last executing test programs: 26.787176112s ago: executing program 0 (id=823): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = dup2(r1, r0) close_range(r1, 0xffffffffffffffff, 0x2) getpeername$packet(r2, 0x0, 0x0) 26.690686202s ago: executing program 0 (id=825): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f00000003c0)={&(0x7f0000000300)="a9", 0x1}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f0000000340)={0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000001c0)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) getpid() r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d000000670000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe55}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000002140)={&(0x7f0000000180)='tlb_flush\x00', r2}, 0x10) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="540100001000130700000000000000007f0000010000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x154}}, 0x0) write$usbip_server(0xffffffffffffffff, &(0x7f0000000080)=@ret_unlink={{0x4, 0x5, 0x0, 0x0, 0x3}, {0x5}}, 0x30) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r4, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000200)={0x0, 0x1, 0x0, &(0x7f0000000100)=""/47, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000280)={0x1, 0x0, 0x0, &(0x7f0000000700)=""/69, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000000d00)) ioctl$VHOST_SET_LOG_BASE(r4, 0x4008af00, &(0x7f0000000300)=&(0x7f00000003c0)) rt_sigprocmask(0x0, &(0x7f0000000200)={[0xfffffbfd]}, 0x0, 0x8) setrlimit(0x1, &(0x7f0000000000)) r5 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="ae", 0x1, 0xffffffffffffffff) keyctl$read(0x2, r5, &(0x7f0000001940)=""/4086, 0xff6) ioctl$VHOST_SET_LOG_BASE(r4, 0x4008af04, &(0x7f0000000340)=&(0x7f00000001c0)) ioctl$VHOST_VSOCK_SET_RUNNING(r4, 0x4004af61, &(0x7f0000000040)=0x1) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) syz_usb_connect(0x0, 0x24, 0x0, 0x0) socket(0x10, 0x3, 0x0) 25.633910932s ago: executing program 0 (id=829): unshare(0x60480) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r0, r1, 0x2}, 0x10) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000240)={@cgroup, r1, 0x2, 0x0, 0x4000, @prog_id}, 0x20) 25.319554361s ago: executing program 0 (id=832): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x8, 0x0, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x90) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000002a000900000000000000000004"], 0x14}, 0x1, 0x3000000}, 0x0) 23.888528072s ago: executing program 0 (id=841): socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000e4947c650200cd", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000820000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$netlink(0x10, 0x3, 0x0) pipe2(0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r5}, 0x10) r6 = syz_open_dev$usbfs(&(0x7f0000000080), 0x74, 0x0) ioctl$USBDEVFS_IOCTL(r6, 0xc0105512, 0x0) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, 0x0) socket$unix(0x1, 0x0, 0x0) r7 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_inet_SIOCSIFDSTADDR(r7, 0x8918, &(0x7f0000000040)={'veth1_virt_wifi\x00', {0x2, 0x4e22, @broadcast}}) rt_sigaction(0x0, 0x0, 0x0, 0x0, 0x0) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000600)={&(0x7f0000000480)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x7, [@fwd={0x5}, @const]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x5f]}}, &(0x7f0000000540)=""/177, 0x37, 0xb1, 0x1}, 0x20) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000bc0)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r8, 0x2, 0x1}, 0x48) 6.864197406s ago: executing program 0 (id=841): socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000e4947c650200cd", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000820000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$netlink(0x10, 0x3, 0x0) pipe2(0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r5}, 0x10) r6 = syz_open_dev$usbfs(&(0x7f0000000080), 0x74, 0x0) ioctl$USBDEVFS_IOCTL(r6, 0xc0105512, 0x0) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, 0x0) socket$unix(0x1, 0x0, 0x0) r7 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_inet_SIOCSIFDSTADDR(r7, 0x8918, &(0x7f0000000040)={'veth1_virt_wifi\x00', {0x2, 0x4e22, @broadcast}}) rt_sigaction(0x0, 0x0, 0x0, 0x0, 0x0) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000600)={&(0x7f0000000480)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x7, [@fwd={0x5}, @const]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x5f]}}, &(0x7f0000000540)=""/177, 0x37, 0xb1, 0x1}, 0x20) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000bc0)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r8, 0x2, 0x1}, 0x48) 4.010163946s ago: executing program 2 (id=1017): mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@metacopy_on}]}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r1 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat$loop(r1, &(0x7f0000001600)='./file1\x00', 0x0, 0x0) chdir(&(0x7f0000000140)='./bus\x00') linkat(r0, &(0x7f0000000100)='./file1\x00', r1, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file1/file4\x00', 0x0) 3.756434309s ago: executing program 2 (id=1018): r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000040), 0x0, 0x4000000) 3.630007741s ago: executing program 2 (id=1019): r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000140)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000001fc0)={0xdc, r0, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_SEC_DEVKEY={0x1c, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}, @NL802154_DEVKEY_ATTR_ID={0xc, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}]}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_SEC_DEVKEY={0xa4, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}, @NL802154_DEVKEY_ATTR_ID={0x40, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc}, @NL802154_KEY_ID_ATTR_IMPLICIT={0xc, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}]}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8}, @NL802154_KEY_ID_ATTR_MODE={0x8}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8}, @NL802154_DEVKEY_ATTR_ID={0x24, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x14, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6}]}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc}]}]}]}, 0xdc}}, 0x0) 3.047985991s ago: executing program 3 (id=1020): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'ip6gretap0\x00', 0x0}) r3 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000080)={@remote, @private0, @ipv4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6060000, r4}) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCADDRT(r5, 0x890b, &(0x7f0000000080)={@dev, @remote, @private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80600087, r2}) r6 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCADDRT(r8, 0x890b, &(0x7f0000000640)={@loopback, @local, @private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80600087, r7}) r9 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r9, 0x890b, &(0x7f0000000080)={@mcast2, @ipv4, @dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80600087, r10}) r11 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r11, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00'}) r12 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet_SIOCSIFFLAGS(r12, 0x8914, &(0x7f0000000140)={'batadv_slave_0\x00'}) 2.888031802s ago: executing program 2 (id=1021): ftruncate(0xffffffffffffffff, 0x8) r0 = creat(&(0x7f0000000240)='./file0\x00', 0x0) dup3(r0, 0xffffffffffffffff, 0x0) write$cgroup_freezer_state(0xffffffffffffffff, 0x0, 0x0) dup(0xffffffffffffffff) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='gid_map\x00') r1 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)=0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) mq_open(&(0x7f00000000c0)='/dev/zero\x00', 0x40, 0x100, 0x0) write$binfmt_script(r3, &(0x7f0000000200)={'#! ', '', [{0x20, '#!2'}, {0x20, '#! '}, {0x20, '/proc/sys/net/ipv4/tcp_congestion_control\x00'}, {}], 0xa, "8855d1bef46f70e481dbdabbfc3bcc3f005c1079e7344e4392717247b88b05708cd1663511237737ac00004c03fa9d00005380"}, 0xfffffe59) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$TCSETSF(r5, 0x5451, 0x0) ioctl$BTRFS_IOC_LOGICAL_INO(0xffffffffffffffff, 0x5450, 0x0) ioctl$FITRIM(0xffffffffffffffff, 0x5452, &(0x7f0000000000)) rt_sigreturn() clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) memfd_create(0x0, 0x0) timer_settime(r2, 0x1, &(0x7f0000000080)={{0x77359400}, {0x0, r6+60000000}}, 0x0) syz_socket_connect_nvme_tcp() openat$zero(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) inotify_init() syz_open_procfs$userns(0x0, &(0x7f0000000040)) pwritev2(r4, 0x0, 0x0, 0x0, 0x4, 0x8) ioctl$BTRFS_IOC_DEFRAG_RANGE(0xffffffffffffffff, 0x5450, 0x0) 2.660612784s ago: executing program 2 (id=1023): syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$ARCH_SHSTK_UNLOCK(0x1e, 0x0, 0x0, 0x5004) bpf$MAP_CREATE(0x0, 0x0, 0x0) open(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x0, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014001100b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x2d) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x460, 0x0, 0x268, 0x33a, 0x258, 0x268, 0x390, 0x460, 0x460, 0x390, 0x460, 0xc, 0x0, {[{{@uncond, 0x0, 0x230, 0x258, 0xd8000000, {0x9402}, [@common=@inet=@hashlimit2={{0x150}, {'pimreg\x00', {0x24bd1a0000000000, 0x0, 0x0, 0x1, 0x0, 0x5, 0x9}}}, @common=@unspec=@statistic={{0x38}}]}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0xd0, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00', 0x2}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4c0) 2.485830961s ago: executing program 3 (id=1024): socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$SMC_PNETID_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000006c0)=@newlink={0x40, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r1, 0x4048b}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r1}]}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x9}]}, 0x40}}, 0x0) 2.44817625s ago: executing program 1 (id=1025): r0 = socket$inet(0x2, 0x6, 0x0) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='xfrm0\x00', 0x10) bind$inet(r0, &(0x7f0000000280)={0x2, 0x0, @dev}, 0x10) connect$inet(r0, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x29) 2.24830565s ago: executing program 1 (id=1027): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f00000003c0)={&(0x7f0000000300)="a9", 0x1}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f0000000340)={0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000001c0)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) getpid() bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000002140)={&(0x7f0000000180)='tlb_flush\x00'}, 0x10) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="540100001000130700000000000000007f0000010000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x154}}, 0x0) r3 = syz_usbip_server_init(0x3) write$usbip_server(r3, &(0x7f0000000080)=@ret_unlink={{0x4, 0x5, 0x0, 0x0, 0x3}, {0x5}}, 0x30) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r4, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000200)={0x0, 0x1, 0x0, &(0x7f0000000100)=""/47, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000280)={0x1, 0x0, 0x0, &(0x7f0000000700)=""/69, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000000d00)) ioctl$VHOST_SET_LOG_BASE(r4, 0x4008af00, &(0x7f0000000300)=&(0x7f00000003c0)) rt_sigprocmask(0x0, &(0x7f0000000200)={[0xfffffbfd]}, 0x0, 0x8) setrlimit(0x1, &(0x7f0000000000)) r5 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="ae", 0x1, 0xffffffffffffffff) keyctl$read(0x2, r5, &(0x7f0000001940)=""/4086, 0xff6) ioctl$VHOST_SET_LOG_BASE(r4, 0x4008af04, &(0x7f0000000340)=&(0x7f00000001c0)) ioctl$VHOST_VSOCK_SET_RUNNING(r4, 0x4004af61, &(0x7f0000000040)=0x1) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) syz_usb_connect(0x0, 0x24, 0x0, 0x0) socket(0x10, 0x3, 0x0) 2.209530286s ago: executing program 4 (id=1028): mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@metacopy_on}]}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r1 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat$loop(r1, &(0x7f0000001600)='./file1\x00', 0x0, 0x0) chdir(&(0x7f0000000140)='./bus\x00') linkat(r0, &(0x7f0000000100)='./file1\x00', r1, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file1/file4\x00', 0x0) 2.118240756s ago: executing program 3 (id=1029): r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000040), 0x0, 0x4000000) 2.020467139s ago: executing