last executing test programs: 14m47.499247131s ago: executing program 2 (id=461): bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb7, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x73}, [@ldst={0x4}]}, &(0x7f00000002c0)='GPL\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79}, 0x2a) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() syz_open_dev$usbfs(&(0x7f00000001c0), 0x8, 0x80) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) utimensat(0xffffffffffffff9c, &(0x7f00000003c0)='.\x00', 0x0, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r5, 0x560a, &(0x7f00000006c0)={0x4, 0x0, 0x0, 0x0, 0x132, 0x3}) mount(&(0x7f0000000040)=@nullb, &(0x7f0000000100)='.\x00', &(0x7f0000002280)='vxfs\x00', 0x1000080, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f0000000400)={'ip6gre0\x00', &(0x7f0000000f00)=@ethtool_per_queue_op={0x4b, 0xf, [0x2000f68f, 0x8, 0x9, 0x10001ff, 0x0, 0x4, 0xe97, 0x4, 0x6, 0xecbf, 0xff, 0x101, 0x7, 0x203, 0x3d, 0x5e, 0x1000, 0x1, 0xf557, 0x2, 0x5, 0x7c, 0xce, 0x2, 0xffffff6b, 0xe52c, 0xaa8, 0x80000000, 0x1, 0xe9c4, 0xcd8, 0x6c, 0x6, 0x7, 0xd, 0x7, 0x81, 0x6, 0x6, 0x3, 0x3, 0xfffffffc, 0xfd2, 0x6, 0x8, 0x800, 0xfffff801, 0x2b, 0xa, 0x0, 0x6, 0x8, 0x5, 0x0, 0x6, 0x8, 0x23, 0xff, 0x3, 0x10, 0x3, 0xffffffff, 0x6, 0x6000000, 0xd1, 0xf, 0x4, 0xa, 0x0, 0x3ff, 0x80000000, 0x8000, 0x3, 0x5, 0x2, 0x0, 0x2, 0x9, 0x80, 0x4, 0x2, 0x0, 0xd, 0x6, 0x3, 0x8, 0x10, 0x1, 0xfffffffc, 0x9, 0x7ff, 0x7, 0x2, 0xbde, 0x37, 0x9, 0x4, 0x1, 0x9, 0x6, 0x7fff, 0x1, 0x704, 0x33e4, 0x401, 0x5, 0x7fff, 0x8, 0x100, 0x3, 0xfffffffd, 0x2, 0x6, 0x8, 0x6, 0x7, 0x200, 0x9, 0xe, 0x81, 0x0, 0x4, 0x5, 0x5, 0x8, 0x3, 0x1, 0xfffffffa]}}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) bpf$MAP_CREATE_TAIL_CALL(0x9, &(0x7f0000000380), 0x50) syz_usb_connect$uac1(0x0, 0x98, &(0x7f0000000740)=ANY=[@ANYBLOB="12010002000000406b1d010140000102030109028600030109000702010209240323000303030b052405060109040100000102000009968095f1e9cecb8b04010101010200000724018008021009050109ff03ffc803072501410405000904020000010200000904020101010200000b24020106010b0100000007240101c0020009058209500005080f07250182fe070000000000000000"], &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x6, [{0x11, &(0x7f0000000180)=@string={0x11, 0x3, "5be53b6b34edd09e786ae12e1303f7"}}, {0x1c, &(0x7f00000004c0)=@string={0x1c, 0x3, "3eef7959e340e424949e622d73cbc006bd00d94e5e9fe39fc7a2"}}, {0x5d, &(0x7f0000000440)=@string={0x5d, 0x3, "8254e8c6149498e77bc23809858e7c692a5bc9028b6d60992ec930d911cef6576e356b21ceed6783006f72bc7f069c873503466d0a8ca01c04ababc048ce1da80d44e6cbfb4d80821b1afa2c9d517eed973e0aecc7526782e6912e"}}, {0xc3, &(0x7f0000000800)=@string={0xc3, 0x3, "1865b1d2aef972b7f0337e07c42becb8fae07397fecbe4ef34075bc45b598132dceb2ad0082cfc3f3a226b911437e5414d67b7ff9e53e49d2b304269ac9be3c4d887f4e2fc82eeb5c8a48152055a9058b048eab94718a2ba6cd70a5249a21df3bd2000939592f9facf1ea09b0000000000000000000000f900007148172e3a43ddc0d0fb84608ba3cfeaa0570ac850af2f1837c99b9d4a03548b6263261aedcde3305e90158f44ebb02d84cd3b585402f096aea1f7d31247a65805cb19bc874667"}}, {0x7a, &(0x7f0000000500)=@string={0x7a, 0x3, "d46fd392fe0ed752e675cce0f8d96bffb938f047f5758b6bb907bb1cc438c94f9022c8bdebed309e8d30e7b79e941c7f54a33cc7da62733b9b60a516f0c27272fb11da0caabbba0cedb52e1112f530441d92abb890c09618446579c68d14087143a5ff350bb1a3cbdb8cb80c6cd43cb292a6c45af1404183"}}, {0x4, &(0x7f00000005c0)=@lang_id={0x4, 0x3, 0x405}}]}) 14m42.442912364s ago: executing program 2 (id=469): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0xa800) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000003c0)={0x0, &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x0, 0x1}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0xffffffffffffff1a, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0x6) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, &(0x7f0000000540)=@generic={0x2, 0x9, 0x2}) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="1400000016000b63d25a80648c25940121", 0x11}, {&(0x7f0000000280)="e26248", 0x3}], 0x2}, 0x40050) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, r3, {0xffffffffffffffff}}, './file0\x00'}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(0xffffffffffffffff, 0x3ba0, &(0x7f0000000100)={0x48}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(0xffffffffffffffff, 0x3ba0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) mount$bpf(0x0, &(0x7f00000001c0)='./file0/../file0\x00', 0x0, 0x888a, &(0x7f0000000380)) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x18, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000008d28080000000000"], &(0x7f0000000200)='GPL\x00', 0x9, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r5, 0x1, 0x4c, &(0x7f0000000000), 0x4) sendmsg$inet(r4, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0xff07, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000400)={0x48}) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000340)={0x0, 0x0, r1, 0x0}) ioctl$DRM_IOCTL_MODE_DIRTYFB(r0, 0xc01864b1, &(0x7f0000000240)={r6, 0x2, 0x8, 0x1, &(0x7f0000000080)=[{0xfff, 0x5, 0xf001, 0x7ffe}]}) 14m39.855973115s ago: executing program 2 (id=471): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000100)=0x80000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000280)={@hyper}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f0000000240)={{@hyper, 0x5}, @my=0x1, 0x0, 0x4, 0x4, 0x5, 0x4, 0x100, 0x5}) pipe(&(0x7f00000004c0)={0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x401) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(r1, 0xc0984124, &(0x7f00000002c0)) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f00000000c0)=0xb0000) ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(r0, 0x7a4, &(0x7f0000000180)={{@host}, 0xe1, 0x800000000000002, 0x20007fff}) r2 = openat$comedi(0xffffff9c, &(0x7f0000000440)='/dev/comedi0\x00', 0x101001, 0x0) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, &(0x7f0000000080)={'comedi_bond\x00', [0x3, 0x80008000, 0x6, 0x2, 0x2f, 0x0, 0x1, 0xd, 0xffb, 0x4f, 0x7, 0x1, 0x1006, 0x4, 0xffff, 0xffff, 0xffffffa8, 0x40000009, 0x40a00000, 0x3, 0x4, 0x10000, 0x100, 0xe2df, 0x0, 0x7, 0x5, 0x3, 0x5, 0x4, 0x28045]}) fanotify_mark(0xffffffffffffffff, 0x1, 0x0, 0xffffffffffffffff, 0x0) r3 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000000)={0x0, &(0x7f0000000780)=[@cpuid={0x14, 0x18, {0x80000000, 0x6}}, @wrmsr={0x1e, 0x20, {0x847, 0x20080000000000}}, @code={0xa, 0x4f, {"420f02010f20e035000100000f22e0b8010000000f01d966b8d60066ba4000ed660faeb5430647e10f00d866bad10466b8085867ef60d760d70f38806a05"}}, @cpuid={0x14, 0x18, {0x7, 0x82}}, @cpuid={0x14, 0x18, {0x1, 0x401}}, @wrmsr={0x1e, 0x20, {0xa47, 0x4}}, @uexit={0x0, 0x18, 0x7ff}, @code={0xa, 0x68, {"f2416d470f0f121d66b81b000f00d066baf80cb81497328aef66bafc0cb800000000ef450f01cb450f781b0f01c266430f3880b303000000c7442400c04e50f5c7442402e720bcd0c7442406000000000f011c242e41f4"}}, @wrmsr={0x1e, 0x20, {0x912, 0x401}}, @code={0xa, 0x5c, {"3e640f01f00ff514423e66410f3a617700e666440f001d030000003ef343760066ba210066b8cbfc66ef440f20c03504000000440f22c00f20e035000010000f22e0400fc72f360f71f543"}}, @wr_crn={0x46, 0x20, {0x4, 0x3}}, @rdmsr={0x32, 0x18, {0x323}}, @rdmsr={0x32, 0x18, {0x2f}}, @wrmsr={0x1e, 0x20, {0x9c7, 0x4}}, @wr_crn={0x46, 0x20, {0x3, 0x9}}, @rdmsr={0x32, 0x18, {0x283}}, @wr_crn={0x46, 0x20, {0x4, 0x7}}, @wrmsr={0x1e, 0x20, {0x2b, 0x5}}, @cpuid={0x14, 0x18, {0x1, 0x88}}, @code={0xa, 0x64, {"b8010000000f01d9c4e209bcea66ba430066edc46241a780f05a000066b806010f00d048b883000000000000000f23c80f21f835080050000f23f8c4a3d16f2cbb2436260f87000000000f01c866bad10466ed"}}, @uexit={0x0, 0x18, 0x3c}, @cpuid={0x14, 0x18, {0x7, 0x4}}], 0x367}) ioctl$KVM_SET_MP_STATE(r3, 0x4004ae99, &(0x7f0000000040)=0x8) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e24, 0x7, @private1={0xfc, 0x1, '\x00', 0x1}, 0x517d}, 0x1c) 14m39.192193487s ago: executing program 2 (id=473): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000340)=@abs={0x1, 0x0, 0x104e22}, 0x6e) syz_open_dev$dri(&(0x7f0000000080), 0x5, 0x200001) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000002c0)=0x20) r2 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0xa4, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x74, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [], 0x0, [0x8, 0x4], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}}, @TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME_EXTENSION={0xc, 0x9, 0x8}, @TCA_TAPRIO_ATTR_SCHED_BASE_TIME={0xc, 0x3, 0x280000000000000}]}}]}, 0xa4}}, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) getsockopt$llc_int(r5, 0x10c, 0x1, &(0x7f0000000180), &(0x7f0000000000)=0x4) 14m38.294359072s ago: executing program 2 (id=474): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00', r0}, 0x10) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) timer_create(0x5, 0x0, &(0x7f0000003a80)) socket$inet(0x2, 0x1, 0x100) socket$inet6_udplite(0xa, 0x2, 0x88) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB, @ANYRES64=r2], &(0x7f0000000200)='GPL\x00', 0xfa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0xa, &(0x7f0000000240)=0x6) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsopen(&(0x7f0000000280)='gfs2meta\x00', 0x1) ioctl$EVIOCGREP(r1, 0x80084524, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESDEC=r5, @ANYBLOB=',wfdno=', @ANYRESOCT=r5]) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x41800, 0x0) ioctl$KVM_CHECK_EXTENSION(r6, 0xae03, 0x28) 14m37.664168523s ago: executing program 2 (id=476): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x6, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x5, 0x0, 0xb, 0x9, 0x0, 0x2, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x4}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfe04, 0xe1}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0xa, 0x20}, {}, {}, {0x18, 0x2, 0x2, 0x0, r3}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 14m36.375815444s ago: executing program 32 (id=476): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x6, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x5, 0x0, 0xb, 0x9, 0x0, 0x2, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x4}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfe04, 0xe1}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0xa, 0x20}, {}, {}, {0x18, 0x2, 0x2, 0x0, r3}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 