last executing test programs: 10.821016321s ago: executing program 4 (id=1092): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) faccessat(0xffffffffffffffff, 0x0, 0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r3 = dup(r2) r4 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x62800) socket$nl_route(0x10, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, 0x0, 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x5, 0x12, r4, 0x0) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) read$FUSE(r3, &(0x7f0000001740)={0x2020}, 0x2020) 10.65813909s ago: executing program 0 (id=1094): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(0xffffffffffffffff, 0x0, 0x0) listen(r3, 0xfffffffc) 9.191682868s ago: executing program 0 (id=1095): mkdirat(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000500)={[0x5]}, 0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000040), 0xa, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x2, &(0x7f0000000040)=[{0x74, 0x1, 0xfa, 0xe}, {0x6, 0x95, 0x2, 0x2}]}) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0xe) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x10, &(0x7f0000000580)=@framed={{}, [@snprintf={{}, {}, {}, {}, {}, {0x7, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffe00}, {}, {0x7, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffe11}, {}, {0x18, 0x3, 0x2, 0x0, r1}, {}, {0x85, 0x0, 0x0, 0xc5}}]}, &(0x7f0000000300)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 9.126080577s ago: executing program 2 (id=1098): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008001500b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = gettid() timer_create(0x2, &(0x7f000049efa0)={0x0, 0x7, 0x4, @tid=r2}, &(0x7f0000044000)) rt_sigtimedwait(&(0x7f0000000040)={[0xffffffff]}, 0x0, 0x0, 0x8) timer_settime(0x0, 0xffffffffffffffff, &(0x7f0000000080)={{0x77359400}, {0x0, 0x9}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 7.483660878s ago: executing program 0 (id=1100): r0 = socket(0x8000000010, 0x2, 0x0) write(r0, &(0x7f00000002c0)="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", 0xfc) ftruncate(0xffffffffffffffff, 0x101) r1 = socket(0x840000000002, 0x3, 0x100) connect$inet(r1, &(0x7f0000000400)={0x2, 0x4e20, @remote}, 0x10) sendmmsg$inet(r1, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x4000095, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/address_bits', 0x70000, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$sock_inet_SIOCSARP(r2, 0x8955, &(0x7f0000000180)={{0x2, 0x4e23, @empty}, {0x20000010304, @local}, 0x4, {0x2, 0x4e20, @rand_addr=0x64010102}}) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) syncfs(r3) bpf$PROG_LOAD(0x5, 0x0, 0x0) 7.374003661s ago: executing program 2 (id=1101): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0}, 0x0, &(0x7f0000000040)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe2(&(0x7f0000001440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) splice(r5, 0x0, r4, 0x0, 0x3, 0x0) fcntl$setpipe(r3, 0x4, 0xfffffffffffff000) 7.0512999s ago: executing program 0 (id=1104): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[], 0x7c}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) ioctl$sock_bt_hidp_HIDPCONNADD(0xffffffffffffffff, 0x400448c8, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x82, 0xca, 0x15c2, 0x5886, 0x801, 0x0, 0x8, 'syz1\x00'}) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={0xffffffffffffffff, 0x0, 0x0}, 0x20) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 6.726308065s ago: executing program 0 (id=1106): syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) io_setup(0x7ff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, 0x0) socket$packet(0x11, 0x3, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sendmmsg(0xffffffffffffffff, &(0x7f0000000480), 0x2e9, 0xb00) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) 5.818274799s ago: executing program 4 (id=1108): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) getpid() r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) lseek(r3, 0x851, 0x0) 5.801618442s ago: executing program 2 (id=1109): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r4, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000200040010000800014004000000", 0x58}], 0x1) 5.648149657s ago: executing program 1 (id=1110): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffd59}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5c0000000206050000000000000000000000000005000400000000000900020073797a32000000001400078008000640200000000800084000000000050005000a0000000500010006feff000d000300686173683a6e6574"], 0x5c}}, 0x0) 4.674030917s ago: executing program 3 (id=1111): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, &(0x7f00000000c0)}) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0x3, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_inet_SIOCGARP(r1, 0x89a3, &(0x7f0000000340)={{0x3a, 0x0, @private}, {0x0, @multicast}, 0x0, {0x2, 0x0, @remote}}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, 0x0, &(0x7f00000001c0)='GPL\x00', 0x5, 0xd1, &(0x7f0000000800)=""/209, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f00000003c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc0006}]}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a0000000100000008000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000016"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00'}, 0x10) msgget$private(0x0, 0x6) preadv(0xffffffffffffffff, &(0x7f0000002400)=[{&(0x7f0000000040)=""/90, 0x5a}], 0x1, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) 4.361871797s ago: executing program 3 (id=1112): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha512-ssse3\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x0, 0x0) getsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x53, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000a00)=@mangle={'mangle\x00', 0x44, 0x6, 0x4d0, 0xd0, 0xd0, 0x1e0, 0x1e0, 0x278, 0x468, 0x468, 0x468, 0x468, 0x468, 0x6, 0x0, {[{{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'geneve1\x00', 'ip6gre0\x00', {}, {}, 0x11}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @empty}}}, {{@uncond, 0x0, 0xe8, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@osf={{0x50}, {'syz1\x00'}}]}, @ECN={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0xe8, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@osf={{0x50}, {'syz0\x00'}}]}, @TTL={0x28}}, {{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'lo\x00', 'nr0\x00', {}, {}, 0x89}, 0x0, 0x98, 0xe0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x530) sendmmsg$inet6(r1, &(0x7f0000002640)=[{{0x0, 0x0, &(0x7f0000002f00)=[{&(0x7f0000002b40)='u', 0x1}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) 4.087544216s ago: executing program 2 (id=1113): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB='\n\x00\x00\x00\a\x00\x00\x00\x00', @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c3a00000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000080000850000002d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000280)=@req={0xfffffffc, 0x7, 0xb, 0x3}, 0x10) bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'sha1-ssse3\x00'}, 0x58) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a5c000000060a0b04000000000000000002000000300004802c000180090001007866726d000000001c0002800800014000000011050003000100000008000240000000030900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000a75ee9500c3d4bfeb58cca7ea004a4aca3cde82ac3156203b1746150b3f5a35635a75b02a41e5af201c9abb4f48da6dc5e1bd3e3502e05f9e60d6a638eebec41b8c63de8c7a62cb4c"], 0x84}}, 0x0) close(0x3) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x481, 0x0) syz_usb_connect$hid(0xf63067478e218e8, 0x36, &(0x7f00000000c0)=ANY=[], 0x0) ioctl$SNAPSHOT_ATOMIC_RESTORE(r2, 0x3304) 4.08684276s ago: executing program 4 (id=1114): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f0000000100)={'ip6tnl0\x00', 0x0, 0x2f, 0xa4, 0x1, 0xb0000000, 0x14, @dev={0xfe, 0x80, '\x00', 0x44}, @mcast1, 0x7800, 0x8000, 0x3, 0x401}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff752b056800080000faff8141", @ANYRES32=0x0, @ANYBLOB="67a9fde500000000280012800a00010076786c616e"], 0x3}}, 0x0) r2 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x7, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0xffffffb1, 0x2, [@TCA_FLOWER_KEY_IP_TTL={0x0, 0x4b, 0x8}]}}]}, 0x3c}}, 0x24000000) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r5, 0x0, 0x4ffe6, 0x0) 4.066325213s ago: executing program 1 (id=1115): r0 = socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$can_bcm(r0, 0x0, 0x0) sendmsg$can_bcm(r0, 0x0, 0x8800) r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000080)={'vxcan1\x00', 0x0}) connect$can_bcm(r1, &(0x7f0000000300)={0x1d, r2}, 0x10) sendmsg$can_bcm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000480)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0) sendmsg$can_bcm(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="0500"/12, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000000001"], 0x48}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x400c804}, 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r5}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) 3.877982946s ago: executing program 3 (id=1116): brk(0xc00000000000) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c00004a3cebde8228ab3fe7000203010300000040000000000000400008000100f8ffffffd53034a2e81c250c524713ac7bc3082c278ad9085de30c872f6037144bf5c1653e54a2a68a6509b986b3a26974f2490d66249e7eae5059d19c1d50bd760adcaaaf2210bcc00997dd20914af87a8dcd6e2377411cc3c37217d729869a6400000000000000000944c55d7981311de7934d42cc65fc1e35e6a7be144880b596000e8ce5c73ececf46ee00000000000000088f7a73a54528740032d809f5ef3e0eeb0d070a90b44968d47e12e55c5c9091b37d80750982dae8653da067571574"], 0x1c}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000f40)=ANY=[@ANYBLOB="4000000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="81ffffff00000000180012800e0001007769726567756172640000000400028008000a00bc"], 0x40}}, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000005000000005e002200850000006d00000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x78597f98e20a6647, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x10) capset(&(0x7f0000000340)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x20000000}) setrlimit(0x40000000000008, &(0x7f0000000380)) r3 = socket$inet6(0xa, 0x800000000000002, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2000006, 0x100010, r3, 0x4a5c7000) setsockopt$sock_linger(r3, 0x1, 0x3c, &(0x7f00000003c0)={0x200000000000001}, 0x8) sendto$inet6(r3, 0x0, 0x0, 0x4c881, &(0x7f0000000540)={0xa, 0x4e24, 0x0, @mcast2}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000000600)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="01", 0x1}], 0x1}}], 0x1, 0x400c404) 3.778263376s ago: executing program 1 (id=1117): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r9, {0xf000, 0xffff}, {}, {0x7}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001440)=@delchain={0x24, 0x66, 0x1, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff3}, {}, {0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) 3.01855968s ago: executing program 2 (id=1118): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0x6, 0x70, 0x1}) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x1000f0000) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000001c0)) mremap(&(0x7f0000340000/0x4000)=nil, 0x4017, 0x3000, 0x3, &(0x7f0000001000/0x3000)=nil) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) open(0x0, 0x0, 0x0) r2 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r2, &(0x7f0000000600)={&(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, &(0x7f0000000000)=[{&(0x7f00000000c0)="80", 0x1}], 0x1, &(0x7f0000000640)=[{0x10, 0x84, 0x8}, {0x18, 0x84, 0x0, 'b'}], 0x28}, 0x41) 2.963239577s ago: executing program 3 (id=1119): sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000540)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000001c0)={'sit0\x00', 0x1120}) r1 = socket$packet(0x11, 0x3, 0x300) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000740)="565a92bd2ad96a4be42a5362d1118459ca318a12aa0083", 0x17, 0x2000c0c0, &(0x7f0000000000)={0x11, 0x6, r2, 0x1, 0x1, 0x6, @local}, 0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c00000013000100000000000000000000000002", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r2, @ANYBLOB="1400350064756d6d7930"], 0x3c}}, 0x0) syz_open_dev$vbi(0x0, 0x2, 0x2) r4 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r4, 0x8922, &(0x7f0000000080)={'dummy0\x00'}) 2.88535181s ago: executing program 4 (id=1120): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xd, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) iopl(0x3) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) 2.758071508s ago: executing program 1 (id=1121): socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f0000000040), 0x10) listen(r0, 0x0) r1 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r1, &(0x7f0000000080), 0x10) setsockopt$sock_linger(r1, 0x1, 0x3c, &(0x7f0000000180)={0x1, 0x5}, 0x8) sendmmsg(r1, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000c00)='_', 0x1}], 0x1}}], 0x1, 0x24008094) r2 = accept4$unix(r0, 0x0, 0x0, 0x0) recvfrom$unix(r2, &(0x7f0000000140)=""/263, 0x107, 0x0, 0x0, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 2.497781944s ago: executing program 2 (id=1122): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000780)={0x58, r0, 0x801, 0x70bd2c, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_KEY={0x30, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "4abee339084eeef16f162471f4"}, @NL80211_KEY_MODE={0x5, 0x9, 0x1}, @NL80211_KEY_IDX={0x5}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}]}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x58}, 0x1, 0x0, 0x0, 0x40905}, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0xa, &(0x7f0000000600)={0x9, 0x8, 0x2, 0x4, 0x10, 0x0, 0xfffffffe, 0x10000}, 0x20) sendto$inet(r3, &(0x7f0000000140)="ab", 0xffe0, 0x4000815, &(0x7f0000000100)={0x2, 0x4e22, @local}, 0x10) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r4 = inotify_init() inotify_add_watch(r4, &(0x7f0000000000)='.