last executing test programs: 1m51.086866244s ago: executing program 3 (id=107): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x80006) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000040)=r1) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40) r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r6, 0xaf01, 0x0) r7 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r6, 0x4004af07, &(0x7f0000000240)=r7) ioctl$VHOST_SET_VRING_KICK(r6, 0x4008af20, &(0x7f0000000040)={0x1, r7}) ioctl$VHOST_SET_VRING_ADDR(r6, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r6, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/231, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000}) ioctl$VHOST_SET_MEM_TABLE(r6, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0x78, &(0x7f0000000600)=""/120}]}) ioctl$VHOST_SET_VRING_ERR(r6, 0x4008af22, &(0x7f00000002c0)={0x1, r7}) ioctl$VHOST_VSOCK_SET_RUNNING(r6, 0x4004af61, &(0x7f0000000000)=0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x32, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2d8d}, 0x94) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 1m46.063481337s ago: executing program 3 (id=115): syz_usbip_server_init(0xa343a993be6ba7ec) 1m44.787875194s ago: executing program 3 (id=118): r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x0) syz_open_dev$hidraw(&(0x7f0000000400), 0x0, 0x0) setsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000440)=0x2, 0x2) syz_io_uring_setup(0x149a, &(0x7f0000000380)={0x0, 0x93dd, 0x10100, 0x2, 0xd9}, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_ACCEPT={0xd, 0x0, 0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x80800}) close(0x3) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) 1m44.605829852s ago: executing program 3 (id=120): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r0 = syz_init_net_socket$ax25(0x3, 0x3, 0xc3) ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000c40)) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[], 0x40}, 0x1, 0x0, 0x0, 0x80040}, 0x40c0080) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r2 = open(&(0x7f0000000040)='./file0\x00', 0x400, 0x43) mknodat$loop(r2, &(0x7f00000002c0)='./file1\x00', 0x6000, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') linkat(r2, &(0x7f0000000100)='./file1\x00', r2, &(0x7f0000000240)='./file0\x00', 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000a00)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000600)='./file1\x00', 0x2) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x4206, r3) tkill(r3, 0x12) ptrace(0x4208, r3) ptrace(0x11, r3) futex(&(0x7f000000cffc)=0x1, 0x6, 0x0, 0x0, 0x0, 0x0) futex(0x0, 0x4, 0x7fe, 0x0, &(0x7f0000000040)=0x1, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='environ\x00') preadv(r4, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0xc002a0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000640)={0xf0, 0x0, &(0x7f0000000540)=[@acquire={0x40046305, 0x1}, @transaction={0x40406300, {0x2, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x58, 0x18, &(0x7f00000001c0)={@flat=@weak_handle={0x77682a85, 0x101, 0x3}, @fd={0x66642a85, 0x0, r1}, @ptr={0x70742a85, 0x0, &(0x7f00000000c0)=""/191, 0xbf, 0x2, 0x2f}}, &(0x7f0000000040)={0x0, 0x18, 0x30}}}, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000400)={@fda={0x66646185, 0x8, 0x0, 0x29}, @fda={0x66646185, 0xa, 0x1, 0x34}, @ptr={0x70742a85, 0x1, &(0x7f0000000240)=""/43, 0x2b, 0x2, 0x38}}, &(0x7f0000000280)={0x0, 0x1c, 0x38}}}, @decrefs={0x40046307, 0x3}, @acquire, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000480)={@flat=@handle={0x73682a85, 0x1182016943993805, 0x3}, @flat=@binder={0x73622a85, 0xb, 0x1}, @flat=@handle={0x73682a85, 0x1}}, &(0x7f0000000500)={0x0, 0x18, 0x30}}}, @exit_looper, @release={0x40046306, 0x3}], 0x0, 0x0, 0x0}) r5 = getpid() setxattr$incfs_size(&(0x7f0000000380)='./file1/file0\x00', &(0x7f0000000680), &(0x7f00000006c0)=0x2, 0x8, 0x1) ioprio_set$pid(0x2, r5, 0x6000) 1m43.638898284s ago: executing program 3 (id=127): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) socketpair$unix(0x1, 0x1, 0x0, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_ADDRFORM(r1, 0x29, 0x1, &(0x7f0000000140), 0x4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x80000000, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7c, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4040014}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2, 0x8f}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mbind(&(0x7f0000008000/0x4000)=nil, 0x4000, 0x8003, &(0x7f0000000080)=0x9, 0x7, 0x2) r5 = syz_init_net_socket$rose(0xb, 0x5, 0x0) bind$rose(r5, &(0x7f00000004c0)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, 0x1, @default}, 0x1c) r6 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r6, 0x0, 0x0, 0x240880c0, &(0x7f0000000280)={0xa, 0xe20, 0x0, @mcast1}, 0x1c) sendto$inet6(r6, &(0x7f00000009c0), 0x0, 0xc001, 0x0, 0x0) setsockopt$inet6_mtu(r6, 0x29, 0x17, &(0x7f0000000640)=0x5, 0x21) sendto$inet6(r6, 0x0, 0x0, 0x4010, 0x0, 0x0) 1m42.739531444s ago: executing program 3 (id=129): socket$netlink(0x10, 0x3, 0x0) socketpair(0x11, 0x3, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x180, 0x0) ioctl$TIOCGSOFTCAR(r2, 0x5414, &(0x7f0000000000)) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000c00)=ANY=[@ANYBLOB, @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f00000000c0)={0x0, 0xfffb}, 0x0) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r1, 0x84, 0x78, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x89a0, &(0x7f0000000040)={'syzkaller0\x00'}) bind$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x1a, 0x0, 0x1, 0x8, 0x6, @broadcast}, 0x14) r7 = socket$packet(0x11, 0x3, 0x300) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x89a1, &(0x7f0000000040)={'netdevsim0\x00'}) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r8, 0x560a, &(0x7f00000006c0)={0x4, 0x0, 0x101, 0x0, 0x132, 0x3}) getsockname$packet(r4, 0x0, &(0x7f0000000040)) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="4c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="46060900000000001c00128009000100766c616e000000000c000280060001000100000008000d000200000008", @ANYRES32, @ANYBLOB], 0x4c}, 0x1, 0x0, 0x0, 0x600}, 0x0) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)={0x44, 0xb, 0x6, 0x801, 0x0, 0x0, {0x6, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @mcast2}}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x20008041}, 0x8190) 1m42.3954563s ago: executing program 32 (id=129): socket$netlink(0x10, 0x3, 0x0) socketpair(0x11, 0x3, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x180, 0x0) ioctl$TIOCGSOFTCAR(r2, 0x5414, &(0x7f0000000000)) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000c00)=ANY=[@ANYBLOB, @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f00000000c0)={0x0, 0xfffb}, 0x0) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r1, 0x84, 0x78, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x89a0, &(0x7f0000000040)={'syzkaller0\x00'}) bind$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x1a, 0x0, 0x1, 0x8, 0x6, @broadcast}, 0x14) r7 = socket$packet(0x11, 0x3, 0x300) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x89a1, &(0x7f0000000040)={'netdevsim0\x00'}) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r8, 0x560a, &(0x7f00000006c0)={0x4, 0x0, 0x101, 0x0, 0x132, 0x3}) getsockname$packet(r4, 0x0, &(0x7f0000000040)) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="4c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="46060900000000001c00128009000100766c616e000000000c000280060001000100000008000d000200000008", @ANYRES32, @ANYBLOB], 0x4c}, 0x1, 0x0, 0x0, 0x600}, 0x0) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)={0x44, 0xb, 0x6, 0x801, 0x0, 0x0, {0x6, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @mcast2}}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x20008041}, 0x8190) 14.249994999s ago: executing program 1 (id=352): recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = socket(0x840000000002, 0x3, 0xff) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='gre0\x00', 0x10) sendmmsg$inet(r0, &(0x7f0000000240)=[{{&(0x7f00000007c0)={0x2, 0x4e20, @multicast1}, 0x10, &(0x7f0000001980)=[{&(0x7f0000000440)="a905008efd891d7b8613d33cc1aac36e8801000000cf45cbd85e6641e46f5535d6a5c55a77a6f4", 0x27}], 0x1}}], 0x1, 0x4004040) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) fsopen(&(0x7f0000000280)='nfs4\x00', 0x1) openat$sequencer(0xffffffffffffff9c, 0x0, 0x80200, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x141102) syz_open_dev$evdev(&(0x7f0000000000), 0x672, 0x200) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x1, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0x0) 13.971915381s ago: executing program 1 (id=356): bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0700000004000000080000000100000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000000000000000806c9661bb39d7fa44ba30f0d432db49331f43f0d1607a790e23a294e284ff77668343d1b4cb530769c108e1e4ecd7397595fde1c642057cb0940be1484ed4d103b693ca9ee5a32bcc827fc755e05557c341e43c8919b662ea930860abc39daee4c3fa3a0a24a0e436"], 0x48) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fdinfo/3\x00') syz_emit_ethernet(0x4e, &(0x7f00000020c0)=ANY=[], 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x82200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) fsopen(&(0x7f0000000040)='cifs\x00', 0x1) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) sendto$inet6(r1, &(0x7f0000000100), 0x0, 0x10, 0x0, 0x0) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}, 0x2000000}, 0x64) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) r3 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) r5 = openat$cgroup(r4, &(0x7f0000000080)='syz1\x00', 0x200002, 0x0) r6 = openat$cgroup_type(r5, &(0x7f00000001c0), 0x2, 0x0) write$cgroup_type(r6, &(0x7f0000000400), 0x9) ioctl$SNDCTL_SYNTH_ID(0xffffffffffffffff, 0xc08c5114, &(0x7f00000003c0)={"b7a8c4e7db869477b3f74f2edfbc2c260ca549791f50be4f9bf71b566872", 0x10000, 0x0, 0x401, 0x6, 0xad27, 0x1f, 0x5, 0x0, [0x8, 0x9, 0x7, 0xffffffff, 0x9, 0xfffff80a, 0x5, 0x1d70, 0x4, 0x5, 0xffffff80, 0x52061c7c, 0x2, 0x2, 0x7, 0x7, 0x654c, 0xed, 0x8]}) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000180)=@gcm_256={{0x303}, "0587a06a93f2aad4", "9b84f987950ff3df25fa8f46983d34157e047d27ae4a66a6d15608a32cbaa5bc", '\x00', "be0ea450d5a50003"}, 0x38) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x6, 0xfffffffffffffffd}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x1, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 10.710784035s ago: executing program 1 (id=359): socket$key(0xf, 0x3, 0x2) socket$key(0xf, 0x3, 