last executing test programs: 1m48.294695883s ago: executing program 3 (id=4): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000000000000079104e000000000063004808000000009540000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x7, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffff70}, 0x48) 1m46.451021837s ago: executing program 3 (id=21): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r1, 0x0, 0xd}, 0x18) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/meminfo\x00', 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2a}}, 0x10) connect$inet(r3, &(0x7f0000000480)={0x2, 0x4e21, @multicast2}, 0x10) sendfile(r3, r2, 0x0, 0x20000023893) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_SET(r2, &(0x7f0000000600)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2105000}, 0xc, &(0x7f0000000480)={&(0x7f0000000880)=ANY=[@ANYRESOCT, @ANYRES16=r4, @ANYBLOB="02002cbd7000fddbdf250500800c00038008000200ff07000008000200010000803400038008000100ccc100000800020068d200000800010008000000080001007e000000080002000200000008000200100000003dfacb78d0092bec080001000700000008000100080000005400098008000200d00000000800000008000200040000000800020001800000000200f498000008000200020000000800010002000000080002000700080014000980080001000100008008000100050000000c00098008000100080000000e8ab2426c5b000000000000000000"], 0xe4}, 0x1, 0x0, 0x0, 0x2000000}, 0x80) openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) r5 = syz_open_dev$sndpcmp(&(0x7f0000000b00), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r5, 0xc2604110, &(0x7f0000000040)={0x0, [[0x20, 0x0, 0xfffffffc, 0x20000000, 0x0, 0xb, 0x2000], [0x10000, 0x0, 0x3, 0x4, 0x0, 0x0, 0x9, 0xe], [0x7, 0x0, 0x30, 0x0, 0x0, 0x10]], '\x00', [{}, {0x4}, {}, {0x0, 0x8}, {0x6, 0x7}, {0x8000000, 0x4005f, 0x1}, {0x1}, {0x1}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x2, 0x8000}, {}, {0x0, 0x400000}], '\x00', 0x1000}) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={0x0}}, 0x24004804) openat$kvm(0xffffffffffffff9c, 0x0, 0xec002, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2, 0x10010, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x9) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r6}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() 1m25.519192072s ago: executing program 32 (id=21): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r1, 0x0, 0xd}, 0x18) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/meminfo\x00', 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2a}}, 0x10) connect$inet(r3, &(0x7f0000000480)={0x2, 0x4e21, @multicast2}, 0x10) sendfile(r3, r2, 0x0, 0x20000023893) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_SET(r2, &(0x7f0000000600)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2105000}, 0xc, &(0x7f0000000480)={&(0x7f0000000880)=ANY=[@ANYRESOCT, @ANYRES16=r4, @ANYBLOB="02002cbd7000fddbdf250500800c00038008000200ff07000008000200010000803400038008000100ccc100000800020068d200000800010008000000080001007e000000080002000200000008000200100000003dfacb78d0092bec080001000700000008000100080000005400098008000200d00000000800000008000200040000000800020001800000000200f498000008000200020000000800010002000000080002000700080014000980080001000100008008000100050000000c00098008000100080000000e8ab2426c5b000000000000000000"], 0xe4}, 0x1, 0x0, 0x0, 0x2000000}, 0x80) openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) r5 = syz_open_dev$sndpcmp(&(0x7f0000000b00), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r5, 0xc2604110, &(0x7f0000000040)={0x0, [[0x20, 0x0, 0xfffffffc, 0x20000000, 0x0, 0xb, 0x2000], [0x10000, 0x0, 0x3, 0x4, 0x0, 0x0, 0x9, 0xe], [0x7, 0x0, 0x30, 0x0, 0x0, 0x10]], '\x00', [{}, {0x4}, {}, {0x0, 0x8}, {0x6, 0x7}, {0x8000000, 0x4005f, 0x1}, {0x1}, {0x1}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x2, 0x8000}, {}, {0x0, 0x400000}], '\x00', 0x1000}) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={0x0}}, 0x24004804) openat$kvm(0xffffffffffffff9c, 0x0, 0xec002, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2, 0x10010, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x9) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r6}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() 4.877760666s ago: executing program 4 (id=473): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x4, 0x4, 0x2}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0xc, &(0x7f0000000100)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000180)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0xd}, 0x94) 4.452922514s ago: executing program 4 (id=477): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000080)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000000c0)={0x84, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0xc0145b0e, &(0x7f0000000040)) 3.375405888s ago: executing program 0 (id=488): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000dfff75390000000000000000850000007d00000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='io_uring_register\x00', r0}, 0x10) r1 = io_uring_setup(0x299, &(0x7f0000000300)={0x0, 0xf76b, 0x8, 0x0, 0xfffffffe}) io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r1, 0x12, 0x0, 0x0) 3.203310731s ago: executing program 0 (id=490): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r1 = dup(r0) ioctl$KVM_SET_MSRS(r1, 0xc008ae88, &(0x7f0000000040)=ANY=[]) 3.046659954s ago: executing program 1 (id=492): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000ff7f0000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000040), 0x76, 0x101a01) ioctl$USBDEVFS_SETINTERFACE(r1, 0x41045508, &(0x7f0000000000)) 3.036217886s ago: executing program 0 (id=493): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0xfcfb1000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) rt_sigpending(0x0, 0x0) 2.859362314s ago: executing program 4 (id=495): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES16], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGREPORTINFO(r1, 0xc00c4809, 0x0) 2.853530897s ago: executing program 1 (id=496): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}]}], {0x14}}, 0x68}}, 0x800) sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a48000000160a01080000000000000000020000000900020073797a30000000000900010073797a30000000001c0003801800010067"], 0x70}}, 0x24040884) 2.531808198s ago: executing program 1 (id=498): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, &(0x7f0000000340), 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mbind(&(0x7f000012c000/0x2000)=nil, 0x2000, 0x3, &(0x7f0000000000)=0x8006, 0x86, 0x3) 2.127960513s ago: executing program 1 (id=499): mount$fuseblk(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x2010002, 0x0) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x502) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r0, 0x400454a4, &(0x7f0000000040)) 1.97505836s ago: executing program 2 (id=500): sendmmsg(0xffffffffffffffff, &(0x7f00000020c0)=[{{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000240)="db25380b657cfd5a3861d50ba7f95c01aa4f6b0a7971686882ca68ed646103f5e7e1a7cf89fa2f9593e4de75d7c6f4007e6e796d116edf9868cc0a359c4c5db0d2ad751d2a2537d28161d9adb7d65cbf24b1bd935e1257c8c3466caa0599a1ded7948ca10a65c3219158d234b6803c", 0x6f}], 0x1}}], 0x1, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000000906010200000000020073797a310000007f7166cb8360000500010007000050050007800c9201000000"], 0x44}, 0x1, 0x0, 0x0, 0x14040047}, 0x1) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000003e000701feffffff00000000017c0000040042800c00018006000600800a0000200002801c000b8018"], 0x44}, 0x1, 0x0, 0x0, 0x40040c0}, 0xc000) 1.95234289s ago: executing program 2 (id=501): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6(0xa, 0x805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000080)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @private1}]}, &(0x7f00000002c0)=0x10) getsockopt$bt_hci(r0, 0x84, 0x81, &(0x7f0000000080)=""/4060, &(0x7f00000010c0)=0xfdc) 1.896708668s ago: executing program 2 (id=502): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000dfff75390000000000000000850000007d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='io_uring_register\x00', r0}, 0x10) r1 = io_uring_setup(0x4c22, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x0, 0x359}) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x19, &(0x7f0000000300), 0x0) 1.790868267s ago: executing program 2 (id=503): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x8000000, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x2, 0x9}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000180)={@private0, 0x8000000, 0x2, 0xf9, 0x0, 0x7f, 0x6}, 0x20) 1.678280077s ago: executing program 1 (id=504): r0 = syz_open_dev$loop(&(0x7f00000005c0), 0xffff, 0x109041) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.memory_pressure\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x1000, {0x2a00, 0x80010000, 0x0, 0x52, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea89de2b7fb0a0100000000000000000300", "2809e8dbe108598948224ad54afac11d09000000000000008dd4992861ac1000", "90be6c09306003d8006000", [0x0, 0x2]}}) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r0, 0x4c09) 1.568570441s ago: executing program 2 (id=505): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r0, 0xffffffffffffffff}, 0x4) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x3, 0x11, &(0x7f0000000140)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x87}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}]}, &(0x7f0000000080)='GPL\x00', 0x8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f00000003c0)="c274386d17855027dcd7407221bc", 0x0, 0x1200002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 1.383419059s ago: executing program 1 (id=506): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) r1 = dup(r0) write$tun(r1, &(0x7f0000000600)=ANY=[], 0xe6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r1, 0x0) 1.383258355s ago: executing program 5 (id=26): syz_usb_connect(0x2, 0xa1, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010003546ab520b1134200e4f50102030109028f0001050300030904f6040306a4000809050101000208fe0209050310ff03"], &(0x7f0000000c00)={0x0, 0x0, 0x0, 0x0}) 1.262250663s ago: executing program 0 (id=507): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000080000000000000000000095"], &(0x7f00000003c0)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00', r0}, 0x10) r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000000, 0x12, r1, 0x0) 1.163241763s ago: executing program 4 (id=508): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x1, 0x3f, 0x40, 0x42}, 0x48) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_CONG_MONITOR(r0, 0x114, 0xa, &(0x7f0000000000)=0x1, 0x4) 956.794268ms ago: executing program 0 (id=509): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0) syz_emit_ethernet(0x46, &(0x7f00000002c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x2, 0x38, 0x0, 0x0, 0x2, 0x6, 0x0, @empty, @empty}, {{0x10, 0x4e26, 0x41424344, 0x41424344, 0x0, 0x0, 0x9, 0xc2, 0x1, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x4, 0xd}, @mss={0x2, 0x4, 0x5df4}, @sack={0x5, 0x2}]}}}}}}}, 0x0) 843.376375ms ago: executing program 4 (id=510): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r0, &(0x7f0000002c00)=[{{0x0, 0x0, 0x0}, 0x8794}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000600)=""/203, 0xcb}, {&(0x7f0000000340)=""/257, 0x101}, {&(0x7f0000004e00)=""/4109, 0x100d}], 0x3}, 0x80000000}], 0x4, 0x0, 0x0) 200.116075ms ago: executing program 0 (id=511): socket$inet6(0xa, 0x1, 0x100) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000000c0)="6880a642beaf34317f0dd3122a90ad0d2b", 0x11}], 0x1}, 0x0) r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r0, &(0x7f0000000540)={0x0, 0xc027, &(0x7f0000000340)=[{&(0x7f00000000c0)="97eb000014006bcd9e", 0xeb97}], 0x1, 0x0, 0x0, 0x1f000000}, 0x600) 199.817661ms ago: executing program 4 (id=512): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000300)={0x80, r1, 0x1, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x64, 0x33, @beacon={{{}, {0xde1}, @broadcast}, 0x0, @default, 0x4001, @void, @val, @val={0x3, 0x1, 0xe}, @val={0x4, 0x6, {0x10, 0x97, 0x0, 0xffff}}, @void, @val={0x5, 0x6, {0x0, 0x37, 0x2, "8924af"}}, @void, @val={0x2a, 0x1, {0x1, 0x1}}, @void, @val={0x2d, 0x1a, {0x2, 0x0, 0x3, 0x0, {0x2, 0x1ffa, 0x0, 0x1, 0x0, 0x1, 0x1, 0x3}, 0x7, 0x6, 0x4}}, @val={0x72, 0x6}, @void, @void}}]}, 0x80}, 0x1, 0x0, 0x0, 0x880}, 0x0) 0s ago: executing program 2 (id=513): r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000011c0)=[@in={0x2, 0x4e23, @private=0xa010100}]}, &(0x7f0000000180)=0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00'}, 0x10) getsockopt$bt_hci(r0, 0x84, 0x6d, &(0x7f0000000000)=""/4102, &(0x7f0000001040)=0x1006) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.42' (ED25519) to the list of known hosts. [ 79.440912][ T5832] cgroup: Unknown subsys name 'net' [ 79.676958][ T5832] cgroup: Unknown subsys name 'cpuset' [ 79.751897][ T5832] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 81.386311][ T5832] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 84.112259][ T5845] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 84.122406][ T5845] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 84.131508][ T5845] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 84.147318][ T5845] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 84.151545][ T5845] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 84.193401][ T5157] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 84.198382][ T5157] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 84.202928][ T5157] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 84.205657][ T5157] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 84.206500][ T5157] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 84.206932][ T5157] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 84.209193][ T5853] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 84.209861][ T5157] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 84.210586][ T5853] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 84.213254][ T5157] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 84.239380][ T5157] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 84.241507][ T5157] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 84.242238][ T5157] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 84.243706][ T5157] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 84.244388][ T5157] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 84.410836][ T5157] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 84.421022][ T5157] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 84.429505][ T5157] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 84.430695][ T5157] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 84.447170][ T5157] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 85.203578][ T5843] chnl_net:caif_netlink_parms(): no params data found [ 85.282158][ T5849] chnl_net:caif_netlink_parms(): no params data found [ 85.308709][ T5847] chnl_net:caif_netlink_parms(): no params data found [ 85.415135][ T5848] chnl_net:caif_netlink_parms(): no params data found [ 85.614677][ T5861] chnl_net:caif_netlink_parms(): no params data found [ 86.106360][ T5843] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.107426][ T5843] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.107829][ T5843] bridge_slave_0: entered allmulticast mode [ 86.109464][ T5843] bridge_slave_0: entered promiscuous mode [ 86.243040][ T5157] Bluetooth: hci2: command tx timeout [ 86.243035][ T59] Bluetooth: hci0: command tx timeout [ 86.284124][ T5843] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.284284][ T5843] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.284484][ T5843] bridge_slave_1: entered allmulticast mode [ 86.288460][ T5843] bridge_slave_1: entered promiscuous mode [ 86.322592][ T5157] Bluetooth: hci1: command tx timeout [ 86.323088][ T59] Bluetooth: hci3: command tx timeout [ 86.440929][ T5849] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.441019][ T5849] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.443062][ T5849] bridge_slave_0: entered allmulticast mode [ 86.446002][ T5849] bridge_slave_0: entered promiscuous mode [ 86.481688][ T59] Bluetooth: hci4: command tx timeout [ 86.603701][ T5847] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.603838][ T5847] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.606474][ T5847] bridge_slave_0: entered allmulticast mode [ 86.609315][ T5847] bridge_slave_0: entered promiscuous mode [ 86.626304][ T5849] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.626437][ T5849] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.626611][ T5849] bridge_slave_1: entered allmulticast mode [ 86.629338][ T5849] bridge_slave_1: entered promiscuous mode [ 86.718728][ T5848] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.718859][ T5848] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.719034][ T5848] bridge_slave_0: entered allmulticast mode [ 86.720870][ T5848] bridge_slave_0: entered promiscuous mode [ 86.725612][ T5847] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.725742][ T5847] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.725899][ T5847] bridge_slave_1: entered allmulticast mode [ 86.728478][ T5847] bridge_slave_1: entered promiscuous mode [ 86.806232][ T44] cfg80211: failed to load regulatory.db [ 86.913618][ T5843] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.913861][ T5848] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.913989][ T5848] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.914152][ T5848] bridge_slave_1: entered allmulticast mode [ 86.915925][ T5848] bridge_slave_1: entered promiscuous mode [ 87.195323][ T5843] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.373216][ T5861] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.373357][ T5861] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.373573][ T5861] bridge_slave_0: entered allmulticast mode [ 87.376240][ T5861] bridge_slave_0: entered promiscuous mode [ 87.381221][ T5849] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.645430][ T5847] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.646307][ T5861] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.646380][ T5861] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.646662][ T5861] bridge_slave_1: entered allmulticast mode [ 87.648087][ T5861] bridge_slave_1: entered promiscuous mode [ 87.650771][ T5849] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.767128][ T5848] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.769621][ T5847] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.933719][ T5843] team0: Port device team_slave_0 added [ 87.936443][ T5848] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.147756][ T5843] team0: Port device team_slave_1 added [ 88.287477][ T5861] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.296885][ T5849] team0: Port device team_slave_0 added [ 88.321376][ T59] Bluetooth: hci0: command tx timeout [ 88.321405][ T59] Bluetooth: hci2: command tx timeout [ 88.401444][ T59] Bluetooth: hci1: command tx timeout [ 88.401457][ T5157] Bluetooth: hci3: command tx timeout [ 88.506840][ T5847] team0: Port device team_slave_0 added [ 88.510788][ T5861] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.518771][ T5849] team0: Port device team_slave_1 added [ 88.561440][ T5157] Bluetooth: hci4: command tx timeout [ 88.835064][ T5848] team0: Port device team_slave_0 added [ 88.973595][ T5847] team0: Port device team_slave_1 added [ 88.974664][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.974674][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.974687][ T5843] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.977814][ T5848] team0: Port device team_slave_1 added [ 89.193372][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.193387][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.193411][ T5843] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.303559][ T5861] team0: Port device team_slave_0 added [ 89.304568][ T5849] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.304581][ T5849] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.304602][ T5849] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.464185][ T5861] team0: Port device team_slave_1 added [ 89.466032][ T5849] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.466042][ T5849] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.466054][ T5849] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.466966][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.466974][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.466986][ T5847] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.469679][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.469690][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.469703][ T5848] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.614494][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.614510][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.614531][ T5847] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.622518][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.622533][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.622556][ T5848] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.919587][ T5861] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.919602][ T5861] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.919616][ T5861] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.036170][ T5861] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.036187][ T5861] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.036210][ T5861] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.153648][ T5843] hsr_slave_0: entered promiscuous mode [ 90.155084][ T5843] hsr_slave_1: entered promiscuous mode [ 90.401571][ T59] Bluetooth: hci0: command tx timeout [ 90.401664][ T5157] Bluetooth: hci2: command tx timeout [ 90.481566][ T59] Bluetooth: hci3: command tx timeout [ 90.481696][ T5157] Bluetooth: hci1: command tx timeout [ 90.509580][ T5849] hsr_slave_0: entered promiscuous mode [ 90.512909][ T5849] hsr_slave_1: entered promiscuous mode [ 90.513944][ T5849] debugfs: 'hsr0' already exists in 'hsr' [ 90.514053][ T5849] Cannot create hsr debugfs directory [ 90.617822][ T5847] hsr_slave_0: entered promiscuous mode [ 90.618570][ T5847] hsr_slave_1: entered promiscuous mode [ 90.619087][ T5847] debugfs: 'hsr0' already exists in 'hsr' [ 90.619105][ T5847] Cannot create hsr debugfs directory [ 90.641766][ T5157] Bluetooth: hci4: command tx timeout [ 90.759128][ T5848] hsr_slave_0: entered promiscuous mode [ 90.759928][ T5848] hsr_slave_1: entered promiscuous mode [ 90.760465][ T5848] debugfs: 'hsr0' already exists in 'hsr' [ 90.760487][ T5848] Cannot create hsr debugfs directory [ 91.003032][ T5861] hsr_slave_0: entered promiscuous mode [ 91.004119][ T5861] hsr_slave_1: entered promiscuous mode [ 91.004647][ T5861] debugfs: 'hsr0' already exists in 'hsr' [ 91.004669][ T5861] Cannot create hsr debugfs directory [ 92.482201][ T5157] Bluetooth: hci2: command tx timeout [ 92.482231][ T5157] Bluetooth: hci0: command tx timeout [ 92.562266][ T59] Bluetooth: hci1: command tx timeout [ 92.562296][ T59] Bluetooth: hci3: command tx timeout [ 92.586986][ T5843] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 92.631161][ T5843] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 92.668477][ T5843] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 92.722135][ T5157] Bluetooth: hci4: command tx timeout [ 92.722807][ T5843] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 92.860672][ T5847] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 92.896212][ T5847] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 92.929053][ T5847] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 92.980150][ T5847] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 93.110506][ T5849] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 93.166192][ T5849] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 93.198644][ T5849] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 93.247573][ T5849] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 93.388735][ T5848] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 93.446715][ T5848] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 93.491923][ T5848] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 93.537177][ T5848] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 93.637514][ T5843] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.720782][ T5861] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 93.770997][ T5861] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 93.829985][ T5861] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 93.886084][ T5861] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 93.930664][ T5843] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.984909][ T1497] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.985552][ T1497] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.041198][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.041445][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.099536][ T5847] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.230539][ T5847] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.247638][ T5849] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.290633][ T1497] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.290760][ T1497] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.341210][ T1497] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.341429][ T1497] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.367241][ T5849] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.374921][ T5848] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.454922][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.455098][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.521965][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.522136][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.558624][ T5848] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.634799][ T1419] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.635018][ T1419] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.670884][ T5861] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.690714][ T1497] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.690797][ T1497] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.810338][ T5861] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.881088][ T1419] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.881421][ T1419] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.910228][ T5843] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.927535][ T1419] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.927752][ T1419] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.305295][ T5843] veth0_vlan: entered promiscuous mode [ 95.444259][ T5847] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.472526][ T5843] veth1_vlan: entered promiscuous mode [ 95.596837][ T5849] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.663914][ T5848] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.753950][ T5843] veth0_macvtap: entered promiscuous mode [ 95.794420][ T5843] veth1_macvtap: entered promiscuous mode [ 95.953127][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.000182][ T5849] veth0_vlan: entered promiscuous mode [ 96.008064][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.067096][ T1128] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.071093][ T5848] veth0_vlan: entered promiscuous mode [ 96.086971][ T1128] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.088097][ T5849] veth1_vlan: entered promiscuous mode [ 96.105532][ T1128] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.120571][ T1128] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.194221][ T5861] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.215073][ T5848] veth1_vlan: entered promiscuous mode [ 96.467523][ T1392] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.467547][ T1392] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.499301][ T5847] veth0_vlan: entered promiscuous mode [ 96.516547][ T5849] veth0_macvtap: entered promiscuous mode [ 96.554286][ T5849] veth1_macvtap: entered promiscuous mode [ 96.590631][ T5847] veth1_vlan: entered promiscuous mode [ 96.607118][ T5848] veth0_macvtap: entered promiscuous mode [ 96.635104][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.635122][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.656121][ T5848] veth1_macvtap: entered promiscuous mode [ 96.694469][ T5861] veth0_vlan: entered promiscuous mode [ 96.725475][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.777505][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.800904][ T5861] veth1_vlan: entered promiscuous mode [ 96.807321][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.843491][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.850425][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.870686][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.886006][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.924254][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.002033][ T5847] veth0_macvtap: entered