program 3 (id=1030): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="440000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a5ffad8800000000140012800b0001006970766c616e00000400028008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x44}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=r1, @ANYBLOB="00000000000000003400128009000100626f6e640000000024000280050016"], 0x54}}, 0x0) 2.01813542s ago: executing program 4 (id=1031): socket$packet(0x11, 0x3, 0x300) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_udp_encap(r0, 0x11, 0x64, 0x0, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000140)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @broadcast}, {0x0, 0x4e20, 0x1c, 0x0, @wg=@data={0x4, 0x0, 0x0, "8c74003a"}}}}}}, 0x0) 1.985088075s ago: executing program 3 (id=1032): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000240)=ANY=[], 0xfdef) 1.792374336s ago: executing program 4 (id=1033): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) 1.624170643s ago: executing program 2 (id=1034): r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0xb, &(0x7f0000000040)=0x1c, 0x4) syz_genetlink_get_family_id$mptcp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$inet6(0xa, 0x80002, 0x0) r2 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r2, &(0x7f0000000200)={0x0, 0x2b, &(0x7f0000000100)={&(0x7f00000002c0)={0x14, 0x453, 0x0, 0x0, 0x25dfdbfd, 'O'}, 0xffffffde}, 0x1, 0x0, 0x0, 0x4008084}, 0x0) setsockopt$sock_linger(r1, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$FOU_CMD_GET(0xffffffffffffffff, 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0xfffffffffffffe24, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f848140000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$int_in(r4, 0x5452, &(0x7f0000000080)=0x8000000ffffffff) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2f00000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000000000008500000006000000850000000700000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r5}, 0x10) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r6, 0x0, 0x7, 0x0) 1.622981954s ago: executing program 4 (id=1035): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'ip6gretap0\x00', 0x0}) r3 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000080)={@remote, @private0, @ipv4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6060000, r4}) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCADDRT(r5, 0x890b, &(0x7f0000000080)={@dev, @remote, @private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80600087, r2}) r6 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCADDRT(r8, 0x890b, &(0x7f0000000640)={@loopback, @local, @private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80600087, r7}) r9 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r9, 0x890b, &(0x7f0000000080)={@mcast2, @ipv4, @dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80600087, r10}) r11 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r11, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00'}) r12 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet_SIOCSIFFLAGS(r12, 0x8914, &(0x7f0000000140)={'batadv_slave_0\x00'}) 1.368201119s ago: executing program 1 (id=1036): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000b28000)=0x6) fcntl$setsig(r0, 0xa, 0x0) close(r0) 1.272572616s ago: executing program 1 (id=1037): ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000000)=ANY=[@ANYBLOB]) 1.046570379s ago: executing program 1 (id=1038): add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=@newlink={0x40, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x40224}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_6RD_RELAY_PREFIXLEN={0x6}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast1}]}}}]}, 0x40}}, 0x0) 239.593818ms ago: executing program 3 (id=1039): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) unshare(0x22020600) setsockopt$sock_attach_bpf(r1, 0x1, 0x4c, &(0x7f0000000000), 0x4) sendmsg$unix(r0, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@cred={{0x1c}}], 0x20}, 0x0) poll(&(0x7f0000000040), 0x55, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="2c0000001a0001000000000000000000020000000000000000000000f0eca5194b908be83c06001c004e23000006001d004e240000"], 0x2c}}, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYBLOB="0100000000000000000001000000000000000741000000140017000000000000000069623a6772653069965d1b5fe27bc6eb1e7bbcee009a57d851f45e73e99f67faa5fbc23420f84c7d41e165110783364b88c0a3414da07717c522566ad8a46cfc986eae6fe11d112a1d2d5a1d9dcbdac8778244b92f777c7cc888880dd9a39b72dc7913d4d73adbabd38117ff843b6038f7233c8e9d184e95f8da72bea9301d63438206c980184cbdce6f9859fd29f41a7885eb8da135ae765a0c599f5313c6d843a844e91d9ab72f57268df5ad82d170db0fe4e25a2b40e0d10e9eb5"], 0x30}}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @broadcast}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f3, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f0000000140)={'tunl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2}}}}) 132.824853ms ago: executing program 4 (id=1040): syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @random="50a245d5cde0", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @broadcast}, @timestamp_reply={0x11, 0xe0}}}}}, 0x0) 64.49791ms ago: executing program 1 (id=1041): r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid_for_children\x00') ioctl$NS_GET_PARENT(r0, 0x8004b707, 0x0) 0s ago: executing program 4 (id=1042): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'macvtap0\x00', 0x0}) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000080)=0xf3e, 0x62) sendto$packet(r1, &(0x7f00000000c0)="3f043608eee812002c001e0089e9aaa911d7c2290f0088f71327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1529fdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.187' (ED25519) to the list of known hosts. [ 77.646250][ T5079] cgroup: Unknown subsys name 'net' [ 77.802684][ T5079] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 80.064460][ T5079] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 83.200205][ T5092] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 83.220611][ T5096] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 83.258646][ T5106] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 83.268914][ T5106] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 83.274009][ T5105] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 83.281416][ T5106] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 83.290759][ T5105] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 83.299547][ T5106] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 83.308404][ T5105] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 83.321890][ T5106] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 83.331360][ T5105] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 83.338634][ T5106] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 83.348131][ T5105] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 83.359764][ T5106] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 83.373473][ T5105] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 83.382076][ T5105] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 83.386798][ T5107] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 83.391023][ T5105] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 83.398569][ T5106] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 83.411875][ T5107] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 83.423759][ T5108] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 83.441090][ T5106] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 83.449910][ T5107] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 83.454982][ T5106] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 83.468100][ T55] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 83.474709][ T5106] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 83.495291][ T5106] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 83.495366][ T55] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 83.512689][ T5092] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 83.531183][ T5092] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 84.387681][ T5097] chnl_net:caif_netlink_parms(): no params data found [ 84.431587][ T5089] chnl_net:caif_netlink_parms(): no params data found [ 84.514649][ T5095] chnl_net:caif_netlink_parms(): no params data found [ 84.634220][ T5098] chnl_net:caif_netlink_parms(): no params data found [ 84.812463][ T5097] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.822111][ T5097] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.832993][ T5097] bridge_slave_0: entered allmulticast mode [ 84.844105][ T5097] bridge_slave_0: entered promiscuous mode [ 84.896129][ T5097] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.905986][ T5097] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.915308][ T5097] bridge_slave_1: entered allmulticast mode [ 84.926765][ T5097] bridge_slave_1: entered promiscuous mode [ 84.946292][ T5089] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.954676][ T5089] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.967822][ T5089] bridge_slave_0: entered allmulticast mode [ 84.977684][ T5089] bridge_slave_0: entered promiscuous mode [ 84.991566][ T5089] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.999777][ T5089] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.008342][ T5089] bridge_slave_1: entered allmulticast mode [ 85.016258][ T5089] bridge_slave_1: entered promiscuous mode [ 85.024944][ T5090] chnl_net:caif_netlink_parms(): no params data found [ 85.158266][ T5097] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.175784][ T5097] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.217138][ T5089] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.288021][ T5095] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.299084][ T5095] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.309454][ T5095] bridge_slave_0: entered allmulticast mode [ 85.318894][ T5095] bridge_slave_0: entered promiscuous mode [ 85.330989][ T5089] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.348183][ T5098] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.360809][ T5098] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.372638][ T5098] bridge_slave_0: entered allmulticast mode [ 85.384228][ T5098] bridge_slave_0: entered promiscuous mode [ 85.416790][ T5097] team0: Port device team_slave_0 added [ 85.424940][ T5095] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.433715][ T5095] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.446629][ T5095] bridge_slave_1: entered allmulticast mode [ 85.458842][ T5095] bridge_slave_1: entered promiscuous mode [ 85.518288][ T5098] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.526798][ T5098] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.536228][ T5098] bridge_slave_1: entered allmulticast mode [ 85.544352][ T5098] bridge_slave_1: entered promiscuous mode [ 85.556578][ T5097] team0: Port device team_slave_1 added [ 85.591448][ T5102] Bluetooth: hci2: command tx timeout [ 85.591467][ T5092] Bluetooth: hci1: command tx timeout [ 85.607419][ T5092] Bluetooth: hci4: command tx timeout [ 85.610088][ T5096] Bluetooth: hci3: command tx timeout [ 85.621594][ T5102] Bluetooth: hci0: command tx timeout [ 85.637061][ T5095] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.675252][ T5089] team0: Port device team_slave_0 added [ 85.740965][ T5095] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.757645][ T5089] team0: Port device team_slave_1 added [ 85.804161][ T5090] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.815487][ T5090] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.826363][ T5090] bridge_slave_0: entered allmulticast mode [ 85.836221][ T5090] bridge_slave_0: entered promiscuous mode [ 85.863811][ T5097] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.873212][ T5097] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.911065][ T5097] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.956105][ T5090] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.971116][ T5090] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.981252][ T5090] bridge_slave_1: entered allmulticast mode [ 85.991731][ T5090] bridge_slave_1: entered promiscuous mode [ 86.009084][ T5098] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.023159][ T5097] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.034958][ T5097] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.066330][ T5097] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.105692][ T5089] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.116730][ T5089] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.150314][ T5089] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.183240][ T5098] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.237200][ T5095] team0: Port device team_slave_0 added [ 86.255214][ T5089] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.266561][ T5089] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.302610][ T5089] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.356375][ T5090] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.383871][ T5098] team0: Port device team_slave_0 added [ 86.394678][ T5098] team0: Port device team_slave_1 added [ 86.407374][ T5095] team0: Port device team_slave_1 added [ 86.455768][ T5090] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.518007][ T5098] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.527345][ T5098] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.565437][ T5098] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.624726][ T5097] hsr_slave_0: entered promiscuous mode [ 86.633293][ T5097] hsr_slave_1: entered promiscuous mode [ 86.694855][ T5098] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.703412][ T5098] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.737000][ T5098] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.756049][ T5095] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.770383][ T5095] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.809816][ T5095] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.839061][ T5090] team0: Port device team_slave_0 added [ 86.878026][ T5095] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.889363][ T5095] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.927449][ T5095] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.955589][ T5090] team0: Port device team_slave_1 added [ 86.974109][ T5089] hsr_slave_0: entered promiscuous mode [ 86.982075][ T5089] hsr_slave_1: entered promiscuous mode [ 86.993467][ T5089] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 87.005247][ T5089] Cannot create hsr debugfs directory [ 87.163989][ T5090] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.173481][ T5090] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.212303][ T5090] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.222270][ T59] cfg80211: failed to load regulatory.db [ 87.268759][ T5098] hsr_slave_0: entered promiscuous mode [ 87.281986][ T5098] hsr_slave_1: entered promiscuous mode [ 87.292483][ T5098] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 87.302739][ T5098] Cannot create hsr debugfs directory [ 87.354928][ T5090] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.364306][ T5090] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.400975][ T5090] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.440378][ T5095] hsr_slave_0: entered promiscuous mode [ 87.450575][ T5095] hsr_slave_1: entered promiscuous mode [ 87.463780][ T5095] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 87.473020][ T5095] Cannot create hsr debugfs directory [ 87.597287][ T5090] hsr_slave_0: entered promiscuous mode [ 87.605398][ T5090] hsr_slave_1: entered promiscuous mode [ 87.613616][ T5090] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 87.624228][ T5090] Cannot create hsr debugfs directory [ 87.672672][ T5096] Bluetooth: hci3: command tx timeout [ 87.675990][ T5092] Bluetooth: hci0: command tx timeout [ 87.680431][ T5096] Bluetooth: hci1: command tx timeout [ 87.688389][ T55] Bluetooth: hci2: command tx timeout [ 87.701470][ T5102] Bluetooth: hci4: command tx timeout [ 88.291118][ T5089] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 88.344951][ T5089] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 88.367886][ T5089] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 88.393945][ T5089] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 88.446384][ T5095] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 88.470247][ T5095] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 88.518755][ T5095] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 88.538564][ T5095] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 88.653341][ T5090] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 88.697392][ T5090] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 88.721057][ T5090] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 88.769108][ T5090] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 88.879778][ T5098] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 88.949475][ T5098] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 89.027708][ T5098] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 89.049216][ T5098] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 89.104347][ T5097] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 89.138761][ T5097] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 89.153376][ T5097] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 89.168048][ T5097] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 89.215554][ T5089] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.322925][ T5089] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.403475][ T5145] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.412506][ T5145] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.515204][ T5095] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.565304][ T5145] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.576528][ T5145] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.744939][ T5095] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.755483][ T5102] Bluetooth: hci4: command tx timeout [ 89.755816][ T5096] Bluetooth: hci0: command tx timeout [ 89.764208][ T5092] Bluetooth: hci2: command tx timeout [ 89.764265][ T5092] Bluetooth: hci1: command tx timeout [ 89.764752][ T5092] Bluetooth: hci3: command tx timeout [ 89.856086][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.867264][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.915638][ T5090] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.952301][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.965774][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.051421][ T5097] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.122063][ T5098] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.167803][ T5090] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.236138][ T5097] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.316857][ T5095] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 90.362579][ T5145] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.372251][ T5145] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.403722][ T5098] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.433661][ T5145] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.446230][ T5145] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.497141][ T5145] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.505692][ T5145] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.562982][ T5089] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.584223][ T5145] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.595289][ T5145] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.609351][ T5145] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.618310][ T5145] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.720336][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.728967][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.976684][ T5095] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.068594][ T5089] veth0_vlan: entered promiscuous mode [ 91.203270][ T5089] veth1_vlan: entered promiscuous mode [ 91.469101][ T5089] veth0_macvtap: entered promiscuous mode [ 91.563878][ T5089] veth1_macvtap: entered promiscuous mode [ 91.726912][ T5089] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.778901][ T5097] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.811552][ T5089] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.838955][ T5096] Bluetooth: hci4: command tx timeout [ 91.838973][ T55] Bluetooth: hci3: command tx timeout [ 91.839015][ T55] Bluetooth: hci1: command tx timeout [ 91.849511][ T5096] Bluetooth: hci2: command tx timeout [ 91.854253][ T5102] Bluetooth: hci0: command tx timeout [ 91.872164][ T5098] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.928669][ T5090] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.965736][ T5089] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.976893][ T5089] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.987201][ T5089] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.002530][ T5089] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.147688][ T5097] veth0_vlan: entered promiscuous mode [ 92.253674][ T5095] veth0_vlan: entered promiscuous mode [ 92.338331][ T5097] veth1_vlan: entered promiscuous mode [ 92.396046][ T5090] veth0_vlan: entered promiscuous mode [ 92.422945][ T5095] veth1_vlan: entered promiscuous mode [ 92.503007][ T5098] veth0_vlan: entered promiscuous mode [ 92.523348][ T1042] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.543524][ T1042] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.584701][ T5090] veth1_vlan: entered promiscuous mode [ 92.645386][ T5098] veth1_vlan: entered promiscuous mode [ 92.712147][ T2468] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.737989][ T5097] veth0_macvtap: entered promiscuous mode [ 92.747588][ T2468] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.803188][ T5097] veth1_macvtap: entered promiscuous mode [ 92.841832][ T5095] veth0_macvtap: entered promiscuous mode [ 92.934881][ T5090] veth0_macvtap: entered promiscuous mode [ 92.955622][ T5095] veth1_macvtap: entered promiscuous mode [ 93.045994][ T5090] veth1_macvtap: entered promiscuous mode [ 93.077084][ T5098] veth0_macvtap: entered promiscuous mode [ 93.109418][ T5097] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.138628][ T5097] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.156412][ T5097] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.173688][ T5095] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.189385][ T5095] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.207036][ T5095] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.221561][ T5095] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.236988][ T5095] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.272507][ T5095] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.308735][ T5095] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.331995][ T5095] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.365147][ T5098] veth1_macvtap: entered promiscuous mode [ 93.397083][ T5097] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.415389][ T5097] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.440031][ T5097] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.466205][ T5097] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.498344][ T5097] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.536146][ T5095] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.559793][ T5095] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.592171][ T5095] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.620199][ T5095] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.667182][ T5090] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.699091][ T5090] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.718251][ T5090] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.742844][ T5090] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.767763][ T5090] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.809677][ T5090] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.835710][ T5090] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.872243][ T5097] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.895007][ T5097] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.908708][ T5097] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.921753][ T5097] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.968222][ T5090] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.985042][ T5090] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.001107][ T5090] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.014332][ T5090] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.027141][ T5090] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.041938][ T5090] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.064883][ T5090] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.145948][ T5090] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.164509][ T5090] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.178426][ T5090] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.192203][ T5090] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.248532][ T5098] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.273721][ T5098] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.291181][ T5098] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.313592][ T5098] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.328253][ T5098] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.344002][ T5098] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.357475][ T5098] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.373408][ T5098] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.400761][ T5098] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.533154][ T5098] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.599894][ T5098] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.630136][ T5098] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.670200][ T5098] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.694966][ T5098] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.750876][ T5098] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.778646][ T5098] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.781967][ T5186] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 94.794038][ T5098] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.796941][ T5098] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.941527][ T1042] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.964952][ T5098] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.977964][ T1042] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.991110][ T5098] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.004920][ T5098] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.016264][ T5098] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.186314][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.201553][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.291771][ T2848] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.335938][ T2848] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.388023][ T2468] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.450244][ T2468] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.595340][ T1042] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.650598][ T1042] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.676108][ T63] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.708323][ T63] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.952963][ T2848] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.021627][ T2848] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.044163][ T63] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.099243][ T63] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.764403][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 96.877550][ T29] audit: type=1326 audit(1721220526.493:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5206 comm="syz.0.1" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9f92d75a19 code=0x0 [ 97.010222][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 97.372666][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 97.771476][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 97.873209][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 98.590556][ T0] NOHZ tick-stop error: local softirq work is pending, handler #342!!! [ 98.999826][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c2!!! [ 99.590913][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 99.970175][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 100.110206][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 101.228384][ T5250] syz.2.23 uses obsolete (PF_INET,SOCK_PACKET) [ 101.384626][ T5252] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 102.213616][ T5250] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.269815][ T29] audit: type=1326 audit(1721220531.893:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5246 comm="syz.4.22" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbf2bd75a19 code=0x0 [ 102.848558][ T5250] macvlan2: entered allmulticast mode [ 102.911319][ T5250] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 102.960692][ T5250] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode [ 103.105628][ T5250] bond0: (slave macvlan2): Enslaving as an active interface with an up link [ 103.224443][ T5261] bond0: entered promiscuous mode [ 103.260473][ T5272] dccp_invalid_packet: P.Data Offset(0) too small [ 103.326613][ T5261] bond_slave_0: entered promiscuous mode [ 103.457770][ T5261] bond_slave_1: entered promiscuous mode [ 103.492223][ T5261] macvlan2: entered promiscuous mode [ 103.632166][ T5177] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 103.923230][ T5177] usb 4-1: config 0 has an invalid interface number: 18 but max is 0 [ 103.967383][ T5177] usb 4-1: config 0 has no interface number 0 [ 103.999796][ T5177] usb 4-1: config 0 interface 18 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 104.080551][ T5177] usb 4-1: config 0 interface 18 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 104.165197][ T5177] usb 4-1: New USB device found, idVendor=054c, idProduct=03d5, bcdDevice= 0.10 [ 104.213863][ T5177] usb 4-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 104.263547][ T5177] usb 4-1: Manufacturer: syz [ 104.330386][ T5177] usb 4-1: config 0 descriptor?? [ 104.455122][ T5291] team0: Port device virt_wifi0 added [ 104.485648][ T5292] netlink: 16 bytes leftover after parsing attributes in process `syz.1.38'. [ 104.540011][ T5292] bond0: option arp_all_targets: invalid value (18446744073709551615) [ 104.648902][ T5177] usbhid 4-1:0.18: can't add hid device: -71 [ 104.677488][ T5177] usbhid 4-1:0.18: probe with driver usbhid failed with error -71 [ 104.746933][ T5177] usb 4-1: USB disconnect, device number 2 [ 105.259914][ T5148] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 105.473517][ T5148] usb 2-1: New USB device found, idVendor=077b, idProduct=2226, bcdDevice=ca.8b [ 105.508676][ T5148] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.549479][ T5148] usb 2-1: config 0 descriptor?? [ 106.689997][ T5149] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 106.711068][ T5148] asix 2-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 106.739099][ T5340] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 106.912127][ T5149] usb 1-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 106.932858][ T5148] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 106.952692][ T5149] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 106.968242][ T5148] asix 2-1:0.0 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 107.007669][ T5148] asix 2-1:0.0: probe with driver asix failed with error -71 [ 107.017645][ T5149] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 107.063546][ T5148] usb 2-1: USB disconnect, device number 2 [ 107.070180][ T5149] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.137966][ T5149] usb 1-1: config 0 descriptor?? [ 107.140785][ T5344] netlink: 'syz.4.59': attribute type 6 has an invalid length. [ 107.194120][ T5149] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 107.411381][ T5352] capability: warning: `syz.2.63' uses deprecated v2 capabilities in a way that may be insecure [ 108.088665][ T5149] usb 1-1: USB disconnect, device number 2 [ 108.660474][ T5149] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 108.892535][ T5149] usb 4-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 108.892601][ T5149] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.898367][ T5396] mmap: syz.2.80 (5396) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 108.941877][ T5149] usb 4-1: config 0 descriptor?? [ 109.175510][ T5149] usb 4-1: string descriptor 0 read error: -71 [ 109.201217][ T5149] gspca_main: abcd:cdee too many config [ 109.248254][ T5149] usb 4-1: USB disconnect, device number 3 [ 110.906914][ T5150] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 111.138490][ T5150] usb 5-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 111.160524][ T5150] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.221668][ T5150] usb 5-1: config 0 descriptor?? [ 111.496493][ T5150] usb 5-1: string descriptor 0 read error: -71 [ 111.546634][ T5150] gspca_main: abcd:cdee too many config [ 111.587629][ T5150] usb 5-1: USB disconnect, device number 2 [ 112.345256][ T5490] kvm: emulating exchange as write [ 113.201839][ T5514] netlink: 64 bytes leftover after parsing attributes in process `syz.0.130'. [ 114.378445][ T5540] fuse: Bad value for 'fd' [ 117.413388][ T5150] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 117.985125][ T5150] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 118.091017][ T5150] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 118.129557][ T5150] usb 3-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 118.180982][ T5150] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.258201][ T5150] usb 3-1: config 0 descriptor?? [ 118.871288][ T5623] netlink: 24 bytes leftover after parsing attributes in process `syz.0.169'. [ 118.896348][ T5623] bond0: option ad_select: unable to set because the bond device is up [ 118.898671][ T5150] hid-led 0003:27B8:01ED.0001: probe with driver hid-led failed with error -71 [ 118.945188][ T5150] usb 3-1: USB disconnect, device number 2 [ 119.347520][ T29] audit: type=1326 audit(1721220548.973:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5606 comm="syz.4.165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf2bd75a19 code=0x7fc00000 [ 119.778291][ T5658] netlink: 24 bytes leftover after parsing attributes in process `syz.4.181'. [ 119.817881][ T5658] bond0: option ad_select: unable to set because the bond device is up [ 119.837473][ T5661] netlink: 8 bytes leftover after parsing attributes in process `syz.2.183'. [ 120.379523][ T5679] netlink: 4 bytes leftover after parsing attributes in process `syz.2.188'. [ 120.845190][ T5697] netlink: 24 bytes leftover after parsing attributes in process `syz.3.195'. [ 120.910122][ T5697] bond0: option ad_select: unable to set because the bond device is up [ 121.335943][ T5709] syzkaller0: entered promiscuous mode [ 121.342467][ T5709] syzkaller0: entered allmulticast mode [ 122.463862][ T5751] netlink: 84 bytes leftover after parsing attributes in process `syz.2.217'. [ 123.643632][ T5728] netlink: 32 bytes leftover after parsing attributes in process `syz.0.207'. [ 123.653455][ T5733] netlink: 16 bytes leftover after parsing attributes in process `syz.4.209'. [ 123.665332][ T5733] bond0: option arp_all_targets: invalid value (18446744073709551615) [ 123.683382][ T5743] netlink: 'syz.3.212': attribute type 2 has an invalid length. [ 124.319210][ T5790] netlink: 16 bytes leftover after parsing attributes in process `syz.3.233'. [ 124.367263][ T5790] bond0: option arp_all_targets: invalid value (18446744073709551615) [ 124.589846][ T5148] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 124.810117][ T5148] usb 3-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 255, changing to 11 [ 124.832838][ T5148] usb 3-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 59391, setting to 1024 [ 124.875866][ T5148] usb 3-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 124.919665][ T5148] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.972376][ T5788] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 125.351502][ T5823] netlink: 24 bytes leftover after parsing attributes in process `syz.3.246'. [ 125.389061][ T5823] bond0: option ad_select: unable to set because the bond device is up [ 125.787088][ T5844] netlink: 72 bytes leftover after parsing attributes in process `syz.1.257'. [ 125.919840][ T5140] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 126.040776][ T5148] aiptek 3-1:17.0: Aiptek using 400 ms programming speed [ 126.053728][ T5148] input: Aiptek as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:17.0/input/input6 [ 126.129802][ T5140] usb 1-1: Using ep0 maxpacket: 16 [ 126.139479][ T5148] usb 3-1: USB disconnect, device number 3 [ 126.139535][ C1] aiptek 3-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 126.158472][ T5140] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 126.221610][ T5140] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 126.242536][ T5140] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 126.269221][ T5140] usb 