last executing test programs: 4.846192931s ago: executing program 3 (id=829): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@setlink={0x3c, 0x13, 0x1, 0x4070bd28, 0x25dfdbf9, {0x0, 0x0, 0x0, 0x0, 0x3d82, 0x1f9c6}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'macvtap0\x00'}, @IFLA_PROTO_DOWN={0x5}]}, 0x3c}}, 0x20044000) 4.837312281s ago: executing program 1 (id=830): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB="400000001d0001002bbd7000fbdbdf250a000000", @ANYRES32=0x0], 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x4008000) r1 = socket$packet(0x11, 0x3, 0x300) getsockopt$bt_hci(r1, 0x0, 0x1, 0x0, &(0x7f0000000000)) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000040)=0x56c, 0x4) socket$key(0xf, 0x3, 0x2) socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@multicast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x4f}}, {{@in6=@mcast2, 0x404d3, 0x2b}, 0x0, @in=@empty}}, 0xe4) r3 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmsg$key(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@updpolicy={0xb8, 0x15, 0x105, 0x70bd2a, 0x0, {{@in=@multicast1=0xe0000002, @in6=@ipv4={'\x00', '\xff\xff', @loopback}, 0x0, 0x8, 0x3, 0x0, 0xa, 0x10, 0x0, 0x2}, {0x0, 0x2, 0x0, 0xb14, 0x0, 0x0, 0xffffffff}, {0x0, 0x0, 0xfffffffffffffffd}, 0x4, 0x6e6bb5, 0x0, 0x0, 0x3, 0x3}}, 0xb8}, 0x1, 0x0, 0x0, 0x810}, 0x0) 4.699255308s ago: executing program 3 (id=832): socket$nl_route(0x10, 0x3, 0x0) modify_ldt$write2(0x11, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_dev$vcsa(0x0, 0xa40d, 0x2a8102) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r2, 0x0, 0x0) connect$l2tp6(r2, &(0x7f0000000080)={0xa, 0x0, 0x1000097, @ipv4={'\x00', '\xff\xff', @empty}, 0x4, 0x3}, 0x20) getsockname$l2tp6(r2, 0x0, &(0x7f0000000380)) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(0xffffffffffffffff, 0xc1205531, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, 0x0) openat$nvram(0xffffffffffffff9c, 0x0, 0x200203, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/igmp6\x00') r4 = socket(0x10, 0x5, 0x0) write(r4, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, 0x0, 0x0) preadv(r3, 0x0, 0x0, 0x40000000, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp6\x00') r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, 0x0, 0x2004c000) preadv(r5, &(0x7f00000000c0)=[{&(0x7f0000000200)=""/4111, 0x100f}], 0x1, 0x144, 0x0) 4.638002921s ago: executing program 1 (id=833): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="280002001c00210000000000000000000700000005000000000000e20900020077a9e200000000"], 0x28}}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000200)={0x1, @pix={0x8d8, 0x5, 0x58565559, 0x6, 0x8000002, 0xb, 0xb, 0xfffffffd, 0x0, 0x6, 0x0, 0x4}}) mount(0x0, 0x0, &(0x7f0000000080)='xfs\x00', 0x2208004, 0x0) r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f0000000100)={0xfffffff8, "07bbfeb30c52d28881875bac175ccb0d6c446593aa7eaba9a256d98e03ab46af", 0xffffffffffffffff}) ioctl$SYNC_IOC_FILE_INFO(r4, 0xc0383e04, &(0x7f0000000140)={""/32, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000200)=[{}]}) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000a00)={'syz1\x00', {0x6ec9, 0x7, 0x5, 0x5}, 0x3e, [0x9, 0x1, 0x8, 0x2, 0x5334, 0x400, 0x80000000, 0x5, 0x8, 0x0, 0x3, 0x100f5, 0x10009, 0x39, 0x747d5a13, 0x8, 0xfffffb9a, 0xfffffffc, 0x4, 0xfffffffb, 0x2004, 0x3, 0x4, 0xf252, 0x4, 0xfffff76d, 0x300000, 0x10007, 0xe, 0x4623b, 0x0, 0x0, 0x1ff, 0x8000, 0x3ff, 0x3, 0xd, 0x3, 0xba55, 0x1000, 0x2, 0x200, 0x2, 0x400008, 0xa8, 0x4, 0x2, 0x0, 0x8, 0xc5, 0x1, 0x199f, 0x5, 0x2, 0x9, 0x1, 0x4, 0x6, 0x1000, 0x5, 0x80000040, 0x9, 0x5b, 0x5], [0x6, 0x1e, 0x3, 0x4ef4, 0xfffffffe, 0x3, 0x0, 0x5, 0x7, 0x9a, 0x4, 0x39ca, 0x72c, 0x1c32, 0x3, 0x6, 0x10000, 0x400, 0x8001, 0x3, 0x1, 0x297, 0x5, 0x0, 0x80, 0x4, 0x100, 0x89e, 0x0, 0xfffffffe, 0x0, 0x1000001, 0x10, 0xfffffff9, 0x0, 0x5, 0x1, 0xffffffff, 0x6, 0x5, 0xd65, 0x1, 0x6, 0x96, 0xfffffffd, 0x101, 0x0, 0xb, 0x401, 0xc, 0x3, 0x379, 0x9, 0xe, 0x5, 0x7, 0x6, 0x2, 0x1, 0x1, 0x8, 0x6, 0xbde, 0x3], [0x401, 0xc584, 0xffff, 0x8cd4, 0x7, 0x20, 0xb, 0x4, 0x8, 0x10, 0x7, 0x44c, 0xe8b, 0x5, 0x80000001, 0x808, 0xffffffff, 0x1000, 0x2, 0x10, 0x1, 0xfffffff9, 0xe57, 0x6807, 0x80000001, 0x4, 0x7b, 0x5, 0x9, 0x2, 0x20000005, 0x80, 0x9, 0x9, 0x4a, 0x2, 0x3, 0x2004, 0x20007, 0x6d7e, 0x3, 0x8, 0x8001, 0xbf23, 0x6, 0x8, 0x95a, 0xffffffff, 0x44, 0x3, 0x6, 0x100fffd, 0x2005, 0x2000007, 0x4, 0xea, 0x9, 0x80000001, 0x2, 0xd9, 0x0, 0x807ff, 0x401, 0x15], [0x108e, 0x7fff, 0x3, 0x3, 0x88, 0x2, 0x6, 0x4, 0x50, 0x2, 0x763, 0xb, 0x402, 0x20000800, 0x9, 0x1000, 0x7f, 0x5, 0x3fb6, 0x4, 0x108e8, 0x8, 0x1e0, 0x4, 0xe47, 0x3, 0x3, 0x4, 0x200, 0x1000, 0x3b, 0xffffffff, 0x5, 0x800, 0xa80a, 0x65f413f9, 0x4, 0x8, 0x8a8, 0x2, 0x3e, 0x7, 0x2, 0x4, 0x4, 0x10, 0x0, 0x0, 0x801, 0x1, 0xfffffff8, 0x401, 0x801, 0x0, 0x7, 0xbf3a, 0xfffffffd, 0x7, 0xe, 0x2, 0xe, 0xf, 0x132, 0x6]}, 0x45c) write$P9_RWSTAT(0xffffffffffffffff, 0x0, 0x0) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f0000000180)={&(0x7f00005e0000/0x2000)=nil, &(0x7f00004a7000/0x2000)=nil, 0x2000, 0x2}) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) unshare(0x40020000) mount(&(0x7f00000000c0)=@nullb, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000100)='hfs\x00', 0x2000010, 0x0) 3.982915394s ago: executing program 1 (id=834): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x2c, 0x7, 0x6, 0x801, 0x0, 0x0, {0x3}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x2c}}, 0x0) recvmmsg(r0, &(0x7f0000003840)=[{{0x0, 0x0, &(0x7f0000002780)=[{&(0x7f00000002c0)=""/127, 0x7f}, {&(0x7f0000000340)=""/240, 0xf0}, {&(0x7f0000000440)=""/96, 0x60}, {&(0x7f00000004c0)=""/77, 0x4d}, {&(0x7f00000016c0)=""/4096, 0x1000}], 0x5}, 0x1}], 0x400000000000141, 0x20, 0x0) 3.712060077s ago: executing program 4 (id=836): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)={0x24, r1, 0x1, 0x70bd2b, 0x1, {}, [@WGDEVICE_A_PEERS={0x10, 0x8, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0xb}]}]}]}, 0x24}}, 0x14) 3.590057063s ago: executing program 4 (id=838): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x401, 0x2040000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x6024b, 0xa1}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000004}, 0x0) 3.288864208s ago: executing program 2 (id=840): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000022c0)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2b, 0x2, {0x0, 0x0, 0x0, r3, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1e3a9}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x1003d1, 0x3, 0x20000000, 0x6, 0x6}, 0x66}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0xc804}, 0x2) close(r1) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @random="af75355d1696"}) r4 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r4, &(0x7f0000000280)={&(0x7f0000000740)=@xdp={0x2c, 0x0, r5, 0x42}, 0x80, &(0x7f0000000540)=[{&(0x7f00000002c0)="27030200dc0f24000e00003c000c00000000ff840000000200000003125ce882cbf490d908f1523f000000032d9c2740e260a09c6911cda856d5141bffc6e29a5789796eec81944d7dff184d3319ce9dfb5c1fcd66e67b91a917a67ece64299573503cbc7e27133c4e5ed68c7a9b407a275bcff3432a487ebef21275b91d386164b443c1dfdf63831812e0471639a99b97a9923e4659cd5d1e3c", 0x9a}, {&(0x7f0000002380)="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", 0xc9c}, {&(0x7f0000000640)="c91d588b87bd12b736780a766e3ebca34836bf87f46f8027511d29f92e1a4e8bd5fb5367cef57a6d8db59a972c54efc7ece9c07cb4a0921d4a2320d73ff2d3c54d7af0deecef81ce277562dde92e480b2cf42e52cc039c43fea94e730feb6f5cad427446e7357d255248ab48a0b733cc2c7541488d63b8f6d2c4f0e03ac8faecc74486b2cfb59a28d701271dc07ef9d82e0ce78bca83048caf47fedf4f4df5863a2f849b5fc6ef0b49bf7a6cb6faab2a777dde", 0xb3}, {&(0x7f0000000440)="1da19d23fdff85b98167afffffffff20df65aece0cffbb361fd19ec08ddad9340531b1c05e106ea2b36a41070b0be2be119aa8c7d8444f4341cccd89faa6253e1ee49e9132f015fd9988ae0b16b48669fd2863efe80b92787339069a0f79bc832754fc4c564bc7c61f70be9565f15584fd519f000000005d433935485cdc2ffa2be958749701504aefae9ac942fd1dfc86b59a3d1caf7923edfc844f870f12b251ce19cedc69367b00003c404d4ac7409ae7f612cd45bc47765d0c3b530a47f46c3a9887c3e6ea", 0xc7}, {&(0x7f0000000f80)="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", 0x116}, {&(0x7f00000007c0)="15fccf458aaff722396fd50e7eef24ce0351854fc00a0261d42b46a9cef0bdfb965cb60de78082f61517b91d408213aa7803bf94e124f2a3b62391946d0a97372811b14cd1", 0x45}], 0x6}, 0x8bb3a321ef809b) 3.24196781s ago: executing program 4 (id=841): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=ANY=[@ANYBLOB="6c0000001000010400d201000072f60000020000", @ANYRES32=r3, @ANYBLOB="052b33d061000016300012800b0001006272696467650000200002800c002efdffff"], 0x6c}, 0x1, 0x0, 0x0, 0x10004000}, 0x0) r4 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x74, r5}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5}]}}}]}, 0x3c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01080000000000000000070000000900010073797a300000000054000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000c080003"], 0xd8}}, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={0x0, 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6(0xa, 0x1, 0x8010000000000084) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r6, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x20}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}], {0x14}}, 0x64}}, 0x0) socket(0x26, 0x6, 0xcf9) socket(0x10, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20040084) r8 = socket$inet(0x2, 0x802, 0x1) connect$inet(r8, &(0x7f00000000c0)={0x2, 0x0, @local}, 0x10) write(r8, &(0x7f0000000080)="08008edf773c8000", 0xfd) 2.751921934s ago: executing program 0 (id=842): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f000000a1c0)=ANY=[], 0x3bfc}, 0x1, 0x0, 0x0, 0x4000}, 0x40040) recvmsg$can_raw(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000280)=""/124, 0x7c}, {&(0x7f00000000c0)=""/35, 0x23}], 0x2}, 0x1021) 2.697532377s ago: executing program 1 (id=843): r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfc, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3400000010001fff27bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="81e203a23b980400140012800900010076657468"], 0x34}, 0x1, 0x0, 0x0, 0x4000014}, 0x0) 2.43016676s ago: executing program 4 (id=844): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2c, &(0x7f0000000040)=0x100000001, 0x4) 2.399414791s ago: executing program 1 (id=845): syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) bpf$MAP_CREATE(0x0, &(0x7f0000000fc0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) mount$overlay(0x0, 0x0, 0x0, 0x40000, 0x0) socket$netlink(0x10, 0x3, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000240)={'\x00', 0x4000, 0x6, 0x1, 0x2, 0xff}) sched_setaffinity(0x0, 0xfffffffffffffd7a, &(0x7f0000000580)=0x8000000002) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f000001aa40)=""/102392, 0x18ff8) r1 = syz_open_dev$evdev(&(0x7f0000000100), 0x2, 0x862b01) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/rcu_expedited', 0x169282, 0x0) sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000580)={0x68, 0x0, 0x9, 0x401, 0x0, 0x0, {0xa}, [@NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_TUPLE={0x3c, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}]}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8}}]}, 0x68}}, 0x4008000) connect$can_j1939(r2, 0x0, 0x0) write$char_usb(r1, &(0x7f0000000040)="e2", 0x2250) 2.333565555s ago: executing program 4 (id=846): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet(0x10, 0x3, 0xc) sendmsg(r1, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="2400000002031f001cfffd946fa2830020200a800900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0) r2 = socket$inet(0x10, 0x3, 0xc) sendmsg(r2, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000100)="2400000001031f001cfffd946fa2830020200a800900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r3, &(0x7f0000000040), 0x0) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25CALLACCPTAPPRV(r4, 0x89e8) socket$inet_icmp_raw(0x2, 0x3, 0x1) unshare(0x40000600) socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x430102, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000280)={'xfrm0\x00', 0x2}) r6 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_JOIN_FILTERS(r6, 0x65, 0x6, 0x0, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x1, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback}, "00186371ae9b1c03"}}}}}, 0x0) r7 = socket$kcm(0x2, 0x200000000000001, 0x106) ioctl$OCFS2_IOC_MOVE_EXT(r4, 0x40406f06, &(0x7f00000001c0)={0xe3, 0x2c, 0x1, 0xfffffffffffffffb, 0x3}) r8 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r8, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c000000140011f225bd7000fddbcf2502", @ANYRES32], 0x4c}, 0x1, 0x0, 0x0, 0x48000}, 0x40) sendmsg$inet(r3, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x300400c1) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000300)="304181bdfa066dd0e4a436daa0909259dfc85e922ef37f3cd735c611e329ac1b1440cd77e1dc6dd0a6fa6ed2d69db7dd50a076075fe61020cd", 0x39) getsockopt$IP_VS_SO_GET_DAEMON(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000), 0x0) syz_emit_ethernet(0x88, &(0x7f0000000080)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xc}, @void, {@mpls_uc={0x8847, {[{0x9, 0x0, 0x1}, {0x1, 0x0, 0x1}, {0x20, 0x0, 0x1}, {0xa906}], @ipv4=@generic={{0x17, 0x4, 0x3, 0x3, 0x6a, 0x67, 0x0, 0x6, 0x54b4095d3bae0776, 0x0, @private=0xa010100, @multicast1, {[@timestamp={0x44, 0x24, 0xc7, 0x0, 0x2, [0x2, 0x2, 0x5, 0x2, 0x4, 0x39, 0x3, 0xbb7c]}, @cipso={0x86, 0x24, 0x1, [{0x6, 0xb, "b03fe2ce6453a960b1"}, {0x2, 0x9, "323f044e0a8313"}, {0x6, 0x6, "338ae2a9"}, {0x6, 0x4, "43a7"}]}]}}, "9513036e9273b8430f164254fdb2"}}}}}, &(0x7f0000000180)={0x1, 0x1, [0x590, 0x324, 0x8b3, 0xc46]}) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="0e0001000200", @ANYBLOB=',0'], 0x8) 2.106240916s ago: executing program 0 (id=847): r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000400)={'veth0_to_hsr\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x6, 0x2, &(0x7f0000000000)=@raw=[@btf_id={0x18, 0xa, 0x3, 0x0, 0x1}], &(0x7f00000000c0)='GPL\x00', 0x100, 0x0, 0x0, 0x100, 0x0, '\x00', r1}, 0x94) 2.071016018s ago: executing program 2 (id=848): unshare(0x22020400) r0 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000000)={{0x84, @multicast2, 0x4f29, 0x3, 'nq\x00', 0x5, 0xc, 0x6c}, {@loopback, 0x4e23, 0x3, 0x1, 0x1}}, 0x44) 2.060208678s ago: executing program 0 (id=849): socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) listen(r0, 0xfff) accept4(r0, 0x0, 0x0, 0x800) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$alg(0x26, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r2, &(0x7f0000000380), &(0x7f0000000080)=@udp=r1}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r3, r5, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x1a, &(0x7f0000000340)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x47}, @remote, @val={@void, {0x8100, 0x1, 0x1, 0x4}}, {@llc={0x4, {@snap={0x0, 0x1, "c0", "118190", 0xf9}}}}}, 0x0) 1.870090288s ago: executing program 2 (id=850): r0 = socket(0x10, 0x2, 0x0) sendto$inet6(r0, &(0x7f0000000000)="7800000018002507b9409b14ffff00000204be04020506050e0204094300080004000000040010000d0068d0bf46d32345653600648d0a0012000200000049935ade4a460c89b6ec0cff3959547f509058ba86c902000000004a32000400160005000a0000000000e000e218d1ddf66ed538f25232500000", 0x78, 0x0, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)={0x5c, 0x2, 0x6, 0x101, 0x0, 0x0, {0xa}, [@IPSET_ATTR_REVISION={0x5, 0x4, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0xffffffff}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xe54a}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}]}, 0x5c}}, 0x80) 1.771647703s ago: executing program 4 (id=851): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800e80010000d0428bd7000f4dbff2500008000", @ANYRESOCT=r0, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900680000000c001e"], 0x48}}, 0x4084) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) r5 = socket(0x1e, 0x2, 0x0) getsockopt$inet_sctp6_SCTP_CONTEXT(r5, 0x84, 0x11, 0x0, 0x0) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = io_uring_setup(0x56a2, &(0x7f0000000000)={0x0, 0xfca1, 0x8, 0x2, 0x1e}) io_uring_register$IORING_REGISTER_RING_FDS(r6, 0x13, &(0x7f0000001bc0), 0x2) 1.718798835s ago: executing program 3 (id=852): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="280002001c00210000000000000000000700000005000000000000e20900020077a9e200000000"], 0x28}}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000200)={0x1, @pix={0x8d8, 0x5, 0x58565559, 0x6, 0x8000002, 0xb, 0xb, 0xfffffffd, 0x0, 0x6, 0x0, 0x4}}) r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f0000000100)={0xfffffff8, "07bbfeb30c52d28881875bac175ccb0d6c446593aa7eaba9a256d98e03ab46af", 0xffffffffffffffff}) ioprio_set$pid(0x1, r0, 0x0) ioctl$SYNC_IOC_FILE_INFO(r4, 0xc0383e04, &(0x7f0000000140)={""/32, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000200)=[{}]}) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000a00)={'syz1\x00', {0x6ec9, 0x7, 0x5, 0x5}, 0x3e, [0x9, 0x1, 0x8, 0x2, 0x5334, 0x400, 0x80000000, 0x5, 0x8, 0x0, 0x3, 0x100f5, 0x10009, 0x39, 0x747d5a13, 0x8, 0xfffffb9a, 0xfffffffc, 0x4, 0xfffffffb, 0x2004, 0x3, 0x4, 0xf252, 0x4, 0xfffff76d, 0x300000, 0x10007, 0xe, 0x4623b, 0x0, 0x0, 0x1ff, 0x8000, 0x3ff, 0x3, 0xd, 0x3, 0xba55, 0x1000, 0x2, 0x200, 0x2, 0x400008, 0xa8, 0x4, 0x2, 0x0, 0x8, 0xc5, 0x1, 0x199f, 0x5, 0x2, 0x9, 0x1, 0x4, 0x6, 0x1000, 0x5, 0x80000040, 0x9, 0x5b, 0x5], [0x6, 0x1e, 0x3, 0x4ef4, 0xfffffffe, 0x3, 0x0, 0x5, 0x7, 0x9a, 0x4, 0x39ca, 0x72c, 0x1c32, 0x3, 0x6, 0x10000, 0x400, 0x8001, 0x3, 0x1, 0x297, 0x5, 0x0, 0x80, 0x4, 0x100, 0x89e, 0x0, 0xfffffffe, 0x0, 0x1000001, 0x10, 0xfffffff9, 0x0, 0x5, 0x1, 0xffffffff, 0x6, 0x5, 0xd65, 0x1, 0x6, 0x96, 0xfffffffd, 0x101, 0x0, 0xb, 0x401, 0xc, 0x3, 0x379, 0x9, 0xe, 0x5, 0x7, 0x6, 0x2, 0x1, 0x1, 0x8, 0x6, 0xbde, 0x3], [0x401, 0xc584, 0xffff, 0x8cd4, 0x7, 0x20, 0xb, 0x4, 0x8, 0x10, 0x7, 0x44c, 0xe8b, 0x5, 0x80000001, 0x808, 0xffffffff, 0x1000, 0x2, 0x10, 0x1, 0xfffffff9, 0xe57, 0x6807, 0x80000001, 0x4, 0x7b, 0x5, 0x9, 0x2, 0x20000005, 0x80, 0x9, 0x9, 0x4a, 0x2, 0x3, 0x2004, 0x20007, 0x6d7e, 0x3, 0x8, 0x8001, 0xbf23, 0x6, 0x8, 0x95a, 0xffffffff, 0x44, 0x3, 0x6, 0x100fffd, 0x2005, 0x2000007, 0x4, 0xea, 0x9, 0x80000001, 0x2, 0xd9, 0x0, 0x807ff, 0x401, 0x15], [0x108e, 0x7fff, 0x3, 0x3, 0x88, 0x2, 0x6, 0x4, 0x50, 0x2, 0x763, 0xb, 0x402, 0x20000800, 0x9, 0x1000, 0x7f, 0x5, 0x3fb6, 0x4, 0x108e8, 0x8, 0x1e0, 0x4, 0xe47, 0x3, 0x3, 0x4, 0x200, 0x1000, 0x3b, 0xffffffff, 0x5, 0x800, 0xa80a, 0x65f413f9, 0x4, 0x8, 0x8a8, 0x2, 0x3e, 0x7, 0x2, 0x4, 0x4, 0x10, 0x0, 0x0, 0x801, 0x1, 0xfffffff8, 0x401, 0x801, 0x0, 0x7, 0xbf3a, 0xfffffffd, 0x7, 0xe, 0x2, 0xe, 0xf, 0x132, 0x6]}, 0x45c) write$P9_RWSTAT(0xffffffffffffffff, 0x0, 0x0) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f0000000180)={&(0x7f00005e0000/0x2000)=nil, &(0x7f00004a7000/0x2000)=nil, 0x2000, 0x2}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) unshare(0x40020000) mount(&(0x7f00000000c0)=@nullb, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000100)='hfs\x00', 