last executing test programs: 3m54.532549639s ago: executing program 3 (id=4): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) cachestat(0xffffffffffffffff, 0x0, 0x0, 0x0) 3m54.191578638s ago: executing program 3 (id=12): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000280), r1) sendmsg$NFC_CMD_START_POLL(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x24, r2, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_TM_PROTOCOLS={0x8, 0xe, 0x10}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000000}, 0x0) 3m53.784307387s ago: executing program 3 (id=13): r0 = syz_open_dev$sg(&(0x7f0000000200), 0x0, 0xa0000) ioctl$SG_SET_COMMAND_Q(r0, 0x2271, 0x0) 3m53.447621092s ago: executing program 3 (id=14): r0 = syz_open_dev$usbfs(0x0, 0x76, 0x109a41) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000600)={0x0, 0x1, 0x1, 0xff80, 0x4000, 0x8, 0x0}) 3m53.061632142s ago: executing program 3 (id=16): r0 = socket$qrtr(0x2a, 0x2, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000002680)="1e", 0xfdef}], 0x1) 3m52.76166082s ago: executing program 3 (id=17): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000a, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3000001, 0x11, r0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x20842, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x20010, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_l2cap_L2CAP_LM(r1, 0x6, 0x3, 0x0, &(0x7f00000000c0)) 3m37.489874977s ago: executing program 32 (id=17): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000a, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3000001, 0x11, r0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x20842, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x20010, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_l2cap_L2CAP_LM(r1, 0x6, 0x3, 0x0, &(0x7f00000000c0)) 3m3.014806673s ago: executing program 4 (id=211): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000801}, 0x4) 3m2.671185071s ago: executing program 4 (id=212): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x18, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3m2.414397227s ago: executing program 4 (id=214): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1900000004000000040000000c"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b707000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={0xffffffffffffffff, &(0x7f0000000640)="06", &(0x7f0000000440)=@tcp=r2, 0x2}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000140)="b9ff03076804268c989e140088a8", 0x0, 0x4ff, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 3m2.048859661s ago: executing program 4 (id=216): unshare(0x22020600) r0 = syz_open_dev$usbfs(0x0, 0x77, 0x101301) ioctl$USBDEVFS_CONNECTINFO(r0, 0x80045503, 0x0) 3m1.678520441s ago: executing program 4 (id=220): mknod(0x0, 0x1000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x8042, 0x1f6) r1 = open(&(0x7f0000000180)='./file1\x00', 0x143142, 0x0) truncate(&(0x7f0000000000)='./file1\x00', 0x103000) splice(r1, 0x0, r0, 0x0, 0x59, 0x2) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0xfa, 0x5, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) 3m1.39493059s ago: executing program 4 (id=222): r0 = socket(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) write(r0, &(0x7f0000000140)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) connect$netlink(r0, &(0x7f00000005c0)=@proc={0x10, 0x0, 0x1}, 0xc) write(r0, &(0x7f0000000000)='\"', 0x1) recvmmsg(r0, &(0x7f0000000780), 0x3ffffffffffff81, 0x2, 0x0) 2m46.230656244s ago: executing program 33 (id=222): r0 = socket(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) write(r0, &(0x7f0000000140)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) connect$netlink(r0, &(0x7f00000005c0)=@proc={0x10, 0x0, 0x1}, 0xc) write(r0, &(0x7f0000000000)='\"', 0x1) recvmmsg(r0, &(0x7f0000000780), 0x3ffffffffffff81, 0x2, 0x0) 41.269699857s ago: executing program 1 (id=772): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) inotify_init1(0x80000) r1 = socket$netlink(0x10, 0x3, 0xf) sendmsg$netlink(r1, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f0000000b40)={0x30, 0x2e, 0x503, 0x70bd29, 0x0, "", [@nested={0x20, 0x0, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32=0x3}, @typed={0x8, 0x0, 0x0, 0x0, @fd}, @typed={0xc, 0xf, 0x0, 0x0, @u64}]}]}, 0x30}], 0x1}, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r2, &(0x7f00000006c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) sendmmsg$inet(r2, &(0x7f0000000a80)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000180)="a4", 0xffa6}], 0x1}}], 0x1, 0x24044c45) syz_open_dev$tty20(0xc, 0x4, 0x1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sync_file_range(0xffffffffffffffff, 0x2a1c800, 0x4, 0x2) 40.754371338s ago: executing program 1 (id=776): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) pipe2(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setrlimit(0x9, &(0x7f0000000040)={0x7, 0x67}) mlock2(&(0x7f0000627000/0x3000)=nil, 0x3000, 0x0) mremap(&(0x7f0000532000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000190000/0x1000)=nil) mlock(&(0x7f0000626000/0x5000)=nil, 0x5000) r3 = socket(0x2b, 0x1, 0x1) set_mempolicy(0x0, &(0x7f0000000100), 0x2) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f00000002c0)=@security={'security\x00', 0xe, 0x4, 0x4a0, 0xffffffff, 0x0, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x3d0, 0x3d0, 0x3d0, 0xffffffff, 0x4, &(0x7f0000000080), {[{{@uncond, 0x0, 0x188, 0x1b0, 0x0, {}, [@common=@hl={{0x28}, {0x1, 0x8}}, @common=@unspec=@conntrack1={{0xb8}, {{@ipv6=@local, [0xff000000, 0xff000000], @ipv6=@rand_addr=' \x01\x00', [0xffffff00, 0x0, 0x0, 0xff], @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, [0xffffff00, 0xffffffff, 0xffffff00], @ipv4=@local, [0xffffffff, 0xff000000, 0xffffff00], 0x4, 0x0, 0x2b, 0x4e21, 0x4e24, 0x4e22, 0x4e23, 0x80, 0x2000}, 0x1, 0x35}}]}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x8, 0x3}}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, [0x0, 0xff000000, 0xffffffff, 0xffffff00], [0xff, 0xffffffff, 0xffffffff, 0xffffffff], 'vlan0\x00', 'vxcan1\x00', {}, {0xff}, 0xff, 0xd, 0x1, 0x11}, 0x0, 0xf0, 0x118, 0x0, {}, [@common=@dst={{0x48}, {0x9, 0x6, 0x1, [0x33, 0x101, 0x2, 0x3, 0x51f6, 0x6, 0x2, 0x1, 0x0, 0x6, 0xf, 0x71, 0x7f, 0x6, 0x5, 0x2], 0x1}}]}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x4cf1, 0x2, 0x5}}}, {{@uncond, 0x0, 0xa8, 0x108}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@remote, [0x0, 0xff, 0xff000000, 0xffffffff], 0x4e21, 0x4e23, 0x4e21, 0x4e24, 0x1, 0x0, 0x5, 0x800, 0xffffffc0}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x500) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e5b, 0x80000000, @empty, 0x8}, 0x1c) r4 = memfd_create(0x0, 0x3) sendfile(0xffffffffffffffff, r4, 0x0, 0xd39a) r5 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$lock(r5, 0x5, &(0x7f00000000c0)={0x1, 0x1, 0x80009, 0x10000}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0xc369d000) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000005}, 0x204c00c) 39.564706427s ago: executing program 1 (id=782): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, @fallback=0xd}, 0x94) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000000)=ANY=[], 0xd8}}, 0x20008004) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'bond0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'gretap0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="400d0000000000003000128008000100687372002400028008000200", @ANYRES32=r2, @ANYBLOB="08000100", @ANYRES32=r1], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) 38.281042964s ago: executing program 1 (id=788): syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) io_uring_setup(0x1c79, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000070000001400018005000200010000000800"], 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x8) 38.173347304s ago: executing program 1 (id=790): syz_emit_ethernet(0x1e6, &(0x7f0000000200)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "000210", 0x1b0, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "8fffff", 0x0, 0x11, 0x0, @local, @loopback, [@fragment={0x21}, @hopopts={0x0, 0x2d, '\x00', [@calipso={0x7, 0x40, {0x3, 0xe, 0x6, 0x0, [0xfffffffffffffffe, 0x2, 0x5, 0x9, 0x18a7, 0x73, 0x2]}}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @generic={0x0, 0x94, "a17e9ab13f6e142b20582c8d220c698a74dbf13dfc0ad1f526dfc43313759300929090dd4792ce67ea9f8769d3246f94412c56e0247939ed4b318e4b6066b72d91d9aff97fcf30977dfd4028dea535a8e9d1682c4794d255d62089716f2f97577f9bef264da3cfd3e5511fb253122f61808a73cc2e760f93ceb68a0db2613cf0956b23235f057c2f980a19266a6bb4a33a17f550"}, @ra, @generic={0x0, 0x72, "65fd1a52737fa1ec91495f4d25a766a5dd36bcffb376f4b35d4a5bc51b0f8fb9a273282a9c8ef192a4de26c8732765dbeb6ce083e81cebf0612d1cc7956b78fb34ce0e4a867c8b4094bab04b23680ba97ad5c624055e8504a7a121cf38a402a7aa80e05dbe56fecab8b014420231c0e997cb"}, @calipso={0x7, 0x18, {0x3, 0x4, 0x0, 0x0, [0x8000000000000001, 0x2]}}]}]}}}}}}}, 0x0) 37.890835889s ago: executing program 1 (id=792): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000a, 0x8031, 0xffffffffffffffff, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3000001, 0x11, r0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2000, &(0x7f0000003700)={0x77359400}) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000258f88)={{0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8, 0x200}, 0x0, 0x0, 0x2, 0x1, 0x0, 0x95, 0xffffffffffffffff}) io_setup(0x3, &(0x7f0000008240)) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x4, 0x0, 0x0, 0x2}, 0x94) timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, 0x0) get_mempolicy(0x0, 0x0, 0xffffffff, &(0x7f0000185000/0x4000)=nil, 0x3) 22.752912123s ago: executing program 34 (id=792): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000a, 0x8031, 0xffffffffffffffff, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3000001, 0x11, r0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2000, &(0x7f0000003700)={0x77359400}) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000258f88)={{0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8, 0x200}, 0x0, 0x0, 0x2, 0x1, 0x0, 0x95, 0xffffffffffffffff}) io_setup(0x3, &(0x7f0000008240)) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x4, 0x0, 0x0, 0x2}, 0x94) timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, 0x0) get_mempolicy(0x0, 0x0, 0xffffffff, &(0x7f0000185000/0x4000)=nil, 0x3) 16.753891697s ago: executing program 6 (id=888): r0 = socket$nl_generic(0x10, 0x3, 0x10) capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000040)={0x1000, 0x10ffff, 0xfffffffd}) openat(0xffffffffffffff9c, 0x0, 0x40000, 0x120) r1 = gettid() r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0xfffffffffbfffff5]}, 0x8, 0x0) readv(r2, &(0x7f0000000000)=[{&(0x7f0000000080)=""/59, 0x3b}], 0x1) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x8014) tkill(r1, 0x8) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000000440)="b25b", 0x2}, {&(0x7f0000002800)="cf", 0x1}, {&(0x7f0000000380)='\b', 0x1}, {&(0x7f0000000100)="2a1b1a4552a31452d5c73c376f8a", 0xe}, {&(0x7f0000002b40)='-', 0x1}], 0x5}}, {{0x0, 0x0, &(0x7f0000002f00)=[{&(0x7f0000001580)="ce", 0x1}, {&(0x7f00000007c0)="f2", 0xfea9}, {&(0x7f0000002e40)="d4", 0x1}], 0x3}}, {{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000003000)="e1", 0x1}, {&(0x7f00000010c0)="fa", 0x1}, {&(0x7f0000001680)="d8", 0x1}], 0x3}}, {{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000340)='\x00', 0x1}], 0x1}}], 0x4, 0x4000084) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x20, &(0x7f0000000000)=0x7fffffff, 0x4) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0xb, &(0x7f0000000000)=0x40b, 0x4) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x14, r3, 0x1, 0x3, 0x25dfdbfd, {0x23}}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0) 13.328163195s ago: executing program 6 (id=905): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000001240)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000140)="91f8a9849519def28691bbc4173c3d6f357d0272b7319130feaab952ac4703cad04be68907e50e997fc26e4c91ea4feb931647fc5393de25000000", 0x3b}, {&(0x7f0000000e80)="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", 0x121}, {&(0x7f00000001c0)="985e44efeabe001cabcf3d8673c3a254a9a2d3197970cb347b70a243bf77139a94bc3ae91684aaf7b7dff691deb8f8aef2d915fb3a0794a9a9b431a819bca6122c350637808dde804a048fd8696e524b2934126c443ce93d82e931eb9918e6c0827686e59209d2e02c9210fd8048f04ad6c48b30", 0x74}], 0x3}}, {{0x0, 0x0, &(0x7f00000005c0)}}, {{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000640)="42e013913edbeb683c44e18a52b5a2462064ddd92caaba941de80d06047dedb7eeeff3a27eacf4c416b6979d6c918608807c44d01535dbaab3b390086e4fd43c6b5931187023646d6beac2340fdc7a0d81214ac76a818f64d287311e8828dfd3e3dd67efdb129a6e52745d1540e570891f6bf411cc16a18c4d34e522a1f003498f1a03ea1f8828b6c902286c71a9bc21923972dacfa74fef6a0fd3267e599c1dd33dff5d7b28f134bda4a29962fd5daa4fc9c515a1c3ee25ace1a9948c24b277d0", 0xc1}, {&(0x7f0000000040)="7542473782798be019c27ed30b", 0xd}, {&(0x7f0000000300)="d6f6da22b14bf9ad2fbb765e446f21a90b8d398bc28c67ea1b14020f785656813f94f0a10a80cff62212b5842b9740c2e7c8cbc7ad801a6ec481d22ff828b1ba477f736c1712a1334158d7df5bc9584acb5112d5ca2b", 0x56}], 0x3}}], 0x3, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 11.803875439s ago: executing program 6 (id=917): creat(0x0, 0x182) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbee3, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, 0x0, 0x0) r4 = add_key$user(&(0x7f0000000240), &(0x7f0000000500)={'syz', 0x0}, &(0x7f0000000b80)="ffa16b558f", 0x5, 0xffffffffffffffff) r5 