1-1: New USB device found, idVendor=056a, idProduct=0022, bcdDevice= 0.00 [ 126.285501][ T5140] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.297024][ T5140] usb 1-1: config 0 descriptor?? [ 126.428551][ T5856] netlink: 24 bytes leftover after parsing attributes in process `syz.4.262'. [ 126.444528][ T5856] bond0: option ad_select: unable to set because the bond device is up [ 126.747332][ T5140] wacom 0003:056A:0022.0002: unbalanced collection at end of report description [ 126.768255][ T5140] wacom 0003:056A:0022.0002: parse failed [ 126.777181][ T5140] wacom 0003:056A:0022.0002: probe with driver wacom failed with error -22 [ 126.848962][ T5863] syz.2.265 (5863) used greatest stack depth: 18768 bytes left [ 126.928513][ T5177] usb 1-1: USB disconnect, device number 3 [ 127.218325][ T5878] netlink: 24 bytes leftover after parsing attributes in process `syz.2.273'. [ 128.240535][ T5910] netlink: 24 bytes leftover after parsing attributes in process `syz.3.285'. [ 128.276164][ T5910] bond0: option ad_select: unable to set because the bond device is up [ 128.846996][ T5923] tipc: Can't bind to reserved service type 0 [ 130.138109][ T5948] netlink: 24 bytes leftover after parsing attributes in process `syz.3.299'. [ 130.164495][ T5948] bond0: option ad_select: unable to set because the bond device is up [ 130.880287][ T5970] netlink: 'syz.4.308': attribute type 11 has an invalid length. [ 131.218421][ T5980] netlink: 24 bytes leftover after parsing attributes in process `syz.4.312'. [ 131.265842][ T5980] bond0: option ad_select: unable to set because the bond device is up [ 131.751204][ T29] audit: type=1326 audit(1721220561.213:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5983 comm="syz.1.313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6df3575a19 code=0x7ffc0000 [ 132.188855][ T29] audit: type=1326 audit(1721220561.213:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5983 comm="syz.1.313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6df3575a19 code=0x7ffc0000 [ 132.219811][ T29] audit: type=1326 audit(1721220561.223:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5983 comm="syz.1.313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=197 compat=0 ip=0x7f6df3575a19 code=0x7ffc0000 [ 132.287438][ T29] audit: type=1326 audit(1721220561.223:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5983 comm="syz.1.313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6df3575a19 code=0x7ffc0000 [ 132.329199][ T29] audit: type=1326 audit(1721220561.223:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5983 comm="syz.1.313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6df3575a19 code=0x7ffc0000 [ 132.407728][ T29] audit: type=1326 audit(1721220561.233:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5983 comm="syz.1.313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f6df3575a19 code=0x7ffc0000 [ 132.511551][ T29] audit: type=1326 audit(1721220561.263:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5983 comm="syz.1.313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6df3575a19 code=0x7ffc0000 [ 132.719719][ T29] audit: type=1326 audit(1721220561.263:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5983 comm="syz.1.313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6df3575a19 code=0x7ffc0000 [ 132.889730][ T29] audit: type=1326 audit(1721220561.313:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5983 comm="syz.1.313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6df3575a19 code=0x7ffc0000 [ 133.285152][ T1250] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.310989][ T1250] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.620997][ T29] audit: type=1326 audit(1721220561.313:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5983 comm="syz.1.313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6df3575a19 code=0x7ffc0000 [ 133.983495][ T6008] netlink: 'syz.4.320': attribute type 11 has an invalid length. [ 135.271493][ T55] Bluetooth: hci5: command 0x1003 tx timeout [ 135.280563][ T5102] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 136.484093][ T6046] netlink: 'syz.0.333': attribute type 11 has an invalid length. [ 137.122291][ T59] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 137.367764][ T59] usb 5-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 137.434722][ T59] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.482516][ T59] usb 5-1: config 0 descriptor?? [ 137.512722][ T59] gspca_main: abcd:cdee too many config [ 137.763215][ T5140] usb 5-1: USB disconnect, device number 3 [ 138.203803][ T6085] netlink: 'syz.3.348': attribute type 4 has an invalid length. [ 138.214542][ T6082] Illegal XDP return value 2087409972 on prog (id 56) dev N/A, expect packet loss! [ 138.830970][ T6100] team0: Port device virt_wifi0 removed [ 142.089789][ T59] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 142.387087][ T59] usb 4-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 142.448290][ T59] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.504768][ T59] usb 4-1: config 0 descriptor?? [ 142.528692][ T59] gspca_main: abcd:cdee too many config [ 142.748910][ T59] usb 4-1: USB disconnect, device number 4 [ 142.938510][ T6194] netlink: 28 bytes leftover after parsing attributes in process `syz.0.390'. [ 143.053240][ T6196] netlink: 48 bytes leftover after parsing attributes in process `syz.4.391'. [ 143.760761][ T6205] netlink: 28 bytes leftover after parsing attributes in process `syz.3.394'. [ 145.437270][ T6253] netlink: 28 bytes leftover after parsing attributes in process `syz.2.411'. [ 147.227383][ T6274] program syz.3.418 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 147.337446][ T6276] netlink: 28 bytes leftover after parsing attributes in process `syz.2.419'. [ 147.768550][ T6284] netlink: 28 bytes leftover after parsing attributes in process `syz.1.422'. [ 149.028947][ T6305] program syz.3.430 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 149.302563][ T6311] netlink: 28 bytes leftover after parsing attributes in process `syz.3.434'. [ 150.379252][ T6344] netlink: 28 bytes leftover after parsing attributes in process `syz.3.449'. [ 151.323365][ T6370] input: syz0 as /devices/virtual/input/input7 [ 151.796729][ T6379] netlink: 28 bytes leftover after parsing attributes in process `syz.2.463'. [ 154.400635][ T6415] netlink: 8 bytes leftover after parsing attributes in process `syz.0.475'. [ 154.750909][ T6422] netlink: 92 bytes leftover after parsing attributes in process `syz.0.478'. [ 156.463127][ T6456] netlink: 8 bytes leftover after parsing attributes in process `syz.0.488'. [ 156.890645][ T6466] netlink: 92 bytes leftover after parsing attributes in process `syz.0.492'. [ 158.899424][ T6504] netlink: 92 bytes leftover after parsing attributes in process `syz.2.506'. [ 160.174436][ T5177] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 160.343243][ T6530] ALSA: seq fatal error: cannot create timer (-22) [ 160.410526][ T5177] usb 4-1: Using ep0 maxpacket: 32 [ 160.450084][ T5177] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 160.489845][ T5177] usb 4-1: New USB device found, idVendor=05a4, idProduct=2000, bcdDevice= 0.00 [ 160.504205][ T5177] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.531317][ T5177] usb 4-1: config 0 descriptor?? [ 160.639686][ T5138] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 160.880031][ T5138] usb 1-1: Using ep0 maxpacket: 8 [ 160.892001][ T5138] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 160.919645][ T5138] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 160.955299][ T5138] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 160.980928][ T5138] usb 1-1: New USB device found, idVendor=05ac, idProduct=0217, bcdDevice=cf.dc [ 160.985195][ T29] kauditd_printk_skb: 4 callbacks suppressed [ 160.985217][ T29] audit: type=1326 audit(1721220590.613:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6521 comm="syz.3.513" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff341575a19 code=0x0 [ 161.000525][ T5138] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.055574][ T6536] capability: warning: `syz.3.513' uses 32-bit capabilities (legacy support in use) [ 161.089130][ T5138] usb 1-1: config 0 descriptor?? [ 161.152455][ T5138] appletouch 1-1:0.0: Could not find int-in endpoint [ 161.189695][ T5138] appletouch 1-1:0.0: probe with driver appletouch failed with error -5 [ 161.218928][ T5138] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 163.002984][ T6550] ALSA: seq fatal error: cannot create timer (-22) [ 164.566750][ T6548] netlink: 72 bytes leftover after parsing attributes in process `syz.4.525'. [ 164.689012][ T55] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 164.692177][ T5177] usbhid 4-1:0.0: can't add hid device: -71 [ 164.748917][ T55] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 164.778360][ T55] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 164.799460][ T55] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 164.816354][ T55] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 164.838340][ T55] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 164.911639][ T5177] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 165.092351][ T5177] usb 4-1: USB disconnect, device number 5 [ 165.297667][ T47] usb 1-1: USB disconnect, device number 4 [ 166.325397][ T6552] chnl_net:caif_netlink_parms(): no params data found [ 166.665934][ T6577] netlink: 'syz.3.533': attribute type 3 has an invalid length. [ 166.755421][ T6577] netlink: 'syz.3.533': attribute type 1 has an invalid length. [ 166.805667][ T6577] netlink: 130160 bytes leftover after parsing attributes in process `syz.3.533'. [ 166.844166][ T6586] netlink: 72 bytes leftover after parsing attributes in process `syz.2.536'. [ 166.949900][ T5102] Bluetooth: hci5: command tx timeout [ 167.004062][ T6552] bridge0: port 1(bridge_slave_0) entered blocking state [ 167.044858][ T6552] bridge0: port 1(bridge_slave_0) entered disabled state [ 167.061190][ T6552] bridge_slave_0: entered allmulticast mode [ 167.080974][ T6595] ALSA: seq fatal error: cannot create timer (-22) [ 167.099307][ T6552] bridge_slave_0: entered promiscuous mode [ 167.146573][ T6552] bridge0: port 2(bridge_slave_1) entered blocking state [ 167.159997][ T6552] bridge0: port 2(bridge_slave_1) entered disabled state [ 167.200004][ T6552] bridge_slave_1: entered allmulticast mode [ 167.263453][ T6552] bridge_slave_1: entered promiscuous mode [ 167.400967][ T5140] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 167.453857][ T6552] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 167.499136][ T6552] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 167.630115][ T5140] usb 4-1: Using ep0 maxpacket: 8 [ 167.660314][ T5140] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 167.708623][ T6552] team0: Port device team_slave_0 added [ 167.718705][ T5140] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 167.753046][ T6552] team0: Port device team_slave_1 added [ 167.770086][ T5140] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 167.837191][ T5140] usb 4-1: New USB device found, idVendor=05ac, idProduct=0217, bcdDevice=cf.dc [ 167.905478][ T5140] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.942129][ T5140] usb 4-1: config 0 descriptor?? [ 167.962618][ T5140] appletouch 4-1:0.0: Could not find int-in endpoint [ 167.985122][ T5140] appletouch 4-1:0.0: probe with driver appletouch failed with error -5 [ 168.012648][ T5140] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 168.033914][ T6552] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 168.060737][ T6552] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 168.190588][ T6552] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 168.283167][ T6552] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 168.334044][ T6552] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 168.442995][ T6552] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 168.988590][ T6609] ALSA: seq fatal error: cannot create timer (-22) [ 169.030089][ T5102] Bluetooth: hci5: command tx timeout [ 169.267605][ T53] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.384545][ T6552] hsr_slave_0: entered promiscuous mode [ 169.464952][ T6552] hsr_slave_1: entered promiscuous mode [ 169.515077][ T6552] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 169.543021][ T6552] Cannot create hsr debugfs directory [ 169.609210][ T53] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.055950][ T53] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.189148][ T53] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.736039][ T6616] netlink: 72 bytes leftover after parsing attributes in process `syz.0.547'. [ 170.853010][ T53] bridge_slave_1: left allmulticast mode [ 170.890114][ T53] bridge_slave_1: left promiscuous mode [ 170.929771][ T53] bridge0: port 2(bridge_slave_1) entered disabled state [ 171.000460][ T53] bridge_slave_0: left allmulticast mode [ 171.029122][ T53] bridge_slave_0: left promiscuous mode [ 171.042074][ T53] bridge0: port 1(bridge_slave_0) entered disabled state [ 171.110286][ T55] Bluetooth: hci5: command tx timeout [ 171.349875][ T5102] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 171.353762][ T55] Bluetooth: hci0: command 0x1003 tx timeout [ 171.634828][ T5150] usb 4-1: USB disconnect, device number 6 [ 172.600544][ T53] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 172.660991][ T53] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 172.725163][ T53] bond0 (unregistering): Released all slaves [ 172.797809][ T6642] netlink: 72 bytes leftover after parsing attributes in process `syz.2.557'. [ 173.190904][ T5102] Bluetooth: hci5: command tx timeout [ 173.585661][ T6650] overlayfs: missing 'lowerdir' [ 173.761230][ T8] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 173.833082][ T8] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 173.901674][ T8] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 173.978211][ T8] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 174.033108][ T8] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 174.095982][ T8] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 174.140970][ T8] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 174.209918][ T8] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 174.239078][ T8] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 174.308017][ T8] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 174.338139][ T8] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 174.390400][ T8] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 174.444401][ T8] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 174.473881][ T6552] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 174.488664][ T8] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 174.508685][ T8] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 174.541501][ T8] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 174.600774][ T8] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 174.628542][ T8] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 174.641861][ T53] hsr_slave_0: left promiscuous mode [ 174.667749][ T53] hsr_slave_1: left promiscuous mode [ 174.681936][ T8] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 174.702377][ T8] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 174.728044][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 174.748483][ T8] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 174.780861][ T53] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 174.804851][ T8] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 174.829059][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 174.850046][ T8] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 174.865703][ T53] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 174.897652][ T8] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 174.953875][ T8] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 175.020057][ T8] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 175.047037][ T8] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 175.064253][ T53] veth1_macvtap: left promiscuous mode [ 175.085927][ T8] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 175.091890][ T53] veth0_macvtap: left promiscuous mode [ 175.121183][ T53] veth1_vlan: left promiscuous mode [ 175.141104][ T8] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 175.144945][ T53] veth0_vlan: left promiscuous mode [ 175.189701][ T8] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 175.219141][ T8] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 175.269705][ T8] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 175.300893][ T8] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 175.335994][ T8] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 175.369733][ T8] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 175.377575][ T8] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 175.419646][ T8] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 175.462956][ T8] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 175.515654][ T8] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 175.559663][ T8] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 175.578467][ T8] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 175.609907][ T8] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 175.630020][ T8] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 175.681378][ T8] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz0] on syz0 [ 176.611654][ T6729] RDS: rds_bind could not find a transport for 2001::1, load rds_tcp or rds_rdma? [ 178.219404][ T53] team0 (unregistering): Port device team_slave_1 removed [ 178.396519][ T53] team0 (unregistering): Port device team_slave_0 removed [ 178.754698][ T6750] Zero length message leads to an empty skb [ 179.234183][ T6764] netlink: 16 bytes leftover after parsing attributes in process `syz.4.602'. [ 179.470679][ T47] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 179.669330][ T6552] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 179.702924][ T47] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 179.730766][ T47] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 179.760420][ T47] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 179.786672][ T47] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 179.803460][ T47] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.805777][ T6552] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 179.830784][ T47] usb 4-1: config 0 descriptor?? [ 179.852273][ T6552] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 180.222221][ T6778] ptrace attach of "./syz-executor exec"[5095] was attempted by "./syz-executor exec"[6778] [ 180.281945][ T47] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 180.326779][ T47] plantronics 0003:047F:FFFF.0004: No inputs registered, leaving [ 180.466255][ T47] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 180.544766][ T6552] 8021q: adding VLAN 0 to HW filter on device bond0 [ 180.637736][ T47] usb 4-1: USB disconnect, device number 7 [ 180.702093][ T6552] 8021q: adding VLAN 0 to HW filter on device team0 [ 180.846642][ T5148] bridge0: port 1(bridge_slave_0) entered blocking state [ 180.856508][ T5148] bridge0: port 1(bridge_slave_0) entered forwarding state [ 181.008968][ T5148] bridge0: port 2(bridge_slave_1) entered blocking state [ 181.018506][ T5148] bridge0: port 2(bridge_slave_1) entered forwarding state [ 181.183147][ T6794] RDS: rds_bind could not find a transport for 2001::1, load rds_tcp or rds_rdma? [ 182.078072][ T6813] netlink: 16 bytes leftover after parsing attributes in process `syz.4.615'. [ 182.627076][ T6552] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 182.783464][ T6823] syzkaller0: entered promiscuous mode [ 182.799986][ T6823] syzkaller0: entered allmulticast mode [ 187.713365][ T6552] veth0_vlan: entered promiscuous mode [ 187.792505][ T6552] veth1_vlan: entered promiscuous mode [ 187.852659][ T6901] netlink: 8 bytes leftover after parsing attributes in process `syz.0.651'. [ 187.898284][ T6901] netlink: 8 bytes leftover after parsing attributes in process `syz.0.651'. [ 188.036474][ T6552] veth0_macvtap: entered promiscuous mode [ 188.095569][ T6552] veth1_macvtap: entered promiscuous mode [ 188.302720][ T6552] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 188.370403][ T6552] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 188.385698][ T6552] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 188.418453][ T6552] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 188.443380][ T6552] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 188.483423][ T6552] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 188.512608][ T6552] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 188.528448][ T6552] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 188.547503][ T6552] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 191.066915][ T6929] macvlan3: entered allmulticast mode [ 191.167488][ T6552] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 191.189114][ T6552] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.209074][ T6552] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 191.239256][ T6552] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.273576][ T6552] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 191.306116][ T6552] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.326845][ T6552] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 191.348609][ T6552] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.371853][ T6552] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 191.414490][ T6967] warning: `syz.2.673' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 191.439519][ T6552] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.459024][ T6552] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.496623][ T6552] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.523524][ T6552] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.766121][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 191.802609][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 191.924601][ T2400] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 192.002839][ T2400] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 193.119944][ T6998] netlink: 84 bytes leftover after parsing attributes in process `syz.1.520'. [ 193.664685][ T7010] netlink: 48 bytes leftover after parsing attributes in process `syz.2.689'. [ 194.125885][ T7019] netlink: 8 bytes leftover after parsing attributes in process `syz.0.691'. [ 194.487276][ T7023] netlink: 'syz.3.694': attribute type 3 has an invalid length. [ 194.578270][ T7023] netlink: 'syz.3.694': attribute type 1 has an invalid length. [ 194.648041][ T7023] netlink: 130160 bytes leftover after parsing attributes in process `syz.3.694'. [ 194.717183][ T1250] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.727373][ T1250] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.094884][ T7047] netlink: 8 bytes leftover after parsing attributes in process `syz.0.705'. [ 195.510089][ T7064] netlink: 'syz.4.713': attribute type 3 has an invalid length. [ 195.522267][ T7064] netlink: 'syz.4.713': attribute type 1 has an invalid length. [ 195.748122][ T7064] netlink: 130160 bytes leftover after parsing attributes in process `syz.4.713'. [ 196.779716][ T7086] netlink: 8 bytes leftover after parsing attributes in process `syz.0.722'. [ 196.908866][ T7093] netlink: 'syz.2.725': attribute type 3 has an invalid length. [ 196.928613][ T7093] netlink: 'syz.2.725': attribute type 1 has an invalid length. [ 196.940770][ T7093] netlink: 130160 bytes leftover after parsing attributes in process `syz.2.725'. [ 197.049854][ T5138] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 197.214288][ T7106] RDS: rds_bind could not find a transport for 2001::1, load rds_tcp or rds_rdma? [ 197.282529][ T5138] usb 5-1: Using ep0 maxpacket: 16 [ 197.334224][ T5138] usb 5-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=9a.1d [ 197.359540][ T5138] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 197.375379][ T5138] usb 5-1: Product: syz [ 197.403087][ T5138] usb 5-1: Manufacturer: syz [ 197.422066][ T5138] usb 5-1: SerialNumber: syz [ 197.456120][ T5138] usb 5-1: config 0 descriptor?? [ 197.487871][ T5138] ims_pcu 5-1:0.0: Missing CDC union descriptor [ 197.498489][ T5138] ims_pcu 5-1:0.0: probe with driver ims_pcu failed with error -22 [ 197.800904][ T5138] usb 5-1: USB disconnect, device number 4 [ 198.790637][ T7120] sctp: failed to load transform for md5: -2 [ 199.515325][ T7154] netlink: 40 bytes leftover after parsing attributes in process `syz.4.745'. [ 204.669872][ T5149] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 204.863292][ T5149] usb 2-1: Using ep0 maxpacket: 8 [ 204.877011][ T5149] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 204.905181][ T5149] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 204.917616][ T5149] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 204.931172][ T5149] usb 2-1: New USB device found, idVendor=05ac, idProduct=0217, bcdDevice=cf.dc [ 204.947920][ T5149] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 205.010609][ T5149] usb 2-1: config 0 descriptor?? [ 205.056493][ T5149] appletouch 2-1:0.0: Could not find int-in endpoint [ 205.099245][ T5149] appletouch 2-1:0.0: probe with driver appletouch failed with error -5 [ 205.139534][ T5149] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 207.036699][ T5096] Bluetooth: hci2: command 0x0406 tx timeout [ 207.046015][ T4481] Bluetooth: hci3: command 0x0406 tx timeout [ 207.053554][ T5106] Bluetooth: hci1: command 0x0406 tx timeout [ 207.484899][ T47] usb 2-1: USB disconnect, device number 3 [ 207.558648][ T7298] RDS: rds_bind could not find a transport for 2001::1, load rds_tcp or rds_rdma? [ 208.119883][ T47] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 208.606513][ T47] usb 5-1: Using ep0 maxpacket: 32 [ 208.616839][ T47] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 208.634255][ T47] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 208.647916][ T47] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 208.659013][ T47] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 208.678381][ T47] usb 5-1: New USB device found, idVendor=1b96, idProduct=9f0a, bcdDevice= 0.15 [ 208.698298][ T47] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 209.109758][ T47] usb 5-1: config 0 descriptor?? [ 209.700904][ T47] hid-generic 0003:1B96:9F0A.0005: unknown main item tag 0x0 [ 209.739774][ T47] hid-generic 0003:1B96:9F0A.0005: unknown main item tag 0x0 [ 209.782525][ T47] hid-generic 0003:1B96:9F0A.0005: unknown main item tag 0x0 [ 210.091235][ T47] hid-generic 0003:1B96:9F0A.0005: unknown main item tag 0x0 [ 210.107551][ T47] hid-generic 0003:1B96:9F0A.0005: unknown main item tag 0x0 [ 210.128578][ T47] hid-generic 0003:1B96:9F0A.0005: hidraw0: USB HID v0.00 Device [HID 1b96:9f0a] on usb-dummy_hcd.4-1/input0 [ 211.986637][ T5145] usb 5-1: USB disconnect, device number 5 [ 212.341265][ T7388] netlink: 16 bytes leftover after parsing attributes in process `syz.1.834'. [ 212.566569][ T7407] RDS: rds_bind could not find a transport for 2001::1, load rds_tcp or rds_rdma? [ 212.689284][ T7406] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8) [ 212.697166][ T7406] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 212.753855][ T7406] vhci_hcd vhci_hcd.0: Device attached [ 212.842940][ T7410] vhci_hcd: connection closed [ 212.866300][ T11] vhci_hcd: stop threads [ 212.893132][ T2468] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.942376][ T11] vhci_hcd: release socket [ 212.965265][ T11] vhci_hcd: disconnect device [ 213.085140][ T2468] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.274575][ T2468] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.648565][ T2468] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.701322][ T7433] netlink: 16 bytes leftover after parsing attributes in process `syz.1.849'. [ 213.753066][ T5092] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 213.764947][ T5092] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 213.776626][ T5092] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 213.788576][ T5092] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 213.819883][ T5092] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 213.832519][ T5092] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 214.240439][ T7458] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8) [ 214.247762][ T7458] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 214.270355][ T7458] vhci_hcd vhci_hcd.0: Device attached [ 214.405589][ T7462] vhci_hcd: cannot find the pending unlink 5 [ 214.439125][ T2468] bridge_slave_1: left allmulticast mode [ 214.453439][ T7462] vhci_hcd: connection closed [ 214.458679][ T11] vhci_hcd: stop threads [ 214.466296][ T2468] bridge_slave_1: left promiscuous mode [ 214.480530][ T2468] bridge0: port 2(bridge_slave_1) entered disabled state [ 214.482845][ T11] vhci_hcd: release socket [ 214.498149][ T11] vhci_hcd: disconnect device [ 214.521826][ T2468] bridge_slave_0: left allmulticast mode [ 214.528762][ T2468] bridge_slave_0: left promiscuous mode [ 214.547044][ T2468] bridge0: port 1(bridge_slave_0) entered disabled state [ 214.559864][ T5138] usb 11-1: new high-speed USB device number 3 using vhci_hcd [ 214.580720][ T5138] usb 11-1: enqueue for inactive port 0 [ 214.669861][ T5138] vhci_hcd: vhci_device speed not set [ 215.878052][ T2468] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 215.898443][ T2468] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 215.910930][ T5092] Bluetooth: hci0: command tx timeout [ 215.920239][ T2468] bond0 (unregistering): Released all slaves [ 216.020367][ T7509] netlink: 12 bytes leftover after parsing attributes in process `syz.4.876'. [ 216.171029][ T7513] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8) [ 216.178612][ T7513] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 216.238341][ T7513] vhci_hcd vhci_hcd.0: Device attached [ 216.366110][ T7514] vhci_hcd: connection closed [ 216.367554][ T2872] vhci_hcd: stop threads [ 216.383901][ T2872] vhci_hcd: release socket [ 216.389857][ T2872] vhci_hcd: disconnect device [ 216.904644][ T7440] chnl_net:caif_netlink_parms(): no params data found [ 217.644074][ T2468] hsr_slave_0: left promiscuous mode [ 217.665972][ T2468] hsr_slave_1: left promiscuous mode [ 217.708642][ T2468] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 217.728926][ T2468] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 217.772108][ T2468] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 217.791945][ T2468] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 217.963151][ T2468] veth1_macvtap: left promiscuous mode [ 217.977555][ T2468] veth0_macvtap: left promiscuous mode [ 217.989848][ T5092] Bluetooth: hci0: command tx timeout [ 217.993674][ T2468] veth1_vlan: left promiscuous mode [ 218.013936][ T2468] veth0_vlan: left promiscuous mode [ 218.940799][ T2468] team0 (unregistering): Port device team_slave_1 removed [ 218.987023][ T2468] team0 (unregistering): Port device team_slave_0 removed [ 219.433212][ T7564] netlink: 24 bytes leftover after parsing attributes in process `syz.1.889'. [ 219.579293][ T7576] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 219.585890][ T7576] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 219.622706][ T7576] vhci_hcd vhci_hcd.0: Device attached [ 219.668141][ T7577] vhci_hcd: connection closed [ 219.675678][ T6551] vhci_hcd: stop threads [ 219.711058][ T7440] bridge0: port 1(bridge_slave_0) entered blocking state [ 219.734483][ T6551] vhci_hcd: release socket [ 219.738985][ T6551] vhci_hcd: disconnect device [ 219.759081][ T7440] bridge0: port 1(bridge_slave_0) entered disabled state [ 219.779821][ T7440] bridge_slave_0: entered allmulticast mode [ 219.797967][ T7440] bridge_slave_0: entered promiscuous mode [ 219.822872][ T7440] bridge0: port 2(bridge_slave_1) entered blocking state [ 219.856159][ T7440] bridge0: port 2(bridge_slave_1) entered disabled state [ 219.877481][ T7440] bridge_slave_1: entered allmulticast mode [ 219.916010][ T7440] bridge_slave_1: entered promiscuous mode [ 220.081397][ T5092] Bluetooth: hci0: command tx timeout [ 220.108406][ T7440] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 220.143425][ T7440] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 220.295636][ T7440] team0: Port device team_slave_0 added [ 220.353436][ T7440] team0: Port device team_slave_1 added [ 220.590014][ T7611] netlink: 24 bytes leftover after parsing attributes in process `syz.1.905'. [ 220.746002][ T7440] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 220.789687][ T7440] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 220.836426][ T7440] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 220.917746][ T7440] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 220.939337][ T7440] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 220.966908][ C1] vkms_vblank_simulate: vblank timer overrun [ 220.989093][ T7440] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 221.416170][ T7440] hsr_slave_0: entered promiscuous mode [ 221.464175][ T7440] hsr_slave_1: entered promiscuous mode [ 221.505208][ T7440] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 221.522294][ T7440] Cannot create hsr debugfs directory [ 222.149841][ T5092] Bluetooth: hci0: command tx timeout [ 222.298108][ T7649] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7) [ 222.304899][ T7649] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 222.386777][ T7649] vhci_hcd vhci_hcd.0: Device attached [ 222.499516][ T7650] vhci_hcd: connection closed [ 222.517524][ T2400] vhci_hcd: stop threads [ 222.540574][ T2400] vhci_hcd: release socket [ 222.567492][ T2400] vhci_hcd: disconnect device [ 222.602194][ T5140] vhci_hcd: vhci_device speed not set [ 222.636755][ T7662] netlink: 24 bytes leftover after parsing attributes in process `syz.1.918'. [ 223.432268][ T7440] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 223.478094][ T7440] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 223.515948][ T7440] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 223.553605][ T7440] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 223.963013][ T7714] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7) [ 223.969785][ T7714] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 223.981534][ T7440] 8021q: adding VLAN 0 to HW filter on device bond0 [ 224.004367][ T7714] vhci_hcd vhci_hcd.0: Device attached [ 224.026504][ T7440] 8021q: adding VLAN 0 to HW filter on device team0 [ 224.042825][ T7715] vhci_hcd: connection closed [ 224.045531][ T2400] vhci_hcd: stop threads [ 224.070623][ T2400] vhci_hcd: release socket [ 224.075209][ T2400] vhci_hcd: disconnect device [ 224.113672][ T5150] bridge0: port 1(bridge_slave_0) entered blocking state [ 224.120938][ T5150] bridge0: port 1(bridge_slave_0) entered forwarding state [ 224.152654][ T5150] bridge0: port 2(bridge_slave_1) entered blocking state [ 224.159915][ T5150] bridge0: port 2(bridge_slave_1) entered forwarding state [ 224.271848][ T7725] (unnamed net_device) (uninitialized): option arp_validate: mode dependency failed, not supported in mode balance-tlb(5) [ 224.812419][ T7744] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 224.954124][ T7440] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 225.163150][ T7440] veth0_vlan: entered promiscuous mode [ 225.289464][ T7440] veth1_vlan: entered promiscuous mode [ 225.315056][ T7765] netlink: 24 bytes leftover after parsing attributes in process `syz.2.949'. [ 225.394307][ T7440] veth0_macvtap: entered promiscuous mode [ 225.418497][ T7440] veth1_macvtap: entered promiscuous mode [ 225.482637][ T7440] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 225.508139][ T7440] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.531853][ T7440] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 225.561617][ T7440] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.578647][ T7440] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 225.599348][ T7440] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.618140][ T7440] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 225.627496][ T7775] (unnamed net_device) (uninitialized): option arp_validate: mode dependency failed, not supported in mode balance-tlb(5) [ 225.656905][ T7440] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 225.696115][ T7440] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.734588][ T7440] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 225.780131][ T7440] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.809269][ T7440] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 225.853363][ T7440] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.889169][ T7440] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 225.924259][ T7440] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.954027][ T7440] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 225.993355][ T7440] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.028216][ T7440] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.051593][ T7440] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.060921][ T7440] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.070301][ T7786] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7) [ 226.076871][ T7786] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 226.121229][ T7786] vhci_hcd vhci_hcd.0: Device attached [ 226.184394][ T7788] vhci_hcd: connection closed [ 226.185923][ T53] vhci_hcd: stop threads [ 226.226656][ T53] vhci_hcd: release socket [ 226.247141][ T53] vhci_hcd: disconnect device [ 226.430209][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 226.457879][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 226.534257][ T2468] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 226.549060][ T2468] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 228.229524][ T7849] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7) [ 228.236657][ T7849] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 228.292520][ T7849] vhci_hcd vhci_hcd.0: Device attached [ 228.338860][ T7850] vhci_hcd: connection closed [ 228.339324][ T2400] vhci_hcd: stop threads [ 228.358977][ T2400] vhci_hcd: release socket [ 228.376714][ T2400] vhci_hcd: disconnect device [ 229.691420][ T7900] netlink: 8 bytes leftover after parsing attributes in process `syz.1.985'. [ 229.757411][ T7900] macvlan2: entered allmulticast mode [ 229.831920][ T7907] bond0: entered promiscuous mode [ 229.850188][ T7907] bond_slave_0: entered promiscuous mode [ 229.856127][ T7907] bond_slave_1: entered promiscuous mode [ 229.998096][ T11] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.134751][ T7918] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7) [ 230.141347][ T7918] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 230.171762][ T7918] vhci_hcd vhci_hcd.0: Device attached [ 230.229688][ T7921] vhci_hcd: connection closed [ 230.236090][ T2400] vhci_hcd: stop threads [ 230.264951][ T2400] vhci_hcd: release socket [ 230.288983][ T2400] vhci_hcd: disconnect device [ 230.567653][ T11] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.657742][ T55] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 230.687711][ T55] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 230.703474][ T55] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 230.713649][ T55] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 230.752223][ T55] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 230.763242][ T55] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 230.886003][ T11] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.183254][ T11] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.698840][ T7988] 9pnet_fd: Insufficient options for proto=fd [ 232.198914][ T11] bridge_slave_1: left allmulticast mode [ 232.224846][ T11] bridge_slave_1: left promiscuous mode [ 232.271834][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 232.330684][ T11] bridge_slave_0: left allmulticast mode [ 232.340236][ T11] bridge_slave_0: left promiscuous mode [ 232.355073][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 232.874153][ T5092] Bluetooth: hci0: command tx timeout [ 233.218355][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 233.253122][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 233.286285][ T11] bond0 (unregistering): Released all slaves [ 233.703836][ T7937] chnl_net:caif_netlink_parms(): no params data found [ 233.759075][ T8021] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 234.100353][ T8037] xt_hashlimit: overflow, try lower: 2647300743266041856/0 [ 234.323773][ T8048] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 234.330560][ T8048] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 234.403829][ T8048] vhci_hcd vhci_hcd.0: Device attached [ 234.449619][ T11] hsr_slave_0: left promiscuous mode [ 234.473220][ T8052] vhci_hcd: connection closed [ 234.487081][ T35] vhci_hcd: stop threads [ 234.506144][ T35] vhci_hcd: release socket [ 234.520557][ T11] hsr_slave_1: left promiscuous mode [ 234.522698][ T35] vhci_hcd: disconnect device [ 234.535778][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 234.555785][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 234.581106][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 234.613520][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 234.709873][ T11] veth1_macvtap: left promiscuous mode [ 234.715591][ T11] veth0_macvtap: left promiscuous mode [ 234.739895][ T11] veth1_vlan: left promiscuous mode [ 234.751011][ T11] veth0_vlan: left promiscuous mode [ 234.960417][ T5092] Bluetooth: hci0: command tx timeout [ 235.551867][ T11] team0 (unregistering): Port device team_slave_1 removed [ 235.593657][ T11] team0 (unregistering): Port device team_slave_0 removed [ 236.105396][ T8079] netlink: 'syz.2.1034': attribute type 10 has an invalid length. [ 236.139291][ T8079] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 236.168553][ T8079] batadv0: entered promiscuous mode [ 236.187956][ T8079] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 236.314465][ T7937] bridge0: port 1(bridge_slave_0) entered blocking state [ 236.335712][ T7937] bridge0: port 1(bridge_slave_0) entered disabled state [ 236.352588][ T7937] bridge_slave_0: entered allmulticast mode [ 236.360748][ T7937] bridge_slave_0: entered promiscuous mode [ 236.390716][ T8101] [ 236.393116][ T8101] ================================================ [ 236.399636][ T8101] WARNING: lock held when returning to user space! [ 236.406161][ T8101] 6.10.0-syzkaller-04472-g51835949dda3 #0 Not tainted [ 236.412955][ T8101] ------------------------------------------------ [ 236.419485][ T8101] syz.1.1041/8101 is leaving the kernel with locks still held! [ 236.427072][ T8101] 1 lock held by syz.1.1041/8101: [ 236.432127][ T8101] #0: ffffffff8e335fe0 (rcu_read_lock){....}-{1:2}, at: ns_ioctl+0x3e0/0x740 [ 236.434873][ T7937] bridge0: port 2(bridge_slave_1) entered blocking state [ 236.441143][ C1] vkms_vblank_simulate: vblank timer overrun [ 236.469152][ T8101] ------------[ cut here ]------------ [ 236.474698][ T8101] Voluntary context switch within RCU read-side critical section! [ 236.474824][ T8101] WARNING: CPU: 1 PID: 8101 at kernel/rcu/tree_plugin.h:330 rcu_note_context_switch+0xcf4/0xff0 [ 236.476016][ T7937] bridge0: port 2(bridge_slave_1) entered disabled state [ 236.482669][ T8101] Modules linked in: [ 236.482705][ T8101] CPU: 1 PID: 8101 Comm: syz.1.1041 Not tainted 6.10.0-syzkaller-04472-g51835949dda3 #0 [ 236.482731][ T8101] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 236.482744][ T8101] RIP: 0010:rcu_note_context_switch+0xcf4/0xff0 [ 236.496603][ T7937] bridge_slave_1: entered allmulticast mode [ 236.500200][ T8101] Code: 00 ba 02 00 00 00 e8 cb 02 fe ff 4c 8b b4 24 80 00 00 00 eb 91 c6 05 6b 1b 1a 0e 01 90 48 c7 c7 40 21 cc 8b e8 9d 26 db ff 90 <0f> 0b 90 90 e9 3b f4 ff ff 90 0f 0b 90 45 84 ed 0f 84 00 f4 ff ff [ 236.500223][ T8101] RSP: 0000:ffffc90004ab7ba0 EFLAGS: 00010046 [ 236.500245][ T8101] RAX: da82836d6da1d200 RBX: ffff88807d070444 RCX: 0000000000040000 [ 236.500263][ T8101] RDX: ffffc90012031000 RSI: 0000000000011a89 RDI: 0000000000011a8a [ 236.505942][ T7937] bridge_slave_1: entered promiscuous mode [ 236.513940][ T8101] RBP: ffffc90004ab7cf0 R08: ffffffff815877b2 R09: 1ffff110172a519a [ 236.513963][ T8101] R10: dffffc0000000000 R11: ffffed10172a519b R12: ffff88807d070000 [ 236.513980][ T8101] R13: 0000000000000000 R14: 1ffff92000956f8c R15: dffffc0000000000 [ 236.513996][ T8101] FS: 00007efd1a57f6c0(0000) GS:ffff8880b9500000(0000) knlGS:0000000000000000 [ 236.514016][ T8101] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 236.514037][ T8101] CR2: 0000001b2c71fffc CR3: 0000000023e8c000 CR4: 00000000003506f0 [ 236.514056][ T8101] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 236.514070][ T8101] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 236.514085][ T8101] Call Trace: [ 236.514094][ T8101] [ 236.514104][ T8101] ? __warn+0x163/0x4e0 [ 236.514141][ T8101] ? rcu_note_context_switch+0xcf4/0xff0 [ 236.514181][ T8101] ? report_bug+0x2b3/0x500 [ 236.668617][ T8101] ? rcu_note_context_switch+0xcf4/0xff0 [ 236.674282][ T8101] ? handle_bug+0x3e/0x70 [ 236.678710][ T8101] ? exc_invalid_op+0x1a/0x50 [ 236.683399][ T8101] ? asm_exc_invalid_op+0x1a/0x20 [ 236.688447][ T8101] ? __warn_printk+0x292/0x360 [ 236.693495][ T8101] ? rcu_note_context_switch+0xcf4/0xff0 [ 236.699163][ T8101] ? __schedule+0x17b6/0x4a10 [ 236.704030][ T8101] ? irq_work_queue+0xd1/0x150 [ 236.708891][ T8101] ? __pfx_rcu_note_context_switch+0x10/0x10 [ 236.715351][ T8101] ? rcu_is_watching+0x15/0xb0 [ 236.720220][ T8101] __schedule+0x348/0x4a10 [ 236.724766][ T8101] ? trace_irq_disable+0x3b/0x120 [ 236.729827][ T8101] ? preempt_schedule_irq+0x144/0x1c0 [ 236.735259][ T8101] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 236.741185][ T8101] ? __pfx___schedule+0x10/0x10 [ 236.746142][ T8101] ? trace_irq_disable+0x2c/0x120 [ 236.751192][ T8101] ? rcu_is_watching+0x15/0xb0 [ 236.756162][ T8101] schedule+0x14b/0x320 [ 236.760941][ T8101] irqentry_exit_to_user_mode+0xe7/0x280 [ 236.766619][ T8101] asm_sysvec_reschedule_ipi+0x1a/0x20 [ 236.772231][ T8101] RIP: 0033:0x7efd19775a19 [ 236.776691][ T8101] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 236.796760][ T8101] RSP: 002b:00007efd1a57f048 EFLAGS: 00000246 [ 236.802844][ T8101] RAX: fffffffffffffffd RBX: 00007efd19903f60 RCX: 00007efd19775a19 [ 236.810847][ T8101] RDX: 0000000000000000 RSI: 000000008004b707 RDI: 0000000000000003 [ 236.818823][ T8101] RBP: 00007efd197e4e49 R08: 0000000000000000 R09: 0000000000000000 [ 236.826830][ T8101] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 236.834826][ T8101] R13: 000000000000000b R14: 00007efd19903f60 R15: 00007ffcf6e19c18 [ 236.842845][ T8101] [ 236.846241][ T8101] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 236.853723][ T8101] CPU: 1 PID: 8101 Comm: syz.1.1041 Not tainted 6.10.0-syzkaller-04472-g51835949dda3 #0 [ 236.863483][ T8101] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 236.873551][ T8101] Call Trace: [ 236.876942][ T8101] [ 236.879983][ T8101] dump_stack_lvl+0x241/0x360 [ 236.884804][ T8101] ? __pfx_dump_stack_lvl+0x10/0x10 [ 236.890214][ T8101] ? __pfx__printk+0x10/0x10 [ 236.894822][ T8101] ? vscnprintf+0x5d/0x90 [ 236.899194][ T8101] panic+0x349/0x860 [ 236.903125][ T8101] ? __warn+0x172/0x4e0 [ 236.907307][ T8101] ? __pfx_panic+0x10/0x10 [ 236.911779][ T8101] __warn+0x346/0x4e0 [ 236.915823][ T8101] ? rcu_note_context_switch+0xcf4/0xff0 [ 236.922022][ T8101] report_bug+0x2b3/0x500 [ 236.926374][ T8101] ? rcu_note_context_switch+0xcf4/0xff0 [ 236.932130][ T8101] handle_bug+0x3e/0x70 [ 236.936316][ T8101] exc_invalid_op+0x1a/0x50 [ 236.940923][ T8101] asm_exc_invalid_op+0x1a/0x20 [ 236.945876][ T8101] RIP: 0010:rcu_note_context_switch+0xcf4/0xff0 [ 236.952147][ T8101] Code: 00 ba 02 00 00 00 e8 cb 02 fe ff 4c 8b b4 24 80 00 00 00 eb 91 c6 05 6b 1b 1a 0e 01 90 48 c7 c7 40 21 cc 8b e8 9d 26 db ff 90 <0f> 0b 90 90 e9 3b f4 ff ff 90 0f 0b 90 45 84 ed 0f 84 00 f4 ff ff [ 236.971855][ T8101] RSP: 0000:ffffc90004ab7ba0 EFLAGS: 00010046 [ 236.977937][ T8101] RAX: da82836d6da1d200 RBX: ffff88807d070444 RCX: 0000000000040000 [ 236.986048][ T8101] RDX: ffffc90012031000 RSI: 0000000000011a89 RDI: 0000000000011a8a [ 236.994038][ T8101] RBP: ffffc90004ab7cf0 R08: ffffffff815877b2 R09: 1ffff110172a519a [ 237.002023][ T8101] R10: dffffc0000000000 R11: ffffed10172a519b R12: ffff88807d070000 [ 237.010029][ T8101] R13: 0000000000000000 R14: 1ffff92000956f8c R15: dffffc0000000000 [ 237.018030][ T8101] ? __warn_printk+0x292/0x360 [ 237.023179][ T8101] ? __schedule+0x17b6/0x4a10 [ 237.027882][ T8101] ? irq_work_queue+0xd1/0x150 [ 237.032657][ T8101] ? __pfx_rcu_note_context_switch+0x10/0x10 [ 237.038665][ T8101] ? rcu_is_watching+0x15/0xb0 [ 237.043608][ T8101] __schedule+0x348/0x4a10 [ 237.048821][ T8101] ? trace_irq_disable+0x3b/0x120 [ 237.053868][ T8101] ? preempt_schedule_irq+0x144/0x1c0 [ 237.059350][ T8101] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 237.065180][ T8101] ? __pfx___schedule+0x10/0x10 [ 237.070046][ T8101] ? trace_irq_disable+0x2c/0x120 [ 237.075082][ T8101] ? rcu_is_watching+0x15/0xb0 [ 237.079876][ T8101] schedule+0x14b/0x320 [ 237.084119][ T8101] irqentry_exit_to_user_mode+0xe7/0x280 [ 237.089791][ T8101] asm_sysvec_reschedule_ipi+0x1a/0x20 [ 237.095522][ T8101] RIP: 0033:0x7efd19775a19 [ 237.099946][ T8101] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 237.119663][ T8101] RSP: 002b:00007efd1a57f048 EFLAGS: 00000246 [ 237.125798][ T8101] RAX: fffffffffffffffd RBX: 00007efd19903f60 RCX: 00007efd19775a19 [ 237.133783][ T8101] RDX: 0000000000000000 RSI: 000000008004b707 RDI: 0000000000000003 [ 237.141858][ T8101] RBP: 00007efd197e4e49 R08: 0000000000000000 R09: 0000000000000000 [ 237.149857][ T8101] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 237.157834][ T8101] R13: 000000000000000b R14: 00007efd19903f60 R15: 00007ffcf6e19c18 [ 237.165838][ T8101] [ 237.169112][ T8101] Kernel Offset: disabled [ 237.173443][ T8101] Rebooting in 86400 seconds..