last executing test programs: 12.142651579s ago: executing program 1 (id=954): mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000380)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0xc000}}) read$FUSE(r0, &(0x7f0000002300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f00000001c0)={0x50, 0x0, r1, {0x7, 0x27}}, 0x50) chmod(&(0x7f0000000080)='./file0\x00', 0x0) chmod(&(0x7f0000000040)='./file0\x00', 0x0) r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r3 = syz_io_uring_setup(0x19d3, &(0x7f00000003c0)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r3, 0xa3d, 0x0, 0x0, 0x0, 0xff39) ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, &(0x7f00000001c0)) readv(r2, &(0x7f0000000780)=[{&(0x7f0000000300)=""/196, 0xc4}], 0x1) syz_fuse_handle_req(r0, &(0x7f0000008340)="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", 0x2000, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) 11.643006129s ago: executing program 0 (id=963): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) io_setup(0x0, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffed850000006d000000a50000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f00000002c0)={0x3ff}, 0x0, 0x0) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) openat$capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$CAPI_GET_ERRCODE(0xffffffffffffffff, 0x80024321, &(0x7f0000000080)) bind$bt_sco(r0, &(0x7f0000000080)={0x1f, @none}, 0x8) listen(r0, 0x0) syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="04040a0000000000005467920034db81e7abdddc259aee6063e57dfee0dab308ac44bd02bae33aa428c21e8527c5b32e2c96d0a0d523936e2a0c48ae51b0aa0e1c020033fecccbc840318e1e0a7f7c0ff99ba1"], 0xd) bind$inet6(0xffffffffffffffff, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r4 = syz_open_dev$mouse(&(0x7f00000000c0), 0x7, 0x0) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000140)=@generic={&(0x7f0000000000)='./file0\x00', r4}, 0x18) getsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, 0x0, 0x0) syz_open_procfs(0x0, 0x0) syz_emit_vhci(0x0, 0x0) process_vm_readv(0x0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x36}, {&(0x7f00000003c0)=""/166, 0xa6}], 0x2, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x60}}, 0x0) 11.167488146s ago: executing program 1 (id=964): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x54, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}]}, 0x54}}, 0x0) 10.998940997s ago: executing program 1 (id=966): r0 = socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000200)) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) prlimit64(0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x1) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) r4 = accept$alg(0xffffffffffffffff, 0x0, 0x0) write$binfmt_script(r4, 0x0, 0x0) recvmmsg(r4, 0x0, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f00000006c0)=@abs, 0x6e, &(0x7f0000000640)=[{0x0}, {&(0x7f0000000300)}, {&(0x7f0000000440)}, {0x0}], 0x4, 0x0, 0x0, 0x80}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) syz_open_dev$vbi(0x0, 0x2, 0x2) ioctl$VIDIOC_S_INPUT(0xffffffffffffffff, 0xc0045627, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x3d8, 0x0, 0xffffffff, 0xffffffff, 0x220, 0xffffffff, 0x340, 0xffffffff, 0xffffffff, 0x340, 0xffffffff, 0x3, 0x0, {[{{@ip={@multicast1, @local, 0x0, 0x0, 'veth1_to_batadv\x00', 'wg1\x00'}, 0x0, 0x1f8, 0x220, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'vcan0\x00', {0x4386, 0x0, 0x6a, 0x0, 0x0, 0xfe5, 0x20}}}, @common=@unspec=@devgroup={{0x38}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@uncond, 0x0, 0xc0, 0x120, 0x0, {}, [@common=@osf={{0x50}, {'syz1\x00'}}]}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x438) 9.915179209s ago: executing program 1 (id=968): sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240), 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, 0x0) r2 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000680)=@newqdisc={0xffffffffffffff92, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffe0}, {0xfff1}, {0x0, 0x2}}}, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000007880)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000080)) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f00000003c0)=""/75, 0x0}) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f00000000c0)=0x4000000) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000200), 0x200, 0x0) r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r7, 0x3b85, &(0x7f0000000040)={0x28, 0x7, 0x0, 0x0, &(0x7f0000ff9000/0x7000)=nil, 0x7000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r7, 0x3ba0, &(0x7f00000001c0)={0x48}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r6, 0x3ba0, &(0x7f0000000340)={0x48}) r8 = dup(r5) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000000000)={0x0, r8}) mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000000)='./file0\x00', &(0x7f0000000240)='squashfs\x00', 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) 9.837082977s ago: executing program 0 (id=970): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000040)='ramfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000001e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x1) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000900)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@metacopy_on}]}) r1 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat$loop(r1, &(0x7f0000001600)='./bus\x00', 0xa68, 0x0) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000700)={{0x12, 0x1, 0x0, 0x2e, 0xb5, 0xbd, 0x40, 0xc45, 0x6025, 0x4112, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x9, 0xd7, 0x40}}]}}]}}, 0x0) bind$unix(r1, &(0x7f0000000280)=@abs={0x0, 0x0, 0x4e20}, 0x6e) syz_usb_control_io$hid(r2, 0x0, &(0x7f0000000380)={0x2c, &(0x7f00000001c0), 0x0, 0x0, 0x0, 0x0}) chdir(&(0x7f00000003c0)='./bus\x00') linkat(r1, &(0x7f0000000100)='./file1\x00', r1, &(0x7f0000000240)='./file0\x00', 0x0) rename(&(0x7f0000000180)='./file1\x00', &(0x7f0000000200)='./file0\x00') 8.050863125s ago: executing program 3 (id=975): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r0) sendmsg$NFC_CMD_DEV_UP(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x14, r1, 0x1}, 0x14}}, 0x0) 7.804478164s ago: executing program 3 (id=976): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x90) r0 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_SETUP_LINK(r0, 0x541b, 0x0) r1 = openat$ttynull(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TCSETSW(r1, 0x5403, 0x0) r2 = dup(0xffffffffffffffff) write$UHID_INPUT(r2, 0x0, 0x0) syz_emit_ethernet(0x5a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0380c200000008004e00004c0000000000069078ac141400ac1e00018317d2ac1e0001ac1414bbffffffffac1414aae00000014408050200000000440400000000000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5020000090780000"], 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000740)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(ecb-aes-aesni)\x00'}, 0x58) bind$alg(r3, &(0x7f0000000440)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4543(gcm_base(ctr(aes-aesni),ghash-generic))\x00'}, 0x58) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$inet_dccp(0x2, 0x6, 0x0) ioctl$sock_inet_SIOCDELRT(r5, 0x890c, &(0x7f0000000200)={0x0, {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x37}}, {0x2, 0x4e24, @loopback}, 0x4, 0x0, 0x0, 0x0, 0x800, &(0x7f0000000000)='netdevsim0\x00', 0x7, 0x2, 0x1}) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(twofish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r7 = accept4(r6, 0x0, 0x0, 0x0) recvmsg$kcm(r7, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000680)=""/233, 0x18a}, {&(0x7f0000000540)=""/161, 0xa1}], 0x2}, 0x0) sendmsg$alg(r7, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) sendmsg$nl_route_sched_retired(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000008180)=@newchain={0x43c, 0x64, 0x0, 0x0, 0x0, {}, [@f_rsvp={{0x9}, {0x40c, 0x2, [@TCA_RSVP_POLICE={0x408, 0x5, [@TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x69da]}]}]}}]}, 0x43c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000900000100000000000440000000000000000340000000030a010200000900000000000100fffc0900030073797a32000000101400042bd20002400000000096fd0140000000000900010073797a300000000060000000060a010400000000000000000100000008000b40000000000900010073797a3000000000380004802000018007000100727400001400028008000140000000150800024000000000140001800d00010073796e70726f787900000000000000001100010000000000000000000000000a"], 0xe8}, 0x1, 0x0, 0x0, 0x40800}, 0x0) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'authenc(michael_mic-generic,pcbc(fcrypt-generic))\x00'}, 0x58) 6.957431677s ago: executing program 0 (id=977): socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x2000077d, &(0x7f00000002c0)={0x2, 0x0, @local}, 0x10) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000000)={0x4, 0x0, &(0x7f00000003c0)=[@enter_looper], 0x0, 0x0, 0x0}) dup3(r3, r2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000400)="f1"}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000580)={0x10, 0x0, &(0x7f0000000640)=[@dead_binder_done, @exit_looper, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)={@fd, @fda, @fd}, &(0x7f0000000100)}}, @register_looper, @register_looper, @decrefs], 0xedff5dae6abcb3b9, 0x1000000000000, 0x0}) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) sendmmsg(r4, 0x0, 0x0, 0x0) setsockopt$inet_int(r4, 0x0, 0x8, &(0x7f0000000040), 0x4) close_range(r4, r3, 0x2) syz_emit_ethernet(0x248, &(0x7f0000000440)={@multicast, @remote, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x212, 0x11, 0x0, @empty, @mcast2, {[@dstopts={0x2f, 0x15, '\x00', [@generic={0xf, 0xad, "bafaef8606bc4f5292bf4fbc66132572d024d3072e990d7a926eb29654d7488be7a58aa1ac2149156321f4dd9799dfa978f9a75df4f0adbfab95811cdfa8475bfbf53cd45141454db09c853ac8f61bedf35737bb7aa454b94ba37db6f2a3c98641ecd68a221462c0e8d9f845977c9c262ea03bc2b30aed34c8c88c3d02c703c4caaa84707e586fc8f955cb2ace23c24acce65a35490899a02d50bda66c985c3fa19806807cf62a4733d28fbb0b"}]}, @dstopts={0x29, 0xa, '\x00', [@enc_lim={0x4, 0x1, 0x5}, @calipso={0x7, 0x20, {0x3, 0x6, 0x9, 0x0, [0x9, 0x24, 0x79fd]}}, @jumbo={0xc2, 0x4, 0x9}, @generic={0x81, 0x26, "a5510c14d2757f6d9caa54145da0b08de369ec8a300c3bece597b35cfe0e54964af3cc7a356f"}]}, @srh={0x29, 0x4, 0x4, 0x2, 0xe7, 0x0, 0x800, [@private1, @local]}], {0x0, 0xe22, 0xd2, 0x0, @gue={{0x2}, "9e830f40883eeca5efa1f20817ca9be787f5ff5f92f426330159b25b97d0892f68883bdff30d8869f7f60d54e365170eca15fcc174dd4be6525aba13e0ac6afe15e5e3e574444380bd663ab3798cb5f06a32c2ce55d7670b1dc9047b16078f1f770147afaf1c68bc0ca6c8650b646645dd12fe9a05a97b52b180cb280aa9271620baa496d77d4abdd2a5396e0e6d97f1fa94650253dd755a44d26969bd359aacb72604f3bb819cfa32d29cbc2091b4bc428aeffaf67a8f9f9689d31cd5bb0ce36643"}}}}}}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r5, &(0x7f0000001080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="28000000100001000000000000000000100000000c0000000000000000000000080031"], 0x28}], 0x1}, 0x0) ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0xc5) 6.323120713s ago: executing program 1 (id=978): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f0000000480)={0x0, r1}) r3 = syz_open_dev$video(&(0x7f0000000280), 0x7fffffffffffffff, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100007566cb20f80600b0c8cb0102030109021b0001000000000904000001ffb9ab000905", @ANYRESDEC], 0x0) ioctl$VIDIOC_G_CROP(r3, 0xc014563b, &(0x7f0000000080)={0x3}) recvmmsg(r0, 0x0, 0x0, 0x10022, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000800000"], &(0x7f0000000040)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0x0, 0xb}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x13, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000300)={'batadv_slave_1\x00'}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r5, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) read$FUSE(r6, &(0x7f0000004000)={0x2020}, 0x2020) open(0x0, 0x8060, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x12, 0x2e, 0x4, 0x2}, 0x48) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000000c0)={r7, &(0x7f0000000100)}, 0x20) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) 6.297228109s ago: executing program 3 (id=979): r0 = socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000200)) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) prlimit64(0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x1) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) r4 = accept$alg(0xffffffffffffffff, 0x0, 0x0) write$binfmt_script(r4, 0x0, 0x0) recvmmsg(r4, 0x0, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f00000006c0)=@abs, 0x6e, &(0x7f0000000640)=[{0x0}, {&(0x7f0000000300)}, {&(0x7f0000000440)}, {0x0}], 0x4, 0x0, 0x0, 0x80}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) syz_open_dev$vbi(0x0, 0x2, 0x2) ioctl$VIDIOC_S_INPUT(0xffffffffffffffff, 0xc0045627, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x3d8, 0x0, 0xffffffff, 0xffffffff, 0x220, 0xffffffff, 0x340, 0xffffffff, 0xffffffff, 0x340, 0xffffffff, 0x3, 0x0, {[{{@ip={@multicast1, @local, 0x0, 0x0, 'veth1_to_batadv\x00', 'wg1\x00'}, 0x0, 0x1f8, 0x220, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'vcan0\x00', {0x4386, 0x0, 0x6a, 0x0, 0x0, 0xfe5, 0x20}}}, @common=@unspec=@devgroup={{0x38}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@uncond, 0x0, 0xc0, 0x120, 0x0, {}, [@common=@osf={{0x50}, {'syz1\x00'}}]}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x438) 5.235051507s ago: executing program 3 (id=982): r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0x2b, 0x0, &(0x7f0000000080)) 5.205669536s ago: executing program 0 (id=983): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000a40)={0x48, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x48}}, 0x0) 5.082530926s ago: executing program 0 (id=986): mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@metacopy_on}]}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r1 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat$loop(r1, &(0x7f0000001600)='./file1\x00', 0x0, 0x0) chdir(&(0x7f0000000140)='./bus\x00') link(&(0x7f0000000200)='./file1\x00', &(0x7f0000000300)='./bus\x00') linkat(r0, &(0x7f0000000100)='./file1\x00', r1, &(0x7f0000000240)='./file0\x00', 0x0) r2 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r2, &(0x7f0000001fc0)=""/182, 0xb6) 5.065215057s ago: executing program 3 (id=987): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1a, 0x4, 0x0, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x48) 5.020372116s ago: executing program 2 (id=988): bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x15, 0x8, 0x0, 0x0, 0x4c}, 0x48) 4.939835129s ago: executing program 3 (id=989): sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240), 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, 0x0) r2 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000680)=@newqdisc={0xffffffffffffff92, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffe0}, {0xfff1}, {0x0, 0x2}}}, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000007880)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000080)) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f00000003c0)=""/75, 0x0}) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f00000000c0)=0x4000000) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000200), 0x200, 0x0) r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r7, 0x3b85, &(0x7f0000000040)={0x28, 0x7, 0x0, 0x0, &(0x7f0000ff9000/0x7000)=nil, 0x7000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r7, 0x3ba0, &(0x7f00000001c0)={0x48}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r6, 0x3ba0, &(0x7f0000000340)={0x48}) r8 = dup(r5) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000000000)={0x0, r8}) mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000000)='./file0\x00', &(0x7f0000000240)='squashfs\x00', 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) 4.938336638s ago: executing program 4 (id=990): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00'}, 0x90) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000002c0)='bdi_dirty_ratelimit\x00', r1}, 0x10) r3 = gettid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={r3, r2, 0x0, 0x0, 0xfffffffffffffffe}, 0x30) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CIDR={0x5}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x7f}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}]}, 0x58}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[], 0x7c}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)={0x1f0, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME={0x1d3, 0x33, @beacon={{{}, {}, @device_a, @broadcast, @random="90e488f9971a"}, 0x0, @random, 0x0, @void, @void, @val={0x3, 0x1}, @val={0x4, 0x6}, @void, @void, @void, @val={0x2a, 0x1}, @void, @void, @val={0x72, 0x6}, @void, @val={0x76, 0x6}, [{0xdd, 0xe1, "4f2a899e94bcf0613609929460dda7b3421f2af277170aab1eef1bc7a6bad283ec72e75c78d8f4f30f5e2ee79daf8ece54852b5b93eabb5832b001d39227230802e601a7f9749d370367565ddb88a137c4572cce24103d4337027917c48d29a1860dad1f99fe412ea5a5eff0a43812f63ec34a05279e6dc25839f828e60b01f9b6a65bf411101d89dc154716566458aa4111340a6d895801f8d51908b9bdd47762550f4ee51c8a3f64cfe2f8b701e79d393a957fa4e3e620099b226f683280ec0f5d85f9c59d29d9159126c9f114d0e08f17f96e4757dd81825d8f432246cdb8ab"}, {0xdd, 0x35, "5dad8ac12f96664d51c30bd3379c2d305630cd93fec0b4249d429b451f52399f26b866650e0e9464949a974045190fa9251c8b6aac"}, {0xdd, 0x71, "83534cd40fda26eabadf3814f88fa9c5d39124ac6ffcf2583cbdd58fa0969b3e6783c46ed2318e977c080347f36fa8d773079f6224521c4c8b10e4a9454bece9457b66b239a7eaff140a8d9131349399c804bb1a81f829c6ab11af5cfe8df9f59ec093d26c17fe50bb0550d71068d16276"}]}}]}, 