11m3.161576585s ago: executing program 5 (id=920): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000002a40)={0x0, 0x0, &(0x7f0000002a00)={&(0x7f0000000040)=@ipv6_newaddrlabel={0x38, 0x48, 0x1, 0x70bd29, 0x25dfdbff, {0xa, 0x0, 0x38, 0x0, 0x0, 0x33}, [@IFAL_ADDRESS={0x14, 0x1, @mcast2}, @IFAL_LABEL={0x8, 0x2, 0x6}]}, 0x38}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) 11m2.936297207s ago: executing program 5 (id=921): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) getpid() r0 = syz_open_procfs(0x0, &(0x7f00000009c0)='net/sctp\x00') r1 = socket$inet6_tcp(0xa, 0x1, 0x0) copy_file_range(r1, 0x0, r0, 0xfffffffffffffffe, 0x0, 0x0) 11m2.655946648s ago: executing program 5 (id=922): socket$nl_generic(0x10, 0x3, 0x10) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, 0x0, 0x0) r0 = socket$inet(0x2, 0x3, 0x6) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000000)={{0x2, 0x0, @dev}, {0x1, @local}, 0x4a, {0x2, 0x0, @dev}}) r1 = socket$inet(0x2, 0x3, 0x6) ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f0000000000)={{0x2, 0x3, @local}, {0x1, @remote}, 0x4a, {0x2, 0x4, @remote}, 'veth1_to_bridge\x00'}) ioctl$sock_inet_SIOCSARP(r0, 0x8953, &(0x7f0000000000)={{0x2, 0x0, @dev}, {0x0, @local}, 0x4a, {0x2, 0x0, @multicast2}, 'syz_tun\x00'}) 11m2.256070282s ago: executing program 5 (id=926): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000002140)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f0000004180)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0xffffffffffffffff, {0xffffffffffffffff, 0x2, 0xfffffffffffffffe, 0x0, 0x0, 0x0, {0x40, 0x3, 0x0, 0x4, 0x0, 0x0, 0x7, 0x0, 0x123, 0x6000, 0x0, 0x0, 0x0, 0x902}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000000440)={0x50, 0x0, r1, {0x7, 0x29, 0x0, 0x0, 0x0, 0x2, 0xfffffffd, 0x40000000, 0x0, 0x0, 0x0, 0x80000000}}, 0x50) r2 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x3) ioctl$TIOCGPTPEER(r2, 0x932, 0x7) 11m1.167578281s ago: executing program 5 (id=934): r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x83) sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0xf0, 0x32, 0x205, 0x70bd2d, 0x25dfdbfc, {}, [{0xc9}]}, 0xf0}, 0x1, 0x0, 0x0, 0x85}, 0x8000) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40086602, &(0x7f0000000000)) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0xa90bfe986567845f, 0x0) 11m0.825553442s ago: executing program 5 (id=938): bpf$BPF_PROG_DETACH(0x9, &(0x7f00000000c0)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB='\v\x00'/12, @ANYRES32=0x0, @ANYBLOB="e748"], 0x20) 10m45.735964936s ago: executing program 33 (id=938): bpf$BPF_PROG_DETACH(0x9, &(0x7f00000000c0)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB='\v\x00'/12, @ANYRES32=0x0, @ANYBLOB="e748"], 0x20) 8.374892496s ago: executing program 4 (id=3740): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0x3f73, 0x100, 0x0, 0x1a}, &(0x7f0000000340)=0x0, &(0x7f0000000600)=0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r2, 0x16, 0x0, 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x10, r5, 0x0, 0x0, 0x0, 0x262, 0x1, {0x1}}) io_uring_enter(r2, 0x3516, 0xf400, 0x0, 0x0, 0x0) 7.808893424s ago: executing program 0 (id=3744): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000340)=ANY=[@ANYRES32=r3, @ANYRES32=r2, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r3}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) sendmsg$inet(r1, &(0x7f0000000500)={0x0, 0x4003e80, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x20000281}], 0x1}, 0x0) 6.503623408s ago: executing program 0 (id=3751): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffed85000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0241, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x9, 0x2, 0x56d, 0x2}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000600), &(0x7f0000001f80), 0xfffffffb, r0}, 0x38) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200), &(0x7f00000004c0), 0x1000, r0}, 0x38) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, 0x0) socket$kcm(0x10, 0x3, 0x10) r2 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r2, 0x114, 0x8, &(0x7f00000008c0), 0x4) socket$netlink(0x10, 0x3, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x40040) r5 = socket(0xa, 0x3, 0x3a) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000040)=@ethtool_link_settings={0x2, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x20, 0xfd, [0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x2]}}) close(r2) socket$nl_netfilter(0x10, 0x3, 0xc) 5.746273514s ago: executing program 1 (id=3752): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000004c0)='vegas\x00', 0x6) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @empty, 0x3}, 0x1c) 5.475884331s ago: executing program 3 (id=3754): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_FLOWS={0x8, 0x2, 0x7}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) 5.451414687s ago: executing program 1 (id=3755): sendmsg$NL80211_CMD_SET_QOS_MAP(0xffffffffffffffff, 0x0, 0x804) r0 = openat$incfs(0xffffffffffffffff, &(0x7f0000000040)='.log\x00', 0x505001, 0x1a) sendmsg$nl_route(r0, 0x0, 0x4000864) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)='GPL\x00'}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000800)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000002000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r4}, &(0x7f0000000240), &(0x7f00000003c0)=r3}, 0x20) 5.14420896s ago: executing program 3 (id=3757): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="3103000000000000000008"], 0x24}}, 0x0) 5.009778218s ago: executing program 4 (id=3758): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x4e24, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r0, 0x84, 0x78, &(0x7f0000000240)=r2, 0x4) 4.842786497s ago: executing program 3 (id=3759): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) syz_init_net_socket$rose(0xb, 0x5, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000021000000000800000095"], &(0x7f0000000000)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r1}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000580)='syzkaller\x00'}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) 4.724179647s ago: executing program 6 (id=3760): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) 4.590635322s ago: executing program 3 (id=3761): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/custom0\x00', 0x803, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x80200, 0x0) r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x141102) writev(r0, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x2) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) r1 = syz_io_uring_setup(0x10d2, &(0x7f0000000480)={0x0, 0x7734, 0x80, 0x0, 0x34f}, &(0x7f0000000240)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x15523ea56aa22b9a, 0x0, 0x0, 0x0, 0x12345}) io_uring_enter(r1, 0x47bc, 0x0, 0x0, 0x0, 0x0) 4.531284927s ago: executing program 6 (id=3762): r0 = socket$packet(0x11, 0x2, 0x300) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='GPL\x00'}, 0x94) r2 = socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x9007}, 0x4) socket$vsock_stream(0x28, 0x1, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) pselect6(0x40, &(0x7f00000001c0)={0x7, 0x0, 0x100000000000000, 0x0, 0x400000000, 0xfffffffffffffffb, 0xffffffffffffffff, 0xffffffff}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f271a76d2686dd4c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYRESDEC, @ANYRES32=r3], 0x34}}, 0x0) 4.363460411s ago: executing program 1 (id=3763): r0 = socket$nl_rdma(0x10, 0x3, 0x14) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, 0x0, 0x4008800) sendmsg$RDMA_NLDEV_CMD_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0x24, 0x1402, 0x1, 0x70bd2a, 0x25dfdc01, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz1\x00'}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000801}, 0x40810) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x4) r4 = socket$kcm(0x10, 0x2, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r5 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000000), 0x4) sendmsg$netlink(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{0x0, 0x1c}], 0x1}, 0x0) sendmsg$inet(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000180)="5c00000013006bcd9e3fe3dc4e48aa31086b8703410000004000000000000000040014000d000a00100000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9", 0x45}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000780)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000b3381aa97a65798300000000000039000000a32bba56", @ANYBLOB="1c005a8018000080140005007f00a50fc4030000ff0f030002"], 0x38}}, 0x10) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000080)={&(0x7f00000004c0)={0x1e4, r2, 0x4, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_REKEY_DATA={0x60, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x4}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "6a3a5554218ba8ac"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "3ec95e9cab3afa8d"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="fea3484cafc85a906415aebedc9ade3dadb65a8c26766412"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "28ede5886353ddf8"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="440c7962f7167718648f067ef35590a9"}]}, @NL80211_ATTR_REKEY_DATA={0x50, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "8a33000000003dab"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x2ade00}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x9}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "c9aa7a761be4c245"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="8018a26f10b5b27eefd0b64c2100077f7a555a931c1bc5f8"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x1}]}, @NL80211_ATTR_REKEY_DATA={0x28, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x7}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="40b1debb515011cb417b8f55e8f35815"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x10001}]}, @NL80211_ATTR_REKEY_DATA={0x7c, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x2}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x800}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0xfff}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="f342150078cac9f09ee8c0c18c912f44389715fda8087ded"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="03803299d6ed3c0d1576e150c2f21d3e470ebd8dd2a806aca32f2b9d1d8238b5"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "ac644c12fc2ce6e7"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="be02efeebcad44c11c3da4a04a99cb08"}]}, @NL80211_ATTR_REKEY_DATA={0x34, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "19ed6b6f2429ae2d"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="56737e126934561c448f79dd29df4c979ebd7e64bb4c107cb71ecf924d5d2c7e"}]}, @NL80211_ATTR_REKEY_DATA={0x48, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "97758f19d8babe86"}, @NL80211_REKEY_DATA_AKM={0x8}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "a47989d41aa21119"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x3c}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="05af990413b6cc5e18e517f0aa73307ba4396d3f725840dd"}]}]}, 