last executing test programs: 2m31.414610048s ago: executing program 4 (id=295): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="05000000400000000600000008"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x9, 0x0, r0}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0c00000004000000040000000900000000000000", @ANYRES32=r1], 0x48) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd2d, 0x0, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x7fffffffffffffff, 0x0, 0x0, 0x4, 0xffffffffffffffff, 0x7}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0xffffffff, 0x0, 0x1, 0x0, 0x6}, [@tmpl={0x44, 0x5, [{{@in6=@ipv4={'\x00', '\xff\xff', @private=0xa010101}, 0x0, 0x3c}, 0x2, @in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x6, 0x4, 0x3, 0x0, 0x1}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) r3 = socket$inet6(0xa, 0x3, 0x2) syz_open_procfs(0x0, 0x0) r4 = syz_open_dev$usbmon(&(0x7f00000000c0), 0xa, 0x8440) mprotect(&(0x7f000074d000/0x400000)=nil, 0x400000, 0x1) ioctl$MON_IOCX_GET(r4, 0x40189206, &(0x7f0000000280)={0x0, 0x0}) syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007c, 0x181101) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r5 = getpgrp(0x0) sched_setaffinity(r5, 0x8, &(0x7f0000000240)=0xfffffffffffffffd) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r7 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r7, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r8 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r8, &(0x7f0000019680)=""/102392, 0x18ff8) r9 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r9, 0x541c, &(0x7f0000001900)={0x2, {0x2, 0xa00, 0x0, 0x101, 0x100}}) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x4e25, 0x0, @empty, 0x7}, 0x1c) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0xffd8) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="14"], &(0x7f0000000700), 0x0) 2m29.989995994s ago: executing program 4 (id=298): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.avg_queue_size\x00', 0x26e1, 0x0) close(r0) sendmsg$kcm(r0, &(0x7f00000001c0)={&(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x2, 0x4, 0x2, 0x2, {0xa, 0x4e22, 0x5, @dev={0xfe, 0x80, '\x00', 0x42}, 0x1000097}}}, 0x80, 0x0, 0xfffffffffffffd4d}, 0x2400f745) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SIOCSIFHWADDR(r0, 0x8b32, &(0x7f0000000000)={'virt_wifi0\x00', @random="0100"}) 2m25.044008475s ago: executing program 4 (id=303): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f0000000040)='./rpc_pipefs\x00', &(0x7f0000000080)='rpc_pipefs\x00', 0x0, 0x0) creat(&(0x7f0000000100)='./rpc_pipefs/gssd/clntXX/gssd\x00', 0x100) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') 2m24.140797962s ago: executing program 4 (id=306): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x2, 0x1, &(0x7f0000000200)=ANY=[@ANYBLOB="180200000000000000000000000000009500000000"], &(0x7f0000000000)='syzkaller\x00', 0x6, 0x0, 0xffffffffffffffff}, 0x94) 2m23.854170302s ago: executing program 4 (id=310): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000140)=0x200000000) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000d00), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r3, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)={0x18, r4, 0x719, 0x70bd2e, 0x25dfdbfe, {}, [@HEADER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x8000}, 0x880) 2m21.916114173s ago: executing program 4 (id=313): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x2, 0xff, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmmsg(r1, &(0x7f000000a540)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000540)="050000eb3a49a8d125", 0x9}], 0x1}}], 0xfffffffffffffd9e, 0x4000041) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@newtfilter={0x24, 0x11, 0x1, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x74, r2, {0xfff2, 0xfff2}, {0xfff1, 0xffff}, {0xfff2}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x20000050) 2m5.34130825s ago: executing program 32 (id=313): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x2, 0xff, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmmsg(r1, &(0x7f000000a540)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000540)="050000eb3a49a8d125", 0x9}], 0x1}}], 0xfffffffffffffd9e, 0x4000041) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@newtfilter={0x24, 0x11, 0x1, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x74, r2, {0xfff2, 0xfff2}, {0xfff1, 0xffff}, {0xfff2}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x20000050) 15.855206371s ago: executing program 3 (id=943): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22, @multicast1}, 0x10) setsockopt$sock_int(r0, 0x1, 0x800000000f, &(0x7f0000000080)=0x7, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r2, 0x29, 0x1a, &(0x7f00000007c0)=0x40000401, 0x4) setsockopt$sock_int(r2, 0x1, 0xf, 0x0, 0x0) bind$inet6(r2, &(0x7f00000003c0)={0xa, 0x4e22, 0x0, @empty, 0xffffffff}, 0x1c) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000000)=0x2, 0x4) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x10000000}, 0x1c) listen(r0, 0xb5d6) 10.651183399s ago: executing program 3 (id=968): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0e000000040000000400000002"], 0x50) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xd, 0xf}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r4 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(r4) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) socket$kcm(0x11, 0x3, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000022c0)=@newtfilter={0xe94, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r7, {0x1, 0x4}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_matchall={{0xd}, {0xe58, 0x2, [@TCA_MATCHALL_ACT={0xe54, 0x2, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x2, 0x9, 0x5, 0x6}, 0x1, 0xfb}, [{0x2, 0x1, 0x84, 0x3, 0x2, 0x7}, {0x1, 0x6, 0x4, 0x3, 0xfffffffd, 0x81}, {0x1, 0x1, 0x8, 0x101, 0x3}, {0x3, 0x3, 0x0, 0x7, 0x5, 0x4}, {0xf, 0x7, 0x694, 0x51, 0x8001}, {0x3, 0x8004, 0xc, 0x101, 0x3, 0x84b5}, {0x9c, 0x4, 0x9, 0x2, 0x487, 0x8}, {0x1, 0x10000, 0x5, 0x4, 0x3, 0x8000}, {0x7, 0x9, 0x1ff, 0x8, 0x2, 0x7fff}, {0x439356e7, 0x609, 0x16, 0xfffffffc, 0x10000, 0x6}, {0x5, 0x3, 0x8, 0x3, 0x400000, 0xffffffff}, {0x685, 0x0, 0x7, 0x7, 0x8, 0x5}, {0x8, 0x8, 0x9, 0x5, 0xfffff000, 0x7}, {0x768d, 0x7ff, 0x8, 0x7, 0x5, 0x9}, {0x1, 0xfffffffb, 0x6, 0x7, 0x7ff, 0x6}, {0xfffffffb, 0x3, 0xfffffffa, 0x6, 0x2}, {0xfffff9fd, 0x9, 0xa5f, 0xa, 0x5, 0x2}, {0x6, 0x9, 0x167, 0x2, 0x71, 0xa2}, {0x140, 0x2, 0xc, 0x8, 0x87, 0x60}, {0x5, 0xa, 0x2, 0x4, 0x3, 0x2000}, {0x32d, 0x8, 0x7fff, 0x4, 0x8, 0x6}, {0x8, 0x200, 0x58fe, 0x802, 0x4, 0x3}, {0x101, 0xd, 0x101, 0x1, 0x3, 0x8}, {0x0, 0x3, 0x1ff, 0x7437ec78, 0x2, 0x9}, {0xffffffff, 0x1, 0x9, 0x0, 0x81, 0x4}, {0xc, 0xe, 0x0, 0x3, 0x8, 0x81}, {0x3, 0x3, 0x6, 0xe, 0x0, 0x80}, {0xd, 0x0, 0x7ff, 0x0, 0x80000000, 0x2}, {0x4, 0xb, 0x7c5f1878, 0x57c4, 0x8, 0x25ff}, {0x4, 0xd, 0x1fadd976, 0x3071, 0x0, 0x1}, {0x5, 0x800, 0x3, 0x3, 0x6, 0x9}, {0x9, 0x1ff, 0x1000, 0x9c, 0x1, 0x7}, {0x9, 0xd76, 0x6, 0xdc2, 0xa16a, 0x2}, {0x1ff, 0x5, 0x7, 0x2, 0x2, 0x1}, {0x1, 0x32158142, 0x0, 0x8, 0x6, 0x7}, {0xe, 0x4, 0x9000, 0x2, 0x2, 0x7f}, {0x3, 0x2ec74d53, 0x0, 0x0, 0x8, 0x2}, {0x5, 0xfff, 0xffffff13, 0x9, 0x6, 0x6}, {0x1, 0x6, 0x3, 0x4, 0xffb, 0xc}, {0x6, 0x6, 0x1ff, 0x8, 0x7ff, 0x8001}, {0x4, 0xffffffff, 0x0, 0xfffff740, 0x4, 0x4}, {0xffff, 0x5, 0x7, 0xac, 0xf}, {0x80, 0x3, 0x6, 0x1000, 0xd8fe, 0x8001}, {0xd, 0x3, 0x80000000, 0x0, 0xffffff81, 0x7ff}, {0xfffffffb, 0x2, 0x1ff, 0xf9, 0xffff8001, 0x800000}, {0x0, 0x6, 0x7ffc, 0x9, 0x500, 0x7}, {0x1, 0xffffffff, 0x834, 0x7, 0x0, 0x3}, {0x7fff, 0x6, 0x0, 0x2002, 0x2, 0x8}, {0xf61, 0x101, 0x9, 0x2, 0x80000000, 0x7fff}, {0xc7, 0x4, 0x8, 0x2, 0xffff, 0x20000000}, {0x0, 0x5, 0x1, 0xffff, 0x3, 0x3}, {0x8, 0x10001, 0x9f98, 0x1, 0x8, 0xb}, {0xfff, 0x1000006, 0x8, 0x80000001, 0x0, 0x7f}, {0xefa, 0x6, 0x7f, 0x2, 0x3, 0xb}, {0x4, 0x4b, 0x0, 0x1, 0x7f, 0x7fffffff}, {0xffe, 0x47e4, 0x1, 0x0, 0x80000001, 0x9}, {0x3, 0x9, 0x7, 0x6, 0x3e6b7592, 0x5}, {0x9, 0x9, 0x1, 0x9, 0x0, 0x2}, {0x8, 0x80000001, 0x7fff, 0xb2d9, 0xfffffffe, 0x8}, {0x80000001, 0x9, 0x5202, 0x2, 0x53d2, 0x3}, {0x6, 0x7, 0x8, 0x8, 0x7f, 0x80000000}, {0xfffffff9, 0x9, 0x6, 0x6, 0x9, 0x83}, {0xfffffffd, 0x8, 0x6, 0x5, 0x7fffffff, 0x8f}, {0x741, 0x0, 0x9, 0x7fffffff, 0x0, 0x200}, {0x3ff, 0x2, 0x8, 0x4, 0x4, 0xc6e9}, {0x1, 0x2d73, 0x400, 0x5, 0x9f15, 0xffffff7f}, {0x2, 0x8401, 0x2b00, 0xfffff57b, 0xfffffc00, 0xd}, {0x3, 0x4, 0xc52b, 0x9, 0x5, 0xff}, {0x0, 0x4, 0x401, 0x0, 0x1, 0x9}, {0x8, 0x4, 0x1, 0x2, 0x10, 0x1}, {0xff, 0x8, 0x8, 0x5, 0x0, 0xfffffffc}, {0x2, 0xb15ce2d, 0x80000001, 0xbeab, 0x8, 0x5}, {0x3, 0x10000008, 0x3, 0x7, 0x8, 0x4}, {0xfff, 0x9, 0x6, 0x3, 0x100, 0x57}, {0x9, 0x5, 0x4, 0x3, 0xa, 0x2}, {0xb3, 0x800000e, 0x3, 0x7e8, 0x7, 0x9}, {0x400000ff, 0x7, 0x5, 0x7, 0x6, 0x6}, {0x2, 0x8f, 0x9, 0xffffff46, 0x84, 0x80000000}, {0x9, 0x2, 0xfffffffc, 0x0, 0xd50, 0x3}, {0xd203, 0x7, 0x1, 0x10000, 0x43, 0x1ff}, {0x4, 0x3ff, 0xffffffff, 0x1, 0xffffffff, 0x100}, {0x1ff, 0x3, 0x7ff, 0xfffffff8, 0x1ff, 0x9}, {0x7, 0xd, 0x3ff, 0x1, 0x7, 0x4}, {0x0, 0x6, 0x0, 0x9, 0xffff0001, 0xcca}, {0x7, 0x1, 0xfffffff1, 0x3ff, 0x40000100, 0x4}, {0x3, 0x9, 0x0, 0xed4, 0x4, 0x6}, {0x9, 0x7, 0x8001, 0x7, 0x7, 0x2}, {0x3, 0xfff, 0x9, 0x5, 0xb5, 0x3}, {0x0, 0x1, 0x1, 0x5, 0xffffff01, 0xfff}, {0x7, 0x5, 0x2, 0x2, 0x0, 0xfffff9de}, {0x5, 0xffffffff, 0xe6b, 0xa, 0xb, 0x4}, {0x1d, 0xffffff10, 0x1, 0x2, 0xff, 0x52e2}, {0x0, 0x1, 0x0, 0x7, 0xdb, 0x5}, {0x7, 0x2, 0x9, 0x8, 0x7f, 0x100}, {0x81, 0x4, 0x988, 0x3, 0x0, 0x7}, {0xdc03, 0x7, 0x402c, 0x8, 0xfffffff9, 0x4}, {0xa, 0xfffffffe, 0x1, 0x1ff, 0x1ff, 0xc1b7}, {0xa24b, 0x947d, 0x40, 0x4, 0x9, 0x2}, {0x9, 0x401, 0xa89, 0x5ef, 0x9, 0x8}, {0x4, 0x7fff, 0x0, 0x4, 0x7fffffff}, {0x3, 0xb8c, 0x6, 0x21761f6a, 0xfffffffe, 0x4}, {0xfff, 0xda, 0x1f, 0x4, 0x8, 0x5}, {0x8, 0x10, 0x100, 0x0, 0x5, 0x43}, {0xfffff000, 0x8, 0xe98, 0x9, 0x9, 0x34b0}, {0x4, 0x8, 0x8, 0x3, 0x6cf4, 0x2}, {0x3, 0x0, 0x5, 0x4, 0xbe, 0x81}, {0x4, 0x800, 0x0, 0x5, 0x8, 0xfa2f}, {0xe, 0x5e20, 0x81, 0x2, 0x8, 0x6}, {0x9, 0x6, 0x6, 0x4, 0xf, 0x100}, {0x100, 0x1, 0xffffffff, 0xffffffff, 0x9, 0x74}, {0x4, 0x4, 0x8, 0x1, 0x0, 0x3}, {0xfffffff8, 0xfffffffb, 0xffffffff, 0x62f, 0x401, 0x30564e0}, {0x9a2f, 0x800, 0x3, 0x1, 0x7}, {0x20000002, 0x2, 0x800, 0x203, 0x9, 0x3}, {0x7, 0x6, 0x8936, 0xdcb, 0x0, 0x2}, {0x6, 0x80000000, 0x8, 0xe, 0xfffffffa, 0x8de3}, {0x0, 0x9, 0x7, 0xfff, 0x6, 0x1ff}, {0x8195, 0x2, 0x1000}, {0x1, 0x50, 0xff, 0x9e0f, 0x5, 0x6}, {0x7fff, 0x6, 0x2, 0x5, 0x8000, 0x3}, {0x7ff, 0x9, 0xa, 0x6, 0x7, 0xe77}, {0x1, 0x5e12, 0x3, 0xfffffffa, 0x2, 0x80000001}, {0xffffff8c, 0x2, 0x1, 0x1, 0x4, 0x5}, {0x4, 0x7, 0x104, 0x78d, 0xffffcff9, 0x9}, {0x2001, 0xe, 0x7, 0x2, 0x2, 0x207f}, {0x10, 0x5, 0xfffffffa, 0xff, 0x80000, 0xfff}, {0x1, 0x7ff, 0x696e, 0xa, 0x49d, 0xb}, {0x9bf4, 0x0, 0x5, 0x3, 0x3, 0x1000}], [{0x1, 0x1}, {0x2}, {0x5}, {0x2}, {0x1, 0x745e81639ff0f356}, {0x4}, {0x5}, {0x3}, {0x3}, {0x2}, {0x3}, {0x4}, {0x0, 0x1}, {0x2}, {0x2}, {}, {0x3}, {0x0, 0x1}, {0x0, 0x1}, {0x5}, {0x3, 0x1}, {0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x2}, {0x3}, {0x2}, {0x1, 0x1}, {0x1}, {0x1, 0x1}, {0x5}, {0x4}, {0x5, 0x1}, {0x5}, {}, {0x4, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x5}, {0xa}, {0x3, 0x1}, {0x5}, {0x2, 0x1}, {0x3}, {0x5, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x2}, {0x4}, {0x4, 0x1}, {0x4}, {0x4}, {0x2, 0x1}, {0x2, 0x1}, {0x5}, {0x2, 0x1}, {0x1}, {0x4}, {0x0, 0x1}, {0x2}, {0x1, 0x1}, {0x3, 0x1}, {0x5}, {0x3, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x3}, {0x6}, {0xa}, {0x2, 0x1}, {}, {0x1, 0x1}, {0x1}, {0x4, 0x1}, {0x5}, {0x3, 0x1}, {0x3, 0x1}, {0x4}, {0x2, 0x1}, {0x5}, {0x6}, {0x2}, {0xb82e57098c7a44ef}, {0x3, 0x1}, {0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x1}, {0x0, 0x1}, {}, {0x4}, {0x0, 0x1}, {0x2}, {0x4, 0x1}, {0x1}, {0x4, 0x1}, {0x2}, {0x5}, {0x1, 0x1}, {0x5}, {0x4, 0x1}, {0x3}, {0x3}, {0x1}, {0x5}, {0x3, 0x1}, {0x4}, {0x4, 0x1}, {0x0, 0x1}, {0x4}, {0x4, 0x1}, {0x1}, {0x5, 0x1}, {0x2}, {0x0, 0x1}, {0x3}, {0x1}, {0x0, 0x1}, {0x4}], 0x1}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x52, 0x1}}]}, 0xe94}, 0x1, 0x0, 0x0, 0x10}, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(0xffffffffffffffff, 0x0, r9, 0x0, 0x6, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, 0xffffffffffffffff, 0x0) close(r8) 10.632401939s ago: executing program 1 (id=969): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[], 0x1c}}, 0x840) write$nci(r0, &(0x7f0000000580)=@NCI_OP_RF_INTF_ACTIVATED_NTF={0x1, 0x0, 0x3, 0x5, 0x3, @a_listen={0x0, 0x3, 0x2, 0x80, 0x5, 0xcc, 0x3, "", 0x40, 0x77, 0xc, 0x7, 0x7c, "23383d455a2aeb7fd50231f9cdf2794fef4642bf79faf4e6e9d9af7c90f4ec7f1bcd6fcbc049779772ce749a123479c501b6af8c9e5086f4df6d4dba2dc0c999eb69ec6678eef11b3111e10ff6285fb25afee7b2b9c23e9e68915fac65bb8347708dfe542a8e51150f163154000d0945858e6a96d088736825932a2a"}}, 0x8b) socket$nl_generic(0x10, 0x3, 0x10) 10.267779546s ago: executing program 3 (id=972): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x280, 0x0, 0x43, 0xa0, 0xe0, 0x98, 0x1e8, 0x178, 0x178, 0x1e8, 0x178, 0x49, 0x0, {[{{@uncond, 0x12a, 0xc0, 0xe0, 0x0, {0x0, 0x7a010000}, [@inet=@rpfilter={{0x28}, {0x8}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0xa0, 0x108, 0x0, {}, [@common=@addrtype={{0x30}, {0x0, 0x2, 0x0, 0x1}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0xc, 0xd, 0x9, 0x5, '\x00', 'syz0\x00', {0xa7}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2e0) 9.95830414s ago: executing program 3 (id=974): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000180)=0x19ca, 0x4) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) ioperm(0x0, 0xb51a, 0x2000000000000006) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sendto$packet(r0, &(0x7f00000000c0)="3f03fe7f0302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c153cfdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) 7.292786175s ago: executing program 3 (id=979): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="05000000400000000600000008"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x9, 0x0, r0}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0c00000004000000040000000900000000000000", @ANYRES32=r1], 0x48) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd2d, 0x0, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x7fffffffffffffff, 0x0, 0x0, 0x4, 0xffffffffffffffff, 0x7}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0xffffffff, 0x0, 0x1, 0x0, 0x6}, [@tmpl={0x44, 0x5, [{{@in6=@ipv4={'\x00', '\xff\xff', @private=0xa010101}, 0x0, 0x3c}, 0x2, @in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x6, 0x4, 0x3, 0x0, 0x1}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) r3 = socket$inet6(0xa, 0x3, 0x2) syz_open_procfs(0x0, 0x0) r4 = syz_open_dev$usbmon(&(0x7f00000000c0), 0xa, 0x8440) mprotect(&(0x7f000074d000/0x400000)=nil, 0x400000, 0x1) ioctl$MON_IOCX_GET(r4, 