last executing test programs: 8.032277748s ago: executing program 0 (id=2352): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0xf, &(0x7f00000002c0)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [], {{0x7, 0x1, 0x7, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 7.761454541s ago: executing program 0 (id=2357): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) syz_open_dev$usbfs(0x0, 0x3, 0x40000) chdir(0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file2\x00', 0x0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0x1ffffe, 0x10100}, &(0x7f0000000080)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0) r5 = syz_open_dev$usbfs(0x0, 0x77, 0x129301) r6 = syz_io_uring_setup(0x231, 0x0, &(0x7f0000000000)=0x0, 0x0) syz_io_uring_submit(r7, 0x0, 0x0) io_uring_enter(r6, 0x7a98, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f00000002c0)={[{@dyn}]}) r8 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000840)='./file0\x00', &(0x7f0000000080), 0x18) utimensat(r8, 0x0, 0x0, 0x0) ioctl$USBDEVFS_FREE_STREAMS(r5, 0x802c550a, &(0x7f0000000180)=ANY=[]) syz_usb_disconnect(0xffffffffffffffff) 5.612279193s ago: executing program 0 (id=2370): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x206, 0x8401) ioctl$USBDEVFS_BULK(r0, 0x5523, 0x0) socket(0x15, 0x5, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000100001040100"/20, @ANYRES32=0x0, @ANYBLOB="7b130000000000003800128008000100677470002c00028008", @ANYRES32, @ANYBLOB="08000200", @ANYBLOB="08000200", @ANYRES32, @ANYBLOB="0800030008000000"], 0x60}}, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = landlock_create_ruleset(&(0x7f0000000140)={0x0, 0x2}, 0x10, 0x0) r2 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x1) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="08ea000015a1"]) landlock_restrict_self(r1, 0x0) landlock_restrict_self(r1, 0x0) r3 = landlock_create_ruleset(&(0x7f00000002c0)={0x0, 0x1}, 0x10, 0x0) landlock_restrict_self(r3, 0x0) landlock_restrict_self(r3, 0x0) mkdir(&(0x7f00000000c0)='./control\x00', 0x180) rmdir(&(0x7f0000000040)='./control\x00') r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/fscaps', 0x8200, 0x0) lseek(r4, 0x100002, 0x0) getdents(r4, 0x0, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) semget(0x2, 0x3, 0x100) sendmsg$nl_xfrm(r5, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=ANY=[@ANYBLOB="e4010000160011040000000000000000fc000000000000000000000000000000fc0100"/59, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc01000000000000000000000000000000000000330000000000000000000000000000000000000000000000000000000029df4a373df8eb3600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fefefffd08001600000500"/236, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000000000000000000000e000000100"/168], 0x1e4}}, 0x0) r6 = syz_open_dev$usbfs(&(0x7f0000000040), 0x200, 0x2) r7 = dup(r6) ioctl$USBDEVFS_CONTROL(r7, 0xc0185500, &(0x7f0000000080)={0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x89901) r8 = socket$inet_smc(0x2b, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, r8, 0xffffffffffff9000) 5.594021085s ago: executing program 4 (id=2371): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'veth1_macvtap\x00', &(0x7f0000000000)=@ethtool_link_settings={0x4c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x4}}) 4.576751081s ago: executing program 4 (id=2373): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x18, 0x10, &(0x7f0000000540)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xae, &(0x7f0000000140)=""/174, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x5, 0x4}, 0x8, 0x10, &(0x7f00000000c0)={0x3, 0x6, 0x3, 0x6}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000016c0)=[0xffffffffffffffff], 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f0000000600)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000940)=""/186, 0xba}, {&(0x7f0000000a00)=""/106, 0x6a}, {&(0x7f0000000a80)=""/208, 0xd0}, {&(0x7f0000000e40)=""/115, 0x73}, {&(0x7f0000000c00)=""/79, 0x4f}, {&(0x7f0000000c80)=""/113, 0x71}, {&(0x7f0000000d00)=""/96, 0x60}], 0x7, &(0x7f0000000d80)=""/176, 0xb0}, 0x4}], 0x1, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$inet6(0xa, 0x3, 0x4) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f00000006c0)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0xfffffd8a) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000180)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r3, 0x29, 0x30, &(0x7f0000000800)=ANY=[@ANYBLOB="010000000a00000000000000ff02000000000000000000000000000100"/121], 0x90) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) close(r6) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r6, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'}) close(r4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) openat$tun(0xffffffffffffff9c, 0x0, 0x1c1842, 0x0) 4.567052992s ago: executing program 0 (id=2374): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.current\x00', 0x26e1, 0x0) ioctl$TUNSETNOCSUM(r0, 0x8923, 0x20000000) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) socket(0x21, 0x2, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, &(0x7f00000000c0)) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = getpid() syz_pidfd_open(r3, 0x0) syz_pidfd_open(r3, 0x0) r4 = dup(r2) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x804, 0x1, 0x103, 0x1}, 0x20) 3.735156833s ago: executing program 4 (id=2377): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x2401, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000040)=0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$nl_netfilter(0x10, 0x3, 0xc) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x9, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000fb000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r6}, 0x10) fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0) r7 = socket$kcm(0x2, 0xa, 0x2) ioctl$vim2m_VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045612, &(0x7f0000000080)=0x1) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) fcntl$addseals(r7, 0x409, 0x8) 3.486976344s ago: executing program 0 (id=2379): syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000900)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7b5, 0x312, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, "9c304bad897e0216795983be31b98b78a3cddf"}) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, "00009200000000000000000000000058b200"}) write(r1, &(0x7f00000002c0)="75a33cfa187943c188a4af529c3eb5ec3853012fc2215239fea9c75d3dfbbaa05f7989732f2356219489e03f2c556b6f8eb4e0252113fd10038458b8d7d25721dd97c475ce74153b55763b504061", 0x4e) socket$alg(0x26, 0x5, 0x0) socket(0x21, 0x2, 0x2) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) r2 = syz_open_pts(r1, 0x8840) r3 = dup(r2) read$FUSE(r3, &(0x7f0000000380)={0x2020}, 0x2020) 2.345875191s ago: executing program 4 (id=2382): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000480)={0xb8, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x72, 0xe, {{{}, {}, @device_b, @device_b}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ibss_ssid}, @val, @val={0x3, 0x1}, @void, @void, @val={0x5, 0x3}, @void, @val={0x2a, 0x1}, @void, @val={0x2d, 0x1a}, @val={0x72, 0x6}, @val={0x71, 0x7}, @val={0x76, 0x6}}}, @NL80211_ATTR_FTM_RESPONDER={0x10, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_CIVICLOC={0x5, 0x3, '\n'}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}]}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0xb8}}, 0x0) writev(r0, 0x0, 0x0) 2.268868627s ago: executing program 1 (id=2383): r0 = socket(0x11, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000080)={'ipvlan1\x00', {0x2, 0x0, @local}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ipvlan1\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000000)={@ipv4, 0x0, r3}) 2.268555237s ago: executing program 4 (id=2384): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/vmallocinfo\x00', 0x0, 0x0) read$FUSE(r0, 0x0, 0x0) 2.169497366s ago: executing program 4 (id=2385): timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r1 = openat$dma_heap(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000100)={0x4, r0}) 2.149482377s ago: executing program 1 (id=2386): bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000020c0)=ANY=[@ANYBLOB="98030000", @ANYRES16=r2, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r3, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff080211000001bae9ee14d4284d"], 0x398}}, 0x0) 2.057628165s ago: executing program 1 (id=2387): pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000300)={&(0x7f0000000040), 0xc, &(0x7f00000002c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="f80000000101050000000000000000000a00000728000d801c000380060002004e230000060801004e220000060002004e23000008000200000000000000164000000080000000050000f7ed00000aa01c000f8008000340000048f1080003400000000108000140800000020800034000003004940001802c000180000001006401010200000200ac14142306000340000100000dfe028005000100010000001400018008000100ac1414aa08000200640101000c0002800500010001000000060003400002000006000340000300000c000280050001002d0000000c000280050001003a0000000600034000030000"], 0xaf}}, 0x0) epoll_create1(0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x2, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x7fff0000}, {0x4, 0xb9, 0x4a, 0x9}]}) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/disk', 0x169a82, 0x0) sendfile(r1, r1, 0x0, 0xb) r2 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r2, 0x0, 0x0) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000100)}], 0x1) socket$netlink(0x10, 0x3, 0x12) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r3, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x50032, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21}, &(0x7f0000bbdffc)) mremap(&(0x7f0000000000/0x9000)=nil, 0x600a00, 0x200002, 0x3, &(0x7f0000a00000/0x600000)=nil) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x401d031, 0xffffffffffffffff, 0x0) 1.618132833s ago: executing program 1 (id=2390): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) kcmp(0x0, 0x0, 0x2, 0xffffffffffffffff, 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f0000000600)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000022c0)=""/4096, 0x1000}, {&(0x7f0000000100)=""/60, 0x3c}, {&(0x7f0000000300)=""/120, 0x78}, {0x0}], 0x4, &(0x7f0000000480)=""/37, 0x25}, 0xa7}, {{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000940)=""/186, 0xba}, {&(0x7f0000000a00)=""/106, 0x6a}, {&(0x7f0000000a80)=""/208, 0xd0}, {&(0x7f0000000e40)=""/115, 0x73}, {&(0x7f0000000c00)=""/79, 0x4f}, {&(0x7f0000000c80)=""/113, 0x71}, {&(0x7f0000000d00)=""/96, 0x60}], 0x7, &(0x7f0000000d80)=""/176, 0xb0}, 0x4}], 0x2, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$inet6(0xa, 0x3, 0x4) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f00000006c0)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0xfffffd8a) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000180)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r3, 0x29, 0x30, &(0x7f0000000800)=ANY=[@ANYBLOB="010000000a00000000000000ff02000000000000000000000000000100"/121], 0x90) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) close(r6) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r6, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'}) close(r4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) 1.605475754s ago: executing program 3 (id=2391): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000085000000230000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000d00)='kfree\x00', r0}, 0x10) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socket$rds(0x15, 0x5, 0x0) socket$netlink(0x10, 0x3, 0x5) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000540)}, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x2d, &(0x7f00000000c0), 0x4) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0xa0, 0x30, 0x9, 0x0, 0x0, {}, [{0x8c, 0x1, [@m_bpf={0x88, 0x1, 0x0, 0x0, {{0x8}, {0x60, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x3c, 0x4, [{}, {}, {0x3}, {}, {}, {}, {0x6}]}, @TCA_ACT_BPF_PARMS={0x18}]}, {}, {0xc}, {0xc}}}]}]}, 0xa0}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000008850000007600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000340)=@newtaction={0x64, 0x30, 0xffffffffffffffff, 0x0, 0x0, {}, [{0x50, 0x1, [@m_bpf={0x4c, 0x1, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x1}}, @TCA_ACT_BPF_FD={0x8, 0x5, r3}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) 1.261822893s ago: executing program 2 (id=2393): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="580000001000370400"/20, @ANYRES32=r2], 0x58}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140), 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@gettaction={0x14, 0x32, 0x400, 0x70bd2b, 0x25dfdbfa}, 0x14}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000014c0)=@newtfilter={0x24, 0x2c, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0xc}}}, 0x24}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.191754119s ago: executing program 3 (id=2394): unshare(0x400) socket(0x1e, 0x1, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x0, @dev}, 0x10, 0x0}, 0x300048c1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) preadv(r0, &(0x7f00000001c0)=[{&(0x7f0000000640)=""/102383, 0x18fef}], 0x1, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_int(r2, 0x0, 0x2, 0x0) write$cgroup_subtree(r3, 0x0, 0x31) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000100)) openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x88602, 0x0) r4 = syz_open_dev$sndpcmp(0x0, 0x0, 0xa2c65) write$snddsp(r4, 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r4, 0xc0884113, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x800000000040, 0x0, 0x0, 0xfffffffffffffffe}) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(0xffffffffffffffff, 0x0, 0x0) listen(r0, 0x7) connect$inet(0xffffffffffffffff, 0x0, 0x0) 990.587576ms ago: executing program 3 (id=2395): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={0x0, r1, 0x0, 0x1}, 0xffffff88) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r3, 0x0, 0x8008000000010, &(0x7f00000003c0)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a", 0x5c) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r4, 0x0, 0x24, &(0x7f00000003c0)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff06011500390100000000000007000000000000000002fffb02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce", 0xb3) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x2, 0x13, 0x0, 0x0, 0x2}, 0x10}}, 0x4000000) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f00000001c0), 0x4) r5 = syz_open_dev$vim2m(&(0x7f0000000040), 0x8, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_QBUF(r5, 0xc044560f, &(0x7f00000001c0)=@mmap={0x0, 0x2, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "2063569a"}, 0x401}) close_range(r4, 0xffffffffffffffff, 0x0) socket(0x1f, 0x2, 0x6) 989.762546ms ago: executing program 2 (id=2396): r0 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00') fchdir(r0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents(r1, &(0x7f0000000080)=""/46, 0x2e) getdents(r1, 0x0, 0xbb) 815.045221ms ago: executing program 2 (id=2397): bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000020c0)=ANY=[@ANYBLOB="98030000", @ANYRES16=r2, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r3, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff080211000001bae9ee14d4284d"], 0x398}}, 0x0) 771.087444ms ago: executing program 2 (id=2398): r0 = syz_open_dev$usbfs(&(0x7f0000000280), 0x77, 0x101a01) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x802c550a, &(0x7f0000000000)=ANY=[@ANYBLOB="0200a10318000aff6000000002"]) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'vlan0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=@delneigh={0x30, 0x1c, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r5, 0x0, 0x2}, [@NDA_LLADDR={0xa, 0x2, @broadcast}, @NDA_VLAN={0x6, 0x5, 0x3}]}, 0x30}}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r3, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000300)={&(0x7f0000000440)={0xcc, 0x2, 0x8, 0x101, 0x0, 0x0, {0x0, 0x0, 0x7}, [@CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @fccp=[@CTA_TIMEOUT_DCCP_RESPOND={0x8, 0x2, 0x1, 0x0, 0x1000}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x886c}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x88be}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x3}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0xa1}, @CTA_TIMEOUT_DATA={0x1c, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x9}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}, @CTA_TIMEOUT_DATA={0x44, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x5}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x81}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x101}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x3}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x3}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x6}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0x40000}, 0x40000) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYBLOB=',wfdno=', @ANYRESDEC=r6]) msgctl$IPC_SET(0x0, 0x1, 0x0) msgsnd(0x0, &(0x7f0000000000)={0x1}, 0x8, 0x800) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f00000003c0)={0x5, r3, 0x2}) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000000000000000000000000009500000001000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x0, r7, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r8, 0x0, 0xfffffffffffffffd}, 0x18) ioctl$KVM_SET_IRQCHIP(r2, 0xc048aec8, &(0x7f0000000080)={0x1, 0x0, @pic={0x10, 0xb, 0x5, 0x2f, 0x8, 0x4, 0x1, 0x1, 0x3, 0x2, 0x7, 0x3, 0x7f, 0x8, 0x6, 0xa0}}) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='tmpfs\x00', 0x0, &(0x7f00000001c0)='grpquota') umount2(&(0x7f0000000340)='./file0\x00', 0x0) 290.987455ms ago: executing program 1 (id=2399): socket$nl_route(0x10, 0x3, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) syz_open_procfs(0x0, &(0x7f0000000300)='net/vlan/vlan0\x00') socket$inet6_sctp(0xa, 0x1, 0x84) socket(0x2000000000000021, 0x2, 0x10000000000002) syz_io_uring_setup(0xa94, &(0x7f0000000280), 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket(0x10, 0x3, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r4, r1, 0x25, 0x2, @val=@tcx={@void, @value}}, 0x40) syz_emit_ethernet(0x22, &(0x7f0000000100)={@broadcast, @local, @val={@void, {0x8847}}, {@can={0xc, {{}, 0x0, 0x0, 0x0, 0x0, "534ead40a3537293"}}}}, 0x0) 262.136727ms ago: executing program 3 (id=2400): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) unshare(0x20020400) connect$unix(r0, 0x0, 0x0) 193.079294ms ago: executing program 2 (id=2401): r0 = fsopen(&(0x7f00000003c0)='ext3\x00', 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 180.617355ms ago: executing program 1 (id=2402): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) syz_open_dev$usbfs(0x0, 0x3, 0x40000) chdir(0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file2\x00', 0x0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0x1ffffe, 0x10100}, &(0x7f0000000080)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0) r5 = syz_open_dev$usbfs(0x0, 0x77, 0x129301) r6 = syz_io_uring_setup(0x231, 0x0, &(0x7f0000000000)=0x0, 0x0) syz_io_uring_submit(r7, 0x0, 0x0) io_uring_enter(r6, 0x7a98, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f00000002c0)={[{@dyn}]}) r8 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000840)='./file0\x00', &(0x7f0000000080), 0x18) utimensat(r8, 0x0, 0x0, 0x0) ioctl$USBDEVFS_FREE_STREAMS(r5, 0x802c550a, &(0x7f0000000180)=ANY=[]) syz_usb_disconnect(0xffffffffffffffff) 105.452821ms ago: executing program 3 (id=2403): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@newlink={0x44, 0x10, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20011}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_TTL={0x5, 0x4, 0x4}, @IFLA_IPTUN_ENCAP_LIMIT={0x5, 0x6, 0x8}]}}}]}, 0x44}}, 0x0) 104.884871ms ago: executing program 2 (id=2404): mremap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000, 0x0, &(0x7f0000c87000/0x2000)=nil) mmap(&(0x7f00003d0000/0x1000)=nil, 0x1000, 0x0, 0xb5972, 0xffffffffffffffff, 0x0) r0 = gettid() process_vm_writev(r0, &(0x7f00000000c0)=[{&(0x7f000034afa4)=""/1, 0x1}], 0x1, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$NL80211_CMD_SET_COALESCE(r1, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000040)={0x28, r2, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r4}, @void}}}, 0x28}}, 0x0) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r6, 0x0, 0x12, &(0x7f0000000100)=0x7, 0x4) r7 = syz_open_dev$usbmon(&(0x7f00000000c0), 0x80000, 0x0) r8 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$MON_IOCX_MFETCH(r7, 0xc00c9207, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}) ioctl$USBDEVFS_CLEAR_HALT(r8, 0xc0105502, &(0x7f0000000340)={0x1, 0x1}) ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSACTIVE(r5, 