0x1f0}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000680)=ANY=[@ANYBLOB="98030000", @ANYRES16=r6, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r8, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff"], 0x398}}, 0x0) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000000000000000000000002007bfe779ad96b1c00"], &(0x7f0000000100)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r9}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000980)='sys_exit\x00', r10}, 0x10) bind$alg(0xffffffffffffffff, &(0x7f0000000040)={0x26, 'aead\x00', 0x0, 0x0, 'morus1280\x00'}, 0x58) r11 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$bt_hci(r11, &(0x7f0000000000)={0x27}, 0x62) listen(r11, 0x0) accept4(r11, 0x0, 0x0, 0x0) close(0xffffffffffffffff) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r12, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000380)=@newtaction={0x6c, 0x30, 0xb, 0x0, 0x0, {}, [{0x58, 0x1, [@m_ct={0x54, 0x1, 0x0, 0x0, {{0x7}, {0x2c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xfffffffe}}, @TCA_CT_ACTION={0x6, 0x3, 0x14}, @TCA_CT_MARK={0x8, 0x5, 0x200}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x6c}}, 0x0) r13 = socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_DAT_CACHE(r13, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r14, 0x305, 0x0, 0x0, {0xb}}, 0x14}}, 0x0) 4.816507877s ago: executing program 0 (id=991): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @random="337f830260be"}) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r1, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x7, 0x0, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000740), 0x75, r3}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10) close(r0) 4.816378007s ago: executing program 2 (id=992): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) uname(&(0x7f0000000000)) 4.716271313s ago: executing program 2 (id=993): openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x41, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000180)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x2816c00}}, 0x50) syz_fuse_handle_req(r0, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x1c1401, 0x0) ftruncate(r2, 0x0) close(r0) 4.658067902s ago: executing program 4 (id=994): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a00000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) writev(r0, &(0x7f0000000780)=[{&(0x7f00000003c0)="0e000000", 0x4}, {&(0x7f00000006c0), 0x1000000}], 0x2) 696.554177ms ago: executing program 2 (id=995): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_MMAP_OFFSETS(r1, 0x11b, 0x2, 0x0, &(0x7f00000002c0)) 688.412328ms ago: executing program 4 (id=996): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000a40)={0x48, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x48}}, 0x0) 430.521507ms ago: executing program 2 (id=997): r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0x2b, 0x0, &(0x7f0000000080)) 405.710342ms ago: executing program 1 (id=998): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_open_procfs(0x0, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$IOMMU_DESTROY$ioas(0xffffffffffffffff, 0x3b80, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000003380)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x7}, 0x48) r3 = socket$kcm(0x29, 0x5, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000100)=0x100000001, 0x4) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmmsg$inet(r3, &(0x7f0000008dc0)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000540)="888303263a9e1cd1b50fc2efc626709c96bcab98beeaa9077149fd4ffeb7b7859b0a68c39e8881cab4fdf65d791358ed734acb07149c487b4f50c5f917139e9ddd44ad39181491d09461f20f51503283b41f6018eb59e878178075bbae9936080a53e68b3cabbb85ca082bf489fa6b1abd74c346ff049623fa21722d20463695f81a234de702e58d0b7a3fcd183be373c73e607e8cfe2b65abd2cc3b97daca65b674bbd651de2ace292d1db665ae1bd9575bfd33675399566e7c5c56d3d7232a307b496f311ca8d3d15ec4c824ed0f4a672c6855c86e0d8d2ec8291a82a3f15e2cce9e", 0xe3}, {&(0x7f0000000200)="c0ce26486d164b431db4444094be80f5dfee9ba9a65a4d50b8f83f2a9024e5586a614f02b063595a8172c55e67c5d085c9bf44d4ac2cb536f9dd56007c79", 0x3e}], 0x2}}, {{0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f00000006c0)="9de6d3750349c2f3847fa4a05f94adb3d21fc68c161aea97b382463136de885846c0513c1d9af3f721cad5a7a753816b79e9af459a7719536932401f194b7c3cdd1b9f5b281e875b96304c31f9aa021642552f18aa7d269bceb614a8895c589cebc5deea722bc9efaf97ab2f098d99b96210c991e8496eae1a0558cc759f3886cc735c0cea5119c10be69068addbd4986f7a7b503ff93af91dd3d173d20ea095e56d3b9bf62b6d547efc4b5cf94bd633ef418ece871a5bdb42ffb27661c222754bbb333c1e65ec05855be1243417f27d30c5e7", 0xd8}, {&(0x7f00000002c0)="468acdb4e4cf0427161e4b334f4c94ebd825850e7c132a1217aa3b5547f1dcc73efdc575d16f90985e478231fe76ee24fcfe9799497db0cbe5954acded7a24622c2463bae7529c05a6c81e33ee93869fd7c57feff17c9cd809b1be241edcede17e4643efc8c2baed1e2442f3a236fe60e4685d2971077e625dce6f0b6c216ffcebecd763c39e87eb641e7046dd68949acc02", 0x88}, {&(0x7f0000000880)="52a67f4b2e3245fb", 0xfffffee6}, {&(0x7f00000008c0)="910173d811a77377207b361dd63bd456ea8e58a1e55699c4fd0206e27161045d62989959f8fa93a3437f4a33e558ce924e3be64fd73c92b733b2c178599b60cf9f37b97362210516665be1e110544d2a87c7750450a6a73dea6172b7d97667050fb8309ed2a18f0b5f4895684e", 0x6d}, {&(0x7f0000001500)="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", 0xd0b}], 0x5}}], 0x2, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000bc0)=0x1, 0x4) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f00000001c0)={r4, r2}) write(r3, 0x0, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)=@newae={0x5c, 0x1e, 0x468bbc8229e18b43, 0x0, 0x0, {{}, @in6=@empty}, [@replay_esn_val={0x1c}]}, 0x5c}}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x200000005c832, 0xffffffffffffffff, 0x0) syz_clone(0x20003000, 0x0, 0x0, 0x0, 0x0, 0x0) 361.876757ms ago: executing program 4 (id=999): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1a, 0x4, 0x0, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x48) 267.221059ms ago: executing program 2 (id=1000): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7fffffff}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, 0x0) read(0xffffffffffffffff, 0x0, 0x0) flock(0xffffffffffffffff, 0x2) r5 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) flock(r5, 0x1) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000200)='ext4_sync_file_enter\x00', r7}, 0x10) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000200)='ext4_sync_file_enter\x00', r8}, 0x10) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x100002, 0x0) write$cgroup_int(r9, &(0x7f0000000200), 0x43451) flock(r5, 0x1) flock(0xffffffffffffffff, 0x1) write$binfmt_script(r3, 0x0, 0xb) write$binfmt_misc(r4, 0x0, 0xfdef) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = io_uring_setup(0x4c20, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1}) dup3(r10, r11, 0x0) splice(r2, 0x0, r4, 0x0, 0x80, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) 139.906247ms ago: executing program 4 (id=1001): r0 = fsopen(&(0x7f0000000080)='gadgetfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, &(0x7f0000000000)='dirsync\x00', &(0x7f0000000140)="b1", 0x1) 0s ago: executing program 4 (id=1002): mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@metacopy_on}]}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r1 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat$loop(r1, &(0x7f0000001600)='./file1\x00', 0x0, 0x0) chdir(&(0x7f0000000140)='./bus\x00') link(&(0x7f0000000200)='./file1\x00', &(0x7f0000000300)='./bus\x00') linkat(r0, &(0x7f0000000100)='./file1\x00', r1, &(0x7f0000000240)='./file0\x00', 0x0) r2 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r2, &(0x7f0000001fc0)=""/182, 0xb6) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.84' (ED25519) to the list of known hosts. [ 69.550267][ T5074] cgroup: Unknown subsys name 'net' [ 69.664324][ T5074] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 71.375432][ T5074] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 71.777743][ T1250] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.785019][ T1250] ieee802154 phy1 wpan1: encryption failed: -22 [ 73.679833][ T5086] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 73.688554][ T5086] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 73.707641][ T53] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 73.715694][ T53] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 73.724365][ T5088] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 73.732929][ T5088] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 73.753603][ T53] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 73.762285][ T53] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 73.766013][ T5088] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 73.777992][ T5088] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 73.795282][ T5094] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 73.802794][ T5094] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 73.813280][ T5086] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 73.822512][ T5094] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 73.836287][ T5094] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 73.847075][ T5094] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 73.856928][ T5094] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 73.864356][ T5094] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 73.873831][ T5090] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 73.885062][ T5090] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 73.893127][ T5090] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 73.906831][ T5086] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 73.915508][ T5094] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 73.922900][ T5094] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 73.990720][ T53] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 74.004839][ T53] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 74.013631][ T53] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 74.021870][ T53] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 74.046600][ T53] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 74.065492][ T53] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 74.379094][ T5087] chnl_net:caif_netlink_parms(): no params data found [ 74.576093][ T5083] chnl_net:caif_netlink_parms(): no params data found [ 74.615366][ T5087] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.623064][ T5087] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.632970][ T5087] bridge_slave_0: entered allmulticast mode [ 74.641108][ T5087] bridge_slave_0: entered promiscuous mode [ 74.681064][ T5087] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.689718][ T5087] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.699955][ T5087] bridge_slave_1: entered allmulticast mode [ 74.707540][ T5087] bridge_slave_1: entered promiscuous mode [ 74.803897][ T5091] chnl_net:caif_netlink_parms(): no params data found [ 74.829116][ T5087] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 74.843057][ T5087] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 74.867104][ T5092] chnl_net:caif_netlink_parms(): no params data found [ 74.949410][ T5083] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.956830][ T5083] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.964051][ T5083] bridge_slave_0: entered allmulticast mode [ 74.971923][ T5083] bridge_slave_0: entered promiscuous mode [ 75.011428][ T5087] team0: Port device team_slave_0 added [ 75.028599][ T5083] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.035907][ T5083] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.043057][ T5083] bridge_slave_1: entered allmulticast mode [ 75.050488][ T5083] bridge_slave_1: entered promiscuous mode [ 75.089685][ T5087] team0: Port device team_slave_1 added [ 75.166530][ T5099] chnl_net:caif_netlink_parms(): no params data found [ 75.179200][ T5087] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.186208][ T5087] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.212283][ T5087] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 75.235504][ T5083] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.248583][ T5083] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.284029][ T5087] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 75.292072][ T5087] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.318234][ T5087] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 75.359497][ T5091] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.367040][ T5091] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.374231][ T5091] bridge_slave_0: entered allmulticast mode [ 75.382115][ T5091] bridge_slave_0: entered promiscuous mode [ 75.445327][ T5091] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.452525][ T5091] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.460600][ T5091] bridge_slave_1: entered allmulticast mode [ 75.468916][ T5091] bridge_slave_1: entered promiscuous mode [ 75.517832][ T5083] team0: Port device team_slave_0 added [ 75.559250][ T5091] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.571838][ T5091] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.581410][ T5092] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.589535][ T5092] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.597030][ T5092] bridge_slave_0: entered allmulticast mode [ 75.604053][ T5092] bridge_slave_0: entered promiscuous mode [ 75.613596][ T5083] team0: Port device team_slave_1 added [ 75.649849][ T5087] hsr_slave_0: entered promiscuous mode [ 75.658616][ T5087] hsr_slave_1: entered promiscuous mode [ 75.691111][ T5092] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.698549][ T5092] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.706431][ T5092] bridge_slave_1: entered allmulticast mode [ 75.713477][ T5092] bridge_slave_1: entered promiscuous mode [ 75.750307][ T5091] team0: Port device team_slave_0 added [ 75.759719][ T5091] team0: Port device team_slave_1 added [ 75.791852][ T5083] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.799060][ T5083] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.825289][ T5083] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 75.839192][ T5083] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 75.846300][ T5083] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.856459][ T5094] Bluetooth: hci1: command tx timeout [ 75.877841][ T53] Bluetooth: hci0: command tx timeout [ 75.878294][ T5083] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 75.895871][ T5099] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.903043][ T5099] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.910457][ T5099] bridge_slave_0: entered allmulticast mode [ 75.918276][ T5099] bridge_slave_0: entered promiscuous mode [ 75.945491][ T5094] Bluetooth: hci2: command tx timeout [ 75.959038][ T5092] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.971827][ T5092] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.002409][ T5099] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.013165][ T5099] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.020633][ T5099] bridge_slave_1: entered allmulticast mode [ 76.026690][ T5094] Bluetooth: hci3: command tx timeout [ 76.033761][ T5099] bridge_slave_1: entered promiscuous mode [ 76.094809][ T5094] Bluetooth: hci4: command tx timeout [ 76.121165][ T5091] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.128668][ T5091] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.154754][ T5091] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.186363][ T5083] hsr_slave_0: entered promiscuous mode [ 76.193165][ T5083] hsr_slave_1: entered promiscuous mode [ 76.199807][ T5083] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 76.208114][ T5083] Cannot create hsr debugfs directory [ 76.229694][ T5099] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.245505][ T5091] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.262108][ T5091] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.288454][ T5091] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.311094][ T5092] team0: Port device team_slave_0 added [ 76.320835][ T5092] team0: Port device team_slave_1 added [ 76.331243][ T5099] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.414184][ T5092] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.421449][ T5092] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.448527][ T5092] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.486064][ T5099] team0: Port device team_slave_0 added [ 76.530548][ T5092] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.537582][ T5092] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.563728][ T5092] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.602844][ T5099] team0: Port device team_slave_1 added [ 76.626684][ T5091] hsr_slave_0: entered promiscuous mode [ 76.633328][ T5091] hsr_slave_1: entered promiscuous mode [ 76.639949][ T5091] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 76.647960][ T5091] Cannot create hsr debugfs directory [ 76.775270][ T5099] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.782253][ T5099] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.808388][ T5099] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.821839][ T5099] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.828947][ T5099] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.855770][ T5099] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.943451][ T5092] hsr_slave_0: entered