last executing test programs: 1m8.331304152s ago: executing program 4 (id=442): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCCONS(r0, 0x541d) 1m8.225714935s ago: executing program 4 (id=444): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x1dc}, 0x1, 0x0, 0x0, 0x10}, 0x0) 1m7.304449701s ago: executing program 4 (id=450): open_tree(0xffffffffffffff9c, 0x0, 0x89901) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x50}}, 0x4008840) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) r5 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000280), 0x22802, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000040)=0xd) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r6, &(0x7f0000000000)={0x0, 0x6, &(0x7f0000003480)=[{&(0x7f0000000040)="1800000072006bcd9e3fe3dc6e080000070900000d000000", 0x18}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 1m5.357193458s ago: executing program 4 (id=457): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$nfs4(&(0x7f0000000040)='/', &(0x7f0000000080)='./file0\x00', 0x0, 0x197841, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) move_mount(r0, &(0x7f0000000380)='./file0\x00', r0, 0x0, 0x40) 1m5.296690636s ago: executing program 4 (id=460): r0 = socket$l2tp(0x2, 0x2, 0x73) sendto$l2tp(r0, 0x0, 0x19, 0x0, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2f}}, 0x10) 1m5.11223229s ago: executing program 2 (id=462): syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000106a0427000000000000010902240001000000000904000001030000000921004e7dcb07050009058103"], 0x0) 1m3.610106422s ago: executing program 4 (id=467): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2ca}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x2f9, 0x543, &(0x7f0000000040)="b90103600040f000009e0ff008001fffffe100004000632177fb7f0200017f020001be3e7d2a182fff", 0x0, 0x104, 0x6000000000000000, 0x0, 0xfeb9, &(0x7f0000000400)="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"}, 0x28) close_range(r0, 0xffffffffffffffff, 0x0) 1m3.516643841s ago: executing program 32 (id=467): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2ca}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x2f9, 0x543, &(0x7f0000000040)="b90103600040f000009e0ff008001fffffe100004000632177fb7f0200017f020001be3e7d2a182fff", 0x0, 0x104, 0x6000000000000000, 0x0, 0xfeb9, &(0x7f0000000400)="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"}, 0x28) close_range(r0, 0xffffffffffffffff, 0x0) 1m3.353856196s ago: executing program 2 (id=470): mlockall(0x2) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={0x0, 0x0, 0x26}, 0x28) r0 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x60000, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r4 = openat$sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendfile(r4, r3, &(0x7f0000002080)=0x64, 0x23b) shmat(0x0, &(0x7f0000ffd000/0x2000)=nil, 0x6000) shmctl$SHM_LOCK(0x0, 0xb) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000240)={0x1, @raw_data="a425e2f1a54d24f14258323460608d70566e425a6c36af37b33fac9d31c8a9c7044410d324b03e044e454d2092a62fea8f13441431ce248bfc73a6726ee61ba491d15d8f392ff66fe0b17f0e11f5d2367d5593205ab1efa97d40619a553e7da2518125b850a186ef691daa55c9e50ffaf6ddc25220ded32aeba4524cec1afbd17abba1d15ea05e97ed3dcad452db6e08a991e2c78b057f55de7fdeba7411ce65700c0a1ad7946ff7c355db87566e3e5abb7a37a06731ed19ddfa970bb58a27fd9fa194c092730319"}) mount$bpf(0x0, 0x0, &(0x7f0000000b00), 0x400008, &(0x7f0000000080)=ANY=[@ANYBLOB='gi', @ANYRESHEX=0xee00]) 1m1.418297267s ago: executing program 2 (id=483): socketpair(0x4, 0x80000, 0x10000, 0x0) recvfrom$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)=ANY=[@ANYRES32=r0, @ANYRES32=r1, @ANYBLOB="02", @ANYBLOB, @ANYRES64=0x0], 0x10) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="38000000031401002abd7000fedbdf250900020073727a3100000000080041007369770014003300626f6e6430"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) 1m0.305951927s ago: executing program 2 (id=489): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f0000"], 0x48) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000540)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x9) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmmsg(r2, &(0x7f0000002840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20044000) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x30, r4, 0x1, 0x9, 0x800000, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xa}]}]}, 0x30}}, 0x34020840) 57.796778491s ago: executing program 2 (id=509): r0 = socket(0x28, 0x5, 0x0) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000540)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000500)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x48800}, 0x8080) 26.760864807s ago: executing program 2 (id=509): r0 = socket(0x28, 0x5, 0x0) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000540)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000500)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x48800}, 0x8080) 11.547824008s ago: executing program 0 (id=718): r0 = epoll_create1(0x0) r1 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)={0x1000000d}) ioctl$TFD_IOC_SET_TICKS(r1, 0x40085400, &(0x7f00000002c0)=0xc6c) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) r3 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r3, &(0x7f0000000080)={0x1d, r2, 0x0, {0x0, 0x0, 0x4}, 0xfe}, 0x18) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0xc0000, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r5, 0x0, 0x6}, 0x18) keyctl$instantiate_iov(0x14, 0x0, 0x0, 0x0, 0x0) ioctl$TCSBRK(r4, 0x5409, 0x1) sendmsg$can_j1939(r3, &(0x7f0000000480)={&(0x7f0000000240)={0x1d, r2, 0x10, {0x0, 0xf0, 0x2}, 0x2}, 0x18, &(0x7f0000000440)={0x0, 0x5}, 0x1, 0x0, 0x0, 0x1}, 0x0) 11.466208227s ago: executing program 0 (id=720): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000840)=@newtfilter={0x70, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xfff3, 0x7}, {}, {0xa, 0x1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x40, 0x2, [@TCA_CGROUP_EMATCHES={0x3c, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}, @TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x2c, 0x1, 0x0, 0x0, {{0xe37, 0x9, 0x4}, [@TCA_EM_IPT_MATCH_DATA={0x4}, @TCA_EM_IPT_HOOK={0x8}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0xa}]}}]}]}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x80}, 0x40010) 7.45079076s ago: executing program 0 (id=736): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x26}, 0x1c) connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x32) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x180204}], 0x1) 6.249848008s ago: executing program 0 (id=742): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) socket$inet(0x2, 0x1, 0x100) socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x88, 0x30, 0x1, 0x0, 0x0, {}, [{0x74, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ife={0x2c, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000010000008500000082000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000002c0)="d2ff030060010000009e08f086dd", 0x0, 0xd5b1, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = fsopen(&(0x7f0000000280)='ceph\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) r6 = gettid() fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) tkill(r6, 0xb) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f00000006c0)={0x4, 0x0, 0x0, 0x0, 0x132, 0x3}) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r7, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 5.948657668s ago: executing program 1 (id=749): syz_open_dev$tty1(0xc, 0x4, 0x1) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) syz_open_dev$video(&(0x7f00000001c0), 0xa7, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0), 0xc0c01, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x140, 0x82) r2 = fanotify_init(0x81, 0x0) fanotify_mark(r2, 0x105, 0x2a, r1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, r2, 0x90e7d000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000340)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0) r6 = syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0) read$midi(r6, 0x0, 0x14) socket$inet6_tcp(0xa, 0x1, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x1, 0x1ff) epoll_pwait2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) setpriority(0x2, 0x0, 0x3) syz_emit_vhci(&(0x7f0000000300)=ANY=[@ANYBLOB="040e04093120"], 0x7) close_range(r5, 0xffffffffffffffff, 0x0) 5.874070947s ago: executing program 3 (id=750): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_genetlink_get_family_id$nfc(0x0, 0xffffffffffffffff) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000080)='cdg\x00', 0x4) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, 0x0, 0x4042090) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) r3 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) shutdown(r2, 0x2) 5.272889623s ago: executing program 5 (id=751): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f00000002c0)="9e", 0x1, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback, 0xe}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000340)={0x0, 0x1fffff, 0x30}, 0xc) sendmsg$inet6(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)='h', 0x34000}], 0x1}, 0x0) sendmsg$inet6(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000004c0)="8c6cbd", 0x3}], 0x1}, 0x4010) writev(r0, &(0x7f0000000300)=[{&(0x7f0000000480)=',', 0x1}], 0x1) 4.988628144s ago: executing program 1 (id=752): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$vsock_stream(0x28, 0x1, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="5c0000000006030000000000000000000300000814000780080008000000004008000640000000020900020073797a31000000000500040000000000050005000200000005000100060000000d0003006c6973743a73657400000000"], 0x5c}}, 0x0) bind$vsock_stream(r1, &(0x7f0000000440), 0x10) socket$nl_generic(0x10, 0x3, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = memfd_secret(0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xa, 0x11, r6, 0x0) ftruncate(r6, 0x51a9497) sendmmsg(0xffffffffffffffff, &(0x7f0000000480), 0x2e9, 0x0) listen(r1, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) r7 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=ANY=[@ANYBLOB="2800000014001901000000000000000228"], 0x28}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a20000000000a03000000000000000000070000000900010073797a30000000e538a2b8d91e3c1a9a003c000000090a010400000000000000000700000008000a40000000000900020073797a300000000008000c40fffffffa080005400000001104001280140000"], 0x84}}, 0x20050800) 3.706517472s ago: executing program 5 (id=753): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000540), r0) sendmsg$NFC_CMD_START_POLL(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x24, r1, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@NFC_ATTR_TM_PROTOCOLS={0x8, 0xe, 0x80}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x400}, 0x840) 3.539429074s ago: executing program 5 (id=754): close(0xffffffffffffffff) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_io_uring_setup(0x88f, &(0x7f0000000880)={0x0, 0x3cfe, 0x0, 0x2, 0x3b9}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r2, 0x47f6, 0x0, 0x2, 0x0, 0x0) 3.0340413s ago: executing program 3 (id=755): r0 = socket$kcm(0xa, 0x2, 0x73) sendmsg$inet(r0, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @multicast2}, 0x10, 0x0}, 0x0) 2.932563113s ago: executing program 3 (id=756): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bind$inet(0xffffffffffffffff, 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0x62181) r4 = socket$netlink(0x10, 0x3, 0x4) write(r4, &(0x7f0000000040)="2700000014000707030e0000120f0a0011000100f5fe009d2fb112ff000000008a151f75080039", 0x27) 2.048023486s ago: executing program 3 (id=757): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0) ioctl$EVIOCSCLOCKID(0xffffffffffffffff, 0x400445a0, &(0x7f0000000080)=0xb309) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000000080)=ANY=[]) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000000180)=ANY=[@ANYRES16]) 2.038366411s ago: executing program 0 (id=758): bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000380), 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000003c0), 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xe, 0x0, &(0x7f0000000040), 0x0, 0x9, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sk_skb=0x5, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x1, 0x6, 0x3409, 0x956c}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f0000000480), 0x0, 0x10, 0x5}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@mcast1, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x10000, 0x0, 0x0, 0x2, 0xfffffffffffffffc, 0x0, 0x0, 0xfffffffffffffffd}, {0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0x1}, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast1}, 