last executing test programs: 25m40.488075453s ago: executing program 2 (id=687): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="f78d9ca38fff48f3be52163448412ba8", 0x10}], 0x1, &(0x7f0000000a40)=ANY=[@ANYBLOB], 0x18}], 0x1, 0x0) recvmmsg(r1, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000a00)=""/39, 0x27}], 0x1}, 0x400}], 0x1, 0x11102, 0x0) 25m39.645915037s ago: executing program 2 (id=689): r0 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010008020000001800006600000008000300", @ANYRES32=r2, @ANYBLOB], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r4 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r4, &(0x7f0000000440), 0x10) listen(r4, 0x0) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) writev(r5, &(0x7f0000000240)=[{&(0x7f0000000500)="d8e8551e", 0x4}], 0x1) r6 = accept4$unix(r4, 0x0, 0x0, 0x0) recvmsg(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000480)=""/68, 0x44}], 0x1}, 0x4c2103a0) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="80000000", @ANYRES16=r3, @ANYBLOB="010026bd7000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="0600cd0000000000590033008020090008021100000108021100"], 0x80}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 25m38.253939749s ago: executing program 2 (id=694): syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f0000000180)={0x24, 0x0, 0x9, 0x201, 0x0, 0x0, {0x3, 0x0, 0x5411}, [@NFCTH_TUPLE={0x10, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}]}]}, 0x24}}, 0x800) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000740)=ANY=[@ANYRES32=r5, @ANYBLOB], 0x10) r6 = socket$pppl2tp(0x18, 0x1, 0x1) r7 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r6, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r7, {0x2, 0x0, @multicast2}, 0x2, 0x0, 0x4}}, 0x2e) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x34, r8, 0x1, 0x1070bd2c, 0x4, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x40811}, 0x20) r10 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r10, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}, 0x2}}, 0x26) r11 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000840), 0x1a01, 0x0) ioctl$EVIOCGPROP(r11, 0x40047438, 0x0) 25m36.718999845s ago: executing program 2 (id=696): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) socket$inet6_sctp(0xa, 0x5, 0x84) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r1, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10) socket$inet_udp(0x2, 0x2, 0x0) sendmmsg(r1, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) 25m35.441456055s ago: executing program 2 (id=701): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c00)={{0x14}, [@NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DATA={0x10, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}]}]}, @NFTA_IMMEDIATE_DREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x88}}, 0x0) 25m35.260414088s ago: executing program 2 (id=702): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) syz_emit_ethernet(0x71, &(0x7f00000002c0)={@local, @multicast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "7f00ef", 0x3b, 0x2c, 0x0, @remote, @mcast2, {[], {0x0, 0x0, 0x3b, 0x0, @opaque="02aadf0062dfafe40d02434feee9d16d7d98ad6f435c3137cf56121fe36f6f5a0ecd9062a872bc17357e2f456d36281ef64ef6"}}}}}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, 0x0, &(0x7f0000000200)) r2 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x24, r2, 0x1, 0x0, 0x0, {}, [@SEG6_ATTR_SECRET={0x8, 0x4, [0x0]}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x1}]}, 0x24}}, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(r1, 0x0, 0x240048c5) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000002000)=""/102400, 0x19000) r4 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/power/disk', 0x169a82, 0x18c) sendfile(r5, r5, 0x0, 0xb) r6 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000440), 0x40000, 0x0) ioctl$PTP_SYS_OFFSET(r6, 0xc0403d08, 0xffffffffffffffff) ioctl$SG_IO(r4, 0x2285, 0x0) ioctl$sock_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f0000000480)) r7 = socket$inet6(0xa, 0x3, 0x8000000003c) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x528, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x458, 0xffffffff, 0xffffffff, 0x458, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x388, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_to_hsr\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x588) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001b00)=[{&(0x7f0000001800)="d8000000100081044e81f782db44b904021d083910000000000000a1180015000600142603600e120900210000000401a80016000400144006000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cb", 0x66}, {&(0x7f0000001a00)="00f4bcb66ade04ac39d0955b9112c0829f67cf2fc2298a0325d17c137eea601b08622e2620541f236159d69ed0a9d8fb959d9dde30cd9601b3115b8cf7812233cca61073540be7d5db6fc74cb06a1ba2e5055a95fc0b9986d1fa755ce65a7af45d765a217b1a17c60ade87a7a263c9b50cd51cd9c257c7418c3afc3a96dcadcb82618fec327d4d9dff17e795818e16acc77ddf7f6262e42bd84109d432d78971b582248e930ca6ca61945af075e5e68f97eeabaddb983078e95b8daf86895c883e09b3ce76b1e256eb0184d61fa61e476c7eef", 0xd3}], 0x2}, 0x0) socket$tipc(0x1e, 0x5, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000840)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a310000000064000000060a0104006f0000000000000100000008000b40000000003c000480380001800b00010064796e7365740000280002800900010073797a32000000000800024000000000080003400000000008000440000000000900010073797a30"], 0xd8}}, 0x0) 25m19.378972945s ago: executing program 32 (id=702): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) syz_emit_ethernet(0x71, &(0x7f00000002c0)={@local, @multicast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "7f00ef", 0x3b, 0x2c, 0x0, @remote, @mcast2, {[], {0x0, 0x0, 0x3b, 0x0, @opaque="02aadf0062dfafe40d02434feee9d16d7d98ad6f435c3137cf56121fe36f6f5a0ecd9062a872bc17357e2f456d36281ef64ef6"}}}}}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, 0x0, &(0x7f0000000200)) r2 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x24, r2, 0x1, 0x0, 0x0, {}, [@SEG6_ATTR_SECRET={0x8, 0x4, [0x0]}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x1}]}, 0x24}}, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(r1, 0x0, 0x240048c5) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000002000)=""/102400, 0x19000) r4 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/power/disk', 0x169a82, 0x18c) sendfile(r5, r5, 0x0, 0xb) r6 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000440), 0x40000, 0x0) ioctl$PTP_SYS_OFFSET(r6, 0xc0403d08, 0xffffffffffffffff) ioctl$SG_IO(r4, 0x2285, 0x0) ioctl$sock_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f0000000480)) r7 = socket$inet6(0xa, 0x3, 0x8000000003c) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x528, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x458, 0xffffffff, 0xffffffff, 0x458, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x388, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_to_hsr\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x588) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001b00)=[{&(0x7f0000001800)="d8000000100081044e81f782db44b904021d083910000000000000a1180015000600142603600e120900210000000401a80016000400144006000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cb", 0x66}, {&(0x7f0000001a00)="00f4bcb66ade04ac39d0955b9112c0829f67cf2fc2298a0325d17c137eea601b08622e2620541f236159d69ed0a9d8fb959d9dde30cd9601b3115b8cf7812233cca61073540be7d5db6fc74cb06a1ba2e5055a95fc0b9986d1fa755ce65a7af45d765a217b1a17c60ade87a7a263c9b50cd51cd9c257c7418c3afc3a96dcadcb82618fec327d4d9dff17e795818e16acc77ddf7f6262e42bd84109d432d78971b582248e930ca6ca61945af075e5e68f97eeabaddb983078e95b8daf86895c883e09b3ce76b1e256eb0184d61fa61e476c7eef", 0xd3}], 0x2}, 0x0) socket$tipc(0x1e, 0x5, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000840)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a310000000064000000060a0104006f0000000000000100000008000b40000000003c000480380001800b00010064796e7365740000280002800900010073797a32000000000800024000000000080003400000000008000440000000000900010073797a30"], 0xd8}}, 0x0) 16m32.055954873s ago: executing program 5 (id=2051): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f000000b200)='/dev/comedi1\x00', 0x8040, 0x0) openat$audio1(0xffffffffffffff9c, &(0x7f0000000240), 0x88002, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x18, 0x10, &(0x7f0000000200)=ANY=[], &(0x7f0000000300)='syzkaller\x00', 0x81, 0xaa, &(0x7f0000000400)=""/170, 0x41000, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x4, 0x10010, r1, 0x8fe1e000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) r3 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x27, &(0x7f0000000740)={@multicast2, @private=0xa010101}, 0xc) r4 = socket$netlink(0x10, 0x3, 0x0) writev(r4, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) setsockopt$inet_msfilter(r3, 0x0, 0x29, &(0x7f00000000c0)=ANY=[], 0x14) syz_emit_vhci(&(0x7f0000000200)=ANY=[], 0xd) bpf$MAP_CREATE(0x0, 0x0, 0x50) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) setsockopt$inet_int(r3, 0x0, 0x18, &(0x7f0000000200)=0x1, 0x4) socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x86, &(0x7f0000000840)=ANY=[@ANYBLOB="488ecaa97109a6feb81e53955feb2e64c0983d7d14cc8315c775704074673f0c2593e984c32ee3c23d989ca7b92b8a14ebe08c0be743cf60738decffb688616148e1753683cc0c045f19950af8e3c2ea31cd0815bf9b15dcbd54d8e7d766559101dccba8915836cf5948d0aeab92f2d928e2728f612282bcf4ef656fc5536254ff82147436556fc85c52a6788da4b6967656557dd9f3bca729c4b842fb00d065f5ecfe09a275abcf5a71efbef27f8293f9d3", @ANYRES16=r4], 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) ioctl$TIOCMBIC(0xffffffffffffffff, 0x5417, &(0x7f0000000080)) socket$nl_generic(0x10, 0x3, 0x10) getpid() bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000100)={'c6xdigio\x00', [0x8001, 0xf, 0x6, 0x8, 0xfffffffb, 0x3ff, 0x4d7, 0x2, 0x4, 0x4, 0x0, 0x401, 0x3, 0x47, 0x9, 0x7ff, 0xa, 0x0, 0x1f29, 0x5, 0x8000, 0x8c, 0x6, 0x6, 0x54, 0x10001, 0x101, 0x5, 0x10001, 0x8, 0x1]}) 16m30.375775127s ago: executing program 5 (id=2053): socket$nl_generic(0x10, 0x3, 0x10) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000340)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0) r2 = syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0) read$midi(r2, 0x0, 0x14) close_range(r1, 0xffffffffffffffff, 0x0) 16m28.458341036s ago: executing program 5 (id=2058): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d002007000000", @ANYRES32=r1, @ANYBLOB="00000000100000001c001a80080002"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0) 16m28.075999273s ago: executing program 5 (id=2061): syz_usb_connect(0x6, 0x9a2, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) write$tun(r0, 0x0, 0x0) syz_open_dev$sndmidi(0x0, 0xffffffffffffe59c, 0x25c102) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = openat$nullb(0xffffffffffffff9c, 0x0, 0x169802, 0x0) r5 = dup(r4) ioctl$BLKRRPART(r5, 0x125f, 0x5729030000000000) openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) close(0x3) socketpair$unix(0x1, 0x5, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000005900)=[{{0x0, 0x0, &(0x7f0000002280)=[{&(0x7f0000002380)=""/190, 0xbe}], 0x1}, 0x3}, {{&(0x7f0000002440)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, &(0x7f00000022c0)=[{&(0x7f00000024c0)=""/221, 0xdd}, {0x0}], 0x2, &(0x7f00000035c0)=""/162, 0xa2}, 0x1ff}, {{0x0, 0x0, 0x0}}], 0x3, 0x4001a100, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000080), 0xc, &(0x7f0000000940)={&(0x7f0000000780)=ANY=[@ANYBLOB="540000001c000100"/20, @ANYRES32=0x0, @ANYBLOB="0000000408000f000002000008000800", @ANYRES32=0x0, @ANYBLOB="04000100ff0100000000"], 0x54}}, 0x0) 16m24.575275144s ago: executing program 5 (id=2071): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00') syz_open_procfs(0x0, 0x0) pread64(r1, &(0x7f000004b680)=""/102356, 0x18fd4, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 16m23.81355844s ago: executing program 5 (id=2073): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="01000000420000000600000008"], 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x8001, 0x0, r1}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8003, r2}, 0x38) 16m7.516729388s ago: executing program 33 (id=2073): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="01000000420000000600000008"], 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x8001, 0x0, r1}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8003, r2}, 0x38) 3m44.138490487s ago: executing program 4 (id=3662): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x11, 0x3, &(0x7f0000000040)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r3 = dup3(r2, r1, 0x0) syz_create_resource$binfmt(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r6, 0x8914, &(0x7f0000000000)) munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[], &(0x7f0000001f80)=""/212, 0x1a, 0xd4, 0xa}, 0x28) syz_init_net_socket$rose(0xb, 0x5, 0x0) r8 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r8, 0x4000000000000, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x4001, 0x3, 0x200, 0x160, 0x0, 0x148, 0x0, 0x148, 0x240, 0x240, 0x240, 0x240, 0x240, 0x7fffffe, 0x0, {[{{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}, {{@ip={@local, @loopback, 0x0, 0x0, 'veth0_vlan\x00', 'macvtap0\x00'}, 0x0, 0x70, 0x90}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x260) r9 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r10 = syz_init_net_socket$rose(0xb, 0x5, 0x0) socket$kcm(0x11, 0x3, 0x0) getsockopt$inet_mreqn(r8, 0x0, 0x23, 0x0, &(0x7f0000000200)) sendmsg$kcm(r3, &(0x7f00000000c0)={&(0x7f0000000440)=@qipcrtr={0x2a, 0x4, 0x1}, 0x80, &(0x7f0000000500)=[{&(0x7f00000006c0)="27031c00160014000000002f1eafacf706e105400000894f00050004ee0b80558ddbba9b37242d37a518fc9c5be50eaf07c3650596", 0x35}], 0x1}, 0x4) ioctl$sock_rose_SIOCADDRT(r10, 0x890b, &(0x7f0000000380)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x6, @null, @bpq0, 0x0, [@bcast, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @default]}) r11 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x280240, 0x0) syz_clone3(0x0, 0x0) ioctl$sock_rose_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000700)=@bpf_tracing={0x1a, 0x18, &(0x7f00000009c0)=ANY=[@ANYRESHEX=r10, @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000", @ANYRES32, @ANYBLOB, @ANYRESHEX=r11], &(0x7f00000008c0)='syzkaller\x00', 0x3, 0x2f, &(0x7f0000000640)=""/47, 0x41000, 0x64, '\x00', r5, 0x19, r7, 0x8, &(0x7f0000000680)={0x1, 0x5}, 0x8, 0x10, &(0x7f0000000840)={0x0, 0x5, 0x6, 0x2}, 0x10, 0x1307c, r0, 0x1, &(0x7f0000000880)=[0xffffffffffffffff], &(0x7f0000000340)=[{0x5, 0x2, 0x0, 0x7}], 0x10, 0xffffffff}, 0x94) ioctl$sock_rose_SIOCADDRT(r10, 0x890b, &(0x7f00000000c0)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x0, @null, @bpq0, 0x2, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @null, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) ioctl$sock_ifreq(r9, 0x8990, &(0x7f0000000180)={'bond0\x00', @ifru_names='rose0\x00'}) 3m42.758111695s ago: executing program 4 (id=3667): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r0, 0x0, 0xa}, 0x18) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000003280)={{0x14, 0x3ed}, [], {0x14, 0x3ed}}, 0x28}, 0x1, 0x0, 0x0, 0x4000041}, 0x0) 3m41.528163059s ago: executing program 4 (id=3669): r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x2, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0xa, 0x1, 0x2, 0x0, 0xfd}) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405668, &(0x7f00000000c0)={0x5, 0x18, 0x1, "0000087aba10fdfffffb05001400", 0x59565955}) 3m41.149777907s ago: executing program 4 (id=3673): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='sched_switch\x00', r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) r5 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0x2d}, 0x4e20, 0x3, 'wrr\x00', 0x1, 0x2, 0x6e}, 0x2c) socket$inet_smc(0x2b, 0x1, 0x0) sendmsg$rds(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f0000000400)=[@mask_cswp={0x58, 0x114, 0x9, {{0xe, 0x7}, &(0x7f0000000140)=0x6, 0x0, 0x6, 0x2, 0x7ff, 0x4, 0x22, 0xfffffffffffffffa}}], 0x58, 0x8004}, 0x0) 3m35.07812902s ago: executing program 4 (id=3689): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r1, &(0x7f0000000600)=[{{&(0x7f0000000140)=@nfc_llcp, 0x80, &(0x7f0000000780)=[{&(0x7f0000000280)=""/122, 0x7a}, {&(0x7f0000000400)=""/165, 0xa5}, {&(0x7f00000004c0)=""/142, 0x8e}, {&(0x7f0000000640)=""/70, 0x46}, {&(0x7f00000006c0)=""/179, 0xb3}], 0x5, &(0x7f0000000580)=""/70, 0x46}}], 0x1, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x42, &(0x7f0000000100)=0x2, 0x4) r2 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) socket$nl_generic(0x10, 0x3, 0x10) openat$fb0(0xffffffffffffff9c, 0x0, 0x402, 0x0) 3m33.487701022s ago: executing program 4 (id=3691): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000500)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa802, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xb, 0xd}, {}, {0x8, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x48050}, 0x40004) recvmmsg(r4, &(0x7f00000002c0)=[{{0x0, 0x0, &(0x7f0000001a80)}, 0x3}], 0x4000000000000ea, 0x2, 0x0) 3m17.979683005s ago: executing program 34 (id=3691): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000500)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa802, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xb, 0xd}, {}, {0x8, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x48050}, 0x40004) recvmmsg(r4, &(0x7f00000002c0)=[{{0x0, 0x0, &(0x7f0000001a80)}, 0x3}], 0x4000000000000ea, 0x2, 0x0) 22.327516411s ago: executing program 1 (id=4129): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f00000001c0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0x0, 0x1c9ae7fffe9a6f34}}, 0x1c) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r2) sendmsg$IEEE802154_LLSEC_LIST_KEY(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={0x14, r3, 0x325, 0x70bd27}, 0x14}, 0x1, 0x0, 0x0, 0x10004}, 0x8000) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f00000000c0)={0x0, 0x0, 0xfe, 0x2, 0x0, 0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0xe) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r6) sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r7) socket$unix(0x1, 0x1, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x7, 0x6361, 0x5, 0x1, 0xffffffff}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, 0x0, {}, {0x2, 0xb}, {0xd, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f0000000100)=0x6, 0x4) 20.998584721s ago: executing program 1 (id=4131): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_DEST(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000380)={0x18, r1, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DEST={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x800}, 0x40000) 20.136661242s ago: executing program 1 (id=4134): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) syz_io_uring_complete(0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000f80)=ANY=[@ANYBLOB], &(0x7f0000000340)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xf, 0x0, &(0x7f0000000100)="b9ff0b076859268cb89e14f088a847", 0x0, 0xf00, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000480)={0x2, 0xfffe, @multicast2}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) socket(0xa, 0x801, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) 18.299376201s ago: executing program 6 (id=4142): r0 = socket(0x2, 0x3, 0xff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) connect$l2tp(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x5, 0x1000086}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x43, &(0x7f0000000040)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet6_tcp(0xa, 0x1, 0x0) pipe2$watch_queue(&(0x7f0000000240), 0x80) keyctl$KEYCTL_WATCH_KEY(0x15, 0x0, 0xffffffffffffffff, 0x5b) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4084004}, 0x10000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x4}, 0x10) write(0xffffffffffffffff, &(0x7f0000000000)="240000001a005f0214f9f407000904001f000000fe020002000000000800040001000000", 0x24) sendto$inet(r0, 0x0, 0x0, 0x800, 0x0, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x1000)=nil, 0x1000, &(0x7f0000000080)='\x00\x00\x00') prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) ioctl$TCFLSH(0xffffffffffffffff, 0x400455c8, 0x4) 16.809279786s ago: executing program 6 (id=4144): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x25, 0x5586, &(0x7f00000079c0)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000200)='sched_switch\x00', r0}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000003c0)=@abs, 0x6e) r4 = socket$pppl2tp(0x18, 0x1, 0x1) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file2\x00', 0x200801f, &(0x7f00000000c0), 0x2, 0x4ee, &(0x7f0000000880)="$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") setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) setsockopt(0xffffffffffffffff, 0x1, 0x10000000000009, 0x0, 0x0) socket$nl_crypto(0x10, 0x3, 0x15) r5 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r5, 0x80044940, &(0x7f0000001b00)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000100)='.