promiscuous mode [ 76.951897][ T5092] hsr_slave_1: entered promiscuous mode [ 76.959004][ T5092] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 76.966803][ T5092] Cannot create hsr debugfs directory [ 77.049650][ T5099] hsr_slave_0: entered promiscuous mode [ 77.056948][ T5099] hsr_slave_1: entered promiscuous mode [ 77.063111][ T5099] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 77.070777][ T5099] Cannot create hsr debugfs directory [ 77.190340][ T5087] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 77.204392][ T5087] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 77.236941][ T5087] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 77.271217][ T5087] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 77.438790][ T5083] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 77.451204][ T5083] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 77.482344][ T5083] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 77.493091][ T5083] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 77.614497][ T5092] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 77.640990][ T5092] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 77.651511][ T5092] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 77.677795][ T5092] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 77.753975][ T5091] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 77.774474][ T5091] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 77.800578][ T5087] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.819285][ T5091] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 77.831888][ T5091] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 77.903197][ T5087] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.934100][ T5099] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 77.941631][ T5094] Bluetooth: hci1: command tx timeout [ 77.947307][ T53] Bluetooth: hci0: command tx timeout [ 77.977869][ T5099] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 77.990337][ T5099] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 78.008931][ T5136] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.016421][ T5136] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.025477][ T5094] Bluetooth: hci2: command tx timeout [ 78.042359][ T5099] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 78.082575][ T5093] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.089768][ T5093] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.097948][ T5094] Bluetooth: hci3: command tx timeout [ 78.175814][ T5094] Bluetooth: hci4: command tx timeout [ 78.362258][ T5092] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.398665][ T5083] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.410360][ T5099] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.484304][ T5083] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.510194][ T5099] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.549726][ T5091] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.571154][ T5136] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.578372][ T5136] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.597063][ T5136] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.604176][ T5136] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.616116][ T5136] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.623281][ T5136] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.632766][ T5136] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.639907][ T5136] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.671765][ T5092] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.693821][ T5091] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.768908][ T5093] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.776147][ T5093] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.787636][ T5093] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.794938][ T5093] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.806222][ T5093] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.813379][ T5093] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.832800][ T5087] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.899169][ T5136] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.906425][ T5136] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.014074][ T5091] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 79.122668][ T5087] veth0_vlan: entered promiscuous mode [ 79.250111][ T5099] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.280837][ T5087] veth1_vlan: entered promiscuous mode [ 79.463628][ T5099] veth0_vlan: entered promiscuous mode [ 79.502367][ T5087] veth0_macvtap: entered promiscuous mode [ 79.539110][ T5087] veth1_macvtap: entered promiscuous mode [ 79.582590][ T5099] veth1_vlan: entered promiscuous mode [ 79.620326][ T5092] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.643746][ T5087] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.654484][ T5091] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.682431][ T5087] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.718154][ T5083] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.737197][ T5087] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.747683][ T5087] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.756854][ T5087] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.766095][ T5087] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.859586][ T5092] veth0_vlan: entered promiscuous mode [ 79.880715][ T5092] veth1_vlan: entered promiscuous mode [ 79.889625][ T5099] veth0_macvtap: entered promiscuous mode [ 79.910133][ T5091] veth0_vlan: entered promiscuous mode [ 79.940895][ T5099] veth1_macvtap: entered promiscuous mode [ 80.001776][ T5091] veth1_vlan: entered promiscuous mode [ 80.025069][ T5094] Bluetooth: hci1: command tx timeout [ 80.030552][ T5094] Bluetooth: hci0: command tx timeout [ 80.095149][ T5094] Bluetooth: hci2: command tx timeout [ 80.097527][ T5099] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.111761][ T5099] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.131205][ T5099] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.141811][ T1044] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.155675][ T1044] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.174745][ T5094] Bluetooth: hci3: command tx timeout [ 80.193802][ T5099] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.205230][ T5099] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.217973][ T5099] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.227114][ T5092] veth0_macvtap: entered promiscuous mode [ 80.254796][ T5094] Bluetooth: hci4: command tx timeout [ 80.270106][ T5099] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.279233][ T5099] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.288379][ T5099] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.297315][ T5099] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.316872][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.320686][ T5091] veth0_macvtap: entered promiscuous mode [ 80.332416][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.352803][ T5092] veth1_macvtap: entered promiscuous mode [ 80.371972][ T5091] veth1_macvtap: entered promiscuous mode [ 80.447014][ T5091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.477243][ T5091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.493957][ T5091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.505451][ T5091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.517431][ T5091] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.533650][ T5091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.544321][ T5091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.558454][ T5091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.569163][ T5091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.581350][ T5091] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.641888][ T5091] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.672497][ T5091] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.682821][ T5091] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.691745][ T5091] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.720305][ T5092] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.730976][ T5092] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.741240][ T5092] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.753606][ T5092] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.770656][ T5092] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.781309][ T5092] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.802936][ T5092] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.852326][ T5083] veth0_vlan: entered promiscuous mode [ 80.930404][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.958725][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.026318][ T5092] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.054032][ T5092] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.082198][ T5092] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.103987][ T5092] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.115074][ T5092] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.128884][ T5092] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.141721][ T5092] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.218457][ T5092] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.229273][ T5092] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.247084][ T5092] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.257819][ T5092] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.328882][ T5083] veth1_vlan: entered promiscuous mode [ 81.348422][ T2803] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.359555][ T2803] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.500425][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.521507][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.651612][ T5083] veth0_macvtap: entered promiscuous mode [ 81.753635][ T5083] veth1_macvtap: entered promiscuous mode [ 81.779669][ T1044] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.823064][ T1044] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.965898][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.980592][ T5083] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.997095][ T5083] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.999712][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.007653][ T5083] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.032841][ T0] NOHZ tick-stop error: local softirq work is pending, handler #41!!! [ 82.055027][ T5083] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.066089][ T5083] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.079021][ T5083] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.091528][ T5083] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.106889][ T53] Bluetooth: hci1: command tx timeout [ 82.114885][ T929] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 82.123316][ T5094] Bluetooth: hci0: command tx timeout [ 82.129286][ T5083] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.146700][ T5083] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.161171][ T5083] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.171905][ T5083] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.182940][ T5094] Bluetooth: hci2: command tx timeout [ 82.189923][ T5083] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.200509][ T5083] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.210413][ T5083] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.225663][ T5083] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.236659][ T5083] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.250345][ T5083] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.260628][ T5094] Bluetooth: hci3: command tx timeout [ 82.270572][ T5083] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.336358][ T5094] Bluetooth: hci4: command tx timeout [ 82.367535][ T929] usb 3-1: New USB device found, idVendor=0403, idProduct=da73, bcdDevice=dc.8d [ 82.372711][ T5083] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.385922][ T929] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.406843][ T929] usb 3-1: config 0 descriptor?? [ 82.427931][ T929] usb 3-1: NDI device with a latency value of 1 [ 82.483596][ T5083] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.525043][ T5083] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.572953][ T5083] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.601091][ T1044] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.610671][ T1044] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.623593][ T5182] netlink: 'syz.1.7': attribute type 6 has an invalid length. [ 82.643368][ T929] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 82.676883][ T929] ftdi_sio ttyUSB0: unknown device type: 0xdc8d [ 82.746448][ T929] usb 3-1: USB disconnect, device number 2 [ 82.766560][ T929] ftdi_sio 3-1:0.0: device disconnected [ 82.814895][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 82.894986][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 82.910596][ T5184] netlink: 'syz.1.8': attribute type 1 has an invalid length. [ 83.065392][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 83.117032][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 83.126692][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 83.140461][ T5188] netlink: 16 bytes leftover after parsing attributes in process `syz.1.9'. [ 83.259275][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.297959][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.481512][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.520950][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.167075][ T5209] netlink: 'syz.2.16': attribute type 6 has an invalid length. [ 84.515921][ T5093] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 84.635589][ T5218] netlink: 'syz.2.18': attribute type 1 has an invalid length. [ 84.784865][ T5093] usb 5-1: Using ep0 maxpacket: 16 [ 84.820676][ T5093] usb 5-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=59.31 [ 84.911249][ T5093] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 84.964471][ T5221] netlink: 16 bytes leftover after parsing attributes in process `syz.3.19'. [ 84.975348][ T5093] usb 5-1: Product: syz [ 84.979568][ T5093] usb 5-1: Manufacturer: syz [ 85.026768][ T5093] usb 5-1: SerialNumber: syz [ 85.060315][ T5093] usb 5-1: config 0 descriptor?? [ 85.101707][ T5093] usb 5-1: no audio or video endpoints found [ 85.122482][ T5093] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 85.333881][ T5229] capability: warning: `syz.2.23' uses deprecated v2 capabilities in a way that may be insecure [ 85.394381][ T5229] program syz.2.23 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 85.572331][ T5233] sp0: Synchronizing with TNC [ 85.704594][ T5236] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 87.153481][ T9] cfg80211: failed to load regulatory.db [ 87.544847][ T58] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 87.600558][ T5093] usb 5-1: USB disconnect, device number 2 [ 87.660601][ T45] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 87.797486][ T58] usb 1-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 87.833767][ T58] usb 1-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 87.864254][ T58] usb 1-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 87.875077][ T45] usb 2-1: Using ep0 maxpacket: 32 [ 87.903123][ T45] usb 2-1: config index 0 descriptor too short (expected 26, got 18) [ 87.913036][ T58] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.929210][ T45] usb 2-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 87.976021][ T45] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.017100][ T45] usb 2-1: config 0 descriptor?? [ 88.050242][ T45] as10x_usb: device has been detected [ 88.078432][ T5285] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 88.083909][ T45] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 88.145081][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 88.173335][ T45] usb 2-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 88.323906][ T45] as10x_usb: error during firmware upload part1 [ 88.333444][ T5290] syz.4.48: attempt to access beyond end of device [ 88.333444][ T5290] nbd4: rw=2048, sector=2, nr_sectors = 1 limit=0 [ 88.349122][ T5290] hfsplus: unable to find HFS+ superblock [ 88.391909][ T45] Registered device nBox DVB-T Dongle [ 88.445717][ T5295] zonefs (nbd4) ERROR: Not a zoned block device [ 89.215740][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 89.637825][ T58] aiptek 1-1:17.0: Aiptek using 400 ms programming speed [ 89.706842][ T0] NOHZ tick-stop error: local softirq work is pending, handler #48!!! [ 89.786757][ T58] input: Aiptek as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:17.0/input/input5 [ 90.836269][ T58] input: failed to attach handler kbd to device input5, error: -5 [ 90.935677][ T58] usb 1-1: USB disconnect, device number 2 [ 90.977815][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 92.943537][ T5176] usb 2-1: USB disconnect, device number 2 [ 93.022058][ T5176] Unregistered device nBox DVB-T Dongle [ 93.034915][ T5176] as10x_usb: device has been disconnected [ 95.107683][ T5338] netlink: 'syz.0.63': attribute type 10 has an invalid length. [ 95.180224][ T5338] team0: Device ipvlan1 failed to register rx_handler [ 95.704780][ T58] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 95.924971][ T58] usb 5-1: Using ep0 maxpacket: 32 [ 95.951781][ T58] usb 5-1: config index 0 descriptor too