last executing test programs: 1m31.133639081s ago: executing program 3 (id=1637): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x4e, &(0x7f00000000c0)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "ff00f5", 0x18, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@mptcp=@ack={0x1e, 0x4, 0x1f}]}}}}}}}}, 0x0) 1m21.660788348s ago: executing program 3 (id=1637): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x4e, &(0x7f00000000c0)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "ff00f5", 0x18, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@mptcp=@ack={0x1e, 0x4, 0x1f}]}}}}}}}}, 0x0) 1m5.684581774s ago: executing program 3 (id=1637): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x4e, &(0x7f00000000c0)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "ff00f5", 0x18, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@mptcp=@ack={0x1e, 0x4, 0x1f}]}}}}}}}}, 0x0) 50.302076798s ago: executing program 3 (id=1637): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x4e, &(0x7f00000000c0)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "ff00f5", 0x18, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@mptcp=@ack={0x1e, 0x4, 0x1f}]}}}}}}}}, 0x0) 31.819343784s ago: executing program 3 (id=1637): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x4e, &(0x7f00000000c0)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "ff00f5", 0x18, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@mptcp=@ack={0x1e, 0x4, 0x1f}]}}}}}}}}, 0x0) 13.693360451s ago: executing program 3 (id=1637): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x4e, &(0x7f00000000c0)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "ff00f5", 0x18, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@mptcp=@ack={0x1e, 0x4, 0x1f}]}}}}}}}}, 0x0) 10.662998041s ago: executing program 4 (id=2365): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x56000}], 0x1) fdatasync(0xffffffffffffffff) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000cc0), 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r7 = syz_io_uring_setup(0x5ad9, &(0x7f00000035c0)={0x0, 0x4, 0x10100, 0x0, 0x3}, &(0x7f0000001500)=0x0, &(0x7f0000003580)=0x0) r10 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) syz_io_uring_submit(r8, r9, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r10, 0x0, 0x0}) socket$igmp(0x2, 0x3, 0x2) socket$kcm(0x2, 0x3, 0x2) r11 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r11, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="4c000000140097f87059ae08060c040002ff0f0200000000000001870182fa73a69d35a2cca84708f7abca1b4e7d06a6bd7c493872f750375ed08a560400000003c48f93b82a03000000461e", 0x4c}], 0x1}, 0x0) io_uring_enter(r7, 0x291c, 0x0, 0x0, 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="070002f5ffdf"]) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8924, &(0x7f00000000c0)={'wlan0\x00', 0x1}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="d4000000", @ANYRES16=r0, @ANYBLOB="010025bd7000ffdbdf252100000008000300", @ANYRES32=r2, @ANYBLOB="700084801000010072213a37314985f82566aa242400010034558714857ddf7d3c4dd20d8f31e83750813ddd36af1a3a79a093be591b5fba080002000000000008000200ff7f00000a00010002020202020200001c0006800800050000000000080003000000008008000100feffffff100084800b0001008c040c668f28620006009800010000000400ff000a00f5"], 0xd4}}, 0x0) 6.8291444s ago: executing program 4 (id=2371): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff0905"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, &(0x7f0000000000)={0x40, 0x21, 0xa, {0xa, 0x10, "9d0554fb8a418247"}}, 0x0, 0x0, 0x0}, &(0x7f00000004c0)={0x2c, &(0x7f0000000200)={0x0, 0xe}, 0x0, &(0x7f0000000340)={0x0, 0x8, 0x1}, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r1, 0x80015b12, 0x0) 5.663253232s ago: executing program 0 (id=2375): openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) epoll_create1(0x0) socket$inet_tcp(0x2, 0x1, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b7000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) ppoll(&(0x7f0000000500)=[{r0}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f00000002c0)={0x3ff}, 0x0, 0x0) 5.381944883s ago: executing program 1 (id=2378): move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x120) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = io_uring_setup(0x1951, &(0x7f0000000140)={0x0, 0x1e98, 0x0, 0x2, 0x2b2}) close_range(r3, 0xffffffffffffffff, 0x0) r4 = socket(0x2, 0x80805, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r4, 0x84, 0x10, &(0x7f0000001240)=@assoc_value={r5}, 0x8) 4.386741962s ago: executing program 1 (id=2380): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000240)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000e80)="632a1eb3f0c0d7e1f3e8d83e8279b7e98f2a563510c1fcfd07c0d1e58d723f809bb0322337f15e8d329d0926517a3148030a1d29dd671ac729d9cef6e520827a2201ccd77c7dc703e9116d512859f12dceb0dad478a2369aba7403b262e45c11c1290b59d473d3beb8d3a31bc7f5dcd1a708ed0be6f4770112b98b16c93db109594b2a4b04efb89f5ef215ff6d9d93fb8edbcf8d1c62b39759c68e1a184914791d5462c363b80e38ea6cd8556c46c6252445e967b63edceb1040badab4eef2ef162c734cb8052dabd2bfedbdfd0b22bdc6b9dc0fca9b566b32c4dc85d26161877f60652000000031ae091ccaa53c0faf409dee0d109e684a93bc32e715052d24d7349df7bdaa7aea658d7b0a53376ca1c71ad1a878ceacf5ce8a8c64ace50f4d18f1027b9efc61a4b4a61e4b323fad5c47e4341c1292d0d1", 0x138}, {&(0x7f0000000580)="1eac4d20f8509e8f36d2842c8fae7bbe58c5bf73985d5106bf5b5e7e5761716e35b468ea79633c916c4a8026f9408d0558de77df67c0e6fd0b1b3da5de5d003382ac95eade5dadad870ce3749452d2c1c3651ffff244be3078fdbfeb97d093bbbe0131e733d91c4ad38e7b52aa7afa9cb8e2351bd3f8a7a2a0425b071f6790992b8c2a51d964b0161c1856697820eb52f55c97fcdc19c2ef7c66ccc23c77a28a34b216c429444343ea056f171399dc03d56a1131ba74d31fc1012d3deff0e43309fc9e3b88bec90a7680aa74ccd581e02eb436a0009fa62097513d0c9533256d81978fae39288edcb833739d2988ccf5a564bc00edd1ab0853b873cbab3ef227f11325d72dbe2f435351610d09d0f74e180df6eaa94651336e7713414e49956fcb68a973e8239e343684255efba0d1b149b22c2d81f1ac5eaccaab01ab108178e97eb8a45d5d6cdeca0d6b9af9f88cfee58935be6902ac7c6915d60548367d164990b142d472b9b5700191b1f978fbe071de646385dcf5cb7adf1ec70baef4061d2da93d2f5eef8b1081374d58ab54532755c1b8bf303584296145e9aad2e3ccef93f30da9c109db5cfe346baba2fd3f157cb6e825e607365ff8c6187e216dc4072e582874ce63166405e21644015f99d5713165a377bfdc3143928e8469b4e312ce1f9dff83fe7c8d9fca791af2b46f1650e3937c9ab58978eb8b269ba2ef764d4505ed495fe156f0dcbb79d177e4f0b476", 0x212}], 0x2}, 0x0) read$alg(r0, &(0x7f0000003780)=""/4096, 0x1000) 4.37757191s ago: executing program 0 (id=2381): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000040)=0x91, 0x4) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0xfffffffd, @local, 0x9}, 0x1c) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@newqdisc={0x64, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x8}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x100}}, {0x4}}]}]}, 0x64}}, 0x0) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x66, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000000)='./file0\x00', &(0x7f0000000240)='squashfs\x00', 0x0, 0x0) 4.30171968s ago: executing program 1 (id=2382): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='mm_compaction_begin\x00', r1, 0x0, 0x2}, 0x18) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r2}, 0x8) close(r3) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$MAP_GET_NEXT_KEY(0x22, 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='ext4_writepages_result\x00', r4}, 0x10) r6 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r5}, 0x8) close(r6) 4.202402726s ago: executing program 2 (id=2383): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) r1 = syz_io_uring_setup(0x27f3, &(0x7f0000000340)={0x0, 0x400000, 0x10100}, &(0x7f0000000200), &(0x7f00000000c0)=0x0) syz_io_uring_setup(0x1868, &(0x7f00000003c0), &(0x7f0000000040)=0x0, &(0x7f0000000180)) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'streebog512\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) recvmmsg(r5, &(0x7f0000001380), 0x0, 0x0, 0x0) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) read$dsp(r6, 0x0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) io_uring_enter(r1, 0x184c, 0x0, 0x0, 0x0, 0x0) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_int(r7, 0x6, 0x4, 0x0, &(0x7f0000000040)) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0xc0a85320, &(0x7f0000001400)={{0x80}, 'port1\x00', 0xe3, 0x1b1c07}) ioctl$int_in(r0, 0x5421, &(0x7f0000000000)=0x1) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x5d031, 0xffffffffffffffff, 0x0) r8 = syz_open_dev$tty20(0xc, 0x4, 0x1) r9 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r9, &(0x7f0000000180)={0xa, 0x0, 0x0, @remote, 0x12}, 0x1c) ioctl$TCSETSF(r8, 0x5404, &(0x7f0000000240)={0x3, 0x1, 0x1, 0x7, 0x13, "2ac21db04f597beb331fa225d27589cb842ddc"}) ioctl$UFFDIO_CONTINUE(0xffffffffffffffff, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x1000004, 0x42031, 0xffffffffffffffff, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8042, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff}) sendmsg$inet(r10, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000340)='J', 0x1}], 0x1}, 0x1041) 4.071654248s ago: executing program 1 (id=2384): r0 = socket(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) gettid() ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) connect$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @broadcast}, 0x10) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc1105518, &(0x7f0000000040)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x1, [0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000]}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@RTM_GETMDB={0x18, 0x56, 0xd23, 0x70bd26}, 0x18}, 0x1, 0x0, 0x0, 0x4000048}, 0x0) 3.219201671s ago: executing program 4 (id=2385): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.sectors\x00', 0x26e1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r2, &(0x7f0000000280)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) r3 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) setsockopt$inet_msfilter(r3, 0x0, 0x29, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x14) r4 = socket(0x2, 0x3, 0xff) socket$nl_generic(0x10, 0x3, 0x10) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="0000000000000000d857840d36", @ANYRES32=0x0, @ANYRES16=r0, @ANYBLOB='\x00'/14], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000073010f000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x14, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r5, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) bind$inet(r4, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r4, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) setsockopt$sock_int(r3, 0x1, 0x10, 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) close(r1) shutdown(r4, 0x0) 3.189410273s ago: executing program 2 (id=2386): socket$inet6(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x38, r2, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x38}}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r3) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) bind$inet6(r3, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r4, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x30, r7, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x30}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 2.206131786s ago: executing program 4 (id=2387): syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000100)={0x24, &(0x7f0000000000)={0x0, 0x6, 0x2, {0x2, 0x3}}, 0x0, 0x0, 0x0}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x1, 0x3, 0x261, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', r1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r2, &(0x7f0000000000), &(0x7f0000000080)=@udp}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000d80)={{r2}, &(0x7f0000000d00), &(0x7f0000000d40)='%+9llu \x00'}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={r2}, 0x20) bpf$MAP_LOOKUP_ELEM(0x3, 0x0, 0x0) 2.165262587s ago: executing program 0 (id=2388): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000000c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000041}, 0x40084) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000327000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f326635004000000f300f20e06635800000000f22e0f30fa6c8", 0x50}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CAP_ARM_EAGER_SPLIT_CHUNK_SIZE(r2, 0x4068aea3, &(0x7f00000000c0)={0xe4, 0x0, 0x3}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2.153104991s ago: executing program 2 (id=2389): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x80, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}, @CTA_SEQ_ADJ_REPLY={0x1c, 0x10, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8}, @CTA_SEQADJ_OFFSET_BEFORE={0x8}, @CTA_SEQADJ_OFFSET_AFTER={0x8}]}]}, 0x80}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x38, 0x3, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x38}}, 0x0) openat$ppp(0xffffff9c, 0x0, 0x200, 0x0) r2 = socket$kcm(0x10, 0x3, 0x10) getsockopt$SO_COOKIE(r2, 0x1, 0x39, 0x0, &(0x7f0000000100)) r3 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r3, &(0x7f0000003a80)={&(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="110000000000000000000000010000000400000000000000140000000000000000000000010000000000000000000000600000000000000000000000070000004418838000000008000000090000008100000005000008000089133464010101ac1414aaac1414aaac1414208917a600000000e00000020a0101017f000001e0000002440c08117f00000100000006008d3a9e77f34ba54e2c26785969c949d634e19b21abae66f5bf519999190496f4c945fcc9e56744552f31b2df0ca5f6bc5e8873a929542aeda8e99bb62b5fbf2836720413ec24a26a6da5c7861ae10ea38c25964ea16aa0ddb0ca62fb516e0cb59326dc63157b0e0f8b62590e9b98ecaa6cf8f6b082b47a0999d0967758ebb8481217ea0b1f55edad7a02d2d4d01ea8798e30e4c85bf0abe32a"], 0x90}, 0x4008804) sendmsg$kcm(r3, &(0x7f00000000c0)={&(0x7f00000002c0)=@l2tp={0x2, 0x0, @loopback}, 0x80, &(0x7f0000000940)=[{&(0x7f0000000600)="3282db78e0ea55c52d87bc2a166b9e46818f5faca0b3a411e0", 0x19}], 0x1}, 0x8400) sendmsg$inet(r3, &(0x7f0000000c00)={&(0x7f0000000540)={0x2, 0x0, @empty}, 0x10, &(0x7f0000000400)=[{&(0x7f0000000280)="e113fd72", 0x4}], 0x1}, 0x0) gettid() ioctl$sock_SIOCGIFBR(r3, 0x8940, &(0x7f0000000040)=@generic={0xd4d8079d73036702, 0x1a65bab4, 0xffffffff}) r4 = socket$l2tp6(0xa, 0x2, 0x73) sendmmsg$inet6(r4, &(0x7f0000000180)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @local}, 0x1c, 0x0}}, {{&(0x7f0000000140)={0xa, 0x0, 0x0, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000000000029000000040000000000000000000000180000000000000001"], 0x30}}], 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) sendmsg$tipc(r7, &(0x7f0000000400)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x43}}, 0x10, &(0x7f00000002c0)=[{&(0x7f0000000180)="45ebf77a9960c110beacb5e4b263b04b7f7f27594e229e23407ab67a72253dc5e806a24466", 0x25}], 0x1, &(0x7f0000000300)="cfd65f59f5db18cb99b2abbbe9dfbcc2e82fa5153f7d61ca73389375724774029475403d012b58b812b52453ea335fb590c0325d2d90fa4bc67e002f4b5818002906633a526bdc3d223110a3cbe588e462687ebaf89704599e8ad206d4658fdcaaf9ea35f66d471b156fefbcd341a9547c8b280475cc9aa198eb2a2dfa92a61dfc363ebcc48e00daafde0310a17e6e5050923f7b145dfb695d1741e1e4c86cd34f96caeee07a91685b2395ed296be5be4482957259cd4b0797c2849a5a2f0933b7e04f1a7787bc", 0xc7, 0x40000d1}, 0x40004) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, 0x0) setsockopt$packet_add_memb(r6, 0x107, 0x1, &(0x7f0000000080)={0x0, 0x1, 0x6, @remote}, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2002}, [@IFLA_IFNAME={0x14, 0x3, 'macvlan1\x00'}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x3c}}, 0x0) r9 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r9, 0x6, 0x9, 0x0, 0x0) setsockopt$inet6_tcp_int(r9, 0x6, 0x4, &(0x7f0000000000)=0x101, 0x4) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'macvlan1\x00'}, @IFLA_MASTER={0x8}]}, 0x3c}}, 0x0) 1.97769107s ago: executing program 2 (id=2390): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) close(r0) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) syz_genetlink_get_family_id$gtp(0x0, r0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r2, 0x8922, &(0x7f00000000c0)={'team0\x00', 0x44}) 1.271776579s ago: executing program 4 (id=2391): openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) epoll_create1(0x0) socket$inet_tcp(0x2, 0x1, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b7000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) ppoll(&(0x7f0000000500)=[{r0}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f00000002c0)={0x3ff}, 0x0, 0x0) 1.103927127s ago: executing program 0 (id=2392): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000240)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000e80)="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", 0x138}, {&(0x7f0000000580)="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", 0x212}], 0x2}, 0x0) read$alg(r0, &(0x7f0000003780)=""/4096, 0x1000) 1.06241209s ago: executing program 2 (id=2393): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000740)="b1f56ee29c433328d3b2a83bd97e37007087acae7568edff43ed556d76770122635aea1dc487553859348d48e6fc49d81c71590cd542e796cc2669e2af442a03760c5cdfc691b3da35ad6a8d2ef9c2baa53a8dec36", 0x55}, {&(0x7f0000000a40)="57f43d3d654f1df092b799441d169633d1d1894111b5a3c8478fae6b707eae36cb8b36766a8655eea82f228813884f36d33c54425ae53fc22d34b7ce824d6f2d3a101bd856f854bcb974b8cbc66dbee64789ef8676cca87791b1a247a1f3b1c3b8c6c1b9433dfee3aa4095c23939a89140d5ec40b7ecd62a9928022bd9604ef9099c062caaebf6383f66826edbf6299d4c3b2135eb07ad28166406e8c280c41cce", 0xa1}], 0x2}}], 0x1, 0xc0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) 935.452848ms ago: executing program 0 (id=2394): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='mm_compaction_begin\x00', r1, 