0x1e4}, 0x1, 0x0, 0x0, 0x8090}, 0x805) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r8, &(0x7f0000000000)=[{&(0x7f0000000500)}], 0x1, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0x4, &(0x7f00000000c0)=ANY=[@ANYRESHEX=r7, @ANYRESHEX=r8], &(0x7f0000000140)='GPL\x00', 0x0, 0xa1, &(0x7f0000000300)=""/161, 0x0, 0x20}, 0x94) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000002100)=@raw={'raw\x00', 0x3c1, 0x3, 0x5f0, 0x450, 0x8, 0x7f02ae, 0x450, 0x200, 0x520, 0x2e8, 0x2e8, 0x520, 0x2e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x410, 0x450, 0x0, {}, [@common=@unspec=@bpf1={{0x230}, @fd={0x2, 0x0, r9}}, @common=@rt={{0x138}, {0x6, [0x8, 0x9], 0x73e, 0x1, 0x2, [@private0, @remote, @private1={0xfc, 0x1, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @multicast1}, @local, @empty, @empty, @dev={0xfe, 0x80, '\x00', 0xc}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @broadcast}, @loopback, @private0={0xfc, 0x0, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1d}, @ipv4={'\x00', '\xff\xff', @remote}, @ipv4={'\x00', '\xff\xff', @empty}, @empty], 0xd}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @private2, [], [0x0, 0x0, 0xff], 'veth0_to_team\x00', 'netdevsim0\x00', {}, {}, 0x0, 0x0, 0x0, 0x58}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE1={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x650) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="5c00000010000104000002000000000000000000", @ANYRES32=0x0, @ANYBLOB="03800000000000002c0012800b00010067726574617000001c0002800800040009000000080001009d00669afee68ce762023d4fe1a2ac045f95"], 0x5c}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054) 4.237741993s ago: executing program 0 (id=3764): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="b0000000000000008d15c937040795e9ec68ba339b8fd15e58983b3da942"], 0xb0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno', @ANYRESHEX=r2]) mkdir(&(0x7f0000000080)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 3.843067471s ago: executing program 4 (id=3765): socket(0x2, 0x80805, 0x0) r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x64010101, 0x4e20, 0x3, 'wrr\x00', 0x1, 0x80005, 0x6f}, 0x2c) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000580)={{0x84, @multicast2, 0x4e23, 0x3, 'lc\x00', 0x2, 0x3, 0x181a}, {@private=0xa010102, 0x4e20, 0x2, 0xa, 0x80012d58, 0x12d5c}}, 0x44) 3.667887717s ago: executing program 1 (id=3766): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'dummy0\x00', 0x0}) r2 = gettid() r3 = socket$inet_sctp(0x2, 0x5, 0x84) r4 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, 0x0, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f0000000200)=@sack_info={r5, 0x8, 0x1}, 0xc) getsockopt$bt_BT_RCVMTU(0xffffffffffffffff, 0x112, 0xd, &(0x7f00000000c0), &(0x7f0000000040)=0x2) r6 = socket(0x10, 0x803, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(0xffffffffffffffff, 0x111, 0x1, 0x4, 0x4) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000304f9fffffffedbdf2500007400", @ANYRES32=r1, @ANYBLOB="049c01000750050008001300", @ANYRES32=r2, @ANYBLOB="1400030076657468305f766972745f77696669001e7333368770d1073549c825093cdd099303"], 0x3c}, 0x1, 0x0, 0x0, 0x4802}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r7, 0x10e, 0x8, &(0x7f0000000080)=0x6, 0x4) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r8 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r8, 0x110, 0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) 3.667224825s ago: executing program 4 (id=3767): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB="b40500000000000079109c000000000005000000000000009500000000000020"], 0x0}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x9, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000032e8d800007f12f8ff108458688a354c9c582ef915ca"], &(0x7f0000000080)='GPL\x00'}, 0x94) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000001c0)=0x6f1b, 0x4) bind$inet(r0, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x300) setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f0000000000)=0x40, 0x4) recvmmsg(r0, &(0x7f0000003e00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/27, 0x1b}, 0x7}], 0x1, 0x45833af92e4b39ff, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_procs(r5, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r6, &(0x7f0000000c40), 0x12) r7 = openat$cgroup_procs(r4, &(0x7f0000000140)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r7, &(0x7f0000000100), 0x12) r8 = openat$cgroup_procs(r3, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) r9 = openat$cgroup_procs(r3, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r8, &(0x7f00000000c0), 0x40) pread64(r9, &(0x7f0000001840)=""/4096, 0x1000, 0x1) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a70000000060a090400000000000000000200000044000480140001800c0001006e6f747261636b00040002802c0001800e000100696d6d656469617465000000180002800c00028005000100c400000008000140000000090900010073797a30000000000900020073797a320000000020000000080a05000000000000000000020000000900010073797a300000000014000000110001"], 0xb8}, 0x1, 0x0, 0x0, 0x4002840}, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r1, 0x0) socket$rds(0x15, 0x5, 0x0) r10 = socket$inet_sctp(0x2, 0x800000000000001, 0x84) setsockopt$inet_sctp_SCTP_RTOINFO(r10, 0x84, 0x0, &(0x7f0000000040)={0x0, 0xfffffffb, 0x7, 0x6}, 0x10) 3.53194765s ago: executing program 0 (id=3768): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x63, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[], &(0x7f0000000000)='GPL\x00'}, 0x94) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r4 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r4, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x18}}, 0x2, 0x1}}, 0x2e) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) getsockopt(r4, 0x111, 0x3, 0x0, &(0x7f0000000080)) 3.526774532s ago: executing program 3 (id=3769): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x28, 0x140f, 0xee70877cfbc8a0b9, 0x70bd2d, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0xd, 0x45, 'opa_vnic\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x24004000}, 0x41844) 3.151893681s ago: executing program 6 (id=3770): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r1, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r1], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005000000000000008000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000000000000850000008600000018010000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) sendmsg$RDMA_NLDEV_CMD_DELLINK(r0, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x20, 0x1404, 0x200, 0x70bd28, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x800) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000004f40)={'gre0\x00', &(0x7f0000000240)={'gretap0\x00', r1, 0x1, 0x20, 0x0, 0x4, {{0x33, 0x4, 0x1, 0x8, 0xcc, 0x67, 0x0, 0xdb, 0x4, 0x0, @empty, @empty, {[@timestamp_prespec={0x44, 0x44, 0x58, 0x3, 0xa, [{@local, 0x2f}, {@multicast1, 0x6}, {@local, 0x7fff}, {@empty, 0x80000000}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x47ed}, {@remote, 0x2}, {@broadcast, 0xa}, {@broadcast, 0xfffffffa}]}, @end, @timestamp_prespec={0x44, 0x24, 0x4c, 0x3, 0x6, [{@empty, 0x7f}, {@empty, 0x7}, {@empty, 0x43}, {@multicast1, 0x6}]}, @timestamp_addr={0x44, 0x3c, 0xc3, 0x1, 0xf, [{@multicast2, 0x8001}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x39ba}, {@loopback, 0x10001}, {@dev={0xac, 0x14, 0x14, 0x19}, 0x80000000}, {@multicast1, 0x1800}, {@multicast2, 0xffffffff}, {@private=0xa010100, 0xc0000}]}, @noop, @noop, @timestamp={0x44, 0xc, 0x64, 0x0, 0x6, [0xff0d, 0x8]}, @timestamp={0x44, 0x4, 0xfa, 0x0, 0x4}, @noop]}}}}}) 2.33563106s ago: executing program 3 (id=3771): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) syz_open_procfs(0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r2) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f00000000c0)='westwood\x00', 0x9) syz_open_dev$vim2m(&(0x7f0000002c80), 0x3, 0x2) 2.321869056s ago: executing program 1 (id=3772): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) 2.107256079s ago: executing program 6 (id=3773): sendmsg$NL80211_CMD_SET_QOS_MAP(0xffffffffffffffff, 0x0, 0x804) r0 = openat$incfs(0xffffffffffffffff, &(0x7f0000000040)='.log\x00', 0x505001, 0x1a) sendmsg$nl_route(r0, 0x0, 