0x40087446, &(0x7f0000000640)={0xcf48d3a6fe8118a9, &(0x7f0000000040)}) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r10 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto$inet6(r10, &(0x7f0000000b40)="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", 0x1000, 0x4000010, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0x21}, 0x1c3}, 0x1c) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r9, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000480)={0xa8, r9, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r11}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x71, 0xe, {{{}, {}, @device_b, @device_b}, 0x0, @default, 0x200, @val={0x0, 0x5, @random="05cc453654"}, @val, @val={0x3, 0x1}, @void, @void, @val={0x5, 0x3}, @void, @val={0x2a, 0x1}, @void, @val={0x2d, 0x1a}, @val={0x72, 0x6}, @val={0x71, 0x7}, @val={0x76, 0x6}}}, @NL80211_ATTR_FTM_RESPONDER={0x8, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_ENABLED={0x4}]}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0xa8}}, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) 39.940396ms ago: executing program 0 (id=2405): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='bond0\x00', 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0xfef2) sched_setaffinity(0x0, 0xffffffffffffffca, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f0000000640)=@raw={'raw\x00', 0x4001, 0x3, 0x1318, 0x1158, 0x0, 0x148, 0x1158, 0x148, 0x1280, 0x240, 0x240, 0x1280, 0x240, 0x7fffffe, 0x0, {[{{@ip={@multicast2, @remote, 0x0, 0x0, 'ip6gretap0\x00', 'bridge0\x00'}, 0x0, 0x10f8, 0x1158, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'lo\x00', {0x0, 0x0, 0x1ff, 0x0, 0x0, 0xed, 0x7}}}, @common=@unspec=@cgroup1={{0x1030}, {0x1, 0x0, 0x0, 0x0, './cgroup/syz0\x00'}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}, {{@uncond, 0x0, 0xc0, 0x128, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x1378) unshare(0x62040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x18, &(0x7f0000002140)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r3, &(0x7f000000a400)="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", 0x2000, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x90}, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r3, &(0x7f0000004300)={0x50, 0x0, r4, {0x7, 0x26, 0x0, 0x11100}}, 0x50) syz_fuse_handle_req(r3, &(0x7f0000008400)="44ea07862a07eefa4de37092cf4356f54454db90301c4d373d57166f794f169d63344840a37048638ffd5e30beade3fd768b18191001eb890277fad8bdfe3742686deeb34395963bcf7a870addd76c80aba9f771ebdf410c7d7542fc2b6ae9a458d79457755d94ba8a3248b01a2293d8a70e60815b90297002652966a6b836065bcae0b44f4b26be93dec3cd4cdcbbc84c5b916a1b0d8313340675d67fb0c785d0307f95e426546c9a4d0161a8f52b02b95f4da53ced705a658722091864d74ac0a3a5f3853a0ad71ddb29835680ca9ff30531f8df0f0ac66f7f1433c33d75fa8f0f022b175df093648a81af5ed701b2e7a14199c83b539e763dbe7228f2e184a02becd41bae305d3f34c72e8db93dd214ec203eee6e6dab26b41848c95fe1ece8ca157a90bb7a990dac5f3c64cf49c5c5aa8414b9153f82eca9df88d90a8d6c0e72eacd52f82939d46d41e0f5ccf708c03fccecea467f33f5a49888514787e42c0a12255bca89e82344ab01ac3b6c6158e3c1b34ad953eaf55f3a2c487efd9423a542e41dbd0058aa021cb6fdc5df88f807033edd31abaf5ff7e6a9578d2be6a2d925d98108fda2a7e56a0bbcdce0689fa9e2111b0be8f3e2807f7f3728489917a031f2187ad98a744f19851687adf59a4b4c328ad5c4f2eaa0d112041369319f6d3f928c22d05f9fd68b5c268da5e2f433d651bc602a65ee83752c0c92f7e29002faf9475fbb57788d725f6f8fd495a58d88d55ab8467a85d1f41db5964a19bdd45377c7c8c792de5e76e87da9296ff90e7fa9e57f09358d998c8779bb2348d651808e969e960763c5231c65a06ee16979f4d990dbe7e10b3a2392dfd6483bf2c7c5f6f3d941cc17663668cca83dcc38089b4342a801c74039b32550c2d9cf95a0236523933ce3e7538ff9da2b7b741f3cbf53e6084702d0a5dadab4350848f6e7ba46d4736c7a2ae702c480c30dd78f994a10b9c3157a17e9e29576a68139403300586eb0c673252a319aa1cb01efa777228d8242ebdbef9db5c03e4c8e09bf7a009b7eb19357d1ad6d1defc0dbb58c31d85b9f1035056615ad0b0ded12751273c8bb7810ccc5b2efe51d223894b141dda837e6b7ba21de9a978ac447d995394b800e1065906455af544b9d7f353d1eefcd3387d18e3611f3913926f3a4b87efb3a9707d6136dc00e49ea5e7a6d0bea17eb49cae93c0c4422374b0f46250e0d554e1087c1392716d368b04b1da85d271206b465608468802fae00c7ad9425974d822cffbc420e739f7617f59a879f791ab5dd7a6215298cc7dc6904679889e60a09114b0f421b6f1286d0a6ab3dc887c2d3a48d53a7611ec270530b07a83ae1a2bfa6da42ab38bec3eb8ed1e207d91c02e74a31c29abbd25f5779189f5f2494ea5c3f4b829b96de0c54b3851dd58610c2b9ddcc2960f34fb857c5ab1aa67e8eb10a59639db2ddebd0206ae7ee56b21ef484e3c66003af46326f1c456ad2ab5273d0c0b2bf412f71f820ae12723c74e1857e0ae3d5587a0427c1595e06b1d5ab5e815a5558302e0d9c50b8c6cbd599eb554df6f7323b01f1353b557c565dfe0de51032a88541b49ab682a7dbe4dccb9b952ba9c9ce3bbff80af01e47953666327b8acd7d2cf363c6f7172caaf01d8e3417f768ab08f2cfa7ff26efd219e25ef0f9a84c7b116978eeafe3410972490203dbe49aec33f14d5592a466a6efe630904db9c77ece20bec7552b3dfb48d4e0427ce5024fdc0aec7271e93c51aab19d7a40670add6ea5820f625831a593137f60543e424892856b3bb9e608e88e65cc6dca098d5139a38ada517cd788b9f13618d9c2c31d7918cac6cd669710692797e61f4df3938dd429d977cc11e7465a7a23740052039d9b31cd26b95efba17bfcefe121fcbb762d29287145b11a3abb3e0683b9216a8b5d9744baa75da5d840e70cb310c507c4f7eef1d6535d8e11079edcb51df7ea63a7204e314147eeb57916171ca33c0f5932916e4d568d9e7dd3555500ae119f0c63045658303e1f4ea99c896eaeff3ebf76b2def0ea856a3f24cd76dc437236b71dad9a26fbf3882e81565851eb6c5b265a0721be43f0844f4d0e4296011e280236a0ed7656f2eb906e6b2ec4a8e5bf91eb7e8be889ded6d8492bb72f1de26cf3973249ebcb5c993d1dfa896a658a528aadf57dc28a8db32656ed8e416f96e1f89ac24d4ba587df31f3d2d8d7809d06c8b2d68eb15b377918424499cd6a7fb62e49a78831f0e4b1476bef657fb34bd59e34793d21da3f7bd0278bbea8beed261c697ce17f36f1cbc1b94aef11dd1dbf1c68496765258f4cfc8b5fdc9197d7260b733d2061f399c861bc5912ac76cfb62b9218196fe054b92a295a9b9526871167d436b830a7b4944f527fb4d75a036acf3a71a1a710f609f4e794f1d764a5317ac067e8194666dbc73e32b2870eecf8776bb7641dcdd6d764f91dec83fbb53a97e6531211dd8b86bbb57f8acd637f4b1b66fd9705a200e3081ea382262d54edb161927eb1d85cf7b9373a24607c99f3d66b85e22d2cd5cfe24020d56e0552bd43d803882128317d9a56e63a4808ed6401b662187888a0d0b311364fbddad07911b5244877eeace22ab5bd8501d748ed5cb05809e1639678c4c6cc43a3c2fcdd5b0970332429c3cde09d9556c8360f26caa744ce5e57bfaabcf7d124b2d4fa97d7e72f16cdfc35f87493717e2a852b64fa344db5ec72dbdf22dbdfcd12ff796d515d5f3fd3cddbf53426183bbd92e2fd3e91fca8fee1c1ef4f8d59036df9c48fc7677f2c4905b6cf4adcf448029c6c6a2968b13e3b77d578e2661ae7d07ef84fa098bae9a564bc8c507a103990c00a0e6d2854a1689f7b095a100b7f38df028baf20bd56c843c24f8ca4a81130256b13636440836837429c1c86ae1668d3b250108406acdd21b40450399872c1da6178184bf9c2cc11ad80caa9997d3c6631f09ba2a4d96e6b74313f1e40fbf8a29962648f400dd256c4852c556deca2e3443b858efa43d53efcd496bf5037a82e14868b508632bdb2dde924ce2cd6c65f1708c18cf49073e536f09e8fcfa9a44fdbc349ae75e17205754d3bb82d3ee8a93c59aea1bd7ea6d124224b11405f815ed518a1cb9a80191249ac1cc0e5c1f9aab8fe67bb737cdfefac82a89a7d6ae08bb9e1f710cee451d851b35ba9b886dfd9c277dd67891331d43f36353c78c65e9f3524e1b9b229c9f91de7b5ab16a66017d171e2a4e185481d33cb5bd9c5e3d93c49d2c620c16467bf4db73621957f76d656e6d4cb4d59cacf1209da4e39352554cc2abcc8e82379b4f819fd6d261c6d7615f85f6c5d0b9f57976836493367e1bbb14c57983aa97c6e4e7c4fe2a166284c904ac4f70ef2e52e4e7dbd677ace683cd61aa60b702770aa0ddf14b694bf3cfaeb585f8fd8a85bee2f78400a0874dfb4c319be24a46d1914b6e902d5de8d8375c9ec786ef6eccf1ee7a003f83d2e163097980a06ab9fe23c4ae8e91755e4217d3c302111febfa9dce02a49b217aef709d183a5ab8ad1d39e9a697a79be303fdb2290c827279ce187d1c647cc28e20c0b3ebcab2b1c75850db46211150a8bc5d80d868141f885f7a5ef520ecee6d33842141003df4ce066090c8359b5dc32dd9ecb1039454d0b691d8f97932b69981be240804e860a88d1a047f46ff43609b41ea36dc276b28e87364049940ea7b6dc78848221b30dc6aa1b60f17942c96c46e347606d14ef02ed3ebddb20f7f4d28b9460f4af047b772927ca6a046b7de2a21b8ce79eadb74e4825af5e19ac2955999d7304a35851a4b9086ff922da8845da10a55fbb62fd13d98d45f60842d0d6301cd72e7cb97bc84393a414f671e5e0115a6c1c26054a80ddde10e0a83a4ffd123504c881a844bb7187c604f87588dd0d0f11930f9a3cfeb7098f38f84923637f1a9f6b3e3d0899a156d50d7e740b118c4865ec5e69aac247a930007452748bea9af0af511cc1129740510b13f48fe07ef1417ccc765b2cd0138cb51dd71fbdbe967fc321082a9ee4bbd1ea404cb24971de5a1ee7d7993b5d11d67d30e8ba94a9e943852675a07b88a51df6f4abb507cdaee96726023855e4dee6bccb3e26a2a88fb60d812e7856c13af5f4fcb6776ba8e27a35bffc5e46473b31a4b83ea1a3376f4549af87d03102413faccc3fc897ccae95d2700163f1fc5170a643554169018c5cfcf8f50c7981270995d8aaa9f923c0679b258aab60f79111627b71404e1ce8751228972cbb2bebbe25973cf98bf8fe8e63575950a0aaa1ff060f01e96791d128d0b7b40855126ef3910ed7d7a6d9490618da352ad7b889f7d905bca2214224e170f30a088cff91921917c937950926cb11c04fdc6bee776b9abd2aa286ea5074e72756482fcb6a7d072edc075f99e02747ea49a40b26b58118b6692fbe55b09b054a044d1f481173e8923a74806cb770c4c61ffa982077f82bc4db7fee4ae2beed4673e39f5ff0614072a771034174a0f052ce39e27450d18920664e924ee963c9bbc9852fe68f30a199ee4856c1dadc08c061165867438bd3bb73f5a50f5131b7867dc80e0c5d43eae80cc2874d48edc910e7f8f9b73e032a8ccd7c348e84b4179fa101d488c2fc16cdf953e269a9cf13c0dfe575e0da49d7d2c09293296c0232bca9fe0aa8199b21e19746c4783630e432b5c7e1e25864fcd4deae07c2b07782d155fe6e6b5d9eed4beb9db47bae4007753d8be56b10723b5467c64acb0eee4cb9050b4ef2b57b630f4608af96fbe484816454ff385aa3765051408779384c6585f2e24662fcc3008dc17abb07ba9cf96ff4c795c97811e73b06c65e1b5c66c2e1873191d972830b1f53bbfedf8b5e8a64a29fb3b3eca67f1791652f9ac037c2f87c6d1d9d453b12d5d2b0c070a8084aa15505e240bd0c61895383f23f0460027d60dd9efd8539807f717bc353f9b858b9bfd2acecf2190e280faf6a1603566ff8893dba33ad3300e10438241709ba7413fde84810b966b4556f9c8a51aef27f9b9010e7b6208715169a585e42bf3f7333209afb5b19c0de7722004850d53329d93e2e4909eced3da67dd7d2c82a4c9d0d7cb6f5ff7dbf195e8b39ba9cf0c1699ea1f8b6d1293509774ef3bf48597146a60aa5b6eff2bc8a64f9ae9a81becb9c398ab9676d2cecb14d28f819d08050269bb0ca9bcf59d5c9bd2fe2bcdfe82a8f037781c6275c9229b0729cd085e66e2712bdf22009440c4136c2daa54e547386e1acd16a1d30f3d55c1ef0fe10c108210b9d8894d31e5ef17b049106700bae524eef744ef4b3a69e9cfed4efa9b0c9262177f9fe16f5b1fe5bfe5fc6a611e6ffcb9c5f329d4e328cb69912f0dfb7f4a83d326cb20b053653663096870e7ad2753e992dced7405a00a39dc55e652eb6b2e1b1e9782b42f443890c4067b07376c6f0fb2ea6589e04a8eb39a94d913d9f4410d238e6880c167a0a23b266577c41ec3e0f513eb7fc948c12b26ea2646c0481488417d9911a0107ca0ae11c2c4b8c2eefa5144ecf8b149d22abbd26d1b2a3fe51016b9bbfd229c090fc2fbbca4803217c991e36f86d4720b45ae45e6b20f09fcd8e5decd79997e79177bd67de7433282c1d0be5d585a71c873e7171a133d9f5ea35ac0ac5c1a643279ca66a365d278d14eee3ea90961eebb3f6c098c00d051d4716853ec7069be2a4625cef4c0f72abae5309d2709901d05217fc3e52049c4aa16b50121e43ce491d1bc9adb01679ec25ab5009f746170c2517f0072f16c574cb447c6d8ce4a2e45426900463c5303413bf4fe7fd64c273b404cf936068cb3085c3a81b9872ad2cb79aa4c051e7ad97cd4e8c6b94bb0df87e4347ca6f11f155ea265762f81eb0e9fbaf3dc05157eb9f12596ccdf9193018a2226824db6bbebf4e89a070688f698bbf23f30dfb04db7c3d804a7587ad0fd03e68cff7e516e5109e328e1eb3b887a6aced15804f2c898f41c5452e160ca30e35843705c150bad932d2d3fbd791100b1535d9f3306dcf127fa49c1a36b172f46b1fb676ea8783c23edf89b2446560dc1b95b39f80eb9d0994c8dcac9a5a304c554133e1d6ba368468a17312167cda37932cbd4b93c58b7ef772d56d4311182a680e19da6fb938848aad40242856379310b61d6113de6814644092712133823ee2281639b52cec52ab0dbd65ddae631e7113ca75a5476797cde5f5456acbfe63c6ca8b83774690eaca3a019771ca0e742815ca5645418730ee17f52fa2531e5487c10da3ee080acd50fbd19710ed5cb924e28a18985132afbb7d2ff90f6c3855c56970854b9a48ec4f7566d2829e271af3f0ce26742602241fef70461a484499591a9079ed53aed113589fd74918146e1917a063514d7eaa7f4720a386eb2f32b6d35baaa5d36c2013eb405cec607202f19bda80bfeda8005c5d1582208b861437fff41ec0708a6a98f2b4b4463141c1c312a8115509e363a274864898be996176049d5f7e6cba76b3a37c9b2ee9553fc70f79503797464d736d97d0bb4741ea8ad14fde6f18fbb02ae97e5a77bc1527a13f18624927d79aa5b4df2dffde7fb5356e521c7a419209031df8138838151c7e90783c9af133b6961b44f8de89d6348b191cfa6c0ab652746b8582134537727b18c670691f3c1e8ca0e3cefcd26111bef476eb816482b7726399c86cbc98f0f06929c26cf831163bdbe1fa8d8f96a65d3bbb3d37657cec4b77516864cb32404996dae1d0d9f3c12b7f2698f07930b791813b7ccf0f0dcd3320b78833f077ee55aae156af804fa9a15e60c709fb30b06ac092bf97a4fe4732ea7bc93aa73232024c80434b4900cc30de20cbc1ea407746fb186a610fe31635766f5edaa8c9ae974ff8cecc4e7e391a50bdb34ca1dec15e7e8664d7bb59852cfc1fdb361b235c803d70cfc90c229078079619b4a8086a68d420ee1d7fac403b18c7f6aad91612e2f2b9e5e206bf897bd98a3b24a0637e2b986ae7f5d376bd63d63f6c4f151ce7eaa97a30d9d51f1a9207dca6b596831a9b92517b9d5571e72b4a06c07d5ff0d325896a1b32e9fb4f9d67a903946b205fba7beda108fde3fc503c7352c59c03bebc2891007fbe966a0441a7f4bc8320b901563ac8eadba643bdfc1636864d33549a1b9ad3ce01bec94b631ac6f46c453c57c62f2cf0f76d9f1e0731e266311624a138e607e699c91e37a33096117f418b4c92c66d96fa1b1324cfb569e3d558598ee65e69b8e0b9625d551af54a09db8082f2fa9da1386f92245aadaa13bfa3cf5c39fe455180bbb5e2427e4067bd2f5a5c755c31405477ba832dbbdd4af66acc7c11e576f700e24fb4c26160b4443b8c17805238519c7c732df774b92579e02a8da5e9a17e3c20e92afba7fab49000a7b83987ea48d5854a0411615462cabd245ab3f49ba375ef179c0a78059ffc14264177a6e45dc5f2fe6c957a313ba9889fef33b788933bb37a17943551db9cd08fd8d823fd0b35110ad589c3bb3af4f69bd1c7c7a3e726f933e4a0cb1209e75ff14910061c3750b9312de42c86838d5c35a681899c25220ea87aff02bf72fdd8745f5d751e6d62861496890c956143c08a222774974789bb46924b68a6e3138ce9dbca622e78c5aeed8215de4ee5c1f8312b6349a91ef1e210f18522b7a644700e90eff995e950c8eda05d0bb8e799ef32a7ddb8a87b4120a798a3f87cc78b6db0c7947b4786db1618c523203c097ef3d3dc0f4e1e87d0d597c4eaaac05a033a3fa91309c05cd8c14de649d7dd16d8ed81e5290950f66b66fd519a2a16fc6b3526f97aa1121b4fb52b30640122dfb50ff619fb5c88eb1c4e6ed7f6d09fd29e27b3375a1aad5b09f8175157018467f883ba385208fcd32a50a311b22f7951bd0e912d234364f8590e247dea604872f9bb847bb32b3906339f5698d6e7c0f2a3ed17b194239299091f5ee4ed51c75b76bc949cf05df5dd03cd8a553e7ec81881fdc1e15cef5e72eecd7843a981eff417682604769e302f378ff9519cdbd3ba2bfe50f85a903aa08b900118226889e9bc68124777f6e02fb26fff91d1f31d3828243cc46d4b4fa2965445774e0ddc521fe5fc9626fe3428403e746de0196a45e4ff75c5d6acef57f662faf27294be80fed39778a7585b41178ea38f64893f9a46334af6425a4aa46e25e92b0d77750c6737b237dff19913fd9e69ed92c4b6671b4226776b34ae2468907c654bb0f619b2c9b55920fb99e97bf32212f852b615689f3cf4c03d51d1587455b5720692430fe2684522bfe6dae871aa2ff5f00045861ffcfc219888fef8320bec1307236a7a42dd4a691cb6cd4d8436f31a3f2d642b05946dbfee692aee0da31419f9b8bc0e1dcf89a8ffd7856b21b1180ebc8ad75308b1370b93d680e968bcde7d235f601760a5d181f7b55daf330a001ae1da86c130c76fbd956442b6c705889d665560f8b34663390592d85ddde790e0f4f1f0df09c1c6f95477f9d72dc0894b2efe2c3d162ad80f80cae03a06548014293a02f00d6386723d42ab09052f019a1d71d88a78db27afead58bc516be8d23893f007a17ff47b32777752a15648d0ececd345aee1f36c58abb7efaff5567100c0bfa54f172c862e15872abc9d96cead6688f02ea8466fe1134bd3756c6f0df8903fe7935dbe3e635da368f13a10e3018cfb5557d38f859a983a54d660a02bdb3dac2922e7a37651677bfc664d58df59ea625e8e63ee776bcc2937b921f5544924b75cba04bf3cd0df831938f9e9c79572e8492d884646244990920400192c63e15024e2e1239f41390bf7c0e18f852e23d514256ccb8ccb2726710401c4306657fd75eba94a353987780a6d6219012cfe80858060e37652a84ae89d07f5d651fe82a2a8d0e8568492156713b1f76e89e12f76a0254da7d526df51a089600f5b7559afdc63d4872fe8d6ce00a8d0c9b00db5ee676ae2545e74fb7b39f8345a67913b234cfb4f6e3b4e2b1e1f4f1c7fcce8c09cdeb6a1a21bd2370004e583ef62971aec24ce0c6c049b6a2e22081d36854956a362b6cbad48049d7d5f90134d3e77febf87bf4a32c07cdeb36c9cc56b2b3cc8c8b47879a32ff00f3b2e977cee0acb30fc424dbfe24c88d1a08d047925cd7d65a5834e56db2b3e7e0a23dbf948c799db5a48fd4a5fdea43913b2b2c149ae9a98f452b797b55abe1dd44b30232387f466856d6c38ca735dd6175b455363dbf228ef52e443da22a1ee3a158ee304d9ca63c110a3d19ca3bab6d1745affd81c480ff8bcf5f8f7c1ea6d08a7b3c3958c324d42732711170e19523bd209134674b184d4d442a774e04d6eb4ac89a6d018cf0bb68a73da87abce127e57428cf73a5a551c85ea8c376ae951cb8357506f037d17d163172dc5764682c753050f35c6802fb269d7490b196d57bb8a1ada55da7550f82357320e14cf573ed39860f02a11bdad917b2ba2de885c7ea8b30dd62bdad207dfe10e97c8b71abbc8c5661a4483bb6f9488ada0f5885c471cfc1271b60d54f903317cca28ce977f4444cefac5c2ff233dc872d4e809091f8452de9c774ab3bbebf62de92cd6aa7421a41f7d1dea42e4f94bd3a4869c958f3940a99c88835ed2f4021114b9a5bb17240f468887b213814956f9f5e6344cbae19d8753b97c7ce2e9d0954a30dde23dea2748e1c9514672bf4ea3ec3e348a563d9649899e7227708e2e77d0fc5847dc16b59ac3dea9449c176dea2d2ff6b6af764d28dee5ccfd0dfd6e3100d97040657d7ac5da4032e3b7f6b0cef2ec55a83350c3045abb10200c264e6e68e3e03b68546ae48a538063b86315bb8073103a812717f2d8816534fa98d0e956e0f9a67bcdc522cacefc77b0be71832a69ffb72fa15ca4d8b15f7fe03da0f4b24c5fb68e5f3a2297bb0cb0b7bfdeeec4deb64bf71f57820d62c47276e2780b4341b6bc65ac49be09c94013783455a95de92c11d91b9e921a484ed69532b92e202d684d2293a2666709ee38d2114add4c5337bfeef31d481e12530c5c7e83a6c8aa2f580f6da2d735ee5260cf9a7185eff84eb22d6e0d5ac0e63fe6a3def819274a144be5ab90fa157bb7517a54c208aa82da926d5b09ba649e326a654fe8fa9dd7e6d83b0a66253526e5b5aa03e665f2eb4678e8293110420c9d7556df07c7dd1c3e817a4c7409890c4ff5044ecdb34eb652a4d7e20b4b0d596f46ee3c3dad675e958e91c3b40f2d22e671bae51518443042c529c31e343647d6ddeac7ec370970fcc71a24a0826b58d111e9b776ac0e2fa40b3099298ffd0d1c04d41ee1dd039425f52f9f8057ac1f206203f20e1ae9cbae356518ba2fe9e49b47e36942ed7204f3d7da9e71b8d69df3ae7b2de05a13a879af6a1ea6241c645ed73c139e15060aeab6f423c2180dd101863a24f1688ec1a33edc624c3f5e80a20e4cc5c86ab2c692c2d3d17d8a68bb3924efffb29c9fc3df937526452d82a8ca9a558c75d6b2504df1b66c91823216a1c3b3bc39dee0d22491b9c891b9eea193c8af8a992096d0cd74630f7222e9a3530034a582f40601a694cf1085fda7fb33b07332c6aebfa70e2ebb8d7ccf19a69dfb5e4c166add5e153504eeec92f4ea2fe47f291625e1c470b832a488f884692b8ec49b96df235f193027ed38fb4d8b88ed382825df8ffe5b0c6fab8db3e38d60d467f9da725023deb72c378258e911442afae4db650be3621a033a3b84eee65c4c0664ec6d5771cc138937434a6a361de3dc1c12a2a6735f080e94314ddf291516971af252e3cc56e1c65ba5cf8ac2538878b22034ba458e08db26205608ae941a42a27f2643ded87bde626387c2b791ce57991dd2ba08010237279cac2760e19cab9059b229ea002ce4d3b4afa495230e424752f289003a240f5cafc7a83112636321107918d582fad2606a4319199a06ef2cbeaa3e1a4d8c30501aab796f5cbe15453b61218a396b79c547d15d5c11033b3746b432b426404f7b0421b9daafd9e8558f1901283d58e173c4db0511ee826ddc6363eb51e0837c9be6b2078d808d2c05db7495d29322ee6af68b0d52c45f00a59731c0e5b2608ae046af8bcf830f001ffd2f955ea89bed216e71ccb5b44713e2abf5ee5438d63829c9aea34b57f7ab52b820c24a7e9fa138243e4afb2df93588e805e719c1767146a351debb34678a86dd19f0587af31195460a3aa3e68773859fe13b47b6b31a501b4a25c6660cfc47f3318b33b77b10ed4ba91086482db039a56fbd1490f440a6fbb280b62b6d2333afe1c42c3f16865b9c0e484a4f6f393b8bc34fbba856cc5ffad2fe423e79f691b95e7e0dbdb2b2757d9d4443f9a23a8b1bfdb16f8bffd81b4789f80f1fc4bf751627965755d008d134e2c35da34f54718615e9deaca0685396ae7e58121327e0c0696591f6af93f2999ebd3b4e03cfe2a48b2b94015eb06b2a1031ab5e129b2700648fd62ab75f77734b89abb402282635eee41606eb306619e2dae84488e2aac1df54f78460b36115072a2c28801fc122482f1d46de4b2eec07bbbbcf85f30ffb3829c5d0fdbdf3af8c6322d62f4c55ebe8fd52728e2d5d1a24f096fffcec6ff2e752f75", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000e00)={0xa0, 0x0, 0x0, {{0x6, 0x0, 0x0, 0x7, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0xee01}}}}, 0x0}) r5 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0xc8841, 0x0) dup3(r5, r3, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) 0s ago: executing program 3 (id=2406): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES16], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) read$hiddev(r1, 0x0, 0x0) kernel console output (not intermixed with test programs): default qdisc (pfifo_fast) fail, fallback to noqueue [ 290.507172][ T7290] device syzkaller0 entered promiscuous mode [ 291.824398][ T7317] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 291.845544][ T7317] device syzkaller0 entered promiscuous mode [ 291.944109][ T23] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 292.463069][ T7319] netlink: 8 bytes leftover after parsing attributes in process `syz.3.909'. [ 292.544040][ T23] usb 5-1: Using ep0 maxpacket: 16 [ 292.628120][ T7325] netlink: 28 bytes leftover after parsing attributes in process `syz.3.912'. [ 292.702610][ T23] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 292.743632][ T23] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 292.794131][ T23] usb 5-1: New USB device found, idVendor=04b4, idProduct=0001, bcdDevice= 0.00 [ 292.813502][ T23] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 292.844952][ T23] usb 5-1: config 0 descriptor?? [ 292.911668][ T23] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 293.572481][ T1077] Bluetooth: hci1: command 0x0406 tx timeout [ 294.596116][ T7344] vlan0: vlans aren't supported yet for dev_uc|mc_add() [ 294.608212][ T3752] usb 5-1: USB disconnect, device number 5 [ 295.276046][ T7361] netlink: 8 bytes leftover after parsing attributes in process `syz.0.921'. [ 296.058847][ T1077] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 296.201096][ T7379] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 296.221911][ T7379] device syzkaller0 entered promiscuous mode [ 296.867497][ T1077] usb 4-1: Using ep0 maxpacket: 8 [ 297.039867][ T1077] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 297.054871][ T1077] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 297.091615][ T1077] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 