last executing test programs: 27m41.160672383s ago: executing program 3 (id=484): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000200)={@remote, 0x8, 0x2, 0x2, 0x0, 0x0, 0x6}, 0x20) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/anycast6\x00') preadv(r1, &(0x7f0000000340)=[{&(0x7f0000000700)=""/235, 0xeb}], 0x1, 0x2001, 0x2) 27m40.780934712s ago: executing program 3 (id=488): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000ac0), r1) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r2, 0x3, 0x70bd25, 0x25dfdbfe, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20004090}, 0x0) 27m40.491952786s ago: executing program 3 (id=490): syz_mount_image$exfat(&(0x7f0000006c00), &(0x7f0000001b40)='./file0\x00', 0x208008de, &(0x7f0000001b80)=ANY=[@ANYBLOB='utf8,errors=continue,namecase=1,utf8,gid=', @ANYRESHEX=0x0, @ANYBLOB=',umask=00000000000000000000077,umask=00000000000000000005676,uid=', @ANYRESHEX=0x0, @ANYBLOB=',gid=', @ANYRESHEX=0x0, @ANYBLOB="2c000ca8768ddddc191573cbd33da79641936c9de64e264f331d1b50f4c4f54702f51dcbddb39c14c19175f07a639bb65ea608fbf6fadf5d8da30ace1281bed3e61b084526e10dbe921dad84fbcabc5791f52445cb76b789ed377aa0cd17309c4df04d525e8af05fb246b33836d90656cd2daa991b916be40df3bd607ae5672e1bb90730d0ff03000000000000c5f0cf287ea707c1fc66165f74e7d8a78c37a4b86907cec1df06da3611f616718d88770a2520ceb039bc06ef4d1183"], 0x1, 0x1503, &(0x7f0000000580)="$eJzs3AuYj1XXMPC99t43Y5L+TXIY9trr5p8G2yRJDgk5JEmSJDklJCZJEhJDTklDEnKcJIchJIdpTBrn8yHnpMkjTZKE5BT2d+np/Tzv0/O+fe9X3+e93lm/69qXvdz/tf7rnjXX3Pf9v66Z73uOqtu8Xq2mRCT+FPj7P8lCiBghxDAhxA1CiEAIUTGuYtyV4/kUJP+5N2F/rUfTrnUH7Fri+eduPP/cjeefu/H8czeef+7G88/deP65G8+fsdxs+5yiN/LKvYs//8/N+Pr/P0hOuclfbyx3c6//QgrPP3fj+eduPP/cjeefu/H8czee//98Nf+TYzz/3I3nz1hudq0/f+Z1bde1/v5jjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMZY7nPNXaSHEv+2vdV+MMcYYY4wxxhj76/i817oDxhhjjDHGGGOM/b8HQgoltAhEHpFXxIh8IlZcJ/KL60UBcYOIiBtFnLhJFBQ3i0KisCgiiop4UUwUF0agsIJEKEqIkiIqbhGlxK0iQZQWZURZ4UQ5kShuE+XF7aKCuENUFHeKSuIuUVlUEVVFNXG3qC7uETVETVFL3Ctqizqirqgn7hP1xf2igXhANBQPikbiIdFYPCyaiEdEU/GoaCYeE83F46KFeEK0FK1Ea9FGtP2/yn9Z9BWviH6iv0gWA8RA8aoYJAaLIWKoGCZeE8PF62KEeEOkiJFilHhTjBZviTHibTFWjBPjxTtigpgoJonJYoqYKlLFu2KaeE9MF++LGWKmmCVmizQxR8wVH4h5Yr5YID4UC8VHYpFYLJaIpSJdfCwyxDKRKT4Ry8WnIkusECvFKrFarBFrxTqxXmwQG8UmsVlsEVvFNrFdfCZ2iJ1il9gt9oi9Yp/4XOwXX4gD4kuRLb76L+af/af8XiBAgAQJGjTkgTwQAzEQC7GQH/JDASgAEYhAHMRBQSgIhaAQFIEiEA/xUByKAwICAUEJKAFRiEIpKAUJkABloAw4cJAIiVAebocKUAEqQkWoBJWgMlSBKlANqkF1qA41oAbUglpQG2pDXagL98F9cD80gAbQEBpCI2gEjaExNIEm0BSaQjNoBs2hObSAFtASWkJraA1toS20g3bQHtpDR+gInaATdIbOkARJ0BW6QjfoBt2hO/SAHtATekIv6A294WV4GV6BV6A/1JYDYCAMhEEwCIbAUBgKr8FweB1ehzcgBUbCKHgT3oS3YAycgbEwDsbDeKguJ8IkmAwkp0IqpMI0mAbTYTrMgJkwE2ZDGsyBuTAX5sF8mA8fwkL4CD6CxbAYlkI6pEMGLINMyITlcBayYAWshFWwGtbAalgH62EdbIRNsBG2wBbYBtvgM/gMdsJO2A27YS/shc/hc/gCvoAUyIZsOAgH4RAcgsNwGHIgB47AETgKR+EYHIPjcBxOwEk4BSfhNJyGM3AWzsE5uAAX4CK8GP9ts72lN6QIeYWWWuaReWSMjJGxMlbml/llAVlARmRExsk4WVAWlIVkIVlEFpHxMl4Wl8UlSpQkQ1lClogRQshSspRMkAmyjCwjnXQyUSbK8rK8rCAryIryTllJ3iUryyqyg6smq8nqsqOrIWvKWrKWrC3ryLqynqwn68v6soFsIBvKhrKRbCQby4dlEzkAhsCj8spkmsuR0EKOgpaylWwt28i34EnZTo6B9rKD7CifluNgLHSW7VySfFZ2lZOgm3xeToYXZA85FXrKl2Qv2Vv2kS/LvrK96yf7yxkwQA6Us2GQHCyHyKFyHtSRVyZWV74hU+RIOUq+KZfCW3KMfFuOlePkePmOnCAnyklyspwip8pU+a6cJt+T0+X7coacKWfJ2TJNzpFz5QdynpwvF8gP5UL5kVwkF8slcqlMlx/LDLlMZspP5HL5qcySK+RKuUqulmvkWrlOrpcb5Ea5SW6WW+RWuU1ul5/JHXKn3CV3yz1yr9wnP5f75RfygPxSZsuv5EH5N3lIfi0Py29kjvxWHpHfyaPye3lM/iCPyx/lCXlSnpI/ydPyZ3lGnpXn5Hl5Qf4iL8pL8rL0UihQUimlVaDyqLwqRuVTseo6lV9drwqoG1RE3aji1E2qoLpZFVKFVRFVVMWrYqq4MgqVVaRCVUKVVFF1iyqlblUJqrQqo8oqp8qpRHWbKq9uVxXUHaqiulNVUnepyqqKqqqqqbtVdXWPqqFqqlrqXlVb1VF1VT11n6qv7lcN1AOqoXpQNVIPqcbqYdVEPaKaqkdVM/WYaq4eVy3UE6qlaqVaqzaqrXpStVNPqfaqg+qonlad1DOqs+qiktSzqqt6TnVTz6vu6gXVQ72oeqqXVC/VW/VRl9Rl5VU/1V8lqwFqoHpVDVKD1RA1VA1Tr6nh6nU1Qr2hUtRINUq9qUart9QY9bYaq8ap8eodNUFNVJPUZDVFTVWp6l01Tb2npqv31Qw1U81Ss1WamqOG/FZpwT/lD/jtqvuP+e/9i/wRv777NrVdfaZ2qJ1ql9qt9qi9ap/ap/ar/eqAOqCyVbY6qA6qQ+qQOqwOqxyVo46oI+qoOqqOqWPquDquTqiT6rz6SZ1WP6sz6qw6q86rC+qCuvjb10Bo0FIrrXWg8+i8Okbn07H6Op1fX68L6Bt0RN+o4/RNuqC+WRfShXURXVTH62K6uDYatdWkQ11Cl9RRfYsupW/VCbq0LqPLaqfL6UR925/O/6P+2uq2up1up9vr9rqj7qg76U66s+6sk3SS7qq76m66m+6uu+seuofuqXvqXrqX7qP76L66r+6n++lknawH6lf1ID1YD9FD9TD9mh6uh+sReoRO0Sl6lB6lR+vReoweo8fqsXq8Hq8n6Al6kp6kp+gpOlWn6ml6mp6up+sZeoaepWfpNJ2m5+q5ep6epxfoBXqhXqgX6UV6iV6i03W6ztAZOlNn6uV6uc7SK/QKvUqv0mv0Gr1Or9Mb9Aa9SW/SW/QWnaW36+16h96hd+ldeo/eo/fpfXq/3q8P6AM6W2frg/qgPqQP6cP6sM7ROfqIPqKP6qP6mD424Lg+rk/oE/qUPqVP69P6jD6jz+lz+oK+oC/qi/qyvnzlti+QgQx0oIM8QZ4gJogJYoPYIH+QPygQFAgiQSSIC+KCgsHNQaGgcFAkKBrEB8WC4oEJMLABBWFQIigZRINbglLBrUFCUDooE5QNXFAuSAxuC8oHtwcVgjuCisGdQaXgrqByUCWoGlQL7g6qB/cENYKaQa3g3qB2UCeoG9QL7gvqB/cHDYIHgobBg0Gj4KGgcfBw0CR4JGgaPBo0Cx4LmgePBy2CJ4KWQaugddAmaPuX1vf+TOGnXD/T3ySbAWagedUMMoPNEDPUDDOvmeHmdTPCvGFSzEgzyrxpRpu3zBjzthlrxpnx5h0zwUw0k8xkM8VMNanmXTPNvGemm/fNDDPTzDKzTZqZY+aaD8w8M98sMB+aheYjs8gsNkvMUpNuPjYZZpnJNJ+Y5eZTk2VWmJVmlVlt1py/UQiz3mwwG80ms9lsMVvNNrPdfGZ2mJ1ml9lt9pi9Zp/53Ow3X5gD5kuTbb4yB83fzCHztTlsvjE55ltzxHxnjprvzTHzgzlufjQnzElzyvxkTpufzRlz1pwz580F84u5aC6Zy8Zfubm/cnlHjRrzYB6MwRiMxVjMj/mxABbACEYwDuOwIBbEQlgIi2ARjMd4LI7F8QpCwhJYAqMYxVJYChMwActgGXToMBETsTyWxwpYAStiRayElbAyVsaqWBXvxrvxHrwHa2JNvBfvxTpYB+thPayP9bEBNsCG2BAbYSNsjI2xCTbBptgUm2EzbI7NsQW2wJbYEltja2yLbbEdtsP22B47YkfshJ2wM3bGJEzCrtgVu2E37I7dsQf2wJ7YE3thL+yDfbAv9sV+2A+TMRkH4kAchINwCA7BYTgMh+NwHIEjMAVTcBSOwtE4GsfgGByL43A8voMTcCJOwsk4BadiKqbiNJyG03E6zsAZOAtnYRqm4Vyci/NwHi7ABbgQF+IiXIRLcAmmYzpmYAZmYiYux+WYhVm4ElfialyNa3Etrsf1uBE34mbcjFtxK27H7bgDd+Au3IV7cA/uw324H/fjATyA2ZiNB/EgHsJDeBgPYw7m4BE8gkfxKB7DY3gcj+MJPIGn8BSextN4Bs/gOTyHF/AXvIiX8DJ6jLFSxNrrbH57vS1gb7AxNp/9x7iILWrjbTFb3BpbyBb+dzFaaxNsaVvGlrXOlrOJ9rbfxZVtFVvVVrN32+r2Hlvjd3F9e79tYB+wDe2Dtp6977c4769xI/uQbWwft03sE7apbWWb2Ta2uX3ctrBP2Ja2lW1t29hO9hnb2XaxSfZZ29U+97s4wy6z6+0Gu9FusvvtF/acPW+P2u/tBfuL7Wf722H2NTvcvm5H2Ddsih35u3i8fcdOsBPtJDvZTrFTfxfPsrNtmp1j59oP7Dw7/3dxuv3YLrSZdpFdbJfYpb/GV3rKtJ/Y5fZTm2VX2JV2lV1t19i1dt3/7nWV3WK32m12n/3c7rA77S672+6xe3+Nr5zHAfulzbZf2SP2O3vIfm0P22M2x377a3zl/I7ZH+xx+6M9YU/aU/Yne9r+bM/Ys7+e/5Vz/8lespett4KAJCnSFFAeyksxlI9i6TrKT9dTAbqBInQjxdFNVJBupkJUmIpQUYqnYlScDCFZIgqpBJWkKN1CpehWSqDSVIbKkqNylEi3UXm6nSrQHVSR7qRKdBdVpipUlarR3VSd7qEaVJNq0b1Um+pQXapH91F9up8a0APUkB6kRvQQNaaHqQk9Qk3pUWpGj1Fzepxa0BPUklpRa2pDbelJakdPUXvqQB3paepEz1Bn6kJJ9Cx1peeoGz1P3ekF6kEvUk96iXpRb+pDL1NfeoX6UX9KpgE0kF6lQTSYhtBQGkav0XB6nUbQG5RCI2kUvUmj6S0aQ2/TWBpH4+kdmkATaRJNpik0lVLpXTqb3qXIlXu9GTSTZtFsSqM5NJc+oHk0nxbQh7SQPqJFtJiW0FJKp48pg5ZRJn1Cy+lTyqIVtJJW0WpaQ2tpHa2nDbSRNtFm2kJbaRttp89oB+2kXbSb9tBe2kef0376gg7Ql5RNX9FB+hsdoq/pMH1DOfQtHaHv6Ch9T8foBzpOP9IJOkmn6Cc6TT/TGTpL5+g8XaBf6CJdosvkSYQQylCFOgzCPGHeMCbMF8aG14X5w+vDAuENYSS8MYwLbwoLhjeHhcLCYZGwaBgfFguLhybE0IYUhmGJsGQYDW8JS4W3hglh6bBMWDZ0YbkwMbwtLB/eHlYI7wgrhneGlcK7wsphlfDxB6uFd4fVw3vCGmHNsFZ4b1g7rBPWDeuF94X1w/vDBuEDYcPwwbBC+FDYOHw4bBI+EjYNHw2bhY+FzcPHwxbhE2HLsFXYOmwTtg2fDNuFT4Xtww5hx/DpsFP4TNg57BImhc+GXcPn/vB4cjggHBi+Gr4aev+AWhJdGk2PfhzNiC6LZkY/iS6PfhrNiq6Iroyuiq6Oromuja6Lro9uiG6Mbopujm6Jbo1ui3pfL69w4KRTTrvA5XF5XYzL52LddS6/u94VcDe4iLvRxbmbXEF3syvkCrsirqiLd8VccWccOuvIha6EK+mi7hZXyt3qElxpV8aVdc6Vc4mujWvr2rp27inX3nVwHd3T7mn3jHvGdXFd3LOuq3vOdXPPu+7uBdfDvehedC+5Xq636+Nedn3dK66f6++SXbIb6Aa6QW6QG+KGuGFumBvuhrsRboRLcSlulBvlRrvRbowb48a6sW68G+8muAlukpvkprgpLtWlumlumpvuprsZboab5Wa5NJfm5rq5bp6b5xa4BW5hwkK3yC1yS9wSl+7SXYbLcJku0y13y12Wy3Ir3Uq32q12a91at96tdxvdRrfZbXZb3Va33W13O9wOt8vtcnvcHrfP7XP73X53wB1w2S7bHXQH3SF3yB1237gc96074r5zR9337pj7wR13P7oT7qQ75X5yp93P7ow768658+6C+8VddJfcZeddauTdyLTIe5HpkfcjMyIzI7MisyNpkTmRuZEPIvMi8yMLIh9GFkY+iiyKLI4siSyNpEc+jmRElkUyI59Elkc+jWRFVkRWRlZFVkfWRLwvtiP0JXxJH/W3+FL+Vp/gS/syvqx3vpxP9Lf58v52X8Hf4Sv6O30lf5ev7Kv4qv4J39K38q19G9/WP+nb+ad8e9/Bd/RP+07+Gd/Zd/FJ/lnf1T/nu/nnfXf/gu/hX/Q9/Uu+l+/t+/iXfV//iu/n+/tkP8AP9K/6QX6wH+KH+mH+NT/cv+5H+Dd8ih/pR/k3/Wj/lh/j3/Zj/Tg/3r/jJ/iJfpKf7Kf4qT7Vv+un+ff8dP++n+Fn+ll+tk/zc/xc/4Gf5+f7Bf5Dv9B/5Bf5xX6JX+rT/cc+wy/zmf4Tv9x/6rP8Cr/Sr/Kr/Rq/1q/z6/0Gv9Fv8pv9Fr/Vb/Pb/Wd+h9/pd/ndfo/f6/f5z/1+/4U/4L/02f4rf9D/zR/yX/vD/huf47/1R/x3/qj/3h/zP/jj/kd/wp/0p/xP/rT/2Z/xZ/05f95f8L/4i/6Sv8y/s8YYY4wx9n9E/cHxAf/i/+Rv64qBQojrdxbN+eeamwv9fT9YxneKCCGe7d/z0X9btWsnJyf/9tosJYKSi4UQkav5ecTVeIXoKJ4RSaKDKP8v+xsse1+gP6gfvVOI2KuVfxUr/rn+7f9B/SefHp9RKTwX95/UXyxEQsmrOfnE1fhq/Qr/Qf3C7f6g/3xfpwrR/h9y8our8dX6ieIp8ZxI+nevZIwxxhhjjDHG/m6wrNr9j56frzyfx+urOXnF1fiPns8ZY4wxxhhjjDF27b3Qu0+XJ5OSOnTnzZ/Y1Pjv0QZvePOXba71TybGGGOMMcbYX+3qTf+17oQxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGMu9/n/8ObFrfY6MMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcbYtfa/AgAA///mJjhh") syz_emit_ethernet(0x16, &(0x7f0000000080)={@multicast, @empty, @void, {@llc_tr={0x11, {@snap={0xaa, 0x0, "0f", '~b^'}}}}}, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) syz_mount_image$exfat(0x0, &(0x7f0000000080)='./file0\x00', 0x9128c0, 0x0, 0x1, 0x0, &(0x7f0000000080)) 27m40.184820641s ago: executing program 3 (id=492): fanotify_mark(0xffffffffffffffff, 0x249, 0x40000038, 0xffffffffffffffff, 0x0) syz_mount_image$udf(&(0x7f0000000080), &(0x7f00000000c0)='./file1\x00', 0x18410, &(0x7f0000000180)=ANY=[], 0xfe, 0x4b1, &(0x7f0000001d00)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) chdir(&(0x7f0000000100)='./file0\x00') openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x2000, 0x1e1) 27m39.60346846s ago: executing program 3 (id=496): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x60, 0x9, 0x6, 0x3, 0x0, 0x0, {0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x38, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_PROTO={0x5, 0x7, 0xff}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010101}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) 27m38.728824093s ago: executing program 3 (id=502): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000000c0)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="00222200000096231b06e53f07010000002a90f225d1670683749e82"], 0x0}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, 0xffffffffffffffff, 0x0) 27m38.259242077s ago: executing program 32 (id=502): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000000c0)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="00222200000096231b06e53f07010000002a90f225d1670683749e82"], 0x0}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, 0xffffffffffffffff, 0x0) 15.477697191s ago: executing program 2 (id=6482): syz_usb_connect(0x0, 0x2d, &(0x7f0000000400)=ANY=[@ANYBLOB="1201000009b768405e0483020b9901e40201090227000100000000090400fb015cc7aa00090509"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0), 0xc, &(0x7f0000000280)={&(0x7f0000000100)={0x14, 0x1, 0x4, 0x3, 0x0, 0x0, {0x2, 0x0, 0x9}}, 0x14}, 0x1, 0x0, 0x0, 0x24bd8cd6d23e9a8a}, 0x8001) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000400)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, 0x0, 0x20000000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000380)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0xfffffffa, '\x00', r3, 0xffffffffffffffff, 0x3, 0x4}, 0x50) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42f82, 0x0) write$binfmt_aout(0xffffffffffffffff, 0x0, 0xffffffdb) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000d80)=@raw={'raw\x00', 0x8, 0x3, 0x2cc, 0x0, 0x25, 0x148, 0x340, 0x60, 0x468, 0x2a8, 0x2a8, 0x468, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x110, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'geneve0\x00', {0x44, 0x0, 0x9, 0x0, 0x4, 0xffffffff, 0x7}}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x6, 'syz0\x00'}}}, {{@ip={@broadcast, @multicast1, 0x0, 0x0, 'veth1_to_bond\x00', 'veth0\x00', {0xff}}, 0x0, 0xe8, 0x128, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x2, 0x2, 0x1, 0x5, 0x0, 0x1], 0x4, 0x5}}}, @common=@unspec=@statistic={{0x38}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x2, 0x1, "8aaa53abdcd262af029c792dd41e857557f11bf3df0f3adc717d2a04cbd4"}}}], {{'\x00', 0xc8, 0x70, 0x94}, {0x24}}}}, 0x328) syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x3, 0x101000) 14.780010745s ago: executing program 1 (id=6488): ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8, 0x5}) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000100)={0x1, 0x0, [{0x400000f3, 0x0, 0x5}]}) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f0000000040)={0x0, 0x12000, 0x1}) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f0000000000)={0xeeee8000, 0x102000, 0x1}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0xc45, 0x9, 0xfffffffffffffffd, 0x62, 0x10000, 0x3, 0x4002004c2, 0x0, 0x4, 0x0, 0x400, 0x80, 0x3, 0x0, 0x8, 0x8d], 0x100000, 0x80}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 14.594247315s ago: executing program 1 (id=6492): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000020000000400000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000020000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa20000000000000702", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={r2, 0xe0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000400)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x31, 0x8, 0x0, 0x0}}, 0x10) 14.27197113s ago: executing program 1 (id=6496): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYRES16], 0x14}, 0x1, 0x0, 0x0, 0x4800}, 0xc114) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000280)=ANY=[@ANYRES64], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() modify_ldt$write(0x2000, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) fsopen(0x0, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000000)='source', &(0x7f00000000c0)='%(:2', 0x0) fsopen(0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) unshare(0x6a040000) r5 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) kexec_load(0x2, 0x1, &(0x7f0000000140)=[{&(0x7f0000000080)="4c2a9e5fdbbd6e10d17cae3b91d35d734a99bc6074fb67a79f", 0x19, 0x3, 0x2}], 0x80000) writev(r5, &(0x7f0000000540)=[{&(0x7f0000001680)='0', 0x1}], 0x1) 11.686598439s ago: executing program 2 (id=6501): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x48043) r2 = dup(r0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='ip6gretap0\x00', 0x10) write$FUSE_INIT(r1, &(0x7f0000000100)={0x50, 0xfffffffffffffffe, 0x0, {0x7, 0x2d, 0x70, 0x8310000, 0x3ff, 0xff, 0x3, 0xa54, 0x0, 0x0, 0x10, 0x20000000}}, 0x50) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0x2d}}, 0x7, 0x1, 0xf06, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x13f, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000300)={0x4, 0x8}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e60, 0xeffffff2, @empty, 0x5}}, 0x10001fc, 0x6, 0xffff1896, 0x3, 0x26, 0xffffffb9, 0x1a}, 0x9c) 11.46070636s ago: executing program 2 (id=6502): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="09000000040000000200000009"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x1, 0x4, &(0x7f00000010c0)=ANY=[@ANYBLOB="8500000008000000350000008400000085000000070000009500000000000000fed023d1d405000000c7d4012507000000c71adb05d72768b8242dd90d17e4c52505750482b009546a5f3f00573f31b53fd3e52bd87184446d165ae2939bbca322a415a98c885faad395f3e4e0635559362ed862ce7c69ad133037af3a000000000000000000000058c122dff93c54caec3751652d11fd4f66711918d3604b92666d60c88b658fe57bb5d365c5b89625385f230ba21f570635837c7bc74be573bfd68aaaf06d842085f84b96c4709e2c9449f0818f6fc5657572fb3e5bb8ff6f643e52f4964c62a70a011ede8b504c8a30381b8eff01d7615e1789bb4b3b7ef3668a98a785a80aa2d1ab149b9316091fb3025f0716799d8280acb3880a882f28dd3111e02c3b0b2818bf5bb902cc9c1666f5fdd2e43901ca4796f04db25c3df35cdfc17c54936202b45b7a09816aa76e8b9bbe24022007aae367025040e8b2255ced48a4b2db3f280dc6fd2f5374548c499ae74631f3be04e28d601369f9488fb074eb35"], &(0x7f0000000140)='GPL\x00', 0x0, 0x94, &(0x7f0000000180)=""/148}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040), 0x0, 0xffffffffffffffff, 0x4}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x6, 0x10, &(0x7f0000000500)=ANY=[@ANYBLOB="18020000ff070000000000000300000018110000", @ANYRES64], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r2) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000500)) ioctl$SIOCSIFHWADDR(r2, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"}) 11.228289052s ago: executing program 2 (id=6505): r0 = socket$inet_smc(0x2b, 0x1, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000280)={0x0, r0}, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x18, 0x3, &(0x7f0000000040)=ANY=[@ANYRES32], &(0x7f0000000300)='GPL\x00', 0x8, 0xb3, &(0x7f0000000140)=""/179, 0x41100, 0x7b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x38}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000400)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x2000)=nil, 0x2000, &(0x7f0000000000)) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000380)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0xfffffffa, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x4}, 0x50) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) r5 = dup(r4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r5, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, &(0x7f00000000c0)) write$binfmt_aout(r5, 0x0, 0xffffffdb) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000d80)=@raw={'raw\x00', 0x8, 0x3, 0x4fc, 0x0, 0x25, 0x148, 0x340, 0x60, 0x468, 0x2a8, 0x2a8, 0x468, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'geneve0\x00', {0x44, 0x0, 0x9, 0x0, 0x4, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x0, 0x6, './file0\x00'}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x6, 'syz0\x00'}}}, {{@ip={@broadcast, @multicast1, 0x0, 0x0, 'veth1_to_bond\x00', 'veth0\x00', {0xff}}, 0x0, 0xe8, 0x128, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x2, 0x2, 0x1, 0x5, 0x0, 0x1], 0x4, 0x5}}}, @common=@unspec=@statistic={{0x38}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x2, 0x1, "8aaa53abdcd262af029c792dd41e857557f11bf3df0f3adc717d2a04cbd4"}}}], {{'\x00', 0xc8, 0x70, 0x94}, {0x24}}}}, 0x558) 8.926906716s ago: executing program 2 (id=6512): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x202, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x3, 0x1000002, 0x0, 0x5, "d52c2000000102000300ecffffff0100"}) r1 = syz_open_pts(r0, 0x0) readv(r0, &(0x7f0000000800)=[{0x0}], 0x1) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000080)=0x6) ioctl$TCFLSH(r1, 0x540b, 0x2) 8.890094528s ago: executing program 4 (id=6513): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="09000000040000000200000009"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x1, 0x4, &(0x7f00000010c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x94, &(0x7f0000000180)=""/148}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040), 0x0, 0xffffffffffffffff, 0x4}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x6, 0x10, &(0x7f0000000500)=ANY=[@ANYBLOB="18020000ff070000000000000300000018110000", @ANYRES64], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r2) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000500)) ioctl$SIOCSIFHWADDR(r2, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"}) 7.671914129s ago: executing program 2 (id=6514): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x0, 0x42, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$evdev(0x0, 0x40002, 0xa69c0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[], 0x0, 0x4a}, 0x28) io_uring_setup(0x2eff, &(0x7f0000000340)={0x0, 0xe8e5, 0x2, 0xfffffffd, 0x28f}) mkdir(0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00') read$FUSE(r3, &(0x7f0000000980)={0x2020}, 0x2020) 7.362772574s ago: executing program 4 (id=6515): getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="2c385a7af3", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x3, 0x16, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000004c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000017000000540006803c00040067636d286165732900000000000000000000000000000000000000000000000014000000e3de3d7b4cd07ec3ee777de774fc7987cca41989140003"], 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x4008014) 6.814602592s ago: executing program 4 (id=6516): r0 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000440)="e43006ea3eb060409f11616b0ff107c8b5c84a2513725dd800704d068c0a1d6565ec464eaa", 0x0, 0x3}, 0x38) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x40081100}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)=ANY=[@ANYBLOB="1400a5e31000010000000000000000000d00000a140000001100010000000000000000000300000a"], 