last executing test programs: 1m48.898777863s ago: executing program 1 (id=1129): socket$netlink(0x10, 0x3, 0x0) mq_open(&(0x7f00005a1ffb)='e\xeeQ\x92o', 0x0, 0x0, 0x0) socket$inet6(0xa, 0x6, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) socket$nl_audit(0x10, 0x3, 0x9) socket$nl_route(0x10, 0x3, 0x0) unshare(0x400) pselect6(0x40, &(0x7f0000000040), 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) 1m47.013010395s ago: executing program 1 (id=1132): r0 = socket(0x0, 0x803, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x10, 0xffffffffffffffff, 0x0) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) mount(&(0x7f0000000080)=@nullb, 0x0, 0x0, 0x1000, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x26441, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) close(r3) ioctl$SIOCSIFHWADDR(r3, 0x8914, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000280)) poll(&(0x7f0000000140)=[{}], 0x1, 0x1004) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000038c0)={0x0, 0x0, &(0x7f0000003880)={&(0x7f00000005c0)=ANY=[@ANYBLOB="bc010000100001000000000000000000b18800000000000000000000000001010000006919ee070000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac14140000000000000000000000000000000000330000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000480001006d64340000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000480003006c7a7300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001c00040003004e214e2100000000000000000000000000000000000124000900dd0300000000000003000000000000000500"/372], 0x1bc}}, 0x0) r4 = socket(0x200000100000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'syz_tun\x00'}) r5 = openat$nvram(0xffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00'}) preadv(r5, &(0x7f0000000500)=[{&(0x7f0000000300)=""/110, 0x6e}], 0x1, 0x0, 0x7) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={0x0, 0x34}}, 0x0) r6 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r6, 0x7a0, &(0x7f0000000100)={@local}) ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(r6, 0x7b1, &(0x7f0000000080)={0x0, 0x1}) 1m46.77600435s ago: executing program 4 (id=1134): bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000980)={@map, 0xffffffffffffffff, 0x13, 0x26}, 0x20) 1m46.281227208s ago: executing program 4 (id=1137): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000030a0300000000000000000002000000100008800c00014000000200000000000900010073797a300000000014000c800800014000000000080002400000000008000b"], 0x74}}, 0x0) 1m45.902912718s ago: executing program 4 (id=1139): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r0, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000001300)=[{&(0x7f0000000500)=""/221, 0xdd}, {&(0x7f0000000f00)=""/259, 0x103}, {&(0x7f0000003140)=""/4070, 0xfe6}, {&(0x7f0000001140)=""/231, 0xe7}, {&(0x7f0000000b00)=""/192, 0xc0}, {&(0x7f0000000bc0)=""/249, 0xf9}, {&(0x7f0000000780)=""/175, 0xaf}, {&(0x7f00000002c0)=""/63, 0x3f}, {&(0x7f0000000240)=""/68, 0x44}, {&(0x7f0000001400)=""/260, 0x104}, {&(0x7f0000000d00)=""/26, 0x1a}, {&(0x7f00000006c0)=""/151, 0x97}], 0xc}, 0x0) recvmsg$kcm(r0, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0) recvmsg$kcm(r0, &(0x7f0000000680)={0x0, 0x0, 0x0}, 0x0) recvmsg$kcm(r0, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) recvmsg$kcm(r0, &(0x7f0000000440)={0x0, 0x1a, 0x0}, 0x0) 1m39.766457383s ago: executing program 4 (id=1155): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x0, 0x7, 0x1000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) 1m39.748769667s ago: executing program 1 (id=1157): unshare(0x2040400) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x13, &(0x7f0000000140)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 1m39.300812241s ago: executing program 4 (id=1158): socket$netlink(0x10, 0x3, 0x0) mq_open(&(0x7f00005a1ffb)='e\xeeQ\x92o', 0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) socket$nl_audit(0x10, 0x3, 0x9) socket$nl_route(0x10, 0x3, 0x0) unshare(0x400) pselect6(0x40, &(0x7f0000000040), 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) 1m39.300393407s ago: executing program 1 (id=1159): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x61}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_LOOKUP_BATCH(0x19, 0x0, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f0000000000)={{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x101, 0x0, 0x60, 0x0, 0x7}, 0x8, [0x0]}) bind$rds(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) write$binfmt_elf64(r0, &(0x7f0000001340)=ANY=[], 0xa89) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f00000002c0)="e2b3b8c51d71eadd5df9dda251607cf2ac834ad26f541d5e9aa46cff60ba3d1ba4e90b24a30075ff6423ae78237d68331d7e125b57ef23912b3f43376608d7", 0x3f, 0x8c1, 0x0, 0x0) 1m37.924313856s ago: executing program 4 (id=1165): setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x7, 0x0, 0x0) socket(0xb, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) socket(0x0, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) close(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r3, 0x0, 0x0) recvmsg$kcm(r3, &(0x7f0000000a80)={0x0, 0x0, 0x0}, 0x0) recvmsg(r3, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) 1m37.736210791s ago: executing program 1 (id=1166): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=@newlink={0x20, 0x10, 0xc09}, 0x20}}, 0x0) 1m37.316923879s ago: executing program 1 (id=1170): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509", 0x4e}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'dvmrp1\x00', 0x2}) recvmsg$kcm(r0, &(0x7f0000001080)={0x0, 0x0, 0x0}, 0x0) 40.820098787s ago: executing program 2 (id=1301): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$GTP_CMD_DELPDP(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@GTPA_VERSION={0x8}]}, 0x1c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r5 = socket$vsock_stream(0x28, 0x1, 0x0) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r7}, 0x10) unshare(0x2040400) socket$xdp(0x2c, 0x3, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socket$tipc(0x1e, 0x2, 0x0) ppoll(&(0x7f0000000480)=[{r6}, {r5}, {r8}], 0x3, &(0x7f0000000100)={0x77359400}, 0x0, 0x2000) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) write$cgroup_int(r4, &(0x7f0000000000), 0x12) r9 = socket$netlink(0x10, 0x3, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) sendmmsg$unix(r10, &(0x7f0000000400)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write(r9, &(0x7f0000000100)="29000000140005b7ff000000040860eb0101b6ff021596db2d6d6974b5d728aa4b5d02c26ed638eeb7", 0x29) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="2800000014000905000000000000000002000000", @ANYRES32=r3, @ANYBLOB], 0x28}}, 0x0) 38.852683109s ago: executing program 2 (id=1305): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x6, 0x8, 0x1}, 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x3}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000d40)=ANY=[@ANYBLOB="180000000000e3ff000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000008500000007000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r1}, 0x10) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0xa, 0x9, 0x8, 0x2}, 0x48) 38.665830835s ago: executing program 2 (id=1306): getpeername(0xffffffffffffffff, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000000000000000000049500000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r3}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) r4 = userfaultfd(0x801) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_CONTINUE(r4, 0xc020aa08, &(0x7f0000000500)={{&(0x7f0000565000/0x1000)=nil, 0x1000}}) 37.433368353s ago: executing program 2 (id=1309): syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file1\x00', 0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x1, 0x17d, &(0x7f00000004c0)="$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") chdir(&(0x7f0000000140)='./file0\x00') setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000000000)={0x0, {{0x2, 0x0, @multicast1}}}, 0x88) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r3 = fsopen(&(0x7f0000000100)='binfmt_misc\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) 35.875125197s ago: executing program 2 (id=1313): sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={0x0, 0x14}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000380)=""/156, 0x9c}], 0x1}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000009240)={&(0x7f0000001680)=@newtfilter={0x964, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r0, {}, {}, {0xb}}, [@filter_kind_options=@f_basic={{0xa}, {0x934, 0x2, [@TCA_BASIC_ACT={0x840, 0x3, [@m_connmark={0x7dc, 0x0, 0x0, 0x0, {{0xd}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x0, 0x8, 0xffffffffffffffff, 0x5, 0xd}, 0x4}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x400, 0x101, 0x0, 0xf4bb, 0x9}, 0xab0}}]}, {0x772, 0x6, "59cdc2c9a1d9dfeddd40015c31f237b23e9d150a324c000e0b1fb93bda3fcca5d1ed582c76527e3ce461e3e2ce56cdb8545b484d10422cf1dbb159a8cee1b99db199fa072a5b0e2442f7a339389cf6e93abbcccc0e0fcce5774232ca4b2c1147ed84a9a12542e2946d7f22104da16fd6d426082379435e844ba2a46baaef8c360d949d375ced3fda6f3932e09ff1f429fd561c974173794dbabd902457625a1e3515a3cc57fbca0773c0c5957b738531b069a05161a36e9f8164ec35a8e63b711400beec07cd72221b5a30a2f70516fb906b35468cd6025ac50e203cb0c38c08310cbe52054c309fd22ffed239c6cae86bacb6570da1e7dc9399dec907d7bd0dea6c3b23b3301365a3c08864b624ab72ef0b3801f39562fb28d6ae2ab9448ec92539ecafc616eae5228efa150f757f98290b078ae5d04143ee8ecf3fa159cba830b2acb5b6525ad647e86a6d984e500ab0db248f30ee6ad4b34a2198e6d0473a0478974a68e56ba8d403e5425576af759ae78a10663918d209cc985cf4e24afdfec02b6aad5cb8866e4c76583315a62189df70efd7457f0980bb7f4059bd0a0f6eacca25e048d8bec5e536358b66da42fa4a7a9b4bdbb521c84fb774b3a8e0017225fd39c2bf2b3a79fb072e89f4ccd650a32dd36c05083e0cb1ab2179a55a49108899039d464febf04664922b8f52007b15143f11eb3d2828cb352a33a2122d7579421611fbbc03bcfc47daa6d08ba767f8842e5fc1375f971ec4d38c9c38f432d664bbeb439814e578fdcf25649b83e647f7eb9cbadfeb985778984c2dca2a6da16ce7f3b47da412309fb64ddf8f53844debe6caa763611ec675bdab9559aad772a4c6680fdc4814b5a6538b1e8385d81a83c99668f477c78e3ebf81221c8162f2140062e575fc33edae67b3c29a9f59460e3badda4d9338c8f44539edb357ba83e79a4be669c10123f5b7dc4fa744ca3a79d835ac2d5001f7b082629daec8c6a4eba0dd2e6f22a0ea600516227fb5287b49777c204476dd1e67b21e152ada6beedb89c0ace077783f924a136dcf589f2d1fda7717940aa8806abbf485ae88151ee16b3adcf3b0e8ed60b09eb8d4c29616cba4ba809b3d68a932f0c1e1419fa826e58bfcd1e452bac7c0bcd8a397c85f671df191ee9d5e2205b4ae93b16ccd8fa49afc37cc5ab11a962ab25f171636d624f97989db91103df0f9a68d0aec79bfc0719e17de0c0721a62b2ce1560749b51074985bcb0b041ec2df609719e8a9bec5c949e0814e1606c1a34d3400bb458c6a7cf9d0a428648b032d4fc07e6aca5105fcc48e08b0957ba2368c948af76332df131889b6ba1c0b23bbdc88248aacbd6184e1bea0550253e73905f8111248af51b452d9f60079ee394754e760207d7553e5f7d334a7b2c354769bc7c436b4b9dbdeb2cf3fb66033f780eb081d7d3d046a52002350d65aefdfb6f622cfc7a8d290ba2d47f0fdbbffa06213587fba46e894508e63e6bb14396fd7bbe48eb89143d5f952910410f10465e9396133eca850f86bbb38e1d98da48697df3ee5b1e8e2a4e4ace875f5827d50c15d5571448bb0193b0a7545df4d0d85cba07719b2547244efd0604f3da425e67ab7c9194a3a201acb5fdcf4dff07c1c9104c5339ccef1b6b06604bf6de76d7f5af07bff2a28e7f85270ae4e483a942ab97a2f4fd2ef183decc66bf269cf5bf15fe121ee34cfd6d7a67b2765feced1b27646fa0caa63c6402b1b4ab2181c9092a6bb281493753bc45117374ff234679da0fa1782ff79c4848e93d121c8df7ab79ab0887b1cf137a17629983801b88428af5d3baf6247777d4387ad51a1d7519f621893d0978d4cbe30985cb6129ea660a57836d834e2c2310bccafa85d9832a021f6d10f6823801e5fbafe727c883096affca7308b8cd570d3e3d2cceb820e0f428c64ec6dc707c4101e88db25dd70dd0060162934dba27bbef58b108347f73f768c82b9b95a7a57cfeca245a1f76ce5a3535b60e1aaa23e0b5d4e795202f631ca24b531002c728bb2e8335e71887e9832ba089135014de072db4c3f5f862b8ed147851bc992af89dc04a478f98b75871d40382937eadf4a70024732691c91b0130e60e2b569288f890b9d99c81ede34e0dbbce35a1fdfb8be22bb5fb37e3895ed6078824c517fc0481d9b82b64482b0442e3a7fde4ed14bb9ffdf53550ddb3f043881c55b1fa9fc5f01280253f5bf8ba55a2aa61947df01100a8e5d2f01d7edb58dd95655aa35a829de01565a20eda93be9bb08c322ff5ed12efab4d2af80b182b71a246d90f62870f633a926db62c505655b2c944057c1f2570f8697257ed3f159dfd1701d6ff20a22dc4625bdb7cefb5a1a3a4bfd2f74a961f1b336a65c551f0486470932a30ef9433f2807f6898d11080a6719e2d056389b5d28e1eed83ff6872c4d1de51a88ebe7212b8d6c0bf62e496138703bd69e5a3c53e21d1e72ef3fe65a83645704abaa4cf62723e63823b5d841fcb1a71fd8f58eca0a80369e39255cdbe70c421731296c70039a48a9f1101cb04a71648e6b86b40f05511235e292651d6e4eb42678c6e164dd2226c05285ff442b282160d517aab3411ee4886547cd6fbd1b540c3018475a8191979f78e8cc0fd8d0192ec43bfa00ca36d5d78759c464d7fafbc375876a67fc6d56d82f0fbd677c"}, {0xc}, {0xc, 0x8, {0x2, 0x4}}}}, @m_sample={0x60, 0x17, 0x0, 0x0, {{0xb}, {0x34, 0x2, 0x0, 0x1, [@TCA_SAMPLE_RATE={0x8, 0x3, 0x6}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x6, 0x4}}, @TCA_SAMPLE_TRUNC_SIZE={0x8}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x7, 0x1}}}}]}, @TCA_BASIC_EMATCHES={0xf0, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0xec, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x14, 0x2, 0x0, 0x0, {{0xbd3, 0x2, 0x6}, {0x9, 0x1, 0x1, '}'}}}, @TCF_EM_META={0x50, 0x2, 0x0, 0x0, {{0x0, 0x4, 0x4}, [@TCA_EM_META_HDR={0xc, 0x1, {{0xc, 0x40}, {0xce8, 0x0, 0x2}}}, @TCA_EM_META_LVALUE={0x1f, 0x2, [@TCF_META_TYPE_INT=0x7, @TCF_META_TYPE_VAR="768bae2147", @TCF_META_TYPE_VAR="e570", @TCF_META_TYPE_INT, @TCF_META_TYPE_INT=0x10000009, @TCF_META_TYPE_VAR="c4fbc8abf421b364"]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x5, 0x5, 0x2}, {0x1, 0x4, 0x2}}}, @TCA_EM_META_LVALUE={0x4}, @TCA_EM_META_RVALUE={0x8, 0x3, [@TCF_META_TYPE_INT]}]}}, @TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0xe, 0x3, 0x5}, {0x3, 0x7, 0x0, 0x80000001}}}, @TCF_EM_META={0x18, 0x1, 0x0, 0x0, {{0x0, 0x4, 0xff00}, [@TCA_EM_META_RVALUE={0xa, 0x3, [@TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_VAR="3be5"]}]}}, @TCF_EM_IPT={0x40, 0x1, 0x0, 0x0, {{0x2166, 0x9, 0x7}, [@TCA_EM_IPT_MATCH_DATA={0x23, 0x5, "3a4bdcf01ff127f90122a6e9532de0f04046b34d3c15b013c139c333de7d6c"}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x7}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x3}]}}, @TCF_EM_NBYTE={0x10, 0x2, 0x0, 0x0, {{0x7, 0x2, 0x3ff}, {0x6}}}]}]}]}}]}, 0x964}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) 35.048705466s ago: executing program 2 (id=1314): setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x7, 0x0, 0x0) socket(0xb, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) socket(0x0, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) close(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r3, &(0x7f0000000a80)={0x0, 0x0, 0x0}, 0x0) recvmsg(r3, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) 10.777255263s ago: executing program 5 (id=1372): prlimit64(0x0, 0xb, &(0x7f00000002c0)={0x80000000000, 0x3}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x6) getpid() prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bind$unix(0xffffffffffffffff, 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) mq_notify(r0, &(0x7f0000000000)={0x20000000, 0x4000000000003, 0x0, @thr={0x0, 0x0}}) ioctl$TIOCMSET(r0, 0x5418, &(0x7f0000000300)=0xde) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) ioctl$SNDCTL_DSP_SETFMT(r3, 0xc0045005, &(0x7f0000000000)=0x400) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, &(0x7f0000000380)=0xffffffff, 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x0, 0x4, 0xfff, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$int_in(r5, 0x5421, &(0x7f0000000240)=0x2) connect$vsock_stream(r5, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) shutdown(r5, 0x1) ioctl$BTRFS_IOC_SET_FEATURES(r1, 0x40309439, &(0x7f00000001c0)={0x1, 0x1, 0x8}) epoll_create(0x401) ioctl$BTRFS_IOC_SCRUB_CANCEL(r4, 0x941c, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32, @ANYBLOB="0000000000000000b7080000030000000000000000000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x5, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5}, 0x48) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x4}}, 0x26) 9.411063871s ago: executing program 5 (id=1376): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f00000001c0)=@security={'security\x00', 0x3a, 0x4, 0x338, 0xffffffff, 0x110, 0x0, 0x1a8, 0x110, 0xffffffff, 0x110, 0x2a0, 0x2a0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xb0, 0x110, 0x0, {}, [@common=@set={{0x40}}]}, @common=@SET={0x60}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@ip={@empty, @private, 0x0, 0x0, 'vlan0\x00', 'vlan0\x00'}, 0x0, 0x98, 0xf8, 0x0, {}, [@common=@ttl={{0x28}}]}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x398) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)=ANY=[@ANYBLOB="340000001000010400f924153cae64c75dfcff090000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800c0001006d6163767461700004000280"], 0x34}}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040)={[{0x2b, 'cpuset'}, {0x0, 'net_cls'}]}, 0x11) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'netdevsim0\x00'}) unshare(0x62040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x0, 0x803, 0x0) sendto(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(r4, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r5, 0x2, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32) r6 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r6, &(0x7f0000000000)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x2, 0x8, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x32) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r7) sendmsg$nl_generic(r7, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x0) recvmmsg(r7, &(0x7f0000001580)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) recvmmsg(r7, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000d00)=""/72, 