last executing test programs: 15.27834635s ago: executing program 3 (id=946): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x8c}}, 0x20000000) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) r2 = fsmount(r1, 0x0, 0x0) fchdir(r2) open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) statx(0xffffffffffffffff, &(0x7f00000005c0)='./bus\x00', 0x400, 0x800, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000006280)={0x0, 0x0, 0x0}, 0x0) write(0xffffffffffffffff, &(0x7f0000004200)='t', 0x1) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7fffffff) openat$tun(0xffffffffffffff9c, 0x0, 0x103202, 0x0) r4 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x0) ioctl$FE_GET_PROPERTY(r4, 0x80106f53, &(0x7f0000000500)={0x3a, &(0x7f00000005c0)=[{0x12, '\x00', @buffer={"e0615f1132b11e4f262e9c15e3f5cafa7c7aba49c3223610f23af1dd27b037b0", 0x20}}, {0x2e, '\x00', @data=0x80000000, 0x9}]}) socket$nl_generic(0x10, 0x3, 0x10) 15.046199683s ago: executing program 4 (id=947): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000080)={0x1, 0x0, [{0x2, 0x5, 0x1, 0x0, @sint={0x3f8, 0x8000}}]}) 14.299913325s ago: executing program 3 (id=950): io_setup(0x45, &(0x7f0000000180)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socket$nl_route(0x10, 0x3, 0x0) fadvise64(0xffffffffffffffff, 0x7fffffffffffffff, 0x4, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x2, 0x180000, 0x1}, 0x1c) recvmsg$unix(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1}, 0x40010020) sendmmsg(r1, &(0x7f00000030c0), 0x0, 0x9200000000000000) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_rr_get_interval(0x0, &(0x7f0000000340)) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) setsockopt$sock_int(r1, 0x1, 0x21, &(0x7f0000000540)=0x7, 0x4) recvmsg$unix(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)}, 0x40000002) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'veth1_to_bond\x00', 0x0}) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000100)={r4, 0x2, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x39}}, 0x10) r5 = socket$pptp(0x18, 0x1, 0x2) getpeername(r5, 0x0, 0x0) write$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000040)='FROZEN\x00', 0x7) write$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000080)='THAWED\x00', 0x7) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) 14.277594485s ago: executing program 0 (id=951): ioctl$RFKILL_IOCTL_NOINPUT(0xffffffffffffffff, 0x5202) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000b, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x8000, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r3, 0xc0405602, &(0x7f0000000280)={0x30, 0x2, 0x3, "d5470000002f1a0e0000000700", 0x51424752}) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000300)=[@in6={0xa, 0x4e20, 0x9, @loopback}], 0x1c) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f00000002c0)=[@in6={0xa, 0x4e20, 0x0, @loopback}]}, &(0x7f0000000000)=0x10) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000180)=[@in6={0xa, 0x4e24, 0x3, @empty, 0x3}], 0x1c) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x8, 0x0, 0x0}}, 0x10) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000002700)={r4, &(0x7f0000000240)="a7", &(0x7f0000001700)=""/4096}, 0x20) 13.30488316s ago: executing program 0 (id=952): socket$igmp(0x2, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, 0x0, 0x0) 12.810650277s ago: executing program 4 (id=953): ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000140)) r0 = accept$inet(0xffffffffffffffff, 0x0, 0x0) r1 = syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x0, 0x2000) signalfd4(r1, &(0x7f0000000380)={[0x40]}, 0x8, 0x80c00) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x197, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) pwritev(r0, &(0x7f0000001880)=[{&(0x7f00000003c0)="e1ac6f90b0798db5ed1fda4fb907e01eb93f536f25077be6ea3dde5c11a34af079bf1599eee7f4f97e118cc4642886863a2943ab2d069df9005efd97333f6ea90cb22127c3fa0cff7710b60da4c569", 0x4f}, {&(0x7f0000000440)="1b66d5daa32453a3f4e49ee6af17f1575022ade0f0f9731a0f1564170e3a00e56c914b1c4506ff233bed7a55f753f4e564eb47172ac9b7d72d48013b2b13cc5280b42416b650043b310ce792b992ead11df9bef1f0945ee275369dc4e4d3e75fc0a085e094eae2869810650cbe912fbb0c54da8c57b80ad7be68df405164d6b491a26cacf728f17b7ef6cd15c312", 0x8e}, {&(0x7f0000000500)="cedbd9d676e3912023d654ad09da4439e62530dfa7feca0379014effb190f93d0fbd933536a01598a172eff4d99cf3b20b87fc266610f9f02245d7122e891e1c8f24ca75374fe0a4796dd3eede26a1da982540651fdafbc9ed9e1ccc7901e180e89829f01f2093cae4c3a741118b41e7006c357d8bed27b3d6f33f81cf054749cd3afd0317b4e2a847feae2beaffae2e6f9bf74925248f40fe9831ea277515ad18", 0xa1}, {&(0x7f00000005c0)="ecfc8abdfcd15fc00e5053ef3ff42976b8652a3b5920bb97d18dd6a26bfca2913374b5c9e5eae840a7aa245989c6d5eba8eda6e77c312c07f7a1c91453d5e4648aea219e977778b10978df94", 0x4c}, {&(0x7f0000000680)}, {&(0x7f00000006c0)}, {&(0x7f0000000700)="b80b6c0f44d7769099cae864c8be785063e23f066ad2eafe2f40a5dcd3", 0x1d}, {&(0x7f0000000740)="8d842c59c696f26508bef766690646ed89638e738d3eaec0d0a39bfd6ba0ca18b3697103c9eb99474e6326e0e5104a6f9787aaed8afb3abff1a9badf985d9d7d2f2d40b60aad75ec4d31da0295390faa820c73af20e06f1e439873c33a0c027098d3f723befbd2987af9eb6babc7766dddd45d3a0f59b76ed4b5e3ed55933ebaeb499ea5a914481d5690f0c836b154a4271fb82450b8c0da1e6b364d4bf922f13c3f09cdc1727bb33a0029eec81b38df1f891cef5fa83c77459fc6e5d6689a68cb9aff31fffa46066ab6ce5fc3fdbc4b933f6608dc0d5b5f701aeb64ad250f18ec6fcca5efdccbdb83ef31311ec8d03258", 0xf1}, {&(0x7f0000000840)="62c48b9ba6501beda0f9cb5fe31c752ad788cca9f01fd503be49766bb6725814b8873777459da9daed0216acfa47f4be2f9a92884d275ba6", 0x38}, {&(0x7f0000000880)="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", 0x1000}], 0xa, 0x8, 0x5) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000180), 0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000005580)=""/102392, 0x18ff8) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000280)={0x4000, 0x2}, 0x10) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(0xffffffffffffffff, 0x7b2, 0x0) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) madvise(&(0x7f0000e56000/0x4000)=nil, 0x4000, 0x11) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x109042, 0x0) write$P9_RSTATu(r3, &(0x7f0000000080)={0x233, 0x7d, 0x2, {{0x500, 0xf2, 0x0, 0x4, {0x0, 0x1, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x1b, '\x04nodev{evoo~\x059\xc6\x00\x05\x00\x007\xd9:\x8b\x92\x00\x00\x00', 0x38, 'pJ\x86\xce\xc6\x02\x00}\xfag>\xff\xeb\t\xb55\x1f[\xde\x05@\x00\x00\x00\x00\x18{\x82\x00\xb5\x00\x00+Y_\xcb\x14\x03CT\xb9\xfd\x9e\xf1\x96\xa5\x1c\xd5\x15z\xdc\x81\x03\xb4\x94\xe1', 0xf, '\xcf\xc2m\xd7\xc5\xb4\x99\xbf\xb4+\x93\x80~\x8bZ', 0x5d, '\xf8\xf6i\xfbqm\xcf1^\xca\xf3\x85@\x9a\xc6[\x94\bg\x8c,;\xa6\x1dR\xc3l\xde{\a\xdb\xda\xb2\x88K\xaf\x05\x00~\x04\xe6\x9d\xb0\xc3\xca\x00\x00\x00\x00\x00\x00G\xec!\xca\xbf\xf2\x0f\x9c\x1c\xbe6\xf4\xfd\x1aL\xc2\x9e\x95?\xa5\xe0R\x15t\x80\xe8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x81\xff\xff\xff\x00'}, 0x12c, 'odev/n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4U\xda\xf0;\x11r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaa\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x9d\xba?\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xcd\xf9\x18\x85I\xb1\x12]lL\x9b\x18\xc2\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xdf$NL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12Qa\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xff\x00'/300, 0x0, 0xee01}}, 0x233) r4 = socket(0x10, 0x3, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xe000, &(0x7f0000000200)=[{&(0x7f0000000240)="d8000000180081064e81f782db4cb904021d0800fd027c05e8fe55a10a0006000140020203600e41b0000900ac00060311000000a4000500000080200004015c3b61c1d67f6f94007134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000000008af26c8b7b55f4d3a6823a45f28fcb1d", 0xd8}], 0x1}, 0x40) sendmmsg(r4, &(0x7f0000000000), 0x4000000000001f2, 0x0) syz_open_dev$usbmon(&(0x7f0000000340), 0xae, 0x426140) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000040)={0x5, @pix_mp={0x8, 0x4000000, 0x55595659, 0x0, 0x3, [{0x1, 0x7}, {0x6}, {0x2, 0x6}, {0x101, 0x80007fff}, {0xffffff80, 0x9}, {0x2, 0x100003}, {0x6, 0xfff}, {0xa, 0x3ff}], 0xce, 0x1, 0x6, 0x3}}) 12.63899299s ago: executing program 3 (id=955): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000080), 0x4802, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0) read$msr(r5, &(0x7f0000032680)=""/102392, 0x18ff8) keyctl$dh_compute(0x17, 0x0, 0x0, 0x0, 0x0) io_submit(0x0, 0x0, &(0x7f00000002c0)) mknod$loop(0x0, 0xfff, 0x1) recvmmsg(0xffffffffffffffff, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f00000002c0)=[{0x0}, {&(0x7f0000001580)=""/238, 0xee}], 0x2}}], 0x1, 0x2, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000fddbdf250200000008000300", @ANYRES32=r3, @ANYBLOB="080026007f0400"/16], 0x2c}, 0x1, 0x0, 0x0, 0x4011}, 0x20004810) socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x8e, &(0x7f0000000500)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd308", 0x58, 0x6, 0x1, @local, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x16, 0x42, 0x0, 0x0, 0x0, {[@fastopen={0x22, 0x2}, @sack_perm={0x4, 0x2}, @timestamp={0x8, 0xa, 0x0, 0x1}, @mptcp=@capable={0x1e, 0xc, 0x5, 0x8, 0xd0, 0x6}, @mss={0x2, 0x4, 0x5}, @md5sig={0x13, 0x12, "ba885a106943a3de301004248cc11502"}, @md5sig={0x13, 0x12, "5de3ddccb400"}]}}}}}}}}, 0x0) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000001c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100fdffffff000000001d00000008000300", @ANYRES32=r7, @ANYBLOB="24002f8008000100000000000c00bdf2a56a64c36302000202aaaaaaaa96aa0c0003610800010000000000"], 0x40}, 0x1, 0x0, 0x0, 0xd49920d352514f42}, 0x4000040) 11.91858789s ago: executing program 0 (id=956): socket$inet_sctp(0x2, 0x5, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() r1 = accept4$unix(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x800) getpeername$unix(r1, 0x0, &(0x7f0000000340)) sched_setscheduler(r0, 0x2, &(0x7f0000000100)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/21], 0x50) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r4, 0x400448cb, 0x0) 11.696985774s ago: executing program 3 (id=958): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) prlimit64(0x0, 0x8, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) write$rfkill(r0, &(0x7f0000000080)={0x2020, 0x8, 0x3, 0x5, 0x1}, 0x8) r4 = fsopen(&(0x7f0000000280)='binder\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) fchdir(r4) r5 = socket(0xa, 0x3, 0x3a) r6 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x2, 0x6, 0x648, 0x368, 0x578, 0x368, 0x190, 0x0, 0x578, 0x578, 0x578, 0x578, 0x578, 0x6, 0x0, {[{{@ipv6={@mcast1, @private1, [], [], 'bond_slave_0\x00', 'wg0\x00', {}, {0xff}, 0x21}, 0x0, 0x168, 0x190, 0x0, {0x7a00000010000000}, [@common=@srh1={{0x90}, {0xff, 0x0, 0x0, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, @private2, [], [0x0, 0xffffffff], [], 0x0, 0x10}}, @common=@inet=@dccp={{0x30}, {[0x4e24, 0x4e24], [0x4e23, 0x4e24], 0xd, 0x700, 0x4, 0x7}}]}, @HL={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast1, 'veth1_to_bridge\x00', {0x6}}}}, {{@ipv6={@ipv4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'bridge0\x00', 'bond_slave_0\x00', {0xff}, {}, 0x32}, 0x0, 0xa8, 0xe8, 0x48000000}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x9, 0x8, @ipv4=@private=0xa010101, 0x4e23}}}, {{@ipv6={@loopback, @local, [0xff, 0x0, 0xff, 0xffffffff], [0xff000000, 0xff000000, 0xffffffff, 0xffffff00], 'macvlan0\x00', 'veth1_to_bridge\x00', {}, {0xff}, 0x8, 0x81, 0x1, 0x36}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4, @ipv6=@private1, 0x0, 0x37}}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}, {0x9}}]}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6a8) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) connect$bt_l2cap(r7, &(0x7f0000000040)={0x1f, 0x5, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) setsockopt$bt_BT_SECURITY(r7, 0x112, 0x4, &(0x7f0000000080)={0x4, 0x4}, 0x2) setsockopt$MRT6_ADD_MFC(r5, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}, 0x0, {[0x1, 0x0, 0x0, 0x0, 0x9]}}, 0x5c) setsockopt$MRT6_ADD_MFC(r5, 0x29, 0xcc, 0x0, 0x0) 10.926186496s ago: executing program 0 (id=959): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb3d68000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x80800) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={0x0}, 0x1, 0x0, 0x0, 0x4040080}, 0x8000) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) sendmsg$inet(r4, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000c80)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x3}}], 0x18}, 0x10) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000640)=""/88, 0x58}, {&(0x7f0000000740)=""/105, 0xfffffe0b}], 0x2}, 0x0) 8.887986286s ago: executing program 0 (id=963): ioctl$RFKILL_IOCTL_NOINPUT(0xffffffffffffffff, 0x5202) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000b, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x8000, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r3, 0xc0405602, &(0x7f0000000280)={0x30, 0x2, 0x3, "d5470000002f1a0e0000000700", 0x51424752}) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000300)=[@in6={0xa, 0x4e20, 0x9, @loopback}], 0x1c) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f00000002c0)=[@in6={0xa, 0x4e20, 0x0, @loopback}]}, &(0x7f0000000000)=0x10) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000180)=[@in6={0xa, 0x4e24, 0x3, @empty, 0x3}], 0x1c) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x8, 0x0, 0x0}}, 0x10) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000002700)={r4, &(0x7f0000000240)="a7", &(0x7f0000001700)=""/4096}, 0x20) 8.388789243s ago: executing program 2 (id=964): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x600) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$rds(0x15, 0x5, 0x0) bind$rds(r4, 0x0, 0x0) sendmsg$rds(r4, 0x0, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000180)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000001c0)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000380)={0x0, 0x1, &(0x7f0000000440)=[r6], 0x0, 0x0, 0x0, 0x0, 0x300}) 7.242701891s ago: executing program 2 (id=965): socket$inet6_sctp(0xa, 0x1, 0x84) sendto$l2tp(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) fanotify_init(0x200, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) connect$netlink(r0, 0x0, 0x0) write$FUSE_NOTIFY_POLL(0xffffffffffffffff, &(0x7f0000000100)={0xfffffffffffffeab, 0x1, 0x0, {0x2}}, 0xffffffe8) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000c40), 0x12) r3 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r3, &(0x7f0000000440)={0x28, 0x0, 0x2710, @host}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000280)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r4, &(0x7f00000004c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x2c, 0x0, 0x2, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_TIMEOUT={0x8, 0x110, 0x2}, @NL80211_ATTR_TIMEOUT={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000851}, 0x8000) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=@newtaction={0xf0, 0x30, 0x1, 0xe501, 0x0, {}, [{0xdc, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x30, 0x1, {0x0, 0x81000000, 0x800, 0x0, 0x0, {0x0, 0x1}, {}, 0x8001}}]]}, {0x4}, {0xc}, {0xc}}}, @m_police={0x6c, 0x2, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x1, 0x0, 0x0, 0x0, 0x400000, {0x0, 0x0, 0x0, 0x0, 0xffff}, {0x4}}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0xf0}}, 0x0) open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) 6.836115307s ago: executing program 1 (id=967): io_setup(0x45, &(0x7f0000000180)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socket$nl_route(0x10, 0x3, 0x0) fadvise64(0xffffffffffffffff, 0x7fffffffffffffff, 0x4, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x2, 0x180000, 0x1}, 0x1c) recvmsg$unix(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1}, 0x40010020) sendmmsg(r1, &(0x7f00000030c0), 0x0, 0x9200000000000000) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_rr_get_interval(0x0, &(0x7f0000000340)) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) setsockopt$sock_int(r1, 0x1, 0x21, &(0x7f0000000540)=0x7, 0x4) recvmsg$unix(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)}, 0x40000002) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'veth1_to_bond\x00', 0x0}) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000100)={r4, 0x2, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x39}}, 0x10) r5 = socket$pptp(0x18, 0x1, 0x2) getpeername(r5, 0x0, 0x0) write$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000040)='FROZEN\x00', 0x7) write$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000080)='THAWED\x00', 0x7) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) 6.684284199s ago: executing program 4 (id=968): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000080), 0x4802, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0) read$msr(r5, &(0x7f0000032680)=""/102392, 0x18ff8) keyctl$dh_compute(0x17, 0x0, 0x0, 0x0, 0x0) io_submit(0x0, 0x0, &(0x7f00000002c0)) mknod$loop(0x0, 0xfff, 0x1) recvmmsg(0xffffffffffffffff, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f00000002c0)=[{0x0}, {&(0x7f0000001580)=""/238, 0xee}], 0x2}}], 0x1, 0x2, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000fddbdf250200000008000300", @ANYRES32=r3, @ANYBLOB="080026007f0400"/16], 0x2c}, 0x1, 0x0, 0x0, 0x4011}, 0x20004810) socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x8e, &(0x7f0000000500)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd308", 0x58, 0x6, 0x1, @local, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x16, 0x42, 0x0, 0x0, 0x0, {[@fastopen={0x22, 0x2}, @sack_perm={0x4, 0x2}, @timestamp={0x8, 0xa, 0x0, 0x1}, @mptcp=@capable={0x1e, 0xc, 0x5, 0x8, 0xd0, 0x6}, @mss={0x2, 0x4, 0x5}, @md5sig={0x13, 0x12, "ba885a106943a3de301004248cc11502"}, @md5sig={0x13, 0x12, "5de3ddccb400"}]}}}}}}}}, 0x0) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000001c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100fdffffff000000001d00000008000300", @ANYRES32=r7, @ANYBLOB="24002f8008000100000000000c00bdf2a56a64c36302000202aaaaaaaa96aa0c0003610800010000000000"], 0x40}, 0x1, 0x0, 0x0, 0xd49920d352514f42}, 0x4000040) 6.63367944s ago: executing program 2 (id=969): socket$inet_sctp(0x2, 0x5, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() r1 = accept4$unix(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x800) getpeername$unix(r1, 0x0, &(0x7f0000000340)) sched_setscheduler(r0, 0x2, &(0x7f0000000100)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/21], 0x50) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r4, 0x400448cb, 0x0) 5.093984313s ago: executing program 4 (id=970): socket$inet_mptcp(0x2, 0x1, 0x106) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000005c0)=0xd) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/mdstat\x00', 0x0, 0x0) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0xd0, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xa, 0x80000006, 0x400}, 0x0, 0x0) 4.996598394s ago: executing program 1 (id=971): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x804e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) keyctl$dh_compute(0x17, 0x0, &(0x7f0000000100)=""/66, 