promiscuous mode [ 97.016259][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.030754][ T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.057407][ T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.097277][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.100737][ T5847] veth1_macvtap: entered promiscuous mode [ 97.384021][ T5861] veth0_macvtap: entered promiscuous mode [ 97.479763][ T1445] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.479784][ T1445] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.484547][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.512636][ T5861] veth1_macvtap: entered promiscuous mode [ 97.538430][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.617406][ T1497] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.641225][ T1497] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.667566][ T1497] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.670245][ T1445] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.670262][ T1445] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.680135][ T1497] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.767643][ T5861] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.893145][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.893181][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.945628][ T5861] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.054118][ T1445] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.054137][ T1445] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.113478][ T1392] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.120281][ T1392] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.198450][ T1392] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.262405][ T1392] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.390103][ T1128] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.390122][ T1128] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.878002][ T1419] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.878022][ T1419] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.007190][ T1056] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.007210][ T1056] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.113682][ T1419] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.113701][ T1419] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.321264][ T5995] Zero length message leads to an empty skb [ 101.531393][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 101.541414][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 101.551337][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 101.561329][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 101.571338][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 101.581335][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 101.589128][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 101.989603][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 102.147602][ T6006] overlay: Unknown parameter '/' [ 102.208844][ T6008] process 'syz.1.14' launched '/dev/fd/7' with NULL argv: empty string added [ 102.506051][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 102.566049][ T6009] mmap: syz.0.16 (6009) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 105.323978][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c0!!! [ 114.404637][ T0] sched: DL replenish lagged too much [ 115.360735][ T6042] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 116.426116][ T6048] Bluetooth: MGMT ver 1.23 [ 127.606585][ T37] audit: type=1326 audit(1755987832.114:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6053 comm="syz.2.23" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ea683ebe9 code=0x7ffc0000 [ 127.606688][ T37] audit: type=1326 audit(1755987832.114:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6053 comm="syz.2.23" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ea683ebe9 code=0x7ffc0000 [ 127.606802][ T37] audit: type=1326 audit(1755987832.114:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6053 comm="syz.2.23" exe="/root/syz-executor" sig=0 arch=c000003e syscall=261 compat=0 ip=0x7f0ea683ebe9 code=0x7ffc0000 [ 127.606919][ T37] audit: type=1326 audit(1755987832.114:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6053 comm="syz.2.23" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ea683ebe9 code=0x7ffc0000 [ 127.607023][ T37] audit: type=1326 audit(1755987832.124:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6053 comm="syz.2.23" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ea683ebe9 code=0x7ffc0000 [ 127.607140][ T37] audit: type=1326 audit(1755987832.124:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6053 comm="syz.2.23" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f0ea683ebe9 code=0x7ffc0000 [ 127.607248][ T37] audit: type=1326 audit(1755987832.124:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6053 comm="syz.2.23" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ea683ebe9 code=0x7ffc0000 [ 127.607358][ T37] audit: type=1326 audit(1755987832.124:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6053 comm="syz.2.23" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ea683ebe9 code=0x7ffc0000 [ 127.607477][ T37] audit: type=1326 audit(1755987832.124:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6053 comm="syz.2.23" exe="/root/syz-executor" sig=0 arch=c000003e syscall=325 compat=0 ip=0x7f0ea683ebe9 code=0x7ffc0000 [ 127.607587][ T37] audit: type=1326 audit(1755987832.134:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6053 comm="syz.2.23" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ea683ebe9 code=0x7ffc0000 [ 134.836396][ T6064] syz.4.27 (6064): drop_caches: 2 [ 136.843141][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 136.843979][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 137.621739][ T5919] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 137.820719][ T5919] usb 3-1: config 6 has an invalid interface number: 108 but max is 0 [ 137.820737][ T5919] usb 3-1: config 6 has no interface number 0 [ 137.820766][ T5919] usb 3-1: config 6 interface 108 has no altsetting 0 [ 137.845733][ T5919] usb 3-1: New USB device found, idVendor=0856, idProduct=ac30, bcdDevice=d2.1d [ 137.845751][ T5919] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.845762][ T5919] usb 3-1: Product: syz [ 137.845770][ T5919] usb 3-1: Manufacturer: syz [ 137.845777][ T5919] usb 3-1: SerialNumber: syz [ 138.314702][ T5919] mos7840 3-1:6.108: missing endpoints [ 138.399402][ T5919] usb 3-1: USB disconnect, device number 2 [ 138.732401][ T5939] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 138.800835][ T59] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 138.817216][ T59] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 138.818258][ T59] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 138.819121][ T59] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 138.820227][ T59] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 138.881496][ T5939] usb 5-1: Using ep0 maxpacket: 32 [ 138.886185][ T5939] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 138.886211][ T5939] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 138.886236][ T5939] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 1024 [ 138.886261][ T5939] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 138.886284][ T5939] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 138.886305][ T5939] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 138.886327][ T5939] usb 5-1: config 0 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 138.907873][ T5939] usb 5-1: New USB device found, idVendor=072f, idProduct=2200, bcdDevice=3f.bf [ 138.907901][ T5939] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.907920][ T5939] usb 5-1: Product: syz [ 138.907934][ T5939] usb 5-1: Manufacturer: syz [ 138.907947][ T5939] usb 5-1: SerialNumber: syz [ 138.984860][ T5939] usb 5-1: config 0 descriptor?? [ 139.010498][ T6086] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 139.015154][ T5939] usb 5-1: NFC: Reader power on cmd error -90 [ 139.015175][ T5939] pn533_usb 5-1:0.0: NFC: Couldn't poweron the reader (error -90) [ 139.015321][ T5939] pn533_usb 5-1:0.0: probe with driver pn533_usb failed with error -90 [ 139.326382][ T44] usb 5-1: USB disconnect, device number 2 [ 140.364237][ T6117] netlink: 'syz.1.36': attribute type 4 has an invalid length. [ 140.364420][ T6117] netlink: 3657 bytes leftover after parsing attributes in process `syz.1.36'. [ 141.681643][ T59] Bluetooth: hci5: command tx timeout [ 143.929009][ T6090] chnl_net:caif_netlink_parms(): no params data found [ 143.938273][ T59] Bluetooth: hci5: command tx timeout [ 144.079519][ T6157] ======================================================= [ 144.079519][ T6157] WARNING: The mand mount option has been deprecated and [ 144.079519][ T6157] and is ignored by this kernel. Remove the mand [ 144.079519][ T6157] option from the mount to silence this warning. [ 144.079519][ T6157] ======================================================= [ 145.582681][ T6177] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 145.671381][ T6087] usb 3-1: new low-speed USB device number 3 using dummy_hcd [ 145.823929][ T6087] usb 3-1: config index 0 descriptor too short (expected 6427, got 27) [ 145.823957][ T6087] usb 3-1: config 0 has an invalid interface number: 21 but max is 0 [ 145.823985][ T6087] usb 3-1: config 0 has no interface number 0 [ 145.824029][ T6087] usb 3-1: config 0 interface 21 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 145.824052][ T6087] usb 3-1: config 0 interface 21 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 145.824076][ T6087] usb 3-1: config 0 interface 21 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 