\x00', 0x400017e) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0xb) read$FUSE(r5, &(0x7f0000004000)={0x2020}, 0x2020) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000000)=[0xfe01]) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e1310a10f0031d58b776010203010902240001000000000904310002ff0107ff09058a02100000fa0009058202"], 0x0) 1.53207383s ago: executing program 4 (id=1123): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x71c, 0x4e23, 0x2, 0x0, 0x0, 0x0, 0xff}, {@in6=@mcast2, 0x4d6, 0x6c}, @in=@private=0xa010101, {0x0, 0x192, 0x9ba3, 0xffff, 0x251c, 0x3, 0xfffffffffffffffc}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffa, 0xfffffffc}, 0x80, 0x3502, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x800}, 0x0) 1.080224017s ago: executing program 0 (id=1124): r0 = socket$kcm(0x10, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0xffffffffffffff1a, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000), 0x0, 0xa7c}, 0x38) syz_init_net_socket$llc(0x1a, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f00000007c0)="d8000000180081064e81f782db4cb904021d080006007c09e8fe55a10a0015000500142603600e1208000f0000000401a80016002000014002000000035c0461c1d60008000000000000fb8000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cee0090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f0f49e119c849ea6e5a0fc55e4cde205a214d6102d6dcbf33fb5ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6cc", 0xd8}], 0x1}, 0x0) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x8080) r3 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000040)={0x0, r3, r3}, &(0x7f0000000480)=""/250, 0xfa, &(0x7f00000001c0)={&(0x7f0000000080)={'poly1305-generic\x00'}}) read$FUSE(r2, &(0x7f0000000980)={0x2020}, 0x2020) 1.078312464s ago: executing program 1 (id=1125): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r1, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000180)={'wg1\x00'}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$nl_route_sched_retired(r1, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x44090) socket(0x10, 0x3, 0x0) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0xffffffff}, 0x10) r3 = socket(0x1e, 0x4, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r4, &(0x7f0000000180)={0x0, 0xffffffffffffffad, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r5, 0x201, 0x400000, 0x0, {{}, {}, {0x8, 0x11, 0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmsg$kcm(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000a80)=[{0x0}, {&(0x7f0000000c40)="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", 0xd4d}], 0x2}, 0x20000000) 1.041020049s ago: executing program 3 (id=1126): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000000)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) write$FUSE_GETXATTR(r2, &(0x7f00000004c0)={0x18}, 0x18) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000003c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000000200)={0x50, 0x0, r4, {0x7, 0x29, 0x20200, 0x1000, 0x0, 0xee50, 0x0, 0x0, 0x0, 0x0, 0x40}}, 0x50) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_fscache}]}}) r5 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) writev(r5, &(0x7f0000000000)=[{&(0x7f00000000c0)="14", 0x1f68}], 0x2) 490.61873ms ago: executing program 1 (id=1127): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$DRM_IOCTL_GET_UNIQUE(0xffffffffffffffff, 0xc0086401, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x15, 0x10, 0x2, 0x0, 0x0, 0xffffffffffffffff, 0x3ff, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0x17, &(0x7f0000000c80)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {0x7, 0x0, 0xb, 0x2}, {0x85, 0x0, 0x0, 0x51}}, {}, [@printk={@d}], {{}, {}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x7b) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r4, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000400)="5aee41dea43e9eee28e622e563a3", 0x0, 0x3e, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 309.301495ms ago: executing program 4 (id=1128): mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x1a3089, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) setpgid(r0, 0x0) setpgid(0x0, r0) statfs(&(0x7f0000001140)='./file0\x00', 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141a82, 0x20) write$cgroup_int(r2, &(0x7f0000000040)=0x900, 0x12) 0s ago: executing program 3 (id=1129): openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_io_uring_submit(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0x707b, 0x0, 0x4, 0x288}, &(0x7f0000000340)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) socket$alg(0x26, 0x5, 0x0) io_uring_enter(r1, 0x3516, 0x0, 0x4, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.212' (ED25519) to the list of known hosts. [ 82.400164][ T5816] cgroup: Unknown subsys name 'net' [ 82.534425][ T5816] cgroup: Unknown subsys name 'cpuset' [ 82.543298][ T5816] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 84.075353][ T5816] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 86.666896][ T55] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 86.688210][ T5837] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 86.697055][ T5837] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 86.704606][ T5837] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 86.712238][ T5837] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 86.721089][ T5837] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 86.729252][ T5837] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 86.736604][ T5837] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 86.750972][ T5837] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 86.775238][ T5838] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 86.784145][ T5838] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 86.792671][ T5843] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 86.800686][ T5838] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 86.809802][ T5843] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 86.816962][ T5843] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 86.820680][ T5844] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 86.830959][ T5840] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 86.839090][ T5838] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 86.850563][ T5844] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 86.851496][ T5838] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 86.867091][ T5838] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 86.876114][ T55] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 86.883925][ T5837] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 86.884430][ T55] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 86.909304][ T55] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 87.569745][ T5842] chnl_net:caif_netlink_parms(): no params data found [ 87.677397][ T5826] chnl_net:caif_netlink_parms(): no params data found [ 87.827337][ T5828] chnl_net:caif_netlink_parms(): no params data found [ 87.890942][ T5832] chnl_net:caif_netlink_parms(): no params data found [ 87.903445][ T5831] chnl_net:caif_netlink_parms(): no params data found [ 87.967984][ T5842] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.976845][ T5842] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.984505][ T5842] bridge_slave_0: entered allmulticast mode [ 87.992205][ T5842] bridge_slave_0: entered promiscuous mode [ 88.053050][ T5842] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.060220][ T5842] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.068065][ T5842] bridge_slave_1: entered allmulticast mode [ 88.076080][ T5842] bridge_slave_1: entered promiscuous mode [ 88.122753][ T5826] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.129885][ T5826] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.137175][ T5826] bridge_slave_0: entered allmulticast mode [ 88.145680][ T5826] bridge_slave_0: entered promiscuous mode [ 88.184233][ T5826] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.191578][ T5826] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.198799][ T5826] bridge_slave_1: entered allmulticast mode [ 88.206646][ T5826] bridge_slave_1: entered promiscuous mode [ 88.267070][ T5842] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.326483][ T5842] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.360572][ T5828] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.367876][ T5828] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.378273][ T5828] bridge_slave_0: entered allmulticast mode [ 88.385660][ T5828] bridge_slave_0: entered promiscuous mode [ 88.408228][ T5826] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.421790][ T5826] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.456402][ T5828] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.465627][ T5828] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.473329][ T5828] bridge_slave_1: entered allmulticast mode [ 88.481576][ T5828] bridge_slave_1: entered promiscuous mode [ 88.488837][ T5831] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.496794][ T5831] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.504373][ T5831] bridge_slave_0: entered allmulticast mode [ 88.511947][ T5831] bridge_slave_0: entered promiscuous mode [ 88.536971][ T5842] team0: Port device team_slave_0 added [ 88.543219][ T5832] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.550350][ T5832] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.557852][ T5832] bridge_slave_0: entered allmulticast mode [ 88.565380][ T5832] bridge_slave_0: entered promiscuous mode [ 88.590195][ T5831] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.597675][ T5831] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.605202][ T5831] bridge_slave_1: entered allmulticast mode [ 88.612473][ T5831] bridge_slave_1: entered promiscuous mode [ 88.634222][ T5842] team0: Port device team_slave_1 added [ 88.642498][ T5826] team0: Port device team_slave_0 added [ 88.648567][ T5832] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.656131][ T5832] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.663806][ T5832] bridge_slave_1: entered allmulticast mode [ 88.671111][ T5832] bridge_slave_1: entered promiscuous mode [ 88.719211][ T5826] team0: Port device team_slave_1 added [ 88.744611][ T5828] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.811961][ T5828] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.836849][ T5831] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.847522][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.855542][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.882000][ T5842] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.896260][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.903401][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.929516][ T5842] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.955718][ T5832] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.969530][ T5832] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.979734][ T5843] Bluetooth: hci2: command tx timeout [ 88.985522][ T5141] Bluetooth: hci4: command tx timeout [ 88.991309][ T55] Bluetooth: hci1: command tx timeout [ 88.991316][ T5141] Bluetooth: hci3: command tx timeout [ 88.991430][ T5141] Bluetooth: hci0: command tx timeout [ 89.012534][ T5831] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.025993][ T5828] team0: Port device team_slave_0 added [ 89.040856][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.047816][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.074266][ T5826] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.128599][ T5828] team0: Port device team_slave_1 added [ 89.162675][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.169659][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.196280][ T5826] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.210337][ T5832] team0: Port device team_slave_0 added [ 89.233403][ T5831] team0: Port device team_slave_0 added [ 89.240191][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.248241][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.274628][ T5828] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.296108][ T5832] team0: Port device team_slave_1 added [ 89.317782][ T5831] team0: Port device team_slave_1 added [ 89.324451][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.331671][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.357872][ T5828] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.473081][ T5826] hsr_slave_0: entered promiscuous mode [ 89.479534][ T5826] hsr_slave_1: entered promiscuous mode [ 89.491964][ T5842] hsr_slave_0: entered promiscuous mode [ 89.498268][ T5842] hsr_slave_1: entered promiscuous mode [ 89.505290][ T5842] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 89.513259][ T5842] Cannot create hsr debugfs directory [ 89.535017][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.542041][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.567979][ T5831] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.579719][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.587601][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.613898][ T5832] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.626539][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.633730][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.659674][ T5832] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.685110][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.692418][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.718463][ T5831] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.782762][ T5828] hsr_slave_0: entered promiscuous mode [ 89.789093][ T5828] hsr_slave_1: entered promiscuous mode [ 89.795464][ T5828] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 89.803740][ T5828] Cannot create hsr debugfs directory [ 90.009237][ T5832] hsr_slave_0: entered promiscuous mode [ 90.016412][ T5832] hsr_slave_1: entered promiscuous mode [ 90.023232][ T5832] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 90.030880][ T5832] Cannot create hsr debugfs directory [ 90.054261][ T5831] hsr_slave_0: entered promiscuous mode [ 90.061022][ T5831] hsr_slave_1: entered promiscuous mode [ 90.067097][ T5831] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 90.074830][ T5831] Cannot create hsr debugfs directory [ 90.508737][ T5842] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 90.523856][ T5842] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 90.536529][ T5842] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 90.547944][ T5842] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 90.614583][ T5831] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 90.627437][ T5831] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 90.654031][ T5831] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 90.674074][ T5831] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 