\x00', 0x1a4243c, &(0x7f0000000d80)=ANY=[@ANYRES16=r8, @ANYRESOCT, @ANYBLOB="12a4095a2aac12f0bfcb206d982e44066381388d27f14002d8d7431d3947f6399c7ff9f5193fc0398653e5a67bbb319f02bf4ac6f6ccd5acbfe1350cc3a6d2d48cf6c089ddf67171ffb3b15988e7b394c5daf3e12ca05e4dbdad7edd45f10cbc296a53a530d4c2d203ee650d5fff3a9b5aae78794fe84327e508172cdd72eeff5af4d6db9379bef20dde8e64b91d31a84ce8a7598bb78cc85108874811fc650f0520a5", @ANYRES32=r6, @ANYBLOB="7b8ae4d950a510a981c78f2246d4825535c37655327112a414ee394162b6e558c36104bc2a1b47a800a92237a6148a222bcace4f74ebf7b4d63ad663b601d02146f21caf496271e9376e3f721e48caaa194f00e137096facebc4e2574ed5d094491b637c93517ded181fdf49e2daceefb5c72f3fef86df384ff03cb9820b35f281ae9b5064199b03e8e689b35f17c7e23647ccaa01c87d80ab00757848", @ANYRES16=r7, @ANYRES64=r4, @ANYRES8=r8, @ANYRES8, @ANYRES16], 0x0, 0x0, &(0x7f0000000000)) 14.842755969s ago: executing program 1 (id=4147): socket$nl_generic(0x10, 0x3, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) socket$caif_seqpacket(0x25, 0x5, 0x2) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000340)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0) read$midi(0xffffffffffffffff, 0x0, 0x14) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=@ipv6_getnexthop={0x20, 0x6a, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@NHA_ID={0x8, 0x1, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x4010}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[@ANYBLOB="2400000018000109000000000010000002180000ff00000600000000080001"], 0x24}}, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) 14.211145073s ago: executing program 6 (id=4150): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x8400, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000280)=':', 0x1}], 0x1}}], 0x1, 0x40088d5) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000280), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) write$P9_RGETLOCK(r3, &(0x7f0000001440)=ANY=[], 0xffffff6a) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) tee(r2, r5, 0xfffffffffffffc01, 0x0) tee(r2, r5, 0x60000000000, 0x0) mprotect(&(0x7f000027f000/0x2000)=nil, 0x2000, 0x1000004) r6 = syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000280)='./bus\x00', 0x810408, 0x0, 0x0, 0x0, &(0x7f00000007c0)) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) splice(r7, &(0x7f0000000040)=0x4, r6, &(0x7f0000000080)=0x85, 0x4, 0x2) ioctl$FS_IOC_SETFLAGS(r0, 0x40186f40, &(0x7f0000000440)=0x8000) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) ioctl$EVIOCGKEYCODE(0xffffffffffffffff, 0x80084504, &(0x7f0000000040)=""/65) 11.919896587s ago: executing program 6 (id=4156): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r0) socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xdef0, 0x8000000000000000}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000500)=0x4) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r5}, 0x10) r6 = userfaultfd(0x1) r7 = accept$inet(0xffffffffffffffff, 0x0, &(0x7f0000000040)) sendto$inet(r7, &(0x7f00000003c0)="0ba5bfe780d1a8c5736a518f066f76469ff41e82d4ba9b443a61ded9e11ef55070379b3d7e930ccdec168adaef6e14a1fc4b7969eef9e83a72283e0f456ef8ab85c1cbcddbc23fb7e9702b75f14175d5baeaad9b8fed21dc78cb8adbce783885dea42ee614c3531db544b86f1d60913fa6a7034f09b531037d7c0642333d1f763191df6bcb3832907c5332c28c9a4b1f732db5875916b8b16b027082258bd80ff367570e3801004cae887df4b0f19e3da80d287aa98bd94894", 0xb9, 0x40010, &(0x7f0000000340)={0x2, 0x4e21, @empty}, 0x10) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) sendmsg$TIPC_NL_MEDIA_SET(0xffffffffffffffff, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) write$ppp(0xffffffffffffffff, 0x0, 0x0) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)={0x20, r1, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x20}}, 0x4000010) 10.377988735s ago: executing program 6 (id=4158): dup(0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) getsockopt$inet6_tcp_buf(r0, 0x6, 0x1a, 0x0, &(0x7f0000000080)) 9.624208773s ago: executing program 1 (id=4160): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102400, 0x19000) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x127081) setreuid(0x0, 0xee01) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc) 7.985879374s ago: executing program 7 (id=4165): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6"], 0x7c}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) kexec_load(0xff0f, 0x0, 0x0, 0x0) bind$tipc(0xffffffffffffffff, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0x5}}, 0x10) socket(0x28, 0x5, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000003c0)={0xffffffffffffffff, &(0x7f0000000280)="d1a71a3d5fc7d69b34388322753dbfdf5dd9"}, 0x20) syz_genetlink_get_family_id$nbd(&(0x7f0000002600), 0xffffffffffffffff) 6.708475481s ago: executing program 0 (id=4166): r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r0, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x1, @default}, 0x1c) 6.46077499s ago: executing program 7 (id=4167): timer_gettime(0x0, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_CLEAR_HALT(r0, 0x80045503, 0x0) socket(0x1, 0x803, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc001}, 0x4000000) sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000540), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x42031, 0xffffffffffffffff, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQ(r2, 0x5411, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) sendmsg$key(r3, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002000000da16c167d803f1f805000600200000000a00060000000000ff"], 0x80}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) membarrier(0x10, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_netprio_ifpriomap(r4, &(0x7f00000002c0), 0x2, 0x0) writev(r5, &(0x7f0000000040)=[{&(0x7f0000000800)='X', 0x1}], 0x1) membarrier(0x8, 0x0) 6.45989658s ago: executing program 3 (id=4168): r0 = syz_open_dev$vbi(&(0x7f0000004040), 0x3, 0x2) ioctl$VIDIOC_G_OUTPUT(r0, 0x8004562e, &(0x7f0000004080)) 6.17833537s ago: executing program 0 (id=4169): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) close(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0xffffffffffffff1a, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$TIOCPKT(r1, 0x5420, &(0x7f0000000240)=0x1000) fcntl$setownex(r0, 0xf, &(0x7f0000000000)={0x3, 0xffffffffffffffff}) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0x5}, {0xfff1, 0xffff}, {0x4}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=@deltfilter={0x24, 0x2d, 0x1, 0x78bd2f, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x10, 0x3}, {0xf, 0xffff}, {0x4, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x4c014}, 0x20044000) fsmount(0xffffffffffffffff, 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x551083, 0x28) r6 = userfaultfd(0x801) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) ioctl$UFFDIO_WRITEPROTECT(r6, 0xc018aa06, &(0x7f0000000140)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) futex_waitv(0x0, 0x0, 0x0, 0x0, 0x1) bind$inet(0xffffffffffffffff, 0x0, 0x0) 5.615946301s ago: executing program 3 (id=4170): r0 = socket$key(0xf, 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000100)) r1 = socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f00000015c0)=@mangle={'mangle\x00', 0x10, 0x6, 0x550, 0x3f0, 0x3f0, 0xec, 0x0, 0x2e0, 0x4b8, 0x4b8, 0x4b8, 0x4b8, 0x4b8, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xf0, 0x0, {0x7a00000000000000}}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@remote, 'hsr0\x00', {0xfffffffffffff800}}}}, {{@ipv6={@dev, @private1={0xfc, 0x1, '\x00', 0x1}, [0x0, 0x0, 0xff000000, 0xff], [0x0, 0x0, 0xff000000], 'pim6reg\x00', 'geneve1\x00', {}, {0xff}}, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x2}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x33}, @private2={0xfc, 0x2, '\x00', 0x1}, [0x7f8000ff, 0xffffff00, 0xffffff00], [0xffffff00, 0xffffff00, 0xff000000, 0xffff00], 'veth0_to_batadv\x00', 'macvtap0\x00', {}, {0xff}, 0x88, 0xb, 0x1, 0x4}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @local}, @private2={0xfc, 0x2, '\x00', 0x1}, [0xffffffff, 0xffffff00, 0xffffff00, 0xff], [0xff, 0xff000000, 0xffffff00], 'veth1_to_batadv\x00', 'geneve0\x00', {}, {}, 0x3b, 0xe, 0x6, 0x58}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x10}}, @common=@ipv6header={{0x28}, {0x31, 0x33}}]}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0x3, 0x9}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5b0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r6 = openat$mixer(0xffffffffffffff9c, &(0x7f00000016c0), 0x121040, 0x0) ioctl$SOUND_MIXER_READ_VOLUME(r6, 0x80044d08, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000047c0)=ANY=[@ANYBLOB="140000003a0001010000000000"], 0x14}}, 0x0) recvmmsg(r1, &(0x7f0000003700)=[{{0x0, 0x0, 0x0}}], 0x1, 0x140, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x1000}, 0x38) bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00'}, 0x10) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f00000004c0)={0x0, "d913a3ef9b310e1f98d7b8087124cd70"}) ioctl$BTRFS_IOC_SCRUB(r7, 0xc400941b, 0x0) sendmsg$key(r0, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="020300090c0000000000000000000000030006000000000002000000e00000010000000000000000020001000000000000000300000000000300050000000000020000007f000001"], 0x60}}, 0x0) r8 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000140), 0x82084, 0x0) ioctl$TIOCSETD(r8, 0x5423, &(0x7f0000000040)=0x3) ioctl$TCFLSH(r8, 0x540b, 0x1) 4.941763347s ago: executing program 7 (id=4171): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, &(0x7f0000000340), 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mbind(&(0x7f000012c000/0x2000)=nil, 0x2000, 0x3, &(0x7f0000000000)=0x8006, 0x86, 0x3) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, 0x0, 0x80c0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newtfilter={0x34, 0x2c, 0xd2b, 0x70bd2e, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x8}, {}, {0x7, 0xb}}, [@TCA_CHAIN={0x8, 0xb, 0xd}, @TCA_CHAIN={0x8, 0xb, 0x5}]}, 0x34}}, 0x400c084) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, 0x0, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu/syz1\x00', 0x1ff) 4.702610586s ago: executing program 0 (id=4172): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, 0x2}, 0xa5) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x64) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mount(0x0, &(0x7f0000000240)='.\x00', &(0x7f00000000c0)='nfs\x00', 0x0, 0x0) socket(0x2, 0x80805, 0x0) r4 = syz_open_dev$vbi(&(0x7f0000000080), 0x1, 0x2) ioctl$VIDIOC_S_OUTPUT(r4, 0xc004562f, &(0x7f00000000c0)=0x1) ioctl$VIDIOC_S_DV_TIMINGS(r4, 0xc0845657, &(0x7f0000000480)={0x0, @bt={0x12, 0x0, 0x0, 0x2, 0xd59f80, 0x8, 0x5, 0x7, 0x8, 0x0, 0x2, 0x596, 0x7, 0x0, 0x2e, 0xd, {0xffff945a, 0xfffffaec}, 0x3, 0xed}}) 3.877177526s ago: executing program 3 (id=4173): sched_setscheduler(0x0, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x42, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xc) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000002c0)=""/100, &(0x7f0000000500)=""/74, 0xeeef0000}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f00000009c0)=""/251, 0x0, 0x4}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f00000006c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000500)={@flat=@binder={0x73622a85, 0xb, 0x2}, @flat=@binder={0x73622a85, 0x300b, 0x1}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x1, 0x36}}, &(0x7f0000000000)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 2.292448665s ago: executing program 0 (id=4174): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x91) r1 = memfd_secret(0x80000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xa, 0x11, r1, 0x0) ftruncate(r1, 0x51a9497) pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xe7c) 2.138886021s ago: executing program 6 (id=4175): r0 = getpid() syz_pidfd_open(r0, 0x0) r1 = epoll_create1(0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = epoll_create1(0x0) fcntl$dupfd(r1, 0x0, r1) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)=ANY=[@ANYRES32=r3, @ANYBLOB='&'], 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) bind$unix(0xffffffffffffffff, &(0x7f0000000240)=@file={0x1, './file0\x00'}, 0x6e) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000001c0)) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/fib_triestat\x00') 2.138099921s ago: executing program 3 (id=4176): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00006ca000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x10000) bind$inet6(0xffffffffffffffff, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) 2.104929612s ago: executing program 7 (id=4177): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6"], 0x7c}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) kexec_load(0xff0f, 0x0, 0x0, 0x0) bind$tipc(0xffffffffffffffff, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0x5}}, 0x10) socket(0x28, 0x5, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000003c0)={0xffffffffffffffff, &(0x7f0000000280)="d1a71a3d5fc7d69b34388322753dbfdf5dd9"}, 0x20) syz_genetlink_get_family_id$nbd(&(0x7f0000002600), 0xffffffffffffffff) 1.968104157s ago: executing program 0 (id=4178): pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RGETLOCK(r1, &(0x7f0000001440)=ANY=[], 0xffffff6a) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) tee(r0, r2, 0xfffffffffffffc01, 0x0) tee(r0, r2, 0x60000000000, 0x0) 1.911462729s ago: executing program 3 (id=4179): connect$rose(0xffffffffffffffff, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x1, @default}, 0x1c) 976.029964ms ago: executing program 3 (id=4180): dup(0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdir(&(0x7f0000000180)='./file0\x00', 0x189) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) keyctl$link(0x8, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000002480)={0x58, 0x2, 0x6, 0x401, 0x0, 0x0, {0x0, 0x0, 0x6}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x9}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x4}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x58}}, 0x0) 975.474814ms ago: executing program 7 (id=4181): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) splice(r1, 0x0, r2, 0x0, 0x10000000000016, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) 422.220235ms ago: executing program 1 (id=4182): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'pcl812\x00', [0x4f27, 0x800003, 0x10000, 0x4, 0x4, 0xcc6, 0xc, 0x7, 0x400000a, 0xfffffff5, 0x4, 0x1, 0x1, 0x1, 0x6, 0x101, 0x0, 0x1a449, 0x200003, 0x81, 0xfffffffc, 0x9, 0x8, 0x1, 0xb, 0xe67, 0x3c, 0x7f, 0x6, 0x2000000, 0xfffffff4]}) 124.898015ms ago: executing program 0 (id=4183): prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(0xffffffffffffffff, 0x5761, &(0x7f0000003100)=ANY=[@ANYRESHEX, @ANYRES16, @ANYRESOCT]) add_key$user(0x0, &(0x7f0000000300)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) iopl(0x3) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) keyctl$dh_compute(0x17, 0x0, 0x0, 0x0, 0x0) r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x40000000000001, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) mkdir(&(0x7f0000000200)='./file0\x00', 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="84010000100013070000000000000000fe880000000000000000000000000101ac1414aa00000000000000000000000000000000000000000000000033000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x184}, 0x1, 0x0, 0x0, 0x44014}, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='ecryptfs\x00', 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000e40)={0x2020}, 0x2020) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000600)={0x1}, 0x4) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/profiling', 0x141b82, 0x180) write$cgroup_int(r3, &(0x7f0000000040)=0x9, 0x12) 0s ago: executing program 7 (id=4184): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000700), 0x48c002, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x74, 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000080), 0x10) sendmsg$can_bcm(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}, 0x1, 0x0, 0x0, 0x2000c014}, 0x800) sendmsg$can_bcm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="0500"/16, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="00000000010064558628e699eef3370568180000000000"], 0x48}, 0x1, 0x0, 0x0, 0x48850}, 0x0) ioctl$IOC_PR_CLEAR(0xffffffffffffffff, 0x401070cd, &(0x7f0000000200)={0x7f}) sendmsg$can_bcm(r1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r2, 0x107, 0xc, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a84000000060a0b0400000000000000000200000058000480240001800b000100736f636b6574000014000280080002400000000308000140000000023000018008"], 0xac}}, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) socket$inet_icmp(0x2, 0x2, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$FS_IOC_GETFSLABEL(r4, 0x400452c8, &(0x7f0000000100)) kernel console output (not intermixed with test programs): nd, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 1246.378747][ T7] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1246.388956][ T7] usb 4-1: Product: syz [ 1246.393910][ T7] usb 4-1: Manufacturer: syz [ 1246.429062][ T7] usb 4-1: SerialNumber: syz [ 1246.670144][ T26] audit: type=1326 audit(1753293959.673:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15363 comm="syz.0.2800" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd8358e9a9 code=0x7fc00000 [ 1246.912308][ T7] usb 4-1: config 0 descriptor?? [ 1246.925586][ T7] gspca_main: se401-2.14.0 probing 047d:5003 [ 1247.332210][ T7] gspca_se401: Bayer format not supported! [ 1247.936383][ T7] usb 4-1: USB disconnect, device number 40 [ 1248.679032][ T14] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 