0x28}, 0x1, 0x0, 0x0, 0x84}, 0x1) pread64(r0, &(0x7f0000001240)=""/102400, 0xffffff8c, 0x200000) 6.418150591s ago: executing program 0 (id=6517): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) 5.459938579s ago: executing program 0 (id=6518): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, &(0x7f00000000c0)=0x800, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'dummy0\x00', 0x0}) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0xf, r1}, 0x10) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f00000004c0)={0x5, {{0x2, 0x0, @multicast2}}, {{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x108) r2 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET(r2, &(0x7f0000000640)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000600)={&(0x7f0000000480)={0x10, 0x3e8, 0x100, 0x70bd26, 0x25dfdbfc, "", ["", "", ""]}, 0x10}}, 0x880) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'lo\x00'}) r4 = socket(0x10, 0x3, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r6, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r6, 0x84, 0x7a, &(0x7f0000000340)={r7, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r5, &(0x7f0000000080)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="20000000000000008400000002001000000041020000000000000000bab5ff22cf91ab74989825b9de0f594716bb23943f148cc267a66ef86d19066110c0ae7bb987620730c0933c03f26bcad409847b03c957d1ef48225e859af606461f68ba26e5be44a50346235f2fd8b1608326d5553d88031ba44940de", @ANYRES32=0x0], 0x20}], 0x1, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000040)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x4e24, @multicast2}}}, 0x108) 5.314175976s ago: executing program 0 (id=6519): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000020000000400000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000020000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={r2, 0xe0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000400)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x31, 0x8, 0x0, 0x0}}, 0x10) 5.064990268s ago: executing program 0 (id=6520): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x48043) r2 = dup(r0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e24, @empty}}, 0x8003, 0xbffc, 0xe652, 0x5, 0x134, 0x48, 0xff}, 0x9c) write$FUSE_INIT(r1, &(0x7f0000000100)={0x50, 0xfffffffffffffffe, 0x0, {0x7, 0x2d, 0x70, 0x8310000, 0x3ff, 0xff, 0x3, 0xa54, 0x0, 0x0, 0x10, 0x20000000}}, 0x50) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0x2d}}, 0x7, 0x1, 0xf06, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x13f, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000300)={0x4, 0x8}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e60, 0xeffffff2, @empty, 0x5}}, 0x10001fc, 0x6, 0xffff1896, 0x3, 0x26, 0xffffffb9, 0x1a}, 0x9c) 4.733357425s ago: executing program 0 (id=6521): socket$inet6_sctp(0xa, 0x801, 0x84) close(0x3) socket(0x2, 0x80805, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, 0x0) socket(0x8000000010, 0x2, 0x0) r1 = socket(0x840000000002, 0x3, 0x100) connect$inet(r1, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r1, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x4000095, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r2, 0x8955, &(0x7f00000003c0)={{0x2, 0x4e22, @empty}, {0x20000010304, @multicast}, 0x6, {0x2, 0x4e20, @rand_addr=0x64010101}}) 4.576494533s ago: executing program 4 (id=6522): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x202, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x3, 0x1000002, 0x0, 0x5, "d52c2000000102000300ecffffff0100"}) r1 = syz_open_pts(r0, 0x0) readv(r0, &(0x7f0000000800)=[{0x0}], 0x1) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000080)=0x6) ioctl$TCFLSH(r1, 0x540b, 0x2) 4.526767795s ago: executing program 4 (id=6523): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="09000000040000000200000009"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x1, 0x4, &(0x7f00000010c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x94, &(0x7f0000000180)=""/148}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040), 0x0, 0xffffffffffffffff, 0x4}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x6, 0x10, &(0x7f0000000500)=ANY=[@ANYBLOB="18020000ff070000000000000300000018110000", @ANYRES64], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r2) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000500)) ioctl$SIOCSIFHWADDR(r2, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"}) 4.271971828s ago: executing program 1 (id=6524): r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000000380)=@newtaction={0x14, 0x30, 0x53b, 0x0, 0x25dfdbfe}, 0x14}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x20) socketpair$unix(0x1, 0x3, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000701feffffff00000000017c0000040042800c0001800682237b36630000100002"], 0x34}, 0x1, 0x0, 0x0, 0x4004095}, 0xc080) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000701feffffff0000000002"], 0x34}, 0x1, 0x0, 0x0, 0x4000895}, 0xc000) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYRESDEC], 0xe8}, 0x1, 0x0, 0x0, 0x400c8c1}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x4) setsockopt$netlink_NETLINK_NO_ENOBUFS(r6, 0x10e, 0x5, 0x0, 0x0) writev(r6, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80043f679a10ff3d425f9cc3f4ff7f4e32f61bcdf1e422000000000100804824cabecc4b381eaadc28f23457e792945f64009400050028925aaa000000c600000000000000feff2c707f8f00ff", 0x58}], 0x1) 4.271047368s ago: executing program 4 (id=6525): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) r3 = syz_io_uring_setup(0x8d2, &(0x7f0000000240)={0x0, 0x0, 0x1000, 0x6}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, r2, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0, 0x20000044}) io_uring_enter(r3, 0x2afd, 0x308b, 0xc, 0x0, 0x0) 1.875647367s ago: executing program 1 (id=6526): syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000440)="e43006ea3eb060409f11616b0ff107c8b5c84a2513725dd800704d068c0a1d6565ec464eaa", 0x0, 0x3}, 0x38) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x40081100}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)=ANY=[@ANYBLOB="1400a5e31000010000000000000000000d00000a140000001100010000000000000000000300000a"], 0x28}, 0x1, 0x0, 0x0, 0x84}, 0x1) dup(0xffffffffffffffff) setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x26) r4 = io_uring_setup(0x4126, &(0x7f0000000c40)={0x0, 0xc09, 0x0, 0x0, 0x1000000}) io_uring_register$IORING_REGISTER_RING_FDS(r4, 0x13, &(0x7f0000001bc0), 0x2) 1.741782494s ago: executing program 0 (id=6527): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, &(0x7f00000000c0)=0x800, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'dummy0\x00', 0x0}) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0xf, r1}, 0x10) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f00000004c0)={0x5, {{0x2, 0x0, @multicast2}}, {{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x108) r2 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET(r2, &(0x7f0000000640)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000600)={&(0x7f0000000480)={0x10, 0x3e8, 0x100, 0x70bd26, 0x25dfdbfc, "", ["", "", ""]}, 0x10}}, 0x880) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'lo\x00'}) r4 = socket(0x10, 0x3, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r6, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r6, 0x84, 0x7a, &(0x7f0000000340)={r7, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r5, &(0x7f0000000080)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="20000000000000008400000002001000000041020000000000000000bab5ff22cf91ab74989825b9de0f594716bb23943f148cc267a66ef86d19066110c0ae7bb987620730c0933c03f26bcad409847b03c957d1ef48225e859af606461f68ba26e5be44a50346235f2fd8b1608326d5553d88031ba44940de", @ANYRES32=0x0], 0x20}], 0x1, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000040)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x4e24, @multicast2}}}, 0x108) 0s ago: executing program 1 (id=6528): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000020000000400000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000020000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={r2, 0xe0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000400)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x31, 0x8, 0x0, 0x0}}, 0x10) kernel console output (not intermixed with test programs): [T18892] ? futex_wait_multiple+0x970/0x970 [ 1391.116406][T18892] futex_wait+0x1bf/0x5e0 [ 1391.120737][T18892] ? futex_wait_setup+0x270/0x270 [ 1391.125760][T18892] ? mtree_range_walk+0x674/0x7c0 [ 1391.130811][T18892] ? userfaultfd_unmap_prep+0x3d0/0x3d0 [ 1391.136377][T18892] ? mas_find_setup+0x493/0x590 [ 1391.141224][T18892] do_futex+0x2ff/0x3e0 [ 1391.145383][T18892] ? __ia32_sys_get_robust_list+0x110/0x110 [ 1391.151284][T18892] __se_sys_futex+0x3a9/0x440 [ 1391.155960][T18892] ? __x64_sys_futex+0xf0/0xf0 [ 1391.160723][T18892] ? __x64_sys_futex+0x21/0xf0 [ 1391.165486][T18892] do_syscall_64+0x55/0xa0 [ 1391.169904][T18892] ? clear_bhb_loop+0x40/0x90 [ 1391.174721][T18892] ? clear_bhb_loop+0x40/0x90 [ 1391.179394][T18892] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1391.185286][T18892] RIP: 0033:0x7ff8bf19c799 [ 1391.189704][T18892] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1391.209308][T18892] RSP: 002b:00007ff8bffd2028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1391.217718][T18892] RAX: ffffffffffffffda RBX: 00007ff8bf415fa0 RCX: 00007ff8bf19c799 [ 1391.225682][T18892] RDX: 0000000001000000 RSI: 0000000000000009 RDI: 0000200000004000 [ 1391.233646][T18892] RBP: 00007ff8bf232c99 R08: 0000000000000000 R09: 0000000000000001 [ 1391.241614][T18892] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1391.249576][T18892] R13: 00007ff8bf416038 R14: 00007ff8bf415fa0 R15: 00007ffd40f9fed8 [ 1391.257553][T18892] [ 1391.535429][ T28] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 1391.678923][T14330] asix 2-1:2.88 (unnamed net_device) (uninitialized): invalid hw address, using random [ 1391.725400][ T28] usb 1-1: Using ep0 maxpacket: 16 [ 1391.739210][ T28] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1391.755688][ T28] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1391.771144][ T28] usb 1-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 1391.780650][ T28] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1391.798643][ T28] usb 1-1: config 0 descriptor?? [ 1391.818950][ T28] usbhid 1-1:0.0: can't add hid device: -22 [ 1391.825052][ T28] usbhid: probe of 1-1:0.0 failed with error -22 [ 1391.896722][T14330] asix 2-1:2.88 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 1391.907365][T14330] asix 2-1:2.88 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 1391.918360][T14330] asix: probe of 2-1:2.88 failed with error -71 [ 1391.929060][T14330] usb 2-1: USB disconnect, device number 16 [ 1392.015345][ T28] usb 1-1: USB disconnect, device number 25 [ 1392.515816][T17553] Bluetooth: hci4: command 0x0c1a tx timeout [ 1392.516116][ T5775] Bluetooth: hci2: command 0x0c1a tx timeout [ 1392.586510][ T28] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 1392.595664][ T5775] Bluetooth: hci0: command 0x0c1a tx timeout [ 1392.775380][ T787] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 1392.792949][ T28] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1392.824268][ T28] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1392.853880][ T28] usb 5-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 1392.875550][ T28] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1392.891850][ T28] usb 5-1: config 0 descriptor?? [ 1393.005271][ T787] usb 2-1: Using ep0 maxpacket: 16 [ 1393.012903][ T787] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1393.029569][ T787] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1393.039594][ T787] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1393.058161][ T787] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1393.067705][ T787] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1393.089319][ T787] usb 2-1: config 0 descriptor?? [ 1393.340291][ T28] usbhid 5-1:0.0: can't add hid device: -71 [ 1393.359123][ T28] usbhid: probe of 5-1:0.0 failed with error -71 [ 1393.383534][ T28] usb 5-1: USB disconnect, device number 8 [ 1393.512605][ T787] microsoft 0003:045E:07DA.0009: invalid report_count 15705 [ 1393.523550][ T787] microsoft 0003:045E:07DA.0009: item 0 2 1 9 parsing failed [ 1393.544465][ T787] microsoft 0003:045E:07DA.0009: parse failed [ 1393.552072][ T787] microsoft: probe of 0003:045E:07DA.0009 failed with error -22 [ 1393.737852][ T787] usb 2-1: USB disconnect, device number 17 [ 1394.285619][ T28] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 1394.420513][T18942] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 4080 [ 1394.478942][ T28] usb 5-1: Using ep0 maxpacket: 32 [ 1394.488895][ T28] usb 5-1: config 0 has an invalid interface number: 188 but max is 0 [ 1394.502264][ T28] usb 5-1: config 0 has no interface number 0 [ 1394.509906][ T28] usb 5-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 1394.528873][ T28] usb 5-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 1394.540832][ T28] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1394.555413][ T28] usb 5-1: Product: syz [ 1394.559594][ T28] usb 5-1: Manufacturer: syz [ 1394.564203][ T28] usb 5-1: SerialNumber: syz [ 1394.570695][ T28] usb 5-1: config 0 descriptor?? [ 1394.596388][T18929] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1394.755780][ T5770] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 1394.835767][T18929] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1394.957889][ T5770] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1394.973946][ T5770] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1394.984799][ T5770] usb 1-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 1394.998050][ T5770] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1395.015014][ T5770] usb 1-1: config 0 descriptor?? [ 1395.441399][ T5770] playstation 0003:054C:0DF2.000A: unknown main item tag 0x0 [ 1395.449122][ T5770] playstation 0003:054C:0DF2.000A: unknown main item tag 0x0 [ 1395.460313][ T5770] playstation 0003:054C:0DF2.000A: unknown main item tag 0x0 [ 1395.468469][ T5770] playstation 0003:054C:0DF2.000A: unknown main item tag 0x0 [ 1395.476316][ T5770] playstation 0003:054C:0DF2.000A: unknown main item tag 0x0 [ 1395.488443][ T5770] playstation 0003:054C:0DF2.000A: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.0-1/input0 [ 1395.535286][ T5840] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 1395.745484][ T5840] usb 2-1: Using ep0 maxpacket: 16 [ 1395.757222][ T5840] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7 [ 1395.772624][ T5840] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1395.781825][ T5840] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1395.790470][ T5840] usb 2-1: Product: syz [ 1395.794668][ T5840] usb 2-1: Manufacturer: syz [ 1395.799336][ T5840] usb 2-1: SerialNumber: syz [ 1396.028696][ T5840] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 1396.036079][ T5840] usb 2-1: 2:1 : format type 0 is detected, processed as PCM [ 1396.045127][ T5770] playstation 0003:054C:0DF2.000A: Failed to retrieve feature with reportID 5: -71 [ 1396.055100][ T5770] playstation 0003:054C:0DF2.000A: Failed to retrieve DualSense calibration info: -71 [ 1396.065635][ T5770] playstation 0003:054C:0DF2.000A: Failed to get calibration data from DualSense [ 1396.076978][ T5770] playstation 0003:054C:0DF2.000A: Failed to create dualsense. [ 1396.091339][ T5770] playstation: probe of 0003:054C:0DF2.000A failed with error -71 [ 1396.115500][ T5770] usb 1-1: USB disconnect, device number 26 [ 1396.134903][ T5840] usb 2-1: USB disconnect, device number 18 [ 1396.256954][T18967] udevd[18967]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1396.481255][ T28] asix 5-1:0.188 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 1396.491542][ T28] asix 5-1:0.188 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 1396.502525][ T28] asix: probe of 5-1:0.188 failed with error -71 [ 1396.514101][ T28] usb 5-1: USB disconnect, device number 9 [ 1396.885391][T14330] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 1397.086838][T14330] usb 2-1: Using ep0 maxpacket: 16 [ 1397.116625][T14330] usb 2-1: config 0 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1397.159995][T14330] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1397.185278][T14330] usb 2-1: New USB device found, idVendor=28bd, idProduct=0074, bcdDevice= 0.00 [ 1397.194364][T14330] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1397.222012][T14330] usb 2-1: config 0 descriptor?? [ 1397.420512][T18988] binder: BINDER_SET_CONTEXT_MGR bad uid 0 != 60929 [ 1397.428792][T18988] binder: 18987:18988 ioctl 4018620d 200000000140 returned -1 [ 1397.661878][T14330] uclogic 0003:28BD:0074.000B: interface is invalid, ignoring [ 1397.876826][ T28] usb 2-1: USB disconnect, device number 19 [ 1398.255269][T19004] netlink: 96 bytes leftover after parsing attributes in process `syz.4.3657'. [ 1398.735365][ T28] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 1398.915297][ T28] usb 5-1: Using ep0 maxpacket: 16 [ 1398.922038][ T28] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1398.954532][ T28] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1398.967705][ T28] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1398.981905][ T28] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1398.992331][ T28] usb 5-1: config 0 descriptor?? [ 1399.345429][T17805] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 1399.415697][ T28] microsoft 0003:045E:07DA.000C: unknown main item tag 0x0 [ 1399.423880][ T28] microsoft 0003:045E:07DA.000C: unknown main item tag 0x0 [ 1399.431622][ T28] microsoft 0003:045E:07DA.000C: unknown main item tag 0x0 [ 1399.439342][ T28] microsoft 0003:045E:07DA.000C: unknown main item tag 0x0 [ 1399.446999][ T28] microsoft 0003:045E:07DA.000C: unknown main item tag 0x0 [ 1399.454234][ T28] microsoft 0003:045E:07DA.000C: unknown main item tag 0x0 [ 1399.483804][ T28] microsoft 0003:045E:07DA.000C: unknown main item tag 0x0 [ 1399.492949][ T28] microsoft 0003:045E:07DA.000C: unknown main item tag 0x0 [ 1399.500763][ T28] microsoft 0003:045E:07DA.000C: unknown main item tag 0x0 [ 1399.508411][ T28] microsoft 0003:045E:07DA.000C: unknown main item tag 0x0 [ 1399.526168][ T28] input: HID 045e:07da as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:045E:07DA.000C/input/input17 [ 1399.545261][T17805] usb 1-1: Using ep0 maxpacket: 8 [ 1399.563982][T17805] usb 1-1: config 0 interface 0 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 12 [ 1399.581690][T17805] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1399.588667][T17805] usb 1-1: New USB device found, idVendor=17ef, idProduct=60b5, bcdDevice= 0.00 [ 1399.599976][T17805] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1399.628269][T17805] usb 1-1: config 0 descriptor?? [ 1399.677162][ T28] microsoft 0003:045E:07DA.000C: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 1399.730329][ T28] usb 5-1: USB disconnect, device number 10 [ 1399.802697][T19025] fido_id[19025]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory [ 1400.060740][T17805] lenovo 0003:17EF:60B5.000D: unknown main item tag 0x0 [ 1400.068756][T17805] lenovo 0003:17EF:60B5.000D: unknown main item tag 0x0 [ 1400.076174][T17805] lenovo 0003:17EF:60B5.000D: unknown main item tag 0x0 [ 1400.083136][T17805] lenovo 0003:17EF:60B5.000D: unknown main item tag 0x0 [ 1400.090206][T17805] lenovo 0003:17EF:60B5.000D: unknown main item tag 0x0 [ 1400.097304][T17805] lenovo 0003:17EF:60B5.000D: unknown main item tag 0x0 [ 1400.104327][T17805] lenovo 0003:17EF:60B5.000D: unknown main item tag 0x4 [ 1400.111346][T17805] lenovo 0003:17EF:60B5.000D: unknown main item tag 0x6 [ 1400.121061][T17805] lenovo 0003:17EF:60B5.000D: unknown main item tag 0xd [ 1400.128410][T17805] lenovo 0003:17EF:60B5.000D: unknown main item tag 0xd [ 1400.140806][T17805] lenovo 0003:17EF:60B5.000D: hidraw0: USB HID v0.0b Device [HID 17ef:60b5] on