last executing test programs: 3m56.296337136s ago: executing program 2 (id=234): syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000780)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r0}, 0x10) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/kexec_loaded', 0x62000, 0x192) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r1, &(0x7f0000000000)="e6", 0x1, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) shutdown(r1, 0x1) recvfrom(r1, 0x0, 0x5d, 0x40010657, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) socket$inet_mptcp(0x2, 0x1, 0x106) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x3, 0x8, 0x2, 0xb}, 0x0, &(0x7f0000000280)={0x3ff, 0x0, 0x0, 0x400d, 0x0, 0x9, 0x466}, 0x0, 0x0) 3m54.595273509s ago: executing program 2 (id=238): r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000a80)={{0x2, 0x0, @broadcast}, {0x0, @link_local}, 0x4a, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 'veth0_to_team\x00'}) ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f0000000080)={{0x2, 0x0, @broadcast}, {0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x4}}, 0x8, {0x2, 0x0, @empty}, 'team_slave_1\x00'}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCSARP(r2, 0x8955, &(0x7f0000000a80)={{0x2, 0xffff, @private=0xa010100}, {0x0, @local}, 0x0, {0x2, 0x4e23, @multicast1}, 'wg1\x00'}) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/arp\x00') mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000000, 0x10010, r3, 0x70b85000) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r4, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={0x0, 0x6c}, 0x1, 0x0, 0x0, 0x4048010}, 0x40408c0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) preadv(r3, &(0x7f0000000040)=[{&(0x7f0000000200)=""/233, 0xe9}], 0x1, 0xfff, 0x0) 3m53.851842861s ago: executing program 2 (id=240): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r3, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x410200}], 0x1}}], 0x48}, 0x0) 3m52.739217356s ago: executing program 2 (id=244): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000001a40)=""/102392, 0x18ff8) syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000000)) madvise(&(0x7f000060c000/0x4000)=nil, 0x4000, 0x16) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x40) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/dev_mcast\x00') pread64(r1, &(0x7f000001a240)=""/102400, 0x19000, 0x41e) 3m49.984449914s ago: executing program 2 (id=251): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x48) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) readv(r3, &(0x7f0000003400)=[{&(0x7f0000001080)=""/107, 0x7ffff000}, {&(0x7f0000004c00)=""/4096, 0x1000}], 0x2) 3m47.773799475s ago: executing program 2 (id=256): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='kfree\x00', r0}, 0x18) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000500)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa802, 0x0) close(r2) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0xfffffffd, 0x0, {0x0, 0x0, 0x0, r4, {0x7, 0xfff2}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) recvmmsg(r5, &(0x7f0000002100)=[{{0x0, 0x0, &(0x7f0000001a80)=[{&(0x7f0000000640)=""/216, 0xd8}, {&(0x7f0000000a40)=""/4104, 0x102b}, {&(0x7f0000000940)=""/223, 0xdf}], 0x3}, 0x3}], 0x1, 0x0, 0x0) 3m32.618310696s ago: executing program 32 (id=256): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='kfree\x00', r0}, 0x18) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000500)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa802, 0x0) close(r2) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0xfffffffd, 0x0, {0x0, 0x0, 0x0, r4, {0x7, 0xfff2}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) recvmmsg(r5, &(0x7f0000002100)=[{{0x0, 0x0, &(0x7f0000001a80)=[{&(0x7f0000000640)=""/216, 0xd8}, {&(0x7f0000000a40)=""/4104, 0x102b}, {&(0x7f0000000940)=""/223, 0xdf}], 0x3}, 0x3}], 0x1, 0x0, 0x0) 2m54.456711843s ago: executing program 3 (id=361): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000200)=0x1, 0x4) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000080)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000400)={'wg2\x00', 0x0}) bind$xdp(r1, &(0x7f0000000100)={0x2c, 0x0, r4}, 0x10) bind$xdp(r0, &(0x7f0000000180)={0x2c, 0x1, r3, 0x7, r1}, 0x10) 2m43.651049273s ago: executing program 3 (id=374): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x3d, &(0x7f0000000000)='cgroup\x00\x8d\f\xf3\xcd\xc6X$\x01n-Hg\x144-.\xe2\x053\xe2\xf4\xbf[\xe9\xdddU\x91\x9d,\t\x8d\xc3@\x86,\x7f\xe2Z\xe8L\x80\xdbe~c\xbc\x9b\xcf\x9b\x1cH\x95\xf3'}, 0x30) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)=ANY=[@ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="0200000002"], 0x10) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000006c0)=ANY=[@ANYRES32=r3, @ANYRES32=r4, @ANYBLOB="0200000002"], 0x10) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) close(r0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r5, r6, 0x2, 0x2, 0x0, @void, @value}, 0x10) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000240)={@cgroup=r7, r0, 0x2, 0x0, 0x4000, @void, @value}, 0x10) 2m42.871494638s ago: executing program 3 (id=375): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r3, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000080)='\x00', 0x1}], 0x1, &(0x7f0000000280)=ANY=[@ANYBLOB="1400"], 0x18}, 0x0) bind$unix(r3, &(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x6e) recvmmsg(r4, &(0x7f0000001140), 0x700, 0x0, 0x0) 2m42.792067908s ago: executing program 0 (id=377): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={0x14, r4, 0x303, 0x4, 0x25dfdbfe, {0x2a}}, 0x14}, 0x1, 0x0, 0x0, 0x400c044}, 0x4004) 2m41.645562934s ago: executing program 0 (id=380): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x3d, &(0x7f0000000000)='cgroup\x00\x8d\f\xf3\xcd\xc6X$\x01n-Hg\x144-.\xe2\x053\xe2\xf4\xbf[\xe9\xdddU\x91\x9d,\t\x8d\xc3@\x86,\x7f\xe2Z\xe8L\x80\xdbe~c\xbc\x9b\xcf\x9b\x1cH\x95\xf3'}, 0x30) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)=ANY=[@ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="0200"], 0x10) socket$inet_tcp(0x2, 0x1, 0x0) 2m41.489865468s ago: executing program 3 (id=381): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x7, 0x4, 0x18, 0x28e, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1a000000, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={0xffffffffffffffff, 0xe0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), &(0x7f0000000100), 0x0, 0xc4, 0x0, 0x0, 0x10, &(0x7f0000000180), &(0x7f0000000200), 0x8, 0x82, 0x8, 0x0, 0x0}}, 0x10) 2m39.617702078s ago: executing program 0 (id=382): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_io_uring_setup(0x10e, &(0x7f0000000140)={0x0, 0xfad6}, &(0x7f00000003c0)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_SPLICE={0x1e, 0x18, 0x0, @fd, 0x6, {}, 0x5, 0x15}) io_uring_enter(r3, 0x47f5, 0x0, 0x0, 0x0, 0x0) 2m39.229616996s ago: executing program 0 (id=385): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x8001000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x228, 0x0, 0x11, 0x148, 0xb8, 0x0, 0x190, 0x2a8, 0x2a8, 0x190, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x6, 0x6, 0xd04, 'netbios-ns\x00', {0x5}}}}, {{@ip={@multicast1, @private=0xa010102, 0xffffffff, 0xffffff00, 'veth1_to_batadv\x00', 'macsec0\x00', {0xff}, {}, 0x6, 0x2, 0x8}, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x288) 1m45.47891056s ago: executing program 3 (id=381): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x7, 0x4, 0x18, 0x28e, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1a000000, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={0xffffffffffffffff, 0xe0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), &(0x7f0000000100), 0x0, 0xc4, 0x0, 0x0, 0x10, &(0x7f0000000180), &(0x7f0000000200), 0x8, 0x82, 0x8, 0x0, 0x0}}, 0x10) 1m39.449723953s ago: executing program 0 (id=385): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x8001000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x228, 0x0, 0x11, 0x148, 0xb8, 0x0, 0x190, 0x2a8, 0x2a8, 0x190, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x6, 0x6, 0xd04, 'netbios-ns\x00', {0x5}}}}, {{@ip={@multicast1, @private=0xa010102, 0xffffffff, 0xffffff00, 'veth1_to_batadv\x00', 'macsec0\x00', {0xff}, {}, 0x6, 0x2, 0x8}, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x288) 52.249677239s ago: executing program 3 (id=381): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x7, 0x4, 0x18, 0x28e, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1a000000, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={0xffffffffffffffff, 0xe0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), &(0x7f0000000100), 0x0, 0xc4, 0x0, 0x0, 0x10, &(0x7f0000000180), &(0x7f0000000200), 0x8, 0x82, 0x8, 0x0, 0x0}}, 0x10) 50.970577729s ago: executing program 0 (id=385): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x8001000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x228, 0x0, 0x11, 0x148, 0xb8, 0x0, 0x190, 0x2a8, 0x2a8, 0x190, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x6, 0x6, 0xd04, 'netbios-ns\x00', {0x5}}}}, {{@ip={@multicast1, @private=0xa010102, 0xffffffff, 0xffffff00, 'veth1_to_batadv\x00', 'macsec0\x00', {0xff}, {}, 0x6, 0x2, 0x8}, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x288) 12.594196089s ago: executing program 4 (id=663): prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0xf) r1 = syz_io_uring_setup(0x822, &(0x7f00000000c0)={0x0, 0xbdbb, 0x10, 0x1, 0x34f}, &(0x7f0000000140)=0x0, &(0x7f0000000080)=0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket(0x10, 0x803, 0x0) getsockname$packet(r4, 0x0, &(0x7f0000000200)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffff9, 0x0, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x50, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r1, 0x47bc, 0x0, 0x21, 0x0, 0x0) 11.652105488s ago: executing program 4 (id=664): set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffd, 0x4) set_mempolicy(0x4000, &(0x7f0000000000)=0x8, 0x9) r0 = socket(0x2000000015, 0x80005, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x40000, @loopback}, 0x7) r1 = openat$smackfs_change_rule(0xffffff9c, &(0x7f0000001140), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$proc_mixer(r1, &(0x7f0000000080)=ANY=[@ANYBLOB='?ASS\nDIGITAL2\nLaNE1 \'Mic Capture Switch\' 00000000000000000000\nALTPCM\nLINE\nDIGITAL3 WMaster Capture\' 00000000000000000000\nDIGITAL2 \'CD Capture\' 00000000000000000000\nTREBLE\nPCM \'Master Playback Volume\' 00000000000000000000\nVOLUME\n'], 0xe4) 11.488583716s ago: executing program 1 (id=666): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) r1 = shmget(0x1, 0x4000, 0x200, &(0x7f0000ff8000/0x4000)=nil) shmat(r1, &(0x7f0000ff8000/0x5000)=nil, 0x7000) shmctl$IPC_RMID(r1, 0x0) close(0xffffffffffffffff) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000640)={@cgroup, 0x24, 0x0, 0xffff, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r3 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r3, &(0x7f0000000240)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) 10.452040458s ago: executing program 4 (id=667): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000280), 0x22802, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x7) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x0, &(0x7f0000000140)}, 0x10) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r2, 0x11, 0x67, 0x0, 0x0) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e23, 0x4, @empty, 0x4}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000003cc0), 0x0, 0x4001c00) socket$kcm(0x10, 0x2, 0x4) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, 0x0) ioctl$TCFLSH(r3, 0x80047456, 0xffefff1f00000000) 9.032829557s ago: executing program 4 (id=669): socket(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6(0xa, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000002c0)) socket$inet_sctp(0x2, 0x1, 0x84) socket$netlink(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="2400000025000100000000000000000008000000", @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00', @ANYRES32], 0x24}], 0x1}, 0x0) 8.19195774s ago: executing program 1 (id=670): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet6_sctp(0xa, 0x1, 0x84) sysinfo(&(0x7f0000000000)=""/196) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSETS(r3, 0x404c4701, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x400000, 0x14, "3eccd8000000000000000040000000040100"}) 7.24146657s ago: executing program 4 (id=672): bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020700000000000002030207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000100850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sched_switch\x00', r3}, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) request_key(0x0, 0x0, 0x0, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) 6.0520666s ago: executing program 4 (id=675): syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r0 = syz_open_dev$sndmidi(0x0, 0xd, 0x0) r1 = dup(r0) write$6lowpan_enable(r1, 0x0, 0x0) r2 = syz_open_dev$vim2m(0x0, 0x81, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r2, 0xc008561c, 0x0) r3 = dup(0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0xf0ffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r3, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) ioctl$BLKZEROOUT(r3, 0x127f, &(0x7f00000000c0)={0x4000, 0x80600}) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, 0x0, 0x0) 5.813629759s ago: executing program 1 (id=676): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600016, 0x4) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_OPTION$IOMMU_OPTION_HUGE_PAGES(r3, 0x3b87, &(0x7f0000000600)={0x18, 0x1, 0x1, 0x0, r4}) 4.32385528s ago: executing program 1 (id=678): syz_open_dev$dri(0x0, 0x2, 0x9a402) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, 0x0, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000fe001800", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000100000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = socket(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x404000, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000180)=ANY=[@ANYBLOB="680000001000030400"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e003000028008000100100000001c0005800a000400aaaaaaaaaabb00000a000400aaaaaaaaaa0000000800030003"], 0x68}}, 0x64000004) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f00000001c0)=ANY=[@ANYBLOB="01"]) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuset.effective_mems\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000), 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r4, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={0xffffffffffffffff, 0xf, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 3.992969482s ago: executing program 5 (id=679): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000080)={@empty, 0x8000000, 0x0, 0xff, 0x1}, 0x20) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0xfca804a0, 0x0, 0x0, 0x0, 0x0, 0x5ee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xa}, 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x10, 0x4, 0x8, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r2}, &(0x7f0000000000), &(0x7f0000000040)=r3}, 0x20) 3.862480484s ago: executing program 1 (id=680): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = semget$private(0x0, 0x1, 0x729) fsmount(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x9}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(r2, 0x8, &(0x7f00000001c0)=0x9) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000180), 0xfffffffffffff998, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) semctl$SEM_STAT_ANY(r1, 0x2, 0x14, &(0x7f0000000340)=""/142) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0x6c, 0x0, 0x2, 0x401, 0x0, 0x0, {0x2}, [@CTA_EXPECT_TUPLE={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_EXPECT_MASK={0x30, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00'}, {0x14, 0x4, @local}}}]}, @CTA_EXPECT_MASTER={0x4}]}, 0x6c}}, 0x0) 2.940982941s ago: executing program 5 (id=681): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x10, 0x2, 0x4) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) memfd_secret(0x0) socket$inet_smc(0x2b, 0x1, 0x0) r0 = syz_io_uring_setup(0x19f2, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000040)={'syztnl0\x00', &(0x7f0000000180)={'syztnl0\x00', 0x0, 0x14, 0x0, 0x0, 0x0, 0x2b, @empty, @empty}}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='pids.events\x00', 0x275a, 0x0) write$UHID_CREATE2(r4, &(0x7f0000000180)=ANY=[@ANYRES64=r3], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x0, 0x0, r4, 0x0}) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 2.648757841s ago: executing program 5 (id=682): ioctl$SNDCTL_DSP_SETTRIGGER(0xffffffffffffffff, 0x40045010, 0x0) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), 0xffffffffffffffff) r5 = socket(0x10, 0x3, 0x0) write(r5, &(0x7f0000000040), 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01000000000000000000010000001c000180060001000200000008000300ac1414aa0800060001"], 0x30}}, 0x0) 2.414258104s ago: executing program 5 (id=683): prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000400)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000002c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = shmget(0x0, 0x2000, 0x100, &(0x7f0000ffc000/0x2000)=nil) shmat(r3, &(0x7f0000ffc000/0x3000)=nil, 0x1000) shmctl$IPC_RMID(r3, 0x0) shmctl$SHM_STAT(0x0, 0xd, &(0x7f0000000000)=""/82) clock_gettime(0x3, 0x0) 1.389685444s ago: executing program 5 (id=684): r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x2a, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r1}, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f00000001c0)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0xff) 1.254134623s ago: executing program 1 (id=685): syz_open_procfs(0xffffffffffffffff, 0x0) r0 = getpid() r1 = syz_open_procfs(r0, &(0x7f0000000200)='ns\x00') r2 = getpid() mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB='huge=always']) chdir(&(0x7f0000000140)='./file0\x00') r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.current\x00', 0x275a, 0x0) fallocate(r3, 0x0, 0xfea000, 0x2000402) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) r4 = syz_pidfd_open(r2, 0x0) setns(r4, 0x24020000) umount2(&(0x7f0000000000)='.