0x40189206, &(0x7f0000000280)={0x0, 0x0}) syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007c, 0x181101) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) getpgrp(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r6 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r6, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r8, 0x541c, &(0x7f0000001900)={0x2, {0x2, 0xa00, 0x0, 0x101, 0x100}}) sched_setaffinity(0x0, 0x0, 0x0) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x4e25, 0x0, @empty, 0x7}, 0x1c) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0xffd8) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="14"], &(0x7f0000000700), 0x0) 6.907250322s ago: executing program 0 (id=982): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x94}, 0x24000000) sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={0x48, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "1e1c"}]}, @NFTA_SET_ELEM_KEY_END={0x8, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4}]}]}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) 6.578491804s ago: executing program 0 (id=984): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_DEV(r0, 0x0, 0x20000000) syz_genetlink_get_family_id$netlbl_cipso(0x0, r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, 0x0, 0x40) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000a40), r0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000a80)={0x38, r1, 0x1, 0x70bd25, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x3}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x3}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x20004001}, 0x104) 6.407869441s ago: executing program 1 (id=986): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x84}}, 0x0) 6.358944543s ago: executing program 0 (id=987): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000140)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xe, 0xfff3}, {0x0, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x48080}, 0x0) 6.174844066s ago: executing program 1 (id=989): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000180)=0x19ca, 0x4) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) ioperm(0x0, 0xb51a, 0x2000000000000006) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sendto$packet(r0, &(0x7f00000000c0)="3f03fe7f0302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c153cfdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) 5.699022688s ago: executing program 0 (id=990): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019440)=""/102400, 0x19000) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='net/unix\x00') preadv(r4, &(0x7f0000003900), 0x0, 0x38, 0xc51a) 4.382480184s ago: executing program 0 (id=991): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22, @multicast1}, 0x10) setsockopt$sock_int(r0, 0x1, 0x800000000f, &(0x7f0000000080)=0x7, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r2, 0x29, 0x1a, &(0x7f00000007c0)=0x40000401, 0x4) setsockopt$sock_int(r2, 0x1, 0xf, 0x0, 0x0) bind$inet6(r2, &(0x7f00000003c0)={0xa, 0x4e22, 0x0, @empty, 0xffffffff}, 0x1c) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000000)=0x2, 0x4) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x10000000}, 0x1c) listen(r0, 0xb5d6) 4.351448115s ago: executing program 1 (id=992): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x84000100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpgrp(0x0) ioperm(0xc, 0x8, 0xa) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) syslog(0x3, &(0x7f0000000240)=""/87, 0x57) 4.23742915s ago: executing program 5 (id=993): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800"], 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1f, 0x19, &(0x7f0000000500)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40008}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @snprintf={{}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0xa7}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r2}, 0xc) 3.942647766s ago: executing program 2 (id=995): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000700)=ANY=[@ANYBLOB="40000000400007012bad700000000000047c00000c00fc80080008"], 0x40}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) 2.755861699s ago: executing program 3 (id=996): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000140)=0x200000000) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000d00), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r4, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)={0x18, r5, 0x719, 0x70bd2e, 0x25dfdbfe, {}, [@HEADER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x8000}, 0x880) 2.528858648s ago: executing program 5 (id=997): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_DEV(r0, 0x0, 0x20000000) syz_genetlink_get_family_id$netlbl_cipso(0x0, r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, 0x0, 0x40) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000a40), r0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000a80)={0x38, r1, 0x1, 0x70bd25, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x3}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x3}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x20004001}, 0x104) 2.318779614s ago: executing program 2 (id=998): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x160b, 0x0, 0x0, {0x2, 0x0, 0x8}}], {0x14}}, 0x3c}, 0x1, 0x0, 0x0, 0x850}, 0x4040080) 2.030301497s ago: executing program 5 (id=999): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000200)=ANY=[], 0x84}}, 0x0) 1.943211368s ago: executing program 2 (id=1000): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f000000a180)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x22d3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r3, r2, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000001080)={@random="652c1d569d1e", @remote, @val={@val={0x88a8, 0x6, 0x1, 0x4}, {0x8100, 0x0, 0x1, 0x2}}, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x5, 0x14, 0x66, 0x0, 0xfe, 0x32, 0x0, @dev={0xac, 0x14, 0x14, 0x1a}, @private=0xa010101}}}}}, 0x0) 1.71529001s ago: executing program 5 (id=1001): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0e000000040000000400000002"], 0x50) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xd, 0xf}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r4 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(r4) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) socket$kcm(0x11, 0x3, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000022c0)=@newtfilter={0xe94, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r7, {0x1, 0x4}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_matchall={{0xd}, {0xe58, 0x2, [@TCA_MATCHALL_ACT={0xe54, 0x2, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x2, 0x9, 0x5, 0x6}, 0x1, 0xfb}, [{0x2, 0x1, 0x84, 0x3, 0x2, 0x7}, {0x1, 0x6, 0x4, 0x3, 0xfffffffd, 0x81}, {0x1, 0x1, 0x8, 0x101, 0x3}, {0x3, 0x3, 0x0, 0x7, 0x5, 0x4}, {0xf, 0x7, 0x694, 0x51, 0x8001}, {0x3, 0x8004, 0xc, 0x101, 0x3, 0x84b5}, {0x9c, 0x4, 0x9, 0x2, 0x487, 0x8}, {0x1, 0x10000, 0x5, 0x4, 0x3, 0x8000}, {0x7, 0x9, 0x1ff, 0x8, 0x2, 0x7fff}, {0x439356e7, 0x609, 0x16, 0xfffffffc, 0x10000, 0x6}, {0x5, 0x3, 0x8, 0x3, 0x400000, 0xffffffff}, {0x685, 0x0, 0x7, 0x7, 0x8, 0x5}, {0x8, 0x8, 0x9, 0x5, 0xfffff000, 0x7}, {0x768d, 0x7ff, 0x8, 0x7, 0x5, 0x9}, {0x1, 0xfffffffb, 0x6, 0x7, 0x7ff, 0x6}, {0xfffffffb, 0x3, 0xfffffffa, 0x6, 0x2}, {0xfffff9fd, 0x9, 0xa5f, 0xa, 0x5, 0x2}, {0x6, 0x9, 0x167, 0x2, 0x71, 0xa2}, {0x140, 0x2, 0xc, 0x8, 0x87, 0x60}, {0x5, 0xa, 0x2, 0x4, 0x3, 0x2000}, {0x32d, 0x8, 0x7fff, 0x4, 0x8, 0x6}, {0x8, 0x200, 0x58fe, 0x802, 0x4, 0x3}, {0x101, 0xd, 0x101, 0x1, 0x3, 0x8}, {0x0, 0x3, 0x1ff, 0x7437ec78, 0x2, 0x9}, {0xffffffff, 0x1, 0x9, 0x0, 0x81, 0x4}, {0xc, 0xe, 0x0, 0x3, 0x8, 0x81}, {0x3, 0x3, 0x6, 0xe, 0x0, 0x80}, {0xd, 0x0, 0x7ff, 0x0, 0x80000000, 0x2}, {0x4, 0xb, 0x7c5f1878, 0x57c4, 0x8, 0x25ff}, {0x4, 0xd, 0x1fadd976, 0x3071, 0x0, 0x1}, {0x5, 0x800, 0x3, 0x3, 0x6, 0x9}, {0x9, 0x1ff, 0x1000, 0x9c, 0x1, 0x7}, {0x9, 0xd76, 0x6, 0xdc2, 0xa16a, 0x2}, {0x1ff, 0x5, 0x7, 0x2, 0x2, 0x1}, {0x1, 0x32158142, 0x0, 0x8, 0x6, 0x7}, {0xe, 0x4, 0x9000, 0x2, 0x2, 0x7f}, {0x3, 0x2ec74d53, 0x0, 0x0, 0x8, 0x2}, {0x5, 0xfff, 0xffffff13, 0x9, 0x6, 0x6}, {0x1, 0x6, 0x3, 0x4, 0xffb, 0xc}, {0x6, 0x6, 0x1ff, 0x8, 0x7ff, 0x8001}, {0x4, 0xffffffff, 0x0, 0xfffff740, 0x4, 0x4}, {0xffff, 0x5, 0x7, 0xac, 0xf}, {0x80, 0x3, 0x6, 0x1000, 0xd8fe, 0x8001}, {0xd, 0x3, 0x80000000, 0x0, 0xffffff81, 0x7ff}, {0xfffffffb, 0x2, 0x1ff, 0xf9, 0xffff8001, 0x800000}, {0x0, 0x6, 0x7ffc, 0x9, 0x500, 0x7}, {0x1, 0xffffffff, 0x834, 0x7, 0x0, 0x3}, {0x7fff, 0x6, 0x0, 0x2002, 0x2, 0x8}, {0xf61, 0x101, 0x9, 0x2, 0x80000000, 0x7fff}, {0xc7, 0x4, 0x8, 0x2, 0xffff, 0x20000000}, {0x0, 0x5, 0x1, 0xffff, 0x3, 0x3}, {0x8, 0x10001, 0x9f98, 0x1, 0x8, 0xb}, {0xfff, 0x1000006, 0x8, 0x80000001, 0x0, 0x7f}, {0xefa, 0x6, 0x7f, 0x2, 0x3, 0xb}, {0x4, 0x4b, 0x0, 0x1, 0x7f, 0x7fffffff}, {0xffe, 0x47e4, 0x1, 0x0, 0x80000001, 0x9}, {0x3, 0x9, 0x7, 0x6, 0x3e6b7592, 0x5}, {0x9, 0x9, 0x1, 0x9, 0x0, 0x2}, {0x8, 0x80000001, 0x7fff, 0xb2d9, 0xfffffffe, 0x8}, {0x80000001, 0x9, 0x5202, 0x2, 0x53d2, 0x3}, {0x6, 0x7, 0x8, 0x8, 0x7f, 0x80000000}, {0xfffffff9, 0x9, 0x6, 0x6, 0x9, 0x83}, {0xfffffffd, 0x8, 0x6, 0x5, 0x7fffffff, 0x8f}, {0x741, 0x0, 0x9, 0x7fffffff, 0x0, 0x200}, {0x3ff, 0x2, 0x8, 0x4, 0x4, 0xc6e9}, {0x1, 0x2d73, 0x400, 0x5, 0x9f15, 0xffffff7f}, {0x2, 0x8401, 0x2b00, 0xfffff57b, 0xfffffc00, 0xd}, {0x3, 0x4, 0xc52b, 0x9, 0x5, 0xff}, {0x0, 0x4, 0x401, 0x0, 0x1, 0x9}, {0x8, 0x4, 0x1, 0x2, 0x10, 0x1}, {0xff, 0x8, 0x8, 0x5, 0x0, 0xfffffffc}, {0x2, 0xb15ce2d, 0x80000001, 0xbeab, 0x8, 0x5}, {0x3, 0x10000008, 0x3, 0x7, 0x8, 0x4}, {0xfff, 0x9, 0x6, 0x3, 0x100, 0x57}, {0x9, 0x5, 0x4, 0x3, 0xa, 0x2}, {0xb3, 0x800000e, 0x3, 0x7e8, 0x7, 0x9}, {0x400000ff, 0x7, 0x5, 0x7, 0x6, 0x6}, {0x2, 0x8f, 0x9, 0xffffff46, 0x84, 0x80000000}, {0x9, 0x2, 0xfffffffc, 0x0, 0xd50, 0x3}, {0xd203, 0x7, 0x1, 0x10000, 0x43, 0x1ff}, {0x4, 0x3ff, 0xffffffff, 0x1, 0xffffffff, 0x100}, {0x1ff, 0x3, 0x7ff, 0xfffffff8, 0x1ff, 0x9}, {0x7, 0xd, 0x3ff, 0x1, 0x7, 0x4}, {0x0, 0x6, 0x0, 0x9, 0xffff0001, 0xcca}, {0x7, 0x1, 0xfffffff1, 0x3ff, 0x40000100, 0x4}, {0x3, 0x9, 0x0, 0xed4, 0x4, 0x6}, {0x9, 0x7, 0x8001, 0x7, 0x7, 0x2}, {0x3, 0xfff, 0x9, 0x5, 0xb5, 0x3}, {0x0, 0x1, 0x1, 0x5, 0xffffff01, 0xfff}, {0x7, 0x5, 0x2, 0x2, 0x0, 0xfffff9de}, {0x5, 0xffffffff, 0xe6b, 0xa, 0xb, 0x4}, {0x1d, 0xffffff10, 0x1, 0x2, 0xff, 0x52e2}, {0x0, 0x1, 0x0, 0x7, 0xdb, 0x5}, {0x7, 0x2, 0x9, 0x8, 0x7f, 0x100}, {0x81, 0x4, 0x988, 0x3, 0x0, 0x7}, {0xdc03, 0x7, 0x402c, 0x8, 0xfffffff9, 0x4}, {0xa, 0xfffffffe, 0x1, 0x1ff, 0x1ff, 0xc1b7}, {0xa24b, 0x947d, 0x40, 0x4, 0x9, 0x2}, {0x9, 0x401, 0xa89, 0x5ef, 0x9, 0x8}, {0x4, 0x7fff, 0x0, 0x4, 0x7fffffff}, {0x3, 0xb8c, 0x6, 0x21761f6a, 0xfffffffe, 0x4}, {0xfff, 0xda, 0x1f, 0x4, 0x8, 0x5}, {0x8, 0x10, 0x100, 0x0, 0x5, 0x43}, {0xfffff000, 0x8, 0xe98, 0x9, 0x9, 0x34b0}, {0x4, 0x8, 0x8, 0x3, 0x6cf4, 0x2}, {0x3, 0x0, 0x5, 0x4, 0xbe, 0x81}, {0x4, 0x800, 0x0, 0x5, 0x8, 0xfa2f}, {0xe, 0x5e20, 0x81, 0x2, 0x8, 0x6}, {0x9, 0x6, 0x6, 0x4, 0xf, 0x100}, {0x100, 0x1, 0xffffffff, 0xffffffff, 0x9, 0x74}, {0x4, 0x4, 0x8, 0x1, 0x0, 0x3}, {0xfffffff8, 0xfffffffb, 0xffffffff, 0x62f, 0x401, 0x30564e0}, {0x9a2f, 0x800, 0x3, 0x1, 0x7}, {0x20000002, 0x2, 0x800, 0x203, 0x9, 0x3}, {0x7, 0x6, 0x8936, 0xdcb, 0x0, 0x2}, {0x6, 0x80000000, 0x8, 0xe, 0xfffffffa, 0x8de3}, {0x0, 0x9, 0x7, 0xfff, 0x6, 0x1ff}, {0x8195, 0x2, 0x1000}, {0x1, 0x50, 0xff, 0x9e0f, 0x5, 0x6}, {0x7fff, 0x6, 0x2, 0x5, 0x8000, 0x3}, {0x7ff, 0x9, 0xa, 0x6, 0x7, 0xe77}, {0x1, 0x5e12, 0x3, 0xfffffffa, 0x2, 0x80000001}, {0xffffff8c, 0x2, 0x1, 0x1, 0x4, 0x5}, {0x4, 0x7, 0x104, 0x78d, 0xffffcff9, 0x9}, {0x2001, 0xe, 0x7, 0x2, 0x2, 0x207f}, {0x10, 0x5, 0xfffffffa, 0xff, 0x80000, 0xfff}, {0x1, 0x7ff, 0x696e, 0xa, 0x49d, 0xb}, {0x9bf4, 0x0, 0x5, 0x3, 0x3, 0x1000}], [{0x1, 0x1}, {0x2}, {0x5}, {0x2}, {0x1, 0x745e81639ff0f356}, {0x4}, {0x5}, {0x3}, {0x3}, {0x2}, {0x3}, {0x4}, {0x0, 0x1}, {0x2}, {0x2}, {}, {0x3}, {0x0, 0x1}, {0x0, 0x1}, {0x5}, {0x3, 0x1}, {0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x2}, {0x3}, {0x2}, {0x1, 0x1}, {0x1}, {0x1, 0x1}, {0x5}, {0x4}, {0x5, 0x1}, {0x5}, {}, {0x4, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x5}, {0xa}, {0x3, 0x1}, {0x5}, {0x2, 0x1}, {0x3}, {0x5, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x2}, {0x4}, {0x4, 0x1}, {0x4}, {0x4}, {0x2, 0x1}, {0x2, 0x1}, {0x5}, {0x2, 0x1}, {0x1}, {0x4}, {0x0, 0x1}, {0x2}, {0x1, 0x1}, {0x3, 0x1}, {0x5}, {0x3, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x3}, {0x6}, {0xa}, {0x2, 0x1}, {}, {0x1, 0x1}, {0x1}, {0x4, 0x1}, {0x5}, {0x3, 0x1}, {0x3, 0x1}, {0x4}, {0x2, 0x1}, {0x5}, {0x6}, {0x2}, {0xb82e57098c7a44ef}, {0x3, 0x1}, {0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x1}, {0x0, 0x1}, {}, {0x4}, {0x0, 0x1}, {0x2}, {0x4, 0x1}, {0x1}, {0x4, 0x1}, {0x2}, {0x5}, {0x1, 0x1}, {0x5}, {0x4, 0x1}, {0x3}, {0x3}, {0x1}, {0x5}, {0x3, 0x1}, {0x4}, {0x4, 0x1}, {0x0, 0x1}, {0x4}, {0x4, 0x1}, {0x1}, {0x5, 0x1}, {0x2}, {0x0, 0x1}, {0x3}, {0x1}, {0x0, 0x1}, {0x4}], 0x1}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x52, 0x1}}]}, 0xe94}, 0x1, 0x0, 0x0, 0x10}, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(0xffffffffffffffff, 0x0, r9, 0x0, 0x6, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes\x00', 0x26e1, 0x0) close(r8) 1.542342598s ago: executing program 2 (id=1002): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000180)=0x19ca, 0x4) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) ioperm(0x0, 0xb51a, 0x2000000000000006) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sendto$packet(r0, &(0x7f00000000c0)="3f03fe7f0302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c153cfdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) 755.204246ms ago: executing program 1 (id=1003): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x81ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x38) 745.55981ms ago: executing program 2 (id=1004): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x2}, [@call={0x85, 0x0, 0x0, 0x87}, @printk={@p, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x17}}]}, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abbb9b6f5bec", 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 506.167038ms ago: executing program 5 (id=1005): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000000)="0000010051227b17774892c91ad1", 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4}, 0x2d) 254.134324ms ago: executing program 1 (id=1006): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="05000000400000000600000008"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x9, 0x0, r0}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0c00000004000000040000000900000000000000", @ANYRES32=r1], 0x48) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd2d, 0x0, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x7fffffffffffffff, 0x0, 0x0, 0x4, 0xffffffffffffffff, 