usb-dummy_hcd.0-1/input0 [ 1400.225397][T17571] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 1400.311984][T17805] usb 1-1: USB disconnect, device number 27 [ 1400.415279][T17571] usb 2-1: Using ep0 maxpacket: 32 [ 1400.428003][T17571] usb 2-1: config 0 has an invalid interface number: 196 but max is 0 [ 1400.437160][T17571] usb 2-1: config 0 has no interface number 0 [ 1400.443876][T17571] usb 2-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 1400.458394][T17571] usb 2-1: config 0 interface 196 has no altsetting 0 [ 1400.468032][T17571] usb 2-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 1400.479569][T17571] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1400.488382][T17571] usb 2-1: Product: syz [ 1400.492530][T17571] usb 2-1: Manufacturer: syz [ 1400.500014][T17571] usb 2-1: SerialNumber: syz [ 1400.506625][T17571] usb 2-1: config 0 descriptor?? [ 1400.512186][T19027] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1400.705313][ T28] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 1400.898299][ T28] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1400.909378][ T28] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1400.919639][ T28] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 1400.929399][ T28] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1400.956018][ T28] usb 5-1: config 0 descriptor?? [ 1401.331897][T17571] ipheth 2-1:0.196: ipheth_enable_ncm: usb_control_msg: 0 [ 1401.371970][ T28] pyra 0003:1E7D:2CF6.000E: unknown main item tag 0x0 [ 1401.379321][T17571] ipheth 2-1:0.196: Apple iPhone USB Ethernet device attached [ 1401.393229][ T28] pyra 0003:1E7D:2CF6.000E: unknown main item tag 0x0 [ 1401.418679][ T28] pyra 0003:1E7D:2CF6.000E: unknown main item tag 0x0 [ 1401.429965][ T28] pyra 0003:1E7D:2CF6.000E: unknown main item tag 0x0 [ 1401.443048][ T28] pyra 0003:1E7D:2CF6.000E: unknown main item tag 0x0 [ 1401.452709][ T28] pyra 0003:1E7D:2CF6.000E: unknown main item tag 0x0 [ 1401.472769][ T28] pyra 0003:1E7D:2CF6.000E: item fetching failed at offset 6/7 [ 1401.490021][ T28] pyra 0003:1E7D:2CF6.000E: parse failed [ 1401.515454][ T28] pyra: probe of 0003:1E7D:2CF6.000E failed with error -22 [ 1401.573982][T17571] usb 2-1: USB disconnect, device number 20 [ 1401.586695][T14330] usb 5-1: USB disconnect, device number 11 [ 1401.723170][T17571] ipheth 2-1:0.196: Apple iPhone USB Ethernet now disconnected [ 1402.584740][T19089] x_tables: duplicate entry at hook 2 [ 1403.196097][T17571] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 1403.270944][T19117] geneve1: entered promiscuous mode [ 1403.287667][T19117] macsec1: entered promiscuous mode [ 1403.299389][T19117] macsec1: entered allmulticast mode [ 1403.314268][T19117] geneve1: entered allmulticast mode [ 1403.341890][T19117] geneve1: left allmulticast mode [ 1403.349700][T19117] geneve1: left promiscuous mode [ 1403.445870][T17571] usb 1-1: Using ep0 maxpacket: 8 [ 1403.462922][T17571] usb 1-1: config 0 interface 0 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 12 [ 1403.486504][T17571] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1403.493155][T17571] usb 1-1: New USB device found, idVendor=17ef, idProduct=60b5, bcdDevice= 0.00 [ 1403.524563][T17571] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1403.555388][T17571] usb 1-1: config 0 descriptor?? [ 1403.980906][T17571] lenovo 0003:17EF:60B5.000F: unknown main item tag 0x0 [ 1403.998958][T17571] lenovo 0003:17EF:60B5.000F: unknown main item tag 0x0 [ 1404.022025][T17571] lenovo 0003:17EF:60B5.000F: unknown main item tag 0x0 [ 1404.041573][T17571] lenovo 0003:17EF:60B5.000F: unknown main item tag 0x0 [ 1404.053343][T17571] lenovo 0003:17EF:60B5.000F: unknown main item tag 0x0 [ 1404.065375][T17571] lenovo 0003:17EF:60B5.000F: unknown main item tag 0x0 [ 1404.074906][T17571] lenovo 0003:17EF:60B5.000F: unknown main item tag 0x0 [ 1404.090412][T17571] lenovo 0003:17EF:60B5.000F: unknown main item tag 0x0 [ 1404.099010][T17571] lenovo 0003:17EF:60B5.000F: unknown main item tag 0x0 [ 1404.110376][T17571] lenovo 0003:17EF:60B5.000F: unknown main item tag 0x0 [ 1404.122679][T17571] lenovo 0003:17EF:60B5.000F: unknown main item tag 0x0 [ 1404.135596][T17571] lenovo 0003:17EF:60B5.000F: unknown main item tag 0x0 [ 1404.144050][T17571] lenovo 0003:17EF:60B5.000F: unknown main item tag 0x0 [ 1404.154444][T17571] lenovo 0003:17EF:60B5.000F: unknown main item tag 0x0 [ 1404.172363][T17571] lenovo 0003:17EF:60B5.000F: unknown main item tag 0x0 [ 1404.183423][T17571] lenovo 0003:17EF:60B5.000F: unknown main item tag 0x0 [ 1404.200606][T17571] lenovo 0003:17EF:60B5.000F: unknown main item tag 0x0 [ 1404.211347][T17571] lenovo 0003:17EF:60B5.000F: unknown main item tag 0x0 [ 1404.225024][T17571] lenovo 0003:17EF:60B5.000F: unknown main item tag 0x0 [ 1404.235129][T17571] lenovo 0003:17EF:60B5.000F: unknown main item tag 0x0 [ 1404.248249][T17571] lenovo 0003:17EF:60B5.000F: unknown main item tag 0x0 [ 1404.280793][T17571] lenovo 0003:17EF:60B5.000F: unknown main item tag 0x0 [ 1404.289400][T17571] lenovo 0003:17EF:60B5.000F: unknown main item tag 0x0 [ 1404.301751][T17571] lenovo 0003:17EF:60B5.000F: unknown main item tag 0x0 [ 1404.320364][T17571] lenovo 0003:17EF:60B5.000F: unknown main item tag 0x0 [ 1404.337896][T17571] lenovo 0003:17EF:60B5.000F: unknown main item tag 0x0 [ 1404.355341][T17571] lenovo 0003:17EF:60B5.000F: unknown main item tag 0x0 [ 1404.365368][T17571] lenovo 0003:17EF:60B5.000F: unknown main item tag 0x0 [ 1404.379999][T17571] lenovo 0003:17EF:60B5.000F: unknown main item tag 0x0 [ 1404.390946][T17571] lenovo 0003:17EF:60B5.000F: unknown main item tag 0x0 [ 1404.399270][T17571] lenovo 0003:17EF:60B5.000F: unknown main item tag 0x0 [ 1404.411607][T17571] lenovo 0003:17EF:60B5.000F: unknown main item tag 0x0 [ 1404.421318][T17571] lenovo 0003:17EF:60B5.000F: unknown main item tag 0x0 [ 1404.434458][T17571] lenovo 0003:17EF:60B5.000F: unknown main item tag 0x0 [ 1404.456966][T17571] lenovo 0003:17EF:60B5.000F: unknown main item tag 0x0 [ 1404.464035][T17571] lenovo 0003:17EF:60B5.000F: unknown main item tag 0x0 [ 1404.478489][T17571] lenovo 0003:17EF:60B5.000F: unknown main item tag 0x0 [ 1404.483809][T19136] lo speed is unknown, defaulting to 1000 [ 1404.487887][T17571] lenovo 0003:17EF:60B5.000F: unknown main item tag 0x0 [ 1404.515089][T17571] lenovo 0003:17EF:60B5.000F: hidraw0: USB HID v0.0b Device [HID 17ef:60b5] on usb-dummy_hcd.0-1/input0 [ 1404.540504][T17571] usb 1-1: USB disconnect, device number 28 [ 1404.657286][T19140] fido_id[19140]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 1404.740032][T19142] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3704'. [ 1408.065535][ T5840] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 1408.265739][ T5840] usb 1-1: Using ep0 maxpacket: 16 [ 1408.273269][ T5840] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1408.307411][ T5840] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 96 [ 1408.324263][ T5840] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 8 [ 1408.351112][ T5840] usb 1-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 1408.379965][ T5840] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1408.394889][ T5840] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1408.403716][ T5840] usb 1-1: SerialNumber: syz [ 1408.416957][T19160] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1408.424599][T19160] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1408.436717][ T5840] hub 1-1:1.0: bad descriptor, ignoring hub [ 1408.442717][ T5840] hub: probe of 1-1:1.0 failed with error -5 [ 1408.650409][T19160] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1408.658247][T19160] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1409.113470][ T5840] cdc_ether 1-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.0-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 1410.037899][ C0] cdc_ether 1-1:1.0 usb0: CDC: unexpected notification 68! [ 1410.046600][ C0] cdc_ether 1-1:1.0 usb0: CDC: unexpected notification 63! [ 1410.281502][T17571] usb 1-1: USB disconnect, device number 29 [ 1410.303620][T17571] cdc_ether 1-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.0-1, CDC Ethernet Device [ 1412.696456][T19295] Cannot find del_set index 4 as target [ 1412.788005][T19298] syzkaller0: entered promiscuous mode [ 1412.805428][T19298] syzkaller0: entered allmulticast mode [ 1415.841709][T19303] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1416.275880][T17571] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 1416.332810][T19344] syzkaller0: entered promiscuous mode [ 1416.338802][T19344] syzkaller0: entered allmulticast mode [ 1416.477963][T17571] usb 2-1: Using ep0 maxpacket: 16 [ 1416.497295][T17571] usb 2-1: config 0 has an invalid interface number: 251 but max is 0 [ 1416.506597][T17571] usb 2-1: config 0 has no interface number 0 [ 1416.512856][T17571] usb 2-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 1416.524247][T17571] usb 2-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 1416.564477][T17571] usb 2-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 1416.576548][T17571] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1416.584564][T17571] usb 2-1: Product: syz [ 1416.605280][T17571] usb 2-1: Manufacturer: syz [ 1416.609915][T17571] usb 2-1: SerialNumber: syz [ 1416.623682][T17571] usb 2-1: config 0 descriptor?? [ 1416.630523][T19335] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1416.637922][T19335] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1416.865986][T19335] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1416.873249][T19335] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1417.287755][T17571] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 1417.315239][T17571] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to read software interface selection register: -71 [ 1417.329580][T17571] asix: probe of 2-1:0.251 failed with error -71 [ 1417.351994][T17571] usb 2-1: USB disconnect, device number 21 [ 1417.396299][T19364] xt_bpf: check failed: parse error [ 1417.475936][T19366] syzkaller0: entered promiscuous mode [ 1417.481466][T19366] syzkaller0: entered allmulticast mode [ 1419.050130][T19388] syzkaller0: entered promiscuous mode [ 1419.055985][T19388] syzkaller0: entered allmulticast mode [ 1419.775705][T19358] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1421.091022][T19421] netlink: 1 bytes leftover after parsing attributes in process `syz.0.3784'. [ 1421.291476][T19425] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3787'. [ 1423.158266][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 1423.164742][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 1424.614309][T19438] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1424.777825][T17805] IPVS: starting estimator thread 0... [ 1424.905675][T19493] IPVS: using max 23 ests per chain, 55200 per kthread [ 1425.163123][T19508] tipc: Started in network mode [ 1425.168857][T19508] tipc: Node identity da62d761dcfc, cluster identity 4711 [ 1425.176256][T19508] tipc: Enabled bearer , priority 0 [ 1425.184114][T19508] syzkaller0: entered promiscuous mode [ 1425.190636][T19508] syzkaller0: entered allmulticast mode [ 1425.255024][T19508] tipc: Resetting bearer [ 1425.272945][T19507] tipc: Resetting bearer [ 1425.309158][T19507] tipc: Disabling bearer [ 1428.230792][T19511] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1428.648679][T19532] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3829'. [ 1428.661274][T19532] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3829'. [ 1431.081806][T19616] lo speed is unknown, defaulting to 1000 [ 1431.851518][T19549] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1432.363958][T19640] tipc: Started in network mode [ 1432.368985][T19640] tipc: Node identity 1e5e6b759932, cluster identity 4711 [ 1432.378124][T19640] tipc: Enabled bearer , priority 0 [ 1432.386303][T19640] syzkaller0: entered promiscuous mode [ 1432.392734][T19640] syzkaller0: entered allmulticast mode [ 1432.481766][T19645] tipc: Resetting bearer [ 1432.520869][T19639] tipc: Resetting bearer [ 1432.616878][T19639] tipc: Disabling bearer [ 1432.661980][T19656] siw: device registration error -23 [ 1432.766627][T19659] syzkaller0: entered promiscuous mode [ 1432.772430][T19659] syzkaller0: entered allmulticast mode [ 1433.049977][T19672] netlink: 'syz.0.3889': attribute type 29 has an invalid length. [ 1433.059746][T19672] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3889'. [ 1433.069507][T19672] netlink: 'syz.0.3889': attribute type 29 has an invalid length. [ 1433.079905][T19672] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3889'. [ 1433.091343][T19672] netlink: 'syz.0.3889': attribute type 29 has an invalid length. [ 1433.100252][T19672] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3889'. [ 1433.201781][T19677] netlink: 'syz.0.3891': attribute type 21 has an invalid length. [ 1433.212973][T19677] netlink: 168 bytes leftover after parsing attributes in process `syz.0.3891'. [ 1433.573263][T19691] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3896'. [ 1433.599537][T19691] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1434.279125][T19695] syzkaller0: entered promiscuous mode [ 1434.284653][T19695] syzkaller0: entered allmulticast mode [ 1434.694404][T19711] lo speed is unknown, defaulting to 1000 [ 1436.218300][T19723] xt_CONNSECMARK: invalid mode: 129 [ 1437.310603][T19698] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1437.570917][T19741] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3914'. [ 1438.073582][T19759] Bluetooth: MGMT ver 1.22 [ 1439.514510][T19803] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1439.615598][T19803] bond1: (slave ip6gretap1): making interface the new active one [ 1439.624910][T19803] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 1439.889621][T19824] lo speed is unknown, defaulting to 1000 [ 1440.602032][T19850] netlink: 'syz.1.3943': attribute type 13 has an invalid length. [ 1440.803706][T19853] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3943'. [ 1444.213826][T19896] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3952'. [ 1444.230261][T19896] bridge: RTM_NEWNEIGH with invalid ether address [ 1444.255257][T19896] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3952'. [ 1444.264238][T19896] bridge: RTM_NEWNEIGH with invalid ether address [ 1444.527745][T19911] syzkaller0: entered promiscuous mode [ 1444.533263][T19911] syzkaller0: entered allmulticast mode [ 1444.614552][T19914] netlink: 'syz.0.3957': attribute type 30 has an invalid length. [ 1444.623561][T19914] (unnamed net_device) (uninitialized): option arp_missed_max: invalid value (0) [ 1444.634375][T19914] (unnamed net_device) (uninitialized): option arp_missed_max: allowed values 1 - 255 [ 1446.061815][ C1] vxcan1: j1939_tp_rxtimer: 0xffff888025454000: rx timeout, send abort [ 1446.073613][ C1] vxcan1: j1939_xtp_rx_abort_one: 0xffff888025454000: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 1446.257237][T19953] syzkaller0: entered promiscuous mode [ 1446.262847][T19953] syzkaller0: entered allmulticast mode [ 1447.038961][T19979] syzkaller0: entered promiscuous mode [ 1447.044484][T19979] syzkaller0: entered allmulticast mode [ 1448.666965][T19935] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1449.459051][T20029] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1449.478031][T20065] tipc: Started in network mode [ 1449.487896][T20065] tipc: Node identity 4a314cf9717, cluster identity 4711 [ 1449.516430][T20065] tipc: Enabled bearer , priority 0 [ 1449.545814][T20066] syzkaller0: entered promiscuous mode [ 1449.551330][T20066] syzkaller0: entered allmulticast mode [ 1449.610296][T20065] tipc: Resetting bearer [ 1449.631828][T20064] tipc: Resetting bearer [ 1449.690354][T20064] tipc: Disabling bearer [ 1450.410582][T20098] lo speed is unknown, defaulting to 1000 [ 1450.756900][T20110] syzkaller0: entered promiscuous mode [ 1450.773671][T20110] syzkaller0: entered allmulticast mode [ 1454.937940][T20194] bridge1: entered promiscuous mode [ 1454.943201][T20194] bridge1: entered allmulticast mode [ 1455.075416][ T5775] Bluetooth: hci0: command 0x0c1a tx timeout [ 1455.604987][T20217] syzkaller0: entered promiscuous mode [ 1455.611054][T20217] syzkaller0: entered allmulticast mode [ 1456.340043][T20240] syzkaller0: entered promiscuous mode [ 1456.348834][T20240] syzkaller0: entered allmulticast mode [ 1456.947162][T20252] syzkaller0: entered promiscuous mode [ 1456.952662][T20252] syzkaller0: entered allmulticast mode [ 1458.456623][T20209] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1462.011424][T20276] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1462.719160][T20317] tipc: Enabling of bearer rejected, failed to enable media [ 1462.802614][T20324] syzkaller0: entered promiscuous mode [ 1462.808319][T20324] syzkaller0: entered allmulticast mode [ 1465.681226][T20319] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1467.469951][T20438] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4154'. [ 1468.132633][T20462] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4165'. [ 1468.768634][T20492] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4176'. [ 1468.936496][T20496] syzkaller0: entered promiscuous mode [ 1468.944460][T20496] syzkaller0: entered allmulticast mode [ 1468.996578][T20503] lo speed is unknown, defaulting to 1000 [ 1469.414006][T20516] syzkaller0: entered promiscuous mode [ 1469.419877][T20516] syzkaller0: entered allmulticast mode [ 1470.029537][T20524] syzkaller0: entered promiscuous mode [ 1470.035056][T20524] syzkaller0: entered allmulticast mode [ 1471.891402][T20498] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1472.085673][T20537] syzkaller0: entered promiscuous mode [ 1472.091489][T20537] syzkaller0: entered allmulticast mode [ 1472.401911][T20549] syzkaller0: entered promiscuous mode [ 1472.407927][T20549] syzkaller0: entered allmulticast mode [ 1472.886596][T20570] syzkaller0: entered promiscuous mode [ 1472.892117][T20570] syzkaller0: entered allmulticast mode [ 1473.101286][T20578] syzkaller0: entered promiscuous mode [ 1473.109084][T20578] syzkaller0: entered allmulticast mode [ 1473.305109][T20585] lo speed is unknown, defaulting to 1000 [ 1475.459089][T20673] syzkaller0: entered promiscuous mode [ 1475.473264][T20673] syzkaller0: entered allmulticast mode [ 1476.217368][T20707] syzkaller0: entered promiscuous mode [ 1476.224784][T20707] syzkaller0: entered allmulticast mode [ 1478.193411][T20808] syzkaller0: entered promiscuous mode [ 1478.209245][T20808] syzkaller0: entered allmulticast mode [ 1478.814761][T20830] syzkaller0: entered promiscuous mode [ 1478.820461][T20830] syzkaller0: entered allmulticast mode [ 1478.886091][T20832] syzkaller0: entered promiscuous mode [ 1478.891597][T20832] syzkaller0: entered allmulticast mode [ 1479.684729][T20859] syzkaller0: entered promiscuous mode [ 1479.690665][T20859] syzkaller0: entered allmulticast mode [ 1480.628924][T20884] syzkaller0: entered promiscuous mode [ 1480.649889][T20884] syzkaller0: entered allmulticast mode [ 1481.615501][T20900] syzkaller0: entered promiscuous mode [ 1481.621016][T20900] syzkaller0: entered allmulticast mode [ 1482.353201][T20928] syzkaller0: entered promiscuous mode [ 1482.358914][T20928] syzkaller0: entered allmulticast mode [ 1482.685062][T20939] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4351'. [ 1482.698865][T20939] bridge0: port 2(bridge_slave_1) entered disabled state [ 1482.706510][T20939] bridge0: port 1(bridge_slave_0) entered disabled state [ 1483.182006][T20953] syzkaller0: entered promiscuous mode [ 1483.187780][T20953] syzkaller0: entered allmulticast mode [ 1484.044114][T20978] syzkaller0: entered promiscuous mode [ 1484.049886][T20978] syzkaller0: entered allmulticast mode [ 1484.602406][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 1484.615421][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 1484.793757][T21004] syzkaller0: entered promiscuous mode [ 1484.800524][T21004] syzkaller0: entered allmulticast mode [ 1488.121992][T21030] syzkaller0: entered promiscuous mode [ 1488.134856][T21030] syzkaller0: entered allmulticast mode [ 1489.330775][T21069] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4401'. [ 1492.291064][T21086] syzkaller0: entered promiscuous mode [ 1492.296860][T21086] syzkaller0: entered allmulticast mode [ 1492.554361][T21097] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4410'. [ 1492.703764][T21102] syzkaller0: entered promiscuous mode [ 1492.714612][T21102] syzkaller0: entered allmulticast mode [ 1492.776583][T21105] lo: Caught tx_queue_len zero misconfig [ 1496.469397][T21134] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4420'. [ 1505.683953][T21276] syzkaller0: entered promiscuous mode [ 1505.697605][T21276] syzkaller0: entered allmulticast mode [ 1506.772221][T21315] syzkaller0: entered promiscuous mode [ 1506.779959][T21315] syzkaller0: entered allmulticast mode [ 1507.925418][T21345] syzkaller0: entered promiscuous mode [ 1507.931020][T21345] syzkaller0: entered allmulticast mode [ 1508.802873][T21381] syzkaller0: entered promiscuous mode [ 1508.810239][T21381] syzkaller0: entered allmulticast mode [ 1512.146772][T21406] syzkaller0: entered promiscuous mode [ 1512.154796][T21406] syzkaller0: entered allmulticast mode [ 1515.596557][T21435] syzkaller0: entered promiscuous mode [ 1515.602064][T21435] syzkaller0: entered allmulticast mode [ 1515.773712][T21437] syzkaller0: entered promiscuous mode [ 1515.780805][T21437] syzkaller0: entered allmulticast mode [ 1518.893859][T21467] geneve2: entered promiscuous mode [ 1519.398570][T21489] syzkaller0: entered promiscuous mode [ 1519.404128][T21489] syzkaller0: entered allmulticast mode [ 1522.179522][T21491] syzkaller0: entered promiscuous mode [ 1522.185016][T21491] syzkaller0: entered allmulticast mode [ 1525.591274][T21527] syzkaller0: entered promiscuous mode [ 1525.596818][T21527] syzkaller0: entered allmulticast mode [ 1528.727921][T21551] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4553'. [ 1528.901971][T21559] syzkaller0: entered promiscuous mode [ 1528.907700][T21559] syzkaller0: entered allmulticast mode [ 1529.137766][T21566] syzkaller0: entered promiscuous mode [ 1529.143292][T21566] syzkaller0: entered allmulticast mode [ 1529.165842][T21570] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4559'. [ 1532.477490][T21600] netlink: 124 bytes leftover after parsing attributes in process `syz.1.4568'. [ 1532.790142][T21606] syzkaller0: entered promiscuous mode [ 1532.798231][T21606] syzkaller0: entered allmulticast mode [ 1533.121281][T21610] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4575'. [ 1533.621017][T21626] syzkaller0: entered promiscuous mode [ 1533.630597][T21626] syzkaller0: entered allmulticast mode [ 1534.442935][ T5775] Bluetooth: hci0: command 0x0c1a tx timeout [ 1535.729001][T21714] syzkaller0: entered promiscuous mode [ 1535.734512][T21714] syzkaller0: entered allmulticast mode [ 1537.829465][T21785] Cannot find add_set index 0 as target [ 1538.089090][T21800] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 1539.322852][T21857] tipc: Enabled bearer , priority 0 [ 1539.361251][T21857] tipc: Resetting bearer [ 1539.434173][T21855] tipc: Disabling bearer [ 1540.001753][T21892] tipc: Enabled bearer , priority 0 [ 1540.028104][T21892] tipc: Resetting bearer [ 1540.039570][T21894] netlink: 'syz.4.4691': attribute type 1 has an invalid length. [ 1540.101110][T21890] tipc: Disabling bearer [ 1540.636956][T21920] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4704'. [ 1540.683772][T21922] tipc: Enabled bearer , priority 0 [ 1540.695050][T21922] tipc: Resetting bearer [ 1540.736087][T21921] tipc: Disabling bearer [ 1540.998184][T21933] syzkaller0: entered promiscuous mode [ 1541.009950][T21933] syzkaller0: entered allmulticast mode [ 1541.271227][T21944] tipc: Enabled bearer , priority 0 [ 1541.282973][T21944] tipc: Resetting bearer [ 1541.306048][T21943] tipc: Disabling bearer [ 1541.449052][T21950] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4719'. [ 1541.690688][T21956] syzkaller0: entered promiscuous mode [ 1541.696518][T21956] syzkaller0: entered allmulticast mode [ 1542.000061][T21973] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4729'. [ 1542.350890][T21973] bridge0: port 2(bridge_slave_1) entered disabled state [ 1542.355700][T21979] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4732'. [ 1542.358660][T21973] bridge0: port 1(bridge_slave_0) entered disabled state [ 1542.790174][T21973] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1542.832286][T21973] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1543.105226][T21973] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1543.114139][T21973] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1543.124416][T21973] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1543.133488][T21973] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1543.454141][T21997] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4741'. [ 1546.039532][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 1546.045968][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 1556.201113][ T5840] IPVS: starting estimator thread 0... [ 1556.305571][T22224] IPVS: using max 21 ests per chain, 50400 per kthread [ 1570.266768][T22399] syzkaller0: entered promiscuous mode [ 1570.272409][T22399] syzkaller0: entered allmulticast mode [ 1572.128816][ T5775] Bluetooth: hci2: command 0x0c1a tx timeout [ 1573.687017][T22437] syzkaller0: entered promiscuous mode [ 1573.704779][T22437] syzkaller0: entered allmulticast mode [ 1575.965732][T17553] Bluetooth: hci0: command 0x0c1a tx timeout [ 1577.236246][T22479] syzkaller0: entered promiscuous mode [ 1577.242088][T22479] syzkaller0: entered allmulticast mode [ 1577.301048][T22481] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4924'. [ 1577.466082][T22492] netlink: 'syz.1.4930': attribute type 10 has an invalid length. [ 1577.483063][T22492] ªªªªªª: left promiscuous mode [ 1577.510717][T22492] ªªªªªª: entered promiscuous mode [ 1577.521406][T22492] team0: Device ªªªªªª failed to register rx_handler [ 1581.643955][T22572] syzkaller0: entered promiscuous mode [ 1581.649720][T22572] syzkaller0: entered allmulticast mode [ 1582.770038][T22600] netlink: 68 bytes leftover after parsing attributes in process `syz.1.4959'. [ 1583.103248][T22611] syzkaller0: entered promiscuous mode [ 1583.109024][T22611] syzkaller0: entered allmulticast mode [ 1583.315509][T22613] syzkaller0: entered promiscuous mode [ 1583.321018][T22613] syzkaller0: entered allmulticast mode [ 1584.745853][T22636] netlink: 68 bytes leftover after parsing attributes in process `syz.0.4968'. [ 1586.594199][T22645] syzkaller0: entered promiscuous mode [ 1586.602469][T22645] syzkaller0: entered allmulticast mode [ 1586.621531][T22649] netlink: 'syz.0.4972': attribute type 10 has an invalid length. [ 1586.630387][T22649] veth0_vlan: left promiscuous mode [ 1586.643996][T22649] veth0_vlan: entered promiscuous mode [ 1586.651539][T22649] team0: Device veth0_vlan failed to register rx_handler [ 1586.912436][T22662] netlink: 68 bytes leftover after parsing attributes in process `syz.0.4978'. [ 1586.970396][T22658] netlink: 'syz.4.4977': attribute type 1 has an invalid length. [ 1587.075147][T22665] syzkaller0: entered promiscuous mode [ 1587.083429][T22665] syzkaller0: entered allmulticast mode [ 1587.094878][T22665] tipc: Enabled bearer , priority 0 [ 1587.104448][T22664] tipc: Resetting bearer [ 1587.184836][T22664] tipc: Disabling bearer [ 1587.424301][T22676] syzkaller0: entered promiscuous mode [ 1587.443969][T22676] syzkaller0: entered allmulticast mode [ 1587.542058][T22686] netlink: 68 bytes leftover after parsing attributes in process `syz.1.4988'. [ 1588.172891][ T5775] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1588.181390][T22700] syzkaller0: entered promiscuous mode [ 1588.187191][T22700] syzkaller0: entered allmulticast mode [ 1588.193082][ T5775] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1588.203346][ T5775] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1588.205488][T22698] tipc: Enabled bearer , priority 0 [ 1588.221123][ T5775] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1588.221346][T22697] tipc: Resetting bearer [ 1588.248766][ T5775] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1588.256290][ T5775] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1588.314491][T22697] tipc: Disabling bearer [ 1588.351680][T22703] syzkaller0: entered promiscuous mode [ 1588.360058][T22703] syzkaller0: entered allmulticast mode [ 1588.367728][T22699] lo speed is unknown, defaulting to 1000 [ 1588.644310][T22714] syzkaller0: entered promiscuous mode [ 1588.649927][T22714] syzkaller0: entered allmulticast mode [ 1588.657886][T22699] chnl_net:caif_netlink_parms(): no params data found [ 1588.780965][T22699] bridge0: port 1(bridge_slave_0) entered blocking state [ 1588.788417][T22699] bridge0: port 1(bridge_slave_0) entered disabled state [ 1588.796143][T22699] bridge_slave_0: entered allmulticast mode [ 1588.803704][T22699] bridge_slave_0: entered promiscuous mode [ 1588.812626][T22699] bridge0: port 2(bridge_slave_1) entered blocking state [ 1588.819955][T22699] bridge0: port 2(bridge_slave_1) entered disabled state [ 1588.827870][T22699] bridge_slave_1: entered allmulticast mode [ 1588.835412][T22699] bridge_slave_1: entered promiscuous mode [ 1588.868239][T22699] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1588.886768][T22699] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1588.896557][T22723] netlink: 64 bytes leftover after parsing attributes in process `syz.4.5003'. [ 1588.956789][T22699] team0: Port device team_slave_0 added [ 1588.965788][T22699] team0: Port device team_slave_1 added [ 1588.994795][T22699] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1589.002368][T22699] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1589.035538][T22699] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1589.057671][T22699] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1589.064731][T22699] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1589.094723][T22699] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1589.114391][T22727] syzkaller0: entered promiscuous mode [ 1589.120220][T22727] syzkaller0: entered allmulticast mode [ 1589.133031][T22727] tipc: Enabled bearer , priority 0 [ 1589.162189][T22724] tipc: Resetting bearer [ 1589.191506][T22724] tipc: Disabling bearer [ 1589.204212][T22699] hsr_slave_0: entered promiscuous mode [ 1589.212040][T22699] hsr_slave_1: entered promiscuous mode [ 1589.349029][T22729] syzkaller0: entered promiscuous mode [ 1589.354552][T22729] syzkaller0: entered allmulticast mode [ 1589.797150][T22745] syzkaller0: entered promiscuous mode [ 1589.802676][T22745] syzkaller0: entered allmulticast mode [ 1589.829397][T22745] tipc: Enabled bearer , priority 0 [ 1589.840890][T22744] tipc: Resetting bearer [ 1589.886802][T22744] tipc: Disabling bearer [ 1589.951747][T22749] syzkaller0: entered promiscuous mode [ 1589.958217][T22749] syzkaller0: entered allmulticast mode [ 1590.002798][T22699] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1590.020711][T22699] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1590.058858][T22699] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1590.070106][T22699] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1590.208190][T22699] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1590.249046][T22699] 8021q: adding VLAN 0 to HW filter on device team0 [ 1590.270204][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 1590.277372][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1590.299758][T14687] bridge0: port 2(bridge_slave_1) entered blocking state [ 1590.306875][T14687] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1590.365413][T17553] Bluetooth: hci3: command tx timeout [ 1590.636549][T22770] syzkaller0: entered promiscuous mode [ 1590.642156][T22770] syzkaller0: entered allmulticast mode [ 1590.656690][T22770] tipc: Enabled bearer , priority 0 [ 1590.667535][T22769] tipc: Resetting bearer [ 1590.700973][T22769] tipc: Disabling bearer [ 1590.714815][T22699] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1590.749250][T22699] veth0_vlan: entered promiscuous mode [ 1590.770915][T22699] veth1_vlan: entered promiscuous mode [ 1590.823828][T22772] syzkaller0: entered promiscuous mode [ 1590.829535][T22772] syzkaller0: entered allmulticast mode [ 1590.860137][T22699] veth0_macvtap: entered promiscuous mode [ 1590.881013][T22699] veth1_macvtap: entered promiscuous mode [ 1590.920668][T22699] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1590.931879][T22699] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1590.942166][T22699] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1590.952674][T22699] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1590.962917][T22699] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1590.973935][T22699] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1590.985092][T22699] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1591.004891][T22699] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1591.015933][T22699] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1591.045290][T22699] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1591.063891][T22699] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1591.093526][T22699] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1591.125058][T22699] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1591.144243][T22699] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1591.168468][T22699] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1591.181308][T22699] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1591.322712][ T3427] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1591.333802][ T3427] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1591.359426][ T3427] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1591.368816][ T3427] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1591.669345][T22789] syzkaller0: entered promiscuous mode [ 1591.674882][T22789] syzkaller0: entered allmulticast mode [ 1591.688342][T22789] tipc: Started in network mode [ 1591.693311][T22789] tipc: Node identity 6e1e12f78162, cluster identity 4711 [ 1591.701437][T22789] tipc: Enabled bearer , priority 0 [ 1591.711046][T22788] tipc: Resetting bearer [ 1591.742694][T22788] tipc: Disabling bearer [ 1591.854151][T22791] syzkaller0: entered promiscuous mode [ 1591.859896][T22791] syzkaller0: entered allmulticast mode [ 1592.111020][T22795] netlink: 'syz.0.5036': attribute type 1 has an invalid length. [ 1592.435474][T17553] Bluetooth: hci3: command tx timeout [ 1592.724184][T22808] syzkaller0: entered promiscuous mode [ 1592.742485][ T5775] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1592.753611][T22808] syzkaller0: entered allmulticast mode [ 1592.753903][ T5775] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1592.770014][ T5775] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1592.781802][ T5775] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1592.801278][ T5775] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1592.809201][ T5775] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1592.970849][T22809] lo speed is unknown, defaulting to 1000 [ 1593.218459][T22809] chnl_net:caif_netlink_parms(): no params data found [ 1593.331274][T22809] bridge0: port 1(bridge_slave_0) entered blocking state [ 1593.338866][T22809] bridge0: port 1(bridge_slave_0) entered disabled state [ 1593.347584][T22809] bridge_slave_0: entered allmulticast mode [ 1593.354353][T22809] bridge_slave_0: entered promiscuous mode [ 1593.364729][T22809] bridge0: port 2(bridge_slave_1) entered blocking state [ 1593.371943][T22809] bridge0: port 2(bridge_slave_1) entered disabled state [ 1593.379242][T22809] bridge_slave_1: entered allmulticast mode [ 1593.386482][T22809] bridge_slave_1: entered promiscuous mode [ 1593.425426][T22809] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1593.510382][T22809] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1593.581854][T22809] team0: Port device team_slave_0 added [ 1593.613717][T22809] team0: Port device team_slave_1 added [ 1593.651146][ T42] tipc: Left network mode [ 1593.656379][T22809] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1593.664172][T22809] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1593.694710][T22809] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1593.708395][T22809] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1593.718488][T22809] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1593.745021][T22809] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1593.834060][T22809] hsr_slave_0: entered promiscuous mode [ 1593.840666][T22809] hsr_slave_1: entered promiscuous mode [ 1593.849081][T22809] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1593.856950][T22809] Cannot create hsr debugfs directory [ 1594.515513][ T5775] Bluetooth: hci3: command tx timeout [ 1594.554255][T22835] syzkaller0: entered promiscuous mode [ 1594.562874][T22835] syzkaller0: entered allmulticast mode [ 1594.924388][ T5775] Bluetooth: hci4: command tx timeout [ 1596.606446][ T5775] Bluetooth: hci3: command tx timeout [ 1597.006293][ T5775] Bluetooth: hci4: command tx timeout [ 1598.084913][T22854] syzkaller0: entered promiscuous mode [ 1598.102264][T22854] syzkaller0: entered allmulticast mode [ 1598.367366][T22809] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1598.393456][T22809] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1598.426178][ T42] hsr_slave_0: left promiscuous mode [ 1598.442992][ T42] hsr_slave_1: left promiscuous mode [ 1598.459163][ T42] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1598.470450][ T42] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1598.478677][ T42] bridge_slave_1: left allmulticast mode [ 1598.484494][ T42] bridge_slave_1: left promiscuous mode [ 1598.498881][ T42] bridge0: port 2(bridge_slave_1) entered disabled state [ 1598.508375][ T42] bridge_slave_0: left allmulticast mode [ 1598.514045][ T42] bridge_slave_0: left promiscuous mode [ 1598.521899][ T42] bridge0: port 1(bridge_slave_0) entered disabled state [ 1599.075606][ T5775] Bluetooth: hci4: command tx timeout [ 1599.500633][ T42] team0 (unregistering): Port device team_slave_1 removed [ 1599.580488][ T42] team0 (unregistering): Port device team_slave_0 removed [ 1599.681041][ T42] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1599.747740][ T42] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1600.245015][ T42] bond0 (unregistering): Released all slaves [ 1600.356245][T22809] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1600.373839][T22809] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1600.521194][T22809] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1600.561457][T22809] 8021q: adding VLAN 0 to HW filter on device team0 [ 1600.603739][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 1600.610910][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1600.626174][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 1600.633370][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1600.818659][ T42] IPVS: stop unused estimator thread 0... [ 1600.989123][T22809] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1601.047716][T22809] veth0_vlan: entered promiscuous mode [ 1601.071332][T22809] veth1_vlan: entered promiscuous mode [ 1601.103140][T22903] syzkaller0: entered promiscuous mode [ 1601.110126][T22903] syzkaller0: entered allmulticast mode [ 1601.166144][ T5775] Bluetooth: hci4: command tx timeout [ 1601.180326][T22809] veth0_macvtap: entered promiscuous mode [ 1601.191022][T22809] veth1_macvtap: entered promiscuous mode [ 