0x48}, {&(0x7f00000015c0)=""/4096, 0x1000}, {&(0x7f0000000500)=""/137, 0x89}], 0x3}}], 0x3, 0x0, 0x0) 7.001285843s ago: executing program 0 (id=1379): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={r2, 0x8}, 0x8) 6.776173624s ago: executing program 0 (id=1380): open(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) ptrace$setsig(0x4203, 0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x15, 0x3, 0x0, &(0x7f0000003ff6)='syzkaller\x00', 0x0, 0xc3, &(0x7f00000002c0)=""/195}, 0x90) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x34, &(0x7f0000009000), 0x4) r4 = syz_open_procfs(0x0, &(0x7f0000000480)='net/ptype\x00') r5 = epoll_create(0x2) pipe(&(0x7f0000000400)={0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r6, &(0x7f0000000500)) epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, r6, &(0x7f0000000100)={0x60000011}) close_range(r4, 0xffffffffffffffff, 0x0) 5.353753534s ago: executing program 0 (id=1383): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000140)={0x1, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x7fc00101}]}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') preadv(r1, &(0x7f0000000640)=[{&(0x7f0000000140)=""/134, 0x86}], 0x1, 0x0, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r3 = socket(0x0, 0x0, 0x0) r4 = socket$inet6(0xa, 0x800000000000002, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000d80)=ANY=[@ANYBLOB="b4050000200080006110600000000000c60000000000000095000000000000009f33ef60916e6e893f1eeb0be2566cd072f5b89c3043c47c896ce0bce66a245ad98a6f77ef26dcca5582054d54d53cd2b6db714e4b94bdae214fa68a0557eb3c5ca683a4b6fc89398f2b90007cfa6fa26fa7a34700de60beac671e8e8fdecb03588aa623fa71f871ab5c2ff88afc6002084e5b52710aeee835cf0d78e45f70983826fb8579c1fb47d2c5553d2ccb5fc5b51fe6b174ebd9907dcff414ed55b0d18a93ee341ab59016f81860324b8003"], 0x0, 0x4, 0xc3, &(0x7f000000cf3d)=""/195}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x4, 0x4, 0x8, 0x50}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@cgroup=r2, r5, 0x26}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0xa, 0xc, &(0x7f0000000780)=ANY=[@ANYRES16, @ANYRESDEC, @ANYRES8=r0, @ANYRESHEX, @ANYRESOCT, @ANYRES8, @ANYRES64, @ANYBLOB="1e69fa67ccd8929d8e26769dc0267e3aa86653a07ab492ac7d6ce554a47f70874aca3731419e3f41d65f7e003b82f42a432921187a07bca1ff82897376b38fdd609408e734dbffe08f2ff03209e541325a0f1eca3e7f2c1a2a8c8fea8f3b3fd0e9bfe6b3ad175492ae19b6c1de85706fe011300544236aadb503775bcb4267b68070f8b7f90ed1ef6a06d0c2ed00e5a6ad213a41e5f390b3585e4d1ee971c4"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') preadv(r6, &(0x7f0000000300)=[{&(0x7f0000000580)=""/198, 0xc6}], 0x1, 0x0, 0x0) r7 = fsopen(&(0x7f0000000100)='tmpfs\x00', 0x0) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r3, 0x89f4, &(0x7f0000000280)={'sit0\x00', &(0x7f00000000c0)={@broadcast, 0x1, 0x0, 0x30, 0x0, [{@private}, {@local}, {@loopback}]}}) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) fsmount(r7, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r7, 0x7, 0x0, 0x0, 0x0) sendmmsg$inet6(r4, &(0x7f0000000e00)=[{{&(0x7f0000000080)={0xa, 0x4e25, 0x0, @local, 0x4}, 0x5c, 0x0}}], 0x1, 0x0) unshare(0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/kernel/fscaps', 0x0, 0x0) 5.338586763s ago: executing program 3 (id=1384): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a09040000000000000000070000000908010073797a3000000000f7ff010073797a320000000020000000080a0d000000000000000000020000000900010073797a3000000000dc000000020a01030000000000000000002400000c0004400000000000000005090001"], 0x150}}, 0x0) 5.119465249s ago: executing program 3 (id=1385): bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$pptp(0x18, 0x1, 0x2) socketpair$unix(0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) setsockopt(0xffffffffffffffff, 0x84, 0x0, &(0x7f00000002c0), 0x0) setsockopt$inet_sctp6_SCTP_AUTH_KEY(0xffffffffffffffff, 0x84, 0x17, &(0x7f0000000240)=ANY=[@ANYRES32=0x0, @ANYBLOB="01005700fdd572bcd1a84cbb007dd38dab00"], 0x9) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f00000001c0), &(0x7f0000000380)=0x8) sendto$inet6(0xffffffffffffffff, &(0x7f00000000c0)="eb", 0x1, 0x0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}}, 0x1c) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000080)=[0x0], 0x0, 0x0, 0x0, 0x1}) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000080)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f0000000480)={0x0, 0x0, r4, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000200)={0x0, 0x0, r2, r5, 0x500, 0x0, 0x0, 0x7, {0x800, 0x1, 0x3, 0x4, 0x6, 0x0, 0x2, 0x9, 0x9, 0x9, 0x0, 0x0, 0x0, 0x0, "13757ddc688782636517333c0303dace01a10969cc9f4efe748fb63ea78c9aef"}}) io_setup(0xff, &(0x7f0000000300)=0x0) r7 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) io_submit(r6, 0x1, &(0x7f0000000440)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, r7, &(0x7f0000000040)="7535850efb897985c79d9de7f7d1", 0xe, 0x2}]) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x23, &(0x7f0000000340)={0x0, 0x5}, 0x8) syz_open_dev$vcsu(&(0x7f0000000100), 0x74ec, 0x42ac80) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r8 = syz_usb_connect(0x0, 0x24, &(0x7f0000000280)={{0x12, 0x1, 0x0, 0x70, 0x3a, 0xc0, 0x20, 0x458, 0x7006, 0x6991, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xc7, 0x76, 0x98}}]}}]}}, 0x0) syz_usb_control_io(r8, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r8, 0x0, 0x0) 4.324366994s ago: executing program 0 (id=1386): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000040)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_STATUS32(0xffffffffffffffff, 0xc0f85403, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x118, 0x0, 0x0, 0x4) socket(0x1e, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r2, 0x40045532, &(0x7f0000000580)) syz_open_dev$sndpcmp(&(0x7f0000000b00), 0x0, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000000)=0xfff) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r3, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0x18ff2}], 0x1, 0x0, 0x1000) 3.269051594s ago: executing program 0 (id=1387): getpeername(0xffffffffffffffff, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000000000000000000049500000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r3}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) r4 = userfaultfd(0x801) ioctl$UFFDIO_API(r4, 0xc018aa3f, 0x0) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_CONTINUE(r4, 0xc020aa08, &(0x7f0000000500)={{&(0x7f0000565000/0x1000)=nil, 0x1000}}) 3.017039343s ago: executing program 3 (id=1388): sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) socket$netlink(0x10, 0x3, 0x0) openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) 2.615193231s ago: executing program 5 (id=1389): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={r2, 0x8}, 0x8) 2.176126888s ago: executing program 0 (id=1390): setsockopt$inet_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0xc, &(0x7f0000000040)=@gcm_256={{}, "a2879a2323b8254e", "86dd270f98c60203791922c5acce09cc4c1afd8c02f79101be87e9572e7900", "770c937d", '\x00\x00\x00\a\x00'}, 0x38) symlink(0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, "ff00f7000000000000000000af88008300"}) r6 = syz_open_pts(r5, 0x141601) write(r6, &(0x7f0000000000)="d5", 0xfffffedf) ioctl$TCSETSF(r6, 0x5404, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0xfe, "78a4a500000003ffff40ffffffdf00"}) r7 = semget$private(0x0, 0x1, 0x400) semop(r7, &(0x7f0000001040)=[{0x2, 0xbfc7, 0x800}], 0x1) close_range(r5, 0xffffffffffffffff, 0x0) 1.968057347s ago: executing program 5 (id=1391): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'dvmrp1\x00', 0x2}) recvmsg$kcm(r0, &(0x7f0000001080)={0x0, 0x0, 0x0}, 0x0) 1.729506561s ago: executing program 3 (id=1392): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6", 0x10) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000e00)=[{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000440)="d4e666e247641d8d52a3ef9c12c8178a747bbd0977ea55bea644a3797cd4bd60", 0x20}], 0x1}], 0x1, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000001400)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000004c0)=""/74, 0x4a}], 0x1}, 0x0) 1.495730618s ago: executing program 3 (id=1393): open(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) ptrace$setsig(0x4203, 0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x15, 0x3, &(0x7f0000000900)=ANY=[], &(0x7f0000003ff6)='syzkaller\x00', 0x0, 0xc3, &(0x7f00000002c0)=""/195}, 0x90) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x34, &(0x7f0000009000), 0x4) r4 = syz_open_procfs(0x0, &(0x7f0000000480)='net/ptype\x00') r5 = epoll_create(0x2) pipe(&(0x7f0000000400)={0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r6, &(0x7f0000000500)) epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, r6, &(0x7f0000000100)={0x60000011}) close_range(r4, 0xffffffffffffffff, 0x0) 1.005872499s ago: executing program 5 (id=1394): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x6, 0x8, 0x1}, 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x3}, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000d40)=ANY=[@ANYBLOB="180000000000e3ff000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000700000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r0}, 0x10) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0xa, 0x9, 0x8, 0x2}, 0x48) 149.352949ms ago: executing program 5 (id=1395): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000140)={0x1, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x7fc00101}]}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') preadv(r1, &(0x7f0000000640)=[{&(0x7f0000000140)=""/134, 0x86}], 0x1, 0x0, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r3 = socket(0x0, 0x0, 0x0) r4 = socket$inet6(0xa, 0x800000000000002, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000d80)=ANY=[@ANYBLOB="b4050000200080006110600000000000c60000000000000095000000000000009f33ef60916e6e893f1eeb0be2566cd072f5b89c3043c47c896ce0bce66a245ad98a6f77ef26dcca5582054d54d53cd2b6db714e4b94bdae214fa68a0557eb3c5ca683a4b6fc89398f2b90007cfa6fa26fa7a34700de60beac671e8e8fdecb03588aa623fa71f871ab5c2ff88afc6002084e5b52710aeee835cf0d78e45f70983826fb8579c1fb47d2c5553d2ccb5fc5b51fe6b174ebd9907dcff414ed55b0d18a93ee341ab59016f81860324b8003"], 0x0, 0x4, 0xc3, &(0x7f000000cf3d)=""/195}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x4, 0x4, 0x8, 0x50}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@cgroup=r2, r5, 0x26}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0xa, 0xc, &(0x7f0000000780)=ANY=[@ANYRES16, @ANYRESDEC, @ANYRES8=r0, @ANYRESHEX, @ANYRESOCT, @ANYRES8, @ANYRES64, @ANYBLOB="1e69fa67ccd8929d8e26769dc0267e3aa86653a07ab492ac7d6ce554a47f70874aca3731419e3f41d65f7e003b82f42a432921187a07bca1ff82897376b38fdd609408e734dbffe08f2ff03209e541325a0f1eca3e7f2c1a2a8c8fea8f3b3fd0e9bfe6b3ad175492ae19b6c1de85706fe011300544236aadb503775bcb4267b68070f8b7f90ed1ef6a06d0c2ed00e5a6ad213a41e5f390b3585e4d1ee971c4"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') preadv(r6, &(0x7f0000000300)=[{&(0x7f0000000580)=""/198, 0xc6}], 0x1, 0x0, 0x0) r7 = fsopen(&(0x7f0000000100)='tmpfs\x00', 0x0) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r3, 0x89f4, &(0x7f0000000280)={'sit0\x00', &(0x7f00000000c0)={@broadcast, 0x1, 0x0, 0x30, 0x0, [{@private}, {@local}, {@loopback}]}}) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) fsmount(r7, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r7, 0x7, 0x0, 0x0, 0x0) sendmmsg$inet6(r4, &(0x7f0000000e00)=[{{&(0x7f0000000080)={0xa, 0x4e25, 0x0, @local, 0x4}, 0x5c, 0x0}}], 0x1, 0x0) unshare(0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/kernel/fscaps', 0x0, 0x0) 0s ago: executing program 3 (id=1396): close(0xffffffffffffffff) close(0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='GPL\x00'}, 0x90) prctl$PR_SET_IO_FLUSHER(0x41, 0x3) r0 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0x0) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) r3 = pidfd_getfd(r2, r2, 0x0) r4 = fcntl$dupfd(r0, 0x0, r3) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x200000f, 0x12, r4, 0x0) kernel console output (not intermixed with test programs): 702.905384][ T9349] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 703.339134][ T9349] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 703.354698][ T9349] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 703.366112][ T9349] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 703.380089][ T9349] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 704.090756][ T9485] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 704.531948][ T5249] Bluetooth: hci0: command tx timeout [ 704.596756][ T9636] 8021q: adding VLAN 0 to HW filter on device bond0 [ 705.015134][ T139] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 705.046074][ T139] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 705.195298][ T29] audit: type=1800 audit(1722064082.452:2): pid=9857 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.904" name="/" dev="fuse" ino=1 res=0 errno=0 [ 705.409870][ T9636] 8021q: adding VLAN 0 to HW filter on device team0 [ 705.555122][ T12] bridge_slave_1: left allmulticast mode [ 705.560836][ T12] bridge_slave_1: left promiscuous mode [ 705.593810][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 705.619418][ T12] bridge_slave_0: left allmulticast mode [ 705.641553][ T12] bridge_slave_0: left promiscuous mode [ 705.647466][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 706.440594][ T9864] loop0: detected capacity change from 0 to 32768 [ 706.464538][ T9864] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.905 (9864) [ 706.506431][ T9864] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 706.537379][ T9864] BTRFS info (device loop0): using sha256 (sha256-ni) checksum algorithm [ 706.603944][ T9864] BTRFS info (device loop0): using free-space-tree [ 706.614569][ T5249] Bluetooth: hci0: command tx timeout [ 706.650090][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 706.764259][ T9884] loop1: detected capacity change from 0 to 64 [ 706.782301][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 706.839894][ T12] bond0 (unregistering): Released all slaves [ 707.294971][ T4870] bridge0: port 1(bridge_slave_0) entered blocking state [ 707.302308][ T4870] bridge0: port 1(bridge_slave_0) entered forwarding state [ 707.356880][ T4870] bridge0: port 2(bridge_slave_1) entered blocking state [ 707.364180][ T4870] bridge0: port 2(bridge_slave_1) entered forwarding state [ 707.671600][ T12] hsr_slave_0: left promiscuous mode [ 707.769615][ T12] hsr_slave_1: left promiscuous mode [ 707.808857][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 707.862658][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 707.977503][ T12] veth1_vlan: left promiscuous mode [ 708.021699][ T12] veth0_vlan: left promiscuous mode [ 708.117531][ T5246] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 708.133334][ T5246] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 708.146926][ T5246] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 708.181298][ T5246] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 708.203683][ T5246] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 708.212191][ T5246] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 708.586708][ T9894] hfs: keylen 94 too large [ 708.587618][ T8020] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 708.694893][ T5246] Bluetooth: hci0: command tx timeout [ 709.567645][ T12] team0 (unregistering): Port device team_slave_1 removed [ 709.627890][ T12] team0 (unregistering): Port device team_slave_0 removed [ 710.301843][ T5246] Bluetooth: hci4: command tx timeout [ 710.369962][ T9836] chnl_net:caif_netlink_parms(): no params data found [ 710.626444][ T9485] veth0_vlan: entered promiscuous mode [ 710.741349][ T9898] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 710.777475][ T5246] Bluetooth: hci0: command tx timeout [ 710.817369][ T9485] veth1_vlan: entered promiscuous mode [ 711.059087][ T9836] bridge0: port 1(bridge_slave_0) entered blocking state [ 711.066696][ T9836] bridge0: port 1(bridge_slave_0) entered disabled state [ 711.074933][ T9836] bridge_slave_0: entered allmulticast mode [ 711.095566][ T9836] bridge_slave_0: entered promiscuous mode [ 711.124443][ T9836] bridge0: port 2(bridge_slave_1) entered blocking state [ 711.139746][ T9836] bridge0: port 2(bridge_slave_1) entered disabled state [ 711.147477][ T9836] bridge_slave_1: entered allmulticast mode [ 711.167260][ T9836] bridge_slave_1: entered promiscuous mode [ 711.383221][ T9836] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 711.528480][ T9836] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 711.661988][ C0] eth0: bad gso: type: 1, size: 1408 [ 711.845234][ T9836] team0: Port device team_slave_0 added [ 711.871397][ T9485] veth0_macvtap: entered promiscuous mode [ 711.922899][ T9836] team0: Port device team_slave_1 added [ 712.177715][ T9485] veth1_macvtap: entered promiscuous mode [ 712.244642][ T9836] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 712.256706][ T9836] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 712.297028][ T9836] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 712.328398][ T9836] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 712.340328][ T9836] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 712.372407][ T5246] Bluetooth: hci4: command tx timeout [ 712.390101][ T9836] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 712.662457][ T12] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 712.819382][ T9924] loop0: detected capacity change from 0 to 32768 [ 712.844090][ T9924] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.917 (9924) [ 712.870693][ T9924] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 712.878360][ T12] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 712.881968][ T9924] BTRFS info (device loop0): using sha256 (sha256-ni) checksum algorithm [ 712.900629][ T9924] BTRFS info (device loop0): using free-space-tree [ 713.076697][ T12] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 713.372180][ T9836] hsr_slave_0: entered promiscuous mode [ 713.403574][ T9836] hsr_slave_1: entered promiscuous mode [ 713.433386][ T9836] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 713.440991][ T9836] Cannot create hsr debugfs directory [ 713.666245][ T12] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 714.373991][ T9891] chnl_net:caif_netlink_parms(): no params data found [ 714.466696][ T9485] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 714.481544][ T5246] Bluetooth: hci4: command tx timeout [ 714.521615][ T9485] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 714.561742][ T9485] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 714.611836][ T9485] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 714.631482][ T9485] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 714.659033][ T9485] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 714.669027][ T9485] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 714.679637][ T9485] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 714.691286][ T9485] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 714.721505][ T9485] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 714.735807][ T9485] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 714.767613][ T9485] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 714.781599][ T9485] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 714.811467][ T9485] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 714.824882][ T8020] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 714.845604][ T9485] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 714.891534][ T9485] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 714.921635][ T9485] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 714.938652][ T9485] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 714.951149][ T9485] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 714.961705][ T9485] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 714.973194][ T9485] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 715.021017][ T9485] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 715.542786][ T9636] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 715.607087][ T9485] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 715.636298][ T9485] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 715.645882][ T9485] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 715.661845][ T9485] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 716.328085][ T9891] bridge0: port 1(bridge_slave_0) entered blocking state [ 716.362745][ T9891] bridge0: port 1(bridge_slave_0) entered disabled state [ 716.370115][ T9891] bridge_slave_0: entered allmulticast mode [ 716.391339][ T9891] bridge_slave_0: entered promiscuous mode [ 716.532956][ T5246] Bluetooth: hci4: command tx timeout [ 716.547479][ T9891] bridge0: port 2(bridge_slave_1) entered blocking state [ 716.582620][ T9891] bridge0: port 2(bridge_slave_1) entered disabled state [ 716.626758][ T9891] bridge_slave_1: entered allmulticast mode [ 716.640998][ T9891] bridge_slave_1: entered promiscuous mode [ 717.704879][ T9979] nbd: must specify a size in bytes for the device [ 717.911228][ T9981] loop0: detected capacity change from 0 to 128 [ 717.933441][ T9981] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 717.967557][ T9981] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 718.037101][ T12] bridge_slave_1: left allmulticast mode [ 718.058960][ T12] bridge_slave_1: left promiscuous mode [ 718.077460][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 718.101209][ T12] bridge_slave_0: left allmulticast mode [ 718.124799][ T12] bridge_slave_0: left promiscuous mode [ 718.130720][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 718.825375][ T9992] fuse: Bad value for 'fd' [ 719.508725][ T5249] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 719.519698][ T5249] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 719.527998][ T5249] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 719.548375][ T5249] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 719.564478][ T5249] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 719.577970][ T5249] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 720.161729][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 720.218060][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 720.263405][ T12] bond0 (unregistering): Released all slaves [ 720.559339][ T9891] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 720.659162][ T9891] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 721.118475][ T9891] team0: Port device team_slave_0 added [ 721.161403][ T9891] team0: Port device team_slave_1 added [ 721.702018][ T9891] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 721.709016][ T9891] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 721.735032][ C0] vkms_vblank_simulate: vblank timer overrun [ 721.777127][ T9891] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 721.908497][ T9891] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 721.935999][ T9891] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 721.966230][ T9891] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 721.977440][ T5249] Bluetooth: hci6: command tx timeout [ 722.123768][ T12] hsr_slave_0: left promiscuous mode [ 722.137631][ T12] hsr_slave_1: left promiscuous mode [ 722.148785][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 722.156905][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 722.234136][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 722.248492][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 722.443118][ T12] veth1_macvtap: left promiscuous mode [ 722.497368][ T12] veth0_macvtap: left promiscuous mode [ 722.526070][ T12] veth1_vlan: left promiscuous mode [ 722.555830][ T12] veth0_vlan: left promiscuous mode [ 724.054804][ T5249] Bluetooth: hci6: command tx timeout [ 724.226888][ T12] team0 (unregistering): Port device team_slave_1 removed [ 724.293670][T10026] loop0: detected capacity change from 0 to 32768 [ 724.334729][ T12] team0 (unregistering): Port device team_slave_0 removed [ 725.280587][ T9891] hsr_slave_0: entered promiscuous mode [ 725.292230][ T9891] hsr_slave_1: entered promiscuous mode [ 725.309940][ T9891] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 725.317910][ T9891] Cannot create hsr debugfs directory [ 726.201846][ T5249] Bluetooth: hci6: command tx timeout [ 726.305457][ T9636] veth0_vlan: entered promiscuous mode [ 727.458345][ T9836] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 727.618053][T10047] netlink: 16 bytes leftover after parsing attributes in process `syz.0.948'. [ 727.641895][ T9836] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 727.675891][ T9636] veth1_vlan: entered promiscuous mode [ 727.885876][ T9836] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 727.928024][ T9836] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 728.090536][T10053] netlink: 20 bytes leftover after parsing attributes in process `syz.1.951'. [ 728.298713][ T5249] Bluetooth: hci6: command tx timeout [ 729.728119][ T9636] veth0_macvtap: entered promiscuous mode [ 730.093128][ T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 730.398711][ T9636] veth1_macvtap: entered promiscuous mode [ 731.208424][ T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 731.545865][ T9996] chnl_net:caif_netlink_parms(): no params data found [ 731.798049][ T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 731.978509][ T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 732.495595][ T9636] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 732.522013][ T9636] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 732.534102][ T9636] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 732.545356][ T9636] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 732.555969][ T9636] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 732.569832][ T9636] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 732.581011][ T9636] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 732.593482][ T9636] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 732.603435][ T9636] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 732.619935][ T9636] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 732.638446][ T9636] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 732.928275][ T9996] bridge0: port 1(bridge_slave_0) entered blocking state [ 732.963310][ T9996] bridge0: port 1(bridge_slave_0) entered disabled state [ 732.981751][ T9996] bridge_slave_0: entered allmulticast mode [ 733.018026][ T9996] bridge_slave_0: entered promiscuous mode [ 733.135317][ T9636] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 733.148899][ T9636] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 733.159072][ T9636] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 733.170099][ T9636] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 733.180401][ T9636] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 733.192187][ T9636] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 733.212027][ T9636] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 733.224688][ T9636] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 733.241596][ T9636] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 733.252555][ T9636] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 733.266238][ T9636] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 733.281371][ T9996] bridge0: port 2(bridge_slave_1) entered blocking state [ 733.289075][ T9996] bridge0: port 2(bridge_slave_1) entered disabled state [ 733.302709][ T9996] bridge_slave_1: entered allmulticast mode [ 733.321770][ T9996] bridge_slave_1: entered promiscuous mode [ 733.647517][ T9996] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 733.726680][ T9636] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 733.751713][ T9636] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 733.760478][ T9636] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 733.791658][ T9636] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 733.892321][ T9996] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 733.978887][ T12] bridge_slave_1: left allmulticast mode [ 733.994259][ T12] bridge_slave_1: left promiscuous mode [ 734.000177][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 734.028405][ T12] bridge_slave_0: left allmulticast mode [ 734.036454][ T12] bridge_slave_0: left promiscuous mode [ 734.042598][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 735.019068][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 735.036401][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 735.052318][ T12] bond0 (unregistering): Released all slaves [ 735.382956][ T9996] team0: Port device team_slave_0 added [ 735.593624][ T9891] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 735.647225][ T9996] team0: Port device team_slave_1 added [ 735.776021][ T9996] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 735.792613][ T9996] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 735.851515][ T9996] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 735.880640][ T9836] 8021q: adding VLAN 0 to HW filter on device bond0 [ 735.912376][ T9891] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 735.934579][T10110] netlink: 16 bytes leftover after parsing attributes in process `syz.1.958'. [ 735.994132][ T9996] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 736.001152][ T9996] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 736.047162][ T9996] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 736.124374][ T9891] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 736.158953][ T12] hsr_slave_0: left promiscuous mode [ 736.166446][ T12] hsr_slave_1: left promiscuous mode [ 736.179460][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 736.187453][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 736.209442][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 736.217516][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 736.262669][ T12] veth1_macvtap: left promiscuous mode [ 736.271772][ T12] veth0_macvtap: left promiscuous mode [ 736.277625][ T12] veth1_vlan: left promiscuous mode [ 736.311704][ T12] veth0_vlan: left promiscuous mode [ 736.636996][T10118] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 736.658166][T10118] overlayfs: failed to set xattr on upper [ 736.664258][T10118] overlayfs: ...falling back to redirect_dir=nofollow. [ 736.678022][T10118] overlayfs: ...falling back to index=off. [ 736.700131][T10118] overlayfs: ...falling back to uuid=null. [ 740.680676][ T5246] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 740.700430][ T5246] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 740.726005][ T5246] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 740.744820][ T5246] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 740.770875][ T5246] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 740.779972][ T5246] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 740.863672][T10131] loop1: detected capacity change from 0 to 32768 [ 740.883227][T10131] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.964 (10131) [ 740.924285][T10131] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 740.946204][T10131] BTRFS info (device loop1): using sha256 (sha256-ni) checksum algorithm [ 740.958601][T10131] BTRFS info (device loop1): using free-space-tree [ 741.039498][ T12] team0 (unregistering): Port device team_slave_1 removed [ 741.153244][ T12] team0 (unregistering): Port device team_slave_0 removed [ 741.618424][ T8246] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 742.453997][ T9891] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 742.837702][ T9996] hsr_slave_0: entered promiscuous mode [ 742.863853][ T5246] Bluetooth: hci2: command tx timeout [ 742.883897][ T9996] hsr_slave_1: entered promiscuous mode [ 742.900853][ T9996] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 742.917481][ T9996] Cannot create hsr debugfs directory [ 743.510391][ T9836] 8021q: adding VLAN 0 to HW filter on device team0 [ 743.929434][T10168] netlink: 16 bytes leftover after parsing attributes in process `syz.0.969'. [ 744.316172][ T4870] bridge0: port 1(bridge_slave_0) entered blocking state [ 744.323548][ T4870] bridge0: port 1(bridge_slave_0) entered forwarding state [ 744.338660][ T4870] bridge0: port 2(bridge_slave_1) entered blocking state [ 744.345994][ T4870] bridge0: port 2(bridge_slave_1) entered forwarding state [ 744.698789][T10182] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 744.721561][T10182] overlayfs: failed to set xattr on upper [ 744.771357][T10182] overlayfs: ...falling back to redirect_dir=nofollow. [ 744.802475][T10182] overlayfs: ...falling back to index=off. [ 744.808382][T10182] overlayfs: ...falling back to uuid=null. [ 744.932434][ T5246] Bluetooth: hci2: command tx timeout [ 744.990544][T10188] loop0: detected capacity change from 0 to 64 [ 745.568663][T10192] hfs: keylen 94 too large [ 746.172349][ T35] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 746.817249][ T35] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 747.012942][ T5246] Bluetooth: hci2: command tx timeout [ 747.236365][ T9891] 8021q: adding VLAN 0 to HW filter on device bond0 [ 748.016265][ T35] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 748.325246][ T35] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 748.643068][T10134] chnl_net:caif_netlink_parms(): no params data found [ 748.817242][ T9891] 8021q: adding VLAN 0 to HW filter on device team0 [ 749.012671][ T7246] bridge0: port 1(bridge_slave_0) entered blocking state [ 749.019976][ T7246] bridge0: port 1(bridge_slave_0) entered forwarding state [ 749.080760][ T9836] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 749.092382][ T5246] Bluetooth: hci2: command tx timeout [ 749.092618][T10134] bridge0: port 1(bridge_slave_0) entered blocking state [ 749.109016][T10134] bridge0: port 1(bridge_slave_0) entered disabled state [ 749.132099][T10134] bridge_slave_0: entered allmulticast mode [ 749.140320][T10134] bridge_slave_0: entered promiscuous mode [ 749.428378][ T9996] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 749.515337][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 749.522663][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 749.641950][T10134] bridge0: port 2(bridge_slave_1) entered blocking state [ 749.656525][T10134] bridge0: port 2(bridge_slave_1) entered disabled state [ 749.666209][T10134] bridge_slave_1: entered allmulticast mode [ 749.676504][T10134] bridge_slave_1: entered promiscuous mode [ 749.845127][ T9996] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 749.886768][T10230] netlink: 16 bytes leftover after parsing attributes in process `syz.0.979'. [ 749.929061][T10134] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 749.996301][T10134] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 750.051257][ T9996] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 