1248.987575][T15391] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2805'. [ 1249.521109][ T14] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1249.539848][ T14] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1249.549755][ T14] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 1249.558913][ T14] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1249.578637][ T14] usb 5-1: config 0 descriptor?? [ 1250.085273][ T14] cp2112 0003:10C4:EA90.0013: unknown main item tag 0x0 [ 1251.320025][ T14] cp2112 0003:10C4:EA90.0013: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.4-1/input0 [ 1251.399325][ T14] cp2112 0003:10C4:EA90.0013: error requesting version [ 1251.415512][ T14] cp2112: probe of 0003:10C4:EA90.0013 failed with error -71 [ 1251.443115][ T14] usb 5-1: USB disconnect, device number 33 [ 1252.398136][T15408] fido_id[15408]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 1253.721802][ T26] audit: type=1326 audit(1753293966.723:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15422 comm="syz.4.2813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ffeb8e9a9 code=0x7fc00000 [ 1254.181299][T15436] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2816'. [ 1254.193691][T15438] atomic_op ffff888018af8198 conn xmit_atomic 0000000000000000 [ 1254.901642][T15436] device macvtap3 entered promiscuous mode [ 1255.609037][T15455] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2818'. [ 1256.038990][ T4353] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 1256.614724][ T4353] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1256.686580][ T4353] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1256.794140][ T4353] usb 7-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 1256.861655][ T4353] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1256.929601][ T4353] usb 7-1: config 0 descriptor?? [ 1257.347758][ T4353] cp2112 0003:10C4:EA90.0014: unknown main item tag 0x0 [ 1257.381910][ T4353] cp2112 0003:10C4:EA90.0014: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.6-1/input0 [ 1257.401821][T15468] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1257.546537][ T4353] cp2112 0003:10C4:EA90.0014: error requesting version [ 1257.564713][ T4353] cp2112: probe of 0003:10C4:EA90.0014 failed with error -5 [ 1259.101491][T15491] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2825'. [ 1259.901334][ T4353] usb 7-1: USB disconnect, device number 7 [ 1260.819018][ T26] audit: type=1326 audit(1753293973.763:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15496 comm="syz.1.2826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59f0f8e9a9 code=0x7fc00000 [ 1261.775986][T15512] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2830'. [ 1264.295203][T15535] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2834'. [ 1264.320557][T15531] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1264.820955][ T4328] libceph: connect (1)[c::]:6789 error -101 [ 1264.827393][ T4328] libceph: mon0 (1)[c::]:6789 connect error [ 1265.066816][T15544] ceph: No mds server is up or the cluster is laggy [ 1265.336709][ T4328] libceph: connect (1)[c::]:6789 error -101 [ 1265.352558][ T4328] libceph: mon0 (1)[c::]:6789 connect error [ 1265.480195][T15557] Cannot find del_set index 3 as target [ 1266.501232][T15565] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2839'. [ 1267.978892][ T26] audit: type=1326 audit(1753293980.613:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15571 comm="syz.4.2840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ffeb8e9a9 code=0x7fc00000 [ 1267.981319][T15577] vivid-000: kernel_thread() failed [ 1268.856206][T15594] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2842'. [ 1270.732748][T15610] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2848'. [ 1270.784131][T15609] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1271.396141][T15626] Cannot find add_set index 0 as target [ 1272.002835][ T4353] libceph: connect (1)[c::]:6789 error -101 [ 1272.046331][ T4353] libceph: mon0 (1)[c::]:6789 connect error [ 1272.146990][T15624] ceph: No mds server is up or the cluster is laggy [ 1272.678771][ T7408] libceph: connect (1)[c::]:6789 error -101 [ 1272.709334][ T7408] libceph: mon0 (1)[c::]:6789 connect error [ 1273.690337][ T7408] libceph: connect (1)[c::]:6789 error -101 [ 1273.816522][ T7408] libceph: mon0 (1)[c::]:6789 connect error [ 1274.859812][ T26] audit: type=1326 audit(1753293987.863:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15649 comm="syz.3.2856" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a7f18e9a9 code=0x7fc00000 [ 1275.074611][T15655] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1275.104449][T15623] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2852'. [ 1275.104449][T15655] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1275.122273][T15655] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1275.134541][T15655] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1275.146170][T15655] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1275.154795][T15655] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1275.228745][T15623] device macvtap4 entered promiscuous mode [ 1275.241538][T15645] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2855'. [ 1276.741527][ T4406] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1276.760500][T15675] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2860'. [ 1277.025932][T15652] lo speed is unknown, defaulting to 1000 [ 1277.205397][ T4406] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1277.229081][ T4277] Bluetooth: hci2: command 0x0409 tx timeout [ 1278.098974][ T4406] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1278.299463][T15690] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1279.100177][T15700] atomic_op ffff888055f54998 conn xmit_atomic 0000000000000000 [ 1279.309797][ T4277] Bluetooth: hci2: command 0x041b tx timeout [ 1279.419623][ T4406] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1280.825533][ T4366] libceph: connect (1)[c::]:6789 error -101 [ 1280.839365][ T4366] libceph: mon0 (1)[c::]:6789 connect error [ 1281.160324][ T4366] libceph: connect (1)[c::]:6789 error -101 [ 1281.166405][ T4366] libceph: mon0 (1)[c::]:6789 connect error [ 1281.388898][ T4277] Bluetooth: hci2: command 0x040f tx timeout [ 1281.902202][ T4366] libceph: connect (1)[c::]:6789 error -101 [ 1281.911761][ T4366] libceph: mon0 (1)[c::]:6789 connect error [ 1282.306112][T15714] ceph: No mds server is up or the cluster is laggy [ 1282.821426][T15730] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2870'. [ 1283.455481][T15652] chnl_net:caif_netlink_parms(): no params data found [ 1283.469103][T15655] Bluetooth: hci2: command 0x0419 tx timeout [ 1283.901963][T15742] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2872'. [ 1284.079316][T15652] bridge0: port 1(bridge_slave_0) entered blocking state [ 1284.086673][T15652] bridge0: port 1(bridge_slave_0) entered disabled state [ 1284.134120][T15652] device bridge_slave_0 entered promiscuous mode [ 1285.395374][T15652] bridge0: port 2(bridge_slave_1) entered blocking state [ 1285.440869][T15652] bridge0: port 2(bridge_slave_1) entered disabled state [ 1285.640447][T15652] device bridge_slave_1 entered promiscuous mode [ 1286.011444][T15766] tmpfs: Bad value for 'mpol' [ 1286.122526][T15759] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1286.158404][T15652] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1286.198719][T15652] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1288.454224][T15652] team0: Port device team_slave_0 added [ 1288.478561][T15793] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2882'. [ 1288.492834][T15652] team0: Port device team_slave_1 added [ 1288.521314][T15786] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2881'. [ 1290.606300][T15652] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1290.698674][T15652] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1291.178930][T15652] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1291.329528][T15652] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1291.336573][T15652] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1291.443960][T15652] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1291.986396][T15817] netlink: 'syz.3.2887': attribute type 4 has an invalid length. [ 1292.796094][T15652] device hsr_slave_0 entered promiscuous mode [ 1292.832826][T15652] device hsr_slave_1 entered promiscuous mode [ 1292.889579][T15652] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1293.051663][T15652] Cannot create hsr debugfs directory [ 1295.453071][T15836] netlink: 'syz.0.2892': attribute type 4 has an invalid length. [ 1295.726823][ T4406] device hsr_slave_0 left promiscuous mode [ 1295.739213][ T4406] device hsr_slave_1 left promiscuous mode [ 1295.747058][ T4406] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1295.775837][ T4406] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1295.807597][ T4406] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1295.838598][ T4406] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1295.857957][ T4406] device bridge_slave_1 left promiscuous mode [ 1295.891082][ T4406] bridge0: port 2(bridge_slave_1) entered disabled state [ 1296.025588][ T4406] device bridge_slave_0 left promiscuous mode [ 1296.043136][ T4406] bridge0: port 1(bridge_slave_0) entered disabled state [ 1296.096663][ T4406] device veth1_macvtap left promiscuous mode [ 1296.120066][ T4406] device veth0_macvtap left promiscuous mode [ 1296.126351][ T4406] device veth1_vlan left promiscuous mode [ 1296.133650][ T4406] device veth0_vlan left promiscuous mode [ 1298.204801][T15859] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2897'. [ 1301.772331][ T4406] team0 (unregistering): Port device team_slave_1 removed [ 1301.827381][ T4406] team0 (unregistering): Port device team_slave_0 removed [ 1301.967816][ T4406] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1301.977202][ T4406] device bond_slave_1 left promiscuous mode [ 1302.051573][T15874] atomic_op ffff888078b95998 conn xmit_atomic 0000000000000000 [ 1302.810329][ T4406] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1302.820141][ T4406] device bond_slave_0 left promiscuous mode [ 1303.301642][ T4406] bond0 (unregistering): Released all slaves [ 1303.396142][T15852] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2896'. [ 1303.421492][T15868] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.2900'. [ 1303.462633][T15877] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1304.468394][T15893] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2907'. [ 1305.551978][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 1305.558378][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 1307.499870][T15652] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1307.544036][T15652] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1307.624409][T15652] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1307.655051][T15917] netlink: 'syz.3.2912': attribute type 4 has an invalid length. [ 1307.665915][T15652] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1308.453809][T15934] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.2914'. [ 1308.510231][T15931] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.2914'. [ 1309.560994][T15652] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1309.658067][T15939] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2915'. [ 1309.717272][T15947] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1309.754964][T15652] 8021q: adding VLAN 0 to HW filter on device team0 [ 1309.782310][ T4533] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1309.814919][ T4533] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1309.870614][ T4533] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1309.930815][ T4533] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1309.987793][ T4533] bridge0: port 1(bridge_slave_0) entered blocking state [ 1309.994999][ T4533] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1310.036822][ T4533] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1310.047035][ T4533] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1310.087457][ T4533] bridge0: port 2(bridge_slave_1) entered blocking state [ 1310.094662][ T4533] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1310.107679][T15954] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2918'. [ 1310.420334][ T4533] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1310.998215][ T4533] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1311.031889][ T4533] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1311.041712][ T4533] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1311.063076][ T4533] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1311.072584][ T4533] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1311.088718][ T4533] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1311.105754][T15652] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1311.180029][T15652] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1311.247036][ T4533] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1311.266705][ T4533] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1311.300607][ T4533] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1311.337900][ T4533] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1311.420752][ T4533] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1312.078614][ T4533] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1312.256500][ T7] libceph: connect (1)[c::]:6789 error -101 [ 1312.276873][ T7] libceph: mon0 (1)[c::]:6789 connect error [ 1312.359328][T15971] ceph: No mds server is up or the cluster is laggy [ 1312.825346][ T7] libceph: connect (1)[c::]:6789 error -101 [ 1312.857417][ T7] libceph: mon0 (1)[c::]:6789 connect error [ 1313.765517][T15992] netlink: 'syz.0.2925': attribute type 4 has an invalid length. [ 1313.859366][T15995] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1314.205360][T16004] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2927'. [ 1314.964515][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1314.995155][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1315.051886][T15652] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1317.498380][ T4353] libceph: connect (1)[c::]:6789 error -101 [ 1317.511074][ T4353] libceph: mon0 (1)[c::]:6789 connect error [ 1317.729181][T16036] ceph: No mds server is up or the cluster is laggy [ 1318.836820][T16054] netlink: 'syz.1.2937': attribute type 4 has an invalid length. [ 1318.936527][T16056] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1319.276411][T16064] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2939'. [ 1320.100246][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1320.210114][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1320.434165][ T9656] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1320.446684][ T9656] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1321.360159][ T9656] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1321.409490][ T9656] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1321.471283][T15652] device veth0_vlan entered promiscuous mode [ 1321.524603][T15652] device veth1_vlan entered promiscuous mode [ 1321.828980][ T9656] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1321.894602][ T9656] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1321.956147][T15652] device veth0_macvtap entered promiscuous mode [ 1322.061071][T15652] device veth1_macvtap entered promiscuous mode [ 1322.822809][ T9656] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1322.875942][ T9656] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1322.992993][T15652] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1323.088025][T15652] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1323.156112][T15652] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1323.245482][T15652] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1323.296953][T15652] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1323.362943][T15652] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1323.505643][T15652] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1323.609133][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1323.630185][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1323.669299][T15652] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1323.714270][T15652] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1323.744327][T15652] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1324.263637][T15652] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1324.274144][T15652] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1324.285129][T15652] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1324.306628][ T9776] libceph: connect (1)[c::]:6789 error -101 [ 1324.318262][ T9776] libceph: mon0 (1)[c::]:6789 connect error [ 1324.480130][T16104] ceph: No mds server is up or the cluster is laggy [ 1324.493597][ T9776] libceph: connect (1)[c::]:6789 error -101 [ 1324.878318][T15652] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1324.885956][ T9776] libceph: mon0 (1)[c::]:6789 connect error [ 1325.142215][ T9776] libceph: connect (1)[c::]:6789 error -101 [ 1325.150356][ T9776] libceph: mon0 (1)[c::]:6789 connect error [ 1325.500977][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1325.569889][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1325.623548][T15652] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1325.810732][T15652] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1326.358426][T15652] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1326.418959][T15652] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1327.150457][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1327.194509][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1327.228439][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1327.442582][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1327.666033][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1327.972017][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1329.847539][T16144] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2846'. [ 1332.107477][ T4533] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1332.128972][ T7408] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 1332.133534][T16175] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2966'. [ 1332.201611][T16178] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.2965'. [ 1332.249322][T16176] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.2965'. [ 1332.348906][ T7408] usb 4-1: Using ep0 maxpacket: 8 [ 1332.932339][ T7408] usb 4-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 1333.386648][ T7408] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1333.395202][ T7408] usb 4-1: Product: syz [ 1333.399761][ T7408] usb 4-1: Manufacturer: syz [ 1333.405079][ T7408] usb 4-1: SerialNumber: syz [ 1333.413442][ T7408] usb 4-1: config 0 descriptor?? [ 1333.505021][ T7408] gspca_main: se401-2.14.0 probing 047d:5003 [ 1334.595061][ T4533] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1334.656816][T16191] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2968'. [ 1334.683069][ T4277] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1334.692587][ T4277] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1334.700762][ T4277] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1334.708558][ T4277] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1334.717960][ T4277] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1334.726581][ T4277] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1334.831380][T16191] device macvtap4 entered promiscuous mode [ 1334.935365][ T4533] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1334.971062][ T7408] input: se401 as /devices/platform/dummy_hcd.3/usb4/4-1/input/input7 [ 1335.068742][ T7408] usb 4-1: USB disconnect, device number 41 [ 1335.181668][ T4533] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1335.915889][T16193] lo speed is unknown, defaulting to 1000 [ 1335.989031][T16208] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.2972'. [ 1336.033747][T16205] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.2972'. [ 1336.759265][ T4277] Bluetooth: hci4: command 0x0409 tx timeout [ 1338.240893][T16234] tmpfs: Bad value for 'mpol' [ 1338.459928][T16233] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.2978'. [ 1338.493752][T16230] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.2978'. [ 1338.637408][T16193] chnl_net:caif_netlink_parms(): no params data found [ 1338.704031][ T4533] tipc: Disabling bearer [ 1338.721633][ T4533] tipc: Left network mode [ 1338.745553][T16242] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2980'. [ 1338.828981][ T4277] Bluetooth: hci4: command 0x041b tx timeout [ 1338.948717][T16247] Device name cannot be null; rc = [-22] [ 1339.889796][T16251] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2982'. [ 1339.933304][T16251] device ip6gretap0 entered promiscuous mode [ 1339.946645][T16251] device macvtap2 entered promiscuous mode [ 1339.973752][T16193] bridge0: port 1(bridge_slave_0) entered blocking state [ 1340.038977][ T7408] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 1340.062037][T16193] bridge0: port 1(bridge_slave_0) entered disabled state [ 1340.098256][T16193] device bridge_slave_0 entered promiscuous mode [ 1340.207879][T16193] bridge0: port 2(bridge_slave_1) entered blocking state [ 1340.249477][ T7408] usb 1-1: Using ep0 maxpacket: 8 [ 1340.280111][ T7408] usb 1-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 1340.304835][T16193] bridge0: port 2(bridge_slave_1) entered disabled state [ 1340.357619][ T7408] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1340.420884][T16193] device bridge_slave_1 entered promiscuous mode [ 1340.452491][ T7408] usb 1-1: Product: syz [ 1340.503595][ T7408] usb 1-1: Manufacturer: syz [ 1340.584192][ T7408] usb 1-1: SerialNumber: syz [ 1340.666271][ T7408] usb 1-1: config 0 descriptor?? [ 1340.751053][ T7408] gspca_main: se401-2.14.0 probing 047d:5003 [ 1340.909046][ T4277] Bluetooth: hci4: command 0x040f tx timeout [ 1341.589024][ T7408] usb 1-1: reset high-speed USB device number 52 using dummy_hcd [ 1341.622158][T16193] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1342.270859][T16193] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1342.527367][T16193] team0: Port device team_slave_0 added [ 1342.780246][T16193] team0: Port device team_slave_1 added [ 1342.862212][ T7408] gspca_se401: read req failed req 0x06 error -19 [ 1342.959494][T16287] netlink: 'syz.6.2988': attribute type 4 has an invalid length. [ 1342.983760][ T7408] usb 1-1: USB disconnect, device number 52 [ 1342.999096][ T4277] Bluetooth: hci4: command 0x0419 tx timeout [ 1344.152350][T16193] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1344.934977][T16193] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1345.100100][T16193] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1345.373554][T16193] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1345.391000][T16193] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1345.409556][T16309] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2993'. [ 1345.475013][T16193] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1346.357060][T16193] device hsr_slave_0 entered promiscuous mode [ 1346.429689][T16193] device hsr_slave_1 entered promiscuous mode [ 1346.442241][T16193] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1346.450353][T16193] Cannot create hsr debugfs directory [ 1346.597741][ T4533] device hsr_slave_0 left promiscuous mode [ 1347.344473][ T4533] device hsr_slave_1 left promiscuous mode [ 1347.363674][ T4533] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1347.391275][ T4533] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1347.425208][ T4533] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1347.477422][ T4533] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1347.505047][ T4533] device bridge_slave_1 left promiscuous mode [ 1347.539197][ T4533] bridge0: port 2(bridge_slave_1) entered disabled state [ 1347.565682][ T4533] device bridge_slave_0 left promiscuous mode [ 1347.588174][ T4533] bridge0: port 1(bridge_slave_0) entered disabled state [ 1348.259580][ T4533] device veth1_macvtap left promiscuous mode [ 1348.267582][ T4533] device veth0_macvtap left promiscuous mode [ 1348.293300][ T4533] device veth1_vlan left promiscuous mode [ 1348.300826][ T4533] device veth0_vlan left promiscuous mode [ 1348.749338][ T4366] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 1348.941807][ T4366] usb 4-1: Using ep0 maxpacket: 8 [ 1348.953336][ T4366] usb 4-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 1348.986895][ T4366] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1349.065752][ T4366] usb 4-1: Product: syz [ 1349.096267][ T4366] usb 4-1: Manufacturer: syz [ 1349.108579][ T4366] usb 4-1: SerialNumber: syz [ 1349.135272][ T4366] usb 4-1: config 0 descriptor?? [ 1349.171911][ T4366] gspca_main: se401-2.14.0 probing 047d:5003 [ 1350.354371][ T4366] usb 4-1: reset high-speed USB device number 42 using dummy_hcd [ 1351.283893][ T4366] gspca_se401: read req failed req 0x06 error -19 [ 1351.314812][ T4366] usb 4-1: USB disconnect, device number 42 [ 1351.419703][ T4533] team0 (unregistering): Port device team_slave_1 removed [ 1351.542898][ T4533] team0 (unregistering): Port device team_slave_0 removed [ 1351.655375][ T4533] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1351.666120][ T4533] device bond_slave_1 left promiscuous mode [ 1352.253105][ T4533] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1352.262773][ T4533] device bond_slave_0 left promiscuous mode [ 1353.889383][ T4533] bond0 (unregistering): Released all slaves [ 1354.043621][T16368] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3007'. [ 1354.083072][T16378] netlink: 'syz.3.3008': attribute type 4 has an invalid length. [ 1355.162235][T16389] tmpfs: Bad value for 'mpol' [ 1357.763456][ T7] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 1357.968993][ T7] usb 1-1: Using ep0 maxpacket: 8 [ 1357.984626][ T7] usb 1-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 1358.083163][ T7] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1358.188520][T16193] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1358.749228][ T7] usb 1-1: Product: syz [ 1358.755261][ T7] usb 1-1: Manufacturer: syz [ 1358.762122][ T7] usb 1-1: SerialNumber: syz [ 1358.843545][ T7] usb 1-1: config 0 descriptor?? [ 1358.865343][T16193] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1358.903349][T16193] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1358.913314][ T7] gspca_main: se401-2.14.0 probing 047d:5003 [ 1358.944561][T16193] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1359.209025][ T7] usb 1-1: reset high-speed USB device number 53 using dummy_hcd [ 1360.091310][T16431] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3018'. [ 1360.213606][T16437] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.3017'. [ 1360.310959][T16193] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1360.408896][T16428] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.3017'. [ 1360.544859][ T4449] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1360.581929][ T4449] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1360.626354][T16193] 8021q: adding VLAN 0 to HW filter on device team0 [ 1360.693900][ T4533] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1360.716542][ T4533] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1360.740251][ T4533] bridge0: port 1(bridge_slave_0) entered blocking state [ 1360.747435][ T4533] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1360.811387][ T4533] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1360.842104][ T7] gspca_se401: read req failed req 0x06 error -19 [ 1360.856514][ T7] usb 1-1: USB disconnect, device number 53 [ 1360.890358][ T4533] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1360.909255][ T4533] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1360.936572][ T4533] bridge0: port 2(bridge_slave_1) entered blocking state [ 1360.943777][ T4533] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1360.985598][ T4533] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1361.012179][ T4533] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1361.068970][ T4533] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1361.100794][ T4533] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1361.154016][ T4533] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1361.194724][ T4533] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1361.712863][ T4533] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1361.782308][ T4533] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1361.829812][ T4533] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1361.868626][ T4533] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1361.913083][T16193] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1361.937448][ T4533] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1362.995885][T16456] tmpfs: Bad value for 'mpol' [ 1364.985961][ T6871] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1365.004324][ T6871] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1365.032976][T16193] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1365.133870][ T6871] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1365.174653][ T6871] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1365.258223][ T4409] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1365.315212][ T4409] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1365.370051][ T4409] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1365.477939][ T4409] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1365.514084][T16193] device veth0_vlan entered promiscuous mode [ 1365.601936][T16193] device veth1_vlan entered promiscuous mode [ 1365.670678][T16484] netlink: 'syz.0.3027': attribute type 4 has an invalid length. [ 1365.785542][ T4409] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1365.805586][ T4409] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1365.845516][ T4409] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1366.761095][ T4409] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1366.784665][T16193] device veth0_macvtap entered promiscuous mode [ 1366.814681][T16193] device veth1_macvtap entered promiscuous mode [ 1366.872462][T16488] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3028'. [ 1367.003915][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 1367.010321][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 1367.039136][ T7] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 1367.066553][T16193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1367.118279][T16193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1367.176285][T16193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1367.227723][T16193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1367.258214][T16193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1367.269197][ T7] usb 7-1: Using ep0 maxpacket: 8 [ 1367.278948][ T7] usb 7-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 1367.318870][ T7] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1367.329184][T16193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1367.354653][ T7] usb 7-1: Product: syz [ 1367.358983][ T7] usb 7-1: Manufacturer: syz [ 1367.906443][T16193] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1367.927087][ T7] usb 7-1: SerialNumber: syz [ 1367.945101][ T4426] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1367.973123][ T7] usb 7-1: config 0 descriptor?? [ 1367.983191][ T4426] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1368.007817][T16193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1368.038397][ T7] gspca_main: se401-2.14.0 probing 047d:5003 [ 1368.051819][T16193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1368.066389][T16193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1368.079173][T16193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1368.096203][T16193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1368.120197][T16193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1368.217726][T16193] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1368.256689][ T4426] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1368.293333][ T4426] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1368.338565][T16193] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1368.368998][T16193] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1368.377999][T16193] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1368.389005][ T7] usb 7-1: reset high-speed USB device number 8 using dummy_hcd [ 1368.475289][T16193] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1369.991435][ T7] gspca_se401: read req failed req 0x06 error -19 [ 1370.012201][ T4375] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1370.119581][T16523] tmpfs: Bad value for 'mpol' [ 1370.519097][ T4375] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1370.556715][ T7] usb 7-1: USB disconnect, device number 8 [ 1371.269835][ T4426] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1371.470145][ T9656] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1371.478476][ T9656] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1371.503619][ T6871] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1373.905358][ T4533] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1374.489229][T16551] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3040'. [ 1374.667042][ T4533] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1374.794766][ T4277] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1374.806524][ T4277] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1374.814935][ T4277] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1374.854759][ T4277] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1374.863575][ T4277] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1374.872086][ T4277] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1374.972861][ T4533] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1375.157174][T16577] netlink: 'syz.0.3045': attribute type 4 has an invalid length. [ 1375.205751][ T4533] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1376.098918][ T7] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 1376.299088][ T7] usb 7-1: Using ep0 maxpacket: 8 [ 1376.316442][ T7] usb 7-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 1376.347489][ T7] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1376.357153][T16585] netlink: 'syz.1.3046': attribute type 4 has an invalid length. [ 1376.357767][ T7] usb 7-1: Product: syz [ 1376.380390][ T7] usb 7-1: Manufacturer: syz [ 1376.386120][ T7] usb 7-1: SerialNumber: syz [ 1376.434141][ T7] usb 7-1: config 0 descriptor?? [ 1376.457583][ T7] gspca_main: se401-2.14.0 probing 047d:5003 [ 1376.808903][ T7] usb 7-1: reset high-speed USB device number 9 using dummy_hcd [ 1376.909239][ T4277] Bluetooth: hci3: command 0x0409 tx timeout [ 1377.889624][ T7] gspca_se401: read req failed req 0x06 error -19 [ 1378.714669][ T7] usb 7-1: USB disconnect, device number 9 [ 1378.871370][T16566] chnl_net:caif_netlink_parms(): no params data found [ 1378.987821][T16618] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3053'. [ 1378.997519][ T4277] Bluetooth: hci3: command 0x041b tx timeout [ 1379.829098][T16566] bridge0: port 1(bridge_slave_0) entered blocking state [ 1379.854122][T16566] bridge0: port 1(bridge_slave_0) entered disabled state [ 1379.934993][T16566] device bridge_slave_0 entered promiscuous mode [ 1381.079405][T15655] Bluetooth: hci3: command 0x040f tx timeout [ 1381.094384][T16566] bridge0: port 2(bridge_slave_1) entered blocking state [ 1381.117945][T16566] bridge0: port 2(bridge_slave_1) entered disabled state [ 1381.148554][T16566] device bridge_slave_1 entered promiscuous mode [ 1381.833159][T16647] Device name cannot be null; rc = [-22] [ 1382.536791][T16645] netlink: 'syz.1.3056': attribute type 4 has an invalid length. [ 1383.148970][T15655] Bluetooth: hci3: command 0x0419 tx timeout [ 1383.813656][T16566] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1383.954261][T16566] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1386.042361][T16566] team0: Port device team_slave_0 added [ 1386.151327][T16671] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3063'. [ 1386.178339][T16566] team0: Port device team_slave_1 added [ 1386.228995][ T7] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 1386.420534][ T7] usb 7-1: Using ep0 maxpacket: 8 [ 1386.439871][ T7] usb 7-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 1386.480183][ T7] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1386.500451][ T7] usb 7-1: Product: syz [ 1386.504683][ T7] usb 7-1: Manufacturer: syz [ 1386.524387][ T7] usb 7-1: SerialNumber: syz [ 1386.550167][ T7] usb 7-1: config 0 descriptor?? [ 1386.587343][ T7] gspca_main: se401-2.14.0 probing 047d:5003 [ 1386.817859][T16566] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1386.831314][T16566] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1386.945272][ T7] usb 7-1: reset high-speed USB device number 10 using dummy_hcd [ 1387.447346][T16566] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1387.473991][T16566] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1387.506169][T16566] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1387.545569][T16566] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1387.863683][T16703] atomic_op ffff88805602e998 conn xmit_atomic 0000000000000000 [ 1388.520494][ T7] gspca_se401: read req failed req 0x06 error -19 [ 1388.675587][ T7] usb 7-1: USB disconnect, device number 10 [ 1388.682607][ T4533] device hsr_slave_0 left promiscuous mode [ 1388.701814][ T4533] device hsr_slave_1 left promiscuous mode [ 1389.283363][ T4533] device bridge0 left promiscuous mode [ 1389.295696][ T4533] device veth1_macvtap left promiscuous mode [ 1389.304608][ T4533] device veth0_macvtap left promiscuous mode [ 1389.316781][ T4533] device veth1_vlan left promiscuous mode [ 1389.324029][ T4533] device veth0_vlan left promiscuous mode [ 1394.203976][ T4533] bond0 (unregistering): Released all slaves [ 1394.289570][T16705] netlink: 'syz.4.3070': attribute type 4 has an invalid length. [ 1394.341858][T16727] netlink: 'syz.0.3074': attribute type 4 has an invalid length. [ 1394.378183][T16738] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1394.679077][T16566] device hsr_slave_0 entered promiscuous mode [ 1394.716944][T16566] device hsr_slave_1 entered promiscuous mode [ 1394.949244][ T4328] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 