90.725515][ T5828] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 90.756623][ T5828] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 90.798657][ T5828] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 90.835048][ T5828] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 90.916367][ T5826] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 90.945124][ T5842] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.962205][ T5826] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 90.999820][ T5826] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 91.027902][ T5826] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 91.048944][ T5842] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.051354][ T5843] Bluetooth: hci2: command tx timeout [ 91.058036][ T5141] Bluetooth: hci1: command tx timeout [ 91.061322][ T5837] Bluetooth: hci3: command tx timeout [ 91.066365][ T5141] Bluetooth: hci4: command tx timeout [ 91.072697][ T55] Bluetooth: hci0: command tx timeout [ 91.128010][ T63] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.135407][ T63] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.156652][ T5831] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.164865][ T5832] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 91.177101][ T5832] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 91.189918][ T5832] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 91.199918][ T5832] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 91.230184][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.237416][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.270163][ T5831] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.326092][ T63] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.333375][ T63] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.343577][ T63] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.350729][ T63] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.369562][ T5828] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.419378][ T5828] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.467417][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.474584][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.504054][ T5831] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 91.533393][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.540640][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.753066][ T5826] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.774360][ T5832] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.782853][ T47] cfg80211: failed to load regulatory.db [ 91.878941][ T5826] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.898717][ T5832] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.936335][ T2932] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.943521][ T2932] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.973854][ T5842] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.996415][ T2932] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.003610][ T2932] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.059732][ T63] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.066969][ T63] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.085470][ T63] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.092622][ T63] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.178400][ T5831] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.309129][ T5828] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.456740][ T5831] veth0_vlan: entered promiscuous mode [ 92.517032][ T5831] veth1_vlan: entered promiscuous mode [ 92.607618][ T5828] veth0_vlan: entered promiscuous mode [ 92.625148][ T5828] veth1_vlan: entered promiscuous mode [ 92.697042][ T5831] veth0_macvtap: entered promiscuous mode [ 92.708661][ T5831] veth1_macvtap: entered promiscuous mode [ 92.741919][ T5826] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.754636][ T5842] veth0_vlan: entered promiscuous mode [ 92.769818][ T5828] veth0_macvtap: entered promiscuous mode [ 92.784776][ T5842] veth1_vlan: entered promiscuous mode [ 92.807334][ T5828] veth1_macvtap: entered promiscuous mode [ 92.824307][ T5832] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.843967][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.868575][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.896958][ T5831] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.906821][ T5831] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.916234][ T5831] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.925277][ T5831] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.946662][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.958274][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.970801][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.996585][ T5842] veth0_macvtap: entered promiscuous mode [ 93.017618][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.029088][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.041812][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.070166][ T5828] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.079583][ T5828] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.088580][ T5828] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.097419][ T5828] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.108842][ T5842] veth1_macvtap: entered promiscuous mode [ 93.132028][ T5843] Bluetooth: hci2: command tx timeout [ 93.137475][ T5843] Bluetooth: hci3: command tx timeout [ 93.144440][ T5837] Bluetooth: hci4: command tx timeout [ 93.144676][ T5838] Bluetooth: hci1: command tx timeout [ 93.149955][ T55] Bluetooth: hci0: command tx timeout [ 93.194108][ T5826] veth0_vlan: entered promiscuous mode [ 93.205198][ T5842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.217745][ T5842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.229056][ T5842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.239824][ T5842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.251849][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.293113][ T5842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.304782][ T5842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.315198][ T5842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.325905][ T5842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.337406][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.354715][ T5832] veth0_vlan: entered promiscuous mode [ 93.382401][ T5842] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.393602][ T5842] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.402924][ T5842] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.411709][ T5842] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.428223][ T5826] veth1_vlan: entered promiscuous mode [ 93.429904][ T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.452312][ T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.478806][ T5832] veth1_vlan: entered promiscuous mode [ 93.557536][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.561237][ T2932] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.569389][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.588587][ T2932] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.622817][ T5826] veth0_macvtap: entered promiscuous mode [ 93.667163][ T5826] veth1_macvtap: entered promiscuous mode [ 93.739350][ T5832] veth0_macvtap: entered promiscuous mode [ 93.746014][ T2932] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.754924][ T5831] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 93.756757][ T5832] veth1_macvtap: entered promiscuous mode [ 93.780707][ T2932] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.801923][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.809750][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.907193][ T5826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.918958][ T5826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.929288][ T5826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.942412][ T5826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.952535][ T5826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.964834][ T5826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.978585][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.028697][ T5832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.039927][ T5832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.060932][ T5832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.080242][ T5832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.099751][ T5832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.110345][ T5832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.123036][ T5832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.133623][ T5832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.145894][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.169341][ T5826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.183086][ T0] NOHZ tick-stop error: local softirq work is pending, handler #282!!! [ 94.196085][ T5826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.260961][ T5826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.272811][ T5826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.283839][ T5826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.294447][ T5826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.305882][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.318364][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.396752][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.399674][ T5832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.417975][ T5832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.447857][ T5832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.461004][ T5832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.471560][ T5832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.483996][ T5832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.509418][ T5832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.527016][ T5832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.543902][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.592468][ T5832] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.609441][ T5832] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.623307][ T5832] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.632243][ T5832] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.659734][ T5826] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.686719][ T5826] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.707981][ T5826] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.740506][ T5826] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.151441][ T4907] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.159310][ T4907] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.211238][ T55] Bluetooth: hci0: command tx timeout [ 95.216685][ T55] Bluetooth: hci4: command tx timeout [ 95.222086][ T5843] Bluetooth: hci2: command tx timeout [ 95.222133][ T5843] Bluetooth: hci3: command tx timeout [ 95.222164][ T5843] Bluetooth: hci1: command tx timeout [ 95.522545][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 95.535240][ T4907] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.550699][ T4907] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.633791][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.656769][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.705045][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 95.795036][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.807446][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 95.809687][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.360195][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 96.411071][ T0] NOHZ tick-stop error: local softirq work is pending, handler #208!!! [ 96.421133][ T0] NOHZ tick-stop error: local softirq work is pending, handler #300!!! [ 96.530793][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 96.586194][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 96.595046][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 96.630181][ T5938] overlayfs: overlapping lowerdir path [ 96.695869][ T5939] overlayfs: overlapping lowerdir path [ 98.510888][ T5954] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 100.253249][ T5954] hub 6-0:1.0: USB hub found [ 100.398735][ T5954] hub 6-0:1.0: 1 port detected [ 101.702028][ T5978] netlink: 56 bytes leftover after parsing attributes in process `syz.0.15'. [ 101.720867][ T5978] netlink: 8 bytes leftover after parsing attributes in process `syz.0.15'. [ 104.353922][ T6003] syz.0.21: attempt to access beyond end of device [ 104.353922][ T6003] nbd0: rw=0, sector=0, nr_sectors = 1 limit=0 [ 104.367038][ T6003] hpfs: hpfs_map_sector(): read error [ 107.813078][ T6028] netlink: 'syz.1.29': attribute type 1 has an invalid length. [ 107.911606][ T6028] bond1 (unregistering): Released all slaves [ 107.933922][ T6030] netlink: 28 bytes leftover after parsing attributes in process `syz.1.29'. [ 108.059424][ T30] audit: type=1800 audit(1745172197.311:2): pid=6032 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.2.31" name="/" dev="9p" ino=2 res=0 errno=0 [ 108.412714][ T6039] xt_CT: You must specify a L4 protocol and not use inversions on it [ 109.446079][ T55] Bluetooth: Frame is too long (len 16, expected len 4) [ 110.723285][ T6057] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 110.849805][ T6057] ip6gretap0: entered promiscuous mode [ 110.940902][ T6057] vlan2: entered promiscuous mode [ 112.124022][ T6067] netlink: 12 bytes leftover after parsing attributes in process `syz.1.41'. [ 112.277915][ T6071] netlink: 'syz.4.43': attribute type 1 has an invalid length. [ 112.482545][ T6075] ip6erspan0: entered promiscuous mode [ 112.734886][ T6081] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 112.798949][ T6078] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.807112][ T6078] bridge0: port 1(bridge_slave_0) entered disabled state [ 113.038307][ T6078] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 113.114038][ T6078] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 113.276569][ T6078] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.285942][ T6078] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.350544][ T6078] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.425703][ T6078] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.822225][ T6095] netlink: 8 bytes leftover after parsing attributes in process `syz.4.48'. [ 114.548581][ T6102] netlink: 36 bytes leftover after parsing attributes in process `syz.2.51'. [ 114.569502][ T6102] netlink: 16 bytes leftover after parsing attributes in process `syz.2.51'. [ 114.650961][ T6102] netlink: 36 bytes leftover after parsing attributes in process `syz.2.51'. [ 114.659844][ T6102] netlink: 36 bytes leftover after parsing attributes in process `syz.2.51'. [ 114.684331][ T6107] tipc: Failed to remove unknown binding: 66,1,1/0:831106007/831106009 [ 114.694135][ T6107] tipc: Failed to remove unknown binding: 66,1,1/0:831106007/831106009 [ 116.393962][ T6128] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 118.748652][ T6147] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 119.937227][ T6152] netlink: 12 bytes leftover after parsing attributes in process `syz.0.61'. [ 120.475281][ T30] audit: type=1800 audit(1745172209.751:3): pid=6166 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.0.66" name="/" dev="9p" ino=2 res=0 errno=0 [ 120.700872][ T5883] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 121.460818][ T5883] usb 2-1: Using ep0 maxpacket: 16 [ 121.507502][ T5883] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 121.558966][ T5883] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 121.588762][ T5883] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 121.600147][ T5883] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.615153][ T5883] usb 2-1: Product: syz [ 121.619347][ T5883] usb 2-1: Manufacturer: syz [ 121.626005][ T5883] usb 2-1: SerialNumber: syz [ 121.867215][ T5883] usb 2-1: 0:2 : does not exist [ 122.563131][ T5883] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 123.180919][ T5883] usb 2-1: USB disconnect, device number 2 [ 123.303323][ T6190] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 124.602534][ T5881] udevd[5881]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 124.820795][ T3083] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 125.322313][ T3083] usb 3-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 125.331704][ T3083] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.376894][ T3083] usb 3-1: config 0 descriptor?? [ 127.556411][ T6219] kvm: requested 3352 ns i8254 timer period limited to 200000 ns [ 127.609221][ T3083] usb 3-1: Cannot set autoneg [ 127.619213][ T3083] MOSCHIP usb-ethernet driver 3-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 127.623235][ T6216] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 127.663872][ T6216] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 127.686461][ T3083] usb 3-1: USB disconnect, device number 2 [ 127.700070][ T6216] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 128.042473][ T6216] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 128.965910][ T6232] wlan0 speed is unknown, defaulting to 1000 [ 128.986075][ T6232] wlan0 speed is unknown, defaulting to 1000 [ 129.025103][ T55] Bluetooth: hci3: Unable to find connection for big 0x14 [ 129.040468][ T6232] wlan0 speed is unknown, defaulting to 1000 [ 129.098041][ T6232] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 129.190302][ T6232] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 130.246016][ T6232] wlan0 speed is unknown, defaulting to 1000 [ 131.321758][ T6232] wlan0 speed is unknown, defaulting to 1000 [ 131.342029][ T6232] wlan0 speed is unknown, defaulting to 1000 [ 131.356807][ T6232] wlan0 speed is unknown, defaulting to 1000 [ 131.367446][ T6232] wlan0 speed is unknown, defaulting to 1000 [ 132.735948][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.745734][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.778164][ T6253] process 'syz.0.89' launched '/dev/fd/3' with NULL argv: empty string added [ 135.675861][ T6279] bridge_slave_0: left allmulticast mode [ 135.685398][ T6279] bridge_slave_0: left promiscuous mode [ 135.818389][ T6279] bridge0: port 1(bridge_slave_0) entered disabled state [ 135.985376][ T6279] bridge_slave_1: left allmulticast mode [ 136.024493][ T6279] bridge_slave_1: left promiscuous mode [ 136.049482][ T6279] bridge0: port 2(bridge_slave_1) entered disabled state [ 136.761882][ T6279] bond0: (slave bond_slave_0): Releasing backup interface [ 136.873499][ T6279] bond0: (slave bond_slave_1): Releasing backup interface [ 137.042203][ T6279] team0: Port device team_slave_0 removed [ 137.118785][ T6279] team0: Port device team_slave_1 removed [ 137.165012][ T6279] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 137.224305][ T6279] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 137.358394][ T6279] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 137.369652][ T6279] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 138.253019][ T6302] netlink: 'syz.2.101': attribute type 4 has an invalid length. [ 138.543697][ T6311] netlink: 'syz.0.105': attribute type 1 has an invalid length. [ 139.220055][ T6311] bond1: entered promiscuous mode [ 139.235837][ T6311] bond1: entered allmulticast mode [ 139.290064][ T6318] ip6gretap1: entered allmulticast mode [ 139.477576][ T6318] bond1: (slave ip6gretap1): making interface the new active one [ 139.556088][ T6318] ip6gretap1: entered promiscuous mode [ 139.564176][ T6318] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 139.577222][ T6311] netlink: 28 bytes leftover after parsing attributes in process `syz.0.105'. [ 139.592550][ T6324] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 139.633431][ T6311] bond1: left promiscuous mode [ 139.641191][ T6311] ip6gretap1: left promiscuous mode [ 139.667689][ T6311] bond1: left allmulticast mode [ 139.676929][ T6311] 8021q: adding VLAN 0 to HW filter on device bond1 [ 139.808222][ T6329] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 141.095977][ T6340] Zero length message leads to an empty skb [ 143.582520][ T6366] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 144.859113][ T6373] wlan0 speed is unknown, defaulting to 1000 [ 150.897262][ T6437] Bluetooth: MGMT ver 1.23 [ 152.293452][ T6447] Illegal XDP return value 6447 on prog (id 27) dev N/A, expect packet loss! [ 152.939089][ T5882] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 153.529708][ T5882] usb 1-1: New USB device found, idVendor=045b, idProduct=0212, bcdDevice=28.97 [ 153.539654][ T5882] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.553194][ T5882] usb 1-1: Product: syz [ 153.557390][ T5882] usb 1-1: Manufacturer: syz [ 153.746063][ T5882] usb 1-1: SerialNumber: syz [ 153.804293][ T5882] usb 1-1: config 0 descriptor?? [ 153.884623][ T5882] upd78f0730 1-1:0.0: upd78f0730 converter detected [ 154.411346][ T5882] usb 1-1: upd78f0730 converter now attached to ttyUSB0 [ 154.825651][ T5934] usb 1-1: USB disconnect, device number 2 [ 154.835986][ T6462] syzkaller0: entered promiscuous mode [ 154.858154][ T5934] upd78f0730 ttyUSB0: upd78f0730 converter now disconnected from ttyUSB0 [ 154.870465][ T6462] syzkaller0: entered allmulticast mode [ 154.884604][ T6470] netlink: 16 bytes leftover after parsing attributes in process `syz.3.150'. [ 154.983855][ T5934] upd78f0730 1-1:0.0: device disconnected [ 154.993066][ T30] audit: type=1326 audit(1745172244.271:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6468 comm="syz.1.151" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc78198e169 code=0x0 [ 159.250565][ T96] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 159.410410][ T96] usb 1-1: Using ep0 maxpacket: 8 [ 159.453453][ T96] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 159.468307][ T96] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 159.526318][ T96] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 159.539460][ T96] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 159.562757][ T96] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 159.586662][ T96] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 159.601364][ T96] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.810625][ T5927] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 159.870675][ T96] usb 1-1: usb_control_msg returned -32 [ 159.879070][ T96] usbtmc 1-1:16.0: can't read capabilities [ 159.960880][ T5927] usb 5-1: Using ep0 maxpacket: 32 [ 159.970695][ T5927] usb 5-1: config 0 has an invalid interface number: 5 but max is 0 [ 159.989131][ T5927] usb 5-1: config 0 has no interface number 0 [ 159.998922][ T5927] usb 5-1: config 0 interface 5 altsetting 9 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 160.016156][ T5927] usb 5-1: config 0 interface 5 altsetting 9 endpoint 0x7 has an invalid bInterval 151, changing to 11 [ 160.044800][ T5927] usb 5-1: config 0 interface 5 has no altsetting 0 [ 160.075672][ T5927] usb 5-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=71.44 [ 160.110513][ T5927] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.144138][ T5927] usb 5-1: Product: syz [ 160.148509][ T5927] usb 5-1: Manufacturer: syz [ 160.159146][ T5927] usb 5-1: SerialNumber: syz [ 160.206656][ T5927] usb 5-1: config 0 descriptor?? [ 160.439000][ T5927] radio-si470x 5-1:0.5: could not find interrupt in endpoint [ 160.457992][ T5927] radio-si470x 5-1:0.5: probe with driver radio-si470x failed with error -5 [ 160.513435][ T5927] radio-raremono 5-1:0.5: this is not Thanko's Raremono. [ 160.529407][ T5927] usbhid 5-1:0.5: couldn't find an input interrupt endpoint [ 160.562003][ T5927] usb 5-1: USB disconnect, device number 2 [ 161.150534][ T5927] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 161.322839][ T3083] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 161.330892][ T5927] usb 4-1: Using ep0 maxpacket: 8 [ 161.356786][ T6517] __vm_enough_memory: pid: 6517, comm: syz.3.164, bytes: 21200277413888 not enough memory for the allocation [ 161.490613][ T3083] usb 5-1: Using ep0 maxpacket: 8 [ 161.499701][ T3083] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 161.516326][ T3083] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 161.544687][ T3083] usb 5-1: New USB device found, idVendor=2040, idProduct=2950, bcdDevice=85.f1 [ 161.555241][ T3083] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.558244][ T6515] bridge0: port 3(vxlan0) entered blocking state [ 161.568221][ T3083] usb 5-1: Product: syz [ 161.574364][ T3083] usb 5-1: Manufacturer: syz [ 161.579144][ T3083] usb 5-1: SerialNumber: syz [ 161.622295][ T3083] usb 5-1: config 0 descriptor?? [ 161.639258][ T3083] pvrusb2: Hardware description: WinTV PVR USB2 Model 29xxx [ 161.671940][ T6515] bridge0: port 3(vxlan0) entered disabled state [ 161.706376][ T6515] vxlan0: entered allmulticast mode [ 161.737666][ T6515] vxlan0: entered promiscuous mode [ 161.887451][ T5934] usb 1-1: USB disconnect, device number 3 [ 163.048129][ T3083] usb 5-1: USB disconnect, device number 3 [ 163.363627][ T2343] usb 5-1: Direct firmware load for v4l-pvrusb2-29xxx-01.fw failed with error -2 [ 163.428207][ T2343] usb 5-1: Falling back to sysfs fallback for: v4l-pvrusb2-29xxx-01.fw [ 163.857013][ T6538] syz.1.170 uses obsolete (PF_INET,SOCK_PACKET) [ 164.613227][ T6533] syzkaller0: entered promiscuous mode [ 164.618775][ T6533] syzkaller0: entered allmulticast mode [ 165.101621][ T5927] usb 4-1: unable to get BOS descriptor or descriptor too short [ 165.130108][ T5927] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 165.150127][ T5927] usb 4-1: can't read configurations, error -71 [ 165.307555][ T55] Bluetooth: Frame is too long (len 16, expected len 4) [ 167.567053][ T6612] netlink: 28 bytes leftover after parsing attributes in process `syz.0.178'. [ 167.576758][ T6612] netlink: 8 bytes leftover after parsing attributes in process `syz.0.178'. [ 169.128528][ T6547] netlink: 60 bytes leftover after parsing attributes in process `syz.4.172'. [ 169.946334][ T6624] netlink: 12 bytes leftover after parsing attributes in process `syz.0.180'. [ 173.740631][ T5934] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 174.523188][ T5934] usb 2-1: config 0 has no interfaces? [ 174.700484][ T5934] usb 2-1: New USB device found, idVendor=05ac, idProduct=4262, bcdDevice= 0.00 [ 175.443788][ T5934] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 175.470505][ T5934] usb 2-1: config 0 descriptor?? [ 176.358587][ T96] usb 2-1: USB disconnect, device number 3 [ 177.027840][ T5880] kernel write not supported for file /vcs (pid: 5880 comm: kworker/1:5) [ 181.018455][ T6728] netlink: 12 bytes leftover after parsing attributes in process `syz.4.214'. [ 182.383945][ T6744] bridge: RTM_NEWNEIGH with invalid ether address [ 182.630822][ T5880] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 182.810957][ T5880] usb 3-1: Using ep0 maxpacket: 8 [ 182.942608][ T5880] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 183.622516][ T5880] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 183.763187][ T5880] usb 3-1: config 0 descriptor?? [ 183.980557][ T30] audit: type=1804 audit(1745172273.121:5): pid=6759 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz.0.223" name="/newroot/53/file1" dev="fuse" ino=1 res=1 errno=0 [ 184.000568][ T30] audit: type=1800 audit(1745172273.121:6): pid=6759 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.0.223" name="/" dev="fuse" ino=1 res=0 errno=0 [ 184.061021][ T5880] asix 3-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 185.215907][ T5934] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 186.050792][ T5934] usb 1-1: Using ep0 maxpacket: 8 [ 186.186830][ T5934] usb 1-1: unable to get BOS descriptor or descriptor too short [ 186.239939][ T5934] usb 1-1: config 1 interface 0 altsetting 129 bulk endpoint 0x82 has invalid maxpacket 32 [ 186.285721][ T6790] bond0: entered promiscuous mode [ 186.295343][ T5934] usb 1-1: config 1 interface 0 altsetting 129 bulk endpoint 0x3 has invalid maxpacket 1023 [ 186.315629][ T6790] bond_slave_0: entered promiscuous mode [ 186.341614][ T6790] bond_slave_1: entered promiscuous mode [ 186.353203][ T6790] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 186.368992][ T6790] bond1: (slave macvlan2): Enslaving as an active interface with an up link [ 187.284312][ T5934] usb 1-1: config 1 interface 0 altsetting 129 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 187.312987][ T5934] usb 1-1: config 1 interface 0 has no altsetting 0 [ 187.325816][ T5934] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 187.554234][ T5934] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 187.570382][ T5934] usb 1-1: Product: syz [ 187.574608][ T5934] usb 1-1: Manufacturer: syz [ 187.579223][ T5934] usb 1-1: SerialNumber: syz [ 187.647330][ T5880] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 187.678579][ T5880] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 