297.787005][ T1077] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 297.900484][ T1077] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 297.914127][ T1077] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 297.948855][ T1077] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 298.004855][ T1077] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 298.117787][ T7389] vlan0: vlans aren't supported yet for dev_uc|mc_add() [ 298.132338][ T1077] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 298.165688][ T1077] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 298.202189][ T1077] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 298.245601][ T1077] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 298.609326][ T1077] usb 4-1: string descriptor 0 read error: -71 [ 298.626059][ T1077] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 298.655563][ T7400] tipc: Started in network mode [ 298.660841][ T7400] tipc: Node identity 00000040000000000000000000000001, cluster identity 4711 [ 298.682430][ T1077] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 298.686630][ T7400] tipc: Enabling of bearer rejected, failed to enable media [ 298.792449][ T1077] usb 4-1: can't set config #168, error -71 [ 298.830770][ T1077] usb 4-1: USB disconnect, device number 5 [ 298.981249][ T7404] netlink: 8 bytes leftover after parsing attributes in process `syz.3.934'. [ 299.838634][ T7416] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 299.860477][ T7416] device syzkaller0 entered promiscuous mode [ 301.618718][ T7430] vlan0: vlans aren't supported yet for dev_uc|mc_add() [ 302.044133][ T1075] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 302.384524][ T7442] netlink: 8 bytes leftover after parsing attributes in process `syz.2.947'. [ 302.444516][ T1075] usb 2-1: config 0 has an invalid interface number: 117 but max is 0 [ 302.467475][ T1075] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 302.500629][ T1075] usb 2-1: config 0 has no interface number 0 [ 302.516698][ T1075] usb 2-1: too many endpoints for config 0 interface 117 altsetting 0: 239, using maximum allowed: 30 [ 302.554948][ T1075] usb 2-1: config 0 interface 117 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 239 [ 302.812961][ T1075] usb 2-1: New USB device found, idVendor=0742, idProduct=2009, bcdDevice=61.46 [ 302.966963][ T1075] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 302.980735][ T1075] usb 2-1: Product: syz [ 302.986512][ T1075] usb 2-1: Manufacturer: syz [ 302.991278][ T1075] usb 2-1: SerialNumber: syz [ 303.010846][ T1075] usb 2-1: config 0 descriptor?? [ 303.206295][ T1075] HFC-S_USB: probe of 2-1:0.117 failed with error -5 [ 304.181705][ T7438] netlink: 'syz.1.946': attribute type 25 has an invalid length. [ 304.265418][ T7438] netlink: 20 bytes leftover after parsing attributes in process `syz.1.946'. [ 304.479838][ T3752] usb 2-1: USB disconnect, device number 7 [ 304.599090][ T7477] vlan0: vlans aren't supported yet for dev_uc|mc_add() [ 304.950424][ T7484] netlink: 8 bytes leftover after parsing attributes in process `syz.2.958'. [ 306.530531][ T3616] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 306.800679][ T3616] usb 3-1: Using ep0 maxpacket: 32 [ 306.944587][ T3616] usb 3-1: config 7 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 306.967245][ T3616] usb 3-1: config 7 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 306.983425][ T3616] usb 3-1: config 7 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 307.005282][ T3616] usb 3-1: config 7 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 307.039758][ T3616] usb 3-1: New USB device found, idVendor=1b96, idProduct=000a, bcdDevice= 0.00 [ 307.064886][ T3616] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 308.219690][ T3616] ntrig 0003:1B96:000A.0007: unknown main item tag 0x0 [ 308.254783][ T3616] ntrig 0003:1B96:000A.0007: unknown main item tag 0x0 [ 308.295763][ T3616] ntrig 0003:1B96:000A.0007: unknown main item tag 0x0 [ 308.316993][ T3616] ntrig 0003:1B96:000A.0007: unknown main item tag 0x0 [ 308.344966][ T3616] ntrig 0003:1B96:000A.0007: unknown main item tag 0x0 [ 308.404797][ T3616] ntrig 0003:1B96:000A.0007: hidraw0: USB HID v0.00 Device [HID 1b96:000a] on usb-dummy_hcd.2-1/input0 [ 308.530220][ T7521] vlan0: vlans aren't supported yet for dev_uc|mc_add() [ 308.695594][ T7502] ntrig 0003:1B96:000A.0007: pid 7502 passed too short report [ 308.867867][ T7528] netlink: 8 bytes leftover after parsing attributes in process `syz.1.970'. [ 309.154013][ T7532] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 309.366960][ T3616] usb 3-1: USB disconnect, device number 8 [ 310.526579][ T7559] vlan0: vlans aren't supported yet for dev_uc|mc_add() [ 310.837399][ T7567] netlink: 8 bytes leftover after parsing attributes in process `syz.3.982'. [ 313.587063][ T7605] vlan0: vlans aren't supported yet for dev_uc|mc_add() [ 313.774877][ T7617] netlink: 76 bytes leftover after parsing attributes in process `syz.2.996'. [ 313.926280][ T7619] sctp: [Deprecated]: syz.2.998 (pid 7619) Use of int in max_burst socket option. [ 313.926280][ T7619] Use struct sctp_assoc_value instead [ 314.174878][ T26] audit: type=1326 audit(1728794087.394:280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7624 comm="syz.1.1000" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdfcf1bff9 code=0x7ffc0000 [ 314.330782][ T26] audit: type=1326 audit(1728794087.394:281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7624 comm="syz.1.1000" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdfcf1bff9 code=0x7ffc0000 [ 314.978839][ T26] audit: type=1326 audit(1728794087.424:282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7624 comm="syz.1.1000" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7fcdfcf1bff9 code=0x7ffc0000 [ 315.418511][ T26] audit: type=1326 audit(1728794087.424:283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7624 comm="syz.1.1000" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdfcf1bff9 code=0x7ffc0000 [ 315.602868][ T26] audit: type=1326 audit(1728794087.424:284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7624 comm="syz.1.1000" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdfcf1bff9 code=0x7ffc0000 [ 316.857777][ T7656] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1006'. [ 317.399757][ T1388] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.406096][ T1388] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.986451][ T7664] vlan0: vlans aren't supported yet for dev_uc|mc_add() [ 318.035153][ T7668] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1010'. [ 318.104264][ T7668] bridge0: port 3(team0) entered disabled state [ 318.158607][ T7668] device bridge_slave_1 left promiscuous mode [ 318.184106][ T7668] bridge0: port 2(bridge_slave_1) entered disabled state [ 318.266808][ T7668] device bridge_slave_0 left promiscuous mode [ 318.273056][ T7668] bridge0: port 1(bridge_slave_0) entered disabled state [ 321.832768][ T26] audit: type=1326 audit(1728794095.054:285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7695 comm="syz.1.1018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdfcf1bff9 code=0x7ffc0000 [ 321.989020][ T7702] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1020'. [ 322.003967][ T26] audit: type=1326 audit(1728794095.074:286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7695 comm="syz.1.1018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fcdfcf1bff9 code=0x7ffc0000 [ 322.109880][ T7702] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1020'. [ 322.234086][ T26] audit: type=1326 audit(1728794095.074:287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7695 comm="syz.1.1018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdfcf1bff9 code=0x7ffc0000 [ 322.322268][ T26] audit: type=1326 audit(1728794095.074:288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7695 comm="syz.1.1018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdfcf1bff9 code=0x7ffc0000 [ 322.377933][ T7704] vlan0: vlans aren't supported yet for dev_uc|mc_add() [ 322.420611][ T26] audit: type=1326 audit(1728794095.094:289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7695 comm="syz.1.1018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=69 compat=0 ip=0x7fcdfcf1bff9 code=0x7ffc0000 [ 322.485769][ T26] audit: type=1326 audit(1728794095.094:290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7695 comm="syz.1.1018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdfcf1bff9 code=0x7ffc0000 [ 322.557735][ T26] audit: type=1326 audit(1728794095.094:291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7695 comm="syz.1.1018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=70 compat=0 ip=0x7fcdfcf1bff9 code=0x7ffc0000 [ 322.667810][ T26] audit: type=1326 audit(1728794095.094:292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7695 comm="syz.1.1018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdfcf1bff9 code=0x7ffc0000 [ 322.738302][ T26] audit: type=1326 audit(1728794095.094:293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7695 comm="syz.1.1018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcdfcf1bff9 code=0x7ffc0000 [ 322.799688][ T26] audit: type=1326 audit(1728794095.094:294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7695 comm="syz.1.1018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdfcf1bff9 code=0x7ffc0000 [ 326.080979][ T7752] vlan0: vlans aren't supported yet for dev_uc|mc_add() [ 329.111225][ T7787] vlan0: vlans aren't supported yet for dev_uc|mc_add() [ 330.289758][ T23] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 330.773811][ T23] usb 4-1: Using ep0 maxpacket: 16 [ 330.967205][ T23] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 330.992402][ T23] usb 4-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 331.061736][ T23] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 331.120585][ T23] usb 4-1: config 0 descriptor?? [ 331.213135][ T23] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input10 [ 331.568699][ T3010] bcm5974 4-1:0.0: could not read from device [ 331.629612][ T23] usb 4-1: USB disconnect, device number 6 [ 331.642976][ T3010] bcm5974 4-1:0.0: could not read from device [ 331.665950][ T3584] bcm5974 4-1:0.0: could not read from device [ 334.195357][ T7828] vlan0: vlans aren't supported yet for dev_uc|mc_add() [ 335.721266][ T7848] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 335.742791][ T7848] device syzkaller0 entered promiscuous mode [ 340.734416][ T7895] x_tables: duplicate underflow at hook 2 [ 340.762294][ T3581] Bluetooth: hci5: SCO packet for unknown connection handle 1 [ 341.836763][ T7907] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1078'. [ 342.150510][ T7907] device bond3 entered promiscuous mode [ 342.546534][ T7921] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1081'. [ 345.502008][ T7948] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 345.573059][ T7948] device syzkaller0 entered promiscuous mode [ 346.835794][ T7951] netlink: 80 bytes leftover after parsing attributes in process `syz.3.1087'. [ 348.036181][ T7964] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 348.043504][ T7964] IPv6: NLM_F_CREATE should be set when creating new route [ 348.085959][ T7964] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 349.924213][ T7993] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1098'. [ 351.628996][ T8005] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1102'. [ 351.682051][ T8005] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1102'. [ 354.538479][ T8046] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1114'. [ 354.576389][ T8046] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1114'. [ 357.017716][ T8066] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1118'. [ 357.843283][ T8082] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 357.862124][ T8082] device syzkaller0 entered promiscuous mode [ 360.886005][ T8107] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1131'. [ 360.991050][ T8108] vlan0: vlans aren't supported yet for dev_uc|mc_add() [ 361.825139][ T8126] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1135'. [ 364.167396][ T8139] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 364.252374][ T8139] device syzkaller0 entered promiscuous mode [ 365.383397][ T8144] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 365.393565][ T8144] device syzkaller0 entered promiscuous mode [ 371.171502][ T1075] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 371.453578][ T8214] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 371.464181][ T8214] device syzkaller0 entered promiscuous mode [ 371.734671][ T1075] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 371.766814][ T1075] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 371.816670][ T1075] usb 2-1: New USB device found, idVendor=056a, idProduct=00d0, bcdDevice= 0.00 [ 371.833952][ T1075] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 371.888304][ T1075] usb 2-1: config 0 descriptor?? [ 372.525289][ T8193] device dummy0 entered promiscuous mode [ 372.531242][ T8193] device macsec1 entered promiscuous mode [ 372.690976][ T8193] device dummy0 left promiscuous mode [ 372.860618][ T8225] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 372.879815][ T8225] device syzkaller0 entered promiscuous mode [ 375.855529][ T8249] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 375.864820][ T8249] device syzkaller0 entered promiscuous mode [ 377.798489][ T1075] usbhid 2-1:0.0: can't add hid device: -71 [ 377.804566][ T1075] usbhid: probe of 2-1:0.0 failed with error -71 [ 377.849427][ T1075] usb 2-1: USB disconnect, device number 8 [ 378.304749][ T8284] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1178'. [ 378.526061][ T1388] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.532474][ T1388] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.857552][ T8293] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1181'. [ 380.327861][ T1077] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 381.638570][ T1077] usb 1-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 382.328135][ T1077] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 382.448484][ T1077] usb 1-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 382.502473][ T1077] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 382.520830][ T1077] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 382.623547][ T1077] usb 1-1: invalid MIDI out EP 0 [ 382.843486][ T1077] snd-usb-audio: probe of 1-1:27.0 failed with error -22 [ 382.892694][ T1077] usb 1-1: USB disconnect, device number 5 [ 386.352149][ T8344] chnl_net:caif_netlink_parms(): no params data found [ 387.498943][ T8344] bridge0: port 1(bridge_slave_0) entered blocking state [ 387.518855][ T8344] bridge0: port 1(bridge_slave_0) entered disabled state [ 387.527814][ T8344] device bridge_slave_0 entered promiscuous mode [ 387.561040][ T8370] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1202'. [ 387.572151][ T8344] bridge0: port 2(bridge_slave_1) entered blocking state [ 387.579823][ T8344] bridge0: port 2(bridge_slave_1) entered disabled state [ 387.627565][ T8344] device bridge_slave_1 entered promiscuous mode [ 387.664855][ T7] Bluetooth: hci3: command 0x0409 tx timeout [ 387.744712][ T8344] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 387.858471][ T8344] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 388.198064][ T8344] team0: Port device team_slave_0 added [ 388.248880][ T8344] team0: Port device team_slave_1 added [ 388.589302][ T8344] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 388.621128][ T8344] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 388.743979][ T8344] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 388.837331][ T8344] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 388.910678][ T8344] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 389.184896][ T8344] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 389.416914][ T8344] device hsr_slave_0 entered promiscuous mode [ 389.518147][ T8344] device hsr_slave_1 entered promiscuous mode [ 389.621179][ T8344] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 389.666340][ T8344] Cannot create hsr debugfs directory [ 389.805035][ T3615] Bluetooth: hci3: command 0x041b tx timeout [ 390.226503][ T8344] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 392.107695][ T3616] Bluetooth: hci3: command 0x040f tx timeout [ 392.145881][ T154] tipc: Left network mode [ 393.200324][ T8415] device syzkaller0 entered promiscuous mode [ 393.688286][ T8427] vlan0: vlans aren't supported yet for dev_uc|mc_add() [ 394.063738][ T8432] usb usb7: usbfs: process 8432 (syz.2.1221) did not claim interface 0 before use [ 394.102413][ T8432] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 394.215322][ T3616] Bluetooth: hci3: command 0x0419 tx timeout [ 394.772803][ T8344] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 397.183223][ T8459] vlan0: vlans aren't supported yet for dev_uc|mc_add() [ 397.462836][ T8466] usb usb7: usbfs: process 8466 (syz.1.1231) did not claim interface 0 before use [ 397.505247][ T8466] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 398.207529][ T8479] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1235'. [ 398.391632][ T8481] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1236'. [ 398.816979][ T8492] usb usb7: usbfs: process 8492 (syz.4.1241) did not claim interface 0 before use [ 398.847724][ T8492] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 399.104109][ T8344] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 399.206820][ T8502] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1243'. [ 402.298116][ T8517] device geneve1 entered promiscuous mode [ 402.346179][ T8517] bond0: (slave macvlan2): Enslaving as an active interface with an up link [ 402.926441][ T8344] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 403.529207][ T23] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 403.887176][ T23] usb 3-1: Using ep0 maxpacket: 16 [ 404.316294][ T23] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 404.327389][ T23] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 404.359020][ T23] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 404.593549][ T23] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 404.603428][ T23] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 404.635881][ T23] usb 3-1: Manufacturer: syz [ 404.840479][ T23] usb 3-1: config 0 descriptor?? [ 405.199289][ T3615] usb 3-1: USB disconnect, device number 9 [ 405.665947][ T8538] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 405.677537][ T8538] device syzkaller0 entered promiscuous mode [ 406.247486][ T8550] ip6t_srh: unknown srh match flags 5040 [ 406.936872][ T8344] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 406.996347][ T8344] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 407.013570][ T8344] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 407.062425][ T8344] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 407.501632][ T8344] 8021q: adding VLAN 0 to HW filter on device bond0 [ 407.572933][ T3611] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 407.583818][ T3611] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 407.618241][ T8344] 8021q: adding VLAN 0 to HW filter on device team0 [ 407.654872][ T3611] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 407.704318][ T3611] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 407.726319][ T3611] bridge0: port 1(bridge_slave_0) entered blocking state [ 407.733660][ T3611] bridge0: port 1(bridge_slave_0) entered forwarding state [ 407.783986][ T3611] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 407.824750][ T3611] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 407.859625][ T3611] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 407.882911][ T3611] bridge0: port 2(bridge_slave_1) entered blocking state [ 407.890196][ T3611] bridge0: port 2(bridge_slave_1) entered forwarding state [ 407.942295][ T3611] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 408.041981][ T3611] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 408.152194][ T8344] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 408.182398][ T8344] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 408.269536][ T3611] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 408.308464][ T3611] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 408.354606][ T3611] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 408.821153][ T3611] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 408.850343][ T3611] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 408.882188][ T3611] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 409.032326][ T3611] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 409.087746][ T3611] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 409.129437][ T3611] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 409.166992][ T3611] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 409.592808][ T3611] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 409.611461][ T3611] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 409.672023][ T8344] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 409.730601][ T3611] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 409.739584][ T3611] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 409.810222][ T8344] device veth0_vlan entered promiscuous mode [ 409.830505][ T3627] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 409.839187][ T3627] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 409.877844][ T3627] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 409.905793][ T3627] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 409.927330][ T8344] device veth1_vlan entered promiscuous mode [ 410.017835][ T8344] device veth0_macvtap entered promiscuous mode [ 410.057063][ T3611] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 410.071822][ T3611] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 410.092600][ T3611] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 410.121407][ T3611] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 410.138373][ T3611] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 410.171592][ T8344] device veth1_macvtap entered promiscuous mode [ 410.196311][ T8344] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 410.219592][ T8344] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 410.261153][ T8344] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 410.273692][ T8344] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 410.304566][ T8344] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 410.334160][ T8344] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 410.377243][ T8344] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 410.405316][ T8344] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 410.440953][ T8344] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 410.499481][ T8344] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 410.516834][ T8344] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 410.574063][ T6576] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 410.587435][ T6576] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 410.640335][ T6576] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 410.719792][ T8344] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 410.740045][ T8344] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 410.772879][ T8344] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 410.805256][ T8344] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 410.829637][ T8344] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 410.867702][ T8344] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 410.904477][ T8344] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 410.942193][ T8344] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 410.979238][ T8344] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 411.014299][ T8344] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 411.060320][ T8344] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 411.097889][ T6576] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 411.107952][ T6576] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 411.145693][ T8344] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 411.154834][ T8344] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 411.163736][ T8344] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 411.246800][ T8344] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 411.453302][ T3675] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 411.504957][ T3675] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 411.541215][ T3672] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 411.605372][ T3672] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 411.625727][ T3611] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 411.741405][ T3672] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 412.238817][ T8596] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 412.249152][ T8596] device syzkaller0 entered promiscuous mode [ 412.338386][ T8602] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1273'. [ 413.010780][ T8614] vlan0: vlans aren't supported yet for dev_uc|mc_add() [ 413.541547][ T8626] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1281'. [ 413.584530][ T26] audit: type=1326 audit(1728794186.814:295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8609 comm="syz.2.1275" exe="/root/syz-executor" sig=31 arch=c000003e syscall=39 compat=0 ip=0x7f1cc1a72fa7 code=0x0 [ 413.626969][ T8626] device wireguard0 entered promiscuous mode [ 413.691900][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 417.316137][ T8655] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1288'. [ 417.452940][ T8659] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1289'. [ 417.672793][ T8661] vlan0: vlans aren't supported yet for dev_uc|mc_add() [ 418.252154][ T1077] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 418.352725][ T7] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 418.779426][ T1077] usb 4-1: Using ep0 maxpacket: 8 [ 418.853261][ T7] usb 5-1: Using ep0 maxpacket: 8 [ 419.128945][ T7] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 419.153576][ T7] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 419.253993][ T7] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 419.298544][ T1077] usb 4-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 419.317940][ T1077] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 419.328089][ T7] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 419.380764][ T1077] usb 4-1: Product: syz [ 419.395053][ T1077] usb 4-1: Manufacturer: syz [ 419.399897][ T7] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 419.421170][ T1077] usb 4-1: SerialNumber: syz [ 419.431220][ T7] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 419.483162][ T1077] usb 4-1: config 0 descriptor?? [ 419.538185][ T1077] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 419.665436][ T8695] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1300'. [ 419.774529][ T7] usb 5-1: usb_control_msg returned -32 [ 419.790159][ T7] usbtmc 5-1:16.0: can't read capabilities [ 419.809116][ T8698] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 420.120902][ T8704] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 420.131136][ T8704] device syzkaller0 entered promiscuous mode [ 420.664090][ C0] usbtmc 5-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 420.684778][ T8706] usbtmc 5-1:16.0: Unable to send data, error -71 [ 420.952608][ T3615] usb 4-1: USB disconnect, device number 7 [ 421.665107][ T8725] TCP: request_sock_subflow_v6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 422.182317][ T3615] usb 5-1: USB disconnect, device number 6 [ 422.443267][ C0] ODEBUG: Out of memory. ODEBUG disabled [ 425.304697][ T8763] ip6t_srh: unknown srh match flags 5040 [ 425.636293][ T8754] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 425.660454][ T8754] device syzkaller0 entered promiscuous mode [ 425.728581][ T3616] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 426.184381][ T3616] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 426.671409][ T3616] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 426.684217][ T3616] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 426.716388][ T3616] usb 2-1: Product: syz [ 426.720824][ T3616] usb 2-1: Manufacturer: syz [ 426.752075][ T3616] usb 2-1: SerialNumber: syz [ 427.616586][ T8792] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 427.626831][ T8792] device syzkaller0 entered promiscuous mode [ 428.282578][ T3616] cdc_ncm 2-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 428.301731][ T3616] cdc_ncm 2-1:1.0: dwNtbInMaxSize=16 is too small. Using 2048 [ 428.489708][ T3616] cdc_ncm 2-1:1.0: setting rx_max = 2048 [ 429.201991][ T3616] cdc_ncm 2-1:1.0: setting tx_max = 88 [ 429.283018][ T3616] cdc_ncm 2-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.1-1, CDC NCM, 42:42:42:42:42:42 [ 429.384323][ T3616] usb 2-1: USB disconnect, device number 9 [ 429.784815][ T3616] cdc_ncm 2-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.1-1, CDC NCM [ 430.469719][ T8820] netlink: 'syz.3.1335': attribute type 10 has an invalid length. [ 430.509512][ T8820] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 430.595254][ T8820] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 432.556997][ T8832] Cannot find add_set index 0 as target [ 435.021743][ T8860] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 435.031949][ T8860] device syzkaller0 entered promiscuous mode [ 435.978235][ T8877] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1351'. [ 436.004874][ T8877] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1351'. [ 438.306702][ T8922] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1361'. [ 440.070825][ T1388] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.077177][ T1388] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.181351][ T8946] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 440.191801][ T8946] device syzkaller0 entered promiscuous mode [ 443.359867][ T8982] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 447.707634][ T9039] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 447.717882][ T9039] device syzkaller0 entered promiscuous mode [ 447.901344][ T9041] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1394'. [ 449.013368][ T9060] device wlan0 entered promiscuous mode [ 449.071507][ T9060] bond0: (slave macvlan3): Enslaving as an active interface with an up link [ 449.128127][ T9061] device bond0 entered promiscuous mode [ 449.159535][ T9061] device bond_slave_0 entered promiscuous mode [ 449.202202][ T9061] device bond_slave_1 entered promiscuous mode [ 449.228132][ T9061] device batadv0 entered promiscuous mode [ 449.259538][ T9061] device macvlan2 entered promiscuous mode [ 449.283388][ T9061] device macvlan3 entered promiscuous mode [ 449.425006][ T9067] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1405'. [ 449.546313][ T3583] Bluetooth: hci3: link tx timeout [ 449.552301][ T3583] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 451.165265][ T9081] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1409'. [ 451.654248][ T3615] Bluetooth: hci3: command 0x0406 tx timeout [ 452.172761][ T9098] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1416'. [ 453.012156][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 453.067098][ T154] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 453.186943][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 453.214986][ T154] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 453.276570][ T154] device bridge_slave_1 left promiscuous mode [ 453.327478][ T154] bridge0: port 2(bridge_slave_1) entered disabled state [ 453.400505][ T154] device bridge_slave_0 left promiscuous mode [ 453.411820][ T154] bridge0: port 1(bridge_slave_0) entered disabled state [ 453.531871][ T154] device veth1_macvtap left promiscuous mode [ 453.576687][ T154] device veth0_macvtap left promiscuous mode [ 453.600485][ T154] device veth1_vlan left promiscuous mode [ 453.618961][ T154] device veth0_vlan left promiscuous mode [ 454.756573][ T3583] Bluetooth: hci3: link tx timeout [ 454.761731][ T3583] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 456.652903][ T154] bond2 (unregistering): Released all slaves [ 456.685783][ T154] bond1 (unregistering): Released all slaves [ 457.285099][ T154] team0 (unregistering): Port device team_slave_1 removed [ 457.341833][ T154] team0 (unregistering): Port device team_slave_0 removed [ 457.406361][ T154] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 457.534937][ T154] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 458.077504][ T154] bond0 (unregistering): Released all slaves [ 459.616527][ T9142] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1429'. [ 460.053742][ T9147] tipc: Started in network mode [ 460.058688][ T9147] tipc: Node identity aaaaaaaaaa2a, cluster identity 4711 [ 460.083378][ T9147] tipc: Enabled bearer , priority 10 [ 461.175990][ T23] tipc: Node number set to 8432298 [ 461.361740][ T9157] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1433'. [ 461.433885][ T9159] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1433'. [ 461.539553][ T9148] chnl_net:caif_netlink_parms(): no params data found [ 461.871135][ T9167] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 461.882079][ T9167] device syzkaller0 entered promiscuous mode [ 462.130869][ T1077] Bluetooth: hci4: command 0x0409 tx timeout [ 462.402606][ T9148] bridge0: port 1(bridge_slave_0) entered blocking state [ 462.428428][ T9148] bridge0: port 1(bridge_slave_0) entered disabled state [ 462.492412][ T9148] device bridge_slave_0 entered promiscuous mode [ 462.570739][ T9148] bridge0: port 2(bridge_slave_1) entered blocking state [ 462.616317][ T9148] bridge0: port 2(bridge_slave_1) entered disabled state [ 462.645173][ T9148] device bridge_slave_1 entered promiscuous mode [ 462.742116][ T9148] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 462.771599][ T9148] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 462.929829][ T9148] team0: Port device team_slave_0 added [ 462.965215][ T9148] team0: Port device team_slave_1 added [ 463.037380][ T9148] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 463.057265][ T9148] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 463.122808][ T9148] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 463.148951][ T9148] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 463.166298][ T9180] netlink: 112 bytes leftover after parsing attributes in process `syz.0.1439'. [ 463.193943][ T9148] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 463.599469][ T9148] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 463.860783][ T9148] device hsr_slave_0 entered promiscuous mode [ 463.875595][ T9189] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1442'. [ 463.944762][ T9148] device hsr_slave_1 entered promiscuous mode [ 463.989258][ T9148] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 463.997205][ T9148] Cannot create hsr debugfs directory [ 464.227095][ T1077] Bluetooth: hci4: command 0x041b tx timeout [ 464.554628][ T9199] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 464.565844][ T9199] device syzkaller0 entered promiscuous mode [ 464.620090][ T9148] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 464.868398][ T9202] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1445'. [ 465.012694][ T9193] chnl_net:caif_netlink_parms(): no params data found [ 465.416130][ T9193] bridge0: port 1(bridge_slave_0) entered blocking state [ 465.458487][ T9193] bridge0: port 1(bridge_slave_0) entered disabled state [ 465.507580][ T9193] device bridge_slave_0 entered promiscuous mode [ 465.526886][ T9193] bridge0: port 2(bridge_slave_1) entered blocking state [ 465.549942][ T9193] bridge0: port 2(bridge_slave_1) entered disabled state [ 465.588706][ T9193] device bridge_slave_1 entered promiscuous mode [ 465.705775][ T9193] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 465.744784][ T9193] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 465.845852][ T9193] team0: Port device team_slave_0 added [ 465.887563][ T9193] team0: Port device team_slave_1 added [ 465.975353][ T9193] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 465.992543][ T9193] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 466.049181][ T9193] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 466.084991][ T9193] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 466.105289][ T9193] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 466.185363][ T9193] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 466.211311][ T1077] Bluetooth: hci1: command 0x0409 tx timeout [ 466.293019][ T1077] Bluetooth: hci4: command 0x040f tx timeout [ 466.361237][ T9193] device hsr_slave_0 entered promiscuous mode [ 466.389931][ T9193] device hsr_slave_1 entered promiscuous mode [ 466.439133][ T9193] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 466.483558][ T9193] Cannot create hsr debugfs directory [ 468.303961][ T7] Bluetooth: hci1: command 0x041b tx timeout [ 468.367196][ T7] Bluetooth: hci4: command 0x0419 tx timeout [ 468.698209][ T9148] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 470.371978][ T1077] Bluetooth: hci1: command 0x040f tx timeout [ 472.319338][ T9260] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 472.329735][ T9260] device syzkaller0 entered promiscuous mode [ 472.546118][ T7] Bluetooth: hci1: command 0x0419 tx timeout [ 473.103398][ T9148] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 473.615423][ T9271] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1464'. [ 476.482195][ T9148] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 479.219107][ T9193] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 479.412275][ T9312] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1476'. [ 479.610107][ T9316] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1477'. [ 479.661182][ T9314] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1477'. [ 479.856840][ T9320] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1478'. [ 481.598273][ T9331] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1483'. [ 481.628749][ T9331] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 481.838162][ T9337] syz.0.1485 sent an empty control message without MSG_MORE. [ 482.741893][ T9344] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1487'. [ 482.758389][ T9193] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 482.978694][ T9346] overlayfs: failed to resolve './file1': -2 [ 484.745995][ T9365] Cannot find set identified by id 632 to match [ 485.022956][ T9369] TCP: request_sock_subflow_v6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 485.236379][ T9193] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 485.346592][ T9372] vlan0: vlans aren't supported yet for dev_uc|mc_add() [ 485.613381][ T9193] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 485.654537][ T154] tipc: Left network mode [ 486.598481][ T9148] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 486.676676][ T9148] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 486.713003][ T9148] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 486.732973][ T9193] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 486.761043][ T9148] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 486.791686][ T9193] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 486.807192][ T9193] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 486.993571][ T9193] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 487.046793][ T9390] IPv6: Can't replace route, no match found [ 487.576705][ T9148] 8021q: adding VLAN 0 to HW filter on device bond0 [ 487.599393][ T9193] 8021q: adding VLAN 0 to HW filter on device bond0 [ 487.606982][ T9400] vlan0: vlans aren't supported yet for dev_uc|mc_add() [ 487.703452][ T9148] 8021q: adding VLAN 0 to HW filter on device team0 [ 487.765983][ T3657] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 487.784599][ T3657] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 488.653362][ T9193] 8021q: adding VLAN 0 to HW filter on device team0 [ 488.688540][ T3995] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 488.698328][ T3995] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 488.804156][ T3995] bridge0: port 1(bridge_slave_0) entered blocking state [ 488.811335][ T3995] bridge0: port 1(bridge_slave_0) entered forwarding state [ 488.832153][ T3995] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 488.846974][ T3995] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 488.865146][ T3995] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 489.709081][ T9428] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1513'. [ 489.723744][ T9436] dccp_close: ABORT with 20 bytes unread [ 489.784717][ T9429] netlink: 'syz.3.1513': attribute type 10 has an invalid length. [ 489.816940][ T9429] 8021q: adding VLAN 0 to HW filter on device team0 [ 489.830256][ T9429] bond0: (slave team0): Enslaving as an active interface with an up link [ 489.844856][ T3995] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 489.859614][ T3995] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 489.884951][ T3995] bridge0: port 2(bridge_slave_1) entered blocking state [ 489.892060][ T3995] bridge0: port 2(bridge_slave_1) entered forwarding state [ 489.926104][ T3995] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 489.944997][ T3995] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 489.955070][ T3995] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 489.964704][ T3995] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 489.975874][ T3995] bridge0: port 1(bridge_slave_0) entered blocking state [ 489.984005][ T3995] bridge0: port 1(bridge_slave_0) entered