last executing test programs: 38.578452393s ago: executing program 2 (id=190): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001540)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0xf, {[@main=@item_4={0x3, 0x0, 0x8, "a8407a73"}, @local=@item_4={0x3, 0x2, 0x0, "93bf0280"}, @main=@item_4={0x3, 0x0, 0xb, "7488dffc"}]}}, 0x0}, 0x0) ioctl$HIDIOCGREPORT(0xffffffffffffffff, 0x4805, 0x0) 36.368765364s ago: executing program 2 (id=197): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x400000000000001, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) semop(0x0, 0x0, 0x0) fanotify_mark(0xffffffffffffffff, 0x101, 0x20, 0xffffffffffffffff, 0x0) r1 = semget$private(0x0, 0x1, 0x0) semctl$IPC_RMID(r1, 0x0, 0x0) 35.263267471s ago: executing program 2 (id=200): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010001afff841040206402d14e0102030109021bdf471b1db54beb4352d3f9000100000000090400000190f1"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_int(r1, 0x29, 0xc9, &(0x7f0000000000), &(0x7f0000000040)=0x4) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(twofish)\x00'}, 0x58) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, '\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$rds(0x15, 0x5, 0x0) r7 = syz_io_uring_setup(0x7b, &(0x7f00000003c0)={0x0, 0x0, 0x80}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000600)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r6, 0x0, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0, 0x40000103}) io_uring_enter(r7, 0x46f6, 0x0, 0x0, 0x0, 0x0) close(0xffffffffffffffff) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000080)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20) r10 = accept4(r2, 0x0, 0x0, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x14}}, 0x0) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000000306010400000000000000000000000005000100070000000365cc0d4842daf4d5cd3a986d897ae51398f3d7bed975c17561d35df111d9117bba14973536b6fbbb53e8fbd138311db120b9deea678ef13459ae663f3e654bc797547df7e5ae8aaa6a5c3a8850bba6bf3f52b291cde2146d89c595aba5e8559d4be05ae08cacc3297c586af8eac09cf7e2e26d4e0cd549deb25062fde686e3d1b525ea3667ba99b800c213b61aa384d3648736e63e32a8545f77249b32b029"], 0x1c}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000f80)={0x44, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r12 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r12, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r12, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0x2, 0x4e21, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0xa, 0x0, 0x0, @mcast2}, r13}}, 0x48) 30.480189766s ago: executing program 2 (id=207): socket$inet_udplite(0x2, 0x2, 0x88) socket$inet_udplite(0x2, 0x2, 0x88) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() capget(&(0x7f0000000380)={0x19980330, r0}, &(0x7f00000003c0)={0x380000, 0x8, 0x100, 0x9, 0x8}) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) getpid() r4 = inotify_init1(0x0) r5 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) write$sysctl(r5, &(0x7f0000000580)='1\x00', 0x2) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) write$sysctl(r5, &(0x7f0000000000)='2\x00', 0x2) fcntl$setown(r4, 0x8, 0xffffffffffffffff) fcntl$getownex(r4, 0x10, &(0x7f0000000040)) keyctl$restrict_keyring(0xa, 0x0, &(0x7f0000000300)='asymmetric\x00', &(0x7f0000000440)='ex') 29.4379382s ago: executing program 2 (id=209): mkdir(&(0x7f0000000080)='./file1\x00', 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x24, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0x6, 0x1, 0x0, 0x0, @str='\x14\x00'}, @typed={0x8, 0xa, 0x0, 0x0, @fd}]}, 0x24}}, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) recvmsg$can_raw(r1, &(0x7f00000006c0)={&(0x7f0000000140)=@pppol2tpin6, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000240)=""/70, 0x46}, {&(0x7f00000001c0)=""/54, 0x36}, {&(0x7f0000000300)=""/80, 0x50}, {&(0x7f0000000480)=""/75, 0x4b}, {&(0x7f00000003c0)=""/11, 0xb}, {&(0x7f0000000540)=""/103, 0x67}], 0x6, &(0x7f0000000640)=""/123, 0x7b}, 0x40008041) io_setup(0x3ff, &(0x7f0000000500)=0x0) io_destroy(r2) io_getevents(r2, 0x0, 0x0, 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdir(&(0x7f0000000440)='./file0\x00', 0x0) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x1607010, 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x89901) creat(&(0x7f0000000700)='./file0\x00', 0x30) fchdir(r4) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x501803, 0x0) dup3(r5, r4, 0x0) r6 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r3, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29, r6}, './file0\x00'}) r7 = socket$igmp(0x2, 0x3, 0x2) setsockopt$ARPT_SO_SET_REPLACE(r7, 0x0, 0x60, 0x0, 0x0) 29.05378991s ago: executing program 2 (id=210): mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000100)='./file1\x00') r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000180)={@empty}, 0x14) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) socket$phonet(0x23, 0x2, 0x1) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)={0x28, r4, 0x9, 0x0, 0x0, {0x7}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1d}]}]}, 0x28}}, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000080)="390000001300090468fe0700000000000000ff3f08000000480100100000000019002b000a0001000500000000000072080003000500000000", 0x39}], 0x1) setsockopt$inet6_IPV6_ADDRFORM(r1, 0x29, 0x1, &(0x7f0000000040), 0x4) quotactl_fd$Q_SETINFO(r0, 0xffffffff80000600, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xa}) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) (async) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') (async) chdir(&(0x7f0000000100)='./file1\x00') (async) open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) (async) socket$inet6_udplite(0xa, 0x2, 0x88) (async) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) (async) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000180)={@empty}, 0x14) (async) socket$netlink(0x10, 0x3, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$phonet(0x23, 0x2, 0x1) (async) syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) (async) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)={0x28, r4, 0x9, 0x0, 0x0, {0x7}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1d}]}]}, 0x28}}, 0x0) (async) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000080)="390000001300090468fe0700000000000000ff3f08000000480100100000000019002b000a0001000500000000000072080003000500000000", 0x39}], 0x1) (async) setsockopt$inet6_IPV6_ADDRFORM(r1, 0x29, 0x1, &(0x7f0000000040), 0x4) (async) quotactl_fd$Q_SETINFO(r0, 0xffffffff80000600, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xa}) (async) 13.365952899s ago: executing program 0 (id=244): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000050000000900000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000040000000f00002000"/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$netlink(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff4f00000700000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x20000000000000bb, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bea100000000000007010000f8ffffffb702000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x3, 0x8, 0x8}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x11, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010800000000000000850a600000000000000500000014000500200100000000000000000100000000001c00090008000000", @ANYRES32=r4], 0x4c}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000240)=ANY=[@ANYBLOB="2c00000010008100000000000080000000000000", @ANYRES32=0x0, @ANYBLOB="0a043cbf", @ANYRES64=r0, @ANYBLOB="0a001b"], 0x2c}], 0x1}, 0x0) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x200000c, 0x12, r7, 0x0) mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x5) msync(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x4) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000003a0000000e0001006e657464657673696d0000000f0002006e657464651373696d3000000d0087006c325f64726f7073000000000800870000000000"], 0x4c}}, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x3) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f00000009c0)=ANY=[@ANYRESDEC=r2, @ANYRES32=r11, @ANYRES32], 0x2c}}, 0x0) ioctl$DMA_BUF_SET_NAME_A(r7, 0x40046201, &(0x7f00000000c0)='cpuacct.usage_percpu_user\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1d, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', r11, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$KDGKBMETA(r1, 0x4b62, &(0x7f0000000000)) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) 12.779046976s ago: executing program 4 (id=247): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000000000000b7040000000000008500000033000000850000000700000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r4 = socket(0x2a, 0x2, 0x0) getsockname$packet(r4, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000040)=@newtfilter={0x54, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xfff3}, {}, {0x1c}}, [@filter_kind_options=@f_fw={{0x7}, {0x28, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0x0, 0x6}}, @TCA_FW_MASK={0x8}, @TCA_FW_INDEV={0x14, 0x3, 'macsec0\x00'}]}}]}, 0x54}}, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f00000005c0)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', r5, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r6}, 0x10) sendmsg$netlink(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="140100001400b99f000000000000c04b06"], 0x114}], 0x1}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB="240000000304010200000180000000000000000008000540000000000500010001"], 0x24}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f00000008c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x1c, 0x1, 0x4, 0x201, 0x0, 0x0, {}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x1c}}, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r1}, 0xc) 12.597932615s ago: executing program 4 (id=248): openat$kvm(0xffffffffffffff9c, 0x0, 0x80, 0x0) r0 = syz_open_dev$swradio(&(0x7f0000002440), 0x1, 0x2) ioctl$VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000002680)={0xf0f06e, 0x5}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x202000, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r4) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='befs\x00', 0x80004, 0x0) r5 = inotify_init1(0x0) fcntl$setown(r5, 0x8, 0xffffffffffffffff) fcntl$getownex(r5, 0x10, &(0x7f0000000140)={0x0, 0x0}) r7 = syz_open_procfs(r6, &(0x7f0000000280)='loginuid\x00') openat$autofs(0xffffffffffffff9c, &(0x7f0000000100), 0x280000, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r7, 0xc020662a, &(0x7f0000000200)={0x900, 0x73d, 0x1, 0x0, 0x1, [{0xc156}]}) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000000)=@req3={0xde0, 0x5d, 0x7, 0xa2, 0xd8, 0x1, 0x9}, 0x1c) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x4}, @NFTA_SET_DESC={0x14, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x98}}, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r3, 0x0) ioctl$KVM_CLEAR_DIRTY_LOG(r2, 0xc018aec0, 0x0) socket$xdp(0x2c, 0x3, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='auxv\x00') 12.434823229s ago: executing program 4 (id=249): r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r0, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e23}}, 0x24) sendmmsg(r0, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x106, &(0x7f00000000c0)=[{0x18, 0x110, 0x1, "ec"}], 0x18, 0x7000000}, 0xf401}], 0x1, 0x40) 12.277156517s ago: executing program 4 (id=250): prctl$PR_SET_SECUREBITS(0x1c, 0x2c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) getpid() syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x400000000000001, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) semop(0x0, 0x0, 0x0) fanotify_mark(0xffffffffffffffff, 0x101, 0x20, 0xffffffffffffffff, 0x0) r1 = semget$private(0x0, 0x1, 0x0) semctl$IPC_RMID(r1, 0x0, 0x0) 11.501875814s ago: executing program 4 (id=251): socket$l2tp6(0xa, 0x2, 0x73) io_setup(0x3, 0x0) socket(0x1d, 0x2, 0x6) io_submit(0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000200)=[{&(0x7f0000033a80)=""/102386, 0x18ff2}], 0x2a, 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x80042, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xd) writev(r1, &(0x7f00000000c0), 0x1000000000000195) ioctl$TCFLSH(r1, 0x540b, 0x2) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r3 = openat$mice(0xffffffffffffff9c, 0x0, 0x70080) write$P9_RLCREATE(r3, &(0x7f0000000140)={0x18, 0xf, 0x1, {{0x0, 0x3}, 0x80000000}}, 0x18) fstat(r2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000180)={'syztnl2\x00', &(0x7f0000000440)={'syztnl2\x00', 0x0, 0x2f, 0x1, 0x89, 0xdb2, 0x8, @loopback, @mcast1, 0x20, 0x67, 0x7c1, 0x7ff}}) socket$netlink(0x10, 0x3, 0x9d4e202698c69a7d) socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x3d0, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [0x0, 0xffffff00], [], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {}, 0x0, 0x0, 0x3}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@private2={0xfc, 0x2, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @dev}, [0x0, 0x0, 0x0, 0xff], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x200, 0x230, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x0, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x430) syz_io_uring_setup(0x3291, 0x0, &(0x7f0000000100), 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = syz_open_procfs$pagemap(0x0, &(0x7f0000000000)) lseek(r5, 0x9, 0x1) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r3, 0x810c5701, &(0x7f0000000280)) userfaultfd(0x1) 10.400809079s ago: executing program 4 (id=252): r0 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000440), 0x80000) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x204202, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='oom_adj\x00') sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[], 0x5c}}, 0x0) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000140)='15', 0x2}], 0x8) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001440), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f00000017c0)={'wpan1\x00', 0x0}) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r7, &(0x7f0000001b40)={0x0, 0x0, &(0x7f0000001b00)={&(0x7f0000001a40)=ANY=[@ANYBLOB='@\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r6, @ANYBLOB="24002d8005000100000000000500040000000000080002"], 0x40}}, 0x0) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x3c, r8, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_LINKINFO_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0xff}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5}]}, 0x3c}}, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={0x1, 0x58, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r10 = socket(0x10, 0x803, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x28048094}, 0x20004000) getsockname$packet(r10, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) syz_init_net_socket$netrom(0x6, 0x5, 0x0) sendmsg$nl_route(r11, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r12, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) (fail_nth: 9) sendmsg$ETHTOOL_MSG_PAUSE_SET(r1, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x6c, r8, 0x0, 0x70bd2a, 0x25dfdbfd, {}, [@ETHTOOL_A_PAUSE_AUTONEG={0x5, 0x2, 0x1}, @ETHTOOL_A_PAUSE_HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_PAUSE_RX={0x5, 0x3, 0x1}, @ETHTOOL_A_PAUSE_TX={0x5, 0x4, 0x1}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20040014}, 0x864) r13 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000004000000000000000000850000002300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000380)='sched_switch\x00', r13}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r14 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r14, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) 7.645765241s ago: executing program 0 (id=257): r0 = socket(0x2a, 0x2, 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'tunl0\x00', &(0x7f0000000300)={'tunl0\x00', 0x0, 0x10, 0x20, 0x4, 0x38000, {{0x18, 0x4, 0x0, 0x1, 0x60, 0x64, 0x0, 0x5, 0x29, 0x0, @multicast1, @multicast1, {[@cipso={0x86, 0x4a, 0x3, [{0x7, 0x9, "a312a41cee6653"}, {0x5, 0x5, "52e1d8"}, {0x5, 0x8, "0835c286a40a"}, {0x5, 0x4, "ae3d"}, {0x6, 0x10, "8cdde442a23eeb6be1884b4d04ca"}, {0x2, 0x9, "92d848500ce930"}, {0x5, 0x11, "c5e0fce1d41d6974dbea8414d17a6b"}]}]}}}}}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a1d010000000000000000020000000900010073797a3000000000080002400000000098000000030a01020000000000000000020000000900010073797a30000000000900030073797a32000000006b000300"], 0xfc}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newqdisc={0x4a4, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x3}, {0xffff, 0xffff}, {0x0, 0xd}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x474, 0x2, [@TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x8000, 0xfffffff7, 0x1, 0x80, 0xd, 0x1e, 0x4}}, @TCA_CHOKE_PARMS={0x14}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}, @TCA_CHOKE_MAX_P={0x8}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_MAX_P={0x8}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x0, 0x0, 0x0, 0x0, 0xff}}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}]}}]}, 0x4a4}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000000c0)=@delchain={0x0, 0x65, 0x100, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x10, 0x1}, {0xffff, 0xd}, {0x0, 0x6}}, [@TCA_RATE={0x0, 0x5, {0x2, 0x81}}, @TCA_CHAIN={0x0, 0xb, 0x1}, @TCA_RATE={0x0, 0x5, {0x8, 0x8}}, @TCA_CHAIN={0x0, 0xb, 0x9}, @TCA_RATE={0x0, 0x5, {0x80, 0xac}}]}, 0x24}}, 0x0) r5 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f00000014c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r5, &(0x7f0000000140)={0x50, 0xfffffffffffffff5, r6, {0x7, 0x28, 0x6, 0x9000, 0x4, 0x7, 0x7ff, 0x1}}, 0x50) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000040)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0xa, 0xfff3}, {}, {0xc}}, [@filter_kind_options=@f_fw={{0x7}, {0x1, 0x2, [@TCA_FW_INDEV={0x14, 0x3, 'veth1_macvtap\x00'}]}}]}, 0x44}}, 0x4000) r8 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r8, &(0x7f00000002c0), 0x40000000000009f, 0x0) r9 = creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) write$binfmt_elf32(r9, &(0x7f0000000040)=ANY=[@ANYBLOB="7f454c46000000000000000000000000030006000000000000000000380000000000000000191bda0000200001"], 0x56) close(r9) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r9, 0x80045530, &(0x7f0000000740)=""/165) 7.395492522s ago: executing program 0 (id=258): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x10010, r1, 0x6d7c3000) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000001fc0)={0x0}, &(0x7f0000002000)=0xc) sendmmsg$unix(r0, &(0x7f0000001d40)=[{{0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000000240)="af", 0x1}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000014c0)=[@cred={{0x1c, 0x1, 0x2, {r2}}}, @rights={{0x14, 0x1, 0x1, [r0]}}], 0x38}}], 0x2, 0x801) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000080)={'wg0\x00', 0x0}) getsockname$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000180)={'wg0\x00', 0x0}) sendmsg$WG_CMD_GET_DEVICE(r3, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000002040)={0x19fc, r4, 0x10, 0x70bd2d, 