0x2) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f3bbb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1089d8b8588d72ec29c48b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68000000000000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465a932b77a74e802a0dc6bf25d8a242bc6099ad2300000480006ef6c1ff0900ff0000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767192361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80af740b5b7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae616b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48bc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1f001b2cd3170400000085be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe760e717a04becff0f719197724f4fce1093b62d7e8c7123d890cec55bf404e4e1f74b7eed82571be54c72d978cf906df08f11f1c4042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f871b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9f0390a6f01e3e483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5eaff07000000000000b99c9cc0ad1857216f000000009191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e6"], 0x0}, 0x94) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000000000)="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", 0x2000, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) bpf$MAP_CREATE(0x0, 0x0, 0x48) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$kcm(0x10, 0x0, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0xfffff000, 0x2000, &(0x7f0000000000/0x2000)=nil}) r4 = openat$mixer(0xffffffffffffff9c, &(0x7f0000003fc0), 0x20000, 0x0) ioctl$SOUND_MIXER_READ_DEVMASK(r4, 0xc0044dff, &(0x7f0000004000)) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r5 = socket(0x2, 0x80805, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r6, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r6, 0x84, 0x7a, &(0x7f0000000340)={r7, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) setsockopt$inet_sctp6_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000002080)=@assoc_value={0x0, 0x1}, 0x8) 7.44005432s ago: executing program 1 (id=367): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)={0x28, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}}, 0x0) syz_80211_inject_frame(0x0, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000740)=@framed={{0x18, 0x0, 0x0, 0x0, 0x80000001}}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r3}, 0x18) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x24, r4, 0x5, 0x4000000, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x0) 5.969381645s ago: executing program 1 (id=373): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009ac0b620110f2110"], 0x0) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, &(0x7f00000001c0)) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x4c001, 0x0, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000000), 0x3, 0x40) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20004804) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r1, &(0x7f0000000100)=""/178, 0xb2) syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f00000000c0)="ad") 5.549868164s ago: executing program 4 (id=379): r0 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) 5.162247821s ago: executing program 4 (id=383): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x8d40, 0x0) ppoll(&(0x7f0000000800)=[{r0, 0x2}], 0x1, 0x0, 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, "00769a7d8200010000001495595915303d6000"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCFLSH(r1, 0x540b, 0x0) 4.146628076s ago: executing program 4 (id=386): bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') ptrace(0x10, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x80a02, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_usbip_server_init(0x3) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x20000000000, 0xfffffffffffffffd, 0x1, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) 3.207276268s ago: executing program 4 (id=392): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0, 0x0, 0x7}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYRESHEX], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) sendmsg$RDMA_NLDEV_CMD_DELLINK(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)=ANY=[@ANYBLOB="18000000041401002dbd7000fedbdf250800010000000000ba30b28e994c1a08d1ca4eb6b8b4"], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000400)='mm_collapse_huge_page_swapin\x00', 0xffffffffffffffff, 0x0, 0x7}, 0x18) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000", @ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={@fallback=r1, 0x35, 0x0, 0x6, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x0, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000014c0)=ANY=[@ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="30000000eb4b1e9991d601000000", @ANYRES32, @ANYBLOB, @ANYRES32, @ANYBLOB, @ANYRES64=r4], 0x20) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000680)=ANY=[], 0x20) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) getpriority(0x1, 0x0) 3.043661395s ago: executing program 4 (id=393): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r0, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)={0x28, r0, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}}, 0x0) syz_80211_inject_frame(0x0, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000740)=@framed={{0x18, 0x0, 0x0, 0x0, 0x80000001}}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r3}, 0x18) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x24, r4, 0x5, 0x4000000, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x0) 2.832420604s ago: executing program 0 (id=394): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r3 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000380)={'wlan1\x00', 0x8000}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)={0x24, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="018d632c2bbf7c5dcf2aa766e1c5111ef7a540f6738ed59494a610ebfa075dcfcf17012bd37b765b600d20719ecc4eeb3141af2809edbf7c3538317b39e50192eb1efa7d292c06cbd81156c8e6f8d15b40551da022cf87"], 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x28, r2, 0x5, 0x3, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}]}, 0x28}}, 0x0) r9 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r9, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x20, 0x3, 0x1, 0x105, 0x0, 0x0, {0x7, 0x0, 0x4}, [@CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x125e30103a86b53a}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x4) r11 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r11, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) r12 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r12, &(0x7f0000000040)={0x18, 0x0, {0x3, @random="00ff00", 'bond0\x00'}}, 0x1e) r13 = openat$vimc0(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r13, 0xc100565c, 0x0) sendmmsg(r12, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}], 0x3e8, 0x0) r14 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r14, 0x8933, 0x0) sendmsg$nl_route(r14, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) connect$netrom(r0, &(0x7f0000000300)={{0x6, @default, 0x1}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, @bcast, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}, 0x48) bind$netrom(r0, 0x0, 0x0) 2.631770303s ago: executing program 0 (id=396): syz_emit_ethernet(0x3b6, &(0x7f0000000780)=ANY=[], 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001280)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32, @ANYBLOB="0012000000000000000079759717"], 0x48) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9c, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x240, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0xd) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000000)=0xe) ioctl$FIONREAD(r4, 0x541b, &(0x7f0000000040)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) fsopen(&(0x7f0000000400)='bfs\x00', 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000180)={0x26, 'rng\x00', 0x0, 0x0, 'stdrng\x00'}, 0x58) r6 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0xbcb5, 0x3f00, 0x5, 0x1000}, &(0x7f0000000340)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x40, 0x3, r5, 0x0}) io_uring_enter(r6, 0x3516, 0x3e44, 0x8, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000180)={r0}, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000dc0)={0x6, 0x6, &(0x7f0000000040)=ANY=[@ANYRESOCT=r0, @ANYRES32=r0, @ANYBLOB="0000000000000000890200000000000095"], &(0x7f0000000d40)='syzkaller\x00'}, 0x94) 2.631654124s ago: executing program 2 (id=397): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="40010000", @ANYRES16=r1, @ANYBLOB="01000000000004000000010000002400030000000000000000000000000000000000000000000000000000000000000000001400020077673100000000000000000000000000f4000880"], 0x140}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x4c, r1, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @c}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20d0}, 0x44000) 2.573410296s ago: executing program 2 (id=398): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000480)={0x28, 0x2e, 0x1, 0x70bd27, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @uid}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x109, 0x0, 0x0, @ipv4=@rand_addr=0x64010101}]}, @nested={0x4, 0x1}]}, 0x28}], 0x1}, 0x0) 2.495740009s ago: executing program 2 (id=399): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000200), 0x40000, 0x0) ioctl$SOUND_MIXER_READ_VOLUME(r0, 0x80044d03, &(0x7f0000000240)) 2.416156303s ago: executing program 1 (id=400): syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x910ec27568a00e35, 0x40000002, 0x0) r3 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/card0/oss_mixer\x00', 0x2, 0x0) write$proc_mixer(r3, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x2a) close(r3) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, 0x0, &(0x7f0000000180)='GPL\x00', 0x9}, 0x94) socket$packet(0x11, 0x3, 0x300) socket$inet6_udp(0xa, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r4, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x5b}, 0x94) syz_usbip_server_init(0x3) add_key$user(&(0x7f0000000380), &(0x7f0000000000)={'syz', 0x0}, &(0x7f0000000580)='X', 0x1, 0xfffffffffffffffe) r5 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) lsetxattr$trusted_overlay_redirect(&(0x7f0000000280)='./file0\x00', &(0x7f0000000300), &(0x7f0000000540)='./file0\x00', 0x8, 0x2) r6 = landlock_create_ruleset(&(0x7f0000000140)={0x2000}, 0x10, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r6, 0x1, &(0x7f0000000340)={0x2000, r5}, 0x0) landlock_restrict_self(r6, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000180)='./file1/file3\x00', 0xffffffffffffff9c, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) 2.415562193s ago: executing program 4 (id=401): io_setup(0x4, &(0x7f0000000600)=0x0) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) r2 = socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x2, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x800, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x0, 0x0, 0xffffffff}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r6, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600, 0x1}}, 0x20) r7 = socket$kcm(0x2, 0x5, 0x0) sendmsg$inet(r7, 0x0, 0x4cbe8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000005c0), &(0x7f0000000600)=0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1e, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000100000000000071120b00000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) socket$packet(0x11, 0x3, 0x300) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="30000000100001000000ce6bb9092919507f3400", @ANYRES32=0x0, @ANYRES32=r2, @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) io_submit(r0, 