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r5, &(0x7f0000000200)='asymmetric\x00', &(0x7f0000000140)=@keyring={'key_or_keyring:', r4}) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x34, &(0x7f00000000c0), 0x4) setsockopt$inet_group_source_req(r3, 0x0, 0x2b, &(0x7f0000000380)={0x2, {{0x2, 0x4e26, @private=0xa010101}}, {{0x2, 0x2, @rand_addr=0x64010101}}}, 0x108) 5.587191953s ago: executing program 0 (id=943): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1900000004000000040000000c"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b707000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000240)=r2}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r3, &(0x7f0000000640)="06", &(0x7f0000000440)=@tcp=r2, 0x2}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000140)="b9ff03076804268c989e140088a8", 0x0, 0x4ff, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 5.270131066s ago: executing program 0 (id=944): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r0, 0x891d, &(0x7f0000000180)={'bond_slave_0\x00', @ifru_addrs=@hci={0x1f, 0x4, 0x4}}) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24004045) r1 = io_uring_setup(0x1b80, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='net/ip_mr_cache\x00') seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)}], 0x1}, 0x0) io_uring_enter(r1, 0x8ae, 0xfbb9, 0x1f, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000009c0)=ANY=[@ANYBLOB="440000001000010400894e934fb2a0e22f709030", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800e00010069703665727370616e000000080002800400120008000300", @ANYRES32=r4], 0x44}}, 0x40000c0) 3.336098057s ago: executing program 2 (id=954): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, @fallback=0xd}, 0x94) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="d80000001b00010000000000fdfffffffc000000000000000000000000000000200100000000000000000000000000004e240000000000010000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000ffffffffffffff7ffcffffffffffffff04000000000000000000000000000000fdffffffffffffff00000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000006fcffff0000000000000300"], 0xd8}}, 0x20008004) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'bond0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'gretap0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="400d0000000000003000128008000100687372002400028008000200", @ANYRES32=r2, @ANYBLOB="08000100", @ANYRES32=r1], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) 3.18163171s ago: executing program 5 (id=955): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={0x38, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x38}}, 0x0) 3.148211015s ago: executing program 0 (id=956): ioprio_set$uid(0x3, 0x0, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x9c23, 0x120}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_INDEX={0x8, 0x15, 0x57ab3}]}}}, @IFLA_PROMISCUITY={0x8, 0x1e, 0xc406}]}, 0x40}, 0x1, 0x0, 0x0, 0x20040441}, 0x0) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080), 0x418000, 0x0) sendto$packet(r0, &(0x7f0000000180)="280320", 0x3, 0x4000840, &(0x7f0000000000)={0x11, 0x3, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000180)=[{0x6, 0x80, 0x4, 0x7fff0000}]}) r5 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x1) socket$inet6_udp(0xa, 0x2, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x0, 0x82) unlinkat(r6, &(0x7f0000000140)='./file0\x00', 0x200) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(0xffffffffffffffff, 0x0, 0x0) r8 = openat$cgroup_subtree(r7, &(0x7f0000000040), 0x2, 0x0) write$cgroup_subtree(r8, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x6) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYRES32=r3], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x48004) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 3.035219298s ago: executing program 5 (id=957): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b00)=ANY=[@ANYBLOB="3801000010000100feffffbf000100000000000000000000000000000000000000000000000000000000ffffac1414aa000103944e220005000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c000000ac1414bb000000000000000000000000000000000000002109000000000000000700000000000000ffff0000000000001c250800000000000200000000000000f8ffffffffffffff000000002ae61c28060000000000000000000000000000001f00000000000000ff0100000000000002000000fcffffff000000002abd7000000000000a0001fd2000000000000000480003006465666c617465"], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="f00000001c00010027bd700000010000"], 0xf0}, 0x1, 0x0, 0x0, 0x8801}, 0x0) 2.89028957s ago: executing program 6 (id=958): socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000000c0)={0x806, 0x0, 0x4, 0x7}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="20000000520001000000000000000000020000000c00"], 0x20}}, 0x0) 2.88861467s ago: executing program 5 (id=959): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x4000) socket$inet6(0xa, 0x3, 0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c0) mknod(0x0, 0x1000, 0x8) openat(0xffffffffffffff9c, 0x0, 0x300000d, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x31f, 0x3) syz_open_procfs(0x0, &(0x7f0000000100)='auxv\x00') socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = getpgid(0x0) r2 = syz_pidfd_open(r1, 0x0) r3 = pidfd_getfd(r2, r2, 0x0) setns(r3, 0x66020000) mount$9p_fd(0x0, &(0x7f0000000980)='.\x00', 0x0, 0x104000, 0x0) 2.744041085s ago: executing program 2 (id=960): ioprio_set$uid(0x3, 0x0, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080), 0x418000, 0x0) sendto$packet(r0, &(0x7f0000000180)="280320", 0x3, 0x4000840, &(0x7f0000000000)={0x11, 0x3, r2, 0x1, 0x2, 0x6, @broadcast}, 0x14) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000180)=[{0x6, 0x80, 0x4, 0x7fff0000}]}) r5 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x1) socket$inet6_udp(0xa, 0x2, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x0, 0x82) unlinkat(r6, &(0x7f0000000140)='./file0\x00', 0x200) r7 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r7, 0x6, 0x0, 0x0, 0x0) r8 = fsmount(r7, 0x0, 0x0) r9 = openat$cgroup_subtree(r8, &(0x7f0000000040), 0x2, 0x0) write$cgroup_subtree(r9, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x6) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYRES32=r3], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x48004) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 2.647581429s ago: executing program 6 (id=961): ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) capget(0x0, 0x0) setsockopt$CAN_RAW_LOOPBACK(0xffffffffffffffff, 0x65, 0x3, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="85000000070000006a0a00ff000000500c000000000000009500000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000000095000000002009845a1024"], &(0x7f0000000140)='GPL\x00', 0x2, 0x95, &(0x7f0000000180)=""/149, 0x41100, 0x0, '\x00', 0x0, @flow_dissector}, 0x94) creat(&(0x7f0000000280)='./file0\x00', 0x108) r3 = syz_open_procfs(0x0, &(0x7f00000193c0)='net/igmp6\x00') pread64(r3, &(0x7f0000019400)=""/102344, 0xfffffcbb, 0x1c2a) 2.554089126s ago: executing program 0 (id=962): r0 = socket$kcm(0x2, 0x3, 0x106) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000009c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a70000000060a0b160000000000000000020000084400048018000180080001006f7366000c000280080001400000000428000180080001006e6174001c0002800800014000000000080003400000001408000240000000020900010073797a30000000000900020073797a3200"], 0x98}, 0x1, 0x0, 0x0, 0x850}, 0x4040080) sendmsg$inet(r0, &(0x7f0000000040)={&(0x7f0000000380)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000080)="fbd2b9ed29d8974a6ce75f08916ac3b4da11bc1a", 0xffeb}], 0x1}, 0x0) 2.544956608s ago: executing program 5 (id=963): r0 = syz_usb_connect(0x5, 0x64, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000cb8be7406d04230807000102030109025200010000000009044000000e0100390a240108"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000200)={0x24, 0x0, 0x0, &(0x7f00000005c0), 0x0}, 0x0) syz_usb_control_io$printer(r0, &(0x7f0000000880)={0x14, 0x0, &(0x7f0000000a00)={0x0, 0x3, 0x14, @string={0x14, 0x3, "d2a7c993ef2c435eeecdf8e32879569c6a9d"}}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) inotify_init1(0x80000) r4 = socket$netlink(0x10, 0x3, 0xf) sendmsg$netlink(r4, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f0000000b40)={0x30, 0x2e, 0x503, 0x70bd29, 0x0, "", [@nested={0x20, 0x0, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32=0x3}, @typed={0x8, 0x0, 0x0, 0x0, @fd}, @typed={0xc, 0xf, 0x0, 0x0, @u64}]}]}, 0x30}], 0x1}, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) syz_emit_ethernet(0x4a, &(0x7f00000007c0)={@link_local, @dev, @val={@void}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x10, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x1, 0x8, 0x7, 0xb, 0x2}}}}}}, 0x0) connect$inet(r5, &(0x7f00000006c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) sendmmsg$inet(r5, &(0x7f0000000a80)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000180)="a4", 0xffa6}], 0x1}}], 0x1, 0x24044c45) r6 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000040)=0x8) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff8000}]}) close_range(r7, 0xffffffffffffffff, 0x0) sync_file_range(r7, 0x2a1c800, 0x4, 0x2) 2.332916392s ago: executing program 2 (id=964): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r0, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000000440)="b25b", 0x2}, {&(0x7f0000002800)="cf", 0x1}, {&(0x7f0000000380)='\b', 0x1}, {&(0x7f0000000100)="2a1b1a4552a31452d5c73c376f8a", 0xe}, {0x0}], 0x5}}, {{0x0, 0x0, &(0x7f0000002f00)=[{&(0x7f0000001580)="ce", 0x1}, {&(0x7f00000007c0)="f2", 0x1}, {&(0x7f0000002e40)="d4", 0x1}], 0x3}}, {{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000003000)="e1", 0x1}, {&(0x7f00000010c0)="fa", 0x1}, {&(0x7f0000001680)="d8", 0x1}], 0x3}}, {{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000340)='\x00', 0x1}], 0x1}}], 0x4, 0x4000084) sendmmsg$inet(r0, &(0x7f0000000480)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000240)="f9", 0x1}], 0x1}}], 0x1, 0x80) setsockopt$sock_int(r0, 0x1, 0x20, &(0x7f0000000000)=0x7fffffff, 0x4) 1.935071941s ago: executing program 0 (id=965): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1900000004000000040000000c"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b707000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000240)=r2}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r3, &(0x7f0000000640)="06", &(0x7f0000000440)=@tcp=r2, 0x2}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000140)="b9ff03076804268c989e140088a8", 0x0, 0x4ff, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 1.934305209s ago: executing program 2 (id=966): capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000040)={0x1000, 0x10ffff, 0xfffffffd}) r0 = gettid() r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0xfffffffffbfffff5]}, 0x8, 0x0) readv(r1, &(0x7f0000000000)=[{&(0x7f0000000080)=""/59, 0x3b}, {&(0x7f0000000300)=""/69, 0x45}], 0x2) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x8014) tkill(r0, 0x8) socket$caif_seqpacket(0x25, 0x5, 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r2, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r2, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000000440)="b25b", 0x2}, {&(0x7f0000002800)="cf", 0x1}, {&(0x7f0000000380)='\b', 0x1}, {&(0x7f0000000100)="2a1b1a4552a31452d5c73c376f8a", 0xe}, {&(0x7f0000002b40)='-', 0x1}], 0x5}}, {{0x0, 0x0, &(0x7f0000002f00)=[{&(0x7f0000001580)="ce", 0x1}, {&(0x7f00000007c0)="f2", 0x1}, {&(0x7f0000002e40)="d4", 0x1}], 0x3}}, {{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000003000)="e1", 0x1}, {&(0x7f00000010c0)="fa", 0x1}, {&(0x7f0000001680)="d8", 0x1}], 0x3}}, {{0x0, 0x0, &(0x7f0000000a40)=[{0x0}], 0x1}}], 0x4, 0x4000084) setsockopt$sock_int(r2, 0x1, 0x20, &(0x7f0000000000)=0x7fffffff, 0x4) 1.566178233s ago: executing program 0 (id=967): creat(0x0, 0x182) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbee3, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, 0x0, 0x0) r4 = add_key$user(&(0x7f0000000240), &(0x7f0000000500)={'syz', 0x0}, &(0x7f0000000b80)="ffa16b558f", 0x5, 0xffffffffffffffff) r5 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r5, &(0x7f0000000200)='asymmetric\x00', &(0x7f0000000140)=@keyring={'key_or_keyring:', r4}) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x34, &(0x7f00000000c0), 0x4) setsockopt$inet_group_source_req(r3, 0x0, 0x2b, &(0x7f0000000380)={0x2, {{0x2, 0x4e26, @private=0xa010101}}, {{0x2, 0x2, @rand_addr=0x64010101}}}, 0x108) 1.564474691s ago: executing program 2 (id=968): socket$tipc(0x1e, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() setrlimit(0xf, 0x0) sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) signalfd(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) r3 = socket(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'lo\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001400b59500000000000000000a400000", @ANYRES32=r5, @ANYBLOB="14000200fe8000000000000000"], 0x48}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, 0x0, 0x0) sendmmsg(r3, 0x0, 0x0, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2b, 0x0, 0x0) timer_delete(0x0) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x80800) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x49, '\x00', 0x0, @sched_cls=0x2f, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000040)={0x3, 0x0, 0x9, 0xb5e}, 0x10}, 0x94) 1.529284732s ago: executing program 6 (id=969): r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000040)='.pending_reads\x00', 0x80000, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000008c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {r4, r5+60000000}}, 