0x0, 0x2}, 0x18) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r2}, 0x8) close(r3) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$MAP_GET_NEXT_KEY(0x22, 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='ext4_writepages_result\x00', r4}, 0x10) r6 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r5}, 0x8) close(r6) 824.723994ms ago: executing program 0 (id=2395): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff0905"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, &(0x7f0000000000)={0x40, 0x21, 0xa, {0xa, 0x10, "9d0554fb8a418247"}}, 0x0, 0x0, 0x0}, &(0x7f00000004c0)={0x2c, &(0x7f0000000200)={0x0, 0xe}, 0x0, &(0x7f0000000340)={0x0, 0x8, 0x1}, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r1, 0x80015b12, 0x0) 823.998187ms ago: executing program 1 (id=2396): sched_setattr(0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x9) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) keyctl$instantiate(0xc, 0x0, 0x0, 0x2a, 0xfffffffffffffffc) r1 = socket$rxrpc(0x21, 0x2, 0xa) sendto$rxrpc(r1, 0x0, 0x0, 0x0, 0x0, 0x0) 67.779758ms ago: executing program 4 (id=2397): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0xc) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r1, &(0x7f0000000180)={0x1a, 0x0, 0xfc, 0x8, 0x0, 0x0, @multicast}, 0x10) socket$tipc(0x1e, 0x2, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) ppoll(&(0x7f0000000500)=[{r2}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f00000002c0)={0x3ff}, 0x0, 0x0) 67.452375ms ago: executing program 2 (id=2398): open(0x0, 0x143142, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8c}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="b405000200000000711035000000000005000019000000009500000000400000083363649fec97b49b080839d6b3eb83f11a627be9fc6edf8df6039be2bb5d00241511058e221336e13ba492aa1d9146973b562288b01dfc3e20fed23f0782805f1a0f58d31439479e86bce90355a864216e9c5bd080c0108857d6dca5f7ee813d204f94120c1eb3923387c9d798f7f85e177d8f384daeadf62f0a5b96da2ccffd"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000ac0)=r0, 0x4) r2 = socket$inet6(0xa, 0x3, 0x103) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000001700)=[{{0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0xfc}, 0x1030000}], 0x40000000000035c, 0x0) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r7, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r7, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) ioctl$BTRFS_IOC_FS_INFO(r1, 0x8400941f, &(0x7f00000004c0)) sendfile(r7, r6, 0x0, 0x20000023893) 0s ago: executing program 1 (id=2399): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000040)=0x91, 0x4) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0xfffffffd, @local, 0x9}, 0x1c) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@newqdisc={0x64, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x8}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x100}}, {0x4}}]}]}, 0x64}}, 0x0) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x66, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000000)='./file0\x00', &(0x7f0000000240)='squashfs\x00', 0x0, 0x0) kernel console output (not intermixed with test programs): /../uevent} for writing: No such file or directory [ 204.601099][ T5864] Bluetooth: hci4: command tx timeout [ 205.345053][T10346] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 51370 - 0 [ 205.354061][T10346] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 51370 - 0 [ 205.363992][T10346] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 51370 - 0 [ 205.373652][T10346] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 51370 - 0 [ 205.382794][T10346] netdevsim netdevsim4 netdevsim0: set [1, 2] type 2 family 0 port 32787 - 0 [ 205.392843][T10346] netdevsim netdevsim4 netdevsim1: set [1, 2] type 2 family 0 port 32787 - 0 [ 205.402381][T10346] netdevsim netdevsim4 netdevsim2: set [1, 2] type 2 family 0 port 32787 - 0 [ 205.412523][T10346] netdevsim netdevsim4 netdevsim3: set [1, 2] type 2 family 0 port 32787 - 0 [ 205.423737][T10346] geneve2: entered promiscuous mode [ 205.429264][T10346] geneve2: entered allmulticast mode [ 206.432538][T10389] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1590'. [ 208.902312][T10429] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1603'. [ 209.268281][T10453] siw: device registration error -23 [ 210.498098][T10472] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1615'. [ 210.523757][T10472] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1615'. [ 212.025580][T10488] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 212.121577][T10489] siw: device registration error -23 [ 212.290097][ T5928] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 212.449824][ T5928] usb 5-1: Using ep0 maxpacket: 32 [ 212.490812][ T5928] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 212.507731][ T5928] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 0 [ 212.541962][ T5928] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 212.557599][ T5928] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 212.568511][ T5928] usb 5-1: Product: syz [ 212.573191][ T5928] usb 5-1: Manufacturer: syz [ 212.578022][ T5928] usb 5-1: SerialNumber: syz [ 212.584978][ T5928] usb 5-1: config 0 descriptor?? [ 212.699747][ T9] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 212.798687][T10492] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 212.824962][T10492] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 212.851177][ T3596] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.867122][ T3596] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 56101 - 0 [ 212.869248][ T5847] usb 5-1: USB disconnect, device number 9 [ 212.879188][ T3596] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 2] type 2 family 0 port 37020 - 0 [ 212.884015][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 212.941623][ T9] usb 1-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 212.969904][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 213.001001][ T9] usb 1-1: config 0 descriptor?? [ 213.105006][ T3596] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.115766][ T3596] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 56101 - 0 [ 213.126456][ T3596] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 2] type 2 family 0 port 37020 - 0 [ 213.146391][T10530] siw: device registration error -23 [ 213.233029][ T5858] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 213.242817][ T5858] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 213.268690][ T5858] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 213.313218][ T5858] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 213.346554][ T5858] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 213.381708][ T5858] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 213.412745][ T3596] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.427181][ T3596] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 56101 - 0 [ 213.438048][ T3596] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 2] type 2 family 0 port 37020 - 0 [ 213.492996][T10531] vcan0 speed is unknown, defaulting to 1000 [ 213.592180][T10541] netlink: 'syz.2.1644': attribute type 6 has an invalid length. [ 213.624283][ T3596] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.642659][ T3596] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 56101 - 0 [ 213.657792][ T3596] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 2] type 2 family 0 port 37020 - 0 [ 213.924908][ T3596] bridge_slave_1: left allmulticast mode [ 213.936104][ T3596] bridge_slave_1: left promiscuous mode [ 213.944079][ T3596] bridge0: port 2(bridge_slave_1) entered disabled state [ 213.967935][ T3596] bridge_slave_0: left allmulticast mode [ 213.974046][ T3596] bridge_slave_0: left promiscuous mode [ 213.979917][ T3596] bridge0: port 1(bridge_slave_0) entered disabled state [ 214.534306][ T3596] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 214.543793][ T3596] bond_slave_0: left promiscuous mode [ 214.555721][ T3596] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 214.567597][ T3596] bond_slave_1: left promiscuous mode [ 214.581090][ T3596] bond0 (unregistering): Released all slaves [ 214.591838][ T3596] bond1 (unregistering): Released all slaves [ 214.603347][ T3596] bond2 (unregistering): Released all slaves [ 215.487566][ T5864] Bluetooth: hci2: command tx timeout [ 215.809342][T10531] chnl_net:caif_netlink_parms(): no params data found [ 215.824420][T10576] IPVS: set_ctl: invalid protocol: 60 172.20.20.187:20001 [ 215.956580][ T9] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0012: -71 [ 215.992789][ T9] asix 1-1:0.0: probe with driver asix failed with error -71 [ 216.024943][ T9] usb 1-1: USB disconnect, device number 13 [ 216.283723][T10531] bridge0: port 1(bridge_slave_0) entered blocking state [ 216.317862][T10531] bridge0: port 1(bridge_slave_0) entered disabled state [ 216.348468][T10531] bridge_slave_0: entered allmulticast mode [ 216.408695][T10531] bridge_slave_0: entered promiscuous mode [ 217.149156][T10531] bridge0: port 2(bridge_slave_1) entered blocking state [ 217.184069][T10531] bridge0: port 2(bridge_slave_1) entered disabled state [ 217.191676][T10531] bridge_slave_1: entered allmulticast mode [ 217.233884][T10531] bridge_slave_1: entered promiscuous mode [ 217.547054][T10531] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 217.561476][ T5864] Bluetooth: hci2: command tx timeout [ 217.580433][T10531] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 217.658924][ T3596] hsr_slave_0: left promiscuous mode [ 217.666183][ T3596] hsr_slave_1: left promiscuous mode [ 217.680005][ T3596] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 217.687973][ T3596] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 217.936457][ T3596] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 217.973704][ T3596] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 218.389907][ T3596] veth1_macvtap: left promiscuous mode [ 218.396718][ T3596] veth0_macvtap: left promiscuous mode [ 218.403184][ T3596] veth1_vlan: left promiscuous mode [ 218.411778][ T3596] veth0_vlan: left promiscuous mode [ 219.678269][ T5864] Bluetooth: hci2: command tx timeout [ 220.146969][ T3596] team0 (unregistering): Port device team_slave_1 removed [ 220.194600][ T3596] team0 (unregistering): Port device team_slave_0 removed [ 221.551208][T10531] team0: Port device team_slave_0 added [ 221.572538][T10661] syz.1.1675 (10661) used greatest stack depth: 19216 bytes left [ 221.595823][T10531] team0: Port device team_slave_1 added [ 221.720485][ T5858] Bluetooth: hci2: command tx timeout [ 221.816035][T10531] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 221.857824][T10531] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 222.016164][T10531] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 222.063614][T10531] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 222.131732][T10531] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 222.163230][T10531] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 223.430246][ T3596] IPVS: stop unused estimator thread 0... [ 223.472674][T10707] syz.2.1685: attempt to access beyond end of device [ 223.472674][T10707] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 223.771240][T10715] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 224.309890][T10531] hsr_slave_0: entered promiscuous mode [ 224.346151][T10531] hsr_slave_1: entered promiscuous mode [ 224.402932][T10531] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 224.435951][T10531] Cannot create hsr debugfs directory [ 225.031093][ T47] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 225.209446][ T47] usb 3-1: Using ep0 maxpacket: 16 [ 225.223373][ T47] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 225.246127][ T47] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD7, changing to 0x87 [ 225.449337][ T47] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 152, changing to 11 [ 225.461112][ T47] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x87 has invalid maxpacket 8285, setting to 1024 [ 225.472415][ T47] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 225.492864][ T47] usb 3-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 225.518388][ T47] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 225.554741][ T47] usb 3-1: Product: syz [ 225.559029][ T47] usb 3-1: Manufacturer: syz [ 225.591060][T10767] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 225.727924][ T47] usb 3-1: SerialNumber: syz [ 225.862098][ T47] usb 3-1: config 0 descriptor?? [ 226.291364][ T47] appledisplay 3-1:0.0: Error while getting initial brightness: -71 [ 226.300685][ T47] appledisplay 3-1:0.0: probe with driver appledisplay failed with error -71 [ 226.351164][T10531] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 226.392571][T10531] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 226.456072][T10531] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 226.514329][T10531] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 226.526018][ T47] usb 3-1: USB disconnect, device number 14 [ 227.426787][T10531] 8021q: adding VLAN 0 to HW filter on device bond0 [ 227.449148][T10531] 8021q: adding VLAN 0 to HW filter on device team0 [ 227.460259][ T1139] bridge0: port 1(bridge_slave_0) entered blocking state [ 227.467411][ T1139] bridge0: port 1(bridge_slave_0) entered forwarding state [ 227.536428][ T1139] bridge0: port 2(bridge_slave_1) entered blocking state [ 227.543652][ T1139] bridge0: port 2(bridge_slave_1) entered forwarding state [ 227.628214][T10531] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 227.676599][T10531] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 228.930772][T10819] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 229.503272][T10821] usb usb8: usbfs: process 10821 (syz.4.1712) did not claim interface 0 before use [ 229.726667][T10531] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 229.759420][T10531] veth0_vlan: entered promiscuous mode [ 229.771067][T10531] veth1_vlan: entered promiscuous mode [ 229.796134][T10531] veth0_macvtap: entered promiscuous mode [ 229.805678][T10531] veth1_macvtap: entered promiscuous mode [ 229.898364][T10531] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 229.928867][T10531] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.940176][T10531] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 230.043156][T10531] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 230.122659][T10531] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 230.664695][T10531] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 231.144211][T10531] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 231.950234][T10531] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 231.981580][T10531] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 232.002119][T10531] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 232.024517][T10531] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.049983][T10531] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.058816][T10531] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.078307][T10531] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.524223][ T1146] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 232.599728][ T1146] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 232.658756][ T1139] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 232.687223][ T1139] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 233.039886][ T47] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 233.100472][T10894] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 233.229793][ T47] usb 2-1: Using ep0 maxpacket: 32 [ 233.298389][ T47] usb 2-1: config 0 has no interfaces? [ 233.456663][ T47] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 233.562882][ T47] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 233.579733][ T47] usb 2-1: SerialNumber: syz [ 233.587850][ T47] usb 2-1: config 0 descriptor?? [ 233.808250][ T47] usb 2-1: USB disconnect, device number 9 [ 235.134960][T10953] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1740'. [ 235.163157][T10953] vlan2: entered allmulticast mode [ 235.168619][T10953] mac80211_hwsim hwsim6 wlan1: entered allmulticast mode [ 235.760296][ T62] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.931815][ T5864] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 237.957083][ T5864] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 237.974710][ T5864] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 238.019840][ T5864] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 238.028917][ T5864] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 238.052135][ T5864] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 238.126710][ T62] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.306169][ T62] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.371857][T11029] Cannot find set identified by id 0 to match [ 238.383954][T11008] vcan0 speed is unknown, defaulting to 1000 [ 238.495494][ T62] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.750121][ T62] bridge_slave_1: left allmulticast mode [ 238.755826][ T62] bridge_slave_1: left promiscuous mode [ 238.777140][ T62] bridge0: port 2(bridge_slave_1) entered disabled state [ 238.808459][ T62] bridge_slave_0: left allmulticast mode [ 238.814497][ T62] bridge_slave_0: left promiscuous mode [ 238.820973][ T62] bridge0: port 1(bridge_slave_0) entered disabled state [ 240.121326][ T5864] Bluetooth: hci2: command tx timeout [ 240.160501][ T62] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 240.175335][ T62] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 240.375979][ T62] bond0 (unregistering): Released all slaves [ 241.869960][T11106] Cannot find set identified by id 0 