0xe7, &(0x7f0000000080)=[&(0x7f0000000140)={0x0, 0x4, 0x0, 0x1, 0x0, r1, &(0x7f0000000000)="ff07000000000000", 0x400000}]) 1.687062115s ago: executing program 0 (id=402): socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, &(0x7f0000000080), 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x6, &(0x7f0000000080)=0xa6a) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000080)}], 0x1) r0 = syz_clone(0x80, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregs(0xf, r0, 0x2, 0x0) execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x400) connect$pppoe(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc005}, 0x4000) r1 = syz_usb_connect$uac1(0x4, 0xac, 0x0, 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(0xffffffffffffffff, 0x84, 0x78, 0x0, 0x0) syz_emit_vhci(0x0, 0x8) sched_setscheduler(0x0, 0x3, 0x0) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x0, 0x0, 0x41c}}}, 0x7) 1.455840015s ago: executing program 2 (id=403): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r3) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1014}, 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0d00000004000000040000000701000000000000", @ANYRES32=0x0], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000880), 0xde9, r4}, 0x38) 794.914945ms ago: executing program 0 (id=404): syz_emit_ethernet(0x56, &(0x7f0000000480)=ANY=[@ANYBLOB="bbbbbbbbbbbbffffffffffff86dd6007592300200000fe8000000000000000000000000000aafe030000000000000000000000000000000031"], 0x0) 660.210811ms ago: executing program 0 (id=405): capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) r0 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(r0, 0x0, 0x61, 0x0, &(0x7f0000000080)) 495.506638ms ago: executing program 0 (id=406): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, 0x0, 0x0) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x4c, r1, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @c}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20d0}, 0x44000) 111.735915ms ago: executing program 2 (id=407): r0 = openat$fb0(0xffffff9c, &(0x7f0000000080), 0x640, 0x0) ioctl$FBIOPUTCMAP(r0, 0x4605, &(0x7f0000000280)={0x8, 0x5, &(0x7f00000000c0)=[0x7fff, 0x8, 0x3, 0x4, 0x4], &(0x7f00000001c0), &(0x7f0000000200), 0x0}) 0s ago: executing program 2 (id=408): r0 = openat$comedi(0xffffff9c, &(0x7f0000000440)='/dev/comedi0\x00', 0x101001, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000140)={'c6xdigio\x00', [0x3, 0x2, 0xdfb, 0x284e1, 0x2f, 0x2007, 0x7, 0x80008, 0x80ffe, 0x1, 0x2, 0x8500, 0x0, 0x1000005, 0xe, 0xffff, 0xffffffa8, 0x1, 0x1ff, 0x8, 0x10, 0x40000, 0x8, 0x6, 0x746f, 0x8, 0x9, 0x8, 0x2f03, 0x4, 0x7fff]}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.244' (ED25519) to the list of known hosts. [ 57.765982][ T5748] cgroup: Unknown subsys name 'net' [ 57.899225][ T5748] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 59.207546][ T5748] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 61.449073][ T5766] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 61.457744][ T5766] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 61.466043][ T5766] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 61.474733][ T5766] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 61.482587][ T5766] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 61.485788][ T5768] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 61.490019][ T5766] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 61.499155][ T5768] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 61.505715][ T5766] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 61.512862][ T5768] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 61.518754][ T5771] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 61.525838][ T5768] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 61.540020][ T5768] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 61.548307][ T5771] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 61.548781][ T5768] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 61.564068][ T5768] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 61.576234][ T5768] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 61.576580][ T5771] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 61.593425][ T5773] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 61.600892][ T5773] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 61.603357][ T5771] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 61.608800][ T5773] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 61.622591][ T5773] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 61.632981][ T5773] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 62.097850][ T5758] chnl_net:caif_netlink_parms(): no params data found [ 62.165592][ T5757] chnl_net:caif_netlink_parms(): no params data found [ 62.182502][ T5760] chnl_net:caif_netlink_parms(): no params data found [ 62.244271][ T5765] chnl_net:caif_netlink_parms(): no params data found [ 62.276638][ T5758] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.283942][ T5758] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.291242][ T5758] bridge_slave_0: entered allmulticast mode [ 62.298688][ T5758] bridge_slave_0: entered promiscuous mode [ 62.337707][ T5758] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.344998][ T5758] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.352129][ T5758] bridge_slave_1: entered allmulticast mode [ 62.359543][ T5758] bridge_slave_1: entered promiscuous mode [ 62.428914][ T5758] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.452482][ T5757] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.459961][ T5757] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.467964][ T5757] bridge_slave_0: entered allmulticast mode [ 62.474793][ T5757] bridge_slave_0: entered promiscuous mode [ 62.483918][ T5758] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.524779][ T5757] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.531903][ T5757] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.539956][ T5757] bridge_slave_1: entered allmulticast mode [ 62.547350][ T5757] bridge_slave_1: entered promiscuous mode [ 62.577856][ T5758] team0: Port device team_slave_0 added [ 62.593286][ T5760] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.600531][ T5760] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.608131][ T5760] bridge_slave_0: entered allmulticast mode [ 62.616707][ T5760] bridge_slave_0: entered promiscuous mode [ 62.625004][ T5760] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.632118][ T5760] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.639362][ T5760] bridge_slave_1: entered allmulticast mode [ 62.646681][ T5760] bridge_slave_1: entered promiscuous mode [ 62.662381][ T5758] team0: Port device team_slave_1 added [ 62.679449][ T5765] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.686628][ T5765] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.694749][ T5765] bridge_slave_0: entered allmulticast mode [ 62.701592][ T5765] bridge_slave_0: entered promiscuous mode [ 62.720842][ T5757] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.733943][ T5757] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.751361][ T5765] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.758771][ T5765] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.767034][ T5765] bridge_slave_1: entered allmulticast mode [ 62.774543][ T5765] bridge_slave_1: entered promiscuous mode [ 62.801233][ T5758] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.808253][ T5758] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.834868][ T5758] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.859081][ T5760] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.871023][ T5760] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.889672][ T5758] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.896832][ T5758] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.923687][ T5758] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.959799][ T5757] team0: Port device team_slave_0 added [ 62.968780][ T5757] team0: Port device team_slave_1 added [ 62.987792][ T5765] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.029448][ T5765] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.040938][ T5760] team0: Port device team_slave_0 added [ 63.049892][ T5760] team0: Port device team_slave_1 added [ 63.056392][ T5757] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.063715][ T5757] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.089649][ T5757] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.130993][ T5757] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.138043][ T5757] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.164021][ T5757] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.195168][ T5765] team0: Port device team_slave_0 added [ 63.227375][ T5765] team0: Port device team_slave_1 added [ 63.248657][ T5758] hsr_slave_0: entered promiscuous mode [ 63.255523][ T5758] hsr_slave_1: entered promiscuous mode [ 63.263203][ T5760] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.270200][ T5760] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.296725][ T5760] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.309218][ T5760] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.316482][ T5760] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.342434][ T5760] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.364148][ T5765] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.371106][ T5765] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.397272][ T5765] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.447469][ T5765] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.454493][ T5765] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.480689][ T5765] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.512175][ T5757] hsr_slave_0: entered promiscuous mode [ 63.518886][ T5757] hsr_slave_1: entered promiscuous mode [ 63.525476][ T5757] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 63.533755][ T5757] Cannot create hsr debugfs directory [ 63.590772][ T5760] hsr_slave_0: entered promiscuous mode [ 63.598108][ T5760] hsr_slave_1: entered promiscuous mode [ 63.604844][ T5760] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 63.612496][ T5760] Cannot create hsr debugfs directory [ 63.640635][ T5765] hsr_slave_0: entered promiscuous mode [ 63.647553][ T5765] hsr_slave_1: entered promiscuous mode [ 63.653803][ T5765] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 63.661361][ T5765] Cannot create hsr debugfs directory [ 63.663772][ T5081] Bluetooth: hci3: command tx timeout [ 63.667056][ T5773] Bluetooth: hci2: command tx timeout [ 63.742840][ T5773] Bluetooth: hci0: command tx timeout [ 63.747320][ T5081] Bluetooth: hci1: command tx timeout [ 64.010364][ T5765] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 64.024423][ T5765] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 64.034894][ T5765] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 64.044623][ T5765] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 64.106606][ T5757] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 64.116849][ T5757] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 64.133051][ T5757] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 64.146744][ T5757] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 64.217651][ T5758] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 64.228989][ T5758] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 64.243481][ T5758] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 64.264101][ T5758] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 64.339267][ T5760] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 64.350272][ T5760] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 64.361959][ T5760] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 64.371439][ T5760] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 64.413743][ T5765] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.457841][ T5765] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.498427][ T1131] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.505998][ T1131] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.517319][ T1131] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.524445][ T1131] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.545331][ T5757] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.609766][ T5757] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.625746][ T1131] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.633110][ T1131] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.653681][ T1131] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.660778][ T1131] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.708069][ T5765] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 64.747284][ T5758] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.796507][ T5760] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.819549][ T5758] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.844690][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.851847][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.879306][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.886480][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.930786][ T5760] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.990122][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.997334][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.066041][ T5765] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.084818][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.091990][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.211524][ T5757] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.228534][ T5765] veth0_vlan: entered promiscuous mode [ 65.270798][ T5765] veth1_vlan: entered promiscuous mode [ 65.327898][ T5757] veth0_vlan: entered promiscuous mode [ 65.355018][ T5765] veth0_macvtap: entered promiscuous mode [ 65.364933][ T5757] veth1_vlan: entered promiscuous mode [ 65.385414][ T5765] veth1_macvtap: entered promiscuous mode [ 65.435829][ T5765] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.454442][ T5757] veth0_macvtap: entered promiscuous mode [ 65.486621][ T5765] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.515643][ T5765] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.525869][ T5765] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.536235][ T5765] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.545370][ T5765] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.557796][ T5757] veth1_macvtap: entered promiscuous mode [ 65.613576][ T5758] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.652491][ T5757] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.665384][ T5757] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.676877][ T5757] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.701321][ T5757] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.712188][ T5757] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.725830][ T5757] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.743122][ T5081] Bluetooth: hci3: command tx timeout [ 65.744686][ T5773] Bluetooth: hci2: command tx timeout [ 65.769344][ T5757] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.778175][ T5757] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.787679][ T5757] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.796642][ T5757] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.813792][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.819918][ T5760] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.822907][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.837775][ T5773] Bluetooth: hci1: command tx timeout [ 65.838692][ T5081] Bluetooth: hci0: command tx timeout [ 65.933790][ T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.942128][ T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.960839][ T5760] veth0_vlan: entered promiscuous mode [ 66.007572][ T5758] veth0_vlan: entered promiscuous mode [ 66.021752][ T5760] veth1_vlan: entered promiscuous mode [ 66.038673][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.050355][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.055970][ T5758] veth1_vlan: entered promiscuous mode [ 66.119251][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.152214][ T5760] veth0_macvtap: entered promiscuous mode [ 66.158832][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.186083][ T5758] veth0_macvtap: entered promiscuous mode [ 66.213870][ T5758] veth1_macvtap: entered promiscuous mode [ 66.242571][ T5760] veth1_macvtap: entered promiscuous mode [ 66.343653][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 66.351992][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 66.361148][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 66.369785][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 66.378264][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 66.386976][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 66.448641][ T5760] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.501120][ T5760] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.542012][ T5760] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.587739][ T5760] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.659802][ T5760] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.743222][ T5760] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.766992][ T5760] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.795920][ T5760] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.810589][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 66.819352][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 66.841023][ T5760] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.894538][ T5848] block nbd0: server does not support multiple connections per device. [ 66.906210][ T5848] block nbd0: shutting down sockets [ 66.911523][ T5760] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.920819][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 67.015734][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 67.141821][ T5760] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.186283][ T5760] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.210668][ T5760] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.220797][ T5760] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.298543][ T5758] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.310999][ T5758] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.350607][ T5758] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.361533][ T5758] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.373906][ T5758] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.385632][ T5758] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.398463][ T5758] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.409151][ T5851] warning: `syz.0.5' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 67.470108][ T5758] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.502980][ T5758] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.539336][ T5758] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.552146][ T5758] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.565288][ T5758] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.576147][ T5758] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.587922][ T5758] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.655555][ T5758] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.674064][ T5758] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.693395][ T5758] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.702555][ T5758] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.822858][ T5081] Bluetooth: hci3: command tx timeout [ 67.828937][ T5081] Bluetooth: hci2: command tx timeout [ 67.903147][ T5773] Bluetooth: hci0: command tx timeout [ 67.908596][ T5773] Bluetooth: hci1: command tx timeout [ 68.006667][ T1126] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.021856][ T1126] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.769203][ T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.803528][ T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.568118][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.620191][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.069169][ T5843] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 70.093808][ T5773] Bluetooth: hci2: command tx timeout [ 70.099733][ T5773] Bluetooth: hci3: command tx timeout [ 70.108041][ T5773] Bluetooth: hci1: command tx timeout [ 70.242185][ T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.370231][ T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.463256][ T5843] usb 1-1: Using ep0 maxpacket: 8 [ 70.509126][ T5843] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 70.549485][ T5843] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 70.666595][ T5843] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 70.848397][ T5843] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 71.022220][ T5883] block nbd0: server does not support multiple connections per device. [ 71.032195][ T5883] block nbd0: shutting down sockets [ 71.054390][ T5843] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 71.186671][ T5843] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 71.674649][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.684496][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.719797][ T5887] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 71.731037][ T5843] usb 1-1: GET_CAPABILITIES returned 0 [ 71.737272][ T5843] usbtmc 1-1:16.0: can't read capabilities [ 71.844778][ T5889] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 71.983215][ T5844] usb 1-1: USB disconnect, device number 2 [ 72.193862][ T5904] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 72.437762][ T5911] 9pnet_virtio: no channels available for device syz [ 72.615542][ T5915] netlink: 4 bytes leftover after parsing attributes in process `syz.2.19'. [ 72.966848][ T5924] netlink: 16 bytes leftover after parsing attributes in process `syz.2.23'. [ 73.607718][ T5938] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 74.786018][ T5081] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 74.794663][ T5081] Bluetooth: hci0: Injecting HCI hardware error event [ 74.803408][ T5773] Bluetooth: hci0: hardware error 0x00 [ 75.007719][ T5946] syzkaller0: entered promiscuous mode [ 75.016321][ T5946] syzkaller0: entered allmulticast mode [ 75.046795][ T27] audit: type=1326 audit(1765385532.755:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5947 comm="syz.2.32" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e9a98f749 code=0x7ffc0000 [ 75.068884][ T27] audit: type=1326 audit(1765385532.755:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5947 comm="syz.2.32" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e9a98f749 code=0x7ffc0000 [ 75.111375][ T27] audit: type=1326 audit(1765385532.765:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5947 comm="syz.2.32" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f2e9a98f749 code=0x7ffc0000 [ 75.158614][ T27] audit: type=1326 audit(1765385532.765:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5947 comm="syz.2.32" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e9a98f749 code=0x7ffc0000 [ 75.804523][ T27] audit: type=1326 audit(1765385532.765:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5947 comm="syz.2.32" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e9a98f749 code=0x7ffc0000 [ 76.044605][ T27] audit: type=1326 audit(1765385532.775:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5947 comm="syz.2.32" exe="/root/syz-executor" sig=0 arch=c000003e syscall=94 compat=0 ip=0x7f2e9a98f749 code=0x7ffc0000 [ 76.069571][ T27] audit: type=1326 audit(1765385532.775:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5947 comm="syz.2.32" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e9a98f749 code=0x7ffc0000 [ 76.351940][ T5962] netlink: 'syz.3.37': attribute type 4 has an invalid length. [ 76.434273][ T5964] netlink: 44 bytes leftover after parsing attributes in process `syz.1.36'. [ 76.452357][ T5964] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.461128][ T5964] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.022723][ T5773] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 77.049743][ T5967] IPVS: set_ctl: invalid protocol: 47 127.0.0.1:20004 [ 77.592736][ T9] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 77.814943][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 77.837766][ T9] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 77.859872][ T9] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 77.882703][ T9] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 77.892809][ T9] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 77.906212][ T9] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 77.915370][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 78.163623][ T9] usb 1-1: GET_CAPABILITIES returned 0 [ 78.189535][ T9] usbtmc 1-1:16.0: can't read capabilities [ 78.603621][ C0] usbtmc 1-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 78.724747][ T5972] usbtmc 1-1:16.0: Unable to send data, error -71 [ 79.039565][ T5826] usb 1-1: USB disconnect, device number 3 [ 79.111975][ T5980] syz.1.43 (5980) used greatest stack depth: 20488 bytes left [ 80.909830][ T6005] Bluetooth: MGMT ver 1.22 [ 81.021662][ T6008] netlink: 'syz.2.50': attribute type 4 has an invalid length. [ 81.132732][ T5812] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 81.299914][ T6016] capability: warning: `syz.2.55' uses deprecated v2 capabilities in a way that may be insecure [ 81.408443][ T5812] usb 2-1: too many configurations: 9, using maximum allowed: 8 [ 81.510441][ T5812] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 81.528388][ T5812] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 81.554941][ T5812] usb 2-1: config 0 interface 0 has no altsetting 0 [ 81.571520][ T5812] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 81.583436][ T5812] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 81.622058][ T5812] usb 2-1: config 0 interface 0 has no altsetting 0 [ 81.643479][ T5812] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 81.724446][ T6025] tipc: Can't bind to reserved service type 0 [ 82.572743][ T5812] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 82.599506][ T5812] usb 2-1: config 0 interface 0 has no altsetting 0 [ 82.616251][ T5812] usb 2-1: unable to read config index 3 descriptor/start: -71 [ 82.623648][ T1204] cfg80211: failed to load regulatory.db [ 82.625981][ T5812] usb 2-1: can't read configurations, error -71 [ 83.030828][ T6029] syz.1.58[6029]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 83.109879][ T6029] process 'syz.1.58' launched '/dev/fd/9' with NULL argv: empty string added [ 83.540628][ T6034] netlink: 24 bytes leftover after parsing attributes in process `syz.2.59'. [ 83.656317][ T6036] kernel profiling enabled (shift: 0) [ 83.776341][ T6038] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4) [ 83.783105][ T6038] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 83.870493][ T6038] vhci_hcd vhci_hcd.0: Device attached [ 84.132775][ T5844] usb 33-1: new low-speed USB device number 2 using vhci_hcd [ 84.452227][ T6039] vhci_hcd: connection reset by peer [ 84.474812][ T59] vhci_hcd: stop threads [ 84.479629][ T59] vhci_hcd: release socket [ 84.494545][ T59] vhci_hcd: disconnect device [ 85.139249][ T6048] netlink: 4 bytes leftover after parsing attributes in process `syz.1.63'. [ 85.150218][ T6048] bridge_slave_1: left allmulticast mode [ 85.173723][ T6048] bridge_slave_1: left promiscuous mode [ 85.197618][ T6048] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.216068][ T6048] bridge_slave_0: left allmulticast mode [ 85.229194][ T6048] bridge_slave_0: left promiscuous mode [ 85.241897][ T6048] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.547951][ T6053] netlink: 32 bytes leftover after parsing attributes in process `syz.1.65'. [ 85.589932][ T6054] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 86.251512][ T6055] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 86.589545][ T8] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 87.852818][ T8] usb 3-1: Using ep0 maxpacket: 8 [ 87.945779][ T8] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 87.998701][ T8] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 88.019524][ T8] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 88.060082][ T8] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 88.111941][ T8] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 88.132797][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.358872][ T8] usb 3-1: GET_CAPABILITIES returned 0 [ 88.372903][ T8] usbtmc 3-1:16.0: can't read capabilities [ 88.600254][ T8] usb 3-1: USB disconnect, device number 2 [ 89.672983][ T5844] vhci_hcd: vhci_device speed not set [ 91.062031][ T6089] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8) [ 91.068592][ T6089] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 91.076735][ T6089] vhci_hcd vhci_hcd.0: Device attached [ 91.451672][ T6090] vhci_hcd: connection closed [ 91.581297][ T11] vhci_hcd: stop threads [ 91.638173][ T788] usb 39-1: new high-speed USB device number 2 using vhci_hcd [ 91.698657][ T11] vhci_hcd: release socket [ 91.749953][ T11] vhci_hcd: disconnect device [ 92.423598][ T5799] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 95.033761][ T5799] usb 1-1: Using ep0 maxpacket: 8 [ 96.863704][ T788] vhci_hcd: vhci_device speed not set [ 96.940653][ T5799] usb 1-1: device descriptor read/all, error -71 [ 98.104529][ T6116] input: syz1 as /devices/virtual/input/input7 [ 101.746887][ T6142] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 101.826146][ T6146] syz.3.92 uses obsolete (PF_INET,SOCK_PACKET) [ 103.115429][ T6165] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 103.748971][ T6185] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 106.973120][ T6207] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 111.242363][ T6172] Set syz1 is full, maxelem 65536 reached [ 111.379478][ T6232] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 112.080825][ T6243] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.098065][ T6243] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.289436][ T6244] netlink: 'syz.2.117': attribute type 16 has an invalid length. [ 112.311865][ T6244] netlink: 'syz.2.117': attribute type 17 has an invalid length. [ 112.483932][ T6244] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 112.846971][ T6250] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 114.767657][ T6332] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.908991][ T6332] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.022274][ T6332] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.122541][ T6338] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 115.140940][ T6332] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.159137][ T6346] NILFS (nbd0): device size too small [ 116.411972][ T5081] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 116.421037][ T5081] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 116.443104][ T5081] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 116.454658][ T5081] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 116.462261][ T5081] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 116.473694][ T5081] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 116.599404][ T6362] Zero length message leads to an empty skb [ 117.028896][ T6353] chnl_net:caif_netlink_parms(): no params data found [ 117.825301][ T6353] bridge0: port 1(bridge_slave_0) entered blocking state [ 117.838751][ T6353] bridge0: port 1(bridge_slave_0) entered disabled state [ 117.858908][ T6353] bridge_slave_0: entered allmulticast mode [ 117.877473][ T6353] bridge_slave_0: entered promiscuous mode [ 117.917887][ T6376] macvtap1: entered promiscuous mode [ 117.929948][ T6376] macvtap1: entered allmulticast mode [ 117.945400][ T6376] veth1_vlan: entered allmulticast mode [ 117.995991][ T6353] bridge0: port 2(bridge_slave_1) entered blocking state [ 118.003520][ T6353] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.013773][ T6353] bridge_slave_1: entered allmulticast mode [ 118.022868][ T6353] bridge_slave_1: entered promiscuous mode [ 118.065576][ T6377] macvtap2: entered promiscuous mode [ 118.072911][ T6377] macvtap2: entered allmulticast mode [ 118.209357][ T6353] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 118.307304][ T6332] hsr_slave_0: left promiscuous mode [ 118.378603][ T6332] hsr_slave_1: left promiscuous mode [ 118.389487][ T6332] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 118.403011][ T6332] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 118.411689][ T6332] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 118.422477][ T6379] Bluetooth: MGMT ver 1.22 [ 118.428510][ T6332] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 118.440527][ T6332] bridge_slave_1: left allmulticast mode [ 118.448369][ T6332] bridge_slave_1: left promiscuous mode [ 118.464666][ T6332] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.500091][ T6382] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8) [ 118.506620][ T6382] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 118.514402][ T6382] vhci_hcd vhci_hcd.0: Device attached [ 118.540742][ T6332] bridge_slave_0: left allmulticast mode [ 118.546845][ T6332] bridge_slave_0: left promiscuous mode [ 118.552545][ T6332] bridge0: port 1(bridge_slave_0) entered disabled state [ 118.560748][ T5081] Bluetooth: hci0: command tx timeout [ 118.571566][ T6386] Bluetooth: hci4: received HCILL_GO_TO_SLEEP_ACK in state 2 [ 118.626561][ T6332] veth1_macvtap: left promiscuous mode [ 118.633332][ T6332] veth0_macvtap: left promiscuous mode [ 118.640078][ T6332] veth1_vlan: left promiscuous mode [ 118.647695][ T6332] veth0_vlan: left promiscuous mode [ 118.792830][ T8] usb 35-1: new high-speed USB device number 2 using vhci_hcd [ 119.103757][ T42] wlan0: Trigger new scan to find an IBSS to join [ 119.395765][ T6332] team0 (unregistering): Port device team_slave_1 removed [ 119.460486][ T6332] team0 (unregistering): Port device team_slave_0 removed [ 119.524707][ T6332] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 119.623638][ T6332] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 119.752716][ T6384] vhci_hcd: connection reset by peer [ 119.771160][ T6310] vhci_hcd: stop threads [ 119.777090][ T6310] vhci_hcd: release socket [ 119.789091][ T6310] vhci_hcd: disconnect device [ 120.545611][ T5081] Bluetooth: hci4: command 0x1003 tx timeout [ 120.555832][ T5773] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 120.589598][ T6391] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 120.623789][ T5767] Bluetooth: hci0: command tx timeout [ 120.696700][ T6332] bond0 (unregistering): Released all slaves [ 120.797478][ T6353] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 120.892504][ T6353] team0: Port device team_slave_0 added [ 120.922036][ T6353] team0: Port device team_slave_1 added [ 124.552849][ T5767] Bluetooth: hci0: command tx timeout [ 124.594098][ T6305] wlan0: Trigger new scan to find an IBSS to join [ 124.650880][ T6353] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 124.682854][ T6353] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 124.758367][ T6353] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 124.834901][ T8] vhci_hcd: vhci_device speed not set [ 124.927360][ T6406] veth1_vlan (unregistering): left allmulticast mode [ 125.251092][ T6353] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 125.266673][ T6353] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 125.488080][ T6353] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 125.785883][ T6323] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 125.922165][ T6422] netlink: 8 bytes leftover after parsing attributes in process `syz.2.152'. [ 126.363354][ T6425] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 126.369891][ T6425] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 126.377582][ T6425] vhci_hcd vhci_hcd.0: Device attached [ 127.003951][ T8] usb 33-1: new high-speed USB device number 3 using vhci_hcd [ 127.011505][ T5767] Bluetooth: hci0: command tx timeout [ 127.500763][ T6422] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 127.526928][ T6422] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 127.674965][ T6426] vhci_hcd: connection reset by peer [ 127.687711][ T11] vhci_hcd: stop threads [ 127.691986][ T11] vhci_hcd: release socket [ 127.705067][ T11] vhci_hcd: disconnect device [ 127.895071][ T6422] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.904732][ T6422] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.914039][ T6422] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.923389][ T6422] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.150734][ T6437] nbd0: detected capacity change from 0 to 8589934655 [ 128.187211][ T6353] hsr_slave_0: entered promiscuous mode [ 128.195740][ T6353] hsr_slave_1: entered promiscuous mode [ 128.201735][ T6353] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 128.215412][ T6353] Cannot create hsr debugfs directory [ 129.331447][ T6353] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 129.355161][ T5767] block nbd0: Receive control failed (result -104) [ 129.380040][ T6449] netlink: 8 bytes leftover after parsing attributes in process `syz.2.159'. [ 129.415098][ T6353] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 129.453034][ T6353] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 129.489474][ T6353] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 129.866684][ T6353] 8021q: adding VLAN 0 to HW filter on device bond0 [ 129.920677][ T6353] 8021q: adding VLAN 0 to HW filter on device team0 [ 129.965832][ T6323] bridge0: port 1(bridge_slave_0) entered blocking state [ 129.972939][ T6323] bridge0: port 1(bridge_slave_0) entered forwarding state [ 130.064249][ T6310] bridge0: port 2(bridge_slave_1) entered blocking state [ 130.071356][ T6310] bridge0: port 2(bridge_slave_1) entered forwarding state [ 130.300520][ T6353] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 131.729217][ T6475] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8) [ 131.735751][ T6475] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 131.744145][ T6475] vhci_hcd vhci_hcd.0: Device attached [ 132.012789][ T788] usb 35-1: new high-speed USB device number 3 using vhci_hcd [ 132.142734][ T8] vhci_hcd: vhci_device speed not set [ 132.880228][ T6353] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 133.025980][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.032796][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.092657][ T6477] vhci_hcd: connection reset by peer [ 133.101376][ T6323] vhci_hcd: stop threads [ 133.136488][ T6323] vhci_hcd: release socket [ 133.141021][ T6323] vhci_hcd: disconnect device [ 133.455242][ T6353] veth0_vlan: entered promiscuous mode [ 133.470744][ T6353] veth1_vlan: entered promiscuous mode [ 133.546134][ T6353] veth0_macvtap: entered promiscuous mode [ 133.558053][ T6353] veth1_macvtap: entered promiscuous mode [ 133.597998][ T6353] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 133.614268][ T6353] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.624919][ T6353] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 133.636521][ T6353] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.659128][ T6353] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 133.714005][ T6353] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 133.749255][ T6353] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.779150][ T6353] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 133.812746][ T6353] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.844656][ T6353] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 133.865058][ T6353] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.165291][ T6353] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.334875][ T6353] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.362734][ T6353] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.575967][ T6511] syz.0.173 (6511) used greatest stack depth: 17392 bytes left [ 134.598757][ T6514] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 134.649046][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 134.686355][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 134.725738][ T27] audit: type=1326 audit(1765385592.435:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6503 comm="syz.2.170" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2e9a98f749 code=0x0 [ 135.715446][ T6317] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 135.834075][ T6317] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 136.087852][ T6530] 9pnet_virtio: no channels available for device syz [ 136.723894][ T6541] netlink: 64 bytes leftover after parsing attributes in process `syz.4.179'. [ 136.783374][ T6545] netlink: 20 bytes leftover after parsing attributes in process `syz.1.181'. [ 137.322739][ T788] vhci_hcd: vhci_device speed not set [ 137.645731][ T6544] [U]  [ 137.731396][ T6541] bridge0: port 2(bridge_slave_1) entered disabled state [ 137.738905][ T6541] bridge0: port 1(bridge_slave_0) entered disabled state [ 139.172638][ C1] sched: RT throttling activated [ 142.694500][ T6605] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 143.114107][ T6618] netlink: 64 bytes leftover after parsing attributes in process `syz.1.199'. [ 143.209135][ T6624] syz_tun: entered allmulticast mode [ 143.702746][ T28] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 143.913049][ T28] usb 1-1: Using ep0 maxpacket: 8 [ 143.923457][ T28] usb 1-1: unable to get BOS descriptor or descriptor too short [ 143.945633][ T28] usb 1-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 143.954995][ T28] usb 1-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 143.982886][ T28] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 143.997719][ T28] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 144.006952][ T28] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.020120][ T28] usb 1-1: Product: syz [ 144.033589][ T28] usb 1-1: Manufacturer: syz [ 144.049770][ T28] usb 1-1: SerialNumber: syz [ 144.275628][ T6629] netlink: 8 bytes leftover after parsing attributes in process `syz.0.205'. [ 144.371284][ T28] usb 1-1: 0:2 : does not exist [ 144.501698][ T28] usb 1-1: USB disconnect, device number 6 [ 144.590778][ T6632] udevd[6632]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 146.062851][ T6648] netlink: 20 bytes leftover after parsing attributes in process `syz.2.210'. [ 146.992569][ T6647] [U]  [ 147.379033][ T6654] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 147.591240][ T6655] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 147.898510][ T6665] 9pnet_virtio: no channels available for device syz [ 148.030388][ T6669] ubi31: attaching mtd0 [ 148.048555][ T6669] ubi31: scanning is finished [ 148.053578][ T6669] ubi31: empty MTD device detected [ 148.156810][ T6670] netlink: 12 bytes leftover after parsing attributes in process `syz.2.216'. [ 148.783406][ T6669] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 148.790971][ T6669] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 148.852844][ T6669] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 148.913937][ T6669] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 148.921414][ T6669] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 149.088125][ T6669] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 149.546661][ T6669] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 2601580575 [ 149.893172][ T6669] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 150.007731][ T6672] ubi31: background thread "ubi_bgt31d" started, PID 6672 [ 150.339343][ T6678] overlay: Unknown parameter '/' [ 153.454095][ T6696] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 154.223011][ T8] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 155.513324][ T8] usb 1-1: Using ep0 maxpacket: 32 [ 158.545147][ T1204] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 158.628424][ T6301] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 158.637312][ T10] block nbd0: Possible stuck request ffff888021cb8000: control (read@0,4096B). Runtime 30 seconds [ 158.802826][ T1204] usb 5-1: Using ep0 maxpacket: 8 [ 158.830772][ T1204] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 158.888447][ T1204] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 