short (expected 26, got 18) [ 95.964418][ T58] usb 5-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 95.975320][ T58] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.997186][ T58] usb 5-1: config 0 descriptor?? [ 96.079425][ T58] as10x_usb: device has been detected [ 96.108684][ T58] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 96.176249][ T58] usb 5-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 96.253044][ T58] as10x_usb: error during firmware upload part1 [ 96.288560][ T58] Registered device nBox DVB-T Dongle [ 96.620148][ T5391] pim6reg: entered allmulticast mode [ 96.677234][ T5394] pim6reg: left allmulticast mode [ 97.729796][ T5410] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.88'. [ 98.105198][ T8] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 98.280647][ T5426] syz.1.96: attempt to access beyond end of device [ 98.280647][ T5426] nbd1: rw=2048, sector=2, nr_sectors = 1 limit=0 [ 98.330024][ T5426] hfsplus: unable to find HFS+ superblock [ 98.336339][ T8] usb 4-1: Using ep0 maxpacket: 16 [ 98.346391][ T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 98.373367][ T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 98.385549][ T5426] zonefs (nbd1) ERROR: Not a zoned block device [ 98.420287][ T8] usb 4-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 98.450038][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.528722][ T8] usb 4-1: config 0 descriptor?? [ 98.864020][ T5435] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 99.174063][ T5417] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 99.255409][ T5417] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 99.440922][ T8] hid-generic 0003:0158:0100.0001: unknown main item tag 0x1 [ 99.467224][ T8] hid-generic 0003:0158:0100.0001: unexpected long global item [ 99.496688][ T8] hid-generic 0003:0158:0100.0001: probe with driver hid-generic failed with error -22 [ 99.691659][ T5441] 9pnet_fd: Insufficient options for proto=fd [ 99.711245][ T58] usb 4-1: USB disconnect, device number 2 [ 99.722473][ T8] usb 5-1: USB disconnect, device number 3 [ 99.797930][ T8] Unregistered device nBox DVB-T Dongle [ 99.805704][ T8] as10x_usb: device has been disconnected [ 100.017963][ T5447] batadv0: mtu less than device minimum [ 100.616459][ T5465] netlink: 212 bytes leftover after parsing attributes in process `syz.4.108'. [ 101.985540][ T29] audit: type=1326 audit(1720665686.043:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5485 comm="syz.1.118" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbd3d575bd9 code=0x0 [ 102.066992][ T5490] pim6reg: entered allmulticast mode [ 102.148779][ T5490] pim6reg: left allmulticast mode [ 102.418812][ T5500] 9pnet_fd: Insufficient options for proto=fd [ 102.675785][ T5509] batadv0: mtu less than device minimum [ 103.313534][ T5530] cifs: Unknown parameter ')‚¹‚7¾±›!ëœ?È¿t7¯BôÜ2Ò‡ÌZ|[þHW]Æ áW× +xkÌ–«‡å>FßTFÞ2]Rìusô-´\}Ì.ë¹p&Nè¤?þæ6Ûw¶Û¾{ÁAi ´…¿:”smOMóe‘båhµp…b0Z¸‹7 ³º6Ý(í' [ 103.336995][ T5528] Zero length message leads to an empty skb [ 103.750701][ T5533] kvm: kvm [5532]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0x11e) = 0xbe702111 [ 105.678676][ T5573] Driver unsupported XDP return value 0 on prog (id 14) dev N/A, expect packet loss! [ 106.504218][ T5589] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 106.988606][ T29] audit: type=1326 audit(1720665690.853:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5580 comm="syz.2.151" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f937cd75bd9 code=0x0 [ 107.704979][ T5604] Bluetooth: MGMT ver 1.22 [ 107.762786][ T5604] bridge0: entered promiscuous mode [ 107.789035][ T5603] bridge0: left promiscuous mode [ 107.843958][ T5598] kvm: kvm [5596]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0x11e) = 0xbe702111 [ 108.334708][ T58] usb 5-1: new low-speed USB device number 4 using dummy_hcd [ 108.547099][ T58] usb 5-1: config 32 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 10 [ 108.580822][ T5634] netlink: 212 bytes leftover after parsing attributes in process `syz.1.169'. [ 108.598120][ T58] usb 5-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 108.622548][ T58] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.887291][ T58] usb 5-1: string descriptor 0 read error: -71 [ 108.937959][ T58] hub 5-1:32.0: USB hub found [ 108.960167][ T58] hub 5-1:32.0: config failed, can't read hub descriptor (err -22) [ 109.205184][ T58] usb 5-1: USB disconnect, device number 4 [ 109.553367][ T5098] udevd[5098]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:32.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 111.090214][ T5657] syz.1.174: attempt to access beyond end of device [ 111.090214][ T5657] nbd1: rw=0, sector=6, nr_sectors = 2 limit=0 [ 111.103552][ T5657] ADFS-fs (nbd1): error: unable to read block 3, try 0 [ 113.048752][ T58] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 113.272428][ T58] usb 2-1: Using ep0 maxpacket: 32 [ 113.302114][ T58] usb 2-1: config 0 has an invalid interface number: 198 but max is 0 [ 113.346651][ T58] usb 2-1: config 0 contains an unexpected descriptor of type 0x1, skipping [ 113.395758][ T58] usb 2-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 113.448169][ T58] usb 2-1: config 0 has an invalid descriptor of length 1, skipping remainder of the config [ 113.500603][ T58] usb 2-1: config 0 has no interface number 0 [ 113.533694][ T58] usb 2-1: config 0 interface 198 altsetting 0 endpoint 0x8B has an invalid bInterval 31, changing to 8 [ 113.602005][ T58] usb 2-1: config 0 interface 198 altsetting 0 endpoint 0x9 has invalid maxpacket 512, setting to 64 [ 113.653965][ T58] usb 2-1: config 0 interface 198 altsetting 0 has a duplicate endpoint with address 0xF, skipping [ 113.719763][ T58] usb 2-1: config 0 interface 198 altsetting 0 has 6 endpoint descriptors, different from the interface descriptor's value: 8 [ 113.798982][ T58] usb 2-1: New USB device found, idVendor=066f, idProduct=8000, bcdDevice= 0.01 [ 113.822867][ T58] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.865736][ T58] usb 2-1: Product: syz [ 113.869984][ T58] usb 2-1: Manufacturer: syz [ 113.894992][ T58] usb 2-1: SerialNumber: syz [ 113.926716][ T58] usb 2-1: config 0 descriptor?? [ 113.955795][ T58] usb-storage 2-1:0.198: USB Mass Storage device detected [ 114.213613][ T58] usb-storage 2-1:0.198: Quirks match for vid 066f pid 8000: 10 [ 114.492249][ T5093] IPVS: starting estimator thread 0... [ 114.751724][ T5683] IPVS: using max 16 ests per chain, 38400 per kthread [ 115.046251][ T58] usb 2-1: USB disconnect, device number 3 [ 117.397451][ T58] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 117.620181][ T58] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 117.649625][ T58] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.685774][ T58] usb 5-1: config 0 descriptor?? [ 118.533534][ T8] IPVS: starting estimator thread 0... [ 118.698180][ T5719] IPVS: using max 17 ests per chain, 40800 per kthread [ 118.966900][ T58] [drm:udl_init] *ERROR* Selecting channel failed [ 119.021605][ T58] [drm] Initialized udl 0.0.1 20120220 for 5-1:0.0 on minor 2 [ 119.066548][ T58] [drm] Initialized udl on minor 2 [ 119.090925][ T58] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 119.115709][ T29] audit: type=1326 audit(1720665703.173:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5721 comm="syz.1.195" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbd3d575bd9 code=0x0 [ 119.167476][ T58] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 119.198363][ T45] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 119.218391][ T58] usb 5-1: USB disconnect, device number 5 [ 119.250129][ T45] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 120.130003][ T53] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 120.145370][ T53] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 120.154089][ T53] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 120.172625][ T53] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 120.184829][ T53] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 120.195231][ T53] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 120.314609][ T8] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 120.517556][ T8] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 120.576307][ T8] usb 5-1: config 1 has no interface number 0 [ 120.582485][ T8] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 120.622764][ T8] usb 5-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 120.654705][ T8] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 120.689496][ T8] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 120.712946][ T8] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.835283][ T8] usb 5-1: Product: syz [ 120.839508][ T8] usb 5-1: Manufacturer: syz [ 120.862921][ T8] usb 5-1: SerialNumber: syz [ 121.852151][ T5733] chnl_net:caif_netlink_parms(): no params data found [ 121.958757][ T8] cdc_ncm 5-1:1.1: bind() failure [ 122.255630][ T53] Bluetooth: hci5: command tx timeout [ 122.332802][ T5731] netlink: 'syz.4.200': attribute type 8 has an invalid length. [ 122.383247][ T5731] netlink: 'syz.4.200': attribute type 7 has an invalid length. [ 122.451992][ T5731] netlink: 224 bytes leftover after parsing attributes in process `syz.4.200'. [ 122.490809][ T5733] bridge0: port 1(bridge_slave_0) entered blocking state [ 122.526195][ T5733] bridge0: port 1(bridge_slave_0) entered disabled state [ 122.556675][ T5733] bridge_slave_0: entered allmulticast mode [ 122.566482][ T5733] bridge_slave_0: entered promiscuous mode [ 122.595629][ T5733] bridge0: port 2(bridge_slave_1) entered blocking state [ 122.602952][ T5733] bridge0: port 2(bridge_slave_1) entered disabled state [ 122.624899][ T5733] bridge_slave_1: entered allmulticast mode [ 122.654892][ T5733] bridge_slave_1: entered promiscuous mode [ 122.850880][ T5733] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 122.867438][ T5755] kvm: kvm [5753]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0x11e) = 0xbe702111 [ 122.923520][ T5733] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 123.198247][ T5733] team0: Port device team_slave_0 added [ 123.228276][ T5733] team0: Port device team_slave_1 added [ 123.396250][ T5733] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 123.424680][ T5733] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 123.526666][ T5733] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 123.572936][ T5733] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 123.610461][ T5733] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 123.731729][ T5733] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 123.915439][ T5769] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 123.932301][ T5094] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 123.944759][ T5094] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 123.955693][ T5094] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 123.967808][ T5094] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 123.975641][ T5094] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 123.983183][ T5094] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 124.056012][ T5774] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 124.285549][ T58] usb 5-1: USB disconnect, device number 6 [ 124.324104][ T35] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.346531][ T53] Bluetooth: hci5: command tx timeout [ 124.471179][ T5781] netlink: 20 bytes leftover after parsing attributes in process `syz.3.212'. [ 124.507221][ T5781] netlink: 20 bytes leftover after parsing attributes in process `syz.3.212'. [ 124.575805][ T5733] hsr_slave_0: entered promiscuous mode [ 124.599770][ T5733] hsr_slave_1: entered promiscuous mode [ 124.619962][ T5733] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 124.639772][ T5733] Cannot create hsr debugfs directory [ 124.768822][ T35] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.887296][ T35] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.044771][ T53] Bluetooth: hci4: command tx timeout [ 126.061655][ T35] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.414663][ T53] Bluetooth: hci5: command tx timeout [ 126.987648][ T5813] netlink: 20 bytes leftover after parsing attributes in process `syz.3.224'. [ 127.053430][ T5813] netlink: 20 bytes leftover after parsing attributes in process `syz.3.224'. [ 127.568239][ T5821] syz.1.225 uses obsolete (PF_INET,SOCK_PACKET) [ 127.583194][ T5820] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 127.648643][ T5823] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 127.745464][ T35] bridge_slave_1: left allmulticast mode [ 127.762946][ T35] bridge_slave_1: left promiscuous mode [ 127.790974][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 127.903928][ T35] bridge_slave_0: left allmulticast mode [ 127.927436][ T35] bridge_slave_0: left promiscuous mode [ 127.943543][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 128.020619][ T5832] netlink: 12 bytes leftover after parsing attributes in process `syz.4.230'. [ 128.095778][ T53] Bluetooth: hci4: command tx timeout [ 128.495010][ T53] Bluetooth: hci5: command tx timeout [ 128.717626][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 128.748427][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 128.770299][ T35] bond0 (unregistering): Released all slaves [ 129.050307][ T5771] chnl_net:caif_netlink_parms(): no params data found [ 129.528186][ T5863] netlink: 12 bytes leftover after parsing attributes in process `syz.3.239'. [ 130.115141][ T5771] bridge0: port 1(bridge_slave_0) entered blocking state [ 130.144910][ T5771] bridge0: port 1(bridge_slave_0) entered disabled state [ 130.152282][ T5771] bridge_slave_0: entered allmulticast mode [ 130.179353][ T53] Bluetooth: hci4: command tx timeout [ 130.239087][ T5771] bridge_slave_0: entered promiscuous mode [ 130.363036][ T35] hsr_slave_0: left promiscuous mode [ 130.407644][ T35] hsr_slave_1: left promiscuous mode [ 130.425416][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 130.438476][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 130.495216][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 130.511414][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 130.602759][ T35] veth1_macvtap: left promiscuous mode [ 130.621270][ T35] veth0_macvtap: left promiscuous mode [ 130.641467][ T35] veth1_vlan: left promiscuous mode [ 130.672635][ T35] veth0_vlan: left promiscuous mode [ 131.094060][ T5899] netlink: 12 bytes leftover after parsing attributes in process `syz.4.248'. [ 131.770696][ T35] team0 (unregistering): Port device team_slave_1 removed [ 132.129834][ T35] team0 (unregistering): Port device team_slave_0 removed [ 132.267876][ T53] Bluetooth: hci4: command tx timeout [ 132.823945][ T5771] bridge0: port 2(bridge_slave_1) entered blocking state [ 132.832028][ T5771] bridge0: port 2(bridge_slave_1) entered disabled state [ 132.846624][ T5771] bridge_slave_1: entered allmulticast mode [ 132.854316][ T5771] bridge_slave_1: entered promiscuous mode [ 132.934209][ T5917] nbd: socks must be embedded in a SOCK_ITEM attr [ 133.119552][ T5921] netlink: 12 bytes leftover after parsing attributes in process `syz.4.258'. [ 133.209751][ T5771] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 133.221810][ T1250] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.229902][ T1250] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.249071][ T5771] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 133.404610][ T5733] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 133.451974][ T5771] team0: Port device team_slave_0 added [ 133.543940][ T5771] team0: Port device team_slave_1 added [ 133.590696][ T5733] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 133.615161][ T58] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 133.638281][ T5733] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 133.914856][ T58] usb 2-1: Using ep0 maxpacket: 32 [ 133.940376][ T58] usb 2-1: New USB device found, idVendor=1776, idProduct=501c, bcdDevice=60.e4 [ 134.752301][ T58] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.762256][ T58] usb 2-1: Product: syz [ 134.774594][ T58] usb 2-1: Manufacturer: syz [ 134.779343][ T58] usb 2-1: SerialNumber: syz [ 134.810767][ T58] usb 2-1: config 0 descriptor?? [ 134.843908][ T5733] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 134.853996][ T58] gspca_main: spca501-2.14.0 probing 1776:501c [ 134.956839][ T5771] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 134.963871][ T5771] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 135.048282][ T5771] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 135.062385][ T5771] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 135.069542][ T5771] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 135.092695][ T58] gspca_spca501: reg write: error -71 [ 135.112324][ T58] spca501 2-1:0.0: Reg write failed for 0x02,0x07,0x05 [ 135.125855][ T5771] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 135.139180][ T58] spca501 2-1:0.0: probe with driver spca501 failed with error -22 [ 135.189379][ T58] usb 2-1: USB disconnect, device number 4 [ 135.419280][ T5771] hsr_slave_0: entered promiscuous mode [ 135.441369][ T5771] hsr_slave_1: entered promiscuous mode [ 135.458971][ T5771] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 135.468409][ T5771] Cannot create hsr debugfs directory [ 135.535601][ T53] Bluetooth: hci3: command 0x0406 tx timeout [ 135.611512][ T35] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.878361][ T35] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.130483][ T35] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.347602][ T35] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.786323][ T5733] 8021q: adding VLAN 0 to HW filter on device bond0 [ 136.919082][ T35] bridge_slave_1: left allmulticast mode [ 136.925788][ T35] bridge_slave_1: left promiscuous mode [ 136.932833][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 137.007930][ T35] bridge_slave_0: left allmulticast mode [ 137.016362][ T35] bridge_slave_0: left promiscuous mode [ 137.022419][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 137.168800][ T5986] xt_CT: You must specify a L4 protocol and not use inversions on it [ 137.215983][ T5988] nbd: must specify an index to disconnect [ 137.779866][ T5997] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 138.658637][ T29] audit: type=1326 audit(1720665722.103:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5990 comm="syz.3.279" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f68acd75bd9 code=0x0 [ 139.352888][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 139.374753][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 139.396628][ T35] bond0 (unregistering): Released all slaves [ 139.442475][ T5733] 8021q: adding VLAN 0 to HW filter on device team0 [ 139.646192][ T5219] bridge0: port 1(bridge_slave_0) entered blocking state [ 139.653387][ T5219] bridge0: port 1(bridge_slave_0) entered forwarding state [ 139.899245][ T6012] nbd: must specify an index to disconnect [ 139.986739][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 139.993965][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 140.305045][ T35] hsr_slave_0: left promiscuous mode [ 140.312846][ T35] hsr_slave_1: left promiscuous mode [ 140.344110][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 140.364663][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 140.385523][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 140.393101][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 140.441405][ T35] veth1_macvtap: left promiscuous mode [ 140.459307][ T35] veth0_macvtap: left promiscuous mode [ 140.468118][ T35] veth1_vlan: left promiscuous mode [ 140.473519][ T35] veth0_vlan: left promiscuous mode [ 140.610744][ T6033] nbd: must specify an index to disconnect [ 141.283858][ T6052] nbd: must specify an index to disconnect [ 141.417252][ T35] team0 (unregistering): Port device team_slave_1 removed [ 141.497710][ T35] team0 (unregistering): Port device team_slave_0 removed [ 141.932922][ T5094] Bluetooth: Frame is too long (len 16, expected len 4) [ 142.417923][ T5771] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 142.507291][ T5771] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 142.583867][ T5771] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 142.634340][ T5771] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 143.087997][ T5733] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 143.314469][ T5771] 8021q: adding VLAN 0 to HW filter on device bond0 [ 143.449722][ T5733] veth0_vlan: entered promiscuous mode [ 143.505298][ T5771] 8021q: adding VLAN 0 to HW filter on device team0 [ 143.554931][ T5733] veth1_vlan: entered promiscuous mode [ 143.569376][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 143.576637][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 143.688443][ T5176] bridge0: port 2(bridge_slave_1) entered blocking state [ 143.695741][ T5176] bridge0: port 2(bridge_slave_1) entered forwarding state [ 143.789637][ T5733] veth0_macvtap: entered promiscuous mode [ 143.802992][ T5733] veth1_macvtap: entered promiscuous mode [ 143.831966][ T5094] Bluetooth: hci3: unexpected event for opcode 0x2028 [ 143.880604][ T5771] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 144.050579][ T5733] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 144.092489][ T5733] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.180638][ T5733] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 144.406859][ T5733] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.537666][ T5733] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 144.791709][ T5733] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.823485][ T5733] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 144.880633][ T5733] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 144.918914][ T5733] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.963048][ T5733] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 144.988217][ T5733] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 145.005045][ T5733] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 145.090810][ T5733] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 145.114255][ T6107] Falling back ldisc for ttyS3. [ 145.131500][ T5733] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 145.150551][ T5733] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.164290][ T5733] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.183014][ T5733] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.193156][ T5733] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.633062][ T6131] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.819675][ T6131] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.845249][ T5219] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 145.898704][ T5771] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 145.924930][ T9] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 146.018644][ T6131] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.053493][ T2843] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 146.074456][ T2843] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 146.077655][ T5219] usb 4-1: Using ep0 maxpacket: 16 [ 146.124404][ T5219] usb 4-1: unable to get BOS descriptor or descriptor too short [ 146.137085][ T5219] usb 4-1: config 1 interface 0 altsetting 128 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 146.145283][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 146.163936][ T5219] usb 4-1: config 1 interface 0 has no altsetting 0 [ 146.169626][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 146.203687][ T9] usb 5-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=51.44 [ 146.205487][ T5219] usb 4-1: New USB device found, idVendor=0458, idProduct=5017, bcdDevice= 0.40 [ 146.217806][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.226305][ T6131] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.231098][ T9] usb 5-1: Product: syz [ 146.245524][ T9] usb 5-1: Manufacturer: syz [ 146.248354][ T5219] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.257775][ T9] usb 5-1: SerialNumber: syz [ 146.277160][ T9] usb 5-1: config 0 descriptor?? [ 146.287906][ T5219] usb 4-1: Product: ÑŒ [ 146.289750][ T2843] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 146.292199][ T5219] usb 4-1: SerialNumber: syz [ 146.308116][ T9] legousbtower 5-1:0.0: interrupt endpoints not found [ 146.322489][ T2843] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 146.483356][ T5771] veth0_vlan: entered promiscuous mode [ 146.516225][ T6131] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.559944][ T9] usb 5-1: USB disconnect, device number 7 [ 146.570536][ T5771] veth1_vlan: entered promiscuous mode [ 146.633859][ T6131] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.699651][ T6131] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.779396][ T6131] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.816734][ T5219] usbhid 4-1:1.0: couldn't find an input interrupt endpoint [ 146.859923][ T5219] usb 4-1: USB disconnect, device number 3 [ 146.925581][ T5771] veth0_macvtap: entered promiscuous mode [ 147.040816][ T5771] veth1_macvtap: entered promiscuous mode [ 147.860110][ T5094] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 147.871073][ T5094] Bluetooth: hci3: Injecting HCI hardware error event [ 147.878591][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 147.880549][ T53] Bluetooth: hci3: hardware error 0x00 [ 147.913697][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.930879][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 147.945675][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.957365][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 147.973680][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.976999][ T6161] input: syz1 as /devices/virtual/input/input8 [ 147.984375][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 148.010650][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 148.030960][ T5771] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 148.149516][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 148.179652][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 148.222136][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 148.246883][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 148.263507][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 148.277078][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 148.287300][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 148.323698][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 148.348771][ T5771] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 148.385759][ T5771] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.424650][ T5771] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.451123][ T5771] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.479374][ T5771] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.892778][ T1104] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 149.978893][ T1104] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 150.117898][ T53] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 150.156450][ T53] Bluetooth: Frame is too long (len 16, expected len 4) [ 150.284107][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 150.300888][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 152.585322][ T6189] syz.4.348 (6189): drop_caches: 2 [ 152.600723][ T6189] syz.4.348 (6189): drop_caches: 2 [ 154.351576][ T6214] can0: slcan on ptm0. [ 154.528603][ T5138] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 154.755498][ T5138] usb 1-1: Using ep0 maxpacket: 8 [ 154.800264][ T5138] usb 1-1: New USB device found, idVendor=0c45, idProduct=628e, bcdDevice=fb.51 [ 154.844263][ T5138] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.896244][ T5138] usb 1-1: config 0 descriptor?? [ 154.926046][ T5138] gspca_main: gspca_sn9c20x-2.14.0 probing 0c45:628e [ 155.194256][ T5138] gspca_sn9c20x: Write register 1000 failed -71 [ 155.263647][ T5138] gspca_sn9c20x: Device initialization failed [ 155.300841][ T5138] gspca_sn9c20x 1-1:0.0: probe with driver gspca_sn9c20x failed with error -71 [ 155.356604][ T5138] usb 1-1: USB disconnect, device number 3 [ 155.407888][ T6257] process 'syz.3.372' launched './file2' with NULL argv: empty string added [ 155.445191][ T6211] can0 (unregistered): slcan off ptm0. [ 155.605616][ T45] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 155.738775][ T6214] kexec: Could not allocate control_code_buffer [ 155.865940][ T45] usb 2-1: Using ep0 maxpacket: 16 [ 155.875509][ T45] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 155.921667][ T45] usb 2-1: New USB device found, idVendor=1e7d, idProduct=31ce, bcdDevice= 0.00 [ 155.965690][ T45] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.019180][ T45] usb 2-1: config 0 descriptor?? [ 156.072182][ T45] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 157.263845][ T929] usb 2-1: USB disconnect, device number 5 [ 160.399766][ T6354] kvm: emulating exchange as write [ 160.715302][ T45] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 160.914621][ T45] usb 3-1: Using ep0 maxpacket: 16 [ 160.917221][ T45] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 160.959432][ T45] usb 3-1: New USB device found, idVendor=1e7d, idProduct=31ce, bcdDevice= 0.00 [ 160.977867][ T45] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.989759][ T45] usb 3-1: config 0 descriptor?? [ 161.001198][ T45] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 161.163518][ T6374] overlayfs: failed to get inode (-116) [ 161.173730][ T6374] overlayfs: failed to get inode (-116) [ 161.332206][ T6378] 9pnet: Could not find request transport: xen [ 161.366257][ T45] usb 3-1: USB disconnect, device number 3 [ 161.423622][ T6383] ======================================================= [ 161.423622][ T6383] WARNING: The mand mount option has been deprecated and [ 161.423622][ T6383] and is ignored by this kernel. Remove the mand [ 161.423622][ T6383] option from the mount to silence this warning. [ 161.423622][ T6383] ======================================================= [ 161.458714][ C0] vkms_vblank_simulate: vblank timer overrun [ 161.732932][ T6389] netlink: 144 bytes leftover after parsing attributes in process `syz.1.419'. [ 161.986276][ T6390] random: crng reseeded on system resumption [ 162.522836][ T2843] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.589474][ T6401] overlayfs: failed to get inode (-116) [ 162.617951][ T6401] overlayfs: failed to get inode (-116) [ 162.759662][ T2843] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.928543][ T2843] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.043264][ T2843] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.257560][ T6413] PKCS7: Unknown OID: [5] 0.0 [ 163.283307][ T6413] PKCS7: Only support pkcs7_signedData type [ 163.512355][ T29] audit: type=1326 audit(1720665747.573:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6408 comm="syz.1.429" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbd3d575bd9 code=0x0 [ 163.571121][ T2843] bridge_slave_1: left allmulticast mode [ 163.588763][ T2843] bridge_slave_1: left promiscuous mode [ 163.607981][ T2843] bridge0: port 2(bridge_slave_1) entered disabled state [ 163.637146][ T6417] netlink: 256 bytes leftover after parsing attributes in process `syz.2.432'. [ 164.790269][ T2843] bridge_slave_0: left allmulticast mode [ 164.797456][ T2843] bridge_slave_0: left promiscuous mode [ 164.803964][ T2843] bridge0: port 1(bridge_slave_0) entered disabled state [ 164.866277][ T5094] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 164.876743][ T5094] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 164.890194][ T5094] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 164.899652][ T5094] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 164.909135][ T5094] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 164.917060][ T5094] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 165.679913][ T6442] random: crng reseeded on system resumption [ 166.174412][ T6452] netlink: 4 bytes leftover after parsing attributes in process `syz.4.439'. [ 166.399352][ T2843] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 166.429370][ T2843] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 166.453282][ T2843] bond0 (unregistering): Released all slaves [ 166.503339][ T6439] netlink: 144 bytes leftover after parsing attributes in process `syz.1.437'. [ 167.056015][ T53] Bluetooth: hci1: command tx timeout [ 167.910623][ T2843] hsr_slave_0: left promiscuous mode [ 167.951300][ T2843] hsr_slave_1: left promiscuous mode [ 168.004366][ T2843] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 168.018483][ T2843] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 168.047268][ T2843] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 168.063957][ T2843] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 168.173154][ T2843] veth1_macvtap: left promiscuous mode [ 168.217769][ T2843] veth0_macvtap: left promiscuous mode [ 168.240829][ T2843] veth1_vlan: left promiscuous mode [ 168.258970][ T2843] veth0_vlan: left promiscuous mode [ 169.136037][ T53] Bluetooth: hci1: command tx timeout [ 170.496695][ T2843] team0 (unregistering): Port device team_slave_1 removed [ 170.545635][ T2843] team0 (unregistering): Port device team_slave_0 removed [ 171.200068][ T6422] chnl_net:caif_netlink_parms(): no params data found [ 171.227487][ T53] Bluetooth: hci1: command tx timeout [ 171.333981][ T6531] capability: warning: `syz.0.461' uses 32-bit capabilities (legacy support in use) [ 171.771572][ T6422] bridge0: port 1(bridge_slave_0) entered blocking state [ 171.822176][ T6422] bridge0: port 1(bridge_slave_0) entered disabled state [ 171.840755][ T6422] bridge_slave_0: entered allmulticast mode [ 171.868042][ T6422] bridge_slave_0: entered promiscuous mode [ 171.921081][ T6422] bridge0: port 2(bridge_slave_1) entered blocking state [ 171.947492][ T6422] bridge0: port 2(bridge_slave_1) entered disabled state [ 171.967556][ T6422] bridge_slave_1: entered allmulticast mode [ 171.996252][ T6422] bridge_slave_1: entered promiscuous mode [ 172.196266][ T6559] netlink: 36 bytes leftover after parsing attributes in process `syz.0.470'. [ 172.258457][ T6422] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 172.287679][ T2843] IPVS: stop unused estimator thread 0... [ 172.346910][ T6422] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 172.650410][ T6422] team0: Port device team_slave_0 added [ 172.699202][ T6422] team0: Port device team_slave_1 added [ 172.752432][ T6578] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 172.828686][ T6578] infiniband Syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 173.007754][ T6422] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 173.023670][ T6422] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 173.050076][ C0] vkms_vblank_simulate: vblank timer overrun [ 173.120729][ T6422] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 173.163120][ T6578] siw: device registration error -19 [ 173.275388][ T6422] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 