0x2000010, 0x0) 1.42798605s ago: executing program 2 (id=853): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000300)={&(0x7f0000000680)={0x44, 0x7, 0x6, 0x3, 0x0, 0x0, {0x1, 0x0, 0x9}, [@IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x2}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x8}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x10}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x4}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x800) r1 = socket(0xa, 0x3, 0x3a) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x3, 0x16, &(0x7f0000001180)=ANY=[@ANYBLOB="61154c00000000006113500000000000bfa0000000000000150300000a004e002d35010000000000950041000000000069163a0000000000bf67000000000000350605000fff07206706000005000000160302000ee60060bf500000000000000f650000000000006507f9ff0100000007070000cddfffff1e75000000000000bf54000000000000070400000400f9ff3d4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd3997f9c9c4f6f3be4b369289aa6812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9de57b9d8a814261bdb94a05000000c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe01c5473d51b546cad3f1d5ab2af27546e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc8da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc2300000008ac86d8a297dff0445a15f21dce4de9f29eff65aadc841848c9b562a31e56723888fb126a163f16f920ae2fb494059bba8e3b680324a188076ebae3f55c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20cecac4d03723f1c932c9a6aa57f1ad2e99e0e67ab93716d20000009fbb0f53acbb40b4f8e2739670b31562ed834f2af97787f696649a462e7ee4bcf8b07a10d6735154beb4000000000000000000000000004000bc00f679629709e7e78f4ddc211bc3ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253880800000000000000690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc401000000cc43010000207b40407d000000210000000000000000005f37d83f84e98a523d80bd970d703f37ca364a601ae899a56715a0a62a34c6c94cce6994521629ab028acfc1d926a0f6a5489af8dc2f17923f3c40dfd1970a55c22fe3a5ac000000f4000000000000000000000000c1eb2d91fb79ea00000000000000bb0d00000000000000000000e4007be511fe32fbc90e2364a55e9bb66ac64423d2d00fea2594e190deae46e26c596f84eba9000000000000003cc3aa39ee4b1386bab561cda886fa642994cacd473b543ccb5f0d7b63924f17c67b13631d22a11dc3c6939628950000000000000001c7205a6b068fff496d2da7d632bd1f61b007e1ff5f1be19637302f3b41eae50509fd05d12f6186f117b062df67d3a63f3265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b30410856e858d27adee7daf32903d3fc78700d429a2d4c8b6d803eb83eecfe4c7ff9e6ab5a52e83d089dad7a8710e0254f1b11cced7bc3c8da0c44d2ebf9f6f3ff3be4d1458077c2253b0c7c7a0a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631dbaa74f22bad050e9856b48ae3a03a497c37758537650fe6db88aa3c41fdc3d78e046f6160e1741299e8dc29906870e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a267ff0afa1e1c758a0079b747067312e9815a21cb3f1f8150d999d788535a4d3114dbc7e2bf2402a75fd7a55733360040855ed5d1c0d634fb9fb38f84d9d87b27f8a5d91217b728f13e3ee20e69e0ffb2780b1a7af137ff7b4ff010404faf0a4da65396174b4563d54b52f06c870edf0c5d744b5272b44c23488b2bdbff947c4dfa108cbb88202ee1192b81f428a5b3c299848649e1a6bff52f657a67463d7dbf85ae9321fc2b517dc4a29b9b5a8ded5de8206c812439ab129ae818837ee1562078fc524a3baf49a0be9bb7d958d5e87c6c09bf71a894bad62934782cc308e936d7637e07c4a2a3bc87b0da23c00d9ef418cf19e7a8c4c328be0ce95798adc2dca871073f6bd61dc18402cde8b0100010000000000abc86b94f8cbde4d470667bee722a6a2af483ad0d3415ed0f9db059acaba9eaea93f811d434e00000000000000000000d154ba10a8e51489a614e69722bac30000000000000000000000000000c5dfd188ff555285b9743d3aac000583f42d168613151d681a2f71373f20d92c9048407c91fabecfe8b3f2d545ffffffff00000000a1cfc4336324c86f3dcb43e9a58208077e90f6ec1c7ac756f61dcc372cdd30b82507489f0bbfbd3c3f21752e81319c0161e154ceb16e00bc7f5a6962dff317f4d014786e432817064874d69a39cb0da31bcc5f81894d8a80756447322207b4007dff12eb95066cc6bc256f0a12282224d718b06ca80b57aa183dd0c3eee45891441f2b89b4c67aa9882281393954972046974f18df232cd7fca610e33f51c2d062020f403d85ff36c26e2f6bd1d82f4d3ceb3472d9a77e0057a3bfe697d9ab7585f4a1b381343d2cf857689232f4fc5135790662dc1419a374be9d7b3e5be2886d23add90d862f1a682ff11c798e338af3e5bb0f9d3952b15bf3e0c618c89d20ca1e18a031397693bf3cfbd8417e5b55e641c898c280356f2da222d5d68919d98158578dcf18efa404e508bcbbb8cfcf70086821ebdf34c9a1dff45af873df904c2bdbef81f246d26f4b40df949e12bdac18533d4e11c608cc31d60cb591c40a7b386fa1c753336d7220a35118d4919b45eff32aab684ee54c0a263c806aabac2f66cb052f847c62c6691de14e97aa7e9dc8ecf0cd50540246d2b746e41e5b4e2c095039dfe0f71db6265f7580d098be40ef36faee5d1695830d4242a23e541e6ce9fa1998d8961ef4fe3c8e8fbb566f148c8befc229614a4b7f80d237b8abc6fc0407de31d6e5532f360d379f20f054692b47207922fe6c14eba96c9a7ae906abc1ae1ae8c4fae92883cfa1978a04bb000000000000000000000000000000884efcecca45ea4ab2ec097668456a6ff12854997f5aed737d5205ace5c0b64f87ef10784d0479cb44ca077e0c4ce6ff880e2ce3de63853a9740e9233683bfc8636bee293aeeb680b399a296e6f44c07b5fc5d9d359af007f23004a7acb6df23664ea209620b4fe0f4df81c33bd8ca2335cb4b50881937379b45a301175c3e8eb32970564ec8e25c46ee3bae079faedaad94276cfa251be8256c4c37fc84a25c3a2feb39e94a5266a10716d4a3cef499fa176018054e9149a1c9d20a809ce3"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) r2 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r2, &(0x7f00000032c0)=[{&(0x7f0000000440)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)="03", 0x1}], 0x1}], 0x1, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0) sendmmsg$inet_sctp(r2, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)='a', 0xdd02}], 0xc, &(0x7f0000000000)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0xc}}], 0x30}], 0x1, 0x0) setsockopt$MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @private2={0xfc, 0x2, '\x00', 0x8}, 0x809}, {0xa, 0x8, 0x0, @empty}, 0x2, {[0x0, 0x1, 0xfffffffe, 0x0, 0xffffffff, 0x8, 0x40]}}, 0x5c) setsockopt$MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}, 0x0, {[0x1, 0x0, 0x0, 0x0, 0x9]}}, 0x5c) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r1, 0x84, 0x6c, &(0x7f0000000380)={0x0, 0x80, "0e577e79e96f6369099828c441a6ca34f8ce777143396408bda9a0d2384ccc14c94ecdaafe9cd009470a391966aa14c8901f8a0a89937993f4ae58e57e3aaaab2cc9284f0e26a7b58a68664d2f2778bc74c47bb1b08a19e0f235725455486fe21e8484d46d6cf835d898a2c4a5c86bf8a4f4eb7063b1e9451d78893f960d69c2"}, &(0x7f0000000080)=0x88) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000300)="5c00000013006bec9e3be35c6e17aa31076b876c1d0000007ea60864160af3653c000cc004000202080003000300000007000200eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0000300", 0x51}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f0000000580)={r3, 0xe8, "0f5efaacd0d12878f2659e749babba7d41e443975068a8178cd07aa09a9753f5e4a3c56672587b74e32d5b5fbf6ba2722bec7bcf22286464f872f2ee202284493c4021100739ac60f91da2345778cd1bdbe2d988b6e6ae1a67b0ff2197fda56d55b50a198331561220b7805108684e433e54bb839adce44669b37fc583eca8acf610c7cdd57666ac3c01f2a6a62dfb50e8a6785b6a57e3614fd9904e21c0c26a0027bebe458001fb746fa5b07eeff2cf7a914dab742e5b31f8e6a2c4ce7595fd420f2e53b802a1fd96ba89fc8d56e42d1266c3c0609f878c889dd7fcde33b07909908730606100f7"}, &(0x7f0000000180)=0xf0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05400000000000000000010000000900010073797a300000000040000000030a01010000000000000000010000000900030073797a300000000014000480080002400000000008000140000000000900010073797a30000000004c000000060a01040000000000000000010000002400048020000180080001006f73"], 0xd4}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newtaction={0x48, 0x1d, 0x1, 0x70bd28, 0x0, {}, [{0x34, 0x1, [@m_csum={0x30, 0x2, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0) setsockopt$MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f00000001c0)={{0xa, 0x0, 0x0, @local}, {0xa, 0x4e22, 0x800, @empty}, 0x0, {[0x0, 0x8000, 0x0, 0xfffffffc]}}, 0x5c) setsockopt$MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}, {0xa, 0x0, 0x4, @empty}, 0x0, {[0x3, 0x0, 0x0, 0x1, 0x89f, 0x8, 0x1]}}, 0x5c) setsockopt$MRT6_FLUSH(r1, 0x29, 0xd4, &(0x7f0000000340)=0x6, 0x4) r7 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_tcp_TCP_REPAIR(r7, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r7, &(0x7f00000001c0)={0xa, 0x4e1f, 0x2, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) connect$inet6(r7, &(0x7f00000000c0)={0xa, 0x4e5b, 0x80000000, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0x5}, 0x1c) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2000001, 0x12, r8, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0x9, &(0x7f0000000140)=0xfb78, 0x4) r9 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r9, &(0x7f0000000040)={0x4000000, 0x0, 0x0}, 0x0) 919.080645ms ago: executing program 3 (id=854): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000f2ffffff0000000000000000850000001700000095"], &(0x7f00000005c0)='GPL\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r0, 0x4000000, 0xf, 0x0, &(0x7f0000000040)="976d9023d56482cd284a63da539706", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x50) 830.050929ms ago: executing program 0 (id=855): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) close(r1) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) bpf$LINK_GET_NEXT_ID(0x1f, 0x0, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r3, 0x29, 0x2a, &(0x7f00000003c0)={0x9, {{0xa, 0x4e22, 0x6, @ipv4={'\x00', '\xff\xff', @remote}, 0x6}}}, 0x88) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000080), 0x4) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000240)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_STATION(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000280)={0x1c, r4, 0x303, 0x0, 0xfffffffc, {{}, {@val={0x8, 0x3, r7}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000001}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)=ANY=[@ANYRES16=r7, @ANYRESHEX, @ANYRESOCT, @ANYRES32=r3], 0x5c}}, 0x0) sendmsg$NL80211_CMD_ASSOCIATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r2, 0x1, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_VHT_CAPABILITY_MASK={0x10, 0xb0, {0x200000, {0x5, 0x9, 0x5, 0x3ff}}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20048800}, 0x4000010) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x1, 0x42031, 0xffffffffffffffff, 0x80000000) 778.620742ms ago: executing program 3 (id=856): sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000b40)={0x130, 0x0, 0x2, 0x301, 0x0, 0x0, {0x7, 0x0, 0x2}, [@CTA_EXPECT_NAT={0xb4, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x3}, @CTA_EXPECT_NAT_TUPLE={0x10, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}]}, @CTA_EXPECT_NAT_TUPLE={0x44, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_ZONE={0x6}]}, @CTA_EXPECT_NAT_TUPLE={0x54, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @empty}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0xbc}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}]}]}, @CTA_EXPECT_TUPLE={0x68, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}]}]}, 0x130}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) 684.288146ms ago: executing program 0 (id=857): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000005c0)=@newlink={0x28, 0x10, 0x1, 0x709d6c, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x2b24d, 0x15b30}, [@IFLA_TARGET_NETNSID={0x8, 0x2e, 0x3}]}, 0x28}, 0x1, 0x0, 0x0, 0xc1}, 0x4000010) 578.162892ms ago: executing program 2 (id=858): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000580)="d4fa0c511a", 0x5}], 0x2}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b18, &(0x7f0000000000)={'wlan1\x00'}) 558.581402ms ago: executing program 3 (id=859): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000022c0)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2b, 0x2, {0x0, 0x0, 0x0, r3, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1e3a9}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x1003d1, 0x3, 0x20000000, 0x6, 0x6}, 0x66}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0xc804}, 0x2) close(r1) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @random="af75355d1696"}) r4 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r4, &(0x7f0000000280)={&(0x7f0000000740)=@xdp={0x2c, 0x0, r5, 0x42}, 0x80, &(0x7f0000000540)=[{&(0x7f00000002c0)="27030200dc0f24000e00003c000c00000000ff840000000200000003125ce882cbf490d908f1523f000000032d9c2740e260a09c6911cda856d5141bffc6e29a5789796eec81944d7dff184d3319ce9dfb5c1fcd66e67b91a917a67ece64299573503cbc7e27133c4e5ed68c7a9b407a275bcff3432a487ebef21275b91d386164b443c1dfdf63831812e0471639a99b97a9923e4659cd5d1e3c", 0x9a}, {&(0x7f0000002380)="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", 0xc9c}, {&(0x7f0000000640)="c91d588b87bd12b736780a766e3ebca34836bf87f46f8027511d29f92e1a4e8bd5fb5367cef57a6d8db59a972c54efc7ece9c07cb4a0921d4a2320d73ff2d3c54d7af0deecef81ce277562dde92e480b2cf42e52cc039c43fea94e730feb6f5cad427446e7357d255248ab48a0b733cc2c7541488d63b8f6d2c4f0e03ac8faecc74486b2cfb59a28d701271dc07ef9d82e0ce78bca83048caf47fedf4f4df5863a2f849b5fc6ef0b49bf7a6cb6faab2a777dde", 0xb3}, {&(0x7f0000000440)="1da19d23fdff85b98167afffffffff20df65aece0cffbb361fd19ec08ddad9340531b1c05e106ea2b36a41070b0be2be119aa8c7d8444f4341cccd89faa6253e1ee49e9132f015fd9988ae0b16b48669fd2863efe80b92787339069a0f79bc832754fc4c564bc7c61f70be9565f15584fd519f000000005d433935485cdc2ffa2be958749701504aefae9ac942fd1dfc86b59a3d1caf7923edfc844f870f12b251ce19cedc69367b00003c404d4ac7409ae7f612cd45bc47765d0c3b530a47f46c3a9887c3e6ea", 0xc7}, {&(0x7f0000000f80)="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", 0x116}, {&(0x7f00000007c0)="15fccf458aaff722396fd50e7eef24ce0351854fc00a0261d42b46a9cef0bdfb965cb60de78082f61517b91d408213aa7803bf94e124f2a3b62391946d0a97372811b14cd1", 0x45}], 0x6}, 0x8bb3a321ef809b) 489.750726ms ago: executing program 0 (id=860): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x3, 0x3, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0xffffffff}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f00000003c0)="c274386d178550cb864bd57221bc", 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r1, 0x0, 0x0, 0x80800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa693584", 0x35}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a", 0x47}], 0x2}], 0x1, 0x40800) r4 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) socket$alg(0x26, 0x5, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x44804) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="0000000000004a641c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010001fff0000000001000000000000d7", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e0000000400028008000a00", @ANYRES32=r5], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r9, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x60, &(0x7f0000000300)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c00000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800b0001006772657461700000240002800800070064010100060003001008000008001500700f0d0008000700ac1414bb08000a00", @ANYRES32=r10], 0x5c}}, 0x40) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r11}, @IFLA_MASTER={0x8, 0xa, r11}]}, 0x4c}}, 0x884) 413.14916ms ago: executing program 2 (id=861): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) write(r1, 0x0, 0x0) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r1, 0x8914, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305829, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5421, &(0x7f00000000c0)=0x7) sendmsg$TIPC_CMD_GET_NODES(0xffffffffffffffff, 0x0, 0x20000000) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r2, 0x890b, &(0x7f0000000380)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x7, @null, @bpq0, 0x0, [@bcast, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) syz_open_procfs$namespace(0x0, &(0x7f0000000240)='ns/time_for_children\x00') r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r3, 0x890b, &(0x7f0000000380)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x6, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bpq0, 0x0, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @bcast, @null]}) ioctl$sock_rose_SIOCDELRT(r3, 0x890c, &(0x7f00000000c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x6, @null, @bpq0, 0x1, [@null, @default, @default, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default]}) 0s ago: executing program 1 (id=862): socket$nl_route(0x10, 0x3, 0x0) modify_ldt$write2(0x11, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_dev$vcsa(0x0, 0xa40d, 0x2a8102) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r2, 0x0, 0x0) connect$l2tp6(r2, &(0x7f0000000080)={0xa, 0x0, 0x1000097, @ipv4={'\x00', '\xff\xff', @empty}, 0x4, 0x3}, 0x20) getsockname$l2tp6(r2, 0x0, &(0x7f0000000380)) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(0xffffffffffffffff, 0xc1205531, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, 0x0) openat$nvram(0xffffffffffffff9c, 0x0, 0x200203, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/igmp6\x00') r4 = socket(0x10, 0x5, 0x0) write(r4, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, 0x0, 0x0) preadv(r3, 0x0, 0x0, 0x40000000, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp6\x00') r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, 0x0, 0x2004c000) preadv(r5, &(0x7f00000000c0)=[{&(0x7f0000000200)=""/4111, 0x100f}], 0x1, 0x144, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.134' (ED25519) to the list of known hosts. [ 49.366858][ T4171] cgroup: Unknown subsys name 'net' [ 49.526854][ T4171] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 50.771731][ T4171] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 52.029340][ T4184] chnl_net:caif_netlink_parms(): no params data found [ 52.086339][ T4183] chnl_net:caif_netlink_parms(): no params data found [ 52.192199][ T4184] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.199313][ T4184] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.208228][ T4184] device bridge_slave_0 entered promiscuous mode [ 52.229343][ T4188] chnl_net:caif_netlink_parms(): no params data found [ 52.238241][ T4184] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.245476][ T4184] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.253280][ T4184] device bridge_slave_1 entered promiscuous mode [ 52.260756][ T4189] chnl_net:caif_netlink_parms(): no params data found [ 52.316703][ T4183] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.323905][ T4183] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.331674][ T4183] device bridge_slave_0 entered promiscuous mode [ 52.349981][ T4184] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 52.368303][ T4183] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.375495][ T4183] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.383717][ T4183] device bridge_slave_1 entered promiscuous mode [ 52.390676][ T4185] chnl_net:caif_netlink_parms(): no params data found [ 52.400788][ T4184] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 52.475081][ T4184] team0: Port device team_slave_0 added [ 52.483790][ T4183] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 52.509486][ T4184] team0: Port device team_slave_1 added [ 52.515674][ T4188] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.522871][ T4188] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.530508][ T4188] device bridge_slave_0 entered promiscuous mode [ 52.539716][ T4183] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 52.581370][ T4188] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.588755][ T4188] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.597240][ T4188] device bridge_slave_1 entered promiscuous mode [ 52.604366][ T4189] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.611428][ T4189] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.619883][ T4189] device bridge_slave_0 entered promiscuous mode [ 52.641787][ T4183] team0: Port device team_slave_0 added [ 52.660997][ T4185] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.668319][ T4185] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.676345][ T4185] device bridge_slave_0 entered promiscuous mode [ 52.684043][ T4189] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.691095][ T4189] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.699448][ T4189] device bridge_slave_1 entered promiscuous mode [ 52.707956][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 52.715335][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.741674][ T4184] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 52.755145][ T4183] team0: Port device team_slave_1 added [ 52.761241][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 52.768352][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.794412][ T4184] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 52.814385][ T4185] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.821478][ T4185] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.829652][ T4185] device bridge_slave_1 entered promiscuous mode [ 52.862377][ T4188] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 52.886962][ T4189] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 52.896803][ T4183] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 52.903835][ T4183] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.929846][ T4183] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 52.942666][ T4188] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 52.977885][ T4189] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 52.987486][ T4183] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 52.994672][ T4183] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.020948][ T4183] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 53.038847][ T4185] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.051494][ T4188] team0: Port device team_slave_0 added [ 53.062265][ T4184] device hsr_slave_0 entered promiscuous mode [ 53.069026][ T4184] device hsr_slave_1 entered promiscuous mode [ 53.088790][ T4185] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.098854][ T4188] team0: Port device team_slave_1 added [ 53.125714][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.132860][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.159088][ T4188] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 53.190071][ T4189] team0: Port device team_slave_0 added [ 53.202957][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.209922][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.235866][ T4188] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 53.249279][ T4185] team0: Port device team_slave_0 added [ 53.263443][ T4189] team0: Port device team_slave_1 added [ 53.284792][ T4185] team0: Port device team_slave_1 added [ 53.306511][ T4183] device hsr_slave_0 entered promiscuous mode [ 53.313633][ T4183] device hsr_slave_1 entered promiscuous mode [ 53.320080][ T4183] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 53.328198][ T4183] Cannot create hsr debugfs directory [ 53.359511][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.366725][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.393128][ T4185] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 53.425832][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.432870][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.459093][ T4189] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 53.470614][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.478151][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.504102][ T4185] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 53.537746][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.545515][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.571525][ T4189] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 53.601914][ T4188] device hsr_slave_0 entered promiscuous mode [ 53.608751][ T4188] device hsr_slave_1 entered promiscuous mode [ 53.615585][ T4188] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 53.623283][ T4188] Cannot create hsr debugfs directory [ 53.692786][ T4185] device hsr_slave_0 entered promiscuous mode [ 53.699425][ T4185] device hsr_slave_1 entered promiscuous mode [ 53.706373][ T4185] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 53.714027][ T4185] Cannot create hsr debugfs directory [ 53.767113][ T4189] device hsr_slave_0 entered promiscuous mode [ 53.774842][ T4189] device hsr_slave_1 entered promiscuous mode [ 53.781444][ T4189] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 53.789247][ T4189] Cannot create hsr debugfs directory [ 53.822873][ T23] Bluetooth: hci4: command 0x0409 tx timeout [ 53.834781][ T23] Bluetooth: hci3: command 0x0409 tx timeout [ 53.840896][ T23] Bluetooth: hci1: command 0x0409 tx timeout [ 53.861789][ T23] Bluetooth: hci0: command 0x0409 tx timeout [ 53.867911][ T23] Bluetooth: hci2: command 0x0409 tx timeout [ 53.991835][ T4184] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 54.014930][ T4184] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 54.033668][ T4184] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 54.042595][ T4184] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 54.090124][ T4183] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 54.100675][ T4183] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 54.119118][ T4183] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 54.135680][ T4183] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 54.159534][ T4188] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 54.189004][ T4188] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 54.198254][ T4188] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 54.218423][ T4188] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 54.272405][ T4184] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.288551][ T4189] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 54.300293][ T4189] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 54.309794][ T4189] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 54.342128][ T4189] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 54.355657][ T528] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 54.365504][ T528] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 54.379599][ T4183] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.389778][ T4184] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.408846][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 54.418803][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 54.428625][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.435863][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.445330][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 54.467918][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 54.475906][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 54.485389][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 54.495657][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 54.504718][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.511820][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.522314][ T4183] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.534956][ T4185] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 54.556026][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 54.565795][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 54.574807][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 54.583981][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.591041][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.599817][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 54.609114][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 54.617872][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 54.628223][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 54.636836][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 54.646433][ T4185] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 54.671121][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 54.680754][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 54.689573][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 54.702195][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 54.713549][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 54.722687][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 54.731045][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.738129][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.748029][ T4185] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 54.759365][ T4185] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 54.781165][ T4184] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 54.793157][ T4184] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 54.825914][ T528] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 54.836737][ T528] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 54.847317][ T528] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 54.855942][ T528] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 54.864823][ T528] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 54.874152][ T528] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 54.883825][ T528] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 54.893420][ T528] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 54.903537][ T528] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 54.912029][ T528] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 54.920254][ T528] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 54.928868][ T528] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 54.937284][ T528] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 54.962892][ T4183] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 54.976392][ T4188] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.027145][ T4188] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.043320][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 55.052960][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 55.063259][ T4189] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.094001][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 55.110162][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 55.119982][ T1277] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.127130][ T1277] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.136703][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 55.145709][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 55.154203][ T1277] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.161275][ T1277] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.202469][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 55.210681][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 55.219848][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 55.229830][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 55.239746][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 55.248278][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 55.257203][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 55.267011][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 55.275099][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 55.283212][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 55.299241][ T4189] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.328741][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 55.337599][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 55.346722][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 55.355671][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 55.364691][ T1277] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.371794][ T1277] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.379419][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 55.388081][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 55.397393][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 55.406234][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 55.415051][ T1277] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.422135][ T1277] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.429892][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 55.438607][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 55.447001][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 55.463015][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 55.471909][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 55.479376][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 55.487131][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 55.496868][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 55.506710][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 55.519739][ T4183] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.529083][ T4188] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 55.551767][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 55.559718][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 55.577972][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 55.592871][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 55.601490][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 55.624544][ T4184] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.636443][ T4185] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.649165][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 55.658045][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 55.667942][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 55.676682][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 55.718372][ T4189] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 55.737884][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 55.747713][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 55.757062][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 55.765562][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 55.775146][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 55.783278][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 55.800302][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 55.809826][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 55.819611][ T4183] device veth0_vlan entered promiscuous mode [ 55.834757][ T4185] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.867429][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 55.879971][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 55.889324][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 55.897523][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 55.905308][ T4232] Bluetooth: hci2: command 0x041b tx timeout [ 55.907369][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 55.918936][ T4232] Bluetooth: hci0: command 0x041b tx timeout [ 55.925156][ T4232] Bluetooth: hci1: command 0x041b tx timeout [ 55.927120][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 55.931235][ T4232] Bluetooth: hci3: command 0x041b tx timeout [ 55.945321][ T4232] Bluetooth: hci4: command 0x041b tx timeout [ 55.948876][ T4188] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.967466][ T4184] device veth0_vlan entered promiscuous mode [ 55.976038][ T4183] device veth1_vlan entered promiscuous mode [ 56.008124][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 56.018123][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 56.029705][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 56.038787][ T4242] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.045928][ T4242] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.055270][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 56.064579][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 56.073506][ T4242] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.080579][ T4242] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.089106][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 56.098705][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 56.126725][ T4184] device veth1_vlan entered promiscuous mode [ 56.135742][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 56.150452][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 56.160346][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 56.176864][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 56.187320][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 56.200612][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 56.225684][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 56.235211][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 56.247070][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 56.255870][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 56.264240][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 56.272973][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 56.292043][ T4189] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.317312][ T4185] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 56.329372][ T4185] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 56.348297][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 56.357207][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 56.366783][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 56.375803][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 56.385269][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 56.396462][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 56.407088][ T4184] device veth0_macvtap entered promiscuous mode [ 56.420822][ T4184] device veth1_macvtap entered promiscuous mode [ 56.430113][ T4183] device veth0_macvtap entered promiscuous mode [ 56.462876][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 56.470934][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 56.486681][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 56.496958][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 56.506040][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 56.515062][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 56.523987][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 56.535576][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.554195][ T4183] device veth1_macvtap entered promiscuous mode [ 56.567347][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 56.579330][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 56.594566][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 