.215022][ T5830] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 276.229172][ T5830] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 276.240335][ T5830] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 276.254127][ T5830] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 276.415494][ T5830] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 277.027719][ T7556] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.150570][ T7556] bridge_slave_1: left allmulticast mode [ 278.175041][ T7556] bridge_slave_1: left promiscuous mode [ 278.267256][ T7556] bridge0: port 2(bridge_slave_1) entered disabled state [ 278.496185][ T5830] Bluetooth: hci3: command tx timeout [ 279.060903][ T7556] bridge_slave_0: left allmulticast mode [ 279.095477][ T7556] bridge_slave_0: left promiscuous mode [ 279.108980][ T7556] bridge0: port 1(bridge_slave_0) entered disabled state [ 280.541639][ T5830] Bluetooth: hci3: command tx timeout [ 281.952840][ T7556] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 282.015429][ T7556] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 282.038120][ T7556] bond0 (unregistering): Released all slaves [ 282.277958][ T8359] : entered promiscuous mode [ 282.339718][ T8390] mmap: syz.2.626 (8390) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 283.285649][ T5830] Bluetooth: hci3: command tx timeout [ 284.883893][ T8311] chnl_net:caif_netlink_parms(): no params data found [ 285.335224][ T5830] Bluetooth: hci3: command tx timeout [ 285.626208][ T8411] netlink: 12 bytes leftover after parsing attributes in process `syz.0.630'. [ 286.440986][ T8311] bridge0: port 1(bridge_slave_0) entered blocking state [ 286.484172][ T8311] bridge0: port 1(bridge_slave_0) entered disabled state [ 286.604924][ T8311] bridge_slave_0: entered allmulticast mode [ 286.612844][ T8311] bridge_slave_0: entered promiscuous mode [ 286.707949][ T8311] bridge0: port 2(bridge_slave_1) entered blocking state [ 287.452119][ T8311] bridge0: port 2(bridge_slave_1) entered disabled state [ 287.461487][ T8311] bridge_slave_1: entered allmulticast mode [ 287.469919][ T8311] bridge_slave_1: entered promiscuous mode [ 287.858705][ T8311] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 287.901623][ T8311] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 287.979591][ T7556] hsr_slave_0: left promiscuous mode [ 288.002721][ T7556] hsr_slave_1: left promiscuous mode [ 288.023325][ T7556] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 288.042765][ T7556] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 288.084045][ T7556] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 288.107683][ T7556] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 288.188141][ T7556] veth1_macvtap: left promiscuous mode [ 288.193875][ T7556] veth0_macvtap: left promiscuous mode [ 288.214856][ T7556] veth1_vlan: left promiscuous mode [ 288.231555][ T7556] veth0_vlan: left promiscuous mode [ 288.495490][ T5874] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 288.693230][ T5874] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 288.750749][ T5874] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 288.866252][ T5874] usb 5-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 288.982877][ T5874] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 289.131714][ T5874] usb 5-1: config 0 descriptor?? [ 289.853396][ T5874] kye 0003:0458:5011.0006: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 289.998278][ T8466] net_ratelimit: 72 callbacks suppressed [ 289.998322][ T8466] openvswitch: netlink: IP tunnel dst address not specified [ 290.602570][ T5874] kye 0003:0458:5011.0006: unbalanced collection at end of report description [ 290.625855][ T5874] kye 0003:0458:5011.0006: parse failed [ 290.631940][ T5874] kye 0003:0458:5011.0006: probe with driver kye failed with error -22 [ 291.196026][ T5874] usb 5-1: USB disconnect, device number 8 [ 291.276344][ T8484] UHID_CREATE from different security context by process 416 (syz.4.648), this is not allowed. [ 291.339414][ T7556] team0 (unregistering): Port device team_slave_1 removed [ 291.384103][ T7556] team0 (unregistering): Port device