173.282395][ T6422] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 173.319177][ T53] Bluetooth: hci1: command tx timeout [ 173.346756][ T6422] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 173.440959][ T6599] netlink: 36 bytes leftover after parsing attributes in process `syz.0.483'. [ 173.698063][ T6422] hsr_slave_0: entered promiscuous mode [ 173.726213][ T6422] hsr_slave_1: entered promiscuous mode [ 174.499615][ T6636] infiniband Syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 174.681674][ T6636] siw: device registration error -19 [ 174.758096][ T6643] netlink: 36 bytes leftover after parsing attributes in process `syz.2.497'. [ 175.336705][ T6422] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 175.396320][ T6422] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 175.433916][ T6422] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 175.460739][ T6670] netlink: 36 bytes leftover after parsing attributes in process `syz.4.507'. [ 175.476460][ T6422] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 175.917553][ T6422] 8021q: adding VLAN 0 to HW filter on device bond0 [ 175.972159][ T6422] 8021q: adding VLAN 0 to HW filter on device team0 [ 176.284294][ T5176] bridge0: port 1(bridge_slave_0) entered blocking state [ 176.291608][ T5176] bridge0: port 1(bridge_slave_0) entered forwarding state [ 176.750338][ T5176] bridge0: port 2(bridge_slave_1) entered blocking state [ 176.758370][ T5176] bridge0: port 2(bridge_slave_1) entered forwarding state [ 177.249459][ T6422] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 178.652617][ T6720] netlink: 36 bytes leftover after parsing attributes in process `syz.2.519'. [ 178.907982][ T6728] netlink: 20 bytes leftover after parsing attributes in process `syz.2.522'. [ 179.170009][ T6422] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 180.440371][ T6422] veth0_vlan: entered promiscuous mode [ 180.536412][ T6422] veth1_vlan: entered promiscuous mode [ 180.793431][ T6422] veth0_macvtap: entered promiscuous mode [ 180.874270][ T6422] veth1_macvtap: entered promiscuous mode [ 180.972899][ T6746] usb usb8: usbfs: process 6746 (syz.0.525) did not claim interface 0 before use [ 181.018754][ T6422] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 181.060187][ T6422] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.125534][ T6422] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 181.172632][ T6422] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.189101][ T6422] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 181.261755][ T6422] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.283318][ T6422] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 181.301380][ T6422] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.358334][ T6422] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 181.423251][ T6422] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 181.491268][ T6422] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.544587][ T6422] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 181.645724][ T6422] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.667953][ T6422] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 181.685324][ T6422] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.705161][ T6422] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 181.725323][ T6422] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.750151][ T6422] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 181.873731][ T6422] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.909584][ T6422] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.919173][ T6422] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.938756][ T6422] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.267534][ T1093] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 182.287437][ T1093] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 182.372810][ T6772] overlayfs: failed to resolve './file0': -2 [ 182.376329][ T1104] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 182.407435][ T1104] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 182.885529][ T6785] netlink: 20 bytes leftover after parsing attributes in process `syz.3.533'. [ 183.098880][ T6792] netlink: 4 bytes leftover after parsing attributes in process `syz.3.535'. [ 183.791164][ T6808] program syz.3.539 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 184.830214][ T53] Bluetooth: hci4: link tx timeout [ 184.835920][ T53] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 184.942315][ T6830] netlink: 20 bytes leftover after parsing attributes in process `syz.3.545'. [ 186.898732][ T53] Bluetooth: hci4: command 0x0406 tx timeout [ 187.050041][ T5093] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 187.256629][ T5093] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 187.294283][ T5093] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 187.361883][ T6769] syz.1.529 (6769): drop_caches: 1 [ 187.370603][ T5093] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 187.403661][ T5093] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 187.432455][ T5093] usb 3-1: SerialNumber: syz [ 187.689811][ T5093] usb 3-1: 0:2 : does not exist [ 187.695759][ T5094] Bluetooth: hci0: unexpected event 0x09 length: 8 > 3 [ 187.748551][ T5093] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 187.987410][ T5093] usb 3-1: USB disconnect, device number 4 [ 189.056329][ T5098] udevd[5098]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 189.385478][ T6941] program syz.0.578 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 189.866805][ T6944] syz.3.579 (6944): drop_caches: 1 [ 190.024731][ T45] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 190.274638][ T45] usb 1-1: Using ep0 maxpacket: 16 [ 190.324221][ T45] usb 1-1: unable to get BOS descriptor or descriptor too short [ 190.374083][ T45] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 190.424003][ T45] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 190.456832][ T45] usb 1-1: New USB device found, idVendor=05ac, idProduct=0238, bcdDevice= 0.40 [ 190.489265][ T45] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 190.546958][ T45] usb 1-1: Product: syz [ 190.569650][ T45] usb 1-1: Manufacturer: syz [ 190.574353][ T45] usb 1-1: SerialNumber: syz [ 190.632538][ T6962] xt_CT: You must specify a L4 protocol and not use inversions on it [ 190.671521][ T45] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/input/input9 [ 190.872521][ T4524] bcm5974 1-1:1.0: could not read from device [ 190.883171][ T4524] bcm5974 1-1:1.0: could not read from device [ 190.949424][ T4524] bcm5974 1-1:1.0: could not read from device [ 190.985805][ T45] usb 1-1: USB disconnect, device number 4 [ 191.024816][ T4524] bcm5974 1-1:1.0: could not read from device [ 191.061165][ T6974] trusted_key: syz.2.591 sent an empty control message without MSG_MORE. [ 191.330109][ T6978] syz.4.593 (6978): drop_caches: 1 [ 191.480155][ T29] audit: type=1326 audit(1720665775.543:7): auid=4294967295 uid=0 gid=60928 ses=4294967295 subj=_ pid=6989 comm="syz.2.599" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f453d575bd9 code=0x0 [ 191.594324][ T6993] netlink: 'syz.1.597': attribute type 7 has an invalid length. [ 191.624816][ T6993] netlink: 'syz.1.597': attribute type 6 has an invalid length. [ 191.963463][ T7012] netlink: 40 bytes leftover after parsing attributes in process `syz.0.602'. [ 192.457288][ T7030] xt_TCPMSS: Only works on TCP SYN packets [ 192.470389][ T7022] syz.3.610 (7022): drop_caches: 1 [ 192.884009][ T7041] netlink: 'syz.2.615': attribute type 7 has an invalid length. [ 192.908338][ T7041] netlink: 'syz.2.615': attribute type 6 has an invalid length. [ 193.016083][ T45] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 193.203668][ T29] audit: type=1326 audit(1720665777.263:8): auid=4294967295 uid=0 gid=60928 ses=4294967295 subj=_ pid=7053 comm="syz.3.623" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0180b75bd9 code=0x0 [ 193.243232][ T45] usb 2-1: not running at top speed; connect to a high speed hub [ 193.271408][ T45] usb 2-1: config 123 has an invalid interface number: 222 but max is 1 [ 193.297790][ T45] usb 2-1: config 123 has an invalid interface number: 61 but max is 1 [ 193.323744][ T45] usb 2-1: config 123 has no interface number 0 [ 193.326252][ T7060] xt_TCPMSS: Only works on TCP SYN packets [ 193.336155][ T45] usb 2-1: config 123 has no interface number 1 [ 193.336231][ T45] usb 2-1: config 123 interface 61 altsetting 2 endpoint 0xF has invalid maxpacket 1024, setting to 64 [ 193.336264][ T45] usb 2-1: config 123 interface 61 altsetting 2 has a duplicate endpoint with address 0xF, skipping [ 193.386999][ T45] usb 2-1: config 123 interface 222 has no altsetting 0 [ 193.396354][ T45] usb 2-1: config 123 interface 61 has no altsetting 0 [ 193.408485][ T45] usb 2-1: string descriptor 0 read error: -22 [ 193.415225][ T45] usb 2-1: New USB device found, idVendor=13d3, idProduct=3321, bcdDevice=8f.1c [ 193.431162][ T45] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 193.468450][ T45] usb 2-1: bad CDC descriptors [ 193.630273][ T29] audit: type=1804 audit(1720665777.693:9): pid=7066 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.4.627" name="/newroot/153/file0/bus" dev="ramfs" ino=16192 res=1 errno=0 [ 193.787874][ T29] audit: type=1804 audit(1720665777.833:10): pid=7071 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz.4.627" name="/newroot/153/file0/bus" dev="ramfs" ino=16192 res=1 errno=0 [ 193.925284][ T29] audit: type=1800 audit(1720665777.843:11): pid=7066 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.4.627" name="bus" dev="ramfs" ino=16192 res=0 errno=0 [ 193.944066][ C0] vkms_vblank_simulate: vblank timer overrun [ 194.217958][ T7078] evm: overlay not supported [ 194.225720][ T45] usb 2-1: USB disconnect, device number 6 [ 194.304629][ T29] audit: type=1804 audit(1720665778.333:12): pid=7078 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.2.631" name="/newroot/69/bus/file0" dev="overlay" ino=404 res=1 errno=0 [ 194.658766][ T1250] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.670020][ T1250] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.685054][ T7089] Bluetooth: MGMT ver 1.22 [ 194.879879][ T7101] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.642'. [ 195.022596][ T7107] netlink: 12 bytes leftover after parsing attributes in process `syz.1.645'. [ 195.034220][ T7109] netlink: 4 bytes leftover after parsing attributes in process `syz.3.646'. [ 195.063507][ T7109] team_slave_0: entered promiscuous mode [ 195.074140][ T7109] team_slave_0: entered allmulticast mode [ 195.166655][ T7109] team0: Port device team_slave_0 removed [ 195.376376][ T29] audit: type=1804 audit(1720665779.443:13): pid=7118 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.1.648" name="/newroot/141/file0/bus" dev="ramfs" ino=16299 res=1 errno=0 [ 195.397365][ C0] vkms_vblank_simulate: vblank timer overrun [ 196.587008][ T29] audit: type=1804 audit(1720665780.653:14): pid=7128 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz.1.648" name="/newroot/141/file0/bus" dev="ramfs" ino=16299 res=1 errno=0 [ 196.663835][ T29] audit: type=1800 audit(1720665780.693:15): pid=7118 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.1.648" name="bus" dev="ramfs" ino=16299 res=0 errno=0 [ 196.737245][ T5094] Bluetooth: hci0: command 0x0406 tx timeout [ 197.041142][ T7142] netlink: 12 bytes leftover after parsing attributes in process `syz.2.658'. [ 197.160189][ T7145] netlink: 8 bytes leftover after parsing attributes in process `syz.4.659'. [ 197.939313][ T5138] kernel read not supported for file /newroot/144 (pid: 5138 comm: kworker/1:5) [ 198.481384][ T7183] netlink: 8 bytes leftover after parsing attributes in process `syz.4.675'. [ 198.492055][ T7184] fuse: Unknown parameter 'user00000000000000000000' [ 199.129674][ T7213] IPv6: addrconf: prefix option has invalid lifetime [ 199.167649][ T7214] netlink: 'syz.4.690': attribute type 1 has an invalid length. [ 199.204428][ T7214] netlink: 4 bytes leftover after parsing attributes in process `syz.4.690'. [ 199.775431][ T5219] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 200.676360][ T5219] usb 5-1: Using ep0 maxpacket: 8 [ 200.693100][ T5219] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 200.725460][ T5219] usb 5-1: config 179 has no interface number 0 [ 200.731818][ T5219] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 200.799016][ T5219] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 200.846311][ T5219] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 200.852893][ T7245] netlink: 'syz.0.703': attribute type 1 has an invalid length. [ 200.883069][ T5219] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 200.900719][ T7245] netlink: 4 bytes leftover after parsing attributes in process `syz.0.703'. [ 200.903847][ T5219] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 200.952946][ T5219] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 200.983031][ T5219] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 201.042413][ T7221] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 201.149638][ T7251] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4) [ 201.156698][ T7251] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 201.235581][ T7251] vhci_hcd vhci_hcd.0: Device attached [ 201.392542][ T7255] vhci_hcd: unknown pdu 1 [ 201.396747][ T5138] input: Generic X-Box pad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:179.65/input/input11 [ 201.434590][ T5093] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 201.451985][ T2852] vhci_hcd: stop threads [ 201.484660][ T2852] vhci_hcd: release socket [ 201.501366][ T2852] vhci_hcd: disconnect device [ 201.622541][ T7221] netlink: 209844 bytes leftover after parsing attributes in process `syz.4.693'. [ 201.644623][ T5093] usb 3-1: Using ep0 maxpacket: 8 [ 201.655607][ T5093] usb 3-1: New USB device found, idVendor=05ac, idProduct=0217, bcdDevice=cf.dc [ 201.678357][ T5093] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 201.733415][ T5093] usb 3-1: config 0 descriptor?? [ 201.747583][ T5093] appletouch 3-1:0.0: Could not find int-in endpoint [ 201.761303][ T5093] appletouch 3-1:0.0: probe with driver appletouch failed with error -5 [ 201.771511][ T5093] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 201.834711][ T5138] usb 5-1: USB disconnect, device number 8 [ 201.834771][ C1] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 201.849068][ C1] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 201.869385][ T5138] xpad 5-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 202.049880][ T7258] warning: `syz.2.706' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 202.103071][ T5093] usb 3-1: USB disconnect, device number 5 [ 202.675048][ T7292] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(4) [ 202.681741][ T7292] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 202.692663][ T7292] vhci_hcd vhci_hcd.0: Device attached [ 202.747240][ T7293] vhci_hcd: unknown pdu 1 [ 202.769704][ T1093] vhci_hcd: stop threads [ 202.774034][ T1093] vhci_hcd: release socket [ 202.796225][ T1093] vhci_hcd: disconnect device [ 202.841473][ T5094] Bluetooth: hci2: sending frame failed (-49) [ 202.849763][ T53] Bluetooth: hci2: Opcode 0x1003 failed: -49 [ 202.866299][ T5219] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 203.067253][ T5219] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 21792, setting to 1024 [ 203.206157][ T5219] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 1024 [ 203.352142][ T5219] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 203.376231][ T53] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0 [ 203.388696][ T53] Bluetooth: hci5: Injecting HCI hardware error event [ 203.401470][ T53] Bluetooth: hci5: hardware error 0x00 [ 203.624878][ T5219] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 1.40 [ 203.864645][ T5219] usb 2-1: New USB device strings: Mfr=1, Product=0, SerialNumber=0 [ 203.926511][ T5219] usb 2-1: Manufacturer: syz [ 203.993254][ T7287] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 204.026196][ T5219] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -22 [ 204.772437][ T7333] nvme_fabrics: missing parameter 'transport=%s' [ 204.800007][ T7333] nvme_fabrics: missing parameter 'nqn=%s' [ 204.816487][ T7337] nvme_fabrics: unknown parameter or missing value '' in ctrl creation request [ 205.361778][ T45] usb 2-1: USB disconnect, device number 7 [ 205.545518][ T53] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 205.777239][ T53] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 205.789090][ T53] Bluetooth: hci4: Injecting HCI hardware error event [ 205.799020][ T5086] Bluetooth: hci4: hardware error 0x00 [ 206.624872][ T53] Bluetooth: hci2: command 0x1003 tx timeout [ 206.632561][ T5094] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 207.859435][ T5086] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 207.926458][ T7372] xt_CT: You must specify a L4 protocol and not use inversions on it [ 208.095262][ T7385] nvme_fabrics: missing parameter 'transport=%s' [ 208.109569][ T29] audit: type=1326 audit(1720665792.173:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7389 comm="syz.4.759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb654175bd9 code=0x7ffc0000 [ 208.152289][ T7385] nvme_fabrics: missing parameter 'nqn=%s' [ 208.190880][ T7388] nvme_fabrics: unknown parameter or missing value '' in ctrl creation request [ 208.200362][ T29] audit: type=1326 audit(1720665792.173:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7389 