1601.211477][T22809] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1601.222068][T22809] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1601.232524][T22809] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1601.243075][T22809] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1601.253009][T22809] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1601.264143][T22809] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1601.274473][T22809] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1601.285575][T22809] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1601.297712][T22809] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1601.321044][T22809] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1601.331739][T22809] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1601.343122][T22809] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1601.353836][T22809] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1601.363768][T22809] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1601.377137][T22809] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1601.388555][T22809] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1601.410316][T22809] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1601.420497][T22809] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1601.429360][T22809] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1601.438347][T22809] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1601.589563][ T3427] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1601.612139][ T3427] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1601.654315][T14687] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1601.663101][T14687] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1602.141358][T22923] syzkaller0: entered promiscuous mode [ 1602.147064][T22923] syzkaller0: entered allmulticast mode [ 1603.461414][T22970] syzkaller0: entered promiscuous mode [ 1603.467321][T22970] syzkaller0: entered allmulticast mode [ 1607.022419][T22993] syzkaller0: entered promiscuous mode [ 1607.029753][T22993] syzkaller0: entered allmulticast mode [ 1607.207012][T22997] lo speed is unknown, defaulting to 1000 [ 1607.333581][T22999] syzkaller0: entered promiscuous mode [ 1607.349229][T22999] syzkaller0: entered allmulticast mode [ 1607.482942][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 1607.492018][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 1611.134270][T23039] syzkaller0: entered promiscuous mode [ 1611.139891][T23039] syzkaller0: entered allmulticast mode [ 1615.036664][T23066] netlink: 'syz.4.5130': attribute type 1 has an invalid length. [ 1615.044935][T23066] netlink: 'syz.4.5130': attribute type 1 has an invalid length. [ 1615.061839][T23066] netlink: 'syz.4.5130': attribute type 1 has an invalid length. [ 1615.095655][T23066] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5130'. [ 1615.114180][T23066] netlink: 64 bytes leftover after parsing attributes in process `syz.4.5130'. [ 1615.225107][T23071] syzkaller0: entered promiscuous mode [ 1615.232010][T23071] syzkaller0: entered allmulticast mode [ 1615.973650][T23106] syzkaller0: entered promiscuous mode [ 1615.985569][T23106] syzkaller0: entered allmulticast mode [ 1616.091171][T23113] syzkaller0: entered promiscuous mode [ 1616.105811][T23113] syzkaller0: entered allmulticast mode [ 1616.439964][T23129] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5154'. [ 1616.924004][T23140] syzkaller0: entered promiscuous mode [ 1616.935365][T23140] syzkaller0: entered allmulticast mode [ 1617.866507][T17553] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1617.878772][T17553] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1617.887879][T17553] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1617.898467][T17553] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1617.906347][T17553] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1617.913839][T17553] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1618.023937][T23156] lo speed is unknown, defaulting to 1000 [ 1618.351531][T23167] syzkaller0: entered promiscuous mode [ 1618.365312][T23167] syzkaller0: entered allmulticast mode [ 1618.590994][T23156] chnl_net:caif_netlink_parms(): no params data found [ 1618.777420][T23156] bridge0: port 1(bridge_slave_0) entered blocking state [ 1618.784653][T23156] bridge0: port 1(bridge_slave_0) entered disabled state [ 1618.792800][T23156] bridge_slave_0: entered allmulticast mode [ 1618.800397][T23156] bridge_slave_0: entered promiscuous mode [ 1618.815953][T23156] bridge0: port 2(bridge_slave_1) entered blocking state [ 1618.823170][T23156] bridge0: port 2(bridge_slave_1) entered disabled state [ 1618.831172][T23156] bridge_slave_1: entered allmulticast mode [ 1618.838304][T23156] bridge_slave_1: entered promiscuous mode [ 1618.866726][T23156] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1618.880289][T23156] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1618.943446][T23156] team0: Port device team_slave_0 added [ 1618.971278][T23156] team0: Port device team_slave_1 added [ 1619.038700][ T3466] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1619.071738][T23156] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1619.078953][T23156] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1619.108767][T23156] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1619.123735][T23156] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1619.133656][T23156] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1619.160211][T23156] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1619.215790][ T3466] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1619.268710][T23156] hsr_slave_0: entered promiscuous mode [ 1619.276172][T23156] hsr_slave_1: entered promiscuous mode [ 1619.282694][T23156] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1619.290393][T23156] Cannot create hsr debugfs directory [ 1619.332473][ T3466] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1619.427988][ T3466] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1619.809739][ T3466] tipc: Left network mode [ 1619.967070][T17553] Bluetooth: hci2: command tx timeout [ 1620.007432][ T3466] bond1: (slave ip6gretap1): Releasing active interface [ 1620.500004][T23193] syzkaller0: entered promiscuous mode [ 1620.505744][T23193] syzkaller0: entered allmulticast mode [ 1620.784918][T23155] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1621.460462][ T3466] hsr_slave_0: left promiscuous mode [ 1621.480886][ T3466] hsr_slave_1: left promiscuous mode [ 1621.492864][ T3466] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1621.510733][ T3466] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1621.528983][ T3466] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1621.543199][ T3466] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1621.563971][ T3466] bridge_slave_1: left allmulticast mode [ 1621.578185][ T3466] bridge_slave_1: left promiscuous mode [ 1621.594228][ T3466] bridge0: port 2(bridge_slave_1) entered disabled state [ 1621.631196][ T3466] bridge_slave_0: left allmulticast mode [ 1621.640964][ T3466] bridge_slave_0: left promiscuous mode [ 1621.663603][ T3466] bridge0: port 1(bridge_slave_0) entered disabled state [ 1621.746393][ T3466] veth1_macvtap: left promiscuous mode [ 1621.751969][ T3466] veth0_macvtap: left promiscuous mode [ 1621.767938][ T3466] veth1_vlan: left promiscuous mode [ 1621.778008][ T3466] veth0_vlan: left promiscuous mode [ 1622.046455][T17553] Bluetooth: hci2: command tx timeout [ 1622.362675][ T3466] bond1 (unregistering): Released all slaves [ 1623.221846][ T3466] team0 (unregistering): Port device team_slave_1 removed [ 1623.288214][ T3466] team0 (unregistering): Port device team_slave_0 removed [ 1623.352236][ T3466] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1623.412610][ T3466] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1623.863045][ T3466] bond0 (unregistering): Released all slaves [ 1624.007286][T23232] syzkaller0: entered promiscuous mode [ 1624.017803][T23232] syzkaller0: entered allmulticast mode [ 1624.028724][T23156] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1624.116061][T17553] Bluetooth: hci2: command tx timeout [ 1624.126356][T23156] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1624.166659][T23156] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1624.198439][T23156] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1624.254475][T23245] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5188'. [ 1624.600423][T23156] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1624.628443][ T3466] IPVS: stop unused estimator thread 0... [ 1624.643698][T23156] 8021q: adding VLAN 0 to HW filter on device team0 [ 1624.718449][T14687] bridge0: port 1(bridge_slave_0) entered blocking state [ 1624.725639][T14687] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1624.753299][T14687] bridge0: port 2(bridge_slave_1) entered blocking state [ 1624.760500][T14687] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1625.411544][T23156] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1625.590856][T23285] syzkaller0: entered promiscuous mode [ 1625.596620][T23285] syzkaller0: entered allmulticast mode [ 1625.941019][T23294] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5197'. [ 1626.169649][T23156] veth0_vlan: entered promiscuous mode [ 1626.196360][T17553] Bluetooth: hci2: command tx timeout [ 1626.203706][T23156] veth1_vlan: entered promiscuous mode [ 1626.275139][T23156] veth0_macvtap: entered promiscuous mode [ 1626.290609][T23156] veth1_macvtap: entered promiscuous mode [ 1626.352669][T23156] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1626.369917][T23307] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5199'. [ 1626.372788][T23156] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1626.397647][T23307] sctp: [Deprecated]: syz.1.5199 (pid 23307) Use of int in max_burst socket option deprecated. [ 1626.397647][T23307] Use struct sctp_assoc_value instead [ 1626.400260][T23156] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1626.431872][T23156] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1626.442644][T23156] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1626.454320][T23156] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1626.464303][T23156] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1626.474797][T23156] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1626.493072][T23156] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1626.512391][T23156] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1626.523023][T23156] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1626.547289][T23156] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1626.559450][T23156] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1626.569858][T23156] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1626.580409][T23156] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1626.591644][T23156] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1626.622671][T23156] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1626.633336][T23156] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1626.643234][T23156] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1626.652224][T23156] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1626.807894][T23314] syzkaller0: entered promiscuous mode [ 1626.813714][T14687] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1626.821941][T23314] syzkaller0: entered allmulticast mode [ 1626.825295][T14687] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1626.893793][ T3484] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1626.902531][ T3484] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1627.029816][T23318] syzkaller0: entered promiscuous mode [ 1627.035721][T23318] syzkaller0: entered allmulticast mode [ 1627.089616][T23320] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5205'. [ 1628.294541][T23346] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5215'. [ 1628.524997][T23357] syzkaller0: entered promiscuous mode [ 1628.532099][T23357] syzkaller0: entered allmulticast mode [ 1628.556670][T23357] sch_tbf: burst 2 is lower than device syzkaller0 mtu (1514) ! [ 1628.569104][T23357] tipc: Enabled bearer , priority 0 [ 1628.577027][T23356] tipc: Resetting bearer [ 1628.610588][T23356] tipc: Disabling bearer [ 1628.755777][T23361] netlink: 68 bytes leftover after parsing attributes in process `syz.0.5220'. [ 1628.906479][T23368] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5224'. [ 1629.340018][T23384] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5230'. [ 1629.465653][T23387] syzkaller0: entered promiscuous mode [ 1629.471176][T23387] syzkaller0: entered allmulticast mode [ 1629.819802][T23391] netlink: 68 bytes leftover after parsing attributes in process `syz.0.5233'. [ 1629.881510][T23393] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5234'. [ 1630.085447][T23400] syzkaller0: entered promiscuous mode [ 1630.090938][T23400] syzkaller0: entered allmulticast mode [ 1630.147858][T23401] syzkaller0: entered promiscuous mode [ 1630.153412][T23401] syzkaller0: entered allmulticast mode [ 1636.156775][T23430] syzkaller0: entered promiscuous mode [ 1636.162311][T23430] syzkaller0: entered allmulticast mode [ 1636.320350][T23434] syzkaller0: entered promiscuous mode [ 1636.333143][T23434] syzkaller0: entered allmulticast mode [ 1639.377026][T23454] syzkaller0: entered promiscuous mode [ 1639.393151][T23454] syzkaller0: entered allmulticast mode [ 1639.416222][T23459] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5259'. [ 1642.874949][T23494] syzkaller0: entered promiscuous mode [ 1642.886262][T23494] syzkaller0: entered allmulticast mode [ 1643.605400][T23481] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1646.061328][T23499] veth1_macvtap: left promiscuous mode [ 1646.066875][T23499] macsec0: entered promiscuous mode [ 1646.096751][T23512] netlink: 15830 bytes leftover after parsing attributes in process `syz.0.5273'. [ 1646.186027][T23514] syzkaller0: entered promiscuous mode [ 1646.191691][T23514] syzkaller0: entered allmulticast mode [ 1646.359552][T23518] syzkaller0: entered promiscuous mode [ 1646.378958][T23518] syzkaller0: entered allmulticast mode [ 1649.728732][T23541] syzkaller0: entered promiscuous mode [ 1649.742569][T23541] syzkaller0: entered allmulticast mode [ 1653.288485][T23580] syzkaller0: entered promiscuous mode [ 1653.294009][T23580] syzkaller0: entered allmulticast mode [ 1656.600757][T23620] syzkaller0: entered promiscuous mode [ 1656.606424][T23620] syzkaller0: entered allmulticast mode [ 1656.991939][T23638] syzkaller0: entered promiscuous mode [ 1656.997844][T23638] syzkaller0: entered allmulticast mode [ 1657.006721][T23636] syzkaller0: entered promiscuous mode [ 1657.012329][T23636] syzkaller0: entered allmulticast mode [ 1660.222236][T23662] syzkaller0: entered promiscuous mode [ 1660.235248][T23662] syzkaller0: entered allmulticast mode [ 1661.213882][T23692] cgroup: fork rejected by pids controller in /syz0 [ 1661.700541][T23858] syzkaller0: entered promiscuous mode [ 1661.729664][T23858] syzkaller0: entered allmulticast mode [ 1662.101807][T23904] syzkaller0: entered promiscuous mode [ 1662.107602][T23904] syzkaller0: entered allmulticast mode [ 1662.400884][T23920] syzkaller0: entered promiscuous mode [ 1662.406843][T23920] syzkaller0: entered allmulticast mode [ 1662.812602][T23937] syzkaller0: entered promiscuous mode [ 1662.818259][T23937] syzkaller0: entered allmulticast mode [ 1663.114951][T23946] syzkaller0: entered promiscuous mode [ 1663.120516][T23946] syzkaller0: entered allmulticast mode [ 1663.456583][T23960] syzkaller0: entered promiscuous mode [ 1663.466740][T23960] syzkaller0: entered allmulticast mode [ 1663.725318][T23971] sit1: entered allmulticast mode [ 1664.965535][T23994] syzkaller0: entered promiscuous mode [ 1664.971054][T23994] syzkaller0: entered allmulticast mode [ 1668.905879][ T5840] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 1668.920089][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 1668.926693][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 1669.110166][ T5840] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1669.120651][ T5840] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1669.131022][ T5840] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1669.147712][ T5840] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 1669.156919][ T5840] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 1669.165110][ T5840] usb 2-1: Product: syz [ 1669.169990][ T5840] usb 2-1: Manufacturer: syz [ 1669.174665][ T5840] usb 2-1: SerialNumber: syz [ 1669.389683][ T5840] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 22 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1669.601798][ T5840] usb 2-1: USB disconnect, device number 22 [ 1669.617024][ T5840] usblp0: removed [ 1670.963250][T24123] netlink: set zone limit has 8 unknown bytes [ 1670.986648][T24123] netlink: del zone limit has 8 unknown bytes [ 1672.793360][ T27] kauditd_printk_skb: 8 callbacks suppressed [ 1672.793380][ T27] audit: type=1326 audit(1774336789.157:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24150 comm="syz.4.5423" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff12099c799 code=0x0 [ 1678.367689][T24217] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1678.784787][T24250] syzkaller0: entered promiscuous mode [ 1678.791258][T24250] syzkaller0: entered allmulticast mode [ 1688.580724][T24339] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1688.704771][T24371] tipc: Started in network mode [ 1688.710187][T24371] tipc: Node identity 3a5a9ebf1245, cluster identity 4711 [ 1688.718654][T24371] tipc: Enabled bearer , priority 0 [ 1688.739077][T24371] tipc: Resetting bearer [ 1688.768112][T24369] tipc: Disabling bearer [ 1689.363063][T24401] tipc: Enabled bearer , priority 0 [ 1689.377331][T24401] tipc: Resetting bearer [ 1689.397367][T24400] tipc: Disabling bearer [ 1689.876362][T24422] sit1: entered allmulticast mode [ 1689.963495][T24424] lo speed is unknown, defaulting to 1000 [ 1690.011303][T17805] IPVS: starting estimator thread 0... [ 1690.125568][T24427] IPVS: using max 35 ests per chain, 84000 per kthread [ 1690.138154][T24431] tipc: Enabled bearer , priority 0 [ 1690.145584][T24431] syzkaller0: entered promiscuous mode [ 1690.151070][T24431] syzkaller0: entered allmulticast mode [ 1690.180505][T24430] tipc: Resetting bearer [ 1690.211281][T24430] tipc: Disabling bearer [ 1690.590300][ T42] IPVS: stop unused estimator thread 0... [ 1690.779531][T24444] syzkaller0: entered promiscuous mode [ 1690.785054][T24444] syzkaller0: entered allmulticast mode [ 1691.642846][T24459] syzkaller0: entered promiscuous mode [ 1691.648717][T24459] syzkaller0: entered allmulticast mode [ 1691.908633][T24468] syzkaller0: entered promiscuous mode [ 1691.914117][T24468] syzkaller0: entered allmulticast mode [ 1692.367153][T24489] syzkaller0: entered promiscuous mode [ 1692.372691][T24489] syzkaller0: entered allmulticast mode [ 1692.576153][T24498] syzkaller0: entered promiscuous mode [ 1692.581790][T24498] syzkaller0: entered allmulticast mode [ 1695.093933][T24477] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1695.391677][T24520] syzkaller0: entered promiscuous mode [ 1695.400281][T24520] syzkaller0: entered allmulticast mode [ 1698.550576][T24527] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1698.891012][T24570] syzkaller0: entered promiscuous mode [ 1698.897416][T24570] syzkaller0: entered allmulticast mode [ 1700.824438][T24607] syzkaller0: entered promiscuous mode [ 1700.830372][T24607] syzkaller0: entered allmulticast mode [ 1700.973743][T24609] syzkaller0: entered promiscuous mode [ 1700.979541][T24609] syzkaller0: entered allmulticast mode [ 1701.227923][T24616] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5583'. [ 1702.678016][T24624] syzkaller0: entered promiscuous mode [ 1702.703963][T24624] syzkaller0: entered allmulticast mode [ 1703.714537][T24642] syzkaller0: entered promiscuous mode [ 1703.734803][T24642] syzkaller0: entered allmulticast mode [ 1704.321778][T24656] syzkaller0: entered promiscuous mode [ 1704.327560][T24656] syzkaller0: entered allmulticast mode [ 1705.571221][T24674] syzkaller0: entered promiscuous mode [ 1705.583549][T24674] syzkaller0: entered allmulticast mode [ 1705.805100][T24676] autofs4:pid:24676:autofs_fill_super: called with bogus options [ 