0x25dfdbfc, {}, [@WGDEVICE_A_IFINDEX={0x8, 0x1, r5}, @WGDEVICE_A_PEERS={0xc9c, 0x8, 0x0, 0x1, [{0x50, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x4}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "b692da9235a38b3e7bb144795287d7e19b49332e98e21ce174569059dcd8447a"}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}]}, {0x698, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x3f8, 0x9, 0x0, 0x1, [{0xac, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x3}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x1}}]}, {0xa0, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0xa}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}]}, {0xf4, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x39}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}]}, {0xa0, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}]}, {0x4c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x30}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x3}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x2d}}, {0x5, 0x3, 0x1}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x2}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x3}}]}]}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x7}, @WGPEER_A_ALLOWEDIPS={0x2c, 0x9, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x1f}}, {0x5, 0x3, 0x2}}]}]}, @WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x8d}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "1cf021acf5734ef685b7b9143195bfab082b6ffa4fa497cccc4ee4f99bed5882"}, @WGPEER_A_ALLOWEDIPS={0x1f8, 0x9, 0x0, 0x1, [{0x4c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x1}}]}, {0x88, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @empty}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x2}}]}, {0x94, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x17}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x40}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x1}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e24, 0x7, @dev={0xfe, 0x80, '\x00', 0x3a}, 0x1200}}]}, {0x280, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "fb92a4aece472044aee1931d60b49fe47cea301e3ae79b23ac3e6480d409c69f"}, @WGPEER_A_ALLOWEDIPS={0x1e8, 0x9, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x3}}]}, {0x58, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5, 0x3, 0x3}}]}, {0x130, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x32}}, {0x5, 0x3, 0x2}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}]}]}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}, 0x9}}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x3ff}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "ababf863ab9f08694ff327125f2a417b4c741000abee0568fd429e505f0eda04"}]}, {0x2a0, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x2}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e23, @empty}}, @WGPEER_A_ALLOWEDIPS={0x250, 0x9, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x1}}]}, {0x70, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x1d}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}]}, {0x88, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5, 0x3, 0x1}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x36}}, {0x5, 0x3, 0x2}}]}, {0x94, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x1d}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x30}}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5, 0x3, 0xe}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @rand_addr=0x64010102}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @private=0xa010102}}, @WGPEER_A_PROTOCOL_VERSION={0x8}]}, {0xc, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}]}, {0x84, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @remote}}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0x6, @ipv4={'\x00', '\xff\xff', @empty}, 0x1}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "542d0c7c239538b418b9e381d3f2d94a4589ad781e61af30333bb556a5efdef7"}, @WGPEER_A_ALLOWEDIPS={0x4}]}]}, @WGDEVICE_A_PEERS={0xcf4, 0x8, 0x0, 0x1, [{0x104, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @remote}}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x1000}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e23, 0x8, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x3}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "ec1e87594c1db9ac509dad72f850fd034cd003ad2a46356a484d2707b7206439"}, @WGPEER_A_ALLOWEDIPS={0x6c, 0x9, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}]}, {0x4c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x23}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5}}]}]}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x2}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x1}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "afab880b49d1b71994185b56c0329848d1d35744017ddb9de0454ead7f5d0587"}]}, {0x3c, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @private=0xa010100}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "a12be8afaebe2e62b7a75a881beef24e9d6d3763e76d3fff3562bfe97dcf896c"}]}, {0x28, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "d10999bd8d93fa6d50cb0923b572d4a2f45eb145dde0042af5bdf8a645a4afa0"}]}, {0x194, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x643}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e21, @broadcast}}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e23, 0xaa, @empty, 0xa9}}, @WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0xffff}, @WGPEER_A_ALLOWEDIPS={0xe0, 0x9, 0x0, 0x1, [{0xdc, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}]}, {0x51c, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x20c, 0x9, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x1}}]}, {0x34, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}]}, {0xe8, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x24}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x14}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x2}}]}, {0xc4, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_ALLOWEDIPS={0x220, 0x9, 0x0, 0x1, [{0x124, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x44}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}]}, {0xb8, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x2}}]}]}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "320c93bcb791136ecf4594d1778264e8a6abab5e33139b00ce4f16ef78f20af2"}, @WGPEER_A_ALLOWEDIPS={0x38, 0x9, 0x0, 0x1, [{0x34, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x1f}}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "006d182f74fbdeb59e6e32506c03dd5f75bd08ac76e807567d5dceec3d8e6772"}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "516a4a0ca0af7742727ebb77e925756462ce58b8548a492f08445bee66bb4ea0"}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}]}, {0x5c, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e21, @multicast2}}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e22, 0x1, @loopback, 0x6}}]}, {0x37c, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x6}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e24, @multicast1}}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ALLOWEDIPS={0x2b8, 0x9, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5, 0x3, 0x1}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x2}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5, 0x3, 0x3}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x42}}, {0x5, 0x3, 0x2}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x2f}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @remote}}, {0x5, 0x3, 0x1}}]}, {0xa0, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x2}}]}, {0x70, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x3e}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}]}, {0x94, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x2}}]}]}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "3b3cdf557b21d33e9f19491f912ae2f1d52e69c75583f5935b1e275ce124a145"}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "9d11b64fc5576fff5a7ae13a9c61e5d3fd1bd92ccfa37f0a3d154ba5233ae6dd"}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x2}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e23, 0x2, @ipv4={'\x00', '\xff\xff', @remote}, 0x80000000}}]}, {0x100, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @broadcast}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x7}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "2e68d1d0bd393d43f430cc809a47dd6d19aa0ba5e3a906e9b92ec9f45fb6291a"}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e22, 0x8, @private2, 0x3ff}}, @WGPEER_A_ALLOWEDIPS={0x68, 0x9, 0x0, 0x1, [{0x64, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x3}}]}]}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x8000}]}]}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r6}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0xfffeffff}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r7}, @WGDEVICE_A_IFINDEX={0x8}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e23}]}, 0x19fc}, 0x1, 0x0, 0x0, 0x14}, 0x40000c0) 7.188880378s ago: executing program 0 (id=259): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)={0x28, 0x3, 0x1, 0x201, 0x0, 0x0, {0xa, 0x0, 0x1001}, [@CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x3}, @CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x3, 0x1, 0x89}]}]}, 0x28}}, 0x24040060) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xd, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="720ac4ff000000007110ab00000000009565070000000000"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000040)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000180), 0x12) syz_io_uring_setup(0x4172, &(0x7f0000000780)={0x0, 0x0, 0x10100}, &(0x7f0000000080), &(0x7f0000000240)) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000fa0000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r6}, 0x98) setsockopt$inet6_int(r4, 0x29, 0x4, &(0x7f0000000180), 0x4) listen(r4, 0x0) ioctl$FIONCLEX(r4, 0x5450) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r7, 0x84, 0x71, &(0x7f0000000140), 0x8) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r7, 0x84, 0x7, &(0x7f0000000000)={0xabb}, 0x4) bind$inet6(r7, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r7, &(0x7f0000847fff)="06", 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) syz_emit_ethernet(0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14000000100001000000deff000000000000000a20000000000a01030000000000000000010000000900010073797a300000000040000000030a01080000000000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a30000000007c000000060a010400000000000000000100000008000b40000000000900010073797a3000000000540004802c0001800e000100696d6d6564696174650000001800028008000140000000010c000280050001004c00000024000180090001006d65746100000000140002800800014000000012080002"], 0x104}}, 0x0) r9 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000001c0)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x6, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'syzkaller0\x00'}}]}, 0x38}}, 0x0) 6.650117511s ago: executing program 3 (id=260): prctl$PR_SET_SECUREBITS(0x1c, 0x2c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) getpid() syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x400000000000001, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) semop(0x0, 0x0, 0x0) fanotify_mark(0xffffffffffffffff, 0x101, 0x20, 0xffffffffffffffff, 0x0) r1 = semget$private(0x0, 0x1, 0x0) semctl$IPC_RMID(r1, 0x0, 0x0) 6.505161567s ago: executing program 0 (id=261): ioctl$SNDRV_PCM_IOCTL_RESET(0xffffffffffffffff, 0x4141, 0x0) r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x800, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000980)='sys_exit\x00', r2}, 0x10) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r3, &(0x7f0000000100)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x902}, 0xe) write$binfmt_script(r3, &(0x7f0000000200), 0xfffffdef) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4004, 0x0, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = dup(r4) gettid() r6 = syz_open_dev$sg(&(0x7f0000000200), 0x8, 0x80000) sendmsg$unix(r5, &(0x7f00000022c0)={0x0, 0x0, &(0x7f0000002100)=[{&(0x7f0000000b80)='@', 0x1}], 0x1, &(0x7f0000002240)=[@rights={{0x14, 0x1, 0x1, [r6]}}, @rights={{0x10}}], 0x28, 0x4000800}, 0x20048000) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000080)={0x0, @in={{0x2, 0x4e20, @loopback}}, 0x1000, 0xfffc, 0x0, 0x10001, 0x4, 0x1, 0x1}, &(0x7f0000000140)=0x9c) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3000000001010101000000000000000000000000080003400000040014001980040002"], 0x30}}, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r5, 0x84, 0xf, &(0x7f0000000380)={r7, @in={{0x2, 0x4e24, @broadcast}}, 0x5, 0x81, 0x6, 0x8001, 0x400}, &(0x7f0000000180)=0x98) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r5, 0x84, 0x22, &(0x7f0000000240)={0xcb, 0x8, 0x100, 0x6, r9}, &(0x7f00000001c0)=0x10) ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000040)=0x10000007) close_range(r0, 0xffffffffffffffff, 0x0) 6.300225853s ago: executing program 3 (id=262): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a3200000000140000001100"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0xf}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x67) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x10) sendto$inet(r1, 0x0, 0x0, 0x20000800, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) syz_emit_ethernet(0x36, &(0x7f00000000c0)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0) 6.05013921s ago: executing program 0 (id=263): close(0x3) bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_CROPCAP(r0, 0xc02c563a, &(0x7f0000000200)) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000c80), 0xffffffffffffffff) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000480)=ANY=[@ANYBLOB="1820074e", @ANYRES16=r5, @ANYBLOB="010300000000000000"], 0x18}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) write$cgroup_devices(r2, &(0x7f0000000440)=ANY=[@ANYBLOB="1e0308003c5ca601288763"], 0xffdd) write$cgroup_devices(r1, &(0x7f0000000440)=ANY=[], 0xffdd) 5.080025091s ago: executing program 3 (id=264): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000300)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) 4.325420594s ago: executing program 3 (id=265): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x3000000, 0x18, 0x18, 0x2, [@func_proto={0x0, 0x0, 0x0, 0xd, 0x2}, @func_proto]}}, 0x0, 0x32, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) 3.928180713s ago: executing program 1 (id=267): sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, 0x0, 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x12, r0, 0x0) r1 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_FLUSH(r1, 0x29, 0xd4, &(0x7f0000000180)=0x2, 0x4) 3.687443894s ago: executing program 3 (id=268): syz_usb_connect(0x0, 0x36, 0x0, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000005c0), 0x1, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) poll(&(0x7f0000000040)=[{r0, 0xd088}], 0x1, 0x400) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(0xffffffffffffffff, 0x114, 0xa, &(0x7f00000001c0)={0x2, "b706"}, 0x3) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000000), &(0x7f0000000040)=0x14) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) mbind(&(0x7f0000bdf000/0x4000)=nil, 0x4000, 0x1, &(0x7f0000000040)=0x1, 0x2, 0x0) mbind(&(0x7f0000bde000/0x2000)=nil, 0x2000, 0x4001, &(0x7f0000000080)=0x85, 0x7, 0x0) madvise(&(0x7f0000bdd000/0xc000)=nil, 0xc000, 0x17) sendmsg$NFT_BATCH(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x9}, @NFTA_CT_DIRECTION={0x5}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xc8}}, 0x0) 3.621862955s ago: executing program 1 (id=269): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00'}) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)=ANY=[@ANYBLOB="84010000100013070000000800000000fe8000000000000000000000000000bbac1e000100000000000000a5b5408539b055010000000000000000000000000014b997605a91389c04a8b86f9690416340bc0cbf66096740d966f6d88b5d668fbbd33db75edf51", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa00000000330000002001000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000048000400656362286369706865725f6e756c6c29000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004c0014007368613100"/316], 0x184}}, 0x0) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000080)={0x19, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f00000000c0)={0x28, 0x7, r4, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000}) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, 0x0) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r3, 0x3ba0, &(0x7f00000001c0)={0x48, 0x5, r4, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r3, 0x3ba0, &(0x7f0000000340)={0x48, 0x7, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1dab77}) socket$inet6_dccp(0xa, 0x6, 0x0) socket$caif_stream(0x25, 0x1, 0x0) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r6, 0x0) pselect6(0x40, &(0x7f0000005a00)={0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0x0, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000100)={'#! ', '', [{0x20, '\'&\x11)'}, {0x20, '('}]}, 0xb) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x7, 0x10012, r7, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r7, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$sock_int(r1, 0x1, 0x21, &(0x7f0000000040), 0x4) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x3}}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000000)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0xff, 0x1f}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}], 0x1}) r9 = creat(&(0x7f0000000140)='./bus\x00', 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000080)={r9}, 0x8) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) 3.134541285s ago: executing program 1 (id=270): connect$tipc(0xffffffffffffffff, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) r0 = socket$inet(0x2, 0x2, 0x1) syz_clone(0x28380080, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) syz_clone(0x50900000, 0x0, 0x0, 0x0, 0x0, 0x0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000009006000000000000000000000a44000000090a0000000000fa82a3fa211411fa0008000a40000000000900020073797a31000000000900010073797a3000000000"], 0x6c}}, 0x4000) epoll_create1(0x0) bind$unix(0xffffffffffffffff, &(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x6e) dup2(0xffffffffffffffff, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000900)=ANY=[@ANYBLOB], 0x38}, 0x1, 0x300, 0x0, 0xe8c0}, 0x20000000) socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000380)={0x2, 0x0, @multicast2}, 0x10) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040e0b080d04"], 0xd) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r4, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}], {0x14}}, 0x98}}, 0x0) sendmmsg$inet(r0, &(0x7f0000000540)=[{{0x0, 0x2, &(0x7f0000000000)=[{&(0x7f00000000c0)="08001497733f5d3e", 0x6c6d}], 0x5}}, {{0x0, 0x0, &(0x7f0000000440), 0x56}, 0x3000000}], 0x2, 0x2004000) 2.621643587s ago: executing program 1 (id=271): prctl$PR_SET_SECUREBITS(0x1c, 0x2c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) getpid() syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x400000000000001, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) semop(0x0, 