0x42, &(0x7f0000000340)={&(0x7f0000000300)={'streebog256\x00'}}) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_inet_tcp_SIOCOUTQ(r4, 0x5411, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r5, &(0x7f0000000200)={0x10, 0x0, 0xffffffff, 0x80065c9}, 0xc) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900038073797a32000000001400000011000147"], 0x7c}, 0x1, 0x0, 0x0, 0x25}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}], {0x14}}, 0x64}}, 0x0) r7 = socket$inet_sctp(0x2, 0x5, 0x84) sendmmsg$inet_sctp(r7, &(0x7f0000004f40)=[{&(0x7f0000000a80)=@in={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000003c80)=[{&(0x7f0000000ac0)='0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x80800) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={0x0}, 0x1, 0x0, 0x0, 0x4040080}, 0x8000) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) sendmsg$inet(r4, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000c80)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x3}}], 0x18}, 0x10) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000640)=""/88, 0x58}, {&(0x7f0000000740)=""/105, 0xfffffe0b}], 0x2}, 0x0) 3.651664875s ago: executing program 4 (id=974): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000001c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) read$msr(0xffffffffffffffff, 0x0, 0x0) syz_emit_vhci(0x0, 0x7) prlimit64(0x0, 0xe, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="020000"], 0xffe4, 0x2) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000000)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000779000/0x1000)=nil, 0x400000, 0x3, 0x2}) 2.796237708s ago: executing program 2 (id=975): openat$ptmx(0xffffffffffffff9c, 0x0, 0x20d00, 0x0) socket(0x2, 0x80805, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="b4050000200080006110600000000000c60000000000000095000000000000009f33ef60916e6e893f1eeb0be20000d072f5b89c3043c47c896ce0bc8731fa595b6b4d45ef26dcca5582054d54d53cd2b6db714e4b94bdae214fa68a0557eb3c5ca683a4b6fc89398f2b9000f224891060017c4700de60beac671e8e8fdecb03588aa6007e71f871ab5c2ff88afc6002084e5b52710aeee835cf0d78e45f70983826fb8579c1fb47d2c5553d2ccb5fc5b51fe6b174ebd9907dcff414ed55b0d18a93ee341ab59016f81860324b800c00000000000092d9c5fe34ccb80a61ffcb3363073fd8962823ee45f5d7394e9510f4a8"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x4, 0x4, 0x12}, 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@map=r5, r4, 0x26}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000a80)={r5, &(0x7f0000000940), &(0x7f0000000a40)=@tcp6=r3}, 0x20) shutdown(r3, 0x0) recvmmsg(r3, &(0x7f0000000300)=[{{0x0, 0x0, &(0x7f0000000640)=[{0x0}], 0x1}}], 0x1, 0x4002, 0x0) 2.602766521s ago: executing program 3 (id=976): r0 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x0) fchdir(r1) openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/cgroup.procs\x00', 0xa880, 0x97) 2.532623991s ago: executing program 3 (id=977): r0 = socket$inet(0x2, 0x2, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="1201100100000010450c1251000000000001090224"], 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000000)={@local}) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0xc00000000000, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xfffdffffffffffff, 0x9, 0x3, 0xf, 0x80000006}, 0x0, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r2, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e, 0x8}) r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, &(0x7f0000000240)={@hyper}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r3, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e}) close_range(r1, 0xffffffffffffffff, 0x0) 2.509038912s ago: executing program 1 (id=978): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r0, &(0x7f0000000140), 0x0, 0x20008005, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$kcm(0x10, 0x2, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, 0x0, 0x20000000) r2 = openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x41, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000040)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'lo\x00'}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) setsockopt$sock_int(r3, 0x1f, 0x20, 0x0, 0x0) write$nbd(r2, 0x0, 0x0) mount$afs(0x0, &(0x7f0000002840)='./file0\x00', &(0x7f0000002880), 0x700, &(0x7f0000000200)=ANY=[@ANYBLOB='dy']) umount2(&(0x7f00000002c0)='./file0\x00', 0x9) 1.780795333s ago: executing program 2 (id=979): sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x30, 0x0, 0x4, 0x70bd2b, 0x25dfdbfb, {{}, {}, {0x14, 0x18, {0x8, @bearer=@udp='udp:syz0\x00'}}}}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x40001) add_key$user(&(0x7f0000000380), &(0x7f0000000000), &(0x7f00000003c0)='X', 0x1, 0xfffffffffffffffe) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = socket(0x40000000015, 0x805, 0x0) getsockopt(r3, 0x114, 0x271d, 0x0, &(0x7f0000000000)) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000002240)) 1.589250186s ago: executing program 0 (id=980): add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) bind$inet(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$vcsa(&(0x7f0000000040), 0x4, 0xd49100) ioctl$DVB_DEMUX_DMX_START(0xffffffffffffffff, 0x6f29) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8) close(0xffffffffffffffff) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)="1400000016000b63d25a80648c2594f922240685", 0x14}], 0x1}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfdfbffff, {0x0, 0x0, 0x0, r4, {0x0, 0x8}, {0xffff, 0xffff}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x10, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x4}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0xb}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40001}, 0x8090) 965.805125ms ago: executing program 1 (id=981): openat$tun(0xffffffffffffff9c, 0x0, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$kcm(0x21, 0x2, 0x2) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ipv6_route\x00') sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1400015c0000000000000000009ae99d5a61dc3ff4b0d2af00000000000000"], 0x14}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) pread64(r1, &(0x7f000001a240)=""/102399, 0x18fff, 0x100008) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB], 0x0}, 0x94) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) setuid(0xee01) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], 0x0}, 0x94) socket$kcm(0x10, 0x2, 0x0) 420.7µs ago: executing program 4 (id=982): r0 = syz_open_dev$mouse(0x0, 0x0, 0x8042) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r2, 0x29, 0x31, 0x0, 0x0) bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x4) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'trusted:', 'syz', 0x20, 0xffd}, 0x2d, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001140)=ANY=[], 0x0}, 0x94) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x298, 0x1c8, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3b8, 0xffffffff, 0xffffffff, 0x3b8, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0, 0x60030000, {0x0, 0xff000000}}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x1a, 0x1, 0x5}}}, {{@ipv6={@remote, @private2, [0xffffff00, 0xffffffff, 0x0, 0xffffff00], [0xffffffff, 0xffffff00, 0xffffffff, 0xff000000], 'netpci0\x00', 'bridge_slave_1\x00', {}, {0xff}, 0x2b, 0x2, 0x5, 0x5}, 0x0, 0xd8, 0xf8, 0x0, {}, [@common=@srh={{0x30}, {0x0, 0xb7, 0x4, 0xe8, 0x6, 0x1268, 0xb2a}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2f8) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000000)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010800040000040000000b00000008000300", @ANYRES32=r5, @ANYBLOB="0a000600080211000001000030005080110001004abee33908f8eef16f162471f4000000080007000000000005000200020000000800030005ac0f"], 0x58}}, 0x0) r6 = syz_open_procfs(0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x10) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0xc0686611, &(0x7f0000000040)={0x68, 0x0, 0x17, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) write$UHID_INPUT(r0, &(0x7f0000000640)={0x8, {"179c4f014d5876c3e4fa4858113c67be813637500fce388e37e40fe6caf6a8ab9fc1cea8e2fcd16a3b5acde00efe8a7d7b70a535ae5f340be5bf60748b0ac30b62af7dcf60cf8d3fcfb114b6d1f9fb8b1e8aef18382d4a02753336ab7502c9892b8fdf9aec72a2039b9a51cb0ac50a9405849e2c0dfb2f2789ae9e51b59c4d4e72ecf4591d8f01a127d5395f0d99eebddea945b4297ab24a98c891f789a65c73dad8fb44eb39bf16cb1d5f31fee042b96cd65871557a30c4bedf9a3ba6c17e29554530fda4058f25b48059b02f084faa4f91e4cf0191b80074786b4d3756059d420a1f86271ea5ccc3269f6b353502fc804d94c5b3fb23156bee74a71add4880bb19133c11acee211a9f1668bf4f3934ae9be20fef0d13239d0a4c70d90c08b8b02c4f0f3b778f86322f80151ea4226fef27ca2be21fdcf48a48167fc9ac0c3b2402be32aba0d9846b4183c00de6a70c2e15f62ac166d5573d29d23d00d26af731345a5ccf20eea009e405decb055845a56d8ab1ce9b5382325993ce12d444a2acbbdc15af24765fc618af889171d224c7b5ebdc2477d6ed6d85fd9c01f79b0e5a4e1517f6eff2ec1f19b19936b084828249285813f082416ee19a66fca34b6dd41833445edfb9ffc8b39a1e47aba48692f26d7f85f1d37097a51907670c421287cba70f3f0c72d30ace0060c846f509f7fae8b552a9a7f2e8a2b484c45b70fccaf9246249c06a56dbb11029ea821b67fde0dbe1a04a4af06a414265f6890229ef46488a78cf689ba3f72ec5067eeaf62e3a6a793a9c1a0cfe27f9ce9fc9e9a86111657662996240821f476be942664ef82489944847478d1ea7741ddfe0c9bea87e1743823729ba528682e47a6891ec2e6985692b07af258418cbcfd473b1f80673156dae9f058edcff3aa2cc9c52c01352f18a74e32f5c1f268c3a92557c35d344844bacb2b7a59f813bce96fc83ba984a664d4440f2671f56c4279b003ab01262e415cab5f41ddbc0aca42b073751f27344403f8e0742ad67054fba95f91773864b8b0e8693fb46d00426a055c921bbcd7fd18af2570a9b9cc58a0724bad0e2f33fd4ee12bf721047d3b3650714ddd2226b7adc7a85293576edb7eb68ab71ac2ede80e72f70fe70c4f2716d453451bad3164a1c31d0dd140e44661c0b1c2d004dc09298df68dd329d922e04a2c569f6f5d6187286aecd2ff7c6614932c321680c609b403769612c340f346d1914775a8b8e0651965bc7c59ef65bf0822042187d78c0e0ba8ee255052eea74f7e3a01fd09ff78d8a9390d7f37f034ed9d876c3d1849c2b4e689b9da3e69a213a61ab4ac96e45b28209f5cf71bf3ca100f4b5eef2a7356e32e1fb4c2434902cf445df1d9d13b2b01d3726766f8ebf7970a9e40cce88f364b6edcd5b5def96c08dbac0cc5f627002e4730180436c061e3c64246fd1e576c17cde76244d35fb3a8ca73d1a0a4b53c470532d53aaaed056b174e9f50666ca5996794edcd095356290ef3d6319ad6372bba007a389cb597db057bb1d62e355568e05dbac146f0cad11141427e903133b3fd25180e6225789749e8f631b5820d9dddd8a7f3f21b1e46599c10244ee00e58a27d4a26e9a05bd6f4203bea31607d6b932febef464fcdada794e7c82f7b25cfac68c094ed4cdb35da044b184460191efcb16af1f5e6945b527d09b4c66cde472db864212c0c67aeaf90a29610df17ddb3c5c7b515539a433ec221e735cd23d1d58661418f40903ddec4b53330ac152b6ac1426b0115a5bcb31bc36fd59fdd694120cf4e79882ec3dc28d0551aa0f22ba8a1282bc120202a1f6fd6fd61e29b7b3e3fdcde974d1fc753cb99ffe1f1608b88e2fed004fdad78e02675c3946a65861d827b5e21f50ca5ca762c3afa5bce905b7e6d7a8b06cae47d213899c346d47ad99a177719f763168e1f70767bdf226fab1e299549a875e9e5171b1cf95359a5e0613016cf70c198fd645efe0c4d6305589989894e0084bf1c1fdd7d4ed3238a797460d035b8007f6077a9c3d158f92c5d8f9299c7dd86f78c79739889db98840bdfa0d7681a79b09d78fddfbe7a6044ed308bb51462ee08f625396b7685e87d9a302fa71ac45bcc47504a097343c8cccffad6b42026801e77e0b1bf22a974ce5468307a5b35f333341f48ebb9a844b3f2fb0b0da82b9bd4ee80d5774975c912caf598442f8b403f756e5f0160c8d5c98af30220179a1c541545957b3b1d03440df049f7bbfc84a81720f35e42dab5c462e3485a579e0dd851d74c2261fa7a05d06382a43aecfa9136b41e46e13f5ea2524beeead6dda02d9a6fc0253ba82627928058c4724f039d38847771899efcb14ace3e396a15a9d08cc3a5f9d443691d05d2d2164ee5db8a2adde60ba2943c13e83435b7c0f08911c0b2f639f5050ce641658e04bf3074d0e082bb292a8769666cb3c3a2e27650c34cad9d3cbfccd312b2376775557049e229320f7acbf3f18b9d761f65e6e86203513f18798499137535809fc3f10b5c6a22b309062f4bc8717fcf6a3660ff9155b04dc41f4887ff726c571c270a1fca4b658126e65651438cd882aabd97b9de7ef1975594ce849abb5fec448170b7d7eb18ca78c61750486e05405b5b0d61b937b3da90d8ee104406f53221b1e28651da01222c56c3542622a7089f43d45b1709f10db170398caa9cd23f1a7637e694f3e9345fa226ac33af1a91505db21fc7e3c3ae480bebff250a43c62c503e66cb6456b90ea04592e3c48b734d5d2d09da58bb5377b942871f15bdffbb5faf34171731413972191764b8046afac7ad352a69f7fb9fa48c743d59c79cca8313b41f4e37ababa98a22d23bac3bb0b575da2f65f206bf5e4dff7e6af00e56451df767d28b0af2f9c27dc570f4c81a57918802e8d3965b92d1b7dfc4412096d240daa03ecebe2d8299a8dcdcb2f80c3099f818c070aeecad7c3ededdcd0839c581f37615cf4ba0c8d887415aa636a064a800c64fdbda79ab7f9c1e9cd645cab68100a4fd570cc65a7132c43701f03fd9ed7e5b306ad6a975cc9c66e1184f4cbedf148a8c78500f12390f56259fe46f3200444aba398eaf9acf29e041af64891c5a36c7df04c70c9ae6a1c387fd8c1083ee3c4f1d4b92db609acf98b4280e17784a179b011cd99a58e8a12961519cda823d4f61b176f166652a3f4f07385d3f7d16a0c262ee6f7d29437925782805c63498cd849c11ed957fece33fd80e7e51ff9b51645a43d80251e28a03569f35b62745a70938958144f80ecf6406d672ccd9981658e36b9ebf761a4b1e3c7804c38958a1adfcdc5beaed5f6ccb8f041a6d61b0d3da42027019b8916dba7c53dc6e20bdf3f6d754e7c52551fbfc76eb460aa170047ae8f2e4d0a8e7480d9e5c408c2ba62266554b2b1c0ee270a5308e2e2749e9a7c9c0c181ccffc710294f73c30ce478bd938c23cde4cd96d3baa611d465efe9d83f5374b254b6eb0797f581fabf968e036e8ba9a59feaab2aa8b8ca2f4df30a4016503f67e9aec4b0e24fccc751fbd361219c0ece49d3e5833dfba07c131278d2434ae5d6a38d116dee699898aae19cde949601267b59286883694e5455f4ab5431eb45108ddb02c0a7cb4b4bcb8ef975ba2fadbb8144d9019fc1565a95655b6cce4a79cef35e1f63777871d14a7a0eb27040ef0b334bea57a4e5c94287e73d67efd59877f5750021a867cac4dfe34be049cc48b1ce67a81fd8ba7aaa218c1815c681d257d187a3276cf14ef5adac2972fd4e8f4e77b250b70c4ebef312cd065651250368bda5b7bf4d68289a5eb13202783a7fbe2f493ea5fde647ad988ed7eec362d7c486cd54e83e60ecc2491de0b0180b2dfe5dd44309a46e3b5cb130a732f0b5886ff0112d7f51aab8f9f92b7165807126e8edb64b2ba20a9f197631106dfd99ec1dd082d33bb8cde00fae1356b38c7cd9856172a6f1af8dce21a4f51854ad995d0db151faebf070e55ed84430fa717d7e108118aa9b84dfd962c415969476c6f9481479e5f272f16e30dcd2a4bd1e354bd0342d9d6e7abfc5a15e511ad1155ea05c3476b51fdfcceb8f8720a4c1f401c32de7e2584009a6d62cb47b44b03a8da44b13b0e1bb7677f030d17733214e6c03174fd057173e33641bdf35b2826668dd4eb491fd7ee38443827c7b6ea4432d70fe460d12733e517295fc1f950c447aba9966c0a6f91241c2b5de4672dec6284a9cf9e8b9416f19a6e763b9225ba91ae00e97351c40a800aeb77857630d883be0a47ed281d2bfefc8d033e2c34b2641f2f3e8a4c6647b15dd9bfdfeeea3fa1157d0db77669de1da9245ff97fb8617013f3e4c5c7a4ee721787db8330886d0574efcf86c7ca3a4baa02351d284474aa0e567cf45d99ceb51972b5ea776c8208585431bfa0d23fe136d714355a4e807f41bff5d458b7bc813487082eb2faf6726851ba55cdf38791e1141843284e6ad49124108eab3000b54f2a1abbde0fedfe839359ffcc2718cccc285962cd3f16bb82af6756f43de8fa014ae85ddf822c34574108aaee9a254acc6db79b9d35e89eba57663463ebadb0926528947ffdec88d3c88f11ed07fa39cfbe441e66c4950a8702c249d001642ae1f54839d3c1faa285967b0e7fc289f66f3c1847eadb4229ba49e5a2681df3ae87a279175f54b75a600223d175ab45ac2c3762ad5eda206c1e5ee9e205fa4fece9cdb63d048139134ff8d029f661ead227e29be6f65f94c68c74f0e25ebce4e5da4a94ed33804b87199c31e0a717b977a6b1d5c6f0574521c9365c5ff35b5e1ee231b949a193164e1898d6204372af99634fd75ab4fdd48c434467da038dfb96e7ce985b52cf6542b69a369b38647dfe4b7c6b7425267c5c9305daf85ff3572eafdaf583ae9f226b7986f2402ddbe9e5551630fa0bf0d717391a8973fceb96f403c5e0c2e7bd7604d199d58cb963861b125eacdddf83a5c7cd84049d2ca46e793cddd6b7507aaa563cfbffc8ba43e59a6b9ee8a362f928887671df9ae66dfacd2e9603cf322f0e1a399ea9b6ca9c030bd7e7647267239b6303f76e2d4006d061d8891cc9db4a3da516eefc74771becea5b60094863bf12e813386c22ed00e1f5be9f681116cfe352d0d36219ff89bae173de89c121e6e56bb657277d47efc817516591c3b12ff95b9ed7edd3c8d1790842412b380202032941fc5d9ec432e5c7203fd207e32102497b13ca2ea43ed8a5991cecc19fc77a7398328e9334061997700166e3e0a72ed4b0c5c47aca9fd48d05c40f50d22f1f642a6e5a4af8ea5d1d6c5e45e2f402634069f3705767847c78081b08081052920829e22881bcba19d6452d198beccc81295a2683d0c545713ba2953fa4f667362d06a352f406a33ee7e553fcc7268e2d7fc97e1ccd340bb8c73ae631a1051acdc872a0d30da2774d9570007be36f54ac6f2b93085c353b3fa0201ca7828e7154c4a7d837cd76db45cddfa39adc095d61987e8f47ebe476f75132d7e653ec59f99d9bb576ca36f3374284ecf5e816d940456dd9299c298c9bf54eb313ef9ed29c17b987baf2ce18be63d6f87f2fb93b16522211255400af050caabc26c96777e88ebd6cf529eb8924b2ef2e0a2042ea4e9410ca1236aaee7ebf4946c8573a26c9f80a0d24b7d629bdb7bfbe0db1e3e97d37fc018f9ebca783c06c43b9f9dfc98ea684d0cd74e4631a6347a0775ad8759448a25f7d60e53ab86452b1a13fb16928142f341ee3c31c7320159819ee4319d2afb3f8e47fd0ef8893fe154d08b8fea6669a52f2", 0x1000}}, 0x1006) 0s ago: executing program 1 (id=983): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000240)={'syzkaller0\x00', @broadcast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x200504, 0x0) close(r4) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x7, 0x6361, 0x5, 0xffffffff, 0x5}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x240080c1}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x80000, {0x0, 0x0, 0x0, r6, {0x0, 0x6}, {0x3, 0xb}, {0xfff3, 0x6}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0xb, 0x8, 0x1}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2404c0f1}, 0x6008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) kernel console output (not intermixed with test programs): slaving as an active interface with an up link [ 64.382513][ T4198] team0: Port device team_slave_1 added [ 64.390670][ T4192] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.409871][ T4188] team0: Port device team_slave_0 added [ 64.417709][ T4187] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.435599][ T4187] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.453749][ T4192] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.464753][ T4188] team0: Port device team_slave_1 added [ 64.510646][ T4187] team0: Port device team_slave_0 added [ 64.524907][ T4196] team0: Port device team_slave_0 added [ 64.531925][ T4198] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.540018][ T4198] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.566313][ T4198] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.579892][ T4198] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.586871][ T4198] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.612993][ T4198] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.631564][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.639129][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.665522][ T4188] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.678514][ T4187] team0: Port device team_slave_1 added [ 64.684637][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.691771][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.717982][ T4188] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.731167][ T4196] team0: Port device team_slave_1 added [ 64.750355][ T4192] team0: Port device team_slave_0 added [ 64.797324][ T4192] team0: Port device team_slave_1 added [ 64.825543][ T4188] device hsr_slave_0 entered promiscuous mode [ 64.833402][ T4188] device hsr_slave_1 entered promiscuous mode [ 64.841674][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.849195][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.875291][ T4187] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.904198][ T4198] device hsr_slave_0 entered promiscuous mode [ 64.911218][ T4198] device hsr_slave_1 entered promiscuous mode [ 64.920597][ T4198] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 64.928630][ T4198] Cannot create hsr debugfs directory [ 64.934669][ T4196] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.942018][ T4196] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.968741][ T4196] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.982263][ T4196] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.989504][ T4196] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.015488][ T4196] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 65.027331][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 65.034526][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.060660][ T4187] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 65.097843][ T4192] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 65.104940][ T4192] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.131152][ T4192] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 65.168415][ T4196] device hsr_slave_0 entered promiscuous mode [ 65.175140][ T4196] device hsr_slave_1 entered promiscuous mode [ 65.182392][ T4196] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 65.190484][ T4196] Cannot create hsr debugfs directory [ 65.197038][ T4192] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 65.204176][ T4192] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.230245][ T4192] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 65.309546][ T4192] device hsr_slave_0 entered promiscuous mode [ 65.316389][ T4192] device hsr_slave_1 entered promiscuous mode [ 65.323876][ T4192] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 65.331854][ T4192] Cannot create hsr debugfs directory [ 65.368755][ T1107] Bluetooth: hci4: command 0x0409 tx timeout [ 65.375396][ T1107] Bluetooth: hci3: command 0x0409 tx timeout [ 65.378393][ T1110] Bluetooth: hci1: command 0x0409 tx timeout [ 65.387690][ T1110] Bluetooth: hci2: command 0x0409 tx timeout [ 65.395249][ T1107] Bluetooth: hci0: command 0x0409 tx timeout [ 65.405103][ T4187] device hsr_slave_0 entered promiscuous mode [ 65.412155][ T4187] device hsr_slave_1 entered promiscuous mode [ 65.419125][ T4187] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 65.426702][ T4187] Cannot create hsr debugfs directory [ 65.709489][ T4188] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 65.722894][ T4188] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 65.737236][ T4188] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 65.747336][ T4188] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 65.812714][ T4198] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 65.830916][ T4198] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 65.842528][ T4198] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 65.873695][ T4198] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 65.914682][ T4188] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.927618][ T4192] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 65.940000][ T4192] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 65.953856][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 65.963171][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 65.987447][ T4192] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 65.998617][ T4192] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 66.022972][ T4188] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.067218][ T4196] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 66.079343][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 66.089613][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 66.098825][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.106181][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.123339][ T4196] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 66.134518][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 66.175173][ T165] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 66.184081][ T165] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 66.193348][ T165] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.200478][ T165] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.209018][ T4196] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 66.217840][ T4196] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 66.234308][ T4198] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.248360][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 66.277262][ T4198] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.300178][ T165] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 66.309101][ T165] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 66.316977][ T165] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 66.326475][ T165] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 66.336011][ T165] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 66.345004][ T165] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 66.354951][ T165] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 66.364993][ T165] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 66.376011][ T4187] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 66.392645][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 66.401550][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 66.411567][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 66.420627][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 66.429939][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.437043][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.445136][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 66.459887][ T4187] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 66.471556][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 66.480761][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 66.490864][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.498015][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.507839][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 66.516978][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 66.536960][ T4192] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.544391][ T4187] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 66.563195][ T4188] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 66.577812][ T4187] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 66.589213][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 66.630489][ T4192] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.637408][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 66.655668][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 66.666056][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 66.683510][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 66.693739][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 66.719463][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 66.729482][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 66.739132][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 66.749450][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 66.758364][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 66.767086][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 66.777148][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 66.786228][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.793372][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.801834][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 66.812314][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 66.823444][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.830592][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.864098][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 66.872442][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 66.885196][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 66.903684][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 66.914225][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 66.929553][ T4198] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 66.971634][ T4196] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.991231][ T165] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 67.006268][ T165] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 67.019809][ T165] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 67.029248][ T165] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 67.038714][ T165] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 67.047198][ T165] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 67.057029][ T165] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 67.064999][ T165] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 67.075293][ T165] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 67.087747][ T165] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 67.097247][ T165] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 67.108762][ T4188] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.126372][ T4192] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 67.160484][ T165] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 67.170397][ T165] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 67.191876][ T4196] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.217225][ T165] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 67.236208][ T165] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 67.273069][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 67.284144][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 67.299687][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.306790][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.321563][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 67.333597][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 67.346164][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.353292][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.361488][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 67.383061][ T4187] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.392308][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 67.403395][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 67.440439][ T4188] device veth0_vlan entered promiscuous mode [ 67.448182][ T4236] Bluetooth: hci2: command 0x041b tx timeout [ 67.451412][ T4235] Bluetooth: hci0: command 0x041b tx timeout [ 67.454279][ T4236] Bluetooth: hci3: command 0x041b tx timeout [ 67.473851][ T4236] Bluetooth: hci1: command 0x041b tx timeout [ 67.474731][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 67.487388][ T4236] Bluetooth: hci4: command 0x041b tx timeout [ 67.490711][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 67.507099][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 67.516489][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 67.531894][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 67.542137][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 67.549983][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 67.560110][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 67.569560][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 67.578848][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 67.589021][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 67.599816][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 67.607647][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 67.623081][ T4198] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.637466][ T4187] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.669664][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 67.679129][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 67.687411][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 67.696245][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 67.709459][ T4188] device veth1_vlan entered promiscuous mode [ 67.722458][ T4192] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.740681][ T4196] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 67.752205][ T4196] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 67.762674][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 67.772557][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 67.781905][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 67.790845][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 67.799543][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 67.808444][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 67.816985][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.824111][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.832463][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 67.871556][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 67.884314][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 67.895692][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.902861][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.919714][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 67.933872][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 67.944047][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 67.959258][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 67.972959][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 67.982923][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 67.994285][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 68.025120][ T4198] device veth0_vlan entered promiscuous mode [ 68.058217][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 68.067355][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 68.084635][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 68.096063][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 68.125079][ T4198] device veth1_vlan entered promiscuous mode [ 68.135133][ T4188] device veth0_macvtap entered promiscuous mode [ 68.146000][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 68.154199][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 68.162704][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 68.172202][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 68.180831][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 68.191058][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 68.200457][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 68.209324][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 68.217758][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 68.226506][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 68.253106][ T4188] device veth1_macvtap entered promiscuous mode [ 68.272839][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 68.282435][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 68.291611][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 68.300452][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 68.310655][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 68.318212][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 68.344134][ T4187] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 68.357462][ T4196] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.365442][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 68.375689][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 68.385369][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 68.394449][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 68.403603][ T4192] device veth0_vlan entered promiscuous mode [ 68.421860][ T4198] device veth0_macvtap entered promiscuous mode [ 68.436105][ T4198] device veth1_macvtap entered promiscuous mode [ 68.447214][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.462050][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 68.478627][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 68.495483][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 68.503953][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 68.512691][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 68.522085][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 68.556939][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.587081][ T4192] device veth1_vlan entered promiscuous mode [ 68.618532][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 68.627396][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 68.636933][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 68.660244][ T4198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.681446][ T4198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.702899][ T4198] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.715572][ T4198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.726366][ T4198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.740767][ T4198] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.751366][ T4188] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.761636][ T4188] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.770619][ T4188] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.779444][ T4188] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.828879][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 68.837448][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 68.848193][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 68.857203][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 68.866652][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 68.876326][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 68.884663][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 68.896938][ T4198] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.916901][ T4198] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.926374][ T4198] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.935392][ T4198] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.960111][ T4187] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.998613][ T165] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 69.007237][ T165] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 69.022775][ T4192] device veth0_macvtap entered promiscuous mode [ 69.079357][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 69.089184][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 69.098715][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 69.110174][ T4192] device veth1_macvtap entered promiscuous mode [ 69.143784][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 69.155037][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 69.164354][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 69.173398][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 69.182302][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 69.191259][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 69.199827][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 69.208513][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 69.216508][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 69.224817][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 69.233389][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 69.251326][ T4196] device veth0_vlan entered promiscuous mode [ 69.279413][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.294657][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.304885][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.316158][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.328828][ T4192] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.342022][ T4187] device veth0_vlan entered promiscuous mode [ 69.352326][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 69.361524][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 