0x7}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0xffffffff, 0x0, 0x1, 0x0, 0x6}, [@tmpl={0x44, 0x5, [{{@in6=@ipv4={'\x00', '\xff\xff', @private=0xa010101}, 0x0, 0x3c}, 0x2, @in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x6, 0x4, 0x3, 0x0, 0x1}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) r3 = socket$inet6(0xa, 0x3, 0x2) syz_open_procfs(0x0, 0x0) r4 = syz_open_dev$usbmon(&(0x7f00000000c0), 0xa, 0x8440) mprotect(&(0x7f000074d000/0x400000)=nil, 0x400000, 0x1) ioctl$MON_IOCX_GET(r4, 0x40189206, &(0x7f0000000280)={0x0, 0x0}) syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007c, 0x181101) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) getpgrp(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r6 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r6, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r8, 0x541c, &(0x7f0000001900)={0x2, {0x2, 0xa00, 0x0, 0x101, 0x100}}) sched_setaffinity(0x0, 0x0, 0x0) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x4e25, 0x0, @empty, 0x7}, 0x1c) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0xffd8) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="14"], &(0x7f0000000700), 0x0) 253.906603ms ago: executing program 2 (id=1007): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800"], 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1f, 0x19, &(0x7f0000000500)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40008}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @snprintf={{}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0xa7}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r2}, 0xc) 167.208889ms ago: executing program 5 (id=1008): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), r0) sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x24, r1, 0xa3d, 0x70bd28, 0x25dfdbfd, {}, [@TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x8010) 0s ago: executing program 0 (id=1009): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x28, 0x0, &(0x7f00000002c0)="b9ff03076003008cb89e08f086dd", 0x0, 0x5da0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x320e, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.179' (ED25519) to the list of known hosts. [ 164.864195][ T5627] cgroup: Unknown subsys name 'net' [ 164.993142][ T5627] cgroup: Unknown subsys name 'cpuset' [ 165.003108][ T5627] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 166.955070][ T5627] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 171.449088][ T5645] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 171.460098][ T5645] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 171.460815][ T5645] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 171.461842][ T5645] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 171.479839][ T5649] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 171.488393][ T5649] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 171.488705][ T5649] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 171.507547][ T5646] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 171.512230][ T5646] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 171.523269][ T5646] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 171.537417][ T4931] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 171.539821][ T4931] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 171.549799][ T4931] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 171.564638][ T4931] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 171.572255][ T4931] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 171.578609][ T4931] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 171.580050][ T4931] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 171.594630][ T4931] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 171.595398][ T4931] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 171.597940][ T5643] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 171.603164][ T52] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 171.604533][ T52] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 171.613174][ T5649] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 171.619323][ T5643] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 171.626074][ T5643] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 173.619821][ T5643] Bluetooth: hci0: command tx timeout [ 173.698718][ T5643] Bluetooth: hci1: command tx timeout [ 173.698750][ T5646] Bluetooth: hci2: command tx timeout [ 173.700145][ T5646] Bluetooth: hci4: command tx timeout [ 173.701256][ T5646] Bluetooth: hci3: command tx timeout [ 173.797692][ T5639] bridge0: port 1(bridge_slave_0) entered blocking state [ 173.802649][ T5639] bridge0: port 1(bridge_slave_0) entered disabled state [ 173.803468][ T5639] bridge_slave_0: entered allmulticast mode [ 173.814847][ T5639] bridge_slave_0: entered promiscuous mode [ 173.866089][ T5639] bridge0: port 2(bridge_slave_1) entered blocking state [ 173.866451][ T5639] bridge0: port 2(bridge_slave_1) entered disabled state [ 173.871991][ T5639] bridge_slave_1: entered allmulticast mode [ 173.880603][ T5639] bridge_slave_1: entered promiscuous mode [ 174.010629][ T5638] bridge0: port 1(bridge_slave_0) entered blocking state [ 174.010868][ T5638] bridge0: port 1(bridge_slave_0) entered disabled state [ 174.011260][ T5638] bridge_slave_0: entered allmulticast mode [ 174.017822][ T5638] bridge_slave_0: entered promiscuous mode [ 174.066648][ T5639] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 174.077554][ T5639] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 174.093422][ T5638] bridge0: port 2(bridge_slave_1) entered blocking state [ 174.093926][ T5638] bridge0: port 2(bridge_slave_1) entered disabled state [ 174.094417][ T5638] bridge_slave_1: entered allmulticast mode [ 174.101653][ T5638] bridge_slave_1: entered promiscuous mode [ 174.105541][ T5641] bridge0: port 1(bridge_slave_0) entered blocking state [ 174.105815][ T5641] bridge0: port 1(bridge_slave_0) entered disabled state [ 174.115518][ T5641] bridge_slave_0: entered allmulticast mode [ 174.122796][ T5641] bridge_slave_0: entered promiscuous mode [ 174.209566][ T5641] bridge0: port 2(bridge_slave_1) entered blocking state [ 174.209799][ T5641] bridge0: port 2(bridge_slave_1) entered disabled state [ 174.211240][ T5641] bridge_slave_1: entered allmulticast mode [ 174.218634][ T5641] bridge_slave_1: entered promiscuous mode [ 174.229826][ T5640] bridge0: port 1(bridge_slave_0) entered blocking state [ 174.230012][ T5640] bridge0: port 1(bridge_slave_0) entered disabled state [ 174.230998][ T5640] bridge_slave_0: entered allmulticast mode [ 174.242973][ T5640] bridge_slave_0: entered promiscuous mode [ 174.288965][ T5648] bridge0: port 1(bridge_slave_0) entered blocking state [ 174.300206][ T5648] bridge0: port 1(bridge_slave_0) entered disabled state [ 174.301899][ T5648] bridge_slave_0: entered allmulticast mode [ 174.308809][ T5648] bridge_slave_0: entered promiscuous mode [ 174.346849][ T5640] bridge0: port 2(bridge_slave_1) entered blocking state [ 174.347092][ T5640] bridge0: port 2(bridge_slave_1) entered disabled state [ 174.350217][ T5640] bridge_slave_1: entered allmulticast mode [ 174.356049][ T5640] bridge_slave_1: entered promiscuous mode [ 174.370460][ T5639] team0: Port device team_slave_0 added [ 174.382649][ T5648] bridge0: port 2(bridge_slave_1) entered blocking state [ 174.389612][ T5648] bridge0: port 2(bridge_slave_1) entered disabled state [ 174.390127][ T5648] bridge_slave_1: entered allmulticast mode [ 174.395519][ T5648] bridge_slave_1: entered promiscuous mode [ 174.412156][ T5638] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 174.449651][ T5639] team0: Port device team_slave_1 added [ 174.468034][ T5638] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 174.477871][ T5641] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 174.536873][ T5641] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 174.546770][ T5640] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 174.569883][ T5648] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 174.598972][ T5638] team0: Port device team_slave_0 added [ 174.619462][ T5640] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 174.625102][ T5639] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 174.625167][ T5639] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 174.625260][ T5639] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 174.651956][ T5648] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 174.665151][ T5638] team0: Port device team_slave_1 added [ 174.733249][ T5639] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 174.733300][ T5639] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 174.733663][ T5639] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 174.800386][ T5641] team0: Port device team_slave_0 added [ 174.815960][ T5640] team0: Port device team_slave_0 added [ 174.835733][ T5638] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 174.836691][ T5638] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 174.836779][ T5638] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 174.850064][ T5641] team0: Port device team_slave_1 added [ 174.920947][ T5640] team0: Port device team_slave_1 added [ 174.931085][ T5648] team0: Port device team_slave_0 added [ 174.935516][ T5638] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 174.935575][ T5638] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 174.935652][ T5638] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 174.954978][ T5641] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 174.955032][ T5641] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 174.955114][ T5641] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 175.033905][ T5648] team0: Port device team_slave_1 added [ 175.075315][ T5641] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 175.075353][ T5641] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 175.077521][ T5641] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 175.173537][ T5640] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 175.173580][ T5640] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 175.173627][ T5640] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 175.186020][ T5648] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 175.186077][ T5648] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 175.186153][ T5648] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 175.222873][ T5639] hsr_slave_0: entered promiscuous mode [ 175.226890][ T5639] hsr_slave_1: entered promiscuous mode [ 175.249213][ T5640] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 175.249281][ T5640] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 175.249344][ T5640] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 175.306371][ T5648] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 175.306727][ T5648] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 175.306810][ T5648] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 175.462477][ T5638] hsr_slave_0: entered promiscuous mode [ 175.467678][ T5638] hsr_slave_1: entered promiscuous mode [ 175.472204][ T5638] debugfs: 'hsr0' already exists in 'hsr' [ 175.472555][ T5638] Cannot create hsr debugfs directory [ 175.553374][ T5641] hsr_slave_0: entered promiscuous mode [ 175.562650][ T5641] hsr_slave_1: entered promiscuous mode [ 175.572893][ T5641] debugfs: 'hsr0' already exists in 'hsr' [ 175.579379][ T5641] Cannot create hsr debugfs directory [ 175.694106][ T5648] hsr_slave_0: entered promiscuous mode [ 175.702426][ T5648] hsr_slave_1: entered promiscuous mode [ 175.703202][ T5648] debugfs: 'hsr0' already exists in 'hsr' [ 175.703221][ T5648] Cannot create hsr debugfs directory [ 175.703655][ T5643] Bluetooth: hci0: command tx timeout [ 175.759807][ T5640] hsr_slave_0: entered promiscuous mode [ 175.766985][ T5640] hsr_slave_1: entered promiscuous mode [ 175.775775][ T5640] debugfs: 'hsr0' already exists in 'hsr' [ 175.775843][ T5640] Cannot create hsr debugfs directory [ 175.781566][ T5643] Bluetooth: hci1: command tx timeout [ 175.781605][ T5643] Bluetooth: hci3: command tx timeout [ 175.781631][ T5643] Bluetooth: hci4: command tx timeout [ 175.781656][ T5643] Bluetooth: hci2: command tx timeout [ 176.492023][ T5639] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 176.511902][ T5639] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 176.521121][ T5639] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 176.535069][ T5639] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 176.543252][ T5639] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 176.555336][ T5639] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 176.573713][ T5639] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 176.585163][ T5639] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 176.655036][ T5641] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 176.670834][ T5641] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 176.677879][ T5641] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 176.689089][ T5641] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 176.696750][ T5641] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 176.710592][ T5641] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 176.723030][ T5641] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 176.734714][ T5641] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 176.879440][ T5638] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 176.892237][ T5638] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 176.910310][ T5638] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 176.921814][ T5638] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 176.924429][ T5638] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 176.938837][ T5638] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 176.967440][ T5638] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 176.984394][ T5638] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 177.113949][ T5648] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 177.125202][ T5648] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 177.131308][ T5648] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 177.142335][ T5648] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 177.150522][ T5648] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 177.162324][ T5648] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 177.169992][ T5648] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 177.181881][ T5648] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 177.217473][ T5639] 8021q: adding VLAN 0 to HW filter on device bond0 [ 177.350628][ T5640] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 177.363924][ T5640] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 177.380288][ T5639] 8021q: adding VLAN 0 to HW filter on device team0 [ 177.391007][ T5640] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 