last executing test programs: 10.206000945s ago: executing program 4 (id=176): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="7000000010000304000080000000000000007400", @ANYRES32=r2, @ANYBLOB="0000000003120100500012800b0001006272696467650000400002800800050001000000060027"], 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x40) 8.619506053s ago: executing program 4 (id=178): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000000c0)=r3, 0x4) sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 7.063903316s ago: executing program 0 (id=182): r0 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') fchdir(r0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000001080)=""/79, 0x4f) getdents(r1, 0xfffffffffffffffd, 0x58) 6.97793931s ago: executing program 4 (id=183): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'gretap0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=@newlink={0x44, 0x10, 0x401, 0x20700, 0x2000000, {0x0, 0x0, 0x0, 0x0, 0x8003}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}, 0x1, 0x0, 0x0, 0x20004885}, 0x4054) 6.752021249s ago: executing program 0 (id=185): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x111, 0x2}}, 0x20) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r2, &(0x7f0000000100)={0x10, 0x30, 0xfa00, {0x0, 0x0, {0xa, 0x4e24, 0x7, @remote, 0x1}, r1}}, 0x38) 6.430282024s ago: executing program 2 (id=186): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r0, &(0x7f0000000040)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0102}}}, 0x14) connect$802154_dgram(r0, &(0x7f0000000240)={0x24, @short={0x2, 0xffff, 0xaaa0}}, 0x14) sendmmsg(r0, &(0x7f0000003640)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000080)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'jitterentropy_rng\x00'}, 0x80, 0x0}}], 0x2, 0x404c000) 6.39459148s ago: executing program 0 (id=187): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000cf8bed20d90f25004029000000010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000340)=ANY=[@ANYBLOB="071101"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603) ioctl$I2C_RDWR(r1, 0x707, &(0x7f00000000c0)={&(0x7f0000001a80)=[{0x1, 0x1800, 0x0, 0x0}, {0x6, 0x1811, 0x0, 0x0}, {0xdb8e, 0x4000, 0x0, 0x0}], 0x3}) 5.967119316s ago: executing program 2 (id=189): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x3, 0x8}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x40004}, 0x4000800) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r9 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) pidfd_send_signal(r9, 0x0, 0x0, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r10 = syz_clone3(&(0x7f0000000740)={0x8180080, 0x0, 0x0, 0x0, {0x39}, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[0xffffffffffffffff], 0x1}, 0x58) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000180)={0x48, 0xc, r1, 0x0, 0x0, 0x7fff}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000000)={0x28, 0x6, r1, 0x0, &(0x7f0000ffb000/0x4000)=nil, 0x4000}) socket$nl_netfilter(0x10, 0x3, 0xc) rseq(&(0x7f0000000680), 0x20, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x0, r10, 0x0, 0x0) 4.314241798s ago: executing program 4 (id=191): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x881, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_GET_MSRS_cpu(r2, 0xc008ae88, &(0x7f0000000080)={0x1, 0x0, [{0x199, 0x0, 0xb}]}) 3.972625913s ago: executing program 1 (id=193): r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x2, &(0x7f0000000040)=0x800080, 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f0000000180), 0x10) bind$can_raw(r0, &(0x7f0000000080)={0x1d, r1}, 0x10) 3.871441831s ago: executing program 2 (id=194): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080), 0x4) socket$packet(0x11, 0x2, 0x300) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7005}, 0x4) 3.524010839s ago: executing program 3 (id=195): set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r1, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) 3.50330068s ago: executing program 1 (id=196): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000002880)=@delchain={0x63c, 0x65, 0x400, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x8, 0x2}, {0x0, 0x1}, {0x5}}, [@filter_kind_options=@f_bpf={{0x8}, {0x504, 0x2, [@TCA_BPF_ACT={0x500, 0x1, [@m_xt={0x120, 0x5, 0x0, 0x0, {{0x7}, {0xc, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8}]}, {0xed, 0x6, "a5fd64840366fd7ad44f3f053221ded9ced495590e2bc8690a2765e56ded8425cb3eb0e04bbcfec50e639bf373167e617b24eccd260f28bb850873b1e2154b158987d6e585e10ffeaba32641bae47de041e1169d8e4a65b8ce3633a4469c93c5228320c572237d92a9ae6bbc2d2bd3a2d1e27de283017ecf9fca6b2cd8a119dee59702830717b694625f60f5c81f688775c5e292f76a0ffa39e1d2cabd639d1c111c01e0d2f9faa220154db33399242bca9f4fac65c74cb6264c28ac7a50037564c7b417fb61d617d212ab3243c30e0e82d9a12651b74553d539b991a302489af94626e5aac41c53b2"}, {0xc, 0x7, {0x1, 0xeb0757422c733451}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_simple={0xe8, 0xa, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x1, 0x9b6, 0x7, 0x4, 0x1b}}, @TCA_DEF_DATA={0xa, 0x3, '%{^):\x00'}]}, {0x95, 0x6, "f2687c5aa78339e616deb3f19827c994141f940d92a804637d54cb155e6be27b3c2ad1ec52a0a08ca0fb9f17a3ef6ce3652e6f0136028c9b46b33e74015138ea6ba9c60c29dd78378bb28567c803e2a63a94c5fba4bb4bb2adcab7d81ccda8c5f8e000b81344003a049b8353b716e0d9c0c6c5fbd0a6ac6532013f1ee7bfec23f8da74544263415dacc108fada4f83a23b"}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_bpf={0x120, 0x8, 0x0, 0x0, {{0x8}, {0x14, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x3}]}, {0xe5, 0x6, "5d3aee85a6264cff4a2163adaec321e008985cfa435b8922eeb16f1932265618158a3fe72c442a68b182e8f673f9251a03dc831c5947be17ca906c3dcb99adb55bc5f0ad8886f235f45d7e29bb727715f2e7a3200ac63eb79f7a023835874514b60b0177c40370157c0c21b37875e7e4a2e75b3cc54be7d719fa695469336b975cb56bf3667e66922c0cf263fb2e4901e74673ec3bf8e140cb438b8aae24d0722b0ea76c66d09a9ae2578f669067fc7f4e7e11e7d6206ac703d98c3cd3b5372b60c63437cedd6c47eeb235ad519ca418c057a0c2e2efdad1db459ffde7207d4b45"}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_mpls={0xb0, 0x1e, 0x0, 0x0, {{0x9}, {0x14, 0x2, 0x0, 0x1, [@TCA_MPLS_TTL={0x5, 0x7, 0x6}, @TCA_MPLS_TC={0x5, 0x6, 0x5}]}, {0x72, 0x6, "8e563244ca3ec2431c30bcb05c8234db6f030fd6857889c220d3c44e3808749099cc9b51ca20ef5fd86b967cc74b8a71a8955aad2efc049269ac09df9df10b329eddce02f49c3c64f50e34cb018efbc243dab7ed53822024bb422ec8760c4fc1822adcc12bfc7b908324ebfca76c"}, {0xc}, {0xc, 0x8, {0x5, 0x2}}}}, @m_connmark={0x124, 0x1c, 0x0, 0x0, {{0xd}, {0xac, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1ff, 0x5, 0x7, 0x1, 0x1e1c}, 0x5}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xd784, 0x7ff, 0x20000000, 0x9, 0x4}, 0x2}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x0, 0x4, 0x5, 0x8, 0x1}, 0x5}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x4, 0x772f, 0x20000000, 0x6, 0x6a}, 0x80}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x7, 0x2, 0xfffffffffffffff7, 0x9, 0x7}, 0x6}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1, 0x3ff, 0x0, 0xb, 0xd}, 0xf40f}}]}, {0x49, 0x6, "b243cf248ea5504cf7e5a67f45c10cd2a166afa2d80373ea83920403cb721db30d012aa4e92778532221b7b7d71aecab94a386e573c76fcd9950dd50dae93cd9061a328ed0"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0xb, 0x40}}, @filter_kind_options=@f_bpf={{0x8}, {0xfc, 0x2, [@TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_ACT={0xec, 0x1, [@m_simple={0x30, 0x1e, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1}}}}, @m_simple={0xb8, 0xb, 0x0, 0x0, {{0xb}, {0x60, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x6, 0x3, 0x1, 0x40}}, @TCA_DEF_PARMS={0x18, 0x2, {0x9, 0x8, 0x6, 0x3, 0xf}}, @TCA_DEF_PARMS={0x18, 0x2, {0x5, 0x1, 0x5, 0x37, 0x80000000}}, @TCA_DEF_DATA={0x8, 0x3, 'bpf\x00'}, @TCA_DEF_DATA={0xa, 0x3, '%{^):\x00'}]}, {0x2d, 0x6, "062ea3098d69d69fd1bc21cfe50b3caaf8681285490084099afa2f054fd0a4e2d05cc838ff7438c1cf"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}]}}]}, 0x63c}, 0x1, 0x0, 0x0, 0x2404c080}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 3.378962322s ago: executing program 4 (id=197): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000540)={0x48, 0x2, r1, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$TEST(r0, 0x3b89, &(0x7f0000000200)={0x28, 0x3, r2, r1, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000240)}) ioctl$IOMMU_HWPT_GET_DIRTY_BITMAP(r0, 0x3b8c, &(0x7f0000000040)={0x30, r3, 0x1, 0x0, 0x0, 0x0, 0x2b2, 0x0}) 3.312459664s ago: executing program 2 (id=198): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000008980)='loginuid\x00') r2 = fcntl$dupfd(r1, 0x406, r0) read$FUSE(r1, &(0x7f000000c640)={0x2020}, 0x2020) write$FUSE_INTERRUPT(r2, 0x0, 0x0) 3.271511139s ago: executing program 0 (id=199): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xc8000, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000340)={'nicvf0\x00', 0x2}) ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0xba98575a95aeb70d) ioctl$TUNSETLINK(r0, 0x400454cd, 0x1) 3.019944966s ago: executing program 3 (id=200): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001840)={0x38, r2, 0x5, 0x0, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5, 0x7, 0x1}, @NL80211_MESHCONF_SYNC_OFFSET_MAX_NEIGHBOR={0x8, 0x15, 0x1d}, @NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0x1}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x20004044}, 0x0) 2.933211108s ago: executing program 1 (id=201): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x3, 0x8}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000840)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {}, {0x2, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x40004}, 0x4000800) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r9 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) pidfd_send_signal(r9, 0x0, 0x0, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r10 = syz_clone3(0x0, 0x0) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000180)={0x48, 0xc, r1, 0x0, 0x0, 0x7fff}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000000)={0x28, 0x6, r1, 0x0, &(0x7f0000ffb000/0x4000)=nil, 0x4000}) socket$nl_netfilter(0x10, 0x3, 0xc) rseq(&(0x7f0000000680), 0x20, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x0, r10, 0x0, 0x0) 2.899903279s ago: executing program 2 (id=202): getpid() syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="120100008e88052086800095d89301020301090212000100000000090401"], 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603) ioctl$I2C_RDWR(r0, 0x707, &(0x7f00000000c0)={&(0x7f00000003c0)=[{0x1e, 0x0, 0x0, 0x0}], 0x1}) 2.737876247s ago: executing program 3 (id=203): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000000)=0x1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001a80)={0x4, 0x0, &(0x7f0000001900)=[@enter_looper], 0x1, 0x0, &(0x7f0000000040)="a1"}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 1.564226404s ago: executing program 0 (id=204): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x38, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x38}}, 0x0) 1.191958145s ago: executing program 1 (id=205): bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040), 0x6) ioctl$sock_bt_hci(r0, 0x400448e6, &(0x7f00000002c0)='|') ioctl$sock_bt_hci(r0, 0x400448e7, &(0x7f0000000080)) 944.931975ms ago: executing program 3 (id=206): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000600)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000002"], 0x110) setsockopt$inet_group_source_req(r0, 0x0, 0x2c, &(0x7f00000004c0)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x4e20, @empty}}}, 0x108) setsockopt$inet_group_source_req(r0, 0x0, 0x2c, &(0x7f00000007c0)={0x2, {{0x2, 0x4e24, @multicast2}}, {{0x2, 0x2, @empty}}}, 0x108) 840.978869ms ago: executing program 1 (id=207): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000640)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000680)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010025bd7000fedbdf251d00000008000300", @ANYRES32=r3, @ANYBLOB=',\x00/'], 0x48}, 0x1, 0x0, 0x0, 0x10801}, 0x8004) 661.598294ms ago: executing program 0 (id=208): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x6, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000f9ffff030000000000000000850000002c00000095"], &(0x7f0000000040)='GPL\x00', 0x5, 0xbf, &(0x7f00000020c0)=""/191}, 0x80) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r1, r2, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0xd41, &(0x7f00000042c0)={@local, @remote, @val={@void, {0x8100, 0x4, 0x0, 0x4}}, {@ipv4={0x800, @gre={{0x5, 0x4, 0x2, 0x5, 0xd2f, 0x67, 0x0, 0x2, 0x2f, 0x0, @multicast2, @remote}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x880b, 0x0, 0x1}, {}, {0x1, 0x0, 0x1}, {0x8, 0x88be, 0x0, {{0x8, 0x1, 0x3, 0x2, 0x0, 0x2, 0x2, 0x10}, 0x1, {0x7}}}, {0x8, 0x22eb, 0x4, {{0x1, 0x2, 0x3, 0x3, 0x1, 0x0, 0x4, 0xd}, 0x2, {0x3, 0x8000, 0x3, 0x1f, 0x1, 0x0, 0x0, 0x0, 0x1}}}, {0x8, 0x6558, 0x2, "69573b8bb1402c4f3157fcb631017c19b799b1d54be257422fcdbc881aba443b44111c7a793dc22a4b35705991723a04e2dd2c0fe332b695f361c6af49b800c360d5b28d1777ddad7b4cd2cfdd08c88aa0a23ccbe805f2d248242d2af2e339cafb71eeeeabdcd23fba210150beaa28004f0e5e2f7dafc421073339a4a13f19e018392daf0e06a9441ae2c1e147204b1155a86670b625a02f4aaaa0b0785d010bb4e283997e5f59510706bf6e1112b0553f01fe856c139391ed7a1af508043eb180d5f6f5a49d59af9366dd3c5e4d43bfeb6110925d8adb7ba220d7f3b1373da472c0c0e0185d4c9f04e59102bad134d810d0390637fab4dd799d536115a62b83d959b7115c95058d6df2574dd1e06d0ca638dcc48fdd000f677661e902cacdbb55f367fe195c33a4512e0c20385917e84c06b8ee506be06a2f3a4ec3e71b027c1bb35dc0b39ac886980e0c89e7b133951c1427edf11121b1fc8bf12046ed86c3e425250bac56d8e4c581bcd024cb73da140abf971b4748eab88318caed2657e846c4f6dc7dc15ef56866a08246f39aff7939c843349dbcfa66183d348f98637b65ef730738daa246a2f076a5874464b77690a6e806fce62b017768f15459db83ef7670908270b82991fade5ce0630af347da44171e0ea5dc60f28442549f223f4eacd83f9d13fe9cf5455ab120b537d4d3c1a883bdfab7f4a12627662f400ac172adb6fc0dd0f3591a55dd4c2bfe3bcb9bf8e040a8344d69994711557f46f82833e99351310baa9635db2a1477219fc38e62424d4171ff17a30eba5ab51a59cec768573aa0938ad405de888eba409706dfd664cf70bb842a939b3704ae6a569ded57a0d92e1d605309f9422322c2073e5c96fa71ed039908b28209d78a6906b7ec308538d5de72941f29dda93d282b3ac673d3da0e345751572f16e93a46b7fad52bc6dfba124b384739e71a3c5822041ea1ba5c0d2aacea6bd01b6888c10f6029647f52c4d93ba04c03c8279c7d5a2b914da5ed404691bf5dcb9e7f9cf943232c748a531dc852bfbf22d4cc639fb077e8b41c8f643d42494695f5d20e21c0ebb6575b26e3164cbffa60943879e09649c370332310a161e0d3344be55169b0bba092ed84de01e3e0d0778370a3c306e38a437cf0dc0d864db60dcedc4bb4c511834f425aaa8e1103fc3510752beaf26a9f006f8e355471047159409e35e6c4716096e7c0657548f11ceae808e41c77fcd6c91c2fb62e2dc7ca6ae245edf07d5d31c39414cd20a7ea37bfa24231a15253bea41fd6a3b649a1ce6eecc5c540a446ed23348775d6bbef6064b9fd9b6ddcd30ffd19b8f0dcc347c439592e08c31b072943ac67b3e60f726b27a14034fb9c236ae8fc9b9a0cc3f42464ceb64ef366a1ef882923af9e3cf925fd4de47336f9bd5cf4b7bef0d9c3b9d8fd566364c61b16665cbc546a0684e53abd3b7d1772d9367c5d3f6223c9424d376352e992546386c03300b593c8caf3dab1912b495b5df796e5a90c9283de43d255b9d70fc503549063821904dba97c9211beee92838999d32cd2ff556282b22a249c40b536ab641755fd7d5e28ae8b594ea56c9c70b25f6940d790f4b2dee2382e3f684fdd45aae6691b4d3a61c463a3f57f59668cb30cbf7411d686cd374bf9f219575c8b7019bb15dfbf6a2e8a4f8057fda7055c46841d51f3a442f9014e8b97696768f10bc92bafd647d6512fcc41065c7cf00f02779e24b59a6a4cefc2f475ff2ba93bb38954f020d27a0da1e21d010e0bde792d2c14c363385706ef93283ce7872b2a30cee823d471d03b110af2bf1893bb87ca39b721b8c97f16f1efb65525c33f27d2029bfbb0033c5e698f50ff8aee66ec80f5d3652041fb248727bf79312d258c7e896b2038c7d5e5429d65a7211c77c03ceb09acf2e7564725f01288e4cd0f526f40f02f53b516a1227d13bf5d15204c806fd54a780d1ec00981bfa534f6d54c2c53f257c5b592d793af59bc9ee22c55c1cfee625af85bc1ae7b7071d1cb0e2c9e375b02cfbc6497d13480096745414ef50f192aa31514db32fca8c1f5328dc9cda71b0512581a8bea1e3874a04e84dfeee19347df8d760318f936234b496c6e6c333b333883bb1237268196b730cdfb8e712d73c7c488c3af70510ac6d34b83c01b50484ad80f12f650f7e13983f507fe40cc02dbc54d9483d5434ced2057d68ff47d64886baf8f895d1657965abfdb4a3dea97964b10ff538df41eb5d8e2cc8d6f7dfd89cfdf371dad250c5ea4641e49db7e22df29a0989e1a9bbc0a86e393d6a347c5015ceeda2d5fad4d06fb3fe989eb9e2f92767e59ee59e066a8ef6a84d240a3d6ff0bd6e8b4e43350d07d523243c2389b635838711b65041394ada82faa5132717b5fd4053d418c2e60644e97c571632e02241ee649fb591c4a1d7bedb30d6517a7023dc2668c4a4e2d91a33f2937e8f396060bf86d234c78ddf02bc98ad44baf951aee3a66bbeeb67cb2d61f7b2ca84c09bf50f35d30189bee13bb3e1449870d3331f313132fc74eb2cc309208dd6d44ed8dd1106081e86149a27501d129efa249b1167c60c4dc9fc8de30594e2e1832fef3b89e517dd315823f9573649f2e0b691058b1e2718f022a945110f9a233e035e0d6cfcb46e90c9489ce95ed32fe5294b065b2a290dab34fc50eaecd8ec5008f8173e0cae3b5d311452312eb25e74e32ced5e8e83f596a550fdbea79a6a6c317fb305e10735d657ef50ad0bcafe37163393d7b0f810d262f0c6ee51bb3fe2558d2a7f9f54fca70fc70b7bed7b5a1b6e318c540645dbbb6326b6afb5d8857de24c5c3474425317f4403decf921b8eada828de9ea8c7dfeb5b0946ed987837a6a7f0dc9db6d62dc0818ade7557d72e77086d562127