69.380857][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.392247][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.402986][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.413810][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.425333][ T4192] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.443560][ T4187] device veth1_vlan entered promiscuous mode [ 69.457278][ T4196] device veth1_vlan entered promiscuous mode [ 69.464493][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.472965][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.484792][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 69.493397][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 69.503279][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 69.512900][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 69.522314][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 69.529604][ T4235] Bluetooth: hci4: command 0x040f tx timeout [ 69.529731][ T4235] Bluetooth: hci1: command 0x040f tx timeout [ 69.529809][ T4235] Bluetooth: hci3: command 0x040f tx timeout [ 69.529883][ T4235] Bluetooth: hci0: command 0x040f tx timeout [ 69.529949][ T4235] Bluetooth: hci2: command 0x040f tx timeout [ 69.564949][ T4192] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.574549][ T4192] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.583626][ T4192] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.593241][ T4192] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.659081][ T4241] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.666978][ T4241] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.706048][ T4196] device veth0_macvtap entered promiscuous mode [ 69.716921][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 69.726311][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 69.735221][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 69.743351][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 69.753200][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 69.762224][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 69.785696][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 69.794994][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 69.810946][ T4196] device veth1_macvtap entered promiscuous mode [ 69.831872][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.841562][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.856901][ T165] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.866159][ T165] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.880237][ T4187] device veth0_macvtap entered promiscuous mode [ 69.887637][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.899569][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.914458][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.925535][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.937255][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.950208][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.961597][ T4196] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.978712][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 69.993608][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 70.003985][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 70.016183][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 70.025555][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 70.035120][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 70.059789][ T4187] device veth1_macvtap entered promiscuous mode [ 70.079441][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.092168][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.103337][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.114291][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.124736][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.135711][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.150550][ T4196] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.180787][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 70.204374][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 70.223024][ T4196] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.233567][ T4196] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.242665][ T4196] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.252837][ T4196] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.264822][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.282733][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.292690][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.309586][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.335676][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.347484][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.359808][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.371226][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.384903][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.405896][ T4241] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.416118][ T4241] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.441643][ T4270] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1'. [ 70.462905][ T4270] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1'. [ 70.472714][ T4270] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1'. [ 70.482814][ T4270] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1'. [ 70.498641][ T4270] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1'. [ 70.508207][ T4270] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1'. [ 70.517142][ T4270] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1'. [ 70.528364][ T4270] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1'. [ 70.537658][ T4270] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1'. [ 70.550151][ T4270] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1'. [ 70.559857][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 70.570331][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 70.584681][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 70.600686][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.620119][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.634857][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.647862][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.657840][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.675979][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.686400][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.703730][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.725067][ T4276] Zero length message leads to an empty skb [ 70.737489][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.776451][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 70.807206][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 70.910374][ T4187] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.947590][ T4187] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.999328][ T4187] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.090733][ T4187] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.220852][ T165] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.238111][ T165] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.448501][ T1427] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.580827][ T1427] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.608712][ T21] Bluetooth: hci2: command 0x0419 tx timeout [ 71.616272][ T21] Bluetooth: hci0: command 0x0419 tx timeout [ 71.623070][ T21] Bluetooth: hci3: command 0x0419 tx timeout [ 71.629820][ T21] Bluetooth: hci1: command 0x0419 tx timeout [ 71.636920][ T21] Bluetooth: hci4: command 0x0419 tx timeout [ 71.882055][ T4289] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.899987][ T4289] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.930283][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 71.943886][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 72.050222][ T165] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.079712][ T165] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.224583][ T165] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 73.329783][ T4305] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 73.558561][ T4289] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.588288][ T4289] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.607158][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 73.686886][ T4289] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.699540][ T4289] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.751531][ T4289] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 74.227907][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 74.237930][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 74.247907][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 74.257904][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 74.267904][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 74.277904][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 74.287903][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 74.297906][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 74.307905][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 74.317903][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 74.905584][ T4345] input: syz0 as /devices/virtual/input/input5 [ 75.456115][ T4353] __nla_validate_parse: 10 callbacks suppressed [ 75.456130][ T4353] netlink: 12 bytes leftover after parsing attributes in process `syz.2.25'. [ 75.502916][ T4353] netlink: 12 bytes leftover after parsing attributes in process `syz.2.25'. [ 75.543478][ T4353] netlink: 12 bytes leftover after parsing attributes in process `syz.2.25'. [ 75.605224][ T4353] netlink: 12 bytes leftover after parsing attributes in process `syz.2.25'. [ 75.675373][ T4353] netlink: 12 bytes leftover after parsing attributes in process `syz.2.25'. [ 75.714297][ T4353] netlink: 12 bytes leftover after parsing attributes in process `syz.2.25'. [ 75.745864][ T4353] netlink: 12 bytes leftover after parsing attributes in process `syz.2.25'. [ 75.775134][ T4353] netlink: 12 bytes leftover after parsing attributes in process `syz.2.25'. [ 75.802087][ T4353] netlink: 12 bytes leftover after parsing attributes in process `syz.2.25'. [ 75.826561][ T4353] netlink: 12 bytes leftover after parsing attributes in process `syz.2.25'. [ 77.960010][ T4371] netlink: 'syz.2.29': attribute type 6 has an invalid length. [ 78.049626][ T4369] netlink: 'syz.2.29': attribute type 6 has an invalid length. [ 80.818440][ T4233] Bluetooth: hci4: command 0x0411 tx timeout [ 80.829196][ T4390] netlink: 8 bytes leftover after parsing attributes in process `syz.1.35'. [ 81.492602][ T4395] netlink: 12 bytes leftover after parsing attributes in process `syz.2.36'. [ 81.518448][ T4395] netlink: 12 bytes leftover after parsing attributes in process `syz.2.36'. [ 81.540602][ T4395] netlink: 12 bytes leftover after parsing attributes in process `syz.2.36'. [ 81.569157][ T4395] netlink: 12 bytes leftover after parsing attributes in process `syz.2.36'. [ 81.589200][ T4395] netlink: 12 bytes leftover after parsing attributes in process `syz.2.36'. [ 81.608356][ T4395] netlink: 12 bytes leftover after parsing attributes in process `syz.2.36'. [ 81.650515][ T4395] netlink: 12 bytes leftover after parsing attributes in process `syz.2.36'. [ 81.684647][ T4395] netlink: 12 bytes leftover after parsing attributes in process `syz.2.36'. [ 81.792672][ T4395] netlink: 12 bytes leftover after parsing attributes in process `syz.2.36'. [ 82.953162][ T4400] device syzkaller0 entered promiscuous mode [ 83.525172][ T4420] netlink: 'syz.4.41': attribute type 6 has an invalid length. [ 83.536467][ T4423] netlink: 'syz.4.41': attribute type 6 has an invalid length. [ 83.669435][ T4237] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 83.694134][ T4430] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 83.797705][ T4430] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 83.887752][ T4430] bond0 (unregistering): Released all slaves [ 83.929088][ T4237] usb 4-1: Using ep0 maxpacket: 32 [ 84.138356][ T4237] usb 4-1: unable to get BOS descriptor or descriptor too short [ 84.228235][ T4237] usb 4-1: config 7 has an invalid interface number: 187 but max is 0 [ 84.236900][ T4237] usb 4-1: config 7 has no interface number 0 [ 84.376924][ T4237] usb 4-1: config 7 interface 187 altsetting 6 endpoint 0x3 has invalid wMaxPacketSize 0 [ 85.178544][ T4237] usb 4-1: config 7 interface 187 has no altsetting 0 [ 85.468161][ T4237] usb 4-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 85.477321][ T4237] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.488105][ T4237] usb 4-1: Product: syz [ 85.492396][ T4237] usb 4-1: Manufacturer: syz [ 85.497021][ T4237] usb 4-1: SerialNumber: syz [ 85.800944][ T4237] usb 4-1: Unknown endpoint type found, address 0x07 [ 85.814473][ T4237] usb 4-1: Unknown endpoint type found, address 0x03 [ 85.825192][ T4237] usb 4-1: Not enough endpoints found in device, aborting! [ 86.362682][ T4236] usb 4-1: USB disconnect, device number 2 [ 87.342081][ T7] cfg80211: failed to load regulatory.db [ 88.420657][ T4461] netlink: 'syz.2.55': attribute type 6 has an invalid length. [ 88.539085][ T4462] netlink: 'syz.2.55': attribute type 6 has an invalid length. [ 92.101387][ T4503] input: syz1 as /devices/virtual/input/input6 [ 92.107646][ T4503] input: failed to attach handler leds to device input6, error: -6 [ 92.686159][ T4524] __nla_validate_parse: 2 callbacks suppressed [ 92.686198][ T4524] netlink: 8 bytes leftover after parsing attributes in process `syz.3.75'. [ 93.415978][ T4519] netlink: 'syz.1.73': attribute type 6 has an invalid length. [ 93.578240][ T4525] netlink: 'syz.1.73': attribute type 6 has an invalid length. [ 93.604515][ T4528] binder_alloc: 4527: binder_alloc_buf size 66248 failed, no address space [ 94.039776][ T4528] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) [ 94.072331][ T4530] netlink: 12 bytes leftover after parsing attributes in process `syz.0.79'. [ 94.109560][ T4530] netlink: 12 bytes leftover after parsing attributes in process `syz.0.79'. [ 94.191203][ T4530] netlink: 12 bytes leftover after parsing attributes in process `syz.0.79'. [ 94.234440][ T4530] netlink: 12 bytes leftover after parsing attributes in process `syz.0.79'. [ 94.256941][ T4530] netlink: 12 bytes leftover after parsing attributes in process `syz.0.79'. [ 94.277212][ T4530] netlink: 12 bytes leftover after parsing attributes in process `syz.0.79'. [ 94.288690][ T4530] netlink: 12 bytes leftover after parsing attributes in process `syz.0.79'. [ 94.319370][ T4530] netlink: 12 bytes leftover after parsing attributes in process `syz.0.79'. [ 95.488188][ T4530] netlink: 12 bytes leftover after parsing attributes in process `syz.0.79'. [ 97.358033][ T4237] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 98.354633][ T4235] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 98.378971][ T4237] usb 5-1: Using ep0 maxpacket: 16 [ 98.509731][ T4237] usb 5-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 98.774933][ T4235] usb 4-1: config 0 interface 0 has no altsetting 0 [ 99.190686][ T4235] usb 4-1: New USB device found, idVendor=1b96, idProduct=000d, bcdDevice= 0.00 [ 99.410054][ T4237] usb 5-1: config 0 interface 0 has no altsetting 0 [ 99.416916][ T4237] usb 5-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 99.426460][ T4235] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.434944][ T4237] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.463979][ T4235] usb 4-1: config 0 descriptor?? [ 99.478767][ T4237] usb 5-1: config 0 descriptor?? [ 99.633930][ T4237] usb 5-1: can't set config #0, error -71 [ 99.667117][ T4237] usb 5-1: USB disconnect, device number 2 [ 99.731244][ T4590] __nla_validate_parse: 1 callbacks suppressed [ 99.731260][ T4590] netlink: 12 bytes leftover after parsing attributes in process `syz.4.99'. [ 99.749860][ T4590] netlink: 12 bytes leftover after parsing attributes in process `syz.4.99'. [ 99.767654][ T4590] netlink: 12 bytes leftover after parsing attributes in process `syz.4.99'. [ 99.797098][ T4590] netlink: 12 bytes leftover after parsing attributes in process `syz.4.99'. [ 99.873561][ T4590] netlink: 12 bytes leftover after parsing attributes in process `syz.4.99'. [ 99.905428][ T4590] netlink: 12 bytes leftover after parsing attributes in process `syz.4.99'. [ 99.919960][ T4590] netlink: 12 bytes leftover after parsing attributes in process `syz.4.99'. [ 99.930748][ T4590] netlink: 12 bytes leftover after parsing attributes in process `syz.4.99'. [ 99.960075][ T4590] netlink: 12 bytes leftover after parsing attributes in process `syz.4.99'. [ 99.977601][ T4590] netlink: 12 bytes leftover after parsing attributes in process `syz.4.99'. [ 100.068133][ T4235] usbhid 4-1:0.0: can't add hid device: -71 [ 100.074183][ T4235] usbhid: probe of 4-1:0.0 failed with error -71 [ 100.208997][ T4235] usb 4-1: USB disconnect, device number 3 [ 103.078820][ T4651] ======================================================= [ 103.078820][ T4651] WARNING: The mand mount option has been deprecated and [ 103.078820][ T4651] and is ignored by this kernel. Remove the mand [ 103.078820][ T4651] option from the mount to silence this warning. [ 103.078820][ T4651] ======================================================= [ 103.116687][ T4650] netlink: 'syz.0.117': attribute type 6 has an invalid length. [ 103.267117][ T4176] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 103.289232][ T4655] netlink: 'syz.0.117': attribute type 6 has an invalid length. [ 103.648100][ T4176] usb 2-1: Using ep0 maxpacket: 32 [ 103.727748][ T4659] binder: 4656:4659 ioctl c0306201 0 returned -14 [ 106.687868][ C1] sched: RT throttling activated [ 106.908089][ T4176] usb 2-1: unable to get BOS descriptor or descriptor too short [ 107.208151][ T4176] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 107.287620][ T4176] usb 2-1: can't read configurations, error -71 [ 107.698255][ T13] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 108.568225][ T13] usb 5-1: config 253 has an invalid descriptor of length 97, skipping remainder of the config [ 108.589116][ T13] usb 5-1: too many endpoints for config 253 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 108.611808][ T13] usb 5-1: config 253 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 108.702257][ T13] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 108.721384][ T13] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 108.746784][ T13] usb 5-1: SerialNumber: syz [ 109.080793][ T13] usb 5-1: bad CDC descriptors [ 109.100335][ T13] usb 5-1: bad CDC descriptors [ 109.146725][ T13] usb 5-1: USB disconnect, device number 3 [ 109.218291][ T4176] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 109.588116][ T4176] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 111.141786][ T4176] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 111.259137][ T4714] netlink: 8 bytes leftover after parsing attributes in process `syz.1.136'. [ 111.330478][ T4176] usb 4-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ac.7e [ 111.544611][ T4176] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.643006][ T4176] usb 4-1: Product: syz [ 111.691441][ T4176] usb 4-1: Manufacturer: syz [ 