187.695192][ T6771] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 187.738679][ T5880] asix 3-1:0.0: probe with driver asix failed with error -71 [ 187.748742][ T6771] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 187.775648][ T5880] usb 3-1: USB disconnect, device number 3 [ 188.134509][ T5934] usb 1-1: bad CDC descriptors [ 188.187395][ T5934] usb 1-1: USB disconnect, device number 4 [ 189.460970][ T6826] block nbd1: shutting down sockets [ 189.472716][ T6822] block nbd1: NBD_DISCONNECT [ 189.482173][ T6822] block nbd1: Send disconnect failed -22 [ 189.488824][ T6822] block nbd1: Send disconnect failed -22 [ 193.503417][ T6860] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 194.340963][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.347635][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.378266][ T6846] syz.1.250 (6846) used greatest stack depth: 19384 bytes left [ 197.275170][ T6878] wlan0 speed is unknown, defaulting to 1000 [ 210.455423][ T7000] netlink: 64 bytes leftover after parsing attributes in process `syz.3.293'. [ 210.496058][ T7011] netlink: 'syz.4.297': attribute type 39 has an invalid length. [ 211.648659][ T7021] overlayfs: failed to clone upperpath [ 211.761185][ T7019] Cannot find add_set index 0 as target [ 212.231190][ T5834] Bluetooth: hci4: command 0x0406 tx timeout [ 212.237957][ T5834] Bluetooth: hci2: command 0x0406 tx timeout [ 212.250417][ T5834] Bluetooth: hci0: command 0x0406 tx timeout [ 212.257161][ T5834] Bluetooth: hci3: command 0x0406 tx timeout [ 212.265686][ T5844] Bluetooth: hci1: command 0x0406 tx timeout [ 215.812706][ T7053] 9pnet: p9_errstr2errno: server reported unknown error 1844674407370 [ 217.203640][ T7071] wlan0 speed is unknown, defaulting to 1000 [ 218.601004][ T7087] overlayfs: statfs failed on './file0' [ 218.777849][ T96] IPVS: starting estimator thread 0... [ 219.030672][ T7095] IPVS: using max 28 ests per chain, 67200 per kthread [ 220.609978][ T7120] capability: warning: `syz.3.328' uses deprecated v2 capabilities in a way that may be insecure [ 222.131565][ T7143] overlayfs: failed to clone upperpath [ 223.485190][ T7166] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 223.507746][ T7159] bridge0: port 2(bridge_slave_1) entered disabled state [ 223.515494][ T7159] bridge0: port 1(bridge_slave_0) entered disabled state [ 223.710778][ T7166] usb 4-1: Using ep0 maxpacket: 16 [ 223.739852][ T7166] usb 4-1: descriptor type invalid, skip [ 223.765157][ T7166] usb 4-1: config 0 has no interfaces? [ 223.798706][ T7166] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 223.858174][ T7166] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 223.878059][ T7166] usb 4-1: Product: syz [ 223.890379][ T7166] usb 4-1: Manufacturer: syz [ 223.895019][ T7166] usb 4-1: SerialNumber: syz [ 223.916894][ T7166] usb 4-1: config 0 descriptor?? [ 224.074924][ T7159] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 224.150292][ T5934] usb 4-1: USB disconnect, device number 4 [ 224.183133][ T7159] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 224.386049][ T7159] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.405516][ T7159] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.414905][ T7159] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.430048][ T7159] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.952534][ T2343] pvrusb2: request_firmware fatal error with code=-110 [ 224.982415][ T2343] pvrusb2: Failure uploading firmware1 [ 225.011269][ T2343] pvrusb2: Device initialization was not successful. [ 225.030679][ T2343] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 225.056541][ T2343] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 225.069098][ T3083] pvrusb2: Device being rendered inoperable [ 225.135201][ T7206] warning: `syz.0.348' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 225.151391][ T7207] lo: entered allmulticast mode [ 225.222491][ T7207] lo: left allmulticast mode [ 225.433271][ T7215] netlink: 4 bytes leftover after parsing attributes in process `syz.2.351'. [ 225.702394][ T7228] wlan0 speed is unknown, defaulting to 1000 [ 228.537323][ T7252] bridge0: port 2(bridge_slave_1) entered disabled state [ 228.546231][ T7252] bridge0: port 1(bridge_slave_0) entered disabled state [ 228.760149][ T7252] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 228.775174][ T7252] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 228.880632][ T5884] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 228.882687][ T7252] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.906221][ T7252] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.915522][ T7252] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.924698][ T7252] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.225650][ T5884] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 229.395034][ T5884] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 229.647745][ T5884] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 229.996902][ T5884] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 230.015254][ T5884] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 230.030242][ T5884] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 230.039742][ T5884] usb 2-1: Manufacturer: syz [ 230.066068][ T5884] usb 2-1: config 0 descriptor?? [ 230.304454][ T7291] wlan0 speed is unknown, defaulting to 1000 [ 230.410452][ T5884] rc_core: IR keymap rc-hauppauge not found [ 230.434240][ T5884] Registered IR keymap rc-empty [ 230.446558][ T5884] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 231.441000][ T5884] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 231.462926][ T5884] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 231.478564][ T5884] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input5 [ 231.597228][ T5884] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 231.630615][ T5884] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 231.651651][ T5884] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 231.672903][ T5884] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 231.703722][ T5884] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 231.724854][ T7302] netlink: 4 bytes leftover after parsing attributes in process `syz.4.374'. [ 231.755961][ T5884] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 231.791077][ T5884] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 231.843812][ T5884] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 231.845305][ T7302] netlink: 4 bytes leftover after parsing attributes in process `syz.4.374'. [ 231.882269][ T5884] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 231.903424][ T5884] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 231.963617][ T5884] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 231.990399][ T5884] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 232.477947][ T30] audit: type=1326 audit(1745172321.751:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7318 comm="syz.2.381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14bdb8e169 code=0x7ffc0000 [ 232.577587][ T30] audit: type=1326 audit(1745172321.771:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7318 comm="syz.2.381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f14bdb8e169 code=0x7ffc0000 [ 232.685639][ T30] audit: type=1326 audit(1745172321.771:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7318 comm="syz.2.381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14bdb8e169 code=0x7ffc0000 [ 232.831669][ T30] audit: type=1326 audit(1745172321.781:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7318 comm="syz.2.381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=93 compat=0 ip=0x7f14bdb8e169 code=0x7ffc0000 [ 232.960545][ T5884] usb 2-1: USB disconnect, device number 4 [ 233.061770][ T30] audit: type=1326 audit(1745172321.781:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7318 comm="syz.2.381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14bdb8e169 code=0x7ffc0000 [ 233.121738][ T30] audit: type=1326 audit(1745172321.791:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7318 comm="syz.2.381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=19 compat=0 ip=0x7f14bdb8e169 code=0x7ffc0000 [ 233.466309][ T30] audit: type=1326 audit(1745172321.791:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7318 comm="syz.2.381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14bdb8e169 code=0x7ffc0000 [ 233.574209][ T30] audit: type=1326 audit(1745172321.791:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7318 comm="syz.2.381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f14bdb8e169 code=0x7ffc0000 [ 233.687829][ T30] audit: type=1326 audit(1745172321.791:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7318 comm="syz.2.381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14bdb8e169 code=0x7ffc0000 [ 233.742019][ T7331] wlan0 speed is unknown, defaulting to 1000 [ 233.780797][ T5884] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 233.788864][ T30] audit: type=1326 audit(1745172321.791:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7318 comm="syz.2.381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f14bdb8e169 code=0x7ffc0000 [ 233.861713][ T7340] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 233.868528][ T7340] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 233.961820][ T5884] usb 2-1: Using ep0 maxpacket: 32 [ 233.985704][ T5884] usb 2-1: config 0 has no interfaces? [ 233.994542][ T5884] usb 2-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 234.026928][ T5884] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 234.069153][ T5884] usb 2-1: config 0 descriptor?? [ 235.186118][ T7306] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 235.201276][ T7306] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 235.202546][ T47] IPVS: starting estimator thread 0... [ 235.214940][ T7353] netlink: 4 bytes leftover after parsing attributes in process `syz.0.391'. [ 235.339096][ T47] usb 2-1: USB disconnect, device number 5 [ 235.348702][ T7354] IPVS: using max 39 ests per chain, 93600 per kthread [ 236.570734][ T7362] netlink: 36 bytes leftover after parsing attributes in process `syz.4.394'. [ 236.579694][ T7362] netlink: 12 bytes leftover after parsing attributes in process `syz.4.394'. [ 236.588885][ T7362] netlink: 16 bytes leftover after parsing attributes in process `syz.4.394'. [ 239.100296][ T7395] netlink: 'syz.3.407': attribute type 5 has an invalid length. [ 248.017376][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 248.017393][ T30] audit: type=1326 audit(1745172337.291:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7480 comm="syz.3.431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47e8f8e169 code=0x7ffc0000 [ 248.241413][ T30] audit: type=1326 audit(1745172337.291:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7480 comm="syz.3.431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47e8f8e169 code=0x7ffc0000 [ 248.435378][ T30] audit: type=1326 audit(1745172337.321:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7480 comm="syz.3.431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f47e8f8e169 code=0x7ffc0000 [ 248.457399][ T30] audit: type=1326 audit(1745172337.321:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7480 comm="syz.3.431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47e8f8e169 code=0x7ffc0000 [ 248.520679][ T30] audit: type=1326 audit(1745172337.321:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7480 comm="syz.3.431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47e8f8e169 code=0x7ffc0000 [ 249.212979][ T30] audit: type=1326 audit(1745172337.321:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7480 comm="syz.3.431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=133 compat=0 ip=0x7f47e8f8e169 code=0x7ffc0000 [ 249.234455][ T30] audit: type=1326 audit(1745172337.321:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7480 comm="syz.3.431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47e8f8e169 code=0x7ffc0000 [ 249.436539][ T30] audit: type=1326 audit(1745172337.321:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7480 comm="syz.3.431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47e8f8e169 code=0x7ffc0000 [ 249.490653][ T30] audit: type=1326 audit(1745172337.331:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7480 comm="syz.3.431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=163 compat=0 ip=0x7f47e8f8e169 code=0x7ffc0000 [ 249.910563][ T30] audit: type=1326 audit(1745172337.331:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7480 comm="syz.3.431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47e8f8e169 code=0x7ffc0000 [ 250.183314][ T7507] bridge_slave_0: left allmulticast mode [ 250.202359][ T7507] bridge_slave_0: left promiscuous mode [ 250.208193][ T7507] bridge0: port 1(bridge_slave_0) entered disabled state [ 250.321903][ T7507] bridge_slave_1: left allmulticast mode [ 250.327600][ T7507] bridge_slave_1: left promiscuous mode [ 250.598486][ T7507] bridge0: port 2(bridge_slave_1) entered disabled state [ 251.392493][ T7528] netlink: 156 bytes leftover after parsing attributes in process `syz.0.443'. [ 251.416341][ T7507] bond0: (slave bond_slave_0): Releasing backup interface [ 251.440190][ T7507] bond0: (slave bond_slave_1): Releasing backup interface [ 251.465265][ T7507] team0: Port device team_slave_0 removed [ 251.474508][ T7507] team0: Port device team_slave_1 removed [ 251.481606][ T7507] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 251.490962][ T7507] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 253.404397][ T7554] : entered promiscuous mode [ 253.630514][ T47] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 253.648276][ T7560] bridge0: port 2(bridge_slave_1) entered disabled state [ 253.697129][ T7568] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 253.920367][ T47] usb 1-1: Using ep0 maxpacket: 16 [ 253.942386][ T47] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 253.952472][ T47] usb 1-1: New USB device found, idVendor=046d, idProduct=c50c, bcdDevice= 0.00 [ 253.961990][ T47] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 253.977087][ T47] usb 1-1: config 0 descriptor?? [ 254.229427][ T47] usbhid 1-1:0.0: can't add hid device: -71 [ 254.245139][ T47] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 254.265844][ T47] usb 1-1: USB disconnect, device number 5 [ 254.525104][ T7581] wlan0 speed is unknown, defaulting to 1000 [ 