750.240759][T10237] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 750.258985][T10237] overlayfs: failed to set xattr on upper [ 750.270790][T10237] overlayfs: ...falling back to redirect_dir=nofollow. [ 750.279855][T10237] overlayfs: ...falling back to index=off. [ 750.289468][T10237] overlayfs: ...falling back to uuid=null. [ 750.313647][T10134] team0: Port device team_slave_0 added [ 750.336116][ T35] bridge_slave_1: left allmulticast mode [ 750.366233][ T35] bridge_slave_1: left promiscuous mode [ 750.382129][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 750.420827][ T35] bridge_slave_0: left allmulticast mode [ 750.433393][ T35] bridge_slave_0: left promiscuous mode [ 750.482472][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 752.540451][ T5289] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 752.655103][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 752.668604][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 752.685539][ T35] bond0 (unregistering): Released all slaves [ 752.713622][ T9996] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 752.760754][ T5289] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 752.761666][T10134] team0: Port device team_slave_1 added [ 752.779334][ T5289] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 752.807127][ T5289] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 752.828705][ T5289] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 752.848264][ T5289] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 752.873005][ T5289] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 752.898519][ T5289] usb 2-1: Manufacturer: syz [ 752.919632][ T5289] usb 2-1: config 0 descriptor?? [ 752.974909][ T35] hsr_slave_0: left promiscuous mode [ 752.983677][ T35] hsr_slave_1: left promiscuous mode [ 753.011904][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 753.022707][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 753.080545][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 753.103029][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 753.208213][ T35] veth1_macvtap: left promiscuous mode [ 753.233814][ T35] veth0_macvtap: left promiscuous mode [ 753.239686][ T35] veth1_vlan: left promiscuous mode [ 753.247322][ T35] veth0_vlan: left promiscuous mode [ 753.368392][ T5289] usbhid 2-1:0.0: can't add hid device: -71 [ 753.394075][ T5289] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 753.432017][ T5289] usb 2-1: USB disconnect, device number 15 [ 753.575804][T10270] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 753.583508][T10270] overlayfs: failed to set xattr on upper [ 753.589351][T10270] overlayfs: ...falling back to redirect_dir=nofollow. [ 753.598971][T10270] overlayfs: ...falling back to index=off. [ 753.608767][T10270] overlayfs: ...falling back to uuid=null. [ 754.208960][T10276] ubi0: attaching mtd0 [ 754.244847][T10276] ubi0: scanning is finished [ 754.250895][T10276] ubi0: empty MTD device detected [ 754.384400][T10276] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 754.392369][T10276] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 754.399711][T10276] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 754.407022][T10276] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 754.414899][T10276] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 754.422042][T10276] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 754.436011][T10276] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 2300495591 [ 754.446492][T10276] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 754.462859][T10277] ubi0: background thread "ubi_bgt0d" started, PID 10277 [ 754.654531][ T35] team0 (unregistering): Port device team_slave_1 removed [ 754.786522][ T35] team0 (unregistering): Port device team_slave_0 removed [ 755.324151][T10279] loop1: detected capacity change from 0 to 32768 [ 755.351748][T10279] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.992 (10279) [ 755.375922][T10279] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 755.391798][T10279] BTRFS info (device loop1): using sha256 (sha256-ni) checksum algorithm [ 755.400302][T10279] BTRFS info (device loop1): using free-space-tree [ 755.673154][T10134] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 755.680515][T10134] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 755.710586][T10134] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 755.736760][T10134] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 755.758362][T10134] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 755.774079][ T8246] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 755.796122][T10134] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 755.838152][T10274] netlink: 16 bytes leftover after parsing attributes in process `syz.0.990'. [ 756.465903][T10134] hsr_slave_0: entered promiscuous mode [ 756.525721][T10134] hsr_slave_1: entered promiscuous mode [ 756.556478][T10134] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 756.918748][T10134] Cannot create hsr debugfs directory [ 757.202799][ T1266] ieee802154 phy0 wpan0: encryption failed: -22 [ 757.209198][ T1266] ieee802154 phy1 wpan1: encryption failed: -22 [ 757.822685][T10305] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 759.197513][T10323] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 759.204651][T10323] overlayfs: failed to set xattr on upper [ 759.211393][T10323] overlayfs: ...falling back to redirect_dir=nofollow. [ 759.244200][T10323] overlayfs: ...falling back to index=off. [ 759.254313][T10323] overlayfs: ...falling back to uuid=null. [ 759.295830][ T9836] veth0_vlan: entered promiscuous mode [ 759.433488][ T9836] veth1_vlan: entered promiscuous mode [ 759.619568][ T9891] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 759.921664][ T5292] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 760.000839][ T9996] 8021q: adding VLAN 0 to HW filter on device bond0 [ 760.146499][ T5292] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 760.148709][ T9836] veth0_macvtap: entered promiscuous mode [ 760.201386][ T5292] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 760.241578][ T5292] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 760.271359][ T9996] 8021q: adding VLAN 0 to HW filter on device team0 [ 760.281514][ T5292] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 760.327878][ T9836] veth1_macvtap: entered promiscuous mode [ 760.353320][ T5292] usb 1-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 760.371572][ T5292] usb 1-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 760.397114][ T5292] usb 1-1: Manufacturer: syz [ 760.419101][ T5292] usb 1-1: config 0 descriptor?? [ 760.519562][ T5289] bridge0: port 1(bridge_slave_0) entered blocking state [ 760.526901][ T5289] bridge0: port 1(bridge_slave_0) entered forwarding state [ 760.614917][T10317] loop1: detected capacity change from 0 to 32768 [ 760.631842][ T5289] bridge0: port 2(bridge_slave_1) entered blocking state [ 760.639176][ T5289] bridge0: port 2(bridge_slave_1) entered forwarding state [ 760.652267][T10317] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.997 (10317) [ 760.698504][T10317] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 760.745477][T10134] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 760.756275][T10317] BTRFS info (device loop1): using sha256 (sha256-ni) checksum algorithm [ 760.801764][T10317] BTRFS info (device loop1): using free-space-tree [ 760.828703][T10134] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 760.890310][ T5292] usbhid 1-1:0.0: can't add hid device: -71 [ 760.903815][T10134] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 760.913274][ T5292] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 760.927517][ T5292] usb 1-1: USB disconnect, device number 12 [ 761.002033][T10134] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 761.118064][ T9836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 761.171663][ T9836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 761.201549][ T9836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 761.231499][ T9836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 761.252535][ T9836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 761.271504][ T9836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 761.283239][ T9836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 761.310547][ T9836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 761.345074][ T9836] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 761.534348][ T9836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 761.602345][ T9836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 761.623652][ T8246] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 761.656120][ T9836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 761.679652][ T9836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 761.711962][ T9836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 761.738250][ T9836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 761.772746][ T9836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 761.793974][ T9836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 761.837878][ T9836] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 761.954684][ T4870] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 762.191884][ T4870] usb 1-1: Using ep0 maxpacket: 8 [ 762.204289][ T4870] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 762.281677][ T4870] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 762.319905][ T9891] veth0_vlan: entered promiscuous mode [ 762.345775][ T4870] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 762.363839][ T4870] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 762.393393][ T4870] usb 1-1: Product: syz [ 762.401828][ T4870] usb 1-1: Manufacturer: syz [ 762.406460][ T4870] usb 1-1: SerialNumber: syz [ 762.466725][ T4870] usb 1-1: config 0 descriptor?? [ 762.575278][ T9891] veth1_vlan: entered promiscuous mode [ 762.952775][ T9891] veth0_macvtap: entered promiscuous mode [ 763.035869][ T9891] veth1_macvtap: entered promiscuous mode [ 763.227455][T10134] 8021q: adding VLAN 0 to HW filter on device bond0 [ 763.315547][ T9891] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 763.354138][ T9891] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 763.362245][ T5249] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 763.375595][ T5249] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 763.380851][ T9891] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 763.415939][ T5249] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 763.437931][ T9891] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 763.450537][ T5249] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 763.471788][ T5249] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 763.480868][ T5249] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 763.540369][ T9891] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 763.591598][ T9891] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 763.620082][ T9891] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 763.630700][ T9891] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 763.643878][ T9891] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 763.657593][ T9891] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 763.684708][ T9891] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 763.724666][ T9891] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 763.754931][ T9891] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 763.765112][ T9891] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 763.775913][ T9891] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 763.788548][ T9891] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 763.799071][ T9891] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 763.809194][ T9891] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 763.820581][ T9891] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 763.833410][ T9891] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 763.847745][ T9891] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 763.863294][ T9891] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 763.910861][ T9891] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 763.929431][ T9891] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 763.940082][ T9891] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 763.963658][ T9891] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 764.060718][T10390] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1002'. [ 764.394100][T10134] 8021q: adding VLAN 0 to HW filter on device team0 [ 764.587121][ T9996] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 764.817119][ T4870] usb 1-1: USB disconnect, device number 13 [ 765.577809][ T5246] Bluetooth: hci5: command tx timeout [ 765.601987][T10405] netlink: 204 bytes leftover after parsing attributes in process `syz.0.1004'. [ 765.891009][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 765.898360][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 766.067492][ T7106] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 766.135418][ T7106] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 766.313535][ T5292] bridge0: port 2(bridge_slave_1) entered blocking state [ 766.320824][ T5292] bridge0: port 2(bridge_slave_1) entered forwarding state [ 766.415759][T10413] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 766.497554][T10413] overlayfs: failed to set xattr on upper [ 766.534928][T10413] overlayfs: ...falling back to redirect_dir=nofollow. [ 766.571857][T10413] overlayfs: ...falling back to index=off. [ 766.598145][T10413] overlayfs: ...falling back to uuid=null. [ 766.904595][T10383] chnl_net:caif_netlink_parms(): no params data found [ 767.228348][T10134] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 767.291467][T10134] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 767.307766][ T5299] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 767.523860][ T5299] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 767.571824][ T5299] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 767.625312][ T5299] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 767.651620][ T5246] Bluetooth: hci5: command tx timeout [ 767.721524][ T5299] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 767.762654][T10429] ubi: mtd0 is already attached to ubi0 [ 767.822675][ T5299] usb 1-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 767.903313][ T5299] usb 1-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 767.951606][ T5299] usb 1-1: Manufacturer: syz [ 768.003091][ T5299] usb 1-1: config 0 descriptor?? [ 768.475865][ T5299] usbhid 1-1:0.0: can't add hid device: -71 [ 768.491730][ T5299] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 768.548322][ T5299] usb 1-1: USB disconnect, device number 14 [ 768.571640][ T9996] veth0_vlan: entered promiscuous mode [ 768.706864][T10383] bridge0: port 1(bridge_slave_0) entered blocking state [ 768.755445][T10383] bridge0: port 1(bridge_slave_0) entered disabled state [ 768.794808][T10383] bridge_slave_0: entered allmulticast mode [ 768.825276][ T5249] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 768.838749][ T5249] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 768.841671][T10383] bridge_slave_0: entered promiscuous mode [ 768.867192][ T5249] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 768.891762][ T5249] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 768.900167][ T5249] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 768.907902][ T5249] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 769.008471][ T2518] bridge_slave_1: left allmulticast mode [ 769.023252][ T2518] bridge_slave_1: left promiscuous mode [ 769.029171][ T2518] bridge0: port 2(bridge_slave_1) entered disabled state [ 769.134053][ T2518] bridge_slave_0: left allmulticast mode [ 769.139739][ T2518] bridge_slave_0: left promiscuous mode [ 769.194815][ T2518] bridge0: port 1(bridge_slave_0) entered disabled state [ 769.235899][T10452] loop0: detected capacity change from 0 to 512 [ 769.298741][T10452] EXT4-fs error (device loop0): ext4_map_blocks:609: inode #2: block 3: comm syz.0.1012: lblock 0 mapped to illegal pblock 3 (length 1) [ 769.371374][T10452] EXT4-fs (loop0): Remounting filesystem read-only [ 769.415485][T10452] EXT4-fs warning (device loop0): dx_probe:823: inode #2: lblock 0: comm syz.0.1012: error -117 reading directory block [ 769.438283][T10452] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -117 [ 769.463983][T10452] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 769.641696][ T8020] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 769.732446][ T5249] Bluetooth: hci5: command tx timeout [ 770.172236][ T2518] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 770.214649][ T2518] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 770.242801][ T2518] bond0 (unregistering): Released all slaves [ 770.687973][T10383] bridge0: port 2(bridge_slave_1) entered blocking state [ 770.709085][T10383] bridge0: port 2(bridge_slave_1) entered disabled state [ 770.748146][T10383] bridge_slave_1: entered allmulticast mode [ 770.786448][T10383] bridge_slave_1: entered promiscuous mode [ 770.971653][T10453] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1011'. [ 771.023019][ T5249] Bluetooth: hci0: command tx timeout [ 771.061555][ T2518] hsr_slave_0: left promiscuous mode [ 771.073168][ T2518] hsr_slave_1: left promiscuous mode [ 771.119354][ T2518] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 771.137437][ T2518] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 