team_slave_0 removed [ 291.459389][ T883] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 291.471511][ T883] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 291.479052][ T883] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 291.492310][ T883] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 291.518349][ T883] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 291.528252][ T883] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 291.538411][ T883] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 291.546479][ T883] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 291.612479][ T8486] Cannot find add_set index 0 as target [ 292.093947][ T883] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 292.101555][ T883] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 292.109550][ T883] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 292.117007][ T883] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 292.124417][ T883] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 292.131866][ T883] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 292.144333][ T883] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 292.152195][ T883] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 292.160020][ T883] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 292.273075][ T883] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 292.280736][ T883] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 292.288598][ T883] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 292.296091][ T883] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 292.303514][ T883] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 292.311569][ T883] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 292.319883][ T883] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 292.327345][ T883] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 292.334802][ T883] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 292.342212][ T883] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 292.349762][ T883] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 292.357265][ T883] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 292.376167][ T883] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 292.383608][ T883] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 292.391173][ T883] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 292.398669][ T883] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 292.414869][ T883] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 292.422330][ T883] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 292.440296][ T883] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 292.453550][ T883] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 292.462085][ T883] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 292.471000][ T883] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 292.478448][ T883] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 292.486000][ T883] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 292.493480][ T883] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 292.501985][ T883] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 292.509685][ T883] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 292.541725][ T883] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 292.567499][ T883] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 292.969616][ T883] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 292.977897][ T883] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 292.986348][ T883] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 292.993992][ T883] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 293.002535][ T883] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 293.010845][ T883] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 293.018509][ T883] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 293.030871][ T883] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 293.038489][ T883] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 293.046381][ T883] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 293.053918][ T883] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 