0x4000864) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000900)=ANY=[@ANYBLOB="b7020000f7ffffffbfa70000000000002402000020fe29817a0af0fff8ffffff69a4f0ff00000000b70600000018d1fe2d6405000000000075040000000000400704000000000000b7040000100000206a0700fe000000008500000005000000b70000000a00000095000000000000000000c2c62f6004ad13aa957e2af5e49a53c2868f0399d909a63796c113a80c19aab9d607000000b6c9483be3f0d3253730e714c46cc4f79fd2b316da4f0de8163f6242fa7323f1740637c48468766af540439fce41f144631ac262dcae18c3d1a1fbe96dc86035b44174f7c0620254ab6d285e6b343185089a0f119e31975e551558050800000000000000125d67857f290870093f38153608561a2128a79cce912d1f05de330800a9f5422bee8ca49166f6a587f2f593775afcd071efc5a972f757521b7b38ec273c2ad3e406f8c124f7dc1c4553229a69df4b2780e6da4420d71489fe383e0b5ce08b750502f2b8add8d2dddde19ac050537e973782b4053150580035fb2c579e1b2100000033d1ee8cab6d236f05b1f7b9f78fd5abfe033eb79f7a0b498366f5edfe311258016fbf47d9c85bf5325bf61419372be377022433e20900a262b20bb8b36de7b0e6c5ebfc5baec1ebe58d4af587d33e2935ad68da6e0fea5c21301f5d002b51a5b60fc741cb2c5d4cd5e896774f9293a6435558795043404ac6eafc8310fbcacca7f971b260fd06d4590ded8429fcd1c9a8dbbdedb32675388df363c0bc536e00448208b72405ebf27ddb402e5a2d675aaad92e183cef1eadc1661140fb567b55c72907a1aca75277a5f0022b1e957ba737f10f1161c5ae6e2cc64072ff3b4e76084922242e63d4b7806e30f786cff147e4bc819060678319a0e5534f5a0db52526c30000000000000000000000a63705b1a60525620acca06d57c055059df7651768310c9085c5f86be6ab819506961ad51f18b35fdc3fd4d0a0dbbdcd494ef168931f27748787bee95d739fef7ee67dd21c34647de82707e41d7db6d981a4fcf0bbd3d38ebb7a2489e28c6b28c0f70092ffb016b7766399555f3e6b538c2c862d17e53eaeb2036f9f0ab6e95e71bda4b5bbf53344264ad93bac1207b31d6e9c78181c7fe204c0b7582d1c762857f2a2e0c60f4a4855591a4f70f94df9629e470701103c40c8f6d3a3068091d62b58999e0a046f9509cb8ddc2a9ad4e0f1f85e5f076218b4b931acdff0c34fc5bdbad17ec481f1c9b17727c14e053e315d0d8d03c24ddaba65c5ce5b1aa04d1f767e25662b155d49460ec720d54044ac2856c11407835f341e2614bcae270000000001000000df7f736aab5d713240b2f40ec7be8251eba969686b2670ddc1a84df6ab12ab3e0cf8747837062233935704ebbd943ef0c5fef29513c7c1d6d2611796dccb45bdfd9e6533ad3574be5b9ea70e0c3b41a32067c03f5f8ed147cd0655c90d656f66eaed18a3c284c4f19417b5d91431759356db5d45ea40c9866957105b6252b0c028c672049ce163126f143f5758faf2a43f4c4f45a69b4e9113f85ae531085c11c75edbdee5af454757cdaff396c15ab9b210c202ffaea96d1bac60c6d6c56a4babc659858789bd479334e13e1c7876f95429431e61400815788c1397b260600d78e7513c58d9ac9474d392cc06f789753e1e7ebf5f1b55e2a64b9150c6580bf48e7bff763034801cccf403108d127b959ffc425a563ea2b90fbe779fd7d2ebfe94"], &(0x7f0000000280)='GPL\x00'}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000800)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000002000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r4}, &(0x7f0000000240), &(0x7f00000003c0)=r3}, 0x20) 2.030524414s ago: executing program 1 (id=3774): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x26, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) fsopen(0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x88882, 0x0) r1 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) fchdir(r1) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/profiling', 0xe41, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000001b000000b700000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mount(&(0x7f0000000000), &(0x7f0000000280)='./cgroup\x00', 0x0, 0x75809, 0x0) mount(0x0, &(0x7f0000000140)='./cgroup\x00', 0x0, 0x21a8f5, 0x0) 965.887798ms ago: executing program 0 (id=3775): r0 = socket(0x2, 0x805, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, 0x0, &(0x7f00000007c0)) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x6e24, @empty}, 0x10) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000000)={r2}, &(0x7f0000000040)=0x8) 879.714256ms ago: executing program 4 (id=3776): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$packet(0x11, 0x2, 0x300) socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800"], 0x50) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000019c0)=ANY=[@ANYRES8=r1], 0x48) r4 = socket$unix(0x1, 0x1, 0x0) connect$unix(r4, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e22}, 0x6e) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x10, 0x1c, &(0x7f0000000580)=ANY=[@ANYBLOB="180800000000000000000000ffffffff18110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000b7020000000000007b9a00fe00000000b5090800040000007baaf0ff00000000be9800000000000004080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018280000", @ANYRES32=r2, @ANYBLOB="0000000000000000b705006e190000000000000076000000bf9100000000000076080000010000008500000084000000b700000000000000950000000000000015e3da6a8684e7597ef464a098813fe73f358bb51b01bcd7c4ba8de8731aaeb65635982c0e09a64bf16b8c1af2fdb685332e82d93a8043a5f8354f2e45e10c8f2537985ce8ca0c48f6bd8b256cd640c951067056d1718a7b9b3c1717ee6a3aa72df5bb05a7b351846599b029fb580796d3ab5811e4f8f3323090516be102f4725d2c06997f9842cde53bac32d5842056f103ea54a6ccb8a6f0cd2c"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r6, @ANYBLOB="00000000000000001c001a800800028008000200080000003e120000080002"], 0x44}}, 0x0) r7 = socket(0x10, 0x3, 0x0) sendmmsg(r7, &(0x7f0000000000), 0x4000000000001f2, 0x0) unshare(0x2c060000) r8 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_group_source_req(r8, 0x0, 0x2c, &(0x7f0000000180)={0xfffffffd, {{0x2, 0x4e24, @multicast1}}, {{0x2, 0x4e20, @remote}}}, 0x108) unshare(0x24020400) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000004c0)='./cgroup.cpu/syz1\x00', 0x1ff) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, 0x0, 0x0) vmsplice(r10, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) r12 = socket$netlink(0x10, 0x3, 0xc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="440000001000010000000000000000"], 0x3}}, 0x0) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a32000000001400cfe4000011"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4044) sendmsg$NFT_BATCH(r13, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000580)=ANY=[], 0x7c}}, 0x20000050) splice(r9, 0x0, r12, 0x0, 0x10d00, 0xf) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000280)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0xfffc}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x17}, @IPSET_ATTR_NETMASK={0x5, 0x14, 0xa}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000000) 663.95443ms ago: executing program 0 (id=3777): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_DEL_RULE(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000840)=ANY=[@ANYBLOB="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"/1078], 0x420}}, 0x40040) recvmmsg(r1, &(0x7f00000002c0), 0x220, 0x100, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r4, 0x1, 0x200000010, &(0x7f0000000000)=0xb, 0x4) sendto$unix(r3, &(0x7f0000000240)="0014", 0x2, 0x4040081, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [], {0x14}}, 0x28}}, 0x0) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@func={0x2, 0x0, 0x0, 0xc, 0x2}, @func_proto]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x34}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r5, 0xc, &(0x7f00000000c0)={0x0, 0x1}, 0x8}, 0x94) recvfrom$unix(r4, 0x0, 0x0, 0x10102, 0x0, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) r7 = accept$ax25(0xffffffffffffffff, &(0x7f0000000640)={{0x3, @default}, [@default, @bcast, @null, @bcast, @rose, @null, @rose, @default]}, &(0x7f00000000c0)=0x48) setsockopt$ax25_SO_BINDTODEVICE(r7, 0x101, 0x19, &(0x7f0000000280)=@rose={'rose', 0x0}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0xb, &(0x7f0000000200)=@framed={{0x18, 0x2, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x40002}, [@printk={@s, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) r8 = socket$netlink(0x10, 0x3, 0x14) sendmsg$AUDIT_USER_TTY(r8, &(0x7f0000000580)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x10, 0x464, 0x2, 0x70bd2a, 0x25dfdbff, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x8880}, 0x8040) socket$inet6_sctp(0xa, 0x1, 0x84) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r9, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x0) sendmsg$kcm(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) r10 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r10, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) 367.022961ms ago: executing program 6 (id=3778): socket$kcm(0x23, 0x2, 0x0) close(0x3) 163.833342ms ago: executing program 4 (id=3779): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="b0000000000000008d15c937040795e9ec68ba339b8fd15e58983b3da942"], 0xb0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno', @ANYRESHEX=r2]) mkdir(&(0x7f0000000080)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 0s ago: executing program 6 (id=3780): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20008000}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) unshare(0x8010800) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newnexthop={0x2c, 0x68, 0x1, 0x100003, 0x7ffffffd, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x15}]}, @NHA_GROUP_TYPE={0x6, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080) kernel console output (not intermixed with test programs): netlink: 28 bytes leftover after parsing attributes in process `syz.0.1579'. [ 591.231281][T11927] veth1_to_bond: entered allmulticast mode [ 591.259566][T11927] veth1_to_bond: left allmulticast mode [ 592.119427][T11961] tipc: Started in network mode [ 592.124482][T11961] tipc: Node identity ac14140f, cluster identity 4711 [ 592.169280][T11961] tipc: New replicast peer: 255.255.255.255 [ 592.201553][T11961] tipc: Enabled bearer , priority 10 [ 592.988836][T11993] 8021q: adding VLAN 0 to HW filter on device bond0 [ 593.006652][T11993] bond0: (slave ip_vti0): The slave device specified does not support setting the MAC address [ 593.043582][T11993] bond0: (slave ip_vti0): Error -95 calling set_mac_address [ 593.243915][T12000] warning: `syz.4.1609' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 593.316522][ T890] tipc: Node number set to 2886997007 [ 593.540346][T12007] netlink: 'syz.4.1612': attribute type 1 has an invalid length. [ 593.747639][T12007] 8021q: adding VLAN 0 to HW filter on device bond0 [ 594.078625][T12029] tipc: Can't bind to reserved service type 0 [ 594.172203][T12033] xt_hashlimit: max too large, truncated to 1048576 [ 594.243233][T12035] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1607'. [ 595.608615][T12088] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 595.661348][T12084] lo speed is unknown, defaulting to 1000 [ 596.864724][T12121] netlink: 'syz.0.1642': attribute type 1 has an invalid length. [ 597.513753][T12142] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1651'. [ 597.815690][T12153] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 599.587775][T12218] bond0: (slave ip_vti0): The slave device specified does not support setting the MAC address [ 599.628972][T12218] bond0: (slave ip_vti0): Error -95 calling set_mac_address [ 600.013242][T12239] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 600.658701][T12258] tipc: Enabled bearer , priority 0 [ 600.683620][T12258] syzkaller0: entered promiscuous mode [ 600.701533][T12258] syzkaller0: entered allmulticast mode [ 600.728498][T12261] process '/newroot/103/file0' started with executable stack [ 600.771777][T12258] tipc: Resetting bearer [ 600.815160][T12257] tipc: Resetting bearer [ 600.861515][T12257] tipc: Disabling bearer [ 