56.619048][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.642289][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.653127][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.664740][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.674970][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 56.685679][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 56.696729][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 56.707372][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 56.716469][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 56.725488][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 56.734560][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 56.744740][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 56.753228][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 56.760964][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 56.768886][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 56.776724][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 56.784983][ T4188] device veth0_vlan entered promiscuous mode [ 56.794271][ T4184] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.803240][ T4184] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.812995][ T4184] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.821901][ T4184] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.846945][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.858992][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.871863][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.882609][ T4183] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.891301][ T4183] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.902975][ T4183] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.912396][ T4183] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.932907][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 56.941879][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 56.950452][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 56.960279][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 56.970351][ T4188] device veth1_vlan entered promiscuous mode [ 56.982710][ T4185] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.989864][ T4189] device veth0_vlan entered promiscuous mode [ 57.049116][ T4189] device veth1_vlan entered promiscuous mode [ 57.067473][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 57.078764][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 57.088195][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 57.097395][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 57.106854][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 57.116365][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 57.127453][ T4188] device veth0_macvtap entered promiscuous mode [ 57.142408][ T4188] device veth1_macvtap entered promiscuous mode [ 57.200626][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 57.210526][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 57.218946][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 57.228309][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 57.237167][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 57.247244][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 57.299274][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.310548][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.320735][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.332173][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.343838][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.352733][ T4189] device veth0_macvtap entered promiscuous mode [ 57.364601][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 57.373456][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 57.382190][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 57.390436][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 57.399644][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 57.409328][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 57.417384][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 57.426904][ T4185] device veth0_vlan entered promiscuous mode [ 57.439697][ T4189] device veth1_macvtap entered promiscuous mode [ 57.448749][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.459923][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.469874][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.480381][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.491498][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.513374][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.521399][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.537109][ T4185] device veth1_vlan entered promiscuous mode [ 57.546646][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 57.555063][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 57.564434][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 57.573425][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 57.603998][ T4242] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.612535][ T4242] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.627905][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.640700][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.651040][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.661558][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.672543][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.683273][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.695195][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.704947][ T4188] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.714559][ T4188] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.723580][ T4188] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.735349][ T4188] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.750870][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 57.759711][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 57.767684][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 57.776507][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 57.786764][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.795406][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.800442][ T4185] device veth0_macvtap entered promiscuous mode [ 57.814731][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.825857][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.839656][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.850320][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.860412][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.871062][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.882773][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.900993][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.905824][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 57.911676][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.923122][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 57.936040][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 57.944916][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 57.954656][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 57.963457][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 57.971243][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 57.982040][ T4234] Bluetooth: hci4: command 0x040f tx timeout [ 57.989089][ T4234] Bluetooth: hci3: command 0x040f tx timeout [ 58.002438][ T4234] Bluetooth: hci1: command 0x040f tx timeout [ 58.008553][ T4234] Bluetooth: hci0: command 0x040f tx timeout [ 58.017081][ T4234] Bluetooth: hci2: command 0x040f tx timeout [ 58.028030][ T4185] device veth1_macvtap entered promiscuous mode [ 58.057405][ T4189] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.078952][ T4189] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.096881][ T4189] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.106109][ T4189] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.260719][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.296935][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.318887][ T1277] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.332209][ T1277] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.397220][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.415686][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.428928][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.134865][ T4270] sched: RT throttling activated [ 60.147111][ T1108] Bluetooth: hci2: command 0x0419 tx timeout [ 60.153384][ T1108] Bluetooth: hci0: command 0x0419 tx timeout [ 60.153923][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.160035][ T1108] Bluetooth: hci1: command 0x0419 tx timeout [ 60.171884][ T4279] binder: 4271:4279 ioctl 4018620d 0 returned -22 [ 60.175881][ T1108] Bluetooth: hci3: command 0x0419 tx timeout [ 60.211195][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.155768][ T1108] Bluetooth: hci4: command 0x0419 tx timeout [ 61.160687][ T4279] binder: 4271:4279 ioctl c0306201 0 returned -14 [ 61.175690][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.441479][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.453265][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.468108][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 61.476504][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 61.486562][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 61.495276][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 61.504606][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 61.534937][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 61.569637][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.590520][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.602917][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.614311][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.625541][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.636489][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.647606][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.662482][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.694349][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 61.712280][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 61.725461][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 61.746611][ T4185] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.765916][ T4185] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.779847][ T4288] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7'. [ 61.789176][ T4185] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.815648][ T4185] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.834210][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.881818][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.919568][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 62.024855][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.039929][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.222029][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 62.437264][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 62.744429][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 62.897809][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 63.358882][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 63.371614][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 63.385262][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 63.396187][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 63.406066][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 63.415155][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 63.426580][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 63.732615][ T4300] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8'. [ 65.517400][ T1277] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.549552][ T1277] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.566125][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 65.670204][ T1277] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.679543][ T4306] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9'. [ 65.710743][ T1277] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.812641][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 66.079547][ T4311] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10'. [ 66.389158][ T4310] affs: No valid root block on device nullb0 [ 67.300921][ T263] block nbd1: Attempted send on invalid socket [ 67.308442][ T263] blk_update_request: I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 67.347588][ T4326] FAT-fs (nbd1): unable to read boot sector [ 67.594943][ T4339] kAFS: No cell specified [ 71.183226][ T4361] fuse: Bad value for 'fd' [ 71.188758][ T4361] process 'syz.0.22' launched './file0' with NULL argv: empty string added [ 71.378195][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.386854][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.645746][ T26] audit: type=1326 audit(1774595606.594:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4376 comm="syz.2.30" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fb847e799 code=0x7ffc0000 [ 74.282072][ T26] audit: type=1326 audit(1774595606.614:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4376 comm="syz.2.30" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fb847e799 code=0x7ffc0000 [ 74.492405][ T26] audit: type=1326 audit(1774595606.614:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4376 comm="syz.2.30" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f2fb847e799 code=0x7ffc0000 [ 74.534609][ T26] audit: type=1326 audit(1774595606.614:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4376 comm="syz.2.30" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fb847e799 code=0x7ffc0000 [ 74.556547][ C0] vkms_vblank_simulate: vblank timer overrun [ 74.701132][ T26] audit: type=1326 audit(1774595606.614:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4376 comm="syz.2.30" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fb847e799 code=0x7ffc0000 [ 74.723089][ C0] vkms_vblank_simulate: vblank timer overrun [ 75.304901][ T26] audit: type=1326 audit(1774595606.614:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4376 comm="syz.2.30" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f2fb843efce code=0x7ffc0000 [ 75.335538][ T26] audit: type=1326 audit(1774595606.614:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4376 comm="syz.2.30" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fb847e799 code=0x7ffc0000 [ 75.357461][ C0] vkms_vblank_simulate: vblank timer overrun [ 75.391813][ T4414] capability: warning: `syz.4.41' uses deprecated v2 capabilities in a way that may be insecure [ 75.481515][ T26] audit: type=1326 audit(1774595606.614:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4376 comm="syz.2.30" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7f2fb847e799 code=0x7ffc0000 [ 75.562139][ T26] audit: type=1326 audit(1774595606.614:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4376 comm="syz.2.30" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fb847e799 code=0x7ffc0000 [ 75.730938][ T26] audit: type=1326 audit(1774595606.614:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4376 comm="syz.2.30" exe="/root/syz-executor" sig=0 arch=c000003e syscall=233 compat=0 ip=0x7f2fb847e799 code=0x7ffc0000 [ 75.838567][ T4427] netlink: 'syz.4.46': attribute type 10 has an invalid length. [ 76.094704][ T4427] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.102968][ T4427] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 76.124447][ T4427] syz.4.46 (4427) used greatest stack depth: 20784 bytes left [ 76.604956][ T1325] cfg80211: failed to load regulatory.db [ 76.692709][ T4433] trusted_key: encrypted_key: master key parameter 'uefa' is invalid [ 77.502116][ T4285] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 77.836028][ T4443] Zero length message leads to an empty skb [ 77.871689][ T4285] usb 5-1: Using ep0 maxpacket: 16 [ 78.122006][ T4285] usb 5-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xD7, skipping [ 78.891700][ T1325] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 79.005764][ T4285] usb 5-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 79.035345][ T4285] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 79.073059][ T4285] usb 5-1: Product: syz [ 79.090006][ T4285] usb 5-1: Manufacturer: syz [ 79.114033][ T4285] usb 5-1: SerialNumber: syz [ 79.141658][ T1325] usb 4-1: Using ep0 maxpacket: 32 [ 79.180710][ T4285] usb 5-1: config 0 descriptor?? [ 79.245636][ T4285] appledisplay 5-1:0.0: Could not find int-in endpoint [ 79.261767][ T1325] usb 4-1: config 0 has an invalid interface number: 85 but max is 0 [ 79.274197][ T1325] usb 4-1: config 0 has no interface number 0 [ 79.288879][ T1325] usb 4-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 79.291085][ T4285] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 79.316011][ T1325] usb 4-1: config 0 interface 85 has no altsetting 0 [ 79.479575][ T4285] usb 5-1: USB disconnect, device number 2 [ 79.481744][ T1325] usb 4-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 79.504834][ T1325] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 79.522510][ T1325] usb 4-1: Product: syz [ 79.531026][ T1325] usb 4-1: Manufacturer: syz [ 79.541730][ T1325] usb 4-1: SerialNumber: syz [ 80.330945][ T1325] usb 4-1: config 0 descriptor?? [ 80.676849][ T4463] netlink: 20 bytes leftover after parsing attributes in process `syz.4.55'. [ 81.172397][ T1325] appletouch 4-1:0.85: Geyser mode initialized. [ 81.214358][ T1325] input: appletouch as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.85/input/input5 [ 81.255665][ T4466] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 81.321682][ C0] appletouch 4-1:0.85: appletouch: OVERFLOW with data length 64, actual length is 64 [ 81.650564][ T4477] netlink: 'syz.0.59': attribute type 10 has an invalid length. [ 81.714656][ T4229] usb 4-1: USB disconnect, device number 2 [ 81.940076][ T4477] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.949829][ T4477] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 81.984952][ T4229] appletouch 4-1:0.85: input: appletouch disconnected [ 82.589854][ T4492] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 83.003257][ T4503] trusted_key: encrypted_key: master key parameter 'uefa' is invalid [ 84.882077][ T4230] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 85.172127][ T4230] usb 4-1: Using ep0 maxpacket: 16 [ 85.331889][ T4230] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xD7, skipping [ 85.904527][ T4523] netlink: 'syz.0.72': attribute type 10 has an invalid length. [ 86.041884][ T4230] usb 4-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 86.064185][ T4230] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 86.117111][ T4230] usb 4-1: Product: syz [ 86.142085][ T4230] usb 4-1: Manufacturer: syz [ 86.300632][ T4230] usb 4-1: config 0 descriptor?? [ 86.349752][ T4230] usb 4-1: can't set config #0, error -71 [ 86.447814][ T4230] usb 4-1: USB disconnect, device number 3 [ 89.906750][ T4571] netlink: 