293.061606][ T883] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 293.069402][ T883] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 293.078401][ T883] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 293.086093][ T883] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 293.093748][ T883] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 293.103375][ T883] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 293.114052][ T883] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 293.122493][ T883] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 293.131328][ T883] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 293.139213][ T883] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 293.147221][ T883] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 293.155127][ T883] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 293.162739][ T883] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 293.170334][ T883] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 293.178220][ T883] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 293.185900][ T883] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 293.193450][ T883] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 293.205080][ T883] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 293.212633][ T883] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 293.220951][ T883] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 293.230122][ T883] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 293.238339][ T883] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 293.246658][ T883] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 293.254238][ T883] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 293.262819][ T883] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 293.270673][ T883] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 293.350197][ T883] hid-generic 0000:0000:0000.0007: hidraw0: HID v0.03 Device [syz1] on syz1 [ 293.401240][ T8311] team0: Port device team_slave_0 added [ 293.475937][ T8457] syz_tun: entered allmulticast mode [ 293.491838][ T8311] team0: Port device team_slave_1 added [ 293.560387][ T8457] syz_tun: left allmulticast mode [ 294.208576][ T8311] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 294.216836][ T8311] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 294.247664][ T8311] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 294.283667][ T8311] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 294.301651][ T8311] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 294.330865][ T8311] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 294.661053][ T8311] hsr_slave_0: entered promiscuous mode [ 294.674534][ T8311] hsr_slave_1: entered promiscuous mode [ 294.762242][ T8515] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 294.804843][ T8311] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 294.822689][ T8311] Cannot create hsr debugfs directory [ 295.188379][ T8531] Unknown options in mask 5 [ 296.299798][ T8556] netlink: 8 bytes leftover after parsing attributes in process `syz.2.668'. [ 296.369868][ T8556] netlink: 8 bytes leftover after parsing attributes in process `syz.2.668'. [ 300.847514][ T8311] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 301.058004][ T8311] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 301.138623][ T8311] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 301.282053][ T8311] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 301.864234][ T8311] 8021q: adding VLAN 0 to HW filter on device bond0 [ 301.972557][ T8311] 8021q: adding VLAN 0 to HW filter on device team0 [ 302.230718][ T8311] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 302.310076][ T8311] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 302.403873][ T7585] bridge0: port 1(bridge_slave_0) entered blocking state [ 302.411088][ T7585] bridge0: port 1(bridge_slave_0) entered forwarding state [ 302.453481][ T7585] bridge0: port 2(bridge_slave_1) entered blocking state [ 302.460777][ T7585] bridge0: port 2(bridge_slave_1) entered forwarding state [ 302.619564][ T8623] sch_tbf: burst 8791 is