601.230762][T12288] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1694'. [ 601.315108][T12294] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 602.384813][T12342] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 602.748320][T12360] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1724'. [ 602.916160][T12365] netlink: 'syz.1.1727': attribute type 1 has an invalid length. [ 602.998521][T12365] 8021q: adding VLAN 0 to HW filter on device bond2 [ 603.132629][T12373] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1730'. [ 603.379238][T12380] tipc: Enabled bearer , priority 0 [ 603.399723][T12380] syzkaller0: entered promiscuous mode [ 603.412687][T12380] syzkaller0: entered allmulticast mode [ 603.475746][T12380] tipc: Resetting bearer [ 603.528850][T12379] tipc: Resetting bearer [ 603.629208][T12379] tipc: Disabling bearer [ 604.036676][T12407] lo speed is unknown, defaulting to 1000 [ 605.036965][T12431] syzkaller0: entered promiscuous mode [ 605.070462][T12431] syzkaller0: entered allmulticast mode [ 605.873230][T12459] netlink: 'syz.3.1760': attribute type 1 has an invalid length. [ 609.776602][T12459] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 610.077853][T12492] fuse: Bad value for 'fd' [ 610.818244][T12426] Set syz1 is full, maxelem 65536 reached [ 611.935851][T12551] tipc: Started in network mode [ 611.950234][T12551] tipc: Node identity 4ef41cd3913e, cluster identity 4711 [ 611.969748][T12551] tipc: Enabled bearer , priority 0 [ 612.000865][T12554] syzkaller0: entered promiscuous mode [ 612.015887][T12554] syzkaller0: entered allmulticast mode [ 612.642874][T12548] tipc: Resetting bearer [ 612.679195][T12548] tipc: Disabling bearer [ 613.122067][ T30] audit: type=1326 audit(1755751410.730:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12579 comm="syz.4.1799" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2b818ebe9 code=0x7ffc0000 [ 613.215074][ T30] audit: type=1326 audit(1755751410.750:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12579 comm="syz.4.1799" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2b818ebe9 code=0x7ffc0000 [ 613.251979][T12587] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1802'. [ 613.314929][ T30] audit: type=1326 audit(1755751410.750:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12579 comm="syz.4.1799" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2b818ebe9 code=0x7ffc0000 [ 613.374416][ T30] audit: type=1326 audit(1755751410.750:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12579 comm="syz.4.1799" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2b818ebe9 code=0x7ffc0000 [ 613.416294][T12591] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1803'. [ 613.473281][ T30] audit: type=1326 audit(1755751410.750:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12579 comm="syz.4.1799" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7fe2b818ebe9 code=0x7ffc0000 [ 613.546291][T12596] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1806'. [ 613.552378][ T30] audit: type=1326 audit(1755751410.750:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12579 comm="syz.4.1799" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2b818ebe9 code=0x7ffc0000 [ 613.656712][ T30] audit: type=1326 audit(1755751410.750:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12579 comm="syz.4.1799" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2b818ebe9 code=0x7ffc0000 [ 613.657309][T12596] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1806'. [ 613.746331][ T30] audit: type=1326 audit(1755751410.750:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12579 comm="syz.4.1799" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2b818ebe9 code=0x7ffc0000 [ 613.870807][ T30] audit: type=1326 audit(1755751410.750:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12579 comm="syz.4.1799" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2b818ebe9 code=0x7ffc0000 [ 613.986522][ T30] audit: type=1326 audit(1755751410.750:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12579 comm="syz.4.1799" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fe2b818ebe9 code=0x7ffc0000 [ 614.446809][T12605] tipc: Enabled bearer , priority 0 [ 614.469540][T12605] syzkaller0: entered promiscuous mode [ 614.475094][T12605] syzkaller0: entered allmulticast mode [ 614.576964][T12604] tipc: Resetting bearer [ 614.658965][T12604] tipc: Disabling bearer [ 614.959081][T12621] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1813'. [ 616.037795][T12658] tipc: Enabled bearer , priority 0 [ 616.057065][T12658] syzkaller0: entered promiscuous mode [ 616.062607][T12658] syzkaller0: entered allmulticast mode [ 616.155605][T12656] tipc: Resetting bearer [ 616.202580][T12662] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1826'. [ 616.218178][T12656] tipc: Disabling bearer [ 616.271030][T12667] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1828'. [ 617.202001][T12703] netlink: 'syz.3.1842': attribute type 1 has an invalid length. [ 618.097410][T12725] tipc: Enabled bearer , priority 0 [ 618.129659][T12725] syzkaller0: entered promiscuous mode [ 618.232013][T12725] syzkaller0: entered allmulticast mode [ 618.299746][T12724] tipc: Resetting bearer [ 618.418221][T12724] tipc: Disabling bearer [ 618.921341][T12739] lo speed is unknown, defaulting to 1000 [ 619.565989][T12755] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1863'. [ 619.955011][T12767] tipc: Enabled bearer , priority 0 [ 620.017153][T12762] syzkaller0: entered promiscuous mode [ 620.022762][T12762] syzkaller0: entered allmulticast mode [ 620.154162][T12761] tipc: Resetting bearer [ 620.210092][T12761] tipc: Disabling bearer [ 620.440997][T12780] lo speed is unknown, defaulting to 1000 [ 620.532107][T12775] kvm: kvm [12774]: vcpu2, guest rIP: 0x9131 Unhandled WRMSR(0xc1) = 0xfffffc18 [ 620.545903][T12775] kvm: kvm [12774]: vcpu2, guest rIP: 0x9131 Unhandled WRMSR(0xc2) = 0xfffffc18 [ 620.571108][T12775] kvm: kvm [12774]: vcpu2, guest rIP: 0x9131 Unhandled WRMSR(0x11e) = 0xfffffc18 [ 620.603361][T12775] kvm: kvm [12774]: vcpu2, guest rIP: 0x9131 Unhandled WRMSR(0x186) = 0xfffffc18 [ 620.649253][T12775] kvm: kvm [12774]: vcpu2, guest rIP: 0x9131 Unhandled WRMSR(0x187) = 0xfffffc18 [ 621.490079][T12815] tipc: Enabled bearer , priority 0 [ 621.569779][T12818] syzkaller0: entered promiscuous mode [ 621.588459][T12818] syzkaller0: entered allmulticast mode [ 621.662857][T12813] tipc: Resetting bearer [ 621.765582][T12813] tipc: Disabling bearer [ 621.795605][T12824] tipc: Enabled bearer , priority 0 [ 621.813981][T12824] syzkaller0: entered promiscuous mode [ 621.826196][T12824] syzkaller0: entered allmulticast mode [ 621.852187][T12823] tipc: Resetting bearer [ 622.029909][T12823] tipc: Disabling bearer [ 622.781551][T12865] tipc: Enabled bearer , priority 0 [ 622.832297][T12865] tipc: Resetting bearer [ 622.883934][T12862] tipc: Disabling bearer [ 624.466943][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.473516][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.624288][T12932] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1920'. [ 624.642488][T12932] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1920'. [ 624.660255][T12932] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1920'. [ 624.670036][T12932] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1920'. [ 626.602500][T12931] lo speed is unknown, defaulting to 1000 [ 628.966893][T12993] syzkaller0: entered promiscuous mode [ 628.986191][T12993] syzkaller0: entered allmulticast mode [ 630.748195][T13030] xt_bpf: check failed: parse error [ 632.215416][T13051] tipc: Enabled bearer , priority 0 [ 632.232612][T13051] tipc: Resetting bearer [ 632.253790][T13050] tipc: Disabling bearer [ 635.071231][T13091] pim6reg1: entered promiscuous mode [ 635.077099][T13091] pim6reg1: entered allmulticast mode [ 635.184019][T13095] syzkaller0: entered promiscuous mode [ 635.206178][T13095] syzkaller0: entered allmulticast mode [ 635.347690][T13103] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 636.846616][ T5851] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 637.016330][ T5851] usb 2-1: Using ep0 maxpacket: 32 [ 638.304651][ T5851] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 638.385422][ T5851] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 638.566168][ T5851] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 638.631831][ T5851] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 638.697696][ T5851] usb 2-1: config 0 descriptor?? [ 638.788499][ T5851] hub 2-1:0.0: USB hub found [ 639.006316][ T5851] hub 2-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 639.211366][ T5851] usbhid 2-1:0.0: can't add hid device: -71 [ 639.226190][ T5851] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 639.258844][ T5851] usb 2-1: USB disconnect, device number 21 [ 642.666521][T13199] xt_TPROXY: Can be used only with -p tcp or -p udp [ 643.501433][T13209] tipc: Enabled bearer , priority 0 [ 643.533884][T13209] syzkaller0: entered promiscuous mode [ 643.560448][T13209] syzkaller0: entered allmulticast mode [ 643.614024][T13209] tipc: Resetting bearer [ 643.665323][T13208] tipc: Resetting bearer [ 643.736981][T13208] tipc: Disabling bearer [ 645.098487][T13251] lo speed is unknown, defaulting to 1000 [ 647.630811][T13268] veth0_to_bond: entered allmulticast mode [ 650.593864][T13309] hub 8-0:1.0: USB hub found [ 650.609083][T13309] hub 8-0:1.0: 1 port detected [ 652.183530][ T9] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 652.487490][T13354] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 653.168312][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 653.180205][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 81, changing to 10 [ 653.197045][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 653.216116][ T9] usb 4-1: New USB device found, idVendor=056a, idProduct=0315, bcdDevice= 0.00 [ 653.225325][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 653.249618][ T9] usb 4-1: config 0 descriptor?? [ 654.304260][ T5851] usb 4-1: USB disconnect, device number 20 [ 654.728606][T13370] lo speed is unknown, defaulting to 1000 [ 656.094116][T13402] pim6reg1: entered promiscuous mode [ 656.101178][T13402] pim6reg1: entered allmulticast mode [ 656.492190][T13410] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2063'. [ 