177.406467][ T5640] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 177.434862][ T5640] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 177.453286][ T5640] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 177.464203][ T5640] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 177.478779][ T5640] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 177.491495][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 177.492727][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 177.514839][ T5641] 8021q: adding VLAN 0 to HW filter on device bond0 [ 177.546980][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 177.547228][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 177.597773][ T5641] 8021q: adding VLAN 0 to HW filter on device team0 [ 177.670567][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 177.670810][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 177.719193][ T5638] 8021q: adding VLAN 0 to HW filter on device bond0 [ 177.744074][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 177.744362][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 177.778510][ T4931] Bluetooth: hci0: command tx timeout [ 177.844627][ T5638] 8021q: adding VLAN 0 to HW filter on device team0 [ 177.858891][ T4931] Bluetooth: hci2: command tx timeout [ 177.859183][ T4931] Bluetooth: hci4: command tx timeout [ 177.859232][ T4931] Bluetooth: hci3: command tx timeout [ 177.859263][ T4931] Bluetooth: hci1: command tx timeout [ 177.937141][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 177.937382][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 177.998913][ T5648] 8021q: adding VLAN 0 to HW filter on device bond0 [ 178.014848][ T155] bridge0: port 2(bridge_slave_1) entered blocking state [ 178.015065][ T155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 178.127591][ T5648] 8021q: adding VLAN 0 to HW filter on device team0 [ 178.191880][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 178.192011][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 178.266877][ T155] bridge0: port 2(bridge_slave_1) entered blocking state [ 178.267151][ T155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 178.324951][ T5640] 8021q: adding VLAN 0 to HW filter on device bond0 [ 178.472124][ T5640] 8021q: adding VLAN 0 to HW filter on device team0 [ 178.547621][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 178.547758][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 178.606247][ T155] bridge0: port 2(bridge_slave_1) entered blocking state [ 178.606489][ T155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 179.162222][ T5639] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 179.535392][ T5639] veth0_vlan: entered promiscuous mode [ 179.592655][ T5641] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 179.621108][ T5639] veth1_vlan: entered promiscuous mode [ 179.812562][ T5639] veth0_macvtap: entered promiscuous mode [ 179.842095][ T5638] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 179.861521][ T5643] Bluetooth: hci0: command tx timeout [ 179.883812][ T5639] veth1_macvtap: entered promiscuous mode [ 179.918077][ T5641] veth0_vlan: entered promiscuous mode [ 179.939035][ T5643] Bluetooth: hci1: command tx timeout [ 179.939104][ T5643] Bluetooth: hci3: command tx timeout [ 179.939152][ T5643] Bluetooth: hci4: command tx timeout [ 179.939182][ T5643] Bluetooth: hci2: command tx timeout [ 180.052365][ T5641] veth1_vlan: entered promiscuous mode [ 180.090560][ T5639] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 180.122583][ T5639] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 180.202555][ T155] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.221640][ T59] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.261492][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.299602][ T59] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.436826][ T5648] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 180.473303][ T5641] veth0_macvtap: entered promiscuous mode [ 180.524451][ T5641] veth1_macvtap: entered promiscuous mode [ 180.670985][ T5641] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 180.750799][ T5641] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 180.817554][ T5640] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 180.855375][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 180.855432][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 180.902506][ T50] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.965592][ T5648] veth0_vlan: entered promiscuous mode [ 181.003699][ T1267] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 181.003764][ T1267] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 181.039769][ T155] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.039864][ T155] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.073269][ T5648] veth1_vlan: entered promiscuous mode [ 181.089108][ T155] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.156808][ T5638] veth0_vlan: entered promiscuous mode [ 181.191010][ T155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 181.202760][ T155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 181.222369][ T5639] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 181.254206][ T5640] veth0_vlan: entered promiscuous mode [ 181.281686][ T5638] veth1_vlan: entered promiscuous mode [ 181.344015][ T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 181.344076][ T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 181.411186][ T5832] loop1: detected capacity change from 0 to 16 [ 181.440515][ T5640] veth1_vlan: entered promiscuous mode [ 181.467948][ T5832] erofs (device loop1): mounted with root inode @ nid 36. [ 181.512916][ T5648] veth0_macvtap: entered promiscuous mode [ 181.615677][ T5648] veth1_macvtap: entered promiscuous mode [ 182.081044][ T5638] veth0_macvtap: entered promiscuous mode [ 182.100197][ T5648] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 182.283402][ T5640] veth0_macvtap: entered promiscuous mode [ 182.339881][ T5648] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 182.402058][ T5638] veth1_macvtap: entered promiscuous mode [ 182.419826][ T155] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.419916][ T155] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.420044][ T155] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.420178][ T155] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.445369][ T5833] syz.1.2: attempt to access beyond end of device [ 182.445369][ T5833] loop1: rw=524288, sector=12296, nr_sectors = 8 limit=16 [ 182.446385][ T5833] syz.1.2: attempt to access beyond end of device [ 182.446385][ T5833] loop1: rw=524288, sector=1056, nr_sectors = 16 limit=16 [ 182.473039][ T5640] veth1_macvtap: entered promiscuous mode [ 182.533732][ T5833] syz.1.2: attempt to access beyond end of device [ 182.533732][ T5833] loop1: rw=0, sector=12296, nr_sectors = 8 limit=16 [ 182.534108][ T5833] erofs (device loop1): read error -5 @ 0 of nid 89 [ 182.546148][ T30] audit: type=1800 audit(1786989158.042:2): pid=5833 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2" name="file2" dev="loop1" ino=89 res=0 errno=0 [ 182.649773][ T5638] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 182.671860][ T5638] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 182.793346][ T5836] loop3: detected capacity change from 0 to 16 [ 182.793989][ T1267] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.833692][ T5836] erofs (device loop3): mounted with root inode @ nid 36. [ 182.869047][ T59] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.869132][ T59] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.897935][ T5640] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 183.109080][ T41] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.178304][ T5640] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 183.202366][ T5840] loop1: detected capacity change from 0 to 16 [ 183.222031][ T5840] erofs (device loop1): mounted with root inode @ nid 36. [ 183.698488][ T5838] syz.3.4: attempt to access beyond end of device [ 183.698488][ T5838] loop3: rw=524288, sector=12296, nr_sectors = 8 limit=16 [ 183.728076][ T5838] syz.3.4: attempt to access beyond end of device [ 183.728076][ T5838] loop3: rw=524288, sector=1056, nr_sectors = 16 limit=16 [ 183.868148][ T5838] syz.3.4: attempt to access beyond end of device [ 183.868148][ T5838] loop3: rw=0, sector=12296, nr_sectors = 8 limit=16 [ 184.029006][ T5844] syz.1.6: attempt to access beyond end of device [ 184.029006][ T5844] loop1: rw=524288, sector=12296, nr_sectors = 8 limit=16 [ 184.030483][ T5844] syz.1.6: attempt to access beyond end of device [ 184.030483][ T5844] loop1: rw=524288, sector=1056, nr_sectors = 16 limit=16 [ 184.033939][ T5844] syz.1.6: attempt to access beyond end of device [ 184.033939][ T5844] loop1: rw=0, sector=12296, nr_sectors = 8 limit=16 [ 184.034306][ T5844] erofs (device loop1): read error -5 @ 0 of nid 89 [ 184.259576][ T5838] erofs (device loop3): read error -5 @ 0 of nid 89 [ 184.266094][ T30] audit: type=1800 audit(1786989159.542:3): pid=5844 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.6" name="file2" dev="loop1" ino=89 res=0 errno=0 [ 184.266149][ T30] audit: type=1800 audit(1786989159.772:4): pid=5838 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.4" name="file2" dev="loop3" ino=89 res=0 errno=0 [ 184.344656][ T59] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.359768][ T50] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 184.368988][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.378300][ T50] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 184.438304][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.469155][ T155] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.548041][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 184.548156][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 184.667602][ T155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 184.679360][ T155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 184.816763][ T41] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 184.827468][ T41] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 184.968033][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 184.968268][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 185.086168][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 185.086213][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 186.031296][ T9] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 186.212061][ T9] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 186.234049][ T9] usb 2-1: config 0 has no interfaces? [ 186.257729][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 186.257781][ T9] usb 2-1: Product: syz [ 186.257814][ T9] usb 2-1: Manufacturer: syz [ 186.257833][ T9] usb 2-1: SerialNumber: syz [ 186.289680][ T10] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 186.350223][ T5862] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 186.398404][ T9] usb 2-1: config 0 descriptor?? [ 186.458383][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 186.461253][ T10] usb 1-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 186.480496][ T10] usb 1-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 186.480597][ T10] usb 1-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 186.480645][ T10] usb 1-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 186.480675][ T10] usb 1-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 186.563963][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 186.564050][ T10] usb 1-1: Product: syz [ 186.564085][ T10] usb 1-1: Manufacturer: syz [ 186.564144][ T10] usb 1-1: SerialNumber: syz [ 186.748422][ C0] imon 1-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 186.836486][ T10] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:155.0/input/input5 [ 187.070725][ T10] imon 1-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 187.070772][ T10] (id 0x00) [ 187.280765][ T5867] loop4: detected capacity change from 0 to 16 [ 187.316798][ T5771] usb 2-1: USB disconnect, device number 2 [ 187.400093][ T5867] erofs (device loop4): mounted with root inode @ nid 36. [ 187.410722][ T10] rc_core: IR keymap rc-imon-pad not found [ 187.410773][ T10] Registered IR keymap rc-empty [ 187.411058][ T10] imon 1-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 187.411114][ T10] imon 1-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 187.472611][ T10] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:155.0/rc/rc0 [ 187.509451][ T10] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:155.0/rc/rc0/input6 [ 187.612868][ T10] imon 1-1:155.0: iMON device (15c2:ffdc, intf0) on usb<1:2> initialized [ 187.780798][ T5869] syz.4.10: attempt to access beyond end of device [ 187.780798][ T5869] loop4: rw=524288, sector=12296, nr_sectors = 8 limit=16 [ 187.781103][ T5869] syz.4.10: attempt to access beyond end of device [ 187.781103][ T5869] loop4: rw=524288, sector=1056, nr_sectors = 16 limit=16 [ 187.812303][ T5869] syz.4.10: attempt to access beyond end of device [ 187.812303][ T5869] loop4: rw=0, sector=12296, nr_sectors = 8 limit=16 [ 187.815704][ T5869] erofs (device loop4): read error -5 @ 0 of nid 89 [ 187.816199][ T30] audit: type=1800 audit(1786989163.322:5): pid=5869 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.10" name="file2" dev="loop4" ino=89 res=0 errno=0 [ 188.511896][ T9] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 188.671263][ T9] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 188.673319][ T9] usb 2-1: config 0 has no interfaces? [ 188.701617][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.701683][ T9] usb 2-1: Product: syz [ 188.703033][ T9] usb 2-1: Manufacturer: syz [ 188.703079][ T9] usb 2-1: SerialNumber: syz [ 188.727554][ T9] usb 2-1: config 0 descriptor?? [ 189.054498][ T5874] imon:send_packet: task interrupted [ 189.054788][ T5874] imon:send_packet: packet tx failed (-512) [ 189.056236][ T5874] imon:vfd_write: send packet #4 failed [ 189.188405][ T9] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 189.211108][ T5749] usb 1-1: USB disconnect, device number 2 [ 189.341586][ T9] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 189.348059][ T9] usb 4-1: config 0 has no interfaces? [ 189.367677][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 189.367772][ T9] usb 4-1: Product: syz [ 189.367810][ T9] usb 4-1: Manufacturer: syz [ 189.367826][ T9] usb 4-1: SerialNumber: syz [ 189.400480][ T9] usb 4-1: config 0 descriptor?? [ 189.467931][ T9] usb 2-1: USB disconnect, device number 3 [ 190.532064][ T5747] usb 4-1: USB disconnect, device number 2 [ 191.517537][ T5894] loop0: detected capacity change from 0 to 16 [ 191.565221][ T5894] erofs (device loop0): mounted with root inode @ nid 36. [ 191.786398][ T5896] syz.0.17: attempt to access beyond end of device [ 191.786398][ T5896] loop0: rw=524288, sector=12296, nr_sectors = 8 limit=16 [ 191.806984][ T5896] syz.0.17: attempt to access beyond end of device [ 191.806984][ T5896] loop0: rw=524288, sector=1056, nr_sectors = 16 limit=16 [ 191.834922][ T5896] syz.0.17: attempt to access beyond end of device [ 191.834922][ T5896] loop0: rw=0, sector=12296, nr_sectors = 8 limit=16 [ 191.855627][ T5896] erofs (device loop0): read error -5 @ 0 of nid 89 [ 191.890373][ T30] audit: type=1800 audit(1786989167.402:6): pid=5896 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.17" name="file2" dev="loop0" ino=89 res=0 errno=0 [ 192.444057][ T5902] loop3: detected capacity change from 0 to 16 [ 192.571765][ T5902] erofs (device loop3): mounted with root inode @ nid 36. [ 193.030330][ T5903] syz.3.18: attempt to access beyond end of device [ 193.030330][ T5903] loop3: rw=524288, sector=12296, nr_sectors = 8 limit=16 [ 193.052952][ T5903] syz.3.18: attempt to access beyond end of device [ 193.052952][ T5903] loop3: rw=524288, sector=1056, nr_sectors = 16 limit=16 [ 193.083991][ T5903] syz.3.18: attempt to access beyond end of device [ 193.083991][ T5903] loop3: rw=0, sector=12296, nr_sectors = 8 limit=16 [ 193.105205][ T5903] erofs (device loop3): read error -5 @ 0 of nid 89 [ 193.166094][ T30] audit: type=1800 audit(1786989168.622:7): pid=5903 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.18" name="file2" dev="loop3" ino=89 res=0 errno=0 [ 193.589861][ T5909] loop4: detected capacity change from 0 to 16 [ 193.602287][ T5908] loop0: detected capacity change from 0 to 512 [ 193.621727][ T5909] erofs (device loop4): mounted with root inode @ nid 36. [ 193.644980][ T5908] EXT4-fs: Ignoring removed bh option [ 193.746288][ T5908] EXT4-fs (loop0): unsupported inode size: 8192 [ 193.746350][ T5908] EXT4-fs (loop0): blocksize: 2048 [ 194.132445][ T5910] syz.4.19: attempt to access beyond end of device [ 194.132445][ T5910] loop4: rw=524288, sector=12296, nr_sectors = 8 limit=16 [ 194.149542][ T5910] syz.4.19: attempt to access beyond end of device [ 194.149542][ T5910] loop4: rw=524288, sector=1056, nr_sectors = 16 limit=16 [ 194.169113][ T5910] syz.4.19: attempt to access beyond end of device [ 194.169113][ T5910] loop4: rw=0, sector=12296, nr_sectors = 8 limit=16 [ 194.169421][ T5910] erofs (device loop4): read error -5 @ 0 of nid 89 [ 194.170104][ T30] audit: type=1800 audit(1786989169.682:8): pid=5910 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.19" name="file2" dev="loop4" ino=89 res=0 errno=0 [ 194.656997][ T5912] loop3: detected capacity change from 0 to 512 [ 194.678618][ T5912] EXT4-fs: Ignoring removed bh option [ 194.751040][ T5912] EXT4-fs (loop3): unsupported inode size: 8192 [ 194.772302][ T5912] EXT4-fs (loop3): blocksize: 2048 [ 196.336315][ T5908] loop0: detected capacity change from 0 to 32768 [ 196.479571][ T5912] loop3: detected capacity change from 0 to 32768 [ 196.539918][ T5908] workqueue: Failed to create a rescuer kthread for wq "xfs-conv/loop0": -EINTR [ 196.635657][ T5912] XFS (loop3): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 196.756017][ T5912] XFS (loop3): Ending clean mount [ 197.971967][ T5932] loop0: detected capacity change from 0 to 16 [ 198.016171][ T5932] erofs (device loop0): mounted with root inode @ nid 36. [ 198.050489][ T5641] XFS (loop3): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 198.298271][ T5933] syz.0.23: attempt to access beyond end of device [ 198.298271][ T5933] loop0: rw=524288, sector=12296, nr_sectors = 8 limit=16 [ 198.298731][ T5933] syz.0.23: attempt to access beyond end of device [ 198.298731][ T5933] loop0: rw=524288, sector=1056, nr_sectors = 16 limit=16 [ 198.319489][ T5933] syz.0.23: attempt to access beyond end of device [ 198.319489][ T5933] loop0: rw=0, sector=12296, nr_sectors = 8 limit=16 [ 198.326918][ T5933] erofs (device loop0): read error -5 @ 0 of nid 89 [ 198.338831][ T30] audit: type=1800 audit(1786989173.832:9): pid=5933 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.23" name="file2" dev="loop0" ino=89 res=0 errno=0 [ 199.469371][ T5937] loop4: detected capacity change from 0 to 16 [ 199.492933][ T5937] erofs (device loop4): mounted with root inode @ nid 36. [ 200.467470][ T5937] syz.4.26: attempt to access beyond end of device [ 200.467470][ T5937] loop4: rw=524288, sector=12296, nr_sectors = 8 limit=16 [ 200.467869][ T5937] syz.4.26: attempt to access beyond end of device [ 200.467869][ T5937] loop4: rw=524288, sector=1056, nr_sectors = 16 limit=16 [ 200.469752][ T5937] syz.4.26: attempt to access beyond end of device [ 200.469752][ T5937] loop4: rw=0, sector=12296, nr_sectors = 8 limit=16 [ 200.469897][ T5937] erofs (device loop4): read error -5 @ 0 of nid 89 [ 200.470302][ T30] audit: type=1800 audit(1786989175.982:10): pid=5937 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.26" name="file2" dev="loop4" ino=89 res=0 errno=0 [ 200.529957][ T5949] ======================================================= [ 200.529957][ T5949] WARNING: The mand mount option has been deprecated and [ 200.529957][ T5949] and is ignored by this kernel. Remove the mand [ 200.529957][ T5949] option from the mount to silence this warning. [ 200.529957][ T5949] ======================================================= [ 202.340778][ T5984] loop1: detected capacity change from 0 to 512 [ 202.353450][ T5984] EXT4-fs: Ignoring removed bh option [ 202.463809][ T5984] EXT4-fs (loop1): unsupported inode size: 8192 [ 202.463872][ T5984] EXT4-fs (loop1): blocksize: 2048 [ 202.519454][ T5749] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 202.683448][ T5749] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 202.687794][ T5749] usb 4-1: config 0 has no interfaces? [ 202.710938][ T5749] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 202.710997][ T5749] usb 4-1: Product: syz [ 202.711014][ T5749] usb 4-1: Manufacturer: syz [ 202.711030][ T5749] usb 4-1: SerialNumber: syz [ 202.744124][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 202.744285][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 202.764297][ T5749] usb 4-1: config 0 descriptor?? [ 203.476095][ T5984] loop1: detected capacity change from 0 to 32768 [ 203.535687][ T5984] XFS (loop1): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 203.575107][ T43] usb 4-1: USB disconnect, device number 3 [ 203.669232][ T5984] XFS (loop1): Ending clean mount [ 203.704083][ T5993] loop2: detected capacity change from 0 to 2048 [ 204.672276][ T5993] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 204.774409][ T5639] XFS (loop1): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 204.908910][ T5648] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 205.446903][ T6014] netlink: 28 bytes leftover after parsing attributes in process `syz.2.39'. [ 206.378194][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c0!!! [ 208.038209][ T5749] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 208.528220][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 208.933038][ T5749] usb 4-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 208.948213][ T5749] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 208.948288][ T5749] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 65344, setting to 1024 [ 208.948321][ T5749] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 208.986352][ T5749] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 208.986388][ T5749] usb 4-1: Product: syz [ 208.986405][ T5749] usb 4-1: Manufacturer: syz [ 208.986422][ T5749] usb 4-1: SerialNumber: syz [ 209.047463][ T5749] usb 4-1: config 0 descriptor?? [ 209.062198][ T6020] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 209.062706][ T6020] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 209.327992][ T5749] dm9601 4-1:0.0: probe with driver dm9601 failed with error -71 [ 209.394105][ T5749] usb 4-1: USB disconnect, device number 4 [ 210.678767][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 211.088248][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 213.238618][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c2!!! [ 213.648400][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 214.088228][ T10] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 215.798629][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 216.253282][ T10] usb 3-1: device descriptor read/all, error -71 [ 218.358847][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 218.768689][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c0!!! [ 220.541307][ T6069] loop2: detected capacity change from 0 to 512 [ 220.554770][ T6069] EXT4-fs: Ignoring removed nobh option [ 220.564685][ T6069] EXT4-fs: Ignoring removed bh option [ 220.603913][ T6069] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 220.654008][ T6069] EXT4-fs error (device loop2) in ext4_process_orphan:346: Out of memory [ 220.679979][ T6069] loop2: lost filesystem error report for type 5 error -12 [ 220.681935][ T6074] netlink: 'syz.3.46': attribute type 1 has an invalid length. [ 220.690388][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 220.690419][ C1] EXT4-fs (loop2): initial error at time 1786989196: ext4_process_orphan:346 [ 220.690447][ C1] EXT4-fs (loop2): last error at time 1786989196: ext4_process_orphan:346 [ 220.763548][ T6069] EXT4-fs (loop2): 1 truncate cleaned up [ 220.821972][ T6069] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 220.942868][ T6069] netlink: 8 bytes leftover after parsing attributes in process `syz.2.57'. [ 222.558263][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 223.616258][ T5648] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 223.655085][ T6078] loop0: detected capacity change from 0 to 256 [ 223.685422][ T6078] vfat: Unknown parameter 'nocas' [ 223.735388][ T6082] loop3: detected capacity change from 0 to 1024 [ 223.815351][ T6082] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended [ 223.895008][ T6082] EXT4-fs (loop3): Errors on filesystem, clearing orphan list. [ 223.943545][ T6082] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 224.342796][ T6085] loop2: detected capacity change from 0 to 1024 [ 225.455675][ T6085] hfsplus: failed to load extents file [ 225.512015][ T6085] process 'syz.2.59' launched './file0' with NULL argv: empty string added [ 225.535243][ T5641] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 225.899334][ T6097] loop3: detected capacity change from 0 to 512 [ 226.051626][ T6097] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 226.109891][ T6110] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 226.297639][ T6112] loop0: detected capacity change from 0 to 2048 [ 226.311362][ T5641] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 226.533307][ T6112] UDF-fs: error (device loop0): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 226.566252][ T6112] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 226.566459][ T6112] UDF-fs: Scanning with blocksize 512 failed [ 226.633846][ T6112] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 230.840590][ T6133] loop0: detected capacity change from 0 to 512 [ 230.845724][ T6130] loop1: detected capacity change from 0 to 2048 [ 230.875260][ T6133] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 230.876350][ T6133] EXT4-fs (loop0): orphan cleanup on readonly fs [ 230.928003][ T6133] Quota error (device loop0): find_block_dqentry: Quota for id 0 referenced but not present [ 230.929301][ T6133] Quota error (device loop0): qtree_read_dquot: Can't read quota structure for id 0 [ 230.929327][ T6133] EXT4-fs error (device loop0): ext4_acquire_dquot:7069: comm syz.0.74: Failed to acquire dquot type 1 [ 230.929352][ T6133] loop0: lost filesystem error report for type 5 error -5 [ 230.948211][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 230.948299][ C0] EXT4-fs (loop0): initial error at time 1786989206: ext4_acquire_dquot:7069 [ 230.948359][ C0] EXT4-fs (loop0): last error at time 1786989206: ext4_acquire_dquot:7069 [ 231.100581][ T6133] EXT4-fs error (device loop0): ext4_validate_block_bitmap:445: comm syz.0.74: bg 0: block 40: padding at end of block bitmap is not set [ 231.100654][ T6133] loop0: lost filesystem error report for type 5 error -117 [ 231.139002][ T6133] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6680: Corrupt filesystem [ 231.139068][ T6133] loop0: lost filesystem error report for type 5 error -117 [ 231.184815][ T6133] EXT4-fs warning (device loop0): ext4_evict_inode:196: inode #16: comm syz.0.74: data will be lost [ 231.191960][ T6133] EXT4-fs (loop0): 1 truncate cleaned up [ 231.275296][ T6133] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 233.522354][ T43] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 234.070303][ T43] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 234.120275][ T5640] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 234.140155][ T6141] loop2: detected capacity change from 0 to 4096 [ 234.202832][ T6141] EXT4-fs: Ignoring removed i_version option [ 234.202958][ T6141] EXT4-fs: quotafile must be on filesystem root [ 234.472062][ T6147] fido_id[6147]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 236.295484][ T6155] syzkaller0: entered promiscuous mode [ 236.295542][ T6155] syzkaller0: entered allmulticast mode [ 237.899745][ T5749] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 238.052139][ T5749] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 238.056986][ T5749] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 238.057077][ T5749] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 238.057139][ T5749] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 238.057253][ T5749] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 238.117818][ T5749] usb 2-1: config 0 descriptor?? [ 238.139213][ T5762] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 238.189839][ T10] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 238.223119][ T6188] loop3: detected capacity change from 0 to 256 [ 238.238235][ T6188] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 238.249612][ T6188] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 238.289833][ T5762] usb 1-1: New USB device found, idVendor=056a, idProduct=0335, bcdDevice= 0.00 [ 238.301831][ T5762] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 238.301896][ T5762] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 238.301921][ T5762] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 238.302122][ T5762] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 238.354090][ T5762] usb 1-1: config 0 descriptor?? [ 238.368505][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 238.378484][ T10] usb 3-1: New USB device found, idVendor=04f2, idProduct=1236, bcdDevice= 0.00 [ 238.381550][ T6188] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 238.412642][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 238.412734][ T10] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 238.412955][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 