0x0, 0x0) fanotify_mark(0xffffffffffffffff, 0x101, 0x20, 0xffffffffffffffff, 0x0) r1 = semget$private(0x0, 0x1, 0x0) semctl$IPC_RMID(r1, 0x0, 0x0) 1.97431988s ago: executing program 1 (id=272): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) writev(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) syz_emit_ethernet(0x6a, &(0x7f0000000340)=ANY=[@ANYBLOB="aaaaaaaaaaaac8e3906777428100000086dd600cbb0500302f00fc010000000000000000000000000000fe8000000000000000000000000000aa"], 0x0) shutdown(r0, 0x1) recvmmsg(r0, &(0x7f0000003e40)=[{{0x0, 0x0, &(0x7f0000003780)=[{&(0x7f0000003740)=""/4, 0x4}], 0x1}}, {{0x0, 0x0, &(0x7f0000003bc0)=[{&(0x7f0000003a00)=""/190, 0xbe}], 0x1}}], 0x2, 0x40000121, 0x0) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x41, 0x0) write$nbd(r2, &(0x7f0000000240)={0x1000000, 0x0, 0x0, 0x0, 0x200000, "82b0cfc4337965941538be02000000000000000000007400a391793ba7f40000000000fdf700"/48}, 0x40) ioctl$TUNSETOFFLOAD(r2, 0x400454d0, 0x2) 1.156742172s ago: executing program 3 (id=273): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="12000000290000000400000002"], 0x48) socket$packet(0x11, 0x3, 0x300) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x2, &(0x7f00000001c0)=0x7ff, 0x4) rt_sigprocmask(0x0, &(0x7f0000000080)={[0xffffffff]}, 0x0, 0x8) r4 = getpid() r5 = gettid() mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) rt_tgsigqueueinfo(r4, r5, 0x5, &(0x7f00000000c0)={0x0, 0x0, 0xfffffffb}) r6 = signalfd4(0xffffffffffffffff, &(0x7f0000000300)={[0xffffffffffffffff]}, 0x8, 0x0) read$FUSE(r6, &(0x7f0000001a00)={0x2020}, 0x2020) syz_emit_ethernet(0x3e, &(0x7f00000002c0)={@broadcast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x8, 0x3a, 0x0, @initdev={0xfe, 0x4, '\x00', 0x0, 0x0}, @mcast2, {[], @echo_request}}}}}, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r3, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd0d0c2ac, 0x1, 0x0, 0x0) splice(r3, 0x0, r2, 0x0, 0x406f413, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000004c0)={{r1}, &(0x7f0000000440), &(0x7f0000000480)=r0}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000780)={r1, &(0x7f0000000640), 0x0}, 0x20) 0s ago: executing program 1 (id=274): bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x4000000400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_int(r1, 0x1, 0xf, 0x0, &(0x7f00000001c0)) r2 = socket$unix(0x1, 0x2, 0x0) bind$unix(r2, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r3 = socket$unix(0x1, 0x2, 0x0) signalfd4(r2, &(0x7f00000000c0)={[0x1]}, 0x8, 0x800) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) connect$unix(r3, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) writev(r3, &(0x7f0000000040)=[{&(0x7f0000000000)="d2", 0x1}], 0x1) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x23, &(0x7f0000000080)=0x6, 0x26) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f0000000200)=0x41d1, 0x4) recvmmsg(r2, &(0x7f0000005100), 0x0, 0x1000000000be, 0x0) kernel console output (not intermixed with test programs): IOS Google 08/06/2024 [ 128.660058][ T5537] Call Trace: [ 128.663353][ T5537] [ 128.666318][ T5537] dump_stack_lvl+0x241/0x360 [ 128.671025][ T5537] ? __pfx_dump_stack_lvl+0x10/0x10 [ 128.676243][ T5537] ? __pfx__printk+0x10/0x10 [ 128.680884][ T5537] ? __pfx_lock_release+0x10/0x10 [ 128.685941][ T5537] should_fail_ex+0x3b0/0x4e0 [ 128.690644][ T5537] strncpy_from_user+0x36/0x2e0 [ 128.695505][ T5537] ? kmem_cache_alloc_noprof+0x185/0x2a0 [ 128.701164][ T5537] getname_flags+0xf1/0x540 [ 128.705682][ T5537] user_path_at+0x24/0x60 [ 128.710050][ T5537] __se_sys_mount+0x297/0x3c0 [ 128.714754][ T5537] ? __pfx___se_sys_mount+0x10/0x10 [ 128.719981][ T5537] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 128.726355][ T5537] ? __x64_sys_mount+0x20/0xc0 [ 128.731141][ T5537] do_syscall_64+0xf3/0x230 [ 128.735666][ T5537] ? clear_bhb_loop+0x35/0x90 [ 128.740362][ T5537] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.746271][ T5537] RIP: 0033:0x7f72f0d7def9 [ 128.750709][ T5537] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 128.770330][ T5537] RSP: 002b:00007f72f1bde038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 128.778759][ T5537] RAX: ffffffffffffffda RBX: 00007f72f0f35f80 RCX: 00007f72f0d7def9 [ 128.786742][ T5537] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 128.794721][ T5537] RBP: 00007f72f1bde090 R08: 0000000020000400 R09: 0000000000000000 [ 128.802707][ T5537] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 128.810686][ T5537] R13: 0000000000000000 R14: 00007f72f0f35f80 R15: 00007ffd4be7d678 [ 128.818689][ T5537] [ 130.829216][ T5229] Bluetooth: hci2: unexpected subevent 0x1a length: 10 > 6 [ 132.839440][ T5549] autofs: Unknown parameter 'no98E' [ 132.927851][ T5229] Bluetooth: hci2: command tx timeout [ 133.082308][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.089345][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.711162][ T52] team0 (unregistering): Port device team_slave_1 removed [ 135.014180][ T52] team0 (unregistering): Port device team_slave_0 removed [ 139.048503][ T5547] netlink: 40 bytes leftover after parsing attributes in process `syz.2.55'. [ 140.218263][ T5423] bridge0: port 1(bridge_slave_0) entered blocking state [ 140.226681][ T5423] bridge0: port 1(bridge_slave_0) entered disabled state [ 140.391451][ T5423] bridge_slave_0: entered allmulticast mode [ 140.425654][ T5423] bridge_slave_0: entered promiscuous mode [ 140.541301][ T5438] chnl_net:caif_netlink_parms(): no params data found [ 141.277655][ T5423] bridge0: port 2(bridge_slave_1) entered blocking state [ 141.285921][ T5423] bridge0: port 2(bridge_slave_1) entered disabled state [ 141.296341][ T5423] bridge_slave_1: entered allmulticast mode [ 141.338362][ T5423] bridge_slave_1: entered promiscuous mode [ 142.868187][ T5269] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 143.198049][ T5269] usb 3-1: Using ep0 maxpacket: 16 [ 143.365052][ T5269] usb 3-1: New USB device found, idVendor=05ac, idProduct=0231, bcdDevice=1d.76 [ 143.550727][ T5269] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.760314][ T5269] usb 3-1: Product: syz [ 143.813485][ T5269] usb 3-1: Manufacturer: syz [ 143.884691][ T5269] usb 3-1: SerialNumber: syz [ 144.023992][ T5423] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 144.079842][ T5269] usb 3-1: config 0 descriptor?? [ 144.152962][ T5227] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 144.188189][ T5227] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 144.213294][ T5227] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 144.233524][ T5227] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 144.244432][ T5227] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 144.247358][ T5269] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input5 [ 144.285966][ T5227] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 145.526988][ T5423] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 145.530404][ T4655] bcm5974 3-1:0.0: could not read from device [ 145.623781][ T4655] bcm5974 3-1:0.0: could not read from device [ 145.723609][ T5269] usb 3-1: USB disconnect, device number 5 [ 145.787552][ T4655] bcm5974 3-1:0.0: could not read from device [ 145.998734][ T4655] bcm5974 3-1:0.0: could not read from device [ 146.532261][ T5576] FAULT_INJECTION: forcing a failure. [ 146.532261][ T5576] name failslab, interval 1, probability 0, space 0, times 1 [ 146.599362][ T5229] Bluetooth: hci6: command tx timeout [ 146.876001][ T5576] CPU: 0 UID: 0 PID: 5576 Comm: syz.2.58 Not tainted 6.11.0-syzkaller-07262-g839c4f596f89 #0 [ 146.886220][ T5576] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 146.896288][ T5576] Call Trace: [ 146.899683][ T5576] [ 146.902651][ T5576] dump_stack_lvl+0x241/0x360 [ 146.907355][ T5576] ? __pfx_dump_stack_lvl+0x10/0x10 [ 146.912571][ T5576] ? __pfx__printk+0x10/0x10 [ 146.917179][ T5576] ? kmem_cache_alloc_node_noprof+0x49/0x320 [ 146.923442][ T5576] ? __pfx___might_resched+0x10/0x10 [ 146.928774][ T5576] ? __lock_acquire+0x1384/0x2050 [ 146.934021][ T5576] should_fail_ex+0x3b0/0x4e0 [ 146.938743][ T5576] should_failslab+0xac/0x100 [ 146.943467][ T5576] ? __alloc_skb+0x1c3/0x440 [ 146.948115][ T5576] kmem_cache_alloc_node_noprof+0x71/0x320 [ 146.953985][ T5576] __alloc_skb+0x1c3/0x440 [ 146.958425][ T5576] ? mark_lock+0x9a/0x360 [ 146.962907][ T5576] ? __pfx___alloc_skb+0x10/0x10 [ 146.967904][ T5576] alloc_skb_with_frags+0xc3/0x820 [ 146.973074][ T5576] sock_alloc_send_pskb+0x91a/0xa60 [ 146.978319][ T5576] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 146.984060][ T5576] ? finish_task_switch+0x2cf/0x870 [ 146.989296][ T5576] tun_get_user+0xcf3/0x47e0 [ 146.993943][ T5576] ? __lock_acquire+0x1384/0x2050 [ 146.999014][ T5576] ? __pfx_tun_get_user+0x10/0x10 [ 147.004167][ T5576] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 147.009650][ T5576] ? tun_get+0x1e/0x2f0 [ 147.013904][ T5576] ? __pfx_lock_release+0x10/0x10 [ 147.018976][ T5576] ? tun_get+0x1e/0x2f0 [ 147.023180][ T5576] ? tun_get+0x27d/0x2f0 [ 147.027471][ T5576] tun_chr_write_iter+0x10d/0x1f0 [ 147.032541][ T5576] vfs_write+0xa6d/0xc90 [ 147.036839][ T5576] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 147.042422][ T5576] ? __pfx_vfs_write+0x10/0x10 [ 147.047302][ T5576] ? __fdget_pos+0x19a/0x320 [ 147.051908][ T5576] ksys_write+0x1a0/0x2c0 [ 147.056358][ T5576] ? __pfx_ksys_write+0x10/0x10 [ 147.061224][ T5576] ? do_syscall_64+0x100/0x230 [ 147.066005][ T5576] ? do_syscall_64+0xb6/0x230 [ 147.070709][ T5576] do_syscall_64+0xf3/0x230 [ 147.075246][ T5576] ? clear_bhb_loop+0x35/0x90 [ 147.079951][ T5576] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 147.085856][ T5576] RIP: 0033:0x7f72f0d7c9df [ 147.090293][ T5576] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 c9 8d 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 1c 8e 02 00 48 [ 147.109935][ T5576] RSP: 002b:00007f72f1bbd000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 147.118373][ T5576] RAX: ffffffffffffffda RBX: 00007f72f0f36058 RCX: 00007f72f0d7c9df [ 147.126413][ T5576] RDX: 000000000000fdef RSI: 0000000020000340 RDI: 00000000000000c8 [ 147.134395][ T5576] RBP: 00007f72f1bbd090 R08: 0000000000000000 R09: 0000000000000000 [ 147.142462][ T5576] R10: 000000000000fdef R11: 0000000000000293 R12: 0000000000000001 [ 147.150445][ T5576] R13: 0000000000000001 R14: 00007f72f0f36058 R15: 00007ffd4be7d678 [ 147.158478][ T5576] [ 148.557050][ T5423] team0: Port device team_slave_0 added [ 148.678768][ T5229] Bluetooth: hci6: command tx timeout [ 149.106807][ T5423] team0: Port device team_slave_1 added [ 149.446292][ T5438] bridge0: port 1(bridge_slave_0) entered blocking state [ 149.522249][ T5438] bridge0: port 1(bridge_slave_0) entered disabled state [ 149.570896][ T5438] bridge_slave_0: entered allmulticast mode [ 149.645067][ T5438] bridge_slave_0: entered promiscuous mode [ 149.970205][ T5494] chnl_net:caif_netlink_parms(): no params data found [ 150.428412][ T5438] bridge0: port 2(bridge_slave_1) entered blocking state [ 150.562625][ T5438] bridge0: port 2(bridge_slave_1) entered disabled state [ 150.641404][ T5438] bridge_slave_1: entered allmulticast mode [ 150.722690][ T5438] bridge_slave_1: entered promiscuous mode [ 150.757967][ T5229] Bluetooth: hci6: command tx timeout [ 152.838080][ T5229] Bluetooth: hci6: command tx timeout [ 153.791352][ T5438] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 157.248277][ T52] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.584530][ T52] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.567650][ T52] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.949410][ T5227] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 161.971299][ T5227] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 161.987115][ T5227] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 162.008485][ T5227] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 162.021502][ T5227] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 162.042222][ T5227] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 162.940550][ T5494] bridge0: port 1(bridge_slave_0) entered blocking state [ 163.059291][ T5494] bridge0: port 1(bridge_slave_0) entered disabled state [ 163.162710][ T5494] bridge_slave_0: entered allmulticast mode [ 163.324970][ T5494] bridge_slave_0: entered promiscuous mode [ 163.405709][ T5227] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 163.439362][ T5227] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 163.442650][ T5494] bridge0: port 2(bridge_slave_1) entered blocking state [ 163.516103][ T5227] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 163.528614][ T5494] bridge0: port 2(bridge_slave_1) entered disabled state [ 163.560138][ T5227] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 163.720168][ T5494] bridge_slave_1: entered allmulticast mode [ 163.766336][ T5227] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 163.816950][ T5227] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 163.925819][ T5494] bridge_slave_1: entered promiscuous mode [ 164.208909][ T5229] Bluetooth: hci0: command tx timeout [ 164.324429][ T52] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.890039][ T5229] Bluetooth: hci1: command tx timeout [ 166.207516][ T5494] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 166.278109][ T5229] Bluetooth: hci0: command tx timeout [ 166.433491][ T5494] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 167.967918][ T5229] Bluetooth: hci1: command tx timeout [ 168.358047][ T5229] Bluetooth: hci0: command tx timeout [ 168.881396][ T5494] team0: Port device team_slave_0 added [ 170.047855][ T5229] Bluetooth: hci1: command tx timeout [ 170.274037][ T5494] team0: Port device team_slave_1 added [ 170.438097][ T5229] Bluetooth: hci0: command tx timeout [ 172.117917][ T5229] Bluetooth: hci1: command tx timeout [ 174.959950][ T5630] Bluetooth: MGMT ver 1.23 [ 175.168436][ T52] bridge_slave_1: left allmulticast mode [ 175.251613][ T52] bridge_slave_1: left promiscuous mode [ 184.037448][ T52] bridge0: port 2(bridge_slave_1) entered disabled state [ 184.538665][ T52] bridge_slave_0: left allmulticast mode [ 184.606928][ T52] bridge_slave_0: left promiscuous mode [ 184.756115][ T52] bridge0: port 1(bridge_slave_0) entered disabled state [ 186.657671][ T5227] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 186.673907][ T5227] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 186.711624][ T5227] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 186.778796][ T5227] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 186.815828][ T5227] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 186.832839][ T5227] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 188.719456][ T5227] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 188.734133][ T5227] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 188.779966][ T5227] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 188.792923][ T5227] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 188.810323][ T5227] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 188.829354][ T5227] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 188.924991][ T5227] Bluetooth: hci4: command tx timeout [ 188.935118][ T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 189.050108][ T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 189.072659][ T52] bond0 (unregistering): Released all slaves [ 190.998035][ T5229] Bluetooth: hci5: command tx timeout [ 191.003842][ T5227] Bluetooth: hci4: command tx timeout [ 192.793343][ T5568] chnl_net:caif_netlink_parms(): no params data found [ 193.052718][ T52] hsr_slave_0: left promiscuous mode [ 193.068058][ T52] hsr_slave_1: left promiscuous mode [ 193.076604][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 193.095160][ T52] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 193.104830][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 193.122073][ T52] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 193.166377][ T52] veth1_macvtap: left promiscuous mode [ 193.172234][ T52] veth0_macvtap: left promiscuous mode [ 193.187605][ T52] veth1_vlan: left promiscuous mode [ 193.193912][ T52] veth0_vlan: left promiscuous mode [ 193.238595][ T5229] Bluetooth: hci5: command tx timeout [ 193.244070][ T5229] Bluetooth: hci4: command tx timeout [ 193.675263][ T52] team0 (unregistering): Port device team_slave_1 removed [ 193.720136][ T52] team0 (unregistering): Port device team_slave_0 removed [ 194.372818][ T5609] chnl_net:caif_netlink_parms(): no params data found [ 194.486972][ T5568] bridge0: port 1(bridge_slave_0) entered blocking state [ 194.495819][ T5568] bridge0: port 1(bridge_slave_0) entered disabled state [ 194.505297][ T5568] bridge_slave_0: entered allmulticast mode [ 194.513681][ T5568] bridge_slave_0: entered promiscuous mode [ 194.525055][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.531560][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.566952][ T5605] chnl_net:caif_netlink_parms(): no params data found [ 194.590189][ T5568] bridge0: port 2(bridge_slave_1) entered blocking state [ 194.597405][ T5568] bridge0: port 2(bridge_slave_1) entered disabled state [ 194.605496][ T5568] bridge_slave_1: entered allmulticast mode [ 194.613110][ T5568] bridge_slave_1: entered promiscuous mode [ 194.766438][ T5568] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 194.897584][ T5568] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 195.010214][ T5605] bridge0: port 1(bridge_slave_0) entered blocking state [ 195.017352][ T5605] bridge0: port 1(bridge_slave_0) entered disabled state [ 195.024757][ T5605] bridge_slave_0: entered allmulticast mode [ 195.032149][ T5605] bridge_slave_0: entered promiscuous mode [ 195.059296][ T5568] team0: Port device team_slave_0 added [ 195.069355][ T5568] team0: Port device team_slave_1 added [ 195.075669][ T5609] bridge0: port 1(bridge_slave_0) entered blocking state [ 195.091914][ T5609] bridge0: port 1(bridge_slave_0) entered disabled state [ 195.099809][ T5609] bridge_slave_0: entered allmulticast mode [ 195.106618][ T5609] bridge_slave_0: entered promiscuous mode [ 195.115027][ T5636] chnl_net:caif_netlink_parms(): no params data found [ 195.136519][ T5605] bridge0: port 2(bridge_slave_1) entered blocking state [ 195.145258][ T5605] bridge0: port 2(bridge_slave_1) entered disabled state [ 195.158565][ T5605] bridge_slave_1: entered allmulticast mode [ 195.165540][ T5605] bridge_slave_1: entered promiscuous mode [ 195.203883][ T5609] bridge0: port 2(bridge_slave_1) entered blocking state [ 195.211457][ T5609] bridge0: port 2(bridge_slave_1) entered disabled state [ 195.219429][ T5609] bridge_slave_1: entered allmulticast mode [ 195.226523][ T5609] bridge_slave_1: entered promiscuous mode [ 195.268526][ T5605] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 195.286869][ T5568] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 195.294656][ T5568] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 195.321841][ T5568] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 195.321849][ T5227] Bluetooth: hci5: command tx timeout [ 195.334368][ T5229] Bluetooth: hci4: command tx timeout [ 195.340667][ T5568] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 195.351047][ T5568] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 195.377045][ T5568] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 195.407180][ T5634] chnl_net:caif_netlink_parms(): no params data found [ 195.425063][ T5605] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 195.465119][ T5609] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 195.505209][ T5605] team0: Port device team_slave_0 added [ 195.520389][ T5609] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 195.577057][ T5605] team0: Port device team_slave_1 added [ 195.621304][ T5609] team0: Port device team_slave_0 added [ 195.681451][ T52] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.722418][ T5568] hsr_slave_0: entered promiscuous mode [ 195.729916][ T5568] hsr_slave_1: entered promiscuous mode [ 195.754663][ T5609] team0: Port device team_slave_1 added [ 195.791533][ T5636] bridge0: port 1(bridge_slave_0) entered blocking state [ 195.800363][ T5636] bridge0: port 1(bridge_slave_0) entered disabled state [ 195.808872][ T5636] bridge_slave_0: entered allmulticast mode [ 195.816271][ T5636] bridge_slave_0: entered promiscuous mode [ 195.825235][ T5636] bridge0: port 2(bridge_slave_1) entered blocking state [ 195.832668][ T5636] bridge0: port 2(bridge_slave_1) entered disabled state [ 195.840876][ T5636] bridge_slave_1: entered allmulticast mode [ 195.848313][ T5636] bridge_slave_1: entered promiscuous mode [ 195.855263][ T5605] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 195.862793][ T5605] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 195.889225][ T5605] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 195.918622][ T52] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.969263][ T5634] bridge0: port 1(bridge_slave_0) entered blocking state [ 195.976419][ T5634] bridge0: port 1(bridge_slave_0) entered disabled state [ 195.999584][ T5634] bridge_slave_0: entered allmulticast mode [ 196.018200][ T5634] bridge_slave_0: entered promiscuous mode [ 196.038608][ T5634] bridge0: port 2(bridge_slave_1) entered blocking state [ 196.045847][ T5634] bridge0: port 2(bridge_slave_1) entered disabled state [ 196.066482][ T5634] bridge_slave_1: entered allmulticast mode [ 196.078368][ T5634] bridge_slave_1: entered promiscuous mode [ 196.141533][ T5605] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 196.150130][ T5605] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 196.177610][ T5605] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 196.240389][ T5609] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 196.247664][ T5609] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 196.287223][ T5609] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 196.309967][ T5609] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 196.328146][ T5609] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 196.372035][ T5609] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 196.400497][ T52] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.429294][ T5636] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 196.489163][ T5636] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 196.512250][ T5634] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 196.568151][ T52] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.599667][ T5636] team0: Port device team_slave_0 added [ 196.612684][ T5636] team0: Port device team_slave_1 added [ 196.621426][ T5634] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 196.700792][ T5634] team0: Port device team_slave_0 added [ 196.734779][ T5609] hsr_slave_0: entered promiscuous mode [ 196.745703][ T5609] hsr_slave_1: entered promiscuous mode [ 196.752387][ T5609] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 196.760620][ T5609] Cannot create hsr debugfs directory [ 196.770368][ T5605] hsr_slave_0: entered promiscuous mode [ 196.777212][ T5605] hsr_slave_1: entered promiscuous mode [ 196.784178][ T5605] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 196.792180][ T5605] Cannot create hsr debugfs directory [ 196.815666][ T5634] team0: Port device team_slave_1 added [ 196.881106][ T5636] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 196.889308][ T5636] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 196.916606][ T5636] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 196.946376][ T5634] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 196.953473][ T5634] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 196.979841][ T5634] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 197.025698][ T5636] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 197.033067][ T5636] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 197.059333][ T5636] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 197.113284][ T5634] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 197.120779][ T5634] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 197.147130][ T5634] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 197.407936][ T5229] Bluetooth: hci5: command tx timeout [ 197.419684][ T52] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.522732][ T5636] hsr_slave_0: entered promiscuous mode [ 197.542767][ T5636] hsr_slave_1: entered promiscuous mode [ 197.558644][ T5636] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 197.566273][ T5636] Cannot create hsr debugfs directory [ 197.670739][ T52] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.720860][ T5634] hsr_slave_0: entered promiscuous mode [ 197.727339][ T5634] hsr_slave_1: entered promiscuous mode [ 197.755305][ T5634] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 197.763447][ T5634] Cannot create hsr debugfs directory [ 197.858850][ T52] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.990583][ T52] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.128349][ T5568] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 198.189603][ T5568] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 198.210343][ T5568] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 198.225200][ T5568] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 198.298720][ T52] bridge_slave_1: left allmulticast mode [ 198.304433][ T52] bridge_slave_1: left promiscuous mode [ 198.310933][ T52] bridge0: port 2(bridge_slave_1) entered disabled state [ 198.337328][ T52] bridge_slave_0: left allmulticast mode [ 198.343407][ T52] bridge_slave_0: left promiscuous mode [ 198.358218][ T52] bridge0: port 1(bridge_slave_0) entered disabled state [ 198.380755][ T52] bridge_slave_1: left allmulticast mode [ 198.386479][ T52] bridge_slave_1: left promiscuous mode [ 198.404660][ T52] bridge0: port 2(bridge_slave_1) entered disabled state [ 198.419759][ T52] bridge_slave_0: left allmulticast mode [ 198.425558][ T52] bridge_slave_0: left promiscuous mode [ 198.445747][ T52] bridge0: port 1(bridge_slave_0) entered disabled state [ 198.458730][ T52] bridge_slave_1: left allmulticast mode [ 198.464439][ T52] bridge_slave_1: left promiscuous mode [ 198.488029][ T52] bridge0: port 2(bridge_slave_1) entered disabled state [ 198.496743][ T52] bridge_slave_0: left allmulticast mode [ 198.503567][ T52] bridge_slave_0: left promiscuous mode [ 198.509560][ T52] bridge0: port 1(bridge_slave_0) entered disabled state [ 198.519735][ T52] bridge_slave_1: left allmulticast mode [ 198.525434][ T52] bridge_slave_1: left promiscuous mode [ 198.531821][ T52] bridge0: port 2(bridge_slave_1) entered disabled state [ 198.540681][ T52] bridge_slave_0: left allmulticast mode [ 198.546372][ T52] bridge_slave_0: left promiscuous mode [ 198.552379][ T52] bridge0: port 1(bridge_slave_0) entered disabled state [ 198.576864][ T52] bridge_slave_1: left allmulticast mode [ 198.583376][ T52] bridge_slave_1: left promiscuous mode [ 198.592595][ T52] bridge0: port 2(bridge_slave_1) entered disabled state [ 198.605372][ T5227] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 198.617015][ T52] bridge_slave_0: left allmulticast mode [ 198.617175][ T5227] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 198.628416][ T52] bridge_slave_0: left promiscuous mode [ 198.635637][ T52] bridge0: port 1(bridge_slave_0) entered disabled state [ 198.637589][ T5227] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 198.653260][ T5227] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 198.671622][ T5227] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 198.686317][ T5227] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 199.513726][ T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 199.525336][ T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 199.536779][ T52] bond0 (unregistering): Released all slaves [ 199.702050][ T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 199.714276][ T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 199.727848][ T52] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 199.741735][ T52] bond0 (unregistering): Released all slaves [ 199.757415][ T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 199.774203][ T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 199.786181][ T52] bond0 (unregistering): Released all slaves [ 199.802033][ T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 199.813481][ T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 199.825800][ T52] bond0 (unregistering): Released all slaves [ 199.844671][ T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 199.855834][ T52] bond0 (unregistering): Released all slaves [ 200.768321][ T5229] Bluetooth: hci2: command tx timeout [ 200.823021][ T5609] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 200.834703][ T5609] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 200.847138][ T5725] chnl_net:caif_netlink_parms(): no params data found [ 200.922929][ T5609] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 200.956134][ T5609] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 201.395984][ T52] hsr_slave_0: left promiscuous mode [ 201.411958][ T52] hsr_slave_1: left promiscuous mode [ 201.426616][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 201.435499][ T52] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 201.443763][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 201.451545][ T52] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 201.463309][ T52] hsr_slave_0: left promiscuous mode [ 201.469596][ T52] hsr_slave_1: left promiscuous mode [ 201.475603][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 201.483357][ T52] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 201.491498][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 201.500253][ T52] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 201.534836][ T52] veth1_macvtap: left promiscuous mode [ 201.540769][ T52] veth0_macvtap: left promiscuous mode [ 201.546341][ T52] veth1_vlan: left promiscuous mode [ 201.551764][ T52] veth0_vlan: left promiscuous mode [ 201.558540][ T52] veth1_macvtap: left promiscuous mode [ 201.564106][ T52] veth0_macvtap: left promiscuous mode [ 201.571089][ T52] veth1_vlan: left promiscuous mode [ 201.576412][ T52] veth0_vlan: left promiscuous mode [ 202.174192][ T52] team0 (unregistering): Port device team_slave_1 removed [ 202.219979][ T52] team0 (unregistering): Port device team_slave_0 removed [ 202.848150][ T5229] Bluetooth: hci2: command tx timeout [ 203.067268][ T52] team0 (unregistering): Port device team_slave_1 removed [ 203.120148][ T52] team0 (unregistering): Port device team_slave_0 removed [ 203.769704][ T52] team0 (unregistering): Port device team_slave_1 removed [ 203.821575][ T52] team0 (unregistering): Port device team_slave_0 removed [ 204.107970][ T52] team0 (unregistering): Port device team_slave_1 removed [ 204.142388][ T52] team0 (unregistering): Port device team_slave_0 removed [ 204.414396][ T5725] bridge0: port 1(bridge_slave_0) entered blocking state [ 204.423655][ T5725] bridge0: port 1(bridge_slave_0) entered disabled state [ 204.432583][ T5725] bridge_slave_0: entered allmulticast mode [ 204.448903][ T5725] bridge_slave_0: entered promiscuous mode [ 204.481907][ T5725] bridge0: port 2(bridge_slave_1) entered blocking state [ 204.518611][ T5725] bridge0: port 2(bridge_slave_1) entered disabled state [ 204.539485][ T5725] bridge_slave_1: entered allmulticast mode [ 204.546301][ T5725] bridge_slave_1: entered promiscuous mode [ 204.613804][ T5725] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 204.633843][ T5725] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 204.735207][ T5725] team0: Port device team_slave_0 added [ 204.786052][ T5605] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 204.800059][ T5725] team0: Port device team_slave_1 added [ 204.805995][ T5605] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 204.893604][ T5605] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 204.917933][ T5229] Bluetooth: hci2: command tx timeout [ 204.924436][ T5725] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 204.933591][ T5725] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 204.960040][ T5725] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 204.973745][ T5605] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 205.033728][ T5725] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 205.046290][ T5725] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 205.078124][ T5725] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 205.203147][ T5725] hsr_slave_0: entered promiscuous mode [ 205.221903][ T5725] hsr_slave_1: entered promiscuous mode [ 205.238700][ T5725] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 205.246429][ T5725] Cannot create hsr debugfs directory [ 205.421666][ T5609] 8021q: adding VLAN 0 to HW filter on device bond0 [ 205.583670][ T5609] 8021q: adding VLAN 0 to HW filter on device team0 [ 205.665178][ T978] bridge0: port 1(bridge_slave_0) entered blocking state [ 205.672358][ T978] bridge0: port 1(bridge_slave_0) entered forwarding state [ 205.721741][ T2945] bridge0: port 2(bridge_slave_1) entered blocking state [ 205.728938][ T2945] bridge0: port 2(bridge_slave_1) entered forwarding state [ 205.761042][ T5636] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 205.772784][ T5636] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 205.831667][ T5636] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 205.925936][ T5636] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 206.033966][ T5605] 8021q: adding VLAN 0 to HW filter on device bond0 [ 206.151838][ T5605] 8021q: adding VLAN 0 to HW filter on device team0 [ 206.251291][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 206.258827][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 206.357015][ T2945] bridge0: port 2(bridge_slave_1) entered blocking state [ 206.364327][ T2945] bridge0: port 2(bridge_slave_1) entered forwarding state [ 206.405261][ T5636] 8021q: adding VLAN 0 to HW filter on device bond0 [ 206.483844][ T5636] 8021q: adding VLAN 0 to HW filter on device team0 [ 206.543815][ T5634] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 206.553987][ T5634] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 206.567519][ T5609] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 206.584233][ T5634] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 206.645996][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 206.653173][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 206.662858][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 206.670030][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 206.688629][ T5634] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 206.875451][ T5636] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 206.895065][ T5636] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 206.969493][ T5609] veth0_vlan: entered promiscuous mode [ 206.998568][ T5229] Bluetooth: hci2: command tx timeout [ 207.044750][ T5609] veth1_vlan: entered promiscuous mode [ 207.122458][ T5725] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 207.133934][ T5725] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 207.151029][ T5473] bridge_slave_1: left allmulticast mode [ 207.156896][ T5473] bridge_slave_1: left promiscuous mode [ 207.166746][ T5473] bridge0: port 2(bridge_slave_1) entered disabled state [ 207.180906][ T5473] bridge_slave_0: left allmulticast mode [ 207.186590][ T5473] bridge_slave_0: left promiscuous mode [ 207.192539][ T5473] bridge0: port 1(bridge_slave_0) entered disabled state [ 207.203150][ T5473] bridge_slave_1: left allmulticast mode [ 207.210406][ T5473] bridge_slave_1: left promiscuous mode [ 207.216142][ T5473] bridge0: port 2(bridge_slave_1) entered disabled state [ 207.225124][ T5473] bridge_slave_0: left allmulticast mode [ 207.231140][ T5473] bridge_slave_0: left promiscuous mode [ 207.236882][ T5473] bridge0: port 1(bridge_slave_0) entered disabled state [ 207.717432][ T5473] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 207.730116][ T5473] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 207.740075][ T5473] bond0 (unregistering): Released all slaves [ 207.753588][ T5473] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 207.765586][ T5473] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 207.776911][ T5473] bond0 (unregistering): Released all slaves [ 207.798147][ T5725] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 207.819393][ T5725] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 207.982300][ T5605] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 208.039086][ T5609] veth0_macvtap: entered promiscuous mode [ 208.056751][ T5636] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 208.097300][ T5634] 8021q: adding VLAN 0 to HW filter on device bond0 [ 208.136278][ T5609] veth1_macvtap: entered promiscuous mode [ 208.202449][ T5473] hsr_slave_0: left promiscuous mode [ 208.208649][ T5473] hsr_slave_1: left promiscuous mode [ 208.214673][ T5473] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 208.227242][ T5473] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 208.244413][ T5473] hsr_slave_0: left promiscuous mode [ 208.250972][ T5473] hsr_slave_1: left promiscuous mode [ 208.256798][ T5473] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 208.264670][ T5473] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 208.665216][ T5473] team0 (unregistering): Port device team_slave_1 removed [ 208.713050][ T5473] team0 (unregistering): Port device team_slave_0 removed [ 209.278709][ T5473] team0 (unregistering): Port device team_slave_1 removed [ 209.306483][ T5473] team0 (unregistering): Port device team_slave_0 removed [ 209.476663][ T5634] 8021q: adding VLAN 0 to HW filter on device team0 [ 209.507112][ T5609] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 209.556134][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 209.563372][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 209.575793][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 209.583048][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 209.626842][ T5605] veth0_vlan: entered promiscuous mode [ 209.655090][ T5609] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 209.680465][ T5609] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.689888][ T5609] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.699515][ T5609] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.709135][ T5609] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.722728][ T5636] veth0_vlan: entered promiscuous mode [ 209.766274][ T5636] veth1_vlan: entered promiscuous mode [ 209.845370][ T5725] 8021q: adding VLAN 0 to HW filter on device bond0 [ 209.866434][ T5605] veth1_vlan: entered promiscuous mode [ 209.990845][ T5725] 8021q: adding VLAN 0 to HW filter on device team0 [ 210.029204][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 210.037181][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 210.065947][ T5605] veth0_macvtap: entered promiscuous mode [ 210.090004][ T978] bridge0: port 1(bridge_slave_0) entered blocking state [ 210.097186][ T978] bridge0: port 1(bridge_slave_0) entered forwarding state [ 210.132910][ T5605] veth1_macvtap: entered promiscuous mode [ 210.164620][ T978] bridge0: port 2(bridge_slave_1) entered blocking state [ 210.171812][ T978] bridge0: port 2(bridge_slave_1) entered forwarding state [ 210.185643][ T5636] veth0_macvtap: entered promiscuous mode [ 210.213223][ T5634] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 210.224009][ T2945] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 210.233190][ T2945] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 210.279182][ T5636] veth1_macvtap: entered promiscuous mode [ 210.357260][ T5605] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 210.408050][ T5605] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.420259][ T5605] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 210.486531][ T5605] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 210.510990][ T5802] netlink: 8 bytes leftover after parsing attributes in process `syz.1.31'. [ 210.522793][ T5605] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.537358][ T5605] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 210.558232][ T5636] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 210.572766][ T5636] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.583600][ T5636] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 210.594899][ T5636] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.614632][ T5636] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 210.636016][ T5605] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.650155][ T5605] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.665134][ T5605] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.676403][ T5605] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.697273][ T5636] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 210.740447][ T5636] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.751337][ T5636] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 210.762716][ T5636] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.774899][ T5636] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 210.827312][ T5636] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.852244][ T5636] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.865237][ T5636] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.874546][ T5636] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.076262][ T5725] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 211.146032][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 211.169732][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 211.220362][ T5634] veth0_vlan: entered promiscuous mode [ 211.271596][ T5634] veth1_vlan: entered promiscuous mode [ 211.379665][ T5473] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 211.396544][ T5634] veth0_macvtap: entered promiscuous mode [ 211.405804][ T5473] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 211.430035][ T978] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 211.446846][ T978] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 211.472606][ T5725] veth0_vlan: entered promiscuous mode [ 211.490405][ T5634] veth1_macvtap: entered promiscuous mode [ 211.555687][ T5634] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 211.570264][ T5634] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 211.580927][ T5634] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 211.591998][ T5634] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 211.602137][ T5634] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 211.612955][ T5634] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 211.623382][ T5271] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 211.624942][ T5634] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 211.652687][ T1067] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 211.671716][ T1067] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 211.685325][ T5725] veth1_vlan: entered promiscuous mode [ 211.712179][ T5634] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 211.729222][ T5634] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 211.741212][ T5634] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 211.753430][ T5634] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 211.769601][ T5634] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 211.780359][ T5271] usb 2-1: Using ep0 maxpacket: 32 [ 211.783389][ T5634] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 211.799577][ T5271] usb 2-1: config 0 has an invalid interface number: 151 but max is 0 [ 211.808535][ T5271] usb 2-1: config 0 has no interface number 0 [ 211.816162][ T5271] usb 2-1: config 0 interface 151 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 211.817347][ T5634] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 211.845336][ T5271] usb 2-1: config 0 interface 151 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 211.849168][ T5634] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.864848][ T5634] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.876743][ T5634] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.886448][ T5634] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.939040][ T5271] usb 2-1: New USB device found, idVendor=0499, idProduct=6bb7, bcdDevice=68.2f [ 211.967061][ T5271] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 211.990905][ T5271] usb 2-1: Product: syz [ 211.995106][ T5271] usb 2-1: Manufacturer: syz [ 212.016995][ T5271] usb 2-1: SerialNumber: syz [ 212.066568][ T5271] usb 2-1: config 0 descriptor?? [ 212.268649][ T5725] veth0_macvtap: entered promiscuous mode [ 212.284694][ T978] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 212.301925][ T978] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 212.597261][ T5725] veth1_macvtap: entered promiscuous mode [ 212.624222][ T5827] FAULT_INJECTION: forcing a failure. [ 212.624222][ T5827] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 212.637732][ T5827] CPU: 1 UID: 0 PID: 5827 Comm: syz.2.65 Not tainted 6.11.0-syzkaller-07262-g839c4f596f89 #0 [ 212.647941][ T5827] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 212.658040][ T5827] Call Trace: [ 212.661349][ T5827] [ 212.664303][ T5827] dump_stack_lvl+0x241/0x360 [ 212.669023][ T5827] ? __pfx_dump_stack_lvl+0x10/0x10 [ 212.674281][ T5827] should_fail_ex+0x3b0/0x4e0 [ 212.679023][ T5827] _copy_from_user+0x2f/0xe0 [ 212.683670][ T5827] generic_map_update_batch+0x567/0x900 [ 212.689289][ T5827] ? __pfx_generic_map_update_batch+0x10/0x10 [ 212.695408][ T5827] ? __pfx_generic_map_update_batch+0x10/0x10 [ 212.701551][ T5827] bpf_map_do_batch+0x3da/0x690 [ 212.706471][ T5827] __sys_bpf+0x377/0x810 [ 212.710781][ T5827] ? __pfx___sys_bpf+0x10/0x10 [ 212.715612][ T5827] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 212.721641][ T5827] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 212.728027][ T5827] ? do_syscall_64+0x100/0x230 [ 212.732865][ T5827] __x64_sys_bpf+0x7c/0x90 [ 212.737334][ T5827] do_syscall_64+0xf3/0x230 [ 212.741911][ T5827] ? clear_bhb_loop+0x35/0x90 [ 212.746642][ T5827] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 212.752578][ T5827] RIP: 0033:0x7f4cdc77def9 [ 212.757009][ T5827] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 212.776650][ T5827] RSP: 002b:00007f4cdd574038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 212.785089][ T5827] RAX: ffffffffffffffda RBX: 00007f4cdc936130 RCX: 00007f4cdc77def9 [ 212.793188][ T5827] RDX: 0000000000000038 RSI: 00000000200001c0 RDI: 000000000000001a [ 212.801191][ T5827] RBP: 00007f4cdd574090 R08: 0000000000000000 R09: 0000000000000000 [ 212.809190][ T5827] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 212.817189][ T5827] R13: 0000000000000000 R14: 00007f4cdc936130 R15: 00007ffdd1d2cfe8 [ 212.825218][ T5827] [ 212.972422][ T5473] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 213.002331][ T5473] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 213.025755][ T5725] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 213.137902][ T5725] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.154551][ T5725] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 213.193436][ T5725] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.234236][ T5725] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 213.256889][ T5725] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.309065][ T5725] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 213.349817][ T5725] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.458797][ T5725] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 213.526906][ T5725] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 213.618965][ T5725] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.739878][ T5725] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 213.805595][ T5725] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.864636][ T5725] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 213.900099][ T5725] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.935915][ T5725] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 213.980703][ T5725] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.024782][ T5725] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 214.130818][ T5725] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.145360][ T5725] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.155275][ T5725] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.193491][ T5725] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.790060][ T5271] usb 2-1: USB disconnect, device number 3 [ 214.982944][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 215.030882][ T5229] Bluetooth: hci1: unexpected subevent 0x1a length: 10 > 6 [ 215.037068][ T5765] udevd[5765]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.151/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 215.099771][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 215.225086][ T1067] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 215.269914][ T1067] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 215.282806][ T5855] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 217.169983][ T5229] Bluetooth: hci1: command tx timeout [ 217.351348][ T5855] netlink: 20 bytes leftover after parsing attributes in process `syz.2.70'. [ 218.321499][ T5870] FAULT_INJECTION: forcing a failure. [ 218.321499][ T5870] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 218.363635][ T5871] netlink: 8 bytes leftover after parsing attributes in process `syz.2.73'. [ 218.386096][ T5870] CPU: 1 UID: 0 PID: 5870 Comm: syz.0.56 Not tainted 6.11.0-syzkaller-07262-g839c4f596f89 #0 [ 218.396359][ T5870] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 218.406451][ T5870] Call Trace: [ 218.409772][ T5870] [ 218.412745][ T5870] dump_stack_lvl+0x241/0x360 [ 218.417522][ T5870] ? __pfx_dump_stack_lvl+0x10/0x10 [ 218.422779][ T5870] ? __pfx__printk+0x10/0x10 [ 218.427423][ T5870] ? __pfx_lock_release+0x10/0x10 [ 218.432508][ T5870] should_fail_ex+0x3b0/0x4e0 [ 218.437233][ T5870] _copy_to_user+0x2f/0xb0 [ 218.441699][ T5870] hidp_sock_ioctl+0x4d6/0x870 [ 218.446505][ T5870] ? __pfx_hidp_sock_ioctl+0x10/0x10 [ 218.451880][ T5870] ? tomoyo_path_number_perm+0x71a/0x880 [ 218.457574][ T5870] sock_do_ioctl+0x158/0x460 [ 218.462472][ T5870] ? __pfx_smack_log+0x10/0x10 [ 218.467286][ T5870] ? __pfx_sock_do_ioctl+0x10/0x10 [ 218.472542][ T5870] ? smk_tskacc+0x300/0x370 [ 218.477096][ T5870] ? smack_file_ioctl+0x2f7/0x3a0 [ 218.482227][ T5870] sock_ioctl+0x626/0x8e0 [ 218.486609][ T5870] ? __pfx_sock_ioctl+0x10/0x10 [ 218.491502][ T5870] ? __fget_files+0x3f3/0x470 [ 218.496227][ T5870] ? __pfx_sock_ioctl+0x10/0x10 [ 218.501094][ T5870] __se_sys_ioctl+0xf9/0x170 [ 218.505701][ T5870] do_syscall_64+0xf3/0x230 [ 218.510231][ T5870] ? clear_bhb_loop+0x35/0x90 [ 218.515098][ T5870] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 218.521019][ T5870] RIP: 0033:0x7f01ec37def9 [ 218.525471][ T5870] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 218.545095][ T5870] RSP: 002b:00007f01ebdff038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 218.553644][ T5870] RAX: ffffffffffffffda RBX: 00007f01ec535f80 RCX: 00007f01ec37def9 [ 218.561636][ T5870] RDX: 0000000020000080 RSI: 00000000800448d2 RDI: 0000000000000005 [ 218.569645][ T5870] RBP: 00007f01ebdff090 R08: 0000000000000000 R09: 0000000000000000 [ 218.577748][ T5870] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 218.585857][ T5870] R13: 0000000000000000 R14: 00007f01ec535f80 R15: 00007ffe56ce19e8 [ 218.593958][ T5870] [ 218.857855][ T5272] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 219.021922][ T5272] usb 2-1: Using ep0 maxpacket: 32 [ 219.031109][ T5272] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 219.086805][ T5272] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 219.126828][ T5272] usb 2-1: New USB device found, idVendor=0461, idProduct=4e72, bcdDevice= 0.00 [ 219.156386][ T5272] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 219.185890][ T5272] usb 2-1: config 0 descriptor?? [ 219.211904][ T5876] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 220.019789][ T5272] usbhid 2-1:0.0: can't add hid device: -71 [ 220.025811][ T5272] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 220.079298][ T5272] usb 2-1: USB disconnect, device number 4 [ 220.627987][ T5272] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 220.787892][ T5272] usb 1-1: device descriptor read/64, error -71 [ 220.816262][ T5910] capability: warning: `syz.1.81' uses deprecated v2 capabilities in a way that may be insecure [ 221.027886][ T5272] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 221.290431][ T5916] netlink: 8 bytes leftover after parsing attributes in process `syz.1.82'. [ 221.507846][ T5272] usb 1-1: device descriptor read/64, error -71 [ 221.740850][ T5272] usb usb1-port1: attempt power cycle [ 222.235171][ T5272] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 222.580584][ T5272] usb 1-1: device descriptor read/8, error -71 [ 222.706070][ T5932] xt_ecn: cannot match TCP bits for non-tcp packets [ 222.878020][ T5272] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 222.928910][ T5272] usb 1-1: device descriptor read/8, error -71 [ 223.810465][ T5272] usb usb1-port1: unable to enumerate USB device [ 223.834899][ T5935] netlink: 48 bytes leftover after parsing attributes in process `syz.4.86'. [ 225.059510][ T5227] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 225.077382][ T5227] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 225.094484][ T5227] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 225.108057][ T5227] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 225.138270][ T5227] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 225.145727][ T5227] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 225.717117][ T5229] Bluetooth: hci4: unexpected subevent 0x1a length: 10 > 6 [ 225.737856][ T5272] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 226.118004][ T5272] usb 1-1: Using ep0 maxpacket: 8 [ 226.325833][ T5272] usb 1-1: config 1 has an invalid descriptor of length 69, skipping remainder of the config [ 226.347872][ T5272] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 226.358434][ T5272] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 226.370281][ T5272] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 226.382299][ T5272] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 226.392147][ T5272] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 226.644468][ T5272] hub 1-1:1.0: bad descriptor, ignoring hub [ 227.068012][ T5272] hub 1-1:1.0: probe with driver hub failed with error -5 [ 227.075732][ T5272] cdc_wdm 1-1:1.0: skipping garbage [ 227.248322][ T5229] Bluetooth: hci3: command tx timeout [ 227.276991][ T5272] cdc_wdm 1-1:1.0: skipping garbage [ 227.326985][ T5954] chnl_net:caif_netlink_parms(): no params data found [ 227.329195][ T5272] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 227.559029][ T5272] cdc_wdm 1-1:1.0: Unknown control protocol [ 227.958048][ T5227] Bluetooth: hci4: command tx timeout [ 228.663921][ T5272] usb 1-1: USB disconnect, device number 6 [ 229.177350][ T5954] bridge0: port 1(bridge_slave_0) entered blocking state [ 229.234938][ T5954] bridge0: port 1(bridge_slave_0) entered disabled state [ 229.235151][ T5954] bridge_slave_0: entered allmulticast mode [ 229.236301][ T5954] bridge_slave_0: entered promiscuous mode [ 229.255609][ T5954] bridge0: port 2(bridge_slave_1) entered blocking state [ 229.257964][ T5954] bridge0: port 2(bridge_slave_1) entered disabled state [ 229.258186][ T5954] bridge_slave_1: entered allmulticast mode [ 229.259387][ T5954] bridge_slave_1: entered promiscuous mode [ 229.322214][ T5227] Bluetooth: hci3: command tx timeout [ 229.649793][ T5954] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 229.662830][ T5954] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 231.065149][ T5954] team0: Port device team_slave_0 added [ 231.138828][ T5954] team0: Port device team_slave_1 added [ 231.209492][ T6058] Zero length message leads to an empty skb [ 231.216750][ T5227] Bluetooth: hci1: unexpected subevent 0x1a length: 10 > 6 [ 231.407978][ T5227] Bluetooth: hci3: command tx timeout [ 231.639405][ T5954] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 231.665226][ T5954] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 231.772978][ T6071] netlink: 'syz.0.108': attribute type 11 has an invalid length. [ 231.775491][ T5954] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 231.836275][ T6073] netlink: 'syz.0.108': attribute type 11 has an invalid length. [ 231.862982][ T5954] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 231.883857][ T5954] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 231.910302][ C0] vkms_vblank_simulate: vblank timer overrun [ 231.921463][ T5954] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 231.938094][ T6073] debugfs: Directory 'netdev:' with parent 'phy21' already present! [ 231.977785][ T5272] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 231.994941][ T5954] hsr_slave_0: entered promiscuous mode [ 232.007015][ T5954] hsr_slave_1: entered promiscuous mode [ 232.365788][ T5272] usb 2-1: New USB device found, idVendor=12d1, idProduct=6748, bcdDevice=49.0b [ 232.410275][ T5272] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 232.451266][ T5272] usb 2-1: Product: syz [ 232.455500][ T5272] usb 2-1: Manufacturer: syz [ 232.494822][ T5272] usb 2-1: SerialNumber: syz [ 232.689152][ T5272] usb 2-1: config 0 descriptor?? [ 232.705676][ T5272] huawei_cdc_ncm 2-1:0.0: CDC Union missing and