771.183909][ T2518] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 771.191352][ T2518] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 771.310251][ T2518] veth1_macvtap: left promiscuous mode [ 771.331658][ T2518] veth0_macvtap: left promiscuous mode [ 771.338723][ T2518] veth1_vlan: left promiscuous mode [ 771.351784][ T2518] veth0_vlan: left promiscuous mode [ 771.812181][ T5249] Bluetooth: hci5: command tx timeout [ 773.094135][ T5249] Bluetooth: hci0: command tx timeout [ 773.231746][ T5303] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 773.344512][ T2518] team0 (unregistering): Port device team_slave_1 removed [ 773.410163][ T2518] team0 (unregistering): Port device team_slave_0 removed [ 773.468601][ T5303] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 773.489357][ T5303] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 773.516359][ T5303] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 773.543500][ T5303] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 773.565763][ T5303] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 773.579305][ T5303] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 773.593216][ T5303] usb 2-1: Manufacturer: syz [ 773.609416][ T5303] usb 2-1: config 0 descriptor?? [ 774.036471][ T5303] usbhid 2-1:0.0: can't add hid device: -71 [ 774.048651][ T5303] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 774.073066][ T5303] usb 2-1: USB disconnect, device number 16 [ 774.239792][T10383] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 774.268462][ T9996] veth1_vlan: entered promiscuous mode [ 774.316665][T10383] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 774.444409][T10482] loop0: detected capacity change from 0 to 512 [ 774.462107][T10482] EXT4-fs error (device loop0): ext4_map_blocks:609: inode #2: block 3: comm syz.0.1021: lblock 0 mapped to illegal pblock 3 (length 1) [ 774.497921][T10482] EXT4-fs (loop0): Remounting filesystem read-only [ 774.518531][T10482] EXT4-fs warning (device loop0): dx_probe:823: inode #2: lblock 0: comm syz.0.1021: error -117 reading directory block [ 774.531042][T10134] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 774.641644][T10482] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -117 [ 774.655197][T10482] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 774.741628][T10383] team0: Port device team_slave_0 added [ 774.865800][T10383] team0: Port device team_slave_1 added [ 774.907719][ T8020] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 775.195686][ T5249] Bluetooth: hci0: command tx timeout [ 775.322967][T10383] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 775.345883][T10383] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 775.446562][T10383] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 775.530005][T10493] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1022'. [ 776.500876][T10383] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 776.509160][T10383] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 776.544097][T10383] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 776.953300][T10514] netlink: 204 bytes leftover after parsing attributes in process `syz.0.1025'. [ 776.967927][T10383] hsr_slave_0: entered promiscuous mode [ 776.987015][T10383] hsr_slave_1: entered promiscuous mode [ 777.001271][T10383] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 777.010402][T10383] Cannot create hsr debugfs directory [ 777.205086][ T9996] veth0_macvtap: entered promiscuous mode [ 777.226199][ T9996] veth1_macvtap: entered promiscuous mode [ 777.252646][ T5249] Bluetooth: hci0: command tx timeout [ 777.326285][ T2527] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 777.548228][ T2527] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 777.784248][T10134] veth0_vlan: entered promiscuous mode [ 777.852884][ T2527] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 778.035722][ T9996] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 778.056081][ T9996] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 778.083831][ T9996] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 778.125535][ T9996] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 778.138326][ T9996] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 778.159280][ T9996] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 778.183907][ T9996] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 778.213611][ T9996] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 778.228765][ T9996] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 778.244711][ T9996] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 778.265052][ T9996] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 778.397017][ T2527] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 778.502135][ T9996] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 778.527924][ T9996] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 778.580315][ T9996] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 778.599118][ T9996] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 778.619024][ T9996] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 778.640485][ T9996] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 778.656519][ T9996] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 778.731965][ T9996] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 778.766700][ T9996] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 778.823910][ T9996] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 778.863794][ T9996] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 778.978321][T10445] chnl_net:caif_netlink_parms(): no params data found [ 779.346051][T10134] veth1_vlan: entered promiscuous mode [ 779.881608][ T7246] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 780.104268][ T7246] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 780.117016][ T7246] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 780.133391][ T7246] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 780.181185][ T7246] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 780.243795][ T7246] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 780.265537][ T7246] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 780.295333][ T7246] usb 2-1: Manufacturer: syz [ 780.338434][ T7246] usb 2-1: config 0 descriptor?? [ 780.696294][ T5246] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 780.711227][ T5246] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 780.720053][ T5246] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 780.738800][ T5246] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 780.754688][ T5246] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 780.764291][ T5246] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 780.796430][ T7246] usbhid 2-1:0.0: can't add hid device: -71 [ 780.827198][ T7246] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 780.850673][ T7246] usb 2-1: USB disconnect, device number 17 [ 781.082376][T10445] bridge0: port 1(bridge_slave_0) entered blocking state [ 781.089848][T10445] bridge0: port 1(bridge_slave_0) entered disabled state [ 781.097453][T10445] bridge_slave_0: entered allmulticast mode [ 781.110959][T10445] bridge_slave_0: entered promiscuous mode [ 781.128096][T10445] bridge0: port 2(bridge_slave_1) entered blocking state [ 781.144566][T10445] bridge0: port 2(bridge_slave_1) entered disabled state [ 781.156937][T10445] bridge_slave_1: entered allmulticast mode [ 781.166935][T10445] bridge_slave_1: entered promiscuous mode [ 781.469528][T10445] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 781.509477][ T2527] bridge_slave_1: left allmulticast mode [ 781.524566][ T2527] bridge_slave_1: left promiscuous mode [ 781.537863][ T2527] bridge0: port 2(bridge_slave_1) entered disabled state [ 781.852351][ T2527] bridge_slave_0: left allmulticast mode [ 781.858037][ T2527] bridge_slave_0: left promiscuous mode [ 781.864279][ T2527] bridge0: port 1(bridge_slave_0) entered disabled state [ 782.852293][ T5249] Bluetooth: hci4: command tx timeout [ 784.880266][ T2527] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 784.904818][ T2527] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 784.928393][ T2527] bond0 (unregistering): Released all slaves [ 784.934624][ T5249] Bluetooth: hci4: command tx timeout [ 785.070316][T10445] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 785.117914][T10579] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1037'. [ 785.512725][T10445] team0: Port device team_slave_0 added [ 785.539904][T10445] team0: Port device team_slave_1 added [ 785.611086][T10134] veth0_macvtap: entered promiscuous mode [ 785.956268][T10134] veth1_macvtap: entered promiscuous mode [ 786.063575][T10445] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 786.098189][T10445] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 786.161474][T10445] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 786.229051][T10383] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 786.292785][T10383] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 786.374129][ T29] audit: type=1326 audit(1722064163.622:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10583 comm="syz.1.1039" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd933577299 code=0x0 [ 786.393347][T10445] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 786.416857][T10445] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 786.460986][T10445] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 786.500894][ T2527] hsr_slave_0: left promiscuous mode [ 786.523712][ T2527] hsr_slave_1: left promiscuous mode [ 786.532658][ T2527] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 786.541218][ T2527] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 786.552954][ T2527] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 786.560373][ T2527] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 786.639056][ T2527] veth1_macvtap: left promiscuous mode [ 786.645418][ T2527] veth0_macvtap: left promiscuous mode [ 786.651350][ T2527] veth1_vlan: left promiscuous mode [ 786.658023][ T2527] veth0_vlan: left promiscuous mode [ 786.975311][T10585] 9pnet_virtio: no channels available for device syz [ 787.012637][ T5249] Bluetooth: hci4: command tx timeout [ 787.145952][T10602] PKCS7: Unknown OID: [4] 2.19.0.2.86.14.43(bad) [ 787.171930][T10602] PKCS7: Only support pkcs7_signedData type [ 787.671582][ T7246] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 787.861551][ T7246] usb 1-1: Using ep0 maxpacket: 8 [ 787.872927][ T7246] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 787.886242][ T7246] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 787.900275][ T7246] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 787.912774][ T7246] usb 1-1: Product: syz [ 787.916967][ T7246] usb 1-1: Manufacturer: syz [ 787.922736][ T7246] usb 1-1: SerialNumber: syz [ 787.932264][ T2527] team0 (unregistering): Port device team_slave_1 removed [ 787.941172][ T7246] usb 1-1: config 0 descriptor?? [ 788.019355][ T2527] team0 (unregistering): Port device team_slave_0 removed [ 788.617470][T10383] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 788.804110][T10383] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 788.852951][T10134] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 788.878295][T10134] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 788.890184][T10134] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 788.908710][T10134] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 788.919441][T10134] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 788.930001][T10134] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 788.946240][T10134] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 788.957214][T10134] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 788.967612][T10134] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 788.978614][T10134] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 788.992986][T10134] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 789.020686][T10134] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 789.048457][T10134] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 789.068991][T10134] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 789.090188][T10134] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 789.103128][ T5249] Bluetooth: hci4: command tx timeout [ 789.120223][T10134] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 789.135363][T10134] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 789.165279][T10134] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 789.199232][T10134] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 789.219555][T10134] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 789.253479][T10134] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 789.284473][T10134] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 789.774483][T10445] hsr_slave_0: entered promiscuous mode [ 789.801410][T10445] hsr_slave_1: entered promiscuous mode [ 789.819521][T10445] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 789.838142][T10445] Cannot create hsr debugfs directory [ 790.333683][T10134] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 790.348375][T10134] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 790.361226][T10134] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 790.372724][T10134] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 790.519429][ T52] usb 1-1: USB disconnect, device number 15 [ 792.604541][T10641] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 792.640391][T10641] overlayfs: failed to set xattr on upper [ 792.651341][T10641] overlayfs: ...falling back to redirect_dir=nofollow. [ 792.671169][T10641] overlayfs: ...falling back to index=off. [ 792.732782][T10641] overlayfs: ...falling back to uuid=null. [ 792.884854][T10554] chnl_net:caif_netlink_parms(): no params data found [ 793.464802][ T2492] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 793.506098][ T2492] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 794.550447][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 794.579958][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 794.834479][T10554] bridge0: port 1(bridge_slave_0) entered blocking state [ 794.846539][T10554] bridge0: port 1(bridge_slave_0) entered disabled state [ 794.861387][T10554] bridge_slave_0: entered allmulticast mode [ 794.891227][T10554] bridge_slave_0: entered promiscuous mode [ 795.056569][T10554] bridge0: port 2(bridge_slave_1) entered blocking state [ 795.082101][T10554] bridge0: port 2(bridge_slave_1) entered disabled state [ 795.100947][T10554] bridge_slave_1: entered allmulticast mode [ 795.139415][T10554] bridge_slave_1: entered promiscuous mode [ 796.173411][T10445] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 796.530963][T10554] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 796.773589][T10445] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 796.900741][T10554] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 796.979579][T10685] netlink: 204 bytes leftover after parsing attributes in process `syz.1.1053'. [ 797.070214][ T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 797.079081][ T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 797.087285][ T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 797.101694][ T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 797.129902][ T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 797.147614][ T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 797.155864][ T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 797.156477][T10383] 8021q: adding VLAN 0 to HW filter on device bond0 [ 797.163995][ T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 797.180683][ T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 797.212956][ T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 797.221801][ T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 797.233623][ T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 797.241153][ T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 797.241629][T10445] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 797.249538][ T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 797.267558][ T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 797.278999][ T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 797.303407][T10445] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 797.310822][ T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 797.320056][ T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 797.367857][ T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 797.379644][ T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 797.387809][ T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 797.396890][ T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 797.405675][ T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 797.414468][ T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 797.422907][ T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 797.430517][ T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 797.443406][ T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 797.452175][ T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 797.469770][ T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 797.488683][ T2527] bridge_slave_1: left allmulticast mode [ 797.504948][ T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 797.522263][ T2527] bridge_slave_1: left promiscuous mode [ 797.532036][ T2527] bridge0: port 2(bridge_slave_1) entered disabled state [ 797.544786][ T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 