0x0) fchmod(r0, 0x110) syz_usb_connect(0x3, 0x64, &(0x7f0000000080)=ANY=[@ANYRESHEX=0x0], 0x0) 611.642589ms ago: executing program 5 (id=970): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000040)=0xd, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$unix(0x1, 0x1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) ioctl$KDGKBDIACR(r2, 0x4b4a, &(0x7f0000002f80)=""/61) sendmsg$nl_route(r1, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="4400000010004b0400000000000000007a000000", @ANYRES32=0x0, @ANYBLOB="401800000000000024e311800b000100627269646765000014000280050000030018000800040000000000"], 0x44}}, 0x0) 499.720241ms ago: executing program 2 (id=971): ioprio_set$uid(0x3, 0x0, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x9c23, 0x120}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_INDEX={0x8, 0x15, 0x57ab3}]}}}, @IFLA_PROMISCUITY={0x8, 0x1e, 0xc406}]}, 0x40}, 0x1, 0x0, 0x0, 0x20040441}, 0x0) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080), 0x418000, 0x0) sendto$packet(r0, &(0x7f0000000180)="280320", 0x3, 0x4000840, &(0x7f0000000000)={0x11, 0x3, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000180)=[{0x6, 0x80, 0x4, 0x7fff0000}]}) r5 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x1) socket$inet6_udp(0xa, 0x2, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x0, 0x82) unlinkat(r6, &(0x7f0000000140)='./file0\x00', 0x200) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(0xffffffffffffffff, 0x0, 0x0) r8 = openat$cgroup_subtree(r7, &(0x7f0000000040), 0x2, 0x0) write$cgroup_subtree(r8, &(0x7f0000000640)=ANY=[@ANYBLOB="2d7069647320c8f532f5bc0b179f28098e10ea17ce8c9008a1aab99a2d9ad309a06fe663881b68d9d9a7e7412e41d100beab2f42222040af7f26892b63e340ca3af453af899f66472da1b84cc97e8301ba9bf1f3598265f1add68c09e84d18523953daed334cf2db84c2c75a4fd907de5489ea0ffdf9c44fd8c66acb69eab984023617ab860472a1e59bdca6da2053cfd7d63cb05ca0c8d7a8bf18d963f58bf4d32ef886132df6ab97fdcf544d7d32116e8b9a18a9ab5f646d6f75851fdbba4a0bae97320f2345c3c0b7bb2ec913007911da4c09143462e037fbfa368fe245fcc999ad201d949e8487bf784d83be57d130af84c826519c4b9b3b99a3611c434591b324680c"], 0x6) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYRES32=r3], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x48004) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 0s ago: executing program 5 (id=972): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x4000) socket$inet6(0xa, 0x3, 0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c0) mknod(0x0, 0x1000, 0x8) openat(0xffffffffffffff9c, 0x0, 0x300000d, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x31f, 0x3) syz_open_procfs(0x0, &(0x7f0000000100)='auxv\x00') socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = getpgid(0x0) r2 = syz_pidfd_open(r1, 0x0) r3 = pidfd_getfd(r2, r2, 0x0) setns(r3, 0x66020000) mount$9p_fd(0x0, &(0x7f0000000980)='.\x00', 0x0, 0x104000, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.71' (ED25519) to the list of known hosts. [ 78.685054][ T5798] cgroup: Unknown subsys name 'net' [ 78.925619][ T5798] cgroup: Unknown subsys name 'cpuset' [ 79.001643][ T5798] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 80.722365][ T5798] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 81.685624][ T871] cfg80211: failed to load regulatory.db [ 83.073222][ T5815] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 83.088791][ T5815] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 83.095568][ T5818] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 83.116928][ T5820] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 83.140934][ T5820] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 83.141870][ T5820] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 83.148439][ T5820] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 83.162981][ T5824] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 83.174809][ T5824] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 83.192202][ T5824] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 83.197204][ T5820] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 83.198892][ T5820] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 83.206790][ T5824] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 83.208339][ T5820] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 83.214903][ T5827] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 83.215935][ T5827] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 83.219046][ T5828] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 83.233075][ T5828] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 83.237078][ T5820] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 83.240679][ T5827] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 83.241875][ T5828] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 83.242300][ T5828] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 83.246554][ T5826] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 83.253077][ T5826] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 83.255417][ T5818] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 84.355819][ T5814] chnl_net:caif_netlink_parms(): no params data found [ 84.386495][ T5813] chnl_net:caif_netlink_parms(): no params data found [ 84.442890][ T5812] chnl_net:caif_netlink_parms(): no params data found [ 84.448058][ T5810] chnl_net:caif_netlink_parms(): no params data found [ 84.518008][ T5811] chnl_net:caif_netlink_parms(): no params data found [ 84.748046][ T5814] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.748994][ T5814] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.749305][ T5814] bridge_slave_0: entered allmulticast mode [ 84.751606][ T5814] bridge_slave_0: entered promiscuous mode [ 84.797107][ T5813] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.797193][ T5813] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.797289][ T5813] bridge_slave_0: entered allmulticast mode [ 84.798732][ T5813] bridge_slave_0: entered promiscuous mode [ 84.818327][ T5814] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.818432][ T5814] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.818603][ T5814] bridge_slave_1: entered allmulticast mode [ 84.821933][ T5814] bridge_slave_1: entered promiscuous mode [ 84.863846][ T5813] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.863993][ T5813] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.864225][ T5813] bridge_slave_1: entered allmulticast mode [ 84.867185][ T5813] bridge_slave_1: entered promiscuous mode [ 84.918736][ T5812] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.918837][ T5812] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.925874][ T5812] bridge_slave_0: entered allmulticast mode [ 84.928438][ T5812] bridge_slave_0: entered promiscuous mode [ 84.930432][ T5810] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.930551][ T5810] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.930689][ T5810] bridge_slave_0: entered allmulticast mode [ 84.936251][ T5810] bridge_slave_0: entered promiscuous mode [ 84.990630][ T5812] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.990729][ T5812] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.992245][ T5812] bridge_slave_1: entered allmulticast mode [ 84.994645][ T5812] bridge_slave_1: entered promiscuous mode [ 84.998758][ T5810] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.998867][ T5810] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.999015][ T5810] bridge_slave_1: entered allmulticast mode [ 85.005398][ T5810] bridge_slave_1: entered promiscuous mode [ 85.047373][ T5811] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.047499][ T5811] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.047693][ T5811] bridge_slave_0: entered allmulticast mode [ 85.049333][ T5811] bridge_slave_0: entered promiscuous mode [ 85.089776][ T5813] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.095182][ T5814] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.095499][ T5811] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.096214][ T5811] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.096367][ T5811] bridge_slave_1: entered allmulticast mode [ 85.099787][ T5811] bridge_slave_1: entered promiscuous mode [ 85.146870][ T5814] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.173845][ T5813] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.176178][ T5812] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.180104][ T5810] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.227735][ T5812] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.274591][ T5815] Bluetooth: hci2: command tx timeout [ 85.350996][ T5815] Bluetooth: hci1: command tx timeout [ 85.351051][ T5818] Bluetooth: hci4: command tx timeout [ 85.431040][ T5818] Bluetooth: hci3: command tx timeout [ 85.431301][ T5815] Bluetooth: hci0: command tx timeout [ 85.458402][ T5810] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.461140][ T5811] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.493479][ T5814] team0: Port device team_slave_0 added [ 85.508617][ T5811] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.510430][ T5813] team0: Port device team_slave_0 added [ 85.536254][ T5814] team0: Port device team_slave_1 added [ 85.566052][ T5813] team0: Port device team_slave_1 added [ 85.567664][ T5812] team0: Port device team_slave_0 added [ 85.585021][ T5810] team0: Port device team_slave_0 added [ 85.625572][ T5812] team0: Port device team_slave_1 added [ 85.643621][ T5810] team0: Port device team_slave_1 added [ 85.645885][ T5811] team0: Port device team_slave_0 added [ 85.687929][ T5814] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.687940][ T5814] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.687953][ T5814] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.715254][ T5811] team0: Port device team_slave_1 added [ 85.716095][ T5813] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.716107][ T5813] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.716131][ T5813] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.745337][ T5814] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.745353][ T5814] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.745376][ T5814] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.802984][ T5813] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.803002][ T5813] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.803027][ T5813] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.822155][ T5812] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.822174][ T5812] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.822198][ T5812] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.825017][ T5810] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.825031][ T5810] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.825060][ T5810] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.870573][ T5812] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.870590][ T5812] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.870613][ T5812] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.875569][ T5810] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.875584][ T5810] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.875608][ T5810] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.877007][ T5811] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.877020][ T5811] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.877043][ T5811] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.919513][ T5811] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.919532][ T5811] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.919557][ T5811] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.052815][ T5814] hsr_slave_0: entered promiscuous mode [ 86.055990][ T5814] hsr_slave_1: entered promiscuous mode [ 86.086440][ T5813] hsr_slave_0: entered promiscuous mode [ 86.087751][ T5813] hsr_slave_1: entered promiscuous mode [ 86.089992][ T5813] debugfs: 'hsr0' already exists in 'hsr' [ 86.090110][ T5813] Cannot create hsr debugfs directory [ 86.176091][ T5812] hsr_slave_0: entered promiscuous mode [ 86.176850][ T5812] hsr_slave_1: entered promiscuous mode [ 86.177345][ T5812] debugfs: 'hsr0' already exists in 'hsr' [ 86.177361][ T5812] Cannot create hsr debugfs directory [ 86.187267][ T5810] hsr_slave_0: entered promiscuous mode [ 86.188462][ T5810] hsr_slave_1: entered promiscuous mode [ 86.189245][ T5810] debugfs: 'hsr0' already exists in 'hsr' [ 86.189267][ T5810] Cannot create hsr debugfs directory [ 86.244895][ T5811] hsr_slave_0: entered promiscuous mode [ 86.245616][ T5811] hsr_slave_1: entered promiscuous mode [ 86.246148][ T5811] debugfs: 'hsr0' already exists in 'hsr' [ 86.246163][ T5811] Cannot create hsr debugfs directory [ 87.198854][ T5814] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 87.238422][ T5814] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 87.248932][ T5814] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 87.275479][ T5814] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 87.277532][ T5814] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 87.325505][ T5814] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 87.345813][ T5814] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 87.352257][ T5815] Bluetooth: hci2: command tx timeout [ 87.386528][ T5814] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 87.432110][ T5815] Bluetooth: hci4: command tx timeout [ 87.432142][ T5815] Bluetooth: hci1: command tx timeout [ 87.504045][ T5812] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 87.511259][ T5818] Bluetooth: hci0: command tx timeout [ 