'syz.4.85': attribute type 10 has an invalid length. [ 90.702264][ T4577] trusted_key: encrypted_key: master key parameter 'uefa' is invalid [ 91.011765][ T21] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 91.651756][ T21] usb 5-1: Using ep0 maxpacket: 16 [ 91.811783][ T21] usb 5-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xD7, skipping [ 92.042797][ T21] usb 5-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 92.057398][ T21] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.074082][ T21] usb 5-1: Product: syz [ 92.082605][ T21] usb 5-1: Manufacturer: syz [ 92.092608][ T21] usb 5-1: SerialNumber: syz [ 92.181990][ T21] usb 5-1: config 0 descriptor?? [ 92.225481][ T21] appledisplay 5-1:0.0: Could not find int-in endpoint [ 92.248130][ T21] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 92.482882][ T4355] usb 5-1: USB disconnect, device number 3 [ 94.310694][ T4608] overlayfs: failed to resolve './file1': -2 [ 95.531725][ T21] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 95.961021][ T4643] device syzkaller0 entered promiscuous mode [ 96.531736][ T21] usb 2-1: Using ep0 maxpacket: 32 [ 96.732181][ T21] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 128, changing to 11 [ 96.862084][ T21] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xB7, skipping [ 97.274465][ T4657] trusted_key: encrypted_key: master key parameter 'uefa' is invalid [ 97.312945][ T21] usb 2-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 97.328134][ T21] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.341095][ T21] usb 2-1: Product: syz [ 97.348424][ T21] usb 2-1: Manufacturer: syz [ 97.367337][ T21] usb 2-1: SerialNumber: syz [ 97.440923][ T21] usb 2-1: config 0 descriptor?? [ 97.572693][ T4355] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 97.898383][ T21] usb 2-1: USB disconnect, device number 2 [ 97.941741][ T4355] usb 4-1: Using ep0 maxpacket: 16 [ 98.062021][ T4355] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xD7, skipping [ 98.242468][ T4355] usb 4-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 98.261196][ T4355] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.275180][ T4674] ======================================================= [ 98.275180][ T4674] WARNING: The mand mount option has been deprecated and [ 98.275180][ T4674] and is ignored by this kernel. Remove the mand [ 98.275180][ T4674] option from the mount to silence this warning. [ 98.275180][ T4674] ======================================================= [ 98.282932][ T4355] usb 4-1: Product: syz [ 98.340042][ T4355] usb 4-1: Manufacturer: syz [ 98.349000][ T4355] usb 4-1: SerialNumber: syz [ 98.359905][ T4355] usb 4-1: config 0 descriptor?? [ 98.403532][ T4355] appledisplay 4-1:0.0: Could not find int-in endpoint [ 98.414565][ T4355] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 98.612644][ T4355] usb 4-1: USB disconnect, device number 4 [ 98.864296][ T4680] netlink: 28 bytes leftover after parsing attributes in process `syz.1.116'. [ 99.949096][ T4693] netlink: 'syz.2.120': attribute type 16 has an invalid length. [ 99.956905][ T4693] netlink: 'syz.2.120': attribute type 17 has an invalid length. [ 99.970148][ T4693] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 99.977511][ T4693] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 100.409526][ T4693] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 104.202156][ T4355] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 104.378458][ T4730] 9pnet_virtio: no channels available for device syz [ 104.421901][ T4730] overlayfs: unrecognized mount option "/" or missing value [ 105.961797][ T4355] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 105.969428][ T4355] usb 5-1: can't read configurations, error -71 [ 106.373167][ T4355] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 106.621686][ T4232] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 106.882998][ T4355] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 107.063442][ T4355] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.110746][ T4355] usb 5-1: config 0 descriptor?? [ 107.392419][ T4232] usb 3-1: Using ep0 maxpacket: 16 [ 107.452535][ T4764] fuse: Bad value for 'user_id' [ 107.561968][ T4232] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 107.581436][ T4232] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 107.603753][ T4232] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 107.621075][ T4232] usb 3-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 107.632061][ T4232] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.656348][ T4232] usb 3-1: config 0 descriptor?? [ 108.113729][ T4355] ath6kl: Failed to read usb control message: -71 [ 108.120225][ T4355] ath6kl: Unable to read the bmi data from the device: -71 [ 108.149597][ T4355] ath6kl: Unable to recv target info: -71 [ 108.188849][ T4355] ath6kl: Failed to init ath6kl core: -71 [ 108.239285][ T4355] ath6kl_usb: probe of 5-1:0.0 failed with error -71 [ 108.276473][ T4232] hid-picolcd 0003:04D8:F002.0001: unknown main item tag 0x0 [ 108.300647][ T4355] usb 5-1: USB disconnect, device number 5 [ 108.327348][ T4232] hid-picolcd 0003:04D8:F002.0001: unknown main item tag 0x1 [ 108.343044][ T4232] hid-picolcd 0003:04D8:F002.0001: item fetching failed at offset 4/5 [ 108.363529][ T4232] hid-picolcd 0003:04D8:F002.0001: device report parse failed [ 108.377236][ T4232] hid-picolcd: probe of 0003:04D8:F002.0001 failed with error -22 [ 108.532342][ T4232] usb 3-1: USB disconnect, device number 2 [ 108.626136][ T4774] IPVS: set_ctl: invalid protocol: 59 100.1.1.1:20004 [ 109.421839][ T146] Bluetooth: hci5: Entering manufacturer mode failed (-110) [ 109.429442][ T1108] Bluetooth: hci5: command 0xfc11 tx timeout [ 111.971743][ T13] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 112.442003][ T13] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 112.638139][ T13] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.708446][ T13] usb 4-1: config 0 descriptor?? [ 113.722678][ T13] ath6kl: Failed to read usb control message: -71 [ 113.729291][ T13] ath6kl: Unable to read the bmi data from the device: -71 [ 113.750493][ T13] ath6kl: Unable to recv target info: -71 [ 113.771517][ T13] ath6kl: Failed to init ath6kl core: -71 [ 113.790945][ T13] ath6kl_usb: probe of 4-1:0.0 failed with error -71 [ 113.819393][ T13] usb 4-1: USB disconnect, device number 5 [ 114.688273][ T4855] trusted_key: encrypted_key: master key parameter 'uefa' is invalid [ 115.891723][ T21] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 117.085052][ T21] usb 5-1: Using ep0 maxpacket: 16 [ 117.486331][ T21] usb 5-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xD7, skipping [ 118.201970][ T21] usb 5-1: string descriptor 0 read error: -71 [ 118.208248][ T21] usb 5-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 118.228526][ T21] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.282259][ T21] usb 5-1: config 0 descriptor?? [ 118.409618][ T21] usb 5-1: can't set config #0, error -71 [ 118.454787][ T21] usb 5-1: USB disconnect, device number 6 [ 118.651656][ T4230] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 118.881659][ T21] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 120.131826][ T4230] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 120.150693][ T4230] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.178191][ T4230] usb 4-1: config 0 descriptor?? [ 120.193495][ T4891] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 120.205868][ T4891] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 120.301790][ T4902] loop5: detected capacity change from 0 to 7 [ 120.338514][ T4902] Dev loop5: unable to read RDB block 7 [ 120.344477][ T4902] loop5: AHDI p1 [ 120.348241][ T4902] loop5: partition table partially beyond EOD, truncated [ 120.462447][ T21] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 120.488492][ T21] usb 5-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xBE, skipping [ 120.542133][ T21] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 120.912175][ T21] usb 5-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 121.001752][ T4230] ath6kl: Failed to read usb control message: -71 [ 121.011270][ T4230] ath6kl: Unable to read the bmi data from the device: -71 [ 121.025191][ T21] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 121.034225][ T21] usb 5-1: Product: syz [ 121.038782][ T21] usb 5-1: Manufacturer: syz [ 121.043498][ T21] usb 5-1: SerialNumber: syz [ 121.056602][ T4230] ath6kl: Unable to recv target info: -71 [ 121.203346][ T4230] ath6kl: Failed to init ath6kl core: -71 [ 121.211423][ T21] usb 5-1: config 0 descriptor?? [ 121.251802][ T21] usb 5-1: can't set config #0, error -71 [ 121.332085][ T4230] ath6kl_usb: probe of 4-1:0.0 failed with error -71 [ 121.500690][ T4230] usb 4-1: USB disconnect, device number 6 [ 121.910054][ T21] usb 5-1: USB disconnect, device number 7 [ 121.951149][ T4915] trusted_key: encrypted_key: master key parameter 'uefa' is invalid [ 122.715909][ T4931] netlink: 28 bytes leftover after parsing attributes in process `syz.1.187'. [ 122.735755][ T4931] netlink: 8 bytes leftover after parsing attributes in process `syz.1.187'. [ 122.991698][ T21] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 123.308267][ T4944] 9pnet_virtio: no channels available for device syz [ 123.338166][ T4944] overlayfs: unrecognized mount option "/" or missing value [ 124.272027][ T21] usb 5-1: Using ep0 maxpacket: 16 [ 124.531820][ T21] usb 5-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xD7, skipping [ 124.602033][ T4954] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 124.729123][ T4959] device syzkaller0 entered promiscuous mode [ 124.761849][ T21] usb 5-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 124.797908][ T21] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.846181][ T21] usb 5-1: config 0 descriptor?? [ 124.874214][ T21] usb 5-1: can't set config #0, error -71 [ 124.903778][ T21] usb 5-1: USB disconnect, device number 8 [ 125.291658][ T21] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 126.251945][ T21] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 126.274932][ T21] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.348611][ T21] usb 5-1: config 0 descriptor?? [ 127.276716][ T5015] trusted_key: encrypted_key: master key parameter 'uefa' is invalid [ 127.378962][ T5019] device syzkaller0 entered promiscuous mode [ 127.551685][ T1325] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 127.722878][ T21] ath6kl: Failed to read usb control message: -71 [ 127.729375][ T21] ath6kl: Unable to read the bmi data from the device: -71 [ 127.746684][ T21] ath6kl: Unable to recv target info: -71 [ 127.770590][ T21] ath6kl: Failed to init ath6kl core: -71 [ 127.799096][ T21] ath6kl_usb: probe of 5-1:0.0 failed with error -71 [ 127.801835][ T1325] usb 3-1: Using ep0 maxpacket: 16 [ 127.836496][ T21] usb 5-1: USB disconnect, device number 9 [ 127.943541][ T1325] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xD7, skipping [ 128.122594][ T1325] usb 3-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 128.156106][ T1325] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.188649][ T1325] usb 3-1: Product: syz [ 128.202572][ T1325] usb 3-1: Manufacturer: syz [ 128.211952][ T1325] usb 3-1: SerialNumber: syz [ 128.233227][ T1325] usb 3-1: config 0 descriptor?? [ 128.283699][ T1325] appledisplay 3-1:0.0: Could not find int-in endpoint [ 128.307062][ T1325] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 128.315692][ T5043] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 128.487727][ T1325] usb 3-1: USB disconnect, device number 3 [ 129.861689][ T1325] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 130.111800][ T1325] usb 5-1: Using ep0 maxpacket: 8 [ 130.231837][ T1325] usb 5-1: config index 0 descriptor too short (expected 6427, got 27) [ 130.280981][ T1325] usb 5-1: config 0 has an invalid interface number: 21 but max is 0 [ 130.323136][ T1325] usb 5-1: config 0 has no interface number 0 [ 130.399167][ T1325] usb 5-1: config 0 interface 21 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 130.545874][ T1325] usb 5-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 130.575472][ T1325] usb 5-1: New USB device strings: Mfr=0, Product=1, SerialNumber=0 [ 130.648822][ T1325] usb 5-1: Product: syz [ 130.695692][ T1325] usb 5-1: config 0 descriptor?? [ 130.732807][ T5062] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 130.837301][ T5088] device syzkaller0 entered promiscuous mode [ 130.974246][ T5062] netlink: 24 bytes leftover after parsing attributes in process `syz.4.213'. [ 131.120543][ T5062] netlink: 4 bytes leftover after parsing attributes in process `syz.4.213'. [ 131.262043][ T1325] usb 5-1: USB disconnect, device number 10 [ 132.095006][ T23] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 132.932531][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.346135][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.511743][ T23] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 133.621793][ T23] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.802214][ T23] usb 4-1: config 0 descriptor?? [ 135.703406][ T23] ath6kl: Failed to submit usb control message: -71 [ 135.710084][ T23] ath6kl: unable to send the bmi data to the device: -71 [ 135.792325][ T23] ath6kl: Unable to send get target info: -71 [ 136.400829][ T23] ath6kl: Failed to init ath6kl core: -71 [ 136.530293][ T5147] netlink: 4 bytes leftover after parsing attributes in process `syz.2.227'. [ 138.132438][ T5155] device syzkaller0 entered promiscuous mode [ 138.169517][ T23] ath6kl_usb: probe of 4-1:0.0 failed with error -71 [ 138.220999][ T23] usb 4-1: USB disconnect, device number 7 [ 139.051666][ T4236] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 140.053072][ T4236] usb 4-1: Using ep0 maxpacket: 32 [ 140.311821][ T4236] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 140.320040][ T4236] usb 4-1: config 0 has no interface number 0 [ 140.338880][ T4236] usb 4-1: config 0 interface 184 has no altsetting 0 [ 140.512566][ T1325] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 140.571888][ T4236] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 140.605046][ T4236] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.689232][ T4236] usb 4-1: Product: syz [ 140.737399][ T4236] usb 4-1: Manufacturer: syz [ 140.771484][ T4236] usb 4-1: SerialNumber: syz [ 140.797854][ T4236] usb 4-1: config 0 descriptor?? [ 140.863244][ T4236] smsc75xx v1.0.0 [ 140.881783][ T1325] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 141.225834][ T1325] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.342159][ T1325] usb 1-1: config 0 descriptor?? [ 142.051825][ T4236] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000040: -71 [ 142.086503][ T4236] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Error writing E2P_CMD [ 142.292628][ T4236] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 142.305013][ T4236] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 142.314905][ T4236] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 142.325496][ T4236] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 142.336217][ T4236] smsc75xx: probe of 4-1:0.184 failed with error -71 [ 142.346238][ T4236] usb 4-1: USB disconnect, device number 8 [ 143.141522][ T1325] ath6kl: Failed to read usb control message: -71 [ 143.148368][ T1325] ath6kl: Unable to read the bmi data from the device: -71 [ 143.156592][ T1325] ath6kl: Unable to recv target info: -71 [ 143.163708][ T1325] ath6kl: Failed to init ath6kl core: -71 [ 143.196459][ T1325] ath6kl_usb: probe of 1-1:0.0 failed with error -71 [ 143.223895][ T1325] usb 1-1: USB disconnect, device number 2 [ 143.245445][ T5203] device syzkaller0 entered promiscuous mode [ 143.301829][ T4355] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 143.607443][ T23] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 143.621689][ T4355] usb 5-1: Using ep0 maxpacket: 32 [ 143.742113][ T4355] usb 5-1: config index 0 descriptor too short (expected 35577, got 27) [ 143.759695][ T4355] usb 5-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 143.797642][ T4355] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 143.838367][ T4355] usb 5-1: config 1 has no interface number 0 [ 143.864598][ T4355] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 143.963102][ T4355] usb 5-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 144.253577][ T4355] usb 5-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 144.281776][ T4355] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.334914][ T4355] snd_usb_pod 5-1:1.1: Line 6 Pocket POD found [ 145.191759][ T23] usb 3-1: Using ep0 maxpacket: 16 [ 145.202807][ T4355] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now attached [ 145.691869][ T23] usb 3-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 145.713982][ T23] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.738861][ T23] usb 3-1: Product: syz [ 145.757641][ T23] usb 3-1: Manufacturer: syz [ 145.776637][ T23] usb 3-1: SerialNumber: syz [ 145.811728][ T23] usb 3-1: config 0 descriptor?? [ 145.886563][ T23] visor 3-1:0.0: Sony Clie 3.5 converter detected [ 146.223370][ T1325] snd_usb_pod 5-1:1.1: line6_send_raw_message_async_part: usb_submit_urb failed (-22) [ 146.326332][ T23] usb 3-1: Sony Clie 3.5 converter now attached to ttyUSB0 [ 146.499918][ T4817] usb 5-1: USB disconnect, device number 11 [ 146.536437][ T4355] usb 3-1: USB disconnect, device number 4 [ 146.554108][ T4817] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now disconnected [ 146.579915][ T4355] clie_3.5 ttyUSB0: Sony Clie 3.5 converter now disconnected from ttyUSB0 [ 146.626725][ T4355] visor 3-1:0.0: device disconnected [ 147.802269][ T5245] device syzkaller0 entered promiscuous mode [ 147.891646][ T4817] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 148.281814][ T4817] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 148.841983][ T4817] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.868580][ T4817] usb 4-1: config 0 descriptor?? [ 149.892913][ T4817] ath6kl: Failed to read usb control message: -71 [ 149.919815][ T4817] ath6kl: Unable to read the bmi data from the device: -71 [ 149.966179][ T4817] ath6kl: Unable to recv target info: -71 [ 149.984533][ T5264] binder: BINDER_SET_CONTEXT_MGR already set [ 150.030988][ T5264] binder: 5262:5264 ioctl 4018620d 200000004a80 returned -16 [ 150.031063][ T4817] ath6kl: Failed to init ath6kl core: -71 [ 151.034346][ T5276] syz.3.264 uses obsolete (PF_INET,SOCK_PACKET) [ 151.165519][ T4817] ath6kl_usb: probe of 4-1:0.0 failed with error -71 [ 151.221855][ T4817] usb 4-1: USB disconnect, device number 9 [ 151.890021][ T5284] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 152.203612][ T4355] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 152.361148][ T5290] trusted_key: encrypted_key: master key parameter 'uefa' is invalid [ 152.741961][ T4355] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 152.786736][ T4355] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 152.870998][ T4355] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 152.953453][ T4355] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.109064][ T4355] usb 5-1: config 0 descriptor?? [ 153.355961][ T5299] device syzkaller0 entered promiscuous mode [ 153.458455][ T1325] usb 5-1: USB disconnect, device number 12 [ 153.510075][ T23] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 153.518271][ T4236] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 153.781902][ T4236] usb 1-1: Using ep0 maxpacket: 16 [ 153.913560][ T4236] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xD7, skipping [ 153.925684][ T23] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 154.026790][ T23] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.265905][ T23] usb 4-1: config 0 descriptor?? [ 154.283657][ T4236] usb 1-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 154.308057][ T4236] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.341667][ T4236] usb 1-1: Product: syz [ 154.350706][ T4236] usb 1-1: Manufacturer: syz [ 154.355728][ T4236] usb 1-1: SerialNumber: syz [ 154.369908][ T4236] usb 1-1: config 0 descriptor?? [ 154.468818][ T4236] appledisplay 1-1:0.0: Could not find int-in endpoint [ 154.480413][ T4236] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 154.654711][ T4229] usb 1-1: USB disconnect, device number 3 [ 154.831796][ T4355] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 155.081767][ T4355] usb 2-1: Using ep0 maxpacket: 16 [ 155.282112][ T4355] usb 2-1: config 127 has an invalid interface number: 124 but max is 0 [ 155.295849][ T4355] usb 2-1: config 127 has no interface number 0 [ 155.319993][ T4355] usb 2-1: config 127 interface 124 has no altsetting 0 [ 155.393209][ T23] ath6kl: Failed to read usb control message: -71 [ 155.440768][ T23] ath6kl: Unable to read the bmi data from the device: -71 [ 155.474476][ T23] ath6kl: Unable to recv target info: -71 [ 155.506808][ T23] ath6kl: Failed to init ath6kl core: -71 [ 155.562657][ T4355] usb 2-1: New USB device found, idVendor=0cf3, idProduct=1010, bcdDevice=36.87 [ 155.659035][ T4355] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.217967][ T4355] usb 2-1: Product: syz [ 156.283215][ T4355] usb 2-1: Manufacturer: syz [ 156.354116][ T4355] usb 2-1: SerialNumber: syz [ 156.446496][ T23] ath6kl_usb: probe of 4-1:0.0 failed with error -71 [ 156.508504][ T23] usb 4-1: USB disconnect, device number 10 [ 157.073348][ T5339] device syzkaller0 entered promiscuous mode [ 158.162780][ T4355] usb 2-1: reset high-speed USB device number 3 using dummy_hcd [ 158.911922][ T4355] usb 2-1: device descriptor read/all, error -71 [ 159.844168][ T4230] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 159.921770][ T1325] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 159.929494][ T4355] usb 2-1: reset high-speed USB device number 3 using dummy_hcd [ 159.972056][ T4355] usb 2-1: device reset changed ep0 maxpacket size! [ 160.034752][ T4355] usb 2-1: USB disconnect, device number 3 [ 160.152833][ T4230] usb 1-1: Using ep0 maxpacket: 32 [ 160.601949][ T1325] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 160.620707][ T1325] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.634680][ T1325] usb 3-1: config 0 descriptor?? [ 160.685251][ T4355] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 160.692937][ T4230] usb 1-1: config 0 has an invalid interface number: 132 but max is 0 [ 160.715777][ T4230] usb 1-1: config 0 has no interface number 0 [ 160.741209][ T4230] usb 1-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 161.391912][ T4230] usb 1-1: string descriptor 0 read error: -71 [ 161.409435][ T4230] usb 1-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 161.439324][ T4230] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.447573][ T4355] usb 2-1: Using ep0 maxpacket: 32 [ 161.483462][ T4230] usb 1-1: config 0 descriptor?? [ 161.542143][ T4230] usb 1-1: can't set config #0, error -71 [ 161.559987][ T4230] usb 1-1: USB disconnect, device number 4 [ 161.581970][ T4355] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 161.771930][ T4355] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 161.788236][ T4355] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 161.819110][ T4355] usb 2-1: Product: syz [ 161.830271][ T5387] device syzkaller0 entered promiscuous mode [ 161.840831][ T4355] usb 2-1: Manufacturer: syz [ 161.851743][ T4355] usb 2-1: SerialNumber: syz [ 161.911660][ T4355] usb 2-1: config 0 descriptor?? [ 161.961803][ T4355] usb 2-1: can't set config #0, error -71 [ 161.983255][ T1325] ath6kl: Failed to read usb control message: -71 [ 161.989775][ T1325] ath6kl: Unable to read the bmi data from the device: -71 [ 161.999744][ T4355] usb 2-1: USB disconnect, device number 4 [ 162.015556][ T1325] ath6kl: Unable to recv target info: -71 [ 162.035568][ T1325] ath6kl: Failed to init ath6kl core: -71 [ 162.067092][ T1325] ath6kl_usb: probe of 3-1:0.0 failed with error -71 [ 162.178044][ T1325] usb 3-1: USB disconnect, device number 5 [ 163.601753][ T4355] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 163.900945][ T4355] usb 1-1: Using ep0 maxpacket: 32 [ 164.317895][ T5435] device syzkaller0 entered promiscuous mode [ 164.322034][ T4355] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 164.337441][ T4355] usb 1-1: config 0 has no interface number 0 [ 164.511818][ T4355] usb 1-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 164.551682][ T1325] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 164.589432][ T4236] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 164.616635][ T4355] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.629265][ T4355] usb 1-1: Product: syz [ 164.637706][ T4355] usb 1-1: Manufacturer: syz [ 164.648537][ T4355] usb 1-1: SerialNumber: syz [ 166.025369][ T4355] usb 1-1: config 0 descriptor?? [ 166.139506][ T1325] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 166.170134][ T1325] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.181782][ T4355] usb 1-1: can't set config #0, error -71 [ 166.202000][ T4236] usb 5-1: Using ep0 maxpacket: 8 [ 166.349511][ T4355] usb 1-1: USB disconnect, device number 5 [ 166.372999][ T1325] usb 4-1: config 0 descriptor?? [ 166.544074][ T4512] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 166.557142][ T4512] Bluetooth: hci2: Injecting HCI hardware error event [ 166.574232][ T146] Bluetooth: hci2: hardware error 0x00 [ 166.582543][ T4236] usb 5-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 166.599768][ T4236] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.609094][ T4236] usb 5-1: Product: syz [ 166.620896][ T4236] usb 5-1: Manufacturer: syz [ 166.625704][ T4236] usb 5-1: SerialNumber: syz [ 166.636397][ T4236] usb 5-1: config 0 descriptor?? [ 166.693346][ T4236] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 166.705144][ T4236] pctv452e: pctv452e_power_ctrl: 1 [ 166.705144][ T4236] [ 166.713804][ T4236] usb 5-1: selecting invalid altsetting 3 [ 166.721779][ T4236] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 166.721779][ T4236] [ 166.732760][ T4236] dvb-usb: bulk message failed: -22 (5/0) [ 166.749843][ T4236] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 166.782333][ T4236] dvbdev: DVB: registering new adapter (Technotrend TT Connect S2-3600) [ 166.792242][ T4236] usb 5-1: media controller created [ 166.799599][ T4236] dvb-usb: bulk message failed: -22 (8/0) [ 166.807275][ T4236] pctv452e: I2C error -22; AA 01 A0 01 14 -> aa 01 31 04 a0 01 14 [ 166.817336][ T4236] dvb-usb: MAC address reading failed. [ 166.837789][ T4236] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 166.885487][ T5432] dvb-usb: bulk message failed: -22 (7/0) [ 166.891522][ T5432] pctv452e: I2C error -22; AA 02 00 00 00 -> aa 02 31 03 00 00 00 [ 166.952175][ T4236] DVB: Unable to find symbol stb0899_attach() [ 166.958893][ T4236] dvb-usb: no frontend was attached by 'Technotrend TT Connect S2-3600' [ 167.753445][ T1325] ath6kl: Failed to read usb control message: -71 [ 167.759960][ T1325] ath6kl: Unable to read the bmi data from the device: -71 [ 167.847069][ T1325] ath6kl: Unable to recv target info: -71 [ 167.881943][ T4236] rc_core: IR keymap rc-tt-1500 not found [ 167.887809][ T4236] Registered IR keymap rc-empty [ 167.915421][ T1325] ath6kl: Failed to init ath6kl core: -71 [ 167.972722][ T5468] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 168.060873][ T4236] rc rc0: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0 [ 168.774749][ T4236] input: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0/input6 [ 168.787830][ T1325] ath6kl_usb: probe of 4-1:0.0 failed with error -71 [ 168.812376][ T4236] dvb-usb: schedule remote query interval to 100 msecs. [ 168.819340][ T4236] pctv452e: pctv452e_power_ctrl: 0 [ 168.819340][ T4236] [ 168.826686][ T4236] dvb-usb: Technotrend TT Connect S2-3600 successfully initialized and connected. [ 168.984148][ T4236] usb 5-1: USB disconnect, device number 13 [ 169.769816][ T1325] usb 4-1: USB disconnect, device number 11 [ 169.994052][ T4236] dvb-usb: Technotrend TT Connect S2-3600 successfully deinitialized and disconnected. [ 170.265394][ T5483] team0 (unregistering): Port device team_slave_0 removed [ 170.357764][ T5483] team0 (unregistering): Port device team_slave_1 removed [ 172.771555][ T4236] usb 4-1: new low-speed USB device number 12 using dummy_hcd [ 173.232001][ T4236] usb 4-1: config 0 has an invalid interface number: 55 but max is 0 [ 173.545449][ T4236] usb 4-1: config 0 has no interface number 0 [ 173.552447][ T4236] usb 4-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 173.570814][ T4236] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 173.594979][ T4236] usb 4-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0xAB, skipping [ 173.687040][ T4236] usb 4-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 173.730988][ T4236] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 173.771415][ T4236] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 173.798440][ T4236] usb 4-1: config 0 descriptor?? [ 173.842513][ T5506] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 173.869999][ T5506] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 173.885892][ T4236] ldusb 4-1:0.55: Interrupt in endpoint not found [ 174.148560][ T1325] usb 4-1: USB disconnect, device number 12 [ 175.125399][ T5537] hfs: can't find a HFS filesystem on dev nullb0 [ 175.511702][ T4236] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 175.761663][ T4236] usb 4-1: Using ep0 maxpacket: 32 [ 175.839445][ T1325] Bluetooth: hci1: command 0x0406 tx timeout [ 176.156245][ T21] Bluetooth: hci4: command 0x0406 tx timeout [ 176.176093][ T1325] Bluetooth: hci3: command 0x0406 tx timeout [ 176.191952][ T4236] usb 4-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 176.219006][ T4236] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.498155][ T4236] usb 4-1: config 0 descriptor?? [ 176.583817][ T4236] gspca_main: sq930x-2.14.0 probing 041e:403c [ 177.101727][ T4236] gspca_sq930x: reg_r 001f failed -110 [ 177.107293][ T4236] sq930x: probe of 4-1:0.0 failed with error -110 [ 178.041941][ T4236] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 178.381883][ T4355] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 179.323480][ T4229] usb 4-1: USB disconnect, device number 13 [ 179.371780][ T4236] usb 2-1: unable to get BOS descriptor or descriptor too short [ 179.426147][ T4236] usb 2-1: not running at top speed; connect to a high speed hub [ 179.470598][ T4355] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 179.582076][ T4236] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 179.589962][ T4355] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 179.611253][ T4236] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 179.986646][ T4355] usb 3-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 180.001760][ T4236] usb 2-1: string descriptor 0 read error: -22 [ 180.008613][ T4236] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 180.017663][ T4355] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 180.027089][ T4236] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 180.057483][ T4355] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.106710][ T4236] usb 2-1: 0:2 : does not exist [ 180.435406][ T5586] netlink: 24 bytes leftover after parsing attributes in process `syz.4.351'. [ 181.307926][ T5589] hfs: can't find a HFS filesystem on dev nullb0 [ 184.478200][ T4236] usb 2-1: 5:0: cannot get min/max values for control 3 (id 5) [ 184.795812][ T5626] input: syz0 as /devices/virtual/input/input8 [ 185.241945][ T4236] usb 2-1: 5:0: cannot get min/max values for control 3 (id 5) [ 185.309285][ T4236] usb 2-1: USB disconnect, device number 5 [ 185.455728][ T4355] debugfs: Directory 'card3' with parent 'sound' already present! [ 185.475606][ T4355] usb 3-1: invalid MIDI out EP 0 [ 186.957958][ T5637] mkiss: ax0: crc mode is auto. [ 187.062766][ T5645] hfs: can't find a HFS filesystem on dev nullb0 [ 187.881003][ T4355] snd-usb-audio: probe of 3-1:27.0 failed with error -22 [ 187.927590][ T4355] usb 3-1: USB disconnect, device number 6 [ 187.928112][ T4320] udevd[4320]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 188.616530][ T1325] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 189.117079][ T5664] netlink: 'syz.0.361': attribute type 10 has an invalid length. [ 189.234965][ T5664] loop5: detected capacity change from 0 to 7 [ 190.724523][ T5664] Dev loop5: unable to read RDB block 7 [ 190.730151][ T5664] loop5: AHDI p1 [ 190.735221][ T5664] loop5: partition table partially beyond EOD, truncated [ 190.791644][ T1325] usb 2-1: Using ep0 maxpacket: 16 [ 191.148877][ T1325] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 191.197150][ T1325] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 191.230325][ T1325] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 192.261746][ T1325] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 192.270931][ T1325] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 192.290919][ T1325] usb 2-1: config 0 descriptor?? [ 192.312307][ T1325] usb 2-1: can't set config #0, error -71 [ 192.319334][ T1325] usb 2-1: USB disconnect, device number 6 [ 192.666341][ T5685] device syzkaller0 entered promiscuous mode [ 192.801853][ T4236] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 193.161941][ T4236] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 193.868512][ T4236] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 193.960904][ T4236] usb 2-1: config 0 descriptor?? [ 194.488270][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.540507][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.028844][ T5716] netlink: 4 bytes leftover after parsing attributes in process `syz.2.384'. [ 195.082319][ T5716] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 195.862506][ T4236] ath6kl: Failed to read usb control message: -71 [ 195.872119][ T4236] ath6kl: Unable to read the bmi data from the device: -71 [ 195.898819][ T4236] ath6kl: Unable to recv target info: -71 [ 195.971946][ T4236] ath6kl: Failed to init ath6kl core: -71 [ 196.103650][ T5716] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 196.118775][ T4236] ath6kl_usb: probe of 2-1:0.0 failed with error -71 [ 196.141999][ T4236] usb 2-1: USB disconnect, device number 7 [ 197.351858][ T5738] device syzkaller0 entered promiscuous mode [ 198.591659][ T4236] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 199.041752][ T4355] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 199.233033][ T4236] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 199.328646][ T4236] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 199.330607][ T5760] trusted_key: encrypted_key: insufficient parameters specified [ 199.428223][ T4236] usb 2-1: Product: syz [ 199.431869][ T4355] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 199.448560][ T4236] usb 2-1: Manufacturer: syz [ 199.457292][ T4355] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 199.465566][ T4236] usb 2-1: SerialNumber: syz [ 199.502487][ T4355] usb 5-1: config 0 descriptor?? [ 199.761712][ T21] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 200.062035][ T21] usb 4-1: Using ep0 maxpacket: 16 [ 200.267262][ T21] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xD7, skipping [ 200.407066][ T4236] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000098. ret = -71 [ 200.441714][ T4236] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -71 [ 200.469339][ T4236] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 200.479274][ T21] usb 4-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 200.499956][ T21] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.528677][ T21] usb 4-1: Product: syz [ 200.541353][ T21] usb 4-1: Manufacturer: syz [ 200.556728][ T4236] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 200.567930][ T21] usb 4-1: SerialNumber: syz [ 200.582151][ T21] usb 4-1: config 0 descriptor?? [ 200.602864][ T4355] ath6kl: Failed to read usb control message: -71 [ 200.609346][ T4355] ath6kl: Unable to read the bmi data from the device: -71 [ 200.627338][ T4236] lan78xx: probe of 2-1:1.0 failed with error -71 [ 200.634061][ T4355] ath6kl: Unable to recv target info: -71 [ 200.677272][ T21] appledisplay 4-1:0.0: Could not find int-in endpoint [ 200.692804][ T4236] usb 2-1: USB disconnect, device number 8 [ 200.709529][ T21] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 200.836256][ T4355] ath6kl: Failed to init ath6kl core: -71 [ 201.608482][ T4512] usb 4-1: USB disconnect, device number 14 [ 201.632953][ T4355] ath6kl_usb: probe of 5-1:0.0 failed with error -71 [ 201.649416][ T4355] usb 5-1: USB disconnect, device number 14 [ 201.721885][ T5772] binder: BINDER_SET_CONTEXT_MGR already set [ 201.727903][ T5772] binder: 5771:5772 ioctl 4018620d 200000000300 returned -16 [ 202.573816][ T5787] device syzkaller0 entered promiscuous mode [ 202.822241][ T4355] usb 5-1: new full-speed USB device number 15 using dummy_hcd [ 202.903157][ T23] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 203.321834][ T23] usb 1-1: Using ep0 maxpacket: 16 [ 203.433009][ T4355] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 203.488675][ T4355] usb 5-1: config 0 has no interface number 0 [ 203.495221][ T4355] usb 5-1: config 0 interface 1 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 203.512934][ T4355] usb 5-1: config 0 interface 1 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 203.528031][ T4355] usb 5-1: config 0 interface 1 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 203.546995][ T4355] usb 5-1: config 0 interface 1 has no altsetting 0 [ 203.567293][ T4355] usb 5-1: New USB device found, idVendor=145f, idProduct=0212, bcdDevice= 0.00 [ 203.586691][ T4230] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 203.643524][ T23] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 129, using maximum allowed: 30 [ 203.654585][ T23] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 204.146772][ T23] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 