797.583164][ T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 797.591281][ T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 797.599415][ T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 797.611806][ T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 797.615845][ T2527] bridge_slave_0: left allmulticast mode [ 797.619243][ T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 797.633984][ T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 797.653665][ T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 797.653906][ T2527] bridge_slave_0: left promiscuous mode [ 797.661136][ T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 797.675477][ T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 797.686557][ T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 797.690548][ T2527] bridge0: port 1(bridge_slave_0) entered disabled state [ 797.694807][ T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 797.709099][ T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 797.764062][ T9] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz0] on syz0 [ 799.268811][ T2527] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 799.308691][ T2527] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 799.338511][ T2527] bond0 (unregistering): Released all slaves [ 799.500749][T10554] team0: Port device team_slave_0 added [ 799.580056][T10554] team0: Port device team_slave_1 added [ 799.703257][T10697] loop0: detected capacity change from 0 to 64 [ 799.977102][T10554] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 800.021840][T10554] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 800.071592][T10554] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 800.128119][T10554] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 800.151272][T10554] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 800.230917][T10554] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 800.389426][ T2527] hsr_slave_0: left promiscuous mode [ 800.693204][ T2527] hsr_slave_1: left promiscuous mode [ 800.711648][ T2527] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 800.721798][ T2527] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 801.626207][ T2527] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 801.639187][ T2527] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 801.756101][ T2527] veth1_macvtap: left promiscuous mode [ 801.778736][ T2527] veth0_macvtap: left promiscuous mode [ 801.786795][ T2527] veth1_vlan: left promiscuous mode [ 801.802064][ T2527] veth0_vlan: left promiscuous mode [ 802.396900][T10719] hfs: keylen 94 too large [ 804.240714][ T2527] team0 (unregistering): Port device team_slave_1 removed [ 804.373286][ T2527] team0 (unregistering): Port device team_slave_0 removed [ 806.481860][T10554] hsr_slave_0: entered promiscuous mode [ 806.498089][T10554] hsr_slave_1: entered promiscuous mode [ 806.531239][T10554] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 806.558350][T10554] Cannot create hsr debugfs directory [ 806.655562][T10383] 8021q: adding VLAN 0 to HW filter on device team0 [ 807.048409][T10758] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1077'. [ 807.158155][ T5303] bridge0: port 1(bridge_slave_0) entered blocking state [ 807.165525][ T5303] bridge0: port 1(bridge_slave_0) entered forwarding state [ 807.375052][ T5303] bridge0: port 2(bridge_slave_1) entered blocking state [ 807.382393][ T5303] bridge0: port 2(bridge_slave_1) entered forwarding state [ 809.637126][T10445] 8021q: adding VLAN 0 to HW filter on device bond0 [ 809.946292][T10445] 8021q: adding VLAN 0 to HW filter on device team0 [ 810.018725][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 810.026069][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 810.183794][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 810.191142][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 811.048697][T10554] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 811.147211][T10554] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 811.361537][T10554] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 811.428791][T10554] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 811.722397][T10383] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 813.189573][T10554] 8021q: adding VLAN 0 to HW filter on device bond0 [ 813.569943][T10554] 8021q: adding VLAN 0 to HW filter on device team0 [ 813.667509][ T5303] bridge0: port 1(bridge_slave_0) entered blocking state [ 813.674848][ T5303] bridge0: port 1(bridge_slave_0) entered forwarding state [ 813.785263][T10445] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 813.835675][ T5303] bridge0: port 2(bridge_slave_1) entered blocking state [ 813.842995][ T5303] bridge0: port 2(bridge_slave_1) entered forwarding state [ 813.881521][ T9] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 814.117688][ T9] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 814.142646][ T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 814.207196][ T9] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 814.251600][ T9] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 814.309072][ T9] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 814.333838][ T9] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 814.351725][ T9] usb 1-1: Product: syz [ 814.385493][ T9] usb 1-1: Manufacturer: syz [ 814.438488][T10383] veth0_vlan: entered promiscuous mode [ 814.439689][ T9] cdc_wdm 1-1:1.0: skipping garbage [ 814.486677][ T9] cdc_wdm 1-1:1.0: skipping garbage [ 814.531188][T10383] veth1_vlan: entered promiscuous mode [ 814.564310][ T9] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 814.600690][ T9] cdc_wdm 1-1:1.0: Unknown control protocol [ 814.718606][ T9] usb 1-1: USB disconnect, device number 16 [ 814.825712][T10383] veth0_macvtap: entered promiscuous mode [ 814.908386][T10383] veth1_macvtap: entered promiscuous mode [ 815.063950][T10383] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 815.093021][T10383] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 815.122366][T10383] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 815.181660][T10383] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 815.219805][T10383] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 815.266206][T10383] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 815.296428][T10383] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 815.337535][T10383] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 815.378991][T10383] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 815.419796][T10383] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 815.433883][T10383] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 815.522398][T10383] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 815.549225][T10383] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 815.581510][T10383] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 815.607680][T10383] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 815.621165][T10383] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 815.642873][T10383] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 815.671656][T10383] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 815.691464][T10383] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 815.718264][T10383] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 815.742551][T10383] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 815.779155][T10383] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 815.885127][T10383] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 815.951954][T10383] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 815.960720][T10383] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 816.019847][T10383] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 816.194005][T10554] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 816.345579][T10445] veth0_vlan: entered promiscuous mode [ 816.547527][T10445] veth1_vlan: entered promiscuous mode [ 816.855304][T10554] veth0_vlan: entered promiscuous mode [ 816.936249][ T2518] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 816.995595][ T2518] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 817.055599][T10554] veth1_vlan: entered promiscuous mode [ 817.443410][T10895] netlink: 204 bytes leftover after parsing attributes in process `syz.2.1103'. [ 817.558875][T10445] veth0_macvtap: entered promiscuous mode [ 818.200512][ T77] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 818.495430][ T77] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 818.533259][T10445] veth1_macvtap: entered promiscuous mode [ 818.624805][ T1266] ieee802154 phy0 wpan0: encryption failed: -22 [ 818.667831][ T1266] ieee802154 phy1 wpan1: encryption failed: -22 [ 818.823802][T10445] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 818.902064][T10445] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 818.972180][T10445] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 818.997512][T10445] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 819.021487][T10445] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 819.056779][T10445] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 819.086670][T10445] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 819.132916][T10445] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 819.181602][T10445] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 819.221471][T10445] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 819.265688][T10445] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 819.282119][T10445] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 819.311185][T10445] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 819.376799][T10445] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 819.398361][T10445] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 819.431474][T10445] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 819.481772][T10445] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 819.511474][T10445] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 819.581808][T10445] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 819.613057][T10445] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 819.635291][T10445] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 819.681819][T10445] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 819.760452][T10445] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 819.813892][T10445] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 819.868960][T10445] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 819.948992][T10445] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 820.038218][T10554] veth0_macvtap: entered promiscuous mode [ 820.720260][T10554] veth1_macvtap: entered promiscuous mode [ 820.809217][T10445] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 820.873893][T10445] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 820.961369][T10445] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 821.029804][T10445] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 821.314738][T10554] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 821.342095][T10554] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 821.371497][T10554] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 821.421536][T10554] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 821.445745][T10554] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 821.484124][T10554] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 821.551656][ T9] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 821.689436][T10914] loop2: detected capacity change from 0 to 32768 [ 821.696076][T10554] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 821.751641][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 821.772016][T10554] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 821.783214][T10914] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.1108 (10914) [ 821.846654][ T9] usb 5-1: New USB device found, idVendor=0c45, idProduct=6128, bcdDevice=c4.6d [ 821.885889][T10554] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 821.902802][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 821.977207][T10554] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 822.371749][T10914] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 822.394501][T10554] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 822.436003][T10914] BTRFS info (device loop2): using sha256 (sha256-ni) checksum algorithm [ 822.471586][T10554] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 822.534209][T10914] BTRFS info (device loop2): using free-space-tree [ 822.543101][T10554] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 822.584975][T10914] workqueue: Failed to create a rescuer kthread for wq "btrfs-worker": -EINTR [ 822.586471][T10914] workqueue: Failed to create a rescuer kthread for wq "btrfs-delalloc": -EINTR [ 822.641515][T10554] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 822.682776][T10914] workqueue: Failed to create a rescuer kthread for wq "btrfs-flush_delalloc": -EINTR [ 822.693987][T10914] workqueue: Failed to create a rescuer kthread for wq "btrfs-cache": -EINTR [ 822.770688][T10914] workqueue: Failed to create a rescuer kthread for wq "btrfs-fixup": -EINTR [ 822.813239][T10554] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 822.819307][ T9] usb 5-1: Product: syz [ 822.839375][ T9] usb 5-1: Manufacturer: syz [ 822.846132][ T9] usb 5-1: SerialNumber: syz [ 822.854600][T10914] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio": -EINTR [ 822.855679][T10914] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-meta": -EINTR [ 822.872674][T10914] workqueue: Failed to create a rescuer kthread for wq "btrfs-rmw": -EINTR [ 822.923878][T10914] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR [ 822.953052][ T9] usb 5-1: config 0 descriptor?? [ 823.037902][ T9] gspca_main: sonixj-2.14.0 probing 0c45:6128 [ 823.044990][T10914] workqueue: Failed to create a rescuer kthread for wq "btrfs-compressed-write": -EINTR [ 823.046083][T10914] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR [ 823.073622][T10554] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 823.108416][T10914] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR [ 823.142131][T10914] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR [ 823.174292][T10554] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 823.230300][T10959] netlink: 204 bytes leftover after parsing attributes in process `syz.1.1117'. [ 823.245151][T10914] BTRFS error (device loop2): open_ctree failed [ 823.254881][T10554] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 823.281584][T10554] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 823.321570][T10554] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 823.351289][T10554] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 823.398671][T10554] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 823.432298][T10554] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 823.459278][T10554] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 823.483774][T10554] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 823.512743][ T9] gspca_sonixj: reg_r err -32 [ 823.516203][T10554] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 823.517580][ T9] sonixj 5-1:0.0: probe with driver sonixj failed with error -32 [ 823.529491][T10554] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 823.557667][T10554] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 823.569829][T10554] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 823.585338][T10554] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 823.621222][T10554] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 823.631081][T10554] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 823.640758][T10554] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 823.711595][T10554] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 824.302517][ T5303] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 824.349765][ T2527] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 824.382940][ T2527] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 824.584473][ T5303] usb 1-1: Using ep0 maxpacket: 16 [ 824.597798][ T5303] usb 1-1: config 0 has an invalid interface number: 89 but max is 2 [ 824.620082][ T5303] usb 1-1: config 0 has an invalid interface number: 96 but max is 2 [ 824.657674][ T5303] usb 1-1: config 0 has an invalid interface number: 12 but max is 2 [ 824.686904][ T5303] usb 1-1: config 0 has no interface number 0 [ 824.689944][ T5299] usb 5-1: USB disconnect, device number 3 [ 824.705742][ T5303] usb 1-1: config 0 has no interface number 1 [ 824.734280][ T139] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 824.762714][ T139] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 824.770160][ T5303] usb 1-1: config 0 has no interface number 2 [ 824.800239][ T5303] usb 1-1: config 0 interface 89 altsetting 1 endpoint 0xB has invalid maxpacket 1024, setting to 64 [ 824.830816][ T5303] usb 1-1: config 0 interface 89 altsetting 1 has an endpoint descriptor with address 0xB4, changing to 0x84 [ 824.897485][ T2527] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 824.913890][ T5303] usb 1-1: config 0 interface 89 altsetting 1 endpoint 0xF has invalid maxpacket 512, setting to 64 [ 824.949485][ T2527] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 824.950370][T10993] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 824.991976][ T5303] usb 1-1: config 0 interface 96 altsetting 4 has a duplicate endpoint with address 0x4, skipping [ 825.036489][ T5303] usb 1-1: config 