0x2, 0x6c}, 0x0, @in=@empty, 0x0, 0x5, 0x0, 0xb7}}, 0xe8) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x60) 1.932712832s ago: executing program 5 (id=759): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000009c0)=@bridge_newneigh={0x24, 0x1c, 0x1, 0x70bd2c, 0x25dfdbff, {0xa, 0x0, 0x0, 0x0, 0x8, 0x56, 0x8}, [@NDA_DST_IPV4={0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x27}}]}, 0x24}}, 0x40000c0) 1.82421654s ago: executing program 1 (id=760): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x101280, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) read$fb(r0, &(0x7f0000000280)=""/252, 0xfc) 1.808980662s ago: executing program 5 (id=761): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@bloom_filter={0x1e, 0x4, 0x0, 0x0, 0x44003, 0xffffffffffffffff, 0x1d1d, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x2, 0x7}, 0x50) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x3, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x9}]}, &(0x7f00000002c0)=0x10) sendmsg$NL80211_CMD_ASSOCIATE(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)={0x1c, 0x0, 0x1, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x24000040}, 0x24000000) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x1c, 0x2d, 0x9, 0x70bd27, 0x25dfdbfe, {0x5}, [@typed={0x8, 0xa, 0x0, 0x0, @uid}]}, 0x1c}}, 0x20000086) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000000000)=ANY=[], 0x114}], 0x1}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newtaction={0x50, 0x30, 0x1, 0xfffffffc, 0x0, {}, [{0x3c, 0x1, [@m_mpls={0x38, 0x1, 0x0, 0x0, {{0x9}, {0xc, 0x2, 0x0, 0x1, [@TCA_MPLS_TTL={0x5, 0x7, 0xfa}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x8004}, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8983, &(0x7f00000000c0)={0x2, 'nr0\x00', {0x10001}, 0x6}) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000080)={r1, 0x5a}, 0x8) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000000)={r1, 0x4}, &(0x7f0000000040)=0x8) socket$nl_route(0x10, 0x3, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x45}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r4}, 0x10) r5 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_DEL_RULE(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000040)={0x420, 0x3e8, 0x4, 0x70bd2c, 0x25dfdbfe, {0x6, 0x2, 0x3c, [0x0, 0x1, 0x3, 0x2, 0x6, 0x8000, 0xdb2, 0x22ef, 0x1ff, 0x10001, 0x5, 0x401, 0x1, 0x6, 0x141e16d, 0x8, 0xb, 0x8, 0x25ed8f50, 0x4, 0x6, 0x6, 0xaa32, 0x2, 0x7, 0xfffff9e7, 0x2, 0x8, 0x1000, 0x7, 0x4, 0x9, 0xe, 0x89f4, 0x40, 0x401, 0x81, 0x5, 0x6, 0x7fff, 0x9, 0x7, 0x6, 0x40, 0xd64e, 0x2, 0x1, 0x7, 0x6, 0xe7f, 0x8, 0x7, 0x92b0, 0xd, 0x2, 0x8001, 0x5, 0x6, 0x4, 0xaf, 0x0, 0x73396a94, 0x3, 0x4], [0x3, 0x80000006, 0x0, 0x3, 0xfffffff9, 0xcd, 0xfffffffd, 0xffff, 0xaa, 0x5, 0x9, 0x5, 0xc, 0x0, 0x2000000, 0x81, 0x4, 0x7900, 0x782, 0x100, 0xffff0001, 0x0, 0x1, 0x0, 0x3, 0x9, 0x4000001, 0x3, 0x0, 0x4, 0x6, 0x10, 0x5, 0x0, 0x1, 0x4, 0xac, 0x3, 0x10, 0x3ff, 0x6, 0x8, 0x9, 0x8, 0x2, 0x0, 0xb195, 0xffffdd80, 0x3, 0x100001, 0x3, 0x6, 0x8, 0xb, 0x5, 0xac, 0x2009, 0x0, 0x6, 0xc, 0x1, 0x2, 0x0, 0xfffffffc], [0x7, 0xe, 0xce, 0x1, 0x1, 0xd, 0x0, 0x8, 0x3, 0x7ff, 0x1, 0x4, 0xee1e, 0x5, 0x6, 0x2, 0x8, 0x5, 0x3, 0x7, 0x758, 0x9, 0x1, 0x6, 0x0, 0x77cc, 0x7, 0x2, 0x6, 0x8, 0x3, 0xf64, 0x8, 0x1, 0x4, 0x10000, 0x2, 0x5, 0xee8, 0x7fff, 0x15e18422, 0x10000, 0x5, 0x7ff, 0x1, 0x2, 0x6, 0x8, 0x8, 0x2, 0x4, 0x1000, 0x3ff, 0x3, 0x7b6f0000, 0x2, 0x4000003, 0x9, 0x68ec, 0x4, 0x9, 0x7, 0xffff8f0d, 0x3], [0x9, 0x8, 0x1, 0x200, 0xfffffff8, 0x400, 0x3, 0xa, 0x90, 0x6, 0x8, 0x4e6b, 0xc, 0x0, 0xc8, 0xad, 0x3, 0x5, 0x4, 0x6, 0xfffffff1, 0x1, 0x1, 0x4, 0x8, 0x6, 0x9, 0xff, 0x400, 0x9, 0xfff, 0x6, 0x651, 0x8001, 0x1, 0xee83, 0x7, 0x4, 0xe, 0xa, 0xffff, 0x4, 0x9, 0x20000000, 0x7, 0x74, 0x0, 0x6, 0x5, 0x101, 0x9, 0x2, 0x2, 0x0, 0x5, 0x6, 0x2, 0x4, 0x6, 0x4, 0x7, 0x6, 0x8]}}, 0x420}}, 0x40040) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000240)={'filter\x00', 0xb001, 0x4, 0x3a8, 0x20, 0x1d0, 0x0, 0x2c0, 0x2c0, 0x2c0, 0x7fffffe, 0x0, {[{{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0x1d0}}, {{@uncond, 0xc0, 0xe8, 0x0, {0x0, 0x1e03}}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x46e, 0xfffc}}}, {{@uncond, 0xc0, 0xf0}, @unspec=@CONNMARK={0x30}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x3f8) r7 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r7, &(0x7f0000000600)={&(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x80, &(0x7f0000000000)=[{&(0x7f00000000c0)="80", 0x1}], 0x1, &(0x7f0000000400)=ANY=[@ANYBLOB="20000000000000008400000008000000941f6721e7"], 0x38}, 0x200048d0) bind$bt_hci(r6, &(0x7f0000001ac0), 0x6) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) 1.329057291s ago: executing program 3 (id=762): bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000200180000000000000"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x93, &(0x7f00000003c0)=""/147}, 0x94) fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r4, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r5, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r4, 0x3ba0, &(0x7f00000002c0)={0x48, 0x5, r5, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r4, 0x3ba0, &(0x7f0000000100)={0x48, 0x7, r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2752ad}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ff9}]}) close_range(r7, 0xffffffffffffffff, 0x0) 1.327704731s ago: executing program 1 (id=763): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f00000002c0)="9e", 0x1, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback, 0xe}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000340)={0x0, 0x1fffff, 0x30}, 0xc) sendmsg$inet6(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)='h', 0x34000}], 0x1}, 0x0) sendmsg$inet6(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000004c0)="8c6cbd", 0x3}], 0x1}, 0x4010) writev(r0, &(0x7f0000000300)=[{&(0x7f0000000480)=',', 0x1}], 0x1) 323.552748ms ago: executing program 1 (id=764): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000440)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000001c0), 0xffffffffffffffff, 0xddff, 0x0, 0x0, 0x0, r1}) 37.638554ms ago: executing program 0 (id=765): syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) socket(0x10, 0x2, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0xfffffffffffffffe}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r4, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) bind$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(r4, &(0x7f0000000180)="b8", 0x1, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x8000000, @loopback, 0xffffffff}, 0x1c) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r4, 0x84, 0x1a, &(0x7f0000000dc0), &(0x7f0000000040)=0x8) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000000)='/proc\x02\x00et/\xfd\xffv4\x00\x00s/\x98\x8d\x9b\xbc\x00\x00le\xf44\x8cm\xa0\x00\xd1l,\x00\x00\x00\x00'}, 0x30) getsockopt$inet6_mptcp_buf(r5, 0x11c, 0x3, &(0x7f0000000100)=""/217, &(0x7f0000000000)=0xd9) getpid() pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$PNPIPE_HANDLE(0xffffffffffffffff, 0x113, 0x3, &(0x7f0000000080)=0x1000, 0x4) 36.435435ms ago: executing program 3 (id=766): r0 = syz_open_dev$vim2m(&(0x7f0000000680), 0x8, 0x2) socket$phonet_pipe(0x23, 0x5, 0x2) pselect6(0x40, &(0x7f0000000100)={0x0, 0x2, 0x2}, &(0x7f0000000000)={0x1f, 0x400000000000000, 0x0, 0x0, 0x1, 0x4000000000000001, 0x0, 0x1000000}, 0x0, 0x0, 0x0) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f00000002c0)=@userptr={0x7, 0x2, 0x4, 0x2000, 0xfffffff8, {0x77359400}, {0x5, 0x8, 0x7f, 0x9, 0x81, 0x7, "9c074ee2"}, 0xe, 0x2, {0x0}, 0x800}) 35.915475ms ago: executing program 1 (id=767): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42f82, 0x0) ioctl$SNDCTL_DSP_SPEED(r5, 0xc0045014, 0x0) write$dsp(r5, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) write$dsp(r5, &(0x7f0000000200)="dce480febb0ccd0bcb66ade3495e87b440e5afdc984cc06eb1c91c85a7fec04b2f82e267c1edd1543b79d80c0f949073bdbaa464c040e61ea6e658101100101097a5821b6c0c79d177b96995281707ce6d20a6db", 0x54) write$dsp(r5, &(0x7f0000000080), 0x0) ioctl$SNDCTL_DSP_SYNC(r5, 0x5001, 0x0) r6 = getpid() sched_setscheduler(r6, 0x2, 0x0) syz_open_procfs(r6, &(0x7f0000000040)='environ\x00') 0s ago: executing program 5 (id=768): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x26}, 0x1c) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x180204}], 0x1) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.124' (ED25519) to the list of known hosts. [ 40.776081][ T6506] cgroup: Unknown subsys name 'net' [ 40.873628][ T6506] cgroup: Unknown subsys name 'cpuset' [ 40.877834][ T6506] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 41.099301][ T6506] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SS [ 43.670105][ T6524] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 43.676510][ T6530] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 43.677211][ T6530] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 43.677906][ T6530] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 43.678774][ T6530] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 43.679168][ T6530] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 43.679509][ T6530] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 43.680011][ T6530] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 43.680318][ T6530] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 43.681433][ T6532] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 43.681594][ T6532] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 43.681856][ T6532] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 43.682103][ T6532] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 43.685871][ T6531] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 43.691743][ T6531] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 43.691856][ T6531] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 43.692024][ T6531] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 43.692465][ T6532] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 43.693869][ T6532] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 43.694169][ T6532] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 43.694548][ T6532] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 43.697175][ T6530] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 43.697349][ T6530] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 43.702095][ T6530] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 43.723625][ T6525] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 44.052053][ T6518] chnl_net:caif_netlink_parms(): no params data found [ 44.073667][ T6519] chnl_net:caif_netlink_parms(): no params data found [ 44.134044][ T6517] chnl_net:caif_netlink_parms(): no params data found [ 44.139268][ T6528] chnl_net:caif_netlink_parms(): no params data found [ 44.201669][ T6519] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.201816][ T6519] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.201972][ T6519] bridge_slave_0: entered allmulticast mode [ 44.202851][ T6519] bridge_slave_0: entered promiscuous mode [ 44.204815][ T6519] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.204862][ T6519] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.204984][ T6519] bridge_slave_1: entered allmulticast mode [ 44.205773][ T6519] bridge_slave_1: entered promiscuous mode [ 44.273795][ T6519] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 44.277268][ T6518] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.279219][ T6518] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.281586][ T6518] bridge_slave_0: entered allmulticast mode [ 44.284221][ T6518] bridge_slave_0: entered promiscuous mode [ 44.285711][ T6518] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.285758][ T6518] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.285859][ T6518] bridge_slave_1: entered allmulticast mode [ 44.286679][ T6518] bridge_slave_1: entered promiscuous mode [ 44.290380][ T6516] chnl_net:caif_netlink_parms(): no params data found [ 44.297741][ T6519] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 44.358650][ T6517] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.358719][ T6517] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.358825][ T6517] bridge_slave_0: entered allmulticast mode [ 44.359660][ T6517] bridge_slave_0: entered promiscuous mode [ 44.361754][ T6517] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.361836][ T6517] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.361981][ T6517] bridge_slave_1: entered allmulticast mode [ 44.362788][ T6517] bridge_slave_1: entered promiscuous mode [ 44.381689][ T6528] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.381765][ T6528] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.381866][ T6528] bridge_slave_0: entered allmulticast mode [ 44.382749][ T6528] bridge_slave_0: entered promiscuous mode [ 44.395026][ T6518] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 44.416985][ T6517] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 44.417723][ T6528] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.417781][ T6528] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.418014][ T6528] bridge_slave_1: entered allmulticast mode [ 44.418848][ T6528] bridge_slave_1: entered promiscuous mode [ 44.420423][ T6518] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 44.438663][ T6519] team0: Port device team_slave_0 added [ 44.441989][ T6519] team0: Port device team_slave_1 added [ 44.454310][ T6517] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 44.482991][ T6519] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 44.484786][ T6519] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 44.484829][ T6519] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 44.515239][ T6528] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 44.515849][ T6516] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.515948][ T6516] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.516065][ T6516] bridge_slave_0: entered allmulticast mode [ 44.516936][ T6516] bridge_slave_0: entered promiscuous mode [ 44.518178][ T6519] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 44.518204][ T6519] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 44.518243][ T6519] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 44.528115][ T6517] team0: Port device team_slave_0 added [ 44.530504][ T6517] team0: Port device team_slave_1 added [ 44.534310][ T6518] team0: Port device team_slave_0 added [ 44.535892][ T6518] team0: Port device team_slave_1 added [ 44.537470][ T6528] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 44.537617][ T6516] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.537687][ T6516] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.537784][ T6516] bridge_slave_1: entered allmulticast mode [ 44.538861][ T6516] bridge_slave_1: entered promiscuous mode [ 44.612089][ T6517] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 44.613978][ T6517] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 44.620951][ T6517] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 44.625089][ T6517] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 44.627013][ T6517] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 44.631471][ T6517] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 44.632407][ T6518] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 44.632433][ T6518] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 44.632466][ T6518] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 44.636560][ T6528] team0: Port device team_slave_0 added [ 44.654839][ T6519] hsr_slave_0: entered promiscuous mode [ 44.655483][ T6519] hsr_slave_1: entered promiscuous mode [ 44.658099][ T6516] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 44.660308][ T6516] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 44.666557][ T6518] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 44.666607][ T6518] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 44.666959][ T6518] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 44.668485][ T6528] team0: Port device team_slave_1 added [ 44.706986][ T6528] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 44.707042][ T6528] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 44.707084][ T6528] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 44.708177][ T6528] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 44.708202][ T6528] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 44.708235][ T6528] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 44.753621][ T6517] hsr_slave_0: entered promiscuous mode [ 44.755329][ T6517] hsr_slave_1: entered promiscuous mode [ 44.756051][ T6517] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 44.756136][ T6517] Cannot create hsr debugfs directory [ 44.766247][ T6516] team0: Port device team_slave_0 added [ 44.792180][ T6516] team0: Port device team_slave_1 added [ 44.804295][ T6528] hsr_slave_0: entered promiscuous mode [ 44.804893][ T6528] hsr_slave_1: entered promiscuous mode [ 44.805255][ T6528] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 44.805285][ T6528] Cannot create hsr debugfs directory [ 44.827518][ T6518] hsr_slave_0: entered promiscuous mode [ 44.829579][ T6518] hsr_slave_1: entered promiscuous mode [ 44.836000][ T6518] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 44.836056][ T6518] Cannot create hsr debugfs directory [ 44.855824][ T6516] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 44.855907][ T6516] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 44.855975][ T6516] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 44.857116][ T6516] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 44.857156][ T6516] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 44.857198][ T6516] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 44.946623][ T6516] hsr_slave_0: entered promiscuous mode [ 44.947235][ T6516] hsr_slave_1: entered promiscuous mode [ 44.947526][ T6516] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 44.947555][ T6516] Cannot create hsr debugfs directory [ 45.186008][ T6519] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 45.192511][ T6519] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 45.198645][ T6519] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 45.202963][ T6519] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 45.248187][ T6517] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 45.252613][ T6517] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 45.258227][ T6517] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 45.261968][ T6517] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 45.297561][ T6528] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 45.312960][ T6528] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 45.316522][ T6528] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 45.327406][ T6528] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 45.379768][ T6518] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 45.383740][ T6518] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 45.388294][ T6518] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 45.394092][ T6518] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 45.399732][ T6519] 8021q: adding VLAN 0 to HW filter on device bond0 [ 45.463788][ T6519] 8021q: adding VLAN 0 to HW filter on device team0 [ 45.474461][ T6516] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 45.478823][ T6516] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 45.487946][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.488117][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 45.498470][ T6517] 8021q: adding VLAN 0 to HW filter on device bond0 [ 45.503597][ T6516] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 45.510128][ T543] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.510228][ T543] bridge0: port 2(bridge_slave_1) entered forwarding state [ 45.522776][ T6516] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 45.557250][ T6528] 8021q: adding VLAN 0 to HW filter on device bond0 [ 45.575596][ T6528] 8021q: adding VLAN 0 to HW filter on device team0 [ 45.578439][ T6517] 8021q: adding VLAN 0 to HW filter on device team0 [ 45.586972][ T14] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.587048][ T14] bridge0: port 1(bridge_slave_0) entered forwarding state [ 45.598593][ T6519] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 45.608470][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.608553][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 45.609472][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.609518][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 45.619741][ T14] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.619820][ T14] bridge0: port 2(bridge_slave_1) entered forwarding state [ 45.638811][ T6518] 8021q: adding VLAN 0 to HW filter on device bond0 [ 45.688032][ T6518] 8021q: adding VLAN 0 to HW filter on device team0 [ 45.712096][ T1631] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.712189][ T1631] bridge0: port 1(bridge_slave_0) entered forwarding state [ 45.713046][ T1631] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.713088][ T1631] bridge0: port 2(bridge_slave_1) entered forwarding state [ 45.774442][ T6525] Bluetooth: hci1: command tx timeout [ 45.774612][ T6525] Bluetooth: hci4: command tx timeout [ 45.774686][ T6525] Bluetooth: hci0: command tx timeout [ 45.774754][ T6525] Bluetooth: hci3: command tx timeout [ 45.774821][ T6525] Bluetooth: hci2: command tx timeout [ 45.824203][ T6516] 8021q: adding VLAN 0 to HW filter on device bond0 [ 45.840117][ T6516] 8021q: adding VLAN 0 to HW filter on device team0 [ 45.856446][ T6519] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 45.885329][ T1631] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.885412][ T1631] bridge0: port 1(bridge_slave_0) entered forwarding state [ 45.886262][ T1631] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.886306][ T1631] bridge0: port 2(bridge_slave_1) entered forwarding state [ 45.928250][ T6517] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 45.943361][ T6516] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 45.946287][ T6516] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 46.006382][ T6519] veth0_vlan: entered promiscuous mode [ 46.010513][ T6519] veth1_vlan: entered promiscuous mode [ 46.027418][ T6528] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 46.039751][ T6518] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 46.050230][ T6517] veth0_vlan: entered promiscuous mode [ 46.081873][ T6519] veth0_macvtap: entered promiscuous mode [ 46.090396][ T6528] veth0_vlan: entered promiscuous mode [ 46.095704][ T6519] veth1_macvtap: entered promiscuous mode [ 46.108763][ T6528] veth1_vlan: entered promiscuous mode [ 46.116564][ T6517] veth1_vlan: entered promiscuous mode [ 46.127087][ T6519] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 46.139459][ T6519] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 46.149504][ T6519] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.149606][ T6519] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.149638][ T6519] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.149668][ T6519] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.182677][ T6516] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 46.188774][ T6517] veth0_macvtap: entered promiscuous mode [ 46.209753][ T6528] veth0_macvtap: entered promiscuous mode [ 46.218761][ T6528] veth1_macvtap: entered promiscuous mode [ 46.225180][ T6517] veth1_macvtap: entered promiscuous mode [ 46.266029][ T6518] veth0_vlan: entered promiscuous mode [ 46.270502][ T6528] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 46.274322][ T6528] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 46.278047][ T6517] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 46.289476][ T6517] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 46.295265][ T178] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 46.300406][ T178] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 46.312337][ T6518] veth1_vlan: entered promiscuous mode [ 46.316132][ T6517] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.316206][ T6517] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.316238][ T6517] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.316268][ T6517] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.344779][ T6528] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.344857][ T6528] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.344901][ T6528] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.344941][ T6528] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.407160][ T2158] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 46.407222][ T2158] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 46.416512][ T6518] veth0_macvtap: entered promiscuous mode [ 46.447498][ T1631] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 46.447559][ T1631] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 46.458809][ T6518] veth1_macvtap: entered promiscuous mode [ 46.495582][ T178] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 46.495644][ T178] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 46.499579][ T6519] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 46.519792][ T6516] veth0_vlan: entered promiscuous mode [ 46.525816][ T6516] veth1_vlan: entered promiscuous mode [ 46.538860][ T6516] veth0_macvtap: entered promiscuous