87.511293][ T5818] Bluetooth: hci3: command tx timeout [ 87.535903][ T5812] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 87.538707][ T5812] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 87.573545][ T5812] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 87.578058][ T5812] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 87.618272][ T5812] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 87.639604][ T5812] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 87.679471][ T5812] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 87.795143][ T5810] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 87.834030][ T5810] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 87.840382][ T5810] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 87.874631][ T5810] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 87.878980][ T5810] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 87.926389][ T5810] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 87.947717][ T5810] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 87.985216][ T5810] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 88.115224][ T5811] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 88.145153][ T5811] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 88.166923][ T5811] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 88.194296][ T5811] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 88.199068][ T5811] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 88.219850][ T5811] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 88.248519][ T5811] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 88.276161][ T5811] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 88.355707][ T5814] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.465058][ T5813] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 88.494118][ T5813] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 88.499164][ T5813] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 88.535703][ T5813] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 88.560715][ T5813] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 88.593783][ T5813] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 88.598134][ T5813] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 88.618085][ T5813] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 88.629954][ T5814] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.682849][ T1285] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.683009][ T1285] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.749954][ T5812] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.770235][ T146] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.770450][ T146] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.866431][ T5812] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.899296][ T1551] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.899440][ T1551] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.925263][ T5810] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.949224][ T1285] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.949521][ T1285] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.024684][ T5810] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.057193][ T5811] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.128455][ T1551] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.128589][ T1551] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.192410][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.192557][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.285587][ T5811] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.326605][ T155] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.326716][ T155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.357347][ T5813] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.376403][ T1285] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.376492][ T1285] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.430924][ T5815] Bluetooth: hci2: command tx timeout [ 89.517269][ T5815] Bluetooth: hci4: command tx timeout [ 89.517305][ T5815] Bluetooth: hci1: command tx timeout [ 89.573927][ T5814] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.577839][ T5813] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.591056][ T5818] Bluetooth: hci3: command tx timeout [ 89.591083][ T5818] Bluetooth: hci0: command tx timeout [ 89.670693][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.681656][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.720199][ T1551] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.720274][ T1551] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.906901][ T5812] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.078170][ T5814] veth0_vlan: entered promiscuous mode [ 90.179484][ T5814] veth1_vlan: entered promiscuous mode [ 90.306806][ T5811] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.334840][ T5810] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.393935][ T5814] veth0_macvtap: entered promiscuous mode [ 90.435760][ T5814] veth1_macvtap: entered promiscuous mode [ 90.528592][ T5814] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.565541][ T5814] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.587460][ T5811] veth0_vlan: entered promiscuous mode [ 90.618471][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.624774][ T5813] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.644234][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.647708][ T5810] veth0_vlan: entered promiscuous mode [ 90.648045][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.677683][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.702670][ T5811] veth1_vlan: entered promiscuous mode [ 90.745150][ T5812] veth0_vlan: entered promiscuous mode [ 90.783000][ T5810] veth1_vlan: entered promiscuous mode [ 90.924508][ T5812] veth1_vlan: entered promiscuous mode [ 91.188608][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.188626][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.243153][ T5811] veth0_macvtap: entered promiscuous mode [ 91.283227][ T5811] veth1_macvtap: entered promiscuous mode [ 91.299173][ T5810] veth0_macvtap: entered promiscuous mode [ 91.305661][ T5813] veth0_vlan: entered promiscuous mode [ 91.339912][ T5810] veth1_macvtap: entered promiscuous mode [ 91.369833][ T155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.369854][ T155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.395342][ T5812] veth0_macvtap: entered promiscuous mode [ 91.424848][ T5813] veth1_vlan: entered promiscuous mode [ 91.449865][ T5812] veth1_macvtap: entered promiscuous mode [ 91.477535][ T5811] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.505737][ T5811] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.507660][ T5810] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.521453][ T5815] Bluetooth: hci2: command tx timeout [ 91.562370][ T5810] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.565509][ T1025] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.592593][ T5818] Bluetooth: hci4: command tx timeout [ 91.592639][ T5815] Bluetooth: hci1: command tx timeout [ 91.599664][ T1025] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.607849][ T1025] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.611862][ T5812] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.618731][ T1025] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.642668][ T1025] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.647312][ T1025] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.661454][ T5812] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.671276][ T1025] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.681820][ T5818] Bluetooth: hci3: command tx timeout [ 91.681864][ T5815] Bluetooth: hci0: command tx timeout [ 91.737366][ T1025] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.752852][ T5813] veth0_macvtap: entered promiscuous mode [ 91.840158][ T1025] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.899323][ T1025] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.919334][ T5813] veth1_macvtap: entered promiscuous mode [ 91.936640][ T1025] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.129015][ T1025] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.752767][ T155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.752784][ T155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.813873][ T5813] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.985655][ T146] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.985675][ T146] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.002756][ T5813] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.156093][ T146] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.168640][ T146] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.182751][ T146] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.203796][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.205174][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.205191][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.445044][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.445064][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.876369][ T155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.876389][ T155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.255403][ T43] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 94.297837][ T1025] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.297857][ T1025] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.559582][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.559603][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.591020][ T43] usb 1-1: config 0 has an invalid interface number: 64 but max is 0 [ 94.591046][ T43] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 94.591063][ T43] usb 1-1: config 0 has no interface number 0 [ 94.595967][ T43] usb 1-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice= 0.07 [ 94.595996][ T43] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.596014][ T43] usb 1-1: Product: syz [ 94.596027][ T43] usb 1-1: Manufacturer: syz [ 94.596040][ T43] usb 1-1: SerialNumber: syz [ 94.814731][ T43] usb 1-1: config 0 descriptor?? [ 95.205566][ T1551] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.205589][ T1551] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.372632][ T43] uvcvideo 1-1:0.64: probe with driver uvcvideo failed with error -22 [ 96.785350][ T871] usb 1-1: USB disconnect, device number 2 [ 98.002437][ T5823] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 98.237057][ T5823] usb 2-1: config 0 has an invalid interface number: 64 but max is 0 [ 98.237084][ T5823] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 98.237101][ T5823] usb 2-1: config 0 has no interface number 0 [ 98.318904][ T5991] netlink: 28 bytes leftover after parsing attributes in process `syz.2.23'. [ 98.361540][ T5991] netlink: 28 bytes leftover after parsing attributes in process `syz.2.23'. [ 99.213274][ T5823] usb 2-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice= 0.07 [ 99.213305][ T5823] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.213325][ T5823] usb 2-1: Product: syz [ 99.213337][ T5823] usb 2-1: Manufacturer: syz [ 99.213349][ T5823] usb 2-1: SerialNumber: syz [ 99.284217][ T5823] usb 2-1: config 0 descriptor?? [ 99.892185][ T5823] uvcvideo 2-1:0.64: probe with driver uvcvideo failed with error -22 [ 100.780093][ T5823] usb 2-1: USB disconnect, device number 2 [ 101.875383][ T6028] netlink: 28 bytes leftover after parsing attributes in process `syz.2.35'. [ 101.938547][ T6028] netlink: 28 bytes leftover after parsing attributes in process `syz.2.35'. [ 104.047232][ T6057] Zero length message leads to an empty skb [ 104.244276][ T6064] netlink: 28 bytes leftover after parsing attributes in process `syz.2.47'. [ 104.246687][ T6064] netlink: 28 bytes leftover after parsing attributes in process `syz.2.47'. [ 105.308325][ T6066] capability: warning: `syz.2.50' uses deprecated v2 capabilities in a way that may be insecure [ 109.850939][ T6034] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 110.060183][ T6034] usb 2-1: config 0 has an invalid interface number: 64 but max is 0 [ 110.060211][ T6034] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 110.060227][ T6034] usb 2-1: config 0 has no interface number 0 [ 110.102527][ T6034] usb 2-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice= 0.07 [ 110.102556][ T6034] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.102575][ T6034] usb 2-1: Product: syz [ 110.102589][ T6034] usb 2-1: Manufacturer: syz [ 110.102603][ T6034] usb 2-1: SerialNumber: syz [ 110.225541][ T6034] usb 2-1: config 0 descriptor?? [ 110.786411][ T6034] uvcvideo 2-1:0.64: probe with driver uvcvideo failed with error -22 [ 111.678447][ T5818] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 111.705610][ T5818] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 111.707199][ T5818] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 111.716186][ T871] usb 2-1: USB disconnect, device number 3 [ 111.737967][ T5818] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 111.748655][ T5818] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 113.990982][ T5818] Bluetooth: hci5: command tx timeout [ 114.765832][ T6138] chnl_net:caif_netlink_parms(): no params data found [ 115.444604][ T6138] bridge0: port 1(bridge_slave_0) entered blocking state [ 115.451421][ T6138] bridge0: port 1(bridge_slave_0) entered disabled state [ 115.451657][ T6138] bridge_slave_0: entered allmulticast mode [ 115.481423][ T6138] bridge_slave_0: entered promiscuous mode [ 115.531522][ T6138] bridge0: port 2(bridge_slave_1) entered blocking state [ 115.531631][ T6138] bridge0: port 2(bridge_slave_1) entered disabled state [ 115.531855][ T6138] bridge_slave_1: entered allmulticast mode [ 115.534472][ T6138] bridge_slave_1: entered promiscuous mode [ 115.975065][ T6138] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 115.983446][ T6138] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 116.401279][ T5818] Bluetooth: hci5: command tx timeout [ 117.155020][ T6138] team0: Port device team_slave_0 added [ 117.964967][ T6138] team0: Port device team_slave_1 added [ 118.347672][ T6138] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 118.347698][ T6138] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 118.347723][ T6138] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 118.408973][ T6138] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 118.408990][ T6138] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 118.409016][ T6138] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 118.623838][ T5818] Bluetooth: hci5: command tx timeout [ 119.390852][ T9] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 119.856779][ T9] usb 2-1: config 0 has an invalid interface number: 64 but max is 0 [ 119.856805][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 119.856821][ T9] usb 2-1: config 0 has no interface number 0 [ 119.873332][ T9] usb 2-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice= 0.07 [ 119.873360][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.873378][ T9] usb 2-1: Product: syz [ 119.873392][ T9] usb 2-1: Manufacturer: syz [ 119.873409][ T9] usb 2-1: SerialNumber: syz [ 120.016024][ T9] usb 2-1: config 0 descriptor?? [ 120.115124][ T6228] netlink: 'syz.4.99': attribute type 6 has an invalid length. [ 120.239234][ T6138] hsr_slave_0: entered promiscuous mode [ 120.240573][ T6138] hsr_slave_1: entered promiscuous mode [ 120.253830][ T6138] debugfs: 'hsr0' already exists in 'hsr' [ 120.253855][ T6138] Cannot create hsr debugfs directory [ 120.440383][ T6232] netlink: 28 bytes leftover after parsing attributes in process `syz.4.100'. [ 120.518827][ T6233] netlink: 28 bytes leftover after parsing attributes in process `syz.4.100'. [ 120.641568][ T5818] Bluetooth: hci5: command tx timeout [ 121.256260][ T9] uvcvideo 2-1:0.64: probe with driver uvcvideo failed with error -22 [ 123.005570][ T6017] usb 2-1: USB disconnect, device number 4 [ 124.215469][ T13] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.590900][ T5897] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 124.744241][ T5897] usb 2-1: config 0 has an invalid interface number: 64 but max is 0 [ 124.744274][ T5897] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 124.744291][ T5897] usb 2-1: config 0 has no interface number 0 [ 124.747443][ T5897] usb 2-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice= 0.07 [ 124.747470][ T5897] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.747488][ T5897] usb 2-1: Product: syz [ 124.747501][ T5897] usb 2-1: Manufacturer: syz [ 124.747514][ T5897] usb 2-1: SerialNumber: syz [ 124.864888][ T5897] usb 2-1: config 0 descriptor?? [ 124.948893][ T13] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.291060][ T5897] uvcvideo 2-1:0.64: probe with driver uvcvideo failed with error -22 [ 125.598521][ T13] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.698931][ T13] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.036582][ T5897] usb 2-1: USB disconnect, device number 5 [ 127.704236][ T6307] netlink: 4 bytes leftover after parsing attributes in process `syz.0.129'. [ 128.247256][ T6307] netlink: 4 bytes leftover after parsing attributes in process `syz.0.129'. [ 129.968036][ T6138] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 130.020555][ T6138] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 130.210951][ T6138] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 130.279876][ T6138] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 130.289722][ T6138] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 130.478501][ T6138] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 130.602183][ T6138] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 130.740728][ T6138] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 131.058681][ T10] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 131.373819][ T10] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 131.857437][ T6373] fido_id[6373]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 131.965265][ T13] bridge_slave_1: left allmulticast mode [ 131.965384][ T13] bridge_slave_1: left promiscuous mode [ 132.045572][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 132.261978][ T6387] netlink: 8 bytes leftover after parsing attributes in process `syz.1.159'. [ 132.289735][ T13] bridge_slave_0: left allmulticast mode [ 132.289764][ T13] bridge_slave_0: left promiscuous mode [ 132.302925][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 132.877100][ T1335] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.877196][ T1335] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.002063][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 134.194624][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 134.215865][ T13] bond0 (unregistering): Released all slaves [ 134.335772][ T6387] bond0: Unable to set up delay as MII monitoring is disabled [ 134.337277][ T6390] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 136.908053][ T6405] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 137.004679][ T6405] binder: 6403:6405 ioctl c0306201 200000000080 returned -14 [ 137.027521][ T6405] binder: 6403:6405 ioctl 4018620d 0 returned -22 [ 137.027820][ T6405] binder: 6403:6405 ioctl c0306201 2000000003c0 returned -14 [ 137.751133][ T6424] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 137.866913][ T6138] 8021q: adding VLAN 0 to HW filter on device bond0 [ 138.289917][ T6138] 8021q: adding VLAN 0 to HW filter on device team0 [ 138.295526][ T6447] binder: 6443:6447 ioctl c0306201 200000000080 returned -14 [ 138.303404][ T6447] binder: 6443:6447 ioctl 4018620d 0 returned -22 [ 138.305221][ T6447] binder: 6443:6447 ioctl c0306201 2000000003c0 returned -14 [ 138.492026][ T1551] bridge0: port 1(bridge_slave_0) entered blocking state [ 138.492154][ T1551] bridge0: port 1(bridge_slave_0) entered forwarding state [ 139.204061][ T6159] bridge0: port 2(bridge_slave_1) entered blocking state [ 139.204238][ T6159] bridge0: port 2(bridge_slave_1) entered forwarding state [ 139.264180][ T5477] 8021q: adding VLAN 0 to HW filter on device eth1 [ 139.689723][ T6473] ======================================================= [ 139.689723][ T6473] WARNING: The mand mount option has been deprecated and [ 139.689723][ T6473] and is ignored by this kernel. Remove the mand [ 139.689723][ T6473] option from the mount to silence this warning. [ 139.689723][ T6473] ======================================================= [ 140.023791][ T13] hsr_slave_0: left promiscuous mode [ 140.082667][ T13] hsr_slave_1: left promiscuous mode [ 140.099293][ T6457] netlink: 20 bytes leftover after parsing attributes in process `syz.1.183'. [ 140.139404][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 140.139522][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 140.140078][ T6457] netlink: 36 bytes leftover after parsing attributes in process `syz.1.183'. [ 140.225967][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 140.225995][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 141.047335][ T13] veth1_macvtap: left promiscuous mode [ 141.047615][ T13] veth0_macvtap: left promiscuous mode [ 141.070229][ T6488] binder: 6487:6488 ioctl c0306201 200000000080 returned -14 [ 141.076553][ T13] veth1_vlan: left promiscuous mode [ 141.098830][ T13] veth0_vlan: left promiscuous mode [ 141.104714][ T6488] binder: 6487:6488 ioctl c0306201 0 returned -14 [ 142.785585][ T6502] syz.4.198 (6502) used greatest stack depth: 18880 bytes left [ 143.001507][ T13] team0 (unregistering): Port device team_slave_1 removed [ 143.101718][ T13] team0 (unregistering): Port device team_slave_0 removed [ 143.952756][ T6515] binder: 6513:6515 ioctl c0306201 200000000080 returned -14 [ 143.988545][ T6515] binder: 6513:6515 ioctl c0306201 0 returned -14 [ 145.168465][ T6138] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 146.152010][ T5477] 8021q: adding VLAN 0 to HW filter on device eth2 [ 146.296124][ T6571] binder: 6565:6571 ioctl c0306201 200000000080 returned -14 [ 146.310496][ T6571] binder: 6565:6571 ioctl c0306201 0 returned -14 [ 146.904739][ T6138] veth0_vlan: entered promiscuous mode [ 146.936959][ T6138] veth1_vlan: entered promiscuous mode [ 147.207554][ T6592] netlink: 12 bytes leftover after parsing attributes in process `syz.1.224'. [ 147.420149][ T6138] veth0_macvtap: entered promiscuous mode [ 147.444465][ T6138] veth1_macvtap: entered promiscuous mode [ 147.466079][ T6597] netlink: 4 bytes leftover after parsing attributes in process `syz.0.225'. [ 147.697337][ T6138] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 147.812121][ T6138] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 147.906651][ T146] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.907528][ T146] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.937322][ T146] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.939413][ T146] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.165489][ T5477] 8021q: adding VLAN 0 to HW filter on device eth3 [ 148.909966][ T1285] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 148.909987][ T1285] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 149.412107][ T146] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 149.412129][ T146] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 151.538590][ T6638] netlink: 12 bytes leftover after parsing attributes in process `syz.0.236'. [ 152.061862][ T6651] netlink: 12 bytes leftover after parsing attributes in process `syz.1.239'. [ 153.143858][ T5477] 8021q: adding VLAN 0 to HW filter on device eth4 [ 153.495481][ T6683] binder: 6682:6683 ioctl c0306201 200000000080 returned -14 [ 153.842838][ T6691] netlink: 12 bytes leftover after parsing attributes in process `syz.0.253'. [ 154.099536][ T6699] syz.0.255 uses obsolete (PF_INET,SOCK_PACKET) [ 159.764278][ T6017] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 161.339144][ T6736] binder: 6731:6736 ioctl c0306201 200000000080 returned -14 [ 165.628450][ T5815] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 165.654032][ T5815] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 165.660303][ T5815] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 165.663533][ T5815] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 165.665219][ T5815] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 166.574842][ T6774] binder: BINDER_SET_CONTEXT_MGR already set [ 166.574858][ T6774] binder: 6773:6774 ioctl 4018620d 200000000040 returned -16 [ 167.750854][ T5815] Bluetooth: hci1: command tx timeout [ 171.095850][ T5815] Bluetooth: hci1: command tx timeout [ 171.899136][ T6017] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 172.371028][ T6017] usb 3-1: device descriptor read/64, error -71 [ 172.419499][ T6752] chnl_net:caif_netlink_parms(): no params data found [ 172.700890][ T6017] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 172.774790][ T6814] binder: 6813:6814 ioctl c0306201 200000000080 returned -14 [ 172.831066][ T6017] usb 3-1: device descriptor read/64, error -71 [ 172.941427][ T6017] usb usb3-port1: attempt power cycle [ 173.113968][ T5815] Bluetooth: hci1: command tx timeout [ 175.197902][ T5815] Bluetooth: hci1: command tx timeout [ 175.979968][ T6860] binder: 6859:6860 ioctl c0306201 200000000080 returned -14 [ 175.992411][ T6860] binder: BINDER_SET_CONTEXT_MGR already set [ 175.992424][ T6860] binder: 6859:6860 ioctl 4018620d 200000000040 returned -16 [ 176.209589][ T1551] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.143710][ T871] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 179.005257][ T871] usb 1-1: device descriptor read/64, error -71 [ 180.628325][ T6892] syz.1.308 (6892) used greatest stack depth: 16040 bytes left [ 180.651881][ T1551] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.752421][ T6752] bridge0: port 1(bridge_slave_0) entered blocking state [ 180.752543][ T6752] bridge0: port 1(bridge_slave_0) entered disabled state [ 180.752777][ T6752] bridge_slave_0: entered allmulticast mode [ 180.777052][ T6752] bridge_slave_0: entered promiscuous mode [ 180.864961][ T6903] binder: 6902:6903 ioctl c0306201 200000000080 returned -14 [ 180.903160][ T6903] binder: 6902:6903 ioctl c0306201 2000000003c0 returned -14 [ 180.903387][ T6903] binder: 6902:6903 ioctl c0306201 0 returned -14 [ 183.974373][ T1551] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.985903][ T36] audit: type=1326 audit(1776701704.110:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6917 comm="syz.1.315" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5d2283c819 code=0x0 [ 183.994213][ T6918] netlink: 36 bytes leftover after parsing attributes in process `syz.5.314'. [ 183.994236][ T6918] netlink: 16 bytes leftover after parsing attributes in process `syz.5.314'. [ 183.994363][ T6918] netlink: 36 bytes leftover after parsing attributes in process `syz.5.314'. [ 184.342252][ T6752] bridge0: port 2(bridge_slave_1) entered blocking state [ 184.342377][ T6752] bridge0: port 2(bridge_slave_1) entered disabled state [ 184.342661][ T6752] bridge_slave_1: entered allmulticast mode [ 184.391084][ T6752] bridge_slave_1: entered promiscuous mode [ 184.391245][ T10] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 184.634304][ T6752] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 184.657166][ T6752] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 185.255850][ T1551] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.323400][ T6944] netlink: 28 bytes leftover after parsing attributes in process `syz.5.321'. [ 185.330434][ T6945] netlink: 'syz.0.322': attribute type 8 has an invalid length. [ 185.330455][ T6945] netlink: 4 bytes leftover after parsing attributes in process `syz.0.322'. [ 185.383734][ T6752] team0: Port device team_slave_0 added [ 185.387953][ T6752] team0: Port device team_slave_1 added [ 185.800350][ T6752] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 185.800367][ T6752] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 185.800391][ T6752] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 185.810651][ T6752] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 185.810667][ T6752] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 185.810690][ T6752] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 186.233499][ T6752] hsr_slave_0: entered promiscuous mode [ 186.238514][ T6752] hsr_slave_1: entered promiscuous mode [ 186.248045][ T6752] debugfs: 'hsr0' already exists in 'hsr' [ 186.248072][ T6752] Cannot create hsr debugfs directory [ 186.324617][ T6971] netlink: 4 bytes leftover after parsing attributes in process `syz.5.331'. [ 186.519634][ T6976] netlink: 8 bytes leftover after parsing attributes in process `syz.1.329'. [ 186.541804][ T6973] netlink: 4 bytes leftover after parsing attributes in process `syz.5.331'. [ 186.558641][ T36] audit: type=1326 audit(1776701706.660:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6965 comm="syz.1.329" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5d2283c819 code=0x0 [ 188.287415][ T7008] netlink: 28 bytes leftover after parsing attributes in process `syz.0.342'. [ 188.952876][ T1551] bridge_slave_1: left allmulticast mode [ 188.952905][ T1551] bridge_slave_1: left promiscuous mode [ 188.953148][ T1551] bridge0: port 2(bridge_slave_1) entered disabled state [ 189.076029][ T1551] bridge_slave_0: left allmulticast mode [ 189.076057][ T1551] bridge_slave_0: left promiscuous mode [ 189.076660][ T1551] bridge0: port 1(bridge_slave_0) entered disabled state [ 191.682809][ T7046] netlink: 28 bytes leftover after parsing attributes in process `syz.2.353'. [ 191.700431][ T1551] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 191.751713][ T1551] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 191.775391][ T1551] bond0 (unregistering): Released all slaves [ 194.189599][ T7102] netlink: 8 bytes leftover after parsing attributes in process `syz.0.370'. [ 194.234261][ T5477] 8021q: adding VLAN 0 to HW filter on device eth5 [ 194.322941][ T1335] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.322999][ T1335] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.575951][ T7106] netlink: 28 bytes leftover after parsing attributes in process `syz.0.372'. [ 194.883902][ T1551] hsr_slave_0: left promiscuous mode [ 194.934997][ T1551] hsr_slave_1: left promiscuous mode [ 194.936056][ T1551] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 194.936076][ T1551] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 194.982212][ T1551] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 194.982239][ T1551] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 195.314772][ T1551] veth1_macvtap: left promiscuous mode [ 195.314877][ T1551] veth0_macvtap: left promiscuous mode [ 195.316572][ T1551] veth1_vlan: left promiscuous mode [ 195.316711][ T1551] veth0_vlan: left promiscuous mode [ 195.456012][ T7114] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 195.719093][ T7123] netlink: 20 bytes leftover after parsing attributes in process `syz.2.381'. [ 195.964018][ T7127] netlink: 28 bytes leftover after parsing attributes in process `syz.2.382'. [ 196.156890][ T7128] netlink: 28 bytes leftover after parsing attributes in process `syz.2.382'. [ 197.010014][ T7131] netlink: 8 bytes leftover after parsing attributes in process `syz.1.380'. [ 197.351672][ T1551] team0 (unregistering): Port device team_slave_1 removed [ 197.402506][ T1551] team0 (unregistering): Port device team_slave_0 removed [ 197.926492][ T6752] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 198.048985][ T6752] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 198.050213][ T6752] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 198.173961][ T6752] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 198.174909][ T6752] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 198.256036][ T7149] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 198.289261][ T6752] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 198.327305][ T6752] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 198.455533][ T36] audit: type=1326 audit(1776701718.560:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7146 comm="syz.1.389" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5d2283c819 code=0x0 [ 198.497703][ T7157] netlink: 20 bytes leftover after parsing attributes in process `syz.5.391'. [ 198.502446][ T6752] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 198.503040][ T7153] netlink: 8 bytes leftover after parsing attributes in process `syz.1.389'. [ 198.666845][ T7170] netlink: 28 bytes leftover after parsing attributes in process `syz.0.393'. [ 198.726700][ T7171] netlink: 28 bytes leftover after parsing attributes in process `syz.0.393'. [ 199.766747][ T7180] netlink: 4 bytes leftover after parsing attributes in process `syz.5.395'. [ 202.232365][ T6752] 8021q: adding VLAN 0 to HW filter on device bond0 [ 202.469944][ T6752] 8021q: adding VLAN 0 to HW filter on device team0 [ 202.634597][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 202.634713][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 202.738628][ T1025] bridge0: port 2(bridge_slave_1) entered blocking state [ 202.738756][ T1025] bridge0: port 2(bridge_slave_1) entered forwarding state [ 202.889350][ T5477] 8021q: adding VLAN 0 to HW filter on device eth6 [ 203.302665][ T7233] netlink: 4 bytes leftover after parsing attributes in process `syz.0.412'. [ 205.067176][ T6752] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 205.073397][ T7268] netlink: 4 bytes leftover after parsing attributes in process `syz.0.420'. [ 205.573578][ T7284] netlink: 4 bytes leftover after parsing attributes in process `syz.1.425'. [ 206.711140][ T5826] Bluetooth: hci0: command 0x0406 tx timeout [ 206.717314][ T5826] Bluetooth: hci4: command 0x0406 tx timeout [ 206.717575][ T5826] Bluetooth: hci3: command 0x0406 tx timeout [ 207.387094][ T7321] netlink: 4 bytes leftover after parsing attributes in process `syz.2.437'. [ 208.555838][ T5477] 8021q: adding VLAN 0 to HW filter on device eth7 [ 208.687492][ T6752] veth0_vlan: entered promiscuous mode [ 208.740651][ T6752] veth1_vlan: entered promiscuous mode [ 208.964367][ T6752] veth0_macvtap: entered promiscuous mode [ 209.004926][ T6752] veth1_macvtap: entered promiscuous mode [ 209.028582][ T7310] netlink: 20 bytes leftover after parsing attributes in process `syz.1.432'. [ 209.133887][ T6752] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 210.315939][ T6752] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 210.382975][ T1855] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.546301][ T1025] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.567195][ T7355] tipc: Started in network mode [ 210.567226][ T7355] tipc: Node identity 8e2bfca16cad, cluster identity 4711 [ 210.627061][ T7355] tipc: Enabled bearer , priority 0 [ 210.646192][ T1025] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.724608][ T1025] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.810684][ T7350] +: renamed from syzkaller0 [ 210.884274][ T7350] tipc: Disabling bearer [ 211.882433][ T7372] netlink: 4 bytes leftover after parsing attributes in process `syz.0.449'. [ 211.906705][ T7364] tipc: Enabling of bearer rejected, failed to enable media [ 211.948142][ T6017] tipc: Node number set to 3800497313 [ 212.429427][ T5477] 8021q: adding VLAN 0 to HW filter on device eth8 [ 213.475534][ T7407] tipc: Enabling of bearer rejected, failed to enable media [ 213.533192][ T1471] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 213.533212][ T1471] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 213.647388][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 213.647409][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 214.193757][ T7423] netlink: 4 bytes leftover after parsing attributes in process `syz.1.466'. [ 214.512753][ T7431] netlink: 52 bytes leftover after parsing attributes in process `syz.6.268'. [ 214.548647][ T7431] bridge0: port 2(bridge_slave_1) entered disabled state [ 214.550293][ T7431] bridge0: port 1(bridge_slave_0) entered disabled state [ 214.632612][ T7433] netlink: 'syz.1.469': attribute type 8 has an invalid length. [ 214.632631][ T7433] netlink: 4 bytes leftover after parsing attributes in process `syz.1.469'. [ 214.709828][ T7433] bond0: entered promiscuous mode [ 214.709852][ T7433] bond_slave_0: entered promiscuous mode [ 214.715056][ T7433] bond_slave_1: entered promiscuous mode [ 214.727486][ T7433] gretap0: entered promiscuous mode [ 214.736216][ T7433] hsr1: entered promiscuous mode [ 214.746539][ T7435] tipc: Enabling of bearer rejected, failed to enable media [ 215.050950][ T43] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 215.224495][ T43] usb 7-1: config 0 has an invalid interface number: 64 but max is 0 [ 215.224523][ T43] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 215.224541][ T43] usb 7-1: config 0 has no interface number 0 [ 215.238109][ T43] usb 7-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice= 0.07 [ 215.238139][ T43] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 215.238156][ T43] usb 7-1: Product: syz [ 215.238168][ T43] usb 7-1: Manufacturer: syz [ 215.238180][ T43] usb 7-1: SerialNumber: syz [ 215.333459][ T43] usb 7-1: config 0 descriptor?? [ 216.819543][ T43] uvcvideo 7-1:0.64: probe with driver uvcvideo failed with error -22 [ 216.893719][ T43] usb 7-1: USB disconnect, device number 2 [ 217.341379][ T7471] netlink: 20 bytes leftover after parsing attributes in process `syz.5.476'. [ 218.680806][ T7502] netlink: 28 bytes leftover after parsing attributes in process `syz.6.492'. [ 218.697508][ T7502] netlink: 28 bytes leftover after parsing attributes in process `syz.6.492'. [ 219.799188][ T7513] binder: 7509:7513 ioctl c0306201 200000000080 returned -14 [ 219.810556][ T7513] binder: 7509:7513 ioctl c0306201 2000000003c0 returned -14 [ 219.828652][ T7517] netlink: 8 bytes leftover after parsing attributes in process `syz.0.494'. [ 219.853883][ T36] audit: type=1326 audit(1776701739.960:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7508 comm="syz.0.494" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f291db4c819 code=0x0 [ 219.977231][ T7523] netlink: 12 bytes leftover after parsing attributes in process `syz.6.499'. [ 221.683311][ T7547] netlink: 28 bytes leftover after parsing attributes in process `syz.5.507'. [ 221.685313][ T7547] netlink: 28 bytes leftover after parsing attributes in process `syz.5.507'. [ 222.617430][ T7558] binder: 7556:7558 ioctl c0306201 200000000080 returned -14 [ 222.647765][ T7557] binder: 7556:7557 ioctl c0306201 2000000003c0 returned -14 [ 223.137188][ T7570] netlink: 12 bytes leftover after parsing attributes in process `syz.0.514'. [ 223.944482][ T7592] netlink: 4 bytes leftover after parsing attributes in process `syz.1.524'. [ 223.985491][ T7598] netlink: 28 bytes leftover after parsing attributes in process `syz.5.523'. [ 224.043781][ T7600] netlink: 28 bytes leftover after parsing attributes in process `syz.5.523'. [ 224.357765][ T7605] binder: 7602:7605 ioctl c0306201 200000000080 returned -14 [ 224.450974][ T7605] binder: 7602:7605 ioctl c0306201 2000000003c0 returned -14 [ 224.788811][ T7615] netlink: 8 bytes leftover after parsing attributes in process `syz.1.529'. [ 225.029651][ T7623] netlink: 12 bytes leftover after parsing attributes in process `syz.5.531'. [ 227.678033][ T7666] netlink: 28 bytes leftover after parsing attributes in process `syz.5.542'. [ 227.679430][ T7666] netlink: 28 bytes leftover after parsing attributes in process `syz.5.542'. [ 228.520556][ T7680] netlink: 48 bytes leftover after parsing attributes in process `syz.0.547'. [ 228.527473][ T7680] netlink: 48 bytes leftover after parsing attributes in process `syz.0.547'. [ 230.634563][ T7693] netlink: 8 bytes leftover after parsing attributes in process `syz.0.551'. [ 230.769012][ T7704] netlink: 'syz.2.554': attribute type 8 has an invalid length. [ 230.769037][ T7704] netlink: 4 bytes leftover after parsing attributes in process `syz.2.554'. [ 230.856294][ T7704] bond0: entered promiscuous mode [ 230.856317][ T7704] bond_slave_0: entered promiscuous mode [ 230.856527][ T7704] bond_slave_1: entered promiscuous mode [ 230.865867][ T7704] gretap0: entered promiscuous mode [ 230.876055][ T7704] bridge0: entered promiscuous mode [ 230.894404][ T7704] debugfs: 'hsr1' already exists in 'hsr' [ 230.894432][ T7704] Cannot create hsr debugfs directory [ 230.894450][ T7704] hsr1: entered promiscuous mode [ 232.480984][ T31] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 232.664120][ T31] usb 3-1: config 0 has an invalid interface number: 64 but max is 0 [ 232.664147][ T31] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 232.664165][ T31] usb 3-1: config 0 has no interface number 0 [ 232.668975][ T31] usb 3-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice= 