204.167187][ T4355] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 204.175478][ T23] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 129 [ 204.201660][ T23] usb 1-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 204.209444][ T4355] usb 5-1: config 0 descriptor?? [ 204.210978][ T23] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 204.235953][ T23] usb 1-1: config 0 descriptor?? [ 204.541876][ T4230] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 204.557696][ T4230] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 204.575835][ T4230] usb 2-1: config 0 descriptor?? [ 204.867740][ T23] usbhid 1-1:0.0: can't add hid device: -71 [ 204.873739][ T23] usbhid: probe of 1-1:0.0 failed with error -71 [ 204.883312][ T23] usb 1-1: USB disconnect, device number 6 [ 204.902073][ T4355] uclogic 0003:145F:0212.0002: pen parameters not found [ 204.912901][ T4355] uclogic 0003:145F:0212.0002: interface is invalid, ignoring [ 205.118763][ T4355] usb 5-1: USB disconnect, device number 15 [ 205.651730][ T4230] ath6kl: Failed to read usb control message: -71 [ 205.658221][ T4230] ath6kl: Unable to read the bmi data from the device: -71 [ 205.723601][ T4230] ath6kl: Unable to recv target info: -71 [ 205.822278][ T4230] ath6kl: Failed to init ath6kl core: -71 [ 205.940938][ T4230] ath6kl_usb: probe of 2-1:0.0 failed with error -71 [ 205.968896][ T4230] usb 2-1: USB disconnect, device number 9 [ 206.401664][ T4229] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 206.704804][ T5832] trusted_key: encrypted_key: insufficient parameters specified [ 206.781909][ T5836] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 206.808340][ T5836] CIFS mount error: No usable UNC path provided in device string! [ 206.808340][ T5836] [ 206.818763][ T5836] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 206.872036][ T4229] usb 5-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 206.991813][ T1325] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 207.339674][ T4229] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 207.351893][ T4229] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 207.362916][ T4229] usb 5-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 207.376617][ T4229] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 207.386978][ T4229] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 207.498867][ T4229] usb 5-1: invalid MIDI out EP 0 [ 207.544974][ T4229] snd-usb-audio: probe of 5-1:27.0 failed with error -22 [ 207.596641][ T4320] udevd[4320]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 207.613014][ T1325] usb 1-1: Using ep0 maxpacket: 16 [ 207.705576][ T5840] device syzkaller0 entered promiscuous mode [ 207.727189][ T4355] usb 5-1: USB disconnect, device number 16 [ 207.733449][ T1325] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xD7, skipping [ 208.351859][ T1325] usb 1-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 208.366827][ T1325] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 208.375649][ T1325] usb 1-1: Product: syz [ 208.379867][ T1325] usb 1-1: Manufacturer: syz [ 208.390250][ T1325] usb 1-1: SerialNumber: syz [ 208.396812][ T1325] usb 1-1: config 0 descriptor?? [ 208.603025][ T1325] appledisplay 1-1:0.0: Could not find int-in endpoint [ 208.610842][ T1325] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 210.451647][ T4817] usb 1-1: USB disconnect, device number 7 [ 210.887056][ T21] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 212.058183][ T5887] device syzkaller0 entered promiscuous mode [ 212.064449][ T21] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 212.084767][ T21] usb 5-1: can't read configurations, error -71 [ 212.096482][ T5889] xt_hashlimit: size too large, truncated to 1048576 [ 213.511655][ T5860] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 215.630028][ T5929] trusted_key: encrypted_key: insufficient parameters specified [ 216.446133][ T4236] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 216.868138][ T4233] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 216.883143][ T4236] usb 1-1: Using ep0 maxpacket: 16 [ 217.015136][ T4236] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xD7, skipping [ 217.201847][ T4236] usb 1-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 217.214176][ T4236] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 217.222524][ T4236] usb 1-1: Product: syz [ 217.226793][ T4236] usb 1-1: Manufacturer: syz [ 217.231473][ T4236] usb 1-1: SerialNumber: syz [ 217.240343][ T4236] usb 1-1: config 0 descriptor?? [ 217.241865][ T4233] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 217.292523][ T4236] appledisplay 1-1:0.0: Could not find int-in endpoint [ 217.302463][ T4236] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 217.391736][ T4233] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 217.420960][ T4233] usb 4-1: config 0 descriptor?? [ 217.499014][ T4232] usb 1-1: USB disconnect, device number 8 [ 217.903277][ T4233] ath6kl: Failed to read usb control message: -71 [ 217.910161][ T4233] ath6kl: Unable to read the bmi data from the device: -71 [ 217.940255][ T4233] ath6kl: Unable to recv target info: -71 [ 217.970771][ T4233] ath6kl: Failed to init ath6kl core: -71 [ 218.031250][ T4233] ath6kl_usb: probe of 4-1:0.0 failed with error -71 [ 218.072538][ T5963] tc_dump_action: action bad kind [ 218.076361][ T4233] usb 4-1: USB disconnect, device number 15 [ 218.654730][ T1325] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 219.522276][ T1325] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 219.560590][ T1325] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 219.632434][ T1325] usb 3-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00 [ 219.709513][ T1325] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 219.888266][ T1325] usb 3-1: config 0 descriptor?? [ 221.736236][ T1325] hid-generic 0003:1038:12B6.0003: hidraw0: USB HID v0.00 Device [HID 1038:12b6] on usb-dummy_hcd.2-1/input0 [ 221.925541][ T1325] usb 3-1: USB disconnect, device number 7 [ 222.002301][ T5994] fido_id[5994]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 222.852558][ T6000] hfs: can't find a HFS filesystem on dev nullb0 [ 223.871647][ T4232] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 224.333066][ T4232] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 224.370989][ T4232] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xBA, skipping [ 224.374198][ T6028] comedi comedi0: Minor 3 could not be opened [ 224.381909][ T4817] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 224.602252][ T4232] usb 1-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 224.621774][ T4232] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 224.637812][ T4232] usb 1-1: Product: syz [ 224.648101][ T4232] usb 1-1: Manufacturer: syz [ 224.658397][ T4232] usb 1-1: SerialNumber: syz [ 224.712485][ T4232] usb 1-1: config 0 descriptor?? [ 224.742052][ T6016] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 224.755957][ T6016] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 224.782699][ T4232] usb 1-1: ucan: probing device on interface #0 [ 224.793483][ T4232] usb 1-1: ucan: invalid EP count (1) [ 224.798913][ T4232] usb 1-1: ucan: probe failed; try to update the device firmware [ 224.831920][ T4817] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 224.866198][ T4817] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 224.923818][ T4817] usb 2-1: config 0 descriptor?? [ 225.953019][ T4817] ath6kl: Failed to read usb control message: -71 [ 225.959530][ T4817] ath6kl: Unable to read the bmi data from the device: -71 [ 226.030647][ T4817] ath6kl: Unable to recv target info: -71 [ 226.089039][ T4817] ath6kl: Failed to init ath6kl core: -71 [ 226.160034][ T4817] ath6kl_usb: probe of 2-1:0.0 failed with error -71 [ 226.259354][ T4817] usb 2-1: USB disconnect, device number 10 [ 226.294706][ T23] usb 1-1: USB disconnect, device number 9 [ 226.426926][ T6051] device syzkaller0 entered promiscuous mode [ 226.763992][ T6060] 9pnet_virtio: no channels available for device syz [ 226.953142][ T23] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 227.408921][ T6060] syz.2.477 (6060) used greatest stack depth: 17464 bytes left [ 228.336110][ T4355] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 228.422012][ T23] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 228.451479][ T23] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 228.491770][ T23] usb 1-1: config 0 descriptor?? [ 229.121830][ T23] [drm:udl_init] *ERROR* Selecting channel failed [ 229.153796][ T23] [drm] Initialized udl 0.0.1 20120220 for 1-1:0.0 on minor 2 [ 229.174259][ T23] [drm] Initialized udl on minor 2 [ 229.201856][ T23] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 229.230835][ T23] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 229.276720][ T23] usb 1-1: USB disconnect, device number 10 [ 229.295276][ T4817] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffed [ 229.310058][ T4817] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffed [ 229.335076][ T4817] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 229.351918][ T4355] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 229.386266][ T4355] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 229.422063][ T4355] usb 3-1: Product: syz [ 229.511885][ T4817] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 229.551056][ T4355] usb 3-1: Manufacturer: syz [ 229.566854][ T4355] usb 3-1: SerialNumber: syz [ 229.963764][ T4355] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 229.971867][ T4817] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 229.971894][ T4817] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 229.990154][ T4817] usb 5-1: config 0 descriptor?? [ 230.030547][ T6084] trusted_key: encrypted_key: insufficient parameters specified [ 230.351784][ T4230] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 230.981173][ T4230] usb 1-1: Using ep0 maxpacket: 16 [ 231.112210][ T4355] usb 3-1: ath9k_htc: Firmware - ath9k_htc/htc_9271-1.4.0.fw download failed [ 231.130901][ T4233] usb 3-1: USB disconnect, device number 8 [ 231.137030][ T4230] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xD7, skipping [ 231.160105][ T4233] usb 3-1: ath9k_htc: USB layer deinitialized [ 231.273095][ T4817] ath6kl: Failed to read usb control message: -71 [ 231.279585][ T4817] ath6kl: Unable to read the bmi data from the device: -71 [ 231.331891][ T4230] usb 1-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 231.340976][ T4230] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 231.385320][ T4230] usb 1-1: Product: syz [ 231.447733][ T4230] usb 1-1: Manufacturer: syz [ 231.466998][ T4230] usb 1-1: SerialNumber: syz [ 231.474548][ T6143] device syzkaller0 entered promiscuous mode [ 231.568054][ T4817] ath6kl: Unable to recv target info: -71 [ 231.617017][ T4230] usb 1-1: config 0 descriptor?? [ 232.383634][ T4817] ath6kl: Failed to init ath6kl core: -71 [ 232.423360][ T4230] appledisplay 1-1:0.0: Could not find int-in endpoint [ 232.472387][ T4230] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 232.522567][ T4817] ath6kl_usb: probe of 5-1:0.0 failed with error -71 [ 232.549388][ T4817] usb 5-1: USB disconnect, device number 19 [ 232.625283][ T4355] usb 1-1: USB disconnect, device number 11 [ 235.872782][ T6204] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 235.925654][ T6204] device syzkaller0 entered promiscuous mode [ 236.230711][ T4236] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 237.363389][ T4236] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 237.383519][ T6207] netlink: 'syz.1.502': attribute type 16 has an invalid length. [ 237.391262][ T6207] netlink: 'syz.1.502': attribute type 17 has an invalid length. [ 237.404376][ T6207] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 237.411792][ T6207] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 237.435626][ T6207] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 237.512652][ T4236] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 237.595211][ T4236] usb 1-1: config 0 descriptor?? [ 238.150388][ T6229] hfs: can't find a HFS filesystem on dev nullb0 [ 238.164667][ T4236] ath6kl: Failed to read usb control message: -71 [ 239.028222][ T4236] ath6kl: Unable to read the bmi data from the device: -71 [ 239.035687][ T4236] ath6kl: Unable to recv target info: -71 [ 239.044982][ T4236] ath6kl: Failed to init ath6kl core: -71 [ 239.062304][ T4236] ath6kl_usb: probe of 1-1:0.0 failed with error -71 [ 239.101800][ T4236] usb 1-1: USB disconnect, device number 12 [ 241.831793][ T4355] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 241.861961][ T4355] Bluetooth: hci3: Injecting HCI hardware error event [ 241.872687][ T4200] Bluetooth: hci3: hardware error 0x00 [ 242.542819][ T6251] ODEBUG: Out of memory. ODEBUG disabled [ 243.371416][ T6261] hfs: can't find a HFS filesystem on dev nullb0 [ 243.385625][ T1325] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 245.102254][ T1325] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 245.112328][ T1325] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 245.123224][ T1325] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 245.140159][ T1325] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 245.151645][ T1325] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 245.291904][ T1325] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 245.307431][ T1325] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 245.319414][ T1325] usb 3-1: Product: syz [ 245.323778][ T1325] usb 3-1: Manufacturer: syz [ 245.382897][ T1325] cdc_wdm 3-1:1.0: skipping garbage [ 245.388366][ T1325] cdc_wdm 3-1:1.0: skipping garbage [ 245.428963][ T1325] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 245.443510][ T1325] cdc_wdm 3-1:1.0: Unknown control protocol [ 245.604052][ T4230] usb 3-1: USB disconnect, device number 9 [ 246.431627][ T6278] batman_adv: batadv0: Adding interface: gretap1 [ 246.438019][ T6278] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 246.467036][ T6278] batman_adv: batadv0: Interface activated: gretap1 [ 247.961783][ T6298] hfs: can't find a HFS filesystem on dev nullb0 [ 248.632535][ T6280] bridge0: port 2(bridge_slave_1) entered disabled state [ 248.641090][ T6280] bridge0: port 1(bridge_slave_0) entered disabled state [ 249.037144][ T6306] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 249.519341][ T6280] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 249.555097][ T6280] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 249.857141][ T6280] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.866100][ T6280] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.875078][ T6280] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.884010][ T6280] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.104341][ T6332] netlink: 80 bytes leftover after parsing attributes in process `syz.1.541'. [ 251.375063][ T6338] hfs: can't find a HFS filesystem on dev nullb0 [ 253.202512][ T6350] netlink: 8 bytes leftover after parsing attributes in process `syz.4.546'. [ 253.296411][ T6350] netlink: 8 bytes leftover after parsing attributes in process `syz.4.546'. [ 253.691292][ T6357] netlink: 'syz.0.549': attribute type 2 has an invalid length. [ 253.806012][ T6357] netlink: 164 bytes leftover after parsing attributes in process `syz.0.549'. [ 254.449425][ T6363] netlink: 24 bytes leftover after parsing attributes in process `syz.1.550'. [ 255.663380][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.669672][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.955251][ T6385] hfs: can't find a HFS filesystem on dev nullb0 [ 258.416102][ T6411] netlink: 8 bytes leftover after parsing attributes in process `syz.0.566'. [ 258.509812][ T6406] device syzkaller0 entered promiscuous mode [ 260.958754][ T6439] hfs: can't find a HFS filesystem on dev nullb0 [ 262.154203][ T6456] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 262.351391][ T6457] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 265.197548][ T6490] netlink: 'syz.1.587': attribute type 10 has an invalid length. [ 265.450709][ T6490] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 265.458438][ T6490] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 265.511727][ T1325] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 266.636738][ T1325] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 266.645977][ T1325] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 266.779981][ T1325] usb 4-1: config 0 descriptor?? [ 267.103797][ T6518] netlink: 4 bytes leftover after parsing attributes in process `syz.1.595'. [ 267.923233][ T1325] ath6kl: Failed to read usb control message: -71 [ 267.929918][ T1325] ath6kl: Unable to read the bmi data from the device: -71 [ 267.941077][ T1325] ath6kl: Unable to recv target info: -71 [ 267.954355][ T1325] ath6kl: Failed to init ath6kl core: -71 [ 268.009394][ T1325] ath6kl_usb: probe of 4-1:0.0 failed with error -71 [ 268.036867][ T1325] usb 4-1: USB disconnect, device number 16 [ 268.498522][ T6534] hfs: can't find a HFS filesystem on dev nullb0 [ 269.745373][ T6547] netlink: 8 bytes leftover after parsing attributes in process `syz.0.605'. [ 272.078494][ T6574] netlink: 8 bytes leftover after parsing attributes in process `syz.0.613'. [ 272.519995][ T6582] netlink: 8 bytes leftover after parsing attributes in process `syz.2.616'. [ 273.123970][ T6591] tipc: Failed to remove unknown binding: 66,1,1/0:2707805919/2707805921 [ 273.217894][ T6591] tipc: Failed to remove unknown binding: 66,1,1/0:2707805919/2707805921 [ 273.290787][ T6594] hfs: can't find a HFS filesystem on dev nullb0 [ 273.502828][ T6591] tipc: Failed to remove unknown binding: 66,1,1/0:2707805919/2707805921 [ 274.260655][ T6605] netlink: 8 bytes leftover after parsing attributes in process `syz.2.625'. [ 276.928146][ T6629] hfs: can't find a HFS filesystem on dev nullb0 [ 277.146336][ T6642] netlink: 12 bytes leftover after parsing attributes in process `syz.1.635'. [ 277.681036][ T6647] device bond0 entered promiscuous mode [ 277.700716][ T6647] device bond_slave_0 entered promiscuous mode [ 277.792952][ T6647] device bond_slave_1 entered promiscuous mode [ 278.191677][ T6647] device batadv0 entered promiscuous mode [ 278.212705][ T6647] device bridge2 entered promiscuous mode [ 278.250708][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): hsr1: link becomes ready [ 278.565199][ T6655] netlink: 8 bytes leftover after parsing attributes in process `syz.1.638'. [ 280.017829][ T6667] device syzkaller0 entered promiscuous mode [ 283.852057][ T6695] hfs: can't find a HFS filesystem on dev nullb0 [ 284.323914][ T6705] hfs: can't find a HFS filesystem on dev nullb0 [ 284.624955][ T6714] netlink: 'syz.0.654': attribute type 10 has an invalid length. [ 284.729915][ T6714] loop5: detected capacity change from 0 to 7 [ 284.784740][ T6714] Dev loop5: unable to read RDB block 7 [ 284.790468][ T6714] loop5: AHDI p1 [ 284.794395][ T6714] loop5: partition table partially beyond