1395.629414][T16566] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1395.674417][T16566] Cannot create hsr debugfs directory [ 1395.778977][ T4328] usb 1-1: Using ep0 maxpacket: 8 [ 1395.920224][ T4328] usb 1-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 1395.947843][ T4328] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1396.303670][ T4328] usb 1-1: Product: syz [ 1396.367108][ T4328] usb 1-1: Manufacturer: syz [ 1396.432642][ T4328] usb 1-1: SerialNumber: syz [ 1396.569627][ T4328] usb 1-1: config 0 descriptor?? [ 1396.590049][ T4328] gspca_main: se401-2.14.0 probing 047d:5003 [ 1396.984761][ T4328] gspca_se401: Wrong descriptor type [ 1397.501567][ T9776] usb 1-1: USB disconnect, device number 54 [ 1399.555556][T16786] netlink: 'syz.1.3087': attribute type 4 has an invalid length. [ 1399.624999][T16566] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1399.684532][T16566] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1399.728296][T16566] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1399.785883][T16566] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1399.798964][T15655] Bluetooth: hci2: command 0x0406 tx timeout [ 1400.204116][T16803] netlink: 'syz.1.3090': attribute type 4 has an invalid length. [ 1401.267462][T16566] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1401.305971][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1401.345546][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1401.386801][T16566] 8021q: adding VLAN 0 to HW filter on device team0 [ 1402.327637][ T4449] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1402.358037][ T4449] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1402.431256][ T4449] bridge0: port 1(bridge_slave_0) entered blocking state [ 1402.438397][ T4449] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1402.658561][T16810] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1402.687053][ T4449] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1402.710574][ T4449] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1402.749775][ T4449] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1402.773643][ T4449] bridge0: port 2(bridge_slave_1) entered blocking state [ 1402.780846][ T4449] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1402.842634][ T4449] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1403.362252][ T4449] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1403.435306][ T4449] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1403.546391][ T4449] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1404.024905][ T4449] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1404.084728][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1404.123728][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1404.173882][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1404.227933][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1405.110797][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1405.179392][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1409.670529][ T4533] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1409.692242][ T4533] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1409.733137][T16566] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1410.040755][T13166] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1410.053748][T13166] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1410.136075][T15644] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1410.156503][T15644] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1410.202043][T16566] device veth0_vlan entered promiscuous mode [ 1410.225432][T15644] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1410.256159][T15644] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1410.293654][T16566] device veth1_vlan entered promiscuous mode [ 1411.189876][ T6871] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1411.533243][T16913] atomic_op ffff888029591998 conn xmit_atomic 0000000000000000 [ 1412.008310][T16566] device veth0_macvtap entered promiscuous mode [ 1412.212792][T15798] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1412.252949][T15798] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1412.271713][T16566] device veth1_macvtap entered promiscuous mode [ 1412.282834][T15798] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1412.297090][T16912] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1412.407849][T16566] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1412.448916][T16566] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1412.488430][T16566] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1412.528738][T16566] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1412.554643][T16566] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1412.607853][T16566] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1413.264761][T16566] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1413.436607][T16566] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1413.641411][T16566] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1413.655019][ T4406] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1413.690015][ T4406] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1413.746486][T16566] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1413.774462][T16566] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1413.801908][T16566] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1413.816155][T16566] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1413.830711][T16566] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1413.844812][T16566] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1413.861420][T16566] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1414.071647][T16566] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1414.118875][T16566] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1414.136108][ T4406] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1414.180355][ T4406] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1414.395526][T16566] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1414.411822][T16566] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1414.665552][T16566] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1414.705664][T16566] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1414.894332][ T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1414.929497][ T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1415.546236][ T4755] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1415.569038][ T6871] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1415.579216][ T4755] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1415.615702][T13166] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1416.225948][T16954] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.3038'. [ 1416.236284][T16955] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.3038'. [ 1416.580084][T16959] atomic_op ffff888074c99998 conn xmit_atomic 0000000000000000 [ 1417.423090][T16962] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1419.485711][T16984] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3132'. [ 1419.610351][T16984] device ip6gre0 entered promiscuous mode [ 1420.702503][ T4277] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1420.713018][ T4277] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1420.722317][ T4277] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1420.724102][ T6871] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1420.752402][T11398] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1420.768895][T11398] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1420.777445][T11398] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1421.089106][T17002] atomic_op ffff88805678a998 conn xmit_atomic 0000000000000000 [ 1422.091710][ T6871] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1422.535670][T17003] netlink: 'syz.6.3135': attribute type 4 has an invalid length. [ 1422.551479][T16993] chnl_net:caif_netlink_parms(): no params data found [ 1422.839220][T15655] Bluetooth: hci0: command 0x0409 tx timeout [ 1422.886420][ T6871] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1423.113134][ T6871] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1424.162962][T17034] Cannot find add_set index 0 as target [ 1424.606505][T17030] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3142'. [ 1424.910449][T15655] Bluetooth: hci0: command 0x041b tx timeout [ 1424.991254][T16993] bridge0: port 1(bridge_slave_0) entered blocking state [ 1425.011496][T16993] bridge0: port 1(bridge_slave_0) entered disabled state [ 1425.061114][T16993] device bridge_slave_0 entered promiscuous mode [ 1425.144606][T16993] bridge0: port 2(bridge_slave_1) entered blocking state [ 1425.158281][T16993] bridge0: port 2(bridge_slave_1) entered disabled state [ 1425.177567][T16993] device bridge_slave_1 entered promiscuous mode [ 1425.427151][T16993] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1425.777137][T16993] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1425.858986][ T14] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 1426.073061][ T14] usb 2-1: Using ep0 maxpacket: 32 [ 1426.126503][ T14] usb 2-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 1426.148018][ T14] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1426.161468][ T14] usb 2-1: Product: syz [ 1426.170390][ T14] usb 2-1: Manufacturer: syz [ 1426.175053][ T14] usb 2-1: SerialNumber: syz [ 1426.209775][ T14] usb 2-1: config 0 descriptor?? [ 1426.236706][T16993] team0: Port device team_slave_0 added [ 1426.308125][T16993] team0: Port device team_slave_1 added [ 1427.115318][T15655] Bluetooth: hci0: command 0x040f tx timeout [ 1427.325630][ T14] airspy 2-1:0.0: usb_control_msg() failed -110 request 09 [ 1427.335795][ T14] airspy 2-1:0.0: Could not detect board [ 1427.342686][ T14] airspy: probe of 2-1:0.0 failed with error -110 [ 1427.440834][T17059] atomic_op ffff888075e59998 conn xmit_atomic 0000000000000000 [ 1428.163324][T17047] device dummy0 entered promiscuous mode [ 1428.198935][T17047] device vlan2 entered promiscuous mode [ 1428.322133][T17062] Device name cannot be null; rc = [-22] [ 1428.436751][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 1428.443168][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 1428.769993][T16993] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1428.784781][T16993] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1428.788709][ T9776] usb 2-1: USB disconnect, device number 41 [ 1428.910228][T16993] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1429.149092][T15655] Bluetooth: hci0: command 0x0419 tx timeout [ 1429.625938][T16993] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1429.806312][T16993] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1429.949609][T16993] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1430.910915][T17067] netlink: 'syz.4.3150': attribute type 4 has an invalid length. [ 1431.213285][T17076] Bluetooth: MGMT ver 1.22 [ 1431.342922][T17089] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3155'. [ 1431.719855][T17093] binder: BINDER_SET_CONTEXT_MGR already set [ 1431.750701][T17093] binder: 17091:17093 ioctl 4018620d 2000000001c0 returned -16 [ 1431.809641][T16993] device hsr_slave_0 entered promiscuous mode [ 1431.986683][T16993] device hsr_slave_1 entered promiscuous mode [ 1432.008599][T16993] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1432.087840][T17107] atomic_op ffff88807e225998 conn xmit_atomic 0000000000000000 [ 1432.822352][T16993] Cannot create hsr debugfs directory [ 1434.573275][T17127] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3163'. [ 1434.662683][T17130] Device name cannot be null; rc = [-22] [ 1436.994838][T17141] netlink: 'syz.6.3166': attribute type 4 has an invalid length. [ 1437.232122][ T6871] device hsr_slave_0 left promiscuous mode [ 1437.293845][ T6871] device hsr_slave_1 left promiscuous mode [ 1437.418275][ T6871] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1437.440295][ T6871] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1437.496361][ T6871] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1437.544230][ T6871] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1437.584601][ T6871] device bridge_slave_1 left promiscuous mode [ 1437.614815][ T6871] bridge0: port 2(bridge_slave_1) entered disabled state [ 1438.597396][ T6871] device bridge_slave_0 left promiscuous mode [ 1438.683739][ T6871] bridge0: port 1(bridge_slave_0) entered disabled state [ 1440.081965][ T6871] device bridge0 left promiscuous mode [ 1440.555949][ T6871] device veth1_macvtap left promiscuous mode [ 1440.567161][ T6871] device veth1_vlan left promiscuous mode [ 1440.603251][ T6871] device veth0_vlan left promiscuous mode [ 1445.215351][ T6871] team0 (unregistering): Port device team_slave_1 removed [ 1445.515151][ T6871] team0 (unregistering): Port device team_slave_0 removed [ 1445.670635][ T6871] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1445.679581][ T6871] device bond_slave_1 left promiscuous mode [ 1445.795170][ T6871] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1445.804591][ T6871] device bond_slave_0 left promiscuous mode [ 1446.301988][ T6871] bond0 (unregistering): Released all slaves [ 1446.374868][T17155] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3168'. [ 1446.394149][T17177] netlink: 16402 bytes leftover after parsing attributes in process `syz.6.3172'. [ 1446.418028][T17204] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1446.450343][T17211] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.3183'. [ 1446.485322][T17210] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.3183'. [ 1446.970081][T16993] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1448.096950][T16993] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1448.193222][T16993] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1448.787281][T16993] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1449.918998][T16993] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1449.952885][T16993] 8021q: adding VLAN 0 to HW filter on device team0 [ 1450.008026][T13166] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1450.040693][T13166] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1450.138136][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1450.169913][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1450.248513][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 1450.255766][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1450.299959][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1450.349584][T13166] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1450.365923][T13166] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1451.138626][T13166] bridge0: port 2(bridge_slave_1) entered blocking state [ 1451.145893][T13166] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1451.246422][ T4480] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1451.300979][ T4480] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1451.368245][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1451.390985][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1451.435609][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1451.477610][ T4480] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1451.520994][ T4480] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1451.589679][ T4480] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1451.659186][ T4480] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1451.728265][T17272] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3195'. [ 1451.739863][ T4480] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1451.783563][ T4480] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1451.835626][T16993] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1452.112074][T17281] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1456.815368][T17321] Device name cannot be null; rc = [-22] [ 1457.384941][T17324] netlink: 'syz.1.3205': attribute type 4 has an invalid length. [ 1458.128845][ T5082] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1458.136501][ T5082] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1458.188478][T16993] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1458.237659][T17329] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1458.300733][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1458.328382][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1458.388379][T17343] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3208'. [ 1458.456050][ T4533] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1458.502329][ T4533] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1458.551206][ T4533] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1458.584428][ T4533] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1458.968550][T16993] device veth0_vlan entered promiscuous mode [ 1460.681436][T16993] device veth1_vlan entered promiscuous mode [ 1460.767410][T17342] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1460.775077][T17342] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1460.804640][T17342] Bluetooth: hci1: Suspend notifier action (1) failed: -4 [ 1460.816403][T17342] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1460.831784][T17342] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1460.859456][T17342] Bluetooth: hci2: Suspend notifier action (1) failed: -4 [ 1460.988922][T15655] Bluetooth: hci0: command 0x0405 tx timeout [ 1461.126419][ T6871] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1461.194666][T17342] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1461.195402][ T6871] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1461.216080][T17342] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1461.229236][T17342] Bluetooth: hci4: Suspend notifier action (1) failed: -4 [ 1461.264760][T17342] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1461.272762][T16993] device veth0_macvtap entered promiscuous mode [ 1461.292611][T16993] device veth1_macvtap entered promiscuous mode [ 1461.343012][T16993] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1461.357486][T16993] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1461.373298][T16993] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1461.385465][T16993] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1461.389022][T17342] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1461.401957][T16993] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1461.415983][T16993] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1461.427068][T16993] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1461.438679][T16993] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1461.450786][T16993] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1461.458394][ T4755] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1461.467924][ T4755] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1461.479686][ T4755] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1461.490371][ T4755] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1461.503783][T16993] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1461.516146][T16993] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1461.532781][T16993] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1461.543714][T16993] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1461.554534][T16993] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1461.565451][T16993] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1461.575789][T16993] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1461.588202][T16993] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1461.613858][T16993] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1461.643398][ T4755] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1461.669552][ T4755] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1461.715880][T16993] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1461.735313][T16993] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1461.759761][T16993] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1461.790694][T16993] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1462.673506][T15655] Bluetooth: hci1: command 0x0c1a tx timeout [ 1462.838861][T11398] Bluetooth: hci2: command 0x0c1a tx timeout [ 1462.912487][T17342] Bluetooth: hci3: Suspend notifier action (1) failed: -4 [ 1462.927827][T17342] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1463.009324][T17342] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1463.028268][T17342] Bluetooth: hci0: Suspend notifier action (1) failed: -4 [ 1463.119754][T15798] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1463.174467][T15798] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1463.221411][T15644] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1463.239133][T11398] Bluetooth: hci4: command 0x0c1a tx timeout [ 1463.297412][ T6871] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1463.308889][T11398] Bluetooth: hci3: command 0x0c1a tx timeout [ 1463.323249][ T6871] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1463.535801][T15798] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1463.801866][T17395] netlink: 'syz.1.3218': attribute type 4 has an invalid length. [ 1464.778920][T11398] Bluetooth: hci1: command 0x0406 tx timeout [ 1464.942203][T15655] Bluetooth: hci2: command 0x0406 tx timeout [ 1464.990426][T11398] Bluetooth: hci0: command 0x0c1a tx timeout [ 1465.357904][T15655] Bluetooth: hci4: command 0x0406 tx timeout [ 1465.428518][T11398] Bluetooth: hci3: command 0x0406 tx timeout [ 1465.452532][T17404] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1465.698936][T17415] netlink: 'syz.1.3221': attribute type 2 has an invalid length. [ 1465.707790][T17415] netlink: 244 bytes leftover after parsing attributes in process `syz.1.3221'. [ 1467.068953][T11398] Bluetooth: hci0: command 0x0406 tx timeout [ 1468.467948][T17457] netlink: 'syz.4.3231': attribute type 4 has an invalid length. [ 1468.534582][T17446] xt_CT: No such helper "snmp" [ 1468.536473][T17459] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1472.639971][T17487] random: crng reseeded on system resumption [ 1473.052162][T17484] Device name cannot be null; rc = [-22] [ 1474.790080][T17509] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1475.142496][T17520] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3248'. [ 1475.676453][T17524] netlink: 'syz.3.3251': attribute type 4 has an invalid length. [ 1478.012218][T17524] syz.3.3251 (17524) used greatest stack depth: 20880 bytes left [ 1481.783929][T17566] comedi comedi0: dt2815: I/O port conflict (0x9,2) [ 1482.422730][T17570] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1482.738617][T17574] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3264'. [ 1484.261115][T17587] netlink: 'syz.6.3267': attribute type 4 has an invalid length. [ 1486.311836][T17601] Device name cannot be null; rc = [-22] [ 1487.346121][T17606] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1488.034949][T17619] xt_CT: No such helper "snmp" [ 1489.549602][T17643] netlink: 'syz.0.3285': attribute type 4 has an invalid length. [ 1489.882263][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 1489.890543][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 1490.814771][T17654] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.3287'. [ 1490.869435][T17653] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.3287'. [ 1493.931838][T17674] xt_CT: No such helper "snmp" [ 1494.025696][T17683] syz.0.3296 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 1494.666626][T17690] Device name cannot be null; rc = [-22] [ 1495.552287][T17703] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3300'. [ 1497.114918][T17717] Device name cannot be null; rc = [-22] [ 1497.308884][T11398] Bluetooth: hci3: command 0x0406 tx timeout [ 1497.430398][T17360] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 1497.662806][T17725] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1497.748996][T17360] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1497.764702][T17360] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1497.788877][T17360] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 1497.811323][T17360] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1497.852019][T17360] usb 1-1: config 0 descriptor?? [ 1498.394109][T17360] cp2112 0003:10C4:EA90.0015: unknown main item tag 0x0 [ 1498.926035][T17360] cp2112 0003:10C4:EA90.0015: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.0-1/input0 [ 1499.009448][T17360] cp2112 0003:10C4:EA90.0015: Part Number: 0x82 Device Version: 0xFE [ 1499.685311][T17360] cp2112 0003:10C4:EA90.0015: error reading lock byte: -71 [ 1499.714703][T17360] usb 1-1: USB disconnect, device number 55 [ 1500.648096][T17742] fido_id[17742]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 1501.866041][T17760] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3315'. [ 1503.238931][T17771] Device name cannot be null; rc = [-22] [ 1503.417811][T17775] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.3318'. [ 1503.515307][T17773] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.3318'. [ 1503.620893][T17779] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1504.423027][T17784] xt_CT: No such helper "snmp" [ 1505.459021][ T4328] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 1506.940870][ T4328] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1507.003592][ T4328] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1507.046405][T17812] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3327'. [ 1507.077899][ T4328] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 1507.135442][ T4328] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1507.193441][ T4328] usb 2-1: config 0 descriptor?? [ 1507.454130][T17822] netlink: 'syz.6.3330': attribute type 4 has an invalid length. [ 1507.982512][T17823] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3329'. [ 1508.176394][ T4328] cp2112 0003:10C4:EA90.0016: unknown main item tag 0x0 [ 1508.242873][ T4328] cp2112 0003:10C4:EA90.0016: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.1-1/input0 [ 1508.424681][ T4328] cp2112 0003:10C4:EA90.0016: Part Number: 0x82 Device Version: 0xFE [ 1508.945058][T17827] Device name cannot be null; rc = [-22] [ 1509.181951][ T4328] cp2112 0003:10C4:EA90.0016: error reading lock byte: -71 [ 1509.842449][ T4328] usb 2-1: USB disconnect, device number 42 [ 1510.267714][T17838] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1510.287261][T17834] fido_id[17834]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 1511.566972][T17863] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3340'. [ 1512.474412][T17876] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3342'. [ 1512.683305][T17880] Device name cannot be null; rc = [-22] [ 1513.385154][T17887] netlink: 'syz.3.3345': attribute type 4 has an invalid length. [ 1515.138591][T17893] xt_CT: No such helper "snmp" [ 1515.194815][T17901] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1516.482835][T17922] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3353'. [ 1516.600592][T17924] netlink: 16402 bytes leftover after parsing attributes in process `syz.6.3354'. [ 1517.059182][T17923] netlink: 16402 bytes leftover after parsing attributes in process `syz.6.3354'. [ 1517.409122][T17941] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3356'. [ 1517.450896][T17937] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.3358'. [ 1517.860679][T17935] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.3358'. [ 1519.234885][T17955] xt_CT: No such helper "snmp" [ 1519.494759][T17958] netlink: 'syz.1.3361': attribute type 4 has an invalid length. [ 1521.571008][T17990] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3368'. [ 1522.180978][T18007] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3373'. [ 1523.244349][T18018] xt_CT: No such helper "snmp" [ 1523.292733][T18027] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1523.306044][T18029] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3378'. [ 1523.751223][T18035] netlink: 'syz.0.3380': attribute type 4 has an invalid length. [ 1525.918539][T18057] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3383'. [ 1528.019314][T18080] atomic_op ffff88807ef1b198 conn xmit_atomic 0000000000000000 [ 1528.546645][T18077] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.3391'. [ 1528.556329][T18079] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.3391'. [ 1528.617103][T18082] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1530.106498][T18101] Device name cannot be null; rc = [-22] [ 1531.079750][T18111] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3401'. [ 1533.025625][T18124] netlink: 'syz.4.3403': attribute type 4 has an invalid length. [ 1535.176447][T18136] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1535.265128][T18138] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3408'. [ 1535.773580][T18147] atomic_op ffff88805981b198 conn xmit_atomic 0000000000000000 [ 1537.388395][T18162] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3413'. [ 1540.177888][T18180] netlink: 'syz.4.3417': attribute type 4 has an invalid length. [ 1541.997389][T18189] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1542.909453][T18202] atomic_op ffff888057e8e998 conn xmit_atomic 0000000000000000 [ 1543.170375][T11398] Bluetooth: hci0: command 0x0406 tx timeout [ 1543.661826][T18201] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3422'. [ 1544.557619][T18215] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3426'. [ 1547.501582][T18241] netlink: 'syz.6.3431': attribute type 4 has an invalid length. [ 1547.929808][T18237] Device name cannot be null; rc = [-22] [ 1549.700301][T18256] atomic_op ffff888056ca5198 conn xmit_atomic 0000000000000000 [ 1550.508627][T18261] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3436'. [ 1550.700927][T18267] Device name cannot be null; rc = [-22] [ 1551.322830][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 1551.329599][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 1551.540484][T18273] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3438'. [ 1555.647838][T18310] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3447'. [ 1557.365402][T18330] atomic_op ffff8880577cc198 conn xmit_atomic 0000000000000000 [ 1558.058522][T18331] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3452'. [ 1559.691092][T18337] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3453'. [ 1560.251059][T18349] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1562.520336][T18369] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3460'. [ 1565.941195][T18391] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3466'. [ 1566.434329][T18400] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3468'. [ 1570.976954][T18427] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3473'. [ 1573.771457][T18442] netlink: 'syz.3.3475': attribute type 4 has an invalid length. [ 1575.481055][T18457] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3479'. [ 1576.468150][T18465] Device name cannot be null; rc = [-22] [ 1578.303643][T18477] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1579.623680][T18491] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3486'. [ 1582.657939][T18510] Device name cannot be null; rc = [-22] [ 1583.868047][T18523] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3494'. [ 1586.074142][T18545] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3498'. [ 1586.089207][T18545] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3498'. [ 1588.326355][T18568] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.3503'. [ 1588.364549][T18565] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.3503'. [ 1589.966037][T18585] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3508'. [ 1590.396381][T18593] atomic_op ffff88801ee68998 conn xmit_atomic 0000000000000000 [ 1590.515618][T18596] netlink: 'syz.3.3509': attribute type 4 has an invalid length. [ 1594.977444][T18624] netlink: 16402 bytes leftover after parsing attributes in process `syz.6.3517'. [ 1595.020989][T18622] netlink: 16402 bytes leftover after parsing attributes in process `syz.6.3517'. [ 1596.843601][T18644] Device name cannot be null; rc = [-22] [ 1598.606178][T18653] Device name cannot be null; rc = [-22] [ 1599.181859][T18654] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3525'. [ 1599.201008][T18654] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3525'. [ 1600.804310][T18674] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.3529'. [ 1600.855148][T18670] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.3529'. [ 1601.181143][T18682] netlink: 'syz.0.3532': attribute type 4 has an invalid length. [ 1603.372018][T18700] netlink: 'syz.1.3536': attribute type 2 has an invalid length. [ 1603.428954][T18700] netlink: 244 bytes leftover after parsing attributes in process `syz.1.3536'. [ 1605.569091][T18710] Device name cannot be null; rc = [-22] [ 1606.419519][T18721] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.3542'. [ 1606.435448][T18719] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.3542'. [ 1610.949445][T18762] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3552'. [ 1611.050651][T18762] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3552'. [ 1611.212760][T18773] Device name cannot be null; rc = [-22] [ 1611.635468][T18765] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3551'. [ 1611.675283][T18771] netlink: 'syz.6.3553': attribute type 4 has an invalid length. [ 1611.936982][T18781] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.3555'. [ 1612.035816][T18777] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.3555'. [ 1612.752593][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 1612.758990][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 1616.083919][T18809] Device name cannot be null; rc = [-22] [ 1616.692953][T18812] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3565'. [ 1617.529953][T18816] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3566'. [ 1617.539149][T18816] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3566'. [ 1617.845101][T18823] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3567'. [ 1618.686854][T18829] Device name cannot be null; rc = [-22] [ 1619.195848][T18831] netlink: 'syz.1.3569': attribute type 2 has an invalid length. [ 1619.208811][T18831] netlink: 244 bytes leftover after parsing attributes in process `syz.1.3569'. [ 1625.222680][T18872] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3578'. [ 1626.266227][T18880] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3581'. [ 1627.170028][T18882] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1628.318600][T18892] Device name cannot be null; rc = [-22] [ 1630.512625][T18912] netlink: 'syz.6.3589': attribute type 4 has an invalid length. [ 1634.818774][T10496] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 1634.988852][T10496] usb 4-1: device descriptor read/64, error -71 [ 1635.119151][T18947] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.3595'. [ 1635.258791][T10496] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 1635.439273][T10496] usb 4-1: device descriptor read/64, error -71 [ 1635.486965][T18957] Device name cannot be null; rc = [-22] [ 1635.620715][T10496] usb usb4-port1: attempt power cycle [ 1636.960003][T10496] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 1637.510877][T10496] usb 4-1: device descriptor read/8, error -71 [ 1640.268595][T18994] Device name cannot be null; rc = [-22] [ 1641.092503][T18996] netlink: 'syz.1.3611': attribute type 2 has an invalid length. [ 1641.141958][T18996] netlink: 244 bytes leftover after parsing attributes in process `syz.1.3611'. [ 1641.286065][T19001] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3613'. [ 1641.899152][T10496] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 1642.929707][T10496] usb 2-1: Using ep0 maxpacket: 16 [ 1642.983985][T10496] usb 2-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 1643.156319][T10496] usb 2-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 1643.218451][T10496] usb 2-1: Product: syz [ 1643.256844][T10496] usb 2-1: Manufacturer: syz [ 1643.278166][T10496] usb 2-1: SerialNumber: syz [ 1643.332287][T10496] usb 2-1: config 0 descriptor?? [ 1643.652718][T10496] usb 2-1: USB disconnect, device number 43 [ 1643.704387][T18943] udevd[18943]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1644.034596][T19034] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1644.170136][T19027] xt_CT: No such helper "snmp" [ 1646.623085][T19051] Device name cannot be null; rc = [-22] [ 1647.383784][T19058] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3630'. [ 1649.356309][T19071] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1651.468120][ T4328] libceph: connect (1)[c::]:6789 error -101 [ 1651.474854][ T4328] libceph: mon0 (1)[c::]:6789 connect error [ 1651.506800][T19092] ceph: No mds server is up or the cluster is laggy [ 1651.860707][T19098] Device name cannot be null; rc = [-22] [ 1652.658987][ T4366] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 1652.849175][ T4366] usb 4-1: device descriptor read/64, error -71 [ 1653.118791][ T4366] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 1653.370607][T19112] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3645'. [ 1655.363405][T19126] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1656.370950][T19135] netlink: 'syz.1.3652': attribute type 2 has an invalid length. [ 1656.392920][T19135] netlink: 244 bytes leftover after parsing attributes in process `syz.1.3652'. [ 1656.548838][ T4366] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 1656.756479][ T4366] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1656.776203][ T4366] usb 4-1: config 27 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1656.823059][ T4366] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1656.866855][ T4366] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1656.935302][ T4366] usb 4-1: invalid MIDI out EP 0 [ 1657.151378][ T4366] snd-usb-audio: probe of 4-1:27.0 failed with error -22 [ 1657.217513][T18972] udevd[18972]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1657.241069][ T4366] usb 4-1: USB disconnect, device number 49 [ 1657.472457][T19144] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3656'. [ 1659.838500][T19162] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1659.894506][T19165] xt_l2tp: v2 sid > 0xffff: 262144 [ 1663.804993][T17360] libceph: connect (1)[c::]:6789 error -101 [ 1663.832972][T17360] libceph: mon0 (1)[c::]:6789 connect error [ 1663.936905][T19194] ceph: No mds server is up or the cluster is laggy [ 1664.020657][T17360] libceph: connect (1)[c::]:6789 error -101 [ 1664.347614][T17360] libceph: mon0 (1)[c::]:6789 connect error [ 1664.428707][T19207] atomic_op ffff888078635998 conn xmit_atomic 0000000000000000 [ 1665.136129][T19220] xt_l2tp: v2 sid > 0xffff: 262144 [ 1666.672047][T19225] Device name cannot be null; rc = [-22] [ 1668.481705][T19244] netlink: 'syz.0.3685': attribute type 2 has an invalid length. [ 1668.527645][T19244] netlink: 244 bytes leftover after parsing attributes in process `syz.0.3685'. [ 1672.303132][T19268] device syzkaller0 entered promiscuous mode [ 1674.259505][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 1674.266060][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 1675.707128][T19287] Device name cannot be null; rc = [-22] [ 1676.518163][T19303] netlink: 'syz.6.3699': attribute type 2 has an invalid length. [ 1676.536575][T19303] netlink: 244 bytes leftover after parsing attributes in process `syz.6.3699'. [ 1682.705334][T19353] netlink: 'syz.1.3712': attribute type 2 has an invalid length. [ 1682.713389][T19353] netlink: 244 bytes leftover after parsing attributes in process `syz.1.3712'. [ 1683.100271][T19361] ptrace attach of "./syz-executor exec"[16193] was attempted by "./syz-executor exec"[19361] [ 1684.954963][T19371] xt_CT: No such helper "snmp" [ 1686.299600][T11398] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1686.323648][T11398] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1686.332652][T11398] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1686.351574][T11398] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1686.366835][T11398] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 1686.374409][T11398] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1686.746886][T19390] netlink: 'syz.6.3724': attribute type 2 has an invalid length. [ 1686.777637][T19390] netlink: 244 bytes leftover after parsing attributes in process `syz.6.3724'. [ 1687.794596][T19406] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3727'. [ 1688.679355][T15655] Bluetooth: hci5: command 0x0409 tx timeout [ 1689.010392][T19386] chnl_net:caif_netlink_parms(): no params data found [ 1689.157656][T19419] xt_CT: No such helper "snmp" [ 1689.189475][ T6871] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1690.748791][T11398] Bluetooth: hci5: command 0x041b tx timeout [ 1690.811438][ T6871] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1691.458757][T19442] ptrace attach of "./syz-executor exec"[16566] was attempted by "./syz-executor exec"[19442] [ 1691.691214][T19455] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3739'. [ 1692.572680][ T6871] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1692.793617][T19386] bridge0: port 1(bridge_slave_0) entered blocking state [ 1692.828838][T11398] Bluetooth: hci5: command 0x040f tx timeout [ 1692.912733][T19386] bridge0: port 1(bridge_slave_0) entered disabled state [ 1693.096356][T19386] device bridge_slave_0 entered promiscuous mode [ 1693.200331][ T6871] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1693.257244][T19386] bridge0: port 2(bridge_slave_1) entered blocking state [ 1693.268165][T19386] bridge0: port 2(bridge_slave_1) entered disabled state [ 1693.733194][T19386] device bridge_slave_1 entered promiscuous mode [ 1694.006620][T19386] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1694.052257][T19386] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1694.908786][T15655] Bluetooth: hci5: command 0x0419 tx timeout [ 1696.812162][T19386] team0: Port device team_slave_0 added [ 1696.913088][T19386] team0: Port device team_slave_1 added [ 1697.951357][T19386] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1697.958721][T19386] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1698.425852][T19386] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1698.680254][T19386] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1698.746579][T19386] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1699.245113][T19386] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1699.403918][T19505] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3750'. [ 1701.272653][T19523] device geneve2 entered promiscuous mode [ 1701.333071][T19386] device hsr_slave_0 entered promiscuous mode [ 1701.349866][T19386] device hsr_slave_1 entered promiscuous mode [ 1701.375159][T19386] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1701.400584][T19386] Cannot create hsr debugfs directory [ 1701.634634][T19527] Device name cannot be null; rc = [-22] [ 1705.095275][T19386] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1705.695001][ T6871] device hsr_slave_0 left promiscuous mode [ 1705.701784][ T6871] device hsr_slave_1 left promiscuous mode [ 1705.718767][ T6871] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1705.735270][ T6871] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1706.470164][ T6871] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1706.477670][ T6871] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1706.719037][ T6871] device bridge_slave_1 left promiscuous mode [ 1706.856304][ T6871] bridge0: port 2(bridge_slave_1) entered disabled state [ 1707.164552][ T6871] device bridge_slave_0 left promiscuous mode [ 1707.182640][ T6871] bridge0: port 1(bridge_slave_0) entered disabled state [ 1707.279262][ T6871] device veth1_macvtap left promiscuous mode [ 1707.300177][ T6871] device veth0_macvtap left promiscuous mode [ 1707.323030][ T6871] device veth1_vlan left promiscuous mode [ 1707.331919][ T6871] device veth0_vlan left promiscuous mode [ 1707.561332][T11398] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201' [ 1707.571519][T11398] CPU: 0 PID: 11398 Comm: kworker/u5:0 Not tainted 6.1.146-syzkaller #0 [ 1707.579890][T11398] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1707.589982][T11398] Workqueue: hci3 hci_rx_work [ 1707.594852][T11398] Call Trace: [ 1707.598161][T11398] [ 1707.601211][T11398] dump_stack_lvl+0x168/0x22e [ 1707.605971][T11398] ? show_regs_print_info+0x12/0x12 [ 1707.611202][T11398] ? load_image+0x3b0/0x3b0 [ 1707.615771][T11398] sysfs_create_dir_ns+0x252/0x280 [ 1707.621057][T11398] ? hci_rx_work+0x3eb/0xd40 [ 1707.625688][T11398] ? sysfs_warn_dup+0xa0/0xa0 [ 1707.630408][T11398] ? do_raw_spin_unlock+0x11d/0x230 [ 1707.635688][T11398] kobject_add_internal+0x6b8/0xc80 [ 1707.640998][T11398] kobject_add+0x152/0x210 [ 1707.645466][T11398] ? kobject_init+0x1d0/0x1d0 [ 1707.650191][T11398] ? klist_children_get+0x50/0x50 [ 1707.655312][T11398] ? get_device_parent+0x121/0x3f0 [ 1707.660461][T11398] device_add+0x483/0xfb0 [ 1707.664827][T11398] ? kmem_cache_free+0xf7/0x290 [ 1707.669748][T11398] hci_conn_add_sysfs+0xd1/0x1e0 [ 1707.674779][T11398] le_conn_complete_evt+0xd1d/0x1320 [ 1707.680159][T11398] ? hci_le_big_info_adv_report_evt+0x310/0x310 [ 1707.686459][T11398] ? __mutex_unlock_slowpath+0x19e/0x6a0 [ 1707.692192][T11398] ? skb_pull_data+0xf7/0x200 [ 1707.696960][T11398] hci_le_conn_complete_evt+0x183/0x440 [ 1707.702556][T11398] ? hci_remote_host_features_evt+0x270/0x270 [ 1707.708657][T11398] hci_event_packet+0x791/0x1210 [ 1707.713636][T11398] ? bis_list+0x280/0x280 [ 1707.717996][T11398] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 1707.724011][T11398] ? kcov_remote_start+0x4c7/0x7e0 [ 1707.729175][T11398] ? mce_start+0x60/0x140 [ 1707.733713][T11398] ? hci_send_to_monitor+0x9c/0x4a0 [ 1707.738962][T11398] hci_rx_work+0x3eb/0xd40 [ 1707.743426][T11398] ? _raw_spin_unlock+0x40/0x40 [ 1707.748328][T11398] ? process_one_work+0x7a1/0x1160 [ 1707.753546][T11398] process_one_work+0x898/0x1160 [ 1707.758537][T11398] ? worker_detach_from_pool+0x240/0x240 [ 1707.764227][T11398] ? _raw_spin_lock_irq+0xab/0xe0 [ 1707.769296][T11398] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 1707.774708][T11398] ? kthread_data+0x4b/0xc0 [ 1707.779267][T11398] worker_thread+0xaa2/0x1250 [ 1707.784011][T11398] kthread+0x29d/0x330 [ 1707.788123][T11398] ? worker_clr_flags+0x1a0/0x1a0 [ 1707.793179][T11398] ? kthread_blkcg+0xd0/0xd0 [ 1707.797829][T11398] ret_from_fork+0x1f/0x30 [ 1707.802328][T11398] [ 1707.828859][T11398] kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 1707.842330][T11398] Bluetooth: hci3: failed to register connection device [ 1708.200285][T19593] xt_CT: No such helper "snmp" [ 1711.740641][T19629] ======================================================= [ 1711.740641][T19629] WARNING: The mand mount option has been deprecated and [ 1711.740641][T19629] and is ignored by this kernel. Remove the mand [ 1711.740641][T19629] option from the mount to silence this warning. [ 1711.740641][T19629] ======================================================= [ 1712.202873][T19629] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1713.942749][ T6871] team0 (unregistering): Port device team_slave_1 removed [ 1714.087004][ T6871] team0 (unregistering): Port device team_slave_0 removed [ 1714.246328][ T6871] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1714.426974][ T6871] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1714.518937][T11398] Bluetooth: hci3: command 0x0406 tx timeout [ 1715.264763][ T6871] bond0 (unregistering): Released all slaves [ 1715.675717][T19569] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3762'. [ 1715.696636][T19386] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1715.728716][T19386] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1715.816398][T19386] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1716.718907][T19667] netlink: 'syz.6.3786': attribute type 10 has an invalid length. [ 1716.795887][T19667] 8021q: adding VLAN 0 to HW filter on device team0 [ 1716.872893][T19667] bond0: (slave team0): Enslaving as an active interface with an up link [ 1719.178957][T19386] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1719.423217][T13166] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1719.442495][T13166] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1719.490833][T19386] 8021q: adding VLAN 0 to HW filter on device team0 [ 1719.560972][T13166] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1719.581468][T13166] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1719.647311][T13166] bridge0: port 1(bridge_slave_0) entered blocking state [ 1719.654504][T13166] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1719.797618][T13166] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1720.749818][ T4533] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1720.784088][ T4533] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1721.758410][ T4533] bridge0: port 2(bridge_slave_1) entered blocking state [ 1721.765647][ T4533] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1721.799231][ T4533] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1721.859184][ T4533] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1721.876441][ T4533] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1721.931045][ T4533] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1721.974409][T19718] netlink: 80 bytes leftover after parsing attributes in process `syz.6.3797'. [ 1721.989373][ T4533] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1722.923268][ T4755] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1722.963756][ T4755] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1723.012417][ T4755] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1723.067750][ T4755] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1723.325350][T19386] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1723.467094][ T4755] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1723.500126][ T4755] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1725.396746][T19386] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1725.432353][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1725.453296][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1729.878415][ T6871] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1729.939664][ T6871] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1731.154457][T19386] device veth0_vlan entered promiscuous mode [ 1731.224076][T19386] device veth1_vlan entered promiscuous mode [ 1731.454549][ T6871] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1731.469343][ T6871] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1731.475160][ T6871] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1731.481982][ T6871] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1731.486530][ T6871] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1732.881626][ T5082] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1732.890796][ T5082] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1733.224661][T19386] device veth0_macvtap entered promiscuous mode [ 1733.518877][ T4528] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1733.572780][T19386] device veth1_macvtap entered promiscuous mode [ 1733.612259][T19386] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1733.629536][T19386] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1733.684098][T19386] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1733.714064][T19386] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1733.749840][T19386] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1733.797612][T19386] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1733.808968][T19386] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1733.820995][T19386] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1733.842421][T19386] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1733.907692][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1733.968821][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1734.103595][T19386] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1734.110356][T19848] trusted_key: encrypted_key: insufficient parameters specified [ 1734.119453][T19386] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1734.137238][T19386] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1734.149801][T19386] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1734.386509][T19386] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1734.838670][T19386] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1734.888764][T19386] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1734.919723][T19386] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1734.999760][T19386] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1735.090021][T19857] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1735.118995][T19857] overlayfs: missing 'lowerdir' [ 1735.137341][ T4483] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1735.174954][ T4483] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1735.531068][T19386] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1735.580449][T19386] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1735.632198][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 1735.638580][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 1735.678696][T19386] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1735.740622][T19386] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1736.859377][ T4409] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1736.888591][ T4409] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1736.904216][T19882] comedi comedi0: dt2815: I/O port conflict (0x9,2) [ 1736.955325][ T4409] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1737.071573][ T4409] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1737.089311][ T4409] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1737.183093][T13166] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1738.345557][T19898] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3722'. [ 1739.022292][T19914] Device name cannot be null; rc = [-22] [ 1741.565226][T19927] orangefs_mount: mount request failed with -4 [ 1743.583885][T19945] Device name cannot be null; rc = [-22] [ 1749.369608][T11398] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:201' [ 1749.379695][T11398] CPU: 1 PID: 11398 Comm: kworker/u5:0 Not tainted 6.1.146-syzkaller #0 [ 1749.388076][T11398] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1749.398193][T11398] Workqueue: hci4 hci_rx_work [ 1749.402934][T11398] Call Trace: [ 1749.406248][T11398] [ 1749.409211][T11398] dump_stack_lvl+0x168/0x22e [ 1749.413931][T11398] ? show_regs_print_info+0x12/0x12 [ 1749.419171][T11398] ? load_image+0x3b0/0x3b0 [ 1749.423734][T11398] sysfs_create_dir_ns+0x252/0x280 [ 1749.428891][T11398] ? hci_rx_work+0x3eb/0xd40 [ 1749.433540][T11398] ? sysfs_warn_dup+0xa0/0xa0 [ 1749.438269][T11398] ? do_raw_spin_unlock+0x11d/0x230 [ 1749.443536][T11398] kobject_add_internal+0x6b8/0xc80 [ 1749.448806][T11398] kobject_add+0x152/0x210 [ 1749.453277][T11398] ? kobject_init+0x1d0/0x1d0 [ 1749.458009][T11398] ? klist_children_get+0x50/0x50 [ 1749.463104][T11398] ? get_device_parent+0x121/0x3f0 [ 1749.468261][T11398] device_add+0x483/0xfb0 [ 1749.472631][T11398] ? kmem_cache_free+0xf7/0x290 [ 1749.477542][T11398] hci_conn_add_sysfs+0xd1/0x1e0 [ 1749.482539][T11398] le_conn_complete_evt+0xd1d/0x1320 [ 1749.487896][T11398] ? hci_le_big_info_adv_report_evt+0x310/0x310 [ 1749.494311][T11398] ? __mutex_unlock_slowpath+0x19e/0x6a0 [ 1749.499987][T11398] ? skb_pull_data+0xf7/0x200 [ 1749.504717][T11398] hci_le_conn_complete_evt+0x183/0x440 [ 1749.510346][T11398] ? hci_remote_host_features_evt+0x270/0x270 [ 1749.516463][T11398] hci_event_packet+0x791/0x1210 [ 1749.521464][T11398] ? bis_list+0x280/0x280 [ 1749.525844][T11398] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 1749.531791][T11398] ? kcov_remote_start+0x4c7/0x7e0 [ 1749.536941][T11398] ? mce_start+0x60/0x140 [ 1749.541314][T11398] ? hci_send_to_monitor+0x9c/0x4a0 [ 1749.546569][T11398] hci_rx_work+0x3eb/0xd40 [ 1749.551035][T11398] ? _raw_spin_unlock+0x40/0x40 [ 1749.555944][T11398] ? process_one_work+0x7a1/0x1160 [ 1749.561099][T11398] process_one_work+0x898/0x1160 [ 1749.566096][T11398] ? worker_detach_from_pool+0x240/0x240 [ 1749.571774][T11398] ? _raw_spin_lock_irq+0xab/0xe0 [ 1749.576843][T11398] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 1749.582366][T11398] ? kthread_data+0x4b/0xc0 [ 1749.586936][T11398] worker_thread+0xaa2/0x1250 [ 1749.591690][T11398] kthread+0x29d/0x330 [ 1749.595809][T11398] ? worker_clr_flags+0x1a0/0x1a0 [ 1749.600873][T11398] ? kthread_blkcg+0xd0/0xd0 [ 1749.605513][T11398] ret_from_fork+0x1f/0x30 [ 1749.609992][T11398] [ 1749.998799][T11398] kobject_add_internal failed for hci4:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 1750.012236][T11398] Bluetooth: hci4: failed to register connection device [ 1754.590658][T20003] Bluetooth: hci4: Ignoring HCI_Connection_Complete for existing connection [ 1757.652296][T20077] overlayfs: failed to resolve './file0': -2 [ 1758.769099][T20080] Device name cannot be null; rc = [-22] [ 1759.801834][T20101] netlink: 'syz.6.3882': attribute type 3 has an invalid length. [ 1762.488868][T20128] atomic_op ffff88807c4bb198 conn xmit_atomic 0000000000000000 [ 1763.295215][T20134] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3891'. [ 1763.309745][T20134] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1764.825113][T20148] comedi comedi0: dt2815: I/O port conflict (0x9,2) [ 1765.690234][T20134] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1766.022661][T20149] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1766.781307][T20166] tmpfs: Bad value for 'size' [ 1767.243260][T15655] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci5/hci5:201' [ 1767.253676][T15655] CPU: 