lower than device lo mtu (65550) ! [ 302.680751][ T30] audit: type=1326 audit(1745865322.518:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8624 comm="syz.4.684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a6d58e969 code=0x7ffc0000 [ 302.732056][ T8626] sch_tbf: burst 8787 is lower than device lo mtu (65550) ! [ 302.842818][ T30] audit: type=1326 audit(1745865322.518:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8624 comm="syz.4.684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=229 compat=0 ip=0x7f2a6d58e969 code=0x7ffc0000 [ 302.993588][ T30] audit: type=1326 audit(1745865322.518:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8624 comm="syz.4.684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a6d58e969 code=0x7ffc0000 [ 303.231465][ T30] audit: type=1326 audit(1745865322.518:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8624 comm="syz.4.684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f2a6d58e969 code=0x7ffc0000 [ 303.700154][ T30] audit: type=1326 audit(1745865322.518:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8624 comm="syz.4.684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a6d58e969 code=0x7ffc0000 [ 303.721755][ T30] audit: type=1326 audit(1745865322.538:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8624 comm="syz.4.684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a6d58e969 code=0x7ffc0000 [ 303.759153][ T30] audit: type=1326 audit(1745865322.548:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8624 comm="syz.4.684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=311 compat=0 ip=0x7f2a6d58e969 code=0x7ffc0000 [ 304.275830][ T30] audit: type=1326 audit(1745865322.548:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8624 comm="syz.4.684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a6d58e969 code=0x7ffc0000 [ 304.324755][ T30] audit: type=1326 audit(1745865322.578:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8624 comm="syz.4.684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=25 compat=0 ip=0x7f2a6d58e969 code=0x7ffc0000 [ 304.444427][ T30] audit: type=1326 audit(1745865322.598:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8624 comm="syz.4.684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a6d58e969 code=0x7ffc0000 [ 304.507290][ T8651] netlink: 12 bytes leftover after parsing attributes in process `syz.4.689'. [ 304.583485][ T8311] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 305.457216][ T8311] veth0_vlan: entered promiscuous mode [ 305.471658][ T8311] veth1_vlan: entered promiscuous mode [ 305.514411][ T8311] veth0_macvtap: entered promiscuous mode [ 305.526621][ T8311] veth1_macvtap: entered promiscuous mode [ 305.577392][ T8311] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 305.599933][ T8311] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 305.627364][ T8311] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 305.663518][ T8311] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 305.694713][ T8311] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 305.717405][ T8311] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 306.036110][ T8311] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.194842][ T8311] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.203561][ T8311] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.232611][ T8311] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.655719][ T7585] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 306.685029][ T7585] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 307.717285][ T7569] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 307.732437][ T7569] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 307.896093][ T8679] netfs: Couldn't get user pages (rc=-14) [ 308.232660][ T5830] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:201' [ 308.242983][ T5830] CPU: 0 UID: 0 PID: 5830 Comm: kworker/u9:5 Not tainted 6.15.0-rc4-syzkaller-00011-gf15d97df5afa #0 PREEMPT(full) [ 308.243012][ T5830] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 308.243026][ T5830] Workqueue: hci4 hci_rx_work [ 308.243065][ T5830] Call Trace: [ 308.243073][ T5830] [ 