\x00', 0x2) close_range(r1, 0xffffffffffffffff, 0x0) 0s ago: executing program 5 (id=686): socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_udp(0x2, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xe, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r3}, &(0x7f0000000240), &(0x7f00000003c0)=r5}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r4, r1, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x15, &(0x7f0000000300)={@random="6ea88d319b8c", @multicast, @val={@void, {0x8100, 0x0, 0x1, 0x4}}, {@x25={0x805, {0x0, 0x1, 0xb}}}}, 0x0) kernel console output (not intermixed with test programs): ="syz.2.95" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fe4e6b8e969 code=0x7fc00000 [ 138.184556][ T30] audit: type=1326 audit(1748012215.971:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6259 comm="syz.2.95" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4e6b8e969 code=0x7fc00000 [ 138.215461][ T30] audit: type=1326 audit(1748012215.971:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6259 comm="syz.2.95" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4e6b8e969 code=0x7fc00000 [ 138.245335][ T30] audit: type=1326 audit(1748012215.971:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6259 comm="syz.2.95" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4e6b8e969 code=0x7fc00000 [ 138.308733][ T30] audit: type=1326 audit(1748012215.971:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6259 comm="syz.2.95" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4e6b8e969 code=0x7fc00000 [ 138.382301][ T30] audit: type=1326 audit(1748012215.971:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6259 comm="syz.2.95" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4e6b8e969 code=0x7fc00000 [ 139.785403][ T30] audit: type=1326 audit(1748012217.571:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6291 comm="syz.3.103" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fed9078e969 code=0x0 [ 142.505669][ T30] audit: type=1326 audit(1748012220.301:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6330 comm="syz.0.112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ef258e969 code=0x7ffc0000 [ 142.572234][ T30] audit: type=1326 audit(1748012220.301:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6330 comm="syz.0.112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ef258e969 code=0x7ffc0000 [ 142.624046][ T30] audit: type=1326 audit(1748012220.331:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6330 comm="syz.0.112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9ef258e969 code=0x7ffc0000 [ 142.672750][ T30] audit: type=1326 audit(1748012220.331:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6330 comm="syz.0.112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ef258e969 code=0x7ffc0000 [ 142.701709][ T30] audit: type=1326 audit(1748012220.331:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6330 comm="syz.0.112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ef258e969 code=0x7ffc0000 [ 142.752290][ T30] audit: type=1326 audit(1748012220.331:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6330 comm="syz.0.112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=440 compat=0 ip=0x7f9ef258e969 code=0x7ffc0000 [ 142.788168][ T30] audit: type=1326 audit(1748012220.331:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6330 comm="syz.0.112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ef258e969 code=0x7ffc0000 [ 142.815384][ T30] audit: type=1326 audit(1748012220.331:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6330 comm="syz.0.112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ef258e969 code=0x7ffc0000 [ 142.917633][ T30] audit: type=1326 audit(1748012220.331:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6330 comm="syz.0.112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=300 compat=0 ip=0x7f9ef258e969 code=0x7ffc0000 [ 144.410502][ T6349] netlink: 24 bytes leftover after parsing attributes in process `syz.3.118'. [ 144.517876][ T6351] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 144.517876][ T6351] program syz.0.117 not setting count and/or reply_len properly [ 145.281318][ T5877] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 145.489845][ T5877] usb 5-1: Using ep0 maxpacket: 8 [ 145.644700][ T5877] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 145.654086][ T5877] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.676970][ T5877] usb 5-1: Product: syz [ 145.718976][ T5877] usb 5-1: Manufacturer: syz [ 145.770556][ T5877] usb 5-1: SerialNumber: syz [ 146.553670][ T5877] usb 5-1: config 0 descriptor?? [ 146.795869][ T5877] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 148.843699][ T5877] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 149.073686][ T5877] usb 5-1: USB disconnect, device number 5 [ 151.181149][ T6394] warning: `syz.1.130' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 151.710175][ T6398] netlink: 'syz.3.132': attribute type 12 has an invalid length. [ 158.463163][ T6441] /dev/sg0: Can't lookup blockdev [ 161.577251][ T6462] process 'syz.3.148' launched './file0' with NULL argv: empty string added [ 161.632135][ T6464] sctp: [Deprecated]: syz.2.149 (pid 6464) Use of struct sctp_assoc_value in delayed_ack socket option. [ 161.632135][ T6464] Use struct sctp_sack_info instead [ 166.102403][ T6504] bridge0: port 1(bridge_slave_0) entered disabled state [ 166.462103][ T6510] bridge0: port 2(bridge_slave_1) entered disabled state [ 166.470175][ T6510] bridge0: port 1(bridge_slave_0) entered disabled state [ 167.690474][ T6506] vlan2: entered allmulticast mode [ 167.877230][ T6506] bond0: entered allmulticast mode [ 167.882484][ T6506] bond_slave_0: entered allmulticast mode [ 167.948193][ T6506] bond_slave_1: entered allmulticast mode [ 167.969270][ T6506] bridge0: port 3(vlan2) entered blocking state [ 168.200685][ T6506] bridge0: port 3(vlan2) entered disabled state [ 168.262911][ T6506] vlan2: entered promiscuous mode [ 168.294673][ T6518] netlink: 'syz.3.165': attribute type 1 has an invalid length. [ 168.308987][ T6506] bond0: entered promiscuous mode [ 168.320245][ T6506] bond_slave_0: entered promiscuous mode [ 168.329514][ T6506] bond_slave_1: entered promiscuous mode [ 168.440339][ T6521] netlink: 28 bytes leftover after parsing attributes in process `syz.3.165'. [ 168.487112][ T6520] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 168.527050][ T6520] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 168.565381][ T6520] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 168.589837][ T6520] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 168.632296][ T6520] bond1: (slave geneve2): making interface the new active one [ 168.641728][ T6520] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 168.659943][ T6521] 8021q: adding VLAN 0 to HW filter on device bond1 [ 168.682890][ T6521] syz.3.165 (6521) used greatest stack depth: 20232 bytes left [ 169.786020][ T6530] netlink: 'syz.1.168': attribute type 21 has an invalid length. [ 169.835552][ T6530] netlink: 'syz.1.168': attribute type 6 has an invalid length. [ 169.843267][ T6530] netlink: 132 bytes leftover after parsing attributes in process `syz.1.168'. [ 169.874198][ T6530] netlink: 'syz.1.168': attribute type 21 has an invalid length. [ 169.891251][ T5838] block nbd3: Receive control failed (result -107) [ 169.901175][ T6530] netlink: 'syz.1.168': attribute type 6 has an invalid length. [ 169.915616][ T6530] netlink: 132 bytes leftover after parsing attributes in process `syz.1.168'. [ 169.941010][ T6533] syz.3.169: attempt to access beyond end of device [ 169.941010][ T6533] nbd3: rw=0, sector=64, nr_sectors = 2 limit=0 [ 169.955942][ T6533] syz.3.169: attempt to access beyond end of device [ 169.955942][ T6533] nbd3: rw=0, sector=512, nr_sectors = 2 limit=0 [ 169.969722][ T6533] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 169.993414][ T6533] syz.3.169: attempt to access beyond end of device [ 169.993414][ T6533] nbd3: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 170.013446][ T6533] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 170.038266][ T6533] syz.3.169: attempt to access beyond end of device [ 170.038266][ T6533] nbd3: rw=0, sector=64, nr_sectors = 4 limit=0 [ 170.068388][ T6539] nbd3: detected capacity change from 0 to 29912 [ 170.105003][ T5873] block nbd3: Dead connection, failed to find a fallback [ 170.132281][ T6533] block nbd3: Dead connection, failed to find a fallback [ 170.147766][ T5873] block nbd3: shutting down sockets [ 170.153739][ T6533] I/O error, dev nbd3, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 170.178500][ T5873] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 170.344550][ T6533] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 170.713762][ T5873] Buffer I/O error on dev nbd3, logical block 0, async page read [ 170.730055][ T6533] I/O error, dev nbd3, sector 29908 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 170.776557][ T5873] I/O error, dev nbd3, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 170.795677][ T6533] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=7477, location=7477 [ 170.816998][ T6533] I/O error, dev nbd3, sector 28884 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 170.835608][ T6533] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=7221, location=7221 [ 170.855577][ T5873] Buffer I/O error on dev nbd3, logical block 1, async page read [ 170.858373][ T6533] I/O error, dev nbd3, sector 29904 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 170.865509][ T5873] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 170.910045][ T6533] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=7476, location=7476 [ 170.950734][ T5873] Buffer I/O error on dev nbd3, logical block 0, async page read [ 170.961762][ T6533] I/O error, dev nbd3, sector 28880 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 170.962564][ T5873] I/O error, dev nbd3, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 170.982195][ T6533] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=7220, location=7220 [ 171.027972][ T6533] I/O error, dev nbd3, sector 29900 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 171.053118][ T5873] Buffer I/O error on dev nbd3, logical block 1, async page read [ 171.080548][ T6533] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=7475, location=7475 [ 171.115857][ T5873] Buffer I/O error on dev nbd3, logical block 0, async page read [ 171.123884][ T5873] Buffer I/O error on dev nbd3, logical block 1, async page read [ 171.160422][ T5873] Buffer I/O error on dev nbd3, logical block 0, async page read [ 171.173018][ T6533] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=7219, location=7219 [ 171.194397][ T5873] Buffer I/O error on dev nbd3, logical block 1, async page read [ 171.216012][ T6533] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=7327, location=7327 [ 171.226315][ T5873] Buffer I/O error on dev nbd3, logical block 0, async page read [ 171.234246][ T5873] Buffer I/O error on dev nbd3, logical block 1, async page read [ 171.252134][ T6533] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=7071, location=7071 [ 171.296014][ T5873] ldm_validate_partition_table(): Disk read failed. [ 171.305990][ T6533] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=7325, location=7325 [ 171.448686][ T6533] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=7069, location=7069 [ 171.503929][ T5873] Dev nbd3: unable to read RDB block 0 [ 171.994590][ T6533] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 172.036761][ T6533] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 172.071181][ T5873] nbd3: unable to read partition table [ 172.112714][ T6533] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=3738, location=3738 [ 172.135621][ T6533] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=3482, location=3482 [ 172.200812][ T5873] ldm_validate_partition_table(): Disk read failed. [ 172.315575][ T6533] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=3737, location=3737 [ 172.326352][ T5873] Dev nbd3: unable to read RDB block 0 [ 172.332471][ T5873] nbd3: unable to read partition table [ 172.338830][ T6533] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=3481, location=3481 [ 172.416103][ T6533] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=3736, location=3736 [ 172.443540][ T6559] netlink: 28 bytes leftover after parsing attributes in process `syz.0.178'. [ 172.476398][ T6533] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=3480, location=3480 [ 172.696589][ T6533] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=3588, location=3588 [ 173.105414][ T6559] netlink: 8 bytes leftover after parsing attributes in process `syz.0.178'. [ 173.110514][ T6533] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=3332, location=3332 [ 173.195653][ T6533] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=3586, location=3586 [ 173.247917][ T6533] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=3330, location=3330 [ 173.325674][ T6533] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 173.366849][ T6533] UDF-fs: warning (device nbd3): udf_fill_super: No partition found (1) [ 176.684699][ T6587] loop8: detected capacity change from 0 to 7 [ 176.810408][ T6200] loop8: [POWERTEC] p1 p2 p3 p4 [ 176.839615][ T6200] loop8: p1 size 8519680 extends beyond EOD, truncated [ 176.877888][ T6200] loop8: p2 size 3670016 extends beyond EOD, truncated [ 176.904814][ T6200] loop8: p3 start 3932160 is beyond EOD, truncated [ 176.922968][ T6200] loop8: p4 start 524288 is beyond EOD, truncated [ 176.983872][ T6587] loop8: [POWERTEC] p1 p2 p3 p4 [ 177.006396][ T6587] loop8: p1 size 8519680 extends beyond EOD, truncated [ 177.019802][ T6587] loop8: p2 size 3670016 extends beyond EOD, truncated [ 177.029312][ T6587] loop8: p3 start 3932160 is beyond EOD, truncated [ 177.037605][ T6587] loop8: p4 start 524288 is beyond EOD, truncated [ 177.093539][ T6588] loop8: [POWERTEC] p1 p2 p3 p4 [ 177.117504][ T6588] loop8: p1 size 8519680 extends beyond EOD, truncated [ 177.143392][ T6588] loop8: p2 size 3670016 extends beyond EOD, truncated [ 177.163377][ T6588] loop8: p3 start 3932160 is beyond EOD, truncated [ 177.180281][ T6588] loop8: p4 start 524288 is beyond EOD, truncated [ 177.360473][ T5873] udevd[5873]: inotify_add_watch(7, /dev/loop8p2, 10) failed: No such file or directory [ 177.496159][ T6200] udevd[6200]: inotify_add_watch(7, /dev/loop8p1, 10) failed: No such file or directory [ 177.595304][ T30] kauditd_printk_skb: 17 callbacks suppressed [ 177.595325][ T30] audit: type=1326 audit(1748012255.361:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6583 comm="syz.3.185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed9078e969 code=0x7fc00000 [ 178.371865][ T6200] udevd[6200]: inotify_add_watch(7, /dev/loop8p1, 10) failed: No such file or directory [ 178.386356][ T30] audit: type=1326 audit(1748012255.361:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6583 comm="syz.3.185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7fed9078e969 code=0x7fc00000 [ 178.425968][ T5873] udevd[5873]: inotify_add_watch(7, /dev/loop8p2, 10) failed: No such file or directory [ 178.519880][ T5873] udevd[5873]: inotify_add_watch(7, /dev/loop8p2, 10) failed: No such file or directory [ 178.529770][ T30] audit: type=1326 audit(1748012255.361:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6583 comm="syz.3.185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed9078e969 code=0x7fc00000 [ 178.558385][ T6200] udevd[6200]: inotify_add_watch(7, /dev/loop8p1, 10) failed: No such file or directory [ 178.652791][ T30] audit: type=1326 audit(1748012255.361:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6583 comm="syz.3.185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed9078e969 code=0x7fc00000 [ 178.717970][ T30] audit: type=1326 audit(1748012255.361:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6583 comm="syz.3.185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed9078e969 code=0x7fc00000 [ 178.743905][ T30] audit: type=1326 audit(1748012255.361:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6583 comm="syz.3.185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed9078e969 code=0x7fc00000 [ 178.788987][ T30] audit: type=1326 audit(1748012255.361:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6583 comm="syz.3.185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed9078e969 code=0x7fc00000 [ 179.215375][ T30] audit: type=1326 audit(1748012255.361:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6583 comm="syz.3.185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed9078e969 code=0x7fc00000 [ 179.237096][ T30] audit: type=1326 audit(1748012255.361:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6583 comm="syz.3.185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed9078e969 code=0x7fc00000 [ 179.355467][ T30] audit: type=1326 audit(1748012255.361:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6583 comm="syz.3.185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed9078e969 code=0x7fc00000 [ 179.638305][ T6611] trusted_key: encrypted_key: key user:syz not found [ 180.461463][ T6627] cgroup: Unknown subsys name 'noxattr' [ 180.564936][ T6628] netlink: 2036 bytes leftover after