last executing test programs: 2.592710848s ago: executing program 0 (id=861): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x3c, r1, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x28, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8a}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}]}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48c05}, 0x4040140) 2.55087517s ago: executing program 0 (id=862): epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)) socket$netlink(0x10, 0x3, 0x8000000004) pipe(&(0x7f0000000080)) epoll_create1(0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x14}, [@ldst={0x2, 0x0, 0x3, 0x1c10a1, 0x0, 0xc}], {0x95, 0x0, 0x9}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x85}, 0x52) socket$inet6_tcp(0xa, 0x1, 0x0) socket$alg(0x26, 0x5, 0x0) socket$alg(0x26, 0x5, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x2, 0x80805, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000d40)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r0}, &(0x7f00000004c0), &(0x7f0000000500)=r1}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r1, r3, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x66, &(0x7f0000000880)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x33}, @broadcast, @void, {@mpls_uc={0x8847, {[], @ipv4=@gre={{0x5, 0x4, 0x1, 0x5, 0x58, 0x65, 0x0, 0x8, 0x2f, 0x0, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}}, {{0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x1}, {0x1, 0x0, 0x1, 0x1}, {0x8, 0x88be, 0x3, {{0x7, 0x1, 0x9, 0x0, 0x1, 0x2, 0x2, 0xb}, 0x1, {0x2}}}, {0x8, 0x22eb, 0x4, {{0x6, 0x2, 0x6, 0x3, 0x1, 0x1, 0x4, 0x2e}, 0x2, {0x5, 0x5, 0x3, 0x7, 0x1, 0x1, 0x2, 0x1, 0x1}}}, {0x8, 0x6558, 0x1}}}}}}}, 0x0) 2.412561697s ago: executing program 0 (id=866): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1.839715186s ago: executing program 2 (id=873): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r1, 0x0, 0x20040084) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000022c0)=@newtfilter={0x48, 0x2c, 0xd3f, 0x30bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0xb, 0xfff3}, {}, {0x8, 0x300}}, [@filter_kind_options=@f_matchall={{0xd}, {0x14, 0x2, [@TCA_MATCHALL_ACT={0x4}, @TCA_MATCHALL_ACT={0x4}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0xa, 0xa}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r4, &(0x7f0000000140)={&(0x7f0000000300)=@xdp={0x2c, 0x0, r6, 0x11}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="27032400000214000e00002fb96dffff1144ee163cddcb000000800000827600000000000000", 0x26}, {&(0x7f0000000780)="f058050000007f8f", 0x8}], 0x2}, 0x5) 1.522037372s ago: executing program 3 (id=876): bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000010000000000000000000000711217000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cgroup.controllers\x00', 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000240000002400000002000000000000000000000d0a0000000000000000000006040098"], &(0x7f0000000f40)=""/4088, 0x3e, 0xff8, 0x1}, 0x28) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) recvmmsg(r2, &(0x7f00000040c0)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x2102, &(0x7f00000042c0)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r4, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r6, 0x400448c9, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r5, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) sendmsg$NL80211_CMD_RELOAD_REGDB(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x14, r1, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) 1.420588317s ago: executing program 2 (id=878): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=@newtfilter={0x44, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbf9, {0x0, 0x0, 0x0, r6, {0xfff3, 0x8}, {}, {0x7, 0xc}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0x173ba}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r7) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r7, 0x8914, 0x0) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000500)=@xdp={0x2c, 0x7, r6, 0x3e}, 0x80, &(0x7f0000000640)=[{&(0x7f0000000180)='\'', 0x1}], 0x1}, 0x20004014) 1.343099571s ago: executing program 0 (id=880): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r1, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x6, 0x7}}]}}]}, 0x48}}, 0x4c840) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@newtfilter={0x44, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0xfff3, 0xfff3}, {0x0, 0xfff3}, {0x1, 0xa}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8847}, @TCA_FLOWER_KEY_MPLS_BOS={0x5, 0x44, 0x6}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) 1.253527256s ago: executing program 4 (id=881): socket(0x400000000010, 0x3, 0x0) write$tun(0xffffffffffffffff, 0x0, 0x0) socket$unix(0x1, 0x5, 0x0) socket$inet6(0xa, 0x805, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="190000"], 0x50) r0 = socket$kcm(0x10, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0e000000040000000400000002"], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={r1, &(0x7f0000000100), &(0x7f0000000000), 0x2}, 0x20) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0) 1.224400947s ago: executing program 0 (id=882): bind$netlink(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) syz_emit_vhci(&(0x7f0000000300)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0xa}, @hci_rp_pin_code_reply={{}, {0x3}}}}, 0xd) socket$inet_sctp(0x2, 0x1, 0x84) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) socket$alg(0x26, 0x5, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x40800) recvmsg(0xffffffffffffffff, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) 1.126730512s ago: executing program 4 (id=884): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, 0x0, 0x0) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) sendmmsg(r0, &(0x7f0000002b40)=[{{&(0x7f0000000000)=@tipc=@name={0x1e, 0x2, 0x2, {{0x43, 0x3}, 0x1}}, 0x80, 0x0}}], 0x1, 0x8000) recvmmsg$unix(r0, &(0x7f00000002c0)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000001c0)=""/211, 0xd3}], 0x1}}], 0x1, 0x40000100, 0x0) 1.100930313s ago: executing program 2 (id=885): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000300)={0x44, 0xa, 0x6, 0x101, 0xd000000, 0x0, {0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_ADT={0x14, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAME={0x9, 0x12, 'syz2\x00'}}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_LINENO={0x8}]}, 0x44}}, 0x0) 1.053744636s ago: executing program 0 (id=886): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r2, &(0x7f0000001980)={0x0, 0x0, &(0x7f0000001940)={0x0, 0xf4}, 0x1, 0x0, 0x0, 0xc001}, 0x4000000) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x5, 0x0, 0x9, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r3, 0x1, &(0x7f0000000180)=0x6) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x80) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000d40)={'erspan0\x00', &(0x7f0000000c80)={'ip_vti0\x00', 0x0, 0x80, 0x8000, 0x4, 0x2, {{0x1a, 0x4, 0x2, 0x6, 0x68, 0x66, 0x0, 0x0, 0x11, 0x0, @private=0xa010100, @multicast2, {[@lsrr={0x83, 0x17, 0xb4, [@local, @multicast1, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1]}, @ssrr={0x89, 0x7, 0xb5, [@empty]}, @ra={0x94, 0x4, 0x1}, @timestamp={0x44, 0x2c, 0xb9, 0x0, 0x3, [0xe1dc000, 0x7, 0x10001, 0x0, 0x8a, 0x7, 0x7, 0xd330, 0x8, 0x8]}, @ra={0x94, 0x4, 0x1}]}}}}}) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f0000000fc0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000d80)={0x1c0, 0x0, 0x804, 0x70bd2c, 0x25dfdbff, {}, [@HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}]}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}]}]}, 0x1c0}, 0x1, 0x0, 0x0, 0x4040041}, 0x84c5) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(r6, &(0x7f0000000000)='map_files\x00') getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r7, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @synproxy={{0xd}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xb4}}, 0x0) r8 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000780)=ANY=[@ANYBLOB="12010000ec31f8104c1302007eec0102030109021b0001000000000904002c11018b75000905", @ANYRES32], 0x0) unshare(0x20400) socket$inet6_tcp(0xa, 0x1, 0x0) syz_usb_control_io(r8, &(0x7f0000000180)={0x2c, &(0x7f00000006c0)=ANY=[@ANYBLOB="20032e0000002e0472b2011874e00cfaa041b62c4d1417210b14441bb500000009e144f2c8628602826cd6eda1e911a1cf87b044d2e641895cfccfde94060000006a5962ecd157035c30d74c6c27d0dcd68d7070f9f4018ed16f2c3979034a914ae07ba73217af631d759ceb2f7cfa0e524a9809c39958da19832473c1e9c85d74c4489326de768612f2d4cc231e23f5e340add112c4c27b1efdc932f896caa8e86b531c96848a697a7d5dcd0f2a36c06625e0332b4700a1"], &(0x7f0000000040)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xf9f7a6d72597ba10}}, &(0x7f0000000080)={0x0, 0xf, 0x42, {0x5, 0xf, 0x42, 0x1, [@generic={0x3d, 0x10, 0x2, "ff266fa9468110ca1798e363f6cff48d28ff670060da42c1ab3f9197a45b554824ffb4921cb51103593706175772bdc3a90416e3ecde08e61b65"}]}}, &(0x7f0000000100)={0x20, 0x29, 0xf, {0xf, 0x29, 0x4, 0x1, 0x0, 0xbc, "4bc767da", "11f63a91"}}, 0x0}, &(0x7f0000000600)={0x84, &(0x7f00000001c0)={0x20, 0x5, 0x49, "55139ada26fc2405386295fd24b59ae36a613bfec36ac82dbd47c16916096a186d978ee7b0ba2ba4dc20fdb573153ef20609943b79fbba8b191b0d943441f8bcf4c77cb15fcc14107f"}, &(0x7f0000000240)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000000280)={0x0, 0x8, 0x1, 0x8}, &(0x7f00000002c0)={0x20, 0x0, 0x4, {0x3, 0x2}}, &(0x7f0000000300)={0x20, 0x0, 0x8, {0x200, 0x2, [0x0]}}, &(0x7f0000000340)={0x40, 0x7, 0x2, 0xfff}, &(0x7f0000000380)={0x40, 0x9, 0x1}, &(0x7f00000003c0)={0x40, 0xb, 0x2, "ff49"}, &(0x7f0000000400)={0x40, 0xf, 0x2, 0x7f}, &(0x7f0000000440)={0x40, 0x13, 0x6, @link_local}, &(0x7f0000000480)={0x40, 0x17, 0x6, @remote}, &(0x7f00000004c0)={0x40, 0x19, 0x2, '3;'}, &(0x7f0000000500)={0x40, 0x1a, 0x2, 0x2}, &(0x7f0000000540)={0x40, 0x1c, 0x1, 0x8}, &(0x7f0000000580)={0x40, 0x1e, 0x1, 0x3}, &(0x7f00000005c0)={0x40, 0x21, 0x1, 0xb}}) 949.345772ms ago: executing program 2 (id=888): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r1, 0x0, 0x20040084) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000022c0)=@newtfilter={0x48, 0x2c, 0xd3f, 0x30bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0xb, 0xfff3}, {}, {0x8, 0x300}}, [@filter_kind_options=@f_matchall={{0xd}, {0x14, 0x2, [@TCA_MATCHALL_ACT={0x4}, @TCA_MATCHALL_ACT={0x4}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0xa, 0xa}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r4, &(0x7f0000000140)={&(0x7f0000000300)=@xdp={0x2c, 0x0, r6, 0x11}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="27032400000214000e00002fb96dffff1144ee163cddcb000000800000827600000000000000", 0x26}, {&(0x7f0000000780)="f058050000007f8f", 0x8}], 0x2}, 0x5) 863.596336ms ago: executing program 1 (id=889): epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)) socket$netlink(0x10, 0x3, 0x8000000004) pipe(&(0x7f0000000080)) epoll_create1(0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x14}, [@ldst={0x2, 0x0, 0x3, 0x1c10a1, 0x0, 0xc}], {0x95, 0x0, 0x9}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x85}, 0x52) socket$inet6_tcp(0xa, 0x1, 0x0) socket$alg(0x26, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="08000000040000000400000004"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x2, 0x80805, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000d40)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r0}, &(0x7f00000004c0), &(0x7f0000000500)=r1}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r1, r3, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x66, &(0x7f0000000880)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x33}, @broadcast, @void, {@mpls_uc={0x8847, {[], @ipv4=@gre={{0x5, 0x4, 0x1, 0x5, 0x58, 0x65, 0x0, 0x8, 0x2f, 0x0, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}}, {{0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x1}, {0x1, 0x0, 0x1, 0x1}, {0x8, 0x88be, 0x3, {{0x7, 0x1, 0x9, 0x0, 0x1, 0x2, 0x2, 0xb}, 0x1, {0x2}}}, {0x8, 0x22eb, 0x4, {{0x6, 0x2, 0x6, 0x3, 0x1, 0x1, 0x4, 0x2e}, 0x2, {0x5, 0x5, 0x3, 0x7, 0x1, 0x1, 0x2, 0x1, 0x1}}}, {0x8, 0x6558, 0x1}}}}}}}, 0x0) 807.941958ms ago: executing program 1 (id=890): r0 = socket$phonet(0x23, 0x2, 0x1) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)={0x30, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x3c}]}, 0x30}, 0x1, 0x0, 0x0, 0xc0c0}, 0x0) 697.211514ms ago: executing program 1 (id=891): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz0\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x37, [0xfffffff8, 0x8, 0x5, 0x9, 0x8, 0x155f, 0x6, 0x4, 0x25cd, 0x1, 0xb4, 0xa, 0xa2b9, 0x6, 0x7, 0xe4, 0x6, 0xfc000000, 0x3, 0xbbf, 0x4a732f64, 0x1, 0x8, 0xd, 0x0, 0x12a3, 0x6, 0x1, 0x2, 0x6, 0x7, 0x81, 0x8a, 0x79, 0x2, 0x10000, 0x0, 0x91, 0x4, 0x4, 0x16, 0x8, 0x5, 0x401, 0xfffffff5, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x9, 0x2, 0x7, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x9, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0xc66, 0xa8a9, 0x20000073, 0x8e, 0xd50, 0x7, 0x5, 0x2, 0x809, 0x4, 0xa7, 0x1000, 0x0, 0x200b398, 0x400080, 0x1, 0x4, 0x1c, 0x7, 0x1, 0x2, 0x3, 0x8, 0xffffff7f, 0x400, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffffff8, 0x401, 0x46, 0xf1, 0x4, 0xab000e0, 0x5, 0x6, 0x2, 0x1, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x1, 0x1cb, 0x1, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x95, 0x7fffffff, 0x4, 0xfffffff9, 0x1, 0x1000, 0xfffff801, 0x5], [0x2, 0xfffffffe, 0xffff, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x8d3, 0x200006, 0x8, 0x400, 0x2, 0x400, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0x8000003, 0x4e, 0x9, 0x3, 0x3, 0x9, 0x3, 0xc7, 0xffe, 0x10000a, 0x2, 0x400, 0x3e55, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0xd, 0x7, 0x601, 0x101, 0xdd80, 0x60a0, 0x7f, 0x9d26, 0x10000, 0x1, 0x2, 0x2, 0x6, 0x8000, 0xf47, 0x3, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0x1], [0xa772, 0x6, 0x5, 0x1afa, 0xbfc, 0x8, 0x5, 0x7f, 0x55, 0x40, 0xff, 0x1005, 0x1, 0x7, 0x1e, 0x9, 0x81, 0x3, 0x9d82, 0xd, 0xfffffff7, 0x8, 0x140f2, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0xffffffff, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x1, 0x26d, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x6, 0x8, 0x14000, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_clone(0x20001200, &(0x7f0000000280)="87bdaa", 0x3, 0x0, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x6, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0x7, 0x4, 0x5, 0x4, 0x8], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 692.311954ms ago: executing program 2 (id=892): sendmsg$RDMA_NLDEV_CMD_SET(0xffffffffffffffff, 0x0, 0x4800) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000001440), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, r4) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x4008054) write$nci(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="420002"], 0x5) socket$nl_route(0x10, 0x3, 0x0) 646.512687ms ago: executing program 2 (id=893): socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x10, 0xa, 0x6) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f0000000100)={@empty, @multicast1}, &(0x7f0000000140)=0xc) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e22, 0xb, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000040000000000a40000000160a01080000000000000000020000000900020073797a30000000000900010073797a3000000000140003800800024000000000080001400000000014000000110001"], 0x68}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETFLOWTABLE(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x20}, 0x1, 0x0, 0x0, 0x20048000}, 0x8094) r3 = socket(0x8000000010, 0x2, 0x0) write(r3, &(0x7f00000002c0)="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", 0xfc) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000580)=ANY=[@ANYBLOB, @ANYRES16, @ANYBLOB="8b67f73793fb7012824944a600410303160f627753b28c5500d914d4eedc5950be87f5d6337b34844dc2c407cb6ecf2e93fa3cefbdf0c1c2be09d4276433e55d88025a607400"], 0xb8}, 0x1, 0x0, 0x0, 0x44001}, 