0 interface 12 altsetting 113 has an invalid descriptor for endpoint zero, skipping [ 825.073648][ T5303] usb 1-1: config 0 interface 89 has no altsetting 0 [ 825.107026][ T5303] usb 1-1: config 0 interface 96 has no altsetting 0 [ 825.126236][ T5303] usb 1-1: config 0 interface 12 has no altsetting 0 [ 825.149392][ T5303] usb 1-1: New USB device found, idVendor=03eb, idProduct=7615, bcdDevice= 4.1f [ 825.160958][ T2496] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 825.177864][ T2496] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 825.213802][ T5303] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 825.253727][ T5303] usb 1-1: config 0 descriptor?? [ 827.975507][T11018] syzkaller0: entered promiscuous mode [ 828.010534][T11018] syzkaller0: entered allmulticast mode [ 828.027266][ T5303] usb 1-1: string descriptor 0 read error: -71 [ 828.071949][T11028] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1127'. [ 828.220146][ T5303] usb 1-1: USB disconnect, device number 17 [ 828.644042][T11051] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 828.713923][T11055] netlink: 204 bytes leftover after parsing attributes in process `syz.1.1132'. [ 828.802466][ T5303] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 829.007559][ T5303] usb 1-1: Using ep0 maxpacket: 8 [ 829.054943][ T5303] usb 1-1: New USB device found, idVendor=0c45, idProduct=6128, bcdDevice=c4.6d [ 829.096521][ T5303] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 829.126364][ T5303] usb 1-1: Product: syz [ 829.143110][ T5303] usb 1-1: Manufacturer: syz [ 829.165082][ T5303] usb 1-1: SerialNumber: syz [ 829.211936][ T5303] usb 1-1: config 0 descriptor?? [ 829.247120][ T5303] gspca_main: sonixj-2.14.0 probing 0c45:6128 [ 829.326971][ T5289] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 829.562900][ T5289] usb 3-1: config index 0 descriptor too short (expected 45, got 36) [ 829.573221][ T5289] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 829.631598][ T5289] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 829.661569][ T5289] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 829.734230][ T5289] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 829.785473][ T5289] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 829.827835][ T5289] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 829.866412][ T5289] usb 3-1: config 0 descriptor?? [ 829.885921][T11062] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 830.013986][T11075] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 830.139223][ T5303] gspca_sonixj: reg_r err -71 [ 830.152017][ T5303] sonixj 1-1:0.0: probe with driver sonixj failed with error -71 [ 830.203762][ T5303] usb 1-1: USB disconnect, device number 18 [ 830.369517][ T5289] plantronics 0003:047F:FFFF.0003: unknown main item tag 0xd [ 830.415801][ T5289] plantronics 0003:047F:FFFF.0003: No inputs registered, leaving [ 830.472823][ T5289] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 830.696756][ T5292] usb 3-1: USB disconnect, device number 13 [ 830.989635][T11081] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1142'. [ 832.161627][ T5289] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 832.382466][ T5289] usb 3-1: Using ep0 maxpacket: 16 [ 832.413852][ T5289] usb 3-1: config 0 has an invalid interface number: 89 but max is 2 [ 832.427366][ T5289] usb 3-1: config 0 has an invalid interface number: 96 but max is 2 [ 832.477863][ T5289] usb 3-1: config 0 has an invalid interface number: 12 but max is 2 [ 832.491535][ T5289] usb 3-1: config 0 has no interface number 0 [ 832.505416][ T5289] usb 3-1: config 0 has no interface number 1 [ 832.511860][ T5289] usb 3-1: config 0 has no interface number 2 [ 832.518191][ T5289] usb 3-1: config 0 interface 89 altsetting 1 endpoint 0xB has invalid maxpacket 1024, setting to 64 [ 832.531279][ T5289] usb 3-1: config 0 interface 89 altsetting 1 has an endpoint descriptor with address 0xB4, changing to 0x84 [ 832.551018][ T5289] usb 3-1: config 0 interface 89 altsetting 1 endpoint 0xF has invalid maxpacket 512, setting to 64 [ 832.568582][ T5289] usb 3-1: config 0 interface 96 altsetting 4 has a duplicate endpoint with address 0x4, skipping [ 832.579898][ T5289] usb 3-1: config 0 interface 12 altsetting 113 has an invalid descriptor for endpoint zero, skipping [ 832.591914][ T5289] usb 3-1: config 0 interface 89 has no altsetting 0 [ 832.598641][ T5289] usb 3-1: config 0 interface 96 has no altsetting 0 [ 832.611901][ T5289] usb 3-1: config 0 interface 12 has no altsetting 0 [ 832.619813][ T5289] usb 3-1: New USB device found, idVendor=03eb, idProduct=7615, bcdDevice= 4.1f [ 832.629850][ T5289] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 832.644429][ T5289] usb 3-1: config 0 descriptor?? [ 832.702990][T11096] snd_dummy snd_dummy.0: control 0:0:0:syz1:1048576 is already present [ 833.872256][ T5289] usb 3-1: string descriptor 0 read error: -71 [ 833.949701][ T5289] usb 3-1: USB disconnect, device number 14 [ 835.068365][T11066] netlink: 'syz.4.1139': attribute type 29 has an invalid length. [ 835.080685][T11095] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1146'. [ 835.652372][T11116] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 835.690900][T11115] loop2: detected capacity change from 0 to 32768 [ 835.744045][T11115] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.1152 (11115) [ 835.848080][T11115] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 835.895024][T11115] BTRFS info (device loop2): using sha256 (sha256-ni) checksum algorithm [ 835.944910][T11115] BTRFS info (device loop2): using free-space-tree [ 837.651542][ T7246] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 837.709386][T10134] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 837.904472][ T7246] usb 6-1: Using ep0 maxpacket: 16 [ 837.935022][ T7246] usb 6-1: config 0 has an invalid interface number: 89 but max is 2 [ 837.955052][ T7246] usb 6-1: config 0 has an invalid interface number: 96 but max is 2 [ 838.000947][ T7246] usb 6-1: config 0 has an invalid interface number: 12 but max is 2 [ 838.050630][ T7246] usb 6-1: config 0 has no interface number 0 [ 838.071129][ T7246] usb 6-1: config 0 has no interface number 1 [ 838.093501][ T7246] usb 6-1: config 0 has no interface number 2 [ 838.099713][ T7246] usb 6-1: config 0 interface 89 altsetting 1 endpoint 0xB has invalid maxpacket 1024, setting to 64 [ 838.104089][T11168] syzkaller0: entered promiscuous mode [ 838.135912][T11168] syzkaller0: entered allmulticast mode [ 838.161489][ T7246] usb 6-1: config 0 interface 89 altsetting 1 has an endpoint descriptor with address 0xB4, changing to 0x84 [ 838.165262][T11181] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1169'. [ 838.182662][ T939] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 838.216514][ T7246] usb 6-1: config 0 interface 89 altsetting 1 endpoint 0xF has invalid maxpacket 512, setting to 64 [ 838.259422][ T7246] usb 6-1: config 0 interface 96 altsetting 4 has a duplicate endpoint with address 0x4, skipping [ 838.301566][ T7246] usb 6-1: config 0 interface 12 altsetting 113 has an invalid descriptor for endpoint zero, skipping [ 838.315188][ T7246] usb 6-1: config 0 interface 89 has no altsetting 0 [ 838.331413][ T7246] usb 6-1: config 0 interface 96 has no altsetting 0 [ 838.345518][ T7246] usb 6-1: config 0 interface 12 has no altsetting 0 [ 838.371744][ T7246] usb 6-1: New USB device found, idVendor=03eb, idProduct=7615, bcdDevice= 4.1f [ 838.381552][ T939] usb 4-1: Using ep0 maxpacket: 32 [ 838.408525][ T939] usb 4-1: New USB device found, idVendor=0458, idProduct=7006, bcdDevice=69.91 [ 838.421588][ T7246] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 838.441858][ T939] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 838.476728][ T7246] usb 6-1: config 0 descriptor?? [ 838.499595][ T939] usb 4-1: config 0 descriptor?? [ 838.517755][ T939] gspca_main: sunplus-2.14.0 probing 0458:7006 [ 839.178943][ T939] gspca_sunplus: reg_w_riv err -71 [ 839.226483][ T7379] udevd[7379]: inotify_add_watch(7, /dev/loop2, 10) failed: No such file or directory [ 839.243037][ T939] sunplus 4-1:0.0: probe with driver sunplus failed with error -71 [ 839.291243][ T939] usb 4-1: USB disconnect, device number 11 [ 839.308481][ T7379] udevd[7379]: inotify_add_watch(7, /dev/loop2, 10) failed: No such file or directory [ 839.991386][ T7246] usb 6-1: string descriptor 0 read error: -71 [ 840.117077][ T7246] usb 6-1: USB disconnect, device number 7 [ 840.260052][T11192] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 845.691347][T11239] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 848.272150][T11227] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1186'. [ 848.983149][ T5246] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 848.999671][ T5246] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 849.011938][ T5246] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 849.061906][ T5246] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 849.084283][ T5246] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 849.114549][ T5246] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 849.705314][T11288] loop5: detected capacity change from 0 to 64 [ 850.299735][T11286] syzkaller0: entered promiscuous mode [ 850.341621][T11286] syzkaller0: entered allmulticast mode [ 850.360797][T11295] hfs: keylen 94 too large [ 850.632402][ T5246] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 850.663162][ T5246] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 850.672556][ T5246] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 850.685875][ T5246] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 850.698780][ T5246] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 850.707304][ T5246] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 851.262062][ T5249] Bluetooth: hci6: command tx timeout [ 852.617518][ C0] eth0: bad gso: type: 1, size: 1408 [ 852.776789][ T5249] Bluetooth: hci1: command tx timeout [ 853.334334][ T5249] Bluetooth: hci6: command tx timeout [ 854.857227][ T5249] Bluetooth: hci1: command tx timeout [ 855.101305][ C0] eth0: bad gso: type: 1, size: 1408 [ 855.412959][ T5249] Bluetooth: hci6: command tx timeout [ 857.002948][ T5249] Bluetooth: hci1: command tx timeout [ 857.340554][T11309] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1215'. [ 857.496047][ T5249] Bluetooth: hci6: command tx timeout [ 857.676469][ T2527] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 857.822347][ T2527] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 858.096905][ T2527] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 858.794850][ T2527] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 860.341486][ T5249] Bluetooth: hci1: command tx timeout [ 860.750466][ C0] eth0: bad gso: type: 1, size: 1408 [ 862.703971][T11376] syzkaller0: entered promiscuous mode [ 862.709511][T11376] syzkaller0: entered allmulticast mode [ 862.758342][T11274] chnl_net:caif_netlink_parms(): no params data found [ 866.030774][T11415] loop3: detected capacity change from 0 to 64 [ 866.517295][ T939] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 866.590690][T11417] hfs: keylen 94 too large [ 866.711506][ T939] usb 1-1: Using ep0 maxpacket: 32 [ 866.742288][ T939] usb 1-1: New USB device found, idVendor=0458, idProduct=7006, bcdDevice=69.91 [ 866.751713][ T939] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 866.843726][ T939] usb 1-1: config 0 descriptor?? [ 866.851969][ T5246] Bluetooth: hci2: command 0x0406 tx timeout [ 866.868345][ T939] gspca_main: sunplus-2.14.0 probing 0458:7006 [ 867.287652][ T939] gspca_sunplus: reg_w_riv err -71 [ 867.300087][ T939] sunplus 1-1:0.0: probe with driver sunplus failed with error -71 [ 867.324905][ T939] usb 1-1: USB disconnect, device number 19 [ 867.914769][T11396] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1240'. [ 868.280575][T11294] chnl_net:caif_netlink_parms(): no params data found [ 868.454485][ T2527] bridge_slave_1: left allmulticast mode [ 868.462040][ T2527] bridge_slave_1: left promiscuous mode [ 868.467938][ T2527] bridge0: port 2(bridge_slave_1) entered disabled state [ 869.758621][ T2527] bridge_slave_0: left allmulticast mode [ 869.793775][ T2527] bridge_slave_0: left promiscuous mode [ 869.806405][T11433] loop3: detected capacity change from 0 to 64 [ 869.821975][ T2527] bridge0: port 1(bridge_slave_0) entered disabled state [ 870.325992][T11438] hfs: keylen 94 too large [ 873.171156][ T2527] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 873.242875][ T2527] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 873.268327][ T2527] bond0 (unregistering): Released all slaves [ 873.301712][ T4870] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 873.991521][ T4870] usb 1-1: Using ep0 maxpacket: 8 [ 874.057950][ T4870] usb 1-1: New USB device found, idVendor=2040, idProduct=9301, bcdDevice=e4.fb [ 874.097714][ T4870] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 874.224160][ T4870] usb 1-1: config 0 descriptor?? [ 874.256502][ T4870] dvb-usb: found a 'Hauppauge WinTV-NOVA-T usb2' in warm state. [ 874.305004][ T4870] dvb-usb: bulk message failed: -22 (3/0) [ 874.406342][ T4870] dvb-usb: Hauppauge WinTV-NOVA-T usb2 error while loading driver (-22) [ 874.448211][T11274] bridge0: port 1(bridge_slave_0) entered blocking state [ 874.467301][ T4870] dvb_usb_nova_t_usb2 1-1:0.0: probe with driver dvb_usb_nova_t_usb2 failed with error -22 [ 874.486847][T11274] bridge0: port 1(bridge_slave_0) entered disabled state [ 874.506277][ T4870] usb 1-1: USB disconnect, device number 20 [ 874.515273][T11274] bridge_slave_0: entered allmulticast mode [ 874.534090][T11274] bridge_slave_0: entered promiscuous mode [ 875.173552][T11274] bridge0: port 2(bridge_slave_1) entered blocking state [ 875.201348][T11274] bridge0: port 2(bridge_slave_1) entered disabled state [ 875.219069][T11274] bridge_slave_1: entered allmulticast mode [ 875.241134][T11274] bridge_slave_1: entered promiscuous mode [ 876.399023][T11483] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1259'. [ 876.435915][T11294] bridge0: port 1(bridge_slave_0) entered blocking state [ 876.449994][T11294] bridge0: port 1(bridge_slave_0) entered disabled state [ 876.462666][T11294] bridge_slave_0: entered allmulticast mode [ 876.479585][T11294] bridge_slave_0: entered promiscuous mode [ 876.604485][T11274] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 876.668277][T11294] bridge0: port 2(bridge_slave_1) entered blocking state [ 876.700044][T11294] bridge0: port 2(bridge_slave_1) entered disabled state [ 876.728010][T11294] bridge_slave_1: entered allmulticast mode [ 876.758154][T11294] bridge_slave_1: entered promiscuous mode [ 876.981524][ T2527] hsr_slave_0: left promiscuous mode [ 877.002621][ T2527] hsr_slave_1: left promiscuous mode [ 877.029713][ T2527] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 877.087472][ T2527] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 877.130691][ T2527] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 877.180423][ T2527] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 877.378760][ T2527] veth1_macvtap: left promiscuous mode [ 877.402790][ T2527] veth0_macvtap: left promiscuous mode [ 877.448978][ T2527] veth1_vlan: left promiscuous mode [ 877.501771][ T2527] veth0_vlan: left promiscuous mode [ 880.058708][ T1266] ieee802154 phy0 wpan0: encryption failed: -22 [ 880.066651][ T1266] ieee802154 phy1 wpan1: encryption failed: -22 [ 883.650139][T11534] loop3: detected capacity change from 0 to 32768 [ 883.665892][T11534] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.1270 (11534) [ 883.737481][ T2527] team0 (unregistering): Port device team_slave_1 removed [ 883.745269][T11534] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 883.771857][T11534] BTRFS info (device loop3): using sha256 (sha256-ni) checksum algorithm [ 883.788866][T11534] BTRFS info (device loop3): using free-space-tree [ 883.845063][ T2527] team0 (unregistering): Port device team_slave_0 removed [ 884.347272][T10554] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 885.162822][T11274] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 885.492850][T11567] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1273'. [ 885.658365][T11274] team0: Port device team_slave_0 added [ 885.715228][T11294] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 885.790682][T11294] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 885.850758][T11274] team0: Port device team_slave_1 added [ 888.680256][T11274] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 888.745325][T11274] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 888.884608][T11274] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 888.980638][T11294] team0: Port device team_slave_0 added [ 889.020907][T11294] team0: Port device team_slave_1 added [ 889.155292][T11274] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 889.175629][T11274] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 889.231715][T11274] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 889.519291][T11294] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 889.555762][T11294] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 889.647584][T11294] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 889.716614][T11610] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1287'. [ 890.072377][T11605] syzkaller0: entered promiscuous mode [ 890.089254][T11605] syzkaller0: entered allmulticast mode [ 890.163255][T11294] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 890.170257][T11294] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 