parsing attributes in process `syz.3.197'. [ 180.583296][ T6628] netlink: 24 bytes leftover after parsing attributes in process `syz.3.197'. [ 183.945717][ T6656] Bluetooth: MGMT ver 1.23 [ 184.374947][ T6668] Cannot find add_set index 0 as target [ 186.865285][ T5877] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 187.390338][ T5877] usb 1-1: Using ep0 maxpacket: 32 [ 187.412518][ T5877] usb 1-1: config 0 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 187.461816][ T5877] usb 1-1: config 0 interface 0 has no altsetting 0 [ 187.585454][ T5877] usb 1-1: New USB device found, idVendor=5543, idProduct=0781, bcdDevice= 0.00 [ 187.619572][ T5877] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 187.664996][ T5877] usb 1-1: config 0 descriptor?? [ 188.931694][ T6691] ip6gretap0: entered promiscuous mode [ 188.965623][ T6691] vlan2: entered promiscuous mode [ 189.236050][ T5877] usbhid 1-1:0.0: can't add hid device: -71 [ 189.242238][ T5877] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 189.295541][ T5976] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 189.299435][ T5877] usb 1-1: USB disconnect, device number 3 [ 189.546216][ T5976] usb 4-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 189.642864][ T5976] usb 4-1: New USB device found, idVendor=0582, idProduct=0000, bcdDevice= 0.00 [ 190.179623][ T5976] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 190.635311][ T5825] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 190.742307][ T5976] snd-usb-audio 4-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 190.811490][ T6200] udevd[6200]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 190.864439][ T5825] usb 5-1: Using ep0 maxpacket: 16 [ 190.879161][ T5825] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 190.895279][ T5825] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 190.926077][ T5877] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 190.927330][ T5825] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 190.947586][ T5825] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 190.957204][ T5825] usb 5-1: Product: syz [ 190.964023][ T5825] usb 5-1: Manufacturer: syz [ 190.970666][ T5825] usb 5-1: SerialNumber: syz [ 190.985470][ T5827] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 191.100601][ T5877] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 191.114156][ T5976] usb 4-1: USB disconnect, device number 2 [ 191.155354][ T5827] usb 1-1: Using ep0 maxpacket: 8 [ 191.162909][ T5877] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 191.183640][ T5827] usb 1-1: config 0 has no interfaces? [ 191.190866][ T5827] usb 1-1: config 0 has no interfaces? [ 191.204877][ T5827] usb 1-1: config 0 has no interfaces? [ 191.213382][ T5827] usb 1-1: config 0 has no interfaces? [ 191.221469][ T5827] usb 1-1: New USB device found, idVendor=046d, idProduct=08b1, bcdDevice=6d.2a [ 191.231592][ T5825] usb 5-1: 0:2 : does not exist [ 191.232554][ T5877] usb 2-1: config 0 descriptor?? [ 191.250729][ T5825] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 191.260758][ T5827] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 191.300623][ T5827] usb 1-1: config 0 descriptor?? [ 191.371252][ T5825] usb 5-1: USB disconnect, device number 6 [ 191.439710][ T6200] udevd[6200]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 191.482966][ T5877] [drm] vendor descriptor length:6 data:06 5f 01 00 00 00 00 00 00 00 00 [ 191.505610][ T5877] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 191.826875][ T5877] [drm:udl_init] *ERROR* Selecting channel failed [ 191.903798][ T5877] [drm] Initialized udl 0.0.1 for 2-1:0.0 on minor 2 [ 191.939699][ T5877] [drm] Initialized udl on minor 2 [ 191.962636][ T5877] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 192.006509][ T5877] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 192.047375][ T5896] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 192.066855][ T5877] usb 2-1: USB disconnect, device number 2 [ 192.095806][ T5896] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 192.197951][ T6745] netlink: 60 bytes leftover after parsing attributes in process `syz.4.229'. [ 194.328651][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.334962][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.785590][ T6779] netlink: 60 bytes leftover after parsing attributes in process `syz.4.237'. [ 195.865455][ T5825] usb 1-1: USB disconnect, device number 4 [ 196.847406][ T6796] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 196.893822][ T6794] vlan2: entered promiscuous mode [ 196.905998][ T6794] bridge0: entered promiscuous mode [ 198.574994][ T6808] bridge1: entered allmulticast mode [ 198.638346][ T6808] netlink: 8 bytes leftover after parsing attributes in process `syz.0.245'. [ 199.601915][ T5976] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 199.760739][ T6818] input: syz1 as /devices/virtual/input/input5 [ 200.091729][ T5976] usb 2-1: Using ep0 maxpacket: 8 [ 200.105471][ T5976] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 200.127070][ T5976] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 201.127651][ T5976] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 201.139814][ T5976] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 201.151738][ T5976] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 201.489594][ T5827] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 201.747689][ T5827] usb 4-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 201.810043][ T5827] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 201.871055][ T5827] usb 4-1: config 0 descriptor?? [ 201.879337][ T6832] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 201.996900][ T5976] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 202.008083][ T5976] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 202.070757][ T6838] netlink: 12 bytes leftover after parsing attributes in process `syz.4.254'. [ 202.097410][ T5976] usb 2-1: can't set config #16, error -71 [ 202.097891][ T5827] usb 4-1: can't set config #0, error -71 [ 202.121239][ T5976] usb 2-1: USB disconnect, device number 3 [ 202.390507][ T5827] usb 4-1: USB disconnect, device number 3 [ 204.061002][ T6844] syzkaller0: entered promiscuous mode [ 204.107463][ T6844] syzkaller0: entered allmulticast mode [ 211.811316][ T5835] Bluetooth: hci4: command 0x0406 tx timeout [ 211.812378][ T5836] Bluetooth: hci2: command 0x0406 tx timeout [ 211.817510][ T5833] Bluetooth: hci3: command 0x0406 tx timeout [ 211.817675][ T5833] Bluetooth: hci1: command 0x0406 tx timeout [ 212.099220][ T30] kauditd_printk_skb: 28 callbacks suppressed [ 212.099241][ T30] audit: type=1804 audit(1748012289.881:77): pid=6901 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz.1.272" name="/newroot/49/file1" dev="fuse" ino=1 res=1 errno=0 [ 212.383003][ T30] audit: type=1800 audit(1748012289.881:78): pid=6901 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.1.272" name="/" dev="fuse" ino=1 res=0 errno=0 [ 212.402831][ T30] audit: type=1800 audit(1748012289.881:79): pid=6901 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.1.272" name="/" dev="fuse" ino=1 res=0 errno=0 [ 212.607453][ T6910] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 213.619150][ T30] audit: type=1326 audit(1748012291.411:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6911 comm="syz.4.274" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff85ef8e969 code=0x0 [ 214.428565][ T5826] Bluetooth: hci1: unexpected event for opcode 0x0c2d [ 218.486851][ T5826] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 218.605627][ T5826] Bluetooth: hci1: Injecting HCI hardware error event [ 218.614116][ T5826] Bluetooth: hci1: hardware error 0x00 [ 220.689809][ T5831] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 220.699900][ T5831] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 220.721441][ T5831] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 220.757597][ T5831] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 220.816130][ T5831] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 221.045394][ T5826] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 222.915367][ T30] audit: type=1800 audit(1748012300.691:81): pid=6978 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.4.293" name="file1" dev="overlay" ino=370 res=0 errno=0 [ 222.966937][ T5826] Bluetooth: hci5: command tx timeout [ 223.449711][ T6988] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 223.572617][ T6988] tipc: Started in network mode [ 223.604632][ T6988] tipc: Node identity 7f000001, cluster identity 4711 [ 223.730564][ T6988] tipc: Enabled bearer , priority 10 [ 224.826974][ T5827] tipc: Node number set to 2130706433 [ 225.060930][ T5826] Bluetooth: hci5: command tx timeout [ 225.219842][ T3519] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.480224][ T6963] chnl_net:caif_netlink_parms(): no params data found [ 226.350701][ T3519] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.195275][ T5826] Bluetooth: hci5: command tx timeout [ 227.702510][ T3519] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.207045][ T5826] Bluetooth: hci5: command tx timeout [ 229.217277][ T3519] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.393069][ T30] audit: type=1326 audit(1748012308.131:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7041 comm="syz.4.311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff85ef8e969 code=0x7ffc0000 [ 230.574926][ T30] audit: type=1326 audit(1748012308.141:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7041 comm="syz.4.311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff85ef8e969 code=0x7ffc0000 [ 230.756384][ T30] audit: type=1326 audit(1748012308.181:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7041 comm="syz.4.311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7ff85ef8e969 code=0x7ffc0000 [ 230.971064][ T7053] xt_socket: unknown flags 0x4c [ 231.013498][ T30] audit: type=1326 audit(1748012308.211:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7041 comm="syz.4.311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff85ef8e969 code=0x7ffc0000 [ 231.131441][ T30] audit: type=1326 audit(1748012308.221:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7041 comm="syz.4.311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff85ef8e969 code=0x7ffc0000 [ 231.179166][ T30] audit: type=1326 audit(1748012308.241:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7041 comm="syz.4.311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7ff85ef8e969 code=0x7ffc0000 [ 231.267155][ T7055] netlink: 'syz.0.313': attribute type 4 has an invalid length. [ 231.299687][ T30] audit: type=1326 audit(1748012308.261:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7041 comm="syz.4.311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff85ef8e969 code=0x7ffc0000 [ 231.394568][ T7056] netlink: 'syz.0.313': attribute type 4 has an invalid length. [ 231.435565][ T30] audit: type=1326 audit(1748012308.271:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7041 comm="syz.4.311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff85ef8e969 code=0x7ffc0000 [ 231.757536][ T30] audit: type=1326 audit(1748012308.311:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7041 comm="syz.4.311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff85ef8e969 code=0x7ffc0000 [ 231.925757][ T30] audit: type=1326 audit(1748012308.311:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7041 comm="syz.4.311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff85ef8e969 code=0x7ffc0000 [ 232.998703][ T7055] syz.0.313 (7055) used greatest stack depth: 20136 bytes left [ 233.071011][ T6963] bridge0: port 1(bridge_slave_0) entered blocking state [ 233.106282][ T6963] bridge0: port 1(bridge_slave_0) entered disabled state [ 233.113590][ T6963] bridge_slave_0: entered allmulticast mode [ 233.427595][ T6963] bridge_slave_0: entered promiscuous mode [ 233.871211][ T6963] bridge0: port 2(bridge_slave_1) entered blocking state [ 234.440745][ T6963] bridge0: port 2(bridge_slave_1) entered disabled state [ 234.460442][ T6963] bridge_slave_1: entered allmulticast mode [ 234.480752][ T5825] IPVS: starting estimator thread 0... [ 234.521445][ T6963] bridge_slave_1: entered promiscuous mode [ 234.687149][ T7071] IPVS: using max 27 ests per chain, 64800 per kthread [ 235.328755][ T6963] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 235.515498][ T6963] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 236.778974][ T6963] team0: Port device team_slave_0 added [ 237.026993][ T6963] team0: Port device team_slave_1 added [ 237.835956][ T6963] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 237.842926][ T6963] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 238.026312][ T6963] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 238.141826][ T3519] vlan2: left promiscuous mode [ 238.150052][ T3519] bond0: left promiscuous mode [ 238.197221][ T3519] bond_slave_0: left promiscuous mode [ 238.269639][ T3519] bond_slave_1: left promiscuous mode [ 238.375509][ T3519] bridge0: port 3(vlan2) entered disabled state [ 238.469976][ T3519] bridge_slave_1: left allmulticast mode [ 238.489269][ T3519] bridge_slave_1: left promiscuous mode [ 238.495110][ T3519] bridge0: port 2(bridge_slave_1) entered disabled state [ 240.648097][ T3519] bridge_slave_0: left allmulticast mode [ 240.653817][ T3519] bridge_slave_0: left promiscuous mode [ 240.671485][ T3519] bridge0: port 1(bridge_slave_0) entered disabled state [ 240.738393][ T7130] 9pnet: Found fid 0 not clunked [ 243.994777][ T7150] hfsplus: unable to find HFS+ superblock [ 246.365409][ T7167] netlink: 'syz.1.340': attribute type 1 has an invalid length. [ 246.489766][ T7172] netlink: 28 bytes leftover after parsing attributes in process `syz.1.340'. [ 247.906487][ T7187] evm: overlay not supported [ 248.208719][ T3519] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 248.244388][ T3519] bond_slave_0: left allmulticast mode [ 248.258534][ T3519] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 248.287904][ T3519] bond_slave_1: left allmulticast mode [ 248.310158][ T3519] bond0 (unregistering): Released all slaves [ 248.342531][ T6963] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 248.366985][ T6963] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 248.410047][ T6963] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 248.441555][ T7167] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 248.687040][ T7170] geneve2: entered allmulticast mode [ 249.495837][ T5997] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 249.685359][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 250.565714][ T5997] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 250.585815][ T67] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 250.646547][ T67] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 250.656498][ T5997] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 250.725276][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 250.805301][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 250.805322][ T30] audit: type=1326 audit(1748012328.581:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7212 comm="syz.1.350" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0e1198e969 code=0x0 [ 251.290749][ T5825] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 251.300034][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 251.309395][ T5872] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 251.484654][ T6963] hsr_slave_0: entered promiscuous mode [ 251.496197][ T6963] hsr_slave_1: entered promiscuous mode [ 251.502737][ T6963] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 251.516267][ T6963] Cannot create hsr debugfs directory [ 251.535677][ T5877] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 251.715417][ T5877] usb 1-1: Using ep0 maxpacket: 8 [ 251.744915][ T5877] usb 1-1: unable to get BOS descriptor or descriptor too short [ 251.787541][ T5877] usb 1-1: config 7 has an invalid interface number: 87 but max is 0 [ 251.812685][ T5877] usb 1-1: config 7 has no interface number 0 [ 251.837960][ T5877] usb 1-1: config 7 interface 87 has no altsetting 0 [ 251.869546][ T5877] usb 1-1: New USB device found, idVendor=12d1, idProduct=796e, bcdDevice=25.c0 [ 251.884074][ T5877] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 251.925035][ T5877] usb 1-1: Product: syz [ 251.936573][ T5877] usb 1-1: Manufacturer: syz [ 251.949863][ T5877] usb 1-1: SerialNumber: syz [ 252.081675][ T3519] hsr_slave_0: left promiscuous mode [ 252.102414][ T3519] hsr_slave_1: left promiscuous mode [ 252.117400][ T3519] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 252.135753][ T3519] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 252.156990][ T3519] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 252.202171][ T5877] hub 1-1:7.87: bad descriptor, ignoring hub [ 252.216251][ T3519] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 252.225810][ T5877] hub 1-1:7.87: probe with driver hub failed with error -5 [ 252.261995][ T5877] option 1-1:7.87: GSM modem (1-port) converter detected [ 252.341832][ T3519] veth1_macvtap: left promiscuous mode [ 252.358060][ T5877] usb 1-1: USB disconnect, device number 5 [ 252.366599][ T3519] veth0_macvtap: left promiscuous mode [ 252.386988][ T3519] veth1_vlan: left promiscuous mode [ 252.392562][ T3519] veth0_vlan: left promiscuous mode [ 252.409704][ T5877] option 1-1:7.87: device disconnected [ 254.885324][ C1] net_ratelimit: 9 callbacks suppressed [ 254.885341][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 255.013046][ T5877] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 255.771107][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.779827][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.925277][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 