0x4c020) r5 = socket(0x10, 0x803, 0x0) sendto(r5, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x2000c095, 0x0, 0x0) recvmmsg(r5, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f0000000880)=""/148, 0x94}, {&(0x7f00000001c0)=""/17, 0x11}], 0x8}, 0x1}], 0x1, 0x0, &(0x7f0000003700)={0x77359400}) sendto$x25(r5, &(0x7f00000006c0)="816ef4c6f92a7ce837613cd90c3ca91b1179f99c4dda5e3057d75b07cf7468afb8c45d649308ff0d296329140c1acb79516a7acf54213232996c3918238be0c7a1c230839e6f5d2f748eae20b6ddce473fa7531a1081c9ca8c999dea75f5a363201629edbb146df4ebf214b9bddc17f3af586f44583f7e2ff8c3de01f3151bdf7bcb3bb0b02046eefcd26bcd09629aea53e4a4a7d85829f8f8aafc40b565e850510ea7bf0610178c402ff9b69eed348a431ff22eae5021de9eeab977a77450ed95d9966b3fb2b49e3a6dc5b8760e669133e1382adba039dcc62641f978f3b7b312a74698", 0xe4, 0x0, &(0x7f0000000540)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x3}}, 0x12) socket$inet6_sctp(0xa, 0x1, 0x84) r6 = socket$inet_tcp(0x2, 0x1, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r7, &(0x7f0000000040)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) ioctl$sock_inet_SIOCSARP(r6, 0x8953, &(0x7f0000000180)={{0x2, 0x0, @empty}, {}, 0x0, {0x440, 0x0, @multicast1=0xe000cc02}}) 561.277611ms ago: executing program 3 (id=894): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB="1f003300d000"], 0x3c}}, 0x10) 547.437652ms ago: executing program 3 (id=895): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=@newtfilter={0x44, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbf9, {0x0, 0x0, 0x0, r6, {0xfff3, 0x8}, {}, {0x7, 0xc}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0x173ba}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r7) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) sendmsg$kcm(r4, 0x0, 0x20004014) 508.785354ms ago: executing program 1 (id=896): socket(0x400000000010, 0x3, 0x0) write$tun(0xffffffffffffffff, 0x0, 0x0) socket$unix(0x1, 0x5, 0x0) socket$inet6(0xa, 0x805, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="190000"], 0x50) r0 = socket$kcm(0x10, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0e000000040000000400000002"], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={r1, &(0x7f0000000100), &(0x7f0000000000), 0x2}, 0x20) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0) 425.849468ms ago: executing program 1 (id=897): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r0, &(0x7f00000002c0)="0758a8ea7bc273dfaeab968586dd", 0x5a, 0x4000010, &(0x7f0000000040)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @local}, 0x14) 345.368312ms ago: executing program 3 (id=898): socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000496000/0x2000)=nil, 0x2000, 0x0, 0x12, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb5d07081196f37538e486dd6372ce22667f2b00dbf6e97158b33d4fec877f1b6d76745b686158bbcfe8875afdef001e000000002c"], 0x66) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x10b8}, 0xff00) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000180)=@framed={{0x18, 0x8, 0x0, 0x0, 0x3ffffffe}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @func={0x85, 0x0, 0x1, 0x0, 0x4}, @generic={0x6a, 0x8}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1000}, @exit, @exit]}, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94) r0 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x890b, &(0x7f0000000000)) 345.092672ms ago: executing program 1 (id=899): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @empty}, 0x10) setsockopt$sock_int(r0, 0x1, 0x20, &(0x7f0000000100)=0xfffffffd, 0x4) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @empty}, 0x10) sendto(r0, &(0x7f00000002c0), 0xfffffffffffffe92, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002180)='blkio.bfq.io_merged\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r1, 0x0) sendmsg$nl_generic(r1, 0x0, 0x20000000) 317.977503ms ago: executing program 3 (id=900): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) close(0xffffffffffffffff) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x4, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x30000013}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70b921, 0x80000, {0x0, 0x0, 0x0, r7, {0x0, 0x3}, {0xfff1, 0xb}, {0xa, 0x6}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x8, 0x2, 0x80000000}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4010044}, 0x4000) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 188.12171ms ago: executing program 4 (id=901): epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)) socket$netlink(0x10, 0x3, 0x8000000004) pipe(&(0x7f0000000080)) epoll_create1(0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x14}, [@ldst={0x2, 0x0, 0x3, 0x1c10a1, 0x0, 0xc}], {0x95, 0x0, 0x9}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x85}, 0x52) socket$inet6_tcp(0xa, 0x1, 0x0) socket$alg(0x26, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="08000000040000000400000004"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x2, 0x80805, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000d40)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r0}, &(0x7f00000004c0), &(0x7f0000000500)=r1}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r1, r3, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x66, &(0x7f0000000880)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x33}, @broadcast, @void, {@mpls_uc={0x8847, {[], @ipv4=@gre={{0x5, 0x4, 0x1, 0x5, 0x58, 0x65, 0x0, 0x8, 0x2f, 0x0, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}}, {{0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x1}, {0x1, 0x0, 0x1, 0x1}, {0x8, 0x88be, 0x3, {{0x7, 0x1, 0x9, 0x0, 0x1, 0x2, 0x2, 0xb}, 0x1, {0x2}}}, {0x8, 0x22eb, 0x4, {{0x6, 0x2, 0x6, 0x3, 0x1, 0x1, 0x4, 0x2e}, 0x2, {0x5, 0x5, 0x3, 0x7, 0x1, 0x1, 0x2, 0x1, 0x1}}}, {0x8, 0x6558, 0x1}}}}}}}, 0x0) 114.058674ms ago: executing program 3 (id=902): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r1, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004044}, 0x20040084) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000022c0)=@newtfilter={0x48, 0x2c, 0xd3f, 0x30bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0xb, 0xfff3}, {}, {0x8, 0x300}}, [@filter_kind_options=@f_matchall={{0xd}, {0x14, 0x2, [@TCA_MATCHALL_ACT={0x4}, @TCA_MATCHALL_ACT={0x4}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0xa, 0xa}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r4, &(0x7f0000000140)={&(0x7f0000000300)=@xdp={0x2c, 0x0, r6, 0x11}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="27032400000214000e00002fb96dffff1144ee163cddcb000000800000827600000000000000", 0x26}, {&(0x7f0000000780)="f058050000007f8f", 0x8}], 0x2}, 0x5) 113.309634ms ago: executing program 4 (id=903): r0 = socket$kcm(0x2, 0x3, 0x106) sendmsg$inet(r0, &(0x7f0000000040)={&(0x7f0000000380)={0x2, 0x4e21, @remote}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000600)="b9ed29d8fe490a060b483f2dd090fc6889ae6b84", 0xffeb}], 0x1}, 0x0) 9.033279ms ago: executing program 4 (id=904): r0 = syz_open_dev$video(&(0x7f0000000840), 0xa219, 0x100) ioctl$VIDIOC_S_AUDIO(r0, 0x40345622, &(0x7f0000000880)={0x1ff, "89f27475c80cbae69cb13940ccbdb246166f183b42eb5c7626f4593fd24e169b"}) 0s ago: executing program 4 (id=905): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, 0x0, 0x0) bpf$PROG_BIND_MAP(0x1c, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000000100), 0x4) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$netlink(0xffffffffffffffff, 0x0, 0x0) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, &(0x7f00000000c0)={0x8, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) setsockopt$inet_mreq(r1, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x3e, &(0x7f0000000040)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x80, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @dest_unreach={0x3, 0x4, 0x0, 0x0, 0x3, 0x1c58, {0x5, 0x4, 0x0, 0x7, 0x0, 0x65, 0xe, 0x4e, 0x24, 0xc, @empty, @dev={0xac, 0x14, 0x14, 0x44}}}}}}}, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r2, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe0000300, 0x0, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0xb2, 0xffffeff7, 0x40, 0x40000006}, 0x3c) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.181' (ED25519) to the list of known hosts. [ 61.156128][ T4171] cgroup: Unknown subsys name 'net' [ 61.259866][ T4171] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 62.746954][ T4171] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 64.620573][ T4183] chnl_net:caif_netlink_parms(): no params data found [ 64.677957][ T4196] chnl_net:caif_netlink_parms(): no params data found [ 64.692583][ T4187] chnl_net:caif_netlink_parms(): no params data found [ 64.709275][ T4184] chnl_net:caif_netlink_parms(): no params data found [ 64.782552][ T4190] chnl_net:caif_netlink_parms(): no params data found [ 64.847293][ T4196] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.855028][ T4196] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.863322][ T4196] device bridge_slave_0 entered promiscuous mode [ 64.871830][ T4183] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.879022][ T4183] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.887677][ T4183] device bridge_slave_0 entered promiscuous mode [ 64.899530][ T4183] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.907161][ T4183] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.915013][ T4183] device bridge_slave_1 entered promiscuous mode [ 64.935658][ T4196] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.942739][ T4196] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.951119][ T4196] device bridge_slave_1 entered promiscuous mode [ 65.001487][ T4187] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.009001][ T4187] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.016986][ T4187] device bridge_slave_0 entered promiscuous mode [ 65.037935][ T4183] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.050382][ T4184] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.057657][ T4184] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.066040][ T4184] device bridge_slave_0 entered promiscuous mode [ 65.073223][ T4187] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.080403][ T4187] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.088796][ T4187] device bridge_slave_1 entered promiscuous mode [ 65.110632][ T4196] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.121408][ T4183] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.138254][ T4184] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.145629][ T4184] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.153324][ T4184] device bridge_slave_1 entered promiscuous mode [ 65.173411][ T4190] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.180615][ T4190] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.188612][ T4190] device bridge_slave_0 entered promiscuous mode [ 65.198144][ T4196] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.221437][ T4183] team0: Port device team_slave_0 added [ 65.230646][ T4187] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.240510][ T4190] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.247828][ T4190] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.256117][ T4190] device bridge_slave_1 entered promiscuous mode [ 65.276439][ T4183] team0: Port device team_slave_1 added [ 65.297507][ T4187] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.321919][ T4196] team0: Port device team_slave_0 added [ 65.332183][ T4190] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.343382][ T4184] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.360745][ T4184] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.371364][ T4196] team0: Port device team_slave_1 added [ 65.385544][ T4190] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.418048][ T4183] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 65.425554][ T4183] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.452903][ T4183] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 65.470968][ T4183] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 65.478114][ T4183] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.504403][ T4183] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 65.518612][ T4187] team0: Port device team_slave_0 added [ 65.526820][ T4184] team0: Port device team_slave_0 added [ 65.534103][ T4187] team0: Port device team_slave_1 added [ 65.565283][ T4184] team0: Port device team_slave_1 added [ 65.578251][ T4196] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 65.585322][ T4196] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.612076][ T4196] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 65.625632][ T4190] team0: Port device team_slave_0 added [ 65.632027][ T4196] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 65.639104][ T4196] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.665700][ T4196] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 65.689213][ T4183] device hsr_slave_0 entered promiscuous mode [ 65.696064][ T4183] device hsr_slave_1 entered promiscuous mode [ 65.726743][ T4190] team0: Port device team_slave_1 added [ 65.754648][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 65.761629][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.788517][ T4187] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 65.808168][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 65.822086][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.848433][ T4187] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 65.864127][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 65.871287][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.898011][ T4184] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 65.917705][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 65.925196][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.952162][ T4184] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 65.987535][ T4190] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 65.994750][ T4190] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.021180][ T4190] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.057993][ T4190] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.065340][ T4190] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.091842][ T4190] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.106767][ T4196] device hsr_slave_0 entered promiscuous mode [ 66.113723][ T4196] device hsr_slave_1 entered promiscuous mode [ 66.120412][ T4196] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 66.128539][ T4196] Cannot create hsr debugfs directory [ 66.153550][ T4184] device hsr_slave_0 entered promiscuous mode [ 66.160424][ T4184] device hsr_slave_1 entered promiscuous mode [ 66.167594][ T4184] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 66.175401][ T4184] Cannot create hsr debugfs directory [ 66.199123][ T4187] device hsr_slave_0 entered promiscuous mode [ 66.206263][ T4187] device hsr_slave_1 entered promiscuous mode [ 66.212919][ T4187] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 66.220742][ T4187] Cannot create hsr debugfs directory [ 66.268690][ T4190] device hsr_slave_0 entered promiscuous mode [ 66.275960][ T23] Bluetooth: hci1: command 0x0409 tx timeout [ 66.282481][ T4190] device hsr_slave_1 entered promiscuous mode [ 66.282762][ T23] Bluetooth: hci0: command 0x0409 tx timeout [ 66.295295][ T4190] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 66.302957][ T4190] Cannot create hsr debugfs directory [ 66.343693][ T7] Bluetooth: hci2: command 0x0409 tx timeout [ 66.353789][ T23] Bluetooth: hci3: command 0x0409 tx timeout [ 66.354133][ T7] Bluetooth: hci4: command 0x0409 tx timeout [ 66.596334][ T4183] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 66.607335][ T4183] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 66.618138][ T4183] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 66.627463][ T4183] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 66.681656][ T4187] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 66.690919][ T4187] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 66.702743][ T4187] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 66.720343][ T4187] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 66.762428][ T4196] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 66.772718][ T4196] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 66.792713][ T4196] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 66.825986][ T4196] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 66.885508][ T4183] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.901177][ T4184] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 66.923352][ T4184] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 66.953791][ T4184] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 66.963153][ T4184] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 66.997059][ T4183] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.010487][ T4205] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 67.020618][ T4205] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 67.049529][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 67.058528][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 67.069164][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.076461][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.086472][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 67.096802][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 67.105565][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.112719][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.121296][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 67.135961][ T4187] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.151341][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 67.176449][ T4190] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 67.187791][ T4190] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 67.201290][ T4190] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 67.211056][ T4205] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 67.219332][ T4205] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 67.228966][ T4205] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 67.241291][ T4187] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.254939][ T4190] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 67.277315][ T4196] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.309561][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 67.318819][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 67.328194][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.335487][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.344945][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 67.353469][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 67.362493][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 67.371738][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 67.380367][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 67.388569][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 67.399914][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 67.409127][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 67.419406][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.426696][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.448824][ T4196] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.458598][ T4205] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 67.469189][ T4205] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 67.478077][ T4205] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 67.488522][ T4205] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 67.497051][ T4205] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 67.505161][ T4205] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 67.538665][ T4183] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 67.549428][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 67.559500][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 67.569359][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 67.579992][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.587174][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.596259][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 67.605913][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 67.615222][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 67.623768][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.630996][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.638974][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 67.647664][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 67.658736][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 67.667307][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 67.706353][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 67.718009][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 67.731141][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 67.740649][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 67.750242][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 67.761923][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 67.774933][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 67.783265][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 67.813148][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 67.830256][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 67.840609][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 67.856507][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 67.871390][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 67.881828][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 67.891409][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 67.903796][ T4184] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.923047][ T4196] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 67.943422][ T4196] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 67.981436][ T4184] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.989526][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 67.998315][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 68.007659][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 68.015942][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 68.040994][ T4183] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.084734][ T4190] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.091890][ T4205] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 68.106306][ T4205] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 68.123741][ T4205] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 68.132698][ T4205] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 68.143238][ T4205] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.150478][ T4205] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.158966][ T4205] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 68.169224][ T4205] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 68.177793][ T4205] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.184888][ T4205] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.192877][ T4205] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 68.225587][ T487] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 68.244735][ T487] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 68.263148][ T487] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 68.275179][ T487] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 68.286875][ T487] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 68.295803][ T487] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 68.313075][ T4190] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.332587][ T487] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 68.342280][ T487] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 68.344148][ T1111] Bluetooth: hci0: command 0x041b tx timeout [ 68.356233][ T1111] Bluetooth: hci1: command 0x041b tx timeout [ 68.356769][ T487] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 68.374029][ T487] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 68.381510][ T487] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 68.389799][ T487] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 68.398649][ T487] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 68.407678][ T487] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 68.416094][ T487] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 68.424206][ T1111] Bluetooth: hci4: command 0x041b tx timeout [ 68.430672][ T1111] Bluetooth: hci3: command 0x041b tx timeout [ 68.437141][ T1111] Bluetooth: hci2: command 0x041b tx timeout [ 68.458223][ T4187] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.477041][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 68.488107][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 68.497038][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.506605][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.514885][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 68.523490][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 68.532159][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.539267][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.547795][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 68.558253][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 68.567158][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 68.576008][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 68.585082][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 68.593393][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 68.601927][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 68.610243][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 68.619436][ T4183] device veth0_vlan entered promiscuous mode [ 68.635724][ T4184] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 68.650835][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 68.658648][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 68.667144][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 68.689773][ T4183] device veth1_vlan entered promiscuous mode [ 68.706324][ T4196] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.770368][ T487] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 68.781300][ T487] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 68.796071][ T487] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 68.810617][ T487] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 68.828239][ T487] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 68.841628][ T487] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 68.850664][ T487] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 68.859357][ T487] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 68.868546][ T487] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 68.878923][ T487] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 68.888094][ T487] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 68.910804][ T4190] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 68.931264][ T4183] device veth0_macvtap entered promiscuous mode [ 68.952945][ T4187] device veth0_vlan entered promiscuous mode [ 68.968183][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 68.990838][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 69.022176][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 69.034126][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 69.043116][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 69.052128][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 69.061617][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 69.070505][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 69.078405][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 69.088752][ T4183] device veth1_macvtap entered promiscuous mode [ 69.113541][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 69.122333][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 69.130836][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 69.146193][ T4187] device veth1_vlan entered promiscuous mode [ 69.172593][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.187896][ T4184] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.211119][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 69.225359][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 69.243104][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 69.270326][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.294774][ T4183] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.304524][ T4183] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.313313][ T4183] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.322658][ T4183] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.335089][ T4205] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 69.343855][ T4205] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 69.352781][ T4205] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 69.362909][ T4205] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 69.372061][ T4205] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 69.387811][ T4187] device veth0_macvtap entered promiscuous mode [ 69.424478][ T4205] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 69.433214][ T4205] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 69.443734][ T4205] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 69.452346][ T4205] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 69.461501][ T4205] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 69.473946][ T4187] device veth1_macvtap entered promiscuous mode [ 69.508385][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 69.518572][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 69.528131][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 69.537188][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 69.546039][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 69.565283][ T4184] device veth0_vlan entered promiscuous mode [ 69.577821][ T4196] device veth0_vlan entered promiscuous mode [ 69.587146][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 69.595622][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 69.604999][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 69.612925][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 69.621784][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 69.629665][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 69.642452][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.660596][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.672757][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.685996][ T4184] device veth1_vlan entered promiscuous mode [ 69.702316][ T4190] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.714734][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 69.723306][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 69.732730][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 69.744685][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.757295][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.768779][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.816111][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 69.832023][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 69.841645][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 69.857948][ T4187] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.867794][ T4187] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.876945][ T4187] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.886997][ T4187] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.919400][ T4184] device veth0_macvtap entered promiscuous mode [ 69.928624][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 69.937894][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 69.951593][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 69.961050][ T4196] device veth1_vlan entered promiscuous mode [ 70.026887][ T4184] device veth1_macvtap entered promiscuous mode [ 70.036880][ T487] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.045856][ T487] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.058912][ T4205] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 70.068161][ T4205] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 70.077128][ T4205] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 70.085560][ T4205] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 70.095483][ T4205] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 70.127668][ T4190] device veth0_vlan entered promiscuous mode [ 70.137863][ T487] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 70.146298][ T487] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 70.155203][ T487] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 70.164619][ T487] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 70.181579][ T4196] device veth0_macvtap entered promiscuous mode [ 70.200748][ T4196] device veth1_macvtap entered promiscuous mode [ 70.219995][ T4190] device veth1_vlan entered promiscuous mode [ 70.229298][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.240059][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.250511][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.261391][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.273290][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.296766][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.305431][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.310937][ T4205] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 70.321140][ T4205] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 70.330648][ T4205] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 70.338973][ T4205] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 70.348108][ T4205] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 70.356517][ T4205] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 70.366012][ T4205] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 70.380798][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.391947][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.402274][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.413459][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.424072][ T4232] Bluetooth: hci1: command 0x040f tx timeout [ 70.430139][ T4232] Bluetooth: hci0: command 0x040f tx timeout [ 70.432113][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.456714][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.468666][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.478796][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.489502][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.499482][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.511082][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.514113][ T4245] Bluetooth: hci2: command 0x040f tx timeout [ 70.522955][ T4196] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.532684][ T4245] Bluetooth: hci3: command 0x040f tx timeout [ 70.541744][ T4245] Bluetooth: hci4: command 0x040f tx timeout [ 70.552148][ T4205] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 70.561761][ T4205] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 70.571275][ T4205] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 70.580779][ T4205] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 70.593349][ T4184] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.602496][ T4184] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.612607][ T4184] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.621779][ T4184] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.644068][ T4205] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.652022][ T4205] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.671162][ T4205] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.675297][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.689505][ T4205] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.691345][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.699570][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.720770][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.730882][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.741432][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.756378][ T4196] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.769993][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 70.780488][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 70.788886][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 70.797881][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 70.807606][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 70.816131][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 70.836395][ T4196] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.847035][ T4196] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.855792][ T4196] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.864530][ T4196] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.884173][ T4190] device veth0_macvtap entered promiscuous mode [ 70.932760][ T4190] device veth1_macvtap entered promiscuous mode [ 70.958106][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 70.976844][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 71.008092][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.019682][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.030237][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.041010][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.051241][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.061982][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.074044][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.084776][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.096233][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.117460][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 71.157294][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 71.197189][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.213374][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.254685][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.276282][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.286724][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.297884][ T4272] syz.3.4 uses obsolete (PF_INET,SOCK_PACKET) [ 71.311250][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.322716][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.343597][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.361032][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.400370][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 71.414436][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 71.431382][ T4190] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.447333][ T4190] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.458104][ T4190] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.467979][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.468641][ T4190] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.474617][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.491590][ T4276] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6'. [ 71.599431][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.627857][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.642314][ T487] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 71.710666][ T487] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.714116][ T4224] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.749570][ T4224] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.752267][ T487] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.783453][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 71.800853][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 71.834689][ T4224] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.844669][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.852574][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.872529][ T4224] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.899623][ T4205] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.914155][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 71.919903][ T4205] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.951257][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 71.969953][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 72.239244][ T4276] syz.0.6 (4276) used greatest stack depth: 20728 bytes left [ 72.348119][ T4307] netlink: 364 bytes leftover after parsing attributes in process `syz.1.12'. [ 72.504577][ T4265] Bluetooth: hci1: command 0x0419 tx timeout [ 72.709456][ T4226] Bluetooth: hci4: command 0x0419 tx timeout [ 72.742394][ T4226] Bluetooth: hci3: command 0x0419 tx timeout [ 72.783045][ T4226] Bluetooth: hci2: command 0x0419 tx timeout [ 73.617991][ T4331] tipc: Started in network mode [ 73.745381][ T4331] tipc: Node identity aacea9181bae, cluster identity 4711 [ 74.202248][ T4331] tipc: Enabled bearer , priority 0 [ 74.237559][ T4341] device syzkaller0 entered promiscuous mode [ 74.250323][ T4342] netlink: 28 bytes leftover after parsing attributes in process `syz.0.22'. [ 74.303177][ T4342] batman_adv: batadv0: Adding interface: veth3 [ 74.315712][ T4342] batman_adv: batadv0: The MTU of interface veth3 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.367680][ T4342] batman_adv: batadv0: Interface activated: veth3 [ 74.380080][ T4347] tipc: Enabling of bearer rejected, failed to enable media [ 74.418556][ T4331] tipc: Resetting bearer [ 74.526863][ T4328] tipc: Resetting bearer [ 74.548210][ T4328] tipc: Disabling bearer [ 74.778263][ T4370] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 75.828422][ T4381] netlink: 'syz.4.30': attribute type 12 has an invalid length. [ 76.008385][ T4385] netlink: 12 bytes leftover after parsing attributes in process `syz.1.32'. [ 77.217572][ T4386] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.226037][ T4386] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.183640][ T7] Bluetooth: hci4: command 0x0405 tx timeout [ 78.184493][ T4386] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 78.281190][ T4386] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 78.660775][ T4386] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.670020][ T4386] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.679486][ T4386] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.689024][ T4386] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.749555][ T4386] syz.1.32 (4386) used greatest stack depth: 20432 bytes left [ 78.784659][ T4410] lo speed is unknown, defaulting to 1000 [ 78.847732][ T4411] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 78.891416][ T4411] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 78.936946][ T4411] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 78.976322][ T4411] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 78.993856][ T4411] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 79.009758][ T4411] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 79.042297][ T4411] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 79.063116][ T4411] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 79.089992][ T4411] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 79.120890][ T4410] lo speed is unknown, defaulting to 1000 [ 79.170500][ T4410] lo speed is unknown, defaulting to 1000 [ 79.278573][ T4427] tipc: Enabling of bearer rejected, failed to enable media [ 79.366232][ T4436] netlink: 8 bytes leftover after parsing attributes in process `syz.4.45'. [ 79.612673][ T13] lo speed is unknown, defaulting to 1000 [ 79.633241][ T4410] infiniband sqz0: set active [ 79.652164][ T4410] infiniband sqz0: added lo [ 79.775782][ T4410] RDS/IB: sqz0: added [ 79.814801][ T4410] smc: adding ib device sqz0 with port count 1 [ 79.821434][ T4410] smc: ib device sqz0 port 1 has pnetid [ 79.831400][ T4414] lo speed is unknown, defaulting to 1000 [ 79.842080][ T4410] lo speed is unknown, defaulting to 1000 [ 79.902831][ T4464] device syzkaller0 entered promiscuous mode [ 80.021682][ T4410] lo speed is unknown, defaulting to 1000 [ 80.143198][ T4468] device syzkaller0 entered promiscuous mode [ 80.362776][ T4410] lo speed is unknown, defaulting to 1000 [ 80.583988][ T4490] tipc: Enabling of bearer rejected, failed to enable media [ 80.909652][ T4410] lo speed is unknown, defaulting to 1000 [ 80.998602][ T4504] tipc: Started in network mode [ 81.003680][ T4504] tipc: Node identity ac14140f, cluster identity 4711 [ 81.012667][ T4504] tipc: Enabled bearer , priority 10 [ 81.333265][ T4410] lo speed is unknown, defaulting to 1000 [ 81.600491][ T4539] device syzkaller0 entered promiscuous mode [ 81.716808][ T1325] cfg80211: failed to load regulatory.db [ 82.006658][ T4414] tipc: Node number set to 2886997007 [ 82.289407][ T4599] lo speed is unknown, defaulting to 1000 [ 83.799577][ T4507] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 84.169316][ T4618] netlink: 'syz.0.78': attribute type 39 has an invalid length. [ 84.957665][ T4630] netlink: 4 bytes leftover after parsing attributes in process `syz.3.80'. [ 86.644216][ T4683] netlink: 'syz.1.99': attribute type 1 has an invalid length. [ 87.483523][ C1] sched: RT throttling activated [ 88.443730][ T1325] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 88.853633][ T1325] usb 2-1: Using ep0 maxpacket: 16 [ 89.453777][ T1325] usb 2-1: unable to read config index 0 descriptor/all [ 89.461355][ T1325] usb 2-1: can't read configurations, error -71 [ 90.280457][ T4729] netlink: 56 bytes leftover after parsing attributes in process `syz.0.115'. [ 90.306493][ T7] hid-generic 0005:16C0:5505.0001: hidraw0: BLUETOOTH HID v0.8b Device [syz0] on aa:aa:aa:aa:aa:aa [ 91.167960][ T4731] fido_id[4731]: Failed to open report descriptor at '/sys/devices/virtual/bluetooth/hci4/hci4:200/report_descriptor': No such file or directory [ 92.244358][ T4763] netlink: 'syz.4.122': attribute type 1 has an invalid length. [ 92.302440][ T4762] device syzkaller0 entered promiscuous mode [ 94.667524][ T4808] netlink: 'syz.2.138': attribute type 1 has an invalid length. [ 95.509570][ T4816] loop1: detected capacity change from 0 to 512 [ 95.587409][ T4816] ======================================================= [ 95.587409][ T4816] WARNING: The mand mount option has been deprecated and [ 95.587409][ T4816] and is ignored by this kernel. Remove the mand [ 95.587409][ T4816] option from the mount to silence this warning. [ 95.587409][ T4816] ======================================================= [ 95.713233][ T4816] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 95.804583][ T4816] Quota error (device loop1): v2_read_file_info: Free block number too big (0 >= 0). [ 95.861136][ T4816] EXT4-fs warning (device loop1): ext4_enable_quotas:6488: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 95.992798][ T4816] EXT4-fs (loop1): mount failed [ 96.101895][ T4836] device syzkaller0 entered promiscuous mode [ 97.625557][ T4858] netlink: 'syz.0.152': attribute type 1 has an invalid length. [ 97.662427][ T4858] 8021q: adding VLAN 0 to HW filter on device bond1 [ 97.954201][ T1108] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 98.020891][ T4869] tipc: Enabling of bearer rejected, failed to enable media [ 98.233683][ T1108] usb 1-1: Using ep0 maxpacket: 16 [ 98.373899][ T1108] usb 1-1: config 0 interface 0 altsetting 44 has an invalid endpoint with address 0xFF, skipping [ 98.418539][ T1108] usb 1-1: config 0 interface 0 altsetting 44 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 98.626909][ T1108] usb 1-1: config 0 interface 0 has no altsetting 0 [ 98.797276][ T4893] netlink: 'syz.4.162': attribute type 39 has an invalid length. [ 98.824715][ T1108] usb 1-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 98.855880][ T1108] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.884106][ T1108] usb 1-1: Product: syz [ 98.900600][ T1108] usb 1-1: Manufacturer: syz [ 98.926596][ T1108] usb 1-1: SerialNumber: syz [ 98.979209][ T1108] usb 1-1: config 0 descriptor?? [ 99.024385][ T4858] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 100.808664][ T4917] device syzkaller0 entered promiscuous mode [ 101.240182][ T4928] fuse: Bad value for 'group_id' [ 102.081722][ T4245] usb 1-1: USB disconnect, device number 2 [ 102.258195][ T4935] netlink: 8 bytes leftover after parsing attributes in process `syz.0.174'. [ 102.392439][ T4937] netlink: 4 bytes leftover after parsing attributes in process `syz.3.175'. [ 102.404592][ T4937] netlink: 4 bytes leftover after parsing attributes in process `syz.3.175'. [ 102.647656][ T4947] netlink: 'syz.1.178': attribute type 39 has an invalid length. [ 104.020325][ T4964] tipc: Enabled bearer , priority 0 [ 104.070644][ T4964] tipc: Resetting bearer [ 104.115575][ T4963] tipc: Disabling bearer [ 104.349026][ T4980] netlink: 'syz.3.184': attribute type 1 has an invalid length. [ 104.434818][ T4980] 8021q: adding VLAN 0 to HW filter on device bond1 [ 104.714662][ T4977] fuse: Bad value for 'group_id' [ 104.952342][ T4983] loop4: detected capacity change from 0 to 8 [ 105.120388][ T4983] SQUASHFS error: zlib decompression failed, data probably corrupt [ 105.174329][ T4983] SQUASHFS error: Failed to read block 0x9b: -5 [ 105.200757][ T4983] SQUASHFS error: Unable to read metadata cache entry [99] [ 105.257015][ T4983] SQUASHFS error: Unable to read inode 0x127 [ 106.091981][ T5008] netlink: 8 bytes leftover after parsing attributes in process `syz.2.193'. [ 107.095644][ T5017] tipc: Started in network mode [ 107.100673][ T5017] tipc: Node identity 8a73c4b9127d, cluster identity 4711 [ 107.138384][ T5017] tipc: Enabled bearer , priority 0 [ 107.244203][ T5026] netlink: 'syz.2.198': attribute type 1 has an invalid length. [ 107.309973][ T5026] 8021q: adding VLAN 0 to HW filter on device bond1 [ 107.327528][ T5017] tipc: Resetting bearer [ 107.630508][ T5029] fuse: Bad value for 'group_id' [ 107.679408][ T5016] tipc: Disabling bearer [ 108.263422][ T5002] ODEBUG: Out of memory. ODEBUG disabled [ 108.336263][ T5037] comedi: No check for data length of config insn id 16777237 is implemented [ 108.368340][ T5037] comedi: Add a check to check_insn_config_length in drivers/comedi/comedi_fops.c [ 108.395924][ T5037] comedi: Assuming n=86 is correct [ 108.822423][ T5051] device syzkaller0 entered promiscuous mode [ 110.364048][ T5067] device syzkaller0 entered promiscuous mode [ 110.655544][ T5081] loop4: detected capacity change from 0 to 8 [ 110.783098][ T5081] SQUASHFS error: zlib decompression failed, data probably corrupt [ 110.791508][ T5081] SQUASHFS error: Failed to read block 0x9b: -5 [ 110.797852][ T5081] SQUASHFS error: Unable to read metadata cache entry [99] [ 110.805143][ T5081] SQUASHFS error: Unable to read inode 0x127 [ 111.833635][ T23] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 111.973676][ T4245] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 112.093604][ T23] usb 2-1: Using ep0 maxpacket: 32 [ 112.930150][ T23] usb 2-1: config index 0 descriptor too short (expected 156, got 27) [ 112.935425][ T5108] device syzkaller0 entered promiscuous mode [ 112.948251][ T23] usb 2-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 112.983647][ T23] usb 2-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 113.003577][ T23] usb 2-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 113.031666][ T23] usb 2-1: config 0 interface 0 has no altsetting 0 [ 113.073731][ T4245] usb 5-1: Using ep0 maxpacket: 8 [ 113.224742][ T4245] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 113.233653][ T4245] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 113.244549][ T23] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 113.254920][ T23] usb 2-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 113.264577][ T4245] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 113.285421][ T23] usb 2-1: Product: syz [ 113.289852][ T23] usb 2-1: Manufacturer: syz [ 113.295546][ T23] usb 2-1: SerialNumber: syz [ 113.300390][ T4245] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 113.321675][ T23] usb 2-1: config 0 descriptor?? [ 113.331474][ T4245] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 113.452625][ T23] ldusb 2-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 113.467485][ T4245] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 113.904840][ T23] ldusb 2-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 113.913803][ T4245] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.357691][ T4245] usb 5-1: GET_CAPABILITIES returned 0 [ 114.363967][ T4245] usbtmc 5-1:16.0: can't read capabilities [ 114.820203][ T5145] tipc: Enabling of bearer rejected, already enabled [ 114.986989][ T4245] usb 2-1: USB disconnect, device number 4 [ 115.004368][ C0] ldusb 2-1:0.0: usb_submit_urb failed (-19) [ 115.087359][ T26] audit: type=1326 audit(1777354879.099:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5094 comm="syz.4.225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94e0090dd9 code=0x7ffc0000 [ 115.096556][ T4245] ldusb 2-1:0.0: LD USB Device #0 now disconnected [ 115.128648][ T26] audit: type=1326 audit(1777354879.129:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5094 comm="syz.4.225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94e0090dd9 code=0x7ffc0000 [ 115.201525][ T26] audit: type=1326 audit(1777354879.129:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5094 comm="syz.4.225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94e0090dd9 code=0x7ffc0000 [ 115.317850][ T4414] usb 5-1: USB disconnect, device number 2 [ 115.335380][ T26] audit: type=1326 audit(1777354879.129:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5094 comm="syz.4.225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f94e0090dd9 code=0x7ffc0000 [ 115.357408][ C1] vkms_vblank_simulate: vblank timer overrun [ 115.651905][ T26] audit: type=1326 audit(1777354879.129:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5094 comm="syz.4.225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94e0090dd9 code=0x7ffc0000 [ 115.674265][ C1] vkms_vblank_simulate: vblank timer overrun [ 115.703562][ T26] audit: type=1326 audit(1777354879.129:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5094 comm="syz.4.225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94e0090dd9 code=0x7ffc0000 [ 115.818824][ T26] audit: type=1326 audit(1777354879.129:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5094 comm="syz.4.225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f94e0090dd9 code=0x7ffc0000 [ 115.841003][ C1] vkms_vblank_simulate: vblank timer overrun [ 116.143848][ T26] audit: type=1326 audit(1777354879.139:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5094 comm="syz.4.225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f94e005160e code=0x7ffc0000 [ 116.211047][ T26] audit: type=1326 audit(1777354879.139:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5094 comm="syz.4.225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94e0090dd9 code=0x7ffc0000 [ 116.373647][ T26] audit: type=1326 audit(1777354879.309:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5094 comm="syz.4.225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f94e005160e code=0x7ffc0000 [ 116.427519][ T5175] device syzkaller0 entered promiscuous mode [ 116.463606][ T4230] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 117.873752][ T4230] usb 1-1: config index 0 descriptor too short (expected 29220, got 36) [ 117.882361][ T4230] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 117.906428][ T5198] netlink: 8 bytes leftover after parsing attributes in process `syz.1.257'. [ 117.938214][ T4230] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 117.949049][ T4230] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 117.960979][ T4230] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 117.974945][ T4230] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 117.988704][ T4230] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 118.005275][ T4230] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.046617][ T5198] 8021q: adding VLAN 0 to HW filter on device bond1 [ 118.058269][ T5203] netlink: 8 bytes leftover after parsing attributes in process `syz.1.257'. [ 118.087815][ T5203] netlink: 4 bytes leftover after parsing attributes in process `syz.1.257'. [ 118.111521][ T4230] usb 1-1: config 0 descriptor?? [ 118.129708][ T5203] 8021q: adding VLAN 0 to HW filter on device bond0 [ 118.136853][ T5171] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 118.140324][ T5203] bond1: (slave bond0): making interface the new active one [ 118.326642][ T5203] bond1: (slave bond0): Enslaving as an active interface with an up link [ 118.585780][ T4289] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 118.947439][ T5203] syz.1.257 (5203) used greatest stack depth: 19152 bytes left [ 119.136869][ T4230] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 3 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 119.192266][ T4245] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 119.236474][ T4230] usb 1-1: USB disconnect, device number 3 [ 119.271385][ T4230] usblp0: removed [ 119.503847][ T4232] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 119.673644][ T4245] usb 4-1: Using ep0 maxpacket: 8 [ 119.743599][ T4232] usb 5-1: Using ep0 maxpacket: 8 [ 119.793734][ T4245] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 119.801989][ T4245] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 119.823534][ T4245] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 119.843608][ T4245] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 119.863535][ T4245] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 119.865144][ T4232] usb 5-1: config 0 has an invalid interface number: 186 but max is 0 [ 119.891756][ T4245] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 119.909753][ T4245] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.912679][ T4232] usb 5-1: config 0 has no interface number 0 [ 119.934387][ T5236] device syzkaller0 entered promiscuous mode [ 119.936406][ T4232] usb 5-1: config 0 interface 186 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 119.959764][ T4232] usb 5-1: config 0 interface 186 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 119.981761][ T4232] usb 5-1: config 0 interface 186 altsetting 0 has an invalid endpoint with address 0x9A, skipping [ 119.998468][ T4232] usb 5-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 120.186223][ T4245] usb 4-1: GET_CAPABILITIES returned 0 [ 120.191812][ T4245] usbtmc 4-1:16.0: can't read capabilities [ 120.222286][ T4232] usb 5-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 120.234209][ T4232] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.242261][ T4232] usb 5-1: Product: syz [ 120.246623][ T4232] usb 5-1: Manufacturer: syz [ 120.251448][ T4232] usb 5-1: SerialNumber: syz [ 120.278908][ T4232] usb 5-1: config 0 descriptor?? [ 120.325116][ T4232] iowarrior 5-1:0.186: no interrupt-in endpoint found [ 120.432999][ T26] kauditd_printk_skb: 4 callbacks suppressed [ 120.433014][ T26] audit: type=1326 audit(1777354884.439:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5211 comm="syz.3.260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65d986add9 code=0x7ffc0000 [ 120.469394][ T4245] usb 4-1: USB disconnect, device number 2 [ 120.491181][ T26] audit: type=1326 audit(1777354884.439:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5211 comm="syz.3.260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65d986add9 code=0x7ffc0000 [ 120.530251][ T26] audit: type=1326 audit(1777354884.439:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5211 comm="syz.3.260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65d986add9 code=0x7ffc0000 [ 120.559356][ T26] audit: type=1326 audit(1777354884.479:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5211 comm="syz.3.260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f65d986add9 code=0x7ffc0000 [ 120.589690][ T26] audit: type=1326 audit(1777354884.479:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5211 comm="syz.3.260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65d986add9 code=0x7ffc0000 [ 120.618586][ T26] audit: type=1326 audit(1777354884.479:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5211 comm="syz.3.260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f65d986add9 code=0x7ffc0000 [ 120.640688][ C1] vkms_vblank_simulate: vblank timer overrun [ 120.653733][ T26] audit: type=1326 audit(1777354884.489:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5211 comm="syz.3.260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65d986add9 code=0x7ffc0000 [ 120.676343][ T26] audit: type=1326 audit(1777354884.489:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5211 comm="syz.3.260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f65d982b60e code=0x7ffc0000 [ 120.717223][ T26] audit: type=1326 audit(1777354884.589:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5211 comm="syz.3.260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f65d982b60e code=0x7ffc0000 [ 120.720023][ T5245] device syzkaller0 entered promiscuous mode [ 120.739812][ C1] vkms_vblank_simulate: vblank timer overrun [ 120.740195][ T26] audit: type=1326 audit(1777354884.689:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5211 comm="syz.3.260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f65d982b60e code=0x7ffc0000 [ 122.202406][ T4414] usb 5-1: USB disconnect, device number 3 [ 122.255025][ T5269] netlink: 'syz.1.280': attribute type 39 has an invalid length. [ 122.300450][ T5267] device syzkaller0 entered promiscuous mode [ 122.707468][ T5281] device syzkaller0 entered promiscuous mode [ 123.093596][ T23] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 123.353591][ T23] usb 4-1: Using ep0 maxpacket: 8 [ 123.447349][ T5297] device syzkaller0 entered promiscuous mode [ 123.489784][ T23] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 123.520853][ T23] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 123.535249][ T23] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 123.552907][ T23] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 123.570379][ T23] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 123.606661][ T23] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 123.607457][ T5303] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 123.618599][ T23] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.646987][ T5305] netlink: 'syz.2.293': attribute type 39 has an invalid length. [ 123.943897][ T23] usb 4-1: GET_CAPABILITIES returned 0 [ 123.949570][ T23] usbtmc 4-1:16.0: can't read capabilities [ 123.997803][ T5312] device syzkaller0 entered promiscuous mode [ 124.213638][ T4230] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 124.449236][ T4414] usb 4-1: USB disconnect, device number 3 [ 124.464852][ T4230] usb 1-1: Using ep0 maxpacket: 32 [ 124.584396][ T4230] usb 1-1: config index 0 descriptor too short (expected 156, got 27) [ 124.609249][ T4230] usb 1-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 124.628935][ T5332] device syzkaller0 entered promiscuous mode [ 124.651037][ T4230] usb 1-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 124.669531][ T4230] usb 1-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 124.690533][ T4230] usb 1-1: config 0 interface 0 has no altsetting 0 [ 124.855084][ T4230] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 124.878324][ T4230] usb 1-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 124.924125][ T4230] usb 1-1: Product: syz [ 124.931840][ T4230] usb 1-1: Manufacturer: syz [ 124.941180][ T4230] usb 1-1: SerialNumber: syz [ 124.974515][ T4230] usb 1-1: config 0 descriptor?? [ 125.056384][ T4230] ldusb 1-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 125.095719][ T4230] ldusb 1-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 125.325485][ T4245] usb 1-1: USB disconnect, device number 4 [ 125.333577][ C0] ldusb 1-1:0.0: usb_submit_urb failed (-19) [ 125.340377][ T5314] ldusb 1-1:0.0: Couldn't submit HID_REQ_SET_REPORT -71 [ 125.347778][ T4245] ldusb 1-1:0.0: LD USB Device #0 now disconnected [ 125.643586][ T4414] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 125.850207][ T5350] netlink: 'syz.2.309': attribute type 39 has an invalid length. [ 125.933637][ T4414] usb 5-1: Using ep0 maxpacket: 8 [ 126.073823][ T4414] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 126.105334][ T4414] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 126.135968][ T4414] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.158544][ T4414] usb 5-1: config 0 descriptor?? [ 126.766971][ T4414] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 126.886274][ T5357] syz.0.310 (5357) used greatest stack depth: 18512 bytes left [ 126.908722][ T4230] usb 5-1: USB disconnect, device number 4 [ 127.183142][ T5367] device syzkaller0 entered promiscuous mode [ 127.713594][ T4232] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 127.953719][ T4232] usb 2-1: Using ep0 maxpacket: 8 [ 128.073700][ T4232] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 128.110449][ T5383] fuse: Unknown parameter 'grou00000000000000000000' [ 128.131733][ T4232] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 128.241036][ T4232] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 128.348500][ T4232] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 128.457309][ T4232] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 128.603828][ T4232] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 128.702129][ T4232] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.113797][ T4232] usb 2-1: GET_CAPABILITIES returned 0 [ 129.119365][ T4232] usbtmc 2-1:16.0: can't read capabilities [ 129.261891][ T5389] netlink: 'syz.0.322': attribute type 39 has an invalid length. [ 129.456223][ T26] kauditd_printk_skb: 165 callbacks suppressed [ 129.456240][ T26] audit: type=1326 audit(1777354893.469:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5370 comm="syz.1.316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3cfbf7dd9 code=0x7ffc0000 [ 129.555072][ T26] audit: type=1326 audit(1777354893.499:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5370 comm="syz.1.316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3cfbf7dd9 code=0x7ffc0000 [ 129.572531][ T23] usb 2-1: USB disconnect, device number 5 [ 129.647418][ T26] audit: type=1326 audit(1777354893.499:193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5370 comm="syz.1.316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3cfbf7dd9 code=0x7ffc0000 [ 129.843812][ T26] audit: type=1326 audit(1777354893.499:194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5370 comm="syz.1.316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7ff3cfbf7dd9 code=0x7ffc0000 [ 130.038189][ T26] audit: type=1326 audit(1777354893.499:195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5370 comm="syz.1.316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3cfbf7dd9 code=0x7ffc0000 [ 130.096951][ T26] audit: type=1326 audit(1777354893.499:196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5370 comm="syz.1.316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff3cfbb860e code=0x7ffc0000 [ 130.124176][ T26] audit: type=1326 audit(1777354893.499:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5370 comm="syz.1.316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3cfbf7dd9 code=0x7ffc0000 [ 130.178241][ T26] audit: type=1326 audit(1777354893.499:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5370 comm="syz.1.316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff3cfbb860e code=0x7ffc0000 [ 130.278539][ T26] audit: type=1326 audit(1777354893.499:199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5370 comm="syz.1.316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff3cfbb860e code=0x7ffc0000 [ 130.376795][ T26] audit: type=1326 audit(1777354893.499:200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5370 comm="syz.1.316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff3cfbb860e code=0x7ffc0000 [ 130.813016][ T5422] fuse: Unknown parameter 'grou00000000000000000000' [ 131.599887][ T5440] netlink: 'syz.1.336': attribute type 39 has an invalid length. [ 131.914559][ T5446] device syzkaller0 entered promiscuous mode [ 131.957448][ T5448] device syzkaller0 entered promiscuous mode [ 132.811667][ T5460] fuse: Unknown parameter 'grou00000000000000000000' [ 132.907906][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.918091][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.828959][ T5473] netlink: 'syz.2.343': attribute type 13 has an invalid length. [ 134.820668][ T5482] netlink: 'syz.3.349': attribute type 39 has an invalid length. [ 134.991881][ T5484] device syzkaller0 entered promiscuous mode [ 135.363042][ T5496] device syzkaller1 entered promiscuous mode [ 136.101052][ T5506] fuse: Unknown parameter 'group_i00000000000000000000' [ 136.173504][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 136.223501][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 136.243501][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 136.283506][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 136.343502][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 136.353507][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 136.383501][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 136.403501][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 136.433503][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 136.553502][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 136.788197][ T5505] tipc: Enabling of bearer rejected, failed to enable media [ 137.302258][ T5527] device syzkaller0 entered promiscuous mode [ 137.341132][ T5532] netlink: 'syz.4.364': attribute type 39 has an invalid length. [ 138.209605][ T5552] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 138.262958][ T5553] fuse: Unknown parameter 'group_i00000000000000000000' [ 139.832651][ T5563] device syzkaller0 entered promiscuous mode [ 139.839436][ T1325] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 140.439967][ T1325] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 140.463729][ T1325] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 140.472949][ T1325] usb 5-1: New USB device found, idVendor=046d, idProduct=c086, bcdDevice= 0.00 [ 140.492853][ T1325] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.514405][ T1325] usb 5-1: rejected 1 configuration due to insufficient available bus power [ 140.540230][ T5580] device syzkaller0 entered promiscuous mode [ 140.542841][ T1325] usb 5-1: no configuration chosen from 1 choice [ 140.935154][ T5590] fuse: Unknown parameter 'group_i00000000000000000000' [ 140.962415][ T1325] usb 5-1: USB disconnect, device number 5 [ 141.772337][ T5595] netlink: 'syz.1.386': attribute type 39 has an invalid length. [ 143.042227][ T5627] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 143.354138][ T4414] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 143.801815][ T5628] fuse: Unknown parameter 'group_id00000000000000000000' [ 143.961509][ T4414] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 143.972379][ T4414] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 143.990102][ T4414] usb 2-1: New USB device found, idVendor=046d, idProduct=c086, bcdDevice= 0.00 [ 143.999392][ T4414] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.019578][ T4414] usb 2-1: rejected 1 configuration due to insufficient available bus power [ 144.028568][ T4414] usb 2-1: no configuration chosen from 1 choice [ 144.633706][ T5643] netlink: 32 bytes leftover after parsing attributes in process `syz.3.402'. [ 144.648563][ T5639] netlink: 'syz.4.400': attribute type 39 has an invalid length. [ 145.058010][ T5656] device syzkaller0 entered promiscuous mode [ 145.634159][ T4414] usb 2-1: USB disconnect, device number 6 [ 145.706864][ T5677] netlink: 32 bytes leftover after parsing attributes in process `syz.1.415'. [ 145.716711][ T5676] overlayfs: failed to clone upperpath [ 145.910270][ T5683] netlink: 'syz.1.417': attribute type 39 has an invalid length. [ 146.260473][ T5695] binder: 5694:5695 unknown command 1074553619 [ 146.290800][ T5695] binder: 5694:5695 ioctl c0306201 200000000040 returned -22 [ 146.366927][ T5695] binder: 5694:5695 unknown command 1074553620 [ 146.373156][ T5695] binder: 5694:5695 ioctl c0306201 200000000640 returned -22 [ 146.918962][ T5711] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 147.253811][ T23] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 147.674330][ T23] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 147.743720][ T23] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 147.774313][ T23] usb 2-1: New USB device found, idVendor=046d, idProduct=c086, bcdDevice= 0.00 [ 147.783406][ T23] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.844465][ T23] usb 2-1: rejected 1 configuration due to insufficient available bus power [ 147.862451][ T23] usb 2-1: no configuration chosen from 1 choice [ 147.984250][ T5724] netlink: 'syz.4.434': attribute type 39 has an invalid length. [ 148.973649][ T5745] netlink: 'syz.0.440': attribute type 1 has an invalid length. [ 149.089251][ T5745] 8021q: adding VLAN 0 to HW filter on device bond2 [ 149.904611][ T4230] usb 2-1: USB disconnect, device number 7 [ 149.980347][ T5743] netlink: 20 bytes leftover after parsing attributes in process `syz.4.441'. [ 150.043576][ T13] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 150.161647][ T5768] tipc: Enabling of bearer rejected, failed to enable media [ 150.299364][ T13] usb 1-1: Using ep0 maxpacket: 16 [ 150.459962][ T5777] netlink: 'syz.3.447': attribute type 12 has an invalid length. [ 150.481009][ T5780] fuse: Bad value for 'fd' [ 150.593644][ T13] usb 1-1: config 0 interface 0 altsetting 44 has an invalid endpoint with address 0xFF, skipping [ 150.613973][ T13] usb 1-1: config 0 interface 0 altsetting 44 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 150.651255][ T13] usb 1-1: config 0 interface 0 has no altsetting 0 [ 150.813913][ T13] usb 1-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 150.993813][ T13] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.011926][ T13] usb 1-1: Product: syz [ 151.016227][ T13] usb 1-1: Manufacturer: syz [ 151.021033][ T13] usb 1-1: SerialNumber: syz [ 151.036325][ T13] usb 1-1: config 0 descriptor?? [ 151.053902][ T5745] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 151.805687][ T5799] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 152.125102][ T4414] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 152.564974][ T4414] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 152.581707][ T7] usb 1-1: USB disconnect, device number 5 [ 152.613659][ T4414] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 152.673206][ T4414] usb 4-1: New USB device found, idVendor=046d, idProduct=c086, bcdDevice= 0.00 [ 152.721803][ T4414] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.752609][ T4414] usb 4-1: rejected 1 configuration due to insufficient available bus power [ 152.790851][ T4414] usb 4-1: no configuration chosen from 1 choice [ 153.105869][ T5818] tipc: Enabled bearer , priority 0 [ 153.128051][ T5818] device syzkaller0 entered promiscuous mode [ 153.166991][ T5818] tipc: Resetting bearer [ 153.184191][ T5817] tipc: Resetting bearer [ 153.212475][ T5817] tipc: Disabling bearer [ 153.484225][ T5823] fuse: Bad value for 'user_id' [ 154.587611][ T1325] usb 4-1: USB disconnect, device number 4 [ 155.133406][ T5840] netlink: 'syz.3.467': attribute type 1 has an invalid length. [ 155.206977][ T5840] 8021q: adding VLAN 0 to HW filter on device bond2 [ 155.670599][ T5848] netlink: 'syz.0.469': attribute type 39 has an invalid length. [ 155.948534][ T5854] loop1: detected capacity change from 0 to 8 [ 156.131296][ T5854] SQUASHFS error: zlib decompression failed, data probably corrupt [ 156.139569][ T5854] SQUASHFS error: Failed to read block 0x9b: -5 [ 156.145941][ T5854] SQUASHFS error: Unable to read metadata cache entry [99] [ 156.153212][ T5854] SQUASHFS error: Unable to read inode 0x127 [ 156.982520][ T5867] fuse: Bad value for 'user_id' [ 158.200472][ T5880] device syzkaller0 entered promiscuous mode [ 158.762500][ T5893] netlink: 'syz.2.482': attribute type 1 has an invalid length. [ 158.828674][ T5893] 8021q: adding VLAN 0 to HW filter on device bond2 [ 159.284232][ T5900] netlink: 'syz.0.484': attribute type 39 has an invalid length. [ 160.421059][ T5911] fuse: Bad value for 'user_id' [ 161.378274][ T5921] netlink: 56 bytes leftover after parsing attributes in process `syz.2.489'. [ 161.409993][ T5922] fuse: Bad value for 'fd' [ 161.728102][ T5921] netlink: 260 bytes leftover after parsing attributes in process `syz.2.489'. [ 162.180679][ T5925] device syzkaller0 entered promiscuous mode [ 162.443822][ T5933] netlink: 20 bytes leftover after parsing attributes in process `syz.3.491'. [ 164.526146][ T5954] loop1: detected capacity change from 0 to 8 [ 164.774075][ T5954] SQUASHFS error: zlib decompression failed, data probably corrupt [ 164.782253][ T5954] SQUASHFS error: Failed to read block 0x9b: -5 [ 164.788656][ T5954] SQUASHFS error: Unable to read metadata cache entry [99] [ 164.795992][ T5954] SQUASHFS error: Unable to read inode 0x127 [ 165.519860][ T5974] fuse: Bad value for 'fd' [ 166.457403][ T5982] device syzkaller0 entered promiscuous mode [ 166.868999][ T5990] device syzkaller0 entered promiscuous mode [ 167.171189][ T13] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 167.424355][ T13] usb 4-1: Using ep0 maxpacket: 8 [ 168.156829][ T6005] loop1: detected capacity change from 0 to 8 [ 168.496097][ T6005] SQUASHFS error: zlib decompression failed, data probably corrupt [ 168.504983][ T6005] SQUASHFS error: Failed to read block 0x9b: -5 [ 168.511689][ T6005] SQUASHFS error: Unable to read metadata cache entry [99] [ 168.519040][ T6005] SQUASHFS error: Unable to read inode 0x127 [ 168.910265][ T13] usb 4-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 168.922863][ T13] usb 4-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 168.945784][ T13] usb 4-1: config 0 interface 0 has no altsetting 0 [ 168.952549][ T13] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 169.075379][ T13] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 169.147992][ T13] usb 4-1: config 0 descriptor?? [ 169.221842][ T6021] overlayfs: unrecognized mount option "verity=on" or missing value [ 169.371758][ T6024] device syzkaller0 entered promiscuous mode [ 169.750238][ T6044] tipc: Enabling of bearer rejected, failed to enable media [ 169.771380][ T13] mcp2221 0003:04D8:00DD.0002: unknown main item tag 0x0 [ 169.953329][ T13] mcp2221 0003:04D8:00DD.0002: unknown main item tag 0x0 [ 170.076316][ T13] mcp2221 0003:04D8:00DD.0002: unknown main item tag 0x0 [ 170.094220][ T13] mcp2221 0003:04D8:00DD.0002: unknown main item tag 0x0 [ 170.101335][ T13] mcp2221 0003:04D8:00DD.0002: unknown main item tag 0x0 [ 170.117811][ T13] mcp2221 0003:04D8:00DD.0002: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.3-1/input0 [ 170.314156][ T13] usb 4-1: USB disconnect, device number 5 [ 171.550675][ T6072] Zero length message leads to an empty skb [ 172.355964][ T6078] fuse: Bad value for 'fd' [ 174.173139][ T6086] device syzkaller0 entered promiscuous mode [ 174.257898][ T6088] loop3: detected capacity change from 0 to 512 [ 175.625783][ T6088] __quota_error: 75 callbacks suppressed [ 175.625803][ T6088] Quota error (device loop3): v2_read_file_info: Free block number too big (0 >= 0). [ 175.704122][ T6099] device syzkaller0 entered promiscuous mode [ 175.768450][ T6088] EXT4-fs warning (device loop3): ext4_enable_quotas:6488: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 175.796092][ T6088] EXT4-fs (loop3): mount failed [ 177.271177][ T6126] fuse: Bad value for 'fd' [ 179.935224][ T6159] device syzkaller0 entered promiscuous mode [ 182.152147][ T6175] fuse: Bad value for 'fd' [ 182.346439][ T6189] device syzkaller0 entered promiscuous mode [ 184.733374][ T6219] loop4: detected capacity