0.07 [ 232.669006][ T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 232.669031][ T31] usb 3-1: Product: syz [ 232.669044][ T31] usb 3-1: Manufacturer: syz [ 232.669058][ T31] usb 3-1: SerialNumber: syz [ 232.792962][ T31] usb 3-1: config 0 descriptor?? [ 233.161782][ T7755] netlink: 'syz.6.574': attribute type 8 has an invalid length. [ 233.161857][ T7755] netlink: 4 bytes leftover after parsing attributes in process `syz.6.574'. [ 234.092552][ T31] uvcvideo 3-1:0.64: probe with driver uvcvideo failed with error -22 [ 236.560153][ T31] usb 3-1: USB disconnect, device number 6 [ 236.621223][ T7755] bond0: entered promiscuous mode [ 236.621247][ T7755] bond_slave_0: entered promiscuous mode [ 236.621466][ T7755] bond_slave_1: entered promiscuous mode [ 237.099035][ T7755] gretap0: entered promiscuous mode [ 237.100560][ T7755] bridge0: entered promiscuous mode [ 237.101576][ T7755] debugfs: 'hsr1' already exists in 'hsr' [ 237.101601][ T7755] Cannot create hsr debugfs directory [ 237.101624][ T7755] hsr1: entered promiscuous mode [ 237.770790][ T5818] Bluetooth: hci5: command 0x0406 tx timeout [ 238.680899][ T7790] netlink: 8 bytes leftover after parsing attributes in process `syz.2.581'. [ 239.761769][ T31] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 239.954356][ T31] usb 3-1: config 0 has an invalid interface number: 64 but max is 0 [ 239.954383][ T31] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 239.954400][ T31] usb 3-1: config 0 has no interface number 0 [ 239.959980][ T31] usb 3-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice= 0.07 [ 239.960009][ T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 239.960040][ T31] usb 3-1: Product: syz [ 239.960054][ T31] usb 3-1: Manufacturer: syz [ 239.960068][ T31] usb 3-1: SerialNumber: syz [ 240.007590][ T31] usb 3-1: config 0 descriptor?? [ 240.427186][ T31] uvcvideo 3-1:0.64: probe with driver uvcvideo failed with error -22 [ 241.404880][ T7847] netlink: 8 bytes leftover after parsing attributes in process `syz.6.597'. [ 242.664587][ T7859] netlink: 8 bytes leftover after parsing attributes in process `syz.1.600'. [ 242.667305][ T36] audit: type=1326 audit(1776701762.790:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7853 comm="syz.1.600" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5d2283c819 code=0x0 [ 243.294383][ T7875] netlink: 72 bytes leftover after parsing attributes in process `syz.0.607'. [ 243.298407][ T7875] netlink: 220 bytes leftover after parsing attributes in process `syz.0.607'. [ 243.682881][ T9] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 243.798719][ T31] usb 3-1: USB disconnect, device number 7 [ 243.810909][ T9] usb 6-1: device descriptor read/64, error -71 [ 244.054087][ T9] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 244.230881][ T9] usb 6-1: device descriptor read/64, error -71 [ 244.341190][ T9] usb usb6-port1: attempt power cycle [ 244.680883][ T9] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 244.702929][ T9] usb 6-1: device descriptor read/8, error -71 [ 245.400887][ T9] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 245.422307][ T9] usb 6-1: device descriptor read/8, error -71 [ 245.541821][ T9] usb usb6-port1: unable to enumerate USB device [ 247.994213][ T7921] netlink: 28 bytes leftover after parsing attributes in process `syz.2.619'. [ 247.995902][ T7921] netlink: 28 bytes leftover after parsing attributes in process `syz.2.619'. [ 248.372541][ T10] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 248.496416][ T7925] netlink: 16 bytes leftover after parsing attributes in process `syz.5.623'. [ 248.532623][ T10] usb 7-1: config 0 has an invalid interface number: 64 but max is 0 [ 248.532651][ T10] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 248.532669][ T10] usb 7-1: config 0 has no interface number 0 [ 248.539005][ T10] usb 7-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice= 0.07 [ 248.539035][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 248.539053][ T10] usb 7-1: Product: syz [ 248.539066][ T10] usb 7-1: Manufacturer: syz [ 248.539085][ T10] usb 7-1: SerialNumber: syz [ 248.561438][ T10] usb 7-1: config 0 descriptor?? [ 248.995317][ T10] uvcvideo 7-1:0.64: probe with driver uvcvideo failed with error -22 [ 251.370893][ T10] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 251.672949][ T10] usb 2-1: config 0 has no interfaces? [ 251.675424][ T10] usb 2-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice= 0.07 [ 251.675453][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 251.675471][ T10] usb 2-1: Product: syz [ 251.675484][ T10] usb 2-1: Manufacturer: syz [ 251.675496][ T10] usb 2-1: SerialNumber: syz [ 251.761454][ T10] usb 2-1: config 0 descriptor?? [ 252.085521][ T871] usb 7-1: USB disconnect, device number 3 [ 252.170447][ T7979] netlink: 28 bytes leftover after parsing attributes in process `syz.0.640'. [ 252.188118][ T7979] netlink: 28 bytes leftover after parsing attributes in process `syz.0.640'. [ 254.209708][ T871] usb 2-1: USB disconnect, device number 6 [ 255.261502][ T8020] netlink: 28 bytes leftover after parsing attributes in process `syz.0.652'. [ 255.270999][ T8020] netlink: 28 bytes leftover after parsing attributes in process `syz.0.652'. [ 256.810919][ T1335] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.810989][ T1335] ieee802154 phy1 wpan1: encryption failed: -22 [ 258.121188][ T31] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 258.287468][ T31] usb 2-1: config 0 has an invalid interface number: 64 but max is 0 [ 258.287506][ T31] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 258.287524][ T31] usb 2-1: config 0 has no interface number 0 [ 258.386226][ T31] usb 2-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice= 0.07 [ 258.386255][ T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 258.386274][ T31] usb 2-1: Product: syz [ 258.386286][ T31] usb 2-1: Manufacturer: syz [ 258.386298][ T31] usb 2-1: SerialNumber: syz [ 258.427405][ T31] usb 2-1: config 0 descriptor?? [ 259.975927][ T31] usb 2-1: USB disconnect, device number 7 [ 260.174202][ T8074] netlink: 28 bytes leftover after parsing attributes in process `syz.0.671'. [ 260.185503][ T8074] netlink: 28 bytes leftover after parsing attributes in process `syz.0.671'. [ 262.311234][ T31] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 262.498158][ T31] usb 6-1: config 0 has no interfaces? [ 262.509508][ T31] usb 6-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice= 0.07 [ 262.509537][ T31] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 262.509555][ T31] usb 6-1: Product: syz [ 262.509568][ T31] usb 6-1: Manufacturer: syz [ 262.509582][ T31] usb 6-1: SerialNumber: syz [ 262.588091][ T31] usb 6-1: config 0 descriptor?? [ 264.650883][ T10] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 264.819520][ T10] usb 7-1: config 0 has an invalid interface number: 64 but max is 0 [ 264.819548][ T10] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 264.819566][ T10] usb 7-1: config 0 has no interface number 0 [ 264.824634][ T10] usb 7-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice= 0.07 [ 264.824661][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 264.824692][ T10] usb 7-1: Product: syz [ 264.824706][ T10] usb 7-1: Manufacturer: syz [ 264.824719][ T10] usb 7-1: SerialNumber: syz [ 264.933599][ T8118] netlink: 20 bytes leftover after parsing attributes in process `syz.2.684'. [ 264.993226][ T10] usb 7-1: config 0 descriptor?? [ 265.427497][ T8124] netlink: 28 bytes leftover after parsing attributes in process `syz.2.689'. [ 265.639758][ T10] usb 6-1: USB disconnect, device number 6 [ 268.530405][ T8153] netlink: 80 bytes leftover after parsing attributes in process `syz.5.698'. [ 268.580992][ T43] usb 7-1: USB disconnect, device number 4 [ 269.241490][ T8160] netlink: 28 bytes leftover after parsing attributes in process `syz.6.701'. [ 271.255679][ T8182] netlink: 80 bytes leftover after parsing attributes in process `syz.0.709'. [ 271.765822][ T6753] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 272.137480][ T6753] usb 7-1: config 0 has an invalid interface number: 64 but max is 0 [ 272.137507][ T6753] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 272.137522][ T6753] usb 7-1: config 0 has no interface number 0 [ 272.149418][ T6753] usb 7-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice= 0.07 [ 272.149448][ T6753] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 272.149466][ T6753] usb 7-1: Product: syz [ 272.149479][ T6753] usb 7-1: Manufacturer: syz [ 272.149492][ T6753] usb 7-1: SerialNumber: syz [ 272.899069][ T6753] usb 7-1: config 0 descriptor?? [ 276.605160][ T6753] usb 7-1: USB disconnect, device number 5 [ 286.650478][ T8352] netlink: 80 bytes leftover after parsing attributes in process `syz.2.770'. [ 286.724788][ T8349] netlink: 4 bytes leftover after parsing attributes in process `syz.1.768'. [ 286.727307][ T8349] netlink: 4 bytes leftover after parsing attributes in process `syz.1.768'. [ 288.620341][ T8383] netlink: 16 bytes leftover after parsing attributes in process `syz.1.782'. [ 288.633662][ T5818] Bluetooth: hci1: command 0x0406 tx timeout [ 288.748006][ T8387] netlink: 4 bytes leftover after parsing attributes in process `syz.5.783'. [ 289.645508][ T8392] netlink: 80 bytes leftover after parsing attributes in process `syz.2.784'. [ 290.726790][ T8417] netlink: 36 bytes leftover after parsing attributes in process `syz.5.795'. [ 290.726822][ T8417] netlink: 24 bytes leftover after parsing attributes in process `syz.5.795'. [ 290.969601][ T8420] netlink: 8 bytes leftover after parsing attributes in process `syz.0.796'. [ 291.148199][ T8424] netlink: 4 bytes leftover after parsing attributes in process `syz.5.798'. [ 291.370597][ T8428] bond0: entered promiscuous mode [ 291.370620][ T8428] bond_slave_0: entered promiscuous mode [ 291.384748][ T8428] bond_slave_1: entered promiscuous mode [ 291.411442][ T8428] gretap0: entered promiscuous mode [ 291.416580][ T8428] debugfs: 'hsr1' already exists in 'hsr' [ 291.416607][ T8428] Cannot create hsr debugfs directory [ 291.416628][ T8428] hsr1: entered promiscuous mode [ 293.651828][ T8456] __nla_validate_parse: 2 callbacks suppressed [ 293.651848][ T8456] netlink: 4 bytes leftover after parsing attributes in process `syz.5.811'. [ 293.731235][ T8457] netlink: 8 bytes leftover after parsing attributes in process `syz.2.810'. [ 293.760490][ T36] audit: type=1326 audit(1776701813.880:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8453 comm="syz.2.810" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd734e8c819 code=0x0 [ 296.544620][ T8491] netlink: 4 bytes leftover after parsing attributes in process `syz.0.822'. [ 297.690959][ T9] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 297.842930][ T9] usb 6-1: config 0 has no interfaces? [ 297.845308][ T9] usb 6-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice= 0.07 [ 297.845334][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 297.845351][ T9] usb 6-1: Product: syz [ 297.845364][ T9] usb 6-1: Manufacturer: syz [ 297.845377][ T9] usb 6-1: SerialNumber: syz [ 297.905165][ T9] usb 6-1: config 0 descriptor?? [ 299.194587][ T9] usb 6-1: USB disconnect, device number 7 [ 299.861634][ T10] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 300.010885][ T10] usb 3-1: device descriptor read/64, error -71 [ 300.250887][ T10] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 300.470356][ T10] usb 3-1: device descriptor read/64, error -71 [ 300.571398][ T10] usb usb3-port1: attempt power cycle [ 300.639658][ T8537] netlink: 36 bytes leftover after parsing attributes in process `syz.0.838'. [ 301.350874][ T10] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 301.371368][ T10] usb 3-1: device descriptor read/8, error -71 [ 301.611217][ T10] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 301.634106][ T10] usb 3-1: device descriptor read/8, error -71 [ 301.741579][ T10] usb usb3-port1: unable to enumerate USB device [ 303.291899][ T8565] netlink: 36 bytes leftover after parsing attributes in process `syz.5.851'. [ 306.020176][ T59] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 306.029378][ T59] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 306.057743][ T59] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 306.102628][ T59] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 306.103331][ T59] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 308.311667][ T5818] Bluetooth: hci2: command tx timeout [ 310.008888][ T1025] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 310.256128][ T8643] Illegal XDP return value 4294967294 on prog (id 23) dev N/A, expect packet loss! [ 310.390894][ T5818] Bluetooth: hci2: command tx timeout [ 310.470587][ T8593] chnl_net:caif_netlink_parms(): no params data found [ 311.581561][ T1025] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.717560][ T8662] syz.2.886 (8662) used greatest stack depth: 15624 bytes left [ 312.462170][ T1025] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.470892][ T5818] Bluetooth: hci2: command tx timeout [ 312.541951][ T8593] bridge0: port 1(bridge_slave_0) entered blocking state [ 312.542113][ T8593] bridge0: port 1(bridge_slave_0) entered disabled state [ 312.554977][ T8593] bridge_slave_0: entered allmulticast mode [ 312.561212][ T8593] bridge_slave_0: entered promiscuous mode [ 312.643138][ T8593] bridge0: port 2(bridge_slave_1) entered blocking state [ 312.643230][ T8593] bridge0: port 2(bridge_slave_1) entered disabled state [ 312.643439][ T8593] bridge_slave_1: entered allmulticast mode [ 312.653733][ T8593] bridge_slave_1: entered promiscuous