656.757409][T13410] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 657.066334][T13415] tipc: Enabled bearer , priority 0 [ 657.117974][T13414] tipc: Resetting bearer [ 657.425588][T13413] tipc: Disabling bearer [ 658.767991][T13437] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 662.141202][T13308] Set syz1 is full, maxelem 65536 reached [ 663.468711][T13522] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2098'. [ 664.194462][T13515] kvm: pic: non byte write [ 664.204107][T13524] veth0_to_bond: entered allmulticast mode [ 665.975637][T13531] kernel profiling enabled (shift: 14) [ 667.891033][T13572] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 667.902454][T13572] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 670.344946][T13591] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2118'. [ 670.458929][T13594] kvm: user requested TSC rate below hardware speed [ 670.497267][T13591] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 671.531952][T13601] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2121'. [ 671.673958][T13591] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 671.861346][T13601] bridge0: entered promiscuous mode [ 671.868400][T13601] macsec1: entered allmulticast mode [ 671.873832][T13601] bridge0: entered allmulticast mode [ 671.891162][T13601] bridge0: port 3(macsec1) entered blocking state [ 671.898811][T13601] bridge0: port 3(macsec1) entered disabled state [ 672.148355][T13601] bridge0: left allmulticast mode [ 672.153884][T13601] bridge0: left promiscuous mode [ 672.927885][T13617] 9pnet: p9_errstr2errno: server reported unknown error Vå? ì [ 672.993051][T13622] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2129'. [ 674.413170][T13642] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2137'. [ 675.882704][ T5843] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 677.764661][ T5843] usb 7-1: Using ep0 maxpacket: 8 [ 677.774160][ T5843] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 677.786163][ T5843] usb 7-1: New USB device found, idVendor=050d, idProduct=3201, bcdDevice= 0.00 [ 677.795292][ T5843] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 677.827730][ T5843] usb 7-1: config 0 descriptor?? [ 678.674322][T13675] lo speed is unknown, defaulting to 1000 [ 678.756184][ T5843] usbhid 7-1:0.0: can't add hid device: -71 [ 678.764776][ T5843] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 678.856908][ T5843] usb 7-1: USB disconnect, device number 2 [ 679.006859][T13688] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2151'. [ 680.450880][T13702] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2155'. [ 680.540095][T13695] futex_wake_op: syz.4.2152 tries to shift op by 32; fix this program [ 680.550844][T13705] tipc: Enabling of bearer rejected, failed to enable media [ 682.670894][T13737] lo speed is unknown, defaulting to 1000 [ 685.940543][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.947056][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.101810][T13763] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2169'. [ 686.596672][T13770] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 686.608449][T13770] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 687.696633][T13774] tipc: Enabled bearer , priority 0 [ 687.751898][T13774] tipc: Resetting bearer [ 687.828059][T13773] tipc: Disabling bearer [ 688.172108][T13791] tipc: Enabling of bearer rejected, failed to enable media [ 689.382483][T13812] hub 8-0:1.0: USB hub found [ 689.400088][T13812] hub 8-0:1.0: 1 port detected [ 690.011899][T13819] lo speed is unknown, defaulting to 1000 [ 690.530556][T13818] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2186'. [ 693.986837][ T30] kauditd_printk_skb: 19 callbacks suppressed [ 693.986882][ T30] audit: type=1800 audit(1755751491.590:73): pid=13850 uid=0 auid=4294967295 ses=4294967295 subj=_ op=set_data cause=unavailable-hash-algorithm comm="syz.6.2190" name="/" dev="sockfs" ino=50221 res=0 errno=0 [ 694.179589][T13841] tipc: Enabled bearer , priority 0 [ 694.414595][T13845] veth0_to_bond: entered allmulticast mode [ 694.549254][T13836] tipc: Disabling bearer [ 695.398467][ T5843] tipc: Node number set to 1159714906 [ 695.475497][T13869] tipc: Enabling of bearer rejected, failed to enable media [ 696.050699][T13880] lo speed is unknown, defaulting to 1000 [ 697.270101][T13891] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2198'. [ 698.098651][T13895] lo speed is unknown, defaulting to 1000 [ 699.136491][ T9] usb 2-1: new full-speed USB device number 22 using dummy_hcd [ 700.113647][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 700.160313][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 700.226262][ T9] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 700.337843][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 701.159837][ T9] usb 2-1: config 0 descriptor?? [ 701.285443][ T6858] kworker/1:7 (6858) used greatest stack depth: 19848 bytes left [ 701.501832][ T9] usbhid 2-1:0.0: can't add hid device: -71 [ 701.544930][ T9] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 701.592767][T13923] syz.0.2208: attempt to access beyond end of device [ 701.592767][T13923] loop1: rw=0, sector=0, nr_sectors = 1 limit=0 [ 701.595001][ T9] usb 2-1: USB disconnect, device number 22 [ 701.706522][T13923] FAT-fs (loop1): unable to read boot sector [ 703.032744][T13942] xt_l2tp: missing protocol rule (udp|l2tpip) [ 705.962546][T13954] bridge0: port 2(bridge_slave_1) entered disabled state [ 705.971141][T13954] bridge0: port 1(bridge_slave_0) entered disabled state [ 706.041440][T13954] bridge0: entered allmulticast mode [ 706.084838][T13957] bridge_slave_1: left allmulticast mode [ 706.132140][T13957] bridge_slave_1: left promiscuous mode [ 706.149821][T13957] bridge0: port 2(bridge_slave_1) entered disabled state [ 706.205051][T13957] bridge_slave_0: left allmulticast mode [ 706.234971][T13957] bridge_slave_0: left promiscuous mode [ 706.240551][T13962] futex_wake_op: syz.3.2218 tries to shift op by 32; fix this program [ 706.254256][T13957] bridge0: port 1(bridge_slave_0) entered disabled state [ 708.201169][T13972] lo speed is unknown, defaulting to 1000 [ 709.173788][ T5843] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 709.366182][ T5843] usb 1-1: Using ep0 maxpacket: 16 [ 709.498012][ T5843] usb 1-1: config 0 has an invalid interface number: 64 but max is 0 [ 709.506540][ T5843] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 709.526111][ T5843] usb 1-1: config 0 has no interface number 0 [ 709.532304][ T5843] usb 1-1: New USB device found, idVendor=0bd3, idProduct=05f4, bcdDevice= 0.5b [ 709.544417][ T5843] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 709.562219][ T5843] usb 1-1: config 0 descriptor?? [ 710.457387][ T9] usb 1-1: USB disconnect, device number 26 [ 711.193108][T14002] IPv6: sit1: Disabled Multicast RS [ 712.034464][T14011] binder: 14010:14011 ioctl 4018620d 0 returned -22 [ 713.597852][T14018] binder: 14010:14018 ioctl c0306201 0 returned -14 [ 714.272471][T14023] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 715.100275][ T49] Bluetooth: hci5: Frame reassembly failed (-84) [ 716.086421][ T5851] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 716.268179][ T5851] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 716.306348][ T5851] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 716.316980][ T5851] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 716.346153][ T5851] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 716.365908][ T5851] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 716.393605][ T5851] usb 4-1: config 0 descriptor?? [ 717.368149][ T5839] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 717.657023][ T5851] plantronics 0003:047F:FFFF.0010: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 717.792996][ T5851] usb 4-1: USB disconnect, device number 21 [ 717.866921][ T30] audit: type=1326 audit(1755751515.470:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14065 comm="syz.4.2252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2b818ebe9 code=0x7ffc0000 [ 717.930077][T14064] fido_id[14064]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 717.944934][ T30] audit: type=1326 audit(1755751515.470:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14065 comm="syz.4.2252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2b818ebe9 code=0x7ffc0000 [ 717.976229][ T30] audit: type=1326 audit(1755751515.470:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14065 comm="syz.4.2252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe2b818ebe9 code=0x7ffc0000 [ 718.053188][ T30] audit: type=1326 audit(1755751515.470:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14065 comm="syz.4.2252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2b818ebe9 code=0x7ffc0000 [ 718.083604][ T30] audit: type=1326 audit(1755751515.470:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14065 comm="syz.4.2252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2b818ebe9 code=0x7ffc0000 [ 718.273476][ T30] audit: type=1326 audit(1755751515.470:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14065 comm="syz.4.2252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe2b818ebe9 code=0x7ffc0000 [ 719.129292][T14058] Bluetooth: hci4: command 0x0406 tx timeout [ 719.150460][ T30] audit: type=1326 audit(1755751515.470:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14065 comm="syz.4.2252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2b818ebe9 code=0x7ffc0000 [ 719.173525][ T30] audit: type=1326 audit(1755751515.470:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14065 comm="syz.4.2252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2b818ebe9 code=0x7ffc0000 [ 719.246753][ T30] audit: type=1326 audit(1755751515.470:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14065 comm="syz.4.2252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe2b818ebe9 code=0x7ffc0000 [ 719.347720][ T30] audit: type=1326 audit(1755751515.470:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14065 comm="syz.4.2252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2b818ebe9 code=0x7ffc0000 [ 720.075823][T14096] lo speed is unknown, defaulting to 1000 [ 722.519876][T14109] lo speed is unknown, defaulting