no IAD found [ 232.738747][ T5227] Bluetooth: hci4: Received unexpected HCI Event 0x00 [ 232.858184][ T5272] huawei_cdc_ncm 2-1:0.0: bind() failure [ 233.368178][ T5227] Bluetooth: hci1: command tx timeout [ 233.530810][ T5227] Bluetooth: hci3: command tx timeout [ 233.686024][ T5269] usb 2-1: USB disconnect, device number 5 [ 234.705861][ T5954] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.007206][ T6113] FAULT_INJECTION: forcing a failure. [ 235.007206][ T6113] name failslab, interval 1, probability 0, space 0, times 0 [ 235.023447][ T5227] Bluetooth: hci2: unexpected subevent 0x1a length: 10 > 6 [ 235.043427][ T6113] CPU: 1 UID: 0 PID: 6113 Comm: syz.1.115 Not tainted 6.11.0-syzkaller-07262-g839c4f596f89 #0 [ 235.053752][ T6113] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 235.063830][ T6113] Call Trace: [ 235.067119][ T6113] [ 235.070063][ T6113] dump_stack_lvl+0x241/0x360 [ 235.074790][ T6113] ? __pfx_dump_stack_lvl+0x10/0x10 [ 235.080035][ T6113] ? __pfx__printk+0x10/0x10 [ 235.084664][ T6113] ? kmem_cache_alloc_noprof+0x44/0x2a0 [ 235.090235][ T6113] ? __pfx___might_resched+0x10/0x10 [ 235.095655][ T6113] should_fail_ex+0x3b0/0x4e0 [ 235.100368][ T6113] ? mas_alloc_nodes+0x26c/0x840 [ 235.105360][ T6113] should_failslab+0xac/0x100 [ 235.110163][ T6113] ? mas_alloc_nodes+0x26c/0x840 [ 235.115131][ T6113] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 235.120532][ T6113] mas_alloc_nodes+0x26c/0x840 [ 235.125348][ T6113] mas_preallocate+0xfca/0x1730 [ 235.130238][ T6113] ? __pfx_lock_release+0x10/0x10 [ 235.135300][ T6113] ? __pfx_mas_preallocate+0x10/0x10 [ 235.140617][ T6113] ? __mas_set_range+0x133/0x3c0 [ 235.145577][ T6113] vma_link+0x130/0x4f0 [ 235.149750][ T6113] ? __pfx_vma_link+0x10/0x10 [ 235.154538][ T6113] ? __vm_enough_memory+0x119/0x380 [ 235.159780][ T6113] insert_vm_struct+0x2f7/0x410 [ 235.164652][ T6113] ? __pfx_insert_vm_struct+0x10/0x10 [ 235.170043][ T6113] ? __init_rwsem+0x122/0x160 [ 235.174739][ T6113] alloc_bprm+0x8f5/0xe20 [ 235.179102][ T6113] ? __pfx_alloc_bprm+0x10/0x10 [ 235.183975][ T6113] ? __virt_addr_valid+0x183/0x530 [ 235.189101][ T6113] ? __phys_addr_symbol+0x2f/0x70 [ 235.194227][ T6113] ? __check_object_size+0x49c/0x900 [ 235.199530][ T6113] do_execveat_common+0x18c/0x6f0 [ 235.204584][ T6113] __x64_sys_execveat+0xc4/0xe0 [ 235.209456][ T6113] do_syscall_64+0xf3/0x230 [ 235.213993][ T6113] ? clear_bhb_loop+0x35/0x90 [ 235.218704][ T6113] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 235.224644][ T6113] RIP: 0033:0x7ff7b157def9 [ 235.229089][ T6113] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 235.248713][ T6113] RSP: 002b:00007ff7b235a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 235.257150][ T6113] RAX: ffffffffffffffda RBX: 00007ff7b1735f80 RCX: 00007ff7b157def9 [ 235.265241][ T6113] RDX: 0000000000000000 RSI: 0000000020000040 RDI: ffffffffffffff9c [ 235.273249][ T6113] RBP: 00007ff7b235a090 R08: 0000000000000000 R09: 0000000000000000 [ 235.281236][ T6113] R10: 0000000020000640 R11: 0000000000000246 R12: 0000000000000002 [ 235.289254][ T6113] R13: 0000000000000000 R14: 00007ff7b1735f80 R15: 00007ffcab4c4898 [ 235.297252][ T6113] [ 235.336343][ T5954] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.448268][ T6117] netlink: 'syz.0.117': attribute type 27 has an invalid length. [ 235.727452][ T5269] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 236.720218][ T5269] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 236.882726][ T5269] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 237.163738][ T5227] Bluetooth: hci2: command tx timeout [ 237.170490][ T5269] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 237.183909][ T5269] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 238.132887][ T5269] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 238.157915][ T5269] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 238.269920][ T5269] usb 5-1: config 0 descriptor?? [ 238.349352][ T5269] usb 5-1: can't set config #0, error -71 [ 238.389863][ T5269] usb 5-1: USB disconnect, device number 3 [ 238.396999][ T6117] bridge0: port 2(bridge_slave_1) entered disabled state [ 238.404404][ T6117] bridge0: port 1(bridge_slave_0) entered disabled state [ 238.968354][ T5227] Bluetooth: hci1: unexpected subevent 0x1a length: 10 > 6 [ 239.219790][ T6169] sg_write: data in/out 12335450/2 bytes for SCSI command 0x0-- guessing data in; [ 239.219790][ T6169] program syz.4.127 not setting count and/or reply_len properly [ 239.534381][ T6175] FAULT_INJECTION: forcing a failure. [ 239.534381][ T6175] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 239.547652][ T6175] CPU: 0 UID: 0 PID: 6175 Comm: syz.1.128 Not tainted 6.11.0-syzkaller-07262-g839c4f596f89 #0 [ 239.557930][ T6175] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 239.568013][ T6175] Call Trace: [ 239.571319][ T6175] [ 239.574274][ T6175] dump_stack_lvl+0x241/0x360 [ 239.579000][ T6175] ? __pfx_dump_stack_lvl+0x10/0x10 [ 239.584240][ T6175] ? __pfx__printk+0x10/0x10 [ 239.588871][ T6175] ? __pfx_lock_release+0x10/0x10 [ 239.593952][ T6175] should_fail_ex+0x3b0/0x4e0 [ 239.598672][ T6175] _copy_from_user+0x2f/0xe0 [ 239.603385][ T6175] memdup_user+0x64/0xc0 [ 239.607660][ T6175] strndup_user+0x68/0xc0 [ 239.612024][ T6175] __se_sys_mount+0xe2/0x3c0 [ 239.616665][ T6175] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 239.622694][ T6175] ? __pfx___se_sys_mount+0x10/0x10 [ 239.627940][ T6175] ? do_syscall_64+0x100/0x230 [ 239.632748][ T6175] ? __x64_sys_mount+0x20/0xc0 [ 239.637614][ T6175] do_syscall_64+0xf3/0x230 [ 239.642174][ T6175] ? clear_bhb_loop+0x35/0x90 [ 239.646898][ T6175] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 239.652830][ T6175] RIP: 0033:0x7ff7b157def9 [ 239.657279][ T6175] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 239.676930][ T6175] RSP: 002b:00007ff7b2318038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 239.685385][ T6175] RAX: ffffffffffffffda RBX: 00007ff7b1736130 RCX: 00007ff7b157def9 [ 239.693386][ T6175] RDX: 00000000200001c0 RSI: 00000000200002c0 RDI: 0000000020000100 [ 239.701391][ T6175] RBP: 00007ff7b2318090 R08: 0000000020000340 R09: 0000000000000000 [ 239.709389][ T6175] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 239.717388][ T6175] R13: 0000000000000000 R14: 00007ff7b1736130 R15: 00007ffcab4c4898 [ 239.725413][ T6175] [ 241.717784][ T5227] Bluetooth: hci1: command tx timeout [ 243.036753][ T6117] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 243.986934][ T6117] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 244.205640][ T6190] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 244.365002][ T6190] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 244.512735][ T6117] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.533221][ T6117] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.564796][ T6117] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.607867][ T6117] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.942811][ T5954] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.165802][ T6119] 8021q: adding VLAN 0 to HW filter on device bond0 [ 245.207264][ T6119] 8021q: adding VLAN 0 to HW filter on device team0 [ 245.273999][ T6119] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 245.379297][ T6183] lo speed is unknown, defaulting to 1000 [ 245.633862][ T5954] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.729333][ T6183] lo speed is unknown, defaulting to 1000 [ 245.793625][ T6183] lo speed is unknown, defaulting to 1000 [ 246.338099][ T6219] netlink: 80 bytes leftover after parsing attributes in process `syz.2.136'. [ 246.347604][ T6219] netlink: 80 bytes leftover after parsing attributes in process `syz.2.136'. [ 246.375799][ T6183] infiniband syz1: set active [ 246.421650][ T6183] infiniband syz1: added lo [ 246.449600][ T6183] syz1: rxe_create_cq: returned err = -12 [ 246.494687][ T6219] netlink: 80 bytes leftover after parsing attributes in process `syz.2.136'. [ 246.504599][ T6183] infiniband syz1: Couldn't create ib_mad CQ [ 246.544785][ T6219] netlink: 80 bytes leftover after parsing attributes in process `syz.2.136'. [ 246.545095][ T6183] infiniband syz1: Couldn't open port 1 [ 246.618709][ T5229] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 246.628096][ T938] lo speed is unknown, defaulting to 1000 [ 246.634289][ T5954] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 246.643017][ T5229] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 246.663112][ T5229] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 246.671347][ T5229] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 246.691717][ T5229] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 246.699217][ T5229] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 246.817485][ T5229] Bluetooth: hci5: unexpected subevent 0x1a length: 10 > 6 [ 246.832300][ T5954] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 246.860175][ T6183] RDS/IB: syz1: added [ 246.864613][ T6183] smc: adding ib device syz1 with port count 1 [ 246.892898][ T6183] smc: ib device syz1 port 1 has pnetid [ 246.926202][ T5954] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 247.131369][ T938] lo speed is unknown, defaulting to 1000 [ 247.138746][ T5954] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 247.169377][ T6183] lo speed is unknown, defaulting to 1000 [ 247.344542][ T6183] lo speed is unknown, defaulting to 1000 [ 247.651322][ T6244] fuse: Unknown parameter '' iI9QA:tK?VE6N N/{j"s8M\MPgv[J !eSx㪐zqn' [ 248.518129][ T938] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 248.567309][ T5954] 8021q: adding VLAN 0 to HW filter on device bond0 [ 248.624755][ T6183] lo speed is unknown, defaulting to 1000 [ 248.698844][ T6245] netlink: 'syz.1.141': attribute type 1 has an invalid length. [ 248.708181][ T938] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 248.731256][ T938] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 248.750279][ T938] usb 3-1: New USB device found, idVendor=5543, idProduct=0005, bcdDevice= 0.00 [ 248.775203][ T5954] 8021q: adding VLAN 0 to HW filter on device team0 [ 248.775920][ T938] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 248.816475][ T938] usb 3-1: config 0 descriptor?? [ 248.838443][ T5229] Bluetooth: hci5: command tx timeout [ 248.838735][ T5227] Bluetooth: hci2: command tx timeout [ 248.929301][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 248.936479][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 248.947065][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 248.954282][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 249.062060][ T6183] lo speed is unknown, defaulting to 1000 [ 249.319822][ T6256] netlink: 'syz.1.142': attribute type 1 has an invalid length. [ 249.334507][ T1067] bridge_slave_1: left allmulticast mode [ 249.367874][ T1067] bridge_slave_1: left promiscuous mode [ 249.382327][ T938] uclogic 0003:5543:0005.0001: unknown main item tag 0x0 [ 249.386262][ T1067] bridge0: port 2(bridge_slave_1) entered disabled state [ 249.407987][ T938] uclogic 0003:5543:0005.0001: unknown main item tag 0x0 [ 249.430206][ T1067] bridge_slave_0: left allmulticast mode [ 249.443238][ T1067] bridge_slave_0: left promiscuous mode [ 249.458583][ T1067] bridge0: port 1(bridge_slave_0) entered disabled state [ 249.466665][ T938] uclogic 0003:5543:0005.0001: No inputs registered, leaving [ 249.507627][ T938] uclogic 0003:5543:0005.0001: hidraw0: USB HID v0.00 Device [HID 5543:0005] on usb-dummy_hcd.2-1/input0 [ 250.381175][ T1067] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 250.432972][ T1067] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 250.905396][ T5269] usb 3-1: USB disconnect, device number 6 [ 250.922686][ T5227] Bluetooth: hci2: command tx timeout [ 250.968612][ T1067] bond0 (unregistering): Released all slaves [ 251.229222][ T6224] chnl_net:caif_netlink_parms(): no params data found [ 251.239662][ T6183] lo speed is unknown, defaulting to 1000 [ 251.311628][ T6286] xt_hashlimit: invalid interval [ 251.341846][ T6289] FAULT_INJECTION: forcing a failure. [ 251.341846][ T6289] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 251.391114][ T6289] CPU: 1 UID: 0 PID: 6289 Comm: syz.1.145 Not tainted 6.11.0-syzkaller-07262-g839c4f596f89 #0 [ 251.401436][ T6289] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 251.411541][ T6289] Call Trace: [ 251.414856][ T6289] [ 251.417826][ T6289] dump_stack_lvl+0x241/0x360 [ 251.422568][ T6289] ? __pfx_dump_stack_lvl+0x10/0x10 [ 251.427825][ T6289] ? __pfx__printk+0x10/0x10 [ 251.432474][ T6289] ? __pfx_lock_release+0x10/0x10 [ 251.437564][ T6289] ? vfs_write+0x7bf/0xc90 [ 251.442032][ T6289] should_fail_ex+0x3b0/0x4e0 [ 251.446768][ T6289] _copy_from_user+0x2f/0xe0 [ 251.451420][ T6289] __sys_bpf+0x1a4/0x810 [ 251.455695][ T6289] ? __pfx___sys_bpf+0x10/0x10 [ 251.460486][ T6289] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 251.466527][ T6289] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 251.472894][ T6289] ? do_syscall_64+0x100/0x230 [ 251.477736][ T6289] __x64_sys_bpf+0x7c/0x90 [ 251.482180][ T6289] do_syscall_64+0xf3/0x230 [ 251.486730][ T6289] ? clear_bhb_loop+0x35/0x90 [ 251.491456][ T6289] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 251.497391][ T6289] RIP: 0033:0x7ff7b157def9 [ 251.501881][ T6289] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 251.521603][ T6289] RSP: 002b:00007ff7b235a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 251.530057][ T6289] RAX: ffffffffffffffda RBX: 00007ff7b1735f80 RCX: 00007ff7b157def9 [ 251.538055][ T6289] RDX: 0000000000000020 RSI: 0000000020001640 RDI: 0000000000000008 [ 251.546066][ T6289] RBP: 00007ff7b235a090 R08: 0000000000000000 R09: 0000000000000000 [ 251.554132][ T6289] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 251.562172][ T6289] R13: 0000000000000001 R14: 00007ff7b1735f80 R15: 00007ffcab4c4898 [ 251.570181][ T6289] [ 251.737848][ T5319] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 251.794801][ T6183] lo speed is unknown, defaulting to 1000 [ 251.927792][ T5319] usb 3-1: Using ep0 maxpacket: 16 [ 251.940185][ T5319] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 251.981000][ T5319] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 252.017868][ T5319] usb 3-1: New USB device found, idVendor=1294, idProduct=1320, bcdDevice= 0.00 [ 252.034362][ T5227] Bluetooth: hci1: unexpected subevent 0x1a length: 10 > 6 [ 252.055777][ T5319] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 252.158202][ T5319] usb 3-1: config 0 descriptor?? [ 252.462121][ T6183] lo speed is unknown, defaulting to 1000 [ 252.488737][ T6224] bridge0: port 1(bridge_slave_0) entered blocking state [ 252.495931][ T6224] bridge0: port 1(bridge_slave_0) entered disabled state [ 252.574808][ T6224] bridge_slave_0: entered allmulticast mode [ 252.582689][ T5319] hid-led 0003:1294:1320.0002: hidraw0: USB HID v0.00 Device [HID 1294:1320] on usb-dummy_hcd.2-1/input0 [ 252.598352][ T6224] bridge_slave_0: entered promiscuous mode [ 252.640494][ T5954] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 252.645200][ T5319] hid-led 0003:1294:1320.0002: Riso Kagaku Webmail Notifier initialized [ 252.717885][ T6224] bridge0: port 2(bridge_slave_1) entered blocking state [ 252.728052][ T938] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 252.834466][ T6224] bridge0: port 2(bridge_slave_1) entered disabled state [ 252.997870][ T5227] Bluetooth: hci2: command tx timeout [ 253.020194][ T938] usb 2-1: device descriptor read/64, error -71 [ 253.163927][ T6224] bridge_slave_1: entered allmulticast mode [ 253.192185][ T6224] bridge_slave_1: entered promiscuous mode [ 253.423293][ T938] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 253.466334][ T6224] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 253.560775][ T6224] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 253.577997][ T938] usb 2-1: device descriptor read/64, error -71 [ 253.691577][ T1067] hsr_slave_0: left promiscuous mode [ 253.701489][ T938] usb usb2-port1: attempt power cycle [ 253.718925][ T1067] hsr_slave_1: left promiscuous mode [ 253.744872][ T1067] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 253.778672][ T1067] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 253.827243][ T5229] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 253.840002][ T5229] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 253.848616][ T5229] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 253.867301][ T5229] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 253.878790][ T5229] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 253.886303][ T5229] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 254.078276][ T938] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 254.118748][ T938] usb 2-1: device descriptor read/8, error -71 [ 254.120988][ T5227] Bluetooth: hci1: command tx timeout [ 254.361943][ T938] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 254.410665][ T938] usb 2-1: device descriptor read/8, error -71 [ 254.513171][ T9] usb 3-1: USB disconnect, device number 7 [ 254.538831][ T938] usb usb2-port1: unable to enumerate USB device [ 254.563543][ T938] leds riso_kagaku0:blue: Setting an LED's brightness failed (-38) [ 254.585357][ T938] leds riso_kagaku0:green: Setting an LED's brightness failed (-38) [ 254.596212][ T938] leds riso_kagaku0:red: Setting an LED's brightness failed (-38) [ 254.710903][ T1067] team0 (unregistering): Port device team_slave_1 removed [ 254.775282][ T1067] team0 (unregistering): Port device team_slave_0 removed [ 255.078534][ T5227] Bluetooth: hci2: command tx timeout [ 255.095649][ T6312] netlink: 'syz.2.150': attribute type 1 has an invalid length. [ 255.620125][ T6224] team0: Port device team_slave_0 added [ 255.635493][ T6224] team0: Port device team_slave_1 added [ 255.637905][ T9] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 255.666692][ T6305] lo speed is unknown, defaulting to 1000 [ 255.767949][ T6224] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 255.786001][ T6224] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 255.813805][ T9] usb 2-1: config 190 has too many interfaces: 161, using maximum allowed: 32 [ 255.838351][ T9] usb 2-1: config 190 has an invalid descriptor of length 0, skipping remainder of the config [ 255.850208][ T6224] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 255.877175][ T9] usb 2-1: config 190 has 1 interface, different from the descriptor's value: 161 [ 255.881202][ T5954] veth0_vlan: entered promiscuous mode [ 255.907610][ T9] usb 2-1: config 190 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 255.921273][ T6224] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 255.938537][ T6224] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 255.954797][ T9] usb 2-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 255.965271][ T5227] Bluetooth: hci0: command tx timeout [ 255.980498][ T6224] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 255.981701][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.002775][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.010364][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 256.067179][ T5954] veth1_vlan: entered promiscuous mode [ 256.264328][ T6224] hsr_slave_0: entered promiscuous mode [ 256.278733][ T6224] hsr_slave_1: entered promiscuous mode [ 256.318094][ T6224] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 256.325767][ T6224] Cannot create hsr debugfs directory [ 256.535406][ T6314] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 256.592880][ T6314] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 256.627920][ T9] usb 2-1: string descriptor 0 read error: -71 [ 256.660817][ T9] usbhid 2-1:190.0: couldn't find an input interrupt endpoint [ 256.698593][ T9] usb 2-1: USB disconnect, device number 10 [ 257.064190][ T5954] veth0_macvtap: entered promiscuous mode [ 257.088206][ T5954] veth1_macvtap: entered promiscuous mode [ 257.165691][ T6305] chnl_net:caif_netlink_parms(): no params data found [ 257.555233][ T1067] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.692008][ T1067] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.717043][ T5954] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 257.738219][ T5954] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 257.762328][ T5954] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 257.781648][ T5954] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 257.797340][ T5954] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 257.816028][ T5954] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 257.834737][ T5954] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 257.853338][ T5954] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 257.877090][ T5954] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 257.962111][ T1067] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.000811][ T5954] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 258.019408][ T5954] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.036452][ T5954] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 258.048330][ T5227] Bluetooth: hci0: command tx timeout [ 258.057744][ T5954] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.067624][ T5954] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 258.087871][ T5954] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.106857][ T5954] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 258.127752][ T5954] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.142050][ T5954] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 258.322626][ T1067] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.343801][ T6305] bridge0: port 1(bridge_slave_0) entered blocking state [ 258.351742][ T6305] bridge0: port 1(bridge_slave_0) entered disabled state [ 258.360289][ T6305] bridge_slave_0: entered allmulticast mode [ 258.367217][ T6305] bridge_slave_0: entered promiscuous mode [ 258.376125][ T6305] bridge0: port 2(bridge_slave_1) entered blocking state [ 258.428487][ T6305] bridge0: port 2(bridge_slave_1) entered disabled state [ 258.435788][ T6305] bridge_slave_1: entered allmulticast mode [ 258.450108][ T6305] bridge_slave_1: entered promiscuous mode [ 258.466009][ T5954] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.475226][ T5954] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.484285][ T5954] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.493263][ T5954] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.621827][ T6305] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 258.681003][ T6305] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 258.705791][ T6355] overlayfs: conflicting options: userxattr,metacopy=on [ 258.720605][ T6358] netlink: 'syz.1.159': attribute type 1 has an invalid length. [ 258.787019][ T6305] team0: Port device team_slave_0 added [ 258.798599][ T6305] team0: Port device team_slave_1 added [ 258.933897][ T2945] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 258.959784][ T2945] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 258.968720][ T6305] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 258.987575][ T6305] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 259.015091][ T6305] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 259.076244][ T6305] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 259.084525][ T6305] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 259.110884][ T6305] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 259.124178][ T1067] bridge_slave_1: left allmulticast mode [ 259.131836][ T1067] bridge_slave_1: left promiscuous mode [ 259.137973][ T1067] bridge0: port 2(bridge_slave_1) entered disabled state [ 259.150177][ T1067] bridge_slave_0: left allmulticast mode [ 259.155900][ T1067] bridge_slave_0: left promiscuous mode [ 259.170885][ T1067] bridge0: port 1(bridge_slave_0) entered disabled state [ 259.203313][ T1067] bridge_slave_1: left allmulticast mode [ 259.209424][ T1067] bridge_slave_1: left promiscuous mode [ 259.215466][ T1067] bridge0: port 2(bridge_slave_1) entered disabled state [ 259.229542][ T1067] bridge_slave_0: left allmulticast mode [ 259.235452][ T1067] bridge_slave_0: left promiscuous mode [ 259.245751][ T1067] bridge0: port 1(bridge_slave_0) entered disabled state [ 259.727944][ T5272] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 259.949827][ T5272] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 260.037842][ T5272] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 260.119101][ T5227] Bluetooth: hci0: command tx timeout [ 260.154732][ T5272] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 260.308150][ T5272] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 260.384686][ T5272] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 260.454650][ T5272] usb 3-1: config 0 descriptor?? [ 260.897831][ T5272] plantronics 0003:047F:FFFF.0003: No inputs registered, leaving [ 260.930648][ T5272] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 261.097773][ T5272] usb 3-1: USB disconnect, device number 8 [ 261.287237][ T1067] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 261.329504][ T1067] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 261.351211][ T1067] bond0 (unregistering): Released all slaves [ 261.612369][ T1067] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 261.649580][ T1067] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 261.680187][ T1067] bond0 (unregistering): Released all slaves [ 261.743564][ T2563] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 261.769411][ T2563] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 261.784513][ T6224] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 261.821051][ T6224] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 262.138992][ T6224] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 262.160239][ T6224] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 262.197155][ T6305] hsr_slave_0: entered promiscuous mode [ 262.207917][ T5227] Bluetooth: hci0: command tx timeout [ 262.219336][ T6305] hsr_slave_1: entered promiscuous mode [ 262.237577][ T6305] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 262.247577][ T6305] Cannot create hsr debugfs directory [ 263.612659][ T6399] binder: 6398:6399 ioctl c0182101 200000c0 returned -22 [ 264.047936][ T8] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 264.151997][ T6224] 8021q: adding VLAN 0 to HW filter on device bond0 [ 264.230640][ T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 264.252014][ T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 264.454479][ T8] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 264.467577][ T8] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 264.476876][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 264.499638][ T8] usb 3-1: config 0 descriptor?? [ 264.519917][ T6424] netlink: 12 bytes leftover after parsing attributes in process `syz.1.175'. [ 265.462647][ T6224] 8021q: adding VLAN 0 to HW filter on device team0 [ 265.492373][ T2945] bridge0: port 1(bridge_slave_0) entered blocking state [ 265.499652][ T2945] bridge0: port 1(bridge_slave_0) entered forwarding state [ 265.592528][ T2945] bridge0: port 2(bridge_slave_1) entered blocking state [ 265.599830][ T2945] bridge0: port 2(bridge_slave_1) entered forwarding state [ 265.643152][ T8] plantronics 0003:047F:FFFF.0004: No inputs registered, leaving [ 265.698830][ T1067] hsr_slave_0: left promiscuous mode [ 265.700942][ T8] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 265.716980][ T1067] hsr_slave_1: left promiscuous mode [ 265.771088][ T1067] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 265.793312][ T1067] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 265.842862][ T1067] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 265.867992][ T1067] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 265.897898][ T1067] hsr_slave_0: left promiscuous mode [ 265.917150][ T1067] hsr_slave_1: left promiscuous mode [ 265.979862][ T8] usb 3-1: USB disconnect, device number 9 [ 266.007368][ T1067] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 266.060009][ T1067] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 266.130598][ T1067] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 266.295495][ T1067] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 266.861032][ T1067] veth1_macvtap: left promiscuous mode [ 266.866634][ T1067] veth0_macvtap: left promiscuous mode [ 266.900174][ T1067] veth1_vlan: left promiscuous mode [ 266.926390][ T1067] veth0_vlan: left promiscuous mode [ 267.076174][ T1067] veth1_macvtap: left promiscuous mode [ 267.100391][ T1067] veth0_macvtap: left promiscuous mode [ 267.106061][ T1067] veth1_vlan: left promiscuous mode [ 267.149010][ T1067] veth0_vlan: left promiscuous mode [ 267.209806][ T6451] netlink: 24 bytes leftover after parsing attributes in process `syz.2.182'. [ 267.332926][ T1067] infiniband syz1: set down [ 268.422853][ T6460] sctp: [Deprecated]: syz.3.184 (pid 6460) Use of int in max_burst socket option. [ 268.422853][ T6460] Use struct sctp_assoc_value instead [ 270.445803][ T6471] coredump: 30(syz.3.187): written to core: VMAs: 34, size 97419264; core: 60023750 bytes, pos 97427456 [ 271.044165][ T5319] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 271.232342][ T5319] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 271.268146][ T5319] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 271.290497][ T5319] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 271.312601][ T5319] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 271.322792][ T5319] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 271.352383][ T5319] usb 3-1: config 0 descriptor?? [ 271.419992][ T1067] team0 (unregistering): Port device team_slave_1 removed [ 271.530656][ T6486] Bluetooth: MGMT ver 1.23 [ 271.606892][ T1067] team0 (unregistering): Port device team_slave_0 removed [ 271.730032][ T6490] input: syz0 as /devices/virtual/input/input8 [ 271.827369][ T5319] plantronics 0003:047F:FFFF.0005: No inputs registered, leaving [ 271.866180][ T5319] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 272.026817][ T5319] usb 3-1: USB disconnect, device number 10 [ 272.247869][ T5270] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 272.628285][ T5270] usb 2-1: Using ep0 maxpacket: 8 [ 272.782929][ T5270] usb 2-1: config 1 has an invalid descriptor of length 69, skipping remainder of the config [ 272.878102][ T5270] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 272.914560][ T5270] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 272.946616][ T5270] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 272.984551][ T5270] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 272.995852][ T5270] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 273.876511][ T6508] coredump: 146(syz.2.197): written to core: VMAs: 34, size 97419264; core: 60019654 bytes, pos 97427456 [ 274.009505][ T5270] hub 2-1:1.0: bad descriptor, ignoring hub [ 274.015499][ T5270] hub 2-1:1.0: probe with driver hub failed with error -5 [ 274.024675][ T5270] cdc_wdm 2-1:1.0: skipping garbage [ 274.032466][ T5270] cdc_wdm 2-1:1.0: skipping garbage [ 274.039011][ T5270] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 274.047809][ T5270] cdc_wdm 2-1:1.0: Unknown control protocol [ 274.512483][ T6520] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 274.537917][ T6520] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 274.757959][ T11] smc: removing ib device syz1 [ 274.770870][ T58] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 274.957828][ T8] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 275.138715][ T8] usb 3-1: Using ep0 maxpacket: 16 [ 275.152615][ T8] usb 3-1: config index 0 descriptor too short (expected 57115, got 27) [ 275.162627][ T8] usb 3-1: config 27 has too many interfaces: 71, using maximum allowed: 32 [ 275.172292][ T8] usb 3-1: config 27 has an invalid descriptor of length 235, skipping remainder of the config [ 275.182992][ T8] usb 3-1: config 27 has 0 interfaces, different from the descriptor's value: 71 [ 275.236657][ T8] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 275.256646][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 275.274580][ T8] usb 3-1: Product: syz [ 275.294725][ T8] usb 3-1: Manufacturer: syz [ 275.302285][ T8] usb 3-1: SerialNumber: syz [ 276.813080][ T938] usb 2-1: USB disconnect, device number 11 [ 277.089277][ T1067] team0 (unregistering): Port device team_slave_1 removed [ 277.283102][ T1067] team0 (unregistering): Port device team_slave_0 removed [ 278.076296][ T46] lo speed is unknown, defaulting to 1000 [ 278.459448][ T8] usb 3-1: USB disconnect, device number 11 [ 278.851553][ T6305] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 278.881010][ T6305] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 278.945630][ T6305] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 279.036078][ T58] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 279.796068][ T6224] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 279.836337][ T6305] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 279.909709][ T58] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 279.941437][ T58] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 280.033647][ T58] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 280.094205][ T58] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 280.148688][ T58] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 280.180417][ T6224] veth0_vlan: entered promiscuous mode [ 280.210242][ T58] usb 4-1: config 0 descriptor?? [ 280.276836][ T6224] veth1_vlan: entered promiscuous mode [ 280.298702][ T6305] 8021q: adding VLAN 0 to HW filter on device bond0 [ 280.377069][ T6305] 8021q: adding VLAN 0 to HW filter on device team0 [ 280.438208][ T6224] veth0_macvtap: entered promiscuous mode [ 280.461270][ T5473] bridge0: port 1(bridge_slave_0) entered blocking state [ 280.468471][ T5473] bridge0: port 1(bridge_slave_0) entered forwarding state [ 280.539182][ T5473] bridge0: port 2(bridge_slave_1) entered blocking state [ 280.546526][ T5473] bridge0: port 2(bridge_slave_1) entered forwarding state [ 280.611608][ T6224] veth1_macvtap: entered promiscuous mode [ 280.636443][ T58] usbhid 4-1:0.0: can't add hid device: -71 [ 280.659263][ T58] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 280.687175][ T58] usb 4-1: USB disconnect, device number 5 [ 280.724232][ T6224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 280.755694][ T6224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 280.775982][ T6224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 280.797776][ T6224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 280.823498][ T6224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 280.883342][ T6224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 280.909298][ T6224] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 280.936441][ T6224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 280.976665][ T6224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 280.998341][ T6224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 281.017723][ T6224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 281.027604][ T6224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 281.053863][ T6224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 281.065570][ T6224] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 281.092674][ T6305] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 281.121633][ T6305] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 281.153512][ T6224] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.174574][ T6224] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.197907][ T6224] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.227840][ T6224] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.381679][ T46] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 281.435659][ T5473] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 281.478777][ T5473] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 281.581037][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 281.600364][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 281.607872][ T46] usb 2-1: Using ep0 maxpacket: 8 [ 281.668105][ T46] usb 2-1: config 0 has an invalid interface number: 232 but max is 0 [ 281.676357][ T46] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 281.736979][ T46] usb 2-1: config 0 has no interface number 0 [ 281.769383][ T46] usb 2-1: config 0 interface 232 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 281.809707][ T46] usb 2-1: config 0 interface 232 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 281.838730][ T6305] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 281.867720][ T46] usb 2-1: config 0 interface 232 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 281.901629][ T46] usb 2-1: config 0 interface 232 has no altsetting 0 [ 281.920691][ T46] usb 2-1: New USB device found, idVendor=1943, idProduct=2257, bcdDevice= 3.fc [ 282.160299][ T46] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 282.168493][ T46] usb 2-1: Product: syz [ 282.172710][ T46] usb 2-1: Manufacturer: syz [ 282.177498][ T46] usb 2-1: SerialNumber: syz [ 282.185086][ T46] usb 2-1: config 0 descriptor?? [ 282.201582][ T46] s2255 2-1:0.232: Could not find bulk-in endpoint [ 282.208354][ T46] Sensoray 2255 driver load failed: 0xfffffff4 [ 282.231046][ T46] s2255 2-1:0.232: probe with driver s2255 failed with error -12 [ 282.294699][ T6628] FAULT_INJECTION: forcing a failure. [ 282.294699][ T6628] name failslab, interval 1, probability 0, space 0, times 0 [ 282.308457][ T6628] CPU: 1 UID: 0 PID: 6628 Comm: syz.0.132 Not tainted 6.11.0-syzkaller-07262-g839c4f596f89 #0 [ 282.318837][ T6628] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 282.329026][ T6628] Call Trace: [ 282.332331][ T6628] [ 282.335288][ T6628] dump_stack_lvl+0x241/0x360 [ 282.340017][ T6628] ? __pfx_dump_stack_lvl+0x10/0x10 [ 282.345262][ T6628] ? __pfx__printk+0x10/0x10 [ 282.349902][ T6628] ? __kmalloc_cache_noprof+0x44/0x2c0 [ 282.355404][ T6628] ? __pfx___might_resched+0x10/0x10 [ 282.360736][ T6628] should_fail_ex+0x3b0/0x4e0 [ 282.365463][ T6628] should_failslab+0xac/0x100 [ 282.370178][ T6628] ? nl80211_dump_wiphy_parse+0xa8/0x590 [ 282.375861][ T6628] __kmalloc_cache_noprof+0x6c/0x2c0 [ 282.381194][ T6628] nl80211_dump_wiphy_parse+0xa8/0x590 [ 282.386698][ T6628] ? __pfx_nl80211_dump_wiphy_parse+0x10/0x10 [ 282.392817][ T6628] nl80211_dump_wiphy+0xff/0x790 [ 282.397796][ T6628] ? __pfx___alloc_skb+0x10/0x10 [ 282.402787][ T6628] genl_dumpit+0x107/0x1a0 [ 282.407239][ T6628] netlink_dump+0x647/0xd80 [ 282.411795][ T6628] ? __pfx_netlink_dump+0x10/0x10 [ 282.416879][ T6628] ? __asan_memset+0x23/0x50 [ 282.421511][ T6628] ? genl_start+0x4a8/0x6d0 [ 282.426058][ T6628] __netlink_dump_start+0x5a2/0x790 [ 282.431308][ T6628] genl_rcv_msg+0x88c/0xec0 [ 282.435844][ T6628] ? mark_lock+0x9a/0x360 [ 282.440214][ T6628] ? __pfx_genl_rcv_msg+0x10/0x10 [ 282.445277][ T6628] ? _raw_spin_unlock_irqrestore+0x8f/0x140 [ 282.451207][ T6628] ? __pfx_genl_start+0x10/0x10 [ 282.456085][ T6628] ? __pfx_genl_dumpit+0x10/0x10 [ 282.461058][ T6628] ? __pfx_genl_done+0x10/0x10 [ 282.465870][ T6628] ? __pfx_lock_acquire+0x10/0x10 [ 282.470937][ T6628] ? __pfx_nl80211_dump_wiphy+0x10/0x10 [ 282.476508][ T6628] ? __pfx_nl80211_dump_wiphy_done+0x10/0x10 [ 282.482519][ T6628] ? __pfx___might_resched+0x10/0x10 [ 282.487853][ T6628] netlink_rcv_skb+0x1e3/0x430 [ 282.492657][ T6628] ? __pfx_genl_rcv_msg+0x10/0x10 [ 282.497717][ T6628] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 282.503063][ T6628] ? __netlink_deliver_tap+0x77e/0x7c0 [ 282.508581][ T6628] genl_rcv+0x28/0x40 [ 282.512593][ T6628] netlink_unicast+0x7f6/0x990 [ 282.517406][ T6628] ? __pfx_netlink_unicast+0x10/0x10 [ 282.522723][ T6628] ? __virt_addr_valid+0x183/0x530 [ 282.527873][ T6628] ? __check_object_size+0x49c/0x900 [ 282.533204][ T6628] netlink_sendmsg+0x8e4/0xcb0 [ 282.538024][ T6628] ? __pfx_netlink_sendmsg+0x10/0x10 [ 282.543344][ T6628] ? __sanitizer_cov_trace_const_cmp4+0x18/0x90 [ 282.549726][ T6628] ? __pfx_netlink_sendmsg+0x10/0x10 [ 282.555055][ T6628] __sock_sendmsg+0x221/0x270 [ 282.559780][ T6628] ____sys_sendmsg+0x52a/0x7e0 [ 282.564586][ T6628] ? __pfx_____sys_sendmsg+0x10/0x10 [ 282.569923][ T6628] __sys_sendmsg+0x2aa/0x390 [ 282.574552][ T6628] ? __pfx___sys_sendmsg+0x10/0x10 [ 282.579788][ T6628] ? vfs_write+0x7bf/0xc90 [ 282.584291][ T6628] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 282.590659][ T6628] ? do_syscall_64+0x100/0x230 [ 282.595467][ T6628] ? do_syscall_64+0xb6/0x230 [ 282.600189][ T6628] do_syscall_64+0xf3/0x230 [ 282.604732][ T6628] ? clear_bhb_loop+0x35/0x90 [ 282.609459][ T6628] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 282.615386][ T6628] RIP: 0033:0x7f9d71d7def9 [ 282.619833][ T6628] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 282.639476][ T6628] RSP: 002b:00007f9d717de038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 282.647927][ T6628] RAX: ffffffffffffffda RBX: 00007f9d71f36130 RCX: 00007f9d71d7def9 [ 282.655934][ T6628] RDX: 0000000000000000 RSI: 00000000200003c0 RDI: 0000000000000006 [ 282.663950][ T6628] RBP: 00007f9d717de090 R08: 0000000000000000 R09: 0000000000000000 [ 282.671965][ T6628] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 282.679980][ T6628] R13: 0000000000000000 R14: 00007f9d71f36130 R15: 00007ffe2daf0f18 [ 282.688016][ T6628] [ 282.691115][ C1] vkms_vblank_simulate: vblank timer overrun [ 283.450612][ T6645] netlink: 'syz.0.216': attribute type 21 has an invalid length. [ 283.459555][ T6645] netlink: 128 bytes leftover after parsing attributes in process `syz.0.216'. [ 283.468809][ T6645] netlink: 3 bytes leftover after parsing attributes in process `syz.0.216'. [ 283.849763][ T6305] veth0_vlan: entered promiscuous mode [ 284.036872][ T6305] veth1_vlan: entered promiscuous mode [ 284.867292][ T938] usb 2-1: USB disconnect, device number 12 [ 284.876328][ T6305] veth0_macvtap: entered promiscuous mode [ 284.937302][ T6305] veth1_macvtap: entered promiscuous mode [ 285.584522][ T6305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 285.711442][ T6305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 285.881473][ T6305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 285.938607][ T6305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 285.967864][ T6305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 285.992754][ T6305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 286.038260][ T6305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 286.325714][ T6305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 287.368487][ T6305] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 287.412543][ T6305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 287.460044][ T6305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 287.688710][ T6305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 287.893843][ T6305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 287.905645][ T6305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 287.918809][ T6305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 287.972537][ T6305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 287.990554][ T6305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 288.030803][ T6305] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 288.257905][ T6305] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.438393][ T6305] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.447172][ T6305] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.490284][ T6305] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.849910][ T6567] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 288.872727][ T6567] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 288.921616][ T6567] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 288.931457][ T6567] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 289.168005][ T6674] coredump: 198(syz.1.220): interrupted: fatal signal pending [ 289.201460][ T29] audit: type=1804 audit(1726799406.256:2): pid=6699 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.0.227" name="/newroot/6/bus/bus" dev="overlay" ino=64 res=1 errno=0 [ 289.294754][ T6674] coredump: 198(syz.1.220): Error writing out the process memory [ 289.313427][ T6699] evm: overlay not supported [ 289.323977][ T6674] coredump: 198(syz.1.220): written to core: VMAs: 34, size 97419264; core: 12805062 bytes, pos 13242368 [ 289.367508][ T6699] Invalid ELF header magic: != ELF [ 289.407791][ T6709] Bluetooth: MGMT ver 1.23 [ 289.429007][ T5229] Bluetooth: hci1: command 0x0406 tx timeout [ 290.819645][ T6578] coredump: 191(syz.1.208): written to core: VMAs: 34, size 97419264; core: 60036038 bytes, pos 97427456 [ 291.986605][ T5270] libceph: connect (1)[c::]:6789 error -101 [ 292.025618][ T5270] libceph: mon0 (1)[c::]:6789 connect error [ 292.067947][ T6729] ceph: No mds server is up or the cluster is laggy [ 292.079544][ T5272] libceph: connect (1)[c::]:6789 error -101 [ 292.334093][ T5272] libceph: mon0 (1)[c::]:6789 connect error [ 293.216305][ T6738] syzkaller0: entered promiscuous mode [ 293.222498][ T6738] syzkaller0: entered allmulticast mode [ 293.400334][ T5229] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 293.421665][ T5229] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 293.433728][ T5229] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 293.444195][ T5229] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 293.455202][ T5229] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 293.462557][ T5229] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 293.863761][ T6757] binder: BINDER_SET_CONTEXT_MGR already set [ 293.883412][ T6757] binder: 6730:6757 ioctl 4018620d 20000440 returned -16 [ 294.224063][ T5270] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 294.405423][ T5270] usb 4-1: Using ep0 maxpacket: 32 [ 294.418592][ T5270] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 294.475105][ T5270] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=a6.13 [ 294.495728][ T5270] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 294.504077][ T5270] usb 4-1: Product: syz [ 294.508809][ T5270] usb 4-1: Manufacturer: syz [ 294.513453][ T5270] usb 4-1: SerialNumber: syz [ 294.522364][ T5270] usb 4-1: config 0 descriptor?? [ 294.542121][ T5270] pvrusb2: Hardware description: Terratec Grabster AV400 [ 295.145023][ T5270] pvrusb2: ********** [ 295.318748][ T5270] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 295.341641][ T5270] pvrusb2: Important functionality might not be entirely working. [ 295.349952][ T5270] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 295.380054][ T5270] pvrusb2: ********** [ 295.536309][ T2038] pvrusb2: Invalid write control endpoint [ 295.603044][ T6772] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 295.624382][ T6772] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 295.742331][ T5229] Bluetooth: hci4: command tx timeout [ 295.749588][ T5270] usb 4-1: USB disconnect, device number 6 [ 295.825611][ T2038] pvrusb2: Invalid write control endpoint [ 295.902337][ T2038] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 295.944421][ T2038] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 295.970279][ T2038] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 295.992964][ T2038] pvrusb2: Device being rendered inoperable [ 296.016709][ T2038] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 296.025302][ T2038] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 296.058993][ T2038] pvrusb2: Attached sub-driver cx25840 [ 296.064900][ T2038] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 296.089966][ T2038] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 297.187613][ T9] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 297.197176][ T6754] coredump: 44(syz.0.239): written to core: VMAs: 34, size 97419264; core: 60031942 bytes, pos 97427456 [ 297.356636][ T9] usb 4-1: device descriptor read/64, error -71 [ 297.636756][ T9] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 297.810081][ T9] usb 4-1: device descriptor read/64, error -71 [ 297.929760][ T9] usb usb4-port1: attempt power cycle [ 297.994415][ T5229] Bluetooth: hci4: command tx timeout [ 298.300000][ T9] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 298.335479][ T9] usb 4-1: device descriptor read/8, error -71 [ 298.616403][ T9] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 298.646852][ T9] usb 4-1: device descriptor read/8, error -71 [ 298.777681][ T9] usb usb4-port1: unable to enumerate USB device [ 298.981687][ T6802] syz.4.252 (6802): /proc/6801/oom_adj is deprecated, please use /proc/6801/oom_score_adj instead. [ 299.376350][ T6795] coredump: 33(syz.4.250): written to core: VMAs: 33, size 97345536; core: 60011406 bytes, pos 97353728 [ 300.248102][ T5229] Bluetooth: hci4: command tx timeout [ 300.290758][ T11] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 300.615627][ T6814] tmpfs: Bad value for 'mpol' [ 300.876324][ T6778] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 300.884073][ T6778] IPv6: NLM_F_CREATE should be set when creating new route [ 301.126407][ T6779] netlink: 12 bytes leftover after parsing attributes in process `syz.0.244'. [ 301.148948][ T6803] netlink: 4 bytes leftover after parsing attributes in process `syz.4.252'. [ 301.193528][ T6803] FAULT_INJECTION: forcing a failure. [ 301.193528][ T6803] name failslab, interval 1, probability 0, space 0, times 0 [ 301.248894][ T6803] CPU: 1 UID: 0 PID: 6803 Comm: syz.4.252 Not tainted 6.11.0-syzkaller-07262-g839c4f596f89 #0 [ 301.259213][ T6803] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 301.269310][ T6803] Call Trace: [ 301.272718][ T6803] [ 301.275774][ T6803] dump_stack_lvl+0x241/0x360 [ 301.280519][ T6803] ? __pfx_dump_stack_lvl+0x10/0x10 [ 301.285800][ T6803] ? __pfx__printk+0x10/0x10 [ 301.290470][ T6803] should_fail_ex+0x3b0/0x4e0 [ 301.295366][ T6803] should_failslab+0xac/0x100 [ 301.300138][ T6803] ? __hw_addr_add_ex+0x1a8/0x610 [ 301.305213][ T6803] __kmalloc_cache_noprof+0x6c/0x2c0 [ 301.310572][ T6803] __hw_addr_add_ex+0x1a8/0x610 [ 301.315487][ T6803] dev_addr_init+0x143/0x230 [ 301.320222][ T6803] ? __pfx_dev_addr_init+0x10/0x10 [ 301.325444][ T6803] alloc_netdev_mqs+0x2a1/0x1000 [ 301.330419][ T6803] ? __pfx_br_dev_setup+0x10/0x10 [ 301.335486][ T6803] rtnl_create_link+0x2f9/0xc20 [ 301.340369][ T6803] rtnl_newlink+0x1423/0x20a0 [ 301.345072][ T6803] ? rtnl_newlink+0xaa1/0x20a0 [ 301.349995][ T6803] ? __pfx_rtnl_newlink+0x10/0x10 [ 301.355304][ T6803] ? do_raw_spin_unlock+0x13c/0x8b0 [ 301.360532][ T6803] ? __mutex_lock+0x9a5/0xd70 [ 301.365235][ T6803] ? __mutex_lock+0x527/0xd70 [ 301.369947][ T6803] ? __pfx_rtnl_newlink+0x10/0x10 [ 301.374989][ T6803] rtnetlink_rcv_msg+0x73f/0xcf0 [ 301.379974][ T6803] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 301.385211][ T6803] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 301.390730][ T6803] ? ref_tracker_free+0x643/0x7e0 [ 301.395870][ T6803] netlink_rcv_skb+0x1e3/0x430 [ 301.400691][ T6803] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 301.406215][ T6803] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 301.411633][ T6803] ? netlink_deliver_tap+0x2e/0x1b0 [ 301.416946][ T6803] netlink_unicast+0x7f6/0x990 [ 301.421744][ T6803] ? __pfx_netlink_unicast+0x10/0x10 [ 301.427225][ T6803] ? __virt_addr_valid+0x183/0x530 [ 301.433230][ T6803] ? __check_object_size+0x49c/0x900 [ 301.438537][ T6803] netlink_sendmsg+0x8e4/0xcb0 [ 301.443341][ T6803] ? __pfx_netlink_sendmsg+0x10/0x10 [ 301.448683][ T6803] ? __pfx_netlink_sendmsg+0x10/0x10 [ 301.453989][ T6803] __sock_sendmsg+0x221/0x270 [ 301.458689][ T6803] ____sys_sendmsg+0x52a/0x7e0 [ 301.463476][ T6803] ? __pfx_____sys_sendmsg+0x10/0x10 [ 301.468800][ T6803] __sys_sendmsg+0x2aa/0x390 [ 301.473428][ T6803] ? __pfx___sys_sendmsg+0x10/0x10 [ 301.478553][ T6803] ? vfs_write+0x7bf/0xc90 [ 301.483019][ T6803] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 301.489375][ T6803] ? do_syscall_64+0x100/0x230 [ 301.494161][ T6803] ? do_syscall_64+0xb6/0x230 [ 301.498860][ T6803] do_syscall_64+0xf3/0x230 [ 301.503561][ T6803] ? clear_bhb_loop+0x35/0x90 [ 301.508258][ T6803] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 301.514181][ T6803] RIP: 0033:0x7f6dda37def9 [ 301.518610][ T6803] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 301.538330][ T6803] RSP: 002b:00007f6ddb1a9038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 301.546766][ T6803] RAX: ffffffffffffffda RBX: 00007f6dda536058 RCX: 00007f6dda37def9 [ 301.554763][ T6803] RDX: 0000000000000000 RSI: 0000000020000180 RDI: 0000000000000009 [ 301.562752][ T6803] RBP: 00007f6ddb1a9090 R08: 0000000000000000 R09: 0000000000000000 [ 301.570740][ T6803] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 301.578718][ T6803] R13: 0000000000000000 R14: 00007f6dda536058 R15: 00007ffc82fc9518 [ 301.586727][ T6803] [ 301.757176][ T11] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.858295][ T6744] chnl_net:caif_netlink_parms(): no params data found [ 301.869671][ T6804] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 301.914167][ T6804] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 301.998236][ T11] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.157192][ T6834] netlink: 8 bytes leftover after parsing attributes in process `syz.0.259'. [ 302.225091][ T6834] Driver unsupported XDP return value 0 on prog (id 65) dev N/A, expect packet loss! [ 302.566211][ T5229] Bluetooth: hci4: command tx timeout [ 302.646218][ T11] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.763187][ T6804] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 302.769178][ T6804] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 302.849738][ T6804] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 302.855709][ T6804] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 302.946712][ T6804] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 302.952700][ T6804] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 303.068249][ T6852] netlink: 'syz.0.261': attribute type 2 has an invalid length. [ 303.093875][ T6744] bridge0: port 1(bridge_slave_0) entered blocking state [ 303.140770][ T6744] bridge0: port 1(bridge_slave_0) entered disabled state [ 303.148078][ T6744] bridge_slave_0: entered allmulticast mode [ 303.177911][ T6744] bridge_slave_0: entered promiscuous mode [ 303.207260][ T6744] bridge0: port 2(bridge_slave_1) entered blocking state [ 303.238064][ T6744] bridge0: port 2(bridge_slave_1) entered disabled state [ 303.245348][ T6744] bridge_slave_1: entered allmulticast mode [ 303.284952][ T6744] bridge_slave_1: entered promiscuous mode [ 304.196836][ T6862] syzkaller0: entered promiscuous mode [ 304.241548][ T6862] syzkaller0: entered allmulticast mode [ 304.739519][ T6744] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 304.806928][ T6744] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 305.830288][ T6888] netlink: 148 bytes leftover after parsing attributes in process `syz.1.269'. [ 320.510477][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 320.524565][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 346.638331][ T6846] coredump: 122(syz.3.260): written to core: VMAs: 34, size 97419264; core: 60031942 bytes, pos 97427456 [ 352.420498][ T6905] coredump: 226(syz.1.271): interrupted: fatal signal pending [ 352.506951][ T6905] coredump: 226(syz.1.271): Error writing out the process memory [ 353.581118][ T6905] coredump: 226(syz.1.271): written to core: VMAs: 34, size 97419264; core: 23401414 bytes, pos 32219136 [ 387.152380][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 387.164202][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 439.237952][ T5227] Bluetooth: hci4: command 0x0406 tx timeout [ 453.686732][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 453.817538][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 470.943650][ T30] INFO: task kworker/u8:0:11 blocked for more than 143 seconds. [ 471.130061][ T30] Not tainted 6.11.0-syzkaller-07262-g839c4f596f89 #0 [ 471.495264][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 471.597042][ T30] task:kworker/u8:0 state:D stack:21264 pid:11 tgid:11 ppid:2 flags:0x00004000 [ 473.679387][ T30] Workqueue: netns cleanup_net [ 473.769865][ T30] Call Trace: [ 473.773223][ T30] [ 473.776193][ T30] __schedule+0x17ae/0x4a10 [ 474.106190][ T30] ? __pfx___schedule+0x10/0x10 [ 474.111231][ T30] ? __pfx_lock_release+0x10/0x10 [ 474.218951][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 474.955283][ T30] ? kthread_data+0x52/0xd0 [ 474.965783][ T30] ? schedule+0x90/0x320 [ 474.970104][ T30] ? wq_worker_sleeping+0x66/0x240 [ 475.264013][ T30] ? schedule+0x90/0x320 [ 475.268362][ T30] schedule+0x14b/0x320 [ 475.272576][ T30] schedule_preempt_disabled+0x13/0x30 [ 476.211984][ T30] __mutex_lock+0x6a4/0xd70 [ 476.629697][ T30] ? __mutex_lock+0x527/0xd70 [ 476.634611][ T30] ? cleanup_net+0x6af/0xcc0 [ 476.732527][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 477.031946][ T30] ? bpf_prog_array_free+0x34/0x40 [ 477.037166][ T30] cleanup_net+0x6af/0xcc0 [ 477.760835][ T30] ? __pfx_cleanup_net+0x10/0x10 [ 478.088135][ T30] ? process_scheduled_works+0x976/0x1850 [ 478.685273][ T30] process_scheduled_works+0xa63/0x1850 [ 478.699302][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 478.705377][ T30] ? assign_work+0x364/0x3d0 [ 479.419026][ T30] worker_thread+0x870/0xd30 [ 479.429586][ T30] ? __kthread_parkme+0x169/0x1d0 [ 480.266871][ T30] ? __pfx_worker_thread+0x10/0x10 [ 480.280483][ T30] kthread+0x2f0/0x390 [ 480.284708][ T30] ? __pfx_worker_thread+0x10/0x10 [ 480.289955][ T30] ? __pfx_kthread+0x10/0x10