890.694673][T11294] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 892.518225][ T5249] Bluetooth: hci0: command 0x0406 tx timeout [ 896.021487][T11666] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1301'. [ 896.290408][T11274] hsr_slave_0: entered promiscuous mode [ 896.401710][T11274] hsr_slave_1: entered promiscuous mode [ 896.423741][T11274] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 896.471858][T11274] Cannot create hsr debugfs directory [ 897.917917][T11294] hsr_slave_0: entered promiscuous mode [ 897.960241][T11294] hsr_slave_1: entered promiscuous mode [ 898.241775][ T936] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 898.333015][T11294] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 898.340630][T11294] Cannot create hsr debugfs directory [ 899.223424][ T936] usb 1-1: Using ep0 maxpacket: 8 [ 899.249617][ T936] usb 1-1: New USB device found, idVendor=0c45, idProduct=6128, bcdDevice=c4.6d [ 899.260434][ T936] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 899.270094][ T936] usb 1-1: Product: syz [ 899.278157][ T936] usb 1-1: Manufacturer: syz [ 899.285196][ T936] usb 1-1: SerialNumber: syz [ 899.298420][ T936] usb 1-1: config 0 descriptor?? [ 899.343829][ T936] gspca_main: sonixj-2.14.0 probing 0c45:6128 [ 899.675065][ T2527] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 900.175800][ T936] gspca_sonixj: reg_r err -32 [ 900.182596][ T936] sonixj 1-1:0.0: probe with driver sonixj failed with error -32 [ 900.228073][ T936] usb 1-1: USB disconnect, device number 21 [ 900.359363][ T2527] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 900.595787][ T2527] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 900.815112][T11721] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1315'. [ 900.905573][ T2527] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 901.317906][T11707] syzkaller0: entered promiscuous mode [ 901.355663][T11707] syzkaller0: entered allmulticast mode [ 905.600052][T11768] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1328'. [ 905.623347][T11768] netlink: 176 bytes leftover after parsing attributes in process `syz.0.1328'. [ 907.795082][ T5249] Bluetooth: hci4: command 0x0406 tx timeout [ 909.107519][ T5249] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 909.272618][ T5249] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 909.282456][ T5249] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 909.293013][ T5249] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 909.303945][ T5249] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 909.342209][ T5249] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 910.700490][ T5249] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 910.712876][ T5249] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 910.733859][ T5249] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 910.756566][ T5249] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 910.765150][ T5249] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 910.781934][ T5249] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 911.237518][ T2527] bridge_slave_1: left allmulticast mode [ 911.257925][ T2527] bridge_slave_1: left promiscuous mode [ 911.304587][ T2527] bridge0: port 2(bridge_slave_1) entered disabled state [ 911.393176][ T2527] bridge_slave_0: left allmulticast mode [ 911.411689][ T5249] Bluetooth: hci5: command tx timeout [ 911.429998][ T2527] bridge_slave_0: left promiscuous mode [ 911.463550][ T2527] bridge0: port 1(bridge_slave_0) entered disabled state [ 911.477450][T11819] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1341'. [ 911.496702][T11819] netlink: 176 bytes leftover after parsing attributes in process `syz.0.1341'. [ 912.402485][ T5246] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 912.412815][ T5246] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 912.420877][ T5246] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 912.447723][ T5246] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 912.456704][ T5246] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 912.464408][ T5246] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 912.931779][ T5249] Bluetooth: hci7: command tx timeout [ 913.537569][ T5249] Bluetooth: hci5: command tx timeout [ 914.450492][ T2527] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 914.481735][ T2527] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 914.513352][ T2527] bond0 (unregistering): Released all slaves [ 914.541757][ T5249] Bluetooth: hci1: command tx timeout [ 914.767632][T11849] loop3: detected capacity change from 0 to 64 [ 915.012037][ T5249] Bluetooth: hci7: command tx timeout [ 915.316116][T11851] hfs: keylen 94 too large [ 916.051942][ T5249] Bluetooth: hci5: command tx timeout [ 916.654459][ T5249] Bluetooth: hci1: command tx timeout [ 917.091751][ T5249] Bluetooth: hci7: command tx timeout [ 917.175249][T11865] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1353'. [ 917.265223][T11865] netlink: 176 bytes leftover after parsing attributes in process `syz.0.1353'. [ 917.431539][ T2527] hsr_slave_0: left promiscuous mode [ 917.447683][ T2527] hsr_slave_1: left promiscuous mode [ 917.491391][ T2527] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 917.499511][ T2527] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 917.553269][ T2527] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 917.560730][ T2527] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 917.905995][ T2527] veth1_macvtap: left promiscuous mode [ 917.941686][ T2527] veth0_macvtap: left promiscuous mode [ 917.958514][ T2527] veth1_vlan: left promiscuous mode [ 917.971700][ T2527] veth0_vlan: left promiscuous mode [ 918.131695][ T5249] Bluetooth: hci5: command tx timeout [ 918.693870][ T5249] Bluetooth: hci1: command tx timeout [ 919.291329][ T5249] Bluetooth: hci7: command tx timeout [ 920.772074][ T5249] Bluetooth: hci1: command tx timeout [ 920.944069][ T2527] team0 (unregistering): Port device team_slave_1 removed [ 921.034271][ T5313] kworker/0:7 (5313) used greatest stack depth: 19872 bytes left [ 921.203885][ T2527] team0 (unregistering): Port device team_slave_0 removed [ 921.422123][T11894] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1364'. [ 921.434235][T11894] netlink: 176 bytes leftover after parsing attributes in process `syz.5.1364'. [ 923.552510][T11790] chnl_net:caif_netlink_parms(): no params data found [ 925.587333][T11790] bridge0: port 1(bridge_slave_0) entered blocking state [ 925.621692][T11790] bridge0: port 1(bridge_slave_0) entered disabled state [ 925.653620][T11790] bridge_slave_0: entered allmulticast mode [ 925.681359][T11790] bridge_slave_0: entered promiscuous mode [ 925.922293][T11790] bridge0: port 2(bridge_slave_1) entered blocking state [ 925.929582][T11790] bridge0: port 2(bridge_slave_1) entered disabled state [ 926.027591][T11790] bridge_slave_1: entered allmulticast mode [ 926.108991][T11790] bridge_slave_1: entered promiscuous mode [ 926.484907][T11790] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 926.517112][T11953] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1376'. [ 926.779096][T11790] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 927.017434][T11810] chnl_net:caif_netlink_parms(): no params data found [ 927.335869][T11790] team0: Port device team_slave_0 added [ 927.539800][T11790] team0: Port device team_slave_1 added [ 927.681245][T11828] chnl_net:caif_netlink_parms(): no params data found [ 928.165543][T11790] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 928.179283][T11790] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 928.231525][T11790] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 928.618843][ T2527] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 929.284769][T11790] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 929.313903][T11790] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 929.430207][T11790] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 929.744431][ T2527] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 929.851119][T11810] bridge0: port 1(bridge_slave_0) entered blocking state [ 929.869356][T11810] bridge0: port 1(bridge_slave_0) entered disabled state [ 929.889960][T11810] bridge_slave_0: entered allmulticast mode [ 929.923295][T11810] bridge_slave_0: entered promiscuous mode [ 930.192371][ T2527] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 930.330998][T11810] bridge0: port 2(bridge_slave_1) entered blocking state [ 930.339430][T11810] bridge0: port 2(bridge_slave_1) entered disabled state [ 930.354699][T11810] bridge_slave_1: entered allmulticast mode [ 930.367713][T11810] bridge_slave_1: entered promiscuous mode [ 930.403354][ T5299] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 930.565694][ T2527] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 930.601584][ T5299] usb 4-1: Using ep0 maxpacket: 32 [ 930.618722][ T5299] usb 4-1: New USB device found, idVendor=0458, idProduct=7006, bcdDevice=69.91 [ 930.628714][ T5299] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 930.670714][ T5299] usb 4-1: config 0 descriptor?? [ 930.693094][ T5299] gspca_main: sunplus-2.14.0 probing 0458:7006 [ 930.763565][T11790] hsr_slave_0: entered promiscuous mode [ 930.790913][T11790] hsr_slave_1: entered promiscuous mode [ 930.806660][T11790] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 930.825673][T11790] Cannot create hsr debugfs directory [ 930.882581][T11828] bridge0: port 1(bridge_slave_0) entered blocking state [ 930.889893][T11828] bridge0: port 1(bridge_slave_0) entered disabled state [ 930.899949][T11828] bridge_slave_0: entered allmulticast mode [ 930.910237][T11828] bridge_slave_0: entered promiscuous mode [ 931.007019][T11810] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 931.055382][T11810] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 931.162431][T11828] bridge0: port 2(bridge_slave_1) entered blocking state [ 931.177132][T11828] bridge0: port 2(bridge_slave_1) entered disabled state [ 931.185279][T11828] bridge_slave_1: entered allmulticast mode [ 931.195563][T11828] bridge_slave_1: entered promiscuous mode [ 931.306223][ T5299] gspca_sunplus: reg_w_riv err -71 [ 931.330698][ T5299] sunplus 4-1:0.0: probe with driver sunplus failed with error -71 [ 931.354173][ T5299] usb 4-1: USB disconnect, device number 12 [ 931.536126][T11828] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 931.640687][T11828] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 931.812819][T11810] team0: Port device team_slave_0 added [ 931.828095][T11810] team0: Port device team_slave_1 added [ 932.910449][T11828] team0: Port device team_slave_0 added [ 932.998974][T11810] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 933.031102][T11810] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 933.057061][ C0] vkms_vblank_simulate: vblank timer overrun [ 933.128905][T11810] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 933.349326][T11828] team0: Port device team_slave_1 added [ 933.477605][T11810] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 933.502025][T11810] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 933.527933][ C0] vkms_vblank_simulate: vblank timer overrun [ 933.611485][T11810] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 933.814788][T12025] netlink: 'syz.5.1391': attribute type 29 has an invalid length. [ 933.851974][T12026] netlink: 'syz.5.1391': attribute type 29 has an invalid length. [ 934.483181][T11828] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 934.581683][T11828] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 934.607656][ C0] vkms_vblank_simulate: vblank timer overrun [ 934.740400][T11828] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 934.988797][T11828] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 935.031666][T11828] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 935.081681][T11828] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 935.148739][ T2527] bridge_slave_1: left allmulticast mode [ 935.155886][ T2527] bridge_slave_1: left promiscuous mode [ 935.165829][ T2527] bridge0: port 2(bridge_slave_1) entered disabled state [ 935.184164][ T2527] bridge_slave_0: left allmulticast mode [ 935.210148][ T2527] bridge_slave_0: left promiscuous mode [ 935.232974][T12040] ------------[ cut here ]------------ [ 935.239328][T12040] kernel BUG at mm/page_table_check.c:157! [ 935.250916][ T2527] bridge0: port 1(bridge_slave_0) entered disabled state SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 935.276608][T12040] Oops: invalid opcode: 0000 [#1] PREEMPT SMP KASAN NOPTI [ 935.283769][T12040] CPU: 1 UID: 0 PID: 12040 Comm: syz.3.1396 Not tainted 6.10.0-syzkaller-12708-g2f8c4f506285 #0 [ 935.294219][T12040] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 935.304288][T12040] RIP: 0010:__page_table_check_zero+0x306/0x370 [ 935.310561][T12040] Code: ff 48 89 ef e8 ab d0 ff ff 48 83 c4 10 5b 5d 41 5c 41 5d 41 5e 41 5f e9 c8 dd 97 ff e8 c3 dd 97 ff 90 0f 0b e8 bb dd 97 ff 90 <0f> 0b e8 b3 dd 97 ff 90 0f 0b e8 5b b6 f5 ff e9 85 fd ff ff 48 c7 [ 935.330179][T12040] RSP: 0018:ffffc900036ffab8 EFLAGS: 00010283 [ 935.336251][T12040] RAX: 000000000000a415 RBX: 0000000000000001 RCX: ffffc90009ead000 [ 935.344224][T12040] RDX: 0000000000040000 RSI: ffffffff81f3fdc5 RDI: 0000000000000005 [ 935.352195][T12040] RBP: ffff8880180611c0 R08: 0000000000000005 R09: 0000000000000000 [ 935.360165][T12040] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000000 [ 935.368135][T12040] R13: 0000000000000002 R14: ffff88801806120c R15: dffffc0000000000 [ 935.376110][T12040] FS: 00007f29d43216c0(0000) GS:ffff8880b9300000(0000) knlGS:0000000000000000 [ 935.385047][T12040] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 935.391651][T12040] CR2: 0000000000000000 CR3: 000000007e30e000 CR4: 0000000000350ef0 [ 935.399630][T12040] Call Trace: [ 935.402904][T12040] [ 935.405835][T12040] ? show_regs+0x8c/0xa0 [ 935.410103][T12040] ? die+0x36/0xa0 [ 935.413826][T12040] ? do_trap+0x232/0x430 [ 935.418084][T12040] ? __page_table_check_zero+0x306/0x370 [ 935.423751][T12040] ? __page_table_check_zero+0x306/0x370 [ 935.429578][T12040] ? do_error_trap+0xf4/0x230 [ 935.434274][T12040] ? __page_table_check_zero+0x306/0x370 [ 935.439934][T12040] ? handle_invalid_op+0x34/0x40 [ 935.444889][T12040] ? __page_table_check_zero+0x306/0x370 [ 935.450543][T12040] ? exc_invalid_op+0x2e/0x50 [ 935.455226][T12040] ? asm_exc_invalid_op+0x1a/0x20 [ 935.460266][T12040] ? __page_table_check_zero+0x305/0x370 [ 935.465932][T12040] ? __page_table_check_zero+0x306/0x370 [ 935.471633][T12040] ? __page_table_check_zero+0x305/0x370 [ 935.477297][T12040] free_unref_page+0x659/0xe40 [ 935.482099][T12040] hcd_buffer_free_pages+0xe8/0x180 [ 935.487338][T12040] dec_usb_memory_use_count+0x27b/0x410 [ 935.492904][T12040] ? __pfx_usbdev_vm_close+0x10/0x10 [ 935.498206][T12040] mmap_region+0x15f1/0x2760 [ 935.502808][T12040] ? __pfx_mmap_region+0x10/0x10 [ 935.507749][T12040] ? srso_alias_return_thunk+0x5/0xfbef5 [ 935.513399][T12040] ? security_mmap_addr+0x8e/0xb0 [ 935.518448][T12040] ? srso_alias_return_thunk+0x5/0xfbef5 [ 935.524091][T12040] ? __get_unmapped_area+0x271/0x3a0 [ 935.529400][T12040] do_mmap+0xbfb/0xfb0 [ 935.533477][T12040] ? security_mmap_file+0x192/0x1d0 [ 935.538700][T12040] vm_mmap_pgoff+0x1ba/0x360 [ 935.543319][T12040] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 935.548461][T12040] ksys_mmap_pgoff+0x332/0x5d0 [ 935.553248][T12040] __x64_sys_mmap+0x125/0x190 [ 935.557932][T12040] do_syscall_64+0xcd/0x250 [ 935.562462][T12040] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 935.568370][T12040] RIP: 0033:0x7f29d3577299 [ 935.572799][T12040] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 935.592413][T12040] RSP: 002b:00007f29d4321048 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 935.600828][T12040] RAX: ffffffffffffffda RBX: 00007f29d3705f80 RCX: 00007f29d3577299 [ 935.608800][T12040] RDX: 000000000200000f RSI: 0000000000004000 RDI: 0000000020ff9000 [ 935.616769][T12040] RBP: 00007f29d35e48e6 R08: 0000000000000007 R09: 0000000000000000 [ 935.624738][T12040] R10: 0000000000000012 R11: 0000000000000246 R12: 0000000000000000 [ 935.632708][T12040] R13: 000000000000000b R14: 00007f29d3705f80 R15: 00007ffeea160ee8 [ 935.640695][T12040] [ 935.643709][T12040] Modules linked in: [ 935.771922][T12040] ---[ end trace 0000000000000000 ]--- [ 935.787892][T12040] RIP: 0010:__page_table_check_zero+0x306/0x370 [ 935.832427][T12040] Code: ff 48 89 ef e8 ab d0 ff ff 48 83 c4 10 5b 5d 41 5c 41 5d 41 5e 41 5f e9 c8 dd 97 ff e8 c3 dd 97 ff 90 0f 0b e8 bb dd 97 ff 90 <0f> 0b e8 b3 dd 97 ff 90 0f 0b e8 5b b6 f5 ff e9 85 fd ff ff 48 c7 [ 935.941955][T12040] RSP: 0018:ffffc900036ffab8 EFLAGS: 00010283 [ 935.948144][T12040] RAX: 000000000000a415 RBX: 0000000000000001 RCX: ffffc90009ead000 [ 935.956217][T12040] RDX: 0000000000040000 RSI: ffffffff81f3fdc5 RDI: 0000000000000005 [ 935.964478][T12040] RBP: ffff8880180611c0 R08: 0000000000000005 R09: 0000000000000000 [ 936.007134][T12040] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000000 [ 936.017633][T12040] R13: 0000000000000002 R14: ffff88801806120c R15: dffffc0000000000 [ 936.030140][T12040] FS: 00007f29d43216c0(0000) GS:ffff8880b9300000(0000) knlGS:0000000000000000 [ 936.039241][T12040] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 936.050944][T12040] CR2: 0000000000000000 CR3: 000000007e30e000 CR4: 0000000000350ef0 [ 936.059640][T12040] Kernel panic - not syncing: Fatal exception [ 936.065960][T12040] Kernel Offset: disabled [ 936.070280][T12040] Rebooting in 86400 seconds..