to match [ 242.010935][ T5929] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 242.039263][T11008] chnl_net:caif_netlink_parms(): no params data found [ 242.087554][T11119] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1776'. [ 242.218055][ T5864] Bluetooth: hci2: command tx timeout [ 242.280481][ T5929] usb 5-1: Using ep0 maxpacket: 32 [ 242.300105][ T5929] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 242.328267][ T5929] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 242.356207][ T5929] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 242.379847][ T5929] usb 5-1: Product: syz [ 242.386115][ T5929] usb 5-1: Manufacturer: syz [ 242.391720][ T5929] usb 5-1: SerialNumber: syz [ 242.470258][ T5929] usb 5-1: config 0 descriptor?? [ 242.480126][T11107] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 242.716596][T11008] bridge0: port 1(bridge_slave_0) entered blocking state [ 242.739530][T11008] bridge0: port 1(bridge_slave_0) entered disabled state [ 242.768667][T11008] bridge_slave_0: entered allmulticast mode [ 242.805018][T11008] bridge_slave_0: entered promiscuous mode [ 242.819046][ T5928] usb 5-1: USB disconnect, device number 10 [ 242.845012][ T62] hsr_slave_0: left promiscuous mode [ 242.867925][ T62] hsr_slave_1: left promiscuous mode [ 242.961902][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 243.179018][ T62] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 243.460469][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 243.467948][ T62] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 243.505368][ T62] veth1_macvtap: left promiscuous mode [ 243.511228][ T62] veth0_macvtap: left promiscuous mode [ 243.520738][ T62] veth1_vlan: left promiscuous mode [ 243.535231][ T62] veth0_vlan: left promiscuous mode [ 244.080275][ T62] team0 (unregistering): Port device team_slave_1 removed [ 244.128386][ T62] team0 (unregistering): Port device team_slave_0 removed [ 244.280809][ T5864] Bluetooth: hci2: command tx timeout [ 244.581045][T11008] bridge0: port 2(bridge_slave_1) entered blocking state [ 244.588324][T11008] bridge0: port 2(bridge_slave_1) entered disabled state [ 244.596424][T11008] bridge_slave_1: entered allmulticast mode [ 244.603423][T11008] bridge_slave_1: entered promiscuous mode [ 244.634060][T11008] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 244.756937][T11008] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 244.838766][T11164] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1789'. [ 244.868130][T11164] vlan2: entered allmulticast mode [ 244.874658][T11164] mac80211_hwsim hwsim11 wlan1: entered allmulticast mode [ 244.925335][T11008] team0: Port device team_slave_0 added [ 244.952626][T11008] team0: Port device team_slave_1 added [ 245.001556][T11169] Cannot find set identified by id 0 to match [ 245.019698][ T5929] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 245.042304][T11008] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 245.069824][T11008] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 245.126833][T11008] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 245.146968][T11008] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 245.180018][ T5929] usb 3-1: Using ep0 maxpacket: 8 [ 245.184712][T11008] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 245.211218][ T5929] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 245.235875][ T5929] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 245.248367][T11008] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 245.276060][ T5929] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 245.289345][ T5929] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 245.305448][ T5929] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 245.325170][ T5929] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 245.335697][ T5929] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 245.375744][T11008] hsr_slave_0: entered promiscuous mode [ 245.388465][T11008] hsr_slave_1: entered promiscuous mode [ 245.396829][T11008] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 245.405248][T11008] Cannot create hsr debugfs directory [ 245.409812][ T25] usb 1-1: new full-speed USB device number 14 using dummy_hcd [ 245.575787][ T5929] usb 3-1: GET_CAPABILITIES returned 0 [ 245.582605][ T5929] usbtmc 3-1:16.0: can't read capabilities [ 245.591351][ T25] usb 1-1: config 1 interface 0 has no altsetting 0 [ 245.614266][ T25] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 245.626616][ T25] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 245.646622][ T25] usb 1-1: Product: syz [ 245.659813][ T25] usb 1-1: Manufacturer: syz [ 245.670333][ T25] usb 1-1: SerialNumber: syz [ 246.103756][T11008] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 246.118561][T11008] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 246.133728][T11008] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 246.149099][T11008] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 246.278829][T11008] 8021q: adding VLAN 0 to HW filter on device bond0 [ 246.316249][T11008] 8021q: adding VLAN 0 to HW filter on device team0 [ 246.333476][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 246.340667][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 246.360208][ T5864] Bluetooth: hci2: command tx timeout [ 246.384084][T10608] bridge0: port 2(bridge_slave_1) entered blocking state [ 246.391291][T10608] bridge0: port 2(bridge_slave_1) entered forwarding state [ 246.667381][T11008] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 246.772862][T11008] veth0_vlan: entered promiscuous mode [ 246.802635][T11008] veth1_vlan: entered promiscuous mode [ 246.874510][T11008] veth0_macvtap: entered promiscuous mode [ 246.927950][T11008] veth1_macvtap: entered promiscuous mode [ 246.989400][T11008] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 247.023436][T11008] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 247.044717][T11008] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 247.068664][T11008] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 247.125361][T11008] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 247.145347][T11008] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 247.192910][T11008] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 247.265274][T11008] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 247.329990][T11008] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 247.393202][T11240] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1799'. [ 247.413254][T11008] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 247.462406][T11008] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.490539][T11008] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.525586][T11008] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.586114][T11008] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.983173][ T3596] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 248.028317][ T3596] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 248.054491][T10608] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 248.063126][T10608] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 248.328445][T11266] vlan2: entered allmulticast mode [ 248.363869][T11266] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode [ 248.712479][T11284] Cannot find set identified by id 0 to match [ 249.038149][ T3454] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.416757][ T5858] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 249.428745][ T5858] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 249.438551][ T5858] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 249.452830][ T5858] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 249.462699][ T5858] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 249.470376][ T5858] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 249.515657][T11292] vcan0 speed is unknown, defaulting to 1000 [ 249.781114][T11292] chnl_net:caif_netlink_parms(): no params data found [ 249.813996][ T3454] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.883980][T11292] bridge0: port 1(bridge_slave_0) entered blocking state [ 249.891379][T11292] bridge0: port 1(bridge_slave_0) entered disabled state [ 249.898683][T11292] bridge_slave_0: entered allmulticast mode [ 249.906472][T11292] bridge_slave_0: entered promiscuous mode [ 249.916916][T11292] bridge0: port 2(bridge_slave_1) entered blocking state [ 249.924706][T11292] bridge0: port 2(bridge_slave_1) entered disabled state [ 249.933217][T11292] bridge_slave_1: entered allmulticast mode [ 249.940830][T11292] bridge_slave_1: entered promiscuous mode [ 249.972616][T11292] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 250.009359][ T3454] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.030717][T11292] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 250.067685][T11292] team0: Port device team_slave_0 added [ 250.094368][ T3454] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.109330][T11292] team0: Port device team_slave_1 added [ 250.139293][T11292] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 250.147026][T11292] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 250.189713][T11292] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 250.203428][T11292] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 250.211195][T11292] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 250.238393][T11292] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 250.327945][T11292] hsr_slave_0: entered promiscuous mode [ 250.344434][T11292] hsr_slave_1: entered promiscuous mode [ 250.354894][T11292] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 250.368469][T11292] Cannot create hsr debugfs directory [ 250.378951][T11306] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1810'. [ 250.480546][ T3454] bridge_slave_1: left allmulticast mode [ 250.486273][ T3454] bridge_slave_1: left promiscuous mode [ 250.510981][ T3454] bridge0: port 2(bridge_slave_1) entered disabled state [ 250.524576][ T3454] bridge_slave_0: left allmulticast mode [ 250.530473][ T3454] bridge_slave_0: left promiscuous mode [ 250.537425][ T3454] bridge0: port 1(bridge_slave_0) entered disabled state [ 250.853399][T11159] usbtmc 3-1:16.0: stb usb_control_msg returned -110 [ 250.937118][ T5928] usb 3-1: USB disconnect, device number 15 [ 250.948611][ T25] usblp 1-1:1.0: usblp1: USB Unidirectional printer dev 14 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 251.010380][ T25] usb 1-1: USB disconnect, device number 14 [ 251.019173][ T25] usblp1: removed [ 251.202007][ T3454] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 251.214978][ T3454] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 251.232298][ T3454] bond0 (unregistering): Released all slaves [ 251.417043][T11333] Cannot find set identified by id 0 to match [ 251.561706][ T5864] Bluetooth: hci2: command tx timeout [ 251.655585][T11339] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1821'. [ 252.151169][ T3454] hsr_slave_0: left promiscuous mode [ 252.181866][ T3454] hsr_slave_1: left promiscuous mode [ 252.291277][ T3454] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 252.312499][ T3454] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 252.330666][ T3454] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 252.338119][ T3454] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 252.438206][ T3454] veth1_macvtap: left promiscuous mode [ 252.449753][ T3454] veth0_macvtap: left promiscuous mode [ 252.458494][ T3454] veth1_vlan: left promiscuous mode [ 252.470285][ T3454] veth0_vlan: left promiscuous mode [ 253.832909][ T5864] Bluetooth: hci2: command tx timeout [ 255.088135][ T3454] team0 (unregistering): Port device team_slave_1 removed [ 255.133628][ T3454] team0 (unregistering): Port device team_slave_0 removed [ 255.666717][T11416] team0: Port device macvlan1 added [ 255.732211][T11417] team0: Port device macvlan1 removed [ 255.866425][T11292] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 255.881498][ T5864] Bluetooth: hci2: command tx timeout [ 255.897829][T11292] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 255.951892][T11292] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 255.986000][T11292] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 256.060389][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.156892][T11292] 8021q: adding VLAN 0 to HW filter on device bond0 [ 256.218440][T11292] 8021q: adding VLAN 0 to HW filter on device team0 [ 256.282902][T10608] bridge0: port 1(bridge_slave_0) entered blocking state [ 256.290110][T10608] bridge0: port 1(bridge_slave_0) entered forwarding state [ 256.334159][T10608] bridge0: port 2(bridge_slave_1) entered blocking state [ 256.341416][T10608] bridge0: port 2(bridge_slave_1) entered forwarding state [ 256.882580][T11292] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 256.929155][T11473] team0: Port device macvlan1 added [ 256.997145][T11473] team0: Port device macvlan1 removed [ 257.116994][T11292] veth0_vlan: entered promiscuous mode [ 257.153304][T11292] veth1_vlan: entered promiscuous mode [ 257.227114][T11292] veth0_macvtap: entered promiscuous mode [ 257.248598][T11292] veth1_macvtap: entered promiscuous mode [ 257.304416][T11292] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 257.328954][T11292] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 257.340560][T11292] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 257.351914][T11292] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 257.362070][T11292] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 257.373652][T11292] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 257.408623][T11292] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 257.422758][T11292] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 257.434701][T11292] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 257.454606][T11292] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 257.468969][T11292] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.479259][T11292] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.488707][T11292] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.499364][T11292] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.635772][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 257.667278][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 257.749100][T10997] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 257.763068][T10997] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 258.576273][T11538] Cannot find set identified by id 0 to match [ 259.049925][ T5929] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 259.209921][ T5929] usb 1-1: Using ep0 maxpacket: 8 [ 259.231846][ T5929] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 259.252406][ T5929] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 259.274810][ T5929] usb 1-1: Product: syz [ 259.280414][ T5929] usb 1-1: Manufacturer: syz [ 259.293022][ T5929] usb 1-1: SerialNumber: syz [ 259.298446][ T1146] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.314781][ T5929] usb 1-1: config 0 descriptor?? [ 259.536665][ T5929] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 259.829207][T11556] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 260.048241][ T5858] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 260.065537][ T5858] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 260.076021][ T5858] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 260.089146][ T5858] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 260.098082][ T5858] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 260.105837][ T5858] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 260.143864][T11562] vcan0 speed is unknown, defaulting to 1000 [ 260.651287][ T1146] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 260.801500][T11562] chnl_net:caif_netlink_parms(): no params data found [ 260.846976][ T1146] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.526383][ T1146] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.914832][T11593] Cannot find set identified by id 0 to match [ 261.929524][ T5929] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 261.962654][ T5929] usb 1-1: USB disconnect, device number 15 [ 262.028531][T11562] bridge0: port 1(bridge_slave_0) entered blocking state [ 262.035964][T11562] bridge0: port 1(bridge_slave_0) entered disabled state [ 262.043403][T11562] bridge_slave_0: entered allmulticast mode [ 262.050450][T11562] bridge_slave_0: entered promiscuous mode [ 262.076187][T11562] bridge0: port 2(bridge_slave_1) entered blocking state [ 262.086334][T11562] bridge0: port 2(bridge_slave_1) entered disabled state [ 262.097089][T11562] bridge_slave_1: entered allmulticast mode [ 262.119390][T11562] bridge_slave_1: entered promiscuous mode [ 262.200779][ T5858] Bluetooth: hci2: command tx timeout [ 262.221359][T11562] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 262.233194][T11562] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 262.315803][ T1146] bridge_slave_1: left allmulticast mode [ 262.330728][ T1146] bridge_slave_1: left promiscuous mode [ 262.338457][ T1146] bridge0: port 2(bridge_slave_1) entered disabled state [ 262.358873][ T1146] bridge_slave_0: left allmulticast mode [ 262.364928][ T1146] bridge_slave_0: left promiscuous mode [ 262.371577][ T1146] bridge0: port 1(bridge_slave_0) entered disabled state [ 262.427198][T11610] siw: device registration error -23 [ 263.692268][ T5900] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 263.851991][ T5900] usb 1-1: Using ep0 maxpacket: 8 [ 263.881994][ T5900] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 263.894565][ T5900] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 263.919673][ T5900] usb 1-1: Product: syz [ 