to 1000 [ 723.806214][ T5911] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 724.754840][ T30] kauditd_printk_skb: 25 callbacks suppressed [ 724.754885][ T30] audit: type=1326 audit(1755751522.330:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14131 comm="syz.1.2271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f5b38ebe9 code=0x7fc00000 [ 725.116145][ T5911] usb 4-1: config 0 has no interfaces? [ 725.133453][ T5911] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 725.151715][ T5911] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 725.164986][ T5911] usb 4-1: Product: syz [ 725.174079][ T5911] usb 4-1: Manufacturer: syz [ 725.179271][ T5911] usb 4-1: SerialNumber: syz [ 725.194810][ T5911] usb 4-1: config 0 descriptor?? [ 725.331812][T14158] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 725.492684][ T5911] usb 4-1: USB disconnect, device number 22 [ 725.910086][T14166] lo speed is unknown, defaulting to 1000 [ 726.376099][ C0] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 729.949935][T14193] futex_wake_op: syz.1.2290 tries to shift op by 32; fix this program [ 730.278033][T14221] hub 8-0:1.0: USB hub found [ 730.285350][T14221] hub 8-0:1.0: 1 port detected [ 732.132749][ T890] libceph: connect (1)[c::]:6789 error -101 [ 732.146400][ T890] libceph: mon0 (1)[c::]:6789 connect error [ 732.417997][ T890] libceph: connect (1)[c::]:6789 error -101 [ 732.440628][ T890] libceph: mon0 (1)[c::]:6789 connect error [ 733.423501][ T890] libceph: connect (1)[c::]:6789 error -101 [ 733.527180][T14218] ceph: No mds server is up or the cluster is laggy [ 733.543918][ T890] libceph: mon0 (1)[c::]:6789 connect error [ 734.757543][T14247] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2307'. [ 735.034853][T14257] binder: 14256:14257 ioctl 4018620d 0 returned -22 [ 735.055085][T14255] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2310'. [ 737.822065][T14287] tipc: Enabled bearer , priority 0 [ 737.883295][T14287] tipc: Resetting bearer [ 737.961084][T14284] tipc: Disabling bearer [ 738.996993][T14301] binder: 14300:14301 ioctl 4018620d 0 returned -22 [ 740.318140][T14309] serio: Serial port ttyS3 [ 742.594364][T14338] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 744.544094][T14352] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 744.643877][T14352] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 745.941039][T14379] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2347'. [ 747.396706][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.403190][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 750.257304][T14406] lo speed is unknown, defaulting to 1000 [ 753.513082][T14436] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2360'. [ 753.546507][T14436] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 753.839656][T14436] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 758.290960][T14456] netlink: 'syz.0.2365': attribute type 9 has an invalid length. [ 758.415773][T14457] netlink: 'syz.0.2365': attribute type 9 has an invalid length. [ 758.754309][T14462] lo speed is unknown, defaulting to 1000 [ 758.760780][T14462] lo speed is unknown, defaulting to 1000 [ 758.772116][T14462] lo speed is unknown, defaulting to 1000 [ 758.858640][T14462] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 759.569880][T14462] lo speed is unknown, defaulting to 1000 [ 759.576928][T14462] lo speed is unknown, defaulting to 1000 [ 759.585191][T14462] lo speed is unknown, defaulting to 1000 [ 759.592391][T14462] lo speed is unknown, defaulting to 1000 [ 759.600809][T14462] lo speed is unknown, defaulting to 1000 [ 764.905700][T14509] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2380'. [ 765.600503][ T890] lo speed is unknown, defaulting to 1000 [ 766.966591][ T890] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 768.536209][ T890] usb 7-1: Using ep0 maxpacket: 8 [ 768.537988][T14545] syzkaller0: entered promiscuous mode [ 768.562753][T14545] syzkaller0: entered allmulticast mode [ 768.564332][ T890] usb 7-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 768.610930][ T890] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 768.634509][ T890] usb 7-1: Product: syz [ 768.649077][ T890] usb 7-1: Manufacturer: syz [ 768.654942][ T890] usb 7-1: SerialNumber: syz [ 768.832689][ T890] usb 7-1: config 0 descriptor?? [ 769.841806][ T890] usb 7-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 770.869669][T14578] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2398'. [ 771.244086][T14588] hub 8-0:1.0: USB hub found [ 771.250225][T14588] hub 8-0:1.0: 1 port detected [ 771.805027][ T890] usb 7-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 772.055664][ T890] dvbdev: DVB: registering new adapter (Terratec H7) [ 772.109033][ T890] usb 7-1: media controller created [ 772.156330][ T890] usb read operation failed. (-71) [ 772.229872][ T890] dvb_usb_az6007 7-1:0.0: probe with driver dvb_usb_az6007 failed with error -5 [ 772.277249][ T890] usb 7-1: USB disconnect, device number 3 [ 773.162517][T14598] lo speed is unknown, defaulting to 1000 [ 773.212390][T14598] lo speed is unknown, defaulting to 1000 [ 774.604380][T14623] libceph: resolve '4' (ret=-3): failed [ 775.252697][ T30] audit: type=1800 audit(1755751572.200:110): pid=14623 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.1.2409" name="SYSV00000000" dev="tmpfs" ino=2 res=0 errno=0 [ 775.376267][ T5851] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 775.572438][T14634] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 775.606789][ T5851] usb 1-1: Using ep0 maxpacket: 32 [ 775.620626][ T5851] usb 1-1: config 0 has an invalid interface number: 171 but max is 0 [ 775.641441][ T5851] usb 1-1: config 0 has no interface number 0 [ 775.655164][ T5851] usb 1-1: too many endpoints for config 0 interface 171 altsetting 48: 99, using maximum allowed: 30 [ 775.781000][ T5851] usb 1-1: config 0 interface 171 altsetting 48 has 0 endpoint descriptors, different from the interface descriptor's value: 99 [ 775.868894][ T5851] usb 1-1: config 0 interface 171 has no altsetting 0 [ 775.920967][ T5851] usb 1-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 776.045302][ T5851] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 776.240053][T14638] lo speed is unknown, defaulting to 1000 [ 776.251968][ T5851] usb 1-1: config 0 descriptor?? [ 776.260874][T14638] lo speed is unknown, defaulting to 1000 [ 776.487648][ T5851] usb 1-1: string descriptor 0 read error: -32 [ 776.521068][ T5851] gspca_main: sunplus-2.14.0 probing 041e:400b [ 776.873481][ T5851] gspca_sunplus: reg_w_riv err -71 [ 776.922175][ T5851] sunplus 1-1:0.171: probe with driver sunplus failed with error -71 [ 777.679305][ T5851] usb 1-1: USB disconnect, device number 27 [ 778.936172][T14058] Bluetooth: hci5: command 0x1003 tx timeout [ 778.956402][ T5845] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 779.068058][T14667] vxcan1: entered allmulticast mode [ 779.077380][T14665] syzkaller0: entered promiscuous mode [ 779.082930][T14665] syzkaller0: entered allmulticast mode [ 781.286101][ T5911] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 781.641669][ T5911] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 781.656059][ T5911] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 781.665884][ T5911] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 781.687028][ T5911] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 781.700694][ T5911] usb 2-1: config 0 descriptor?? [ 782.151060][ T5911] cp2112 0003:10C4:EA90.0011: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.1-1/input0 [ 783.204994][ T5911] cp2112 0003:10C4:EA90.0011: error requesting version [ 783.241440][ T5911] cp2112 0003:10C4:EA90.0011: probe with driver cp2112 failed with error -71 [ 783.305600][ T5911] usb 2-1: USB disconnect, device number 23 [ 783.331592][T14744] binder: 14743:14744 ioctl 4018620d 0 returned -22 [ 783.731601][T14751] binder: 14743:14751 ioctl c0306201 0 returned -14 [ 784.529533][T14753] kvm: pic: non byte write [ 784.572080][T14756] netlink: del zone limit has 4 unknown bytes [ 786.555106][T14788] binder: 14786:14788 ioctl 4018620d 0 returned -22 [ 786.958406][T14798] binder: 14786:14798 ioctl c0306201 0 returned -14 [ 787.847697][ T5851] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 788.108402][ T5851] usb 2-1: Using ep0 maxpacket: 32 [ 788.302742][ T5851] usb 2-1: config 0 has an invalid interface number: 132 but max is 0 [ 788.314218][ T5851] usb 2-1: config 0 has no interface number 0 [ 788.332122][ T5851] usb 2-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 788.360860][ T5851] usb 2-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 788.370435][ T5851] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 788.380693][ T5851] usb 2-1: Product: syz [ 788.385099][ T5851] usb 2-1: Manufacturer: syz [ 788.402094][ T5851] usb 2-1: SerialNumber: syz [ 788.847558][ T5851] usb 2-1: config 0 descriptor?? [ 788.859704][ T5851] em28xx 2-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 788.869682][ T5851] em28xx 2-1:0.132: Video interface 132 found: [ 790.083953][ T5851] em28xx 2-1:0.132: chip ID is em2884 [ 790.915845][T14836] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2476'. [ 791.273842][ T5851] em28xx 2-1:0.132: failed to trigger write to i2c address 0xa0 (error=-5) [ 791.899528][ T5851] em28xx 2-1:0.132: failed to read eeprom (err=-5) [ 791.916283][ T5851] em28xx 2-1:0.132: em28xx_i2c_register: em28xx_i2_eeprom failed! retval [-5] [ 791.989269][ T5851] em28xx 2-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 792.010133][ T5851] em28xx 2-1:0.132: analog set to bulk mode. [ 792.026321][T14844] binder: 14843:14844 ioctl 4018620d 0 returned -22 [ 792.038914][ T5911] em28xx 2-1:0.132: Registering V4L2 extension [ 792.267878][ T5851] usb 2-1: USB disconnect, device number 24 [ 792.277507][ T5851] em28xx 2-1:0.132: Disconnecting em28xx [ 792.409146][T14849] binder: 14843:14849 ioctl c0306201 0 returned -14 [ 793.401815][ T5911] em28xx 2-1:0.132: Config register raw data: 0xffffffed [ 794.390030][ T5911] em28xx 2-1:0.132: AC97 chip type couldn't be determined [ 794.413608][ T5911] em28xx 2-1:0.132: No AC97 audio processor [ 794.434097][ T5911] usb 2-1: Decoder not found [ 794.439728][ T5911] em28xx 2-1:0.132: failed to