change from 0 to 512 [ 185.098901][ T6219] Quota error (device loop4): v2_read_file_info: Free block number too big (0 >= 0). [ 185.119800][ T6219] EXT4-fs warning (device loop4): ext4_enable_quotas:6488: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 185.166925][ T6219] EXT4-fs (loop4): mount failed [ 187.031525][ T6251] device syzkaller0 entered promiscuous mode [ 187.215194][ T6257] netlink: 'syz.3.589': attribute type 1 has an invalid length. [ 187.273130][ T6257] 8021q: adding VLAN 0 to HW filter on device bond3 [ 187.553577][ T4232] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 187.803534][ T4232] usb 4-1: Using ep0 maxpacket: 16 [ 188.303838][ T4232] usb 4-1: config 0 interface 0 altsetting 44 has an invalid endpoint with address 0xFF, skipping [ 188.325373][ T4232] usb 4-1: config 0 interface 0 altsetting 44 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 188.363220][ T4232] usb 4-1: config 0 interface 0 has no altsetting 0 [ 189.333851][ T4232] usb 4-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 189.343610][ T4232] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 189.351777][ T4232] usb 4-1: Product: syz [ 189.360370][ T4232] usb 4-1: Manufacturer: syz [ 189.365369][ T4232] usb 4-1: SerialNumber: syz [ 189.373034][ T4232] usb 4-1: config 0 descriptor?? [ 189.394130][ T6257] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 189.685438][ T6286] netlink: 'syz.2.594': attribute type 13 has an invalid length. [ 190.693268][ T1325] usb 4-1: USB disconnect, device number 6 [ 190.777529][ T6292] fuse: Invalid rootmode [ 191.356112][ T4232] Bluetooth: hci1: command 0x0406 tx timeout [ 191.364554][ T4232] Bluetooth: hci2: command 0x0406 tx timeout [ 191.377603][ T4232] Bluetooth: hci3: command 0x0406 tx timeout [ 192.404960][ T6306] loop3: detected capacity change from 0 to 8 [ 192.581540][ T6306] SQUASHFS error: zlib decompression failed, data probably corrupt [ 192.589730][ T6306] SQUASHFS error: Failed to read block 0x9b: -5 [ 192.596139][ T6306] SQUASHFS error: Unable to read metadata cache entry [99] [ 192.604037][ T6306] SQUASHFS error: Unable to read inode 0x127 [ 194.347950][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.354315][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.670695][ T6325] misc userio: Invalid payload size [ 195.706759][ T6330] loop3: detected capacity change from 0 to 512 [ 196.139063][ T6330] Quota error (device loop3): v2_read_file_info: Free block number too big (0 >= 0). [ 196.268774][ T6330] EXT4-fs warning (device loop3): ext4_enable_quotas:6488: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 196.567797][ T6330] EXT4-fs (loop3): mount failed [ 197.270181][ T6343] fuse: Invalid rootmode [ 198.577434][ T6357] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 200.443593][ T7] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 200.849360][ T6376] misc userio: Invalid payload size [ 203.198051][ T6393] loop4: detected capacity change from 0 to 512 [ 203.351006][ T6392] fuse: Bad value for 'fd' [ 204.541323][ T6393] Quota error (device loop4): v2_read_file_info: Free block number too big (0 >= 0). [ 204.559962][ T6393] EXT4-fs warning (device loop4): ext4_enable_quotas:6488: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 206.737715][ T6416] loop0: detected capacity change from 0 to 8 [ 206.836341][ T6393] EXT4-fs (loop4): mount failed [ 206.905920][ T6416] SQUASHFS error: zlib decompression failed, data probably corrupt [ 206.914642][ T6416] SQUASHFS error: Failed to read block 0x9b: -5 [ 206.921030][ T6416] SQUASHFS error: Unable to read metadata cache entry [99] [ 206.929029][ T6416] SQUASHFS error: Unable to read inode 0x127 [ 207.583743][ T6431] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 209.623895][ T1325] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 210.005057][ T6443] fuse: Bad value for 'rootmode' [ 210.043796][ T1325] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 210.058606][ T1325] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 210.068209][ T1325] usb 4-1: New USB device found, idVendor=046d, idProduct=c086, bcdDevice= 0.00 [ 210.077684][ T1325] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 210.134752][ T1325] usb 4-1: rejected 1 configuration due to insufficient available bus power [ 210.164453][ T1325] usb 4-1: no configuration chosen from 1 choice [ 210.454550][ T1325] usb 4-1: USB disconnect, device number 7 [ 211.748778][ T6465] netlink: 'syz.0.640': attribute type 1 has an invalid length. [ 212.119137][ T6477] loop3: detected capacity change from 0 to 8 [ 212.214025][ T6477] SQUASHFS error: zlib decompression failed, data probably corrupt [ 212.222320][ T6477] SQUASHFS error: Failed to read block 0x9b: -5 [ 212.228731][ T6477] SQUASHFS error: Unable to read metadata cache entry [99] [ 212.236479][ T6477] SQUASHFS error: Unable to read inode 0x127 [ 212.919416][ T6480] loop3: detected capacity change from 0 to 512 [ 212.979034][ T6465] 8021q: adding VLAN 0 to HW filter on device bond3 [ 212.997189][ T6480] Quota error (device loop3): v2_read_file_info: Free block number too big (0 >= 0). [ 213.033711][ T6480] EXT4-fs warning (device loop3): ext4_enable_quotas:6488: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 213.053715][ T6474] device syzkaller0 entered promiscuous mode [ 213.150914][ T6480] EXT4-fs (loop3): mount failed [ 216.033526][ T6508] netlink: 'syz.2.648': attribute type 13 has an invalid length. [ 216.846049][ T6509] fuse: Bad value for 'rootmode' [ 218.439651][ T7] Bluetooth: hci4: command 0x0406 tx timeout [ 218.471641][ T6523] device syzkaller0 entered promiscuous mode [ 221.280459][ T6557] fuse: Bad value for 'rootmode' [ 223.474932][ T6584] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 224.733749][ T7] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 225.145678][ T7] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 225.262336][ T7] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 225.620391][ T7] usb 5-1: New USB device found, idVendor=046d, idProduct=c086, bcdDevice= 0.00 [ 225.630059][ T7] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 226.609400][ T6605] device syzkaller0 entered promiscuous mode [ 226.616250][ T6615] netlink: 'syz.0.674': attribute type 11 has an invalid length. [ 226.645645][ T7] usb 5-1: rejected 1 configuration due to insufficient available bus power [ 226.654879][ T7] usb 5-1: no configuration chosen from 1 choice [ 226.666998][ T7] usb 5-1: USB disconnect, device number 7 [ 226.714481][ T6615] netlink: 5252 bytes leftover after parsing attributes in process `syz.0.674'. [ 226.780977][ T6613] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 228.918351][ T6651] netlink: 'syz.0.683': attribute type 39 has an invalid length. [ 229.937576][ T6668] tipc: Enabled bearer , priority 0 [ 229.969601][ T6668] device syzkaller0 entered promiscuous mode [ 230.044024][ T6668] tipc: Resetting bearer [ 230.075178][ T6667] tipc: Resetting bearer [ 230.091035][ T6672] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 230.149974][ T6667] tipc: Disabling bearer [ 231.193582][ T4230] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 231.468828][ T4230] usb 1-1: Using ep0 maxpacket: 16 [ 231.603849][ T4230] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 231.679343][ T6696] netlink: 'syz.1.696': attribute type 39 has an invalid length. [ 231.979890][ T4230] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 232.029410][ T4230] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 232.052991][ T4230] usb 1-1: Product: syz [ 232.196693][ T6712] tipc: Enabling of bearer rejected, failed to enable media [ 232.218236][ T4230] usb 1-1: Manufacturer: syz [ 232.223407][ T4230] usb 1-1: SerialNumber: syz [ 232.238669][ T4230] usb 1-1: config 0 descriptor?? [ 233.035045][ T4230] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 233.048622][ T4230] em28xx 1-1:0.0: DVB interface 0 found: bulk [ 233.395662][ T6731] loop3: detected capacity change from 0 to 512 [ 233.675228][ T6731] Quota error (device loop3): v2_read_file_info: Free block number too big (0 >= 0). [ 233.703878][ T6731] EXT4-fs warning (device loop3): ext4_enable_quotas:6488: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 233.744111][ T6731] EXT4-fs (loop3): mount failed [ 233.776606][ T6740] tipc: Enabling of bearer rejected, failed to enable media [ 234.493578][ T4230] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 234.901008][ T4230] em28xx 1-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 234.971621][ T4230] em28xx 1-1:0.0: board has no eeprom [ 235.228286][ T4230] em28xx 1-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 235.249039][ T4230] em28xx 1-1:0.0: dvb set to bulk mode. [ 235.290855][ T4230] usb 1-1: USB disconnect, device number 6 [ 235.360246][ T6754] tipc: Enabling of bearer rejected, failed to enable media [ 235.469292][ T4230] em28xx 1-1:0.0: Disconnecting em28xx [ 235.476307][ T4232] em28xx 1-1:0.0: Binding DVB extension [ 236.317294][ T4232] em28xx 1-1:0.0: Registering input extension [ 236.324354][ T4230] em28xx 1-1:0.0: Closing input extension [ 236.346781][ T4230] em28xx 1-1:0.0: Freeing device [ 236.672131][ T6773] device syzkaller0 entered promiscuous mode [ 238.417521][ T6796] fuse: Unknown parameter 'user_i00000000000000000000' [ 239.537339][ T6804] tipc: Enabled bearer , priority 0 [ 239.671177][ T6807] netlink: 'syz.2.729': attribute type 12 has an invalid length. [ 239.888966][ T6805] device syzkaller0 entered promiscuous mode [ 239.911636][ T6804] tipc: Resetting bearer [ 240.483588][ T6801] tipc: Resetting bearer [ 240.527593][ T6801] tipc: Disabling bearer [ 240.592279][ T6823] device syzkaller0 entered promiscuous mode [ 240.896167][ T6832] fuse: Bad value for 'fd' [ 242.683982][ T6841] fuse: Unknown parameter 'user_i00000000000000000000' [ 243.707269][ T4189] Bluetooth: hci2: ACL packet too small [ 243.749067][ T6852] loop4: detected capacity change from 0 to 512 [ 244.188379][ T6863] tipc: Enabled bearer , priority 0 [ 244.214497][ T6863] device syzkaller0 entered promiscuous mode [ 244.244370][ T6869] netlink: 'syz.2.749': attribute type 39 has an invalid length. [ 244.258460][ T6852] Quota error (device loop4): v2_read_file_info: Free block number too big (0 >= 0). [ 244.273806][ T6852] EXT4-fs warning (device loop4): ext4_enable_quotas:6488: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 244.318477][ T6863] tipc: Resetting bearer [ 244.344170][ T6868] device syzkaller0 entered promiscuous mode [ 244.372869][ T6852] EXT4-fs (loop4): mount failed [ 244.395329][ T6862] tipc: Resetting bearer [ 244.417014][ T6862] tipc: Disabling bearer [ 244.490386][ T6880] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 244.505571][ T6880] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 244.822408][ T6887] netlink: 12 bytes leftover after parsing attributes in process `syz.0.754'. [ 244.933323][ T6883] netlink: 'syz.2.752': attribute type 1 has an invalid length. [ 246.192585][ T6912] netlink: 'syz.2.762': attribute type 39 has an invalid length. [ 246.205506][ T6913] fuse: Unknown parameter 'user_id00000000000000000000' [ 246.228220][ T6915] 9pnet_virtio: no channels available for device syz [ 247.155143][ T6927] tipc: Enabled bearer , priority 0 [ 247.212052][ T6936] loop3: detected capacity change from 0 to 512 [ 247.229096][ T6937] netlink: 'syz.0.766': attribute type 1 has an invalid length. [ 247.276633][ T6937] 8021q: adding VLAN 0 to HW filter on device bond4 [ 247.306579][ T6941] device syzkaller0 entered promiscuous mode [ 247.322549][ T6936] Quota error (device loop3): v2_read_file_info: Free block number too big (0 >= 0). [ 247.346044][ T6927] tipc: Resetting bearer [ 247.362317][ T6936] EXT4-fs warning (device loop3): ext4_enable_quotas:6488: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 247.399916][ T6925] tipc: Resetting bearer [ 247.419860][ T6936] EXT4-fs (loop3): mount failed [ 247.452024][ T6925] tipc: Disabling bearer [ 247.635581][ T6951] tipc: Enabling of bearer rejected, failed to enable media [ 248.211782][ T6962] netlink: 'syz.2.774': attribute type 39 has an invalid length. [ 249.563765][ T6983] fuse: Unknown parameter 'user_id00000000000000000000' [ 250.580793][ T6989] team0 (unregistering): Port device team_slave_0 removed [ 250.610180][ T6989] team0 (unregistering): Port device team_slave_1 removed [ 250.666795][ T7003] tipc: Enabling of bearer rejected, failed to enable media [ 250.808061][ T7008] tipc: Started in network mode [ 250.849833][ T7008] tipc: Node identity 464425b6e21b, cluster identity 4711 [ 250.901127][ T7008] tipc: Enabled bearer , priority 0 [ 250.934019][ T7012] device syzkaller0 entered promiscuous mode [ 251.025446][ T7008] tipc: Resetting bearer [ 251.200875][ T7007] tipc: Resetting bearer [ 251.355041][ T7007] tipc: Disabling bearer [ 252.060684][ T7030] fuse: Unknown parameter 'user_id00000000000000000000' [ 252.886700][ T7040] netlink: 'syz.3.797': attribute type 39 has an invalid length. [ 253.163216][ T7055] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 253.493764][ T23] usb 1-1: new full-speed USB device number 7 using dummy_hcd [ 254.004311][ T23] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 254.086094][ T23] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 254.132582][ T23] usb 1-1: New USB device found, idVendor=046d, idProduct=c086, bcdDevice= 0.00 [ 254.162064][ T23] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 254.190911][ T23] usb 1-1: rejected 1 configuration due to insufficient available bus power [ 254.206514][ T23] usb 1-1: no configuration chosen from 1 choice [ 254.333862][ T7073] netlink: 'syz.1.801': attribute type 1 has an invalid length. [ 254.355595][ T7077] overlayfs: missing 'lowerdir' [ 254.376087][ T7073] 8021q: adding VLAN 0 to HW filter on device bond2 [ 255.148073][ T7089] netlink: 'syz.2.809': attribute type 39 has an invalid length. [ 255.178017][ T7090] fuse: Bad value for 'fd' [ 255.603600][ T13] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 255.785715][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.792120][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.911905][ T13] usb 2-1: Using ep0 maxpacket: 16 [ 255.915360][ T4245] usb 1-1: USB disconnect, device number 7 [ 256.290927][ T13] usb 2-1: config 0 interface 0 altsetting 44 has an invalid endpoint with address 0xFF, skipping [ 256.337277][ T13] usb 2-1: config 0 interface 0 altsetting 44 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 256.411294][ T13] usb 2-1: config 0 interface 0 has no altsetting 0 [ 256.471291][ T7107] device syzkaller0 entered promiscuous mode [ 256.590980][ T13] usb 2-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 256.611183][ T13] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 256.641166][ T13] usb 2-1: Product: syz [ 256.655116][ T13] usb 2-1: Manufacturer: syz [ 256.659772][ T13] usb 2-1: SerialNumber: syz [ 256.686107][ T13] usb 2-1: config 0 descriptor?? [ 256.703895][ T7072] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 256.712627][ T7122] netlink: 'syz.3.821': attribute type 39 has an invalid length. [ 256.963808][ T13] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 257.263714][ T13] usb 5-1: Using ep0 maxpacket: 8 [ 257.384225][ T13] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 257.447490][ T13] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 257.551095][ T13] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 257.613729][ T13] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 257.643882][ T13] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 257.653285][ T13] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 258.072148][ T4189] block nbd0: Receive control failed (result -32) [ 258.086775][ T7147] block nbd0: shutting down sockets [ 258.170530][ T23] usb 2-1: USB disconnect, device number 8 [ 258.378758][ T13] usb 5-1: GET_CAPABILITIES returned 0 [ 258.384407][ T13] usbtmc 5-1:16.0: can't read capabilities [ 258.408199][ T13] usb 5-1: USB disconnect, device number 