263.937931][ T5900] usb 1-1: Manufacturer: syz [ 263.942963][ T5900] usb 1-1: SerialNumber: syz [ 263.957527][ T5900] usb 1-1: config 0 descriptor?? [ 264.047945][ T1146] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 264.062145][ T1146] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 264.073856][ T1146] bond0 (unregistering): Released all slaves [ 264.092561][T11562] team0: Port device team_slave_0 added [ 264.184426][ T5900] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 264.224940][T11562] team0: Port device team_slave_1 added [ 264.296318][ T5858] Bluetooth: hci2: command tx timeout [ 264.543157][T11562] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 264.550785][T11562] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 264.586674][T11562] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 264.617435][T11562] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 264.650417][T11562] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 264.679939][T11562] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 264.980612][T11562] hsr_slave_0: entered promiscuous mode [ 264.996930][T11562] hsr_slave_1: entered promiscuous mode [ 265.023198][T11562] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 265.045200][T11562] Cannot create hsr debugfs directory [ 265.204826][ T1146] hsr_slave_0: left promiscuous mode [ 265.213441][ T1146] hsr_slave_1: left promiscuous mode [ 265.225676][ T1146] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 265.233786][ T1146] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 265.246193][ T1146] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 265.253882][ T1146] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 265.279173][ T1146] veth1_macvtap: left promiscuous mode [ 265.289209][ T1146] veth0_macvtap: left promiscuous mode [ 265.295655][ T1146] veth1_vlan: left promiscuous mode [ 265.307651][ T1146] veth0_vlan: left promiscuous mode [ 266.367769][ T5858] Bluetooth: hci2: command tx timeout [ 266.662994][ T1146] team0 (unregistering): Port device team_slave_1 removed [ 266.710723][ T1146] team0 (unregistering): Port device team_slave_0 removed [ 266.943117][ T5900] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 266.972438][ T5900] usb 1-1: USB disconnect, device number 16 [ 267.176663][T11704] netlink: 148 bytes leftover after parsing attributes in process `syz.1.1926'. [ 267.617677][T11728] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 268.122805][T11562] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 268.134883][T11562] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 268.146539][T11562] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 268.157745][T11562] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 268.288577][T11562] 8021q: adding VLAN 0 to HW filter on device bond0 [ 268.312714][T11562] 8021q: adding VLAN 0 to HW filter on device team0 [ 268.329031][T10997] bridge0: port 1(bridge_slave_0) entered blocking state [ 268.336233][T10997] bridge0: port 1(bridge_slave_0) entered forwarding state [ 268.367796][T10997] bridge0: port 2(bridge_slave_1) entered blocking state [ 268.375015][T10997] bridge0: port 2(bridge_slave_1) entered forwarding state [ 268.440046][ T5858] Bluetooth: hci2: command tx timeout [ 268.706146][T11562] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 268.802663][T11779] netlink: 148 bytes leftover after parsing attributes in process `syz.1.1939'. [ 268.836240][T11562] veth0_vlan: entered promiscuous mode [ 268.868399][T11562] veth1_vlan: entered promiscuous mode [ 268.976316][T11562] veth0_macvtap: entered promiscuous mode [ 269.006632][T11562] veth1_macvtap: entered promiscuous mode [ 269.118393][T11562] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 269.179673][T11562] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 269.189547][T11562] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 269.204656][T11562] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 269.220084][T11562] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 269.235418][T11562] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 269.245596][T11562] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 269.285122][T11562] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 269.310958][T11562] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 269.364396][T11562] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 269.417435][T11562] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.435357][T11806] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 269.449803][T11562] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.458622][T11562] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.486978][T11562] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.687994][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 269.706308][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 269.742144][ T3596] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 269.757156][ T3596] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 270.563665][T11862] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 270.903006][T11871] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 272.428582][ T1139] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.679921][ T5929] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 272.841747][ T5929] usb 2-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 272.852522][ T5929] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 272.864054][ T5929] usb 2-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 272.877363][ T5929] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 272.886596][ T5929] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 272.902160][ T5929] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 272.909562][ T5929] usb 2-1: invalid MIDI out EP 0 [ 272.936837][ T5929] snd-usb-audio 2-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 272.964974][ T8392] udevd[8392]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 273.110484][ T5847] usb 2-1: USB disconnect, device number 10 [ 273.222073][ T5864] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 273.232283][ T5864] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 273.241554][ T5864] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 273.254848][ T5864] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 273.263550][ T5864] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 273.274607][ T5864] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 273.310652][T11908] vcan0 speed is unknown, defaulting to 1000 [ 273.465005][T11908] chnl_net:caif_netlink_parms(): no params data found [ 273.528469][T11908] bridge0: port 1(bridge_slave_0) entered blocking state [ 273.535982][T11908] bridge0: port 1(bridge_slave_0) entered disabled state [ 273.546764][T11908] bridge_slave_0: entered allmulticast mode [ 273.554483][T11908] bridge_slave_0: entered promiscuous mode [ 273.567493][T11908] bridge0: port 2(bridge_slave_1) entered blocking state [ 273.575793][T11908] bridge0: port 2(bridge_slave_1) entered disabled state [ 273.586939][T11908] bridge_slave_1: entered allmulticast mode [ 273.594821][T11908] bridge_slave_1: entered promiscuous mode [ 273.619191][T11908] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 273.642227][T11908] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 273.744233][T11908] team0: Port device team_slave_0 added [ 273.782455][ T1139] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.813330][T11908] team0: Port device team_slave_1 added [ 273.846008][T11908] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 273.853356][T11908] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 273.912682][T11908] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 273.988282][ T1139] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.019462][T11922] team0: Port device macvlan1 added [ 274.033608][T11908] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 274.040732][T11908] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 274.067502][T11908] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 274.091511][T11921] team0: Port device macvlan1 removed [ 274.122408][ T1139] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.241491][T11908] hsr_slave_0: entered promiscuous mode [ 274.270241][T11908] hsr_slave_1: entered promiscuous mode [ 274.290280][T11908] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 274.297915][T11908] Cannot create hsr debugfs directory [ 274.437293][ T1139] bridge_slave_1: left allmulticast mode [ 274.446742][ T1139] bridge_slave_1: left promiscuous mode [ 274.452871][ T1139] bridge0: port 2(bridge_slave_1) entered disabled state [ 274.463755][ T1139] bridge_slave_0: left allmulticast mode [ 274.469537][ T1139] bridge_slave_0: left promiscuous mode [ 274.476196][ T1139] bridge0: port 1(bridge_slave_0) entered disabled state [ 275.128818][ T5864] Bluetooth: hci4: command tx timeout [ 275.137637][ T1139] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 275.150280][ T5898] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 275.175259][ T1139] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 275.220322][ T1139] bond0 (unregistering): Released all slaves [ 275.313012][ T5898] usb 1-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 275.323418][ T5864] Bluetooth: hci2: command tx timeout [ 275.376809][ T5898] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 275.400562][ T5898] usb 1-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 275.413892][ T5898] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 275.423176][ T5898] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 275.453690][ T5898] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 275.479470][ T5898] usb 1-1: invalid MIDI out EP 0 [ 275.602812][ T5898] snd-usb-audio 1-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 275.649452][ T8392] udevd[8392]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 275.677432][ T9] usb 1-1: USB disconnect, device number 17 [ 276.193902][ T1139] hsr_slave_0: left promiscuous mode [ 276.223173][ T1139] hsr_slave_1: left promiscuous mode [ 276.234862][ T1139] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 276.247796][ T1139] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 276.263640][ T1139] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 276.279869][ T1139] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 276.315417][ T1139] veth1_macvtap: left promiscuous mode [ 276.323355][ T1139] veth0_macvtap: left promiscuous mode [ 276.337768][ T1139] veth1_vlan: left promiscuous mode [ 276.345429][ T1139] veth0_vlan: left promiscuous mode [ 276.999258][ T1139] team0 (unregistering): Port device team_slave_1 removed [ 277.054993][ T1139] team0 (unregistering): Port device team_slave_0 removed [ 277.399758][ T5864] Bluetooth: hci2: command tx timeout [ 277.518290][T11990] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1998'. [ 277.527666][T11990] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1998'. [ 277.674255][T11908] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 277.761141][T11908] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 277.795129][T11908] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 277.838415][T11908] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 278.037494][T11908] 8021q: adding VLAN 0 to HW filter on device bond0 [ 278.092509][T11908] 8021q: adding VLAN 0 to HW filter on device team0 [ 278.106046][T10997] bridge0: port 1(bridge_slave_0) entered blocking state [ 278.113289][T10997] bridge0: port 1(bridge_slave_0) entered forwarding state [ 278.136631][T10997] bridge0: port 2(bridge_slave_1) entered blocking state [ 278.143952][T10997] bridge0: port 2(bridge_slave_1) entered forwarding state [ 278.249728][ T5929] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 278.396145][T11908] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 278.405740][ T5929] usb 2-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 278.416943][ T5929] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 278.448591][ T5929] usb 2-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 278.462468][ T5929] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 278.472900][ T5929] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 278.487619][T11908] veth0_vlan: entered promiscuous mode [ 278.502571][ T5929] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 278.514987][ T5929] usb 2-1: invalid MIDI out EP 0 [ 278.524369][T11908] veth1_vlan: entered promiscuous mode [ 278.589857][T11908] veth0_macvtap: entered promiscuous mode [ 278.606321][T11908] veth1_macvtap: entered promiscuous mode [ 278.608449][ T5929] snd-usb-audio 2-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 278.623206][T11908] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 278.648327][ T9569] udevd[9569]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 278.649287][T11908] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 278.694299][T11908] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 278.707652][T11908] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 278.709444][ T5929] usb 2-1: USB disconnect, device number 11 [ 278.724078][T11908] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 278.736012][T11908] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 278.746554][T11908] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 278.775490][T11908] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 278.793860][T11908] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 279.022056][T11908] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 279.218555][T11908] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.353692][T11908] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.490166][ T5864] Bluetooth: hci2: command tx timeout [ 279.500675][T11908] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.509501][T11908] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.585240][T12043] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2011'. [ 279.604649][T12043] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2011'. [ 279.806710][T10997] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 279.832935][T10997] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 279.909938][T10997] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 279.919953][T10997] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 280.103893][T12067] Cannot find set identified by id 0 to match [ 280.129787][ T5929] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 280.200819][T12071] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2024'. [ 280.210327][T12071] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2024'. [ 280.269850][ T5929] usb 2-1: device descriptor read/64, error -71 [ 280.339963][ T9] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 280.501450][ T9] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 280.510203][ T5929] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 280.511920][ T9] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 280.531315][ T9] usb 3-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 280.544525][ T9] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 280.554645][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 280.573962][ T9] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 280.582709][ T9] usb 3-1: invalid MIDI out EP 0 [ 280.614211][ T9] snd-usb-audio 3-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 280.637885][ T8392] udevd[8392]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 280.654734][ T5929] usb 2-1: device descriptor read/64, error -71 [ 280.771567][ T5929] usb usb2-port1: attempt power cycle [ 280.792833][ T9] usb 3-1: USB disconnect, device number 16 [ 281.129757][ T5929] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 281.150876][ T5929] usb 2-1: device descriptor read/8, error -71 [ 281.210267][ T5847] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 281.381109][ T5847] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 281.389792][ T5929] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 281.410588][ T5847] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 281.419575][ T5847] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 281.425992][ T5929] usb 2-1: device descriptor read/8, error -71 [ 281.439469][ T5847] usb 5-1: config 0 interface 0 has no altsetting 0 [ 281.451077][ T5847] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 281.466332][ T5847] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 281.478252][ T5847] usb 5-1: config 0 interface 0 has no altsetting 0 [ 281.504054][ T5847] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 281.507875][T12096] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2035'. [ 281.513277][ T5847] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 281.513310][ T5847] usb 5-1: config 0 interface 0 has no altsetting 0 [ 281.514232][ T5847] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 281.549447][T12096] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2035'. [ 281.549898][ T5847] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 281.570169][ T5847] usb 5-1: config 0 interface 0 has no altsetting 0 [ 281.570713][ T5929] usb usb2-port1: unable to enumerate USB device [ 281.578687][ T5847] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 281.594584][ T5847] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 281.613058][ T5847] usb 5-1: config 0 interface 0 has no altsetting 0 [ 281.621286][ T5847] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 281.630639][ T5847] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 281.641929][ T5847] usb 5-1: config 0 interface 0 has no altsetting 0 [ 281.652641][ T5847] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 281.666026][ T5847] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 281.687864][ T5847] usb 5-1: config 0 interface 0 has no altsetting 0 [ 281.696004][ T5847] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 281.705233][ T5847] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 281.717281][ T5847] usb 5-1: config 0 interface 0 has no altsetting 0 [ 281.727818][ T5847] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 281.742958][ T5847] usb 5-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 281.753797][ T5847] usb 5-1: Product: syz [ 281.757990][ T5847] usb 5-1: Manufacturer: syz [ 281.763909][ T5847] usb 5-1: SerialNumber: syz [ 281.771189][ T5847] usb 5-1: config 0 descriptor?? [ 281.783020][ T5847] yurex 5-1:0.0: USB YUREX device now attached to Yurex #0 [ 281.890036][ T35] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.023835][ T5898] usb 5-1: USB disconnect, device number 11 [ 282.031913][ T5898] yurex 5-1:0.0: USB YUREX #0 now disconnected [ 282.882968][ T35] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.978736][ T5858] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 283.001513][ T5858] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 283.012401][ T5858] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 283.028613][ T5858] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 283.050694][ T5858] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 283.061284][ T5858] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 283.111648][ T35] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.146525][T12114] vcan0 speed is unknown, defaulting to 1000 [ 283.204062][ T35] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.389790][ T5929] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 283.437842][ T35] bridge_slave_1: left allmulticast mode [ 283.457093][ T35] bridge_slave_1: left promiscuous mode [ 283.468732][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 283.478378][ T35] bridge_slave_0: left allmulticast mode [ 283.485981][ T35] bridge_slave_0: left promiscuous mode [ 283.492626][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 283.579885][ T5929] usb 2-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 283.626725][ T5929] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 283.638132][ T5929] usb 2-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 283.675615][ T5929] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 283.685495][ T5929] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 283.707590][ T5929] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 283.721277][ T5929] usb 2-1: invalid MIDI out EP 0 [ 283.770597][ T5929] snd-usb-audio 2-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 283.827015][ T8392] udevd[8392]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 283.912657][ T5929] usb 2-1: USB disconnect, device number 16 [ 284.044793][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 284.056914][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 284.067941][ T35] bond0 (unregistering): Released all slaves [ 284.085629][T12131] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2046'. [ 284.098413][T12131] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2046'. [ 284.388501][T12114] chnl_net:caif_netlink_parms(): no params data found [ 284.449935][ T5929] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 284.683074][ T5929] usb 1-1: too many configurations: 9, using maximum allowed: 8 [ 284.700179][ T5929] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 284.709320][ T5929] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 284.720668][ T5929] usb 1-1: config 0 interface 0 has no altsetting 0 [ 284.728536][ T5929] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 284.750949][ T5929] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 284.769712][ T5929] usb 1-1: config 0 interface 0 has no altsetting 0 [ 284.780777][ T5929] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 284.839949][ T5929] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 284.859833][ T5929] usb 1-1: config 0 interface 0 has no altsetting 0 [ 284.899819][ T35] hsr_slave_0: left promiscuous mode [ 284.904163][ T5929] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 284.914369][ T5929] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 284.925494][ T5929] usb 1-1: config 0 interface 0 has no altsetting 0 [ 284.925524][ T35] hsr_slave_1: left promiscuous mode [ 284.953205][ T5929] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 284.962726][ T5929] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 284.981207][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 284.988654][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 284.998327][ T5929] usb 1-1: config 0 interface 0 has no altsetting 0 [ 285.012784][ T5929] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 285.026213][ T5929] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 285.055260][ T5929] usb 1-1: config 0 interface 0 has no altsetting 0 [ 285.082838][ T5929] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 285.098411][ T5929] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 285.119531][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 285.127424][ T5929] usb 1-1: config 0 interface 0 has no altsetting 0 [ 285.142545][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 285.157381][ T5929] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 285.170250][ T5864] Bluetooth: hci2: command tx timeout [ 285.187351][ T5929] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 285.215109][ T35] veth1_macvtap: left promiscuous mode [ 285.221524][ T5929] usb 1-1: config 0 interface 0 has no altsetting 0 [ 285.228325][ T35] veth0_macvtap: left promiscuous mode [ 285.234919][ T35] veth1_vlan: left promiscuous mode [ 285.240973][ T35] veth0_vlan: left promiscuous mode [ 285.247159][ T5929] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 285.256298][ T5929] usb 1-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 285.264817][ T5929] usb 1-1: Product: syz [ 285.269050][ T5929] usb 1-1: Manufacturer: syz [ 285.273884][ T5929] usb 1-1: SerialNumber: syz [ 285.287395][ T5929] usb 1-1: config 0 descriptor?? [ 285.298774][ T5929] yurex 1-1:0.0: USB YUREX device now attached to Yurex #0 [ 285.520841][ T5929] usb 1-1: USB disconnect, device number 18 [ 285.545159][ T5929] yurex 1-1:0.0: USB YUREX #0 now disconnected [ 285.805494][ T35] team0 (unregistering): Port device team_slave_1 removed [ 285.844900][ T35] team0 (unregistering): Port device team_slave_0 removed [ 286.442399][T12191] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2059'. [ 286.510270][T12199] siw: device registration error -23 [ 286.520972][T12191] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2059'. [ 286.558282][T12114] bridge0: port 1(bridge_slave_0) entered blocking state [ 286.566706][T12114] bridge0: port 1(bridge_slave_0) entered disabled state [ 286.584471][T12114] bridge_slave_0: entered allmulticast mode [ 286.628332][T12114] bridge_slave_0: entered promiscuous mode [ 286.665927][T12114] bridge0: port 2(bridge_slave_1) entered blocking state [ 286.708799][T12114] bridge0: port 2(bridge_slave_1) entered disabled state [ 286.754449][T12114] bridge_slave_1: entered allmulticast mode [ 286.763504][T12114] bridge_slave_1: entered promiscuous mode [ 286.941990][T12114] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 286.989476][T12114] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 287.272733][ T5864] Bluetooth: hci2: command tx timeout [ 287.306585][T12114] team0: Port device team_slave_0 added [ 287.842434][T12114] team0: Port device team_slave_1 added [ 288.175406][T12114] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 288.184911][T12114] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 288.214222][T12114] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 288.235807][T12246] team0: Port device macvlan1 added [ 288.249146][T12114] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 288.268177][T12114] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 288.300640][T12114] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 288.357072][T12240] team0: Port device macvlan1 removed [ 288.416938][T12252] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2074'. [ 288.576693][T12114] hsr_slave_0: entered promiscuous mode [ 288.646244][T12114] hsr_slave_1: entered promiscuous mode [ 288.680994][T12114] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 288.697794][T12114] Cannot create hsr debugfs directory [ 289.051142][T12284] syz.2.2082: attempt to access beyond end of device [ 289.051142][T12284] nbd2: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 289.110077][T12284] SQUASHFS error: Failed to read block 0x0: -5 [ 289.117630][T12284] unable to read squashfs_super_block [ 289.319903][ T5864] Bluetooth: hci2: command tx timeout [ 289.683263][T12114] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 289.700586][T12114] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 289.802597][T12114] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 289.819237][T12114] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 290.510485][T12307] siw: device registration error -23 [ 290.609032][T12310] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2088'. [ 290.735177][T12114] 8021q: adding VLAN 0 to HW filter on device bond0 [ 290.767038][T12114] 8021q: adding VLAN 0 to HW filter on device team0 [ 290.797924][T11872] bridge0: port 1(bridge_slave_0) entered blocking state [ 290.805128][T11872] bridge0: port 1(bridge_slave_0) entered forwarding state [ 290.857340][T11872] bridge0: port 2(bridge_slave_1) entered blocking state [ 290.864559][T11872] bridge0: port 2(bridge_slave_1) entered forwarding state [ 291.399690][ T5864] Bluetooth: hci2: command tx timeout [ 291.529290][T12114] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 292.303443][T12349] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 292.355795][T12354] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2100'. [ 292.391252][T12114] veth0_vlan: entered promiscuous mode [ 292.498048][T12114] veth1_vlan: entered promiscuous mode [ 292.641651][T12114] veth0_macvtap: entered promiscuous mode [ 293.057351][T12114] veth1_macvtap: entered promiscuous mode [ 293.401519][T12114] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 293.433059][T12114] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 293.447178][T12114] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 293.648448][T12376] Cannot find set identified by id 0 to match [ 293.679748][T12114] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 293.918350][T12114] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 294.008982][T12114] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 294.104587][T12114] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 294.309696][T12114] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 294.357586][T12114] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 294.508207][T12114] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 294.537970][T12114] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 294.582346][T12114] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 294.595960][T12114] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 294.610349][T12114] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.171581][T10997] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 295.181404][T10997] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 295.253629][T12397] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2111'. [ 295.355182][T10997] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 295.391605][T10997] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 295.494957][T12411] 9pnet_fd: Insufficient options for proto=fd [ 297.892708][ T1087] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.903684][ T5899] usb 5-1: new full-speed USB device number 12 using dummy_hcd [ 298.060469][ T1087] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 298.061207][ T5899] usb 5-1: config 1 interface 0 has no altsetting 0 [ 298.091824][ T5899] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 298.102281][ T5899] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 298.129745][ T5899] usb 5-1: Product: syz [ 298.139577][ T5899] usb 5-1: Manufacturer: syz [ 298.149709][ T5899] usb 5-1: SerialNumber: syz [ 298.203352][ T1087] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 298.303378][ T1087] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 298.471133][ T1087] bridge_slave_1: left allmulticast mode [ 298.476920][ T1087] bridge_slave_1: left promiscuous mode [ 298.482929][ T1087] bridge0: port 2(bridge_slave_1) entered disabled state [ 298.498581][ T1087] bridge_slave_0: left allmulticast mode [ 298.504566][ T1087] bridge_slave_0: left promiscuous mode [ 298.510910][ T1087] bridge0: port 1(bridge_slave_0) entered disabled state [ 298.591958][ T5899] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 12 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 298.626501][ T5899] usb 5-1: USB disconnect, device number 12 [ 298.652277][ T5899] usblp0: removed [ 298.905671][T12499] 9pnet_fd: Insufficient options for proto=fd [ 298.943408][ T5864] Bluetooth: hci4: command tx timeout [ 299.586921][ T5864] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 299.604145][ T5864] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 299.613392][ T5864] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 299.669028][ T5864] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 299.677231][ T5864] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 299.685825][ T5864] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 299.806374][T12522] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 299.929992][ T1087] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 299.964042][ T1087] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 299.990187][ T1087] bond0 (unregistering): Released all slaves [ 300.483635][T12517] vcan0 speed is unknown, defaulting to 1000 [ 300.829875][ T5928] usb 1-1: new full-speed USB device number 19 using dummy_hcd [ 301.002485][ T5928] usb 1-1: config 1 interface 0 has no altsetting 0 [ 301.025347][T12561] 9pnet_fd: Insufficient options for proto=fd [ 301.034028][ T5928] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 301.060002][ T5928] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 301.077883][ T1087] hsr_slave_0: left promiscuous mode [ 301.086136][ T1087] hsr_slave_1: left promiscuous mode [ 301.086422][ T5928] usb 1-1: Product: syz [ 301.112647][ T1087] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 301.123862][ T1087] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 301.133765][ T5928] usb 1-1: Manufacturer: syz [ 301.140310][ T1087] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 301.148045][ T1087] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 301.149035][ T5928] usb 1-1: SerialNumber: syz [ 301.193843][ T1087] veth1_macvtap: left promiscuous mode [ 301.210067][ T1087] veth0_macvtap: left promiscuous mode [ 301.218035][ T1087] veth1_vlan: left promiscuous mode [ 301.229268][ T1087] veth0_vlan: left promiscuous mode [ 301.622074][ T5928] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 19 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 301.682145][ T5928] usb 1-1: USB disconnect, device number 19 [ 301.711533][ T5928] usblp0: removed [ 301.820067][ T5858] Bluetooth: hci2: command tx timeout [ 302.440231][ T29] audit: type=1804 audit(1730487955.340:11): pid=12586 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.2150" name="/newroot/425/file1" dev="fuse" ino=1 res=1 errno=0 [ 302.532056][ T29] audit: type=1800 audit(1730487955.340:12): pid=12586 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2150" name="/" dev="fuse" ino=1 res=0 errno=0 [ 302.850487][ T29] audit: type=1804 audit(1730487955.340:13): pid=12586 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.2150" name="/newroot/425/file1" dev="fuse" ino=1 res=1 errno=0 [ 302.870951][ C0] vkms_vblank_simulate: vblank timer overrun [ 302.877413][ T29] audit: type=1804 audit(1730487955.350:14): pid=12586 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.2150" name="/newroot/425/file1" dev="fuse" ino=1 res=1 errno=0 [ 302.898974][ T29] audit: type=1800 audit(1730487955.350:15): pid=12586 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2150" name="/" dev="fuse" ino=1 res=0 errno=0 [ 303.037734][ T1087] team0 (unregistering): Port device team_slave_1 removed [ 303.118186][ T1087] team0 (unregistering): Port device team_slave_0 removed [ 303.879868][ T5858] Bluetooth: hci2: command tx timeout [ 304.188729][T12517] chnl_net:caif_netlink_parms(): no params data found [ 304.428025][T12616] 9pnet_fd: Insufficient options for proto=fd [ 304.469854][ T5847] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 304.586147][T12517] bridge0: port 1(bridge_slave_0) entered blocking state [ 304.605277][T12517] bridge0: port 1(bridge_slave_0) entered disabled state [ 304.612770][T12517] bridge_slave_0: entered allmulticast mode [ 304.620698][T12517] bridge_slave_0: entered promiscuous mode [ 304.633271][T12517] bridge0: port 2(bridge_slave_1) entered blocking state [ 304.640791][T12517] bridge0: port 2(bridge_slave_1) entered disabled state [ 304.648135][T12517] bridge_slave_1: entered allmulticast mode [ 304.655303][T12517] bridge_slave_1: entered promiscuous mode [ 304.659462][ T5847] usb 3-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice=c6.98 [ 304.677479][ T5847] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 304.721927][ T5847] usb 3-1: config 0 descriptor?? [ 304.729103][T12517] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 304.744729][ T5847] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 