255.621224][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.627692][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.565171][ T7605] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 263.615640][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 263.615658][ T30] audit: type=1800 audit(1745172352.891:29): pid=7664 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.4.486" name="/" dev="9p" ino=2 res=0 errno=0 [ 265.242205][ T7681] netlink: 116 bytes leftover after parsing attributes in process `syz.4.492'. [ 265.253486][ T7681] netlink: 92 bytes leftover after parsing attributes in process `syz.4.492'. [ 265.813930][ T7684] netlink: 'syz.0.493': attribute type 4 has an invalid length. [ 271.165792][ T7721] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 271.242162][ T7721] netlink: 12 bytes leftover after parsing attributes in process `syz.0.506'. [ 271.277389][ T5141] Bluetooth: hci0: unexpected event for opcode 0x0c26 [ 274.552898][ T7761] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 275.070829][ T7769] bridge_slave_0: left allmulticast mode [ 275.076551][ T7769] bridge_slave_0: left promiscuous mode [ 275.144340][ T7769] bridge0: port 1(bridge_slave_0) entered disabled state [ 275.182507][ T7769] bridge_slave_1: left allmulticast mode [ 275.255828][ T7769] bridge_slave_1: left promiscuous mode [ 275.308024][ T7769] bridge0: port 2(bridge_slave_1) entered disabled state [ 275.523046][ T7769] bond0: (slave bond_slave_0): Releasing backup interface [ 275.554851][ T7769] bond_slave_0: left promiscuous mode [ 275.575296][ T7769] bond0: (slave bond_slave_1): Releasing backup interface [ 275.602232][ T7769] bond_slave_1: left promiscuous mode [ 275.672014][ T7769] team0: Port device team_slave_0 removed [ 275.701611][ T7769] team0: Port device team_slave_1 removed [ 275.714943][ T7769] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 275.744736][ T7769] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 275.919398][ T7769] vxlan0: left allmulticast mode [ 275.930938][ T7769] vxlan0: left promiscuous mode [ 275.936222][ T7769] bridge0: port 3(vxlan0) entered disabled state [ 275.958679][ T7769] bond1: (slave macvlan2): Releasing backup interface [ 276.719823][ T7769] bond0: left promiscuous mode [ 276.967828][ T7797] netlink: 4 bytes leftover after parsing attributes in process `syz.0.526'. [ 280.367717][ T7829] netlink: 4 bytes leftover after parsing attributes in process `syz.4.540'. [ 280.370481][ T7828] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 281.440760][ T7840] netlink: 4 bytes leftover after parsing attributes in process `syz.3.543'. [ 283.344285][ T7840] bond0: (slave bond_slave_0): Releasing backup interface [ 283.388697][ T7854] Smack: duplicate mount options [ 283.619068][ T7867] netlink: 36 bytes leftover after parsing attributes in process `syz.4.549'. [ 283.634478][ T7867] netlink: 16 bytes leftover after parsing attributes in process `syz.4.549'. [ 283.644487][ T7867] netlink: 36 bytes leftover after parsing attributes in process `syz.4.549'. [ 283.658341][ T7867] netlink: 36 bytes leftover after parsing attributes in process `syz.4.549'. [ 289.471969][ T7920] netlink: 4 bytes leftover after parsing attributes in process `syz.2.568'. [ 290.919585][ T7935] wg2: entered promiscuous mode [ 290.990881][ T7935] wg2: entered allmulticast mode [ 296.445381][ T7990] lo speed is unknown, defaulting to 1000 [ 296.451601][ T7990] lo speed is unknown, defaulting to 1000 [ 296.462810][ T7990] lo speed is unknown, defaulting to 1000 [ 296.579416][ T7990] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 297.077059][ T7990] lo speed is unknown, defaulting to 1000 [ 297.084677][ T7990] lo speed is unknown, defaulting to 1000 [ 297.092238][ T7990] lo speed is unknown, defaulting to 1000 [ 297.099643][ T7990] lo speed is unknown, defaulting to 1000 [ 297.108625][ T7990] lo speed is unknown, defaulting to 1000 [ 301.338982][ T8051] netlink: 20 bytes leftover after parsing attributes in process `syz.3.603'. [ 302.217685][ T96] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 303.495496][ T96] usb 5-1: Using ep0 maxpacket: 16 [ 304.710936][ T96] usb 5-1: device descriptor read/all, error -71 [ 304.842915][ T8071] netlink: 'syz.4.611': attribute type 4 has an invalid length. [ 306.959300][ T8078] netlink: 'syz.4.611': attribute type 4 has an invalid length. [ 309.567690][ T8105] bridge0: entered promiscuous mode [ 309.575480][ T8105] vlan2: entered promiscuous mode [ 311.659146][ T8142] 9pnet_fd: Insufficient options for proto=fd [ 311.808809][ T5141] Bluetooth: hci2: unexpected event for opcode 0x2003 [ 312.006964][ T5884] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 312.206791][ T8150] trusted_key: encrypted_key: insufficient parameters specified [ 312.350685][ T5884] usb 5-1: Using ep0 maxpacket: 8 [ 312.359117][ T5884] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xEE, changing to 0x8E [ 312.372952][ T5884] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 312.378547][ T8160] netlink: 1276 bytes leftover after parsing attributes in process `syz.3.636'. [ 312.385158][ T5884] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 312.429600][ T5884] usb 5-1: New USB device found, idVendor=187f, idProduct=0200, bcdDevice=6b.ad [ 312.439043][ T7196] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 312.450932][ T5884] usb 5-1: New USB device strings: Mfr=55, Product=237, SerialNumber=3 [ 312.459374][ T5884] usb 5-1: Product: syz [ 312.464400][ T5884] usb 5-1: Manufacturer: syz [ 312.469139][ T5884] usb 5-1: SerialNumber: syz [ 312.480226][ T5884] usb 5-1: config 0 descriptor?? [ 312.494319][ T5884] smsusb:smsusb_probe: board id=2, interface number 0 [ 312.502631][ T5884] smsusb:smsusb_probe: Device initialized with return code -19 [ 312.602736][ T7196] usb 1-1: config index 0 descriptor too short (expected 32820, got 52) [ 312.631104][ T7196] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 312.653278][ T7196] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0035, bcdDevice= a.97 [ 312.665342][ T7196] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 312.673623][ T7196] usb 1-1: Product: syz [ 312.677921][ T7196] usb 1-1: Manufacturer: syz [ 312.682594][ T7196] usb 1-1: SerialNumber: syz [ 312.691036][ T7196] usb 1-1: config 0 descriptor?? [ 312.885183][ T7196] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 312.914153][ T7196] snd-usb-audio 1-1:0.0: probe with driver snd-usb-audio failed with error -2 [ 313.899349][ T8148] udevd[8148]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 313.916414][ T7196] usb 1-1: USB disconnect, device number 6 [ 314.034319][ T47] usb 5-1: USB disconnect, device number 6 [ 315.245464][ T8195] wlan0 speed is unknown, defaulting to 1000 [ 315.383590][ T8195] lo speed is unknown, defaulting to 1000 [ 317.275975][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.282518][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.865528][ T8229] ptrace attach of "./syz-executor exec"[5828] was attempted by "./syz-executor exec"[8229] [ 319.166504][ T8219] Process accounting resumed [ 319.194530][ T8228] netlink: 12 bytes leftover after parsing attributes in process `syz.2.659'. [ 319.428930][ T8238] Invalid ELF header magic: != ELF [ 320.077267][ T8247] wg2: left promiscuous mode [ 320.093746][ T8247] wg2: left allmulticast mode [ 320.659402][ T8255] xt_CT: You must specify a L4 protocol and not use inversions on it [ 321.898175][ T8275] sctp: [Deprecated]: syz.4.671 (pid 8275) Use of struct sctp_assoc_value in delayed_ack socket option. [ 321.898175][ T8275] Use struct sctp_sack_info instead [ 323.999533][ T8305] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 328.286358][ T8342] Invalid source name [ 328.290620][ T8342] UBIFS error (pid: 8342): cannot open "./file0", error -22 [ 328.334645][ T8345] netlink: 4 bytes leftover after parsing attributes in process `syz.0.692'. [ 331.186966][ T8371] netlink: 4 bytes leftover after parsing attributes in process `syz.0.702'. [ 331.275677][ T8375] overlayfs: failed to clone upperpath [ 331.576810][ T30] audit: type=1326 audit(1745172420.851:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8381 comm="syz.1.707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc78198e169 code=0x7ffc0000 [ 331.701148][ T30] audit: type=1326 audit(1745172420.851:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8381 comm="syz.1.707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fc78198e169 code=0x7ffc0000 [ 331.750656][ T30] audit: type=1326 audit(1745172420.851:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8381 comm="syz.1.707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc78198e169 code=0x7ffc0000 [ 331.819797][ T30] audit: type=1326 audit(1745172420.851:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8381 comm="syz.1.707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7fc78198e169 code=0x7ffc0000 [ 331.860400][ T30] audit: type=1326 audit(1745172420.851:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8381 comm="syz.1.707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc78198e169 code=0x7ffc0000 [ 331.928889][ T30] audit: type=1326 audit(1745172420.851:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8381 comm="syz.1.707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc78198e169 code=0x7ffc0000 [ 332.941726][ T8383] netlink: 72 bytes leftover after parsing attributes in process `syz.0.706'. [ 333.152546][ T30] audit: type=1326 audit(1745172420.851:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8381 comm="syz.1.707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc78198e169 code=0x7ffc0000 [ 333.470351][ T30] audit: type=1326 audit(1745172420.851:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8381 comm="syz.1.707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7fc78198e169 code=0x7ffc0000 [ 333.580411][ T30] audit: type=1326 audit(1745172420.851:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8381 comm="syz.1.707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc78198e169 code=0x7ffc0000 [ 334.474478][ T30] audit: type=1326 audit(1745172420.851:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8381 comm="syz.1.707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7fc78198e169 code=0x7ffc0000 [ 334.684144][ T7196] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 335.166875][ T7196] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 336.060367][ T7196] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 336.080344][ T7196] usb 1-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 336.089445][ T7196] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 336.145528][ T7196] usb 1-1: config 0 descriptor?? [ 336.586718][ T7196] hid-steam 0003:28DE:1142.0001: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.0-1/input0 [ 336.670730][ T7196] hid-steam 0003:28DE:1142.0001: Steam wireless receiver connected [ 336.727058][ T7196] hid-steam 0003:28DE:1142.0002: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.0-1/input0 [ 336.825541][ T8413] wlan0 speed is unknown, defaulting to 1000 [ 336.867398][ T8413] lo speed is unknown, defaulting to 1000 [ 338.686528][ T8448] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 338.788947][ T7196] usb 1-1: reset high-speed USB device number 7 using dummy_hcd [ 340.134365][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 340.134384][ T30] audit: type=1326 audit(1745172429.391:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8452 comm="syz.2.728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14bdb8e169 code=0x7fc00000 [ 340.180959][ T30] audit: type=1326 audit(1745172429.391:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8452 comm="syz.2.728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f14bdb8e169 code=0x7fc00000 [ 340.471733][ T8467] syz_tun: entered allmulticast mode [ 340.484378][ T5884] usb 1-1: USB disconnect, device number 7 [ 340.496847][ T8465] syz_tun: left allmulticast mode [ 340.555544][ T8468] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 340.563577][ T8468] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 340.572282][ T8468] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 340.580055][ T8468] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock [ 341.473497][ T5884] hid-steam 0003:28DE:1142.0001: Steam wireless receiver disconnected [ 342.510882][ T8475] netlink: 12 bytes leftover after parsing attributes in process `syz.3.735'. [ 343.869935][ T8496] Unknown options in mask 5 [ 347.114331][ T8529] ptrace attach of "./syz-executor exec"[5826] was attempted by "./syz-executor exec"[8529] [ 347.133111][ T8529] netlink: 24 bytes leftover after parsing attributes in process `syz.2.751'. [ 347.270675][ T8530] vlan2: entered allmulticast mode [ 347.300223][ T8530] bridge_slave_0: entered allmulticast mode [ 347.319912][ T8534] netlink: 24 bytes leftover after parsing attributes in process `syz.2.753'. [ 354.338911][ T8583] netlink: 48 bytes leftover after parsing attributes in process `syz.1.768'. [ 354.735162][ T8592] vlan2: entered promiscuous mode [ 354.852034][ T8592] vlan2: entered allmulticast mode [ 354.857298][ T8592] hsr_slave_1: entered allmulticast mode [ 355.444393][ T8592] netlink: 4 bytes leftover after parsing attributes in process `syz.4.771'. [ 355.493821][ T30] audit: type=1326 audit(1745172444.741:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8597 comm="syz.1.773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc78198e169 code=0x7ffc0000 [ 356.212691][ T30] audit: type=1326 audit(1745172444.741:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8597 comm="syz.1.773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc78198e169 code=0x7ffc0000 [ 356.325793][ T30] audit: type=1326 audit(1745172444.741:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8597 comm="syz.1.773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=229 compat=0 ip=0x7fc78198e169 code=0x7ffc0000 [ 356.426957][ T30] audit: type=1326 audit(1745172444.741:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8597 comm="syz.1.773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc78198e169 code=0x7ffc0000 [ 356.565282][ T30] audit: type=1326 audit(1745172444.741:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8597 comm="syz.1.773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fc78198e169 code=0x7ffc0000 [ 356.598405][ T30] audit: type=1326 audit(1745172444.741:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8597 comm="syz.1.773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc78198e169 code=0x7ffc0000 [ 356.626299][ T30] audit: type=1326 