145.824110][ T6087] usb 3-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 145.824128][ T6087] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.918028][ T6087] usb 3-1: config 0 descriptor?? [ 146.031454][ T5939] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 146.089514][ T59] Bluetooth: hci5: command tx timeout [ 147.067153][ T6087] usb 3-1: USB disconnect, device number 3 [ 147.081335][ T5939] usb 2-1: Using ep0 maxpacket: 32 [ 147.083270][ T5939] usb 2-1: too many configurations: 17, using maximum allowed: 8 [ 147.086542][ T5939] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 147.086565][ T5939] usb 2-1: config 0 has no interface number 0 [ 147.086614][ T5939] usb 2-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 147.086642][ T5939] usb 2-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 147.088089][ T5939] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 147.088111][ T5939] usb 2-1: config 0 has no interface number 0 [ 147.088157][ T5939] usb 2-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 147.088178][ T5939] usb 2-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 147.091182][ T5939] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 147.141287][ T5939] usb 2-1: config 0 has no interface number 0 [ 147.141352][ T5939] usb 2-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 147.141373][ T5939] usb 2-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 147.215212][ T5939] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 147.215237][ T5939] usb 2-1: config 0 has no interface number 0 [ 147.215284][ T5939] usb 2-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 147.215305][ T5939] usb 2-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 147.221063][ T5939] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 147.221087][ T5939] usb 2-1: config 0 has no interface number 0 [ 147.226344][ T5939] usb 2-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 147.226372][ T5939] usb 2-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 147.298136][ T5939] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 147.298163][ T5939] usb 2-1: config 0 has no interface number 0 [ 147.298213][ T5939] usb 2-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 147.298234][ T5939] usb 2-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 147.308632][ T5939] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 147.308658][ T5939] usb 2-1: config 0 has no interface number 0 [ 147.308705][ T5939] usb 2-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 147.308725][ T5939] usb 2-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 147.311729][ T5939] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 147.311754][ T5939] usb 2-1: config 0 has no interface number 0 [ 147.311801][ T5939] usb 2-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 147.311823][ T5939] usb 2-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 147.326084][ T5939] usb 2-1: New USB device found, idVendor=108c, idProduct=0168, bcdDevice=84.b2 [ 147.326115][ T5939] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 147.326133][ T5939] usb 2-1: Product: syz [ 147.326146][ T5939] usb 2-1: Manufacturer: syz [ 147.326158][ T5939] usb 2-1: SerialNumber: syz [ 147.490575][ T5939] usb 2-1: config 0 descriptor?? [ 147.530421][ T5939] etas_es58x 2-1:0.2: Starting syz syz (Serial Number syz) [ 147.734161][ T5939] etas_es58x 2-1:0.2: could not parse product info: '424242424242' [ 147.853632][ T6197] comedi comedi3: s526: I/O port conflict (0x3c4,64) [ 147.933905][ T1419] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.161487][ T59] Bluetooth: hci5: command tx timeout [ 148.215103][ T5939] usb 2-1: USB disconnect, device number 2 [ 148.264646][ T5939] etas_es58x 2-1:0.2: Disconnecting syz syz [ 149.618003][ T6218] openvswitch: netlink: IP tunnel dst address not specified [ 149.834338][ T1419] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.393717][ T6090] bridge0: port 1(bridge_slave_0) entered blocking state [ 150.393860][ T6090] bridge0: port 1(bridge_slave_0) entered disabled state [ 150.394095][ T6090] bridge_slave_0: entered allmulticast mode [ 150.432261][ T6090] bridge_slave_0: entered promiscuous mode [ 150.584483][ T5900] udevd[5900]: setting mode of /dev/bus/usb/002/002 to 020664 failed: No such file or directory [ 150.584731][ T5900] udevd[5900]: setting owner of /dev/bus/usb/002/002 to uid=0, gid=0 failed: No such file or directory [ 150.783768][ T1419] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.873505][ T6090] bridge0: port 2(bridge_slave_1) entered blocking state [ 150.873705][ T6090] bridge0: port 2(bridge_slave_1) entered disabled state [ 150.873939][ T6090] bridge_slave_1: entered allmulticast mode [ 150.900419][ T6090] bridge_slave_1: entered promiscuous mode [ 151.252120][ T6254] netlink: 20 bytes leftover after parsing attributes in process `syz.0.91'. [ 151.578315][ T6266] comedi comedi2: aio_aio12_8: I/O port conflict (0x3,32) [ 151.738533][ T1419] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.783643][ T6271] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 152.072180][ T6090] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 152.944252][ T6090] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 153.282137][ T6292] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 153.556008][ T6299] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (148514 ns). Using initial count to start timer. [ 153.600628][ T6298] NILFS (nullb0): couldn't find nilfs on the device [ 154.445888][ T6090] team0: Port device team_slave_0 added [ 154.448301][ T6090] team0: Port device team_slave_1 added [ 156.109710][ T6090] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 156.109725][ T6090] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 156.109756][ T6090] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 156.232524][ T6090] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 156.232540][ T6090] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 156.232564][ T6090] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 156.534086][ T6331] genirq: Flags mismatch irq 1. 00202000 (dt2814) vs. 00202080 (i8042) [ 157.020585][ T6090] hsr_slave_0: entered promiscuous mode [ 157.084853][ T6090] hsr_slave_1: entered promiscuous mode [ 157.092179][ T6345] netlink: 8 bytes leftover after parsing attributes in process `syz.1.131'. [ 157.132005][ T6090] debugfs: 'hsr0' already exists in 'hsr' [ 157.132032][ T6090] Cannot create hsr debugfs directory [ 157.484388][ T1419] bridge_slave_1: left allmulticast mode [ 157.484762][ T1419] bridge_slave_1: left promiscuous mode [ 157.487183][ T1419] bridge0: port 2(bridge_slave_1) entered disabled state [ 157.682042][ T1419] bridge_slave_0: left allmulticast mode [ 157.682074][ T1419] bridge_slave_0: left promiscuous mode [ 157.682315][ T1419] bridge0: port 1(bridge_slave_0) entered disabled state [ 159.290991][ T6417] netlink: 68 bytes leftover after parsing attributes in process `syz.1.166'. [ 159.291031][ T6417] netlink: 12 bytes leftover after parsing attributes in process `syz.1.166'. [ 159.291045][ T6417] netlink: 20 bytes leftover after parsing attributes in process `syz.1.166'. [ 159.537538][ T6423] sctp: [Deprecated]: syz.0.169 (pid 6423) Use of int in max_burst socket option. [ 159.537538][ T6423] Use struct sctp_assoc_value instead [ 159.542347][ T5170] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 159.633582][ T6427] netlink: 'syz.1.171': attribute type 1 has an invalid length. [ 159.696050][ T5170] usb 5-1: config 0 has an invalid interface number: 120 but max is 0 [ 159.696078][ T5170] usb 5-1: config 0 has no interface number 0 [ 159.696129][ T5170] usb 5-1: config 0 interface 120 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 159.696171][ T5170] usb 5-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58 [ 159.696194][ T5170] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.704911][ T5170] usb 5-1: config 0 descriptor?? [ 159.810086][ T5170] input: USB Touchscreen 16e3:f9e9 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.120/input/input6 [ 160.033075][ T5170] usb 5-1: USB disconnect, device number 3 [ 162.865270][ T1419] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 163.000366][ T1419] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 163.018981][ T1419] bond0 (unregistering): Released all slaves [ 163.475104][ T37] kauditd_printk_skb: 13 callbacks suppressed [ 163.475121][ T37] audit: type=1326 audit(1755987869.074:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6487 comm="syz.4.200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80552cebe9 code=0x7ffc0000 [ 163.482259][ T37] audit: type=1326 audit(1755987869.074:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6487 comm="syz.4.200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80552cebe9 code=0x7ffc0000 [ 163.494242][ T37] audit: type=1326 audit(1755987869.094:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6487 comm="syz.4.200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=108 compat=0 ip=0x7f80552cebe9 code=0x7ffc0000 [ 163.494488][ T37] audit: type=1326 audit(1755987869.094:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6487 comm="syz.4.200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80552cebe9 code=0x7ffc0000 [ 164.649631][ T5919] hid-generic 0000:0004:0034.0001: unknown main item tag 0x0 [ 164.649718][ T5919] hid-generic 0000:0004:0034.0001: unknown main item tag 0x0 [ 164.649785][ T5919] hid-generic 0000:0004:0034.0001: unknown main item tag 0x0 [ 164.945063][ T5919] hid-generic 0000:0004:0034.0001: hidraw0: HID v0.0e Device [syz0] on syz1 [ 165.998083][ T6503] fido_id[6503]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 168.861119][ T6513] netlink: 'syz.4.208': attribute