comm="syz.4.759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb654175bd9 code=0x7ffc0000 [ 208.258375][ T29] audit: type=1326 audit(1720665792.213:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7389 comm="syz.4.759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb654175bd9 code=0x7ffc0000 [ 208.279796][ C0] vkms_vblank_simulate: vblank timer overrun [ 208.364168][ T29] audit: type=1326 audit(1720665792.213:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7389 comm="syz.4.759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb654175bd9 code=0x7ffc0000 [ 208.456512][ T29] audit: type=1326 audit(1720665792.213:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7389 comm="syz.4.759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb654175bd9 code=0x7ffc0000 [ 208.478786][ C0] vkms_vblank_simulate: vblank timer overrun [ 208.621385][ T29] audit: type=1326 audit(1720665792.213:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7389 comm="syz.4.759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb654175bd9 code=0x7ffc0000 [ 208.669912][ T7379] DRBG: could not allocate digest TFM handle: hmac(sha512) [ 208.720784][ T29] audit: type=1326 audit(1720665792.213:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7389 comm="syz.4.759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb654175bd9 code=0x7ffc0000 [ 208.828125][ T29] audit: type=1326 audit(1720665792.213:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7389 comm="syz.4.759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb654175bd9 code=0x7ffc0000 [ 208.937871][ T29] audit: type=1326 audit(1720665792.213:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7389 comm="syz.4.759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb654175bd9 code=0x7ffc0000 [ 209.052234][ T29] audit: type=1326 audit(1720665792.223:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7389 comm="syz.4.759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb654175bd9 code=0x7ffc0000 [ 209.300221][ T7421] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 209.392978][ T7425] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 209.398253][ T7421] loop7: detected capacity change from 0 to 49152 [ 209.874125][ T7403] syz.4.763: attempt to access beyond end of device [ 209.874125][ T7403] nbd4: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 209.922266][ T7403] SQUASHFS error: Failed to read block 0x0: -5 [ 210.045847][ T7403] unable to read squashfs_super_block [ 211.709369][ T7474] nvme_fabrics: missing parameter 'transport=%s' [ 211.746695][ T7474] nvme_fabrics: missing parameter 'nqn=%s' [ 211.785842][ T7476] nvme_fabrics: unknown parameter or missing value '' in ctrl creation request [ 212.335640][ T5138] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 212.485464][ T9] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 212.525993][ T5138] usb 4-1: Using ep0 maxpacket: 8 [ 212.542261][ T5138] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 212.567554][ T5138] usb 4-1: config 179 has no interface number 0 [ 212.574128][ T5138] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 212.601731][ T5138] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 212.623574][ T5138] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 212.660537][ T5138] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 212.687090][ T9] usb 2-1: config 1 has an invalid descriptor of length 125, skipping remainder of the config [ 212.692940][ T5138] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 212.712506][ T9] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 212.740243][ T5138] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 212.773448][ T9] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 212.796233][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 212.796802][ T5138] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 212.813462][ T9] usb 2-1: SerialNumber: syz [ 212.868600][ T7491] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 213.068024][ T9] usb 2-1: 0:2 : does not exist [ 213.274693][ T9] usb 2-1: unit 48 not found! [ 213.353892][ T29] kauditd_printk_skb: 7 callbacks suppressed [ 213.353912][ T29] audit: type=1804 audit(1720665797.413:33): pid=7507 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz.0.794" name="/newroot/77/file0/bus" dev="ramfs" ino=17354 res=1 errno=0 [ 213.392024][ T9] usb 2-1: USB disconnect, device number 8 [ 213.427728][ T5219] input: Generic X-Box pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:179.65/input/input13 [ 213.548893][ T29] audit: type=1800 audit(1720665797.413:34): pid=7504 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.0.794" name="bus" dev="ramfs" ino=17354 res=0 errno=0 [ 213.692806][ T7491] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.792'. [ 213.802205][ T5098] udevd[5098]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 214.226311][ T5138] usb 4-1: USB disconnect, device number 4 [ 214.226374][ C1] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 214.240670][ C1] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 214.372435][ T5138] xpad 4-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 214.726340][ T45] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 214.945854][ T45] usb 3-1: Using ep0 maxpacket: 8 [ 214.976520][ T45] usb 3-1: config 1 has an invalid interface number: 205 but max is 0 [ 215.029368][ T45] usb 3-1: config 1 has an invalid descriptor of length 209, skipping remainder of the config [ 215.070494][ T45] usb 3-1: config 1 has no interface number 0 [ 215.095777][ T45] usb 3-1: config 1 interface 205 has no altsetting 0 [ 215.171640][ T45] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 215.205356][ T45] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 215.213508][ T45] usb 3-1: Product: syz [ 215.295190][ T45] usb 3-1: Manufacturer: syz [ 215.299868][ T45] usb 3-1: SerialNumber: syz [ 216.985183][ T5219] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 217.225354][ T5219] usb 2-1: Using ep0 maxpacket: 32 [ 217.280470][ T5219] usb 2-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 217.322810][ T5219] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 217.356511][ T5219] usb 2-1: Product: syz [ 217.373790][ T5219] usb 2-1: Manufacturer: syz [ 217.390283][ T5219] usb 2-1: SerialNumber: syz [ 217.417995][ T5219] usb 2-1: config 0 descriptor?? [ 217.463445][ T5219] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 217.499109][ T45] usb 3-1: USB disconnect, device number 6 [ 218.455265][ T5219] gspca_stk1135: reg_w 0x7 err -71 [ 218.489037][ T5219] gspca_stk1135: serial bus timeout: status=0x00 [ 218.514636][ T5219] gspca_stk1135: Sensor write failed [ 218.534585][ T5219] gspca_stk1135: serial bus timeout: status=0x00 [ 218.543909][ T5219] gspca_stk1135: Sensor write failed [ 218.553110][ T5219] gspca_stk1135: serial bus timeout: status=0x00 [ 218.560175][ T5219] gspca_stk1135: Sensor read failed [ 218.566585][ T5219] gspca_stk1135: serial bus timeout: status=0x00 [ 218.573156][ T5219] gspca_stk1135: Sensor read failed [ 218.583297][ T5219] gspca_stk1135: Detected sensor type unknown (0x0) [ 218.590833][ T5219] gspca_stk1135: serial bus timeout: status=0x00 [ 218.607459][ T5219] gspca_stk1135: Sensor read failed [ 218.649052][ T5219] gspca_stk1135: serial bus timeout: status=0x00 [ 218.664717][ T5219] gspca_stk1135: Sensor read failed [ 218.670628][ T5219] gspca_stk1135: serial bus timeout: status=0x00 [ 218.718791][ T5219] gspca_stk1135: Sensor write failed [ 218.760122][ T5219] gspca_stk1135: serial bus timeout: status=0x00 [ 218.774052][ T5219] gspca_stk1135: Sensor write failed [ 218.792855][ T7578] netlink: 'syz.3.818': attribute type 11 has an invalid length. [ 218.801238][ T5219] stk1135 2-1:0.0: probe with driver stk1135 failed with error -71 [ 218.826319][ T5219] usb 2-1: USB disconnect, device number 9 [ 221.664975][ T5138] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 221.936148][ T5138] usb 4-1: Using ep0 maxpacket: 8 [ 221.976253][ T5138] usb 4-1: config 1 has an invalid interface number: 205 but max is 0 [ 222.005008][ T5138] usb 4-1: config 1 has an invalid descriptor of length 209, skipping remainder of the config [ 222.064515][ T5138] usb 4-1: config 1 has no interface number 0 [ 222.070681][ T5138] usb 4-1: config 1 interface 205 has no altsetting 0 [ 222.106438][ T5138] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 222.124662][ T5138] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 222.157414][ T5138] usb 4-1: Product: syz [ 222.168379][ T5138] usb 4-1: Manufacturer: syz [ 222.173135][ T5138] usb 4-1: SerialNumber: syz [ 222.853989][ T7627] xt_CT: You must specify a L4 protocol and not use inversions on it [ 223.556237][ T2852] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.843967][ T5094] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 223.875889][ T5094] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 223.894129][ T5094] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 223.936007][ T5094] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 223.958021][ T5094] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 223.994498][ T5094] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 224.002389][ T53] Bluetooth: hci0: Received unexpected HCI Event 0x00 [ 224.066620][ T5138] usb 4-1: USB disconnect, device number 5 [ 224.196587][ T2852] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.310596][ T2852] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.453239][ T2852] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.097608][ T2852] bridge_slave_1: left allmulticast mode [ 225.109118][ T2852] bridge_slave_1: left promiscuous mode [ 225.119284][ T2852] bridge0: port 2(bridge_slave_1) entered disabled state [ 225.130318][ T2852] bridge_slave_0: left allmulticast mode [ 225.139345][ T2852] bridge_slave_0: left promiscuous mode [ 225.152623][ T2852] bridge0: port 1(bridge_slave_0) entered disabled state [ 226.097870][ T5094] Bluetooth: hci2: command tx timeout [ 226.151480][ T2852] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 226.173122][ T7655] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 226.197427][ T2852] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 226.226076][ T2852] bond0 (unregistering): Released all slaves [ 226.427241][ T7634] chnl_net:caif_netlink_parms(): no params data found [ 227.008005][ T2852] hsr_slave_0: left promiscuous mode [ 227.049019][ T2852] hsr_slave_1: left promiscuous mode [ 227.102181][ T2852] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 227.113982][ T2852] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 227.132048][ T2852] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 227.144676][ T2852] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 227.207523][ T2852] veth1_macvtap: left promiscuous mode [ 227.223551][ T2852] veth0_macvtap: left promiscuous mode [ 227.261171][ T2852] veth1_vlan: left promiscuous mode [ 227.286830][ T2852] veth0_vlan: left promiscuous mode [ 227.301545][ T7670] nvme_fabrics: missing parameter 'transport=%s' [ 227.312621][ T7670] nvme_fabrics: missing parameter 'nqn=%s' [ 227.327699][ T7672] nvme_fabrics: unknown parameter or missing value '' in ctrl creation request [ 228.175096][ T5094] Bluetooth: hci2: command tx timeout [ 228.654428][ T2852] team0 (unregistering): Port device team_slave_1 removed [ 228.728543][ T2852] team0 (unregistering): Port device team_slave_0 removed [ 229.591890][ T7634] bridge0: port 1(bridge_slave_0) entered blocking state [ 229.600459][ T7634] bridge0: port 1(bridge_slave_0) entered disabled state [ 229.611826][ T7634] bridge_slave_0: entered allmulticast mode [ 229.619364][ T7634] bridge_slave_0: entered promiscuous mode [ 229.663538][ T7634] bridge0: port 2(bridge_slave_1) entered blocking state [ 229.771830][ T7634] bridge0: port 2(bridge_slave_1) entered disabled state [ 229.819521][ T7634] bridge_slave_1: entered allmulticast mode [ 230.255080][ T5094] Bluetooth: hci2: command tx timeout [ 230.467040][ T7634] bridge_slave_1: entered promiscuous mode [ 230.646259][ T7634] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 230.666698][ T7714] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 230.670406][ T7634] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 230.673350][ T7714] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 230.703785][ T7714] vhci_hcd vhci_hcd.0: Device attached [ 230.758734][ T7718] usbip_core: unknown command [ 230.763468][ T7718] vhci_hcd: unknown pdu 3020988904 [ 230.782462][ T7718] usbip_core: unknown command [ 230.822257][ T51] vhci_hcd: stop threads [ 230.838707][ T51] vhci_hcd: release socket [ 230.864155][ T51] vhci_hcd: disconnect device [ 230.874850][ T929] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 230.905227][ T45] vhci_hcd: vhci_device speed not set [ 230.929352][ T7634] team0: Port device team_slave_0 added [ 230.968644][ T7634] team0: Port device team_slave_1 added [ 231.077927][ T929] usb 3-1: Using ep0 maxpacket: 8 [ 231.096207][ T929] usb 3-1: config 1 has an invalid interface number: 205 but max is 0 [ 231.107109][ T7634] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 231.114148][ T7634] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 231.151369][ T929] usb 3-1: config 1 has an invalid descriptor of length 209, skipping remainder of the config [ 231.173525][ T929] usb 3-1: config 1 has no interface number 0 [ 231.183380][ T929] usb 3-1: config 1 interface 205 has no altsetting 0 [ 231.199257][ T929] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 231.214180][ T929] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 231.227830][ T929] usb 3-1: Product: syz [ 231.232069][ T929] usb 3-1: Manufacturer: syz [ 231.232812][ T7634] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 231.236887][ T929] usb 3-1: SerialNumber: syz [ 231.299849][ T7634] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 231.319964][ T7634] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 231.346086][ C0] vkms_vblank_simulate: vblank timer overrun [ 231.374921][ T7634] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 231.554686][ T5093] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 231.611710][ T7634] hsr_slave_0: entered promiscuous mode [ 231.663353][ T7634] hsr_slave_1: entered promiscuous mode [ 231.691878][ T7634] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 231.706730][ T7634] Cannot create hsr debugfs directory [ 231.754653][ T5093] usb 5-1: Using ep0 maxpacket: 8 [ 231.802125][ T5093] usb 5-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 231.896522][ T5093] usb 5-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=20.9d [ 231.952411][ T5093] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 231.985985][ T5093] usb 5-1: config 0 descriptor?? [ 232.206864][ T5093] usb 5-1: USB disconnect, device number 9 [ 232.334646][ T5094] Bluetooth: hci2: command tx timeout [ 233.185288][ T5176] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 233.984948][ T5176] usb 4-1: Using ep0 maxpacket: 32 [ 234.001231][ T5176] usb 4-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 234.026676][ T929] usb 3-1: USB disconnect, device number 7 [ 234.044613][ T5176] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 234.065219][ T5176] usb 4-1: Product: syz [ 234.072925][ T5176] usb 4-1: Manufacturer: syz [ 234.095717][ T5176] usb 4-1: SerialNumber: syz [ 234.124411][ T5176] usb 4-1: config 0 descriptor?? [ 234.141278][ T5176] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 234.155410][ T7778] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 234.161987][ T7778] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 234.196162][ T7778] vhci_hcd vhci_hcd.0: Device attached [ 234.222113][ T7779] usbip_core: unknown command [ 234.233460][ T7779] vhci_hcd: unknown pdu 3020988904 [ 234.260552][ T7779] usbip_core: unknown command [ 234.307045][ T1104] vhci_hcd: stop threads [ 234.311350][ T1104] vhci_hcd: release socket [ 234.351216][ T1104] vhci_hcd: disconnect device [ 234.394854][ T5140] vhci_hcd: vhci_device speed not set [ 234.483297][ T7634] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 234.516398][ T7634] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 234.549263][ T7634] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 234.591103][ T7634] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 234.976912][ T7634] 8021q: adding VLAN 0 to HW filter on device bond0 [ 235.060536][ T7634] 8021q: adding VLAN 0 to HW filter on device team0 [ 235.089088][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 235.096851][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 235.128638][ T5193] bridge0: port 2(bridge_slave_1) entered blocking state [ 235.135876][ T5193] bridge0: port 2(bridge_slave_1) entered forwarding state [ 235.182629][ T5176] gspca_stk1135: reg_w 0x7 err -71 [ 235.199550][ T5176] gspca_stk1135: serial bus timeout: status=0x00 [ 235.225259][ T5176] gspca_stk1135: Sensor write failed [ 235.240994][ T5176] gspca_stk1135: serial bus timeout: status=0x00 [ 235.255173][ T5176] gspca_stk1135: Sensor write failed [ 235.266102][ T5176] gspca_stk1135: serial bus timeout: status=0x00 [ 235.293679][ T5176] gspca_stk1135: Sensor read failed [ 235.303843][ T5176] gspca_stk1135: serial bus timeout: status=0x00 [ 235.320636][ T5176] gspca_stk1135: Sensor read failed [ 235.334141][ T5176] gspca_stk1135: Detected sensor type unknown (0x0) [ 235.353729][ T5176] gspca_stk1135: serial bus timeout: status=0x00 [ 235.366913][ T5176] gspca_stk1135: Sensor read failed [ 235.372357][ T5176] gspca_stk1135: serial bus timeout: status=0x00 [ 235.405773][ T5176] gspca_stk1135: Sensor