mode [ 46.542628][ T6516] veth1_macvtap: entered promiscuous mode [ 46.587303][ T6516] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 46.597279][ T6516] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 46.601898][ T6516] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.606554][ T6516] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.608992][ T6516] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.618051][ T6516] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.649749][ T6518] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 46.663029][ T1631] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 46.663086][ T1631] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 46.698238][ T6518] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 46.725869][ T14] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 46.725938][ T14] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 46.775048][ T6518] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.803598][ T6518] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.804287][ T6518] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.804600][ T6518] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.359297][ T6635] hub 8-0:1.0: USB hub found [ 47.359773][ T6635] hub 8-0:1.0: 8 ports detected [ 47.361573][ T6636] xt_CT: You must specify a L4 protocol and not use inversions on it [ 47.417978][ T178] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 47.418084][ T178] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 47.591247][ T178] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 47.591308][ T178] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 47.941963][ T6086] Bluetooth: hci2: command tx timeout [ 47.942264][ T6086] Bluetooth: hci3: command tx timeout [ 47.942644][ T6086] Bluetooth: hci0: command tx timeout [ 47.942985][ T6086] Bluetooth: hci4: command tx timeout [ 47.943316][ T6086] Bluetooth: hci1: command tx timeout [ 48.049265][ T6648] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 48.052448][ T6648] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 48.245460][ T6631] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 48.315846][ T1631] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.315919][ T1631] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.397806][ T6631] usb 1-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 48.397920][ T6631] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 48.397947][ T6631] usb 1-1: Product: syz [ 48.397969][ T6631] usb 1-1: Manufacturer: syz [ 48.397990][ T6631] usb 1-1: SerialNumber: syz [ 48.413972][ T6631] usb 1-1: config 0 descriptor?? [ 48.520056][ T1631] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.525453][ T1631] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.886725][ T6631] airspy 1-1:0.0: usb_control_msg() failed -71 request 09 [ 48.886807][ T6631] airspy 1-1:0.0: Could not detect board [ 48.886907][ T6631] airspy 1-1:0.0: probe with driver airspy failed with error -71 [ 48.901076][ T6631] usb 1-1: USB disconnect, device number 2 [ 48.970550][ T6658] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 48.975795][ T6658] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 50.013131][ T6525] Bluetooth: hci1: command tx timeout [ 50.013180][ T6524] Bluetooth: hci0: command tx timeout [ 50.013222][ T6530] Bluetooth: hci3: command tx timeout [ 50.013235][ T6524] Bluetooth: hci2: command tx timeout [ 50.013916][ T6086] Bluetooth: hci4: command tx timeout [ 50.222386][ T6676] netlink: 20 bytes leftover after parsing attributes in process `syz.3.10'. [ 50.393084][ T2185] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0x9 [ 51.502255][ T6695] ubi31: attaching mtd0 [ 51.503313][ T6695] ubi31: scanning is finished [ 51.503385][ T6695] ubi31: empty MTD device detected [ 52.091092][ T6086] Bluetooth: hci3: command tx timeout [ 52.102413][ T6086] Bluetooth: hci4: command tx timeout [ 52.102491][ T6086] Bluetooth: hci1: command tx timeout [ 52.102532][ T6086] Bluetooth: hci2: command tx timeout [ 52.102571][ T6086] Bluetooth: hci0: command tx timeout [ 52.494948][ T6695] ubi31 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt31d", error -4 [ 53.587813][ T6723] netlink: 4 bytes leftover after parsing attributes in process `syz.0.21'. [ 54.845311][ T6754] netlink: 8 bytes leftover after parsing attributes in process `syz.3.36'. [ 54.847446][ T6754] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.848083][ T6754] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.360832][ T6526] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 56.523582][ T6526] usb 1-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e [ 56.523650][ T6526] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 56.523695][ T6526] usb 1-1: Product: syz [ 56.523723][ T6526] usb 1-1: Manufacturer: syz [ 56.523750][ T6526] usb 1-1: SerialNumber: syz [ 56.532602][ T6526] usb 1-1: config 0 descriptor?? [ 56.761778][ T6526] mos7840 1-1:0.0: required endpoints missing [ 57.569005][ T9] usb 1-1: USB disconnect, device number 3 [ 58.900155][ T6804] netlink: 24 bytes leftover after parsing attributes in process `syz.2.56'. [ 59.265070][ T6820] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 60.031626][ T6827] netlink: 'syz.3.67': attribute type 1 has an invalid length. [ 60.034594][ T6827] netlink: 'syz.3.67': attribute type 1 has an invalid length. [ 60.045599][ T6828] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 60.045930][ T6828] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 61.033872][ T6851] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 61.034208][ T6851] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 61.037938][ T6853] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 61.123026][ T6859] netlink: 'syz.0.79': attribute type 1 has an invalid length. [ 61.123144][ T6859] netlink: 184 bytes leftover after parsing attributes in process `syz.0.79'. [ 61.165588][ T6861] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 61.339434][ T6866] netlink: 20 bytes leftover after parsing attributes in process `syz.0.82'. [ 61.594776][ T6867] ceph: No mds server is up or the cluster is laggy [ 61.873794][ T6588] libceph: connect (1)[c::]:6789 error -101 [ 61.884106][ T6588] libceph: mon0 (1)[c::]:6789 connect error [ 62.117823][ T6876] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 62.118178][ T6876] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 62.715377][ T6588] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 63.483520][ T6588] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 63.486623][ T6588] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 63.490441][ T6588] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 63.493596][ T6588] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 63.496181][ T6588] usb 1-1: SerialNumber: syz [ 63.675597][ T6900] netlink: 4 bytes leftover after parsing attributes in process `syz.4.94'. [ 63.716082][ T6588] usb 1-1: 0:2 : does not exist [ 63.753255][ T6588] usb 1-1: USB disconnect, device number 4 [ 63.862648][ T6659] udevd[6659]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 64.500684][ T2408] ieee802154 phy0 wpan0: encryption failed: -22 [ 64.501309][ T2408] ieee802154 phy1 wpan1: encryption failed: -22 [ 65.073199][ T6934] capability: warning: `syz.0.104' uses deprecated v2 capabilities in a way that may be insecure [ 66.210776][ T6942] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 66.220500][ T6942] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 68.920689][ T6986] qrtr: Invalid version 0 [ 68.921347][ T6986] ptrace attach of "./syz-executor exec"[6517] was attempted by "./syz-executor exec"[6986] [ 69.230555][ T6988] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 69.237066][ T6988] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 69.387095][ T6992] dlm: non-version read from control device 111 [ 69.697170][ T2283] cfg80211: failed to load regulatory.db [ 70.289965][ T7014] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 70.290367][ T7014] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 71.091342][ T6525] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 71.092032][ T6525] Bluetooth: hci2: Injecting HCI hardware error event [ 71.106796][ T6525] Bluetooth: hci2: hardware error 0x00 [ 71.133861][ T7006] ALSA: mixer_oss: invalid OSS volume '' [ 72.240862][ T7034] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 72.241208][ T7034] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 72.443949][ T7043] Zero length message leads to an empty skb [ 73.380760][ T6525] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 75.893488][ T7077] tipc: Started in network mode [ 75.895555][ T7077] tipc: Node identity fae90797c1f8, cluster identity 4711 [ 75.895732][ T7077] tipc: Enabled bearer , priority 0 [ 75.908701][ T7077] syzkaller0: MTU too low for tipc bearer [ 75.911088][ T7077] tipc: Disabling bearer [ 76.034559][ T7085] process 'syz.3.151' launched '/dev/fd/8' with NULL argv: empty string added [ 76.738771][ T7074] delete_channel: no stack [ 77.003652][ T7093] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 77.011682][ T9] tipc: Node number set to 990971799 [ 77.017156][ T7093] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 77.143331][ T6525] Bluetooth: hci3: unexpected event 0x2f length: 763 > 260 [ 77.143392][ T6525] Bluetooth: hci3: Malformed Event: 0x2f [ 77.291828][ T6525] Bluetooth: hci4: command tx timeout [ 77.312258][ T6631] kernel write not supported for file /binder/stats (pid: 6631 comm: kworker/0:5) [ 77.460401][ T7116] netlink: 'syz.0.156': attribute type 4 has an invalid length. [ 77.460579][ T7116] netlink: 17 bytes leftover after parsing attributes in process `syz.0.156'. [ 78.129945][ T7129] netlink: 16 bytes leftover after parsing attributes in process `syz.4.166'. [ 79.281143][ T6631] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 79.548145][ T6631] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 79.548214][ T6631] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 79.548269][ T6631] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 79.548302][ T6631] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 79.550504][ T6631] usb 1-1: config 0 descriptor?? [ 80.442275][ T7185] netlink: 224 bytes leftover after parsing attributes in process `syz.1.185'. [ 80.666502][ T7194] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 80.666900][ T7194] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 81.851783][ T7211] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 81.861132][ T7211] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 81.865762][ T6631] input: HID 256c:006d as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:256C:006D.0001/input/input2 [ 81.983531][ T7215] netfs: Couldn't get user pages (rc=-14) [ 82.862514][ T6631] uclogic 0003:256C:006D.0001: input,hidraw0: USB HID v0.00 Device [HID 256c:006d] on usb-dummy_hcd.0-1/input0 [ 82.872759][ T6631] usb 1-1: USB disconnect, device number 5 [ 83.196423][ T7219] fido_id[7219]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory [ 83.329000][ T7225] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 83.329328][ T7225] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 83.505934][ T7230] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.527157][ T7230] bond0: (slave rose0): Enslaving as an active interface with an up link [ 84.561610][ T7261] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 84.591042][ T7261] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 84.629494][ T7266] netlink: 76 bytes leftover after parsing attributes in process `syz.1.211'. [ 87.430918][ T6526] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 89.674893][ T6526] usb 1-1: device descriptor read/all, error -71 [ 89.820568][ T7335] mmap: syz.3.225 (7335) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 91.141604][ T7351] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 91.141951][ T7351] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 91.158072][ T7349] netlink: 20 bytes leftover after parsing attributes in process `syz.4.232'. [ 92.116717][ T7363] capability: warning: `syz.1.235' uses 32-bit capabilities (legacy support in use) [ 92.216138][ T7373] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 92.218719][ T7373] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 92.525949][ T7395] tipc: Started in network mode [ 92.527473][ T7395] tipc: Node identity ac1414aa, cluster identity 4711 [ 92.530422][ T7395] tipc: Enabled bearer , priority 10 [ 93.807381][ T6631] tipc: Node number set to 2886997162 [ 94.380936][ T7415] netlink: 228 bytes leftover after parsing attributes in process `syz.2.251'. [ 95.017197][ T7379] syz.1.241 (7379): drop_caches: 2 [ 95.821679][ T7451] netlink: 192 bytes