1706.310240][T24686] syzkaller0: entered promiscuous mode [ 1706.318547][T24686] syzkaller0: entered allmulticast mode [ 1706.741103][T24699] syzkaller0: entered promiscuous mode [ 1706.747934][T24699] syzkaller0: entered allmulticast mode [ 1706.907768][T24704] autofs4:pid:24704:autofs_fill_super: called with bogus options [ 1707.005123][T24709] syzkaller0: entered promiscuous mode [ 1707.010860][T24709] syzkaller0: entered allmulticast mode [ 1707.351745][T24725] syzkaller0: entered promiscuous mode [ 1707.358340][T24725] syzkaller0: entered allmulticast mode [ 1707.445488][T14330] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 1707.638463][T14330] usb 1-1: config index 0 descriptor too short (expected 39, got 27) [ 1707.647631][T14330] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1707.658812][T14330] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1707.668962][T14330] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1707.678402][T14330] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1707.687975][T14330] usb 1-1: Product: syz [ 1707.692259][T14330] usb 1-1: Manufacturer: syz [ 1707.697650][T14330] usb 1-1: SerialNumber: syz [ 1707.706135][T14330] usb 1-1: config 0 descriptor?? [ 1707.713920][T14330] hub 1-1:0.0: bad descriptor, ignoring hub [ 1707.724535][T14330] hub: probe of 1-1:0.0 failed with error -5 [ 1707.734103][T14330] usb 1-1: selecting invalid altsetting 0 [ 1707.772251][T24736] syzkaller0: entered promiscuous mode [ 1707.780196][T24736] syzkaller0: entered allmulticast mode [ 1708.013933][T24740] autofs4:pid:24740:autofs_fill_super: called with bogus options [ 1710.539985][T24757] sit1: entered allmulticast mode [ 1710.621204][T15083] usb 1-1: USB disconnect, device number 30 [ 1710.689304][T24763] syzkaller0: entered promiscuous mode [ 1710.703636][T24763] syzkaller0: entered allmulticast mode [ 1711.392564][T24792] netlink: set zone limit has 8 unknown bytes [ 1711.994008][T17553] Bluetooth: hci3: command 0x0406 tx timeout [ 1712.831553][T24794] syzkaller0: entered promiscuous mode [ 1712.837943][T24794] syzkaller0: entered allmulticast mode [ 1713.244255][T24814] tipc: Started in network mode [ 1713.255384][T24814] tipc: Node identity 2229fc38a696, cluster identity 4711 [ 1713.262792][T24814] tipc: Enabled bearer , priority 0 [ 1713.307337][T24814] syzkaller0: entered promiscuous mode [ 1713.312852][T24814] syzkaller0: entered allmulticast mode [ 1713.342231][T24814] tipc: Resetting bearer [ 1713.362647][T24813] tipc: Resetting bearer [ 1713.407069][T24813] tipc: Disabling bearer [ 1713.518452][T24824] syzkaller0: entered promiscuous mode [ 1713.523975][T24824] syzkaller0: entered allmulticast mode [ 1713.733874][T24835] syzkaller0: entered promiscuous mode [ 1713.739716][T24835] syzkaller0: entered allmulticast mode [ 1713.954741][T24843] tipc: Enabled bearer , priority 0 [ 1713.962809][T24843] syzkaller0: entered promiscuous mode [ 1713.968812][T24843] syzkaller0: entered allmulticast mode [ 1713.988302][T24843] tipc: Resetting bearer [ 1714.002138][T24841] tipc: Resetting bearer [ 1714.032339][T24841] tipc: Disabling bearer [ 1714.214872][T24854] syzkaller0: entered promiscuous mode [ 1714.235512][T24854] syzkaller0: entered allmulticast mode [ 1714.326988][T24858] syzkaller0: entered promiscuous mode [ 1714.332676][T24858] syzkaller0: entered allmulticast mode [ 1715.419209][T24876] tipc: Enabled bearer , priority 0 [ 1715.427340][T24876] syzkaller0: entered promiscuous mode [ 1715.432826][T24876] syzkaller0: entered allmulticast mode [ 1715.451637][T24876] tipc: Resetting bearer [ 1715.460055][T24875] tipc: Resetting bearer [ 1715.490430][T24875] tipc: Disabling bearer [ 1715.636328][T24885] syzkaller0: entered promiscuous mode [ 1715.641912][T24885] syzkaller0: entered allmulticast mode [ 1715.797443][T24893] syzkaller0: entered promiscuous mode [ 1715.802997][T24893] syzkaller0: entered allmulticast mode [ 1717.346241][T24908] syzkaller0: entered promiscuous mode [ 1717.351916][T24908] syzkaller0: entered allmulticast mode [ 1717.432967][T24912] syzkaller0: entered promiscuous mode [ 1717.438626][T24912] syzkaller0: entered allmulticast mode [ 1717.570874][T24916] syzkaller0: entered promiscuous mode [ 1717.577694][T24916] syzkaller0: entered allmulticast mode [ 1718.923944][T24935] syzkaller0: entered promiscuous mode [ 1718.959112][T24935] syzkaller0: entered allmulticast mode [ 1719.319619][T24940] syzkaller0: entered promiscuous mode [ 1719.376835][T24940] syzkaller0: entered allmulticast mode [ 1720.020398][T24948] syzkaller0: entered promiscuous mode [ 1720.035976][T24948] syzkaller0: entered allmulticast mode [ 1720.839621][T24967] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5715'. [ 1721.042232][T17553] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1721.054140][T17553] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1721.067320][T17553] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1721.076433][T17553] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1721.085540][T17553] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1721.094129][T17553] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1721.120850][ T7512] bridge0: port 3(syz_tun) entered disabled state [ 1721.217431][ T7512] syz_tun (unregistering): left allmulticast mode [ 1721.223873][ T7512] syz_tun (unregistering): left promiscuous mode [ 1721.242537][ T7512] bridge0: port 3(syz_tun) entered disabled state [ 1721.300720][T24970] lo speed is unknown, defaulting to 1000 [ 1721.311302][T24979] syzkaller0: entered promiscuous mode [ 1721.324607][T24979] syzkaller0: entered allmulticast mode [ 1721.449714][ T1326] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1721.495483][T24981] syzkaller0: entered promiscuous mode [ 1721.505311][T24981] syzkaller0: entered allmulticast mode [ 1721.591013][ T1326] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1721.693154][ T1326] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1721.713365][T24989] syzkaller0: entered promiscuous mode [ 1721.720489][T24989] syzkaller0: entered allmulticast mode [ 1721.820650][T24985] syzkaller0: entered promiscuous mode [ 1721.833494][T24985] syzkaller0: entered allmulticast mode [ 1721.877791][ T1326] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1723.248027][ T5775] Bluetooth: hci0: command tx timeout [ 1724.866809][T24970] chnl_net:caif_netlink_parms(): no params data found [ 1725.050686][T25010] syzkaller0: entered promiscuous mode [ 1725.065149][T25010] syzkaller0: entered allmulticast mode [ 1725.092391][T25021] syzkaller0: entered promiscuous mode [ 1725.121343][T25021] syzkaller0: entered allmulticast mode [ 1725.162981][ T1326] tipc: Left network mode [ 1725.316288][T17553] Bluetooth: hci0: command tx timeout [ 1725.671549][T25042] netlink: 'syz.0.5732': attribute type 12 has an invalid length. [ 1725.699119][T24970] bridge0: port 1(bridge_slave_0) entered blocking state [ 1725.724602][T24970] bridge0: port 1(bridge_slave_0) entered disabled state [ 1725.745466][T24970] bridge_slave_0: entered allmulticast mode [ 1725.753505][T24970] bridge_slave_0: entered promiscuous mode [ 1725.803426][T24970] bridge0: port 2(bridge_slave_1) entered blocking state [ 1725.825428][T24970] bridge0: port 2(bridge_slave_1) entered disabled state [ 1725.839383][T24970] bridge_slave_1: entered allmulticast mode [ 1725.864545][T24970] bridge_slave_1: entered promiscuous mode [ 1726.149149][T24970] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1726.179552][T24970] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1726.488682][T24970] team0: Port device team_slave_0 added [ 1726.581876][T25062] syzkaller0: entered promiscuous mode [ 1726.596776][T25062] syzkaller0: entered allmulticast mode [ 1726.657698][T24970] team0: Port device team_slave_1 added [ 1727.333693][T25031] Bluetooth: hci4: command 0x0406 tx timeout [ 1727.413877][ T5775] Bluetooth: hci0: command tx timeout [ 1729.482831][ T5775] Bluetooth: hci0: command tx timeout [ 1730.199752][ T1326] dvmrp6 (unregistering): left allmulticast mode [ 1730.234028][T24970] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1730.241937][T24970] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1730.273612][T24970] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1730.296416][T24970] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1730.304036][T24970] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1730.353848][T24970] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1730.369602][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 1730.369653][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 1730.561371][T24970] hsr_slave_0: entered promiscuous mode [ 1730.577753][T24970] hsr_slave_1: entered promiscuous mode [ 1730.596694][T24970] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1730.604604][T24970] Cannot create hsr debugfs directory [ 1730.802926][ T1326] hsr_slave_0: left promiscuous mode [ 1730.813928][ T1326] hsr_slave_1: left promiscuous mode [ 1730.820781][ T1326] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1730.828546][ T1326] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1730.836916][ T1326] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1730.844525][ T1326] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1730.862592][ T1326] bridge_slave_1: left allmulticast mode [ 1730.874204][ T1326] bridge_slave_1: left promiscuous mode [ 1730.900339][ T1326] bridge0: port 2(bridge_slave_1) entered disabled state [ 1730.930299][ T1326] bridge_slave_0: left allmulticast mode [ 1730.945085][ T1326] bridge_slave_0: left promiscuous mode [ 1730.963603][ T1326] bridge0: port 1(bridge_slave_0) entered disabled state [ 1731.093316][ T1326] veth1_macvtap: left promiscuous mode [ 1731.105140][ T1326] veth0_macvtap: left promiscuous mode [ 1731.134827][ T1326] veth1_vlan: left promiscuous mode [ 1731.145757][ T1326] veth0_vlan: left promiscuous mode [ 1732.190673][ T1326] team0 (unregistering): Port device team_slave_1 removed [ 1732.239802][ T1326] team0 (unregistering): Port device team_slave_0 removed [ 1732.301049][ T1326] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1732.361393][ T1326] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1732.791753][ T1326] bond0 (unregistering): Released all slaves [ 1732.899226][T25153] syzkaller0: entered promiscuous mode [ 1732.904739][T25153] syzkaller0: entered allmulticast mode [ 1736.179136][T25202] syzkaller0: entered promiscuous mode [ 1736.184666][T25202] syzkaller0: entered allmulticast mode [ 1736.993464][ T1326] IPVS: stop unused estimator thread 0... [ 1737.146456][T25246] syzkaller0: entered promiscuous mode [ 1737.154268][T25246] syzkaller0: entered allmulticast mode [ 1737.332217][T24970] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1737.355920][T24970] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1737.380759][T24970] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1737.406563][T24970] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1737.441963][T25253] syzkaller0: entered promiscuous mode [ 1737.455321][T25253] syzkaller0: entered allmulticast mode [ 1737.612774][T24970] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1737.650909][T24970] 8021q: adding VLAN 0 to HW filter on device team0 [ 1737.668727][ T3427] bridge0: port 1(bridge_slave_0) entered blocking state [ 1737.675910][ T3427] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1737.707845][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 1737.715033][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1737.825108][T24970] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1737.912173][T25261] syzkaller0: entered promiscuous mode [ 1737.920346][T25261] syzkaller0: entered allmulticast mode [ 1738.288376][T24970] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1738.382527][T24970] veth0_vlan: entered promiscuous mode [ 1738.414581][T24970] veth1_vlan: entered promiscuous mode [ 1738.438138][T25285] syzkaller0: entered promiscuous mode [ 1738.444261][T25285] syzkaller0: entered allmulticast mode [ 1738.587715][T24970] veth0_macvtap: entered promiscuous mode [ 1738.609635][T25291] syzkaller0: entered promiscuous mode [ 1738.618372][T25291] syzkaller0: entered allmulticast mode [ 1738.707664][T24970] veth1_macvtap: entered promiscuous mode [ 1738.758206][T24970] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1738.784104][T24970] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1738.797912][T24970] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1738.808911][T24970] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1738.821353][T24970] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1738.834199][T24970] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1738.852195][T24970] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1738.873007][T24970] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1738.901627][T24970] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1738.915053][T24970] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1738.926564][T24970] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1738.942972][T24970] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1738.953865][T24970] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1738.971358][T24970] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1738.983543][T24970] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1739.017243][T24970] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1739.053597][T24970] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1739.068932][T24970] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1739.080721][T24970] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1739.090084][T24970] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1739.267291][ T3427] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1739.297047][ T3427] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1739.388474][ T1326] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1739.407249][ T1326] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1739.885960][T25332] syzkaller0: entered promiscuous mode [ 1739.891583][T25332] syzkaller0: entered allmulticast mode [ 1739.926068][T25333] syzkaller0: entered promiscuous mode [ 1739.931947][T25333] syzkaller0: entered allmulticast mode [ 1742.651534][T25399] syzkaller0: entered promiscuous mode [ 1742.662344][T25399] syzkaller0: entered allmulticast mode [ 1742.679293][T25031] Bluetooth: hci2: command 0x0406 tx timeout [ 1742.833582][T25405] syzkaller0: entered promiscuous mode [ 1742.842188][T25405] syzkaller0: entered allmulticast mode [ 1745.089803][T25449] syzkaller0: entered promiscuous mode [ 1745.112525][T25449] syzkaller0: entered allmulticast mode [ 1745.130651][T25456] syzkaller0: entered promiscuous mode [ 1745.149581][T25456] syzkaller0: entered allmulticast mode [ 1747.882889][T25513] syzkaller0: entered promiscuous mode [ 1747.908033][T25513] syzkaller0: entered allmulticast mode [ 1748.132344][T25522] syzkaller0: entered promiscuous mode [ 1748.138063][T25522] syzkaller0: entered allmulticast mode [ 1751.273454][T25528] syzkaller0: entered promiscuous mode [ 1751.280081][T25528] syzkaller0: entered allmulticast mode [ 1752.403631][T25575] syzkaller0: entered promiscuous mode [ 1752.445338][T25575] syzkaller0: entered allmulticast mode [ 1753.122096][T25600] syzkaller0: entered promiscuous mode [ 1753.130621][T25600] syzkaller0: entered allmulticast mode [ 1753.182900][T25602] syzkaller0: entered promiscuous mode [ 1753.188646][T25602] syzkaller0: entered allmulticast mode [ 1757.116001][T25637] syzkaller0: entered promiscuous mode [ 1757.145325][T25637] syzkaller0: entered allmulticast mode [ 1757.343136][T25650] syzkaller0: entered promiscuous mode [ 1757.358669][T25650] syzkaller0: entered allmulticast mode [ 1758.881063][T25677] syzkaller0: entered promiscuous mode [ 1758.887113][T25677] syzkaller0: entered allmulticast mode [ 1759.022307][T25679] syzkaller0: entered promiscuous mode [ 1759.049836][T25679] syzkaller0: entered allmulticast mode [ 1762.942475][T25745] syzkaller0: entered promiscuous mode [ 1762.968586][T25745] syzkaller0: entered allmulticast mode [ 1764.999281][T25775] syzkaller0: entered promiscuous mode [ 1765.004806][T25775] syzkaller0: entered allmulticast mode [ 1765.097361][T25775] tipc: Enabling of bearer rejected, failed to enable media [ 1765.178440][T25780] syzkaller0: entered promiscuous mode [ 1765.184058][T25780] syzkaller0: entered allmulticast mode [ 1765.328898][T25784] syzkaller0: entered promiscuous mode [ 1765.334630][T25784] syzkaller0: entered allmulticast mode [ 1766.673774][T25814] syzkaller0: entered promiscuous mode [ 1766.680832][T25814] syzkaller0: entered allmulticast mode [ 1766.740491][T25814] tipc: Enabling of bearer rejected, failed to enable media [ 1766.846375][T25819] syzkaller0: entered promiscuous mode [ 1766.852022][T25819] syzkaller0: entered allmulticast mode [ 1766.893748][T25821] syzkaller0: entered promiscuous mode [ 1766.904220][T25821] syzkaller0: entered allmulticast mode [ 1767.294585][T25825] syzkaller0: entered promiscuous mode [ 1767.300219][T25825] syzkaller0: entered allmulticast mode [ 1771.528814][T25831] tipc: Started in network mode [ 1771.533713][T25831] tipc: Node identity e2138edf4748, cluster identity 4711 [ 1771.541764][T25831] tipc: Enabled bearer , priority 0 [ 1771.557448][T25836] syzkaller0: entered promiscuous mode [ 1771.564205][T25836] syzkaller0: entered allmulticast mode [ 1771.632241][T25846] tipc: Resetting bearer [ 1771.655975][T25850] netlink: 'syz.0.5903': attribute type 12 has an invalid length. [ 1771.666379][T25830] tipc: Resetting bearer [ 1771.713236][T25830] tipc: Disabling bearer [ 1771.824661][T25859] syzkaller0: entered promiscuous mode [ 1771.851777][T25859] syzkaller0: entered allmulticast mode [ 1771.889563][T25858] syzkaller0: entered promiscuous mode [ 1771.905837][T25858] syzkaller0: entered allmulticast mode [ 1772.257550][T25877] syzkaller0: entered promiscuous mode [ 1772.269022][T25877] syzkaller0: entered allmulticast mode [ 1772.281812][T25881] netlink: 'syz.0.5914': attribute type 12 has an invalid length. [ 1775.590747][T25886] tipc: Enabling of bearer rejected, failed to enable media [ 1775.605765][T25908] syzkaller0: entered promiscuous mode [ 1775.611292][T25908] syzkaller0: entered allmulticast mode [ 1775.687835][T25922] syzkaller0: entered promiscuous mode [ 1775.693436][T25922] syzkaller0: entered allmulticast mode [ 1778.037150][T25944] syzkaller0: entered promiscuous mode [ 1778.386648][T25944] syzkaller0: entered allmulticast mode [ 1781.521760][T25951] netlink: 'syz.0.5928': attribute type 12 has an invalid length. [ 1781.566550][T25958] tipc: Enabling of bearer rejected, failed to enable media [ 1781.886360][T26000] syzkaller0: entered promiscuous mode [ 1781.910247][T26000] syzkaller0: entered allmulticast mode [ 1782.071037][T26011] netlink: 'syz.2.5940': attribute type 12 has an invalid length. [ 1782.105817][T26010] syzkaller0: entered promiscuous mode [ 1782.111329][T26010] syzkaller0: entered allmulticast mode [ 1785.934669][T26018] tipc: Enabling of bearer rejected, failed to enable media [ 1787.944751][T26097] syzkaller0: entered promiscuous mode [ 1787.952213][T26097] syzkaller0: entered allmulticast mode [ 1787.980734][T26103] tipc: Enabled bearer , priority 0 [ 1790.950645][T26103] syzkaller0: entered promiscuous mode [ 1790.956595][T26103] syzkaller0: entered allmulticast mode [ 1790.964519][T26105] syzkaller0: entered promiscuous mode [ 1790.970159][T26105] syzkaller0: entered allmulticast mode [ 1791.005882][T26110] tipc: Resetting bearer [ 1791.053375][T26102] tipc: Resetting bearer [ 1791.117838][T26102] tipc: Disabling bearer [ 1791.146699][ T5840] tipc: Node number set to 2227174456 [ 1791.158763][T26128] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5965'. [ 1792.258262][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 1792.264609][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 1792.905694][T26155] syz_tun: entered allmulticast mode [ 1792.912807][T26154] syz_tun: left allmulticast mode [ 1792.971756][T26157] syzkaller0: entered promiscuous mode [ 1792.979785][T26157] syzkaller0: entered allmulticast mode [ 1796.140399][T26168] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5975'. [ 1796.192005][T26180] tipc: Enabling of bearer rejected, failed to enable media [ 1796.844266][ T27] audit: type=1326 audit(1774336913.207:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26197 comm="syz.1.5978" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8f05f9c799 code=0x0 [ 1797.433015][T26229] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5986'. [ 1797.510705][T26231] syzkaller0: entered promiscuous mode [ 1797.516602][T26231] syzkaller0: entered allmulticast mode [ 1800.585335][T26238] syzkaller0: entered promiscuous mode [ 1800.590966][T26238] syzkaller0: entered allmulticast mode [ 1800.600297][T26241] tipc: Enabling of bearer rejected, failed to enable media [ 1800.947631][T26268] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5996'. [ 1801.558826][T26287] syzkaller0: entered promiscuous mode [ 1801.564506][T26287] syzkaller0: entered allmulticast mode [ 1801.750293][T26293] tipc: Enabled bearer , priority 0 [ 1801.763207][T26293] syzkaller0: entered promiscuous mode [ 1801.771895][T26293] syzkaller0: entered allmulticast mode [ 1801.862261][T26297] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6007'. [ 1801.890347][T26293] tipc: Resetting bearer [ 1801.918438][T26291] tipc: Resetting bearer [ 1801.981066][T26291] tipc: Disabling bearer [ 1802.601059][T26312] 9pnet_virtio: no channels available for device syz [ 1804.013716][T26323] syzkaller0: entered promiscuous mode [ 1804.034383][T26323] syzkaller0: entered allmulticast mode [ 1804.688064][T26334] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6018'. [ 1805.426917][T26362] syzkaller0: entered promiscuous mode [ 1805.451671][T26362] syzkaller0: entered allmulticast mode [ 1807.036892][T26357] 9pnet_virtio: no channels available for device syz [ 1807.272860][ T49] tipc: Left network mode [ 1807.742751][T26378] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6031'. [ 1809.242781][T26406] syzkaller0: entered promiscuous mode [ 1809.251477][T26406] syzkaller0: entered allmulticast mode [ 1809.474641][T26419] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6044'. [ 1809.581270][ T23] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 1810.162741][ T49] hsr_slave_0: left promiscuous mode [ 1810.179318][ T49] hsr_slave_1: left promiscuous mode [ 1810.187031][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1810.195029][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1810.211448][ T49] bridge_slave_1: left allmulticast mode [ 1810.222369][ T49] bridge_slave_1: left promiscuous mode [ 1810.239620][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 1810.253053][ T49] bridge_slave_0: left allmulticast mode [ 1810.264237][ T49] bridge_slave_0: left promiscuous mode [ 1810.272785][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 1811.038411][ T23] usb 3-1: config index 0 descriptor too short (expected 39, got 27) [ 1811.073968][ T23] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1811.175269][ T23] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1811.273396][ T23] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1811.290550][ T23] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1811.299377][ T23] usb 3-1: Product: syz [ 1811.303571][ T23] usb 3-1: Manufacturer: syz [ 1811.308608][ T23] usb 3-1: SerialNumber: syz [ 1811.316881][ T23] usb 3-1: config 0 descriptor?? [ 1811.327099][ T23] hub 3-1:0.0: bad descriptor, ignoring hub [ 1811.335963][ T23] hub: probe of 3-1:0.0 failed with error -5 [ 1811.351974][ T23] usb 3-1: selecting invalid altsetting 0 [ 1814.325880][ T5839] usb 3-1: USB disconnect, device number 9 [ 1814.951936][ T49] team0 (unregistering): Port device team_slave_1 removed [ 1815.023767][ T49] team0 (unregistering): Port device team_slave_0 removed [ 1815.087201][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1815.158491][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1815.645928][ T49] bond0 (unregistering): Released all slaves [ 1815.766977][T26447] syzkaller0: entered promiscuous mode [ 1815.772491][T26447] syzkaller0: entered allmulticast mode [ 1815.794509][T26470] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6055'. [ 1817.675388][ T23] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 1817.910662][ T23] usb 2-1: config index 0 descriptor too short (expected 39, got 27) [ 1817.925918][ T23] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1817.942166][ T23] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1817.955801][ T23] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1817.965784][ T23] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1817.973981][ T23] usb 2-1: Product: syz [ 1817.984171][ T23] usb 2-1: Manufacturer: syz [ 1817.989210][ T23] usb 2-1: SerialNumber: syz [ 1818.000460][ T23] usb 2-1: config 0 descriptor?? [ 1818.026333][ T23] hub 2-1:0.0: bad descriptor, ignoring hub [ 1818.036088][ T23] hub: probe of 2-1:0.0 failed with error -5 [ 1818.046039][ T23] usb 2-1: selecting invalid altsetting 0 [ 1820.848465][T15083] usb 2-1: USB disconnect, device number 23 [ 1821.490513][T26516] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6064'. [ 1824.535961][ T49] IPVS: stop unused estimator thread 0... [ 1825.202935][T26549] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6076'. [ 1825.646991][T26566] 9pnet_virtio: no channels available for device syz [ 1826.916368][T26568] netlink: set zone limit has 8 unknown bytes [ 1827.216041][T26568] netlink: del zone limit has 8 unknown bytes [ 1828.150032][T26584] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6087'. [ 1829.123195][T26611] netlink: set zone limit has 8 unknown bytes [ 1831.981334][T26667] netlink: set zone limit has 8 unknown bytes [ 1833.959700][T26689] sit1: entered allmulticast mode [ 1835.305688][T26716] netlink: set zone limit has 8 unknown bytes [ 1836.137033][T26719] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6136'. [ 1840.966651][T26860] netlink: set zone limit has 8 unknown bytes [ 1843.164109][T26902] syzkaller0: entered promiscuous mode [ 1843.172083][T26902] syzkaller0: entered allmulticast mode [ 1843.834597][T26928] netlink: set zone limit has 8 unknown bytes [ 1844.841144][T26937] syzkaller0: entered promiscuous mode [ 1844.863508][T26937] syzkaller0: entered allmulticast mode [ 1845.092390][ T5775] Bluetooth: hci0: command 0x0406 tx timeout [ 1845.809340][T26958] netlink: 76 bytes leftover after parsing attributes in process `syz.2.6219'. [ 1845.944349][T26964] syzkaller0: entered promiscuous mode [ 1845.951349][T26964] syzkaller0: entered allmulticast mode [ 1845.957553][ T23] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 1846.168446][ T23] usb 2-1: config index 0 descriptor too short (expected 39, got 27) [ 1846.205399][ T23] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1846.227609][ T23] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1846.247148][ T23] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1846.266872][ T23] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1846.275052][ T23] usb 2-1: Product: syz [ 1846.285520][ T23] usb 2-1: Manufacturer: syz [ 1846.290783][ T23] usb 2-1: SerialNumber: syz [ 1846.307127][ T23] usb 2-1: config 0 descriptor?? [ 1846.316440][ T23] hub 2-1:0.0: bad descriptor, ignoring hub [ 1846.322362][ T23] hub: probe of 2-1:0.0 failed with error -5 [ 1846.332711][ T23] usb 2-1: selecting invalid altsetting 0 [ 1849.213774][T26990] netlink: set zone limit has 8 unknown bytes [ 1850.057496][T27000] syzkaller0: entered promiscuous mode [ 1850.063008][T27000] syzkaller0: entered allmulticast mode [ 1850.400142][T27010] netlink: 76 bytes leftover after parsing attributes in process `syz.2.6235'. [ 1850.646841][ T5840] usb 2-1: USB disconnect, device number 24 [ 1851.361051][T27035] syzkaller0: entered promiscuous mode [ 1851.366708][T27035] syzkaller0: entered allmulticast mode [ 1851.405270][ T5840] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 1852.639288][ T5840] usb 1-1: config index 0 descriptor too short (expected 39, got 27) [ 1852.647537][ T5840] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1852.657750][ T5840] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1852.668386][ T5840] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1853.612210][T27049] netlink: set zone limit has 8 unknown bytes [ 1853.625455][T27049] netlink: del zone limit has 8 unknown bytes [ 1853.642708][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 1853.646113][ T5840] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1853.651907][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 1854.089075][T27056] netlink: 76 bytes leftover after parsing attributes in process `syz.1.6250'. [ 1854.636490][ T5840] usb 1-1: Product: syz [ 1854.640700][ T5840] usb 1-1: Manufacturer: syz [ 1854.645386][ T5840] usb 1-1: SerialNumber: syz [ 1854.652313][ T5840] usb 1-1: config 0 descriptor?? [ 1854.657936][ T5840] usb 1-1: can't set config #0, error -71 [ 1854.665528][ T5840] usb 1-1: USB disconnect, device number 31 [ 1855.068422][T27066] syzkaller0: entered promiscuous mode [ 1855.102119][T27066] syzkaller0: entered allmulticast mode [ 1856.512083][T27092] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6262'. [ 1857.185336][T17571] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 1857.381160][T17571] usb 1-1: config index 0 descriptor too short (expected 39, got 27) [ 1857.409801][T17571] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1857.431253][T17571] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1857.440698][T17571] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1857.455259][T17571] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1857.463444][T17571] usb 1-1: Product: syz [ 1857.473749][T17571] usb 1-1: Manufacturer: syz [ 1857.478481][T17571] usb 1-1: SerialNumber: syz [ 1857.495295][T17571] usb 1-1: config 0 descriptor?? [ 1857.502544][T17571] hub 1-1:0.0: bad descriptor, ignoring hub [ 1857.517333][T17571] hub: probe of 1-1:0.0 failed with error -5 [ 1857.536304][T17571] usb 1-1: selecting invalid altsetting 0 [ 1857.816031][T27112] syzkaller0: entered promiscuous mode [ 1857.821724][T27112] syzkaller0: entered allmulticast mode [ 1858.002420][T27115] netlink: set zone limit has 8 unknown bytes [ 1858.014907][T27115] netlink: del zone limit has 8 unknown bytes [ 1859.225834][ T5839] usb 1-1: USB disconnect, device number 32 [ 1861.378313][T27144] syzkaller0: entered promiscuous mode [ 1861.397146][T27144] syzkaller0: entered allmulticast mode [ 1861.962002][T27163] netlink: set zone limit has 8 unknown bytes [ 1861.974409][T27163] netlink: del zone limit has 8 unknown bytes [ 1862.195666][ T23] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 1862.466560][ T23] usb 5-1: config index 0 descriptor too short (expected 39, got 27) [ 1862.570926][ T23] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1862.591034][ T23] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1862.600638][ T23] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1862.616943][ T23] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1862.630188][ T23] usb 5-1: Product: syz [ 1862.634366][ T23] usb 5-1: Manufacturer: syz [ 1862.641803][ T23] usb 5-1: SerialNumber: syz [ 1862.652997][ T23] usb 5-1: config 0 descriptor?? [ 1862.687104][ T23] hub 5-1:0.0: bad descriptor, ignoring hub [ 1862.708688][ T23] hub: probe of 5-1:0.0 failed with error -5 [ 1862.733717][ T23] usb 5-1: selecting invalid altsetting 0 [ 1865.849169][ T5840] usb 5-1: USB disconnect, device number 12 [ 1866.233785][T27187] syzkaller0: entered promiscuous mode [ 1866.255770][T27187] syzkaller0: entered allmulticast mode [ 1868.115376][T17571] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 1868.329590][T17571] usb 5-1: config index 0 descriptor too short (expected 39, got 27) [ 1868.353439][T17571] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1868.389577][T17571] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1868.420122][T17571] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1868.445111][T17571] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1868.481633][T17571] usb 5-1: Product: syz [ 1868.499818][T17571] usb 5-1: Manufacturer: syz [ 1868.525728][T17571] usb 5-1: SerialNumber: syz [ 1868.537959][T17571] usb 5-1: config 0 descriptor?? [ 1868.565460][T17571] hub 5-1:0.0: bad descriptor, ignoring hub [ 1868.572207][T17571] hub: probe of 5-1:0.0 failed with error -5 [ 1868.614020][T27201] netlink: del zone limit has 8 unknown bytes [ 1868.617781][T17571] usb 5-1: selecting invalid altsetting 0 [ 1871.525636][ T787] usb 5-1: USB disconnect, device number 13 [ 1871.598783][T27235] syzkaller0: entered promiscuous mode [ 1871.604298][T27235] syzkaller0: entered allmulticast mode [ 1871.868271][T27241] syzkaller0: entered promiscuous mode [ 1871.873930][T27241] syzkaller0: entered allmulticast mode [ 1875.345276][T15083] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 1875.389223][T27268] 9pnet_virtio: no channels available for device syz [ 1875.433409][T27270] syzkaller0: entered promiscuous mode [ 1875.450246][T27270] syzkaller0: entered allmulticast mode [ 1875.554564][T15083] usb 1-1: config index 0 descriptor too short (expected 39, got 27) [ 1875.581806][T15083] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1875.605365][T15083] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1875.622122][T15083] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1875.632471][T15083] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1875.641037][T15083] usb 1-1: Product: syz [ 1875.645553][T15083] usb 1-1: Manufacturer: syz [ 1875.650242][T15083] usb 1-1: SerialNumber: syz [ 1875.657858][T15083] usb 1-1: config 0 descriptor?? [ 1875.676931][T15083] hub 1-1:0.0: bad descriptor, ignoring hub [ 1875.693685][T15083] hub: probe of 1-1:0.0 failed with error -5 [ 1875.701978][T15083] usb 1-1: selecting invalid altsetting 0 [ 1876.126610][T27283] syzkaller0: entered promiscuous mode [ 1877.968629][T27283] syzkaller0: entered allmulticast mode [ 1879.816655][T27300] netlink: del zone limit has 8 unknown bytes [ 1880.925655][T17571] usb 1-1: USB disconnect, device number 33 [ 1881.692244][T27307] o2cb: This node has not been configured. [ 1881.698280][T27307] o2cb: Cluster check failed. Fix errors before retrying. [ 1881.705641][T27307] (syz.4.6322,27307,1):user_dlm_register:674 ERROR: status = -22 [ 1881.713418][T27307] (syz.4.6322,27307,1):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "file0" [ 1883.354471][T27315] syzkaller0: entered promiscuous mode [ 1883.364255][T27315] syzkaller0: entered allmulticast mode [ 1883.805098][T27327] syzkaller0: entered promiscuous mode [ 1883.812066][T27327] syzkaller0: entered allmulticast mode [ 1885.766207][T27344] syzkaller0: entered promiscuous mode [ 1885.808607][T27344] syzkaller0: entered allmulticast mode [ 1886.674349][T27354] syzkaller0: entered promiscuous mode [ 1886.680019][T27354] syzkaller0: entered allmulticast mode [ 1888.955385][T27376] netlink: set zone limit has 8 unknown bytes [ 1890.463988][T27381] syzkaller0: entered promiscuous mode [ 1890.473810][T27381] syzkaller0: entered allmulticast mode [ 1892.514896][T27405] vlan2: entered allmulticast mode [ 1892.547353][T27405] bond0: entered allmulticast mode [ 1892.552516][T27405] bond_slave_0: entered allmulticast mode [ 1892.615354][T27405] bond_slave_1: entered allmulticast mode [ 1892.633953][T27400] netlink: 14 bytes leftover after parsing attributes in process `syz.1.6353'. [ 1892.891130][T27400] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1893.098160][T27400] bond_slave_0: left allmulticast mode [ 1893.351570][T27400] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1893.537777][T27400] bond_slave_1: left allmulticast mode [ 1893.577469][T27400] bond0 (unregistering): Released all slaves [ 1893.818590][T27419] syzkaller0: entered promiscuous mode [ 1893.864859][T27419] syzkaller0: entered allmulticast mode [ 1900.071899][ T27] audit: type=1326 audit(1774337016.437:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27477 comm="syz.4.6371" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff12099c799 code=0x0 [ 1902.203491][T27506] syzkaller0: entered promiscuous mode [ 1902.216079][T27506] syzkaller0: entered allmulticast mode [ 1902.497157][T27512] syzkaller0: entered promiscuous mode [ 1902.510689][T27512] syzkaller0: entered allmulticast mode [ 1903.277616][T27530] syzkaller0: entered promiscuous mode [ 1903.283134][T27530] syzkaller0: entered allmulticast mode [ 1904.262316][T27538] syzkaller0: entered promiscuous mode [ 1904.289536][T27538] syzkaller0: entered allmulticast mode [ 1904.397687][T27540] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 0 [ 1904.433376][T27544] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6392'. [ 1904.443878][T27544] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6392'. [ 1904.484598][T27544] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6392'. [ 1904.518291][T27544] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6392'. [ 1906.572349][T27563] syzkaller0: entered promiscuous mode [ 1906.595435][T27563] syzkaller0: entered allmulticast mode [ 1906.892765][T27572] syzkaller0: entered promiscuous mode [ 1906.902161][T27572] syzkaller0: entered allmulticast mode [ 1909.283588][T27592] syzkaller0: entered promiscuous mode [ 1909.289261][T27592] syzkaller0: entered allmulticast mode [ 1909.545786][T27603] syzkaller0: entered promiscuous mode [ 1909.558443][T27603] syzkaller0: entered allmulticast mode [ 1909.585369][T15083] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 1909.817469][T15083] usb 2-1: config index 0 descriptor too short (expected 39, got 27) [ 1909.834478][T15083] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1909.846225][T15083] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1909.856097][T15083] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1909.868055][T15083] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1909.879499][T15083] usb 2-1: Product: syz [ 1909.884437][T15083] usb 2-1: Manufacturer: syz [ 1909.889792][T15083] usb 2-1: SerialNumber: syz [ 1909.900278][T15083] usb 2-1: config 0 descriptor?? [ 1909.927340][T15083] hub 2-1:0.0: bad descriptor, ignoring hub [ 1909.956476][T15083] hub: probe of 2-1:0.0 failed with error -5 [ 1909.978997][T15083] usb 2-1: selecting invalid altsetting 0 [ 1912.847051][T15083] usb 2-1: USB disconnect, device number 25 [ 1912.944697][T27652] 9pnet_virtio: no channels available for device syz [ 1914.437225][T27670] syzkaller0: entered promiscuous mode [ 1914.460758][T27670] syzkaller0: entered allmulticast mode [ 1914.675818][ T5775] Bluetooth: hci0: command 0x0406 tx timeout [ 1914.682599][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 1914.690397][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 1914.705574][T27676] wg1 speed is unknown, defaulting to 1000 [ 1915.565405][T27676] wg1 speed is unknown, defaulting to 1000 [ 1915.632758][T27676] wg1 speed is unknown, defaulting to 1000 [ 1915.678093][T27676] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 1915.804043][T27676] wg1 speed is unknown, defaulting to 1000 [ 1915.831373][T27676] wg1 speed is unknown, defaulting to 1000 [ 1915.844052][T27676] wg1 speed is unknown, defaulting to 1000 [ 1915.852958][T27676] wg1 speed is unknown, defaulting to 1000 [ 1915.860846][T27676] wg1 speed is unknown, defaulting to 1000 [ 1915.890527][T27676] wg1 speed is unknown, defaulting to 1000 [ 1917.502553][T27708] syzkaller0: entered promiscuous mode [ 1917.514985][T27708] syzkaller0: entered allmulticast mode [ 1917.544478][T27706] syzkaller0: entered promiscuous mode [ 1917.575343][T27706] syzkaller0: entered allmulticast mode [ 1919.659524][T27734] syzkaller0: entered promiscuous mode [ 1919.680867][T27734] syzkaller0: entered allmulticast mode [ 1921.119838][T27754] wg1 speed is unknown, defaulting to 1000 [ 1922.466937][T15083] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 