read failed [ 235.429598][ T5176] gspca_stk1135: serial bus timeout: status=0x00 [ 235.454832][ T5176] gspca_stk1135: Sensor write failed [ 235.474628][ T5176] gspca_stk1135: serial bus timeout: status=0x00 [ 235.492068][ T5176] gspca_stk1135: Sensor write failed [ 235.501460][ T5176] stk1135 4-1:0.0: probe with driver stk1135 failed with error -71 [ 235.518229][ T5176] usb 4-1: USB disconnect, device number 6 [ 235.717330][ T7634] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 235.844353][ T7634] veth0_vlan: entered promiscuous mode [ 235.855947][ T5193] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 235.909208][ T7634] veth1_vlan: entered promiscuous mode [ 235.951980][ T7825] input: syz1 as /devices/virtual/input/input14 [ 236.033633][ T7634] veth0_macvtap: entered promiscuous mode [ 236.073607][ T7634] veth1_macvtap: entered promiscuous mode [ 236.168355][ T7634] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 236.218134][ T7634] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.254824][ T5193] usb 2-1: Using ep0 maxpacket: 8 [ 236.260223][ T7634] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 236.269265][ T5193] usb 2-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 236.282629][ T7829] input: syz1 as /devices/virtual/input/input15 [ 236.290005][ T5193] usb 2-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=20.9d [ 236.293177][ T7634] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.304515][ T5193] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 236.358969][ T7634] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 236.474263][ T7634] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.534018][ T7634] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 236.653074][ T7634] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.823351][ T7634] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 237.055394][ T5193] usb 2-1: config 0 descriptor?? [ 237.063761][ T7634] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 237.109683][ T7634] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 237.131637][ T7634] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 237.157056][ T7634] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 237.176447][ T7634] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 237.193139][ T7634] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 237.208920][ T7634] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 237.223048][ T7634] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 237.245964][ T7634] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 237.337069][ T45] usb 2-1: USB disconnect, device number 10 [ 237.359315][ T7634] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.378064][ T7634] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.392829][ T7634] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.403582][ T7634] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.639040][ T2852] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 237.674755][ T2852] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 237.788367][ T81] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 237.798416][ T81] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 239.155589][ T7866] Process accounting resumed [ 239.951358][ T5219] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 240.864794][ T5219] usb 4-1: Using ep0 maxpacket: 8 [ 240.889799][ T5219] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 240.909737][ T5219] usb 4-1: config 179 has no interface number 0 [ 240.920577][ T5219] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 240.949917][ T5219] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 240.963119][ T5219] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 240.974341][ T5219] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 240.988785][ T5219] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 241.004258][ T7909] binder: BINDER_SET_CONTEXT_MGR already set [ 241.022061][ T7909] binder: 7906:7909 ioctl 4018620d 20000040 returned -16 [ 241.034546][ T5219] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 241.087015][ T7885] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 241.365714][ T5219] usb 4-1: USB disconnect, device number 7 [ 241.497116][ T5176] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 241.695731][ T5176] usb 1-1: Using ep0 maxpacket: 8 [ 241.738506][ T5176] usb 1-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 241.785985][ T5176] usb 1-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=20.9d [ 241.835409][ T5176] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 241.868370][ T5176] usb 1-1: config 0 descriptor?? [ 241.908854][ T7913] Process accounting resumed [ 242.108218][ T5140] usb 1-1: USB disconnect, device number 5 [ 243.191603][ T7938] binder_alloc: 7937: binder_alloc_buf, no vma [ 243.218517][ T7935] kernel read not supported for file /  (pid: 7935 comm: syz.3.926) [ 243.244368][ T29] audit: type=1800 audit(2000000019.200:35): pid=7935 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.3.926" name=2001 dev="mqueue" ino=20605 res=0 errno=0 [ 243.598768][ T7959] netlink: 164 bytes leftover after parsing attributes in process `syz.1.936'. [ 243.657079][ T7951] syzkaller0: entered promiscuous mode [ 243.662627][ T7951] syzkaller0: entered allmulticast mode [ 243.755092][ T7966] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 243.871548][ T7966] syz.4.932: attempt to access beyond end of device [ 243.871548][ T7966] nbd4: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 243.903500][ T7972] binder_alloc: 7971: binder_alloc_buf, no vma [ 243.911190][ T7966] SQUASHFS error: Failed to read block 0x0: -5 [ 243.920114][ T7966] unable to read squashfs_super_block [ 245.539095][ T7999] binder: BINDER_SET_CONTEXT_MGR already set [ 245.607947][ T7999] binder: 7998:7999 ioctl 4018620d 20000040 returned -16 [ 245.949007][ T8010] netlink: 164 bytes leftover after parsing attributes in process `syz.3.955'. [ 246.824929][ T5094] Bluetooth: hci1: command tx timeout [ 248.416389][ T8059] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 248.474798][ T5219] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 248.576209][ T5094] Bluetooth: hci2: command tx timeout [ 248.652064][ T8059] syz.1.968: attempt to access beyond end of device [ 248.652064][ T8059] nbd1: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 248.672319][ T8059] SQUASHFS error: Failed to read block 0x0: -5 [ 248.680879][ T8059] unable to read squashfs_super_block [ 248.720713][ T5219] usb 1-1: New USB device found, idVendor=0c45, idProduct=6025, bcdDevice=41.12 [ 248.745834][ T5219] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 248.781679][ T5219] usb 1-1: config 0 descriptor?? [ 248.798647][ T5219] hub 1-1:0.0: bad descriptor, ignoring hub [ 248.988707][ T5219] hub 1-1:0.0: probe with driver hub failed with error -5 [ 249.027729][ T5219] gspca_main: sonixb-2.14.0 probing 0c45:6025 [ 250.317546][ T5093] usb 1-1: USB disconnect, device number 6 [ 250.483751][ T8086] netlink: 12 bytes leftover after parsing attributes in process `syz.3.976'. [ 252.775045][ T5140] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 252.975413][ T5140] usb 2-1: Using ep0 maxpacket: 32 [ 253.002982][ T5140] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x31 has invalid maxpacket 13364, setting to 64 [ 253.013737][ T8126] overlayfs: failed to get index nlink (file1/bus, err=-61) [ 253.037640][ T5140] usb 2-1: New USB device found, idVendor=06f8, idProduct=b000, bcdDevice=cb.c8 [ 253.064236][ T5140] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 253.093077][ T5140] usb 2-1: Product: syz [ 253.105854][ T5140] usb 2-1: Manufacturer: syz [ 253.114924][ T5140] usb 2-1: SerialNumber: syz [ 253.123730][ T5140] usb 2-1: config 0 descriptor?? [ 253.133984][ T8134] netlink: 4 bytes leftover after parsing attributes in process `syz.4.990'. [ 253.390403][ T8139] syzkaller0: entered promiscuous mode [ 253.397822][ T8139] syzkaller0: entered allmulticast mode [ 253.414911][ T8147] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 253.454132][ T5140] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 253.895497][ T5140] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 257.101570][ T5093] usb 2-1: USB disconnect, device number 11 [ 257.125683][ T1250] ieee802154 phy0 wpan0: encryption failed: -22 [ 257.133995][ T1250] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.240488][ T8138] syz.3.989: attempt to access beyond end of device [ 257.240488][ T8138] nbd3: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 257.270850][ T8138] SQUASHFS error: Failed to read block 0x0: -5 [ 257.294092][ T8138] unable to read squashfs_super_block [ 257.973491][ T8160] ------------[ cut here ]------------ [ 257.979672][ T8160] WARNING: CPU: 1 PID: 8160 at net/kcm/kcmsock.c:630 kcm_write_msgs+0x141b/0x15c0 [ 257.989346][ T8160] Modules linked in: [ 257.993302][ T8160] CPU: 1 PID: 8160 Comm: syz.1.998 Not tainted 6.10.0-rc7-syzkaller-00025-ga19ea421490d #0 [ 258.003598][ T8160] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 258.014368][ T8160] RIP: 0010:kcm_write_msgs+0x141b/0x15c0 [ 258.020921][ T8160] Code: fb 30 f4 f6 4d 85 f6 74 60 e8 f1 30 f4 f6 48 8b 5c 24 30 48 89 df e8 54 9e ff ff eb 56 e8 dd 30 f4 f6 eb 4a e8 d6 30 f4 f6 90 <0f> 0b 90 41 bd ea ff ff ff 49 bc 00 00 00 00 00 fc ff df eb 2f e8 [ 258.040956][ T8160] RSP: 0018:ffffc900094576e0 EFLAGS: 00010246 [ 258.047568][ T8160] RAX: ffffffff8aa1f5ea RBX: 0000000000000000 RCX: 0000000000040000 [ 258.055690][ T8160] RDX: ffffc9000ade1000 RSI: 000000000003ffff RDI: 0000000000040000 [ 258.063713][ T8160] RBP: ffffc900094578d0 R08: ffffffff8aa1eb57 R09: 0000000000000000 [ 258.071785][ T8160] R10: ffffc900094577e0 R11: fffff5200128af09 R12: 0000000000000140 [ 258.080007][ T8160] R13: ffff888024d8048c R14: ffff888079ff1042 R15: ffff888079ff0f00 [ 258.088186][ T8160] FS: 00007fbd3cfde6c0(0000) GS:ffff8880b9500000(0000) knlGS:0000000000000000 [ 258.097609][ T8160] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 258.104259][ T8160] CR2: 00007fb654e356b8 CR3: 0000000063f24000 CR4: 00000000003506f0 [ 258.113185][ T8160] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 258.121833][ T8160] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 258.129979][ T8160] Call Trace: [ 258.133556][ T8160] [ 258.136858][ T8160] ? __warn+0x163/0x4e0 [ 258.141086][ T8160] ? kcm_write_msgs+0x141b/0x15c0 [ 258.146392][ T8160] ? report_bug+0x2b3/0x500 [ 258.150968][ T8160] ? kcm_write_msgs+0x141b/0x15c0 [ 258.156180][ T8160] ? handle_bug+0x3e/0x70 [ 258.160587][ T8160] ? exc_invalid_op+0x1a/0x50 [ 258.165407][ T8160] ? asm_exc_invalid_op+0x1a/0x20 [ 258.170609][ T8160] ? kcm_write_msgs+0x987/0x15c0 [ 258.176888][ T8160] ? kcm_write_msgs+0x141a/0x15c0 [ 258.181994][ T8160] ? kcm_write_msgs+0x141b/0x15c0 [ 258.187220][ T8160] ? __pfx_kcm_write_msgs+0x10/0x10 [ 258.192498][ T8160] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 258.198395][ T8160] kcm_sendmsg+0x21b7/0x27c0 [ 258.203078][ T8160] ? __pfx_validate_chain+0x10/0x10 [ 258.208600][ T8160] ? smack_socket_sendmsg+0x172/0x540 [ 258.214830][ T8160] ? __pfx_smack_socket_sendmsg+0x10/0x10 [ 258.220624][ T8160] ? tomoyo_socket_sendmsg_permission+0x288/0x420 [ 258.228919][ T8160] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 258.235619][ T8160] ? __pfx_tomoyo_socket_sendmsg_permission+0x10/0x10 [ 258.238238][ T8169] overlayfs: failed to get index nlink (file1/bus, err=-61) [ 258.242429][ T8160] ? try_to_wake_up+0x9a1/0x1470 [ 258.255870][ T8160] ? __pfx_kcm_sendmsg+0x10/0x10 [ 258.260935][ T8160] ? preempt_schedule+0xe1/0xf0 [ 258.265891][ T8160] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 258.271241][ T8160] ? security_socket_sendmsg+0x87/0xb0 [ 258.276864][ T8160] ? __pfx_kcm_sendmsg+0x10/0x10 [ 258.281873][ T8160] __sock_sendmsg+0x221/0x270 [ 258.286706][ T8160] sock_write_iter+0x2dd/0x400 [ 258.292255][ T8160] ? __pfx_sock_write_iter+0x10/0x10 [ 258.297716][ T8160] ? bpf_lsm_file_permission+0x9/0x10 [ 258.303150][ T8160] ? security_file_permission+0x7f/0xa0 [ 258.308816][ T8160] vfs_write+0xa72/0xc90 [ 258.313874][ T8160] ? __pfx_sock_write_iter+0x10/0x10 [ 258.319897][ T8160] ? __pfx_vfs_write+0x10/0x10 [ 258.324806][ T8160] ? do_futex+0x392/0x560 [ 258.329229][ T8160] ksys_write+0x1a0/0x2c0 [ 258.333640][ T8160] ? __pfx_ksys_write+0x10/0x10 [ 258.339344][ T8160] ? do_syscall_64+0x100/0x230 [ 258.344198][ T8160] ? do_syscall_64+0xb6/0x230 [ 258.349506][ T8160] do_syscall_64+0xf3/0x230 [ 258.354097][ T8160] ? clear_bhb_loop+0x35/0x90 [ 258.358886][ T8160] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 258.364884][ T8160] RIP: 0033:0x7fbd3d575bd9 [ 258.369357][ T8160] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 258.389057][ T8160] RSP: 002b:00007fbd3cfde048 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 258.397580][ T8160] RAX: ffffffffffffffda RBX: 00007fbd3d704038 RCX: 00007fbd3d575bd9 [ 258.405684][ T8160] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 [ 258.414398][ T8160] RBP: 00007fbd3d5e4e60 R08: 0000000000000000 R09: 0000000000000000 [ 258.423019][ T8160] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 258.431145][ T8160] R13: 000000000000006e R14: 00007fbd3d704038 R15: 00007fff33f4fba8 [ 258.439468][ T8160] [ 258.442706][ T8160] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 258.450021][ T8160] CPU: 1 PID: 8160 Comm: syz.1.998 Not tainted 6.10.0-rc7-syzkaller-00025-ga19ea421490d #0 [ 258.460063][ T8160] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 258.470154][ T8160] Call Trace: [ 258.473443][ T8160] [ 258.476393][ T8160] dump_stack_lvl+0x241/0x360 [ 258.481131][ T8160] ? __pfx_dump_stack_lvl+0x10/0x10 [ 258.486419][ T8160] ? __pfx__printk+0x10/0x10 [ 258.491055][ T8160] ? vscnprintf+0x5d/0x90 [ 258.495413][ T8160] panic+0x349/0x860 [ 258.499357][ T8160] ? __warn+0x172/0x4e0 [ 258.503544][ T8160] ? __pfx_panic+0x10/0x10 [ 258.507993][ T8160] __warn+0x346/0x4e0 [ 258.512016][ T8160] ? kcm_write_msgs+0x141b/0x15c0 [ 258.517088][ T8160] report_bug+0x2b3/0x500 [ 258.521463][ T8160] ? kcm_write_msgs+0x141b/0x15c0 [ 258.526542][ T8160] handle_bug+0x3e/0x70 [ 258.530916][ T8160] exc_invalid_op+0x1a/0x50 [ 258.535445][ T8160] asm_exc_invalid_op+0x1a/0x20 [ 258.540346][ T8160] RIP: 0010:kcm_write_msgs+0x141b/0x15c0 [ 258.546039][ T8160] Code: fb 30 f4 f6 4d 85 f6 74 60 e8 f1 30 f4 f6 48 8b 5c 24 30 48 89 df e8 54 9e ff ff eb 56 e8 dd 30 f4 f6 eb 4a e8 d6 30 f4 f6 90 <0f> 0b 90 41 bd ea ff ff ff 49 bc 00 00 00 00 00 fc ff df eb 2f e8 [ 258.565695][ T8160] RSP: 0018:ffffc900094576e0 EFLAGS: 00010246 [ 258.571805][ T8160] RAX: ffffffff8aa1f5ea RBX: 0000000000000000 RCX: 0000000000040000 [ 258.579800][ T8160] RDX: ffffc9000ade1000 RSI: 000000000003ffff RDI: 0000000000040000 [ 258.587796][ T8160] RBP: ffffc900094578d0 R08: ffffffff8aa1eb57 R09: 0000000000000000 [ 258.595784][ T8160] R10: ffffc900094577e0 R11: fffff5200128af09 R12: 0000000000000140 [ 258.603790][ T8160] R13: ffff888024d8048c R14: ffff888079ff1042 R15: ffff888079ff0f00 [ 258.611788][ T8160] ? kcm_write_msgs+0x987/0x15c0 [ 258.616753][ T8160] ? kcm_write_msgs+0x141a/0x15c0 [ 258.621837][ T8160] ? __pfx_kcm_write_msgs+0x10/0x10 [ 258.627072][ T8160] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 258.632814][ T8160] kcm_sendmsg+0x21b7/0x27c0 [ 258.637429][ T8160] ? __pfx_validate_chain+0x10/0x10 [ 258.642649][ T8160] ? smack_socket_sendmsg+0x172/0x540 [ 258.648047][ T8160] ? __pfx_smack_socket_sendmsg+0x10/0x10 [ 258.653784][ T8160] ? tomoyo_socket_sendmsg_permission+0x288/0x420 [ 258.660225][ T8160] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 258.666580][ T8160] ? __pfx_tomoyo_socket_sendmsg_permission+0x10/0x10 [ 258.673361][ T8160] ? try_to_wake_up+0x9a1/0x1470 [ 258.678318][ T8160] ? __pfx_kcm_sendmsg+0x10/0x10 [ 258.683276][ T8160] ? preempt_schedule+0xe1/0xf0 [ 258.688138][ T8160] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 258.693432][ T8160] ? security_socket_sendmsg+0x87/0xb0 [ 258.698912][ T8160] ? __pfx_kcm_sendmsg+0x10/0x10 [ 258.703862][ T8160] __sock_sendmsg+0x221/0x270 [ 258.708565][ T8160] sock_write_iter+0x2dd/0x400 [ 258.713354][ T8160] ? __pfx_sock_write_iter+0x10/0x10 [ 258.718669][ T8160] ? bpf_lsm_file_permission+0x9/0x10 [ 258.724056][ T8160] ? security_file_permission+0x7f/0xa0 [ 258.729653][ T8160] vfs_write+0xa72/0xc90 [ 258.733939][ T8160] ? __pfx_sock_write_iter+0x10/0x10 [ 258.739292][ T8160] ? __pfx_vfs_write+0x10/0x10 [ 258.744093][ T8160] ? do_futex+0x392/0x560 [ 258.748489][ T8160] ksys_write+0x1a0/0x2c0 [ 258.752871][ T8160] ? __pfx_ksys_write+0x10/0x10 [ 258.757754][ T8160] ? do_syscall_64+0x100/0x230 [ 258.762545][ T8160] ? do_syscall_64+0xb6/0x230 [ 258.767261][ T8160] do_syscall_64+0xf3/0x230 [ 258.771791][ T8160] ? clear_bhb_loop+0x35/0x90 [ 258.776604][ T8160] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 258.782520][ T8160] RIP: 0033:0x7fbd3d575bd9 [ 258.786950][ T8160] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 258.806569][ T8160] RSP: 002b:00007fbd3cfde048 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 258.815003][ T8160] RAX: ffffffffffffffda RBX: 00007fbd3d704038 RCX: 00007fbd3d575bd9 [ 258.822985][ T8160] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 [ 258.831059][ T8160] RBP: 00007fbd3d5e4e60 R08: 0000000000000000 R09: 0000000000000000 [ 258.839044][ T8160] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 258.847026][ T8160] R13: 000000000000006e R14: 00007fbd3d704038 R15: 00007fff33f4fba8 [ 258.855047][ T8160] [ 258.858240][ T8160] Kernel Offset: disabled [ 258.862717][ T8160] Rebooting in 86400 seconds..