forwarding state [ 489.992808][ T3995] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 490.003028][ T3995] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 490.012719][ T3995] bridge0: port 2(bridge_slave_1) entered blocking state [ 490.020558][ T3995] bridge0: port 2(bridge_slave_1) entered forwarding state [ 490.029797][ T3995] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 490.039517][ T3995] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 490.057551][ T3995] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 490.075043][ T3995] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 490.084668][ T3995] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 490.093832][ T9439] vlan0: vlans aren't supported yet for dev_uc|mc_add() [ 490.124667][ T3995] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 490.186529][ T3995] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 490.205791][ T3995] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 490.256725][ T3995] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 490.285949][ T3995] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 490.293008][ T9455] overlayfs: failed to resolve './file0': -2 [ 490.307586][ T3995] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 490.376451][ T3995] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 490.422594][ T3995] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 490.437815][ T3995] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 490.452968][ T3995] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 490.474763][ T3995] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 490.489187][ T3995] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 490.503603][ T9148] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 490.514791][ T9454] lo speed is unknown, defaulting to 1000 [ 490.514855][ T9457] netlink: 'syz.0.1519': attribute type 10 has an invalid length. [ 490.514876][ T9457] device lo entered promiscuous mode [ 490.515378][ T3675] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 490.550439][ T3675] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 490.569527][ T9462] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 490.587353][ T9462] bond0: (slave team0): Releasing backup interface [ 490.606283][ T9462] bond0: (slave batadv0): Releasing backup interface [ 490.627924][ T9462] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 490.645850][ T9462] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 490.656366][ T9462] device bridge_slave_0 left promiscuous mode [ 490.663060][ T9462] bridge0: port 1(bridge_slave_0) entered disabled state [ 490.679825][ T9462] device bridge_slave_1 left promiscuous mode [ 490.711099][ T9462] bridge0: port 2(bridge_slave_1) entered disabled state [ 490.733612][ T9462] bond0: (slave bond_slave_0): Releasing backup interface [ 490.761260][ T9462] bond0: (slave bond_slave_1): Releasing backup interface [ 490.822356][ T9462] team0: Port device team_slave_0 removed [ 490.862310][ T9462] team0: Port device team_slave_1 removed [ 490.869264][ T9462] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 490.878100][ T9462] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 490.890675][ T9462] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 490.903893][ T9462] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 490.959969][ T9464] device wg2 entered promiscuous mode [ 491.020354][ T9464] team0: Port device wg2 added [ 491.050661][ T3675] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 491.084837][ T3675] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 491.115921][ T9193] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 491.128441][ T9454] lo speed is unknown, defaulting to 1000 [ 491.159734][ T9454] lo speed is unknown, defaulting to 1000 [ 491.293277][ T3657] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 491.302937][ T3657] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 491.323548][ T9148] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 491.380340][ T154] bond0: (slave macvlan3): Releasing backup interface [ 491.400806][ T154] device macvlan3 left promiscuous mode [ 491.454974][ T3657] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 491.489985][ T3657] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 491.590037][ T154] device hsr_slave_0 left promiscuous mode [ 491.597988][ T9454] infiniband syz0: set down [ 491.602939][ T9454] infiniband syz0: added lo [ 491.613750][ T154] device hsr_slave_1 left promiscuous mode [ 491.629746][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 491.641255][ T9454] infiniband syz0: Couldn't open port 1 [ 491.644535][ T154] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 491.715688][ T9454] RDS/IB: syz0: added [ 491.720891][ T9454] smc: adding ib device syz0 with port count 1 [ 491.756441][ T9454] smc: ib device syz0 port 1 has pnetid [ 491.796907][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 491.815191][ T154] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 491.832387][ T154] device hsr_slave_0 left promiscuous mode [ 491.841240][ T154] device hsr_slave_1 left promiscuous mode [ 491.848285][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 491.856503][ T154] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 492.037732][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 492.086968][ T154] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 492.150514][ T154] device bridge_slave_1 left promiscuous mode [ 492.190927][ T154] bridge0: port 2(bridge_slave_1) entered disabled state [ 492.270060][ T154] device bridge_slave_0 left promiscuous mode [ 492.310754][ T154] bridge0: port 1(bridge_slave_0) entered disabled state [ 492.542584][ T154] device veth1_macvtap left promiscuous mode [ 492.551378][ T154] device veth0_macvtap left promiscuous mode [ 492.563646][ T154] device veth1_vlan left promiscuous mode [ 492.572622][ T154] device veth0_vlan left promiscuous mode [ 492.585675][ T154] device geneve1 left promiscuous mode [ 492.586701][ T3616] Bluetooth: hci1: command 0x0405 tx timeout [ 492.596779][ T154] device vlan0 left promiscuous mode [ 492.603574][ T154] device veth1_macvtap left promiscuous mode [ 492.613313][ T154] device veth0_macvtap left promiscuous mode [ 492.621279][ T154] device veth1_vlan left promiscuous mode [ 492.627397][ T154] device veth0_vlan left promiscuous mode [ 492.715956][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 492.862200][ T154] bond2 (unregistering): Released all slaves [ 492.872692][ T154] bond1 (unregistering): Released all slaves [ 492.949523][ T154] device team_slave_1 left promiscuous mode [ 492.961635][ T154] team0 (unregistering): Port device team_slave_1 removed [ 492.972590][ T154] device team_slave_0 left promiscuous mode [ 492.981570][ T154] team0 (unregistering): Port device team_slave_0 removed [ 492.992772][ T154] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 493.006718][ T154] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 493.069338][ T154] bond0 (unregistering): Released all slaves [ 493.083595][ T154] bond0 (unregistering): (slave macvlan2): Releasing backup interface [ 493.093119][ T154] device macvlan2 left promiscuous mode [ 493.103505][ T154] bond4 (unregistering): Released all slaves [ 493.113600][ T154] bond3 (unregistering): Released all slaves [ 493.156282][ T154] bond2 (unregistering): Released all slaves [ 493.170261][ T154] bond1 (unregistering): Released all slaves [ 493.182206][ T154] team0 (unregistering): Port device vlan2 removed [ 493.249742][ T154] team0 (unregistering): Port device team_slave_1 removed [ 493.262026][ T154] team0 (unregistering): Port device team_slave_0 removed [ 493.278911][ T154] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 493.288094][ T154] device bond_slave_1 left promiscuous mode [ 493.300326][ T154] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 493.310480][ T154] device bond_slave_0 left promiscuous mode [ 493.341373][ T154] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 493.350017][ T154] device batadv0 left promiscuous mode [ 493.381809][ T154] bond0 (unregistering): Released all slaves [ 493.445941][ T1077] lo speed is unknown, defaulting to 1000 [ 493.470511][ T9485] device syzkaller0 entered promiscuous mode [ 493.478076][ T3675] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 493.486077][ T3675] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 493.493787][ T3675] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 493.504419][ T3675] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 493.512775][ T3675] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 493.520710][ T3675] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 493.529071][ T9496] vlan0: vlans aren't supported yet for dev_uc|mc_add() [ 493.544523][ T7] lo speed is unknown, defaulting to 1000 [ 493.546207][ T9193] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 493.587116][ T9148] device veth0_vlan entered promiscuous mode [ 493.687146][ T9454] lo speed is unknown, defaulting to 1000 [ 493.700457][ T9148] device veth1_vlan entered promiscuous mode [ 493.796483][ T3672] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 493.828702][ T3672] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 493.885349][ T9148] device veth0_macvtap entered promiscuous mode [ 493.917785][ T9148] device veth1_macvtap entered promiscuous mode [ 494.011673][ T9148] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 494.065542][ T9148] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 494.100708][ T9148] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 494.132251][ T9148] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 494.149495][ T9148] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 494.173191][ T9454] lo speed is unknown, defaulting to 1000 [ 494.179181][ T3675] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 494.202318][ T3675] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 494.221406][ T3675] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 494.243449][ T3675] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 494.268264][ T9148] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 494.294031][ T9148] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 494.323719][ T9148] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 494.353852][ T9148] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 494.393550][ T9148] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 494.421296][ T9518] device vlan2 entered promiscuous mode [ 494.473518][ T3995] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 494.491115][ T3995] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 494.523705][ T3995] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 494.535282][ T3995] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 494.580020][ T9454] lo speed is unknown, defaulting to 1000 [ 494.581787][ T9148] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 494.604877][ T3615] Bluetooth: hci1: command 0x0405 tx timeout [ 494.637532][ T9148] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 494.667473][ T9148] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 494.676850][ T9148] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 494.690233][ T3675] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 494.711006][ T3675] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 494.725351][ T9193] device veth0_vlan entered promiscuous mode [ 494.750299][ T3675] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 494.759199][ T3675] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 494.805704][ T9193] device veth1_vlan entered promiscuous mode [ 494.909852][ T9454] lo speed is unknown, defaulting to 1000 [ 494.974961][ T9193] device veth0_macvtap entered promiscuous mode [ 495.004104][ T3995] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 495.012290][ T3995] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 495.021657][ T3657] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 495.054356][ T3657] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 495.074952][ T3995] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 495.121291][ T3995] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 495.154934][ T3995] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 495.257078][ T3995] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 495.371028][ T9193] device veth1_macvtap entered promiscuous mode [ 495.431233][ T3611] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 495.452869][ T3611] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 495.500407][ T9454] lo speed is unknown, defaulting to 1000 [ 495.536472][ T3657] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 495.552729][ T3657] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 495.710673][ T9193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 495.771563][ T9193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 495.804282][ T9193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 495.815360][ T9193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 495.825430][ T9193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 495.836689][ T9193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 495.853414][ T9193] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 495.877833][ T3672] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 495.904877][ T3672] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 495.968257][ T9193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 495.987980][ T9549] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1541'. [ 496.008885][ T9193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 496.031065][ T9193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 496.063992][ T9193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 496.099955][ T9193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 496.121629][ T9193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 496.149669][ T9193] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 496.168141][ T3611] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 496.193234][ T3611] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 496.230364][ T9193] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 496.241060][ T9193] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 496.255569][ T9193] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 496.264541][ T9193] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 496.460749][ T3657] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 496.481897][ T3657] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 496.559168][ T3611] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 496.640249][ T3611] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 496.671099][ T3611] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 496.716110][ T3675] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 496.849489][ T9562] device vcan0 entered promiscuous mode [ 496.878848][ T9562] device vlan2 entered promiscuous mode [ 496.901869][ T9562] IPv6: ADDRCONF(NETDEV_CHANGE): vlan2: link becomes ready [ 496.947436][ T9562] device vcan0 left promiscuous mode [ 497.284915][ T9571] netlink: 'syz.0.1546': attribute type 13 has an invalid length. [ 497.346915][ T9571] device veth0_macvtap left promiscuous mode [ 497.397436][ T9571] macvtap0: refused to change device tx_queue_len [ 497.440171][ T9574] device wlan0 entered promiscuous mode [ 497.477368][ T9574] bond0: (slave macvlan2): Enslaving as an active interface with an up link [ 497.564825][ T9575] device bond0 entered promiscuous mode [ 497.612141][ T9575] device bond_slave_0 entered promiscuous mode [ 497.657420][ T9575] device bond_slave_1 entered promiscuous mode [ 497.688850][ T9575] device macvlan2 entered promiscuous mode [ 498.824027][ T9605] 9pnet_virtio: no channels available for device syz [ 500.602879][ T9645] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1567'. [ 500.793772][ T9652] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 501.043783][ T9664] 9pnet_virtio: no channels available for device syz [ 501.143560][ T9668] device syzkaller0 entered promiscuous mode [ 501.407108][ T1388] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.424093][ T1388] ieee802154 phy1 wpan1: encryption failed: -22 [ 505.844517][ T9764] IPv6: NLM_F_CREATE should be specified when creating new route [ 506.709994][ T9777] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 506.720072][ T9777] device syzkaller0 entered promiscuous mode [ 507.328422][ T9788] 9pnet_virtio: no channels available for device syz [ 508.004319][ T9800] vlan0: vlans aren't supported yet for dev_uc|mc_add() [ 508.227877][ T9810] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1624'. [ 508.339125][ T9815] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1625'. [ 508.374028][ T9815] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1625'. [ 508.538708][ T9821] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 508.568385][ T9821] tipc: Resetting bearer [ 508.630235][ T9821] tipc: Resetting bearer [ 508.655393][ T9821] team0: Port device batadv0 removed [ 508.679537][ T9821] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 509.134362][ T9821] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 509.165279][ T9821] device bridge_slave_0 left promiscuous mode [ 509.181284][ T9821] bridge0: port 1(bridge_slave_0) entered disabled state [ 509.202773][ T9821] device bridge_slave_1 left promiscuous mode [ 509.209136][ T9821] bridge0: port 2(bridge_slave_1) entered disabled state [ 509.242327][ T9821] bond0: (slave bond_slave_0): Releasing backup interface [ 509.272831][ T9821] bond0: (slave bond_slave_1): Releasing backup interface [ 509.329456][ T9821] team0: Port device team_slave_0 removed [ 509.438013][ T9821] team0: Port device team_slave_1 removed [ 509.449528][ T9821] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 509.463441][ T9821] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 509.474812][ T9821] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 509.482270][ T9821] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 509.498489][ T9828] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1629'. [ 509.522030][ T9827] device wg2 entered promiscuous mode [ 509.565699][ T9827] team0: Port device wg2 added [ 509.597480][ T9843] vlan0: vlans aren't supported yet for dev_uc|mc_add() [ 509.896737][ T9854] infiniband syz1: set active [ 509.903475][ T9854] infiniband syz1: added bond0 [ 509.949789][ T9854] RDS/IB: syz1: added [ 509.955421][ T9854] smc: adding ib device syz1 with port count 1 [ 509.963560][ T9854] smc: ib device syz1 port 1 has pnetid [ 510.007777][ T9865] xt_hashlimit: overflow, try lower: 1125899906842624/8 [ 510.505022][ T9874] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1647'. [ 510.513243][ T9876] 9pnet_virtio: no channels available for device syz [ 510.558236][ T9874] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1647'. [ 510.832311][ T9889] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 510.877423][ T9888] vlan0: vlans aren't supported yet for dev_uc|mc_add() [ 511.107884][ T9895] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.1654'. [ 512.766308][ T9911] lo speed is unknown, defaulting to 1000 [ 513.339996][ T9922] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1662'. [ 513.379605][ T9922] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1662'. [ 514.617932][ T9942] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 514.692258][ T9946] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1671'. [ 514.833511][ T9953] IPVS: sync thread started: state = BACKUP, mcast_ifn = macvlan0, syncid = 0, id = 0 [ 515.156892][ T9960] 9pnet_virtio: no channels available for device syz [ 516.551523][ T9981] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1679'. [ 516.673041][ T9981] device vlan2 entered promiscuous mode [ 516.727270][ T9981] device netdevsim0 entered promiscuous mode [ 516.772812][ T9981] device netdevsim0 left promiscuous mode [ 517.113427][ T9993] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 517.124216][ T9993] device syzkaller0 entered promiscuous mode [ 517.191875][ T9995] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1685'. [ 517.557433][ T9997] 9pnet_virtio: no channels available for device syz [ 517.958763][T10011] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 517.969537][T10011] device syzkaller0 entered promiscuous mode [ 518.240670][T10019] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 518.250872][T10019] device syzkaller0 entered promiscuous mode [ 518.485248][T10027] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1696'. [ 518.618987][T10030] 9pnet_virtio: no channels available for device syz [ 518.677716][T10034] overlayfs: missing 'lowerdir' [ 519.041083][T10041] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 519.051316][T10041] device syzkaller0 entered promiscuous mode [ 519.233033][T10047] vlan0: vlans aren't supported yet for