1922.675267][T27764] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6467'. [ 1923.288066][T15083] usb 5-1: config index 0 descriptor too short (expected 39, got 27) [ 1923.309385][T15083] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1923.335286][T15083] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1923.358151][T15083] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1923.389803][T15083] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1923.428157][T15083] usb 5-1: Product: syz [ 1923.454759][T15083] usb 5-1: Manufacturer: syz [ 1923.471903][T15083] usb 5-1: SerialNumber: syz [ 1923.519659][T15083] usb 5-1: config 0 descriptor?? [ 1923.536957][T15083] hub 5-1:0.0: bad descriptor, ignoring hub [ 1923.542895][T15083] hub: probe of 5-1:0.0 failed with error -5 [ 1923.584366][T15083] usb 5-1: selecting invalid altsetting 0 [ 1923.732210][T15083] usb 5-1: USB disconnect, device number 14 [ 1923.810690][T27617] udevd[27617]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1925.012063][T27795] mac80211_hwsim hwsim25 wlan1: entered allmulticast mode [ 1925.228495][T27802] bridge_slave_0: left allmulticast mode [ 1925.285008][T27802] bridge_slave_0: left promiscuous mode [ 1925.506187][T27802] bridge0: port 1(bridge_slave_0) entered disabled state [ 1925.528282][T27802] bridge_slave_1: left allmulticast mode [ 1925.533960][T27802] bridge_slave_1: left promiscuous mode [ 1926.674641][T27802] bridge0: port 2(bridge_slave_1) entered disabled state [ 1926.792177][T27802] bond0: (slave bond_slave_0): Releasing backup interface [ 1926.851729][T27802] bond0: (slave bond_slave_1): Releasing backup interface [ 1926.966575][T27802] team0: Port device team_slave_0 removed [ 1927.008514][T27802] team0: Port device team_slave_1 removed [ 1927.014801][T27802] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1927.022663][T27802] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1927.067181][T27802] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1927.091617][T27802] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1927.241261][T27795] netlink: 'syz.2.6478': attribute type 10 has an invalid length. [ 1927.262280][T27795] mac80211_hwsim hwsim25 wlan1: left allmulticast mode [ 1927.304875][T27795] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 1927.602576][T27806] syzkaller0: entered promiscuous mode [ 1927.611167][T27806] syzkaller0: entered allmulticast mode [ 1927.815455][T14330] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 1927.945796][T27823] kvm: pic: non byte write [ 1928.008368][T14330] usb 3-1: config index 0 descriptor too short (expected 39, got 27) [ 1928.027396][T14330] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1928.054585][T14330] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1928.065373][T14330] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1928.084776][T14330] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1928.105005][T14330] usb 3-1: Product: syz [ 1928.116737][T14330] usb 3-1: Manufacturer: syz [ 1928.121414][T14330] usb 3-1: SerialNumber: syz [ 1928.140757][T14330] usb 3-1: config 0 descriptor?? [ 1928.174277][T14330] hub 3-1:0.0: bad descriptor, ignoring hub [ 1928.185846][T14330] hub: probe of 3-1:0.0 failed with error -5 [ 1928.204614][T14330] usb 3-1: selecting invalid altsetting 0 [ 1928.640912][T27845] syzkaller0: entered promiscuous mode [ 1928.654831][T27845] syzkaller0: entered allmulticast mode [ 1930.540149][T27853] wg1 speed is unknown, defaulting to 1000 [ 1931.225650][T15083] usb 3-1: USB disconnect, device number 10 [ 1933.155438][T17780] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 1933.377298][T17780] usb 1-1: config index 0 descriptor too short (expected 39, got 27) [ 1933.400730][T17780] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1933.431766][T17780] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1933.456195][T17780] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1933.475734][T17780] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1933.483931][T17780] usb 1-1: Product: syz [ 1933.498699][T17780] usb 1-1: Manufacturer: syz [ 1933.503620][T17780] usb 1-1: SerialNumber: syz [ 1933.526407][T17780] usb 1-1: config 0 descriptor?? [ 1933.566333][T17780] hub 1-1:0.0: bad descriptor, ignoring hub [ 1933.572336][T17780] hub: probe of 1-1:0.0 failed with error -5 [ 1933.608229][T17780] usb 1-1: selecting invalid altsetting 0 [ 1937.985618][ T5840] usb 1-1: USB disconnect, device number 34 [ 1939.925374][T27948] netlink: del zone limit has 8 unknown bytes [ 1942.866817][ T3427] ------------[ cut here ]------------ [ 1942.873114][ T3427] WARNING: CPU: 1 PID: 3427 at net/mac80211/chan.c:92 ieee80211_vif_use_reserved_switch+0x10e8/0x28f0 [ 1942.884320][ T3427] Modules linked in: [ 1942.888349][ T3427] CPU: 1 PID: 3427 Comm: kworker/u4:9 Not tainted syzkaller #0 [ 1942.896111][ T3427] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1942.906259][ T3427] Workqueue: phy25 ieee80211_csa_finalize_work [ 1942.912537][ T3427] RIP: 0010:ieee80211_vif_use_reserved_switch+0x10e8/0x28f0 [ 1942.920096][ T3427] Code: 48 89 df e8 fa 70 d7 f7 e9 dc fc ff ff e8 20 42 7f f7 eb 24 e8 19 42 7f f7 c7 04 24 f4 ff ff ff e9 e4 f5 ff ff e8 08 42 7f f7 <0f> 0b 0f 0b e9 cf f5 ff ff e8 fa 41 7f f7 48 8b 7c 24 08 4c 8b 7c [ 1942.939834][ T3427] RSP: 0018:ffffc9000d0f79c0 EFLAGS: 00010293 [ 1942.946546][ T3427] RAX: ffffffff8a07d65e RBX: 0000000000000001 RCX: ffff88802e205a00 [ 1942.954736][ T3427] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 1942.964203][ C1] ------------[ cut here ]------------ [ 1942.964242][ C1] WARNING: CPU: 1 PID: 3427 at net/mac80211/tx.c:5031 __ieee80211_beacon_get+0x1233/0x1600 [ 1942.964358][ C1] Modules linked in: [ 1942.964374][ C1] CPU: 1 PID: 3427 Comm: kworker/u4:9 Not tainted syzkaller #0 [ 1942.964395][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1942.964407][ C1] Workqueue: phy25 ieee80211_csa_finalize_work [ 1942.964434][ C1] RIP: 0010:__ieee80211_beacon_get+0x1233/0x1600 [ 1942.964461][ C1] Code: 24 4c 89 e7 e8 2e a7 c1 f7 45 31 f6 4c 8b bc 24 a0 00 00 00 e9 7a fe ff ff e8 09 ee 83 f7 0f 0b e9 f6 f7 ff ff e8 fd ed 83 f7 <0f> 0b e9 48 fb ff ff e8 f1 ed 83 f7 48 c7 c7 00 61 64 8e 4c 89 e6 [ 1942.964481][ C1] RSP: 0018:ffffc900001f0a18 EFLAGS: 00010246 [ 1942.964504][ C1] RAX: ffffffff8a032e63 RBX: ffffffff8a031c66 RCX: ffff88802e205a00 [ 1942.964523][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 1942.964538][ C1] RBP: 0000000000000000 R08: ffff88802e205a00 R09: 0000000000000003 [ 1942.964554][ C1] R10: 0000000000000007 R11: 0000000000000100 R12: ffff888065fd63c0 [ 1942.964568][ C1] R13: dffffc0000000000 R14: ffff888065fd68b0 R15: ffff88801eb2f024 [ 1942.964583][ C1] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 1942.964603][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1942.964618][ C1] CR2: 00007f56eea88e80 CR3: 000000000cf32000 CR4: 00000000003506e0 [ 1942.964639][ C1] Call Trace: [ 1942.964648][ C1] [ 1942.964661][ C1] ? __ieee80211_beacon_get+0x36/0x1600 [ 1942.964697][ C1] ieee80211_beacon_get_tim+0xbf/0x580 [ 1942.964729][ C1] ? ieee80211_beacon_get_template_ema_list+0x90/0x90 [ 1942.964768][ C1] mac80211_hwsim_beacon_tx+0x3c7/0x780 [ 1942.964835][ C1] __iterate_interfaces+0x243/0x500 [ 1942.964865][ C1] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 1942.964890][ C1] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 1942.964923][ C1] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 1942.964947][ C1] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 1942.964982][ C1] mac80211_hwsim_beacon+0xbb/0x1b0 [ 1942.965007][ C1] __hrtimer_run_queues+0x520/0xc40 [ 1942.965032][ C1] ? ktime_get_update_offsets_now+0x99/0x3f0 [ 1942.965065][ C1] ? hw_scan_work+0xf60/0xf60 [ 1942.965096][ C1] ? hrtimer_interrupt+0x9c0/0x9c0 [ 1942.965119][ C1] ? ktime_get_update_offsets_now+0x3d2/0x3f0 [ 1942.965154][ C1] hrtimer_run_softirq+0x187/0x2b0 [ 1942.965245][ C1] handle_softirqs+0x280/0x820 [ 1942.965289][ C1] ? __irq_exit_rcu+0xd3/0x190 [ 1942.965310][ C1] ? do_softirq+0x1a0/0x1a0 [ 1942.965332][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 1942.965361][ C1] __irq_exit_rcu+0xd3/0x190 [ 1942.965381][ C1] ? irq_exit_rcu+0x20/0x20 [ 1942.965408][ C1] irq_exit_rcu+0x9/0x20 [ 1942.965426][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 1942.965449][ C1] [ 1942.965457][ C1] [ 1942.965465][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1942.965490][ C1] RIP: 0010:console_flush_all+0x8b1/0xd20 [ 1942.965516][ C1] Code: ed 01 00 00 e8 f0 83 1b 00 4d 85 ff 48 8b 5c 24 38 75 07 e8 e1 83 1b 00 eb 06 e8 da 83 1b 00 fb 49 bf 00 00 00 00 00 fc ff df <48> 8b 44 24 58 42 0f b6 04 38 84 c0 0f 85 2f 02 00 00 80 3b 01 0f [ 1942.965533][ C1] RSP: 0018:ffffc9000d0f7340 EFLAGS: 00000293 [ 1942.965552][ C1] RAX: ffffffff816b9886 RBX: ffffc9000d0f74df RCX: ffff88802e205a00 [ 1942.965568][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1942.965581][ C1] RBP: ffffc9000d0f74b0 R08: ffffffff911c1507 R09: 1ffffffff22382a0 [ 1942.965596][ C1] R10: dffffc0000000000 R11: fffffbfff22382a1 R12: ffffffff8d8b8220 [ 1942.965614][ C1] R13: 1ffffffff19f96fc R14: ffffffff8d8b8278 R15: dffffc0000000000 [ 1942.965636][ C1] ? console_flush_all+0x8a6/0xd20 [ 1942.965670][ C1] ? console_flush_all+0x10a/0xd20 [ 1942.965707][ C1] ? is_console_locked+0x20/0x20 [ 1942.965732][ C1] ? lock_chain_count+0x20/0x20 [ 1942.965759][ C1] ? __down_trylock_console_sem+0xf6/0x1f0 [ 1942.965790][ C1] console_unlock+0xad/0x350 [ 1942.965818][ C1] ? other_cpu_in_panic+0xf0/0xf0 [ 1942.965844][ C1] ? __irq_work_queue_local+0x13a/0x3b0 [ 1942.965883][ C1] ? irq_work_queue+0xbc/0x140 [ 1942.965910][ C1] vprintk_emit+0x497/0x610 [ 1942.965939][ C1] ? printk_sprint+0x460/0x460 [ 1942.965962][ C1] ? _printk+0xde/0x130 [ 1942.965987][ C1] ? copy_from_kernel_nofault+0x1d2/0x310 [ 1942.966027][ C1] _printk+0xde/0x130 [ 1942.966052][ C1] ? ieee80211_vif_use_reserved_switch+0x10be/0x28f0 [ 1942.966082][ C1] ? load_image+0x400/0x400 [ 1942.966122][ C1] __show_regs+0x159/0x600 [ 1942.966148][ C1] ? dump_stack_print_info+0xf5/0x150 [ 1942.966182][ C1] show_regs+0x44/0x90 [ 1942.966224][ C1] __warn+0x160/0x470 [ 1942.966246][ C1] ? ieee80211_vif_use_reserved_switch+0x10e8/0x28f0 [ 1942.966274][ C1] ? ieee80211_vif_use_reserved_switch+0x10e8/0x28f0 [ 1942.966299][ C1] report_bug+0x2be/0x4f0 [ 1942.966319][ C1] ? ieee80211_vif_use_reserved_switch+0x10e8/0x28f0 [ 1942.966345][ C1] ? ieee80211_vif_use_reserved_switch+0x10e8/0x28f0 [ 1942.966370][ C1] ? ieee80211_vif_use_reserved_switch+0x10ea/0x28f0 [ 1942.966394][ C1] handle_bug+0xcf/0x120 [ 1942.966424][ C1] exc_invalid_op+0x1a/0x50 [ 1942.966454][ C1] asm_exc_invalid_op+0x1a/0x20 [ 1942.966476][ C1] RIP: 0010:ieee80211_vif_use_reserved_switch+0x10e8/0x28f0 [ 1942.966502][ C1] Code: 48 89 df e8 fa 70 d7 f7 e9 dc fc ff ff e8 20 42 7f f7 eb 24 e8 19 42 7f f7 c7 04 24 f4 ff ff ff e9 e4 f5 ff ff e8 08 42 7f f7 <0f> 0b 0f 0b e9 cf f5 ff ff e8 fa 41 7f f7 48 8b 7c 24 08 4c 8b 7c [ 1942.966520][ C1] RSP: 0018:ffffc9000d0f79c0 EFLAGS: 00010293 [ 1942.966542][ C1] RAX: ffffffff8a07d65e RBX: 0000000000000001 RCX: ffff88802e205a00 [ 1942.966559][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 1942.966571][ C1] RBP: dffffc0000000000 R08: ffff888065fd55af R09: 1ffff1100cbfaab5 [ 1942.966587][ C1] R10: dffffc0000000000 R11: ffffed100cbfaab6 R12: 0000000000000001 [ 1942.966602][ C1] R13: ffff888065fd65d9 R14: ffff888066502c70 R15: ffff888066502ce8 [ 1942.966626][ C1] ? ieee80211_vif_use_reserved_switch+0xcee/0x28f0 [ 1942.966672][ C1] ieee80211_link_use_reserved_context+0x383/0x5c0 [ 1942.966702][ C1] ieee80211_csa_finalize+0x5a6/0xf20 [ 1942.966727][ C1] ? mutex_lock_nested+0x20/0x20 [ 1942.966761][ C1] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 1942.966785][ C1] ? ieee80211_csa_finalize_work+0x140/0x140 [ 1942.966812][ C1] ? read_lock_is_recursive+0x20/0x20 [ 1942.966845][ C1] ieee80211_csa_finalize_work+0xf6/0x140 [ 1942.966872][ C1] ? process_scheduled_works+0x96f/0x15d0 [ 1942.966898][ C1] process_scheduled_works+0xa5d/0x15d0 [ 1942.966953][ C1] ? worker_attach_to_pool+0x380/0x380 [ 1942.966986][ C1] ? assign_work+0x3d2/0x5d0 [ 1942.967018][ C1] worker_thread+0xa55/0xfc0 [ 1942.967071][ C1] kthread+0x2fa/0x390 [ 1942.967091][ C1] ? pr_cont_work+0x560/0x560 [ 1942.967117][ C1] ? kthread_blkcg+0xd0/0xd0 [ 1942.967139][ C1] ret_from_fork+0x48/0x80 [ 1942.967170][ C1] ? kthread_blkcg+0xd0/0xd0 [ 1942.967192][ C1] ret_from_fork_asm+0x11/0x20 [ 1942.967244][ C1] [ 1942.967255][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1942.967265][ C1] CPU: 1 PID: 3427 Comm: kworker/u4:9 Not tainted syzkaller #0 [ 1942.967286][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1942.967298][ C1] Workqueue: phy25 ieee80211_csa_finalize_work [ 1942.967322][ C1] Call Trace: [ 1942.967329][ C1] [ 1942.967336][ C1] dump_stack_lvl+0x18c/0x250 [ 1942.967367][ C1] ? show_regs_print_info+0x20/0x20 [ 1942.967395][ C1] ? load_image+0x400/0x400 [ 1942.967432][ C1] panic+0x2dc/0x730 [ 1942.967457][ C1] ? bpf_jit_dump+0xd0/0xd0 [ 1942.967486][ C1] ? ret_from_fork_asm+0x11/0x20 [ 1942.967515][ C1] __warn+0x2e0/0x470 [ 1942.967532][ C1] ? __ieee80211_beacon_get+0x1233/0x1600 [ 1942.967555][ C1] ? __ieee80211_beacon_get+0x1233/0x1600 [ 1942.967576][ C1] report_bug+0x2be/0x4f0 [ 1942.967592][ C1] ? __ieee80211_beacon_get+0x1233/0x1600 [ 1942.967615][ C1] ? __ieee80211_beacon_get+0x1233/0x1600 [ 1942.967638][ C1] ? __ieee80211_beacon_get+0x1235/0x1600 [ 1942.967662][ C1] handle_bug+0xcf/0x120 [ 1942.967690][ C1] exc_invalid_op+0x1a/0x50 [ 1942.967714][ C1] asm_exc_invalid_op+0x1a/0x20 [ 1942.967732][ C1] RIP: 0010:__ieee80211_beacon_get+0x1233/0x1600 [ 1942.967755][ C1] Code: 24 4c 89 e7 e8 2e a7 c1 f7 45 31 f6 4c 8b bc 24 a0 00 00 00 e9 7a fe ff ff e8 09 ee 83 f7 0f 0b e9 f6 f7 ff ff e8 fd ed 83 f7 <0f> 0b e9 48 fb ff ff e8 f1 ed 83 f7 48 c7 c7 00 61 64 8e 4c 89 e6 [ 1942.967769][ C1] RSP: 0018:ffffc900001f0a18 EFLAGS: 00010246 [ 1942.967785][ C1] RAX: ffffffff8a032e63 RBX: ffffffff8a031c66 RCX: ffff88802e205a00 [ 1942.967800][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 1942.967813][ C1] RBP: 0000000000000000 R08: ffff88802e205a00 R09: 0000000000000003 [ 1942.967826][ C1] R10: 0000000000000007 R11: 0000000000000100 R12: ffff888065fd63c0 [ 1942.967839][ C1] R13: dffffc0000000000 R14: ffff888065fd68b0 R15: ffff88801eb2f024 [ 1942.967858][ C1] ? __ieee80211_beacon_get+0x36/0x1600 [ 1942.967883][ C1] ? __ieee80211_beacon_get+0x1233/0x1600 [ 1942.967908][ C1] ? __ieee80211_beacon_get+0x1233/0x1600 [ 1942.967933][ C1] ? __ieee80211_beacon_get+0x36/0x1600 [ 1942.967963][ C1] ieee80211_beacon_get_tim+0xbf/0x580 [ 1942.967992][ C1] ? ieee80211_beacon_get_template_ema_list+0x90/0x90 [ 1942.968027][ C1] mac80211_hwsim_beacon_tx+0x3c7/0x780 [ 1942.968058][ C1] __iterate_interfaces+0x243/0x500 [ 1942.968085][ C1] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 1942.968108][ C1] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 1942.968137][ C1] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 1942.968160][ C1] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 1942.968194][ C1] mac80211_hwsim_beacon+0xbb/0x1b0 [ 1942.968224][ C1] __hrtimer_run_queues+0x520/0xc40 [ 1942.968247][ C1] ? ktime_get_update_offsets_now+0x99/0x3f0 [ 1942.968278][ C1] ? hw_scan_work+0xf60/0xf60 [ 1942.968306][ C1] ? hrtimer_interrupt+0x9c0/0x9c0 [ 1942.968326][ C1] ? ktime_get_update_offsets_now+0x3d2/0x3f0 [ 1942.968356][ C1] hrtimer_run_softirq+0x187/0x2b0 [ 1942.968381][ C1] handle_softirqs+0x280/0x820 [ 1942.968402][ C1] ? __irq_exit_rcu+0xd3/0x190 [ 1942.968427][ C1] ? do_softirq+0x1a0/0x1a0 [ 1942.968451][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 1942.968479][ C1] __irq_exit_rcu+0xd3/0x190 [ 1942.968499][ C1] ? irq_exit_rcu+0x20/0x20 [ 1942.968526][ C1] irq_exit_rcu+0x9/0x20 [ 1942.968543][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 1942.968565][ C1] [ 1942.968571][ C1] [ 1942.968579][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1942.968601][ C1] RIP: 0010:console_flush_all+0x8b1/0xd20 [ 1942.968626][ C1] Code: ed 01 00 00 e8 f0 83 1b 00 4d 85 ff 48 8b 5c 24 38 75 07 e8 e1 83 1b 00 eb 06 e8 da 83 1b 00 fb 49 bf 00 00 00 00 00 fc ff df <48> 8b 44 24 58 42 0f b6 04 38 84 c0 0f 85 2f 02 00 00 80 3b 01 0f [ 1942.968642][ C1] RSP: 0018:ffffc9000d0f7340 EFLAGS: 00000293 [ 1942.968659][ C1] RAX: ffffffff816b9886 RBX: ffffc9000d0f74df RCX: ffff88802e205a00 [ 1942.968674][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1942.968687][ C1] RBP: ffffc9000d0f74b0 R08: ffffffff911c1507 R09: 1ffffffff22382a0 [ 1942.968701][ C1] R10: dffffc0000000000 R11: fffffbfff22382a1 R12: ffffffff8d8b8220 [ 1942.968716][ C1] R13: 1ffffffff19f96fc R14: ffffffff8d8b8278 R15: dffffc0000000000 [ 1942.968739][ C1] ? console_flush_all+0x8a6/0xd20 [ 1942.968773][ C1] ? console_flush_all+0x10a/0xd20 [ 1942.968807][ C1] ? is_console_locked+0x20/0x20 [ 1942.968830][ C1] ? lock_chain_count+0x20/0x20 [ 1942.968852][ C1] ? __down_trylock_console_sem+0xf6/0x1f0 [ 1942.968874][ C1] console_unlock+0xad/0x350 [ 1942.968889][ C1] ? other_cpu_in_panic+0xf0/0xf0 [ 1942.968901][ C1] ? __irq_work_queue_local+0x13a/0x3b0 [ 1942.968914][ C1] ? irq_work_queue+0xbc/0x140 [ 1942.968926][ C1] vprintk_emit+0x497/0x610 [ 1942.968939][ C1] ? printk_sprint+0x460/0x460 [ 1942.968953][ C1] ? _printk+0xde/0x130 [ 1942.968964][ C1] ? copy_from_kernel_nofault+0x1d2/0x310 [ 1942.968984][ C1] _printk+0xde/0x130 [ 1942.968995][ C1] ? ieee80211_vif_use_reserved_switch+0x10be/0x28f0 [ 1942.969009][ C1] ? load_image+0x400/0x400 [ 1942.969027][ C1] __show_regs+0x159/0x600 [ 1942.969039][ C1] ? dump_stack_print_info+0xf5/0x150 [ 1942.969054][ C1] show_regs+0x44/0x90 [ 1942.969066][ C1] __warn+0x160/0x470 [ 1942.969076][ C1] ? ieee80211_vif_use_reserved_switch+0x10e8/0x28f0 [ 1942.969088][ C1] ? ieee80211_vif_use_reserved_switch+0x10e8/0x28f0 [ 1942.969099][ C1] report_bug+0x2be/0x4f0 [ 1942.969108][ C1] ? ieee80211_vif_use_reserved_switch+0x10e8/0x28f0 [ 1942.969120][ C1] ? ieee80211_vif_use_reserved_switch+0x10e8/0x28f0 [ 1942.969131][ C1] ? ieee80211_vif_use_reserved_switch+0x10ea/0x28f0 [ 1942.969142][ C1] handle_bug+0xcf/0x120 [ 1942.969156][ C1] exc_invalid_op+0x1a/0x50 [ 1942.969170][ C1] asm_exc_invalid_op+0x1a/0x20 [ 1942.969180][ C1] RIP: 0010:ieee80211_vif_use_reserved_switch+0x10e8/0x28f0 [ 1942.969192][ C1] Code: 48 89 df e8 fa 70 d7 f7 e9 dc fc ff ff e8 20 42 7f f7 eb 24 e8 19 42 7f f7 c7 04 24 f4 ff ff ff e9 e4 f5 ff ff e8 08 42 7f f7 <0f> 0b 0f 0b e9 cf f5 ff ff e8 fa 41 7f f7 48 8b 7c 24 08 4c 8b 7c [ 1942.969207][ C1] RSP: 0018:ffffc9000d0f79c0 EFLAGS: 00010293 [ 1942.969215][ C1] RAX: ffffffff8a07d65e RBX: 0000000000000001 RCX: ffff88802e205a00 [ 1942.969222][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 1942.969228][ C1] RBP: dffffc0000000000 R08: ffff888065fd55af R09: 1ffff1100cbfaab5 [ 1942.969235][ C1] R10: dffffc0000000000 R11: ffffed100cbfaab6 R12: 0000000000000001 [ 1942.969242][ C1] R13: ffff888065fd65d9 R14: ffff888066502c70 R15: ffff888066502ce8 [ 1942.969253][ C1] ? ieee80211_vif_use_reserved_switch+0xcee/0x28f0 [ 1942.969274][ C1] ieee80211_link_use_reserved_context+0x383/0x5c0 [ 1942.969288][ C1] ieee80211_csa_finalize+0x5a6/0xf20 [ 1942.969301][ C1] ? mutex_lock_nested+0x20/0x20 [ 1942.969315][ C1] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 1942.969327][ C1] ? ieee80211_csa_finalize_work+0x140/0x140 [ 1942.969339][ C1] ? read_lock_is_recursive+0x20/0x20 [ 1942.969354][ C1] ieee80211_csa_finalize_work+0xf6/0x140 [ 1942.969366][ C1] ? process_scheduled_works+0x96f/0x15d0 [ 1942.969379][ C1] process_scheduled_works+0xa5d/0x15d0 [ 1942.969404][ C1] ? worker_attach_to_pool+0x380/0x380 [ 1942.969420][ C1] ? assign_work+0x3d2/0x5d0 [ 1942.969434][ C1] worker_thread+0xa55/0xfc0 [ 1942.969459][ C1] kthread+0x2fa/0x390 [ 1942.969468][ C1] ? pr_cont_work+0x560/0x560 [ 1942.969480][ C1] ? kthread_blkcg+0xd0/0xd0 [ 1942.969490][ C1] ret_from_fork+0x48/0x80 [ 1942.969501][ C1] ? kthread_blkcg+0xd0/0xd0 [ 1942.969510][ C1] ret_from_fork_asm+0x11/0x20 [ 1942.969530][ C1] [ 1942.969874][ C1] Kernel Offset: disabled