type 1 has an invalid length. [ 170.147809][ T6498] syz_tun: entered allmulticast mode [ 170.159575][ T6498] syz_tun: left allmulticast mode [ 170.522453][ T6528] random: crng reseeded on system resumption [ 170.648297][ T6535] netlink: 129704 bytes leftover after parsing attributes in process `syz.0.215'. [ 173.133150][ T5170] hid-generic 0000:0004:0034.0002: unknown main item tag 0x0 [ 173.133196][ T5170] hid-generic 0000:0004:0034.0002: unknown main item tag 0x0 [ 173.133327][ T5170] hid-generic 0000:0004:0034.0002: unknown main item tag 0x0 [ 173.642014][ T5170] hid-generic 0000:0004:0034.0002: hidraw0: HID v0.0e Device [syz0] on syz1 [ 174.419395][ T6566] fido_id[6566]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 174.575832][ T6565] syz_tun: entered allmulticast mode [ 174.578751][ T6565] syz_tun: left allmulticast mode [ 175.077551][ C0] vkms_vblank_simulate: vblank timer overrun [ 175.079154][ T1419] hsr_slave_0: left promiscuous mode [ 175.317052][ C0] vkms_vblank_simulate: vblank timer overrun [ 175.904664][ C0] vkms_vblank_simulate: vblank timer overrun [ 176.011315][ T1419] hsr_slave_1: left promiscuous mode [ 176.012447][ T1419] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 176.012526][ T1419] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 176.217145][ C0] vkms_vblank_simulate: vblank timer overrun [ 176.233401][ T1419] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 176.233432][ T1419] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 176.462337][ T59] Bluetooth: hci2: unexpected event 0x01 length: 4 > 1 [ 176.579841][ T1419] veth1_macvtap: left promiscuous mode [ 176.581842][ T1419] veth0_macvtap: left promiscuous mode [ 176.585109][ T1419] veth1_vlan: left promiscuous mode [ 176.585463][ T1419] veth0_vlan: left promiscuous mode [ 179.855805][ T1419] team0 (unregistering): Port device team_slave_1 removed [ 180.062299][ T1419] team0 (unregistering): Port device team_slave_0 removed [ 182.098861][ T6632] kthread_run failed with err -4 [ 182.324598][ T6678] capability: warning: `syz.0.268' uses deprecated v2 capabilities in a way that may be insecure [ 182.333611][ T6678] program syz.0.268 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 182.871065][ T6090] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 183.040330][ T6090] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 183.209505][ T6090] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 183.273168][ T6090] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 184.448167][ T6090] 8021q: adding VLAN 0 to HW filter on device bond0 [ 184.593096][ T6090] 8021q: adding VLAN 0 to HW filter on device team0 [ 184.660455][ T1497] bridge0: port 1(bridge_slave_0) entered blocking state [ 184.662442][ T1497] bridge0: port 1(bridge_slave_0) entered forwarding state [ 184.679058][ T1497] bridge0: port 2(bridge_slave_1) entered blocking state [ 184.679224][ T1497] bridge0: port 2(bridge_slave_1) entered forwarding state [ 185.172958][ T6754] capability: warning: `syz.0.293' uses 32-bit capabilities (legacy support in use) [ 186.656875][ T6794] netlink: 'syz.4.306': attribute type 3 has an invalid length. [ 186.969000][ T6802] tipc: Started in network mode [ 186.969032][ T6802] tipc: Node identity 40000000000000000000000000000001, cluster identity 4711 [ 186.969085][ T6802] tipc: Enabling of bearer rejected, failed to enable media [ 187.580018][ T5157] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 187.609664][ T5157] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 187.617394][ T5157] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 187.631414][ T5157] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 187.648250][ T5157] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 188.394943][ T6849] ./file0: Can't lookup blockdev [ 189.681992][ T5157] Bluetooth: hci4: command tx timeout [ 189.694020][ T37] audit: type=1400 audit(1755987895.284:29): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="*" object="_" requested=w pid=6862 comm="syz.2.328" src=1 dest=20000 netif=wpan0 [ 191.033673][ T6905] tipc: Started in network mode [ 191.033689][ T6905] tipc: Node identity , cluster identity 4711 [ 191.521991][ T6921] netlink: 1041 bytes leftover after parsing attributes in process `syz.1.351'. [ 191.731922][ T6924] Driver unsupported XDP return value 0 on prog (id 38) dev N/A, expect packet loss! [ 191.762704][ T5157] Bluetooth: hci4: command tx timeout [ 191.763597][ T6817] chnl_net:caif_netlink_parms(): no params data found [ 192.543408][ T6950] netlink: 4 bytes leftover after parsing attributes in process `syz.1.362'. [ 192.543448][ T6950] netlink: 4 bytes leftover after parsing attributes in process `syz.1.362'. [ 192.713976][ T37] audit: type=1326 audit(1755987898.314:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6955 comm="syz.4.364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80552cebe9 code=0x7ffc0000 [ 192.715686][ T37] audit: type=1326 audit(1755987898.314:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6955 comm="syz.4.364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80552cebe9 code=0x7ffc0000 [ 192.765806][ T37] audit: type=1326 audit(1755987898.364:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6955 comm="syz.4.364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f80552cebe9 code=0x7ffc0000 [ 192.767413][ T37] audit: type=1326 audit(1755987898.364:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6955 comm="syz.4.364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80552cebe9 code=0x7ffc0000 [ 192.767534][ T37] audit: type=1326 audit(1755987898.364:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6955 comm="syz.4.364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80552cebe9 code=0x7ffc0000 [ 192.768082][ T37] audit: type=1326 audit(1755987898.364:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6955 comm="syz.4.364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f80552cebe9 code=0x7ffc0000 [ 192.768822][ T37] audit: type=1326 audit(1755987898.364:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6955 comm="syz.4.364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80552cebe9 code=0x7ffc0000 [ 192.822420][ T37] audit: type=1326 audit(1755987898.364:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6955 comm="syz.4.364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f80552c5ba7 code=0x7ffc0000 [ 192.822474][ T37] audit: type=1326 audit(1755987898.424:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6955 comm="syz.4.364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f805526ade9 code=0x7ffc0000 [ 193.232658][ T1056] bridge_slave_1: left allmulticast mode [ 193.232689][ T1056] bridge_slave_1: left promiscuous mode [ 193.233005][ T1056] bridge0: port 2(bridge_slave_1) entered disabled state [ 193.312684][ T1056] bridge_slave_0: left allmulticast mode [ 193.312708][ T1056] bridge_slave_0: left promiscuous mode [ 193.315561][ T1056] bridge0: port 1(bridge_slave_0) entered disabled state [ 193.441387][ T5170] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 193.608963][ T5170] usb 5-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 193.608994][ T5170] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 193.609012][ T5170] usb 5-1: Product: syz [ 193.609029][ T5170] usb 5-1: Manufacturer: syz [ 193.609043][ T5170] usb 5-1: SerialNumber: syz [ 193.646144][ T5170] usb 5-1: config 0 descriptor?? [ 193.851627][ T5157] Bluetooth: hci4: command tx timeout [ 193.863034][ T5932] usb 5-1: USB disconnect, device number 4 [ 194.344696][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.344765][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.737363][ T5932] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 194.888715][ T5932] usb 2-1: config 0 interface 0 altsetting 13 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 194.888748][ T5932] usb 2-1: config 0 interface 0 altsetting 13 endpoint 0x81 has invalid wMaxPacketSize 0 [ 194.888770][ T5932] usb 2-1: config 0 interface 0 altsetting 13 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 194.888796][ T5932] usb 2-1: config 0 interface 0 has no altsetting 0 [ 194.888827][ T5932] usb 2-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00 [ 194.888849][ T5932] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 194.897157][ T5932] usb 2-1: config 0 descriptor?? [ 195.365318][ T5932] uclogic 0003:28BD:0042.0003: interface is invalid, ignoring [ 195.482115][ T1056] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 195.546822][ T5939] usb 2-1: USB disconnect, device number 3 [ 195.582488][ T1056] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 195.644255][ T1056] bond0 (unregistering): Released all slaves [ 195.702521][ T6817] bridge0: port 1(bridge_slave_0) entered blocking state [ 195.702682][ T6817] bridge0: port 1(bridge_slave_0) entered disabled state [ 195.702923][ T6817] bridge_slave_0: entered allmulticast mode [ 195.706545][ T6817] bridge_slave_0: entered promiscuous mode [ 195.752012][ T6817] bridge0: port 2(bridge_slave_1) entered blocking state [ 195.752155][ T6817] bridge0: port 2(bridge_slave_1) entered disabled state [ 195.752379][ T6817] bridge_slave_1: entered allmulticast mode [ 195.759796][ T6817] bridge_slave_1: entered promiscuous mode [ 195.921598][ T5157] Bluetooth: hci4: command tx timeout [ 196.148274][ T6817] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 196.431363][ T1056] hsr_slave_0: left promiscuous mode [ 196.472694][ T1056] hsr_slave_1: left promiscuous mode [ 196.473604][ T1056] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 196.545810][ T1056] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 197.829649][ T7034] netlink: 8 bytes leftover after parsing attributes in process `syz.0.399'. [ 