de3a80e13062b14d2e732a22480c2510bbf1bc804095fe3923e27f9d0719bc2f98f688afcd8163e26570cf30bfb52f7697e728e9354d9d8d896151b5ba05efc5d3148a46503b23e59213f5d0f2d40821347c56d67518112b49eb7db944f2cc1fc328238f8a91cdd5b934da17e244e888e6ddc8d3a69c9ea24af24d6c3f10fc3de03a4b2dd1206d50d6bc7d9a42ce2876dc5e0e4237db695af7a32f93f6324d0b3580bb09e21454ac3ad2c29a04d1dc96aa3d17ac139f44886379ff8147add459a29dd06c3b5940a976e4332d6272b49a44c363a59cef3c3c005e57eafbae772b787602fc97362292cbb7f206e19af904acda74990338f03fcbe9b2057cf519df42058e24d022a4e6ba05309b2754a01d81fb849e5c1e15beb3451a2d5f0b72b25a091e4e247fbf3521167885a80086e07c11d379db970c382e1405e91efa1beb644d64dbc054c9c935d66a1006ad631fde6f029e018e506d6c9f4626c306e738e9822e22070720ee988dd80a8a55534e072472c5048b63f6c45c7e8b2d5fa5ad6586a5a70400eaccbb7df14124de627911f6bd8bc344850d7ee1268ef3f4b19a05df88a39447d50c8dd8d90f69c6fd94f5421445d8770186aa8d6673ffb6746d715d8dddbbc16cd34e630880f52777b70e76ae158f4e456691c41702034a5af3f3af1873818769e2e2c475521a59beeb88ddf4f80668f2d1753c1a2b445da97a11d20a8007e854a43df04285ac75eb69a9b301fedb8efa598871e9496068b8fdd8372def08587b9e16916ae0f0a65097e4da4e212cf312dbc3cebfa16347a84ec0676cdcbfc82f856fd4bbf6c5bcb0f21824cfefba35aba0f7added86727d542595e503301b3dc7ee097c18f32e816a229a6036eb8054043d1182bdf244784ec4490d33f47686ec867938c3e415cd53d958d70dbf4a18d732e0c33ab4614a3358e9b3c0ec6e62a172073b11862fb16e5165cb6fdbba5731ef70b911d0236e5c0bc18d19ed7a54cbbbb84a449b8e83f5a4a393134795a63b7c59cd04791f16558f25aa37f36fd9e1b220e5f59d12bc1375202f2504febe2608611576c846864f46b44e6d60c5a142da438d71efc20f453b7297f1d1f4c71b71d3d72893281ce8e067a203d581c38703ebc9e4cbb1502fdc13cddcadf44947bfc6d7b658e68d2c80de6d6e5584f85dd92b6d5a13c5d4c542834007015b007fb6e22da37ecdf9cf3f8a6499f115e1c66a62848052d0744563ddefcad51167190c4fbc4219ba49b71ac47f527ee783b615a4a9dd4dfaa2700fd170aaed753a09cdc6d7dab395d47398bf968302fbd6ac249981d3959aa3381a4903a3e9d165396b76699741f4a33ff68447fbd05db940caccf161c735584ede42eddd52a3a9b10183a10d2a85d95a4e1f0e0353463261e35b7ddf525f36b764fafe566c4bb0a1cfc489d524e82c5c717daa5869824f76f395f21c13282fc59367f8abf4d0ee1bfba0aabd7d5718d65b045063bde8c1fbf1b25bd67b1aa38dd04b58faf8b9d82c93555bea1961609f6acdaaf5e514927764072bf95bf4c535aa601dedc4d4a20fb1aade11affe5d75d2733b40858695545ecb1a787add74946a7faa5242d0bb7a4d79071a96ee6041d8d6bce0405ccb487212fdcb5c8eb3c7f4bfa69211b0053fe3019ec011b88f9e7686af4ca7606d80f7198634368ea4f605e5ae82266db5e626f287184612eec8de0f5c33bf27a95342e79f6cb5d35ed5c"}}}}}}, 0x0) 510.993889ms ago: executing program 3 (id=209): openat$vmci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x20902, 0x0) write$sequencer(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="810100000004000081", @ANYRES32=r0], 0x10) 479.5522ms ago: executing program 1 (id=210): socket$packet(0x11, 0x3, 0x300) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="40010000", @ANYRES16=r1, @ANYBLOB="01000000000004000000010000002400030000000000000000000000000000000000000000000000000000000000000000001400020077673100000000000000000000000000f4000880"], 0x140}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x4c, r1, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @a}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40090}, 0x44000) 171.888126ms ago: executing program 2 (id=211): sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010", 0x5}], 0x1}, 0x0) r0 = socket$kcm(0x2, 0x1, 0x84) sendmsg$inet(r0, &(0x7f00000024c0)={&(0x7f00000000c0)={0x2, 0x0, @private=0xa014101}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000100)="a7", 0x1}], 0x1}, 0x0) sendmsg$inet(r0, &(0x7f00000016c0)={&(0x7f00000003c0)={0x2, 0x4e20, @rand_addr=0x64010101}, 0x10, &(0x7f0000001500)=[{&(0x7f0000000400)='r', 0x1}], 0x1}, 0x80c0) setsockopt$sock_attach_bpf(r0, 0x84, 0x7c, &(0x7f0000000000), 0xc) 138.774516ms ago: executing program 3 (id=212): syz_usb_connect(0x2, 0x2d, &(0x7f0000000540)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e0018030109021b0001000000000904080001030000000905", @ANYBLOB="9fcf"], 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0x401, 0x20000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8003}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x7}]}, 0x44}, 0x1, 0x0, 0x0, 0x240008c4}, 0x20008810) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x0) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f0000000100)=""/95) 0s ago: executing program 4 (id=213): openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x0) r0 = socket$qrtr(0x2a, 0x2, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') connect$qrtr(r0, &(0x7f0000000040)={0x2a, 0xffffffff, 0xfffffffe}, 0xc) write$binfmt_script(r0, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.209' (ED25519) to the list of known hosts. [ 91.582053][ T5583] cgroup: Unknown subsys name 'net' [ 91.705407][ T9] cfg80211: failed to load regulatory.db [ 91.884973][ T5583] cgroup: Unknown subsys name 'cpuset' [ 91.958591][ T5583] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 93.880566][ T5583] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 96.456811][ T5607] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 96.503926][ T5610] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 96.527218][ T5618] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 96.527302][ T5610] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 96.573271][ T5610] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 96.594712][ T5617] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 96.595356][ T5610] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 96.597120][ T5610] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 96.606715][ T5617] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 96.613336][ T5610] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 96.617557][ T5617] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 96.627622][ T5617] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 96.631839][ T5617] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 96.633499][ T5617] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 96.633557][ T5620] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 96.648998][ T5617] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 96.671130][ T5615] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 96.674104][ T5615] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 96.683116][ T5615] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 96.683819][ T5615] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 96.688500][ T5615] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 96.737012][ T4911] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 96.754020][ T4911] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 96.771918][ T5613] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 96.844222][ T5607] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 98.819622][ T5617] Bluetooth: hci3: command tx timeout [ 98.907783][ T5617] Bluetooth: hci4: command tx timeout [ 98.977987][ T5617] Bluetooth: hci0: command tx timeout [ 98.978002][ T60] Bluetooth: hci1: command tx timeout [ 98.978156][ T5617] Bluetooth: hci2: command tx timeout [ 99.334686][ T5605] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.334830][ T5605] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.335032][ T5605] bridge_slave_0: entered allmulticast mode [ 99.337571][ T5605] bridge_slave_0: entered promiscuous mode [ 99.393457][ T5606] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.393568][ T5606] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.394134][ T5606] bridge_slave_0: entered allmulticast mode [ 99.395941][ T5606] bridge_slave_0: entered promiscuous mode [ 99.426534][ T5605] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.426838][ T5605] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.438175][ T5605] bridge_slave_1: entered allmulticast mode [ 99.450058][ T5605] bridge_slave_1: entered promiscuous mode [ 99.479239][ T5606] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.479355][ T5606] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.479461][ T5606] bridge_slave_1: entered allmulticast mode [ 99.481457][ T5606] bridge_slave_1: entered promiscuous mode [ 99.627252][ T5605] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 99.627501][ T5603] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.629631][ T5603] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.630048][ T5603] bridge_slave_0: entered allmulticast mode [ 99.643983][ T5603] bridge_slave_0: entered promiscuous mode [ 99.677186][ T5604] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.677295][ T5604] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.677398][ T5604] bridge_slave_0: entered allmulticast mode [ 99.685216][ T5604] bridge_slave_0: entered promiscuous mode [ 99.707912][ T5606] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 99.711783][ T5605] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 99.712015][ T5603] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.712136][ T5603] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.712247][ T5603] bridge_slave_1: entered allmulticast mode [ 99.714032][ T5603] bridge_slave_1: entered promiscuous mode [ 99.839300][ T5604] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.839407][ T5604] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.839607][ T5604] bridge_slave_1: entered allmulticast mode [ 99.841566][ T5604] bridge_slave_1: entered promiscuous mode [ 99.845858][ T5606] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 99.902976][ T5602] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.903093][ T5602] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.903415][ T5602] bridge_slave_0: entered allmulticast mode [ 99.905166][ T5602] bridge_slave_0: entered promiscuous mode [ 99.983603][ T5602] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.983750][ T5602] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.983914][ T5602] bridge_slave_1: entered allmulticast mode [ 99.986007][ T5602] bridge_slave_1: entered promiscuous mode [ 100.039449][ T5605] team0: Port device team_slave_0 added [ 100.042611][ T5603] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 100.070670][ T5604] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 100.075563][ T5606] team0: Port device team_slave_0 added [ 100.079132][ T5605] team0: Port device team_slave_1 added [ 100.087149][ T5603] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 100.124896][ T5604] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 100.129829][ T5606] team0: Port device team_slave_1 added [ 100.183953][ T5602] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 100.251977][ T5602] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 100.291859][ T5605] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 100.291872][ T5605] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 100.291892][ T5605] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 100.295788][ T5603] team0: Port device team_slave_0 added [ 100.350886][ T5604] team0: Port device team_slave_0 added [ 100.351714][ T5606] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 100.351727][ T5606] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 100.351754][ T5606] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 100.354059][ T5605] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 100.354074][ T5605] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 100.354102][ T5605] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 100.356615][ T5603] team0: Port device team_slave_1 added [ 100.452310][ T5604] team0: Port device team_slave_1 added [ 100.462296][ T5606] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 100.462317][ T5606] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 100.462336][ T5606] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 100.528940][ T5602] team0: Port device team_slave_0 added [ 100.573120][ T5602] team0: Port device team_slave_1 added [ 100.595039][ T5603] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 100.595050][ T5603] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 100.595069][ T5603] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 100.649276][ T5604] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 100.649288][ T5604] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 100.649307][ T5604] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 100.710589][ T5603] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 100.710601][ T5603] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 100.710619][ T5603] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 100.753783][ T5604] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 100.753834][ T5604] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 100.753913][ T5604] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 100.832306][ T5602] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 100.832319][ T5602] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 100.832338][ T5602] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 100.899196][ T4911] Bluetooth: hci3: command tx timeout [ 100.978077][ T4911] Bluetooth: hci4: command tx timeout [ 101.057819][ T4911] Bluetooth: hci2: command tx timeout [ 101.067859][ T5617] Bluetooth: hci0: command tx timeout [ 101.068282][ T4911] Bluetooth: hci1: command tx timeout [ 101.285594][ T5605] hsr_slave_0: entered promiscuous mode [ 101.286726][ T5605] hsr_slave_1: entered promiscuous mode [ 101.302495][ T5602] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 101.302508][ T5602] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.302529][ T5602] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 101.324949][ T5606] hsr_slave_0: entered promiscuous mode [ 101.329465][ T5606] hsr_slave_1: entered promiscuous mode [ 101.333146][ T5606] debugfs: 'hsr0' already exists in 'hsr' [ 101.333410][ T5606] Cannot create hsr debugfs directory [ 101.476730][ T5603] hsr_slave_0: entered promiscuous mode [ 101.477544][ T5603] hsr_slave_1: entered promiscuous mode [ 101.481154][ T5603] debugfs: 'hsr0' already exists in 'hsr' [ 101.481199][ T5603] Cannot create hsr debugfs directory [ 101.527214][ T5604] hsr_slave_0: entered promiscuous mode [ 101.533364][ T5604] hsr_slave_1: entered promiscuous mode [ 101.536238][ T5604] debugfs: 'hsr0' already exists in 'hsr' [ 101.536262][ T5604] Cannot create hsr debugfs directory [ 101.618440][ T5602] hsr_slave_0: entered promiscuous mode [ 101.619474][ T5602] hsr_slave_1: entered promiscuous mode [ 101.620206][ T5602] debugfs: 'hsr0' already exists in 'hsr' [ 101.620222][ T5602] Cannot create hsr debugfs directory [ 102.465742][ T5605] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 102.500274][ T5605] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 102.507144][ T5605] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 102.562863][ T5605] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 102.567655][ T5605] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 102.595207][ T5605] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 102.621558][ T5605] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 102.662527][ T5605] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 102.810935][ T5603] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 102.842406][ T5603] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 102.860246][ T5603] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 102.902279][ T5603] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 102.906782][ T5603] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 102.962422][ T5603] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 102.978206][ T4911] Bluetooth: hci3: command tx timeout [ 102.986390][ T5603] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 103.022513][ T5603] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 103.057949][ T4911] Bluetooth: hci4: command tx timeout [ 103.133555][ T5606] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 103.153438][ T4911] Bluetooth: hci1: command tx timeout [ 103.153466][ T4911] Bluetooth: hci0: command tx timeout [ 103.153485][ T4911] Bluetooth: hci2: command tx timeout [ 103.196538][ T5606] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 103.213875][ T5606] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 103.252473][ T5606] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 103.257315][ T5606] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 103.306028][ T5606] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 103.322385][ T5606] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 103.350215][ T5606] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 103.513181][ T5604] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 103.544641][ T5604] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 103.555714][ T5604] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 103.591189][ T5604] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 103.608837][ T5604] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 103.641696][ T5604] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 103.667170][ T5604] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 103.702291][ T5604] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 103.733282][ T5605] 8021q: adding VLAN 0 to HW filter on device bond0 [ 103.862190][ T5602] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 103.904471][ T5602] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 103.920906][ T5602] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 103.978792][ T5602] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 103.987097][ T5605] 8021q: adding VLAN 0 to HW filter on device team0 [ 103.987457][ T5602] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 104.013658][ T5602] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 104.030282][ T5602] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 104.073472][ T5602] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 104.109516][ T1027] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.109642][ T1027] bridge0: port 1(bridge_slave_0) entered forwarding state [ 104.157520][ T1027] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.170280][ T1027] bridge0: port 2(bridge_slave_1) entered forwarding state [ 104.221759][ T5603] 8021q: adding VLAN 0 to HW filter on device bond0 [ 104.329093][ T5603] 8021q: adding VLAN 0 to HW filter on device team0 [ 104.356927][ T5606] 8021q: adding VLAN 0 to HW filter on device bond0 [ 104.402050][ T68] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.402212][ T68] bridge0: port 1(bridge_slave_0) entered forwarding state [ 104.453777][ T68] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.453927][ T68] bridge0: port 2(bridge_slave_1) entered forwarding state [ 104.518494][ T5606] 8021q: adding VLAN 0 to HW filter on device team0 [ 104.564136][ T1027] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.564329][ T1027] bridge0: port 1(bridge_slave_0) entered forwarding state [ 104.635335][ T5604] 8021q: adding VLAN 0 to HW filter on device bond0 [ 104.674827][ T155] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.674964][ T155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 104.796175][ T5604] 8021q: adding VLAN 0 to HW filter on device team0 [ 104.815175][ T5602] 8021q: adding VLAN 0 to HW filter on device bond0 [ 104.858660][ T155] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.858882][ T155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 104.930423][ T155] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.930586][ T155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 105.011521][ T5602] 8021q: adding VLAN 0 to HW filter on device team0 [ 105.047114][ T1027] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.062099][ T1027] bridge0: port 1(bridge_slave_0) entered forwarding state [ 105.068012][ T5617] Bluetooth: hci3: command tx timeout [ 105.144754][ T1027] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.145062][ T1027] bridge0: port 2(bridge_slave_1) entered forwarding state [ 105.151655][ T5617] Bluetooth: hci4: command tx timeout [ 105.229520][ T4911] Bluetooth: hci2: command tx timeout [ 105.229550][ T4911] Bluetooth: hci0: command tx timeout [ 105.229571][ T4911] Bluetooth: hci1: command tx timeout [ 105.861493][ T5605] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 106.447576][ T5603] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 106.705161][ T5606] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 106.859552][ T5603] veth0_vlan: entered promiscuous mode [ 106.929940][ T5603] veth1_vlan: entered promiscuous mode [ 106.969932][ T5604] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 106.974005][ T5602] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.031602][ T5606] veth0_vlan: entered promiscuous mode [ 107.081515][ T5606] veth1_vlan: entered promiscuous mode [ 107.101380][ T5605] veth0_vlan: entered promiscuous mode [ 107.129926][ T5603] veth0_macvtap: entered promiscuous mode [ 107.154414][ T5603] veth1_macvtap: entered promiscuous mode [ 107.161085][ T5605] veth1_vlan: entered promiscuous mode [ 107.234375][ T5604] veth0_vlan: entered promiscuous mode [ 107.244921][ T5602] veth0_vlan: entered promiscuous mode [ 107.264635][ T5603] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 107.281197][ T5606] veth0_macvtap: entered promiscuous mode [ 107.294788][ T5604] veth1_vlan: entered promiscuous mode [ 107.307053][ T5603] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 107.321423][ T5602] veth1_vlan: entered promiscuous mode [ 107.323529][ T5606] veth1_macvtap: entered promiscuous mode [ 107.372209][ T55] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.391671][ T5605] veth0_macvtap: entered promiscuous mode [ 107.394696][ T55] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.416195][ T55] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.437932][ T55] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.442911][ T5605] veth1_macvtap: entered promiscuous mode [ 107.536665][ T5606] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 107.598791][ T5606] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 107.711721][ T155] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.736608][ T5605] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 107.750351][ T5604] veth0_macvtap: entered promiscuous mode [ 107.757132][ T155] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.831859][ T5602] veth0_macvtap: entered promiscuous mode [ 107.847061][ T155] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.869046][ T155] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.872400][ T5605] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 107.919449][ T5604] veth1_macvtap: entered promiscuous mode [ 107.948062][ T5602] veth1_macvtap: entered promiscuous mode [ 108.030494][ T155] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.036209][ T155] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.091142][ T67] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.091162][ T67] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.096003][ T155] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.151586][ T155] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.301975][ T5604] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 108.359834][ T5602] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 108.424643][ T5604] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 108.452094][ T1027] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.452115][ T1027] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.530414][ T5602] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 108.677277][ T67] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.692225][ T1027] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.692242][ T1027] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.692506][ T67] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.728441][ T68] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.733133][ T68] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.760143][ T68] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.763687][ T68] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.765503][ T68] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.799230][ T68] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.076129][ T1027] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.076149][ T1027] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.603034][ T68] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.603052][ T68] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.700190][ T155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.700208][ T155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.310967][ T41] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.310987][ T41] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.395794][ T41] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.395815][ T41] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.625113][ T1027] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.625131][ T1027] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.732759][ T5795] program syz.4.5 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 110.967601][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.967619][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.359145][ T36] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 111.467446][ T5806] netlink: 'syz.4.8': attribute type 1 has an invalid length. [ 111.475928][ T5806] netlink: 216 bytes leftover