308.243086][ T5830] dump_stack_lvl+0x189/0x250 [ 308.243120][ T5830] ? __pfx_dump_stack_lvl+0x10/0x10 [ 308.243149][ T5830] ? __pfx__printk+0x10/0x10 [ 308.243180][ T5830] ? kernfs_path_from_node+0x2b/0x260 [ 308.243201][ T5830] ? kernfs_path_from_node+0x2b/0x260 [ 308.243218][ T5830] ? kernfs_path_from_node+0x2b/0x260 [ 308.243240][ T5830] ? kernfs_path_from_node+0x216/0x260 [ 308.243262][ T5830] sysfs_create_dir_ns+0x259/0x280 [ 308.243297][ T5830] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 308.243331][ T5830] ? do_raw_spin_unlock+0x122/0x240 [ 308.243358][ T5830] kobject_add_internal+0x59f/0xb40 [ 308.243391][ T5830] kobject_add+0x155/0x220 [ 308.243420][ T5830] ? __pfx_kobject_add+0x10/0x10 [ 308.243444][ T5830] ? _raw_spin_unlock+0x28/0x50 [ 308.243477][ T5830] ? get_device_parent+0x366/0x3a0 [ 308.243504][ T5830] device_add+0x408/0xb50 [ 308.243531][ T5830] hci_conn_add_sysfs+0xd5/0x1e0 [ 308.243557][ T5830] le_conn_complete_evt+0xc3a/0x1220 [ 308.243600][ T5830] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 308.243631][ T5830] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 308.243650][ T5830] ? __asan_memcpy+0x40/0x70 [ 308.243676][ T5830] ? __pfx___mutex_lock+0x10/0x10 [ 308.243697][ T5830] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 308.243724][ T5830] ? skb_pull_data+0xfb/0x200 [ 308.243756][ T5830] hci_le_conn_complete_evt+0x187/0x450 [ 308.243793][ T5830] hci_event_packet+0x7a2/0x1270 [ 308.243823][ T5830] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 308.243852][ T5830] ? __pfx_hci_event_packet+0x10/0x10 [ 308.243878][ T5830] ? kcov_remote_start+0x4d3/0x7f0 [ 308.243900][ T5830] ? lockdep_hardirqs_on+0x20/0x150 [ 308.243936][ T5830] ? hci_send_to_monitor+0xd7/0x4f0 [ 308.243969][ T5830] hci_rx_work+0x46a/0xe80 [ 308.244002][ T5830] ? process_scheduled_works+0x9ec/0x17a0 [ 308.244035][ T5830] process_scheduled_works+0xadb/0x17a0 [ 308.244098][ T5830] ? __pfx_process_scheduled_works+0x10/0x10 [ 308.244148][ T5830] worker_thread+0x8a0/0xda0 [ 308.244209][ T5830] kthread+0x70e/0x8a0 [ 308.244235][ T5830] ? __pfx_worker_thread+0x10/0x10 [ 308.244264][ T5830] ? __pfx_kthread+0x10/0x10 [ 308.244288][ T5830] ? __pfx_kthread+0x10/0x10 [ 308.244308][ T5830] ? _raw_spin_unlock_irq+0x23/0x50 [ 308.244337][ T5830] ? lockdep_hardirqs_on+0x9c/0x150 [ 308.244369][ T5830] ? __pfx_kthread+0x10/0x10 [ 308.244390][ T5830] ret_from_fork+0x4b/0x80 [ 308.244407][ T5830] ? __pfx_kthread+0x10/0x10 [ 308.244428][ T5830] ret_from_fork_asm+0x1a/0x30 [ 308.244477][ T5830] [ 308.244505][ T5830] kobject: kobject_add_internal failed for hci4:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 308.537305][ T5830] Bluetooth: hci4: failed to register connection device [ 309.404374][ T7588] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 314.117220][ T7588] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 316.070409][ T7588] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 316.862377][ T5830] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 316.876810][ T5830] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 316.880609][ T8728] netlink: 'syz.0.710': attribute type 27 has an invalid length. [ 316.901574][ T5830] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 316.939311][ T5830] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 316.948395][ T5830] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 316.989284][ T7588] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.103023][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.109545][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.180177][ T8728] bridge0: port 1(bridge_slave_0) entered disabled state [ 317.288933][ T8728] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 317.315482][ T8728] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 317.431821][ T8728] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.450657][ T8728] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.460628][ T8728] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.473210][ T8728] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 318.507510][ T8729] 8021q: adding VLAN 0 to HW filter on device