dev_uc|mc_add() [ 519.540361][T10055] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1705'. [ 519.580636][T10055] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1705'. [ 519.699509][T10063] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1709'. [ 519.919425][T10066] netlink: 'syz.0.1710': attribute type 4 has an invalid length. [ 520.107325][T10071] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 520.116810][T10071] device syzkaller0 entered promiscuous mode [ 520.132786][ T3581] Bluetooth: hci1: link tx timeout [ 520.141064][ T3581] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 520.364588][T10080] overlayfs: missing 'lowerdir' [ 520.507711][T10082] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 520.517927][T10082] device syzkaller0 entered promiscuous mode [ 521.059759][T10086] xt_hashlimit: overflow, try lower: 1125899906842624/8 [ 521.851611][T10099] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1720'. [ 522.015444][T10102] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 522.025459][T10102] device syzkaller0 entered promiscuous mode [ 522.036003][T10103] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1720'. [ 522.278314][ T3614] Bluetooth: hci1: command 0x0406 tx timeout [ 523.809572][T10129] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 523.819220][T10129] device syzkaller0 entered promiscuous mode [ 524.242129][T10137] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 524.263295][T10137] device syzkaller0 entered promiscuous mode [ 525.534569][T10169] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 525.545244][T10169] device syzkaller0 entered promiscuous mode [ 525.559725][T10153] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1733'. [ 525.701078][T10171] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1733'. [ 527.657666][T10214] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1747'. [ 527.711320][T10214] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1747'. [ 527.777071][T10216] netlink: 'syz.1.1749': attribute type 13 has an invalid length. [ 527.850114][T10216] device veth0_macvtap left promiscuous mode [ 527.886083][T10216] macvtap0: refused to change device tx_queue_len [ 528.227124][T10226] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 528.237381][T10226] device syzkaller0 entered promiscuous mode [ 528.402150][T10229] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 528.412805][T10229] device syzkaller0 entered promiscuous mode [ 529.291259][T10245] overlayfs: missing 'workdir' [ 529.522012][T10253] xt_hashlimit: overflow, try lower: 1125899906842624/8 [ 529.619787][T10262] overlayfs: failed to resolve './file0': -2 [ 529.777906][T10264] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 529.787120][T10264] device syzkaller0 entered promiscuous mode [ 531.595084][T10276] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 531.605331][T10276] device syzkaller0 entered promiscuous mode [ 531.887728][T10285] 9pnet_virtio: no channels available for device syz [ 532.083906][ C0] hrtimer: interrupt took 34031 ns [ 533.848740][T10330] overlayfs: failed to resolve './file0': -2 [ 533.898323][T10333] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 533.908671][T10333] device syzkaller0 entered promiscuous mode [ 535.131824][T10345] 9pnet_virtio: no channels available for device syz [ 536.125807][T10356] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 536.136179][T10356] device syzkaller0 entered promiscuous mode [ 537.537198][T10376] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1793'. [ 537.726243][T10376] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1793'. [ 538.009263][T10385] TCP: request_sock_subflow_v6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 539.311999][T10399] 9pnet_virtio: no channels available for device syz [ 539.746518][T10411] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1799'. [ 540.627755][T10423] netlink: 'syz.4.1804': attribute type 1 has an invalid length. [ 540.902033][T10426] 8021q: adding VLAN 0 to HW filter on device bond3 [ 540.910345][T10426] bond2: (slave bond3): making interface the new active one [ 540.918192][T10426] bond2: (slave bond3): Enslaving as an active interface with an up link [ 543.371734][T10462] 9pnet_virtio: no channels available for device syz [ 543.403227][T10463] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1814'. [ 543.709805][T10471] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 543.738247][T10471] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 543.751088][T10471] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 543.762795][T10471] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 543.785755][T10471] team0: Port device wg2 removed [ 543.815182][T10472] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 543.825400][T10472] device syzkaller0 entered promiscuous mode [ 543.833858][T10473] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 543.844083][T10473] device syzkaller0 entered promiscuous mode [ 543.883615][T10474] team0: Port device wg2 added [ 543.918442][T10474] lo speed is unknown, defaulting to 1000 [ 544.001654][T10477] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1819'. [ 544.016973][T10477] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1819'. [ 545.750464][T10494] netlink: 376 bytes leftover after parsing attributes in process `syz.3.1823'. [ 546.899110][T10514] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1828'. [ 547.162498][T10520] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1831'. [ 547.229482][T10520] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1831'. [ 548.282064][T10533] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 548.292510][T10533] device syzkaller0 entered promiscuous mode [ 549.503505][T10557] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1842'. [ 550.027920][T10567] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1845'. [ 550.061848][T10567] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1845'. [ 552.484417][T10607] vlan0: vlans aren't supported yet for dev_uc|mc_add() [ 554.197793][T10626] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 554.208305][T10626] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 554.217080][T10626] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 554.230833][T10626] device bridge_slave_0 left promiscuous mode [ 554.238743][T10626] bridge0: port 1(bridge_slave_0) entered disabled state [ 554.258001][T10626] device bridge_slave_1 left promiscuous mode [ 554.268100][T10626] bridge0: port 2(bridge_slave_1) entered disabled state [ 554.289519][T10626] bond0: (slave bond_slave_0): Releasing backup interface [ 554.318053][T10626] bond0: (slave bond_slave_1): Releasing backup interface [ 554.369852][T10626] team0: Port device team_slave_0 removed [ 554.390774][T10626] team0: Port device team_slave_1 removed [ 554.397779][T10626] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 554.407229][T10626] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 554.416231][T10626] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 554.432939][T10626] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 554.448757][T10626] bond2: (slave bond3): Releasing backup interface [ 554.472948][T10629] device wg2 entered promiscuous mode [ 554.627434][T10629] team0: Port device wg2 added [ 554.649603][T10633] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1865'. [ 555.339242][T10639] xt_hashlimit: overflow, try lower: 1125899906842624/8 [ 555.658900][T10649] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 555.668132][T10649] device syzkaller0 entered promiscuous mode [ 555.750668][T10652] lo speed is unknown, defaulting to 1000 [ 556.228137][T10662] netlink: 'syz.4.1873': attribute type 10 has an invalid length. [ 556.303129][T10662] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 558.222975][T10691] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1882'. [ 558.284470][T10691] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1882'. [ 558.371700][T10696] lo speed is unknown, defaulting to 1000 [ 558.792266][T10710] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 558.802548][T10710] device syzkaller0 entered promiscuous mode [ 558.961664][T10712] device bond3 entered promiscuous mode [ 558.967985][T10712] 8021q: adding VLAN 0 to HW filter on device bond3 [ 560.300025][ T3615] Bluetooth: hci5: command 0x0409 tx timeout [ 560.782675][T10740] xt_hashlimit: overflow, try lower: 1125899906842624/8 [ 560.945042][T10746] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1896'. [ 561.020942][T10750] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1896'. [ 561.064293][T10696] chnl_net:caif_netlink_parms(): no params data found [ 561.349517][T10767] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.1902'. [ 561.378076][T10761] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.1902'. [ 561.544141][T10696] bridge0: port 1(bridge_slave_0) entered blocking state [ 561.571421][T10696] bridge0: port 1(bridge_slave_0) entered disabled state [ 562.741884][T10696] device bridge_slave_0 entered promiscuous mode [ 562.829839][T10696] bridge0: port 2(bridge_slave_1) entered blocking state [ 562.892974][ T1077] Bluetooth: hci5: command 0x041b tx timeout [ 562.900133][T10696] bridge0: port 2(bridge_slave_1) entered disabled state [ 562.908841][T10696] device bridge_slave_1 entered promiscuous mode [ 562.915701][ T1388] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.117791][T10696] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 563.180785][T10696] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 563.278127][T10795] xt_hashlimit: overflow, try lower: 1125899906842624/8 [ 563.376946][T10696] team0: Port device team_slave_0 added [ 563.435423][T10696] team0: Port device team_slave_1 added [ 563.578210][T10696] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 563.612499][T10696] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 563.702734][T10696] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 563.742787][T10805] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1911'. [ 563.782943][T10807] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1911'. [ 563.804085][T10696] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 563.828719][T10696] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 564.054069][T10696] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 564.595038][T10696] device hsr_slave_0 entered promiscuous mode [ 564.614477][T10696] device hsr_slave_1 entered promiscuous mode [ 564.925779][ T1077] Bluetooth: hci5: command 0x040f tx timeout [ 564.978114][T10696] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 565.108476][T10696] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 565.128882][T10834] xt_hashlimit: overflow, try lower: 1125899906842624/8 [ 565.202626][T10836] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 565.212940][T10836] device syzkaller0 entered promiscuous mode [ 565.260346][T10696] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 565.366960][T10696] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 565.739098][T10696] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 565.763035][T10696] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 565.837925][T10696] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 565.995013][T10696] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 566.964531][T10863] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1930'. [ 567.014195][ T3615] Bluetooth: hci5: command 0x0419 tx timeout [ 567.537246][T10696] 8021q: adding VLAN 0 to HW filter on device bond0 [ 567.617150][ T6144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 567.632460][ T6144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 567.797171][T10696] 8021q: adding VLAN 0 to HW filter on device team0 [ 567.920899][ T6144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 567.985833][ T6144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 568.010231][ T6144] bridge0: port 1(bridge_slave_0) entered blocking state [ 568.017474][ T6144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 568.046417][ T6144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 568.071860][ T6144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 568.091920][ T6144] bridge0: port 2(bridge_slave_1) entered blocking state [ 568.099146][ T6144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 568.115332][ T6144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 568.150378][ T6144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 568.177050][ T6144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 568.955226][ T6144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 568.987735][ T6144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 569.024733][ T6144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 569.055948][ T6144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 569.082577][ T6144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 569.130882][T10885] vlan0: vlans aren't supported yet for dev_uc|mc_add() [ 569.148014][ T6144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 569.164608][ T6144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 569.185696][T10696] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 569.201263][T10696] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 569.213442][ T3611] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 569.223260][ T3611] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 569.340979][T10897] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 569.579424][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 569.590239][T10903] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1940'. [ 569.606130][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 569.642017][T10696] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 569.915180][ T3627] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 569.939965][ T3627] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 570.014133][ T3627] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 570.044170][ T3627] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 570.067258][T10696] device veth0_vlan entered promiscuous mode [ 570.112643][ T3627] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 570.144660][ T3627] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 570.179495][T10696] device veth1_vlan entered promiscuous mode [ 570.255624][ T6144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 570.276942][ T6144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 570.311248][ T6144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 570.342186][ T6144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 570.386698][T10696] device veth0_macvtap entered promiscuous mode [ 570.410660][T10696] device veth1_macvtap entered promiscuous mode [ 570.478335][T10696] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 570.505548][T10696] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 570.544009][T10696] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 570.605327][T10696] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 570.625323][T10696] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 570.648373][T10696] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 570.679481][T10696] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 570.711822][T10696] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 570.782884][T10696] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 571.037464][T10696] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 571.065169][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 571.077862][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 571.107065][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 571.135053][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 571.165121][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 571.194887][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 571.245721][T10696] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 571.324776][T10696] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 571.437572][T10696] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 571.451755][T10696] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 572.361410][T10932] netlink: 'syz.0.1946': attribute type 29 has an invalid length. [ 572.439107][T10932] netlink: 'syz.0.1946': attribute type 29 has an invalid length. [ 572.507768][T10934] netlink: 'syz.0.1946': attribute type 29 has an invalid length. [ 572.605123][ T3611] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 572.670482][ T3611] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 572.698290][ T3672] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 572.718033][ T3672] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 572.761403][T10946] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1949'. [ 572.819822][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 572.833581][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 572.871488][T10944] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1949'. [ 572.885887][T10948] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1950'. [ 573.879413][T10959] vlan0: vlans aren't supported yet for dev_uc|mc_add() [ 576.020368][T10983] netlink: 'syz.3.1958': attribute type 10 has an invalid length. [ 576.073630][T10983] team0: Device wlan1 is of different type [ 576.421524][T10998] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1961'. [ 576.437452][T10995] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1961'. [ 577.234241][T11013] netlink: 'syz.2.1966': attribute type 29 has an invalid length. [ 577.245548][T11013] netlink: 'syz.2.1966': attribute type 29 has an invalid length. [ 577.262224][T11013] netlink: 'syz.2.1966': attribute type 29 has an invalid length. [ 577.277374][T11013] netlink: 'syz.2.1966': attribute type 29 has an invalid length. [ 577.292746][T11013] netlink: 'syz.2.1966': attribute type 29 has an invalid length. [ 578.840880][T11042] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1975'. [ 578.869020][T11041] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 578.884653][T11041] device syzkaller0 entered promiscuous mode [ 578.893116][T11042] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1975'. [ 579.864273][T11055] xt_hashlimit: overflow, try lower: 1125899906842624/8 [ 580.573290][ T3614] Bluetooth: hci3: command 0x0406 tx timeout [ 580.940027][T11077] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1986'. [ 580.957201][T11077] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1986'. [ 581.645892][T11090] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 581.656297][T11090] device syzkaller0 entered promiscuous mode [ 581.850125][T11094] vlan0: vlans aren't supported yet for dev_uc|mc_add() [ 582.552155][T11103] 9pnet_virtio: no channels available for device syz [ 583.294206][T11106] xt_hashlimit: overflow, try lower: 1125899906842624/8 [ 584.409472][T11132] vlan0: vlans aren't supported yet for dev_uc|mc_add() [ 585.404044][ T7] Bluetooth: hci4: command 0x0406 tx timeout [ 585.499533][T11146] xt_hashlimit: overflow, try lower: 1125899906842624/8 [ 586.110500][T11158] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 586.134130][T11158] device syzkaller0 entered promiscuous mode [ 586.252113][T11161] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 586.275202][T11161] device syzkaller0 entered promiscuous mode [ 586.773895][T11166] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2014'. [ 586.785458][T11167] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2014'. [ 587.019377][T11173] vlan0: vlans aren't supported yet for dev_uc|mc_add() [ 587.148762][T11183] netlink: 'syz.1.2021': attribute type 29 has an invalid length. [ 587.190657][T11183] netlink: 'syz.1.2021': attribute type 29 has an invalid length. [ 587.224818][T11186] netlink: 'syz.1.2021': attribute type 29 has an invalid length. [ 587.242084][T11183] netlink: 'syz.1.2021': attribute type 29 has an invalid length. [ 587.255328][T11183] netlink: 'syz.1.2021': attribute type 29 has an invalid length. [ 587.438000][T11196] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2024'. [ 588.542751][T11205] overlayfs: missing 'lowerdir' [ 588.882256][T11227] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 588.891470][T11227] device syzkaller0 entered promiscuous mode [ 589.086738][T11230] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 589.096144][T11230] device syzkaller0 entered promiscuous mode [ 589.461296][T11232] vlan0: vlans aren't supported yet for dev_uc|mc_add() [ 589.664115][T11238] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2035'. [ 591.543852][T11261] netlink: 'syz.3.2043': attribute type 4 has an invalid length. [ 592.899468][T11286] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 592.909773][T11286] device syzkaller0 entered promiscuous mode [ 594.896358][T11307] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2055'. [ 