304.760229][ T5847] ftdi_sio ttyUSB0: unknown device type: 0xc698 [ 304.762724][T12517] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 304.877843][T12517] team0: Port device team_slave_0 added [ 304.898351][T12517] team0: Port device team_slave_1 added [ 304.950030][T12517] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 304.965302][T12517] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 305.172736][T12517] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 305.831809][T12517] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 305.839863][T12517] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 305.898853][T12517] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 305.988352][ T5858] Bluetooth: hci2: command tx timeout [ 306.018188][T12517] hsr_slave_0: entered promiscuous mode [ 306.033302][T12517] hsr_slave_1: entered promiscuous mode [ 306.201599][T12517] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 306.219017][T12517] Cannot create hsr debugfs directory [ 306.382978][ T5928] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 306.509411][ T29] audit: type=1804 audit(1730487959.450:16): pid=12645 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.2164" name="/newroot/479/file1" dev="fuse" ino=1 res=1 errno=0 [ 306.770459][ T5928] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 306.812979][ T29] audit: type=1800 audit(1730487959.450:17): pid=12645 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2164" name="/" dev="fuse" ino=1 res=0 errno=0 [ 306.829644][ T5928] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 255, changing to 11 [ 306.905395][ T29] audit: type=1804 audit(1730487959.450:18): pid=12645 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.2164" name="/newroot/479/file1" dev="fuse" ino=1 res=1 errno=0 [ 306.979900][ T29] audit: type=1804 audit(1730487959.450:19): pid=12645 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.2164" name="/newroot/479/file1" dev="fuse" ino=1 res=1 errno=0 [ 307.031285][ T29] audit: type=1800 audit(1730487959.450:20): pid=12645 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2164" name="/" dev="fuse" ino=1 res=0 errno=0 [ 307.034476][ T5928] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 59391, setting to 1024 [ 307.062547][ T5928] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 307.071933][ T5928] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 307.111112][T12640] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 307.128411][ T5928] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 307.216536][ T5928] usb 3-1: USB disconnect, device number 17 [ 307.278551][ T5928] ftdi_sio 3-1:0.0: device disconnected [ 307.353553][ T5929] usb 1-1: USB disconnect, device number 20 [ 307.928379][T12517] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 307.971330][T12517] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 308.038528][T12517] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 308.046353][ T5858] Bluetooth: hci2: command tx timeout [ 308.139213][T12517] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 308.151989][T12676] syz.2.2170: attempt to access beyond end of device [ 308.151989][T12676] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 308.292856][T12680] 9pnet_fd: Insufficient options for proto=fd [ 308.426139][T12517] 8021q: adding VLAN 0 to HW filter on device bond0 [ 308.488126][T12517] 8021q: adding VLAN 0 to HW filter on device team0 [ 308.514782][ T1087] bridge0: port 1(bridge_slave_0) entered blocking state [ 308.522015][ T1087] bridge0: port 1(bridge_slave_0) entered forwarding state [ 308.580852][ T1087] bridge0: port 2(bridge_slave_1) entered blocking state [ 308.588036][ T1087] bridge0: port 2(bridge_slave_1) entered forwarding state [ 308.846820][T12700] siw: device registration error -23 [ 308.961148][T12517] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 309.121131][T12517] veth0_vlan: entered promiscuous mode [ 309.198333][T12517] veth1_vlan: entered promiscuous mode [ 309.254650][T12517] veth0_macvtap: entered promiscuous mode [ 309.262969][T12517] veth1_macvtap: entered promiscuous mode [ 309.275747][T12517] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 309.286299][T12517] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 309.296342][T12517] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 309.306918][T12517] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 309.316930][T12517] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 309.328047][T12517] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 309.338109][T12517] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 309.348623][T12517] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 309.360104][T12517] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 309.372345][T12517] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 309.382543][T12517] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.391448][T12517] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.400380][T12517] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.409127][T12517] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.694343][T11872] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 309.742813][T11872] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 309.897603][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 309.944472][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 310.282859][ T5900] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 310.689763][ T5900] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 310.701127][ T5900] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 255, changing to 11 [ 310.712486][ T5900] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 59391, setting to 1024 [ 310.723842][ T5900] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 310.733039][ T5900] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 310.744927][T12731] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 310.761842][ T5900] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 311.440332][ T5900] usb 1-1: USB disconnect, device number 21 [ 311.923222][ T8392] udevd[8392]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 311.962060][T12765] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 311.990343][ T29] audit: type=1804 audit(1730487964.960:21): pid=12764 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.2189" name="/newroot/485/file1" dev="fuse" ino=1 res=1 errno=0 [ 312.046931][ T29] audit: type=1800 audit(1730487964.960:22): pid=12764 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2189" name="/" dev="fuse" ino=1 res=0 errno=0 [ 312.172943][ T5928] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 312.230612][ T29] audit: type=1804 audit(1730487964.960:23): pid=12764 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.2189" name="/newroot/485/file1" dev="fuse" ino=1 res=1 errno=0 [ 312.392721][ T5928] usb 2-1: Using ep0 maxpacket: 8 [ 312.439272][ T5928] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 312.448675][ T5928] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 312.456976][ T5928] usb 2-1: Product: syz [ 312.477413][ T5928] usb 2-1: Manufacturer: syz [ 312.491386][ T5928] usb 2-1: SerialNumber: syz [ 312.604548][ T29] audit: type=1804 audit(1730487964.960:24): pid=12764 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.2189" name="/newroot/485/file1" dev="fuse" ino=1 res=1 errno=0 [ 312.630833][ T5928] usb 2-1: config 0 descriptor?? [ 312.664790][ T29] audit: type=1800 audit(1730487964.960:25): pid=12764 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2189" name="/" dev="fuse" ino=1 res=0 errno=0 [ 312.848194][ T5928] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 314.363086][T10608] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 314.409891][ T5899] usb 3-1: new full-speed USB device number 18 using dummy_hcd [ 314.561605][ T5899] usb 3-1: config 1 interface 0 has no altsetting 0 [ 314.575892][ T5899] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 314.587846][ T5899] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 314.615985][ T5899] usb 3-1: Product: syz [ 314.630259][ T5864] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 314.639087][ T5899] usb 3-1: Manufacturer: syz [ 314.645672][ T5864] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 314.654368][ T5899] usb 3-1: SerialNumber: syz [ 314.661382][ T5864] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 314.671481][ T5864] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 314.685306][ T5864] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 314.695267][ T5864] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 314.753362][T12788] vcan0 speed is unknown, defaulting to 1000 [ 315.120227][ T5899] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 18 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 315.154694][ T5899] usb 3-1: USB disconnect, device number 18 [ 315.196864][ T5899] usblp0: removed [ 315.305899][T12788] chnl_net:caif_netlink_parms(): no params data found [ 315.465780][T10608] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 315.999941][ T5928] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 316.011993][ T5928] usb 2-1: USB disconnect, device number 17 [ 316.135706][T10608] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 316.480850][T12812] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 316.538933][T10608] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 316.764748][ T5858] Bluetooth: hci2: command tx timeout [ 316.776247][ T29] audit: type=1804 audit(1730487969.740:26): pid=12814 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.2204" name="/newroot/443/file1" dev="fuse" ino=1 res=1 errno=0 [ 316.803855][T12788] bridge0: port 1(bridge_slave_0) entered blocking state [ 316.827028][T12788] bridge0: port 1(bridge_slave_0) entered disabled state [ 317.017488][T12788] bridge_slave_0: entered allmulticast mode [ 317.031998][ T29] audit: type=1800 audit(1730487969.740:27): pid=12814 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2204" name="/" dev="fuse" ino=1 res=0 errno=0 [ 317.140000][T12788] bridge_slave_0: entered promiscuous mode [ 317.171147][T12788] bridge0: port 2(bridge_slave_1) entered blocking state [ 317.178331][T12788] bridge0: port 2(bridge_slave_1) entered disabled state [ 317.239394][ T29] audit: type=1804 audit(1730487969.740:28): pid=12814 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.2204" name="/newroot/443/file1" dev="fuse" ino=1 res=1 errno=0 [ 317.284020][T12788] bridge_slave_1: entered allmulticast mode [ 317.312519][T12788] bridge_slave_1: entered promiscuous mode [ 317.351080][ T29] audit: type=1804 audit(1730487969.740:29): pid=12814 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.2204" name="/newroot/443/file1" dev="fuse" ino=1 res=1 errno=0 [ 317.430962][T12823] team0: Port device macvlan1 added [ 317.488439][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.517471][T12788] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 317.539090][ T29] audit: type=1800 audit(1730487969.740:30): pid=12814 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2204" name="/" dev="fuse" ino=1 res=0 errno=0 [ 317.574646][T12825] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2208'. [ 317.610169][T12817] team0: Port device macvlan1 removed [ 317.625618][T12788] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 318.524903][T12788] team0: Port device team_slave_0 added [ 318.760686][T10608] bridge_slave_1: left allmulticast mode [ 318.767117][T10608] bridge_slave_1: left promiscuous mode [ 318.774556][ T5929] usb 1-1: new full-speed USB device number 22 using dummy_hcd [ 318.829555][T10608] bridge0: port 2(bridge_slave_1) entered disabled state [ 318.841070][ T5858] Bluetooth: hci2: command tx timeout [ 318.979949][ T5929] usb 1-1: config 1 interface 0 has no altsetting 0 [ 318.980826][T10608] bridge_slave_0: left allmulticast mode [ 319.025663][ T5929] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 319.062158][ T5929] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 319.097949][ T5929] usb 1-1: Product: syz [ 319.111421][ T5929] usb 1-1: Manufacturer: syz [ 319.117918][ T5929] usb 1-1: SerialNumber: syz [ 319.129802][T10608] bridge_slave_0: left promiscuous mode [ 319.135764][T10608] bridge0: port 1(bridge_slave_0) entered disabled state [ 319.722644][ T5929] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 22 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 319.740227][ T5929] usb 1-1: USB disconnect, device number 22 [ 319.971262][ T5929] usblp0: removed [ 320.728105][T10608] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 320.738866][T10608] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 320.752246][T10608] bond0 (unregistering): Released all slaves [ 320.769403][T12788] team0: Port device team_slave_1 added [ 320.775600][ T5929] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 320.920010][ T5864] Bluetooth: hci2: command tx timeout [ 320.955302][T12788] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 320.962679][ T5929] usb 2-1: Using ep0 maxpacket: 16 [ 320.967998][T12788] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 320.994581][T12788] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 321.007260][ T5929] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 321.018229][ T5929] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 64 [ 321.031387][T12788] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 321.038363][T12788] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 321.064328][ C1] vkms_vblank_simulate: vblank timer overrun [ 321.072120][T12788] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 321.085104][ T5929] usb 2-1: string descriptor 0 read error: -22 [ 321.087286][T12868] team0: Port device macvlan1 added [ 321.091930][ T5929] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 321.106392][ T5929] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 321.166322][T12866] team0: Port device macvlan1 removed [ 321.336671][ T5929] cdc_ncm 2-1:1.0: bind() failure [ 321.366479][ T5929] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 321.409094][ T5929] cdc_ncm 2-1:1.1: bind() failure [ 321.420786][T12788] hsr_slave_0: entered promiscuous mode [ 321.443277][ T5929] usb 2-1: USB disconnect, device number 18 [ 321.456360][T12788] hsr_slave_1: entered promiscuous mode [ 321.498781][T12788] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 321.539966][T12788] Cannot create hsr debugfs directory [ 321.733186][T10608] hsr_slave_0: left promiscuous mode [ 321.739242][T10608] hsr_slave_1: left promiscuous mode [ 321.746613][T10608] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 321.757903][T10608] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 321.767551][T10608] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 321.777444][T10608] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 321.805950][T10608] veth1_macvtap: left promiscuous mode [ 321.813904][T10608] veth0_macvtap: left promiscuous mode [ 321.819731][T10608] veth1_vlan: left promiscuous mode [ 321.825711][T10608] veth0_vlan: left promiscuous mode [ 321.831475][ T5928] usb 3-1: new full-speed USB device number 19 using dummy_hcd [ 322.344168][ T5928] usb 3-1: config 1 interface 0 has no altsetting 0 [ 322.353433][ T5928] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 322.362659][ T5928] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 322.370931][ T5928] usb 3-1: Product: syz [ 322.375200][ T5928] usb 3-1: Manufacturer: syz [ 322.381165][ T5928] usb 3-1: SerialNumber: syz [ 323.000419][ T5864] Bluetooth: hci2: command tx timeout [ 323.341247][ T5928] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 19 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 323.380782][ T5928] usb 3-1: USB disconnect, device number 19 [ 323.401380][ T5928] usblp0: removed [ 323.854820][T10608] team0 (unregistering): Port device team_slave_1 removed [ 323.982849][T10608] team0 (unregistering): Port device team_slave_0 removed [ 325.079736][ T5864] Bluetooth: hci2: command tx timeout [ 325.281201][ T29] audit: type=1804 audit(1730487978.260:31): pid=12924 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.2235" name="/newroot/453/file1" dev="fuse" ino=1 res=1 errno=0 [ 325.301884][ T29] audit: type=1800 audit(1730487978.260:32): pid=12924 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2235" name="/" dev="fuse" ino=1 res=0 errno=0 [ 325.322018][ T29] audit: type=1804 audit(1730487978.260:33): pid=12918 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.2235" name="/newroot/453/file1" dev="fuse" ino=1 res=1 errno=0 [ 325.342910][ T29] audit: type=1804 audit(1730487978.260:34): pid=12918 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.2235" name="/newroot/453/file1" dev="fuse" ino=1 res=1 errno=0 [ 325.363689][ T29] audit: type=1800 audit(1730487978.260:35): pid=12918 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2235" name="/" dev="fuse" ino=1 res=0 errno=0 [ 325.383589][ C1] vkms_vblank_simulate: vblank timer overrun [ 326.794765][ T5928] usb 3-1: new full-speed USB device number 20 using dummy_hcd [ 326.977106][ T5928] usb 3-1: config 1 interface 0 has no altsetting 0 [ 327.003237][ T5928] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 327.040240][ T5928] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 327.065129][ T5928] usb 3-1: Product: syz [ 327.076248][ T5928] usb 3-1: Manufacturer: syz [ 327.095259][ T5928] usb 3-1: SerialNumber: syz [ 327.161684][T12788] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 327.185135][T12788] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 327.205822][T12788] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 327.222123][T12788] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 