mode [ 312.880872][ T36] audit: type=1326 audit(1776701833.000:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8686 comm="syz.2.896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd734e8c819 code=0x7ffc0000 [ 312.880921][ T36] audit: type=1326 audit(1776701833.000:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8686 comm="syz.2.896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd734e8c819 code=0x7ffc0000 [ 312.885591][ T36] audit: type=1326 audit(1776701833.010:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8686 comm="syz.2.896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd734e8c819 code=0x7ffc0000 [ 312.888796][ T36] audit: type=1326 audit(1776701833.010:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8686 comm="syz.2.896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=26 compat=0 ip=0x7fd734e8c819 code=0x7ffc0000 [ 312.888841][ T36] audit: type=1326 audit(1776701833.010:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8686 comm="syz.2.896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd734e8c819 code=0x7ffc0000 [ 312.888876][ T36] audit: type=1326 audit(1776701833.010:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8686 comm="syz.2.896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd734e8c819 code=0x7ffc0000 [ 312.890149][ T36] audit: type=1326 audit(1776701833.010:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8686 comm="syz.2.896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd734e8c819 code=0x7ffc0000 [ 312.890194][ T36] audit: type=1326 audit(1776701833.010:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8686 comm="syz.2.896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fd734e8c819 code=0x7ffc0000 [ 312.890227][ T36] audit: type=1326 audit(1776701833.010:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8686 comm="syz.2.896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fd734e8c819 code=0x7ffc0000 [ 313.418945][ T1025] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.562877][ T8593] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 313.601586][ T8593] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 313.860273][ T8593] team0: Port device team_slave_0 added [ 313.905908][ T8593] team0: Port device team_slave_1 added [ 314.316447][ T8593] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 314.316465][ T8593] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 314.316490][ T8593] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 314.324564][ T8593] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 314.324581][ T8593] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 314.324605][ T8593] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 314.557033][ T5818] Bluetooth: hci2: command tx timeout [ 314.733343][ T8593] hsr_slave_0: entered promiscuous mode [ 314.741825][ T8593] hsr_slave_1: entered promiscuous mode [ 314.748376][ T8593] debugfs: 'hsr0' already exists in 'hsr' [ 314.748403][ T8593] Cannot create hsr debugfs directory [ 315.372984][ T8713] netlink: 36 bytes leftover after parsing attributes in process `syz.0.908'. [ 315.549534][ T8716] netlink: 32 bytes leftover after parsing attributes in process `syz.2.909'. [ 315.846408][ T8720] netlink: 88 bytes leftover after parsing attributes in process `syz.5.911'. [ 316.901021][ T6017] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 316.938939][ T8743] netlink: 16 bytes leftover after parsing attributes in process `syz.5.920'. [ 316.965761][ T1025] bridge_slave_1: left allmulticast mode [ 316.965791][ T1025] bridge_slave_1: left promiscuous mode [ 316.966044][ T1025] bridge0: port 2(bridge_slave_1) entered disabled state [ 317.065801][ T1025] bridge_slave_0: left allmulticast mode [ 317.065844][ T1025] bridge_slave_0: left promiscuous mode [ 317.066136][ T1025] bridge0: port 1(bridge_slave_0) entered disabled state [ 317.079325][ T6017] usb 3-1: config 0 has an invalid interface number: 64 but max is 0 [ 317.079352][ T6017] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 317.079370][ T6017] usb 3-1: config 0 has no interface number 0 [ 317.084030][ T6017] usb 3-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice= 0.07 [ 317.084057][ T6017] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 317.084075][ T6017] usb 3-1: Product: syz [ 317.084088][ T6017] usb 3-1: Manufacturer: syz [ 317.084100][ T6017] usb 3-1: SerialNumber: syz [ 317.146099][ T6017] usb 3-1: config 0 descriptor?? [ 317.196515][ T1335] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.196583][ T1335] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.032810][ T1025] gretap0 (unregistering): left promiscuous mode [ 319.292516][ T1025] bond0 (unregistering): left promiscuous mode [ 319.292540][ T1025] bond_slave_0: left promiscuous mode [ 319.292809][ T1025] bond_slave_1: left promiscuous mode [ 319.388627][ T1025] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 319.423307][ T1025] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 319.451542][ T1025] bond0 (unregistering): Released all slaves [ 319.694066][ T8743] bond0: entered promiscuous mode [ 319.694089][ T8743] bond_slave_0: entered promiscuous mode [ 319.695472][ T8743] bond_slave_1: entered promiscuous mode [ 319.700403][ T8743] gretap0: entered promiscuous mode [ 319.719188][ T8743] hsr1: entered promiscuous mode [ 320.223573][ T6017] usb 3-1: USB disconnect, device number 12 [ 323.141660][ T1025] hsr_slave_0: left promiscuous mode [ 323.161128][ T1025] hsr_slave_1: left promiscuous mode [ 323.162135][ T1025] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 323.162159][ T1025] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 323.181807][ T1025] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 323.181833][ T1025] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 323.275104][ T1025] veth1_macvtap: left promiscuous mode [ 323.275218][ T1025] veth0_macvtap: left promiscuous mode [ 323.275461][ T1025] veth1_vlan: left promiscuous mode [ 323.275627][ T1025] veth0_vlan: left promiscuous mode [ 324.199690][ T1025] team0 (unregistering): Port device team_slave_1 removed [ 324.351663][ T1025] team0 (unregistering): Port device team_slave_0 removed [ 324.808505][ T5477] 8021q: adding VLAN 0 to HW filter on device eth9 [ 324.947340][ T8840] netlink: 16 bytes leftover after parsing attributes in process `syz.2.954'. [ 325.154552][ T8848] netlink: 220 bytes leftover after parsing attributes in process `syz.5.957'. [ 325.395376][ T8593] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 325.531648][ T8593] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 325.532559][ T8593] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 325.695684][ T8593] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 325.706515][ T8593] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 325.894279][ T8593] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 325.916171][ T8593] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 326.025965][ T8593] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 326.151178][ T6017] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 326.160720][ T5477] 8021q: adding VLAN 0 to HW filter on device eth10 [ 326.332809][ T6017] usb 6-1: config 0 has an invalid interface number: 64 but max is 0 [ 326.332837][ T6017] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 326.332852][ T6017] usb 6-1: config 0 has no interface number 0 [ 326.339300][ T6017] usb 6-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice= 0.07 [ 326.339327][ T6017] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 326.339359][ T6017] usb 6-1: Product: syz [ 326.339373][ T6017] usb 6-1: Manufacturer: syz [ 326.339384][ T6017] usb 6-1: SerialNumber: syz [ 326.350435][ T6017] usb 6-1: config 0 descriptor?? [ 326.793885][ T8897] netlink: 28 bytes leftover after parsing attributes in process `syz.2.968'. [ 327.611794][ T6017] uvcvideo 6-1:0.64: probe with driver uvcvideo failed with error -22 [ 327.729968][ T6017] usb 6-1: USB disconnect, device number 8 [ 328.047684][ T8593] 8021q: adding VLAN 0 to HW filter on device bond0 [ 328.162656][ T5871] ================================================================== [ 328.162671][ T5871] BUG: KASAN: vmalloc-out-of-bounds in __list_del_entry_valid_or_report+0xb5/0x190 [ 328.162711][ T5871] Read of size 8 at addr ffffc900102ce008 by task kworker/0:3/5871 [ 328.162726][ T5871] [ 328.162754][ T5871] CPU: 0 UID: 0 PID: 5871 Comm: kworker/0:3 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 328.162801][ T5871] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 328.162814][ T5871] Workqueue: usb_hub_wq hub_event [ 328.162854][ T5871] Call Trace: [ 328.162861][ T5871] [ 328.162868][ T5871] dump_stack_lvl+0xe8/0x150 [ 328.162901][ T5871] print_address_description+0x55/0x1e0 [ 328.162929][ T5871] ? __list_del_entry_valid_or_report+0xb5/0x190 [ 328.162948][ T5871] print_report+0x58/0x70 [ 328.162973][ T5871] kasan_report+0x117/0x150 [ 328.162992][ T5871] ? __list_del_entry_valid_or_report+0xb5/0x190 [ 328.163015][ T5871] __list_del_entry_valid_or_report+0xb5/0x190 [ 328.163036][ T5871] kcov_remote_start+0x2af/0x710 [ 328.163066][ T5871] hub_event+0x150/0x4f60 [ 328.163094][ T5871] ? do_raw_spin_lock+0x12b/0x2f0 [ 328.163114][ T5871] ? __lock_acquire+0x6b5/0x2cf0 [ 328.163133][ T5871] ? look_up_lock_class+0x57/0x110 [ 328.163163][ T5871] ? __lock_acquire+0x6b5/0x2cf0 [ 328.163184][ T5871] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 328.163211][ T5871] ? lock_acquire+0x106/0x350 [ 328.163231][ T5871] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 328.163250][ T5871] ? __pfx_hub_event+0x10/0x10 [ 328.163278][ T5871] ? process_scheduled_works+0xa70/0x1860 [ 328.163315][ T5871] ? process_scheduled_works+0xa70/0x1860 [ 328.163339][ T5871] ? process_scheduled_works+0xa70/0x1860 [ 328.163367][ T5871] process_scheduled_works+0xb5d/0x1860 [ 328.163401][ T5871] ? __pfx_process_scheduled_works+0x10/0x10 [ 328.163430][ T5871] ? assign_work+0x3d5/0x5e0 [ 328.163458][ T5871] worker_thread+0xa53/0xfc0 [ 328.163486][ T5871] kthread+0x388/0x470 [ 328.163505][ T5871] ? __pfx_worker_thread+0x10/0x10 [ 328.163520][ T5871] ? __pfx_kthread+0x10/0x10 [ 328.163541][ T5871] ret_from_fork+0x514/0xb70 [ 328.163559][ T5871] ? __pfx_ret_from_fork+0x10/0x10 [ 328.163575][ T5871] ? __switch_to+0xc79/0x1410 [ 328.163607][ T5871] ? __pfx_kthread+0x10/0x10 [ 328.163629][ T5871] ret_from_fork_asm+0x1a/0x30 [ 328.163657][ T5871] [ 328.163664][ T5871] [ 328.163668][ T5871] The buggy address belongs to a vmalloc virtual mapping [ 328.163683][ T5871] Memory state around the buggy address: [ 328.163693][ T5871] ffffc900102cdf00: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 328.163704][ T5871] ffffc900102cdf80: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 328.163721][ T5871] >ffffc900102ce000: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 328.163730][ T5871] ^ [ 328.163740][ T5871] ffffc900102ce080: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 328.163752][ T5871] ffffc900102ce100: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 328.163760][ T5871] ================================================================== [ 328.163784][ T5871] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 328.163796][ T5871] CPU: 0 UID: 0 PID: 5871 Comm: kworker/0:3 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 328.163816][ T5871] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 328.163827][ T5871] Workqueue: usb_hub_wq hub_event [ 328.163856][ T5871] Call Trace: [ 328.163863][ T5871] [ 328.163870][ T5871] vpanic+0x56c/0xa60 [ 328.163889][ T5871] ? __pfx_vpanic+0x10/0x10 [ 328.163910][ T5871] panic+0xc5/0xd0 [ 328.163927][ T5871] ? __pfx_panic+0x10/0x10 [ 328.163942][ T5871] ? __list_del_entry_valid_or_report+0xb5/0x190 [ 328.163965][ T5871] ? __list_del_entry_valid_or_report+0xb5/0x190 [ 328.163985][ T5871] check_panic_on_warn+0x89/0xb0 [ 328.164008][ T5871] ? __list_del_entry_valid_or_report+0xb5/0x190 [ 328.164027][ T5871] end_report+0x73/0x170 [ 328.164044][ T5871] ? __list_del_entry_valid_or_report+0xb5/0x190 [ 328.164063][ T5871] kasan_report+0x128/0x150 [ 328.164081][ T5871] ? __list_del_entry_valid_or_report+0xb5/0x190 [ 328.164106][ T5871] __list_del_entry_valid_or_report+0xb5/0x190 [ 328.164127][ T5871] kcov_remote_start+0x2af/0x710 [ 328.164157][ T5871] hub_event+0x150/0x4f60 [ 328.164185][ T5871] ? do_raw_spin_lock+0x12b/0x2f0 [ 328.164205][ T5871] ? __lock_acquire+0x6b5/0x2cf0 [ 328.164223][ T5871] ? look_up_lock_class+0x57/0x110 [ 328.164253][ T5871] ? __lock_acquire+0x6b5/0x2cf0 [ 328.164276][ T5871] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 328.164312][ T5871] ? lock_acquire+0x106/0x350 [ 328.164333][ T5871] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 328.164352][ T5871] ? __pfx_hub_event+0x10/0x10 [ 328.164379][ T5871] ? process_scheduled_works+0xa70/0x1860 [ 328.164408][ T5871] ? process_scheduled_works+0xa70/0x1860 [ 328.164433][ T5871] ? process_scheduled_works+0xa70/0x1860 [ 328.164460][ T5871] process_scheduled_works+0xb5d/0x1860 [ 328.164499][ T5871] ? __pfx_process_scheduled_works+0x10/0x10 [ 328.164537][ T5871] ? assign_work+0x3d5/0x5e0 [ 328.164566][ T5871] worker_thread+0xa53/0xfc0 [ 328.164595][ T5871] kthread+0x388/0x470 [ 328.164616][ T5871] ? __pfx_worker_thread+0x10/0x10 [ 328.164632][ T5871] ? __pfx_kthread+0x10/0x10 [ 328.164654][ T5871] ret_from_fork+0x514/0xb70 [ 328.164672][ T5871] ? __pfx_ret_from_fork+0x10/0x10 [ 328.164689][ T5871] ? __switch_to+0xc79/0x1410 [ 328.164716][ T5871] ? __pfx_kthread+0x10/0x10 [ 328.164737][ T5871] ret_from_fork_asm+0x1a/0x30 [ 328.164765][ T5871] [ 328.165626][ T5871] Kernel Offset: disabled