198.172462][ T1056] team0 (unregistering): Port device team_slave_1 removed [ 198.492924][ T1056] team0 (unregistering): Port device team_slave_0 removed [ 200.416629][ T6817] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 200.784754][ T6817] team0: Port device team_slave_0 added [ 200.788211][ T6817] team0: Port device team_slave_1 added [ 201.114546][ T7070] netlink: 'syz.2.415': attribute type 1 has an invalid length. [ 201.114569][ T7070] netlink: 'syz.2.415': attribute type 2 has an invalid length. [ 201.115577][ T6817] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 201.115589][ T6817] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 201.115611][ T6817] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 201.134126][ T6817] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 201.134142][ T6817] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 201.134165][ T6817] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 201.759121][ T6817] hsr_slave_0: entered promiscuous mode [ 201.760413][ T6817] hsr_slave_1: entered promiscuous mode [ 201.841627][ T6817] debugfs: 'hsr0' already exists in 'hsr' [ 201.841656][ T6817] Cannot create hsr debugfs directory [ 202.369583][ T7116] IPv6: Can't replace route, no match found [ 202.855313][ T7136] netlink: 'syz.1.434': attribute type 1 has an invalid length. [ 203.165830][ T5170] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 203.311923][ T5170] usb 3-1: Using ep0 maxpacket: 8 [ 203.322185][ T5170] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 203.324084][ T5170] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 203.324112][ T5170] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 203.324135][ T5170] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 203.324157][ T5170] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 203.383449][ T5170] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 203.383507][ T5170] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 203.383533][ T5170] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 203.383556][ T5170] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 203.383580][ T5170] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 203.387558][ T5170] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 203.387617][ T5170] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 203.387642][ T5170] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 203.387666][ T5170] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 203.387691][ T5170] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 203.491272][ T5170] usb 3-1: string descriptor 0 read error: -22 [ 203.491424][ T5170] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 203.491445][ T5170] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 203.552071][ T5170] adutux 3-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 203.783616][ T6021] usb 3-1: USB disconnect, device number 4 [ 204.539834][ T7192] netlink: 'syz.2.453': attribute type 1 has an invalid length. [ 204.932151][ T6817] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 205.018936][ T6817] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 205.107436][ T6817] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 205.191356][ T6021] usb 5-1: new low-speed USB device number 5 using dummy_hcd [ 205.193587][ T37] kauditd_printk_skb: 6 callbacks suppressed [ 205.193602][ T37] audit: type=1326 audit(1755987910.794:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7213 comm="syz.1.462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5af9bebe9 code=0x7ffc0000 [ 205.193976][ T37] audit: type=1326 audit(1755987910.794:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7213 comm="syz.1.462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5af9bebe9 code=0x7ffc0000 [ 205.194239][ T37] audit: type=1326 audit(1755987910.794:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7213 comm="syz.1.462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff5af9bebe9 code=0x7ffc0000 [ 205.202488][ T37] audit: type=1326 audit(1755987910.804:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7213 comm="syz.1.462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5af9bebe9 code=0x7ffc0000 [ 205.202899][ T37] audit: type=1326 audit(1755987910.804:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7213 comm="syz.1.462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7ff5af9b5ba7 code=0x7ffc0000 [ 205.203145][ T37] audit: type=1326 audit(1755987910.804:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7213 comm="syz.1.462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff5af95ade9 code=0x7ffc0000 [ 205.203421][ T37] audit: type=1326 audit(1755987910.804:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7213 comm="syz.1.462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff5af9bebe9 code=0x7ffc0000 [ 205.203660][ T37] audit: type=1326 audit(1755987910.804:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7213 comm="syz.1.462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5af9bebe9 code=0x7ffc0000 [ 205.207032][ T37] audit: type=1326 audit(1755987910.804:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7213 comm="syz.1.462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5af9bebe9 code=0x7ffc0000 [ 205.229003][ T6817] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 205.343902][ T6021] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 205.343928][ T6021] usb 5-1: config 0 has no interface number 0 [ 205.343998][ T6021] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 205.344023][ T6021] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 205.344063][ T6021] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 205.344084][ T6021] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 205.351108][ T6021] usb 5-1: config 0 descriptor?? [ 205.364927][ T7209] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 205.381613][ T6021] iowarrior 5-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 205.589263][ T44] usb 5-1: USB disconnect, device number 5 [ 206.006122][ T6817] 8021q: adding VLAN 0 to HW filter on device bond0 [ 206.125753][ T6817] 8021q: adding VLAN 0 to HW filter on device team0 [ 206.161160][ T7232] could not allocate digest TFM handle sha384-avx [ 206.167865][ T1056] bridge0: port 1(bridge_slave_0) entered blocking state [ 206.171445][ T1056] bridge0: port 1(bridge_slave_0) entered forwarding state [ 206.194181][ T1056] bridge0: port 2(bridge_slave_1) entered blocking state [ 206.197862][ T1056] bridge0: port 2(bridge_slave_1) entered forwarding state [ 206.649868][ T7196] Bluetooth: hci3: command 0x0406 tx timeout [ 206.650123][ T7196] Bluetooth: hci0: command 0x0406 tx timeout [ 206.650149][ T7196] Bluetooth: hci2: command 0x0406 tx timeout [ 206.650172][ T7196] Bluetooth: hci1: command 0x0406 tx timeout [ 206.784071][ T7263] netlink: 428 bytes leftover after parsing attributes in process `syz.2.476'. [ 206.784115][ T7263] netlink: 32 bytes leftover after parsing attributes in process `syz.2.476'. [ 207.172473][ T5837] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 207.321370][ T5837] usb 5-1: Using ep0 maxpacket: 8 [ 207.327064][ T5837] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 207.327091][ T5837] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 207.327114][ T5837] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 207.327138][ T5837] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 207.327187][ T5837] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 207.327208][ T5837] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 207.537557][ T6817] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 207.627104][ T5837] usb 5-1: GET_CAPABILITIES returned 0 [ 207.627159][ T5837] usbtmc 5-1:16.0: can't read capabilities [ 207.830929][ T6021] usb 5-1: USB disconnect, device number 6 [ 208.446019][ T6817] veth0_vlan: entered promiscuous mode [ 208.488694][ T6817] veth1_vlan: entered promiscuous mode [ 208.554035][ T7323] netlink: 'syz.1.496': attribute type 1 has an invalid length. [ 208.558854][ T6817] veth0_macvtap: entered promiscuous mode [ 208.590172][ T6817] veth1_macvtap: entered promiscuous mode [ 208.648501][ T6817] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 208.703942][ T6817] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 208.737736][ T6045] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.739620][ T6045] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.739861][ T6045] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.739896][ T6045] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.851735][ T5837] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 209.017111][ T5837] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 209.017143][ T5837] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 209.017168][ T5837] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 209.017190][ T5837] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 209.017230][ T5837] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 209.017251][ T5837] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 209.069721][ T5837] usb 5-1: config 0 descriptor?? [ 209.224563][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 209.224585][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 209.304656][ T7335] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 209.545584][ T5837] usbhid 5-1:0.0: can't add hid device: -71 [ 209.545717][ T5837] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 209.558992][ T5837] usb 5-1: USB disconnect, device number 7 [ 209.599342][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 209.599362][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 210.231473][ T10] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 210.384521][ T10] usb 