327.389234][T12788] 8021q: adding VLAN 0 to HW filter on device bond0 [ 327.429280][T12788] 8021q: adding VLAN 0 to HW filter on device team0 [ 327.448918][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 327.456098][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 327.477210][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 327.484442][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 327.537392][T12788] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 327.551811][T12788] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 327.753037][ T5928] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 20 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 327.803246][ T5928] usb 3-1: USB disconnect, device number 20 [ 327.827682][ T5928] usblp0: removed [ 327.831434][T12999] Cannot find set identified by id 0 to match [ 327.954608][T12788] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 328.055072][T12788] veth0_vlan: entered promiscuous mode [ 328.086582][T12788] veth1_vlan: entered promiscuous mode [ 328.154440][T12788] veth0_macvtap: entered promiscuous mode [ 328.182481][T12788] veth1_macvtap: entered promiscuous mode [ 328.230787][T12788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 328.249656][T12788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 328.259519][T12788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 328.299672][T12788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 328.309555][T12788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 328.350047][T12788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 328.395748][T12788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 328.415174][T12788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 328.438444][T12788] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 328.497815][T12788] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 328.582631][T12788] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 328.599869][T12788] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 328.608632][T12788] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 328.629872][ T29] audit: type=1804 audit(1730487981.610:36): pid=13019 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.2253" name="/newroot/508/file1" dev="fuse" ino=1 res=1 errno=0 [ 328.640844][T12788] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 328.650331][ C1] vkms_vblank_simulate: vblank timer overrun [ 328.656583][ T29] audit: type=1800 audit(1730487981.620:37): pid=13019 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2253" name="/" dev="fuse" ino=1 res=0 errno=0 [ 328.769409][ T29] audit: type=1804 audit(1730487981.640:38): pid=13016 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.2253" name="/newroot/508/file1" dev="fuse" ino=1 res=1 errno=0 [ 328.828988][ T29] audit: type=1804 audit(1730487981.650:39): pid=13016 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.2253" name="/newroot/508/file1" dev="fuse" ino=1 res=1 errno=0 [ 328.847047][ T1146] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 328.849483][ C1] vkms_vblank_simulate: vblank timer overrun [ 328.869905][ T1146] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 328.904834][ T29] audit: type=1800 audit(1730487981.650:40): pid=13016 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2253" name="/" dev="fuse" ino=1 res=0 errno=0 [ 328.947405][ T54] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 328.956847][ T54] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 330.353147][T13066] Cannot find set identified by id 0 to match [ 331.734307][T13097] syz.4.2272: attempt to access beyond end of device [ 331.734307][T13097] nbd4: rw=0, sector=0, nr_sectors = 1 limit=0 [ 331.784682][T13095] siw: device registration error -23 [ 332.242679][T10997] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 332.309748][ T5847] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 332.470081][ T5847] usb 1-1: Using ep0 maxpacket: 16 [ 332.476555][ T5847] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 332.486885][ T5847] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 64 [ 332.499442][ T5847] usb 1-1: string descriptor 0 read error: -22 [ 332.505862][ T5847] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 332.515187][ T5847] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 332.723197][T10997] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 332.734030][ T5847] cdc_ncm 1-1:1.0: bind() failure [ 332.747067][ T5847] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 332.754052][ T5847] cdc_ncm 1-1:1.1: bind() failure [ 332.766342][ T5847] usb 1-1: USB disconnect, device number 23 [ 332.802301][T10997] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 332.866988][T10997] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 332.972319][T10997] bridge_slave_1: left allmulticast mode [ 332.978303][T10997] bridge_slave_1: left promiscuous mode [ 332.991915][T10997] bridge0: port 2(bridge_slave_1) entered disabled state [ 333.002825][T10997] bridge_slave_0: left allmulticast mode [ 333.008507][T10997] bridge_slave_0: left promiscuous mode [ 333.015170][T10997] bridge0: port 1(bridge_slave_0) entered disabled state [ 333.548617][T10997] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 333.569553][T10997] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 333.588160][T10997] bond0 (unregistering): Released all slaves [ 333.600468][ T5858] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 333.616388][ T5858] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 333.628908][ T5858] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 333.638342][ T5858] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 333.643035][T13113] Cannot find set identified by id 0 to match [ 333.660077][ T5858] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 333.679922][ T5858] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 333.718188][T13117] vcan0 speed is unknown, defaulting to 1000 [ 334.247031][T10997] hsr_slave_0: left promiscuous mode [ 334.284045][T10997] hsr_slave_1: left promiscuous mode [ 334.306297][T10997] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 334.320314][T10997] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 334.347915][T10997] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 334.359838][T10997] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 334.436572][T10997] veth1_macvtap: left promiscuous mode [ 334.456410][T10997] veth0_macvtap: left promiscuous mode [ 334.472437][T10997] veth1_vlan: left promiscuous mode [ 334.486756][T10997] veth0_vlan: left promiscuous mode [ 335.163148][T13163] syz.4.2293: attempt to access beyond end of device [ 335.163148][T13163] nbd4: rw=0, sector=0, nr_sectors = 1 limit=0 [ 335.752300][ T5858] Bluetooth: hci2: command tx timeout [ 336.265919][T10997] team0 (unregistering): Port device team_slave_1 removed [ 336.316478][T10997] team0 (unregistering): Port device team_slave_0 removed [ 336.836213][T13117] chnl_net:caif_netlink_parms(): no params data found [ 337.116998][T13117] bridge0: port 1(bridge_slave_0) entered blocking state [ 337.150048][T13117] bridge0: port 1(bridge_slave_0) entered disabled state [ 337.172541][T13117] bridge_slave_0: entered allmulticast mode [ 337.200787][T13117] bridge_slave_0: entered promiscuous mode [ 337.299485][T13117] bridge0: port 2(bridge_slave_1) entered blocking state [ 337.336713][T13117] bridge0: port 2(bridge_slave_1) entered disabled state [ 337.386156][T13117] bridge_slave_1: entered allmulticast mode [ 337.426466][T13117] bridge_slave_1: entered promiscuous mode [ 337.509548][T13216] syz.2.2307: attempt to access beyond end of device [ 337.509548][T13216] nbd2: rw=0, sector=0, nr_sectors = 1 limit=0 [ 337.679959][ T5929] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 337.851414][ T5858] Bluetooth: hci2: command tx timeout [ 337.860585][ T5929] usb 2-1: Using ep0 maxpacket: 8 [ 337.917960][ T5929] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 338.150981][ T5929] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 338.161840][ T5929] usb 2-1: Product: syz [ 338.174676][ T5929] usb 2-1: Manufacturer: syz [ 338.179304][ T5929] usb 2-1: SerialNumber: syz [ 338.202436][ T5929] usb 2-1: config 0 descriptor?? [ 338.259165][T13117] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 338.312317][T13117] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 338.442606][ T5929] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 338.466843][T13117] team0: Port device team_slave_0 added [ 338.668605][T13117] team0: Port device team_slave_1 added [ 339.633324][T13117] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 339.659224][T13117] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 339.809856][T13117] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 340.020174][ T5858] Bluetooth: hci2: command tx timeout [ 340.129555][T13117] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 340.195317][T13117] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 340.649151][T13117] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 340.780483][T13117] hsr_slave_0: entered promiscuous mode [ 340.810524][T13117] hsr_slave_1: entered promiscuous mode [ 340.824719][T13117] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 340.832925][T13117] Cannot create hsr debugfs directory [ 341.401663][T13117] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 341.414406][T13117] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 341.428915][T13117] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 341.441167][T13117] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 341.498889][ T5929] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 341.539968][ T5929] usb 2-1: USB disconnect, device number 19 [ 341.584149][T13117] 8021q: adding VLAN 0 to HW filter on device bond0 [ 341.607474][T13117] 8021q: adding VLAN 0 to HW filter on device team0 [ 341.625310][T10997] bridge0: port 1(bridge_slave_0) entered blocking state [ 341.632538][T10997] bridge0: port 1(bridge_slave_0) entered forwarding state [ 341.644336][T10997] bridge0: port 2(bridge_slave_1) entered blocking state [ 341.651620][T10997] bridge0: port 2(bridge_slave_1) entered forwarding state [ 342.129338][T13284] lo speed is unknown, defaulting to 1000 [ 342.135482][ T5858] Bluetooth: hci2: command tx timeout [ 342.515232][T13284] lo speed is unknown, defaulting to 1000 [ 342.691741][T13284] lo speed is unknown, defaulting to 1000 [ 344.163090][T13321] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 344.183931][T13284] infiniband syz0: set active [ 344.188641][T13284] infiniband syz0: added lo [ 344.193448][ T25] lo speed is unknown, defaulting to 1000 [ 344.250287][T13284] syz0: rxe_create_cq: returned err = -12 [ 344.266681][T13324] team0: Port device macvlan1 added [ 344.305866][T13284] infiniband syz0: Couldn't create ib_mad CQ [ 344.313433][T13284] infiniband syz0: Couldn't open port 1 [ 344.349513][T13284] RDS/IB: syz0: added [ 344.365661][T13284] smc: adding ib device syz0 with port count 1 [ 344.373313][T13284] smc: ib device syz0 port 1 has pnetid [ 344.376166][T13324] team0: Port device macvlan1 removed [ 344.410436][ T5847] lo speed is unknown, defaulting to 1000 [ 344.423862][T13284] lo speed is unknown, defaulting to 1000 [ 344.453439][T13117] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 344.582146][T13117] veth0_vlan: entered promiscuous mode [ 344.615733][T13117] veth1_vlan: entered promiscuous mode [ 344.666758][T13117] veth0_macvtap: entered promiscuous mode [ 344.732678][T13117] veth1_macvtap: entered promiscuous mode [ 344.813410][T13117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 344.824258][T13117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 344.834646][T13117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 344.848000][T13341] syz.2.2336: attempt to access beyond end of device [ 344.848000][T13341] nbd2: rw=0, sector=0, nr_sectors = 1 limit=0 [ 344.862507][T13117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 344.872800][T13117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 344.883818][T13117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 344.894231][T13117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 344.905269][T13117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 344.917087][T13117] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 344.928527][T13284] lo speed is unknown, defaulting to 1000 [ 344.932762][T13117] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 344.974458][T13117] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 344.998562][T13117] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.018710][T13117] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.037182][T13117] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.193380][ T1087] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 345.220335][ T1087] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 345.251941][T13284] lo speed is unknown, defaulting to 1000 [ 345.285766][T10997] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 345.298104][T10997] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 346.410163][T13284] lo speed is unknown, defaulting to 1000 [ 347.487467][T13284] lo speed is unknown, defaulting to 1000 [ 347.550113][ T5847] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 347.578869][T13385] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 347.710061][ T5847] usb 5-1: Using ep0 maxpacket: 8 [ 347.729308][ T5847] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 347.769085][ T5847] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 347.809658][ T5847] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 347.843368][ T5847] usb 5-1: config 16 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 347.857167][ T5847] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 347.914531][ T5847] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 347.964508][ T5847] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 347.999112][ T5847] usbtmc 5-1:16.0: bulk endpoints not found [ 348.475080][T13403] syz.0.2349: attempt to access beyond end of device [ 348.475080][T13403] nbd0: rw=0, sector=0, nr_sectors = 1 limit=0 [ 349.883786][ T1087] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 349.985706][ T1087] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 350.058593][ T1087] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 350.137219][ T1087] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 350.264027][ T1087] bridge_slave_1: left allmulticast mode [ 350.270657][ T1087] bridge_slave_1: left promiscuous mode [ 350.276441][ T1087] bridge0: port 2(bridge_slave_1) entered disabled state [ 350.287404][ T1087] bridge_slave_0: left allmulticast mode [ 350.293381][ T1087] bridge_slave_0: left promiscuous mode [ 350.299155][ T1087] bridge0: port 1(bridge_slave_0) entered disabled state [ 350.626277][ T1087] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 350.637995][ T1087] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 350.648343][ T1087] bond0 (unregistering): Released all slaves [ 350.791799][ T5928] usb 5-1: USB disconnect, device number 13 [ 351.623303][T13449] process 'syz.1.2359' launched './file0' with NULL argv: empty string added [ 353.682260][T13476] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2365'. [ 353.993855][ T1087] hsr_slave_0: left promiscuous mode [ 354.000311][ T1087] hsr_slave_1: left promiscuous mode [ 354.030404][ T1087] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 354.044058][ T5864] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 354.054429][ T5864] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 354.064726][ T5864] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 354.073548][ T5864] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 354.081798][ T5864] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 354.089655][ T5864] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 354.189983][ T1087] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 354.220642][ T1087] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 354.228303][ T1087] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 354.320395][ T1087] veth1_macvtap: left promiscuous mode [ 354.370087][ T1087] veth0_macvtap: left promiscuous mode [ 354.382374][ T1087] veth1_vlan: left promiscuous mode [ 354.389142][ T1087] veth0_vlan: left promiscuous mode [ 355.113493][T13489] 9pnet_fd: Insufficient options for proto=fd [ 355.928346][ T1087] team0 (unregistering): Port device team_slave_1 removed [ 355.973124][ T1087] team0 (unregistering): Port device team_slave_0 removed [ 356.204414][ T5858] Bluetooth: hci2: command tx timeout [ 356.648467][T13472] vcan0 speed is unknown, defaulting to 1000 [ 356.909832][ T9] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 357.684727][T13472] lo speed is unknown, defaulting to 1000 [ 357.772738][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 357.779520][ T9] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 357.787895][ T9] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 357.812990][ T9] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 357.849826][ T9] usb 5-1: config 16 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 357.879984][ T9] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 357.943938][ T9] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 357.983545][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 358.043986][ T9] usbtmc 5-1:16.0: bulk endpoints not found [ 358.279736][ T5858] Bluetooth: hci2: command tx timeout [ 358.439110][T13541] sctp: [Deprecated]: syz.1.2378 (pid 13541) Use of struct sctp_assoc_value in delayed_ack socket option. [ 358.439110][T13541] Use struct sctp_sack_info instead [ 