8 [ 258.436546][ T7153] device syzkaller0 entered promiscuous mode [ 258.455707][ T7156] netlink: 'syz.3.833': attribute type 39 has an invalid length. [ 258.525299][ T7158] netlink: 'syz.3.834': attribute type 12 has an invalid length. [ 258.683597][ T23] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 259.081231][ T7178] input: syz0 as /devices/virtual/input/input6 [ 259.128382][ T23] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 259.182468][ T23] usb 2-1: config 0 interface 0 has no altsetting 0 [ 259.252906][ T7183] netlink: 'syz.3.842': attribute type 1 has an invalid length. [ 259.285295][ T7183] 8021q: adding VLAN 0 to HW filter on device bond4 [ 259.333397][ T7189] netlink: 'syz.4.844': attribute type 39 has an invalid length. [ 259.339459][ T7187] loop0: detected capacity change from 0 to 512 [ 259.377461][ T23] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 259.416260][ T23] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 259.453179][ T23] usb 2-1: Product: syz [ 259.458147][ T23] usb 2-1: Manufacturer: syz [ 259.463321][ T23] usb 2-1: SerialNumber: syz [ 259.538315][ T7187] Quota error (device loop0): v2_read_file_info: Free block number too big (0 >= 0). [ 259.557918][ T23] usb 2-1: config 0 descriptor?? [ 259.575913][ T7187] EXT4-fs warning (device loop0): ext4_enable_quotas:6488: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 259.612493][ T23] usb 2-1: selecting invalid altsetting 0 [ 259.690553][ T7187] EXT4-fs (loop0): mount failed [ 259.853038][ T7151] usb 2-1: selecting invalid altsetting 0 [ 259.912150][ T7151] usb 2-1: 0:0: usb_set_interface failed (-22) [ 259.923771][ T4226] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 259.942453][ T13] usb 2-1: USB disconnect, device number 9 [ 259.968507][ T7207] tipc: Enabling of bearer rejected, failed to enable media [ 260.302017][ T7219] netlink: 'syz.4.851': attribute type 12 has an invalid length. [ 260.313514][ T4226] usb 4-1: Using ep0 maxpacket: 16 [ 260.443765][ T4226] usb 4-1: config 0 interface 0 altsetting 44 has an invalid endpoint with address 0xFF, skipping [ 260.462596][ T4226] usb 4-1: config 0 interface 0 altsetting 44 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 260.500220][ T4226] usb 4-1: config 0 interface 0 has no altsetting 0 [ 260.857384][ T4226] usb 4-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 260.867254][ T4226] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 260.876218][ T4226] usb 4-1: Product: syz [ 260.880414][ T4226] usb 4-1: Manufacturer: syz [ 260.886063][ T4226] usb 4-1: SerialNumber: syz [ 260.913018][ T4226] usb 4-1: config 0 descriptor?? [ 260.943751][ T7183] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 261.162613][ T7242] netlink: 'syz.2.856': attribute type 39 has an invalid length. [ 261.250772][ T7244] device syzkaller0 entered promiscuous mode [ 261.301875][ T7247] tipc: Enabling of bearer rejected, failed to enable media [ 261.659746][ T7268] device syzkaller0 entered promiscuous mode [ 261.963207][ T7279] netlink: 'syz.2.868': attribute type 39 has an invalid length. [ 261.973729][ T7281] netlink: 'syz.1.869': attribute type 12 has an invalid length. [ 262.200643][ T7293] tipc: Enabled bearer , priority 0 [ 262.209217][ T7293] device syzkaller0 entered promiscuous mode [ 262.230969][ T7292] tipc: Resetting bearer [ 262.242830][ T13] usb 4-1: USB disconnect, device number 8 [ 262.324644][ T7292] tipc: Disabling bearer [ 262.742843][ T7321] netlink: 'syz.4.881': attribute type 39 has an invalid length. [ 262.819800][ T4189] Bluetooth: hci0: unexpected event for opcode 0x040d [ 262.887489][ T7328] netlink: 'syz.0.886': attribute type 1 has an invalid length. [ 262.917168][ T7328] 8021q: adding VLAN 0 to HW filter on device bond5 [ 262.971485][ T7336] tipc: Enabled bearer , priority 0 [ 262.979666][ T7336] device syzkaller0 entered promiscuous mode [ 262.998333][ T7336] tipc: Resetting bearer [ 263.006087][ T7335] tipc: Resetting bearer [ 263.020615][ T7335] tipc: Disabling bearer [ 263.213639][ T23] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 263.468686][ T7363] device syzkaller0 entered promiscuous mode [ 263.493683][ T23] usb 1-1: Using ep0 maxpacket: 16 [ 263.508019][ T7366] validate_nla: 1 callbacks suppressed [ 263.508036][ T7366] netlink: 'syz.1.896': attribute type 39 has an invalid length. [ 263.623813][ T23] usb 1-1: config 0 interface 0 altsetting 44 has an invalid endpoint with address 0xFF, skipping [ 263.645225][ T23] usb 1-1: config 0 interface 0 altsetting 44 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 263.685969][ T23] usb 1-1: config 0 interface 0 has no altsetting 0 [ 263.686245][ T7372] tipc: Enabled bearer , priority 0 [ 263.705745][ T7372] device syzkaller0 entered promiscuous mode [ 263.716786][ T7371] tipc: Resetting bearer [ 263.731304][ T7371] tipc: Disabling bearer [ 263.853764][ T23] usb 1-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 263.872628][ T23] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 263.893918][ T23] usb 1-1: Product: syz [ 263.901595][ T23] usb 1-1: Manufacturer: syz [ 263.910970][ T23] usb 1-1: SerialNumber: syz [ 263.926258][ T23] usb 1-1: config 0 descriptor?? [ 263.945427][ T7380] device syzkaller0 entered promiscuous mode [ 263.974001][ T7328] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 264.022077][ T7387] [ 264.025685][ T7387] ============================= [ 264.030760][ T7387] WARNING: suspicious RCU usage [ 264.037164][ T7387] syzkaller #0 Not tainted [ 264.041634][ T7387] ----------------------------- [ 264.048631][ T7387] include/linux/rhashtable.h:594 suspicious rcu_dereference_check() usage! [ 264.057769][ T7387] [ 264.057769][ T7387] other info that might help us debug this: [ 264.057769][ T7387] [ 264.068516][ T7387] [ 264.068516][ T7387] rcu_scheduler_active = 2, debug_locks = 1 [ 264.076881][ T7387] 1 lock held by syz.4.905/7387: [ 264.082059][ T7387] #0: ffffffff8d43d408 (rtnl_mutex){+.+.}-{3:3}, at: ip_mroute_setsockopt+0x136/0x1250 [ 264.092556][ T7387] [ 264.092556][ T7387] stack backtrace: [ 264.098813][ T7387] CPU: 1 PID: 7387 Comm: syz.4.905 Not tainted syzkaller #0 [ 264.106129][ T7387] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 264.116213][ T7387] Call Trace: [ 264.119518][ T7387] [ 264.122450][ T7387] dump_stack_lvl+0x188/0x250 [ 264.127144][ T7387] ? load_image+0x400/0x400 [ 264.131648][ T7387] ? show_regs_print_info+0x20/0x20 [ 264.136859][ T7387] ? lockdep_rcu_suspicious+0x110/0x180 [ 264.142419][ T7387] ? local_bh_enable+0x20/0x20 [ 264.147182][ T7387] rhltable_lookup+0x7a9/0x7c0 [ 264.151948][ T7387] ? local_bh_enable+0x20/0x20 [ 264.156726][ T7387] ? mr_mfc_find_parent+0x190/0x190 [ 264.161966][ T7387] ? mark_lock+0x94/0x320 [ 264.166292][ T7387] ? local_bh_enable+0x20/0x20 [ 264.171051][ T7387] ? mark_lock+0x94/0x320 [ 264.175392][ T7387] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 264.181390][ T7387] ? lock_chain_count+0x20/0x20 [ 264.186243][ T7387] mr_mfc_find_any_parent+0xb6/0x1e0 [ 264.191535][ T7387] ? local_bh_enable+0x20/0x20 [ 264.196314][ T7387] ip_mr_forward+0x24c/0xf90 [ 264.200934][ T7387] ipmr_mfc_add+0x23cc/0x2d40 [ 264.205611][ T7387] ? ipmr_mfc_delete+0x5f0/0x5f0 [ 264.210547][ T7387] ? __lock_acquire+0x7d10/0x7d10 [ 264.215598][ T7387] ip_mroute_setsockopt+0xeaf/0x1250 [ 264.220911][ T7387] ? ipmr_rule_default+0x70/0x70 [ 264.225874][ T7387] ? __might_sleep+0xf0/0xf0 [ 264.230745][ T7387] ip_setsockopt+0x568/0x3130 [ 264.235446][ T7387] ? ipv4_pktinfo_prepare+0x6f0/0x6f0 [ 264.240851][ T7387] ? aa_sk_perm+0x7dc/0x910 [ 264.245361][ T7387] ? aa_af_perm+0x340/0x340 [ 264.249870][ T7387] ? __fget_files+0x40f/0x480 [ 264.254565][ T7387] ? aa_sock_opt_perm+0x74/0x100 [ 264.259723][ T7387] ? sock_common_setsockopt+0x32/0xb0 [ 264.265096][ T7387] ? raw_setsockopt+0xc5/0x180 [ 264.269857][ T7387] ? sock_common_recvmsg+0x1c0/0x1c0 [ 264.275242][ T7387] __sys_setsockopt+0x2bf/0x3d0 [ 264.280160][ T7387] __x64_sys_setsockopt+0xb1/0xc0 [ 264.285395][ T7387] do_syscall_64+0x4c/0xa0 [ 264.289832][ T7387] ? clear_bhb_loop+0x30/0x80 [ 264.294537][ T7387] ? clear_bhb_loop+0x30/0x80 [ 264.299242][ T7387] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 264.305258][ T7387] RIP: 0033:0x7f94e0090dd9 [ 264.309703][ T7387] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 264.329411][ T7387] RSP: 002b:00007f94de2ea028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 264.338014][ T7387] RAX: ffffffffffffffda RBX: 00007f94e0309fa0 RCX: 00007f94e0090dd9 [ 264.346038][ T7387] RDX: 00000000000000d2 RSI: 0000000000000000 RDI: 0000000000000005 [ 264.354039][ T7387] RBP: 00007f94e0126d69 R08: 000000000000003c R09: 0000000000000000 [ 264.362037][ T7387] R10: 0000200000000200 R11: 0000000000000246 R12: 0000000000000000 [ 264.370118][ T7387] R13: 00007f94e030a038 R14: 00007f94e0309fa0 R15: 00007ffc5e14c038 [ 264.378261][ T7387] [ 264.391941][ T7387] [ 264.396754][ T7387] ============================= [ 264.414405][ T7387] WARNING: suspicious RCU usage [ 264.419489][ T7387] syzkaller #0 Not tainted [ 264.424328][ T7387] ----------------------------- [ 264.429260][ T7387] include/linux/rhashtable.h:369 suspicious rcu_dereference_check() usage! [ 264.438097][ T7387] [ 264.438097][ T7387] other info that might help us debug this: [ 264.438097][ T7387] [ 264.448860][ T7387] [ 264.448860][ T7387] rcu_scheduler_active = 2, debug_locks = 1 [ 264.457404][ T7387] 1 lock held by syz.4.905/7387: [ 264.462471][ T7387] #0: ffffffff8d43d408 (rtnl_mutex){+.+.}-{3:3}, at: ip_mroute_setsockopt+0x136/0x1250 [ 264.472472][ T7387] [ 264.472472][ T7387] stack backtrace: [ 264.478575][ T7387] CPU: 1 PID: 7387 Comm: syz.4.905 Not tainted syzkaller #0 [ 264.485886][ T7387] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 264.495982][ T7387] Call Trace: [ 264.499393][ T7387] [ 264.502509][ T7387] dump_stack_lvl+0x188/0x250 [ 264.507299][ T7387] ? load_image+0x400/0x400 [ 264.511839][ T7387] ? show_regs_print_info+0x20/0x20 [ 264.517076][ T7387] ? lockdep_rcu_suspicious+0x110/0x180 [ 264.522644][ T7387] ? local_bh_enable+0x20/0x20 [ 264.527433][ T7387] rhltable_lookup+0x52a/0x7c0 [ 264.532233][ T7387] ? local_bh_enable+0x20/0x20 [ 264.537028][ T7387] ? mr_mfc_find_parent+0x190/0x190 [ 264.542348][ T7387] ? mark_lock+0x94/0x320 [ 264.546690][ T7387] ? local_bh_enable+0x20/0x20 [ 264.551481][ T7387] ? mark_lock+0x94/0x320 [ 264.555822][ T7387] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 264.561991][ T7387] ? lock_chain_count+0x20/0x20 [ 264.566856][ T7387] mr_mfc_find_any_parent+0xb6/0x1e0 [ 264.572241][ T7387] ? local_bh_enable+0x20/0x20 [ 264.577028][ T7387] ip_mr_forward+0x24c/0xf90 [ 264.581627][ T7387] ipmr_mfc_add+0x23cc/0x2d40 [ 264.586434][ T7387] ? ipmr_mfc_delete+0x5f0/0x5f0 [ 264.591826][ T7387] ? __lock_acquire+0x7d10/0x7d10 [ 264.596857][ T7387] ip_mroute_setsockopt+0xeaf/0x1250 [ 264.602154][ T7387] ? ipmr_rule_default+0x70/0x70 [ 264.607117][ T7387] ? __might_sleep+0xf0/0xf0 [ 264.611725][ T7387] ip_setsockopt+0x568/0x3130 [ 264.616419][ T7387] ? ipv4_pktinfo_prepare+0x6f0/0x6f0 [ 264.621787][ T7387] ? aa_sk_perm+0x7dc/0x910 [ 264.626303][ T7387] ? aa_af_perm+0x340/0x340 [ 264.630830][ T7387] ? __fget_files+0x40f/0x480 [ 264.635516][ T7387] ? aa_sock_opt_perm+0x74/0x100 [ 264.640470][ T7387] ? sock_common_setsockopt+0x32/0xb0 [ 264.645848][ T7387] ? raw_setsockopt+0xc5/0x180 [ 264.650632][ T7387] ? sock_common_recvmsg+0x1c0/0x1c0 [ 264.655913][ T7387] __sys_setsockopt+0x2bf/0x3d0 [ 264.660764][ T7387] __x64_sys_setsockopt+0xb1/0xc0 [ 264.665796][ T7387] do_syscall_64+0x4c/0xa0 [ 264.670236][ T7387] ? clear_bhb_loop+0x30/0x80 [ 264.674930][ T7387] ? clear_bhb_loop+0x30/0x80 [ 264.679602][ T7387] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 264.685497][ T7387] RIP: 0033:0x7f94e0090dd9 [ 264.689938][ T7387] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 264.709540][ T7387] RSP: 002b:00007f94de2ea028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 264.718165][ T7387] RAX: ffffffffffffffda RBX: 00007f94e0309fa0 RCX: 00007f94e0090dd9 [ 264.726141][ T7387] RDX: 00000000000000d2 RSI: 0000000000000000 RDI: 0000000000000005 [ 264.734203][ T7387] RBP: 00007f94e0126d69 R08: 000000000000003c R09: 0000000000000000 [ 264.742196][ T7387] R10: 0000200000000200 R11: 0000000000000246 R12: 0000000000000000 [ 264.750170][ T7387] R13: 00007f94e030a038 R14: 00007f94e0309fa0 R15: 00007ffc5e14c038 [ 264.758216][ T7387] [ 264.765865][ T7387] [ 264.768241][ T7387] ============================= [ 264.773193][ T7387] WARNING: suspicious RCU usage [ 264.778198][ T7387] syzkaller #0 Not tainted [ 264.782648][ T7387] ----------------------------- [ 264.787656][ T7387] include/linux/rhashtable.h:614 suspicious rcu_dereference_check() usage! [ 264.796415][ T7387] [ 264.796415][ T7387] other info that might help us debug this: [ 264.796415][ T7387] [ 264.820043][ T7387] [ 264.820043][ T7387] rcu_scheduler_active = 2, debug_locks = 1 [ 264.828319][ T7387] 1 lock held by syz.4.905/7387: [ 264.833302][ T7387] #0: ffffffff8d43d408 (rtnl_mutex){+.+.}-{3:3}, at: ip_mroute_setsockopt+0x136/0x1250 [ 264.843582][ T7387] [ 264.843582][ T7387] stack backtrace: [ 264.849492][ T7387] CPU: 1 PID: 7387 Comm: syz.4.905 Not tainted syzkaller #0 [ 264.856783][ T7387] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 264.867140][ T7387] Call Trace: [ 264.870425][ T7387] [ 264.873352][ T7387] dump_stack_lvl+0x188/0x250 [ 264.878033][ T7387] ? load_image+0x400/0x400 [ 264.882559][ T7387] ? show_regs_print_info+0x20/0x20 [ 264.887786][ T7387] ? lockdep_rcu_suspicious+0x110/0x180 [ 264.893333][ T7387] ? local_bh_enable+0x20/0x20 [ 264.898119][ T7387] rhltable_lookup+0x61e/0x7c0 [ 264.902891][ T7387] ? local_bh_enable+0x20/0x20 [ 264.907659][ T7387] ? mr_mfc_find_parent+0x190/0x190 [ 264.912852][ T7387] ? mark_lock+0x94/0x320 [ 264.917184][ T7387] ? local_bh_enable+0x20/0x20 [ 264.921967][ T7387] ? mark_lock+0x94/0x320 [ 264.926326][ T7387] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 264.932345][ T7387] ? lock_chain_count+0x20/0x20 [ 264.937232][ T7387] mr_mfc_find_any_parent+0xb6/0x1e0 [ 264.942531][ T7387] ? local_bh_enable+0x20/0x20 [ 264.947301][ T7387] ip_mr_forward+0x24c/0xf90 [ 264.951900][ T7387] ipmr_mfc_add+0x23cc/0x2d40 [ 264.956608][ T7387] ? ipmr_mfc_delete+0x5f0/0x5f0 [ 264.961568][ T7387] ? __lock_acquire+0x7d10/0x7d10 [ 264.966629][ T7387] ip_mroute_setsockopt+0xeaf/0x1250 [ 264.971927][ T7387] ? ipmr_rule_default+0x70/0x70 [ 264.976884][ T7387] ? __might_sleep+0xf0/0xf0 [ 264.981496][ T7387] ip_setsockopt+0x568/0x3130 [ 264.986189][ T7387] ? ipv4_pktinfo_prepare+0x6f0/0x6f0 [ 264.991584][ T7387] ? aa_sk_perm+0x7dc/0x910 [ 264.996094][ T7387] ? aa_af_perm+0x340/0x340 [ 265.000614][ T7387] ? __fget_files+0x40f/0x480 [ 265.005307][ T7387] ? aa_sock_opt_perm+0x74/0x100 [ 265.010265][ T7387] ? sock_common_setsockopt+0x32/0xb0 [ 265.015645][ T7387] ? raw_setsockopt+0xc5/0x180 [ 265.020442][ T7387] ? sock_common_recvmsg+0x1c0/0x1c0 [ 265.025756][ T7387] __sys_setsockopt+0x2bf/0x3d0 [ 265.030641][ T7387] __x64_sys_setsockopt+0xb1/0xc0 [ 265.035762][ T7387] do_syscall_64+0x4c/0xa0 [ 265.040222][ T7387] ? clear_bhb_loop+0x30/0x80 [ 265.045007][ T7387] ? clear_bhb_loop+0x30/0x80 [ 265.050223][ T7387] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 265.056122][ T7387] RIP: 0033:0x7f94e0090dd9 [ 265.060594][ T7387] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 265.080383][ T7387] RSP: 002b:00007f94de2ea028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 265.088821][ T7387] RAX: ffffffffffffffda RBX: 00007f94e0309fa0 RCX: 00007f94e0090dd9 [ 265.096818][ T7387] RDX: 00000000000000d2 RSI: 0000000000000000 RDI: 0000000000000005 [ 265.104817][ T7387] RBP: 00007f94e0126d69 R08: 000000000000003c R09: 0000000000000000 [ 265.112802][ T7387] R10: 0000200000000200 R11: 0000000000000246 R12: 0000000000000000 [ 265.120772][ T7387] R13: 00007f94e030a038 R14: 00007f94e0309fa0 R15: 00007ffc5e14c038 [ 265.128765][ T7387] [ 265.892879][ T4226] usb 1-1: USB disconnect, device number 8