111.739764][ T4176] usb 4-1: SerialNumber: syz [ 111.853257][ T4176] usb 4-1: config 0 descriptor?? [ 112.308948][ T4176] usb 4-1: can't set config #0, error -71 [ 112.733684][ T4301] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 112.852261][ T4176] usb 4-1: USB disconnect, device number 4 [ 113.078586][ T4301] usb 5-1: Using ep0 maxpacket: 32 [ 113.238155][ T4301] usb 5-1: unable to get BOS descriptor or descriptor too short [ 113.310318][ T4301] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 113.334376][ T4301] usb 5-1: can't read configurations, error -71 [ 114.128112][ T4176] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 115.084436][ T4745] netlink: 'syz.1.147': attribute type 6 has an invalid length. [ 115.103185][ T4745] netlink: 'syz.1.147': attribute type 6 has an invalid length. [ 115.368073][ T4712] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 116.006130][ T4176] usb 4-1: Using ep0 maxpacket: 8 [ 116.288106][ T4712] usb 1-1: Using ep0 maxpacket: 16 [ 116.878512][ T4176] usb 4-1: unable to read config index 0 descriptor/all [ 116.895782][ T4176] usb 4-1: can't read configurations, error -71 [ 116.978218][ T4712] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 117.008301][ T4712] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 117.058689][ T4712] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 117.119729][ T4712] usb 1-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 117.175395][ T4712] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.239185][ T4712] usb 1-1: config 0 descriptor?? [ 117.413334][ T4712] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input7 [ 117.432998][ T3544] pxrc 1-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 117.563943][ T4786] netlink: 8 bytes leftover after parsing attributes in process `syz.4.158'. [ 117.637756][ T3544] pxrc 1-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 118.202318][ T4712] usb 1-1: USB disconnect, device number 2 [ 118.213223][ T3544] pxrc 1-1:0.0: pxrc_open - usb_submit_urb failed, error: -19 [ 118.245830][ T3544] pxrc 1-1:0.0: pxrc_open - usb_submit_urb failed, error: -19 [ 120.484634][ T4800] netlink: 12 bytes leftover after parsing attributes in process `syz.3.165'. [ 120.570604][ T4800] netlink: 12 bytes leftover after parsing attributes in process `syz.3.165'. [ 120.671985][ T4800] netlink: 12 bytes leftover after parsing attributes in process `syz.3.165'. [ 121.236090][ T4800] netlink: 12 bytes leftover after parsing attributes in process `syz.3.165'. [ 121.246941][ T4800] netlink: 12 bytes leftover after parsing attributes in process `syz.3.165'. [ 121.258605][ T4800] netlink: 12 bytes leftover after parsing attributes in process `syz.3.165'. [ 121.277269][ T4800] netlink: 12 bytes leftover after parsing attributes in process `syz.3.165'. [ 121.322432][ T4812] capability: warning: `syz.4.168' uses deprecated v2 capabilities in a way that may be insecure [ 121.385392][ T4800] netlink: 12 bytes leftover after parsing attributes in process `syz.3.165'. [ 121.485291][ T4800] netlink: 12 bytes leftover after parsing attributes in process `syz.3.165'. [ 126.286204][ T4864] __nla_validate_parse: 1 callbacks suppressed [ 126.286412][ T4864] netlink: 12 bytes leftover after parsing attributes in process `syz.0.182'. [ 126.442650][ T4864] netlink: 12 bytes leftover after parsing attributes in process `syz.0.182'. [ 126.516262][ T4864] netlink: 12 bytes leftover after parsing attributes in process `syz.0.182'. [ 126.724661][ T4864] netlink: 12 bytes leftover after parsing attributes in process `syz.0.182'. [ 126.734193][ T4864] netlink: 12 bytes leftover after parsing attributes in process `syz.0.182'. [ 126.748219][ T4864] netlink: 12 bytes leftover after parsing attributes in process `syz.0.182'. [ 126.757306][ T4864] netlink: 12 bytes leftover after parsing attributes in process `syz.0.182'. [ 127.517482][ T4864] netlink: 12 bytes leftover after parsing attributes in process `syz.0.182'. [ 127.527110][ T4864] netlink: 12 bytes leftover after parsing attributes in process `syz.0.182'. [ 127.537091][ T4864] netlink: 12 bytes leftover after parsing attributes in process `syz.0.182'. [ 131.186593][ T4915] ODEBUG: Out of memory. ODEBUG disabled [ 132.810488][ T1427] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.817039][ T1427] ieee802154 phy1 wpan1: encryption failed: -22 [ 136.412620][ T4968] autofs4:pid:4968:autofs_fill_super: called with bogus options [ 138.934145][ T4999] loop4: detected capacity change from 0 to 512 [ 139.061537][ T4999] EXT4-fs (loop4): corrupt root inode, run e2fsck [ 139.070232][ T5003] device syzkaller0 entered promiscuous mode [ 139.076405][ T4999] EXT4-fs (loop4): mount failed [ 140.628841][ T5027] netlink: 8 bytes leftover after parsing attributes in process `syz.4.231'. [ 140.788166][ T4237] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 141.058241][ T4237] usb 1-1: Using ep0 maxpacket: 8 [ 141.427686][ T4237] usb 1-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 141.437970][ T4237] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.446141][ T4237] usb 1-1: Product: syz [ 141.456919][ T4237] usb 1-1: Manufacturer: syz [ 141.465237][ T4237] usb 1-1: SerialNumber: syz [ 141.785531][ T5024] netlink: 8 bytes leftover after parsing attributes in process `syz.0.233'. [ 142.819151][ T4237] usb 1-1: Audio class v2/v3 interfaces need an interface association [ 142.952328][ T4237] snd-usb-audio: probe of 1-1:1.0 failed with error -22 [ 142.996559][ T5042] loop0: detected capacity change from 0 to 512 [ 143.134934][ T4237] usb 1-1: USB disconnect, device number 3 [ 143.230434][ T5042] EXT4-fs (loop0): corrupt root inode, run e2fsck [ 143.248187][ T5042] EXT4-fs (loop0): mount failed [ 143.381670][ T4181] udevd[4181]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 144.958166][ T1110] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 145.347125][ T5065] netlink: 20 bytes leftover after parsing attributes in process `syz.1.247'. [ 146.409616][ T5073] netlink: 8 bytes leftover after parsing attributes in process `syz.4.248'. [ 146.428380][ T1110] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 146.477416][ T1110] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.915882][ T1110] usb 4-1: Product: syz [ 146.979992][ T1110] usb 4-1: Manufacturer: syz [ 147.034832][ T1110] usb 4-1: SerialNumber: syz [ 147.588312][ T1110] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -71 [ 147.678165][ T1110] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -71 [ 147.778008][ T1110] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -71 [ 147.843466][ T1110] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 147.858265][ T1110] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 147.871037][ T1110] lan78xx: probe of 4-1:1.0 failed with error -71 [ 147.896104][ T1110] usb 4-1: USB disconnect, device number 7 [ 148.068042][ T4236] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 148.298004][ T4239] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 148.328550][ T4236] usb 3-1: Using ep0 maxpacket: 32 [ 150.658422][ T4239] usb 5-1: config 0 interface 0 has no altsetting 0 [ 150.671084][ T4239] usb 5-1: New USB device found, idVendor=1b96, idProduct=000d, bcdDevice= 0.00 [ 150.781046][ T4239] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.901093][ T4239] usb 5-1: config 0 descriptor?? [ 152.258274][ T4236] usb 3-1: unable to get BOS descriptor or descriptor too short [ 152.278325][ T4239] usb 5-1: can't set config #0, error -71 [ 152.316915][ T4239] usb 5-1: USB disconnect, device number 6 [ 152.398636][ T4236] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 152.470783][ T4236] usb 3-1: can't read configurations, error -71 [ 153.072751][ T5127] 9pnet: p9_errstr2errno: server reported unknown error 0x0000000 [ 153.854088][ T5141] netlink: 12 bytes leftover after parsing attributes in process `syz.3.273'. [ 153.865197][ T5141] netlink: 12 bytes leftover after parsing attributes in process `syz.3.273'. [ 153.874969][ T5141] netlink: 12 bytes leftover after parsing attributes in process `syz.3.273'. [ 153.884411][ T5141] netlink: 12 bytes leftover after parsing attributes in process `syz.3.273'. [ 153.894227][ T5141] netlink: 12 bytes leftover after parsing attributes in process `syz.3.273'. [ 153.932076][ T5141] netlink: 12 bytes leftover after parsing attributes in process `syz.3.273'. [ 153.942859][ T5141] netlink: 12 bytes leftover after parsing attributes in process `syz.3.273'. [ 153.956466][ T5141] netlink: 12 bytes leftover after parsing attributes in process `syz.3.273'. [ 153.972713][ T5141] netlink: 12 bytes leftover after parsing attributes in process `syz.3.273'. [ 153.992751][ T5141] netlink: 12 bytes leftover after parsing attributes in process `syz.3.273'. [ 154.096038][ T5150] xt_hashlimit: size too large, truncated to 1048576 [ 154.189396][ T21] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 154.445039][ T5139] Set syz1 is full, maxelem 6117 reached [ 154.503372][ T5137] syz.2.271 (5137): drop_caches: 2 [ 154.542318][ T4235] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 154.558241][ T21] usb 1-1: config 0 interface 0 has no altsetting 0 [ 154.571109][ T21] usb 1-1: New USB device found, idVendor=1b96, idProduct=000d, bcdDevice= 0.00 [ 154.584323][ T21] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.625748][ T21] usb 1-1: config 0 descriptor?? [ 154.787935][ T4235] usb 4-1: Using ep0 maxpacket: 32 [ 154.907996][ T4235] usb 4-1: unable to get BOS descriptor or descriptor too short [ 154.967979][ T4235] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 154.975605][ T4235] usb 4-1: can't read configurations, error -71 [ 155.428101][ T21] usbhid 1-1:0.0: can't add hid device: -71 [ 155.440250][ T21] usbhid: probe of 1-1:0.0 failed with error -71 [ 156.276670][ T21] usb 1-1: USB disconnect, device number 4 [ 156.432423][ T5168] process 'syz.2.280' launched './file0' with NULL argv: empty string added [ 156.469068][ T5171] capability: warning: `syz.0.281' uses 32-bit capabilities (legacy support in use) [ 159.109050][ T5191] syz.3.288 uses obsolete (PF_INET,SOCK_PACKET) [ 160.417983][ T4235] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 160.738022][ T4235] usb 5-1: Using ep0 maxpacket: 32 [ 162.512672][ T5222] netlink: 'syz.2.298': attribute type 6 has an invalid length. [ 162.525448][ T5222] netlink: 'syz.2.298': attribute type 6 has an invalid length. [ 162.873144][ T4235] usb 5-1: unable to get BOS descriptor or descriptor too short [ 162.945906][ T5227] xt_hashlimit: invalid interval [ 162.951138][ T4235] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 162.959068][ T4235] usb 5-1: can't read configurations, error -71 [ 164.781177][ T5241] netlink: 8 bytes leftover after parsing attributes in process `syz.1.304'. [ 165.245501][ T5227] serio: Serial port ptm0 [ 167.148005][ T5112] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 167.445426][ T5112] usb 2-1: Using ep0 maxpacket: 32 [ 167.618164][ T5112] usb 2-1: unable to get BOS descriptor or descriptor too short [ 167.643562][ T5270] netlink: 12 bytes leftover after parsing attributes in process `syz.3.315'. [ 167.788052][ T5112] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 167.805679][ T5112] usb 2-1: can't read configurations, error -71 [ 167.812194][ T5270] netlink: 12 bytes leftover after parsing attributes in process `syz.3.315'. [ 167.822731][ T5270] netlink: 12 bytes leftover after parsing attributes in process `syz.3.315'. [ 168.233934][ T5270] netlink: 12 bytes leftover after parsing attributes in process `syz.3.315'. [ 168.244653][ T5270] netlink: 12 bytes leftover after parsing attributes in process `syz.3.315'. [ 168.286372][ T5270] netlink: 12 bytes leftover after parsing attributes in process `syz.3.315'. [ 168.521455][ T5280] netlink: 8 bytes leftover after parsing attributes in process `syz.0.317'. [ 168.865673][ T5270] netlink: 12 bytes leftover after parsing attributes in process `syz.3.315'. [ 168.918726][ T5270] netlink: 12 bytes leftover after parsing attributes in process `syz.3.315'. [ 172.869856][ T5335] __nla_validate_parse: 2 callbacks suppressed [ 172.871861][ T5335] netlink: 8 bytes leftover after parsing attributes in process `syz.0.331'. [ 173.428480][ T5337] netlink: 12 bytes leftover after parsing attributes in process `syz.3.334'. [ 173.448803][ T5337] netlink: 12 bytes leftover after parsing attributes in process `syz.3.334'. [ 173.500202][ T5337] netlink: 12 bytes leftover after parsing attributes in process `syz.3.334'. [ 173.664641][ T5337] netlink: 12 bytes leftover after parsing attributes in process `syz.3.334'. [ 174.367721][ T5337] netlink: 12 bytes leftover after parsing attributes in process `syz.3.334'. [ 174.398156][ T5337] netlink: 12 bytes leftover after parsing attributes in process `syz.3.334'. [ 174.407224][ T5337] netlink: 12 bytes leftover after parsing attributes in process `syz.3.334'. [ 174.531587][ T5337] netlink: 12 bytes leftover after parsing attributes in process `syz.3.334'. [ 174.578867][ T5337] netlink: 12 bytes leftover after parsing attributes in process `syz.3.334'. [ 174.892611][ T5358] device syzkaller1 entered promiscuous mode [ 175.337961][ T23] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 175.658172][ T23] usb 4-1: Using ep0 maxpacket: 8 [ 176.008335][ T23] usb 4-1: unable to get BOS descriptor or descriptor too short [ 176.302955][ T23] usb 4-1: config 4 interface 0 has no altsetting 0 [ 177.428300][ T23] usb 4-1: string descriptor 0 read error: -22 [ 177.436468][ T23] usb 4-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 177.446585][ T23] usb 4-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 177.649170][ T23] usb 4-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 177.695163][ T23] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 177.699609][ T5396] autofs4:pid:5396:autofs_fill_super: called with bogus options [ 177.707476][ T23] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 177.724213][ T23] usb 4-1: media controller created [ 177.856030][ T23] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 178.009962][ T5401] __nla_validate_parse: 2 callbacks suppressed [ 178.009979][ T5401] netlink: 12 bytes leftover after parsing attributes in process `syz.4.352'. [ 178.031928][ T5401] netlink: 12 bytes leftover after parsing attributes in process `syz.4.352'. [ 178.041535][ T5401] netlink: 12 bytes leftover after parsing attributes in process `syz.4.352'. [ 178.084095][ T5401] netlink: 12 bytes leftover after parsing attributes in process `syz.4.352'. [ 178.122538][ T5401] netlink: 12 bytes leftover after parsing attributes in process `syz.4.352'. [ 178.142818][ T5401] netlink: 12 bytes leftover after parsing attributes in process `syz.4.352'. [ 178.154901][ T5401] netlink: 12 bytes leftover after parsing attributes in process `syz.4.352'. [ 178.165973][ T5401] netlink: 12 bytes leftover after parsing attributes in process `syz.4.352'. [ 178.179646][ T5401] netlink: 12 bytes leftover after parsing attributes in process `syz.4.352'. [ 178.190873][ T5401] netlink: 12 bytes leftover after parsing attributes in process `syz.4.352'. [ 178.428086][ T13] usb 1-1: new low-speed USB device number 5 using dummy_hcd [ 178.808039][ T4234] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 178.938199][ T13] usb 1-1: unable to get BOS descriptor or descriptor too short [ 179.018197][ T23] zl10353_read_register: readreg error (reg=127, ret==0) [ 179.028245][ T13] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 64, setting to 0 [ 179.048608][ T4234] usb 5-1: Using ep0 maxpacket: 32 [ 179.056014][ T13] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 128, changing to 4 [ 179.081846][ T13] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 1024, setting to 0 [ 179.168122][ T4234] usb 5-1: config 2 has an invalid interface number: 88 but max is 0 [ 179.185231][ T4234] usb 5-1: config 2 has no interface number 0 [ 179.204772][ T4234] usb 5-1: config 2 interface 88 altsetting 25 bulk endpoint 0x6 has invalid maxpacket 256 [ 179.234947][ T4234] usb 5-1: config 2 interface 88 has no altsetting 0 [ 179.293102][ T23] usb 4-1: USB disconnect, device number 10 [ 181.314978][ T4234] usb 5-1: New USB device found, idVendor=0557, idProduct=2009, bcdDevice=c7.06 [ 181.352354][ T4234] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=1 [ 181.548401][ T13] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 182.748021][ T13] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 182.758382][ T4234] usb 5-1: Product: syz [ 182.762609][ T4234] usb 5-1: Manufacturer: syz [ 182.767558][ T4234] usb 5-1: SerialNumber: syz [ 182.808433][ T5442] netlink: 'syz.1.362': attribute type 6 has an invalid length. [ 182.996105][ T5431] netlink: 'syz.1.362': attribute type 6 has an invalid length. [ 183.004416][ T13] usb 1-1: can't set config #1, error -71 [ 183.766585][ T4234] usb 5-1: can't set config #2, error -71 [ 183.775452][ T13] usb 1-1: USB disconnect, device number 5 [ 183.785348][ T4234] usb 5-1: USB disconnect, device number 9 [ 186.094780][ T5468] __nla_validate_parse: 1 callbacks suppressed [ 186.098075][ T1107] Bluetooth: hci1: command 0x0406 tx timeout [ 186.110981][ T1107] Bluetooth: hci2: command 0x0406 tx timeout [ 186.118607][ T1107] Bluetooth: hci3: command 0x0406 tx timeout [ 186.125605][ T5468] netlink: 8 bytes leftover after parsing attributes in process `syz.4.374'. [ 187.394951][ T5493] netlink: 56 bytes leftover after parsing attributes in process `syz.2.380'. [ 187.844222][ T5500] netlink: 8 bytes leftover after parsing attributes in process `syz.1.382'. [ 190.046504][ T5523] netlink: 8 bytes leftover after parsing attributes in process `syz.4.390'. [ 192.098102][ T5537] netlink: 'syz.4.395': attribute type 6 has an invalid length. [ 192.108627][ T5537] netlink: 'syz.4.395': attribute type 6 has an invalid length. [ 193.593364][ T26] audit: type=1804 audit(1782569405.842:2): pid=5558 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.402" name="/newroot/66/file0" dev="fuse" ino=1 res=1 errno=0 [ 194.044939][ T7] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 194.249898][ T1427] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.256405][ T1427] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.146628][ T5583] netlink: 'syz.0.410': attribute type 6 has an invalid length. [ 195.218199][ T7] usb 2-1: config 0 has an invalid interface number: 88 but max is 0 [ 195.232742][ T7] usb 2-1: config 0 has no interface number 0 [ 195.568990][ T7] usb 2-1: New USB device found, idVendor=0402, idProduct=5602, bcdDevice=49.83 [ 195.587442][ T7] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 195.665743][ T7] usb 2-1: Product: syz [ 195.695917][ T7] usb 2-1: Manufacturer: syz [ 195.918381][ T7] usb 2-1: SerialNumber: syz [ 196.924073][ T7] usb 2-1: config 0 descriptor?? [ 196.969516][ T7] usb 2-1: can't set config #0, error -71 [ 197.816466][ T7] usb 2-1: USB disconnect, device number 7 [ 197.995118][ T5611] netlink: 12 bytes leftover after parsing attributes in process `syz.4.420'. [ 198.070598][ T5611] netlink: 12 bytes leftover after parsing attributes in process `syz.4.420'. [ 198.438447][ T5611] netlink: 12 bytes leftover after parsing attributes in process `syz.4.420'. [ 