238.460483][ T6188] exFAT-fs (loop3): failed to load alloc-bitmap [ 238.460610][ T6188] exFAT-fs (loop3): failed to recognize exfat type [ 238.526301][ T10] usb 3-1: config 0 descriptor?? [ 241.162647][ T5762] wacom 0003:056A:0335.0002: hidraw0: USB HID v0.00 Joystick [HID 056a:0335] on usb-dummy_hcd.0-1/input0 [ 241.194590][ T10] usbhid 3-1:0.0: can't add hid device: -71 [ 241.194766][ T10] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 241.252977][ T5749] usbhid 2-1:0.0: can't add hid device: -71 [ 241.253105][ T5749] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 241.290457][ T5749] usb 2-1: USB disconnect, device number 4 [ 241.308922][ T10] usb 3-1: USB disconnect, device number 4 [ 241.534715][ T6197] loop2: detected capacity change from 0 to 2048 [ 241.556484][ T5762] usb 1-1: USB disconnect, device number 3 [ 242.277227][ T6197] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 242.277299][ T6197] UDF-fs: Scanning with blocksize 512 failed [ 242.355973][ T6197] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 242.435832][ T6201] fido_id[6201]: Failed to read report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:056A:0335.0002/report_descriptor': No such device [ 244.088348][ T43] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 244.262660][ T43] usb 4-1: unable to get BOS descriptor or descriptor too short [ 244.262719][ T43] usb 4-1: New USB device found, idVendor=2466, idProduct=8010, bcdDevice= 0.40 [ 244.288828][ T43] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 244.299760][ T43] usb 4-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 244.320209][ T43] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 244.320258][ T43] usb 4-1: Product: syz [ 244.320292][ T43] usb 4-1: Manufacturer: syz [ 244.320319][ T43] usb 4-1: SerialNumber: syz [ 244.417804][ T144] kworker/u8:6: attempt to access beyond end of device [ 244.417804][ T144] loop2: rw=8388609, sector=2048, nr_sectors = 2 limit=2048 [ 244.421332][ T144] Buffer I/O error on dev loop2, logical block 1024, lost async page write [ 244.421528][ T144] kworker/u8:6: attempt to access beyond end of device [ 244.421528][ T144] loop2: rw=8388609, sector=2048, nr_sectors = 2 limit=2048 [ 244.421592][ T144] Buffer I/O error on dev loop2, logical block 1024, lost async page write [ 244.421645][ T144] kworker/u8:6: attempt to access beyond end of device [ 244.421645][ T144] loop2: rw=8388609, sector=2050, nr_sectors = 2 limit=2048 [ 244.421701][ T144] Buffer I/O error on dev loop2, logical block 1025, lost async page write [ 244.421829][ T144] kworker/u8:6: attempt to access beyond end of device [ 244.421829][ T144] loop2: rw=8388609, sector=2050, nr_sectors = 2 limit=2048 [ 244.421893][ T144] Buffer I/O error on dev loop2, logical block 1025, lost async page write [ 244.428734][ T144] kworker/u8:6: attempt to access beyond end of device [ 244.428734][ T144] loop2: rw=8388609, sector=2052, nr_sectors = 2 limit=2048 [ 244.428826][ T144] Buffer I/O error on dev loop2, logical block 1026, lost async page write [ 244.428881][ T144] kworker/u8:6: attempt to access beyond end of device [ 244.428881][ T144] loop2: rw=8388609, sector=2052, nr_sectors = 2 limit=2048 [ 244.428944][ T144] Buffer I/O error on dev loop2, logical block 1026, lost async page write [ 244.428997][ T144] kworker/u8:6: attempt to access beyond end of device [ 244.428997][ T144] loop2: rw=8388609, sector=2054, nr_sectors = 2 limit=2048 [ 244.429052][ T144] Buffer I/O error on dev loop2, logical block 1027, lost async page write [ 244.429179][ T144] kworker/u8:6: attempt to access beyond end of device [ 244.429179][ T144] loop2: rw=8388609, sector=2054, nr_sectors = 2 limit=2048 [ 244.429257][ T144] Buffer I/O error on dev loop2, logical block 1027, lost async page write [ 244.429309][ T144] kworker/u8:6: attempt to access beyond end of device [ 244.429309][ T144] loop2: rw=8388609, sector=2056, nr_sectors = 2 limit=2048 [ 244.429380][ T144] Buffer I/O error on dev loop2, logical block 1028, lost async page write [ 244.429433][ T144] kworker/u8:6: attempt to access beyond end of device [ 244.429433][ T144] loop2: rw=8388609, sector=2056, nr_sectors = 2 limit=2048 [ 244.429487][ T144] Buffer I/O error on dev loop2, logical block 1028, lost async page write [ 247.124798][ T43] usb 4-1: USB disconnect, device number 5 [ 249.464468][ T10] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 250.059761][ T10] usb 1-1: Using ep0 maxpacket: 8 [ 250.073196][ T10] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 250.091895][ T10] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 250.101567][ T10] usb 1-1: config 179 has no interface number 0 [ 250.111191][ T10] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 250.122468][ T10] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 250.133917][ T10] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 250.145570][ T10] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 250.157942][ T10] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 250.171387][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 250.195990][ T6221] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 250.630927][ T10] usb 1-1: USB disconnect, device number 4 [ 250.631006][ C0] xpad 1-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 250.631044][ C0] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 252.423483][ T6247] warning: `syz.2.108' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 252.674618][ T6254] loop4: detected capacity change from 0 to 16 [ 252.707624][ T6254] erofs (device loop4): invalid ishare xattr prefix id 0 [ 256.698953][ T5762] kernel write not supported for file /gssd/clntXX/gssd (pid: 5762 comm: kworker/0:6) [ 259.467644][ T6276] loop0: detected capacity change from 0 to 2048 [ 259.490365][ T6276] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 259.721983][ T6278] loop2: detected capacity change from 0 to 4096 [ 259.764783][ T6278] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 259.772628][ T6278] EXT4-fs (loop2): can't mount with journal_checksum, fs mounted w/o journal [ 261.638894][ T5747] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 261.808358][ T5747] usb 3-1: Using ep0 maxpacket: 32 [ 261.836935][ T5747] usb 3-1: New USB device found, idVendor=0499, idProduct=1010, bcdDevice= a.f5 [ 262.369781][ T5747] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 32 [ 262.419560][ T5747] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 262.419607][ T5747] usb 3-1: Product: syz [ 262.419640][ T5747] usb 3-1: Manufacturer: syz [ 262.419653][ T5747] usb 3-1: SerialNumber: syz [ 262.472998][ T5747] usb 3-1: config 0 descriptor?? [ 262.476013][ T6297] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 262.517485][ T5747] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 262.783329][ T5747] usb 3-1: USB disconnect, device number 5 [ 264.194981][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 264.195066][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 266.262052][ T4931] Bluetooth: hci3: command 0x0406 tx timeout [ 266.591971][ T6318] capability: warning: `syz.1.118' uses 32-bit capabilities (legacy support in use) [ 266.701427][ T5747] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 266.860040][ T5747] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 266.871784][ T5747] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 266.871833][ T5747] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 266.871905][ T5747] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 266.871955][ T5747] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 266.920963][ T5747] usb 3-1: config 0 descriptor?? [ 267.420143][ T5747] plantronics 0003:047F:FFFF.0003: unbalanced collection at end of report description [ 267.444925][ T5747] plantronics 0003:047F:FFFF.0003: parse failed [ 267.445063][ T5747] plantronics 0003:047F:FFFF.0003: probe with driver plantronics failed with error -22 [ 269.360959][ T5747] usb 3-1: USB disconnect, device number 6 [ 269.768207][ T5771] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 271.430212][ T5771] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0014, bcdDevice= 0.40 [ 271.451599][ T5771] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 271.451659][ T5771] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 271.492274][ T5771] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 271.492367][ T5771] usb 1-1: Product: syz [ 271.492406][ T5771] usb 1-1: Manufacturer: syz [ 271.492475][ T5771] usb 1-1: SerialNumber: syz [ 271.861617][ T5771] usb 1-1: USB disconnect, device number 5 [ 275.981335][ T5771] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 277.233485][ T5771] usb 1-1: unable to get BOS descriptor or descriptor too short [ 277.234855][ T5771] usb 1-1: not running at top speed; connect to a high speed hub [ 277.234946][ T5771] usb 1-1: New USB device found, idVendor=04b4, idProduct=931c, bcdDevice= 0.40 [ 277.276331][ T5771] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 277.276392][ T5771] usb 1-1: Product: syz [ 277.276409][ T5771] usb 1-1: Manufacturer: syz [ 277.276425][ T5771] usb 1-1: SerialNumber: syz [ 277.663228][ T5771] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 277.666932][ T5771] usb 1-1: MIDIStreaming interface descriptor not found [ 278.143261][ T6386] loop1: detected capacity change from 0 to 4096 [ 278.223361][ T6386] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 278.254487][ T6386] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 278.305891][ T5771] usb 1-1: USB disconnect, device number 6 [ 278.392576][ T6386] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 278.421058][ T6386] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 278.496025][ T5639] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 281.413404][ T6067] udevd[6067]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 281.440774][ T6404] loop0: detected capacity change from 0 to 256 [ 281.558758][ T191] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 281.577757][ T191] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz1] on syz0 [ 281.650898][ T6409] loop1: detected capacity change from 0 to 4096 [ 281.661053][ T6409] EXT4-fs: Ignoring removed i_version option [ 281.668787][ T6409] EXT4-fs: quotafile must be on filesystem root [ 285.902745][ T6417] fido_id[6417]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 286.011158][ T30] audit: type=1326 audit(1786989261.522:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6422 comm="syz.2.168" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4412d9e0d9 code=0x7ffc0000 [ 286.024874][ T30] audit: type=1326 audit(1786989261.522:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6422 comm="syz.2.168" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4412d9e0d9 code=0x7ffc0000 [ 286.060445][ T30] audit: type=1326 audit(1786989261.552:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6422 comm="syz.2.168" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4412d9e0d9 code=0x7ffc0000 [ 286.080954][ T30] audit: type=1326 audit(1786989261.572:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6422 comm="syz.2.168" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=208 compat=0 ip=0x7f4412d9e0d9 code=0x7ffc0000 [ 286.081143][ T30] audit: type=1326 audit(1786989261.572:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6422 comm="syz.2.168" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4412d9e0d9 code=0x7ffc0000 [ 286.081269][ T30] audit: type=1326 audit(1786989261.572:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6422 comm="syz.2.168" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4412d9e0d9 code=0x7ffc0000 [ 286.084723][ T30] audit: type=1326 audit(1786989261.552:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6422 comm="syz.2.168" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4412d9e0d9 code=0x7ffc0000 [ 286.084870][ T30] audit: type=1326 audit(1786989261.572:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6422 comm="syz.2.168" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f4412d9e0d9 code=0x7ffc0000 [ 286.084990][ T30] audit: type=1326 audit(1786989261.572:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6422 comm="syz.2.168" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f4412d9e0d9 code=0x7ffc0000 [ 287.833880][ T6431] loop0: detected capacity change from 0 to 4096 [ 287.856822][ T6431] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 287.867771][ T6431] EXT4-fs (loop0): can't mount with journal_checksum, fs mounted w/o journal [ 288.032445][ T6431] loop0: detected capacity change from 0 to 1024 [ 288.066706][ T6431] hfsplus: failed to load extents file [ 292.237854][ T30] audit: type=1326 audit(1786989780.592:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6456 comm="syz.0.180" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb52939e0d9 code=0x0 [ 295.358179][ T1587] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 295.509469][ T1587] usb 1-1: New USB device found, idVendor=056a, idProduct=0335, bcdDevice= 0.00 [ 295.512601][ T1587] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 295.512704][ T1587] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 295.512790][ T1587] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 295.512911][ T1587] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 295.563777][ T1587] usb 1-1: config 0 descriptor?? [ 297.789048][ T5649] Bluetooth: hci0: command 0x0406 tx timeout [ 297.789167][ T5649] Bluetooth: hci4: command 0x0406 tx timeout [ 297.789216][ T5649] Bluetooth: hci2: command 0x0406 tx timeout [ 297.789248][ T5649] Bluetooth: hci3: command 0x0406 tx timeout [ 297.789304][ T5649] Bluetooth: hci1: command 0x0406 tx timeout [ 297.850570][ T6492] loop4: detected capacity change from 0 to 256 [ 298.096487][ T1587] usbhid 1-1:0.0: can't add hid device: -71 [ 298.096622][ T1587] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 298.114909][ T1587] usb 1-1: USB disconnect, device number 7 [ 299.582085][ T6501] netlink: 12 bytes leftover after parsing attributes in process `syz.4.193'. [ 304.883733][ T191] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 305.008910][ T5771] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 305.038116][ T191] usb 4-1: New USB device found, idVendor=041e, idProduct=3020, bcdDevice= 0.40 [ 305.042322][ T191] usb 4-1: config 1 descriptor has 1 excess byte, ignoring [ 305.060806][ T191] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 305.060883][ T191] usb 4-1: Product: syz [ 305.060918][ T191] usb 4-1: Manufacturer: syz [ 305.060934][ T191] usb 4-1: SerialNumber: syz [ 305.179085][ T5771] usb 3-1: New USB device found, idVendor=056a, idProduct=0335, bcdDevice= 0.00 [ 305.190521][ T5771] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 305.201825][ T5771] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 305.211812][ T5771] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 305.226983][ T5771] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 305.246154][ T5771] usb 3-1: config 0 descriptor?? [ 305.322257][ T191] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 305.348805][ T191] usb 4-1: 2:1 : no or invalid class specific endpoint descriptor [ 305.348868][ T191] usb 4-1: found format II with max.bitrate = 44931, frame size=8 [ 305.349504][ T191] usb 4-1: 2:1 : no or invalid class specific endpoint descriptor [ 305.349558][ T191] usb 4-1: found format II with max.bitrate = 44931, frame size=8 [ 305.403934][ T191] usb 4-1: 2:1: cannot set freq 4584960 to ep 0x82 [ 305.728742][ T5771] wacom 0003:056A:0335.0005: hidraw0: USB HID v0.00 Joystick [HID 056a:0335] on usb-dummy_hcd.2-1/input0 [ 305.854512][ T191] usb 4-1: USB disconnect, device number 6 [ 305.927431][ T1587] usb 3-1: USB disconnect, device number 7 [ 306.025148][ T6535] fido_id[6535]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 306.396993][ T6213] udevd[6213]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 306.675406][ T6550] loop0: detected capacity change from 0 to 256 [ 310.016837][ T6592] loop2: detected capacity change from 0 to 256 [ 320.655186][ T6640] Zero length message leads to an empty skb [ 320.726367][ T6670] netlink: 'syz.4.249': attribute type 10 has an invalid length. [ 326.160789][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 326.160884][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 335.109029][ T6799] syzkaller0: entered promiscuous mode [ 335.109091][ T6799] syzkaller0: entered allmulticast mode [ 335.240254][ T6816] netlink: 4 bytes leftover after parsing attributes in process `syz.1.294'. [ 335.428829][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807a367400: rx timeout, send abort [ 335.929948][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807a366400: rx timeout, send abort [ 335.930727][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807a367400: abort rx timeout. Force session deactivation [ 336.430701][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807a366400: abort rx timeout. Force session deactivation [ 342.631645][ T6859] syzkaller0: entered promiscuous mode [ 342.631691][ T6859] syzkaller0: entered allmulticast mode [ 345.398200][ T6885] netlink: 4 bytes leftover after parsing attributes in process `syz.4.313'. [ 346.720118][ T6887] netlink: 4 bytes leftover after parsing attributes in process `syz.0.314'. [ 347.122487][ T191] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 347.186880][ T191] hid-generic 0000:0000:0000.0006: hidraw0: HID v0.00 Device [syz1] on syz0 [ 347.290085][ T6894] loop1: detected capacity change from 0 to 4096 [ 347.306685][ T6894] EXT4-fs: Ignoring removed i_version option [ 347.306760][ T6894] EXT4-fs: quotafile must be on filesystem root [ 349.515657][ T5762] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 349.543934][ T5762] hid-generic 0000:0000:0000.0007: hidraw0: HID v0.00 Device [syz1] on syz0 [ 349.584902][ T6930] syzkaller0: entered promiscuous mode [ 349.591144][ T6930] syzkaller0: entered allmulticast mode [ 349.828820][ T6932] fido_id[6932]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 352.089592][ T6959] syzkaller0: entered promiscuous mode [ 352.089644][ T6959] syzkaller0: entered allmulticast mode [ 354.278453][ T6980] netlink: 4384 bytes leftover after parsing attributes in process `syz.2.354'. [ 356.329213][ T6999] 9p: Bad value for 'wfdno' [ 357.944737][ T7008] syzkaller0: entered promiscuous mode [ 357.944801][ T7008] syzkaller0: entered allmulticast mode [ 358.246654][ T7011] netlink: 28 bytes leftover after parsing attributes in process `syz.2.364'. [ 361.948945][ T5645] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 361.966367][ T5645] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 361.975616][ T5645] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 361.985428][ T5645] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 361.994724][ T5645] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 364.195092][ T5645] Bluetooth: hci5: command tx timeout [ 366.520923][ T5645] Bluetooth: hci5: command tx timeout [ 368.232207][ T7084] syzkaller0: entered promiscuous mode [ 368.232265][ T7084] syzkaller0: entered allmulticast mode [ 368.595556][ T5645] Bluetooth: hci5: command tx timeout [ 368.778093][ T7092] syz.2.388 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 369.362122][ T7035] bridge0: port 1(bridge_slave_0) entered blocking state [ 369.367790][ T7035] bridge0: port 1(bridge_slave_0) entered disabled state [ 369.376726][ T7035] bridge_slave_0: entered allmulticast mode [ 369.402548][ T7035] bridge_slave_0: entered promiscuous mode [ 369.422095][ T7035] bridge0: port 2(bridge_slave_1) entered blocking state [ 369.422336][ T7035] bridge0: port 2(bridge_slave_1) entered disabled state [ 369.430579][ T7035] bridge_slave_1: entered allmulticast mode [ 369.446340][ T7035] bridge_slave_1: entered promiscuous mode [ 369.720461][ T7035] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 369.785486][ T7035] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 370.039152][ T7035] team0: Port device team_slave_0 added [ 370.070443][ T7035] team0: Port device team_slave_1 added [ 370.266083][ T7035] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 370.274380][ T7035] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 370.300680][ T7035] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 370.329512][ T7035] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 370.339720][ T7035] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 370.404005][ T7035] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 370.755847][ T5645] Bluetooth: hci5: command tx timeout [ 371.402929][ T7035] hsr_slave_0: entered promiscuous mode [ 371.436580][ T7035] hsr_slave_1: entered promiscuous mode [ 371.444359][ T7035] debugfs: 'hsr0' already exists in 'hsr' [ 371.444414][ T7035] Cannot create hsr debugfs directory [ 372.506266][ T5778] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 372.671084][ T5778] usb 3-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 372.685633][ T5778] usb 3-1: config index 0 descriptor too short (expected 65069, got 45) [ 372.685726][ T5778] usb 3-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 255 [ 372.685752][ T5778] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 372.685780][ T5778] usb 3-1: config 0 has no interfaces? [ 372.685847][ T5778] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 372.746256][ T5778] usb 3-1: config 0 descriptor?? [ 372.981935][ T10] usb 3-1: USB disconnect, device number 8 [ 372.992106][ T7140] loop0: detected capacity change from 0 to 4096 [ 373.005668][ T7140] EXT4-fs: Ignoring removed i_version option [ 373.011976][ T7140] EXT4-fs: quotafile must be on filesystem root [ 373.382145][ T5778] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 373.436355][ T43] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 373.546564][ T5778] usb 4-1: Using ep0 maxpacket: 8 [ 373.555631][ T5778] usb 4-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 373.568896][ T5778] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 373.568942][ T5778] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 373.610915][ T43] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0014, bcdDevice= 0.40 [ 373.632601][ T43] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 373.632646][ T43] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 373.656026][ T5778] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 373.656158][ T5778] usb 4-1: Product: syz [ 373.656196][ T5778] usb 4-1: Manufacturer: syz [ 373.656219][ T5778] usb 4-1: SerialNumber: syz [ 373.702435][ T43] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 373.702517][ T43] usb 1-1: Product: syz [ 373.702557][ T43] usb 1-1: Manufacturer: syz [ 373.702579][ T43] usb 1-1: SerialNumber: syz [ 374.009320][ T5778] usb 4-1: unit 5 not found! [ 374.016409][ T5778] usb 4-1: unit 4 not found! [ 374.062380][ T43] usb 1-1: USB disconnect, device number 8 [ 374.200253][ T5778] usb 4-1: USB disconnect, device number 7 [ 374.284702][ T7035] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 374.351357][ T7035] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 374.362067][ T7035] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 374.394225][ T7135] udevd[7135]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 374.414949][ T7035] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 374.427295][ T7035] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 374.468827][ T7035] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 374.471310][ T7035] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 374.509024][ T7035] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 375.045616][ T7035] 8021q: adding VLAN 0 to HW filter on device bond0 [ 375.189140][ T7035] 8021q: adding VLAN 0 to HW filter on device team0 [ 375.804819][ T5888] bridge0: port 1(bridge_slave_0) entered blocking state [ 375.804949][ T5888] bridge0: port 1(bridge_slave_0) entered forwarding state [ 376.028248][ T5888] bridge0: port 2(bridge_slave_1) entered blocking state [ 376.028574][ T5888] bridge0: port 2(bridge_slave_1) entered forwarding state [ 376.058044][ T1267] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 376.078512][ T1149] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 376.078590][ T1149] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 376.078670][ T1149] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 376.385912][ T7175] loop3: detected capacity change from 0 to 4096 [ 376.393822][ T7175] EXT4-fs: Ignoring removed i_version option [ 376.393906][ T7175] EXT4-fs: quotafile must be on filesystem root [ 377.182479][ T7186] ip_tables: iptables: counters copy to user failed while replacing table [ 377.212292][ C1] IPv4: Oversized IP packet from 127.0.0.1 [ 377.706466][ T7194] syzkaller0: entered promiscuous mode [ 377.706618][ T7194] syzkaller0: entered allmulticast mode [ 378.059354][ T5747] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 378.217515][ T5747] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0014, bcdDevice= 0.40 [ 378.232833][ T5747] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 378.232896][ T5747] usb 3-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 378.257650][ T5747] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 378.257697][ T5747] usb 3-1: Product: syz [ 378.257732][ T5747] usb 3-1: Manufacturer: syz [ 378.257753][ T5747] usb 3-1: SerialNumber: syz [ 378.753968][ T5747] usb 3-1: USB disconnect, device number 9 [ 378.821069][ T7207] loop3: detected capacity change from 0 to 4096 [ 379.008621][ T7207] EXT4-fs: Ignoring removed i_version option [ 379.008700][ T7207] EXT4-fs: quotafile must be on filesystem root [ 379.440110][ T7217] netlink: 88 bytes leftover after parsing attributes in process `syz.0.429'. [ 379.577091][ T7035] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 380.095206][ T7223] 9p: Bad value for 'rfdno' [ 382.624460][ T7247] loop2: detected capacity change from 0 to 4096 [ 382.635101][ T7247] EXT4-fs: Ignoring removed i_version option [ 382.635186][ T7247] EXT4-fs: quotafile must be on filesystem root [ 382.875323][ T7035] veth0_vlan: entered promiscuous mode [ 382.949311][ T7035] veth1_vlan: entered promiscuous mode [ 382.957443][ T7254] netlink: 88 bytes leftover after parsing attributes in process `syz.1.441'. [ 383.199890][ T7035] veth0_macvtap: entered promiscuous mode [ 383.283665][ T7035] veth1_macvtap: entered promiscuous mode [ 383.439602][ T7035] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 383.503275][ T7035] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 383.597424][ T6941] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 383.603004][ T41] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 383.603135][ T41] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 383.603248][ T41] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 383.682283][ T7262] 9p: Bad value for 'rfdno' [ 383.966169][ T7266] syzkaller0: entered promiscuous mode [ 383.978147][ T7266] syzkaller0: entered allmulticast mode [ 384.240291][ T41] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 384.240341][ T41] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 384.512717][ T115] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 384.512758][ T115] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 384.666359][ T7272] loop2: detected capacity change from 0 to 4096 [ 384.673689][ T7272] EXT4-fs: Ignoring removed i_version option [ 384.683946][ T7272] EXT4-fs: quotafile must be on filesystem root [ 385.000396][ T7276] netlink: 88 bytes leftover after parsing attributes in process `syz.0.454'. [ 387.238399][ T7293] 9p: Bad value for 'rfdno' [ 387.560628][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 387.560809][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 388.157297][ T7313] netlink: 88 bytes leftover after parsing attributes in process `syz.5.466'. [ 389.569705][ T7350] 9p: Bad value for 'rfdno' [ 391.641507][ T7363] netlink: 28 bytes leftover after parsing attributes in process `syz.3.476'. [ 391.755154][ T7364] tipc: Started in network mode [ 391.761732][ T7364] tipc: Node identity c23bf8ecafca, cluster identity 4711 [ 391.867080][ T7364] tipc: Enabled bearer , priority 0 [ 391.930167][ T7360] sch_tbf: burst 255 is lower than device syzkaller0 mtu (65589) ! [ 392.062776][ T7360] netlink: 12 bytes leftover after parsing attributes in process `syz.2.475'. [ 392.089403][ T7360] syzkaller0: mtu less than device minimum [ 393.129314][ T10] tipc: Node number set to 1844574444 [ 393.392098][ T7382] netlink: 4912 bytes leftover after parsing attributes in process `syz.3.482'. [ 394.052375][ T7389] 9p: Bad value for 'rfdno' [ 396.629807][ T7414] netlink: 4912 bytes leftover after parsing attributes in process `syz.3.495'. [ 397.824332][ T7427] 9p: Bad value for 'rfdno' [ 401.247448][ T7467] sit0: entered promiscuous mode [ 401.307439][ T7467] netlink: 'syz.5.512': attribute type 1 has an invalid length. [ 401.317840][ T7467] netlink: 1 bytes leftover after parsing attributes in process `syz.5.512'. [ 401.527685][ T5771] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 401.662928][ T5771] usb 1-1: device descriptor read/64, error -71 [ 403.335732][ T5771] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 403.517778][ T5771] usb 1-1: device descriptor read/64, error -71 [ 403.628003][ T5771] usb usb1-port1: attempt power cycle [ 405.027837][ T7477] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 405.065785][ T5771] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 405.430786][ C0] wlan0: beacon TX faster than countdown (channel/color switch) completion [ 405.647275][ T5771] usb 1-1: device descriptor read/8, error -71 [ 406.156124][ T7503] Bluetooth: MGMT ver 1.23 [ 406.177341][ T7503] Bluetooth: hci0: invalid length 0, exp 2 for type 15 [ 411.769751][ T7531] sit0: entered promiscuous mode [ 411.813977][ T7531] netlink: 'syz.0.537': attribute type 1 has an invalid length. [ 411.814025][ T7531] netlink: 1 bytes leftover after parsing attributes in process `syz.0.537'. [ 413.485230][ T7542] loop3: detected capacity change from 0 to 256 [ 418.887088][ T7574] netlink: 'syz.2.550': attribute type 19 has an invalid length. [ 418.887140][ T7574] netlink: 'syz.2.550': attribute type 28 has an invalid length. [ 418.887173][ T7574] netlink: 9800 bytes leftover after parsing attributes in process `syz.2.550'. [ 419.420123][ T7580] loop5: detected capacity change from 0 to 256 [ 423.126346][ T7592] netlink: 8 bytes leftover after parsing attributes in process `syz.3.545'. [ 423.160000][ T7594] netlink: 4 bytes leftover after parsing attributes in process `syz.0.558'. [ 424.191547][ T7605] netlink: 16 bytes leftover after parsing attributes in process `syz.0.564'. [ 424.243184][ T7609] netlink: 'syz.2.563': attribute type 19 has an invalid length. [ 424.252592][ T7609] netlink: 'syz.2.563': attribute type 28 has an invalid length. [ 424.262194][ T7609] netlink: 9800 bytes leftover after parsing attributes in process `syz.2.563'. [ 429.099071][ T7622] loop0: detected capacity change from 0 to 256 [ 429.848782][ T7633] netlink: 4 bytes leftover after parsing attributes in process `syz.0.574'. [ 430.007942][ T7636] netlink: 24 bytes leftover after parsing attributes in process `syz.5.575'. [ 431.816606][ T7643] loop1: detected capacity change from 0 to 4096 [ 431.885680][ T7643] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 431.887455][ T7643] EXT4-fs (loop1): can't mount with journal_checksum, fs mounted w/o journal [ 432.810159][ T7666] netlink: 8 bytes leftover after parsing attributes in process `syz.2.571'. [ 433.025289][ T7671] netlink: 4912 bytes leftover after parsing attributes in process `syz.2.584'. [ 433.076811][ T7673] netlink: 'syz.0.577': attribute type 19 has an invalid length. [ 433.076870][ T7673] netlink: 'syz.0.577': attribute type 28 has an invalid length. [ 433.076885][ T7673] netlink: 9800 bytes leftover after parsing attributes in process `syz.0.577'. [ 433.232111][ T7682] netlink: 4 bytes leftover after parsing attributes in process `syz.0.586'. [ 433.338085][ T7685] netlink: 12 bytes leftover after parsing attributes in process `syz.0.588'. [ 433.672167][ T7700] netlink: 8 bytes leftover after parsing attributes in process `syz.1.594'. [ 433.933962][ T7714] netlink: 4 bytes leftover after parsing attributes in process `syz.3.598'. [ 434.074692][ T7718] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 434.319133][ T7731] syzkaller0: left promiscuous mode [ 434.325529][ T7731] syzkaller0: left allmulticast mode [ 434.518331][ T7738] loop2: detected capacity change from 0 to 4096 [ 434.526121][ T7738] EXT4-fs: Ignoring removed i_version option [ 434.532493][ T7738] EXT4-fs: quotafile must be on filesystem root [ 434.858069][ T5771] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 434.899792][ T7754] netlink: 4 bytes leftover after parsing attributes in process `syz.3.613'. [ 434.918816][ T7756] netlink: 76 bytes leftover after parsing attributes in process `syz.1.614'. [ 435.020041][ T5771] usb 3-1: Using ep0 maxpacket: 16 [ 435.028335][ T5771] usb 3-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28 [ 435.045805][ T5771] usb 3-1: config 0 has an invalid interface number: 105 but max is 0 [ 435.045855][ T5771] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 435.045896][ T5771] usb 3-1: config 0 has no interface number 0 [ 435.079979][ T5771] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 435.088756][ T5771] usb 3-1: Product: syz [ 435.093237][ T5771] usb 3-1: Manufacturer: syz [ 435.098026][ T5771] usb 3-1: SerialNumber: syz [ 435.106020][ T5771] usb 3-1: config 0 descriptor?? [ 435.274602][ T7765] loop1: detected capacity change from 0 to 256 [ 435.346893][ T5771] usb 3-1: USB disconnect, device number 10 [ 436.683537][ T7817] loop2: detected capacity change from 0 to 256 [ 437.204318][ T7826] tipc: Started in network mode [ 437.204393][ T7826] tipc: Node identity 3e43135a909a, cluster identity 4711 [ 437.219088][ T7826] tipc: Enabled bearer , priority 0 [ 438.229243][ T191] tipc: Node number set to 2933461850 [ 440.028302][ T7887] netlink: 4 bytes leftover after parsing attributes in process `syz.3.660'. [ 442.354825][ T7923] netlink: 4 bytes leftover after parsing attributes in process `syz.5.675'. [ 442.804763][ T7935] netlink: 8 bytes leftover after parsing attributes in process `syz.2.679'. [ 443.969470][ T7968] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 444.637125][ T7990] netlink: 400 bytes leftover after parsing attributes in process `syz.3.698'. [ 444.657608][ T7990] netlink: 400 bytes leftover after parsing attributes in process `syz.3.698'. [ 445.115773][ T7997] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 445.685578][ T8007] Driver unsupported XDP return value 0 on prog (id 50) dev N/A, expect packet loss! [ 446.395164][ T8034] tipc: Enabling of bearer rejected, failed to enable media [ 446.561172][ T8041] netlink: 12 bytes leftover after parsing attributes in process `syz.5.718'. [ 447.207406][ T8060] netlink: 4912 bytes leftover after parsing attributes in process `syz.0.726'. [ 447.546681][ T8067] netlink: 'syz.1.729': attribute type 19 has an invalid length. [ 447.546723][ T8067] netlink: 'syz.1.729': attribute type 28 has an invalid length. [ 447.546756][ T8067] netlink: 9800 bytes leftover after parsing attributes in process `syz.1.729'. [ 448.725410][ T8098] netlink: 'syz.0.743': attribute type 19 has an invalid length. [ 448.725459][ T8098] netlink: 'syz.0.743': attribute type 28 has an invalid length. [ 448.752718][ T8098] netlink: 9800 bytes leftover after parsing attributes in process `syz.0.743'. [ 448.976945][ T8106] netlink: 4912 bytes leftover after parsing attributes in process `syz.0.747'. [ 449.008846][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 449.008942][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 449.233923][ T8118] netlink: 36 bytes leftover after parsing attributes in process `syz.3.753'. [ 449.380688][ T8125] syz_tun: entered allmulticast mode [ 449.671978][ T8132] netlink: 'syz.2.758': attribute type 19 has an invalid length. [ 449.672029][ T8132] netlink: 'syz.2.758': attribute type 28 has an invalid length. [ 449.672114][ T8132] netlink: 9728 bytes leftover after parsing attributes in process `syz.2.758'. [ 449.988712][ T8146] netlink: 36 bytes leftover after parsing attributes in process `syz.0.765'. [ 450.428911][ T8162] netlink: 'syz.5.772': attribute type 19 has an invalid length. [ 450.428979][ T8162] netlink: 'syz.5.772': attribute type 28 has an invalid length. [ 450.429011][ T8162] netlink: 9728 bytes leftover after parsing attributes in process `syz.5.772'. [ 450.503937][ T8163] vxcan1: tx drop: invalid sa for name 0x0000000000000003 [ 450.538262][ T8163] netlink: 4 bytes leftover after parsing attributes in process `syz.2.774'. [ 450.840294][ T144] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 450.842036][ T1267] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 450.842128][ T1267] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 450.842172][ T1267] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 450.946239][ T8181] tipc: Enabling of bearer rejected, already enabled [ 450.958655][ T115] IPVS: starting estimator thread 0... [ 451.081282][ T8182] IPVS: using max 26 ests per chain, 62400 per kthread [ 451.491423][ T8202] netlink: 'syz.1.789': attribute type 19 has an invalid length. [ 451.500885][ T8202] netlink: 'syz.1.789': attribute type 28 has an invalid length. [ 451.919182][ T8207] __nla_validate_parse: 7 callbacks suppressed [ 451.929236][ T8207] netlink: 88 bytes leftover after parsing attributes in process `syz.0.791'. [ 452.828183][ T8213] netlink: 8 bytes leftover after parsing attributes in process `syz.3.793'. [ 452.828240][ T8213] netlink: 12 bytes leftover after parsing attributes in process `syz.3.793'. [ 452.927596][ T8213] netlink: 8 bytes leftover after parsing attributes in process `syz.3.793'. [ 452.927653][ T8213] netlink: 12 bytes leftover after parsing attributes in process `syz.3.793'. [ 452.979082][ T13] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 452.979166][ T13] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 452.979247][ T13] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 452.979354][ T13] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 453.052537][ T8216] tipc: Enabling of bearer rejected, already enabled [ 453.115257][ T8216] netlink: 12 bytes leftover after parsing attributes in process `syz.2.795'. [ 453.853692][ T8232] netlink: 9832 bytes leftover after parsing attributes in process `syz.3.802'. [ 454.071991][ T8244] netlink: 88 bytes leftover after parsing attributes in process `syz.3.806'. [ 454.386072][ T8250] tipc: Started in network mode [ 454.386132][ T8250] tipc: Node identity 46a735b01a21, cluster identity 4711 [ 454.386788][ T8250] tipc: Enabled bearer , priority 0 [ 454.425556][ T8250] netlink: 12 bytes leftover after parsing attributes in process `syz.3.809'. [ 454.960756][ T8271] netlink: 8 bytes leftover after parsing attributes in process `syz.5.818'. [ 455.088677][ T8280] tipc: Enabling of bearer rejected, failed to enable media [ 456.309049][ T191] tipc: Node number set to 1552299440 [ 456.419345][ T8292] 9p: Bad value for 'wfdno' [ 456.782922][ T8309] ip_tables: iptables: counters copy to user failed while replacing table [ 457.105024][ T8318] __nla_validate_parse: 3 callbacks suppressed [ 457.111555][ T8318] netlink: 4912 bytes leftover after parsing attributes in process `syz.5.837'. [ 457.503288][ T8327] syzkaller0: left promiscuous mode [ 457.503338][ T8327] syzkaller0: left allmulticast mode [ 457.516394][ T8328] netlink: 9832 bytes leftover after parsing attributes in process `syz.2.841'. [ 457.764850][ T8338] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 458.212786][ T8361] 9p: Bad value for 'wfdno' [ 459.509627][ T8381] netlink: 4 bytes leftover after parsing attributes in process `syz.3.862'. [ 459.610805][ T8385] netlink: 4912 bytes leftover after parsing attributes in process `syz.2.861'. [ 459.826932][ T8393] netlink: 8 bytes leftover after parsing attributes in process `syz.0.865'. [ 460.205190][ T8403] 9p: Bad value for 'wfdno' [ 460.887067][ T8428] netlink: 24 bytes leftover after parsing attributes in process `syz.3.880'. [ 461.855918][ T8436] netlink: 8 bytes leftover after parsing attributes in process `syz.5.881'. [ 462.285580][ T8445] 9p: Bad value for 'wfdno' [ 462.422717][ T8451] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 462.484606][ T8452] netlink: 4912 bytes leftover after parsing attributes in process `syz.1.887'. [ 463.276652][ T8473] netlink: 'syz.0.898': attribute type 4 has an invalid length. [ 464.762501][ T8487] netlink: 8 bytes leftover after parsing attributes in process `syz.2.890'. [ 464.762556][ T8487] netlink: 12 bytes leftover after parsing attributes in process `syz.2.890'. [ 464.840386][ T8487] netlink: 8 bytes leftover after parsing attributes in process `syz.2.890'. [ 464.840445][ T8487] netlink: 12 bytes leftover after parsing attributes in process `syz.2.890'. [ 464.859791][ T1267] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 464.859841][ T1267] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 464.859933][ T1267] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 464.860037][ T1267] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 465.379137][ T8502] netlink: 4912 bytes leftover after parsing attributes in process `syz.3.909'. [ 465.748059][ T8503] netlink: 52 bytes leftover after parsing attributes in process `syz.2.910'. [ 467.214784][ T8524] netlink: 8 bytes leftover after parsing attributes in process `syz.0.916'. [ 467.214822][ T8524] netlink: 12 bytes leftover after parsing attributes in process `syz.0.916'. [ 467.239133][ T8524] netlink: 8 bytes leftover after parsing attributes in process `syz.0.916'. [ 468.266081][ T8551] __nla_validate_parse: 1 callbacks suppressed [ 468.266142][ T8551] netlink: 8 bytes leftover after parsing attributes in process `syz.1.926'. [ 469.011771][ T8572] netlink: 4 bytes leftover after parsing attributes in process `syz.1.933'. [ 469.628506][ T8587] netlink: 8 bytes leftover after parsing attributes in process `syz.2.938'. [ 471.321142][ T8615] netlink: 8 bytes leftover after parsing attributes in process `syz.1.950'. [ 471.712988][ T8623] netlink: 28 bytes leftover after parsing attributes in process `syz.2.951'. [ 472.326427][ T8622] netlink: 8 bytes leftover after parsing attributes in process `syz.5.952'. [ 472.496827][ T8626] netlink: 52 bytes leftover after parsing attributes in process `syz.1.954'. [ 474.304743][ T8646] netlink: 12 bytes leftover after parsing attributes in process `syz.1.961'. [ 474.418295][ T8648] tipc: Enabling of bearer rejected, already enabled [ 476.049219][ T8666] netlink: 8 bytes leftover after parsing attributes in process `syz.5.966'. [ 476.395367][ T8672] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 476.454248][ T8674] xt_CT: You must specify a L4 protocol and not use inversions on it [ 477.988522][ T8687] tipc: Enabling of bearer rejected, failed to enable media [ 479.880982][ T8704] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 480.287006][ T8713] netlink: 4 bytes leftover after parsing attributes in process `syz.0.987'. [ 480.296605][ T8713] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 480.379024][ T8713] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 480.881259][ T8724] tipc: Enabling of bearer rejected, failed to enable media [ 484.099848][ T8744] netlink: 32 bytes leftover after parsing attributes in process `syz.2.995'. [ 487.776984][ T5645] Bluetooth: hci5: command 0x0406 tx timeout [ 487.785110][ T6885] unregister_netdevice: waiting for vcan0 to become free. Usage count = 3 [ 487.785687][ T6885] ref_tracker: netdev@ffff88807f2a0700 has 1/2 users at [ 487.785687][ T6885] j1939_ecu_create_locked+0x1cd/0x400 [ 487.785687][ T6885] j1939_local_ecu_get+0xeb/0x220 [ 487.785687][ T6885] j1939_sk_bind+0x70a/0xc60 [ 487.785687][ T6885] __sys_bind+0x2e3/0x410 [ 487.785687][ T6885] __x64_sys_bind+0x7a/0x90 [ 487.785687][ T6885] do_syscall_64+0x166/0x520 [ 487.785687][ T6885] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 487.785687][ T6885] [ 487.785785][ T6885] ref_tracker: netdev@ffff88807f2a0700 has 1/2 users at [ 487.785785][ T6885] j1939_netdev_start+0x387/0xb20 [ 487.785785][ T6885] j1939_sk_bind+0x946/0xc60 [ 487.785785][ T6885] __sys_bind+0x2e3/0x410 [ 487.785785][ T6885] __x64_sys_bind+0x7a/0x90 [ 487.785785][ T6885] do_syscall_64+0x166/0x520 [ 487.785785][ T6885] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 487.785785][ T6885]