leftover after parsing attributes in process `syz.2.265'. [ 95.919097][ T7458] syz.2.268 uses obsolete (PF_INET,SOCK_PACKET) [ 97.296585][ T7482] netlink: 8 bytes leftover after parsing attributes in process `syz.3.275'. [ 97.302779][ T7481] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 97.306743][ T7481] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 97.340980][ T7487] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 97.343840][ T7487] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 97.624290][ T7501] binder: 7499:7501 tried to acquire reference to desc 0, got 1 instead [ 97.624388][ T7501] binder: 7499:7501 ioctl c0306201 200003c0 returned -14 [ 97.624891][ T7501] binder: 7499:7501 got transaction with invalid offsets ptr [ 97.625018][ T7501] binder: 7499:7501 transaction async to 7499:0 failed 5/29201/-22, code 0 size 120-24 line 3681 [ 97.629992][ T2283] binder: undelivered TRANSACTION_ERROR: 29201 [ 98.811079][ T7530] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 98.825686][ T7530] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 100.515173][ T7564] netlink: 16 bytes leftover after parsing attributes in process `syz.0.299'. [ 101.450907][ T7573] binder: 7572:7573 ERROR: BC_REGISTER_LOOPER called without request [ 101.451031][ T7573] binder: 7572:7573 ERROR: BC_ENTER_LOOPER called after BC_REGISTER_LOOPER [ 103.658372][ C1] vcan0: j1939_tp_rxtimer: 0x00000000c2009aea: rx timeout, send abort [ 104.159130][ C1] vcan0: j1939_tp_rxtimer: 0x00000000c2009aea: abort rx timeout. Force session deactivation [ 104.282744][ T7626] netlink: 'syz.2.319': attribute type 1 has an invalid length. [ 104.282812][ T7626] netlink: 192 bytes leftover after parsing attributes in process `syz.2.319'. [ 104.656032][ T7622] netlink: 'syz.0.318': attribute type 10 has an invalid length. [ 104.662210][ T7622] 8021q: adding VLAN 0 to HW filter on device bond0 [ 104.663344][ T7622] team0: Port device bond0 added [ 108.376742][ T7679] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 108.379650][ T7679] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 108.500448][ T7682] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 108.503302][ T7682] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 108.841909][ T7686] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 108.846274][ T7686] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 108.970432][ T7688] netlink: 8 bytes leftover after parsing attributes in process `syz.3.335'. [ 109.347335][ T6525] Bluetooth: hci3: unexpected cc 0x2039 length: 9 > 1 [ 110.411875][ T7710] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 110.414682][ T7710] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 113.370814][ T6525] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 113.374727][ T6525] Bluetooth: hci3: Injecting HCI hardware error event [ 113.378722][ T6525] Bluetooth: hci3: hardware error 0x00 [ 113.759699][ T7749] netlink: 32 bytes leftover after parsing attributes in process `syz.0.358'. [ 113.760049][ T7749] bridge0: port 2(bridge_slave_1) entered blocking state [ 113.760160][ T7749] bridge0: port 2(bridge_slave_1) entered forwarding state [ 114.693722][ T7757] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.625848][ T6525] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 115.641052][ T7789] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 115.641364][ T7789] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 115.645035][ T7757] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.568274][ T7757] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.654554][ T7799] block device autoloading is deprecated and will be removed. [ 117.304330][ T7757] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.331745][ T7802] bridge0: port 3(netdevsim0) entered blocking state [ 117.331911][ T7802] bridge0: port 3(netdevsim0) entered disabled state [ 117.332265][ T7802] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 117.334114][ T7802] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 117.334940][ T7802] bridge0: port 3(netdevsim0) entered blocking state [ 117.335050][ T7802] bridge0: port 3(netdevsim0) entered forwarding state [ 117.486010][ T7811] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 117.588968][ T7757] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.607258][ T7757] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.622061][ T7817] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 117.622376][ T7817] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 117.637557][ T7757] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.641676][ T7757] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.862092][ T7815] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 117.867426][ T7815] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 117.921091][ T6631] IPVS: starting estimator thread 0... [ 118.011370][ T7822] IPVS: using max 33 ests per chain, 79200 per kthread [ 118.321269][ T6631] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 119.053398][ T6631] usb 1-1: config 0 interface 0 altsetting 185 endpoint 0x81 has invalid wMaxPacketSize 0 [ 119.053464][ T6631] usb 1-1: config 0 interface 0 has no altsetting 0 [ 119.053523][ T6631] usb 1-1: New USB device found, idVendor=05ac, idProduct=027a, bcdDevice= 0.00 [ 119.053557][ T6631] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.074424][ T6631] usb 1-1: config 0 descriptor?? [ 120.386637][ T6631] apple 0003:05AC:027A.0002: hidraw0: USB HID v8.00 Device [HID 05ac:027a] on usb-dummy_hcd.0-1/input0 [ 120.959430][ T7857] 8021q: adding VLAN 0 to HW filter on device bond1 [ 120.969021][ T7857] bond0: (slave bond1): Enslaving as an active interface with an up link [ 121.006144][ T6631] usb 1-1: USB disconnect, device number 8 [ 121.094982][ T7870] syzkaller1: entered promiscuous mode [ 121.095073][ T7870] syzkaller1: entered allmulticast mode [ 121.249120][ T7881] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 121.250542][ T7871] fido_id[7871]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 121.257295][ T7881] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 121.304744][ T7877] netlink: 12 bytes leftover after parsing attributes in process `syz.3.405'. [ 122.272553][ T7901] wlan0 speed is unknown, defaulting to 1000 [ 122.274835][ T7901] wlan0 speed is unknown, defaulting to 1000 [ 122.911750][ T7901] wlan0 speed is unknown, defaulting to 1000 [ 122.943872][ T7901] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 122.947173][ T7901] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 123.051986][ T7901] wlan0 speed is unknown, defaulting to 1000 [ 123.057643][ T7901] wlan0 speed is unknown, defaulting to 1000 [ 123.060491][ T7901] wlan0 speed is unknown, defaulting to 1000 [ 123.063704][ T7901] wlan0 speed is unknown, defaulting to 1000 [ 123.067942][ T7901] wlan0 speed is unknown, defaulting to 1000 [ 123.112363][ T7915] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 123.115035][ T7915] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 123.671666][ T7927] netlink: 'syz.2.421': attribute type 29 has an invalid length. [ 123.671740][ T7927] netlink: 'syz.2.421': attribute type 3 has an invalid length. [ 123.671790][ T7927] netlink: 76 bytes leftover after parsing attributes in process `syz.2.421'. [ 123.979762][ T7937] binder: 7936:7937 ioctl c0306201 20000640 returned -14 [ 124.071860][ T7943] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 124.072182][ T7943] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 126.011648][ T2408] ieee802154 phy0 wpan0: encryption failed: -22 [ 126.014090][ T2408] ieee802154 phy1 wpan1: encryption failed: -22 [ 128.421856][ T6525] Bluetooth: hci1: unexpected event 0x03 length: 17 > 11 [ 128.546392][ T8016] ======================================================= [ 128.546392][ T8016] WARNING: The mand mount option has been deprecated and [ 128.546392][ T8016] and is ignored by this kernel. Remove the mand [ 128.546392][ T8016] option from the mount to silence this warning. [ 128.546392][ T8016] ======================================================= [ 129.535957][ T8031] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 129.536279][ T8031] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 129.703120][ T6631] usb 1-1: new full-speed USB device number 9 using dummy_hcd [ 129.704598][ T8039] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 129.704901][ T8039] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 130.384175][ T6631] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 130.384242][ T6631] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 130.384302][ T6631] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 130.384336][ T6631] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.564192][ T6086] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 130.567724][ T6086] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 130.571583][ T6086] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 130.575271][ T6086] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 130.577966][ T6086] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 130.639550][ T6631] usb 1-1: usb_control_msg returned -32 [ 130.639631][ T6631] usbtmc 1-1:16.0: can't read capabilities [ 130.786265][ T42] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.918654][ T8061] ieee802154 phy0 wpan0: encryption failed: -22 [ 131.002626][ T42] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.112704][ T8045] wlan0 speed is unknown, defaulting to 1000 [ 131.179944][ T8068] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 131.187042][ T8068] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 131.213822][ T11] usb 1-1: USB disconnect, device number 9 [ 131.252620][ T42] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.081273][ T42] bridge0: port 3(netdevsim0) entered disabled state [ 132.353032][ T8078] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 132.353775][ T8078] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 132.364227][ T42] netdevsim netdevsim4 netdevsim0 (unregistering): left allmulticast mode [ 132.366748][ T42] netdevsim netdevsim4 netdevsim0 (unregistering): left promiscuous mode [ 132.372632][ T42] bridge0: port 3(netdevsim0) entered disabled state [ 132.414701][ T42] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.548086][ T8055] syz.2.470 (8055): drop_caches: 2 [ 132.588300][ T8045] chnl_net:caif_netlink_parms(): no params data found [ 132.650803][ T6086] Bluetooth: hci0: command tx timeout [ 132.810060][ T8090] infiniband srz1: RDMA CMA: cma_listen_on_dev, error -1 [ 133.162957][ T8094] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 133.163040][ T8094] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 133.277755][ T8045] bridge0: port 1(bridge_slave_0) entered blocking state [ 133.281140][ T8045] bridge0: port 1(bridge_slave_0) entered disabled state [ 133.283876][ T8045] bridge_slave_0: entered allmulticast mode [ 133.294700][ T8045] bridge_slave_0: entered promiscuous mode [ 133.415740][ T8045] bridge0: port 2(bridge_slave_1) entered blocking state [ 133.415826][ T8045] bridge0: port 2(bridge_slave_1) entered disabled state [ 133.416083][ T8045] bridge_slave_1: entered allmulticast mode [ 133.513621][ T8045] bridge_slave_1: entered promiscuous mode [ 133.651274][ T8110] random: crng reseeded on system resumption [ 133.749635][ T8113] support for the xor transformation has been removed. [ 134.087217][ T42] bridge_slave_1: left allmulticast mode [ 134.089166][ T42] bridge_slave_1: left promiscuous mode [ 134.092750][ T42] bridge0: port 2(bridge_slave_1) entered disabled state [ 134.102670][ T42] bridge_slave_0: left allmulticast mode [ 134.104340][ T42] bridge_slave_0: left promiscuous mode [ 134.106232][ T42] bridge0: port 1(bridge_slave_0) entered disabled state [ 134.454079][ T8140] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 134.457129][ T8140] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 134.730861][ T6086] Bluetooth: hci0: command tx timeout [ 135.500777][ T9] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 135.650791][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 135.655431][ T9] usb 1-1: config 0 has an invalid interface number: 117 but max is 0 [ 135.655500][ T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 135.655531][ T9] usb 1-1: config 0 has no interface number 0 [ 135.655568][ T9] usb 1-1: config 0 interface 117 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 135.657673][ T9] usb 1-1: New USB device found, idVendor=0830, idProduct=0061, bcdDevice= 3.c8 [ 135.657711][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.657736][ T9] usb 1-1: Product: syz [ 135.657757][ T9] usb 1-1: Manufacturer: syz [ 135.657778][ T9] usb 1-1: SerialNumber: syz [ 135.661306][ T9] usb 