EOD, truncated [ 286.204629][ T6739] netlink: 4 bytes leftover after parsing attributes in process `syz.0.662'. [ 286.216479][ T6739] netlink: 4 bytes leftover after parsing attributes in process `syz.0.662'. [ 287.678780][ T6755] trusted_key: encrypted_key: insufficient parameters specified [ 287.774851][ T6757] netlink: 'syz.0.667': attribute type 10 has an invalid length. [ 287.791232][ T6757] loop5: detected capacity change from 0 to 7 [ 287.807655][ T6757] Dev loop5: unable to read RDB block 7 [ 287.813362][ T6757] loop5: AHDI p1 [ 287.817124][ T6757] loop5: partition table partially beyond EOD, truncated [ 288.541760][ T1325] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 289.481724][ T1325] usb 4-1: Using ep0 maxpacket: 16 [ 289.601779][ T1325] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xD7, skipping [ 289.781817][ T1325] usb 4-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 289.791813][ T13] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 289.824857][ T1325] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 289.855465][ T1325] usb 4-1: Product: syz [ 289.859857][ T1325] usb 4-1: Manufacturer: syz [ 289.972369][ T1325] usb 4-1: SerialNumber: syz [ 289.985955][ T1325] usb 4-1: config 0 descriptor?? [ 290.023407][ T1325] appledisplay 4-1:0.0: Could not find int-in endpoint [ 290.036003][ T1325] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 290.181754][ T13] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 290.194974][ T13] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 290.217711][ T13] usb 1-1: config 0 descriptor?? [ 290.233829][ T1325] usb 4-1: USB disconnect, device number 17 [ 290.713081][ T13] ath6kl: Failed to read usb control message: -71 [ 290.719647][ T13] ath6kl: Unable to read the bmi data from the device: -71 [ 290.742120][ T13] ath6kl: Unable to recv target info: -71 [ 290.761473][ T13] ath6kl: Failed to init ath6kl core: -71 [ 290.844915][ T6782] netlink: 'syz.2.677': attribute type 13 has an invalid length. [ 290.853291][ T13] ath6kl_usb: probe of 1-1:0.0 failed with error -71 [ 290.890596][ T13] usb 1-1: USB disconnect, device number 13 [ 290.912822][ T6782] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 290.942530][ T6782] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 290.950182][ T6782] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 291.056626][ T6790] netlink: 'syz.1.679': attribute type 10 has an invalid length. [ 292.431931][ T6800] sctp: failed to load transform for md5: -2 [ 292.628493][ T6825] device syzkaller0 entered promiscuous mode [ 292.651361][ T6825] 0: reclassify loop, rule prio 0, protocol 800 [ 293.172110][ T6838] netlink: 'syz.4.692': attribute type 10 has an invalid length. [ 293.473770][ T6838] loop5: detected capacity change from 0 to 7 [ 293.481830][ T6838] Dev loop5: unable to read RDB block 7 [ 293.487435][ T6838] loop5: AHDI p1 [ 293.491078][ T6838] loop5: partition table partially beyond EOD, truncated [ 294.043535][ T4236] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 294.098940][ T6853] device syzkaller0 entered promiscuous mode [ 294.431795][ T4236] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 294.440913][ T4236] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 294.525417][ T6858] device syzkaller0 entered promiscuous mode [ 294.564716][ T4236] usb 4-1: config 0 descriptor?? [ 295.053160][ T4236] ath6kl: Failed to read usb control message: -71 [ 295.060278][ T4236] ath6kl: Unable to read the bmi data from the device: -71 [ 295.068293][ T4236] ath6kl: Unable to recv target info: -71 [ 295.083056][ T4236] ath6kl: Failed to init ath6kl core: -71 [ 295.669509][ T4236] ath6kl_usb: probe of 4-1:0.0 failed with error -71 [ 295.796967][ T4236] usb 4-1: USB disconnect, device number 18 [ 296.671194][ T6882] netlink: 'syz.0.706': attribute type 10 has an invalid length. [ 296.687607][ T6882] loop5: detected capacity change from 0 to 7 [ 297.192075][ T6882] Dev loop5: unable to read RDB block 7 [ 297.197694][ T6882] loop5: AHDI p1 [ 297.201370][ T6882] loop5: partition table partially beyond EOD, truncated [ 297.308612][ T6887] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 297.335906][ T6890] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 297.965490][ T6903] Illegal XDP return value 4294967294, expect packet loss! [ 299.726315][ T6922] netlink: 'syz.4.719': attribute type 10 has an invalid length. [ 300.009391][ T6932] €Â: renamed from dummy0 [ 300.106205][ T6934] netlink: 4 bytes leftover after parsing attributes in process `syz.1.724'. [ 300.161879][ T6934] netlink: 'syz.1.724': attribute type 1 has an invalid length. [ 300.794739][ T6956] netlink: 'syz.0.732': attribute type 10 has an invalid length. [ 300.804187][ T6956] loop5: detected capacity change from 0 to 7 [ 301.925658][ T6956] Dev loop5: unable to read RDB block 7 [ 301.931515][ T6956] loop5: AHDI p1 [ 301.935517][ T6956] loop5: partition table partially beyond EOD, truncated [ 302.206816][ T6957] hfs: can't find a HFS filesystem on dev nullb0 [ 304.486003][ T6985] netlink: 12 bytes leftover after parsing attributes in process `syz.2.741'. [ 304.517987][ T6987] netlink: 16 bytes leftover after parsing attributes in process `syz.4.734'. [ 304.525629][ T6985] netlink: 4 bytes leftover after parsing attributes in process `syz.2.741'. [ 304.586512][ T6986] delete_channel: no stack [ 304.647384][ T6985] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 304.656685][ T6985] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 304.665518][ T6985] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 304.674262][ T6985] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 304.810701][ T6985] netlink: 12 bytes leftover after parsing attributes in process `syz.2.741'. [ 304.838304][ T6985] netlink: 4 bytes leftover after parsing attributes in process `syz.2.741'. [ 306.662887][ T7007] hfs: can't find a HFS filesystem on dev nullb0 [ 307.813344][ T7023] netlink: 'syz.2.752': attribute type 10 has an invalid length. [ 307.866490][ T7025] loop5: detected capacity change from 0 to 7 [ 307.894775][ T7025] Dev loop5: unable to read RDB block 7 [ 307.900377][ T7025] loop5: AHDI p1 [ 307.904112][ T7025] loop5: partition table partially beyond EOD, truncated [ 307.945778][ T7023] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 307.953631][ T7023] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 308.435471][ T7035] device syzkaller0 entered promiscuous mode [ 308.485232][ T7035] 0: reclassify loop, rule prio 0, protocol 800 [ 309.365376][ T7037] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 309.541713][ T7049] device syzkaller0 entered promiscuous mode [ 311.135572][ T7082] netlink: 'syz.4.769': attribute type 10 has an invalid length. [ 311.144721][ T7082] loop5: detected capacity change from 0 to 7 [ 311.154195][ T7082] Dev loop5: unable to read RDB block 7 [ 311.159786][ T7082] loop5: AHDI p1 [ 311.163469][ T7082] loop5: partition table partially beyond EOD, truncated [ 311.401194][ T7084] netlink: 24 bytes leftover after parsing attributes in process `syz.3.770'. [ 311.703916][ T7084] device ip6gre1 entered promiscuous mode [ 311.716938][ T13] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 311.732925][ T13] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 311.744643][ T6702] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 311.851789][ T13] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 312.657708][ T7097] hfs: can't find a HFS filesystem on dev nullb0 [ 313.340291][ T6699] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 313.414449][ T7103] device syzkaller0 entered promiscuous mode [ 313.975354][ T7141] loop5: detected capacity change from 0 to 7 [ 313.985719][ T7141] Dev loop5: unable to read RDB block 7 [ 313.991284][ T7141] loop5: AHDI p1 [ 313.995064][ T7141] loop5: partition table partially beyond EOD, truncated [ 314.040301][ T7140] netlink: 'syz.1.783': attribute type 10 has an invalid length. [ 315.480766][ T7154] netlink: 312 bytes leftover after parsing attributes in process `syz.1.787'. [ 315.517310][ T7154] netlink: 'syz.1.787': attribute type 1 has an invalid length. [ 315.991774][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 316.292039][ T7172] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 316.613170][ T7176] device syzkaller0 entered promiscuous mode [ 317.232461][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.238726][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.283921][ T7182] device syzkaller0 entered promiscuous mode [ 317.431051][ T7197] loop5: detected capacity change from 0 to 7 [ 317.452951][ T7197] Dev loop5: unable to read RDB block 7 [ 317.458545][ T7197] loop5: AHDI p1 [ 317.462245][ T7197] loop5: partition table partially beyond EOD, truncated [ 317.516603][ T7196] netlink: 'syz.3.797': attribute type 10 has an invalid length. [ 317.527307][ T7196] batadv0: mtu greater than device maximum [ 317.535066][ T7196] bond0: (slave batadv0): Error -22 calling dev_set_mtu [ 319.072566][ T7223] netlink: 4 bytes leftover after parsing attributes in process `syz.0.804'. [ 319.104717][ T7223] netlink: 4 bytes leftover after parsing attributes in process `syz.0.804'. [ 320.393457][ T7244] device syzkaller0 entered promiscuous mode [ 320.649907][ T7242] device syzkaller0 entered promiscuous mode [ 321.644899][ T7278] netlink: 4 bytes leftover after parsing attributes in process `syz.4.819'. [ 321.708332][ T7278] netlink: 4 bytes leftover after parsing attributes in process `syz.4.819'. [ 323.183761][ T7296] netlink: 4 bytes leftover after parsing attributes in process `syz.1.822'. [ 323.409482][ T7299] device syzkaller0 entered promiscuous mode [ 323.434332][ T7300] device syzkaller0 entered promiscuous mode [ 324.389751][ T7311] device macvtap0 entered promiscuous mode [ 324.550441][ T7315] netlink: 4 bytes leftover after parsing attributes in process `syz.4.831'. [ 324.600174][ T7315] netlink: 4 bytes leftover after parsing attributes in process `syz.4.831'. [ 324.781727][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 325.659222][ T7336] bridge0: port 3(macvlan2) entered blocking state [ 325.690609][ T7336] bridge0: port 3(macvlan2) entered disabled state [ 326.515368][ T7341] netlink: 28 bytes leftover after parsing attributes in process `syz.4.841'. [ 326.544891][ T7341] netlink: 16 bytes leftover after parsing attributes in process `syz.4.841'. [ 326.603333][ T7351] netlink: 4 bytes leftover after parsing attributes in process `syz.1.843'. [ 326.617970][ T7347] netlink: 4 bytes leftover after parsing attributes in process `syz.4.841'. [ 326.725827][ T7348] device syzkaller0 entered promiscuous mode [ 326.964063][ T7368] netlink: 4 bytes leftover after parsing attributes in process `syz.4.846'. [ 327.039600][ T7368] netlink: 4 bytes leftover after parsing attributes in process `syz.4.846'. [ 327.412395][ T7383] netlink: 16 bytes leftover after parsing attributes in process `syz.2.850'. [ 328.386516][ T7399] netlink: 20 bytes leftover after parsing attributes in process `syz.2.853'. [ 328.762622][ T7411] device syzkaller0 entered promiscuous mode [ 328.902414][ T7415] netlink: 'syz.0.860': attribute type 1 has an invalid length. [ 329.108590][ T7420] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 329.159208][ T7420] bond1: (slave vxcan3): Error -22 calling dev_set_mtu [ 329.256838][ T7421] ================================================================== [ 329.265580][ T7421] BUG: KASAN: global-out-of-bounds in drop_sysctl_table+0xa7/0x4e0 [ 329.273496][ T7421] Read of size 8 at addr ffffffff9669efd8 by task syz.2.861/7421 [ 329.281218][ T7421] [ 329.283555][ T7421] CPU: 0 PID: 7421 Comm: syz.2.861 Not tainted syzkaller #0 [ 329.290839][ T7421] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 329.300900][ T7421] Call Trace: [ 329.304181][ T7421] [ 329.307115][ T7421] dump_stack_lvl+0x188/0x250 [ 329.311804][ T7421] ? show_regs_print_info+0x20/0x20 [ 329.317019][ T7421] ? load_image+0x400/0x400 [ 329.321530][ T7421] ? _raw_spin_lock_irqsave+0xbc/0x100 [ 329.326997][ T7421] ? verify_lock_unused+0x140/0x140 [ 329.332210][ T7421] ? mark_lock+0x94/0x320 [ 329.336548][ T7421] print_address_description+0x60/0x2d0 [ 329.342101][ T7421] ? drop_sysctl_table+0xa7/0x4e0 [ 329.347129][ T7421] kasan_report+0xdf/0x130 [ 329.351559][ T7421] ? drop_sysctl_table+0xa7/0x4e0 [ 329.356592][ T7421] drop_sysctl_table+0xa7/0x4e0 [ 329.361455][ T7421] ? insert_header+0xce0/0xce0 [ 329.366227][ T7421] ? do_raw_spin_lock+0x128/0x2f0 [ 329.371271][ T7421] ? __rwlock_init+0x140/0x140 [ 329.376069][ T7421] unregister_sysctl_table+0x87/0x130 [ 329.381458][ T7421] ax25_unregister_dev_sysctl+0x79/0xa0 [ 329.387018][ T7421] ax25_dev_device_down+0x5b/0x520 [ 329.392148][ T7421] ax25_device_event+0x4b4/0x4f0 [ 329.397104][ T7421] raw_notifier_call_chain+0xcb/0x160 [ 329.402491][ T7421] __dev_notify_flags+0x158/0x300 [ 329.407533][ T7421] ? __dev_change_flags+0x6a0/0x6a0 [ 329.412831][ T7421] ? __dev_change_flags+0x4d0/0x6a0 [ 329.418051][ T7421] ? dev_get_flags+0x1c0/0x1c0 [ 329.422835][ T7421] ? __mutex_lock_common+0x155c/0x2400 [ 329.428317][ T7421] dev_change_flags+0xe3/0x1a0 [ 329.433114][ T7421] dev_ifsioc+0x130/0xd50 [ 329.437457][ T7421] ? dev_ioctl+0xe30/0xe30 [ 329.441889][ T7421] ? apparmor_capable+0x12c/0x190 [ 329.446931][ T7421] ? full_name_hash+0x8e/0xe0 [ 329.451640][ T7421] dev_ioctl+0x545/0xe30 [ 329.455904][ T7421] ? _copy_from_user+0x111/0x170 [ 329.460861][ T7421] sock_do_ioctl+0x245/0x320 [ 329.465474][ T7421] ? sock_show_fdinfo+0xb0/0xb0 [ 329.470362][ T7421] sock_ioctl+0x4d2/0x710 [ 329.474713][ T7421] ? sock_poll+0x410/0x410 [ 329.479161][ T7421] ? bpf_lsm_file_ioctl+0x5/0x10 [ 329.484109][ T7421] ? security_file_ioctl+0x7c/0xa0 [ 329.489215][ T7421] ? sock_poll+0x410/0x410 [ 329.493625][ T7421] __se_sys_ioctl+0xfa/0x170 [ 329.498207][ T7421] do_syscall_64+0x4c/0xa0 [ 329.502612][ T7421] ? clear_bhb_loop+0x30/0x80 [ 329.507273][ T7421] ? clear_bhb_loop+0x30/0x80 [ 329.511945][ T7421] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 329.517860][ T7421] RIP: 0033:0x7f2fb847e799 [ 329.522263][ T7421] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 329.541859][ T7421] RSP: 002b:00007f2fb66b7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 329.550258][ T7421] RAX: ffffffffffffffda RBX: 00007f2fb86f8090 RCX: 00007f2fb847e799 [ 329.558213][ T7421] RDX: 0000200000000000 RSI: 0000000000008914 RDI: 0000000000000006 [ 329.566166][ T7421] RBP: 00007f2fb8514c99 R08: 0000000000000000 R09: 0000000000000000 [ 329.574121][ T7421] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 329.582078][ T7421] R13: 00007f2fb86f8128 R14: 00007f2fb86f8090 R15: 00007ffc89ad4c78 [ 329.590044][ T7421] [ 329.593048][ T7421] [ 329.595349][ T7421] The buggy address belongs to the variable: [ 329.601300][ T7421] instance_create.__key+0x18/0x20 [ 329.606393][ T7421] [ 329.608696][ T7421] Memory state around the buggy address: [ 329.614302][ T7421] ffffffff9669ee80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 329.622343][ T7421] ffffffff9669ef00: 00 00 00 00 00 00 00 00 00 00 f9 f9 f9 f9 f9 f9 [ 329.630379][ T7421] >ffffffff9669ef80: 00 00 f9 f9 00 00 f9 f9 00 00 f9 f9 00 00 f9 f9 [ 329.638413][ T7421] ^ [ 329.645319][ T7421] ffffffff9669f000: 00 00 f9 f9 00 00 00 00 f9 f9 f9 f9 01 f9 f9 f9 [ 329.653354][ T7421] ffffffff9669f080: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 329.661396][ T7421] ================================================================== [ 329.669431][ T7421] Disabling lock debugging due to kernel taint [ 329.675942][ T7421] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 329.683137][ T7421] CPU: 0 PID: 7421 Comm: syz.2.861 Tainted: G B syzkaller #0 [ 329.691810][ T7421] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 329.701855][ T7421] Call Trace: [ 329.705117][ T7421] [ 329.708032][ T7421] dump_stack_lvl+0x188/0x250 [ 329.712699][ T7421] ? show_regs_print_info+0x20/0x20 [ 329.717887][ T7421] ? load_image+0x400/0x400 [ 329.722374][ T7421] panic+0x2e5/0x810 [ 329.726259][ T7421] ? bpf_jit_dump+0xd0/0xd0 [ 329.730743][ T7421] ? _raw_spin_unlock_irqrestore+0xbc/0x120 [ 329.736617][ T7421] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 329.742610][ T7421] ? _raw_spin_unlock+0x40/0x40 [ 329.747461][ T7421] ? mark_lock+0x94/0x320 [ 329.751790][ T7421] ? drop_sysctl_table+0xa7/0x4e0 [ 329.756808][ T7421] check_panic_on_warn+0x80/0xa0 [ 329.761738][ T7421] ? drop_sysctl_table+0xa7/0x4e0 [ 329.766744][ T7421] end_report+0x6d/0xf0 [ 329.770884][ T7421] kasan_report+0x102/0x130 [ 329.775372][ T7421] ? drop_sysctl_table+0xa7/0x4e0 [ 329.780380][ T7421] drop_sysctl_table+0xa7/0x4e0 [ 329.785217][ T7421] ? insert_header+0xce0/0xce0 [ 329.789961][ T7421] ? do_raw_spin_lock+0x128/0x2f0 [ 329.794967][ T7421] ? __rwlock_init+0x140/0x140 [ 329.799720][ T7421] unregister_sysctl_table+0x87/0x130 [ 329.805242][ T7421] ax25_unregister_dev_sysctl+0x79/0xa0 [ 329.810806][ T7421] ax25_dev_device_down+0x5b/0x520 [ 329.815926][ T7421] ax25_device_event+0x4b4/0x4f0 [ 329.820856][ T7421] raw_notifier_call_chain+0xcb/0x160 [ 329.826221][ T7421] __dev_notify_flags+0x158/0x300 [ 329.831237][ T7421] ? __dev_change_flags+0x6a0/0x6a0 [ 329.836421][ T7421] ? __dev_change_flags+0x4d0/0x6a0 [ 329.841611][ T7421] ? dev_get_flags+0x1c0/0x1c0 [ 329.846361][ T7421] ? __mutex_lock_common+0x155c/0x2400 [ 329.851808][ T7421] dev_change_flags+0xe3/0x1a0 [ 329.856562][ T7421] dev_ifsioc+0x130/0xd50 [ 329.860881][ T7421] ? dev_ioctl+0xe30/0xe30 [ 329.865280][ T7421] ? apparmor_capable+0x12c/0x190 [ 329.870288][ T7421] ? full_name_hash+0x8e/0xe0 [ 329.874956][ T7421] dev_ioctl+0x545/0xe30 [ 329.879180][ T7421] ? _copy_from_user+0x111/0x170 [ 329.884101][ T7421] sock_do_ioctl+0x245/0x320 [ 329.888685][ T7421] ? sock_show_fdinfo+0xb0/0xb0 [ 329.893520][ T7421] sock_ioctl+0x4d2/0x710 [ 329.897835][ T7421] ? sock_poll+0x410/0x410 [ 329.902239][ T7421] ? bpf_lsm_file_ioctl+0x5/0x10 [ 329.907165][ T7421] ? security_file_ioctl+0x7c/0xa0 [ 329.912261][ T7421] ? sock_poll+0x410/0x410 [ 329.916661][ T7421] __se_sys_ioctl+0xfa/0x170 [ 329.921241][ T7421] do_syscall_64+0x4c/0xa0 [ 329.925640][ T7421] ? clear_bhb_loop+0x30/0x80 [ 329.930309][ T7421] ? clear_bhb_loop+0x30/0x80 [ 329.934973][ T7421] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 329.940851][ T7421] RIP: 0033:0x7f2fb847e799 [ 329.945251][ T7421] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 329.964954][ T7421] RSP: 002b:00007f2fb66b7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 329.973366][ T7421] RAX: ffffffffffffffda RBX: 00007f2fb86f8090 RCX: 00007f2fb847e799 [ 329.981336][ T7421] RDX: 0000200000000000 RSI: 0000000000008914 RDI: 0000000000000006 [ 329.989299][ T7421] RBP: 00007f2fb8514c99 R08: 0000000000000000 R09: 0000000000000000 [ 329.997265][ T7421] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 330.005222][ T7421] R13: 00007f2fb86f8128 R14: 00007f2fb86f8090 R15: 00007ffc89ad4c78 [ 330.013184][ T7421] [ 330.016522][ T7421] Kernel Offset: disabled [ 330.020830][ T7421] Rebooting in 86400 seconds..