bond0 [ 318.516165][ T8729] 8021q: adding VLAN 0 to HW filter on device team0 [ 318.547250][ T8729] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 318.913742][ T7588] bridge_slave_1: left allmulticast mode [ 318.919703][ T7588] bridge_slave_1: left promiscuous mode [ 318.926176][ T7588] bridge0: port 2(bridge_slave_1) entered disabled state [ 318.942487][ T7588] bridge_slave_0: left allmulticast mode [ 318.950043][ T7588] bridge_slave_0: left promiscuous mode [ 318.955970][ T7588] bridge0: port 1(bridge_slave_0) entered disabled state [ 319.015404][ T5131] Bluetooth: hci3: command tx timeout [ 319.254865][ T8729] syz.0.710 (8729) used greatest stack depth: 19976 bytes left [ 321.105319][ T5131] Bluetooth: hci3: command tx timeout [ 321.762987][ T7588] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 321.781416][ T7588] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 321.806496][ T7588] bond0 (unregistering): Released all slaves [ 323.254752][ T5131] Bluetooth: hci3: command tx timeout [ 324.872348][ T8725] chnl_net:caif_netlink_parms(): no params data found [ 324.986202][ T7588] hsr_slave_0: left promiscuous mode [ 325.016096][ T7588] hsr_slave_1: left promiscuous mode [ 325.048549][ T7588] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 325.074413][ T7588] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 325.299143][ T7588] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 325.327549][ T7588] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 325.713332][ T5131] Bluetooth: hci3: command tx timeout [ 326.441364][ T7588] veth1_macvtap: left promiscuous mode [ 326.457761][ T7588] veth0_macvtap: left promiscuous mode [ 326.463554][ T7588] veth1_vlan: left promiscuous mode [ 326.471710][ T7588] veth0_vlan: left promiscuous mode [ 327.336705][ T8830] kvm: pic: non byte write [ 327.337163][ C1] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000018: 0000 [#1] SMP KASAN PTI [ 327.349935][ T8830] kvm: pic: non byte write [ 327.353048][ C1] KASAN: null-ptr-deref in range [0x00000000000000c0-0x00000000000000c7] [ 327.353071][ C1] CPU: 1 UID: 0 PID: 8825 Comm: syz.4.732 Not tainted 6.15.0-rc4-syzkaller-00011-gf15d97df5afa #0 PREEMPT(full) [ 327.366611][ T8830] kvm: pic: non byte write [ 327.377800][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 327.377817][ C1] RIP: 0010:find_match+0xa3/0xc90 [ 327.377845][ C1] Code: 00 00 00 00 00 fc ff df 42 80 7c 25 00 00 74 08 48 89 df e8 4f 02 18 f8 48 89 d8 bb c0 00 00 00 48 03 18 48 89 d8 48 c1 e8 03 <42> 80 3c 20 00 74 08 48 89 df e8 2e 02 18 f8 48 8b 1b e8 36 13 47 [ 327.377863][ C1] RSP: 0018:ffffc90000a077b0 EFLAGS: 00010206 [ 327.404912][ T8830] kvm: pic: non byte write [ 327.417064][ C1] [ 327.417075][ C1] RAX: 0000000000000018 RBX: 00000000000000c0 RCX: 0000000000000100 [ 327.417089][ C1] RDX: ffff88802de29e00 RSI: 0000000000000000 RDI: 0000000000000000 [ 327.417100][ C1] RBP: 1ffff11004fc76a4 R08: ffffc90000a07b40 R09: ffffc90000a07b50 [ 327.417113][ C1] R10: ffffc90000a079a0 R11: ffffffff8a078900 R12: dffffc0000000000 [ 327.417127][ C1] R13: 0000000000000002 R14: 1ffff11004fc76a6 R15: ffff888027e3b537 [ 327.417140][ C1] FS: 00007f2a6e3d96c0(0000) GS:ffff888126202000(0000) knlGS:0000000000000000 [ 327.417157][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 327.441781][ T8830] kvm: pic: non byte write [ 327.445903][ C1] CR2: 00007f7a4c07e568 CR3: 000000003343e000 CR4: 00000000003526f0 [ 327.445926][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 327.445939][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 327.445953][ C1] Call Trace: [ 327.445961][ C1] [ 327.445975][ C1] rt6_nh_find_match+0xd9/0x150 [ 327.446005][ C1] nexthop_for_each_fib6_nh+0x1c6/0x400 [ 327.446045][ C1] ? __pfx_rt6_nh_find_match+0x10/0x10 [ 327.446069][ C1] __find_rr_leaf+0x461/0x6d0 [ 327.446096][ C1] ? __pfx___find_rr_leaf+0x10/0x10 [ 327.446126][ C1] fib6_table_lookup+0x39f/0xa80 [ 327.446166][ C1] ? __pfx_fib6_table_lookup+0x10/0x10 [ 327.446195][ C1] ? ip6_pol_route+0x162/0x1180 [ 327.446220][ C1] ip6_pol_route+0x222/0x1180 [ 327.446250][ C1] ? __pfx_ip6_pol_route+0x10/0x10 [ 327.446277][ C1] ? is_bpf_text_address+0x292/0x2b0 [ 327.446306][ C1] ? kernel_text_address+0xa5/0xe0 [ 327.446333][ C1] ? __kernel_text_address+0xd/0x40 [ 327.446357][ C1] ? unwind_get_return_address+0x4d/0x90 [ 327.446383][ C1] fib6_rule_lookup+0x348/0x6f0 [ 327.446413][ C1] ? __pfx_ip6_pol_route_output+0x10/0x10 [ 327.446442][ C1] ? __pfx_fib6_rule_lookup+0x10/0x10 [ 327.446470][ C1] ? ip6_route_output_flags+0x2e/0x5d0 [ 327.613708][ C1] ? ip6_route_output_flags+0x2e/0x5d0 [ 327.619188][ C1] ip6_route_output_flags+0x364/0x5d0 [ 327.624563][ C1] ? ip6_route_output_flags+0x2e/0x5d0 [ 327.630043][ C1] ip6_dst_lookup_tail+0x1ae/0x1500 [ 327.635275][ C1] ? __pfx_ip6_dst_lookup_tail+0x10/0x10 [ 327.640933][ C1] ? __lock_acquire+0xaac/0xd20 [ 327.645813][ C1] ? __siphash_unaligned+0x263/0x3b0 [ 327.651144][ C1] ip6_dst_lookup_flow+0x47/0xe0 [ 327.656099][ C1] ? __pfx_ip6_dst_lookup_flow+0x10/0x10 [ 327.661762][ C1] udp_tunnel6_dst_lookup+0x231/0x3c0 [ 327.667143][ C1] ? __pfx_udp_tunnel6_dst_lookup+0x10/0x10 [ 327.673130][ C1] ? geneve_get_dsfield+0xec/0x680 [ 327.678251][ C1] ? __pfx_geneve_get_dsfield+0x10/0x10 [ 327.683820][ C1] geneve_xmit+0xd2e/0x2b70 [ 327.688333][ C1] ? __lock_acquire+0xaac/0xd20 [ 327.693192][ C1] ? __pfx_skb_network_protocol+0x10/0x10 [ 327.698914][ C1] ? geneve_xmit+0x128/0x2b70 [ 327.703606][ C1] ? unwind_next_frame+0xa5/0x2390 [ 327.708715][ C1] ? __pfx_validate_xmit_xfrm+0x10/0x10 [ 327.714282][ C1] ? __pfx_geneve_xmit+0x10/0x10 [ 327.719233][ C1] dev_hard_start_xmit+0x2ff/0x880 [ 327.724347][ C1] ? do_raw_spin_lock+0x121/0x290 [ 327.729375][ C1] __dev_queue_xmit+0x1adf/0x3a70 [ 327.734400][ C1] ? register_lock_class+0x51/0x320 [ 327.739605][ C1] ? __dev_queue_xmit+0x27e/0x3a70 [ 327.744735][ C1] ? neigh_resolve_output+0x438/0x750 [ 327.750135][ C1] ? __pfx___dev_queue_xmit+0x10/0x10 [ 327.755598][ C1] ? read_seqbegin+0x122/0x250 [ 327.760363][ C1] ? neigh_resolve_output+0x438/0x750 [ 327.765735][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 327.770977][ C1] ? read_seqbegin+0x1ac/0x250 [ 327.775780][ C1] ? __pfx_read_seqbegin+0x10/0x10 [ 327.780915][ C1] ? __local_bh_enable_ip+0x12d/0x1c0 [ 327.786385][ C1] ? eth_header+0x11b/0x200 [ 327.790889][ C1] ? __asan_memcpy+0x40/0x70 [ 327.795481][ C1] ? eth_header+0x11b/0x200 [ 327.800003][ C1] ? __pfx_eth_header+0x10/0x10 [ 327.804957][ C1] ? neigh_resolve_output+0x624/0x750 [ 327.810354][ C1] ip6_finish_output2+0x11fb/0x16a0 [ 327.815562][ C1] ? ip6_finish_output2+0x701/0x16a0 [ 327.820851][ C1] ? __pfx_ip6_finish_output2+0x10/0x10 [ 327.826401][ C1] ? ip6_mtu+0x7d/0x3f0 [ 327.830561][ C1] ? ip6_mtu+0x7d/0x3f0 [ 327.834715][ C1] ip6_finish_output+0x234/0x7d0 [ 327.839655][ C1] ndisc_send_skb+0xb47/0x1400 [ 327.844415][ C1] ? ndisc_send_skb+0x208/0x1400 [ 327.849361][ C1] ? __pfx_ndisc_send_skb+0x10/0x10 [ 327.854581][ C1] ? __pfx_dst_output+0x10/0x10 [ 327.859441][ C1] addrconf_rs_timer+0x369/0x670 [ 327.864375][ C1] ? __pfx_addrconf_rs_timer+0x10/0x10 [ 327.869834][ C1] call_timer_fn+0x17b/0x5f0 [ 327.874429][ C1] ? __pfx_addrconf_rs_timer+0x10/0x10 [ 327.879881][ C1] ? call_timer_fn+0xbe/0x5f0 [ 327.884556][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 327.889668][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 327.894870][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 327.900085][ C1] ? __pfx_addrconf_rs_timer+0x10/0x10 [ 327.905537][ C1] __run_timer_base+0x61a/0x860 [ 327.910386][ C1] ? ktime_get+0x3e/0x1f0 [ 327.914713][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 327.920083][ C1] ? seqcount_lockdep_reader_access+0x15f/0x1c0 [ 327.926329][ C1] run_timer_softirq+0xb7/0x180 [ 327.931181][ C1] handle_softirqs+0x283/0x870 [ 327.935958][ C1] ? __irq_exit_rcu+0xca/0x1f0 [ 327.940833][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 327.946133][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 327.951333][ C1] __irq_exit_rcu+0xca/0x1f0 [ 327.955923][ C1] ? __pfx___irq_exit_rcu+0x10/0x10 [ 327.961123][ C1] irq_exit_rcu+0x9/0x30 [ 327.965368][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 327.971006][ C1] [ 327.973950][ C1] [ 327.976875][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 327.982851][ C1] RIP: 0010:_raw_spin_unlock_irqrestore+0xa8/0x110 [ 327.989356][ C1] Code: 74 05 e8 fb 20 76 f6 48 c7 44 24 20 00 00 00 00 9c 8f 44 24 20 f6 44 24 21 02 75 4f f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 f3 a2 3f f6 65 8b 05 bc c5 20 07 85 c0 74 40 48 c7 04 24 0e 36 [ 328.008959][ C1] RSP: 0018:ffffc900037cf600 EFLAGS: 00000206 [ 328.015036][ C1] RAX: e413e5cae7cdb000 RBX: 0000000000000a06 RCX: e413e5cae7cdb000 [ 328.023012][ C1] RDX: 0000000000000006 RSI: ffffffff8d73579d RDI: 0000000000000001 [ 328.030981][ C1] RBP: ffffc900037cf690 R08: ffffffff8f7d9f77 R09: 1ffffffff1efb3ee [ 328.038946][ C1] R10: dffffc0000000000 R11: fffffbfff1efb3ef R12: dffffc0000000000 [ 328.046924][ C1] R13: ffff888058e5a000 R14: ffff888058e59fc0 R15: 1ffff920006f9ec0 [ 328.054917][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 328.061276][ C1] ? autoremove_wake_function+0x39/0x100 [ 328.066911][ C1] __wake_up_common_lock+0x190/0x1f0 [ 328.072233][ C1] __unix_dgram_recvmsg+0x49b/0xdc0 [ 328.077437][ C1] ? __pfx___unix_dgram_recvmsg+0x10/0x10 [ 328.083161][ C1] ? __pfx_unix_dgram_recvmsg+0x10/0x10 [ 328.088708][ C1] ? unix_dgram_recvmsg+0xb1/0xd0 [ 328.093731][ C1] ? __pfx_unix_dgram_recvmsg+0x10/0x10 [ 328.099303][ C1] sock_recvmsg_nosec+0x183/0x1c0 [ 328.104335][ C1] ____sys_recvmsg+0x3aa/0x460 [ 328.109101][ C1] ? __pfx_____sys_recvmsg+0x10/0x10 [ 328.114395][ C1] ? import_iovec+0x74/0xa0 [ 328.118900][ C1] ___sys_recvmsg+0x1b5/0x510 [ 328.123575][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 328.128785][ C1] ? __pfx____sys_recvmsg+0x10/0x10 [ 328.134003][ C1] ? __might_fault+0xb0/0x130 [ 328.138686][ C1] do_recvmmsg+0x307/0x760 [ 328.143108][ C1] ? __pfx_do_recvmmsg+0x10/0x10 [ 328.148056][ C1] ? __pfx_do_futex+0x10/0x10 [ 328.152737][ C1] __x64_sys_recvmmsg+0x190/0x240 [ 328.157764][ C1] ? rcu_is_watching+0x15/0xb0 [ 328.162534][ C1] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 328.168079][ C1] ? do_syscall_64+0xba/0x210 [ 328.172754][ C1] do_syscall_64+0xf6/0x210 [ 328.177255][ C1] ? clear_bhb_loop+0x45/0xa0 [ 328.181933][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 328.187826][ C1] RIP: 0033:0x7f2a6d58e969 [ 328.192250][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 328.211855][ C1] RSP: 002b:00007f2a6e3d9038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 328.220267][ C1] RAX: ffffffffffffffda RBX: 00007f2a6d7b6080 RCX: 00007f2a6d58e969 [ 328.228237][ C1] RDX: 0000000000010106 RSI: 00002000000000c0 RDI: 0000000000000003 [ 328.236200][ C1] RBP: 00007f2a6d610ab1 R08: 0000000000000000 R09: 0000000000000000 [ 328.244161][ C1] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 328.252130][ C1] R13: 0000000000000000 R14: 00007f2a6d7b6080 R15: 00007ffea3d22be8 [ 328.260107][ C1] [ 328.263124][ C1] Modules linked in: [ 328.267126][ C1] ---[ end trace 0000000000000000 ]--- [ 328.272611][ C1] RIP: 0010:find_match+0xa3/0xc90 [ 328.277690][ C1] Code: 00 00 00 00 00 fc ff df 42 80 7c 25 00 00 74 08 48 89 df e8 4f 02 18 f8 48 89 d8 bb c0 00 00 00 48 03 18 48 89 d8 48 c1 e8 03 <42> 80 3c 20 00 74 08 48 89 df e8 2e 02 18 f8 48 8b 1b e8 36 13 47 [ 328.297353][ C1] RSP: 0018:ffffc90000a077b0 EFLAGS: 00010206 [ 328.303450][ C1] RAX: 0000000000000018 RBX: 00000000000000c0 RCX: 0000000000000100 [ 328.311507][ C1] RDX: ffff88802de29e00 RSI: 0000000000000000 RDI: 0000000000000000 [ 328.319524][ C1] RBP: 1ffff11004fc76a4 R08: ffffc90000a07b40 R09: ffffc90000a07b50 [ 328.327538][ C1] R10: ffffc90000a079a0 R11: ffffffff8a078900 R12: dffffc0000000000 [ 328.335549][ C1] R13: 0000000000000002 R14: 1ffff11004fc76a6 R15: ffff888027e3b537 [ 328.343538][ C1] FS: 00007f2a6e3d96c0(0000) GS:ffff888126202000(0000) knlGS:0000000000000000 [ 328.352530][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 328.359160][ C1] CR2: 00007f7a4c07e568 CR3: 000000003343e000 CR4: 00000000003526f0 [ 328.367185][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 328.375196][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 328.383190][ C1] Kernel panic - not syncing: Fatal exception in interrupt [ 328.390744][ C1] Kernel Offset: disabled [ 328.395067][ C1] Rebooting in 86400 seconds..