158.912014][ T1204] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 158.925735][ T1204] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 158.941303][ T8] usb 1-1: unable to get BOS descriptor or descriptor too short [ 158.950275][ T1204] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 158.960601][ T1204] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 158.969159][ T8] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 158.981568][ T8] usb 1-1: can't read configurations, error -71 [ 159.358971][ T6758] netlink: 'syz.2.233': attribute type 1 has an invalid length. [ 159.391261][ T6758] 8021q: adding VLAN 0 to HW filter on device bond1 [ 159.414006][ T1204] usb 5-1: GET_CAPABILITIES returned 0 [ 159.429356][ T1204] usbtmc 5-1:16.0: can't read capabilities [ 159.627604][ T6765] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 159.641159][ T1204] usb 5-1: USB disconnect, device number 2 [ 160.628875][ T6779] netlink: 8 bytes leftover after parsing attributes in process `syz.0.238'. [ 161.777647][ T6779] bridge0: port 2(bridge_slave_1) entered disabled state [ 161.785343][ T6779] bridge0: port 1(bridge_slave_0) entered disabled state [ 162.470269][ T6796] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 162.844429][ T6779] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 162.878077][ T6779] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 163.155373][ T6779] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.175252][ T6779] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.185085][ T6779] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.203137][ T6779] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.851096][ T6805] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 164.063733][ T6809] nbd1: detected capacity change from 0 to 8589934655 [ 164.210424][ T6814] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8) [ 164.216970][ T6814] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 164.435125][ T6814] vhci_hcd vhci_hcd.0: Device attached [ 164.707291][ T6821] ubi: mtd0 is already attached to ubi31 [ 164.748933][ T8] usb 37-1: new high-speed USB device number 2 using vhci_hcd [ 164.763314][ T6821] netlink: 12 bytes leftover after parsing attributes in process `syz.1.248'. [ 166.447387][ T6815] vhci_hcd: connection reset by peer [ 166.542683][ T6321] vhci_hcd: stop threads [ 166.546974][ T6321] vhci_hcd: release socket [ 166.565269][ T6321] vhci_hcd: disconnect device [ 168.486574][ T6832] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 168.493515][ T6832] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 168.520084][ T6832] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 168.558184][ T6832] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 168.590861][ T6832] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 168.598529][ T6832] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 168.609240][ T6832] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 168.616645][ T6832] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 168.625259][ T6832] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 168.637574][ T5081] Bluetooth: hci0: Opcode 0x1407 failed: -112 [ 168.644598][ T6832] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 168.650672][ T6832] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 168.658783][ T6832] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 168.735917][ T5767] block nbd1: Receive control failed (result -104) [ 168.851084][ T6846] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 169.589436][ T6853] 9pnet_virtio: no channels available for device syz [ 170.002933][ T8] vhci_hcd: vhci_device speed not set [ 170.086990][ T6873] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 170.543583][ T5767] Bluetooth: hci1: command 0x0c1a tx timeout [ 170.622735][ T5767] Bluetooth: hci3: command 0x0c1a tx timeout [ 170.622813][ T5773] Bluetooth: hci2: command 0x0c1a tx timeout [ 170.687758][ T6882] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 170.702826][ T5081] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 170.712298][ T5081] Bluetooth: hci0: command 0x1407 tx timeout [ 170.809156][ T6882] netlink: set zone limit has 8 unknown bytes [ 172.249344][ T6890] Illegal XDP return value 514 on prog (id 30) dev syzkaller1, expect packet loss! [ 172.512698][ T5844] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 172.632751][ T5081] Bluetooth: hci1: command 0x0c1a tx timeout [ 172.692829][ T5844] usb 2-1: Using ep0 maxpacket: 32 [ 172.702731][ T5081] Bluetooth: hci3: command 0x0c1a tx timeout [ 172.708791][ T5773] Bluetooth: hci2: command 0x0c1a tx timeout [ 172.719930][ T5844] usb 2-1: config 0 has an invalid interface number: 19 but max is 0 [ 172.730793][ T5844] usb 2-1: config 0 has no interface number 0 [ 172.744792][ T5844] usb 2-1: config 0 interface 19 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 16 [ 172.782961][ T5081] Bluetooth: hci0: command 0x1407 tx timeout [ 172.791505][ T5844] usb 2-1: New USB device found, idVendor=04a4, idProduct=0014, bcdDevice=c9.57 [ 172.803371][ T5844] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 172.811894][ T5844] usb 2-1: Product: syz [ 172.816357][ T5844] usb 2-1: Manufacturer: syz [ 172.825443][ T5844] usb 2-1: SerialNumber: syz [ 172.834751][ T5844] usb 2-1: config 0 descriptor?? [ 172.840549][ T6892] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 173.061031][ T5844] usb 2-1: USB disconnect, device number 4 [ 173.298159][ T6903] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 174.476924][ T6906] ubi: mtd0 is already attached to ubi31 [ 174.503071][ T6906] netlink: 12 bytes leftover after parsing attributes in process `syz.0.277'. [ 174.519840][ T6913] lo speed is unknown, defaulting to 1000 [ 174.529837][ T6913] lo speed is unknown, defaulting to 1000 [ 174.546027][ T6913] lo speed is unknown, defaulting to 1000 [ 174.556914][ T6913] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 174.702858][ T5081] Bluetooth: hci1: command 0x0c1a tx timeout [ 174.783160][ T5081] Bluetooth: hci3: command 0x0c1a tx timeout [ 174.789443][ T5081] Bluetooth: hci2: command 0x0c1a tx timeout [ 174.862696][ T5773] Bluetooth: hci0: command 0x1407 tx timeout [ 176.087397][ T6913] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 176.125905][ T6913] lo speed is unknown, defaulting to 1000 [ 176.135937][ T6913] lo speed is unknown, defaulting to 1000 [ 176.146692][ T6913] lo speed is unknown, defaulting to 1000 [ 176.417166][ T6913] lo speed is unknown, defaulting to 1000 [ 179.094290][ T6953] netlink: 4 bytes leftover after parsing attributes in process `syz.1.289'. [ 185.742933][ T5799] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 186.067435][ T5799] usb 5-1: New USB device found, idVendor=0830, idProduct=0060, bcdDevice=13.2b [ 186.101098][ T5799] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 186.136180][ T5799] usb 5-1: Product: syz [ 186.140383][ T5799] usb 5-1: Manufacturer: syz [ 186.153064][ T5799] usb 5-1: SerialNumber: syz [ 186.501654][ T5799] usb 5-1: palm_os_4_probe - error -110 getting connection info [ 186.532256][ T5799] visor 5-1:1.0: Handspring Visor / Palm OS converter detected [ 186.917041][ T5799] usb 5-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 187.034969][ T5799] usb 5-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 187.048249][ T7017] netlink: 4 bytes leftover after parsing attributes in process `syz.1.310'. [ 187.522988][ T788] usb 5-1: USB disconnect, device number 3 [ 187.539055][ T788] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 187.556912][ T788] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 188.718746][ T5847] block nbd0: Possible stuck request ffff888021cb8000: control (read@0,4096B). Runtime 60 seconds [ 188.746430][ T788] visor 5-1:1.0: device disconnected [ 190.950174][ T7078] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 192.247410][ T7088] netlink: 20 bytes leftover after parsing attributes in process `syz.4.326'. [ 192.526533][ T7089] [U]  [ 192.947102][ T7093] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 193.433523][ T7093] ksmbd: Unknown IPC event: 6, ignore. [ 194.465794][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.472162][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.479577][ T24] block nbd1: Possible stuck request ffff888021d38000: control (read@0,4096B). Runtime 30 seconds [ 195.254272][ T7112] netlink: 20 bytes leftover after parsing attributes in process `syz.1.335'. [ 196.804612][ T7115] [U]  [ 197.079606][ T7128] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 197.129272][ T7114] mmap: syz.4.334 (7114) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 197.701834][ T7141] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 202.042664][ T5844] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 202.232800][ T5844] usb 1-1: Using ep0 maxpacket: 32 [ 202.248715][ T5844] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 202.277295][ T5844] usb 1-1: config 0 has no interface number 0 [ 202.319309][ T5844] usb 1-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 202.350171][ T5844] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 202.388484][ T5844] usb 1-1: Product: syz [ 202.406129][ T5844] usb 1-1: Manufacturer: syz [ 202.423562][ T5844] usb 1-1: SerialNumber: syz [ 202.442047][ T5844] usb 1-1: config 0 descriptor?? [ 202.453010][ T7175] netlink: 20 bytes leftover after parsing attributes in process `syz.2.350'. [ 202.464768][ T5844] usb 1-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 202.477646][ T5844] usb 1-1: selecting invalid altsetting 1 [ 202.484051][ T5844] usb 1-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 202.535194][ T5844] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 202.573238][ T5844] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 202.633253][ T5844] usb 1-1: media controller created [ 202.856733][ T5844] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 202.915049][ T5844] usb 1-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 202.928614][ T5844] zl10353_read_register: readreg error (reg=127, ret==-71) [ 202.951994][ T5844] usb 1-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 202.960346][ T7174] [U]  [ 203.142950][ T5844] usb 1-1: USB disconnect, device number 9 [ 208.458992][ T27] audit: type=1326 audit(1765385666.125:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7213 comm="syz.0.361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51e4f8f749 code=0x7ffc0000 [ 209.295045][ T27] audit: type=1326 audit(1765385666.135:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7213 comm="syz.0.361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51e4f8f749 code=0x7ffc0000 [ 209.376461][ T27] audit: type=1326 audit(1765385666.165:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7213 comm="syz.0.361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f51e4f8f749 code=0x7ffc0000 [ 209.424957][ T27] audit: type=1326 audit(1765385666.195:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7213 comm="syz.0.361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51e4f8f749 code=0x7ffc0000 [ 209.471463][ T27] audit: type=1326 