594.958742][T11307] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2055'. [ 595.069071][T11312] netlink: 'syz.0.2057': attribute type 1 has an invalid length. [ 595.086955][ T26] audit: type=1326 audit(1728794368.314:296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11313 comm="syz.2.2058" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa0c697eff9 code=0x0 [ 595.386238][T11327] overlayfs: missing 'lowerdir' [ 595.655457][T11333] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 595.664787][T11333] device syzkaller0 entered promiscuous mode [ 596.206684][T11346] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2071'. [ 596.248321][T11346] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2071'. [ 596.304682][T11348] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2072'. [ 596.325427][T11348] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2072'. [ 596.546153][T11355] xt_hashlimit: overflow, try lower: 1125899906842624/8 [ 597.111652][ T7] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 597.143377][T11375] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2083'. [ 597.190570][T11377] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2084'. [ 597.201855][T11377] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2084'. [ 597.399655][T11382] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 597.409142][T11382] device syzkaller0 entered promiscuous mode [ 597.432930][T11385] xt_hashlimit: overflow, try lower: 1125899906842624/8 [ 597.460647][T11386] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2086'. [ 597.478976][T11389] overlayfs: missing 'lowerdir' [ 597.505051][ T7] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 597.517867][ T7] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 597.542094][ T7] usb 5-1: New USB device found, idVendor=09da, idProduct=022b, bcdDevice= 0.00 [ 597.552632][ T7] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 597.578552][ T7] usb 5-1: config 0 descriptor?? [ 598.624991][T11364] netlink: 'syz.4.2077': attribute type 1 has an invalid length. [ 598.984130][ T7] usbhid 5-1:0.0: can't add hid device: -71 [ 598.990210][ T7] usbhid: probe of 5-1:0.0 failed with error -71 [ 599.133731][ T7] usb 5-1: USB disconnect, device number 7 [ 600.610760][ T26] audit: type=1326 audit(1728794373.834:297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11454 comm="syz.4.2108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f246af70ff9 code=0x7ffc0000 [ 600.645790][T11458] __nla_validate_parse: 5 callbacks suppressed [ 600.645808][T11458] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2110'. [ 600.680013][ T26] audit: type=1326 audit(1728794373.834:298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11454 comm="syz.4.2108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f246af70ff9 code=0x7ffc0000 [ 600.771875][ T26] audit: type=1326 audit(1728794373.864:299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11454 comm="syz.4.2108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f246af70ff9 code=0x7ffc0000 [ 601.007649][ T26] audit: type=1326 audit(1728794373.864:300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11454 comm="syz.4.2108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f246af70ff9 code=0x7ffc0000 [ 601.402157][ T26] audit: type=1326 audit(1728794373.864:301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11454 comm="syz.4.2108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f246af70ff9 code=0x7ffc0000 [ 601.432617][ T26] audit: type=1326 audit(1728794373.864:302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11454 comm="syz.4.2108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f246af70ff9 code=0x7ffc0000 [ 601.471533][T11467] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2111'. [ 601.484584][T11468] netlink: 'syz.0.2112': attribute type 1 has an invalid length. [ 601.488510][ T26] audit: type=1326 audit(1728794373.864:303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11454 comm="syz.4.2108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f246af70ff9 code=0x7ffc0000 [ 601.502702][T11468] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 601.522412][T11468] IPv6: NLM_F_CREATE should be set when creating new route [ 601.528722][ T26] audit: type=1326 audit(1728794373.864:304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11454 comm="syz.4.2108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f246af70ff9 code=0x7ffc0000 [ 601.582054][T11469] vlan0: vlans aren't supported yet for dev_uc|mc_add() [ 601.664657][ T26] audit: type=1326 audit(1728794373.864:305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11454 comm="syz.4.2108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f246af70ff9 code=0x7ffc0000 [ 601.752653][ T26] audit: type=1326 audit(1728794373.864:306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11454 comm="syz.4.2108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f246af70ff9 code=0x7ffc0000 [ 602.091344][T11486] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2116'. [ 602.294405][T11486] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2116'. [ 602.391781][T11494] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 602.401973][T11494] device syzkaller0 entered promiscuous mode [ 604.946127][T11537] device vlan2 entered promiscuous mode [ 604.951802][T11537] device netdevsim0 entered promiscuous mode [ 604.963037][T11537] device netdevsim0 left promiscuous mode [ 606.645821][T11561] netlink: 'syz.0.2135': attribute type 13 has an invalid length. [ 606.664849][T11561] macvtap0: refused to change device tx_queue_len [ 609.140991][T11583] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2142'. [ 609.196231][T11583] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2142'. [ 609.473042][T11590] 9pnet_virtio: no channels available for device syz [ 611.590879][T11616] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2150'. [ 611.592611][T11617] vlan0: vlans aren't supported yet for dev_uc|mc_add() [ 611.955384][T11624] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 611.965277][T11624] device syzkaller0 entered promiscuous mode [ 612.230215][T11630] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2154'. [ 612.251656][T11630] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2154'. [ 612.297921][T11633] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 612.308086][T11633] device syzkaller0 entered promiscuous mode [ 612.333738][T11635] netlink: 'syz.3.2156': attribute type 10 has an invalid length. [ 612.353316][T11635] team0: Device netdevsim0 is of different type [ 612.370615][T11635] netlink: 'syz.3.2156': attribute type 10 has an invalid length. [ 612.383052][T11635] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 612.463634][T11639] netlink: 'syz.3.2158': attribute type 10 has an invalid length. [ 612.503473][T11639] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 612.527471][T11640] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2158'. [ 612.564424][T11640] bond0: (slave bridge0): Releasing backup interface [ 612.944191][T11646] program syz.4.2160 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 613.615445][T11666] TCP: request_sock_subflow_v6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 613.624090][ T3581] Bluetooth: hci5: link tx timeout [ 613.632557][ T3581] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 613.766358][T11674] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2168'. [ 613.819284][T11674] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2168'. [ 614.005273][T11681] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 614.014553][T11681] device syzkaller0 entered promiscuous mode [ 614.641806][T11687] netlink: 'syz.2.2171': attribute type 10 has an invalid length. [ 614.742121][T11687] team0: Port device netdevsim0 added [ 614.827397][T11691] netlink: 'syz.2.2171': attribute type 10 has an invalid length. [ 614.912738][T11691] team0: Port device netdevsim0 removed [ 614.958217][T11691] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 615.084199][ T1077] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 615.384048][ T1077] usb 1-1: Using ep0 maxpacket: 16 [ 615.504231][ T1077] usb 1-1: New USB device found, idVendor=2770, idProduct=9050, bcdDevice=11.97 [ 615.557616][ T1077] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 615.693032][ T7] Bluetooth: hci5: command 0x0406 tx timeout [ 615.702185][ T1077] usb 1-1: config 0 descriptor?? [ 615.705361][T11716] vlan0: vlans aren't supported yet for dev_uc|mc_add() [ 615.746028][ T1077] gspca_main: sq905c-2.14.0 probing 2770:9050 [ 616.284286][ T1077] gspca_sq905c: sq905c_command: usb_control_msg failed (-110) [ 616.294850][ T1077] sq905c 1-1:0.0: Get version command failed [ 616.318999][ T1077] sq905c: probe of 1-1:0.0 failed with error -110 [ 616.795586][ T21] usb 1-1: USB disconnect, device number 6 [ 617.881769][T11751] xt_hashlimit: overflow, try lower: 1125899906842624/8 [ 617.973203][T11753] vlan0: vlans aren't supported yet for dev_uc|mc_add() [ 619.783067][T11781] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2196'. [ 619.854290][T11781] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2196'. [ 620.391131][ T3581] Bluetooth: hci5: link tx timeout [ 620.396427][ T3581] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 621.551301][T11805] vlan0: vlans aren't supported yet for dev_uc|mc_add() [ 622.621876][T11820] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2208'. [ 622.645879][T11820] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2208'. [ 624.074530][T11848] vlan0: vlans aren't supported yet for dev_uc|mc_add() [ 624.288415][ T1388] ieee802154 phy0 wpan0: encryption failed: -22 [ 625.270666][T11868] kvm: pic: non byte read [ 625.614105][ T3615] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 626.444089][ T3615] usb 2-1: Using ep0 maxpacket: 8 [ 626.784100][ T3615] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 626.796673][ T3615] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 626.806800][ T3615] usb 2-1: Product: syz [ 626.811573][ T3615] usb 2-1: Manufacturer: syz [ 626.818051][ T3615] usb 2-1: SerialNumber: syz [ 626.827164][ T3615] usb 2-1: config 0 descriptor?? [ 627.160029][ T3615] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 627.353177][ T26] kauditd_printk_skb: 60 callbacks suppressed [ 627.353191][ T26] audit: type=1326 audit(1728794400.574:367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11907 comm="syz.0.2233" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f79cb331ff9 code=0x0 [ 627.381652][ C0] vkms_vblank_simulate: vblank timer overrun [ 628.316635][T11922] lo speed is unknown, defaulting to 1000 [ 629.609364][T11929] lo speed is unknown, defaulting to 1000 [ 630.044496][ T3615] dvb_usb_rtl28xxu: probe of 2-1:0.0 failed with error -71 [ 630.062598][ T3615] usb 2-1: USB disconnect, device number 10 [ 631.539464][T11929] chnl_net:caif_netlink_parms(): no params data found [ 631.578112][ T26] audit: type=1326 audit(1728794404.804:368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11962 comm="syz.2.2249" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa0c697eff9 code=0x0 [ 631.784717][ T3646] Bluetooth: hci6: command 0x0409 tx timeout [ 632.630438][T11929] bridge0: port 1(bridge_slave_0) entered blocking state [ 632.638850][T11929] bridge0: port 1(bridge_slave_0) entered disabled state [ 632.650799][T11929] device bridge_slave_0 entered promiscuous mode [ 632.663529][T11929] bridge0: port 2(bridge_slave_1) entered blocking state [ 632.673455][T11929] bridge0: port 2(bridge_slave_1) entered disabled state [ 632.682328][T11929] device bridge_slave_1 entered promiscuous mode [ 632.839042][T11990] xt_hashlimit: overflow, try lower: 1125899906842624/8 [ 632.862339][T11982] team0: Port device macvlan1 added [ 632.946349][T11929] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 633.137556][T11929] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 633.670556][T11929] team0: Port device team_slave_0 added [ 633.746478][T11929] team0: Port device team_slave_1 added [ 633.876429][T11929] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 633.894663][ T3752] Bluetooth: hci6: command 0x041b tx timeout [ 633.915914][T11929] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 634.040853][T11929] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 634.077263][T12024] xt_hashlimit: overflow, try lower: 1125899906842624/8 [ 634.164772][T12026] vlan0: vlans aren't supported yet for dev_uc|mc_add() [ 634.172331][T11929] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 634.202081][T11929] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 634.277710][T11929] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 635.023442][T11929] device hsr_slave_0 entered promiscuous mode [ 635.050552][T11929] device hsr_slave_1 entered promiscuous mode [ 635.103219][T11929] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 635.171635][T11929] Cannot create hsr debugfs directory [ 635.707255][T11929] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 635.925649][T11929] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 635.964325][ T3752] Bluetooth: hci6: command 0x040f tx timeout [ 636.036570][T11929] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 636.125948][T11929] bond0: (slave netdevsim0): Releasing backup interface [ 636.188585][T11929] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 636.555336][T11929] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 636.586155][T11929] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 636.658698][T12065] tun0: tun_chr_ioctl cmd 1074025677 [ 636.687117][T12065] tun0: linktype set to 65534 [ 636.739483][T11929] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 636.814619][T11929] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 636.892491][T12067] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2274'. [ 636.963863][T11929] 8021q: adding VLAN 0 to HW filter on device bond0 [ 636.980642][ T3995] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 637.006406][ T3995] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 637.118061][T11929] 8021q: adding VLAN 0 to HW filter on device team0 [ 637.187991][ T3995] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 637.320326][ T3995] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 637.359854][ T3995] bridge0: port 1(bridge_slave_0) entered blocking state [ 637.366967][ T3995] bridge0: port 1(bridge_slave_0) entered forwarding state [ 637.444880][ T3995] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 637.494575][ T3672] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 637.564521][ T3672] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 637.618862][ T3672] bridge0: port 2(bridge_slave_1) entered blocking state [ 637.626116][ T3672] bridge0: port 2(bridge_slave_1) entered forwarding state [ 637.688155][ T3672] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 637.726839][ T3672] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 637.758361][ T3672] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 637.809265][ T3672] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 637.838586][ T3672] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 637.872125][ T3672] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 637.904533][ T3672] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 637.941244][ T6144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 637.956789][ T6144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 638.012446][ T6144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 638.058328][ T3752] Bluetooth: hci6: command 0x0419 tx timeout [ 638.065401][ T6144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 638.097755][T11929] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 638.323740][T12092] program syz.2.2285 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 638.435572][ T3672] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 638.443126][ T3672] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 638.500329][T11929] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 638.574605][ C1] sd 0:0:1:0: tag#5776 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 638.584528][ C1] sd 0:0:1:0: tag#5776 CDB: Write(6) 0a 00 00 00 00 00 [ 638.740332][T12106] netlink: 80 bytes leftover after parsing attributes in process `syz.4.2287'. [ 638.763786][ T3995] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 638.785478][ T3995] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 638.832331][T12109] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 638.842146][T12109] device syzkaller0 entered promiscuous mode [ 638.861493][ T3672] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 638.873524][ T3672] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 638.913866][T11929] device veth0_vlan entered promiscuous mode [ 638.948524][ T3672] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 638.959242][ T3672] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 639.008457][T11929] device veth1_vlan entered promiscuous mode [ 639.204424][ T3995] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 639.240561][ T3995] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 639.302814][T11929] device veth0_macvtap entered promiscuous mode [ 639.314832][T11929] device veth1_macvtap entered promiscuous mode [ 639.323113][ T3995] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 639.400610][ T3995] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 639.425008][ T3995] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 639.560922][T11929] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 639.631314][T11929] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 639.651650][T11929] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 639.705467][T11929] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 639.746075][T11929] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 639.797319][T11929] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 639.914371][T11929] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 639.926164][ T3995] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 640.013263][ T3995] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 640.053050][ T3995] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 640.266122][T11929] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 640.311332][T11929] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 640.322737][T11929] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 640.344536][T11929] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 640.355502][T11929] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 640.369730][T11929] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 640.381761][T11929] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 640.415150][ T6144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 640.430483][ T6144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 640.456836][T12135] netlink: 'syz.2.2298': attribute type 15 has an invalid length. [ 640.473113][T11929] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 640.507467][T11929] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 640.530953][T11929] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 640.558939][T11929] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 640.771795][T12144] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 640.782451][T12144] device syzkaller0 entered promiscuous mode [ 640.813377][ T6144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 640.846680][ T6144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 640.854253][ T7] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 640.870625][ T3995] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 640.879995][ T3672] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 640.896274][ T3995] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 640.913366][ T6144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 641.104101][ T7] usb 5-1: Using ep0 maxpacket: 16 [ 641.226117][ T7] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 641.242444][ T7] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 641.999162][ T7] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 642.012758][ T7] usb 5-1: New USB device found, idVendor=0458, idProduct=0087, bcdDevice= 0.00 [ 642.044113][ T7] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 642.084908][ T7] usb 5-1: config 0 descriptor?? [ 642.329936][T12141] udc-core: couldn't find an available UDC or it's busy [ 642.349560][T12165] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 642.352537][T12141] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 642.360249][T12165] device syzkaller0 entered promiscuous mode [ 642.382019][T12141] device vlan2 entered promiscuous mode [ 642.389046][T12141] team0: Device vlan2 is of different type [ 642.471598][T12171] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 642.485346][T12171] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 