6-1: unable to get BOS descriptor or descriptor too short [ 210.385262][ T10] usb 6-1: not running at top speed; connect to a high speed hub [ 210.386971][ T10] usb 6-1: config 5 has an invalid interface number: 246 but max is 0 [ 210.386994][ T10] usb 6-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config [ 210.387012][ T10] usb 6-1: config 5 has no interface number 0 [ 210.387066][ T10] usb 6-1: config 5 interface 246 altsetting 4 endpoint 0x3 has invalid maxpacket 1023, setting to 64 [ 210.387093][ T10] usb 6-1: config 5 interface 246 altsetting 4 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 210.387118][ T10] usb 6-1: config 5 interface 246 has no altsetting 0 [ 210.390143][ T10] usb 6-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=f5.e4 [ 210.390242][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 210.390262][ T10] usb 6-1: Product: syz [ 210.390274][ T10] usb 6-1: Manufacturer: syz [ 210.390287][ T10] usb 6-1: SerialNumber: syz [ 211.141388][ T6045] usb 6-1: Failed to submit usb control message: -71 [ 211.141492][ T6045] usb 6-1: unable to send the bmi data to the device: -71 [ 211.141509][ T6045] usb 6-1: unable to get target info from device [ 211.141535][ T6045] usb 6-1: could not get target info (-71) [ 211.141850][ T6045] usb 6-1: could not probe fw (-71) [ 211.143166][ T10] usb 6-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 211.227305][ T10] usb 6-1: USB disconnect, device number 2 [ 211.332459][ T7372] [ 211.332471][ T7372] ====================================================== [ 211.332479][ T7372] WARNING: possible circular locking dependency detected [ 211.332496][ T7372] syzkaller #0 Not tainted [ 211.332506][ T7372] ------------------------------------------------------ [ 211.332513][ T7372] syz.0.511/7372 is trying to acquire lock: [ 211.332524][ T7372] ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 211.332589][ T7372] [ 211.332589][ T7372] but task is already holding lock: [ 211.332595][ T7372] ffffffff8efa6608 (smc_v6_hashinfo.lock){++.+}-{3:3}, at: smc_diag_dump_proto+0x174/0x1fb0 [ 211.332640][ T7372] [ 211.332640][ T7372] which lock already depends on the new lock. [ 211.332640][ T7372] [ 211.332646][ T7372] [ 211.332646][ T7372] the existing dependency chain (in reverse order) is: [ 211.332653][ T7372] [ 211.332653][ T7372] -> #1 (smc_v6_hashinfo.lock){++.+}-{3:3}: [ 211.332678][ T7372] lock_acquire+0x120/0x360 [ 211.332702][ T7372] rt_write_lock+0x6a/0x110 [ 211.332719][ T7372] smc_hash_sk+0x8f/0x2a0 [ 211.332736][ T7372] smc_sk_init+0x5a1/0x7f0 [ 211.332753][ T7372] __smc_create+0x10d/0x280 [ 211.332775][ T7372] __sock_create+0x4b3/0x9f0 [ 211.332793][ T7372] __sys_socket+0xd7/0x1b0 [ 211.332820][ T7372] __x64_sys_socket+0x7a/0x90 [ 211.332839][ T7372] do_syscall_64+0xfa/0x3b0 [ 211.332861][ T7372] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 211.332878][ T7372] [ 211.332878][ T7372] -> #0 ((softirq_ctrl.lock)){+.+.}-{3:3}: [ 211.332904][ T7372] validate_chain+0xb9b/0x2140 [ 211.332929][ T7372] __lock_acquire+0xab9/0xd20 [ 211.332950][ T7372] reacquire_held_locks+0x127/0x1d0 [ 211.332975][ T7372] lock_release+0x1b4/0x3e0 [ 211.332997][ T7372] __local_bh_enable_ip+0x10c/0x270 [ 211.333017][ T7372] sock_i_ino+0xa9/0xc0 [ 211.333040][ T7372] smc_diag_dump_proto+0xa4c/0x1fb0 [ 211.333059][ T7372] smc_diag_dump+0x59/0xa0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 211.333076][ T7372] netlink_dump+0x6e4/0xe90 [ 211.333095][ T7372] __netlink_dump_start+0x5cb/0x7e0 [ 211.333113][ T7372] smc_diag_handler_dump+0x178/0x210 [ 211.333132][ T7372] sock_diag_rcv_msg+0x4c9/0x600 [ 211.333150][ T7372] netlink_rcv_skb+0x205/0x470 [ 211.333168][ T7372] netlink_unicast+0x843/0xa10 [ 211.333185][ T7372] netlink_sendmsg+0x805/0xb30 [ 211.333205][ T7372] __sock_sendmsg+0x219/0x270 [ 211.333222][ T7372] ____sys_sendmsg+0x508/0x820 [ 211.333244][ T7372] ___sys_sendmsg+0x21f/0x2a0 [ 211.333267][ T7372] __x64_sys_sendmsg+0x1a1/0x260 [ 211.333290][ T7372] do_syscall_64+0xfa/0x3b0 [ 211.333312][ T7372] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 211.333329][ T7372] [ 211.333329][ T7372] other info that might help us debug this: [ 211.333329][ T7372] [ 211.333335][ T7372] Possible unsafe locking scenario: [ 211.333335][ T7372] [ 211.333341][ T7372] CPU0 CPU1 [ 211.333347][ T7372] ---- ---- [ 211.333353][ T7372] rlock(smc_v6_hashinfo.lock); [ 211.333366][ T7372] lock((softirq_ctrl.lock)); [ 211.333380][ T7372] lock(smc_v6_hashinfo.lock); [ 211.333394][ T7372] lock((softirq_ctrl.lock)); [ 211.333406][ T7372] [ 211.333406][ T7372] *** DEADLOCK *** [ 211.333406][ T7372] [ 211.333411][ T7372] 3 locks held by syz.0.511/7372: [ 211.333422][ T7372] #0: ffff88803907a908 (nlk_cb_mutex-SOCK_DIAG){+.+.}-{4:4}, at: __netlink_dump_start+0xfe/0x7e0 [ 211.333468][ T7372] #1: ffffffff8efa6608 (smc_v6_hashinfo.lock){++.+}-{3:3}, at: smc_diag_dump_proto+0x174/0x1fb0 [ 211.333514][ T7372] #2: ffffffff8d9a8b80 (rcu_read_lock){....}-{1:3}, at: rt_read_lock+0x1f8/0x360 [ 211.333556][ T7372] [ 211.333556][ T7372] stack backtrace: [ 211.333583][ T7372] CPU: 0 UID: 0 PID: 7372 Comm: syz.0.511 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 211.333605][ T7372] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 211.333621][ T7372] Call Trace: [ 211.333628][ T7372] [ 211.333636][ T7372] dump_stack_lvl+0x189/0x250 [ 211.333665][ T7372] ? __pfx_dump_stack_lvl+0x10/0x10 [ 211.333691][ T7372] ? __pfx__printk+0x10/0x10 [ 211.333710][ T7372] ? print_lock_name+0xde/0x100 [ 211.333731][ T7372] print_circular_bug+0x2ee/0x310 [ 211.333750][ T7372] check_noncircular+0x134/0x160 [ 211.333780][ T7372] validate_chain+0xb9b/0x2140 [ 211.333807][ T7372] ? validate_chain+0x897/0x2140 [ 211.333848][ T7372] __lock_acquire+0xab9/0xd20 [ 211.333875][ T7372] reacquire_held_locks+0x127/0x1d0 [ 211.333901][ T7372] ? __local_bh_disable_ip+0x264/0x400 [ 211.333926][ T7372] lock_release+0x1b4/0x3e0 [ 211.333954][ T7372] ? __local_bh_enable_ip+0x100/0x270 [ 211.333979][ T7372] __local_bh_enable_ip+0x10c/0x270 [ 211.334001][ T7372] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 211.334027][ T7372] ? rt_read_unlock+0x65/0xa0 [ 211.334047][ T7372] ? sock_i_ino+0x24/0xc0 [ 211.334073][ T7372] sock_i_ino+0xa9/0xc0 [ 211.334099][ T7372] smc_diag_dump_proto+0xa4c/0x1fb0 [ 211.334130][ T7372] ? __pfx_smc_diag_dump_proto+0x10/0x10 [ 211.334152][ T7372] ? __lruvec_stat_mod_folio+0x79/0x2f0 [ 211.334184][ T7372] ? __lruvec_stat_mod_folio+0x79/0x2f0 [ 211.334213][ T7372] ? __phys_addr+0xd3/0x180 [ 211.334240][ T7372] ? __kasan_kmalloc_large+0x85/0xa0 [ 211.334265][ T7372] ? rcu_is_watching+0x15/0xb0 [ 211.334292][ T7372] ? rcu_is_watching+0x15/0xb0 [ 211.334319][ T7372] ? trace_kmalloc+0x1f/0xd0 [ 211.334342][ T7372] ? __kmalloc_node_track_caller_noprof+0x213/0x450 [ 211.334370][ T7372] ? __build_skb_around+0x257/0x3e0 [ 211.334397][ T7372] smc_diag_dump+0x59/0xa0 [ 211.334417][ T7372] netlink_dump+0x6e4/0xe90 [ 211.334442][ T7372] ? __pfx_netlink_dump+0x10/0x10 [ 211.334461][ T7372] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 211.334485][ T7372] ? lockdep_hardirqs_on+0x9c/0x150 [ 211.334517][ T7372] __netlink_dump_start+0x5cb/0x7e0 [ 211.334541][ T7372] smc_diag_handler_dump+0x178/0x210 [ 211.334562][ T7372] ? __pfx_smc_diag_handler_dump+0x10/0x10 [ 211.334583][ T7372] ? __pfx_smc_diag_dump+0x10/0x10 [ 211.334604][ T7372] ? sock_diag_lock_handler+0x19/0x290 [ 211.334624][ T7372] ? sock_diag_lock_handler+0x19/0x290 [ 211.334646][ T7372] sock_diag_rcv_msg+0x4c9/0x600 [ 211.334667][ T7372] netlink_rcv_skb+0x205/0x470 [ 211.334689][ T7372] ? __pfx_sock_diag_rcv_msg+0x10/0x10 [ 211.334710][ T7372] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 211.334735][ T7372] ? netlink_deliver_tap+0x2e/0x1b0 [ 211.334760][ T7372] netlink_unicast+0x843/0xa10 [ 211.334782][ T7372] ? __pfx_netlink_unicast+0x10/0x10 [ 211.334802][ T7372] ? netlink_sendmsg+0x642/0xb30 [ 211.334829][ T7372] ? skb_put+0x11b/0x210 [ 211.334854][ T7372] netlink_sendmsg+0x805/0xb30 [ 211.334880][ T7372] ? __pfx_netlink_sendmsg+0x10/0x10 [ 211.334906][ T7372] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 211.334925][ T7372] ? __pfx_netlink_sendmsg+0x10/0x10 [ 211.334947][ T7372] __sock_sendmsg+0x219/0x270 [ 211.334968][ T7372] ____sys_sendmsg+0x508/0x820 [ 211.334994][ T7372] ? __pfx_____sys_sendmsg+0x10/0x10 [ 211.335023][ T7372] ? import_iovec+0x74/0xa0 [ 211.335044][ T7372] ___sys_sendmsg+0x21f/0x2a0 [ 211.335070][ T7372] ? __pfx____sys_sendmsg+0x10/0x10 [ 211.335109][ T7372] ? __fget_files+0x2a/0x420 [ 211.335133][ T7372] ? __fget_files+0x3a6/0x420 [ 211.335162][ T7372] __x64_sys_sendmsg+0x1a1/0x260 [ 211.335188][ T7372] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 211.335218][ T7372] ? rcu_is_watching+0x15/0xb0 [ 211.335246][ T7372] ? do_syscall_64+0xbe/0x3b0 [ 211.335271][ T7372] do_syscall_64+0xfa/0x3b0 [ 211.335295][ T7372] ? lockdep_hardirqs_on+0x9c/0x150 [ 211.335317][ T7372] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 211.335335][ T7372] ? clear_bhb_loop+0x60/0xb0 [ 211.335355][ T7372] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 211.335373][ T7372] RIP: 0033:0x7f3c000eebe9 [ 211.335396][ T7372] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 211.335413][ T7372] RSP: 002b:00007f3bfe34e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 211.335432][ T7372] RAX: ffffffffffffffda RBX: 00007f3c00315fa0 RCX: 00007f3c000eebe9 [ 211.335447][ T7372] RDX: 0000000000000600 RSI: 0000200000000540 RDI: 0000000000000004 [ 211.335460][ T7372] RBP: 00007f3c00171e19 R08: 0000000000000000 R09: 0000000000000000 [ 211.335472][ T7372] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 211.335484][ T7372] R13: 00007f3c00316038 R14: 00007f3c00315fa0 R15: 00007ffed4c30088 [ 211.335505][ T7372]