audit(1745172444.741:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8597 comm="syz.1.773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc78198e169 code=0x7ffc0000 [ 356.656026][ T30] audit: type=1326 audit(1745172444.741:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8597 comm="syz.1.773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=311 compat=0 ip=0x7fc78198e169 code=0x7ffc0000 [ 356.684053][ T30] audit: type=1326 audit(1745172444.741:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8597 comm="syz.1.773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc78198e169 code=0x7ffc0000 [ 356.778531][ T30] audit: type=1326 audit(1745172444.741:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8597 comm="syz.1.773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc78198e169 code=0x7ffc0000 [ 360.582083][ T8652] sctp: [Deprecated]: syz.4.787 (pid 8652) Use of struct sctp_assoc_value in delayed_ack socket option. [ 360.582083][ T8652] Use struct sctp_sack_info instead [ 362.077185][ T8663] overlayfs: failed to clone upperpath [ 363.196863][ T8675] netlink: 4 bytes leftover after parsing attributes in process `syz.2.795'. [ 363.821704][ T8683] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 363.833607][ T8683] netlink: 20 bytes leftover after parsing attributes in process `syz.0.796'. [ 364.459155][ T8699] netlink: 'syz.4.801': attribute type 10 has an invalid length. [ 364.467646][ T8699] netlink: 40 bytes leftover after parsing attributes in process `syz.4.801'. [ 364.488645][ T8699] batman_adv: batadv0: Adding interface: virt_wifi0 [ 364.495471][ T8699] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 364.521874][ T8699] batman_adv: batadv0: Interface activated: virt_wifi0 [ 365.017279][ T8675] syz.2.795 (8675) used greatest stack depth: 19336 bytes left [ 365.025240][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 365.025257][ T30] audit: type=1326 audit(1745172454.291:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8700 comm="syz.1.803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc78198e169 code=0x7ffc0000 [ 365.128565][ T30] audit: type=1326 audit(1745172454.341:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8700 comm="syz.1.803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc78198e169 code=0x7ffc0000 [ 365.170431][ T30] audit: type=1326 audit(1745172454.341:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8700 comm="syz.1.803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc78198e169 code=0x7ffc0000 [ 365.233495][ T30] audit: type=1326 audit(1745172454.341:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8700 comm="syz.1.803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=440 compat=0 ip=0x7fc78198e169 code=0x7ffc0000 [ 365.257162][ T30] audit: type=1326 audit(1745172454.341:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8700 comm="syz.1.803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc78198e169 code=0x7ffc0000 [ 365.279414][ T30] audit: type=1326 audit(1745172454.341:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8700 comm="syz.1.803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=300 compat=0 ip=0x7fc78198e169 code=0x7ffc0000 [ 365.307073][ T30] audit: type=1326 audit(1745172454.341:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8700 comm="syz.1.803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc78198e169 code=0x7ffc0000 [ 365.445808][ T30] audit: type=1326 audit(1745172454.341:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8700 comm="syz.1.803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=32 compat=0 ip=0x7fc78198e169 code=0x7ffc0000 [ 365.497092][ T30] audit: type=1326 audit(1745172454.341:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8700 comm="syz.1.803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc78198e169 code=0x7ffc0000 [ 366.212681][ T30] audit: type=1326 audit(1745172454.401:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8700 comm="syz.1.803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=301 compat=0 ip=0x7fc78198e169 code=0x7ffc0000 [ 367.071099][ T8717] wlan0 speed is unknown, defaulting to 1000 [ 367.092233][ T8717] lo speed is unknown, defaulting to 1000 [ 368.343151][ T8729] xt_connbytes: Forcing CT accounting to be enabled [ 368.350743][ T8729] --map-set only usable from mangle table [ 371.729428][ T8756] netlink: 12 bytes leftover after parsing attributes in process `syz.3.821'. [ 376.460111][ T8809] workqueue: Failed to create a rescuer kthread for wq "xfs-buf/nullb0": -EINTR [ 376.709217][ T8802] wlan0 speed is unknown, defaulting to 1000 [ 376.958244][ T8802] lo speed is unknown, defaulting to 1000 [ 378.507830][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.514370][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.221884][ T8837] mmap: syz.1.838 (8837) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 382.510710][ T7196] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 383.320169][ T7196] usb 1-1: Using ep0 maxpacket: 32 [ 383.340466][ T7196] usb 1-1: config 0 has an invalid interface number: 4 but max is 0 [ 383.349468][ T7196] usb 1-1: config 0 has an invalid descriptor of length 98, skipping remainder of the config [ 383.370405][ T7196] usb 1-1: config 0 has 2 interfaces, different from the descriptor's value: 1 [ 383.379383][ T7196] usb 1-1: config 0 has no interface number 1 [ 383.390110][ T7196] usb 1-1: config 0 interface 4 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 383.409644][ T7196] usb 1-1: New USB device found, idVendor=046d, idProduct=08b0, bcdDevice=e5.27 [ 383.419614][ T7196] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 383.431750][ T7196] usb 1-1: Product: syz [ 383.576001][ T7196] usb 1-1: Manufacturer: syz [ 383.586165][ T7196] usb 1-1: SerialNumber: syz [ 383.607085][ T7196] usb 1-1: config 0 descriptor?? [ 384.238923][ T7196] pwc: Logitech QuickCam Pro 3000 USB webcam detected. [ 384.659290][ T7196] pwc: Failed to set LED on/off time (-71) [ 384.666512][ T7196] pwc: send_video_command error -71 [ 384.808918][ T7196] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 384.822987][ T7196] Philips webcam 1-1:0.0: probe with driver Philips webcam failed with error -71 [ 384.841818][ T7196] usb 1-1: USB disconnect, device number 8 [ 387.764970][ T8899] vlan2: entered promiscuous mode [ 388.782686][ T8899] bond0: entered promiscuous mode [ 388.787793][ T8899] bond_slave_1: entered promiscuous mode [ 392.340639][ T8935] netlink: 12 bytes leftover after parsing attributes in process `syz.3.868'. [ 392.570709][ T5141] Bluetooth: hci1: unexpected event for opcode 0x080f [ 394.179002][ T5141] Bluetooth: hci4: unexpected event for opcode 0x2016 [ 395.082938][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 395.082959][ T30] audit: type=1326 audit(1745172484.094:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8958 comm="syz.3.875" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f47e8f8e169 code=0x0 [ 396.940356][ T5141] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 397.240421][ T5141] Bluetooth: hci1: Injecting HCI hardware error event [ 397.250882][ T55] Bluetooth: hci1: hardware error 0x00 [ 398.535506][ T30] audit: type=1326 audit(1745172487.349:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8990 comm="syz.4.883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f367358e169 code=0x7ffc0000 [ 398.561766][ T30] audit: type=1326 audit(1745172487.368:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8990 comm="syz.4.883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=239 compat=0 ip=0x7f367358e169 code=0x7ffc0000 [ 398.584057][ T30] audit: type=1326 audit(1745172487.368:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8990 comm="syz.4.883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f367358e169 code=0x7ffc0000 [ 398.636908][ T30] audit: type=1326 audit(1745172487.368:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8990 comm="syz.4.883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f367358e169 code=0x7ffc0000 [ 399.544103][ T30] audit: type=1326 audit(1745172487.368:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8990 comm="syz.4.883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f367358e169 code=0x7ffc0000 [ 399.589093][ T30] audit: type=1326 audit(1745172487.368:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8990 comm="syz.4.883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f367358e169 code=0x7ffc0000 [ 399.756732][ T55] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 400.039943][ T30] audit: type=1326 audit(1745172487.368:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8990 comm="syz.4.883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f367358e169 code=0x7ffc0000 [ 400.069179][ T30] audit: type=1326 audit(1745172487.368:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8990 comm="syz.4.883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f367358e169 code=0x7ffc0000 [ 400.102142][ T30] audit: type=1326 audit(1745172487.368:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8990 comm="syz.4.883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f367358e169 code=0x7ffc0000 [ 400.385560][ T9008] xt_TPROXY: Can be used only with -p tcp or -p udp [ 402.081748][ T9019] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 402.090793][ T9019] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 402.099648][ T9019] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 402.108879][ T9019] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 402.226965][ T9019] bond0: (slave vxlan0): Enslaving as an active interface with an up link [ 404.018021][ T9034] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 404.026507][ T9034] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 404.069930][ T9034] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 406.076186][ T9057] netlink: 28 bytes leftover after parsing attributes in process `syz.4.904'. [ 406.316728][ T9061] evm: overlay not supported [ 409.284220][ T9084] netlink: 550 bytes leftover after parsing attributes in process `syz.0.911'. [ 417.884440][ T9151] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 418.302877][ T9160] netlink: 4 bytes leftover after parsing attributes in process `syz.1.936'. [ 418.437585][ T9160] netlink: 12 bytes leftover after parsing attributes in process `syz.1.936'. [ 421.258113][ T9196] syz_tun: entered allmulticast mode [ 421.357143][ T9193] syz_tun: left allmulticast mode [ 422.506283][ T9210] netfs: Couldn't get user pages (rc=-14) [ 422.516261][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 422.516282][ T30] audit: type=1326 audit(1745172509.780:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9213 comm="syz.3.951" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f47e8f8e169 code=0x0 [ 423.421236][ T9221] netlink: 'syz.1.953': attribute type 1 has an invalid length. [ 423.754225][ T9231] netlink: 'syz.2.952': attribute type 10 has an invalid length. [ 423.762489][ T9231] netlink: 40 bytes leftover after parsing attributes in process `syz.2.952'. [ 423.785742][ T9231] batman_adv: batadv0: Adding interface: virt_wifi0 [ 423.792444][ T9231] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 423.819617][ T9231] batman_adv: batadv0: Interface activated: virt_wifi0 [ 424.915006][ T30] audit: type=1804 audit(1745172512.006:92): pid=9236 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.4.955" name="/newroot/192/bus/bus" dev="overlay" ino=1030 res=1 errno=0 [ 426.196713][ T9260] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.962'. [ 426.322229][ T9256] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.962'. [ 427.296583][ T9269] netlink: 4 bytes leftover after parsing attributes in process `syz.4.966'. [ 428.537595][ T9269] team0 (unregistering): Port device team_slave_0 removed [ 428.652796][ T9269] team0 (unregistering): Port device team_slave_1 removed [ 428.715538][ T9285] 8021q: VLANs not supported on ip6tnl0 [ 429.942307][ T9297] netlink: 4 bytes leftover after parsing attributes in process `syz.2.974'. [ 430.288293][ T9307] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 430.335118][ T9310] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 430.392384][ T9304] bond_slave_0: entered allmulticast mode [ 430.398568][ T9308] Cannot find del_set index 286 as target [ 430.757589][ T9326] netlink: 'syz.3.985': attribute type 21 has an invalid length. [ 430.769481][ T9326] netlink: 132 bytes leftover after parsing attributes in process `syz.3.985'. [ 437.976374][ T9391] xt_hashlimit: size too large, truncated to 1048576 [ 439.969235][ T47] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 440.150920][ T47] usb 5-1: Using ep0 maxpacket: 16 [ 440.167017][ T47] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 440.182918][ T47] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 440.205863][ T47] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 440.352259][ T47] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 440.360936][ T47] usb 5-1: Product: syz [ 440.365625][ T47] usb 5-1: Manufacturer: syz [ 440.370257][ T47] usb 5-1: SerialNumber: syz [ 440.867228][ T9414] ksmbd: Unknown IPC event: 0, ignore. [ 441.456881][ T47] usb 5-1: 0:2 : does not exist [ 441.802919][ T47] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 442.579098][ T47] usb 5-1: USB disconnect, device number 7 [ 442.640985][ T9420] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1013'. [ 442.732644][ T9423] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1013'. [ 443.006111][ T9400] udevd[9400]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 443.316877][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 443.326463][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 443.681138][ T9431] syz.4.1015 (9431) used greatest stack depth: 19104 bytes left [ 445.404573][ T9449] xt_TCPMSS: Only works on TCP SYN packets [ 447.750537][ T9464] xt_limit: Overflow, try lower: 687865856/40 [ 448.639756][ T9468] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1027'. [ 453.906988][ T9527] wlan0 speed is unknown, defaulting to 1000 [ 453.979105][ T9527] lo speed is unknown, defaulting to 1000 [ 454.585635][ T9541] xt_hashlimit: size too large, truncated to 1048576 [ 456.780571][ T9570] 9pnet: p9_errstr2errno: server reported unknown error 18446744073709 [ 458.088105][ T9578] netlink: 'syz.3.1061': attribute type 27 has an invalid length. [ 459.175758][ T9584] 8021q: adding VLAN 0 to HW filter on device bond0 [ 459.326654][ T9584] 8021q: adding VLAN 0 to HW filter on device team0 [ 459.511164][ T9584] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 459.538537][ T9593] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1065'. [ 459.562207][ T9583] ipip0: entered promiscuous mode [ 461.995317][ T9619] netlink: 'syz.1.1072': attribute type 10 has an invalid length. [ 462.009041][ T9619] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 462.030827][ T9619] netlink: 'syz.1.1072': attribute type 10 has an invalid length. [ 462.044807][ T9619] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 463.795869][ T9650] netlink: 'syz.3.1081': attribute type 11 has an invalid length. [ 465.305394][ T9669] xt_hashlimit: size too large, truncated to 1048576 [ 465.653583][ T9669] Cannot find add_set index 0 as target [ 469.322111][ T30] audit: type=1326 audit(1745172553.304:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9701 comm="syz.0.1095" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8ed018e169 code=0x0 [ 469.789509][ T30] audit: type=1326 audit(1745172553.996:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9707 comm="syz.2.1098" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14bdb8e169 code=0x7ffc0000 [ 469.826245][ T30] audit: type=1326 audit(1745172554.015:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9707 comm="syz.2.1098" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f14bdb8e169 code=0x7ffc0000 [ 469.888435][ T9711] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 470.457771][ T30] audit: type=1326 audit(1745172554.015:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9707 comm="syz.2.1098" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14bdb8e169 code=0x7ffc0000 [ 470.479786][ T30] audit: type=1326 audit(1745172554.015:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9707 comm="syz.2.1098" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f14bdb8e169 code=0x7ffc0000 [ 470.522015][ T30] audit: type=1326 audit(1745172554.015:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9707 comm="syz.2.1098" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14bdb8e169 code=0x7ffc0000 [ 470.758584][ T30] audit: type=1326 audit(1745172554.015:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9707 comm="syz.2.1098" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f14bdb8e169 code=0x7ffc0000 [ 470.809414][ T9717] netlink: 'syz.0.1100': attribute type 12 has an invalid length. [ 470.821431][ T30] audit: type=1326 audit(1745172554.015:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9707 comm="syz.2.1098" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14bdb8e169 code=0x7ffc0000 [ 470.929557][ T30] audit: type=1326 audit(1745172554.015:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9707 comm="syz.2.1098" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f14bdb8e169 code=0x7ffc0000 [ 471.013393][ T30] audit: type=1326 audit(1745172554.015:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9707 comm="syz.2.1098" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14bdb8e169 code=0x7ffc0000 [ 472.385480][ T9738] netlink: 9 bytes leftover after parsing attributes in process `syz.3.1107'. [ 472.467514][ T9738] gretap0: entered promiscuous mode [ 473.406058][ T5879] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 474.088137][ T5879] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 474.123947][ T5879] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 474.146430][ T5879] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 474.148043][ T9760] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1115'. [ 474.156663][ T5879] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 474.182589][ T9758] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1114'. [ 474.202107][ T9732] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 474.215922][ T5879] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 474.282271][ T9758] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1114'. [ 474.339611][ T9765] wireguard0: entered promiscuous mode [ 474.358697][ T9765] wireguard0: entered allmulticast mode [ 475.354534][ T9788] batman_adv: batadv0: Adding interface: dummy0 [ 475.377702][ T9788] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 475.610918][ T9788] batman_adv: batadv0: Interface activated: dummy0 [ 476.626460][ T96] usb 1-1: USB disconnect, device number 9 [ 476.685307][ T9788] batadv0: mtu less than device minimum [ 476.863709][ T9788] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 476.876210][ T9788] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 476.888380][ T9788] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 476.900373][ T9788] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 476.912493][ T9788] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 476.924576][ T9788] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 476.936682][ T9788] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 476.948780][ T9788] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 476.960862][ T9788] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 477.122125][ T9804] tipc: Started in network mode [ 477.127339][ T9804] tipc: Node identity 4, cluster identity 4711 [ 477.134918][ T9804] tipc: Node number set to 4 [ 477.291962][ T9809] netlink: 'syz.0.1124': attribute type 21 has an invalid length. [ 477.301435][ T9809] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1124'. [ 478.821476][ T9818] [ 478.823882][ T9818] ====================================================== [ 478.830941][ T9818] WARNING: possible circular locking dependency detected [ 478.837969][ T9818] 6.15.0-rc2-syzkaller-00488-g6fea5fabd332 #0 Not tainted [ 478.845076][ T9818] ------------------------------------------------------ [ 478.852101][ T9818] syz.4.1128/9818 is trying to acquire lock: [ 478.858081][ T9818] ffff888032560940 (&sbi->pipe_mutex){+.+.}-{4:4}, at: autofs_notify_daemon+0x86b/0x1100 [ 478.867963][ T9818] [ 478.867963][ T9818] but task is already holding lock: [ 478.875415][ T9818] ffff888020340888 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1e2/0x510 [ 478.884756][ T9818] [ 478.884756][ T9818] which lock already depends on the new lock. [ 478.884756][ T9818] [ 478.895164][ T9818] [ 478.895164][ T9818] the existing dependency chain (in reverse order) is: [ 478.904178][ T9818] [ 478.904178][ T9818] -> #2 (&of->mutex){+.+.}-{4:4}: [ 478.911412][ T9818] lock_acquire+0x116/0x2f0 [ 478.916448][ T9818] __mutex_lock+0x1a5/0x10c0 [ 478.921564][ T9818] kernfs_fop_write_iter+0x1e2/0x510 [ 478.927398][ T9818] iter_file_splice_write+0xbdf/0x1530 [ 478.933400][ T9818] do_splice+0xda7/0x1920 [ 478.938265][ T9818] __se_sys_splice+0x2dc/0x450 [ 478.943563][ T9818] do_syscall_64+0xf3/0x210 [ 478.948589][ T9818] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 478.955006][ T9818] [ 478.955006][ T9818] -> #1 (&pipe->mutex){+.+.}-{4:4}: [ 478.962411][ T9818] lock_acquire+0x116/0x2f0 [ 478.967445][ T9818] __mutex_lock+0x1a5/0x10c0 [ 478.972560][ T9818] anon_pipe_write+0x167/0x14f0 [ 478.977938][ T9818] __kernel_write_iter+0x4c0/0x990 [ 478.983571][ T9818] __kernel_write+0x122/0x180 [ 478.988770][ T9818] autofs_notify_daemon+0x87e/0x1100 [ 478.994586][ T9818] autofs_wait+0x1324/0x1dd0 [ 478.999707][ T9818] autofs_mount_wait+0x170/0x330 [ 479.005171][ T9818] autofs_d_automount+0x555/0x710 [ 479.010719][ T9818] __traverse_mounts+0x2b5/0x580 [ 479.016182][ T9818] step_into+0x5bd/0x1000 [ 479.021130][ T9818] path_lookupat+0x169/0x440 [ 479.026250][ T9818] filename_lookup+0x290/0x670 [ 479.031544][ T9818] user_path_at+0x3a/0x60 [ 479.036410][ T9818] __se_sys_mount+0x348/0x400 [ 479.041618][ T9818] do_syscall_64+0xf3/0x210 [ 479.046655][ T9818] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 479.053110][ T9818] [ 479.053110][ T9818] -> #0 (&sbi->pipe_mutex){+.+.}-{4:4}: [ 479.060879][ T9818] validate_chain+0xa69/0x24e0 [ 479.066185][ T9818] __lock_acquire+0xad5/0xd80 [ 479.071402][ T9818] lock_acquire+0x116/0x2f0 [ 479.076430][ T9818] __mutex_lock+0x1a5/0x10c0 [ 479.081544][ T9818] autofs_notify_daemon+0x86b/0x1100 [ 479.087375][ T9818] autofs_wait+0x1324/0x1dd0 [ 479.092486][ T9818] autofs_mount_wait+0x170/0x330 [ 479.097947][ T9818] autofs_d_automount+0x555/0x710 [ 479.103493][ T9818] __traverse_mounts+0x2b5/0x580 [ 479.108952][ T9818] step_into+0x5bd/0x1000 [ 479.113805][ T9818] path_lookupat+0x169/0x440 [ 479.118938][ T9818] filename_lookup+0x290/0x670 [ 479.124244][ T9818] kern_path+0x35/0x50 [ 479.128850][ T9818] lookup_bdev+0xc8/0x290 [ 479.133717][ T9818] resume_store+0x1e1/0x720 [ 479.138747][ T9818] kernfs_fop_write_iter+0x398/0x510 [ 479.144657][ T9818] vfs_write+0x70f/0xd10 [ 479.149423][ T9818] ksys_write+0x19d/0x2d0 [ 479.154277][ T9818] do_syscall_64+0xf3/0x210 [ 479.159304][ T9818] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 479.165721][ T9818] [ 479.165721][ T9818] other info that might help us debug this: [ 479.165721][ T9818] [ 479.175951][ T9818] Chain exists of: [ 479.175951][ T9818] &sbi->pipe_mutex --> &pipe->mutex --> &of->mutex [ 479.175951][ T9818] [ 479.188396][ T9818] Possible unsafe locking scenario: [ 479.188396][ T9818] [ 479.195865][ T9818] CPU0 CPU1 [ 479.201234][ T9818] ---- ---- [ 479.206599][ T9818] lock(&of->mutex); [ 479.210616][ T9818] lock(&pipe->mutex); [ 479.217313][ T9818] lock(&of->mutex); [ 479.223844][ T9818] lock(&sbi->pipe_mutex); [ 479.228364][ T9818] [ 479.228364][ T9818] *** DEADLOCK *** [ 479.228364][ T9818] [ 479.236521][ T9818] 4 locks held by syz.4.1128/9818: [ 479.241637][ T9818] #0: ffff88803533b5f8 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x247/0x310 [ 479.250723][ T9818] #1: ffff88803603a420 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x23f/0xd10 [ 479.259627][ T9818] #2: ffff888020340888 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1e2/0x510 [ 479.269395][ T9818] #3: ffff88801f6a8c38 (kn->active#57){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x206/0x510 [ 479.279428][ T9818] [ 479.279428][ T9818] stack backtrace: [ 479.285334][ T9818] CPU: 0 UID: 0 PID: 9818 Comm: syz.4.1128 Not tainted 6.15.0-rc2-syzkaller-00488-g6fea5fabd332 #0 PREEMPT(full) [ 479.285356][ T9818] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 479.285370][ T9818] Call Trace: [ 479.285378][ T9818] [ 479.285387][ T9818] dump_stack_lvl+0x241/0x360 [ 479.285424][ T9818] ? __pfx_dump_stack_lvl+0x10/0x10 [ 479.285446][ T9818] ? __pfx__printk+0x10/0x10 [ 479.285467][ T9818] ? print_lock+0x171/0x1a0 [ 479.285493][ T9818] print_circular_bug+0x2e1/0x300 [ 479.285527][ T9818] check_noncircular+0x142/0x160 [ 479.285557][ T9818] validate_chain+0xa69/0x24e0 [ 479.285593][ T9818] __lock_acquire+0xad5/0xd80 [ 479.285618][ T9818] lock_acquire+0x116/0x2f0 [ 479.285638][ T9818] ? autofs_notify_daemon+0x86b/0x1100 [ 479.285664][ T9818] __mutex_lock+0x1a5/0x10c0 [ 479.285681][ T9818] ? autofs_notify_daemon+0x86b/0x1100 [ 479.285704][ T9818] ? __mutex_unlock_slowpath+0x229/0x800 [ 479.285722][ T9818] ? autofs_notify_daemon+0x86b/0x1100 [ 479.285742][ T9818] ? __pfx___mutex_lock+0x10/0x10 [ 479.285759][ T9818] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 479.285776][ T9818] ? from_kgid_munged+0x276/0x780 [ 479.285802][ T9818] ? __pfx_from_kgid_munged+0x10/0x10 [ 479.285822][ T9818] ? kasan_save_track+0x51/0x80 [ 479.285838][ T9818] ? kasan_save_track+0x3f/0x80 [ 479.285853][ T9818] ? __kasan_kmalloc+0x9d/0xb0 [ 479.285870][ T9818] ? autofs_notify_daemon+0x48a/0x1100 [ 479.285892][ T9818] autofs_notify_daemon+0x86b/0x1100 [ 479.285912][ T9818] ? vfs_write+0x70f/0xd10 [ 479.285929][ T9818] ? __pfx_autofs_notify_daemon+0x10/0x10 [ 479.285963][ T9818] ? __raw_spin_lock_init+0x45/0x100 [ 479.285980][ T9818] ? autofs_wait+0xf99/0x1dd0 [ 479.286001][ T9818] autofs_wait+0x1324/0x1dd0 [ 479.286027][ T9818] ? __pfx_autofs_wait+0x10/0x10 [ 479.286057][ T9818] autofs_mount_wait+0x170/0x330 [ 479.286078][ T9818] autofs_d_automount+0x555/0x710 [ 479.286100][ T9818] __traverse_mounts+0x2b5/0x580 [ 479.286123][ T9818] step_into+0x5bd/0x1000 [ 479.286146][ T9818] ? __pfx___up_read+0x10/0x10 [ 479.286163][ T9818] ? __pfx_step_into+0x10/0x10 [ 479.286186][ T9818] ? walk_component+0x193/0x420 [ 479.286208][ T9818] path_lookupat+0x169/0x440 [ 479.286233][ T9818] filename_lookup+0x290/0x670 [ 479.286257][ T9818] ? __pfx_filename_lookup+0x10/0x10 [ 479.286288][ T9818] ? trace_kmem_cache_alloc+0x1f/0xc0 [ 479.286308][ T9818] ? kmem_cache_alloc_noprof+0x237/0x390 [ 479.286328][ T9818] ? getname_kernel+0x140/0x2f0 [ 479.286352][ T9818] kern_path+0x35/0x50 [ 479.286374][ T9818] lookup_bdev+0xc8/0x290 [ 479.286394][ T9818] ? rcu_is_watching+0x15/0xb0 [ 479.286410][ T9818] ? __pfx_lookup_bdev+0x10/0x10 [ 479.286429][ T9818] ? kstrndup+0xbb/0x150 [ 479.286451][ T9818] resume_store+0x1e1/0x720 [ 479.286471][ T9818] ? __pfx_resume_store+0x10/0x10 [ 479.286490][ T9818] ? sysfs_file_kobj+0x1a/0x230 [ 479.286506][ T9818] ? sysfs_file_kobj+0x1a/0x230 [ 479.286522][ T9818] ? sysfs_file_kobj+0x1e5/0x230 [ 479.286538][ T9818] ? sysfs_kf_write+0x166/0x260 [ 479.286556][ T9818] ? __pfx_sysfs_kf_write+0x10/0x10 [ 479.286573][ T9818] kernfs_fop_write_iter+0x398/0x510 [ 479.286601][ T9818] vfs_write+0x70f/0xd10 [ 479.286618][ T9818] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 479.286645][ T9818] ? __pfx_vfs_write+0x10/0x10 [ 479.286662][ T9818] ? __fget_files+0x2a/0x420 [ 479.286682][ T9818] ? __fget_files+0x2a/0x420 [ 479.286705][ T9818] ksys_write+0x19d/0x2d0 [ 479.286721][ T9818] ? __pfx_ksys_write+0x10/0x10 [ 479.286739][ T9818] ? do_syscall_64+0xb6/0x210 [ 479.286758][ T9818] do_syscall_64+0xf3/0x210 [ 479.286775][ T9818] ? clear_bhb_loop+0x45/0xa0 [ 479.286799][ T9818] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 479.286816][ T9818] RIP: 0033:0x7f367358e169 [ 479.286835][ T9818] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 479.286849][ T9818] RSP: 002b:00007f367431b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 479.286867][ T9818] RAX: ffffffffffffffda RBX: 00007f36737b6080 RCX: 00007f367358e169 [ 479.286879][ T9818] RDX: 0000000000000012 RSI: 0000200000000040 RDI: 0000000000000004 [ 479.286890][ T9818] RBP: 00007f3673610a68 R08: 0000000000000000 R09: 0000000000000000 [ 479.286900][ T9818] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 479.286910][ T9818] R13: 0000000000000000 R14: 00007f36737b6080 R15: 00007fff256e2868 [ 479.286928][ T9818] [ 479.928262][ T9818] block device autoloading is deprecated and will be removed. [ 479.946251][ T9818] syz.4.1128: attempt to access beyond end of device [ 479.946251][ T9818] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 479.961382][ T9818] PM: Image not found (code -5)