198.499883][ T5611] netlink: 12 bytes leftover after parsing attributes in process `syz.4.420'. [ 198.587223][ T5621] netlink: 8 bytes leftover after parsing attributes in process `syz.1.424'. [ 199.086819][ T5611] netlink: 12 bytes leftover after parsing attributes in process `syz.4.420'. [ 199.098320][ T5611] netlink: 12 bytes leftover after parsing attributes in process `syz.4.420'. [ 199.107506][ T5611] netlink: 12 bytes leftover after parsing attributes in process `syz.4.420'. [ 199.119637][ T5611] netlink: 12 bytes leftover after parsing attributes in process `syz.4.420'. [ 199.153963][ T5611] netlink: 12 bytes leftover after parsing attributes in process `syz.4.420'. [ 201.348354][ T5642] netlink: 'syz.3.428': attribute type 6 has an invalid length. [ 201.366975][ T5642] netlink: 'syz.3.428': attribute type 6 has an invalid length. [ 202.068989][ T5646] kvm: pic: non byte write [ 202.118175][ T5644] kvm: vcpu 0: requested 1536 ns lapic timer period limited to 200000 ns [ 202.165493][ T5644] kvm: pic: non byte write [ 204.409341][ T5667] __nla_validate_parse: 2 callbacks suppressed [ 204.409360][ T5667] netlink: 12 bytes leftover after parsing attributes in process `syz.1.437'. [ 204.652876][ T5667] netlink: 12 bytes leftover after parsing attributes in process `syz.1.437'. [ 205.442865][ T5667] netlink: 12 bytes leftover after parsing attributes in process `syz.1.437'. [ 205.454922][ T5667] netlink: 12 bytes leftover after parsing attributes in process `syz.1.437'. [ 205.483506][ T5667] netlink: 12 bytes leftover after parsing attributes in process `syz.1.437'. [ 205.495196][ T5667] netlink: 12 bytes leftover after parsing attributes in process `syz.1.437'. [ 205.506122][ T5667] netlink: 12 bytes leftover after parsing attributes in process `syz.1.437'. [ 205.517660][ T5667] netlink: 12 bytes leftover after parsing attributes in process `syz.1.437'. [ 205.603603][ T5667] netlink: 12 bytes leftover after parsing attributes in process `syz.1.437'. [ 206.248066][ T5667] netlink: 12 bytes leftover after parsing attributes in process `syz.1.437'. [ 207.786435][ T5691] netlink: 'syz.1.444': attribute type 6 has an invalid length. [ 207.798984][ T5691] netlink: 'syz.1.444': attribute type 6 has an invalid length. [ 208.546682][ T5704] team0 (unregistering): Port device team_slave_0 removed [ 208.582052][ T5704] team0 (unregistering): Port device team_slave_1 removed [ 209.343902][ T4234] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 209.647938][ T4234] usb 5-1: Using ep0 maxpacket: 16 [ 209.688450][ T5727] netlink: 12 bytes leftover after parsing attributes in process `syz.3.455'. [ 209.697530][ T5727] netlink: 12 bytes leftover after parsing attributes in process `syz.3.455'. [ 209.777641][ T5727] netlink: 12 bytes leftover after parsing attributes in process `syz.3.455'. [ 209.891284][ T4234] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 209.905941][ T4234] usb 5-1: config 0 has no interfaces? [ 209.918917][ T4234] usb 5-1: New USB device found, idVendor=0c45, idProduct=5112, bcdDevice= 0.00 [ 209.928138][ T4234] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 209.944964][ T4234] usb 5-1: config 0 descriptor?? [ 210.035585][ T5727] netlink: 12 bytes leftover after parsing attributes in process `syz.3.455'. [ 210.159346][ T5727] netlink: 12 bytes leftover after parsing attributes in process `syz.3.455'. [ 210.823301][ T5727] netlink: 12 bytes leftover after parsing attributes in process `syz.3.455'. [ 210.888358][ T5727] netlink: 12 bytes leftover after parsing attributes in process `syz.3.455'. [ 210.973233][ T5727] netlink: 12 bytes leftover after parsing attributes in process `syz.3.455'. [ 211.062538][ T5727] netlink: 12 bytes leftover after parsing attributes in process `syz.3.455'. [ 211.419272][ T5727] netlink: 12 bytes leftover after parsing attributes in process `syz.3.455'. [ 211.647349][ T4233] usb 5-1: USB disconnect, device number 10 [ 212.422497][ T5754] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 212.552782][ T5754] sch_tbf: burst 21990 is lower than device lo mtu (65550) ! [ 212.655304][ T5764] overlayfs: failed to create directory ./bus/work (errno: 22); mounting read-only [ 214.309972][ T4235] usb 4-1: new full-speed USB device number 11 using dummy_hcd [ 214.828031][ T4235] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 214.837554][ T4235] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 214.846248][ T4235] usb 4-1: Product: syz [ 214.851259][ T4235] usb 4-1: Manufacturer: syz [ 214.856104][ T4235] usb 4-1: SerialNumber: syz [ 214.885059][ T4235] usb 4-1: config 0 descriptor?? [ 215.858172][ T4235] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 215.995879][ T26] audit: type=1804 audit(1782569428.242:3): pid=5809 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.481" name="bus" dev="ramfs" ino=37765 res=1 errno=0 [ 217.648406][ T4235] dvb_usb_rtl28xxu: probe of 4-1:0.0 failed with error -110 [ 219.623697][ T26] audit: type=1804 audit(1782569428.272:4): pid=5809 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.481" name="bus" dev="ramfs" ino=37765 res=1 errno=0 [ 219.637214][ T4237] usb 4-1: USB disconnect, device number 11 [ 220.930476][ T5823] __nla_validate_parse: 12 callbacks suppressed [ 220.930497][ T5823] netlink: 12 bytes leftover after parsing attributes in process `syz.0.487'. [ 221.244136][ T5823] netlink: 12 bytes leftover after parsing attributes in process `syz.0.487'. [ 221.255351][ T5823] netlink: 12 bytes leftover after parsing attributes in process `syz.0.487'. [ 221.266169][ T5823] netlink: 12 bytes leftover after parsing attributes in process `syz.0.487'. [ 221.276948][ T5823] netlink: 12 bytes leftover after parsing attributes in process `syz.0.487'. [ 221.287793][ T5823] netlink: 12 bytes leftover after parsing attributes in process `syz.0.487'. [ 221.299388][ T5823] netlink: 12 bytes leftover after parsing attributes in process `syz.0.487'. [ 221.310225][ T5823] netlink: 12 bytes leftover after parsing attributes in process `syz.0.487'. [ 221.326942][ T5823] netlink: 12 bytes leftover after parsing attributes in process `syz.0.487'. [ 221.338747][ T5823] netlink: 12 bytes leftover after parsing attributes in process `syz.0.487'. [ 222.410088][ T5842] binder_alloc: 5841: binder_alloc_buf, no vma [ 223.593533][ T5862] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 224.158111][ T4234] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 224.458315][ T4234] usb 3-1: Using ep0 maxpacket: 8 [ 224.527247][ T4195] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201' [ 224.537209][ T4195] CPU: 1 PID: 4195 Comm: kworker/u5:3 Not tainted syzkaller #0 [ 224.544798][ T4195] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 224.554881][ T4195] Workqueue: hci3 hci_rx_work [ 224.559916][ T4195] Call Trace: [ 224.563232][ T4195] [ 224.566194][ T4195] dump_stack_lvl+0x188/0x250 [ 224.570920][ T4195] ? show_regs_print_info+0x20/0x20 [ 224.576161][ T4195] ? load_image+0x410/0x410 [ 224.578504][ T4234] usb 3-1: config 0 interface 0 has no altsetting 0 [ 224.580690][ T4195] sysfs_create_dir_ns+0x26a/0x290 [ 224.592654][ T4195] ? sysfs_warn_dup+0xa0/0xa0 [ 224.597354][ T4195] ? kthread+0x42e/0x520 [ 224.601637][ T4195] ? do_raw_spin_unlock+0x11d/0x230 [ 224.606874][ T4195] kobject_add_internal+0x5ba/0xcd0 [ 224.612098][ T4195] kobject_add+0x160/0x230 [ 224.616548][ T4195] ? kobject_init+0x1c0/0x1c0 [ 224.621269][ T4195] ? __raw_spin_lock_init+0x41/0x100 [ 224.626918][ T4195] ? klist_children_get+0x50/0x50 [ 224.632081][ T4195] ? get_device_parent+0x121/0x3e0 [ 224.637226][ T4195] device_add+0x470/0x1050 [ 224.641763][ T4195] ? device_initialize+0x2a5/0x4d0 [ 224.646894][ T4195] hci_conn_add_sysfs+0xd1/0x1e0 [ 224.651853][ T4195] le_conn_complete_evt+0xc2e/0x14d0 [ 224.657183][ T4195] ? cs_le_create_conn+0x5e0/0x5e0 [ 224.662322][ T4195] ? __mutex_trylock_common+0x15c/0x260 [ 224.667938][ T4195] hci_le_meta_evt+0x285/0x3ca0 [ 224.672831][ T4195] ? hci_event_packet+0x363/0x1310 [ 224.677982][ T4195] ? __lock_acquire+0x7b50/0x7b50 [ 224.683045][ T4195] ? hci_remote_host_features_evt+0x240/0x240 [ 224.689122][ T4195] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 224.694864][ T4195] ? mark_lock+0x94/0x320 [ 224.699249][ T4195] ? mutex_unlock+0x10/0x10 [ 224.703805][ T4195] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 224.709912][ T4195] ? lock_chain_count+0x20/0x20 [ 224.714772][ T4195] ? __rwlock_init+0x140/0x140 [ 224.719554][ T4195] hci_event_packet+0xe0b/0x1310 [ 224.724584][ T4195] ? _raw_spin_unlock+0x40/0x40 [ 224.729482][ T4195] ? rcu_lock_release+0x20/0x20 [ 224.734531][ T4195] ? hci_send_to_monitor+0x9c/0x4a0 [ 224.739967][ T4195] hci_rx_work+0x255/0xa10 [ 224.744424][ T4195] process_one_work+0x867/0xff0 [ 224.749308][ T4195] ? worker_detach_from_pool+0x240/0x240 [ 224.754956][ T4195] ? lockdep_hardirqs_off+0x70/0x100 [ 224.760379][ T4195] ? _raw_spin_lock_irq+0xb7/0xf0 [ 224.765422][ T4195] ? _raw_spin_lock_irqsave+0x100/0x100 [ 224.770985][ T4195] ? wq_worker_running+0x97/0x170 [ 224.776255][ T4195] worker_thread+0xad7/0x12a0 [ 224.781017][ T4195] kthread+0x42e/0x520 [ 224.785106][ T4195] ? rcu_lock_release+0x20/0x20 [ 224.790066][ T4195] ? kthread_blkcg+0xd0/0xd0 [ 224.794666][ T4195] ret_from_fork+0x1f/0x30 [ 224.798531][ T4234] usb 3-1: New USB device found, idVendor=054c, idProduct=0268, bcdDevice= 0.00 [ 224.799223][ T4195] [ 224.838055][ T4195] kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 224.851596][ T4195] Bluetooth: hci3: failed to register connection device [ 225.058615][ T4234] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 225.078306][ T4234] usb 3-1: config 0 descriptor?? [ 226.003333][ T4234] sony 0003:054C:0268.0001: unknown main item tag 0x2 [ 226.043908][ T4234] sony 0003:054C:0268.0001: unknown main item tag 0x6 [ 226.206575][ T4234] sony 0003:054C:0268.0001: global environment stack underflow [ 226.215472][ T4234] sony 0003:054C:0268.0001: item 0 4 1 11 parsing failed [ 226.223127][ T4234] sony 0003:054C:0268.0001: parse failed [ 226.232906][ T4234] sony: probe of 0003:054C:0268.0001 failed with error -22 [ 226.986752][ T4234] usb 3-1: USB disconnect, device number 4 [ 227.062869][ T5905] 9pnet: Insufficient options for proto=fd [ 227.468446][ T4244] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 227.846956][ T5909] __nla_validate_parse: 11 callbacks suppressed [ 227.846973][ T5909] netlink: 12 bytes leftover after parsing attributes in process `syz.2.517'. [ 227.907615][ T5909] netlink: 12 bytes leftover after parsing attributes in process `syz.2.517'. [ 227.948009][ T4244] usb 2-1: Using ep0 maxpacket: 32 [ 227.975123][ T5909] netlink: 12 bytes leftover after parsing attributes in process `syz.2.517'. [ 228.002193][ T5909] netlink: 12 bytes leftover after parsing attributes in process `syz.2.517'. [ 228.035836][ T5909] netlink: 12 bytes leftover after parsing attributes in process `syz.2.517'. [ 228.068157][ T4244] usb 2-1: config index 0 descriptor too short (expected 19, got 18) [ 228.090826][ T5909] netlink: 12 bytes leftover after parsing attributes in process `syz.2.517'. [ 228.091128][ T4244] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 228.126765][ T5909] netlink: 12 bytes leftover after parsing attributes in process `syz.2.517'. [ 228.153638][ T5909] netlink: 12 bytes leftover after parsing attributes in process `syz.2.517'. [ 228.185340][ T5909] netlink: 12 bytes leftover after parsing attributes in process `syz.2.517'. [ 228.209406][ T5909] netlink: 12 bytes leftover after parsing attributes in process `syz.2.517'. [ 228.298104][ T4244] usb 2-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50 [ 228.339103][ T4244] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 228.364054][ T4244] usb 2-1: Product: syz [ 228.368675][ T4244] usb 2-1: Manufacturer: syz [ 228.373304][ T4244] usb 2-1: SerialNumber: syz [ 228.380607][ T4244] usb 2-1: config 0 descriptor?? [ 228.392860][ T5924] loop3: detected capacity change from 0 to 512 [ 229.507538][ T5924] EXT4-fs (loop3): corrupt root inode, run e2fsck [ 229.518801][ T5924] EXT4-fs (loop3): mount failed [ 229.524215][ T4237] usb 2-1: USB disconnect, device number 8 [ 231.057965][ T4235] Bluetooth: hci3: command 0x0406 tx timeout [ 233.353225][ T5991] loop3: detected capacity change from 0 to 512 [ 234.178759][ T5991] EXT4-fs (loop3): corrupt root inode, run e2fsck [ 234.185497][ T5991] EXT4-fs (loop3): mount failed [ 238.299056][ T6028] netlink: 8 bytes leftover after parsing attributes in process `syz.1.551'. [ 241.471803][ T6052] netlink: 8 bytes leftover after parsing attributes in process `syz.4.559'. [ 244.437974][ T4244] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 244.730003][ T6082] device syzkaller0 entered promiscuous mode [ 244.747981][ T4244] usb 3-1: Using ep0 maxpacket: 16 [ 244.797722][ T6082] tipc: Started in network mode [ 244.849953][ T6082] tipc: Node identity 4666546da86b, cluster identity 4711 [ 244.967976][ T4244] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 244.981919][ T4244] usb 3-1: config 0 has no interfaces? [ 244.989241][ T6082] tipc: Enabled bearer , priority 0 [ 245.018038][ T4244] usb 3-1: New USB device found, idVendor=0c45, idProduct=5112, bcdDevice= 0.00 [ 245.037969][ T6087] tipc: Resetting bearer [ 245.070492][ T4244] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 245.123361][ T4244] usb 3-1: config 0 descriptor?? [ 245.161612][ T6081] tipc: Resetting bearer [ 245.229682][ T6081] tipc: Disabling bearer [ 245.441708][ T6092] Failed to enqueue queue_pair DETACH event datagram for context (ID=0x0) [ 245.537766][ T4237] usb 3-1: USB disconnect, device number 5 [ 249.551971][ T6126] syz.4.582: vmalloc error: size 9223372036854775807, exceeds total pages, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=syz4,mems_allowed=0-1 [ 249.584953][ T6126] CPU: 0 PID: 6126 Comm: syz.4.582 Not tainted syzkaller #0 [ 249.592385][ T6126] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 249.603425][ T6126] Call Trace: [ 249.606718][ T6126] [ 249.609671][ T6126] dump_stack_lvl+0x188/0x250 [ 249.614399][ T6126] ? rcu_lock_release+0x5/0x20 [ 249.619213][ T6126] ? show_regs_print_info+0x20/0x20 [ 249.624471][ T6126] ? load_image+0x410/0x410 [ 249.629242][ T6126] warn_alloc+0x245/0x320 [ 249.633648][ T6126] ? zone_watermark_ok_safe+0x250/0x250 [ 249.639223][ T6126] ? __mutex_lock_common+0x435/0x2400 [ 249.644765][ T6126] ? tomoyo_path_number_perm+0x5f7/0x6b0 [ 249.650938][ T6126] __vmalloc_node_range+0x2b1/0x8b0 [ 249.656179][ T6126] ? dvb_dvr_do_ioctl+0x12a/0x220 [ 249.661330][ T6126] vmalloc+0x75/0x80 [ 249.665508][ T6126] ? dvb_dvr_do_ioctl+0x12a/0x220 [ 249.670542][ T6126] dvb_dvr_do_ioctl+0x12a/0x220 [ 249.675880][ T6126] dvb_usercopy+0x191/0x2b0 [ 249.680405][ T6126] ? dvb_dvr_release+0x3d0/0x3d0 [ 249.685449][ T6126] ? dvb_generic_ioctl+0xb0/0xb0 [ 249.690418][ T6126] ? dvb_dvr_poll+0x230/0x230 [ 249.695115][ T6126] dvb_dvr_ioctl+0x25/0x30 [ 249.699544][ T6126] __se_sys_ioctl+0xfa/0x170 [ 249.704157][ T6126] do_syscall_64+0x4c/0xa0 [ 249.708606][ T6126] ? clear_bhb_loop+0x30/0x80 [ 249.713436][ T6126] ? clear_bhb_loop+0x30/0x80 [ 249.718182][ T6126] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 249.724121][ T6126] RIP: 0033:0x7fbd34cb8e59 [ 249.728635][ T6126] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 249.749241][ T6126] RSP: 002b:00007fbd32f12028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 249.757674][ T6126] RAX: ffffffffffffffda RBX: 00007fbd34f31fa0 RCX: 00007fbd34cb8e59 [ 249.765896][ T6126] RDX: 7fffffffffffffff RSI: 0000000000006f2d RDI: 0000000000000003 [ 249.773894][ T6126] RBP: 00007fbd34d4ee6f R08: 0000000000000000 R09: 0000000000000000 [ 249.781905][ T6126] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 249.789892][ T6126] R13: 00007fbd34f32038 R14: 00007fbd34f31fa0 R15: 00007ffce9f72d68 [ 249.797914][ T6126] [ 249.808805][ T6128] overlayfs: failed to clone upperpath [ 249.877895][ T6126] Mem-Info: [ 249.882551][ T6126] active_anon:288 inactive_anon:7685 isolated_anon:0 [ 249.882551][ T6126] active_file:4763 inactive_file:36521 isolated_file:0 [ 249.882551][ T6126] unevictable:818 dirty:153 writeback:0 [ 249.882551][ T6126] slab_reclaimable:20161 slab_unreclaimable:94721 [ 249.882551][ T6126] mapped:31849 shmem:3611 pagetables:680 bounce:0 [ 249.882551][ T6126] kernel_misc_reclaimable:0 [ 249.882551][ T6126] free:1376540 free_pcp:11804 free_cma:0 [ 249.994453][ T6137] netlink: 12 bytes leftover after parsing attributes in process `syz.3.586'. [ 250.027173][ T6137] netlink: 12 bytes leftover after parsing attributes in process `syz.3.586'. [ 250.068423][ T6137] netlink: 12 bytes leftover after parsing attributes in process `syz.3.586'. [ 250.104580][ T6137] netlink: 12 bytes leftover after parsing attributes in process `syz.3.586'. [ 250.115094][ T6126] Node 0 active_anon:1120kB inactive_anon:34228kB active_file:18808kB inactive_file:146084kB unevictable:2936kB isolated(anon):0kB isolated(file):0kB mapped:132596kB dirty:612kB writeback:0kB shmem:17364kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:10928kB pagetables:2720kB all_unreclaimable? no [ 250.149038][ T6126] Node 1 active_anon:32kB inactive_anon:512kB active_file:244kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:2080kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB all_unreclaimable? no [ 250.428069][ T6137] netlink: 12 bytes leftover after parsing attributes in process `syz.3.586'. [ 250.437173][ T6137] netlink: 12 bytes leftover after parsing attributes in process `syz.3.586'. [ 250.446323][ T6137] netlink: 12 bytes leftover after parsing attributes in process `syz.3.586'. [ 250.459121][ T6137] netlink: 12 bytes leftover after parsing attributes in process `syz.3.586'. [ 250.473730][ T6137] netlink: 12 bytes leftover after parsing attributes in process `syz.3.586'. [ 250.482987][ T6126] Node 0 DMA free:15360kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 250.530769][ T6137] netlink: 12 bytes leftover after parsing attributes in process `syz.3.586'. [ 250.568784][ T6126] lowmem_reserve[]: 0 2539 2540 2540 2540 [ 250.615968][ T6126] Node 0 DMA32 free:1577692kB min:34784kB low:43480kB high:52176kB reserved_highatomic:0KB active_anon:12520kB inactive_anon:22828kB active_file:18808kB inactive_file:146084kB unevictable:4036kB writepending:464kB present:3129332kB managed:2606572kB mlocked:2500kB bounce:0kB free_pcp:31148kB local_pcp:21184kB free_cma:0kB [ 250.677987][ T6126] lowmem_reserve[]: 0 0 0 0 0 [ 250.682832][ T6126] Node 0 Normal free:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:660kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 250.942470][ T6126] lowmem_reserve[]: 0 0 0 0 0 [ 250.947335][ T6126] Node 1 Normal free:3911972kB min:55108kB low:68884kB high:82660kB reserved_highatomic:0KB active_anon:32kB inactive_anon:512kB active_file:244kB inactive_file:0kB unevictable:1536kB writepending:0kB present:4194304kB managed:4119672kB mlocked:0kB bounce:0kB free_pcp:10028kB local_pcp:2020kB free_cma:0kB [ 251.268084][ T6126] lowmem_reserve[]: 0 0 0 0 0 [ 251.273710][ T6126] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 251.335308][ T6126] Node 0 DMA32: 159*4kB (UM) 499*8kB (UME) 111*16kB (UME) 192*32kB (UE) 80*64kB (UME) 11*128kB (UME) 16*256kB (UME) 6*512kB (UM) 4*1024kB (UM) 2*2048kB (UE) 377*4096kB (UM) = 1578628kB [ 251.722656][ T6126] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 251.734336][ T6126] Node 1 Normal: 149*4kB (UME) 40*8kB (UME) 29*16kB (UME) 192*32kB (UME) 79*64kB (UME) 30*128kB (UE) 15*256kB (U) 3*512kB (U) 1*1024kB (E) 1*2048kB (M) 949*4096kB (M) = 3911972kB [ 251.752921][ T6126] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 251.762567][ T6126] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 251.771947][ T6126] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 251.785382][ T6126] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 251.795167][ T6126] 43585 total pagecache pages [ 251.799890][ T6126] 0 pages in swap cache [ 251.804042][ T6126] Swap cache stats: add 27, delete 27, find 0/1 [ 251.810369][ T6126] Free swap = 124728kB [ 251.814539][ T6126] Total swap = 124996kB [ 251.818754][ T6126] 2097051 pages RAM [ 251.822585][ T6126] 0 pages HighMem/MovableOnly [ 251.827692][ T6126] 411485 pages reserved [ 251.833377][ T6126] 0 pages cma reserved [ 252.948969][ T6167] mmap: syz.0.594 (6167) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 255.689905][ T1427] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.696470][ T1427] ieee802154 phy1 wpan1: encryption failed: -22 [ 258.998130][ T5112] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 259.897880][ T5112] usb 3-1: Using ep0 maxpacket: 8 [ 260.018171][ T5112] usb 3-1: config 0 has an invalid interface number: 31 but max is 0 [ 260.111331][ T5112] usb 3-1: config 0 has no interface number 0 [ 260.348626][ T5112] usb 3-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 260.404058][ T5112] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 260.509491][ T5112] usb 3-1: Product: syz [ 260.566271][ T5112] usb 3-1: Manufacturer: syz [ 260.629428][ T5112] usb 3-1: SerialNumber: syz [ 260.749497][ T5112] usb 3-1: config 0 descriptor?? [ 260.790660][ T6239] tipc: Enabled bearer , priority 0 [ 260.840352][ T6239] device syzkaller0 entered promiscuous mode [ 260.878440][ T6239] tipc: Resetting bearer [ 260.916631][ T6239] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 260.925331][ T6239] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 260.957642][ T6238] tipc: Resetting bearer [ 261.506308][ T6238] tipc: Disabling bearer [ 261.518157][ T5112] uvcvideo 3-1:0.31: Found Unit with invalid ID 0 [ 261.535166][ T5112] usb 3-1: Found UVC 0.04 device syz (046d:08c3) [ 261.548358][ T5112] usb 3-1: No valid video chain found. [ 261.608086][ T5112] usb 3-1: USB disconnect, device number 6 [ 262.937927][ T4233] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 263.298086][ T4233] usb 2-1: Using ep0 maxpacket: 16 [ 263.431842][ T4233] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 263.477968][ T4233] usb 2-1: config 0 has no interfaces? [ 263.507858][ T4233] usb 2-1: New USB device found, idVendor=0c45, idProduct=5112, bcdDevice= 0.00 [ 263.582100][ T4233] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 263.685148][ T4233] usb 2-1: config 0 descriptor?? [ 264.417304][ T5112] usb 2-1: USB disconnect, device number 9 [ 267.321543][ T4244] usb 2-1: new full-speed USB device number 10 using dummy_hcd [ 267.688183][ T4244] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 267.728048][ T4244] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 268.848000][ T4244] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 268.859341][ T4244] usb 2-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 268.875867][ T4244] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 268.895084][ T4244] usb 2-1: config 0 descriptor?? [ 269.422828][ T4244] hid-picolcd 0003:04D8:F002.0002: unknown main item tag 0x0 [ 269.491375][ T4244] hid-picolcd 0003:04D8:F002.0002: item fetching failed at offset 1/5 [ 269.615195][ T4244] hid-picolcd 0003:04D8:F002.0002: device report parse failed [ 269.689552][ T4244] hid-picolcd: probe of 0003:04D8:F002.0002 failed with error -22 [ 270.121322][ T4244] usb 2-1: USB disconnect, device number 10 [ 271.785248][ T6337] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 271.857106][ T6337] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 275.876549][ T6382] __nla_validate_parse: 2 callbacks suppressed [ 275.876586][ T6382] netlink: 8 bytes leftover after parsing attributes in process `syz.0.659'. [ 276.086118][ T6386] netlink: 'syz.2.661': attribute type 6 has an invalid length. [ 276.102621][ T6386] netlink: 'syz.2.661': attribute type 6 has an invalid length. [ 276.627923][ T13] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 276.907887][ T13] usb 2-1: Using ep0 maxpacket: 16 [ 277.028089][ T13] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 277.055839][ T13] usb 2-1: config 0 has no interfaces? [ 277.084740][ T13] usb 2-1: New USB device found, idVendor=0c45, idProduct=5112, bcdDevice= 0.00 [ 277.124843][ T13] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 277.171298][ T13] usb 2-1: config 0 descriptor?? [ 277.402400][ T6403] netlink: 20 bytes leftover after parsing attributes in process `syz.4.669'. [ 277.467887][ T5112] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 277.491089][ T13] usb 2-1: USB disconnect, device number 11 [ 277.721493][ T5112] usb 3-1: Using ep0 maxpacket: 16 [ 277.838172][ T5112] usb 3-1: config 3 has an invalid interface number: 20 but max is 0 [ 277.846687][ T5112] usb 3-1: config 3 has no interface number 0 [ 277.853385][ T5112] usb 3-1: config 3 interface 20 has no altsetting 0 [ 278.018003][ T4244] usb 4-1: new low-speed USB device number 12 using dummy_hcd [ 278.028259][ T5112] usb 3-1: New USB device found, idVendor=05ac, idProduct=0246, bcdDevice=27.b1 [ 278.074666][ T5112] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 278.091032][ T5112] usb 3-1: Product: syz [ 278.099185][ T5112] usb 3-1: Manufacturer: syz [ 278.106998][ T5112] usb 3-1: SerialNumber: syz [ 278.113703][ T7] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 279.038035][ T4244] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 279.188795][ T7] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 279.385396][ T4244] usb 4-1: config 0 has no interface number 0 [ 279.392641][ T7] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 279.406388][ T4244] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 279.423465][ T7] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 279.453459][ T4244] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 279.466113][ T7] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 279.477401][ T4244] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 279.486814][ T7] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 279.501864][ T5112] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:3.20/input/input8 [ 279.516276][ T4244] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 279.557060][ T4244] usb 4-1: config 0 descriptor?? [ 279.562613][ T3544] bcm5974 3-1:3.20: could not read from device [ 279.588937][ T6414] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 279.700377][ T5112] bcm5974 3-1:3.20: could not read from device [ 279.768531][ T4244] iowarrior 4-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 279.779323][ T7] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 279.798021][ T7] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 279.814794][ T7] usb 5-1: Product: syz [ 279.819337][ T3544] bcm5974 3-1:3.20: could not read from device [ 279.834100][ T7] usb 5-1: Manufacturer: syz [ 279.847563][ T5112] input: failed to attach handler mousedev to device input8, error: -5 [ 279.867222][ T5112] usb 3-1: USB disconnect, device number 7 [ 279.888202][ T3544] bcm5974 3-1:3.20: could not read from device [ 279.899053][ T7] cdc_wdm 5-1:1.0: skipping garbage [ 279.904308][ T7] cdc_wdm 5-1:1.0: skipping garbage [ 279.927528][ T7] cdc_wdm 5-1:1.0: cdc-wdm1: USB WDM device [ 279.958856][ T7] cdc_wdm 5-1:1.0: Unknown control protocol [ 280.094687][ T7] usb 4-1: USB disconnect, device number 12 [ 280.368078][ T5112] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 282.004128][ T6455] netlink: 8 bytes leftover after parsing attributes in process `syz.3.686'. [ 282.102883][ T4244] usb 5-1: USB disconnect, device number 11 [ 282.479466][ T6464] netlink: 'syz.2.689': attribute type 6 has an invalid length. [ 282.495570][ T6464] netlink: 'syz.2.689': attribute type 6 has an invalid length. [ 286.966912][ T6502] netlink: 'syz.1.703': attribute type 6 has an invalid length. [ 286.985551][ T6502] netlink: 'syz.1.703': attribute type 6 has an invalid length. [ 287.374235][ T6504] tipc: Started in network mode [ 287.424320][ T6504] tipc: Node identity 0e5f12f11964, cluster identity 4711 [ 287.453214][ T6504] tipc: Enabled bearer , priority 0 [ 287.498810][ T6505] device syzkaller0 entered promiscuous mode [ 287.544566][ T6504] tipc: Resetting bearer [ 287.559578][ T6503] tipc: Resetting bearer [ 287.796144][ T6503] tipc: Disabling bearer [ 289.171458][ T7] tipc: Node number set to 389747441 [ 289.337485][ T6532] netlink: 12 bytes leftover after parsing attributes in process `syz.0.713'. [ 289.346899][ T6532] netlink: 12 bytes leftover after parsing attributes in process `syz.0.713'. [ 289.356532][ T6532] netlink: 12 bytes leftover after parsing attributes in process `syz.0.713'. [ 289.366162][ T6532] netlink: 12 bytes leftover after parsing attributes in process `syz.0.713'. [ 289.375691][ T6532] netlink: 12 bytes leftover after parsing attributes in process `syz.0.713'. [ 290.181799][ T6532] netlink: 12 bytes leftover after parsing attributes in process `syz.0.713'. [ 291.182624][ T6532] netlink: 12 bytes leftover after parsing attributes in process `syz.0.713'. [ 291.212189][ T6532] netlink: 12 bytes leftover after parsing attributes in process `syz.0.713'. [ 291.232407][ T6532] netlink: 12 bytes leftover after parsing attributes in process `syz.0.713'. [ 291.289032][ T6532] netlink: 12 bytes leftover after parsing attributes in process `syz.0.713'. [ 292.990366][ T6556] netlink: 'syz.3.717': attribute type 6 has an invalid length. [ 293.002202][ T6556] netlink: 'syz.3.717': attribute type 6 has an invalid length. [ 293.857941][ T1107] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 293.865617][ T21] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 294.905302][ T6590] __nla_validate_parse: 1 callbacks suppressed [ 294.905323][ T6590] netlink: 12 bytes leftover after parsing attributes in process `syz.3.729'. [ 294.921345][ T6590] netlink: 12 bytes leftover after parsing attributes in process `syz.3.729'. [ 294.930721][ T6590] netlink: 12 bytes leftover after parsing attributes in process `syz.3.729'. [ 294.940236][ T6590] netlink: 12 bytes leftover after parsing attributes in process `syz.3.729'. [ 295.372635][ T6590] netlink: 12 bytes leftover after parsing attributes in process `syz.3.729'. [ 295.382333][ T6590] netlink: 12 bytes leftover after parsing attributes in process `syz.3.729'. [ 295.391466][ T6590] netlink: 12 bytes leftover after parsing attributes in process `syz.3.729'. [ 295.400629][ T6590] netlink: 12 bytes leftover after parsing attributes in process `syz.3.729'. [ 295.409772][ T6590] netlink: 12 bytes leftover after parsing attributes in process `syz.3.729'. [ 295.419072][ T6590] netlink: 12 bytes leftover after parsing attributes in process `syz.3.729'. [ 295.648145][ T21] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 295.658990][ T1107] usb 2-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 295.672371][ T1107] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 295.685135][ T21] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 295.727911][ T1107] usb 2-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 295.758851][ T1107] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 295.813446][ T1107] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 295.901695][ T1107] usb 2-1: invalid MIDI out EP 0 [ 295.948094][ T21] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 295.957217][ T21] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 295.979883][ T6606] 9pnet: Insufficient options for proto=fd [ 296.740451][ T21] usb 5-1: Product: syz [ 296.744811][ T21] usb 5-1: Manufacturer: syz [ 296.753672][ T21] usb 5-1: SerialNumber: syz [ 296.798353][ T21] usb 5-1: can't set config #1, error -71 [ 296.841522][ T1107] snd-usb-audio: probe of 2-1:27.0 failed with error -22 [ 296.861337][ T21] usb 5-1: USB disconnect, device number 12 [ 296.899134][ T1107] usb 2-1: USB disconnect, device number 12 [ 297.777940][ T21] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 299.419168][ T4181] udevd[4181]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 299.569336][ T21] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 299.613133][ T21] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 299.724146][ T21] usb 5-1: New USB device found, idVendor=2006, idProduct=0118, bcdDevice= 0.00 [ 299.743651][ T21] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 299.776052][ T21] usb 5-1: config 0 descriptor?? [ 299.867172][ T21] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 299.930142][ T21] usb 5-1: USB disconnect, device number 13 [ 300.909469][ T6642] sctp: failed to load transform for md5: -2 [ 301.878248][ T21] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 302.158015][ T21] usb 5-1: Using ep0 maxpacket: 16 [ 302.308127][ T21] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 302.328972][ T21] usb 5-1: config 0 has no interfaces? [ 302.334592][ T21] usb 5-1: New USB device found, idVendor=0c45, idProduct=5112, bcdDevice= 0.00 [ 302.363894][ T21] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 302.393223][ T21] usb 5-1: config 0 descriptor?? [ 302.526701][ T6681] __nla_validate_parse: 11 callbacks suppressed [ 302.526719][ T6681] netlink: 12 bytes leftover after parsing attributes in process `syz.0.755'. [ 303.541116][ T6681] netlink: 12 bytes leftover after parsing attributes in process `syz.0.755'. [ 303.565059][ T6681] netlink: 12 bytes leftover after parsing attributes in process `syz.0.755'. [ 303.769107][ T6681] netlink: 12 bytes leftover after parsing attributes in process `syz.0.755'. [ 303.785259][ T6681] netlink: 12 bytes leftover after parsing attributes in process `syz.0.755'. [ 303.796307][ T6681] netlink: 12 bytes leftover after parsing attributes in process `syz.0.755'. [ 303.807035][ T6681] netlink: 12 bytes leftover after parsing attributes in process `syz.0.755'. [ 303.998013][ T13] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 304.258103][ T13] usb 2-1: Using ep0 maxpacket: 32 [ 304.378665][ T13] usb 2-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 304.440637][ T13] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 304.603092][ T13] usb 2-1: config 0 descriptor?? [ 304.609551][ T6681] netlink: 12 bytes leftover after parsing attributes in process `syz.0.755'. [ 304.620263][ T6681] netlink: 12 bytes leftover after parsing attributes in process `syz.0.755'. [ 304.668586][ T6681] netlink: 12 bytes leftover after parsing attributes in process `syz.0.755'. [ 304.693057][ T21] usb 5-1: USB disconnect, device number 14 [ 304.708902][ T13] gspca_main: sq930x-2.14.0 probing 041e:403c [ 304.957207][ T6702] tipc: Enabled bearer , priority 0 [ 304.998066][ T6702] device syzkaller0 entered promiscuous mode [ 305.005348][ T13] gspca_sq930x: reg_r 001f failed -71 [ 305.011525][ T13] sq930x: probe of 2-1:0.0 failed with error -71 [ 305.019989][ T13] usb 2-1: USB disconnect, device number 13 [ 305.068355][ T6702] tipc: Resetting bearer [ 305.338103][ T6701] tipc: Resetting bearer [ 305.395579][ T6701] tipc: Disabling bearer [ 307.774727][ T6732] netlink: 8 bytes leftover after parsing attributes in process `syz.1.770'. [ 309.478199][ T4176] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 309.817967][ T4176] usb 1-1: Using ep0 maxpacket: 32 [ 310.478179][ T4176] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 36, changing to 9 [ 310.498029][ T4176] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1152, setting to 1024 [ 310.510743][ T4176] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 310.520257][ T4176] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 310.538354][ T4176] usb 1-1: config 0 descriptor?? [ 310.658777][ T6744] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 310.678953][ T4176] hub 1-1:0.0: USB hub found [ 311.430933][ T4176] hub 1-1:0.0: 1 port detected [ 312.639525][ T4176] hub 1-1:0.0: hub_ext_port_status failed (err = -71) [ 312.647031][ T4244] usb 1-1: USB disconnect, device number 6 [ 316.422469][ T4176] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 317.129994][ T1427] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.136653][ T1427] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.807942][ T4176] usb 1-1: unable to get BOS descriptor or descriptor too short [ 318.158168][ T4176] usb 1-1: config 128 has an invalid interface number: 103 but max is 0 [ 318.182280][ T4176] usb 1-1: config 128 has no interface number 0 [ 318.199255][ T4176] usb 1-1: config 128 interface 103 has no altsetting 0 [ 319.107997][ T4176] usb 1-1: string descriptor 0 read error: -71 [ 319.116756][ T4176] usb 1-1: New USB device found, idVendor=0586, idProduct=3427, bcdDevice= f.45 [ 319.127922][ T4176] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 319.157925][ T4176] usb 1-1: can't set config #128, error -71 [ 319.177707][ T4176] usb 1-1: USB disconnect, device number 7 [ 320.178431][ T23] Bluetooth: hci5: command 0x1003 tx timeout [ 320.467895][ T4204] Bluetooth: hci5: sending frame failed (-49) [ 322.488094][ T4233] Bluetooth: hci5: command 0x1001 tx timeout [ 322.494893][ T4204] Bluetooth: hci5: sending frame failed (-49) [ 322.705811][ T6865] netlink: 8 bytes leftover after parsing attributes in process `syz.1.812'. [ 324.598879][ T21] Bluetooth: hci5: command 0x1009 tx timeout [ 324.965476][ T6866] syz.0.811 (6866): drop_caches: 2 [ 326.913753][ T6891] tipc: Started in network mode [ 326.919877][ T6891] tipc: Node identity d6af66b59ef6, cluster identity 4711 [ 326.927225][ T6891] tipc: Enabled bearer , priority 0 [ 326.935155][ T6891] device syzkaller0 entered promiscuous mode [ 326.955036][ T6891] tipc: Resetting bearer [ 326.981588][ T6890] tipc: Resetting bearer [ 327.027942][ T13] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 327.042619][ T6890] tipc: Disabling bearer [ 328.008897][ T13] usb 4-1: config 0 has no interfaces? [ 328.024401][ T13] usb 4-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 328.148590][ T13] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 328.302949][ T13] usb 4-1: config 0 descriptor?? [ 328.395699][ T6903] netlink: 16 bytes leftover after parsing attributes in process `syz.1.826'. [ 328.752746][ T23] usb 4-1: USB disconnect, device number 13 [ 331.838507][ T6929] netlink: 12 bytes leftover after parsing attributes in process `syz.0.832'. [ 331.860472][ T6929] netlink: 12 bytes leftover after parsing attributes in process `syz.0.832'. [ 331.897589][ T6929] netlink: 12 bytes leftover after parsing attributes in process `syz.0.832'. [ 331.910722][ T6929] netlink: 12 bytes leftover after parsing attributes in process `syz.0.832'. [ 331.920185][ T6929] netlink: 12 bytes leftover after parsing attributes