1-1: config 0 descriptor?? [ 135.814954][ T42] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 135.853534][ T42] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 135.867865][ T9] usb 1-1: active config #0 != 1 ?? [ 135.876456][ T9] usb 1-1: USB disconnect, device number 10 [ 135.892534][ T42] bond0 (unregistering): Released all slaves [ 135.909588][ T8045] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 135.911777][ T8045] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 136.036878][ T42] tipc: Disabling bearer [ 136.037133][ T42] tipc: Left network mode [ 136.059688][ T8045] team0: Port device team_slave_0 added [ 136.078158][ T8045] team0: Port device team_slave_1 added [ 136.233419][ T8045] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 136.233486][ T8045] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 136.233718][ T8045] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 136.234864][ T8045] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 136.234901][ T8045] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 136.234945][ T8045] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 136.277558][ T8045] hsr_slave_0: entered promiscuous mode [ 136.279881][ T8045] hsr_slave_1: entered promiscuous mode [ 136.282389][ T8045] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 136.284652][ T8045] Cannot create hsr debugfs directory [ 136.566704][ T6525] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 136.567958][ T6525] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 136.568614][ T6525] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 136.570515][ T6525] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 136.572897][ T6525] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 136.731840][ T8200] netlink: 'syz.1.514': attribute type 1 has an invalid length. [ 136.813106][ T6086] Bluetooth: hci0: command tx timeout [ 137.039194][ T8201] 8021q: adding VLAN 0 to HW filter on device bond2 [ 137.040256][ T8201] bond1: (slave bond2): making interface the new active one [ 137.042280][ T8201] bond1: (slave bond2): Enslaving as an active interface with an up link [ 137.385283][ T8211] binder: 8208:8211 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 137.385540][ T8211] binder: 8211 RLIMIT_NICE not set [ 137.393815][ T8211] binder: 8208:8211 got transaction to invalid handle, 2 [ 137.393992][ T8211] binder: 8211:8208 cannot find target node [ 137.394109][ T8211] binder: 8208:8211 transaction call to 0:0 failed 6/29201/-22, code 0 size 0-0 line 3152 [ 137.878965][ T6629] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 137.910296][ T8190] wlan0 speed is unknown, defaulting to 1000 [ 137.971099][ T6588] binder: undelivered TRANSACTION_ERROR: 29201 [ 138.050817][ T6629] usb 1-1: Using ep0 maxpacket: 16 [ 138.053666][ T6629] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 138.053745][ T6629] usb 1-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 138.053781][ T6629] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.056451][ T6629] usb 1-1: config 0 descriptor?? [ 138.173819][ T42] hsr_slave_0: left promiscuous mode [ 138.180401][ T42] hsr_slave_1: left promiscuous mode [ 138.181083][ T42] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 138.181163][ T42] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 138.192617][ T42] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 138.194711][ T42] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 138.224973][ T42] veth1_macvtap: left promiscuous mode [ 138.226786][ T42] veth0_macvtap: left promiscuous mode [ 138.228784][ T42] veth1_vlan: left promiscuous mode [ 138.230482][ T42] veth0_vlan: left promiscuous mode [ 138.303782][ T9] usb 1-1: USB disconnect, device number 11 [ 138.661771][ T6086] Bluetooth: hci4: command tx timeout [ 138.891088][ T6086] Bluetooth: hci0: command tx timeout [ 139.265035][ T8242] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 139.269461][ T8242] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 140.323612][ T42] team0 (unregistering): Port device team_slave_1 removed [ 140.504767][ T42] team0 (unregistering): Port device team_slave_0 removed [ 140.730797][ T6086] Bluetooth: hci4: command tx timeout [ 142.575608][ T8045] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 142.593658][ T8235] ip6gretap0: entered promiscuous mode [ 142.608127][ T8249] netlink: 168 bytes leftover after parsing attributes in process `syz.0.526'. [ 142.619871][ T8045] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 142.658724][ T8045] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 142.694870][ T8045] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 142.696460][ T8254] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 142.696745][ T8254] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 142.827847][ T8261] netlink: 24 bytes leftover after parsing attributes in process `syz.0.531'. [ 142.841678][ T6086] Bluetooth: hci4: command tx timeout [ 143.008967][ T8045] 8021q: adding VLAN 0 to HW filter on device bond0 [ 143.045184][ T8190] chnl_net:caif_netlink_parms(): no params data found [ 143.200001][ T8045] 8021q: adding VLAN 0 to HW filter on device team0 [ 143.245403][ T178] bridge0: port 1(bridge_slave_0) entered blocking state [ 143.245492][ T178] bridge0: port 1(bridge_slave_0) entered forwarding state [ 143.252303][ T8190] bridge0: port 1(bridge_slave_0) entered blocking state [ 143.254464][ T8190] bridge0: port 1(bridge_slave_0) entered disabled state [ 143.256590][ T8190] bridge_slave_0: entered allmulticast mode [ 143.259243][ T8190] bridge_slave_0: entered promiscuous mode [ 143.264462][ T8190] bridge0: port 2(bridge_slave_1) entered blocking state [ 143.266528][ T8190] bridge0: port 2(bridge_slave_1) entered disabled state [ 143.269114][ T8190] bridge_slave_1: entered allmulticast mode [ 143.271877][ T8190] bridge_slave_1: entered promiscuous mode [ 143.295947][ T1631] bridge0: port 2(bridge_slave_1) entered blocking state [ 143.296027][ T1631] bridge0: port 2(bridge_slave_1) entered forwarding state [ 143.313880][ T8190] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 143.326613][ T8190] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 144.266590][ T8310] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 144.269292][ T8310] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 144.891011][ T6525] Bluetooth: hci4: command tx timeout [ 145.016071][ T42] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.052503][ T8190] team0: Port device team_slave_0 added [ 145.215860][ T8190] team0: Port device team_slave_1 added [ 145.226934][ T8322] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 145.234946][ T8322] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 145.309951][ T42] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.382838][ T8190] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 145.385061][ T8190] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 145.385182][ T8190] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 145.386460][ T8190] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 145.386505][ T8190] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 145.386564][ T8190] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 145.488069][ T8045] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 145.488142][ T8045] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 145.594710][ T42] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.275748][ T8190] hsr_slave_0: entered promiscuous mode [ 146.282972][ T8190] hsr_slave_1: entered promiscuous mode [ 146.283375][ T8190] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 146.283405][ T8190] Cannot create hsr debugfs directory [ 146.380875][ T8349] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 146.381194][ T8349] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 146.535910][ T42] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.268899][ T8045] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 148.040847][ T6631] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 148.065754][ T42] bridge_slave_1: left allmulticast mode [ 148.065826][ T42] bridge_slave_1: left promiscuous mode [ 148.066025][ T42] bridge0: port 2(bridge_slave_1) entered disabled state [ 148.075264][ T42] bridge_slave_0: left allmulticast mode [ 148.075324][ T42] bridge_slave_0: left promiscuous mode [ 148.075451][ T42] bridge0: port 1(bridge_slave_0) entered disabled state [ 148.202066][ T6631] usb 1-1: Using ep0 maxpacket: 16 [ 148.206467][ T6631] usb 1-1: config 0 has an invalid interface number: 8 but max is 0 [ 148.206681][ T6631] usb 1-1: config 0 has no interface number 0 [ 148.206716][ T6631] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 148.206745][ T6631] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 148.207897][ T6631] usb 1-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 148.207933][ T6631] usb 1-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 148.207959][ T6631] usb 1-1: Product: syz [ 148.207987][ T6631] usb 1-1: SerialNumber: syz [ 148.231794][ T6631] usb 1-1: config 0 descriptor?? [ 148.236504][ T6631] cm109 1-1:0.8: invalid payload size 0, expected 4 [ 148.243033][ T6631] input: CM109 USB driver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.8/input/input3 [ 148.454116][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: usb_submit_urb (urb_irq) failed -90 [ 148.672053][ T9] usb 1-1: USB disconnect, device number 12 [ 148.673115][ T9] cm109 1-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 149.369680][ T7464] nci: nci_extract_activation_params_nfc_dep: unsupported activation_rf_tech_and_mode 0x6 [ 149.710867][ T9] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 149.809142][ T42] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 149.853263][ T42] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 149.870744][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 149.872247][ T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 149.872310][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 149.872341][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 149.872367][ T9] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 149.872394][ T9] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 149.873325][ T9] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 149.873358][ T9] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 149.873383][ T9] usb 1-1: Manufacturer: syz [ 149.878303][ T9] usb 1-1: config 0 descriptor?? [ 149.902871][ T42] bond0 (unregistering): (slave bond1): Releasing backup interface [ 149.941553][ T42] bond0 (unregistering): Released all slaves [ 150.086570][ T9] Registered IR keymap rc-hauppauge [ 150.132184][ T9] rc_core: Loaded IR protocol module ir-rc5-decoder, but protocol rc-5 still not available [ 150.133537][ T9] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 150.150783][ T9] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 150.173391][ T9] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 150.174798][ T9] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input4 [ 150.176802][ T9] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 150.191002][ T9] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 150.210812][ T9] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 150.230795][ T9] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 150.251638][ T9] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 150.270782][ T9] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 150.290850][ T9] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 150.310817][ T9] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 150.330927][ T9] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 150.352728][ T9] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 150.370802][ T9] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 150.392005][ T9] mceusb 1-1:0.0: Registered with mce emulator interface version 1 [ 150.395103][ T9] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 150.532060][ T6631] usb 1-1: USB disconnect, device number 13 [ 150.612843][ T42] bond1 (unregistering): Released all slaves [ 150.762273][ T42] tipc: Left network mode [ 150.802806][ T8426] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 150.805595][ T8426] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 150.932738][ T8045] veth0_vlan: entered promiscuous mode [ 150.945213][ T8045] veth1_vlan: entered promiscuous mode [ 151.202512][ T8045] veth0_macvtap: entered promiscuous mode [ 151.271053][ T8045] veth1_macvtap: entered promiscuous mode [ 151.292665][ T8045] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 151.313823][ T8045] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 151.328745][ T8045] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.328820][ T8045] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.328868][ T8045] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.328915][ T8045] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.143917][ T42] hsr_slave_0: left promiscuous mode [ 152.154226][ T8461] netlink: 36 bytes leftover after parsing attributes in process `syz.3.577'. [ 152.154296][ T8461] netlink: 16 bytes leftover after parsing attributes in process `syz.3.577'. [ 152.154322][ T8461] netlink: 36 bytes leftover after parsing attributes in process `syz.3.577'. [ 152.154352][ T8461] netlink: 36 bytes leftover after parsing attributes in process `syz.3.577'. [ 152.159031][ T42] hsr_slave_1: left promiscuous mode [ 152.159535][ T42] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 152.159598][ T42] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 152.171656][ T42] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 152.171729][ T42] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 152.293878][ T42] veth1_macvtap: left promiscuous mode [ 152.296745][ T42] veth0_macvtap: left promiscuous mode [ 152.298638][ T42] veth1_vlan: left promiscuous mode [ 152.300242][ T42] veth0_vlan: left promiscuous mode [ 154.250841][ T6526] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 154.314211][ T42] team0 (unregistering): Port device team_slave_1 removed [ 154.412268][ T6526] usb 1-1: config 0 has an invalid interface number: 48 but max is 0 [ 154.412328][ T6526] usb 1-1: config 0 has no interface number 0 [ 154.412355][ T6526] usb 1-1: too many endpoints for config 0 interface 48 altsetting 48: 48, using maximum allowed: 30 [ 154.412390][ T6526] usb 1-1: config 0 interface 48 altsetting 48 has 0 endpoint descriptors, different from the interface descriptor's value: 48 [ 154.412419][ T6526] usb 1-1: config 0 interface 48 has no altsetting 0 [ 154.414702][ T6526] usb 1-1: New USB device found, idVendor=08fd, idProduct=0002, bcdDevice=ca.fd [ 154.414739][ T6526] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.414764][ T6526] usb 1-1: Product: syz [ 154.414786][ T6526] usb 1-1: Manufacturer: syz [ 154.414808][ T6526] usb 1-1: SerialNumber: syz [ 154.417600][ T6526] usb 1-1: config 0 descriptor?? [ 154.523477][ T42] team0 (unregistering): Port device team_slave_0 removed [ 154.642040][ T6526] usb 1-1: USB disconnect, device number 14 [ 155.243685][ T8485] netlink: 16 bytes leftover after parsing attributes in process `syz.0.586'. [ 156.682218][ T8464] tipc: Started in network mode [ 156.682295][ T8464] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 156.682343][ T8464] tipc: Enabling of bearer rejected, failed to enable media [ 156.699140][ T8474] veth0_vlan: entered allmulticast mode [ 156.723487][ T8475] veth0_vlan: left promiscuous mode [ 156.724553][ T8475] veth0_vlan: entered promiscuous mode [ 156.747766][ T8487] netlink: 20 bytes leftover after parsing attributes in process `syz.1.587'. [ 157.826452][ T8190] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 157.844117][ T8503] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 157.845351][ T8503] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 157.992911][ T8514] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 157.995681][ T8514] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 158.302221][ T8190] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 158.304295][ T8190] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 158.478390][ T2185] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 158.478454][ T2185] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 158.497331][ T8190] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 159.354575][ T8522] ceph: No mds server is up or the cluster is laggy [ 159.355298][ T6526] libceph: connect (1)[c::]:6789 error -101 [ 159.355769][ T6526] libceph: mon0 (1)[c::]:6789 connect error [ 159.871602][ T7464] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 159.871669][ T7464] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 159.973536][ T8190] 8021q: adding VLAN 0 to HW filter on device bond0 [ 159.989482][ T8190] 8021q: adding VLAN 0 to HW filter on device team0 [ 160.010675][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 160.010764][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 160.024631][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 160.024736][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 160.097778][ T8190] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 160.102660][ T8190] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 161.119423][ T8563] netlink: 4 bytes leftover after parsing attributes in process `syz.1.602'. [ 161.144830][ T8190] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 161.177595][ T8571] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 161.177946][ T8571] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 161.191298][ T8568] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 161.191623][ T8568] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 162.142356][ T8563] hsr_slave_1 (unregistering): left promiscuous mode [ 162.356193][ T8582] bridge0: port 3(syz_tun) entered blocking state [ 162.356283][ T8582] bridge0: port 3(syz_tun) entered disabled state [ 162.356446][ T8582] syz_tun: entered allmulticast mode [ 162.358697][ T8582] syz_tun: entered promiscuous mode [ 162.376507][ T8190] veth0_vlan: entered promiscuous mode [ 162.388034][ T8190] veth1_vlan: entered promiscuous mode [ 162.477271][ T8190] veth0_macvtap: entered promiscuous mode [ 162.486382][ T8190] veth1_macvtap: entered promiscuous mode [ 162.496946][ T8190] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 162.498952][ T8190] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 162.500481][ T8190] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.500525][ T8190] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.500556][ T8190] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.500587][ T8190] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.614271][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 162.614360][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 162.666864][ T7464] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 162.666938][ T7464] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 162.701176][ T8600] wlan0 speed is unknown, defaulting to 1000 [ 162.748706][ T8602] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 162.749052][ T8602] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 162.937101][ T8618] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 162.939803][ T8618] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 163.947693][ T8646] syz.5.620: attempt to access beyond end of device [ 163.947693][ T8646] nbd5: rw=0, sector=0, nr_sectors = 1 limit=0 [ 163.947854][ T8646] hpfs: hpfs_map_sector(): read error [ 164.456647][ T8649] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 164.457001][ T8649] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 165.710323][ T8701] warning: `syz.1.633' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 166.217254][ C0] Unknown status report in ack skb [ 167.550023][ T52] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 167.554666][ T52] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 167.557933][ T52] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 167.566298][ T52] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 167.568902][ T52] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 167.613583][ T8730] input: syz1 as /devices/virtual/input/input5 [ 167.655157][ T7463] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.680248][ T8728] wlan0 speed is unknown, defaulting to 1000 [ 167.765933][ T8737] netlink: 4768 bytes leftover after parsing attributes in process `syz.0.646'. [ 167.995570][ T8740] netlink: 4 bytes leftover after parsing attributes in process `syz.5.648'. [ 168.973006][ T8751] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 168.973319][ T8751] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 168.976642][ T8749] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 168.976932][ T8749] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 169.051237][ T6086] Bluetooth: hci1: command 0x0406 tx timeout [ 169.245011][ T8740] hsr_slave_1 (unregistering): left promiscuous mode [ 169.475471][ T7463] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.610850][ T6525] Bluetooth: hci4: command tx timeout [ 169.622657][ T7463] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.668535][ T8728] chnl_net:caif_netlink_parms(): no params data found [ 169.768307][ T8778] netlink: 4 bytes leftover after parsing attributes in process `syz.1.659'. [ 169.833943][ T7463] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.903550][ T8803] netlink: 4 bytes leftover after parsing attributes in process `syz.5.665'. [ 171.154334][ T8815] Bluetooth: MGMT ver 1.23 [ 171.701501][ T6525] Bluetooth: hci4: command tx timeout [ 171.867619][ T8822] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 171.871126][ T8822] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 172.739008][ T8728] bridge0: port 1(bridge_slave_0) entered blocking state [ 172.739091][ T8728] bridge0: port 1(bridge_slave_0) entered disabled state [ 172.739224][ T8728] bridge_slave_0: entered allmulticast mode [ 172.740067][ T8728] bridge_slave_0: entered promiscuous mode [ 172.792843][ T8728] bridge0: port 2(bridge_slave_1) entered blocking state [ 172.794936][ T8728] bridge0: port 2(bridge_slave_1) entered disabled state [ 172.797252][ T8728] bridge_slave_1: entered allmulticast mode [ 172.810097][ T8728] bridge_slave_1: entered promiscuous mode [ 172.929324][ T7463] bridge_slave_1: left allmulticast mode [ 172.929389][ T7463] bridge_slave_1: left promiscuous mode [ 172.929518][ T7463] bridge0: port 2(bridge_slave_1) entered disabled state [ 172.942266][ T7463] bridge_slave_0: left allmulticast mode [ 172.943845][ T7463] bridge_slave_0: left promiscuous mode [ 172.945973][ T7463] bridge0: port 1(bridge_slave_0) entered disabled state [ 172.963110][ T8830] netlink: 4 bytes leftover after parsing attributes in process `syz.0.672'. [ 173.031285][ T8839] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 173.034191][ T8839] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 173.586064][ T11] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 173.790861][ T6525] Bluetooth: hci4: command tx timeout [ 173.797651][ T8844] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 173.797942][ T8844] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 173.831028][ T11] usb 1-1: Using ep0 maxpacket: 32 [ 173.833117][ T11] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 173.833501][ T11] usb 1-1: config 0 has no interface number 0 [ 173.835875][ T11] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 173.835924][ T11] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 173.835949][ T11] usb 1-1: Product: syz [ 173.835971][ T11] usb 1-1: Manufacturer: syz [ 173.835993][ T11] usb 1-1: SerialNumber: syz [ 173.838627][ T11] usb 1-1: config 0 descriptor?? [ 173.844393][ T11] smsc95xx v2.0.0 [ 174.373173][ T11] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 174.373247][ T11] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 174.558562][ T8853] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 174.563328][ T8853] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 174.994660][ T8857] ceph: No mds server is up or the cluster is laggy [ 175.076419][ T6568] libceph: connect (1)[c::]:6789 error -101 [ 175.092922][ T6568] libceph: mon0 (1)[c::]:6789 connect error [ 175.387684][ T6568] libceph: connect (1)[c::]:6789 error -101 [ 175.399966][ T6568] libceph: mon0 (1)[c::]:6789 connect error [ 175.860790][ T6525] Bluetooth: hci4: command tx timeout [ 177.206197][ T7463] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 177.229442][ T7463] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 177.282766][ T7463] bond0 (unregistering): Released all slaves [ 177.306050][ T8728] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 177.313233][ T8728] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 177.523467][ T8830] hsr_slave_1 (unregistering): left promiscuous mode [ 177.660436][ T11] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 177.660904][ T11] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -71 [ 177.664707][ T11] usb 1-1: USB disconnect, device number 15 [ 177.941490][ T8728] team0: Port device team_slave_0 added [ 178.663062][ T8728] team0: Port device team_slave_1 added [ 178.833746][ T8728] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 178.833805][ T8728] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 178.833882][ T8728] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 178.835153][ T8728] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 178.835197][ T8728] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 178.835249][ T8728] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 178.861222][ C1] Unknown status report in ack skb [ 178.941871][ T8728] hsr_slave_0: entered promiscuous mode [ 178.944233][ T8728] hsr_slave_1: entered promiscuous mode [ 178.946470][ T8728] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 178.948841][ T8728] Cannot create hsr debugfs directory [ 179.081208][ T7463] hsr_slave_0: left promiscuous mode [ 179.081637][ T7463] hsr_slave_1: left promiscuous mode [ 179.082076][ T7463] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 179.082130][ T7463] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 179.091337][ T7463] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 179.091403][ T7463] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 179.140173][ T7463] veth1_macvtap: left promiscuous mode [ 179.153087][ T7463] veth0_macvtap: left promiscuous mode [ 179.153600][ T7463] veth1_vlan: left promiscuous mode [ 179.153683][ T7463] veth0_vlan: left promiscuous mode [ 179.240985][ T11] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 179.420914][ T11] usb 1-1: Using ep0 maxpacket: 16 [ 179.814970][ T11] usb 1-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 179.818081][ T11] usb 1-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 179.822764][ T11] usb 1-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 179.827133][ T11] usb 1-1: config 1 interface 0 has no altsetting 0 [ 179.876196][ T11] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 179.876263][ T11] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 179.876308][ T11] usb 1-1: Product: syz [ 179.876336][ T11] usb 1-1: Manufacturer: syz [ 179.876363][ T11] usb 1-1: SerialNumber: syz [ 179.953870][ T8957] netlink: 28 bytes leftover after parsing attributes in process `syz.5.710'. [ 180.466515][ T8973] netlink: 'syz.3.711': attribute type 4 has an invalid length. [ 180.468910][ T8973] netlink: 3657 bytes leftover after parsing attributes in process `syz.3.711'. [ 180.682743][ T11] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 16 if 0 alt 255 proto 1 vid 0x0525 pid 0xA4A8 [ 180.684559][ T11] usb 1-1: USB disconnect, device number 16 [ 180.686959][ T11] usblp0: removed [ 183.102770][ T7463] team0 (unregistering): Port device team_slave_1 removed [ 183.411477][ T9008] ucma_write: process 436 (syz.1.722) changed security contexts after opening file descriptor, this is not allowed. [ 183.486464][ T7463] team0 (unregistering): Port device team_slave_0 removed [ 186.405282][ T9040] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 186.427338][ T9040] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 186.439367][ T9042] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 186.454299][ T9042] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 187.381400][ T2408] ieee802154 phy0 wpan0: encryption failed: -22 [ 187.381484][ T2408] ieee802154 phy1 wpan1: encryption failed: -22 [ 187.387214][ T9056] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 187.387491][ T9056] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 187.563200][ T9070] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 187.565908][ T9070] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 187.853985][ T9088] ieee802154 phy0 wpan0: encryption failed: -22 [ 187.861918][ T8728] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 187.869694][ T8728] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 187.873462][ T8728] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 187.877456][ T8728] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 187.978258][ T8728] 8021q: adding VLAN 0 to HW filter on device bond0 [ 187.994518][ T8728] 8021q: adding VLAN 0 to HW filter on device team0 [ 188.001369][ T6526] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 188.002799][ T178] bridge0: port 1(bridge_slave_0) entered blocking state [ 188.002854][ T178] bridge0: port 1(bridge_slave_0) entered forwarding state [ 188.055477][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 188.055565][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 188.863068][ T6526] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 188.863136][ T6526] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 188.863164][ T6526] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 188.863202][ T6526] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 188.863228][ T6526] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 188.888523][ T6526] usb 1-1: config 0 descriptor?? [ 188.925723][ T8728] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 188.951110][ T8728] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 189.197660][ T8728] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 189.292979][ T8728] veth0_vlan: entered promiscuous mode [ 189.311960][ T8728] veth1_vlan: entered promiscuous mode [ 189.361083][ T8728] veth0_macvtap: entered promiscuous mode [ 189.363446][ T8728] veth1_macvtap: entered promiscuous mode [ 189.556027][ T8728] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 189.574747][ T8728] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 189.583476][ T8728] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.684157][ T8728] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.684662][ T8728] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.684997][ T8728] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.941345][ T9144] ceph: No mds server is up or the cluster is laggy [ 190.104602][ T2283] libceph: connect (1)[c::]:6789 error -101 [ 190.111561][ T2283] libceph: mon0 (1)[c::]:6789 connect error [ 190.329093][ T7461] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 190.329162][ T7461] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 190.369180][ T2158] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 190.369241][ T2158] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 191.887912][ T6526] usbhid 1-1:0.0: can't add hid device: -71 [ 191.888033][ T6526] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 191.900989][ T6526] usb 1-1: USB disconnect, device number 17 [ 191.997913][ T9193] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 192.002853][ T9193] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 194.468959][ C0] ------------[ cut here ]------------ [ 194.468997][ C0] WARNING: CPU: 0 PID: 9225 at net/mac80211/tx.c:5024 __ieee80211_beacon_get+0xf64/0x12c0 [ 194.473374][ C0] Modules linked in: [ 194.474486][ C0] CPU: 0 UID: 0 PID: 9225 Comm: syz.3.766 Not tainted 6.16.0-rc2-syzkaller-g9aa9b43d689e #0 PREEMPT [ 194.477517][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 194.480277][ C0] pstate: 40400005 (nZcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 194.482435][ C0] pc : __ieee80211_beacon_get+0xf64/0x12c0 [ 194.484025][ C0] lr : __ieee80211_beacon_get+0xf64/0x12c0 [ 194.485621][ C0] sp : ffff800080007a40 [ 194.486741][ C0] x29: ffff800080007a80 x28: ffffffffffffe3b0 x27: 0000000000000001 [ 194.489046][ C0] x26: 0000000000000041 x25: ffff0000f4420800 x24: 0000000000000000 [ 194.491246][ C0] x23: ffff0000daf48e40 x22: ffff800080007b00 x21: ffff0000f442a500 [ 194.493484][ C0] x20: dfff800000000000 x19: ffff0000f442a9d0 x18: 1fffe000337dc876 [ 194.495636][ C0] x17: ffff80010c964000 x16: ffff80008051eb44 x15: ffff700010000f61 [ 194.497876][ C0] x14: 0000000000000000 x13: 0000000000000007 x12: 0000000000ff0100 [ 194.500080][ C0] x11: ffff0000caa5bd00 x10: 0000000000ff0100 x9 : 0000000000000000 [ 194.502293][ C0] x8 : ffff0000caa5bd00 x7 : 0000000000000000 x6 : 0000000000000000 [ 194.504533][ C0] x5 : 0000000000000000 x4 : 0000000000000000 x3 : ffff80008a7facd0 [ 194.506923][ C0] x2 : 000000000000000a x1 : 0000000000000000 x0 : 0000000000000000 [ 194.508923][ C0] Call trace: [ 194.509695][ C0] __ieee80211_beacon_get+0xf64/0x12c0 (P) [ 194.511319][ C0] ieee80211_beacon_get_tim+0xb8/0x244 [ 194.512823][ C0] mac80211_hwsim_beacon_tx+0x314/0x6e0 [ 194.514327][ C0] __iterate_interfaces+0x250/0x504 [ 194.515752][ C0] ieee80211_iterate_active_interfaces_atomic+0xd4/0x180 [ 194.517433][ C0] mac80211_hwsim_beacon+0xc8/0x1b8 [ 194.518684][ C0] __hrtimer_run_queues+0x41c/0xb78 [ 194.520140][ C0] hrtimer_run_softirq+0x160/0x400 [ 194.521420][ C0] handle_softirqs+0x328/0xc88 [ 194.522581][ C0] __do_softirq+0x14/0x20 [ 194.523646][ C0] ____do_softirq+0x14/0x20 [ 194.524874][ C0] call_on_irq_stack+0x24/0x30 [ 194.526322][ C0] do_softirq_own_stack+0x20/0x2c [ 194.527652][ C0] __irq_exit_rcu+0x1b0/0x478 [ 194.528926][ C0] irq_exit_rcu+0x14/0x84 [ 194.529974][ C0] el1_interrupt+0x38/0x54 [ 194.531083][ C0] el1h_64_irq_handler+0x18/0x24 [ 194.532388][ C0] el1h_64_irq+0x6c/0x70 [ 194.533498][ C0] _raw_spin_unlock_irqrestore+0x44/0x98 (P) [ 194.535157][ C0] __rmqueue_pcplist+0x12d0/0x18dc [ 194.536654][ C0] alloc_pages_bulk_noprof+0x434/0x810 [ 194.538167][ C0] alloc_pages_bulk_mempolicy_noprof+0x6c0/0x12e8 [ 194.539945][ C0] __vmalloc_node_range_noprof+0x628/0xf70 [ 194.541531][ C0] vmalloc_user_noprof+0xf0/0x14c [ 194.542940][ C0] vb2_vmalloc_alloc+0xf8/0x2d4 [ 194.544117][ C0] __vb2_queue_alloc+0x84c/0x134c [ 194.545431][ C0] vb2_core_reqbufs+0xa1c/0x10f0 [ 194.546781][ C0] __vb2_init_fileio+0x294/0xeb4 [ 194.548145][ C0] vb2_core_poll+0x3fc/0x6f0 [ 194.549493][ C0] vb2_fop_poll+0x130/0x2bc [ 194.550762][ C0] v4l2_poll+0x130/0x270 [ 194.551952][ C0] do_select+0xcb0/0x1320 [ 194.553169][ C0] core_sys_select+0x5f4/0x924 [ 194.554508][ C0] __arm64_sys_pselect6+0x330/0x3d4 [ 194.555950][ C0] invoke_syscall+0x98/0x2b8 [ 194.557233][ C0] el0_svc_common+0x130/0x23c [ 194.558496][ C0] do_el0_svc+0x48/0x58 [ 194.559623][ C0] el0_svc+0x58/0x17c [ 194.560724][ C0] el0t_64_sync_handler+0x78/0x108 [ 194.562183][ C0] el0t_64_sync+0x198/0x19c [ 194.563438][ C0] irq event stamp: 727 [ 194.564531][ C0] hardirqs last enabled at (726): [] _raw_spin_unlock_irqrestore+0x38/0x98 [ 194.567412][ C0] hardirqs last disabled at (727): [] el1_dbg+0x24/0x80 [ 194.569657][ C0] softirqs last enabled at (618): [] handle_softirqs+0xaf8/0xc88 [ 194.572193][ C0] softirqs last disabled at (723): [] __do_softirq+0x14/0x20 [ 194.574662][ C0] ---[ end trace 0000000000000000 ]--- SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 194.576254][ C0] vkms_vblank_simulate: vblank timer overrun [ 195.173886][ T7461] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.445053][ T7461] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.597549][ T7461] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.762139][ T7461] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.973057][ T7461] bridge_slave_1: left allmulticast mode [ 195.973119][ T7461] bridge_slave_1: left promiscuous mode [ 195.973244][ T7461] bridge0: port 2(bridge_slave_1) entered disabled state [ 196.001511][ T7461] bridge_slave_0: left allmulticast mode [ 196.001577][ T7461] bridge_slave_0: left promiscuous mode [ 196.001708][ T7461] bridge0: port 1(bridge_slave_0) entered disabled state [ 197.563214][ T7461] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 197.603287][ T7461] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 197.644543][ T7461] bond0 (unregistering): Released all slaves [ 197.712293][ T9225] syz_tun (unregistering): left allmulticast mode [ 197.712362][ T9225] syz_tun (unregistering): left promiscuous mode [ 197.712993][ T9225] bridge0: port 3(syz_tun) entered disabled state [ 198.293955][ T7461] hsr_slave_0: left promiscuous mode [ 198.295884][ T7461] hsr_slave_1: left promiscuous mode [ 198.296638][ T7461] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 198.296681][ T7461] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 198.300030][ T7461] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 198.300071][ T7461] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 198.316994][ T7461] veth1_macvtap: left promiscuous mode [ 198.317094][ T7461] veth0_macvtap: left promiscuous mode [ 198.317193][ T7461] veth1_vlan: left promiscuous mode [ 198.317271][ T7461] veth0_vlan: left promiscuous mode [ 200.144481][ T7461] team0 (unregistering): Port device team_slave_1 removed [ 200.412813][ T7461] team0 (unregistering): Port device team_slave_0 removed [ 203.635292][ T7461] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.716145][ T7461] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.822237][ T7461] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.923940][ T7461] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.143631][ T7461] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.214387][ T7461] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.343875][ T7461] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.424645][ T7461] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0