after parsing attributes in process `syz.4.8'. [ 111.664158][ T36] usb 3-1: unable to get BOS descriptor or descriptor too short [ 111.748729][ T36] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 111.748754][ T36] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 111.789408][ T36] usb 3-1: string descriptor 0 read error: -22 [ 111.789601][ T36] usb 3-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 111.789628][ T36] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.201940][ T5813] capability: warning: `syz.4.10' uses deprecated v2 capabilities in a way that may be insecure [ 112.261280][ T36] usb 3-1: selecting invalid altsetting 1 [ 112.308694][ T36] usb 3-1: unit 3 not found! [ 112.325576][ T36] usb 3-1: unit 0 not found! [ 116.041828][ T5829] syz.0.12 (5829) used greatest stack depth: 18072 bytes left [ 116.625709][ T5840] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 116.758001][ T36] usb 3-1: USB disconnect, device number 2 [ 117.738965][ T5849] netlink: 4 bytes leftover after parsing attributes in process `syz.0.17'. [ 118.163546][ T5852] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 118.163576][ T5852] overlayfs: failed to set xattr on upper [ 118.163585][ T5852] overlayfs: ...falling back to redirect_dir=nofollow. [ 118.163594][ T5852] overlayfs: ...falling back to index=off. [ 118.163601][ T5852] overlayfs: ...falling back to uuid=null. [ 118.300268][ T5853] overlayfs: overlay with incompat feature 'volatile' cannot be mounted [ 118.302838][ T5845] ceph: No mds server is up or the cluster is laggy [ 118.791880][ T5711] libceph: connect (1)[c::]:6789 error -101 [ 118.803696][ T5711] libceph: mon0 (1)[c::]:6789 connect error [ 119.678401][ T5860] capability: warning: `syz.4.20' uses 32-bit capabilities (legacy support in use) [ 119.784584][ T5862] ======================================================= [ 119.784584][ T5862] WARNING: The mand mount option has been deprecated and [ 119.784584][ T5862] and is ignored by this kernel. Remove the mand [ 119.784584][ T5862] option from the mount to silence this warning. [ 119.784584][ T5862] ======================================================= [ 120.355142][ T5877] sch_tbf: peakrate 7 is lower than or equals to rate 7 ! [ 121.125323][ T5609] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 121.799379][ T5609] usb 1-1: Using ep0 maxpacket: 8 [ 121.820484][ T5609] usb 1-1: unable to get BOS descriptor or descriptor too short [ 121.836353][ T5609] usb 1-1: config 4 interface 0 has no altsetting 0 [ 121.868374][ T5609] usb 1-1: string descriptor 0 read error: -22 [ 121.868473][ T5609] usb 1-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 121.868497][ T5609] usb 1-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 122.107628][ T5609] usb 1-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 122.208607][ T5876] usb 1-1: dvb_usb_au6610: wlen=0, aborting [ 122.317602][ T5609] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 122.328789][ T5609] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 122.328906][ T5609] usb 1-1: media controller created [ 122.379575][ T5609] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 122.515274][ T5609] zl10353_read_register: readreg error (reg=127, ret==0) [ 122.906834][ T5897] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 123.775779][ T5609] usb 1-1: USB disconnect, device number 2 [ 124.237458][ T5911] netlink: 216 bytes leftover after parsing attributes in process `syz.4.40'. [ 124.237483][ T5911] netlink: 24 bytes leftover after parsing attributes in process `syz.4.40'. [ 124.237498][ T5911] netlink: 16 bytes leftover after parsing attributes in process `syz.4.40'. [ 124.358574][ T5822] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 124.511827][ T5822] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 124.511860][ T5822] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 124.511898][ T5822] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 64 [ 124.511930][ T5822] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 124.511947][ T5822] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.567389][ T5907] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 124.609243][ T5822] hub 2-1:1.0: bad descriptor, ignoring hub [ 124.609327][ T5822] hub 2-1:1.0: probe with driver hub failed with error -5 [ 124.612095][ T5822] cdc_wdm 2-1:1.0: skipping garbage [ 124.612112][ T5822] cdc_wdm 2-1:1.0: skipping garbage [ 124.825110][ T5822] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 124.825144][ T5822] cdc_wdm 2-1:1.0: Unknown control protocol [ 124.942071][ T5822] usb 2-1: USB disconnect, device number 2 [ 125.061944][ T5928] netlink: 4 bytes leftover after parsing attributes in process `syz.4.48'. [ 125.062066][ T5928] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 125.062090][ T5928] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 125.887151][ T37] audit: type=1326 audit(1779481959.240:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5952 comm="syz.0.57" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf9a8dce59 code=0x7ffc0000 [ 125.887204][ T37] audit: type=1326 audit(1779481959.240:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5952 comm="syz.0.57" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf9a8dce59 code=0x7ffc0000 [ 125.887247][ T37] audit: type=1326 audit(1779481959.240:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5952 comm="syz.0.57" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf9a8dce59 code=0x7ffc0000 [ 125.887290][ T37] audit: type=1326 audit(1779481959.240:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5952 comm="syz.0.57" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7faf9a8dce59 code=0x7ffc0000 [ 125.887333][ T37] audit: type=1326 audit(1779481959.240:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5952 comm="syz.0.57" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf9a8dce59 code=0x7ffc0000 [ 125.887376][ T37] audit: type=1326 audit(1779481959.240:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5952 comm="syz.0.57" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf9a8dce59 code=0x7ffc0000 [ 125.887419][ T37] audit: type=1326 audit(1779481959.240:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5952 comm="syz.0.57" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf9a8dce59 code=0x7ffc0000 [ 125.887462][ T37] audit: type=1326 audit(1779481959.240:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5952 comm="syz.0.57" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7faf9a8dce59 code=0x7ffc0000 [ 125.887506][ T37] audit: type=1326 audit(1779481959.240:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5952 comm="syz.0.57" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf9a8dce59 code=0x7ffc0000 [ 125.887549][ T37] audit: type=1326 audit(1779481959.240:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5952 comm="syz.0.57" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7faf9a89d68e code=0x7ffc0000 [ 127.593427][ T5980] befs: (nullb0): invalid magic header [ 128.502906][ T5987] Zero length message leads to an empty skb [ 128.590218][ T5987] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 129.859239][ T6008] warning: `syz.4.76' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 130.605748][ T6024] sg_write: data in/out 352340/136 bytes for SCSI command 0x0-- guessing data in; [ 130.605748][ T6024] program syz.4.84 not setting count and/or reply_len properly [ 131.143931][ T6033] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 132.405134][ T6040] program syz.0.90 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 132.546978][ T6047] netlink: 12 bytes leftover after parsing attributes in process `syz.4.93'. [ 132.674485][ T1335] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.674561][ T1335] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.690752][ T5579] hid-generic 0005:0C45:0101.0001: item fetching failed at offset 0/1 [ 132.691557][ T5579] hid-generic 0005:0C45:0101.0001: probe with driver hid-generic failed with error -22 [ 132.754956][ T6051] Bluetooth: MGMT ver 1.23 [ 133.107804][ T821] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 133.258755][ T821] usb 3-1: Using ep0 maxpacket: 16 [ 133.266482][ T821] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 133.266527][ T821] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 133.266566][ T821] usb 3-1: New USB device found, idVendor=056a, idProduct=0084, bcdDevice= 0.00 [ 133.266591][ T821] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.359863][ T821] usb 3-1: config 0 descriptor?? [ 133.793301][ T6073] macvtap0: entered allmulticast mode [ 133.793321][ T6073] veth0_macvtap: entered allmulticast mode [ 133.991798][ T821] wacom 0003:056A:0084.0002: unbalanced delimiter at end of report description [ 133.992622][ T821] wacom 0003:056A:0084.0002: parse failed [ 133.992722][ T821] wacom 0003:056A:0084.0002: probe with driver wacom failed with error -22 [ 134.012503][ T821] usb 3-1: USB disconnect, device number 3 [ 134.609845][ T6087] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 136.359504][ T6097] befs: (nullb0): invalid magic header [ 138.731621][ T6123] process 'syz.3.124' launched '/dev/fd/3' with NULL argv: empty string added [ 139.082929][ T6130] random: crng reseeded on system resumption [ 139.151042][ T6133] Set syz1 is full, maxelem 2 reached [ 139.151147][ T6132] usb usb7: usbfs: process 6132 (syz.3.129) did not claim interface 0 before use [ 141.354824][ T6150] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 142.231558][ T37] kauditd_printk_skb: 123 callbacks suppressed [ 142.231575][ T37] audit: type=1400 audit(1779481975.580:135): lsm=SMACK fn=smack_inode_permission action=denied subject="w" object="_" requested=rw pid=6155 comm="syz.2.137" name="tty1" dev="devtmpfs" ino=20 [ 143.249383][ T6169] befs: (nullb0): invalid magic header [ 144.465091][ T6180] befs: (nullb0): invalid magic header [ 145.858118][ T821] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 145.987043][ T6205] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 145.987043][ T6205] The task syz.3.157 (6205) triggered the difference, watch for misbehavior. [ 146.006119][ T6206] netlink: 4 bytes leftover after parsing attributes in process `syz.1.159'. [ 146.017926][ T821] usb 1-1: Using ep0 maxpacket: 8 [ 146.024515][ T821] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 146.024557][ T821] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 146.024578][ T821] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.049722][ T6206] hsr_slave_0: left promiscuous mode [ 146.120396][ T6206] hsr_slave_1: left promiscuous mode [ 146.138745][ T821] usb 1-1: config 0 descriptor?? [ 146.248401][ T5732] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 146.433435][ T821] iowarrior 1-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 146.459213][ T5732] usb 3-1: config 0 has no interfaces? [ 146.465938][ T5732] usb 3-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 146.465963][ T5732] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.465981][ T5732] usb 3-1: Product: syz [ 146.465998][ T5732] usb 3-1: Manufacturer: syz [ 146.466007][ T5732] usb 3-1: SerialNumber: syz [ 146.513260][ T5732] usb 3-1: config 0 descriptor?? [ 146.676010][ T5822] kernel read not supported for file /media0 (pid: 5822 comm: kworker/0:7) [ 146.722878][ T6203] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 146.723544][ T6203] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 146.733652][ T5617] Bluetooth: hci4: unknown advertising packet type: 0x17 [ 146.733686][ T5617] Bluetooth: hci4: unknown advertising packet type: 0x2a [ 146.733703][ T5617] Bluetooth: hci4: unknown advertising packet type: 0x09 [ 146.733716][ T5617] Bluetooth: hci4: unknown advertising packet type: 0x24 [ 146.733728][ T5617] Bluetooth: hci4: unknown advertising packet type: 0x24 [ 146.733748][ T5617] Bluetooth: hci4: Dropping invalid advertising data [ 146.733978][ T5617] Bluetooth: hci4: Malformed LE Event: 0x02 [ 146.813544][ T5822] usb 3-1: USB disconnect, device number 4 [ 146.879310][ T5718] usb 1-1: USB disconnect, device number 3 [ 147.308230][ T6214] befs: (nullb0): invalid magic header [ 149.094725][ T6234] netlink: 8 bytes leftover after parsing attributes in process `syz.2.170'. [ 149.327846][ T5711] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 149.487746][ T5711] usb 1-1: Using ep0 maxpacket: 16 [ 149.493686][ T5711] usb 1-1: config index 0 descriptor too short (expected 51443, got 18) [ 149.515486][ T5711] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 149.515514][ T5711] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.515533][ T5711] usb 1-1: Product: syz [ 149.515546][ T5711] usb 1-1: Manufacturer: syz [ 149.515561][ T5711] usb 1-1: SerialNumber: syz [ 149.608549][ T5711] r8152-cfgselector 1-1: Unknown version 0x0000 [ 149.608575][ T5711] r8152-cfgselector 1-1: config 0 descriptor?? [ 149.857308][ T6246] netlink: 44 bytes leftover after parsing attributes in process `syz.4.176'. [ 149.955381][ T6246] bridge0: port 2(bridge_slave_1) entered disabled state [ 149.957086][ T6246] bridge0: port 1(bridge_slave_0) entered disabled state [ 150.094905][ T6247] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 150.857798][ T5718] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 150.886963][ T5711] r8152-cfgselector 1-1: USB disconnect, device number 4 [ 151.167773][ T5718] usb 4-1: Using ep0 maxpacket: 32 [ 151.207846][ T5718] usb 4-1: config index 0 descriptor too short (expected 35577, got 27) [ 151.207876][ T5718] usb 4-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 151.207898][ T5718] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 151.207921][ T5718] usb 4-1: config 1 has no interface number 0 [ 151.207984][ T5718] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 151.208013][ T5718] usb 4-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 151.208056][ T5718] usb 4-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 151.208081][ T5718] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 151.559092][ T6257] befs: (nullb0): invalid magic header [ 152.241585][ T5718] snd_usb_pod 4-1:1.1: Line 6 Pocket POD found [ 152.457286][ T5718] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now attached [ 152.596104][ T5732] usb 4-1: USB disconnect, device number 2 [ 152.636711][ T5732] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now disconnected [ 152.657829][ T5609] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 152.821347][ T5609] usb 2-1: unable to get BOS descriptor or descriptor too short [ 152.822121][ T5609] usb 2-1: not running at top speed; connect to a high speed hub [ 152.823326][ T5609] usb 2-1: config 5 has an invalid interface number: 246 but max is 0 [ 152.823351][ T5609] usb 2-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config [ 152.823370][ T5609] usb 2-1: config 5 has no interface number 0 [ 152.823413][ T5609] usb 2-1: config 5 interface 246 altsetting 4 endpoint 0x3 has invalid wMaxPacketSize 0 [ 152.823438][ T5609] usb 2-1: config 5 interface 246 altsetting 4 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 152.823456][ T5609] usb 2-1: config 5 interface 246 has no altsetting 0 [ 152.825877][ T5609] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=f5.e4 [ 152.825903][ T5609] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.825924][ T5609] usb 2-1: Product: syz [ 152.825939][ T5609] usb 2-1: Manufacturer: syz [ 152.825949][ T5609] usb 2-1: SerialNumber: syz [ 153.171431][ T6273] gretap0: entered promiscuous mode [ 153.331472][ T5609] usb 2-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 153.360862][ T5884] usb 2-1: Failed to submit usb control message: -71 [ 153.360899][ T5884] usb 2-1: unable to send the bmi data to the device: -71 [ 153.360917][ T5884] usb 2-1: unable to get target info from device [ 153.360944][ T5884] usb 2-1: could not get target info (-71) [ 153.361184][ T5884] usb 2-1: could not probe fw (-71) [ 153.364415][ T5609] usb 2-1: USB disconnect, device number 3 [ 153.452899][ T6273] gretap0: left promiscuous mode [ 153.685020][ T6285] loop5: detected capacity change from 0 to 7 [ 153.899720][ T5731] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 154.047796][ T5731] usb 1-1: Using ep0 maxpacket: 32 [ 154.055426][ T5731] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 154.055456][ T5731] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.194449][ T5731] usb 1-1: config 0 descriptor?? [ 154.473627][ T6292] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 155.173444][ T5731] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 155.311278][ T6285] Dev loop5: unable to read RDB block 7 [ 155.311324][ T6285] loop5: unable to read partition table [ 155.354041][ T6287] support for the xor transformation has been removed. [ 155.381767][ T5731] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 155.384256][ T5731] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 155.384309][ T5731] usb 1-1: media controller created [ 155.393891][ T6285] loop5: partition table beyond EOD, truncated [ 155.394051][ T6285] loop_reread_partitions: partition scan of loop5 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 155.433678][ T6286] az6027: more than 2 i2c messages at a time is not handled yet. TODO. [ 155.473911][ T5731] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 155.671055][ T5731] az6027: usb out operation failed. (-71) [ 155.672136][ T5731] az6027: usb out operation failed. (-71) [ 155.672152][ T5731] stb0899_attach: Driver disabled by Kconfig [ 155.672162][ T5731] az6027: no front-end attached [ 155.672162][ T5731] [ 155.674536][ T5731] az6027: usb out operation failed. (-71) [ 155.674551][ T5731] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 155.735850][ T5731] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input5 [ 155.806789][ T5731] dvb-usb: schedule remote query interval to 400 msecs. [ 155.806813][ T5731] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 155.829592][ T5731] usb 1-1: USB disconnect, device number 5 [ 156.276036][ T5731] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 156.313635][ T6306] netlink: 'syz.3.195': attribute type 1 has an invalid length. [ 156.426611][ T6306] 8021q: adding VLAN 0 to HW filter on device bond1 [ 156.571546][ T6311] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 156.692347][ T6315] nicvf0: tun_chr_ioctl cmd 1074025677 [ 156.692620][ T6315] nicvf0: linktype set to 1 [ 157.164567][ T6321] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 158.297813][ T5718] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 158.449496][ T5718] usb 3-1: Using ep0 maxpacket: 32 [ 158.461248][ T5718] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 158.461274][ T5718] usb 3-1: config 0 has no interface number 0 [ 158.481973][ T5718] usb 3-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 158.482000][ T5718] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.482020][ T5718] usb 3-1: Product: syz [ 158.482033][ T5718] usb 3-1: Manufacturer: syz [ 158.482066][ T5718] usb 3-1: SerialNumber: syz [ 158.544021][ T6325] binder: 6324:6325 ioctl c0306201 200000001a80 returned -14 [ 158.547320][ T5718] usb 3-1: config 0 descriptor?? [ 158.604550][ T5718] usb 3-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 158.604593][ T5718] usb 3-1: selecting invalid altsetting 1 [ 158.604611][ T5718] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 158.657474][ T5718] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 158.660930][ T5718] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 158.661027][ T5718] usb 3-1: media controller created [ 158.729602][ T5718] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 158.834714][ T5718] usb 3-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 158.834771][ T5718] zl10353_read_register: readreg error (reg=127, ret==-71) [ 158.835627][ T5718] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 159.036481][ T6336] netlink: 40 bytes leftover after parsing attributes in process `syz.1.207'. [ 159.172303][ T5718] usb 3-1: USB disconnect, device number 5 [ 159.857933][ T5711] ================================================================== [ 159.857948][ T5711] BUG: KASAN: vmalloc-out-of-bounds in __list_del_entry_valid_or_report+0xb5/0x190 [ 159.857989][ T5711] Read of size 8 at addr ffffc9000f501008 by task kworker/1:5/5711 [ 159.858012][ T5711] [ 159.858036][ T5711] CPU: 1 UID: 0 PID: 5711 Comm: kworker/1:5 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 159.858061][ T5711] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 159.858075][ T5711] Workqueue: usb_hub_wq hub_event [ 159.858110][ T5711] Call Trace: [ 159.858118][ T5711] [ 159.858127][ T5711] dump_stack_lvl+0xe8/0x150 [ 159.858153][ T5711] print_address_description+0x55/0x1e0 [ 159.858178][ T5711] ? __list_del_entry_valid_or_report+0xb5/0x190 [ 159.858212][ T5711] print_report+0x58/0x70 [ 159.858241][ T5711] kasan_report+0x117/0x150 [ 159.858269][ T5711] ? __list_del_entry_valid_or_report+0xb5/0x190 [ 159.858309][ T5711] __list_del_entry_valid_or_report+0xb5/0x190 [ 159.858347][ T5711] kcov_remote_start+0x2af/0x710 [ 159.858373][ T5711] hub_event+0x150/0x4f60 [ 159.858404][ T5711] ? __lock_acquire+0x6b5/0x2cf0 [ 159.858433][ T5711] ? look_up_lock_class+0x57/0x110 [ 159.858467][ T5711] ? __lock_acquire+0x6b5/0x2cf0 [ 159.858504][ T5711] ? lock_acquire+0x106/0x350 [ 159.858533][ T5711] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 159.858560][ T5711] ? __pfx_hub_event+0x10/0x10 [ 159.858586][ T5711] ? process_scheduled_works+0xa70/0x1860 [ 159.858614][ T5711] ? process_scheduled_works+0xa70/0x1860 [ 159.858636][ T5711] ? process_scheduled_works+0xa70/0x1860 [ 159.858661][ T5711] process_scheduled_works+0xb5d/0x1860 [ 159.858701][ T5711] ? __pfx_process_scheduled_works+0x10/0x10 [ 159.858729][ T5711] ? assign_work+0x3d5/0x5e0 [ 159.858754][ T5711] worker_thread+0xa53/0xfc0 [ 159.858793][ T5711] kthread+0x388/0x470 [ 159.858821][ T5711] ? __pfx_worker_thread+0x10/0x10 [ 159.858844][ T5711] ? __pfx_kthread+0x10/0x10 [ 159.858873][ T5711] ret_from_fork+0x514/0xb70 [ 159.858900][ T5711] ? __pfx_ret_from_fork+0x10/0x10 [ 159.858923][ T5711] ? __switch_to+0xc79/0x1410 [ 159.858957][ T5711] ? __pfx_kthread+0x10/0x10 [ 159.858987][ T5711] ret_from_fork_asm+0x1a/0x30 [ 159.859024][ T5711] [ 159.859032][ T5711] [ 159.859037][ T5711] The buggy address belongs to a vmalloc virtual mapping [ 159.859054][ T5711] Memory state around the buggy address: [ 159.859066][ T5711] ffffc9000f500f00: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 159.859081][ T5711] ffffc9000f500f80: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 159.859096][ T5711] >ffffc9000f501000: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 159.859106][ T5711] ^ [ 159.859118][ T5711] ffffc9000f501080: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 159.859132][ T5711] ffffc9000f501100: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 159.859143][ T5711] ================================================================== [ 159.859161][ T5711] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 159.859176][ T5711] CPU: 1 UID: 0 PID: 5711 Comm: kworker/1:5 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 159.859213][ T5711] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 159.859232][ T5711] Workqueue: usb_hub_wq hub_event [ 159.859256][ T5711] Call Trace: [ 159.859263][ T5711] [ 159.859271][ T5711] vpanic+0x56c/0xa60 [ 159.859301][ T5711] ? __pfx_vpanic+0x10/0x10 [ 159.859332][ T5711] panic+0xc5/0xd0 [ 159.859356][ T5711] ? __pfx_panic+0x10/0x10 [ 159.859383][ T5711] ? __list_del_entry_valid_or_report+0xb5/0x190 [ 159.859416][ T5711] ? rcu_is_watching+0x15/0xb0 [ 159.859450][ T5711] ? __list_del_entry_valid_or_report+0xb5/0x190 [ 159.859483][ T5711] check_panic_on_warn+0x89/0xb0 [ 159.859512][ T5711] ? __list_del_entry_valid_or_report+0xb5/0x190 [ 159.859545][ T5711] end_report+0x73/0x170 [ 159.859568][ T5711] ? __list_del_entry_valid_or_report+0xb5/0x190 [ 159.859592][ T5711] kasan_report+0x128/0x150 [ 159.859610][ T5711] ? __list_del_entry_valid_or_report+0xb5/0x190 [ 159.859638][ T5711] __list_del_entry_valid_or_report+0xb5/0x190 [ 159.859664][ T5711] kcov_remote_start+0x2af/0x710 [ 159.859682][ T5711] hub_event+0x150/0x4f60 [ 159.859704][ T5711] ? __lock_acquire+0x6b5/0x2cf0 [ 159.859727][ T5711] ? look_up_lock_class+0x57/0x110 [ 159.859751][ T5711] ? __lock_acquire+0x6b5/0x2cf0 [ 159.859778][ T5711] ? lock_acquire+0x106/0x350 [ 159.859799][ T5711] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 159.859818][ T5711] ? __pfx_hub_event+0x10/0x10 [ 159.859837][ T5711] ? process_scheduled_works+0xa70/0x1860 [ 159.859857][ T5711] ? process_scheduled_works+0xa70/0x1860 [ 159.859874][ T5711] ? process_scheduled_works+0xa70/0x1860 [ 159.859892][ T5711] process_scheduled_works+0xb5d/0x1860 [ 159.859920][ T5711] ? __pfx_process_scheduled_works+0x10/0x10 [ 159.859939][ T5711] ? assign_work+0x3d5/0x5e0 [ 159.859956][ T5711] worker_thread+0xa53/0xfc0 [ 159.859985][ T5711] kthread+0x388/0x470 [ 159.860006][ T5711] ? __pfx_worker_thread+0x10/0x10 [ 159.860023][ T5711] ? __pfx_kthread+0x10/0x10 [ 159.860047][ T5711] ret_from_fork+0x514/0xb70 [ 159.860068][ T5711] ? __pfx_ret_from_fork+0x10/0x10 [ 159.860086][ T5711] ? __switch_to+0xc79/0x1410 [ 159.860113][ T5711] ? __pfx_kthread+0x10/0x10 [ 159.860136][ T5711] ret_from_fork_asm+0x1a/0x30 [ 159.860165][ T5711] [ 159.863549][ T5711] Kernel Offset: disabled