642.504932][T12171] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 642.544248][ T7] usbhid 5-1:0.0: can't add hid device: -71 [ 642.550579][ T7] usbhid: probe of 5-1:0.0 failed with error -71 [ 642.576077][ T7] usb 5-1: USB disconnect, device number 8 [ 642.770360][T12180] lo speed is unknown, defaulting to 1000 [ 644.946455][T12222] kvm: MONITOR instruction emulated as NOP! [ 645.244308][ T21] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 645.664271][ T21] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 645.686997][ T21] usb 2-1: config 1 has an invalid descriptor of length 48, skipping remainder of the config [ 645.722369][ T21] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 645.733519][ T21] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 48, changing to 9 [ 645.758531][ T21] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24624, setting to 1024 [ 645.772089][T12235] overlayfs: missing 'workdir' [ 645.951027][T12241] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2332'. [ 645.964283][ T21] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 645.973601][ T21] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 645.982601][ T21] usb 2-1: Product: syz [ 645.991421][ T21] usb 2-1: Manufacturer: syz [ 646.020220][T12241] netlink: 136 bytes leftover after parsing attributes in process `syz.3.2332'. [ 646.064732][ T21] cdc_wdm 2-1:1.0: skipping garbage [ 646.076798][ T21] cdc_wdm 2-1:1.0: skipping garbage [ 646.117339][ T21] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 646.143344][ T21] cdc_wdm 2-1:1.0: Unknown control protocol [ 646.907860][ T3752] Bluetooth: hci1: command 0x0406 tx timeout [ 647.465280][ T1077] usb 2-1: USB disconnect, device number 11 [ 650.092376][T12335] xt_hashlimit: overflow, try lower: 1125899906842624/8 [ 650.113967][ T26] audit: type=1326 audit(1728794423.334:369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12330 comm="syz.3.2361" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa103db9ff9 code=0x0 [ 651.418278][T12351] lo speed is unknown, defaulting to 1000 [ 652.309517][T12360] program syz.0.2370 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 652.353015][T12360] netlink: 228 bytes leftover after parsing attributes in process `syz.0.2370'. [ 652.636966][T12370] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 652.646263][T12370] device syzkaller0 entered promiscuous mode [ 652.984204][ T3614] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 653.085561][T12362] syz.3.2368 (12362): drop_caches: 2 [ 653.220476][T12365] syz.3.2368 (12365): drop_caches: 2 [ 653.234106][ T3614] usb 3-1: Using ep0 maxpacket: 8 [ 653.290989][T12376] xt_hashlimit: overflow, try lower: 1125899906842624/8 [ 653.393518][ T3614] usb 3-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 0 [ 653.534171][ T3614] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 653.552159][ T3614] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 653.560616][ T3614] usb 3-1: SerialNumber: syz [ 653.629319][ T3614] cdc_ether: probe of 3-1:1.0 failed with error -22 [ 653.823893][T12356] syz.3.2368 (12356): drop_caches: 2 [ 654.618915][ T1075] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 654.621581][ T3614] usb 3-1: USB disconnect, device number 10 [ 654.924041][ T1075] usb 1-1: Using ep0 maxpacket: 16 [ 655.033517][T12406] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2386'. [ 655.064161][ T1075] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 655.101897][ T1075] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 655.201964][ T1075] usb 1-1: New USB device found, idVendor=07b5, idProduct=0312, bcdDevice= 0.00 [ 655.541782][ T1075] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 655.593672][ T1075] usb 1-1: config 0 descriptor?? [ 655.812537][T12426] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2391'. [ 655.850213][T12426] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2391'. [ 655.904829][T12425] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 655.915302][T12425] device syzkaller0 entered promiscuous mode [ 656.044242][T12434] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2393'. [ 656.079129][T12434] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2393'. [ 656.346791][T12442] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2397'. [ 656.662928][T12446] vlan0: vlans aren't supported yet for dev_uc|mc_add() [ 657.075777][T12462] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2404'. [ 657.168426][T12462] usb usb8: usbfs: process 12462 (syz.2.2404) did not claim interface 0 before use [ 657.194178][ T1075] usbhid 1-1:0.0: can't add hid device: -71 [ 657.200370][ T1075] usbhid: probe of 1-1:0.0 failed with error -71 [ 657.254351][ T1075] usb 1-1: USB disconnect, device number 7 [ 657.282551][T12470] BUG: sleeping function called from invalid context at kernel/locking/rwsem.c:1497 [ 657.292404][T12470] in_atomic(): 1, irqs_disabled(): 1, non_block: 0, pid: 12470, name: syz.0.2405 [ 657.301530][T12470] 2 locks held by syz.0.2405/12470: [ 657.306735][T12470] #0: ffff88805a432a48 (&smc->clcsock_release_lock){+.+.}-{3:3}, at: smc_setsockopt+0x130/0xb20 [ 657.317253][T12470] #1: ffffffff8c945618 (css_set_lock){..-.}-{2:2}, at: cgroup_get_from_path+0x24/0x2e0 [ 657.327078][T12470] irq event stamp: 206 [ 657.331147][T12470] hardirqs last enabled at (205): [] queue_delayed_work_on+0x171/0x250 [ 657.341025][T12470] hardirqs last disabled at (206): [] _raw_spin_lock_irq+0xa9/0x110 [ 657.350557][T12470] softirqs last enabled at (86): [] ip_setsockopt+0x260e/0x3fb0 [ 657.359826][T12470] softirqs last disabled at (84): [] release_sock+0x2c/0x1c0 [ 657.368769][T12470] Preemption disabled at: [ 657.368777][T12470] [<0000000000000000>] 0x0 [ 657.377478][T12470] CPU: 1 PID: 12470 Comm: syz.0.2405 Not tainted 5.15.167-syzkaller #0 [ 657.385715][T12470] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 657.395773][T12470] Call Trace: [ 657.399041][T12470] [ 657.401978][T12470] dump_stack_lvl+0x1e3/0x2d0 [ 657.406637][T12470] ? ip_setsockopt+0x260e/0x3fb0 [ 657.411562][T12470] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 657.417182][T12470] ? panic+0x860/0x860 [ 657.421243][T12470] ___might_sleep+0x547/0x6a0 [ 657.425921][T12470] ? __might_sleep+0xc0/0xc0 [ 657.430612][T12470] down_read+0x21/0x2e0 [ 657.434778][T12470] ? kernfs_walk_and_get_ns+0x72/0x2b0 [ 657.440246][T12470] kernfs_walk_and_get_ns+0x7e/0x2b0 [ 657.445555][T12470] ? kernfs_find_ns+0x500/0x500 [ 657.450433][T12470] ? current_cgns_cgroup_from_root+0x2ad/0x300 [ 657.457040][T12470] cgroup_get_from_path+0x5c/0x2e0 [ 657.462151][T12470] cgroup_mt_check_v1+0x1a0/0x2b0 [ 657.467168][T12470] xt_check_match+0x363/0xa30 [ 657.471832][T12470] ? xt_find_match+0x6d/0x200 [ 657.476498][T12470] ? mutex_unlock+0x10/0x10 [ 657.481091][T12470] ? xt_check_proc_name+0x110/0x110 [ 657.486365][T12470] ? pcpu_alloc+0x10c9/0x17c0 [ 657.491142][T12470] ? xt_find_match+0x1cf/0x200 [ 657.495901][T12470] translate_table+0x15bd/0x2250 [ 657.500843][T12470] ? ipt_register_table+0x7a0/0x7a0 [ 657.506036][T12470] ? __might_fault+0xb8/0x110 [ 657.510728][T12470] ? __lock_acquire+0x1ff0/0x1ff0 [ 657.515757][T12470] ? _copy_from_user+0x10f/0x170 [ 657.520686][T12470] ? copy_from_sockptr_offset+0x6b/0xa0 [ 657.526220][T12470] do_ipt_set_ctl+0xdbc/0x1200 [ 657.530976][T12470] ? rcu_lock_release+0x20/0x20 [ 657.535826][T12470] ? ipt_unregister_table_exit+0x1e0/0x1e0 [ 657.541646][T12470] ? __lock_acquire+0x1ff0/0x1ff0 [ 657.546682][T12470] ? __mutex_unlock_slowpath+0x218/0x750 [ 657.552309][T12470] ? nf_setsockopt+0x38/0x2b0 [ 657.556978][T12470] ? print_irqtrace_events+0x210/0x210 [ 657.562449][T12470] ? mutex_unlock+0x10/0x10 [ 657.566943][T12470] ? lockdep_hardirqs_on+0x94/0x130 [ 657.572133][T12470] ? __local_bh_enable_ip+0x164/0x1f0 [ 657.577497][T12470] nf_setsockopt+0x28a/0x2b0 [ 657.582099][T12470] ip_setsockopt+0x2732/0x3fb0 [ 657.586872][T12470] ? ipv4_pktinfo_prepare+0x6f0/0x6f0 [ 657.592259][T12470] ? read_lock_is_recursive+0x10/0x10 [ 657.597618][T12470] ? __mutex_trylock_common+0x17e/0x2e0 [ 657.603154][T12470] ? __might_sleep+0xc0/0xc0 [ 657.607735][T12470] ? rcu_lock_release+0x20/0x20 [ 657.612578][T12470] tcp_setsockopt+0x23f/0x3680 [ 657.617334][T12470] ? tcp_set_window_clamp+0x1b0/0x1b0 [ 657.622780][T12470] ? __might_sleep+0xc0/0xc0 [ 657.627366][T12470] ? smc_setsockopt+0x130/0xb20 [ 657.632207][T12470] ? mutex_lock_io_nested+0x60/0x60 [ 657.637400][T12470] ? __lock_acquire+0x1ff0/0x1ff0 [ 657.642451][T12470] ? aa_sk_perm+0x8fc/0xa30 [ 657.646974][T12470] ? sock_common_setsockopt+0x33/0xc0 [ 657.652489][T12470] ? sock_common_recvmsg+0x240/0x240 [ 657.657879][T12470] smc_setsockopt+0x1e5/0xb20 [ 657.662553][T12470] ? smc_shutdown+0x5f0/0x5f0 [ 657.667252][T12470] ? aa_sock_opt_perm+0x79/0x110 [ 657.672230][T12470] ? bpf_lsm_socket_setsockopt+0x5/0x10 [ 657.677864][T12470] ? security_socket_setsockopt+0x7d/0xa0 [ 657.683570][T12470] ? smc_shutdown+0x5f0/0x5f0 [ 657.688237][T12470] __sys_setsockopt+0x57e/0x990 [ 657.693082][T12470] ? __ia32_sys_recv+0xb0/0xb0 [ 657.697881][T12470] ? syscall_enter_from_user_mode+0x2e/0x240 [ 657.703957][T12470] __x64_sys_setsockopt+0xb1/0xc0 [ 657.709002][T12470] do_syscall_64+0x3b/0xb0 [ 657.713404][T12470] ? clear_bhb_loop+0x15/0x70 [ 657.718073][T12470] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 657.724217][T12470] RIP: 0033:0x7f79cb331ff9 [ 657.728619][T12470] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 657.748306][T12470] RSP: 002b:00007f79c9789038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 657.756738][T12470] RAX: ffffffffffffffda RBX: 00007f79cb4ea058 RCX: 00007f79cb331ff9 [ 657.764709][T12470] RDX: 0000000000000040 RSI: 0004000000000000 RDI: 0000000000000005 [ 657.772777][T12470] RBP: 00007f79cb3a4296 R08: 0000000000001378 R09: 0000000000000000 [ 657.780759][T12470] R10: 0000000020000640 R11: 0000000000000246 R12: 0000000000000000 [ 657.788741][T12470] R13: 0000000000000000 R14: 00007f79cb4ea058 R15: 00007ffcb2fc5cf8 [ 657.796723][T12470] [ 657.799740][T12470] [ 657.802060][T12470] ============================= [ 657.806886][T12470] [ BUG: Invalid wait context ] [ 657.811979][T12470] 5.15.167-syzkaller #0 Tainted: G W [ 657.818640][T12470] ----------------------------- [ 657.823482][T12470] syz.0.2405/12470 is trying to lock: [ 657.828832][T12470] ffffffff8ca52110 (kernfs_rwsem){++++}-{3:3}, at: kernfs_walk_and_get_ns+0x7e/0x2b0 [ 657.838294][T12470] other info that might help us debug this: [ 657.844264][T12470] context-{4:4} [ 657.847708][T12470] 2 locks held by syz.0.2405/12470: [ 657.852882][T12470] #0: ffff88805a432a48 (&smc->clcsock_release_lock){+.+.}-{3:3}, at: smc_setsockopt+0x130/0xb20 [ 657.863494][T12470] #1: ffffffff8c945618 (css_set_lock){..-.}-{2:2}, at: cgroup_get_from_path+0x24/0x2e0 [ 657.873336][T12470] stack backtrace: [ 657.877078][T12470] CPU: 1 PID: 12470 Comm: syz.0.2405 Tainted: G W 5.15.167-syzkaller #0 [ 657.886688][T12470] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 657.896740][T12470] Call Trace: [ 657.900001][T12470] [ 657.902910][T12470] dump_stack_lvl+0x1e3/0x2d0 [ 657.907567][T12470] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 657.913207][T12470] ? panic+0x860/0x860 [ 657.917278][T12470] __lock_acquire+0x14f5/0x1ff0 [ 657.922138][T12470] lock_acquire+0x1db/0x4f0 [ 657.926795][T12470] ? kernfs_walk_and_get_ns+0x7e/0x2b0 [ 657.932248][T12470] ? read_lock_is_recursive+0x10/0x10 [ 657.937610][T12470] ? __might_sleep+0xc0/0xc0 [ 657.942212][T12470] down_read+0x45/0x2e0 [ 657.946351][T12470] ? kernfs_walk_and_get_ns+0x7e/0x2b0 [ 657.951850][T12470] ? kernfs_walk_and_get_ns+0x72/0x2b0 [ 657.957411][T12470] kernfs_walk_and_get_ns+0x7e/0x2b0 [ 657.962739][T12470] ? kernfs_find_ns+0x500/0x500 [ 657.967588][T12470] ? current_cgns_cgroup_from_root+0x2ad/0x300 [ 657.973748][T12470] cgroup_get_from_path+0x5c/0x2e0 [ 657.978842][T12470] cgroup_mt_check_v1+0x1a0/0x2b0 [ 657.983851][T12470] xt_check_match+0x363/0xa30 [ 657.988520][T12470] ? xt_find_match+0x6d/0x200 [ 657.993200][T12470] ? mutex_unlock+0x10/0x10 [ 657.997684][T12470] ? xt_check_proc_name+0x110/0x110 [ 658.002864][T12470] ? pcpu_alloc+0x10c9/0x17c0 [ 658.007525][T12470] ? xt_find_match+0x1cf/0x200 [ 658.012274][T12470] translate_table+0x15bd/0x2250 [ 658.017221][T12470] ? ipt_register_table+0x7a0/0x7a0 [ 658.022531][T12470] ? __might_fault+0xb8/0x110 [ 658.027196][T12470] ? __lock_acquire+0x1ff0/0x1ff0 [ 658.032224][T12470] ? _copy_from_user+0x10f/0x170 [ 658.037144][T12470] ? copy_from_sockptr_offset+0x6b/0xa0 [ 658.042761][T12470] do_ipt_set_ctl+0xdbc/0x1200 [ 658.047512][T12470] ? rcu_lock_release+0x20/0x20 [ 658.052364][T12470] ? ipt_unregister_table_exit+0x1e0/0x1e0 [ 658.058279][T12470] ? __lock_acquire+0x1ff0/0x1ff0 [ 658.063383][T12470] ? __mutex_unlock_slowpath+0x218/0x750 [ 658.069107][T12470] ? nf_setsockopt+0x38/0x2b0 [ 658.073842][T12470] ? print_irqtrace_events+0x210/0x210 [ 658.079312][T12470] ? mutex_unlock+0x10/0x10 [ 658.084089][T12470] ? lockdep_hardirqs_on+0x94/0x130 [ 658.089332][T12470] ? __local_bh_enable_ip+0x164/0x1f0 [ 658.094728][T12470] nf_setsockopt+0x28a/0x2b0 [ 658.099393][T12470] ip_setsockopt+0x2732/0x3fb0 [ 658.104150][T12470] ? ipv4_pktinfo_prepare+0x6f0/0x6f0 [ 658.109507][T12470] ? read_lock_is_recursive+0x10/0x10 [ 658.114858][T12470] ? __mutex_trylock_common+0x17e/0x2e0 [ 658.120438][T12470] ? __might_sleep+0xc0/0xc0 [ 658.125013][T12470] ? rcu_lock_release+0x20/0x20 [ 658.129846][T12470] tcp_setsockopt+0x23f/0x3680 [ 658.134598][T12470] ? tcp_set_window_clamp+0x1b0/0x1b0 [ 658.139963][T12470] ? __might_sleep+0xc0/0xc0 [ 658.144536][T12470] ? smc_setsockopt+0x130/0xb20 [ 658.149383][T12470] ? mutex_lock_io_nested+0x60/0x60 [ 658.154596][T12470] ? __lock_acquire+0x1ff0/0x1ff0 [ 658.159791][T12470] ? aa_sk_perm+0x8fc/0xa30 [ 658.164305][T12470] ? sock_common_setsockopt+0x33/0xc0 [ 658.169667][T12470] ? sock_common_recvmsg+0x240/0x240 [ 658.174938][T12470] smc_setsockopt+0x1e5/0xb20 [ 658.179602][T12470] ? smc_shutdown+0x5f0/0x5f0 [ 658.184261][T12470] ? aa_sock_opt_perm+0x79/0x110 [ 658.189184][T12470] ? bpf_lsm_socket_setsockopt+0x5/0x10 [ 658.194712][T12470] ? security_socket_setsockopt+0x7d/0xa0 [ 658.200463][T12470] ? smc_shutdown+0x5f0/0x5f0 [ 658.205134][T12470] __sys_setsockopt+0x57e/0x990 [ 658.210175][T12470] ? __ia32_sys_recv+0xb0/0xb0 [ 658.214950][T12470] ? syscall_enter_from_user_mode+0x2e/0x240 [ 658.220927][T12470] __x64_sys_setsockopt+0xb1/0xc0 [ 658.225943][T12470] do_syscall_64+0x3b/0xb0 [ 658.230368][T12470] ? clear_bhb_loop+0x15/0x70 [ 658.235044][T12470] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 658.240918][T12470] RIP: 0033:0x7f79cb331ff9 [ 658.245315][T12470] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 658.264907][T12470] RSP: 002b:00007f79c9789038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 658.273390][T12470] RAX: ffffffffffffffda RBX: 00007f79cb4ea058 RCX: 00007f79cb331ff9 [ 658.281346][T12470] RDX: 0000000000000040 RSI: 0004000000000000 RDI: 0000000000000005 [ 658.289303][T12470] RBP: 00007f79cb3a4296 R08: 0000000000001378 R09: 0000000000000000 [ 658.297270][T12470] R10: 0000000020000640 R11: 0000000000000246 R12: 0000000000000000 [ 658.305234][T12470] R13: 0000000000000000 R14: 00007f79cb4ea058 R15: 00007ffcb2fc5cf8 [ 658.313205][T12470] [ 658.317551][T12470] BUG: scheduling while atomic: syz.0.2405/12470/0x00000002 [ 658.326448][T12470] INFO: lockdep is turned off. [ 658.331319][T12470] Modules linked in: [ 658.335345][T12470] Preemption disabled at: [ 658.335356][T12470] [<0000000000000000>] 0x0 [ 658.344102][T12470] Kernel panic - not syncing: scheduling while atomic: panic_on_warn set ... [ 658.352863][T12470] CPU: 1 PID: 12470 Comm: syz.0.2405 Tainted: G W 5.15.167-syzkaller #0 [ 658.362488][T12470] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 658.372533][T12470] Call Trace: [ 658.375819][T12470] [ 658.378738][T12470] dump_stack_lvl+0x1e3/0x2d0 [ 658.383403][T12470] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 658.389016][T12470] ? panic+0x860/0x860 [ 658.393070][T12470] ? __wake_up_klogd+0xcc/0x100 [ 658.397903][T12470] panic+0x318/0x860 [ 658.401810][T12470] ? check_panic_on_warn+0x1d/0xa0 [ 658.406921][T12470] ? fb_is_primary_device+0xd0/0xd0 [ 658.412107][T12470] ? __wake_up_klogd+0xcc/0x100 [ 658.416939][T12470] ? is_bpf_text_address+0x24f/0x260 [ 658.422298][T12470] check_panic_on_warn+0x7e/0xa0 [ 658.427242][T12470] __schedule_bug+0x1ba/0x220 [ 658.431989][T12470] ? raw_spin_rq_unlock_irq+0x80/0x80 [ 658.437340][T12470] ? reacquire_held_locks+0x660/0x660 [ 658.442698][T12470] __schedule+0x138a/0x45b0 [ 658.447180][T12470] ? lock_acquire+0xdd/0x4f0 [ 658.451751][T12470] ? __printk_cpu_unlock+0x5f/0x70 [ 658.456870][T12470] ? lock_release+0xb9/0x9a0 [ 658.461529][T12470] ? print_irqtrace_events+0x210/0x210 [ 658.466969][T12470] ? rcu_is_watching+0x11/0xa0 [ 658.471823][T12470] ? release_firmware_map_entry+0x190/0x190 [ 658.477699][T12470] schedule+0x11b/0x1f0 [ 658.481837][T12470] schedule_preempt_disabled+0xf/0x20 [ 658.487203][T12470] rwsem_down_read_slowpath+0x605/0xb40 [ 658.492739][T12470] ? down_write_killable_nested+0x90/0x90 [ 658.498528][T12470] down_read+0x9a/0x2e0 [ 658.502680][T12470] ? kernfs_walk_and_get_ns+0x72/0x2b0 [ 658.508140][T12470] kernfs_walk_and_get_ns+0x7e/0x2b0 [ 658.513406][T12470] ? kernfs_find_ns+0x500/0x500 [ 658.518270][T12470] ? current_cgns_cgroup_from_root+0x2ad/0x300 [ 658.524406][T12470] cgroup_get_from_path+0x5c/0x2e0 [ 658.529501][T12470] cgroup_mt_check_v1+0x1a0/0x2b0 [ 658.534509][T12470] xt_check_match+0x363/0xa30 [ 658.539180][T12470] ? xt_find_match+0x6d/0x200 [ 658.543847][T12470] ? mutex_unlock+0x10/0x10 [ 658.548339][T12470] ? xt_check_proc_name+0x110/0x110 [ 658.553518][T12470] ? pcpu_alloc+0x10c9/0x17c0 [ 658.558174][T12470] ? xt_find_match+0x1cf/0x200 [ 658.562921][T12470] translate_table+0x15bd/0x2250 [ 658.567854][T12470] ? ipt_register_table+0x7a0/0x7a0 [ 658.573036][T12470] ? __might_fault+0xb8/0x110 [ 658.577811][T12470] ? __lock_acquire+0x1ff0/0x1ff0 [ 658.582820][T12470] ? _copy_from_user+0x10f/0x170 [ 658.587733][T12470] ? copy_from_sockptr_offset+0x6b/0xa0 [ 658.593274][T12470] do_ipt_set_ctl+0xdbc/0x1200 [ 658.598104][T12470] ? rcu_lock_release+0x20/0x20 [ 658.602958][T12470] ? ipt_unregister_table_exit+0x1e0/0x1e0 [ 658.608897][T12470] ? __lock_acquire+0x1ff0/0x1ff0 [ 658.614015][T12470] ? __mutex_unlock_slowpath+0x218/0x750 [ 658.619649][T12470] ? nf_setsockopt+0x38/0x2b0 [ 658.624324][T12470] ? print_irqtrace_events+0x210/0x210 [ 658.629760][T12470] ? mutex_unlock+0x10/0x10 [ 658.634265][T12470] ? lockdep_hardirqs_on+0x94/0x130 [ 658.639529][T12470] ? __local_bh_enable_ip+0x164/0x1f0 [ 658.645065][T12470] nf_setsockopt+0x28a/0x2b0 [ 658.649640][T12470] ip_setsockopt+0x2732/0x3fb0 [ 658.654405][T12470] ? ipv4_pktinfo_prepare+0x6f0/0x6f0 [ 658.659776][T12470] ? read_lock_is_recursive+0x10/0x10 [ 658.665140][T12470] ? __mutex_trylock_common+0x17e/0x2e0 [ 658.670697][T12470] ? __might_sleep+0xc0/0xc0 [ 658.675281][T12470] ? rcu_lock_release+0x20/0x20 [ 658.680123][T12470] tcp_setsockopt+0x23f/0x3680 [ 658.684887][T12470] ? tcp_set_window_clamp+0x1b0/0x1b0 [ 658.690244][T12470] ? __might_sleep+0xc0/0xc0 [ 658.694813][T12470] ? smc_setsockopt+0x130/0xb20 [ 658.699664][T12470] ? mutex_lock_io_nested+0x60/0x60 [ 658.704839][T12470] ? __lock_acquire+0x1ff0/0x1ff0 [ 658.709841][T12470] ? aa_sk_perm+0x8fc/0xa30 [ 658.714317][T12470] ? sock_common_setsockopt+0x33/0xc0 [ 658.719669][T12470] ? sock_common_recvmsg+0x240/0x240 [ 658.724940][T12470] smc_setsockopt+0x1e5/0xb20 [ 658.729621][T12470] ? smc_shutdown+0x5f0/0x5f0 [ 658.734385][T12470] ? aa_sock_opt_perm+0x79/0x110 [ 658.739313][T12470] ? bpf_lsm_socket_setsockopt+0x5/0x10 [ 658.744928][T12470] ? security_socket_setsockopt+0x7d/0xa0 [ 658.750631][T12470] ? smc_shutdown+0x5f0/0x5f0 [ 658.755558][T12470] __sys_setsockopt+0x57e/0x990 [ 658.760403][T12470] ? __ia32_sys_recv+0xb0/0xb0 [ 658.765265][T12470] ? syscall_enter_from_user_mode+0x2e/0x240 [ 658.771261][T12470] __x64_sys_setsockopt+0xb1/0xc0 [ 658.776282][T12470] do_syscall_64+0x3b/0xb0 [ 658.780680][T12470] ? clear_bhb_loop+0x15/0x70 [ 658.785337][T12470] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 658.791221][T12470] RIP: 0033:0x7f79cb331ff9 [ 658.795633][T12470] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 658.815328][T12470] RSP: 002b:00007f79c9789038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 658.823727][T12470] RAX: ffffffffffffffda RBX: 00007f79cb4ea058 RCX: 00007f79cb331ff9 [ 658.831676][T12470] RDX: 0000000000000040 RSI: 0004000000000000 RDI: 0000000000000005 [ 658.839628][T12470] RBP: 00007f79cb3a4296 R08: 0000000000001378 R09: 0000000000000000 [ 658.847590][T12470] R10: 0000000020000640 R11: 0000000000000246 R12: 0000000000000000 [ 658.855803][T12470] R13: 0000000000000000 R14: 00007f79cb4ea058 R15: 00007ffcb2fc5cf8 [ 658.863789][T12470] [ 658.867036][T12470] Kernel Offset: disabled [ 658.871369][T12470] Rebooting in 86400 seconds..