audit(1765385666.195:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7213 comm="syz.0.361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51e4f8f749 code=0x7ffc0000 [ 209.513981][ T27] audit: type=1326 audit(1765385666.195:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7213 comm="syz.0.361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=300 compat=0 ip=0x7f51e4f8f749 code=0x7ffc0000 [ 209.550444][ T27] audit: type=1326 audit(1765385666.205:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7213 comm="syz.0.361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51e4f8f749 code=0x7ffc0000 [ 209.594570][ T27] audit: type=1326 audit(1765385666.205:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7213 comm="syz.0.361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51e4f8f749 code=0x7ffc0000 [ 209.637934][ T27] audit: type=1326 audit(1765385666.205:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7213 comm="syz.0.361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f51e4f8f749 code=0x7ffc0000 [ 209.692698][ T27] audit: type=1326 audit(1765385666.205:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7213 comm="syz.0.361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51e4f8f749 code=0x7ffc0000 [ 210.027076][ T7226] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 211.613049][ T7247] netlink: 168 bytes leftover after parsing attributes in process `syz.4.375'. [ 211.675562][ T7247] C: renamed from team_slave_0 (while UP) [ 211.724058][ T1204] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 211.859098][ T5773] Bluetooth: hci2: unexpected event for opcode 0x2040 [ 211.934101][ T1204] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 211.989026][ T1204] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 212.023584][ T1204] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 212.053666][ T7260] lo speed is unknown, defaulting to 1000 [ 212.059578][ T7260] lo speed is unknown, defaulting to 1000 [ 212.067389][ T1204] usb 2-1: config 0 descriptor?? [ 212.078971][ T7261] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 212.093317][ T7260] lo speed is unknown, defaulting to 1000 [ 212.114820][ T7260] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 212.147837][ T7260] lo speed is unknown, defaulting to 1000 [ 212.162415][ T7260] lo speed is unknown, defaulting to 1000 [ 212.170839][ T7260] lo speed is unknown, defaulting to 1000 [ 212.181691][ T7260] lo speed is unknown, defaulting to 1000 [ 212.288242][ T1204] usbhid 2-1:0.0: can't add hid device: -71 [ 212.296088][ T1204] usbhid: probe of 2-1:0.0 failed with error -71 [ 212.306724][ T1204] usb 2-1: USB disconnect, device number 5 [ 213.477448][ T7279] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7) [ 213.482834][ T1204] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 213.483965][ T7279] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 213.520705][ T7279] vhci_hcd vhci_hcd.0: Device attached [ 213.604642][ T7280] vhci_hcd: connection closed [ 213.617502][ T6332] vhci_hcd: stop threads [ 213.647209][ T6332] vhci_hcd: release socket [ 213.658672][ T6332] vhci_hcd: disconnect device [ 213.702714][ T1204] usb 2-1: Using ep0 maxpacket: 32 [ 213.712940][ T5799] vhci_hcd: vhci_device speed not set [ 213.729987][ T1204] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 213.747573][ T1204] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 213.757337][ T1204] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 213.777822][ T1204] usb 2-1: config 0 descriptor?? [ 213.793670][ T1204] ldusb 2-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 213.820385][ T1204] ldusb 2-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 213.991514][ T7291] netlink: 8 bytes leftover after parsing attributes in process `syz.0.390'. [ 214.211929][ T7294] siw: device registration error -23 [ 214.268659][ T5844] usb 2-1: USB disconnect, device number 6 [ 214.298349][ T5844] ldusb 2-1:0.0: LD USB Device #0 now disconnected [ 214.360308][ T7295] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 214.613074][ T7298] netlink: 'syz.0.394': attribute type 10 has an invalid length. [ 214.627801][ T7298] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 216.005561][ T5773] Bluetooth: hci3: unexpected event for opcode 0x041c [ 216.092082][ T7323] ALSA: mixer_oss: invalid OSS volume '' [ 216.169362][ T7324] netlink: 8 bytes leftover after parsing attributes in process `syz.4.401'. [ 216.392939][ T7323] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8) [ 216.399490][ T7323] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 216.480382][ T7323] vhci_hcd vhci_hcd.0: Device attached [ 216.922689][ T5844] usb 35-1: new high-speed USB device number 4 using vhci_hcd [ 217.279668][ T7327] vhci_hcd: connection reset by peer [ 217.285777][ T6301] vhci_hcd: stop threads [ 217.290099][ T6301] vhci_hcd: release socket [ 217.297102][ T6301] vhci_hcd: disconnect device [ 217.422452][ T7340] comedi comedi0: c6xdigio: I/O port conflict (0x3,3) [ 217.433095][ T7340] ------------[ cut here ]------------ [ 217.438837][ T7340] Unexpected driver unregister! [ 217.449093][ T7340] WARNING: CPU: 0 PID: 7340 at drivers/base/driver.c:270 driver_unregister+0x92/0xa0 [ 217.458936][ T7340] Modules linked in: [ 217.463038][ T7340] CPU: 0 PID: 7340 Comm: syz.2.408 Not tainted syzkaller #0 [ 217.470333][ T7340] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 217.480467][ T7340] RIP: 0010:driver_unregister+0x92/0xa0 [ 217.486090][ T7340] Code: e8 83 cb da fc 48 89 df 5b 41 5e 41 5f e9 e6 5a ff ff e8 81 28 4d fc eb 05 e8 7a 28 4d fc 48 c7 c7 e0 1a 21 8b e8 9e a4 17 fc <0f> 0b 5b 41 5e 41 5f c3 cc cc cc cc cc cc 66 0f 1f 00 41 57 41 56 [ 217.506039][ T7340] RSP: 0018:ffffc90010517a60 EFLAGS: 00010246 [ 217.512140][ T7340] RAX: 8295567aab013f00 RBX: ffffffff8de9b500 RCX: 0000000000080000 [ 217.520192][ T7340] RDX: ffffc9000d47a000 RSI: 0000000000011596 RDI: 0000000000011597 [ 217.528217][ T7340] RBP: 0000000000000001 R08: ffffc90010517767 R09: 1ffff920020a2eec [ 217.536319][ T7340] R10: dffffc0000000000 R11: fffff520020a2eed R12: ffff88814c28a038 [ 217.544490][ T7340] R13: ffffffff8de9b450 R14: 0000000000000000 R15: dffffc0000000000 [ 217.552480][ T7340] FS: 00007f2e98bf66c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 217.561459][ T7340] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 217.568140][ T7340] CR2: 0000001b34b23ffc CR3: 000000002dd30000 CR4: 00000000003506f0 [ 217.576156][ T7340] Call Trace: [ 217.579452][ T7340] [ 217.582386][ T7340] comedi_device_detach_locked+0x172/0x710 [ 217.588283][ T7340] comedi_device_attach+0x5cd/0x710 [ 217.593569][ T7340] comedi_unlocked_ioctl+0x606/0xfe0 [ 217.598862][ T7340] ? tomoyo_path_number_perm+0x477/0x590 [ 217.604571][ T7340] ? comedi_poll+0x8c0/0x8c0 [ 217.609214][ T7340] ? __fget_files+0x28/0x4d0 [ 217.613907][ T7340] ? bpf_lsm_file_ioctl+0x9/0x10 [ 217.618863][ T7340] ? security_file_ioctl+0x80/0xa0 [ 217.624059][ T7340] ? comedi_poll+0x8c0/0x8c0 [ 217.628667][ T7340] __se_sys_ioctl+0xfd/0x170 [ 217.633274][ T7340] do_syscall_64+0x55/0xb0 [ 217.637681][ T7340] ? clear_bhb_loop+0x40/0x90 [ 217.642348][ T7340] ? clear_bhb_loop+0x40/0x90 [ 217.647134][ T7340] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 217.653040][ T7340] RIP: 0033:0x7f2e9a98f749 [ 217.657462][ T7340] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 217.677305][ T7340] RSP: 002b:00007f2e98bf6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 217.685887][ T7340] RAX: ffffffffffffffda RBX: 00007f2e9abe5fa0 RCX: 00007f2e9a98f749 [ 217.693869][ T7340] RDX: 0000200000000140 RSI: 0000000040946400 RDI: 0000000000000003 [ 217.701824][ T7340] RBP: 00007f2e9aa13f91 R08: 0000000000000000 R09: 0000000000000000 [ 217.709810][ T7340] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 217.717807][ T7340] R13: 00007f2e9abe6038 R14: 00007f2e9abe5fa0 R15: 00007ffe0900caf8 [ 217.725808][ T7340] [ 217.728818][ T7340] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 217.736079][ T7340] CPU: 0 PID: 7340 Comm: syz.2.408 Not tainted syzkaller #0 [ 217.743358][ T7340] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 217.753406][ T7340] Call Trace: [ 217.756698][ T7340] [ 217.759626][ T7340] dump_stack_lvl+0x16c/0x230 [ 217.764301][ T7340] ? show_regs_print_info+0x20/0x20 [ 217.769492][ T7340] ? load_image+0x3b0/0x3b0 [ 217.773992][ T7340] panic+0x2c0/0x710 [ 217.777894][ T7340] ? bpf_jit_dump+0xd0/0xd0 [ 217.782399][ T7340] __warn+0x2e0/0x470 [ 217.786372][ T7340] ? driver_unregister+0x92/0xa0 [ 217.791307][ T7340] ? driver_unregister+0x92/0xa0 [ 217.796234][ T7340] report_bug+0x2be/0x4f0 [ 217.800552][ T7340] ? driver_unregister+0x92/0xa0 [ 217.805483][ T7340] ? driver_unregister+0x92/0xa0 [ 217.810402][ T7340] ? driver_unregister+0x94/0xa0 [ 217.815322][ T7340] handle_bug+0xcf/0x120 [ 217.819546][ T7340] exc_invalid_op+0x1a/0x50 [ 217.824035][ T7340] asm_exc_invalid_op+0x1a/0x20 [ 217.828876][ T7340] RIP: 0010:driver_unregister+0x92/0xa0 [ 217.834411][ T7340] Code: e8 83 cb da fc 48 89 df 5b 41 5e 41 5f e9 e6 5a ff ff e8 81 28 4d fc eb 05 e8 7a 28 4d fc 48 c7 c7 e0 1a 21 8b e8 9e a4 17 fc <0f> 0b 5b 41 5e 41 5f c3 cc cc cc cc cc cc 66 0f 1f 00 41 57 41 56 [ 217.854101][ T7340] RSP: 0018:ffffc90010517a60 EFLAGS: 00010246 [ 217.860150][ T7340] RAX: 8295567aab013f00 RBX: ffffffff8de9b500 RCX: 0000000000080000 [ 217.868104][ T7340] RDX: ffffc9000d47a000 RSI: 0000000000011596 RDI: 0000000000011597 [ 217.876059][ T7340] RBP: 0000000000000001 R08: ffffc90010517767 R09: 1ffff920020a2eec [ 217.884012][ T7340] R10: dffffc0000000000 R11: fffff520020a2eed R12: ffff88814c28a038 [ 217.891963][ T7340] R13: ffffffff8de9b450 R14: 0000000000000000 R15: dffffc0000000000 [ 217.899927][ T7340] comedi_device_detach_locked+0x172/0x710 [ 217.905727][ T7340] comedi_device_attach+0x5cd/0x710 [ 217.910909][ T7340] comedi_unlocked_ioctl+0x606/0xfe0 [ 217.916183][ T7340] ? tomoyo_path_number_perm+0x477/0x590 [ 217.921829][ T7340] ? comedi_poll+0x8c0/0x8c0 [ 217.926430][ T7340] ? __fget_files+0x28/0x4d0 [ 217.931010][ T7340] ? bpf_lsm_file_ioctl+0x9/0x10 [ 217.935929][ T7340] ? security_file_ioctl+0x80/0xa0 [ 217.941024][ T7340] ? comedi_poll+0x8c0/0x8c0 [ 217.945598][ T7340] __se_sys_ioctl+0xfd/0x170 [ 217.950175][ T7340] do_syscall_64+0x55/0xb0 [ 217.954571][ T7340] ? clear_bhb_loop+0x40/0x90 [ 217.959233][ T7340] ? clear_bhb_loop+0x40/0x90 [ 217.963890][ T7340] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 217.969767][ T7340] RIP: 0033:0x7f2e9a98f749 [ 217.974168][ T7340] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 217.993758][ T7340] RSP: 002b:00007f2e98bf6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 218.002151][ T7340] RAX: ffffffffffffffda RBX: 00007f2e9abe5fa0 RCX: 00007f2e9a98f749 [ 218.010103][ T7340] RDX: 0000200000000140 RSI: 0000000040946400 RDI: 0000000000000003 [ 218.018053][ T7340] RBP: 00007f2e9aa13f91 R08: 0000000000000000 R09: 0000000000000000 [ 218.026005][ T7340] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 218.033957][ T7340] R13: 00007f2e9abe6038 R14: 00007f2e9abe5fa0 R15: 00007ffe0900caf8 [ 218.041919][ T7340] [ 218.045240][ T7340] Kernel Offset: disabled [ 218.049618][ T7340] Rebooting in 86400 seconds..