255.940702][ T5944] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 256.334750][ T5887] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 256.454224][ T5997] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 256.462889][ T5976] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 256.474380][ T7262] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 256.487222][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 256.515339][ T5877] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 256.689524][ T5877] usb 5-1: config index 0 descriptor too short (expected 23569, got 27) [ 256.722571][ T5877] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 256.813514][ T5877] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 256.842833][ T5877] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 256.851323][ T5877] usb 5-1: Manufacturer: syz [ 256.965273][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 257.381873][ T5877] usb 5-1: config 0 descriptor?? [ 257.525766][ T5896] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 259.827034][ T7257] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 260.085287][ C1] net_ratelimit: 3 callbacks suppressed [ 260.085311][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 260.425322][ T5976] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 260.470976][ T5997] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 260.575391][ T5877] rc_core: IR keymap rc-hauppauge not found [ 260.590934][ T5877] Registered IR keymap rc-empty [ 260.611136][ T5877] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 260.642725][ T7257] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 260.707584][ T5877] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input6 [ 261.125279][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 261.650515][ T5887] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 262.137099][ T5976] usb 5-1: USB disconnect, device number 7 [ 262.165287][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 262.727496][ T5887] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 263.205275][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 263.563589][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 263.698924][ T7300] netlink: 'syz.4.369': attribute type 1 has an invalid length. [ 263.800181][ T3519] team0 (unregistering): Port device team_slave_1 removed [ 263.854606][ T3519] team0 (unregistering): Port device team_slave_0 removed [ 263.937025][ T5887] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 265.285262][ C1] net_ratelimit: 2 callbacks suppressed [ 265.285285][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 265.976656][ T7300] workqueue: Failed to create a rescuer kthread for wq "bond0": -EINTR [ 266.091879][ T5877] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 266.136757][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 266.325365][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 266.807019][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 267.273857][ T5887] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 267.365277][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 268.325979][ T5997] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 268.405279][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 269.081473][ T6963] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 269.445267][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 269.996185][ T6963] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 270.120295][ T6963] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 270.334877][ T6963] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 270.485267][ C1] net_ratelimit: 2 callbacks suppressed [ 270.485287][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 270.965539][ T5997] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 271.148452][ T3519] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.525287][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 271.707898][ T55] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 271.726426][ T55] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 271.735490][ T55] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 271.744660][ T55] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 271.753877][ T55] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 271.799312][ T3519] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.809799][ T5976] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 271.994589][ T3519] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.008157][ T5877] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 272.021633][ T5976] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 272.045877][ T5976] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 272.065472][ T5976] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 272.083262][ T6963] 8021q: adding VLAN 0 to HW filter on device bond0 [ 272.114825][ T5976] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 272.124924][ T5976] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 272.149412][ T5976] usb 2-1: Product: syz [ 272.153647][ T5976] usb 2-1: Manufacturer: syz [ 272.182710][ T5976] usb 2-1: SerialNumber: syz [ 272.210298][ T5976] cdc_ncm 2-1:1.0: CDC Union missing and no IAD found [ 272.220724][ T3519] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.240118][ T55] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 272.247380][ T5976] cdc_ncm 2-1:1.0: bind() failure [ 272.262087][ T55] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 272.271213][ T55] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 272.280482][ T55] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 272.288393][ T55] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 272.452482][ T5877] usb 2-1: USB disconnect, device number 4 [ 272.454147][ T6963] 8021q: adding VLAN 0 to HW filter on device team0 [ 272.540920][ T5945] bridge0: port 1(bridge_slave_0) entered blocking state [ 272.549093][ T5945] bridge0: port 1(bridge_slave_0) entered forwarding state [ 272.565257][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 272.633183][ T5945] bridge0: port 2(bridge_slave_1) entered blocking state [ 272.640443][ T5945] bridge0: port 2(bridge_slave_1) entered forwarding state [ 272.894296][ T3519] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.911890][ T3519] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 273.047284][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 273.055930][ T5877] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 273.152781][ T3519] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.227523][ T3519] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 273.605285][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 273.771530][ T3519] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.896744][ T5826] Bluetooth: hci2: command tx timeout [ 273.919491][ T3519] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 274.645265][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 274.705312][ T5826] Bluetooth: hci3: command tx timeout [ 274.992877][ T5997] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 275.686423][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 276.082410][ T5826] Bluetooth: hci2: command tx timeout [ 276.094884][ T5825] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 276.104419][ T5872] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 276.152037][ T5997] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 276.161007][ T7410] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 276.258442][ T7417] kvm: pic: non byte read [ 276.268352][ T7421] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 276.295086][ T7417] pic_ioport_write: 16 callbacks suppressed [ 276.295103][ T7417] kvm: pic: level sensitive irq not supported [ 276.322191][ T7417] kvm: pic: non byte read [ 276.332212][ T7421] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 276.356502][ T7421] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 276.391704][ T3519] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.420399][ T3519] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 276.725357][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 276.734135][ T5826] Bluetooth: hci3: command tx timeout [ 277.079124][ T7376] chnl_net:caif_netlink_parms(): no params data found [ 277.206082][ T5887] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 277.380867][ T7380] chnl_net:caif_netlink_parms(): no params data found [ 277.588122][ T3519] bridge_slave_1: left allmulticast mode [ 277.593815][ T3519] bridge_slave_1: left promiscuous mode [ 277.602782][ T3519] bridge0: port 2(bridge_slave_1) entered disabled state [ 277.624914][ T3519] bridge_slave_0: left allmulticast mode [ 277.657692][ T3519] bridge_slave_0: left promiscuous mode [ 277.663606][ T3519] bridge0: port 1(bridge_slave_0) entered disabled state [ 277.765293][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 277.923579][ T7448] netlink: 12 bytes leftover after parsing attributes in process `syz.4.397'. [ 278.092928][ T7450] syz.4.397 uses obsolete (PF_INET,SOCK_PACKET) [ 278.246854][ T5826] Bluetooth: hci2: command tx timeout [ 278.816274][ T5826] Bluetooth: hci3: command tx timeout [ 279.010433][ T55] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 279.026101][ T55] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 279.034755][ T55] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 279.038733][ T3519] bond1 (unregistering): (slave geneve2): Releasing active interface [ 279.057118][ T55] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 279.071596][ T55] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 279.359660][ T3519] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 279.371262][ T3519] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 279.382420][ T3519] bond0 (unregistering): Released all slaves [ 279.486579][ T3519] bond0 (unregistering): Released all slaves [ 279.596850][ T3519] bond1 (unregistering): Released all slaves [ 279.742429][ T7376] bridge0: port 1(bridge_slave_0) entered blocking state [ 279.785107][ T7376] bridge0: port 1(bridge_slave_0) entered disabled state [ 279.792885][ T7376] bridge_slave_0: entered allmulticast mode [ 279.836551][ T7376] bridge_slave_0: entered promiscuous mode [ 280.114264][ T7376] bridge0: port 2(bridge_slave_1) entered blocking state [ 280.124029][ T7376] bridge0: port 2(bridge_slave_1) entered disabled state [ 280.136931][ T7376] bridge_slave_1: entered allmulticast mode [ 280.145045][ T7376] bridge_slave_1: entered promiscuous mode [ 280.435410][ T55] Bluetooth: hci2: command tx timeout [ 280.745087][ T5887] net_ratelimit: 5 callbacks suppressed [ 280.745109][ T5887] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 280.885434][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 280.945383][ T55] Bluetooth: hci3: command tx timeout [ 281.127077][ T55] Bluetooth: hci4: command tx timeout [ 281.925262][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 282.112315][ T5887] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 282.167644][ T5825] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 282.283817][ T7376] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 282.456164][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 282.466314][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 282.672138][ T7376] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 282.965269][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 283.170038][ T7380] bridge0: port 1(bridge_slave_0) entered blocking state [ 283.173591][ T5997] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 283.187985][ T7380] bridge0: port 1(bridge_slave_0) entered disabled state [ 283.195572][ T7380] bridge_slave_0: entered allmulticast mode [ 283.203843][ T7380] bridge_slave_0: entered promiscuous mode [ 283.455398][ T55] Bluetooth: hci4: command tx timeout [ 284.005271][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 284.232856][ T7376] team0: Port device team_slave_0 added [ 284.261488][ T7380] bridge0: port 2(bridge_slave_1) entered blocking state [ 284.272495][ T7380] bridge0: port 2(bridge_slave_1) entered disabled state [ 284.280392][ T7380] bridge_slave_1: entered allmulticast mode [ 284.287935][ T7380] bridge_slave_1: entered promiscuous mode [ 284.465482][ T5876] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 284.675753][ T5876] usb 5-1: Using ep0 maxpacket: 8 [ 284.719441][ T5876] usb 5-1: config 162 has an invalid interface number: 84 but max is 2 [ 284.762057][ T5876] usb 5-1: config 162 has an invalid interface number: 3 but max is 2 [ 284.805087][ T5876] usb 5-1: config 162 has no interface number 0 [ 284.914900][ T5876] usb 5-1: config 162 has no interface number 1 [ 284.923876][ T5876] usb 5-1: config 162 interface 84 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 284.942725][ T5876] usb 5-1: config 162 interface 2 altsetting 1 has a duplicate endpoint with address 0x9, skipping [ 284.954511][ T5876] usb 5-1: config 162 interface 2 altsetting 1 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 284.966991][ T5876] usb 5-1: config 162 interface 2 altsetting 1 endpoint 0x86 has invalid maxpacket 23105, setting to 1024 [ 284.980241][ T5876] usb 5-1: config 162 interface 2 altsetting 1 bulk endpoint 0x86 has invalid maxpacket 1024 [ 284.990982][ T5876] usb 5-1: config 162 interface 2 altsetting 1 has 5 endpoint descriptors, different from the interface descriptor's value: 4 [ 285.014491][ T5876] usb 5-1: config 162 interface 84 has no altsetting 0 [ 285.041176][ T5876] usb 5-1: config 162 interface 2 has no altsetting 0 [ 285.074551][ T5876] usb 5-1: New USB device found, idVendor=0e8d, idProduct=763f, bcdDevice=9b.23 [ 285.089669][ T5876] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 285.098839][ T5876] usb 5-1: Product: syz [ 285.103053][ T5876] usb 5-1: Manufacturer: syz [ 285.114339][ T5876] usb 5-1: SerialNumber: syz [ 285.121228][ T7376] team0: Port device team_slave_1 added [ 285.242780][ T7380] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 285.317169][ T7380] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 285.327472][ T7376] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 285.343164][ T7376] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 285.385529][ T7376] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 285.398816][ T7376] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 285.413450][ T55] Bluetooth: hci5: Opcode 0x0c03 failed: -71 [ 285.424932][ T7376] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 285.429845][ T5876] usb 5-1: USB disconnect, device number 8 [ 285.452230][ T7376] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 285.525684][ T55] Bluetooth: hci4: command tx timeout [ 285.596747][ T7380] team0: Port device team_slave_0 added [ 285.621291][ T7458] chnl_net:caif_netlink_parms(): no params data found [ 285.639201][ T7380] team0: Port device team_slave_1 added [ 285.744993][ T7376] hsr_slave_0: entered promiscuous mode [ 285.752612][ T7376] hsr_slave_1: entered promiscuous mode [ 285.759582][ T7376] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 285.767661][ T7376] Cannot create hsr debugfs directory [ 285.821217][ T7380] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 285.831623][ T7380] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 285.862501][ T7380] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 285.881743][ T3519] hsr_slave_0: left promiscuous mode [ 285.888324][ T3519] hsr_slave_1: left promiscuous mode [ 285.894394][ T3519] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 285.902492][ T3519] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 285.911177][ T3519] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 285.919051][ T3519] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 285.940252][ T3519] hsr_slave_0: left promiscuous mode [ 285.949375][ T3519] hsr_slave_1: left promiscuous mode [ 286.031204][ T3519] veth1_macvtap: left promiscuous mode [ 286.060193][ T3519] veth0_macvtap: left promiscuous mode [ 286.085344][ C1] net_ratelimit: 5 callbacks suppressed [ 286.085362][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 286.111215][ T3519] veth1_vlan: left promiscuous mode [ 286.133396][ T3519] veth0_vlan: left promiscuous mode [ 286.215089][ T3519] veth1_macvtap: left promiscuous mode [ 286.228977][ T3519] veth0_macvtap: left promiscuous mode [ 286.256955][ T3519] veth1_vlan: left promiscuous mode [ 286.262706][ T3519] veth0_vlan: left promiscuous mode [ 286.325949][ T5877] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 286.865790][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 286.874735][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 287.125408][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 287.366633][ T5887] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 287.605368][ T55] Bluetooth: hci4: command tx timeout [ 288.165403][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 288.403887][ T5876] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 288.412100][ T5876] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 288.935398][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 290.028312][ T7530] mmap: syz.1.413 (7530) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 290.774283][ T3519] team0 (unregistering): Port device team_slave_1 removed [ 291.207528][ T5877] net_ratelimit: 8 callbacks suppressed [ 291.207555][ T5877] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 291.285258][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 291.321845][ T3519] team0 (unregistering): Port device team_slave_0 removed [ 291.619254][ T5876] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 291.795815][ T30] audit: type=1800 audit(1748012369.591:102): pid=7540 