in process `syz.0.832'. [ 331.929335][ T6929] netlink: 12 bytes leftover after parsing attributes in process `syz.0.832'. [ 331.939602][ T6929] netlink: 12 bytes leftover after parsing attributes in process `syz.0.832'. [ 331.948877][ T6929] netlink: 12 bytes leftover after parsing attributes in process `syz.0.832'. [ 331.968616][ T6929] netlink: 12 bytes leftover after parsing attributes in process `syz.0.832'. [ 333.096952][ T6938] afs: Unknown parameter '' [ 337.176400][ T6956] __nla_validate_parse: 1 callbacks suppressed [ 337.176778][ T6956] netlink: 24 bytes leftover after parsing attributes in process `syz.2.840'. [ 337.287967][ T7] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 337.588084][ T7] usb 4-1: Using ep0 maxpacket: 32 [ 337.748412][ T7] usb 4-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 337.795413][ T7] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 338.077133][ T7] usb 4-1: config 0 descriptor?? [ 338.130400][ T7] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 340.103581][ T6977] netlink: 12 bytes leftover after parsing attributes in process `syz.2.847'. [ 340.129595][ T5248] usb 4-1: USB disconnect, device number 14 [ 340.278454][ T6977] netlink: 12 bytes leftover after parsing attributes in process `syz.2.847'. [ 340.499175][ T6977] netlink: 12 bytes leftover after parsing attributes in process `syz.2.847'. [ 340.673876][ T6977] netlink: 12 bytes leftover after parsing attributes in process `syz.2.847'. [ 340.792270][ T6977] netlink: 12 bytes leftover after parsing attributes in process `syz.2.847'. [ 340.832327][ T6985] afs: Unknown parameter '' [ 341.011171][ T6977] netlink: 12 bytes leftover after parsing attributes in process `syz.2.847'. [ 341.191018][ T6977] netlink: 12 bytes leftover after parsing attributes in process `syz.2.847'. [ 341.351377][ T6977] netlink: 12 bytes leftover after parsing attributes in process `syz.2.847'. [ 341.514897][ T6977] netlink: 12 bytes leftover after parsing attributes in process `syz.2.847'. [ 341.889032][ T6928] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 342.258186][ T6928] usb 5-1: Using ep0 maxpacket: 16 [ 342.547952][ T6928] usb 5-1: unable to get BOS descriptor or descriptor too short [ 343.787967][ T6928] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0xF has invalid maxpacket 1023 [ 344.409509][ T6928] usb 5-1: New USB device found, idVendor=0499, idProduct=5007, bcdDevice= 0.40 [ 344.444235][ T6928] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 344.521810][ T6928] usb 5-1: Product: syz [ 344.573322][ T6928] usb 5-1: Manufacturer: syz [ 344.637376][ T6928] usb 5-1: SerialNumber: syz [ 344.782192][ T6928] usb 5-1: can't set config #1, error -71 [ 344.811150][ T6928] usb 5-1: USB disconnect, device number 15 [ 345.850891][ T7021] block device autoloading is deprecated and will be removed. [ 346.017973][ T21] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 346.458977][ T7027] afs: Unknown parameter '' [ 346.697948][ T21] usb 3-1: unable to get BOS descriptor or descriptor too short [ 347.273399][ T21] usb 3-1: config 1 interface 2 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 347.324922][ T7031] __nla_validate_parse: 1 callbacks suppressed [ 347.324945][ T7031] netlink: 12 bytes leftover after parsing attributes in process `syz.4.865'. [ 347.520485][ T7031] netlink: 12 bytes leftover after parsing attributes in process `syz.4.865'. [ 347.530849][ T7031] netlink: 12 bytes leftover after parsing attributes in process `syz.4.865'. [ 347.540372][ T7031] netlink: 12 bytes leftover after parsing attributes in process `syz.4.865'. [ 347.563353][ T7031] netlink: 12 bytes leftover after parsing attributes in process `syz.4.865'. [ 347.615142][ T7031] netlink: 12 bytes leftover after parsing attributes in process `syz.4.865'. [ 347.626661][ T7031] netlink: 12 bytes leftover after parsing attributes in process `syz.4.865'. [ 347.638891][ T7031] netlink: 12 bytes leftover after parsing attributes in process `syz.4.865'. [ 347.996304][ T21] usb 3-1: string descriptor 0 read error: -22 [ 348.004478][ T7031] netlink: 12 bytes leftover after parsing attributes in process `syz.4.865'. [ 348.014126][ T21] usb 3-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 348.023354][ T21] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 348.036667][ T7031] netlink: 12 bytes leftover after parsing attributes in process `syz.4.865'. [ 349.555335][ T7070] afs: Unknown parameter '' [ 349.605714][ T26] audit: type=1326 audit(1782569561.857:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7023 comm="syz.2.862" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc84811e59 code=0x7ffc0000 [ 349.707881][ T1110] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 349.914625][ T26] audit: type=1326 audit(1782569561.917:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7023 comm="syz.2.862" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc84811e59 code=0x7ffc0000 [ 350.178169][ T1110] usb 4-1: unable to get BOS descriptor or descriptor too short [ 350.297267][ T26] audit: type=1326 audit(1782569561.917:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7023 comm="syz.2.862" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc84811e59 code=0x7ffc0000 [ 350.322940][ T26] audit: type=1326 audit(1782569561.927:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7023 comm="syz.2.862" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc84811e59 code=0x7ffc0000 [ 350.329067][ T1110] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 350.353815][ T26] audit: type=1326 audit(1782569562.027:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7023 comm="syz.2.862" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc84811e59 code=0x7ffc0000 [ 350.384139][ T21] usb 3-1: USB disconnect, device number 9 [ 350.527854][ T1110] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 350.614313][ T26] audit: type=1326 audit(1782569562.037:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7023 comm="syz.2.862" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fbc84811aeb code=0x7ffc0000 [ 350.707961][ T26] audit: type=1326 audit(1782569562.047:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7023 comm="syz.2.862" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fbc84811aeb code=0x7ffc0000 [ 350.733290][ T26] audit: type=1326 audit(1782569562.057:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7023 comm="syz.2.862" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc84811e59 code=0x7ffc0000 [ 350.738770][ T1110] usb 4-1: New USB device found, idVendor=0763, idProduct=2080, bcdDevice= 0.40 [ 350.858621][ T1110] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 350.947366][ T1110] usb 4-1: Product: syz [ 350.953373][ T26] audit: type=1326 audit(1782569562.067:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7023 comm="syz.2.862" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fbc847d268e code=0x7ffc0000 [ 351.017262][ T1110] usb 4-1: Manufacturer: syz [ 351.051908][ T1110] usb 4-1: SerialNumber: syz [ 351.172303][ T26] audit: type=1326 audit(1782569562.267:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7023 comm="syz.2.862" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc84811e59 code=0x7ffc0000 [ 351.538151][ T1110] usb 4-1: 0:1 : does not exist [ 351.558530][ T4206] udevd[4206]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 351.575879][ T1110] usb 4-1: BAAD SPEAKER p_chmask mismatch [ 351.698058][ T1110] snd-usb-audio: probe of 4-1:1.0 failed with error -22 [ 351.729614][ T1110] usb 4-1: USB disconnect, device number 15 [ 352.049362][ T4177] udevd[4177]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 353.169423][ T7116] afs: Unknown parameter '' [ 355.810020][ T7133] __nla_validate_parse: 12 callbacks suppressed [ 355.810037][ T7133] netlink: 12 bytes leftover after parsing attributes in process `syz.2.896'. [ 355.858236][ T7133] netlink: 12 bytes leftover after parsing attributes in process `syz.2.896'. [ 355.876573][ T7133] netlink: 12 bytes leftover after parsing attributes in process `syz.2.896'. [ 355.886316][ T7133] netlink: 12 bytes leftover after parsing attributes in process `syz.2.896'. [ 355.896904][ T7133] netlink: 12 bytes leftover after parsing attributes in process `syz.2.896'. [ 355.909180][ T7133] netlink: 12 bytes leftover after parsing attributes in process `syz.2.896'. [ 355.928510][ T7133] netlink: 12 bytes leftover after parsing attributes in process `syz.2.896'. [ 355.941729][ T7133] netlink: 12 bytes leftover after parsing attributes in process `syz.2.896'. [ 355.989405][ T7133] netlink: 12 bytes leftover after parsing attributes in process `syz.2.896'. [ 356.030184][ T7133] netlink: 12 bytes leftover after parsing attributes in process `syz.2.896'. [ 365.515507][ T7225] __nla_validate_parse: 3 callbacks suppressed [ 365.515523][ T7225] netlink: 12 bytes leftover after parsing attributes in process `syz.3.924'. [ 365.659061][ T7232] netlink: 8 bytes leftover after parsing attributes in process `syz.2.926'. [ 365.820628][ T7225] netlink: 12 bytes leftover after parsing attributes in process `syz.3.924'. [ 365.842083][ T7225] netlink: 12 bytes leftover after parsing attributes in process `syz.3.924'. [ 366.022524][ T7225] netlink: 12 bytes leftover after parsing attributes in process `syz.3.924'. [ 366.034220][ T7225] netlink: 12 bytes leftover after parsing attributes in process `syz.3.924'. [ 366.803644][ T7225] netlink: 12 bytes leftover after parsing attributes in process `syz.3.924'. [ 366.816123][ T7225] netlink: 12 bytes leftover after parsing attributes in process `syz.3.924'. [ 366.850258][ T7225] netlink: 12 bytes leftover after parsing attributes in process `syz.3.924'. [ 366.885417][ T7225] netlink: 12 bytes leftover after parsing attributes in process `syz.3.924'. [ 368.162591][ T7255] netlink: 'syz.1.930': attribute type 6 has an invalid length. [ 369.099311][ T7265] netlink: 'syz.1.930': attribute type 6 has an invalid length. [ 373.848978][ T7292] __nla_validate_parse: 1 callbacks suppressed [ 373.848997][ T7292] netlink: 8 bytes leftover after parsing attributes in process `syz.4.942'. [ 375.556788][ T7293] ALSA: mixer_oss: invalid OSS volume 'ÿÿÿÿÿÿÿÿ' [ 378.570770][ T1427] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.574096][ T7323] netlink: 12 bytes leftover after parsing attributes in process `syz.2.948'. [ 378.577418][ T1427] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.789141][ T7323] netlink: 12 bytes leftover after parsing attributes in process `syz.2.948'. [ 378.798460][ T7323] netlink: 12 bytes leftover after parsing attributes in process `syz.2.948'. [ 378.807637][ T7323] netlink: 12 bytes leftover after parsing attributes in process `syz.2.948'. [ 378.817160][ T7323] netlink: 12 bytes leftover after parsing attributes in process `syz.2.948'. [ 378.826584][ T7323] netlink: 12 bytes leftover after parsing attributes in process `syz.2.948'. [ 378.836368][ T7323] netlink: 12 bytes leftover after parsing attributes in process `syz.2.948'. [ 378.845745][ T7323] netlink: 12 bytes leftover after parsing attributes in process `syz.2.948'. [ 378.855161][ T7323] netlink: 12 bytes leftover after parsing attributes in process `syz.2.948'. [ 378.951571][ T7323] netlink: 12 bytes leftover after parsing attributes in process `syz.2.948'. [ 379.119287][ T7332] netlink: 'syz.4.953': attribute type 6 has an invalid length. [ 379.163030][ T7332] netlink: 'syz.4.953': attribute type 6 has an invalid length. [ 379.383512][ T7337] netlink: 8 bytes leftover after parsing attributes in process `syz.3.955'. [ 384.642255][ T7372] netlink: 12 bytes leftover after parsing attributes in process `syz.2.965'. [ 384.669689][ T7372] netlink: 12 bytes leftover after parsing attributes in process `syz.2.965'. [ 384.854507][ T7372] netlink: 12 bytes leftover after parsing attributes in process `syz.2.965'. [ 384.865394][ T7372] netlink: 12 bytes leftover after parsing attributes in process `syz.2.965'. [ 384.876820][ T7372] netlink: 12 bytes leftover after parsing attributes in process `syz.2.965'. [ 384.991494][ T7372] netlink: 12 bytes leftover after parsing attributes in process `syz.2.965'. [ 385.002398][ T7372] netlink: 12 bytes leftover after parsing attributes in process `syz.2.965'. [ 385.013312][ T7372] netlink: 12 bytes leftover after parsing attributes in process `syz.2.965'. [ 385.024058][ T7372] netlink: 12 bytes leftover after parsing attributes in process `syz.2.965'. [ 385.069594][ T7372] netlink: 12 bytes leftover after parsing attributes in process `syz.2.965'. [ 390.117883][ T1110] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 390.187149][ T7418] afs: Unknown parameter 'dy' [ 390.388202][ T1110] usb 4-1: Using ep0 maxpacket: 16 [ 390.528157][ T1110] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 390.865951][ T1110] usb 4-1: config 0 has no interfaces? [ 390.885977][ T1110] usb 4-1: New USB device found, idVendor=0c45, idProduct=5112, bcdDevice= 0.00 [ 390.935016][ T1110] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 391.485351][ T1110] usb 4-1: config 0 descriptor?? [ 391.826972][ T7431] [ 391.829339][ T7431] ============================================ [ 391.835507][ T7431] WARNING: possible recursive locking detected [ 391.841695][ T7431] syzkaller #0 Not tainted [ 391.846139][ T7431] -------------------------------------------- [ 391.852311][ T7431] syz.3.977/7431 is trying to acquire lock: [ 391.858308][ T7431] ffffffff8cb409b8 (qp_broker_list.mutex){+.+.}-{3:3}, at: vmci_qp_broker_detach+0xe6/0x10a0 [ 391.868535][ T7431] [ 391.868535][ T7431] but task is already holding lock: [ 391.875919][ T7431] ffffffff8cb409b8 (qp_broker_list.mutex){+.+.}-{3:3}, at: vmci_qp_broker_detach+0xe6/0x10a0 [ 391.886325][ T7431] [ 391.886325][ T7431] other info that might help us debug this: [ 391.894408][ T7431] Possible unsafe locking scenario: [ 391.894408][ T7431] [ 391.901889][ T7431] CPU0 [ 391.905199][ T7431] ---- [ 391.908500][ T7431] lock(qp_broker_list.mutex); [ 391.913387][ T7431] lock(qp_broker_list.mutex); [ 391.914523][ T7430] tipc: Enabled bearer , priority 0 [ 391.918264][ T7431] [ 391.918264][ T7431] *** DEADLOCK *** [ 391.918264][ T7431] [ 391.918271][ T7431] May be due to missing lock nesting notation [ 391.918271][ T7431] [ 391.918277][ T7431] 1 lock held by syz.3.977/7431: [ 391.918290][ T7431] #0: ffffffff8cb409b8 (qp_broker_list.mutex){+.+.}-{3:3}, at: vmci_qp_broker_detach+0xe6/0x10a0 [ 391.918355][ T7431] [ 391.918355][ T7431] stack backtrace: [ 391.918363][ T7431] CPU: 0 PID: 7431 Comm: syz.3.977 Not tainted syzkaller #0 [ 391.934318][ T7430] device syzkaller0 entered promiscuous mode [ 391.941467][ T7431] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 391.941483][ T7431] Call Trace: [ 391.941490][ T7431] [ 391.941497][ T7431] dump_stack_lvl+0x188/0x250 [ 391.941524][ T7431] ? show_regs_print_info+0x20/0x20 [ 391.941545][ T7431] ? load_image+0x410/0x410 [ 391.941569][ T7431] __lock_acquire+0x1247/0x7b50 [ 391.941599][ T7431] ? rcu_lock_release+0x5/0x20 [ 391.941621][ T7431] ? __lock_acquire+0x7b50/0x7b50 [ 391.941646][ T7431] ? verify_lock_unused+0x140/0x140 [ 391.941670][ T7431] ? mark_lock+0x94/0x320 [ 391.941697][ T7431] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 391.941723][ T7431] ? lock_chain_count+0x20/0x20 [ 391.941747][ T7431] ? __rwlock_init+0x140/0x140 [ 391.941770][ T7431] lock_acquire+0x19e/0x400 [ 391.941793][ T7431] ? vmci_qp_broker_detach+0xe6/0x10a0 [ 391.941819][ T7431] ? stack_trace_save+0xa6/0xf0 [ 391.941838][ T7431] ? __might_sleep+0xf0/0xf0 [ 391.941859][ T7431] ? read_lock_is_recursive+0x10/0x10 [ 391.941883][ T7431] ? stack_depot_save+0x41b/0x460 [ 392.041095][ T7430] tipc: Resetting bearer [ 392.042617][ T7431] __mutex_lock_common+0x1e5/0x2400 [ 392.088349][ T7431] ? vmci_qp_broker_detach+0xe6/0x10a0 [ 392.093848][ T7431] ? vmci_ctx_enqueue_datagram+0x3bf/0x430 [ 392.099687][ T7431] ? vmci_datagram_dispatch+0x44f/0xc40 [ 392.105272][ T7431] ? vmci_host_close+0x8d/0x140 [ 392.110161][ T7431] ? __fput+0x212/0x8c0 [ 392.114349][ T7431] ? task_work_run+0x125/0x1a0 [ 392.119146][ T7431] ? exit_to_user_mode_loop+0x10f/0x130 [ 392.124724][ T7431] ? exit_to_user_mode_prepare+0xee/0x180 [ 392.130468][ T7431] ? do_syscall_64+0x58/0xa0 [ 392.135094][ T7431] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 392.141198][ T7431] ? vmci_qp_broker_detach+0xe6/0x10a0 [ 392.146694][ T7431] ? mutex_lock_io_nested+0x60/0x60 [ 392.151977][ T7431] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 392.158139][ T7431] ? lock_chain_count+0x20/0x20 [ 392.163025][ T7431] mutex_lock_nested+0x17/0x20 [ 392.167824][ T7431] vmci_qp_broker_detach+0xe6/0x10a0 [ 392.173138][ T7431] ? kasan_quarantine_put+0xd4/0x210 [ 392.178461][ T7431] ? lockdep_hardirqs_on+0x94/0x140 [ 392.183695][ T7431] ? qp_notify_peer+0x1f0/0x1f0 [ 392.188577][ T7431] ? slab_free_freelist_hook+0xec/0x170 [ 392.194151][ T7431] ? vmci_ctx_put+0x562/0xbd0 [ 392.198865][ T7431] ? kfree+0xef/0x2a0 [ 392.202883][ T7431] vmci_ctx_put+0x5c1/0xbd0 [ 392.207426][ T7431] ? preempt_schedule+0xbc/0xd0 [ 392.212306][ T7431] ? vmci_ctx_destroy+0xf0/0xf0 [ 392.217190][ T7431] ? __lock_acquire+0x7b50/0x7b50 [ 392.222244][ T7431] ? do_raw_spin_lock+0x128/0x2f0 [ 392.227298][ T7431] ? preempt_schedule_thunk+0x16/0x18 [ 392.232708][ T7431] vmci_ctx_enqueue_datagram+0x3bf/0x430 [ 392.238387][ T7431] vmci_datagram_dispatch+0x44f/0xc40 [ 392.243795][ T7431] ? rcu_lock_release+0x20/0x20 [ 392.248678][ T7431] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 392.254701][ T7431] vmci_qp_broker_detach+0xa62/0x10a0 [ 392.260106][ T7431] ? qp_notify_peer+0x1f0/0x1f0 [ 392.265000][ T7431] ? vmci_ctx_put+0x562/0xbd0 [ 392.269705][ T7431] ? kfree+0xef/0x2a0 [ 392.273764][ T7431] vmci_ctx_put+0x5c1/0xbd0 [ 392.278303][ T7431] ? vmci_ctx_destroy+0xf0/0xf0 [ 392.283187][ T7431] ? __rwlock_init+0x140/0x140 [ 392.287985][ T7431] ? do_raw_spin_unlock+0x11d/0x230 [ 392.293230][ T7431] vmci_host_close+0x8d/0x140 [ 392.297946][ T7431] ? vmci_host_open+0xe0/0xe0 [ 392.302659][ T7431] __fput+0x212/0x8c0 [ 392.306694][ T7431] task_work_run+0x125/0x1a0 [ 392.311325][ T7431] exit_to_user_mode_loop+0x10f/0x130 [ 392.316729][ T7431] exit_to_user_mode_prepare+0xee/0x180 [ 392.322309][ T7431] syscall_exit_to_user_mode+0x16/0x40 [ 392.327805][ T7431] do_syscall_64+0x58/0xa0 [ 392.332261][ T7431] ? clear_bhb_loop+0x30/0x80 [ 392.336973][ T7431] ? clear_bhb_loop+0x30/0x80 [ 392.341879][ T7431] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 392.347825][ T7431] RIP: 0033:0x7f0f6561fe59 [ 392.352275][ T7431] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 392.371940][ T7431] RSP: 002b:00007f0f63858028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 392.380394][ T7431] RAX: 0000000000000000 RBX: 00007f0f65899090 RCX: 00007f0f6561fe59 [ 392.388416][ T7431] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000000000008 [ 392.396420][ T7431] RBP: 00007f0f656b5e6f R08: 0000000000000000 R09: 0000000000000000 [ 392.404430][ T7431] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 392.412430][ T7431] R13: 00007f0f65899128 R14: 00007f0f65899090 R15: 00007ffc038a6b48 [ 392.420448][ T7431] [ 392.424715][ T7429] tipc: Resetting bearer [ 392.672449][ T7429] tipc: Disabling bearer