359.191373][T13472] chnl_net:caif_netlink_parms(): no params data found [ 359.389108][T13553] syz.0.2381: attempt to access beyond end of device [ 359.389108][T13553] nbd0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 359.402941][T13553] SQUASHFS error: Failed to read block 0x0: -5 [ 359.411591][T13553] unable to read squashfs_super_block [ 359.436196][T13472] bridge0: port 1(bridge_slave_0) entered blocking state [ 359.465221][T13472] bridge0: port 1(bridge_slave_0) entered disabled state [ 359.465412][T13472] bridge_slave_0: entered allmulticast mode [ 359.467818][T13472] bridge_slave_0: entered promiscuous mode [ 359.473797][T13472] bridge0: port 2(bridge_slave_1) entered blocking state [ 359.475441][T13472] bridge0: port 2(bridge_slave_1) entered disabled state [ 359.548006][T13472] bridge_slave_1: entered allmulticast mode [ 359.567369][T13472] bridge_slave_1: entered promiscuous mode [ 359.655081][T13472] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 359.717081][T13472] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 359.859471][T13472] team0: Port device team_slave_0 added [ 359.886574][T13472] team0: Port device team_slave_1 added [ 359.988025][T13472] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 360.012861][T13472] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 360.112809][T13472] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 360.176239][ T5928] usb 5-1: USB disconnect, device number 14 [ 360.198433][T13472] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 360.251088][T13472] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 360.341617][T13472] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 360.369939][ T5858] Bluetooth: hci2: command tx timeout [ 360.548283][T13472] hsr_slave_0: entered promiscuous mode [ 360.566055][T13472] hsr_slave_1: entered promiscuous mode [ 360.593605][T13472] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 360.615970][T13472] Cannot create hsr debugfs directory [ 361.375395][T13606] team0: Port device macvlan1 added [ 361.410976][T13606] team0: Port device macvlan1 removed [ 362.188532][T13472] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 362.197497][T13472] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 362.216254][T13472] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 362.226944][T13472] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 362.393750][T13472] 8021q: adding VLAN 0 to HW filter on device bond0 [ 362.448610][T13472] 8021q: adding VLAN 0 to HW filter on device team0 [ 362.456172][ T5858] Bluetooth: hci2: command tx timeout [ 362.481427][ T1139] bridge0: port 1(bridge_slave_0) entered blocking state [ 362.488669][ T1139] bridge0: port 1(bridge_slave_0) entered forwarding state [ 362.511457][ T1139] bridge0: port 2(bridge_slave_1) entered blocking state [ 362.518670][ T1139] bridge0: port 2(bridge_slave_1) entered forwarding state [ 362.899884][ T25] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 363.069801][ T25] usb 1-1: Using ep0 maxpacket: 8 [ 363.089041][ T25] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 363.098576][ T25] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 363.112221][ T25] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 363.312006][ T25] usb 1-1: config 16 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 363.411598][ T25] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 363.451753][ T25] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 363.671134][ T25] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 363.683536][ T25] usbtmc 1-1:16.0: bulk endpoints not found [ 363.719281][T13472] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 363.802992][T13660] ================================================================== [ 363.811112][T13660] BUG: KASAN: slab-out-of-bounds in skb_copy_and_csum_bits+0x433/0x9c0 [ 363.819366][T13660] Write of size 670 at addr ffff888069d90624 by task syz.2.2398/13660 [ 363.827534][T13660] [ 363.829890][T13660] CPU: 1 UID: 0 PID: 13660 Comm: syz.2.2398 Not tainted 6.12.0-rc5-next-20241101-syzkaller #0 [ 363.840143][T13660] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 363.850214][T13660] Call Trace: [ 363.853507][T13660] [ 363.856448][T13660] dump_stack_lvl+0x241/0x360 [ 363.861142][T13660] ? __pfx_dump_stack_lvl+0x10/0x10 [ 363.866349][T13660] ? __pfx__printk+0x10/0x10 [ 363.870957][T13660] ? _printk+0xd5/0x120 [ 363.875125][T13660] ? __virt_addr_valid+0x183/0x530 [ 363.880252][T13660] ? __virt_addr_valid+0x183/0x530 [ 363.885379][T13660] print_report+0x169/0x550 [ 363.889889][T13660] ? __virt_addr_valid+0x183/0x530 [ 363.895019][T13660] ? __virt_addr_valid+0x183/0x530 [ 363.900137][T13660] ? __virt_addr_valid+0x45f/0x530 [ 363.905265][T13660] ? __phys_addr+0xba/0x170 [ 363.909795][T13660] ? skb_copy_and_csum_bits+0x433/0x9c0 [ 363.915351][T13660] kasan_report+0x143/0x180 [ 363.919868][T13660] ? skb_copy_and_csum_bits+0x433/0x9c0 [ 363.925425][T13660] kasan_check_range+0x282/0x290 [ 363.930375][T13660] ? skb_copy_and_csum_bits+0x433/0x9c0 [ 363.935931][T13660] __asan_memcpy+0x40/0x70 [ 363.940362][T13660] skb_copy_and_csum_bits+0x433/0x9c0 [ 363.945746][T13660] __ip_append_data+0x2fc1/0x40f0 [ 363.950969][T13660] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 363.956538][T13660] ? __pfx___ip_append_data+0x10/0x10 [ 363.961930][T13660] ? lockdep_hardirqs_on+0x99/0x150 [ 363.967147][T13660] ip_append_data+0x14c/0x190 [ 363.971842][T13660] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 363.977410][T13660] udp_sendmsg+0x3e2/0x2a50 [ 363.981937][T13660] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 363.988299][T13660] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 363.993876][T13660] ? __pfx_udp_sendmsg+0x10/0x10 [ 363.998846][T13660] ? __pfx_aa_sk_perm+0x10/0x10 [ 364.003723][T13660] ? unwind_get_return_address+0x4d/0x90 [ 364.009369][T13660] ? sock_rps_record_flow+0x1a/0x400 [ 364.014671][T13660] ? inet_sendmsg+0x2ba/0x390 [ 364.019361][T13660] __sock_sendmsg+0x1a6/0x270 [ 364.024090][T13660] sock_sendmsg+0x134/0x200 [ 364.028612][T13660] ? __pfx_sock_sendmsg+0x10/0x10 [ 364.033743][T13660] ? stack_depot_save_flags+0x29/0x830 [ 364.039241][T13660] ? copy_splice_read+0xa07/0xb60 [ 364.044333][T13660] ? splice_direct_to_actor+0x4af/0xc80 [ 364.049894][T13660] ? do_splice_direct+0x289/0x3e0 [ 364.054931][T13660] ? do_sendfile+0x561/0xe10 [ 364.059546][T13660] ? do_syscall_64+0xf3/0x230 [ 364.064230][T13660] ? iov_iter_bvec+0x4e/0x180 [ 364.069042][T13660] splice_to_socket+0xa10/0x10b0 [ 364.074005][T13660] ? __pfx_splice_to_socket+0x10/0x10 [ 364.079416][T13660] ? __pfx_splice_to_socket+0x10/0x10 [ 364.084804][T13660] direct_splice_actor+0x11b/0x220 [ 364.089934][T13660] splice_direct_to_actor+0x586/0xc80 [ 364.095298][T13660] ? __pfx_direct_splice_actor+0x10/0x10 [ 364.100926][T13660] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 364.106806][T13660] ? do_splice_direct+0x22b/0x3e0 [ 364.111822][T13660] do_splice_direct+0x289/0x3e0 [ 364.116684][T13660] ? __pfx_do_splice_direct+0x10/0x10 [ 364.122040][T13660] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 364.128016][T13660] ? bpf_lsm_file_permission+0x9/0x10 [ 364.133394][T13660] ? security_file_permission+0x74/0x280 [ 364.139023][T13660] ? rw_verify_area+0x1c3/0x6f0 [ 364.143871][T13660] do_sendfile+0x561/0xe10 [ 364.148294][T13660] ? __pfx_do_sendfile+0x10/0x10 [ 364.153254][T13660] __se_sys_sendfile64+0x17c/0x1e0 [ 364.158356][T13660] ? __pfx___se_sys_sendfile64+0x10/0x10 [ 364.163998][T13660] ? do_syscall_64+0x100/0x230 [ 364.168768][T13660] ? do_syscall_64+0xb6/0x230 [ 364.173436][T13660] do_syscall_64+0xf3/0x230 [ 364.177948][T13660] ? clear_bhb_loop+0x35/0x90 [ 364.182635][T13660] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 364.188554][T13660] RIP: 0033:0x7ff55917e719 [ 364.192985][T13660] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 364.212626][T13660] RSP: 002b:00007ff5575f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 364.221052][T13660] RAX: ffffffffffffffda RBX: 00007ff559336130 RCX: 00007ff55917e719 [ 364.229018][T13660] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000009 [ 364.236985][T13660] RBP: 00007ff5591f132e R08: 0000000000000000 R09: 0000000000000000 [ 364.244967][T13660] R10: 0000020000023893 R11: 0000000000000246 R12: 0000000000000000 [ 364.252951][T13660] R13: 0000000000000000 R14: 00007ff559336130 R15: 00007ffc5b3a2608 [ 364.260949][T13660] [ 364.263970][T13660] [ 364.266281][T13660] Allocated by task 13660: [ 364.270692][T13660] kasan_save_track+0x3f/0x80 [ 364.275371][T13660] __kasan_slab_alloc+0x66/0x80 [ 364.280218][T13660] kmem_cache_alloc_node_noprof+0x1d9/0x380 [ 364.286108][T13660] kmalloc_reserve+0xa8/0x2a0 [ 364.290956][T13660] __alloc_skb+0x1f3/0x440 [ 364.295384][T13660] __ip_append_data+0x2da7/0x40f0 [ 364.300412][T13660] ip_append_data+0x14c/0x190 [ 364.305084][T13660] udp_sendmsg+0x3e2/0x2a50 [ 364.309585][T13660] __sock_sendmsg+0x1a6/0x270 [ 364.314263][T13660] sock_sendmsg+0x134/0x200 [ 364.318774][T13660] splice_to_socket+0xa10/0x10b0 [ 364.323715][T13660] direct_splice_actor+0x11b/0x220 [ 364.328826][T13660] splice_direct_to_actor+0x586/0xc80 [ 364.334189][T13660] do_splice_direct+0x289/0x3e0 [ 364.339045][T13660] do_sendfile+0x561/0xe10 [ 364.343455][T13660] __se_sys_sendfile64+0x17c/0x1e0 [ 364.348563][T13660] do_syscall_64+0xf3/0x230 [ 364.353058][T13660] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 364.358955][T13660] [ 364.361267][T13660] The buggy address belongs to the object at ffff888069d90600 [ 364.361267][T13660] which belongs to the cache skbuff_small_head of size 640 [ 364.375843][T13660] The buggy address is located 36 bytes inside of [ 364.375843][T13660] allocated 640-byte region [ffff888069d90600, ffff888069d90880) [ 364.389926][T13660] [ 364.392244][T13660] The buggy address belongs to the physical page: [ 364.398661][T13660] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x69d90 [ 364.407416][T13660] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 364.416018][T13660] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 364.423579][T13660] page_type: f5(slab) [ 364.427568][T13660] raw: 00fff00000000040 ffff88801dae4b40 dead000000000122 0000000000000000 [ 364.436235][T13660] raw: 0000000000000000 0000000080150015 00000001f5000000 0000000000000000 [ 364.444901][T13660] head: 00fff00000000040 ffff88801dae4b40 dead000000000122 0000000000000000 [ 364.453568][T13660] head: 0000000000000000 0000000080150015 00000001f5000000 0000000000000000 [ 364.462231][T13660] head: 00fff00000000002 ffffea0001a76401 ffffffffffffffff 0000000000000000 [ 364.470894][T13660] head: 0000000000000004 0000000000000000 00000000ffffffff 0000000000000000 [ 364.479554][T13660] page dumped because: kasan: bad access detected [ 364.485977][T13660] page_owner tracks the page as allocated [ 364.491687][T13660] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 13660, tgid 13646 (syz.2.2398), ts 363801929808, free_ts 358834064977 [ 364.513217][T13660] post_alloc_hook+0x1f3/0x230 [ 364.517987][T13660] get_page_from_freelist+0x3725/0x3870 [ 364.523532][T13660] __alloc_pages_noprof+0x292/0x710 [ 364.528732][T13660] alloc_pages_mpol_noprof+0x3e8/0x680 [ 364.534202][T13660] alloc_slab_page+0x6a/0x140 [ 364.538905][T13660] allocate_slab+0x5a/0x2f0 [ 364.543418][T13660] ___slab_alloc+0xcd1/0x14b0 [ 364.548114][T13660] __slab_alloc+0x58/0xa0 [ 364.552440][T13660] kmem_cache_alloc_node_noprof+0x269/0x380 [ 364.558335][T13660] kmalloc_reserve+0xa8/0x2a0 [ 364.563006][T13660] __alloc_skb+0x1f3/0x440 [ 364.567428][T13660] __ip_append_data+0x2da7/0x40f0 [ 364.572446][T13660] ip_append_data+0x14c/0x190 [ 364.577113][T13660] udp_sendmsg+0x3e2/0x2a50 [ 364.581612][T13660] __sock_sendmsg+0x1a6/0x270 [ 364.586309][T13660] sock_sendmsg+0x134/0x200 [ 364.590803][T13660] page last free pid 11872 tgid 11872 stack trace: [ 364.597311][T13660] free_unref_page+0xcfb/0xf20 [ 364.602076][T13660] ringbuf_map_free+0xc2/0x120 [ 364.606840][T13660] bpf_map_free_deferred+0xe4/0x100 [ 364.612046][T13660] process_scheduled_works+0xa63/0x1850 [ 364.617603][T13660] worker_thread+0x870/0xd30 [ 364.622192][T13660] kthread+0x2f0/0x390 [ 364.626252][T13660] ret_from_fork+0x4b/0x80 [ 364.630667][T13660] ret_from_fork_asm+0x1a/0x30 [ 364.635431][T13660] [ 364.637747][T13660] Memory state around the buggy address: [ 364.643366][T13660] ffff888069d90780: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 364.651416][T13660] ffff888069d90800: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 364.659470][T13660] >ffff888069d90880: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 364.667521][T13660] ^ [ 364.671575][T13660] ffff888069d90900: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 364.679632][T13660] ffff888069d90980: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 364.687684][T13660] ================================================================== [ 364.696518][T13660] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 364.704088][T13660] CPU: 1 UID: 0 PID: 13660 Comm: syz.2.2398 Not tainted 6.12.0-rc5-next-20241101-syzkaller #0 [ 364.714429][T13660] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 364.724483][T13660] Call Trace: [ 364.727762][T13660] [ 364.730684][T13660] dump_stack_lvl+0x241/0x360 [ 364.735357][T13660] ? __pfx_dump_stack_lvl+0x10/0x10 [ 364.740556][T13660] ? __pfx__printk+0x10/0x10 [ 364.745174][T13660] ? lock_release+0xbf/0xa30 [ 364.749767][T13660] ? vscnprintf+0x5d/0x90 [ 364.754115][T13660] panic+0x349/0x880 [ 364.758009][T13660] ? check_panic_on_warn+0x21/0xb0 [ 364.763117][T13660] ? __pfx_panic+0x10/0x10 [ 364.767532][T13660] ? mark_lock+0x9a/0x360 [ 364.771853][T13660] ? _raw_spin_unlock_irqrestore+0xd8/0x140 [ 364.777744][T13660] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 364.783640][T13660] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 364.789985][T13660] ? print_report+0x502/0x550 [ 364.794656][T13660] check_panic_on_warn+0x86/0xb0 [ 364.799586][T13660] ? skb_copy_and_csum_bits+0x433/0x9c0 [ 364.805157][T13660] end_report+0x77/0x160 [ 364.809412][T13660] kasan_report+0x154/0x180 [ 364.813911][T13660] ? skb_copy_and_csum_bits+0x433/0x9c0 [ 364.819443][T13660] kasan_check_range+0x282/0x290 [ 364.824370][T13660] ? skb_copy_and_csum_bits+0x433/0x9c0 [ 364.829902][T13660] __asan_memcpy+0x40/0x70 [ 364.834307][T13660] skb_copy_and_csum_bits+0x433/0x9c0 [ 364.839672][T13660] __ip_append_data+0x2fc1/0x40f0 [ 364.844705][T13660] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 364.850265][T13660] ? __pfx___ip_append_data+0x10/0x10 [ 364.855626][T13660] ? lockdep_hardirqs_on+0x99/0x150 [ 364.860813][T13660] ip_append_data+0x14c/0x190 [ 364.865474][T13660] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 364.871005][T13660] udp_sendmsg+0x3e2/0x2a50 [ 364.875500][T13660] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 364.881819][T13660] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 364.887362][T13660] ? __pfx_udp_sendmsg+0x10/0x10 [ 364.892297][T13660] ? __pfx_aa_sk_perm+0x10/0x10 [ 364.897138][T13660] ? unwind_get_return_address+0x4d/0x90 [ 364.902758][T13660] ? sock_rps_record_flow+0x1a/0x400 [ 364.908031][T13660] ? inet_sendmsg+0x2ba/0x390 [ 364.912700][T13660] __sock_sendmsg+0x1a6/0x270 [ 364.917366][T13660] sock_sendmsg+0x134/0x200 [ 364.921856][T13660] ? __pfx_sock_sendmsg+0x10/0x10 [ 364.926867][T13660] ? stack_depot_save_flags+0x29/0x830 [ 364.932335][T13660] ? copy_splice_read+0xa07/0xb60 [ 364.937349][T13660] ? splice_direct_to_actor+0x4af/0xc80 [ 364.942885][T13660] ? do_splice_direct+0x289/0x3e0 [ 364.947898][T13660] ? do_sendfile+0x561/0xe10 [ 364.952479][T13660] ? do_syscall_64+0xf3/0x230 [ 364.957165][T13660] ? iov_iter_bvec+0x4e/0x180 [ 364.961856][T13660] splice_to_socket+0xa10/0x10b0 [ 364.966799][T13660] ? __pfx_splice_to_socket+0x10/0x10 [ 364.972184][T13660] ? __pfx_splice_to_socket+0x10/0x10 [ 364.977549][T13660] direct_splice_actor+0x11b/0x220 [ 364.982651][T13660] splice_direct_to_actor+0x586/0xc80 [ 364.988012][T13660] ? __pfx_direct_splice_actor+0x10/0x10 [ 364.993663][T13660] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 364.999559][T13660] ? do_splice_direct+0x22b/0x3e0 [ 365.004574][T13660] do_splice_direct+0x289/0x3e0 [ 365.009415][T13660] ? __pfx_do_splice_direct+0x10/0x10 [ 365.014780][T13660] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 365.020671][T13660] ? bpf_lsm_file_permission+0x9/0x10 [ 365.026040][T13660] ? security_file_permission+0x74/0x280 [ 365.031666][T13660] ? rw_verify_area+0x1c3/0x6f0 [ 365.036553][T13660] do_sendfile+0x561/0xe10 [ 365.040976][T13660] ? __pfx_do_sendfile+0x10/0x10 [ 365.045947][T13660] __se_sys_sendfile64+0x17c/0x1e0 [ 365.051073][T13660] ? __pfx___se_sys_sendfile64+0x10/0x10 [ 365.056788][T13660] ? do_syscall_64+0x100/0x230 [ 365.061542][T13660] ? do_syscall_64+0xb6/0x230 [ 365.066306][T13660] do_syscall_64+0xf3/0x230 [ 365.070814][T13660] ? clear_bhb_loop+0x35/0x90 [ 365.075503][T13660] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 365.081401][T13660] RIP: 0033:0x7ff55917e719 [ 365.085812][T13660] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 365.105410][T13660] RSP: 002b:00007ff5575f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 365.113819][T13660] RAX: ffffffffffffffda RBX: 00007ff559336130 RCX: 00007ff55917e719 [ 365.121797][T13660] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000009 [ 365.129763][T13660] RBP: 00007ff5591f132e R08: 0000000000000000 R09: 0000000000000000 [ 365.137740][T13660] R10: 0000020000023893 R11: 0000000000000246 R12: 0000000000000000 [ 365.145726][T13660] R13: 0000000000000000 R14: 00007ff559336130 R15: 00007ffc5b3a2608 [ 365.153694][T13660] [ 365.156977][T13660] Kernel Offset: disabled [ 365.161298][T13660] Rebooting in 86400 seconds..