0 PID: 15655 Comm: kworker/u5:1 Not tainted 6.1.146-syzkaller #0 [ 1767.262049][T15655] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1767.272143][T15655] Workqueue: hci5 hci_rx_work [ 1767.276894][T15655] Call Trace: [ 1767.280209][T15655] [ 1767.283173][T15655] dump_stack_lvl+0x168/0x22e [ 1767.287893][T15655] ? show_regs_print_info+0x12/0x12 [ 1767.293124][T15655] ? load_image+0x3b0/0x3b0 [ 1767.297687][T15655] sysfs_create_dir_ns+0x252/0x280 [ 1767.302839][T15655] ? sysfs_warn_dup+0xa0/0xa0 [ 1767.307556][T15655] ? mark_lock+0x94/0x320 [ 1767.311928][T15655] ? do_raw_spin_unlock+0x11d/0x230 [ 1767.317186][T15655] kobject_add_internal+0x6b8/0xc80 [ 1767.322436][T15655] kobject_add+0x152/0x210 [ 1767.326898][T15655] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 1767.332569][T15655] ? kobject_init+0x1d0/0x1d0 [ 1767.337386][T15655] ? get_device_parent+0x6b/0x3f0 [ 1767.342443][T15655] ? get_device_parent+0x121/0x3f0 [ 1767.347594][T15655] device_add+0x483/0xfb0 [ 1767.351960][T15655] ? kmem_cache_free+0xf7/0x290 [ 1767.356851][T15655] hci_conn_add_sysfs+0xd1/0x1e0 [ 1767.361843][T15655] le_conn_complete_evt+0xd1d/0x1320 [ 1767.367202][T15655] ? hci_le_big_info_adv_report_evt+0x310/0x310 [ 1767.373485][T15655] ? lockdep_hardirqs_on+0x94/0x140 [ 1767.378820][T15655] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 1767.384504][T15655] ? skb_pull_data+0xf7/0x200 [ 1767.389239][T15655] hci_le_conn_complete_evt+0x183/0x440 [ 1767.394834][T15655] ? hci_remote_host_features_evt+0x270/0x270 [ 1767.401121][T15655] hci_event_packet+0x791/0x1210 [ 1767.406103][T15655] ? bis_list+0x280/0x280 [ 1767.410470][T15655] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 1767.416431][T15655] ? kcov_remote_start+0x4c7/0x7e0 [ 1767.421583][T15655] ? mce_start+0x60/0x140 [ 1767.426040][T15655] ? hci_send_to_monitor+0x9c/0x4a0 [ 1767.431288][T15655] hci_rx_work+0x3eb/0xd40 [ 1767.435757][T15655] ? _raw_spin_unlock+0x40/0x40 [ 1767.440661][T15655] ? process_one_work+0x7a1/0x1160 [ 1767.445811][T15655] process_one_work+0x898/0x1160 [ 1767.450803][T15655] ? worker_detach_from_pool+0x240/0x240 [ 1767.456480][T15655] ? _raw_spin_lock_irq+0xab/0xe0 [ 1767.461547][T15655] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 1767.466963][T15655] ? kthread_data+0x4b/0xc0 [ 1767.471519][T15655] worker_thread+0xaa2/0x1250 [ 1767.476273][T15655] kthread+0x29d/0x330 [ 1767.480386][T15655] ? worker_clr_flags+0x1a0/0x1a0 [ 1767.485447][T15655] ? kthread_blkcg+0xd0/0xd0 [ 1767.490083][T15655] ret_from_fork+0x1f/0x30 [ 1767.494550][T15655] [ 1767.798812][T15655] kobject_add_internal failed for hci5:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 1767.812214][T15655] Bluetooth: hci5: failed to register connection device [ 1768.054563][T20182] vivid-007: ================= START STATUS ================= [ 1768.064393][T20182] vivid-007: Generate PTS: true [ 1768.070380][T20182] vivid-007: Generate SCR: true [ 1768.075603][T20182] tpg source WxH: 640x360 (Y'CbCr) [ 1768.081387][T20182] tpg field: 1 [ 1768.086010][T20182] tpg crop: 640x360@0x0 [ 1768.091770][T20182] tpg compose: 640x360@0x0 [ 1768.096509][T20182] tpg colorspace: 8 [ 1768.102092][T20182] tpg transfer function: 0/0 [ 1768.107143][T20182] tpg Y'CbCr encoding: 0/0 [ 1768.112111][T20182] tpg quantization: 0/0 [ 1768.116567][T20182] tpg RGB range: 0/2 [ 1768.121077][T20182] vivid-007: ================== END STATUS ================== [ 1768.379911][T20189] atomic_op ffff88805667c998 conn xmit_atomic 0000000000000000 [ 1770.756688][T20199] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1774.016384][T15655] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201' [ 1774.028048][T15655] CPU: 1 PID: 15655 Comm: kworker/u5:1 Not tainted 6.1.146-syzkaller #0 [ 1774.036547][T15655] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1774.046651][T15655] Workqueue: hci1 hci_rx_work [ 1774.051386][T15655] Call Trace: [ 1774.054693][T15655] [ 1774.057668][T15655] dump_stack_lvl+0x168/0x22e [ 1774.062391][T15655] ? show_regs_print_info+0x12/0x12 [ 1774.067620][T15655] ? load_image+0x3b0/0x3b0 [ 1774.072185][T15655] sysfs_create_dir_ns+0x252/0x280 [ 1774.077340][T15655] ? sysfs_warn_dup+0xa0/0xa0 [ 1774.082065][T15655] ? preempt_schedule_thunk+0x16/0x18 [ 1774.087490][T15655] kobject_add_internal+0x6b8/0xc80 [ 1774.092745][T15655] kobject_add+0x152/0x210 [ 1774.097212][T15655] ? kobject_init+0x1d0/0x1d0 [ 1774.101940][T15655] ? klist_children_get+0x50/0x50 [ 1774.107007][T15655] ? get_device_parent+0x121/0x3f0 [ 1774.112163][T15655] device_add+0x483/0xfb0 [ 1774.116526][T15655] ? kmem_cache_free+0xf7/0x290 [ 1774.121506][T15655] hci_conn_add_sysfs+0xd1/0x1e0 [ 1774.126481][T15655] le_conn_complete_evt+0xd1d/0x1320 [ 1774.131835][T15655] ? hci_le_big_info_adv_report_evt+0x310/0x310 [ 1774.138150][T15655] ? le_conn_complete_evt+0xa/0x1320 [ 1774.143504][T15655] hci_le_conn_complete_evt+0x183/0x440 [ 1774.149127][T15655] ? hci_remote_host_features_evt+0x270/0x270 [ 1774.155255][T15655] hci_event_packet+0x791/0x1210 [ 1774.160509][T15655] ? bis_list+0x280/0x280 [ 1774.165776][T15655] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 1774.172525][T15655] ? kcov_remote_start+0x4c7/0x7e0 [ 1774.177685][T15655] ? mce_start+0x60/0x140 [ 1774.182061][T15655] ? hci_send_to_monitor+0x9c/0x4a0 [ 1774.187403][T15655] hci_rx_work+0x3eb/0xd40 [ 1774.191873][T15655] ? _raw_spin_unlock+0x40/0x40 [ 1774.196875][T15655] ? process_one_work+0x7a1/0x1160 [ 1774.202030][T15655] process_one_work+0x898/0x1160 [ 1774.207027][T15655] ? worker_detach_from_pool+0x240/0x240 [ 1774.212721][T15655] ? _raw_spin_lock_irq+0xab/0xe0 [ 1774.217863][T15655] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 1774.223378][T15655] ? kthread_data+0x4b/0xc0 [ 1774.228554][T15655] worker_thread+0xaa2/0x1250 [ 1774.233304][T15655] kthread+0x29d/0x330 [ 1774.237422][T15655] ? worker_clr_flags+0x1a0/0x1a0 [ 1774.242590][T15655] ? kthread_blkcg+0xd0/0xd0 [ 1774.247258][T15655] ret_from_fork+0x1f/0x30 [ 1774.251745][T15655] [ 1774.468755][T15655] kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 1774.482222][T15655] Bluetooth: hci1: failed to register connection device [ 1774.498217][T20208] Device name cannot be null; rc = [-22] [ 1774.989187][T20228] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3911'. [ 1775.017023][T20228] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1775.228845][T20225] xt_CT: No such helper "snmp" [ 1776.533103][T20246] atomic_op ffff888029456998 conn xmit_atomic 0000000000000000 [ 1777.366276][T20228] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1779.349190][T20266] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1779.989529][T15655] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 1780.262907][T20283] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3928'. [ 1786.096057][T20324] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1786.379119][T13951] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 1786.561937][T20333] loop6: detected capacity change from 0 to 128 [ 1786.623957][T13951] usb 1-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 1786.653670][T13951] usb 1-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 1786.712145][T20333] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 1786.805124][T20333] ext4 filesystem being mounted at /376/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1786.818987][T13951] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1787.105257][T13951] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1787.149126][T13951] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1787.186975][T13951] usb 1-1: Product: syz [ 1787.678790][T20346] Error: Driver 'c6xdigio' is already registered, aborting... [ 1788.361926][T13951] usb 1-1: Manufacturer: syz [ 1788.366615][T13951] usb 1-1: SerialNumber: syz [ 1788.428919][T20334] xt_CT: No such helper "snmp" [ 1788.705356][T20355] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3943'. [ 1789.423643][T13951] usb 1-1: 0:2 : does not exist [ 1789.430629][ T26] audit: type=1800 audit(1753294502.433:73): pid=20348 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.3941" name="file2" dev="loop6" ino=13 res=0 errno=0 [ 1789.608277][T12305] EXT4-fs (loop6): unmounting filesystem. [ 1789.748154][ T9776] usb 1-1: USB disconnect, device number 56 [ 1794.024433][T20402] xt_CT: No such helper "snmp" [ 1797.315705][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 1797.327765][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 1797.828526][T20463] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1800.035143][T20483] loop1: detected capacity change from 0 to 128 [ 1800.126693][T20483] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 1800.231847][T20483] ext4 filesystem being mounted at /223/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1801.009323][T20483] fscrypt: Error allocating hmac(sha512): -2 [ 1801.044945][T15655] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 1801.647001][T20510] loop3: detected capacity change from 0 to 128 [ 1801.740983][T16193] EXT4-fs (loop1): unmounting filesystem. [ 1801.820257][T20510] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a80ec018, mo2=0002] [ 1801.893714][T20510] System zones: 1-3, 19-19, 35-36 [ 1801.999962][T20510] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 1802.065591][T20510] ext4 filesystem being mounted at /180/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1802.880164][T20515] device geneve2 entered promiscuous mode [ 1802.938231][T20510] EXT4-fs warning (device loop3): verify_group_input:151: Cannot add at group 213 (only 1 groups) [ 1803.231336][T16566] EXT4-fs (loop3): unmounting filesystem. [ 1803.592012][T20525] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1804.225212][T20545] Device name cannot be null; rc = [-22] [ 1809.570094][T20602] loop6: detected capacity change from 0 to 256 [ 1809.576467][T20003] Bluetooth: hci5: command 0x0406 tx timeout [ 1809.579908][T20602] FAT-fs (loop6): Unrecognized mount option "shortname=mix~Łed" or missing value [ 1809.693540][T20003] Bluetooth: hci5: Ignoring HCI_Connection_Complete for existing connection [ 1810.410586][T20485] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1811.907380][T20623] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4007'. [ 1818.632673][T20687] Device name cannot be null; rc = [-22] [ 1820.105356][T20003] Bluetooth: hci0: unexpected event for opcode 0x041b [ 1822.548983][T20728] Device name cannot be null; rc = [-22] [ 1823.498939][T20730] Device name cannot be null; rc = [-22] [ 1825.120096][T20003] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 1829.039105][T20778] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4048'. [ 1829.156670][T20759] ubi: mtd0 is already attached to ubi31 [ 1829.671302][T20780] loop6: detected capacity change from 0 to 128 [ 1829.915636][T20780] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=256, location=256 [ 1829.980063][T20780] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1830.188847][T20793] Device name cannot be null; rc = [-22] [ 1831.228794][T20003] Bluetooth: hci0: unexpected event for opcode 0x041b [ 1837.731521][T20864] loop3: detected capacity change from 0 to 40427 [ 1837.745532][T20864] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 1837.753794][T20864] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 1837.768774][T20864] F2FS-fs (loop3): invalid crc value [ 1837.878739][T20864] F2FS-fs (loop3): Found nat_bits in checkpoint [ 1838.020230][T20864] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 1838.027666][T20864] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 1838.475972][ T26] audit: type=1800 audit(1753294551.453:74): pid=20880 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.4070" name="file1" dev="loop3" ino=10 res=0 errno=0 [ 1839.923470][T20895] mmap: syz.6.4078 (20895) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 1841.934844][T20906] loop7: detected capacity change from 0 to 1024 [ 1842.594577][T20906] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 1842.858350][T19386] EXT4-fs (loop7): unmounting filesystem. [ 1847.216611][T20969] loop3: detected capacity change from 0 to 40427 [ 1847.234802][T20969] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 1847.244872][T20969] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 1847.273542][T20969] F2FS-fs (loop3): invalid crc value [ 1847.362372][T20969] F2FS-fs (loop3): Found nat_bits in checkpoint [ 1847.411872][T20969] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 1847.419428][T20969] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 1847.596942][T20976] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1848.098710][ T26] audit: type=1800 audit(1753294561.013:75): pid=20977 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.4094" name="file1" dev="loop3" ino=10 res=0 errno=0 [ 1854.202337][T21039] netlink: 'syz.6.4110': attribute type 3 has an invalid length. [ 1857.173136][T21067] loop1: detected capacity change from 0 to 128 [ 1857.243072][T21067] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 1857.349277][T21067] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1858.523009][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 1858.529603][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 1862.735663][T21108] loop6: detected capacity change from 0 to 40427 [ 1862.753027][T21108] F2FS-fs (loop6): Invalid log_blocksize (268), supports only 12 [ 1862.760877][T21108] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 1862.771644][T21108] F2FS-fs (loop6): invalid crc value [ 1862.857946][T21108] F2FS-fs (loop6): Found nat_bits in checkpoint [ 1862.925165][T21108] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 1862.932422][T21108] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 1865.085261][T21133] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4136'. [ 1865.163771][T21133] device bridge0 entered promiscuous mode [ 1865.203160][T21133] device macvtap5 entered promiscuous mode [ 1865.250604][T21135] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4136'. [ 1865.681255][T21145] netlink: 'syz.3.4139': attribute type 3 has an invalid length. [ 1867.421719][T21158] loop6: detected capacity change from 0 to 40427 [ 1868.100138][T21158] F2FS-fs (loop6): Invalid log_blocksize (268), supports only 12 [ 1868.107905][T21158] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 1868.268050][T21158] F2FS-fs (loop6): invalid crc value [ 1868.707272][T21158] F2FS-fs (loop6): Found nat_bits in checkpoint [ 1868.794445][T21158] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 1868.801599][T21158] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 1868.990386][T21172] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1870.298747][T21187] ubi: mtd0 is already attached to ubi31 [ 1870.987846][T21200] netlink: 'syz.7.4153': attribute type 3 has an invalid length. [ 1883.623369][T21318] ================================================================================ [ 1883.741030][T21318] UBSAN: shift-out-of-bounds in drivers/comedi/drivers/pcl812.c:1152:10 [ 1883.777160][T21318] shift exponent 8388611 is too large for 32-bit type 'int' [ 1883.808940][T21318] CPU: 1 PID: 21318 Comm: syz.1.4182 Not tainted 6.1.146-syzkaller #0 [ 1883.817161][T21318] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1883.827235][T21318] Call Trace: [ 1883.830534][T21318] [ 1883.833481][T21318] dump_stack_lvl+0x168/0x22e [ 1883.838190][T21318] ? show_regs_print_info+0x12/0x12 [ 1883.843404][T21318] ? load_image+0x3b0/0x3b0 [ 1883.847938][T21318] ubsan_epilogue+0xa/0x30 [ 1883.852393][T21318] __ubsan_handle_shift_out_of_bounds+0x37c/0x400 [ 1883.858882][T21318] pcl812_attach+0x1bc9/0x2340 [ 1883.863739][T21318] comedi_device_attach+0x515/0x650 [ 1883.869021][T21318] comedi_unlocked_ioctl+0x5ec/0xe90 [ 1883.874337][T21318] ? tomoyo_path_number_perm+0x4ae/0x600 [ 1883.880055][T21318] ? comedi_poll+0x8b0/0x8b0 [ 1883.884700][T21318] ? __fget_files+0x28/0x4d0 [ 1883.889327][T21318] ? bpf_lsm_file_ioctl+0x5/0x10 [ 1883.894330][T21318] ? security_file_ioctl+0x7c/0xa0 [ 1883.899570][T21318] ? comedi_poll+0x8b0/0x8b0 [ 1883.904166][T21318] __se_sys_ioctl+0xfa/0x170 [ 1883.908822][T21318] do_syscall_64+0x4c/0xa0 [ 1883.913262][T21318] ? clear_bhb_loop+0x60/0xb0 [ 1883.917939][T21318] ? clear_bhb_loop+0x60/0xb0 [ 1883.922634][T21318] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1883.928558][T21318] RIP: 0033:0x7f5147f8e9a9 [ 1883.933018][T21318] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1883.952731][T21318] RSP: 002b:00007f5148dae038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1883.961154][T21318] RAX: ffffffffffffffda RBX: 00007f51481b5fa0 RCX: 00007f5147f8e9a9 [ 1883.969129][T21318] RDX: 00002000000000c0 RSI: 0000000040946400 RDI: 0000000000000003 [ 1883.977107][T21318] RBP: 00007f5148010d69 R08: 0000000000000000 R09: 0000000000000000 [ 1883.985249][T21318] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1883.993228][T21318] R13: 0000000000000000 R14: 00007f51481b5fa0 R15: 00007ffd5bd23758 [ 1884.001217][T21318] [ 1884.110182][T21318] ================================================================================ [ 1884.541704][T21318] Kernel panic - not syncing: UBSAN: panic_on_warn set ... [ 1884.548974][T21318] CPU: 0 PID: 21318 Comm: syz.1.4182 Not tainted 6.1.146-syzkaller #0 [ 1884.557163][T21318] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1884.567242][T21318] Call Trace: [ 1884.570526][T21318] [ 1884.573485][T21318] dump_stack_lvl+0x168/0x22e [ 1884.578168][T21318] ? memcpy+0x3c/0x60 [ 1884.582232][T21318] ? show_regs_print_info+0x12/0x12 [ 1884.587461][T21318] ? load_image+0x3b0/0x3b0 [ 1884.591993][T21318] panic+0x2c9/0x710 [ 1884.595994][T21318] ? bpf_jit_dump+0xd0/0xd0 [ 1884.600540][T21318] check_panic_on_warn+0x80/0xa0 [ 1884.605608][T21318] __ubsan_handle_shift_out_of_bounds+0x37c/0x400 [ 1884.612104][T21318] pcl812_attach+0x1bc9/0x2340 [ 1884.616931][T21318] comedi_device_attach+0x515/0x650 [ 1884.622185][T21318] comedi_unlocked_ioctl+0x5ec/0xe90 [ 1884.627510][T21318] ? tomoyo_path_number_perm+0x4ae/0x600 [ 1884.633155][T21318] ? comedi_poll+0x8b0/0x8b0 [ 1884.637788][T21318] ? __fget_files+0x28/0x4d0 [ 1884.642418][T21318] ? bpf_lsm_file_ioctl+0x5/0x10 [ 1884.647396][T21318] ? security_file_ioctl+0x7c/0xa0 [ 1884.652545][T21318] ? comedi_poll+0x8b0/0x8b0 [ 1884.657174][T21318] __se_sys_ioctl+0xfa/0x170 [ 1884.661808][T21318] do_syscall_64+0x4c/0xa0 [ 1884.666262][T21318] ? clear_bhb_loop+0x60/0xb0 [ 1884.670981][T21318] ? clear_bhb_loop+0x60/0xb0 [ 1884.675695][T21318] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1884.681611][T21318] RIP: 0033:0x7f5147f8e9a9 [ 1884.686034][T21318] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1884.705670][T21318] RSP: 002b:00007f5148dae038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1884.714119][T21318] RAX: ffffffffffffffda RBX: 00007f51481b5fa0 RCX: 00007f5147f8e9a9 [ 1884.722129][T21318] RDX: 00002000000000c0 RSI: 0000000040946400 RDI: 0000000000000003 [ 1884.730141][T21318] RBP: 00007f5148010d69 R08: 0000000000000000 R09: 0000000000000000 [ 1884.738149][T21318] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1884.746152][T21318] R13: 0000000000000000 R14: 00007f51481b5fa0 R15: 00007ffd5bd23758 [ 1884.754182][T21318] [ 1884.757541][T21318] Kernel Offset: disabled [ 1884.761967][T21318] Rebooting in 86400 seconds..