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.4.416" name="/" dev="fuse" ino=1 res=0 errno=0 [ 291.823837][ T30] audit: type=1804 audit(1748012369.591:103): pid=7540 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz.4.416" name="/newroot/103/file1" dev="fuse" ino=1 res=1 errno=0 [ 291.857351][ T30] audit: type=1800 audit(1748012369.591:104): pid=7540 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.4.416" name="/" dev="fuse" ino=1 res=0 errno=0 [ 292.245646][ T5887] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 292.325319][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 293.288463][ T5887] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 293.365257][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 293.373763][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 293.383072][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 294.399198][ T5887] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 296.229150][ T5997] net_ratelimit: 6 callbacks suppressed [ 296.229171][ T5997] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 296.485255][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 296.637699][ T7380] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 296.644995][ T7380] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 296.679823][ T7380] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 297.265470][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 297.274047][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 297.525261][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 297.538516][ T5997] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 298.565358][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 298.573511][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 298.738547][ T5887] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 299.024264][ T7380] hsr_slave_0: entered promiscuous mode [ 299.046329][ T7380] hsr_slave_1: entered promiscuous mode [ 299.056274][ T7380] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 299.063890][ T7380] Cannot create hsr debugfs directory [ 299.094669][ T7458] bridge0: port 1(bridge_slave_0) entered blocking state [ 299.102449][ T7458] bridge0: port 1(bridge_slave_0) entered disabled state [ 299.112496][ T7458] bridge_slave_0: entered allmulticast mode [ 299.121195][ T7458] bridge_slave_0: entered promiscuous mode [ 299.335426][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 300.355545][ T7458] bridge0: port 2(bridge_slave_1) entered blocking state [ 300.362745][ T7458] bridge0: port 2(bridge_slave_1) entered disabled state [ 300.734022][ T7458] bridge_slave_1: entered allmulticast mode [ 300.816978][ T7458] bridge_slave_1: entered promiscuous mode [ 300.983674][ T7458] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 301.012393][ T7602] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 301.021536][ T7602] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 301.030530][ T7602] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 301.039344][ T7602] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 301.069341][ T7602] : (slave vxlan0): Enslaving as an active interface with an up link [ 301.180928][ T7458] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 301.415686][ C1] net_ratelimit: 5 callbacks suppressed [ 301.415704][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 301.430078][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 301.685330][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 301.901299][ T5976] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 302.080337][ T7458] team0: Port device team_slave_0 added [ 302.245756][ T5896] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 302.297951][ T7458] team0: Port device team_slave_1 added [ 302.725248][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 303.043924][ T7458] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 303.051451][ T7458] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 303.124979][ T7458] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 303.149418][ T7458] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 303.157921][ T7458] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 303.184527][ T7458] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 303.286446][ T5896] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 303.496525][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 303.765246][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 304.058817][ T7458] hsr_slave_0: entered promiscuous mode [ 304.072234][ T7458] hsr_slave_1: entered promiscuous mode [ 304.079295][ T7458] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 304.087304][ T7458] Cannot create hsr debugfs directory [ 304.353893][ T5887] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 305.141902][ T7376] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 305.162158][ T7376] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 305.388306][ T7376] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 305.579418][ T7376] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 306.652160][ T5997] net_ratelimit: 5 callbacks suppressed [ 306.652181][ T5997] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 306.885283][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 307.659874][ T7376] 8021q: adding VLAN 0 to HW filter on device bond0 [ 307.750107][ T5896] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 307.925275][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 308.415571][ T5872] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 308.606226][ T7376] 8021q: adding VLAN 0 to HW filter on device team0 [ 308.625520][ T3519] bridge_slave_1: left allmulticast mode [ 308.631220][ T3519] bridge_slave_1: left promiscuous mode [ 308.654395][ T3519] bridge0: port 2(bridge_slave_1) entered disabled state [ 308.708460][ T3519] bridge_slave_0: left allmulticast mode [ 308.714204][ T3519] bridge_slave_0: left promiscuous mode [ 308.772347][ T7686] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 308.779608][ T3519] bridge0: port 1(bridge_slave_0) entered disabled state [ 308.907427][ T5877] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 308.965243][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 309.925461][ T5877] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 310.005334][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 311.045245][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 311.675810][ T5825] net_ratelimit: 1 callbacks suppressed [ 311.675829][ T5825] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 312.085249][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 312.131043][ T3519] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 312.143858][ T3519] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 312.154671][ T3519] bond0 (unregistering): Released all slaves [ 312.379226][ T5877] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 312.439130][ T67] bridge0: port 1(bridge_slave_0) entered blocking state [ 312.446403][ T67] bridge0: port 1(bridge_slave_0) entered forwarding state [ 312.484456][ T7380] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 312.512137][ T7380] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 312.522960][ T7380] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 312.548465][ T3519] hsr_slave_0: left promiscuous mode [ 312.554687][ T3519] hsr_slave_1: left promiscuous mode [ 312.562910][ T3519] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 312.572756][ T3519] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 312.688158][ T7715] kvm: kvm [7714]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x5500000800 [ 312.702718][ T7715] kvm: kvm [7714]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x7100000800 [ 312.717339][ T7715] kvm: kvm [7714]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x186) = 0xa600000000 [ 312.730519][ T7715] kvm: kvm [7714]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x186) = 0xb200000000 [ 313.062944][ T3519] team0 (unregistering): Port device team_slave_1 removed [ 313.125263][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 313.139699][ T3519] team0 (unregistering): Port device team_slave_0 removed [ 313.446014][ T5877] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 313.889709][ T7376] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 313.911952][ T7376] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 313.935823][ T7380] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 314.005469][ T5976] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 314.054170][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 314.061430][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 314.165236][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 314.693005][ T5877] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 315.038984][ T5976] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 315.205278][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 316.841263][ T7376] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 316.877863][ T7380] 8021q: adding VLAN 0 to HW filter on device bond0 [ 316.885921][ T5896] net_ratelimit: 2 callbacks suppressed [ 316.885937][ T5896] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 316.926695][ T7458] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 317.120953][ T7380] 8021q: adding VLAN 0 to HW filter on device team0 [ 317.158911][ T7458] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 317.184347][ T6138] bridge0: port 1(bridge_slave_0) entered blocking state [ 317.191582][ T6138] bridge0: port 1(bridge_slave_0) entered forwarding state [ 317.295254][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 317.809577][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.816024][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.836617][ T6138] bridge0: port 2(bridge_slave_1) entered blocking state [ 317.843834][ T6138] bridge0: port 2(bridge_slave_1) entered forwarding state [ 317.945623][ T5877] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 318.069056][ T7458] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 318.087000][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 318.130376][ T7458] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 318.325243][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 318.478531][ T7376] veth0_vlan: entered promiscuous mode [ 318.571575][ T7376] veth1_vlan: entered promiscuous mode [ 319.365325][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 319.526767][ T5877] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 319.737822][ T7376] veth0_macvtap: entered promiscuous mode [ 319.771346][ T7376] veth1_macvtap: entered promiscuous mode [ 319.894016][ T7376] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 320.405279][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 320.920143][ T5997] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 320.960131][ T7376] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 320.975083][ T7458] 8021q: adding VLAN 0 to HW filter on device bond0 [ 321.092219][ T7376] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.125588][ T5976] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 321.135691][ T7376] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.144447][ T7376] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.168307][ T7376] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.800056][ T7458] 8021q: adding VLAN 0 to HW filter on device team0 [ 321.849779][ T7380] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 321.926137][ T5896] net_ratelimit: 1 callbacks suppressed [ 321.926154][ T5896] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 321.983096][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 321.990298][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 322.038598][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 322.045837][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 322.269186][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 322.300794][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 322.388980][ T7380] veth0_vlan: entered promiscuous mode [ 322.485251][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 322.654884][ T5944] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 322.665462][ T7380] veth1_vlan: entered promiscuous mode [ 322.673348][ T5944] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 323.310869][ T5877] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 323.473330][ T7380] veth0_macvtap: entered promiscuous mode [ 323.492921][ T7380] veth1_macvtap: entered promiscuous mode [ 323.525261][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 323.574423][ T7380] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 323.615842][ T5976] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 323.623109][ T7380] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 323.700196][ T7380] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.716159][ T7810] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 323.725005][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 323.741161][ T7380] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.757894][ T7380] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.767383][ T7380] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.319817][ T7458] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 324.565250][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 324.798520][ T3519] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.131108][ T3519] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.367584][ T5997] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 325.562164][ T3519] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.605259][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 325.834424][ T3519] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.904016][ T5944] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 325.939268][ T5944] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 326.064164][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 326.096234][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 326.405365][ T7458] veth0_vlan: entered promiscuous mode [ 326.656129][ T7458] veth1_vlan: entered promiscuous mode [ 326.894094][ T3519] bridge_slave_1: left allmulticast mode [ 326.963998][ T3519] bridge_slave_1: left promiscuous mode [ 327.045459][ T3519] bridge0: port 2(bridge_slave_1) entered disabled state [ 327.173775][ T5826] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 327.277368][ T3519] bridge_slave_0: left allmulticast mode [ 327.299083][ T5826] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 327.307464][ T5876] net_ratelimit: 2 callbacks suppressed [ 327.307480][ T5876] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 327.338269][ T5826] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 327.340357][ T3519] bridge_slave_0: left promiscuous mode [ 327.364430][ T3519] bridge0: port 1(bridge_slave_0) entered disabled state [ 327.374256][ T5826] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 327.400368][ T5826] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 327.685242][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 327.693745][ T5896] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 328.725849][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 328.734418][ T5827] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 329.527352][ T55] Bluetooth: hci2: command tx timeout [ 329.765515][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 329.845715][ T5896] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 329.916836][ T3519] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 329.964024][ T3519] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 329.984106][ T3519] bond0 (unregistering): Released all slaves [ 330.127691][ T7864] syz.1.478 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 330.302420][ T7458] veth0_macvtap: entered promiscuous mode [ 330.325536][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 330.428371][ T7867] capability: warning: `syz.4.479' uses 32-bit capabilities (legacy support in use) [ 330.487611][ T5876] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 330.530194][ T7458] veth1_macvtap: entered promiscuous mode [ 330.761453][ T5825] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 330.805232][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 330.805308][ T5876] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 331.116935][ T5896] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 331.213630][ T5825] usb 5-1: config 0 has an invalid interface number: 109 but max is 0 [ 331.222091][ T5876] usb 2-1: can't read configurations, error -71 [ 331.256088][ T5825] usb 5-1: config 0 has no interface number 0 [ 331.262258][ T5825] usb 5-1: config 0 interface 109 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 331.325472][ T5825] usb 5-1: New USB device found, idVendor=100d, idProduct=cb01, bcdDevice=84.d1 [ 331.334699][ T5825] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 331.372965][ T5825] usb 5-1: config 0 descriptor?? [ 331.382420][ T3519] hsr_slave_0: left promiscuous mode [ 331.392257][ T5825] cxacru 5-1:0.109: cxacru_bind: interface has incorrect endpoints [ 331.404222][ T5825] cxacru 5-1:0.109: usbatm_usb_probe: bind failed: -19! [ 331.414543][ T3519] hsr_slave_1: left promiscuous mode [ 331.443660][ T3519] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 331.464502][ T3519] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 331.486286][ T3519] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 331.494359][ T3519] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 331.553462][ T3519] veth1_macvtap: left promiscuous mode [ 331.572789][ T3519] veth0_macvtap: left promiscuous mode [ 331.589945][ T3519] veth1_vlan: left promiscuous mode [ 331.603996][ T3519] veth0_vlan: left promiscuous mode [ 331.611874][ T55] Bluetooth: hci2: command tx timeout [ 331.622463][ T5825] usb 5-1: USB disconnect, device number 9 [ 331.978635][ T5826] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 332.019810][ T5826] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 332.348532][ T5877] net_ratelimit: 1 callbacks suppressed [ 332.348552][ T5877] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 332.461381][ T5826] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 332.494297][ T5826] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 332.667767][ T5826] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 332.885257][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 333.125305][ T5825] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 333.221464][ T1770] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 333.325318][ T5825] usb 2-1: Using ep0 maxpacket: 8 [ 333.334190][ T5825] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 333.348349][ T5825] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 333.366472][ T5825] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 333.377784][ T5877] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 333.395436][ T1770] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 333.404184][ T5825] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 333.425199][ T5825] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 333.445495][ T5825] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 333.454674][ T5825] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 333.501428][ T3519] team0 (unregistering): Port device team_slave_1 removed [ 333.592820][ T3519] team0 (unregistering): Port device team_slave_0 removed [ 333.686413][ T55] Bluetooth: hci2: command tx timeout [ 333.707648][ T5825] usb 2-1: GET_CAPABILITIES returned 0 [ 333.713733][ T5825] usbtmc 2-1:16.0: can't read capabilities [ 333.925240][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 334.315959][ T7904] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 334.334169][ T7904] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 334.411037][ T5877] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 334.469902][ T7903] usbtmc 2-1:16.0: usb_control_msg returned -71 [ 334.471339][ T5877] usb 2-1: USB disconnect, device number 7 [ 334.497309][ T7904] usbtmc 2-1:16.0: send_request_dev_dep_msg_in returned -19 [ 334.808910][ T55] Bluetooth: hci3: command tx timeout [ 334.965241][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 335.453620][ T5827] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 335.696117][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 335.769281][ T55] Bluetooth: hci2: command tx timeout [ 336.340911][ T7458] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 336.376911][ T7458] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 336.593329][ T7458] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.615352][ T7458] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.629195][ T7458] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.646818][ T7923] netlink: 8 bytes leftover after parsing attributes in process `syz.1.487'. [ 336.648548][ T7458] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.663108][ T7923] netlink: 'syz.1.487': attribute type 5 has an invalid length. [ 336.699954][ T7923] netlink: 28 bytes leftover after parsing attributes in process `syz.1.487'. [ 336.886129][ T55] Bluetooth: hci3: command tx timeout [ 336.908218][ T7923] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 336.922697][ T7923] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 336.961261][ T7923] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 336.970962][ T7923] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 336.979798][ T7923] geneve2: entered promiscuous mode [ 336.985046][ T7923] geneve2: entered allmulticast mode [ 337.768660][ T5877] net_ratelimit: 6 callbacks suppressed [ 337.768679][ T5877] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 337.853610][ T7850] chnl_net:caif_netlink_parms(): no params data found [ 338.085234][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 338.457346][ T3519] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 338.971956][ T55] Bluetooth: hci3: command tx timeout [ 338.979375][ T5877] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 339.125234][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 339.192492][ T7962] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 339.201173][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 339.271710][ T3519] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 339.326962][ T7850] bridge0: port 1(bridge_slave_0) entered blocking state [ 339.353633][ T7850] bridge0: port 1(bridge_slave_0) entered disabled state [ 339.375471][ T7850] bridge_slave_0: entered allmulticast mode [ 339.397199][ T7850] bridge_slave_0: entered promiscuous mode [ 339.427589][ T7850] bridge0: port 2(bridge_slave_1) entered blocking state [ 339.445091][ T7850] bridge0: port 2(bridge_slave_1) entered disabled state [ 339.452538][ T7850] bridge_slave_1: entered allmulticast mode [ 339.455970][ T5825] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 339.467068][ T1770] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 339.471344][ T7850] bridge_slave_1: entered promiscuous mode [ 339.637289][ T1770] usb 5-1: Using ep0 maxpacket: 16 [ 339.671012][ T1770] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 339.692092][ T3519] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 339.720128][ T1770] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 339.750673][ T1770] usb 5-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 339.774748][ T1770] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 339.802069][ T1770] usb 5-1: config 0 descriptor?? [ 339.883618][ T5826] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 339.901104][ T5826] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 339.911453][ T5826] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 339.926849][ T5826] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 339.936347][ T5826] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 339.993572][ T3519] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 340.006458][ T5877] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 340.165261][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 340.194133][ T7850] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 340.220645][ T7850] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 340.283969][ T1770] hid-multitouch 0003:1FD2:6007.0001: hidraw0: USB HID v0.00 Device [HID 1fd2:6007] on usb-dummy_hcd.4-1/input0 [ 340.367972][ T7884] chnl_net:caif_netlink_parms(): no params data found [ 340.482090][ T7850] team0: Port device team_slave_0 added [ 340.622729][ T1770] usb 5-1: USB disconnect, device number 10 [ 340.688744][ T7850] team0: Port device team_slave_1 added [ 340.963751][ T7850] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 340.980069][ T7850] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 341.010178][ T7850] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 341.045549][ T5826] Bluetooth: hci3: command tx timeout [ 341.051145][ T5827] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 341.148386][ T7884] bridge0: port 1(bridge_slave_0) entered blocking state [ 341.179740][ T7884] bridge0: port 1(bridge_slave_0) entered disabled state [ 341.212401][ T7884] bridge_slave_0: entered allmulticast mode [ 341.241297][ T7884] bridge_slave_0: entered promiscuous mode [ 341.283688][ T7850] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 341.311273][ T7850] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 342.287899][ T5826] Bluetooth: hci4: command tx timeout [ 342.294942][ T7850] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 343.074745][ T5825] net_ratelimit: 3 callbacks suppressed [ 343.074765][ T5825] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 343.089122][ T5872] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 343.159286][ T7884] bridge0: port 2(bridge_slave_1) entered blocking state [ 343.180455][ T7884] bridge0: port 2(bridge_slave_1) entered disabled state [ 343.198656][ T7884] bridge_slave_1: entered allmulticast mode [ 343.272937][ T7884] bridge_slave_1: entered promiscuous mode [ 343.285261][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 343.365576][ T5827] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 343.534530][ T3519] bridge_slave_1: left allmulticast mode [ 343.544159][ T3519] bridge_slave_1: left promiscuous mode [ 343.555462][ T3519] bridge0: port 2(bridge_slave_1) entered disabled state [ 343.678646][ T3519] bridge_slave_0: left allmulticast mode [ 343.684556][ T3519] bridge_slave_0: left promiscuous mode [ 343.705391][ T3519] bridge0: port 1(bridge_slave_0) entered disabled state [ 344.325236][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 344.335817][ T5826] Bluetooth: hci4: command tx timeout [ 344.520013][ T5877] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 344.860574][ T8014] ip6_tunnel: non-ECT from fe88:0000:0000:0000:0000:0000:0000:ff01 with DS=0xf [ 345.365305][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 345.695616][ T5877] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 345.921141][ T3519] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 345.959019][ T3519] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 345.972765][ T3519] bond0 (unregistering): Released all slaves [ 346.175382][ T5825] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 346.415231][ T5826] Bluetooth: hci4: command tx timeout [ 346.876575][ T7884] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 347.070677][ T7884] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 347.138658][ T7850] hsr_slave_0: entered promiscuous mode [ 347.150071][ T7850] hsr_slave_1: entered promiscuous mode [ 347.156537][ T7850] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 347.164150][ T7850] Cannot create hsr debugfs directory [ 347.307560][ T7884] team0: Port device team_slave_0 added [ 347.474226][ T7884] team0: Port device team_slave_1 added [ 347.571686][ T7884] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 347.579810][ T7884] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 347.608873][ T7884] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 348.169396][ T5878] net_ratelimit: 3 callbacks suppressed [ 348.169416][ T5878] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 348.345571][ T3519] hsr_slave_0: left promiscuous mode [ 348.371717][ T3519] hsr_slave_1: left promiscuous mode [ 348.382559][ T3519] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 348.485238][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 349.050594][ T5826] Bluetooth: hci4: command tx timeout [ 349.132879][ T3519] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 349.198049][ T3519] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 349.206293][ T5827] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 349.214499][ T5872] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 349.242200][ T3519] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 349.277697][ T3519] veth1_macvtap: left promiscuous mode [ 349.284181][ T3519] veth0_macvtap: left promiscuous mode [ 349.290183][ T3519] veth1_vlan: left promiscuous mode [ 349.296120][ T3519] veth0_vlan: left promiscuous mode [ 349.525264][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 350.360153][ T5827] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 350.565231][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 350.904886][ T3519] team0 (unregistering): Port device team_slave_1 removed [ 350.960181][ T3519] team0 (unregistering): Port device team_slave_0 removed [ 351.365778][ T5827] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 351.393395][ T7884] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 351.401398][ T7884] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 351.427346][ C1] vkms_vblank_simulate: vblank timer overrun [ 351.447436][ T7884] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 351.605227][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 351.675671][ T8073] netlink: 'syz.1.513': attribute type 4 has an invalid length. [ 351.695061][ T8075] netlink: 8 bytes leftover after parsing attributes in process `syz.4.514'. [ 351.704585][ T8075] netlink: 8 bytes leftover after parsing attributes in process `syz.4.514'. [ 351.789825][ T7884] hsr_slave_0: entered promiscuous mode [ 351.797917][ T7884] hsr_slave_1: entered promiscuous mode [ 351.804354][ T7884] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 351.812109][ T7884] Cannot create hsr debugfs directory [ 351.951580][ T8080] netlink: 28 bytes leftover after parsing attributes in process `syz.4.516'. [ 351.977941][ T8080] netlink: 'syz.4.516': attribute type 7 has an invalid length. [ 351.988937][ T8080] netlink: 'syz.4.516': attribute type 8 has an invalid length. [ 351.997029][ T8080] netlink: 4 bytes leftover after parsing attributes in process `syz.4.516'. [ 352.128239][ T8080] bridge0: entered promiscuous mode [ 352.138409][ T8080] ip6gretap0: entered promiscuous mode [ 352.147333][ T8080] gretap0: entered promiscuous mode [ 352.251426][ T5872] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 352.323095][ T7966] chnl_net:caif_netlink_parms(): no params data found [ 353.238732][ T5825] net_ratelimit: 3 callbacks suppressed [ 353.238753][ T5825] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 353.686091][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 354.149688][ T5896] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 354.512413][ T3519] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.662819][ T8115] netlink: 156 bytes leftover after parsing attributes in process `syz.4.522'. [ 354.690991][ T3519] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.725245][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 354.803884][ T7966] bridge0: port 1(bridge_slave_0) entered blocking state [ 354.811527][ T7966] bridge0: port 1(bridge_slave_0) entered disabled state [ 354.820913][ T7966] bridge_slave_0: entered allmulticast mode [ 354.829109][ T7966] bridge_slave_0: entered promiscuous mode [ 354.852884][ T3519] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.920501][ T7966] bridge0: port 2(bridge_slave_1) entered blocking state [ 354.931371][ T7966] bridge0: port 2(bridge_slave_1) entered disabled state [ 354.938790][ T7966] bridge_slave_1: entered allmulticast mode [ 354.947096][ T7966] bridge_slave_1: entered promiscuous mode [ 355.026036][ T7966] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 355.056831][ T3519] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.259529][ T5877] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 355.281995][ T7966] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 355.307142][ T5872] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 355.765338][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 356.109088][ T7966] team0: Port device team_slave_0 added [ 356.162227][ T7966] team0: Port device team_slave_1 added [ 356.423779][ T7966] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 356.461887][ T7966] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 356.495234][ T7966] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 356.516483][ T5896] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 356.517924][ T7966] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 356.535238][ T7966] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 356.805229][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 356.811053][ T7966] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 357.835524][ T8150] xt_TPROXY: Can be used only with -p tcp or -p udp [ 357.845246][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 358.405205][ T5827] net_ratelimit: 1 callbacks suppressed [ 358.405225][ T5827] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 358.569984][ T1770] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 358.582112][ T5976] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 358.677081][ T7966] hsr_slave_0: entered promiscuous mode [ 358.696568][ T7966] hsr_slave_1: entered promiscuous mode [ 358.703016][ T7966] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 358.733258][ T7966] Cannot create hsr debugfs directory [ 358.885261][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 358.941668][ T8155] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 359.934633][ T7850] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 359.956789][ T3519] bridge_slave_1: left allmulticast mode [ 359.964428][ T3519] bridge_slave_1: left promiscuous mode [ 359.971083][ T3519] bridge0: port 2(bridge_slave_1) entered disabled state [ 359.998014][ T3519] bridge_slave_0: left allmulticast mode [ 360.015273][ T3519] bridge_slave_0: left promiscuous mode [ 360.021132][ T3519] bridge0: port 1(bridge_slave_0) entered disabled state [ 361.617205][ T3519] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 361.668992][ T3519] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 362.464586][ T3519] bond0 (unregistering): Released all slaves [ 362.657571][ T7850] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 362.750142][ T7850] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 362.779722][ T7850] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 363.726698][ T3519] hsr_slave_0: left promiscuous mode [ 363.870294][ T3519] hsr_slave_1: left promiscuous mode [ 363.891869][ T3519] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 363.902680][ T3519] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 363.915539][ T3519] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 363.923002][ T3519] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 363.974768][ T3519] veth1_macvtap: left promiscuous mode [ 363.983224][ T3519] veth0_macvtap: left promiscuous mode [ 363.995452][ T3519] veth1_vlan: left promiscuous mode [ 364.000972][ T3519] veth0_vlan: left promiscuous mode [ 365.837997][ T3519] team0 (unregistering): Port device team_slave_1 removed [ 365.914215][ T3519] team0 (unregistering): Port device team_slave_0 removed [ 366.617327][ T7884] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 366.637199][ T8211] netlink: 8 bytes leftover after parsing attributes in process `syz.4.542'. [ 368.116179][ T7884] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 368.131788][ T7884] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 368.162324][ T7884] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 369.422334][ T7850] 8021q: adding VLAN 0 to HW filter on device bond0 [ 369.526280][ T7884] 8021q: adding VLAN 0 to HW filter on device bond0 [ 369.555303][ T7850] 8021q: adding VLAN 0 to HW filter on device team0 [ 369.576283][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 369.583514][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 369.621158][ T7966] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 369.637301][ T7966] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 369.650381][ T5945] bridge0: port 2(bridge_slave_1) entered blocking state [ 369.657616][ T5945] bridge0: port 2(bridge_slave_1) entered forwarding state [ 369.669352][ T7966] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 369.684617][ T7884] 8021q: adding VLAN 0 to HW filter on device team0 [ 369.702008][ T7966] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 369.731562][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 369.738805][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 369.758387][ T5945] bridge0: port 2(bridge_slave_1) entered blocking state [ 369.765614][ T5945] bridge0: port 2(bridge_slave_1) entered forwarding state [ 369.926716][ T7884] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 370.107554][ T7966] 8021q: adding VLAN 0 to HW filter on device bond0 [ 370.327864][ T7966] 8021q: adding VLAN 0 to HW filter on device team0 [ 370.411558][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 370.418819][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 370.444205][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 370.451450][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 372.377355][ T7850] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 372.597700][ T7850] veth0_vlan: entered promiscuous mode [ 372.678802][ T7850] veth1_vlan: entered promiscuous mode [ 372.734056][ T7966] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 372.770781][ T7884] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 372.863192][ T7884] veth0_vlan: entered promiscuous mode [ 372.934241][ T7850] veth0_macvtap: entered promiscuous mode [ 372.947523][ T7884] veth1_vlan: entered promiscuous mode [ 373.013210][ T7850] veth1_macvtap: entered promiscuous mode [ 373.669915][ T7884] veth0_macvtap: entered promiscuous mode [ 373.958318][ T7884] veth1_macvtap: entered promiscuous mode [ 374.620122][ T7850] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 374.709317][ T7884] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 375.259418][ T7850] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 375.342838][ T7884] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 375.389043][ T7850] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 375.422742][ T7850] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 375.433179][ T7850] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 375.442297][ T7850] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 375.468049][ T7884] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 375.495387][ T7884] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 375.504150][ T7884] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 375.530857][ T7884] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 375.956554][ T3519] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 375.964440][ T3519] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 375.994680][ T7966] veth0_vlan: entered promiscuous mode [ 376.468000][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 376.588226][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 376.688993][ T8304] netlink: 8 bytes leftover after parsing attributes in process `syz.4.563'. [ 376.740317][ T7966] veth1_vlan: entered promiscuous mode [ 376.808809][ T5944] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 376.828116][ T5944] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 376.847478][ T8309] netlink: 4 bytes leftover after parsing attributes in process `syz.1.564'. [ 376.941501][ T8309] bridge_slave_1: left allmulticast mode [ 376.949550][ T8309] bridge_slave_1: left promiscuous mode [ 376.951703][ T8311] netlink: 'syz.4.566': attribute type 4 has an invalid length. [ 376.956214][ T8309] bridge0: port 2(bridge_slave_1) entered disabled state [ 376.979813][ T8309] bridge_slave_0: left allmulticast mode [ 376.988030][ T8309] bridge_slave_0: left promiscuous mode [ 376.993776][ T8309] bridge0: port 1(bridge_slave_0) entered disabled state [ 377.175182][ T6138] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 377.183072][ T6138] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 377.251821][ T7966] veth0_macvtap: entered promiscuous mode [ 377.290479][ T7966] veth1_macvtap: entered promiscuous mode [ 377.482084][ T7966] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 378.351909][ T6138] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 378.522022][ T7966] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 378.642025][ T6138] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 378.675763][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.682183][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.718376][ T7966] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 378.748238][ T7966] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 378.765722][ T7966] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 378.774478][ T7966] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 378.851617][ T6138] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 380.175612][ T6138] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 380.316264][ T55] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 380.336056][ T55] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 380.366349][ T55] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 380.375399][ T55] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 380.386287][ T55] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 380.435467][ T3519] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 380.443343][ T3519] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 380.594424][ T5826] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 380.611598][ T5826] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 380.622953][ T5826] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 380.825174][ T5826] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 380.839368][ T5826] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 381.213059][ T67] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 381.230917][ T67] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 381.601188][ T6138] bridge_slave_1: left allmulticast mode [ 381.608708][ T6138] bridge_slave_1: left promiscuous mode [ 381.616508][ T6138] bridge0: port 2(bridge_slave_1) entered disabled state [ 381.679644][ T6138] bridge_slave_0: left allmulticast mode [ 381.693394][ T6138] bridge_slave_0: left promiscuous mode [ 381.710931][ T6138] bridge0: port 1(bridge_slave_0) entered disabled state [ 382.226367][ T6138] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 382.239321][ T6138] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 382.256397][ T6138] bond0 (unregistering): Released all slaves [ 382.380910][ T8331] chnl_net:caif_netlink_parms(): no params data found [ 382.565980][ T5826] Bluetooth: hci2: command tx timeout [ 382.714920][ T8359] hugetlbfs: syz.5.574 (8359): Using mlock ulimits for SHM_HUGETLB is obsolete [ 382.966596][ T5826] Bluetooth: hci3: command tx timeout [ 383.489950][ T6138] hsr_slave_0: left promiscuous mode [ 383.504952][ T6138] hsr_slave_1: left promiscuous mode [ 383.517715][ T6138] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 383.535258][ T6138] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 383.818488][ T6138] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 384.059329][ T6138] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 384.086210][ T6138] veth1_macvtap: left promiscuous mode [ 384.092007][ T6138] veth0_macvtap: left promiscuous mode [ 384.098420][ T6138] veth1_vlan: left promiscuous mode [ 384.104040][ T6138] veth0_vlan: left promiscuous mode [ 384.607121][ T5876] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 384.665300][ T5826] Bluetooth: hci2: command tx timeout [ 384.815777][ T5876] usb 2-1: config 0 has an invalid interface number: 32 but max is 0 [ 384.823937][ T5876] usb 2-1: config 0 has no interface number 0 [ 385.046639][ T5826] Bluetooth: hci3: command tx timeout [ 385.507235][ T5876] usb 2-1: config 0 interface 32 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 385.518425][ T5876] usb 2-1: config 0 interface 32 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 385.528371][ T5876] usb 2-1: New USB device found, idVendor=046d, idProduct=c71b, bcdDevice= 0.00 [ 385.537497][ T5876] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 385.566438][ T5876] usb 2-1: config 0 descriptor?? [ 386.047172][ T5876] hid (null): unknown global tag 0xe [ 386.725670][ T5826] Bluetooth: hci2: command tx timeout [ 386.814669][ T5876] logitech-djreceiver 0003:046D:C71B.0002: unknown global tag 0xe [ 386.822654][ T5876] logitech-djreceiver 0003:046D:C71B.0002: item 0 2 1 14 parsing failed [ 386.831875][ T5876] logitech-djreceiver 0003:046D:C71B.0002: logi_dj_probe: parse failed [ 386.841470][ T5876] logitech-djreceiver 0003:046D:C71B.0002: probe with driver logitech-djreceiver failed with error -22 [ 386.949005][ T6138] team0 (unregistering): Port device team_slave_1 removed [ 387.097181][ T6138] team0 (unregistering): Port device team_slave_0 removed [ 387.134930][ T5826] Bluetooth: hci3: command tx timeout [ 388.748004][ T8331] bridge0: port 1(bridge_slave_0) entered blocking state [ 388.761006][ T8331] bridge0: port 1(bridge_slave_0) entered disabled state [ 388.771880][ T8331] bridge_slave_0: entered allmulticast mode [ 388.784984][ T8331] bridge_slave_0: entered promiscuous mode [ 388.805645][ T5826] Bluetooth: hci2: command tx timeout [ 388.827285][ T8331] bridge0: port 2(bridge_slave_1) entered blocking state [ 388.855528][ T8331] bridge0: port 2(bridge_slave_1) entered disabled state [ 388.876579][ T8331] bridge_slave_1: entered allmulticast mode [ 388.907310][ T8331] bridge_slave_1: entered promiscuous mode [ 388.915842][ T5827] usb 2-1: USB disconnect, device number 8 [ 389.132490][ T8409] netlink: 24 bytes leftover after parsing attributes in process `syz.5.588'. [ 389.215237][ T5826] Bluetooth: hci3: command tx timeout [ 390.508497][ T8424] xt_hashlimit: size too large, truncated to 1048576 [ 390.608159][ T8331] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 390.762426][ T8429] fuse: Bad value for 'fd' [ 390.904685][ T8331] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 392.143853][ T8331] team0: Port device team_slave_0 added [ 392.732504][ T8336] chnl_net:caif_netlink_parms(): no params data found [ 392.924690][ T8331] team0: Port device team_slave_1 added [ 395.276931][ T8331] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 395.284142][ T8331] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 395.425427][ T8331] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 395.525934][ T8331] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 395.532938][ T8331] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 395.783367][ T8331] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 398.373510][ T8336] bridge0: port 1(bridge_slave_0) entered blocking state [ 398.419601][ T8336] bridge0: port 1(bridge_slave_0) entered disabled state [ 398.452995][ T8336] bridge_slave_0: entered allmulticast mode [ 398.464086][ T8336] bridge_slave_0: entered promiscuous mode [ 398.526987][ T8336] bridge0: port 2(bridge_slave_1) entered blocking state [ 398.554562][ T8336] bridge0: port 2(bridge_slave_1) entered disabled state [ 398.581160][ T8336] bridge_slave_1: entered allmulticast mode [ 398.603466][ T8336] bridge_slave_1: entered promiscuous mode [ 398.810558][ T6138] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 398.939085][ T8331] hsr_slave_0: entered promiscuous mode [ 398.963952][ T8331] hsr_slave_1: entered promiscuous mode [ 398.976461][ T8331] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 398.992512][ T8331] Cannot create hsr debugfs directory [ 399.062956][ T8336] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 399.133805][ T8526] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 399.878860][ T6138] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 400.517584][ T8336] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 400.679434][ T6138] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 400.872228][ T8535] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 400.958253][ T8536] 8021q: adding VLAN 0 to HW filter on device bond1 [ 401.448654][ T8537] bond1 (unregistering): (slave ip6gretap1): Releasing backup interface [ 401.464227][ T8537] bond1 (unregistering): Released all slaves [ 401.604955][ T6138] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 401.731377][ T8336] team0: Port device team_slave_0 added [ 402.405416][ T30] audit: type=1326 audit(1748012480.191:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8554 comm="syz.1.622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e1198e969 code=0x7ffc0000 [ 402.465196][ T30] audit: type=1326 audit(1748012480.191:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8554 comm="syz.1.622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e1198e969 code=0x7ffc0000 [ 402.518507][ T30] audit: type=1326 audit(1748012480.191:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8554 comm="syz.1.622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0e1198e969 code=0x7ffc0000 [ 402.546277][ T8336] team0: Port device team_slave_1 added [ 402.576385][ T30] audit: type=1326 audit(1748012480.231:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8554 comm="syz.1.622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e1198e969 code=0x7ffc0000 [ 402.630125][ T30] audit: type=1326 audit(1748012480.231:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8554 comm="syz.1.622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0e1198e969 code=0x7ffc0000 [ 402.660658][ T30] audit: type=1326 audit(1748012480.231:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8554 comm="syz.1.622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e1198e969 code=0x7ffc0000 [ 402.685425][ T30] audit: type=1326 audit(1748012480.231:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8554 comm="syz.1.622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e1198e969 code=0x7ffc0000 [ 402.708624][ T30] audit: type=1326 audit(1748012480.231:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8554 comm="syz.1.622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0e1198e969 code=0x7ffc0000 [ 402.832157][ T30] audit: type=1326 audit(1748012480.231:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8554 comm="syz.1.622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e1198e969 code=0x7ffc0000 [ 402.973875][ T8336] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 402.995293][ T8336] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 402.998970][ T30] audit: type=1326 audit(1748012480.231:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8554 comm="syz.1.622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e1198e969 code=0x7ffc0000 [ 403.074293][ T8336] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 403.155225][ T5872] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 403.219079][ T8336] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 403.237090][ T8336] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 403.317135][ T8336] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 403.318416][ T5872] usb 2-1: config 0 interface 0 altsetting 7 endpoint 0x81 has invalid wMaxPacketSize 0 [ 403.414092][ T5872] usb 2-1: config 0 interface 0 has no altsetting 0 [ 403.505213][ T5872] usb 2-1: New USB device found, idVendor=05ac, idProduct=0269, bcdDevice= 0.00 [ 403.514331][ T5872] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 403.576753][ T5872] usb 2-1: config 0 descriptor?? [ 404.075631][ T8580] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 404.084484][ T8580] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 404.286908][ T8336] hsr_slave_0: entered promiscuous mode [ 404.321185][ T8336] hsr_slave_1: entered promiscuous mode [ 404.362601][ T8336] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 404.385263][ T8336] Cannot create hsr debugfs directory [ 404.466220][ T6138] bridge_slave_1: left allmulticast mode [ 404.474037][ T6138] bridge_slave_1: left promiscuous mode [ 404.490262][ T6138] bridge0: port 2(bridge_slave_1) entered disabled state [ 404.563529][ T6138] bridge_slave_0: left allmulticast mode [ 404.580730][ T5872] usbhid 2-1:0.0: can't add hid device: -71 [ 404.594296][ T5872] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 404.614235][ T5872] usb 2-1: USB disconnect, device number 9 [ 404.625968][ T6138] bridge_slave_0: left promiscuous mode [ 404.631812][ T6138] bridge0: port 1(bridge_slave_0) entered disabled state [ 405.372309][ T6138] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 405.386125][ T6138] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 405.400906][ T6138] bond0 (unregistering): Released all slaves [ 405.520147][ T8589] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 405.590192][ T8596] fuse: Unknown parameter 'QO V¢òÿ' [ 406.422514][ T8621] netlink: 164 bytes leftover after parsing attributes in process `syz.4.639'. [ 407.519186][ T6138] hsr_slave_0: left promiscuous mode [ 407.556016][ T6138] hsr_slave_1: left promiscuous mode [ 407.573106][ T6138] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 407.665293][ T6138] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 408.315056][ T6138] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 408.323221][ T6138] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 408.653219][ T6138] veth1_macvtap: left promiscuous mode [ 408.671512][ T6138] veth0_macvtap: left promiscuous mode [ 408.821516][ T8646] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 409.169087][ T6138] veth1_vlan: left promiscuous mode [ 409.453795][ T6138] veth0_vlan: left promiscuous mode [ 413.148913][ T8687] binder: 8685:8687 ioctl c0306201 0 returned -14 [ 413.161487][ T8687] netlink: 'syz.1.651': attribute type 10 has an invalid length. [ 413.169505][ T8687] netlink: 40 bytes leftover after parsing attributes in process `syz.1.651'. [ 414.134137][ T8692] netlink: 'syz.5.654': attribute type 1 has an invalid length. [ 414.351149][ T8705] netlink: 28 bytes leftover after parsing attributes in process `syz.5.654'. [ 414.406977][ T6138] team0 (unregistering): Port device team_slave_1 removed [ 414.469619][ T6138] team0 (unregistering): Port device team_slave_0 removed [ 415.717360][ T8687] batadv0: entered promiscuous mode [ 415.723472][ T8687] batadv0: entered allmulticast mode [ 415.731032][ T8687] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 415.843405][ T8696] bond1: (slave veth3): Enslaving as an active interface with a down link [ 415.910182][ T8703] bond1: (slave veth5): Enslaving as an active interface with a down link [ 415.930817][ T8705] 8021q: adding VLAN 0 to HW filter on device bond1 [ 415.986035][ T8713] netlink: 65039 bytes leftover after parsing attributes in process `syz.4.658'. [ 416.293075][ T8331] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 416.314001][ T8331] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 416.337682][ T8331] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 416.354017][ T8331] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 416.585089][ C1] hrtimer: interrupt took 38807 ns [ 418.470461][ T8331] 8021q: adding VLAN 0 to HW filter on device bond0 [ 419.914618][ T8743] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 420.449027][ T8331] 8021q: adding VLAN 0 to HW filter on device team0 [ 420.519000][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 420.526322][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 420.539095][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 420.546333][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 424.018736][ T8336] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 424.818752][ T8336] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 425.506897][ T8336] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 425.577496][ T8336] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 425.627505][ T8794] netlink: 8 bytes leftover after parsing attributes in process `syz.1.678'. [ 425.732327][ T8795] netlink: 8 bytes leftover after parsing attributes in process `syz.1.678'. [ 425.779298][ T8331] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 425.958545][ T8331] veth0_vlan: entered promiscuous mode [ 426.499818][ T8331] veth1_vlan: entered promiscuous mode [ 426.882137][ T8331] veth0_macvtap: entered promiscuous mode [ 426.933475][ T8336] 8021q: adding VLAN 0 to HW filter on device bond0 [ 426.960152][ T8331] veth1_macvtap: entered promiscuous mode [ 427.032461][ T8336] 8021q: adding VLAN 0 to HW filter on device team0 [ 427.090208][ T965] bridge0: port 1(bridge_slave_0) entered blocking state [ 427.097549][ T965] bridge0: port 1(bridge_slave_0) entered forwarding state [ 427.149077][ T965] bridge0: port 2(bridge_slave_1) entered blocking state [ 427.156339][ T965] bridge0: port 2(bridge_slave_1) entered forwarding state [ 427.199452][ T8331] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 427.277694][ T8331] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 427.356271][ T8331] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 427.388641][ T8331] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 427.415482][ T8331] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 427.433198][ T8331] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 428.797713][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 428.812447][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 429.062153][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 429.238195][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 430.160886][ T8336] ================================================================== [ 430.169016][ T8336] BUG: KASAN: global-out-of-bounds in fib6_add+0xcde/0x4360 [ 430.176333][ T8336] Read of size 8 at addr ffffffff99ce9648 by task syz-executor/8336 [ 430.184333][ T8336] [ 430.186691][ T8336] CPU: 1 UID: 0 PID: 8336 Comm: syz-executor Not tainted 6.15.0-rc7-syzkaller-00099-g94305e83eccb #0 PREEMPT(full) [ 430.186718][ T8336] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 430.186739][ T8336] Call Trace: [ 430.186747][ T8336] [ 430.186760][ T8336] dump_stack_lvl+0x189/0x250 [ 430.186792][ T8336] ? __virt_addr_valid+0x18c/0x540 [ 430.186819][ T8336] ? rcu_is_watching+0x15/0xb0 [ 430.186847][ T8336] ? __kasan_check_byte+0x12/0x40 [ 430.186879][ T8336] ? __pfx_dump_stack_lvl+0x10/0x10 [ 430.186910][ T8336] ? rcu_is_watching+0x15/0xb0 [ 430.186940][ T8336] ? lock_release+0x4b/0x3e0 [ 430.186970][ T8336] ? __virt_addr_valid+0x18c/0x540 [ 430.186995][ T8336] ? __virt_addr_valid+0x469/0x540 [ 430.187022][ T8336] print_report+0xb4/0x290 [ 430.187044][ T8336] ? fib6_add+0xcde/0x4360 [ 430.187064][ T8336] kasan_report+0x118/0x150 [ 430.187096][ T8336] ? fib6_add+0xcde/0x4360 [ 430.187122][ T8336] fib6_add+0xcde/0x4360 [ 430.187159][ T8336] ? __pfx_fib6_add+0x10/0x10 [ 430.187181][ T8336] ? do_raw_spin_lock+0x121/0x290 [ 430.187203][ T8336] ? ip6_route_add+0x75/0x160 [ 430.187226][ T8336] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 430.187252][ T8336] ? ip6_route_add+0x75/0x160 [ 430.187276][ T8336] ip6_route_add+0x8a/0x160 [ 430.187300][ T8336] addrconf_permanent_addr+0x67f/0x9d0 [ 430.187332][ T8336] ? __pfx_addrconf_permanent_addr+0x10/0x10 [ 430.187376][ T8336] addrconf_notify+0x887/0x1010 [ 430.187404][ T8336] notifier_call_chain+0x1b3/0x3e0 [ 430.187428][ T8336] __dev_notify_flags+0x18d/0x2e0 [ 430.187463][ T8336] ? __pfx___dev_notify_flags+0x10/0x10 [ 430.187488][ T8336] ? __dev_change_flags+0x4cc/0x6d0 [ 430.187523][ T8336] ? __pfx___dev_change_flags+0x10/0x10 [ 430.187557][ T8336] netif_change_flags+0xe8/0x1a0 [ 430.187587][ T8336] do_setlink+0xcb9/0x40d0 [ 430.187622][ T8336] ? __pfx_do_setlink+0x10/0x10 [ 430.187646][ T8336] ? do_raw_spin_lock+0x121/0x290 [ 430.187675][ T8336] ? lockdep_hardirqs_on+0x9c/0x150 [ 430.187700][ T8336] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 430.187723][ T8336] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 430.187749][ T8336] ? rcu_is_watching+0x15/0xb0 [ 430.187780][ T8336] ? __mutex_lock+0xa6d/0xe80 [ 430.187806][ T8336] ? __mutex_lock+0x51b/0xe80 [ 430.187834][ T8336] ? rtnl_newlink+0x8db/0x1c70 [ 430.187859][ T8336] ? __pfx___mutex_lock+0x10/0x10 [ 430.187890][ T8336] ? ns_capable+0x8a/0xf0 [ 430.187920][ T8336] ? rtnl_link_get_net_capable+0x16a/0x350 [ 430.187957][ T8336] rtnl_newlink+0x160b/0x1c70 [ 430.187987][ T8336] ? __pfx_rtnl_newlink+0x10/0x10 [ 430.188008][ T8336] ? __lock_acquire+0xaac/0xd20 [ 430.188036][ T8336] ? __lock_acquire+0xaac/0xd20 [ 430.188066][ T8336] ? __lock_acquire+0xaac/0xd20 [ 430.188098][ T8336] ? __lock_acquire+0xaac/0xd20 [ 430.188134][ T8336] ? is_bpf_text_address+0x26/0x2b0 [ 430.188164][ T8336] ? is_bpf_text_address+0x292/0x2b0 [ 430.188189][ T8336] ? is_bpf_text_address+0x26/0x2b0 [ 430.188218][ T8336] ? kernel_text_address+0xa5/0xe0 [ 430.188243][ T8336] ? __kernel_text_address+0xd/0x40 [ 430.188271][ T8336] ? __lock_acquire+0xaac/0xd20 [ 430.188310][ T8336] ? __pfx_rtnl_newlink+0x10/0x10 [ 430.188332][ T8336] rtnetlink_rcv_msg+0x7cf/0xb70 [ 430.188353][ T8336] ? kasan_save_track+0x4f/0x80 [ 430.188382][ T8336] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 430.188403][ T8336] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 430.188425][ T8336] ? __lock_acquire+0xaac/0xd20 [ 430.188466][ T8336] netlink_rcv_skb+0x21c/0x490 [ 430.188490][ T8336] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 430.188514][ T8336] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 430.188547][ T8336] ? netlink_deliver_tap+0x2e/0x1b0 [ 430.188569][ T8336] ? netlink_deliver_tap+0x2e/0x1b0 [ 430.188595][ T8336] netlink_unicast+0x758/0x8d0 [ 430.188621][ T8336] netlink_sendmsg+0x805/0xb30 [ 430.188649][ T8336] ? __pfx_netlink_sendmsg+0x10/0x10 [ 430.188678][ T8336] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 430.188699][ T8336] ? __pfx_netlink_sendmsg+0x10/0x10 [ 430.188723][ T8336] __sock_sendmsg+0x219/0x270 [ 430.188745][ T8336] __sys_sendto+0x3bd/0x520 [ 430.188770][ T8336] ? __pfx___sys_sendto+0x10/0x10 [ 430.188801][ T8336] ? fput_close_sync+0x119/0x200 [ 430.188829][ T8336] ? dnotify_flush+0x1db/0x5e0 [ 430.188848][ T8336] ? __pfx_fput_close_sync+0x10/0x10 [ 430.188875][ T8336] __x64_sys_sendto+0xde/0x100 [ 430.188902][ T8336] do_syscall_64+0xf6/0x210 [ 430.188927][ T8336] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 430.188952][ T8336] ? clear_bhb_loop+0x60/0xb0 [ 430.188975][ T8336] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 430.188995][ T8336] RIP: 0033:0x7fdc1f5907fc [ 430.189023][ T8336] Code: 2a 5f 02 00 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 70 5f 02 00 48 8b [ 430.189041][ T8336] RSP: 002b:00007ffd7fd9a940 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 430.189063][ T8336] RAX: ffffffffffffffda RBX: 00007fdc202e4620 RCX: 00007fdc1f5907fc [ 430.189078][ T8336] RDX: 0000000000000020 RSI: 00007fdc202e4670 RDI: 0000000000000003 [ 430.189091][ T8336] RBP: 0000000000000000 R08: 00007ffd7fd9a994 R09: 000000000000000c [ 430.189104][ T8336] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 430.189116][ T8336] R13: 0000000000000000 R14: 00007fdc202e4670 R15: 0000000000000000 [ 430.189138][ T8336] [ 430.189146][ T8336] [ 430.700469][ T8336] The buggy address belongs to the variable: [ 430.706471][ T8336] binder_devices+0x8/0x20 [ 430.710928][ T8336] [ 430.713268][ T8336] The buggy address belongs to the physical page: [ 430.719690][ T8336] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x19ce9 [ 430.728494][ T8336] flags: 0xfff00000002000(reserved|node=0|zone=1|lastcpupid=0x7ff) [ 430.736403][ T8336] raw: 00fff00000002000 ffffea0000673a48 ffffea0000673a48 0000000000000000 [ 430.745009][ T8336] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000 [ 430.753609][ T8336] page dumped because: kasan: bad access detected [ 430.760039][ T8336] page_owner info is not present (never set?) [ 430.766112][ T8336] [ 430.768445][ T8336] Memory state around the buggy address: [ 430.774108][ T8336] ffffffff99ce9500: f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 [ 430.782193][ T8336] ffffffff99ce9580: f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 [ 430.790260][ T8336] >ffffffff99ce9600: f9 f9 f9 f9 f9 f9 f9 f9 00 f9 f9 f9 00 00 f9 f9 [ 430.798413][ T8336] ^ [ 430.804834][ T8336] ffffffff99ce9680: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 430.812896][ T8336] ffffffff99ce9700: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 04 f9 [ 430.820959][ T8336] ================================================================== [ 430.829125][ T8336] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 430.836376][ T8336] CPU: 1 UID: 0 PID: 8336 Comm: syz-executor Not tainted 6.15.0-rc7-syzkaller-00099-g94305e83eccb #0 PREEMPT(full) [ 430.848554][ T8336] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 430.858646][ T8336] Call Trace: [ 430.861953][ T8336] [ 430.864903][ T8336] dump_stack_lvl+0x99/0x250 [ 430.869536][ T8336] ? __asan_memcpy+0x40/0x70 [ 430.874188][ T8336] ? __pfx_dump_stack_lvl+0x10/0x10 [ 430.879430][ T8336] ? __pfx__printk+0x10/0x10 [ 430.884073][ T8336] panic+0x2db/0x790 [ 430.888011][ T8336] ? __pfx_panic+0x10/0x10 [ 430.892555][ T8336] ? _raw_spin_unlock_irqrestore+0xa8/0x110 [ 430.898480][ T8336] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 430.904435][ T8336] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 430.910767][ T8336] ? print_memory_metadata+0x314/0x400 [ 430.916239][ T8336] ? fib6_add+0xcde/0x4360 [ 430.920659][ T8336] check_panic_on_warn+0x89/0xb0 [ 430.925637][ T8336] ? fib6_add+0xcde/0x4360 [ 430.930057][ T8336] end_report+0x78/0x160 [ 430.934311][ T8336] kasan_report+0x129/0x150 [ 430.938921][ T8336] ? fib6_add+0xcde/0x4360 [ 430.943360][ T8336] fib6_add+0xcde/0x4360 [ 430.947627][ T8336] ? __pfx_fib6_add+0x10/0x10 [ 430.952313][ T8336] ? do_raw_spin_lock+0x121/0x290 [ 430.957346][ T8336] ? ip6_route_add+0x75/0x160 [ 430.962029][ T8336] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 430.967409][ T8336] ? ip6_route_add+0x75/0x160 [ 430.972094][ T8336] ip6_route_add+0x8a/0x160 [ 430.976609][ T8336] addrconf_permanent_addr+0x67f/0x9d0 [ 430.982176][ T8336] ? __pfx_addrconf_permanent_addr+0x10/0x10 [ 430.988184][ T8336] addrconf_notify+0x887/0x1010 [ 430.993051][ T8336] notifier_call_chain+0x1b3/0x3e0 [ 430.998174][ T8336] __dev_notify_flags+0x18d/0x2e0 [ 431.003211][ T8336] ? __pfx___dev_notify_flags+0x10/0x10 [ 431.008767][ T8336] ? __dev_change_flags+0x4cc/0x6d0 [ 431.013976][ T8336] ? __pfx___dev_change_flags+0x10/0x10 [ 431.019625][ T8336] netif_change_flags+0xe8/0x1a0 [ 431.024576][ T8336] do_setlink+0xcb9/0x40d0 [ 431.029011][ T8336] ? __pfx_do_setlink+0x10/0x10 [ 431.033870][ T8336] ? do_raw_spin_lock+0x121/0x290 [ 431.038907][ T8336] ? lockdep_hardirqs_on+0x9c/0x150 [ 431.044111][ T8336] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 431.050012][ T8336] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 431.056614][ T8336] ? rcu_is_watching+0x15/0xb0 [ 431.061392][ T8336] ? __mutex_lock+0xa6d/0xe80 [ 431.066078][ T8336] ? __mutex_lock+0x51b/0xe80 [ 431.070768][ T8336] ? rtnl_newlink+0x8db/0x1c70 [ 431.075547][ T8336] ? __pfx___mutex_lock+0x10/0x10 [ 431.080590][ T8336] ? ns_capable+0x8a/0xf0 [ 431.084930][ T8336] ? rtnl_link_get_net_capable+0x16a/0x350 [ 431.090746][ T8336] rtnl_newlink+0x160b/0x1c70 [ 431.095490][ T8336] ? __pfx_rtnl_newlink+0x10/0x10 [ 431.100527][ T8336] ? __lock_acquire+0xaac/0xd20 [ 431.105396][ T8336] ? __lock_acquire+0xaac/0xd20 [ 431.110260][ T8336] ? __lock_acquire+0xaac/0xd20 [ 431.115128][ T8336] ? __lock_acquire+0xaac/0xd20 [ 431.120035][ T8336] ? is_bpf_text_address+0x26/0x2b0 [ 431.125244][ T8336] ? is_bpf_text_address+0x292/0x2b0 [ 431.130544][ T8336] ? is_bpf_text_address+0x26/0x2b0 [ 431.135754][ T8336] ? kernel_text_address+0xa5/0xe0 [ 431.140876][ T8336] ? __kernel_text_address+0xd/0x40 [ 431.146085][ T8336] ? __lock_acquire+0xaac/0xd20 [ 431.150957][ T8336] ? __pfx_rtnl_newlink+0x10/0x10 [ 431.155989][ T8336] rtnetlink_rcv_msg+0x7cf/0xb70 [ 431.160934][ T8336] ? kasan_save_track+0x4f/0x80 [ 431.165795][ T8336] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 431.170914][ T8336] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 431.176382][ T8336] ? __lock_acquire+0xaac/0xd20 [ 431.181253][ T8336] netlink_rcv_skb+0x21c/0x490 [ 431.186034][ T8336] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 431.191504][ T8336] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 431.196807][ T8336] ? netlink_deliver_tap+0x2e/0x1b0 [ 431.202012][ T8336] ? netlink_deliver_tap+0x2e/0x1b0 [ 431.207220][ T8336] netlink_unicast+0x758/0x8d0 [ 431.211995][ T8336] netlink_sendmsg+0x805/0xb30 [ 431.216778][ T8336] ? __pfx_netlink_sendmsg+0x10/0x10 [ 431.222078][ T8336] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 431.227457][ T8336] ? __pfx_netlink_sendmsg+0x10/0x10 [ 431.232750][ T8336] __sock_sendmsg+0x219/0x270 [ 431.237459][ T8336] __sys_sendto+0x3bd/0x520 [ 431.241986][ T8336] ? __pfx___sys_sendto+0x10/0x10 [ 431.247121][ T8336] ? fput_close_sync+0x119/0x200 [ 431.252099][ T8336] ? dnotify_flush+0x1db/0x5e0 [ 431.256900][ T8336] ? __pfx_fput_close_sync+0x10/0x10 [ 431.262206][ T8336] __x64_sys_sendto+0xde/0x100 [ 431.266991][ T8336] do_syscall_64+0xf6/0x210 [ 431.271525][ T8336] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 431.277173][ T8336] ? clear_bhb_loop+0x60/0xb0 [ 431.281865][ T8336] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 431.287775][ T8336] RIP: 0033:0x7fdc1f5907fc [ 431.292333][ T8336] Code: 2a 5f 02 00 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 70 5f 02 00 48 8b [ 431.311963][ T8336] RSP: 002b:00007ffd7fd9a940 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 431.320411][ T8336] RAX: ffffffffffffffda RBX: 00007fdc202e4620 RCX: 00007fdc1f5907fc [ 431.328409][ T8336] RDX: 0000000000000020 RSI: 00007fdc202e4670 RDI: 0000000000000003 [ 431.336389][ T8336] RBP: 0000000000000000 R08: 00007ffd7fd9a994 R09: 000000000000000c [ 431.344403][ T8336] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 431.352376][ T8336] R13: 0000000000000000 R14: 00007fdc202e4670 R15: 0000000000000000 [ 431.360367][ T8336] [ 431.363532][ T8336] Kernel Offset: disabled [ 431.367858][ T8336] Rebooting in 86400 seconds..