create media graph [ 794.501894][T14878] overlayfs: failed to clone upperpath [ 794.694236][ T5911] em28xx 2-1:0.132: V4L2 device video103 deregistered [ 794.751006][T14884] xt_hashlimit: max too large, truncated to 1048576 [ 795.266358][ T5911] em28xx 2-1:0.132: Remote control support is not available for this card. [ 795.376282][ T5851] em28xx 2-1:0.132: Closing input extension [ 795.741212][ T5851] em28xx 2-1:0.132: Freeing device [ 796.525317][T14905] netlink: 'syz.1.2498': attribute type 10 has an invalid length. [ 796.538491][T14905] team0: Device veth0_vlan failed to register rx_handler [ 797.704893][T14925] overlayfs: failed to clone upperpath [ 798.379319][T14949] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2510'. [ 798.575500][ T5911] IPVS: starting estimator thread 0... [ 798.896222][T14953] IPVS: using max 26 ests per chain, 62400 per kthread [ 801.079873][T14988] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2525'. [ 804.246322][T15024] veth1_to_bond: entered allmulticast mode [ 804.279766][T15023] veth1_to_bond: left allmulticast mode [ 804.492268][T15013] lo speed is unknown, defaulting to 1000 [ 804.538187][T15013] lo speed is unknown, defaulting to 1000 [ 805.728833][T15043] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2543'. [ 806.247798][ T5845] Bluetooth: hci4: Unknown advertising packet type: 0x7f [ 806.248023][ T5845] Bluetooth: hci4: adv larger than maximum supported [ 806.255345][ T5845] Bluetooth: hci4: Malformed LE Event: 0x0d [ 809.123064][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 809.144777][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 810.106114][ T9] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 810.256054][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 810.351665][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 811.090329][ T9] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 811.168703][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 811.196590][ T9] usb 4-1: config 0 descriptor?? [ 811.394388][T15085] syzkaller0: entered promiscuous mode [ 811.420618][ T9] iowarrior 4-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 811.441279][T15085] syzkaller0: entered allmulticast mode [ 812.141316][ T5851] usb 4-1: USB disconnect, device number 23 [ 814.300445][T15115] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2565'. [ 816.690972][T15141] autofs: Bad value for 'fd' [ 816.820824][T15148] syzkaller0: entered promiscuous mode [ 816.826603][T15148] syzkaller0: entered allmulticast mode [ 817.833332][T15139] ceph: No mds server is up or the cluster is laggy [ 818.747445][T15173] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2583'. [ 822.089497][T15202] trusted_key: encrypted_key: insufficient parameters specified [ 823.092541][T15173] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 823.184940][T15173] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 823.227190][T15173] bond0 (unregistering): Released all slaves [ 823.852700][T15223] xt_hashlimit: max too large, truncated to 1048576 [ 826.794480][T15265] xt_hashlimit: max too large, truncated to 1048576 [ 827.099614][T15272] hub 8-0:1.0: USB hub found [ 827.105171][T15272] hub 8-0:1.0: 1 port detected [ 828.806314][T15277] overlayfs: statfs failed on './file0' [ 830.995821][T15312] xt_hashlimit: max too large, truncated to 1048576 [ 834.130150][T15328] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 834.150150][T15328] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 835.707536][T15341] fuse: Bad value for 'fd' [ 838.066709][T15346] [U] R5¡JCÒ°~V6“˜|‡7§¤Á…KXVZZËG—RÙÔ $¨ [ 838.132782][T15361] xt_hashlimit: max too large, truncated to 1048576 [ 839.129699][T15376] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 839.140943][T15376] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 839.800497][T15385] overlayfs: failed to resolve './file0': -2 [ 841.084755][T15403] Set syz1 is full, maxelem 65536 reached [ 841.526820][ T5904] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 841.807792][ T5904] usb 2-1: Using ep0 maxpacket: 32 [ 841.886393][ T5904] usb 2-1: config 0 has an invalid interface number: 12 but max is 0 [ 841.899513][ T5904] usb 2-1: config 0 has no interface number 0 [ 841.905731][ T5904] usb 2-1: config 0 interface 12 has no altsetting 0 [ 841.936694][ T5904] usb 2-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 841.957456][ T5904] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 841.983020][ T5904] usb 2-1: Product: syz [ 842.021950][ T5904] usb 2-1: Manufacturer: syz [ 842.035421][ T5904] usb 2-1: SerialNumber: syz [ 842.075864][ T5904] usb 2-1: config 0 descriptor?? [ 842.563665][ T5904] f81534 2-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 842.571874][ T5904] f81534 2-1:0.12: f81534_find_config_idx: read failed: -71 [ 842.599297][ T5904] f81534 2-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 842.607227][ T5904] f81534 2-1:0.12: probe with driver f81534 failed with error -71 [ 842.649199][ T5904] usb 2-1: USB disconnect, device number 25 [ 843.119672][ T30] audit: type=1326 audit(1755751640.720:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15426 comm="syz.4.2660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2b818ebe9 code=0x7ffc0000 [ 843.356215][ T30] audit: type=1326 audit(1755751640.720:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15426 comm="syz.4.2660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fe2b818ebe9 code=0x7ffc0000 [ 843.471085][ T30] audit: type=1326 audit(1755751640.720:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15426 comm="syz.4.2660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2b818ebe9 code=0x7ffc0000 [ 843.578965][ T30] audit: type=1326 audit(1755751640.720:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15426 comm="syz.4.2660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fe2b818ebe9 code=0x7ffc0000 [ 843.669508][ T30] audit: type=1326 audit(1755751640.720:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15426 comm="syz.4.2660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2b818ebe9 code=0x7ffc0000 [ 843.789794][ T30] audit: type=1326 audit(1755751640.720:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15426 comm="syz.4.2660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe2b818d550 code=0x7ffc0000 [ 843.916100][ T30] audit: type=1326 audit(1755751640.720:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15426 comm="syz.4.2660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2b818ebe9 code=0x7ffc0000 [ 844.029618][ T30] audit: type=1326 audit(1755751640.720:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15426 comm="syz.4.2660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2b818ebe9 code=0x7ffc0000 [ 844.112572][ T30] audit: type=1326 audit(1755751640.720:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15426 comm="syz.4.2660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=32 compat=0 ip=0x7fe2b818ebe9 code=0x7ffc0000 [ 844.722851][ T30] audit: type=1326 audit(1755751640.720:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15426 comm="syz.4.2660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2b818ebe9 code=0x7ffc0000 [ 845.429833][T15468] fuse: Unknown parameter '0xffffffffffffffff00000000000000000000' [ 849.702976][T15506] overlayfs: failed to clone lowerpath [ 849.712685][T15506] overlayfs: failed to clone upperpath [ 850.130270][T15519] netlink: 'syz.4.2683': attribute type 10 has an invalid length. [ 850.146957][T15519] 8021q: adding VLAN 0 to HW filter on device »»»»»» [ 850.155879][T15519] team0: Port device »»»»»» added [ 853.283538][T15543] lo speed is unknown, defaulting to 1000 [ 853.291466][T15543] lo speed is unknown, defaulting to 1000 [ 854.589597][ T5911] libceph: connect (1)[c::]:6789 error -101 [ 854.860932][ T5911] libceph: mon0 (1)[c::]:6789 connect error [ 855.427406][ T5851] libceph: connect (1)[c::]:6789 error -101 [ 856.286263][ T5851] libceph: mon0 (1)[c::]:6789 connect error [ 856.816359][ T5851] libceph: connect (1)[c::]:6789 error -101 [ 856.825074][ T5851] libceph: mon0 (1)[c::]:6789 connect error [ 857.153333][T15554] ceph: No mds server is up or the cluster is laggy [ 857.244283][ C1] vcan0: j1939_tp_txtimer: 0xffff888056f59c00: tx aborted with unknown reason: -2 [ 857.753639][ C1] vcan0: j1939_tp_rxtimer: 0xffff888056f59c00: abort rx timeout. Force session deactivation [ 857.766184][ T9] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 858.464571][T15602] ªªªªª»: renamed from hsr0 [ 858.494242][ C1] vcan0: j1939_tp_rxtimer: 0xffff888029e07c00: rx timeout, send abort [ 859.002560][ C1] vcan0: j1939_tp_rxtimer: 0xffff888029e07c00: abort rx timeout. Force session deactivation [ 860.366389][ T9] usb 4-1: device descriptor read/all, error -71 [ 862.599440][T15644] openvswitch: netlink: Flow actions attr not present in new flow. [ 863.821932][T15649] netdevsim netdevsim6: Direct firmware load for @ failed with error -2 [ 863.830861][T15649] netdevsim netdevsim6: Falling back to sysfs fallback for: @ [ 863.894105][T15651] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2720'. [ 865.705905][T15667] autofs: Bad value for 'fd' [ 869.460043][T15700] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2736'. [ 869.779844][T15711] lo speed is unknown, defaulting to 1000 [ 869.854280][T15711] lo speed is unknown, defaulting to 1000 [ 870.007366][T15715] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2738'. [ 870.216704][ T44] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 870.224870][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.258261][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.459587][ T44] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF4, changing to 0x84 [ 870.473592][ T44] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 1023 [ 870.489085][ T44] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 870.658572][T15721] ubi31: attaching mtd0 [ 870.683867][T15721] ubi31: scanning is finished [ 870.688897][T15721] ubi31: empty MTD device detected [ 871.561155][T15702] block nbd6: shutting down sockets [ 871.789070][ T44] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 872.021497][ T44] usb 2-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 872.102595][ T44] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 872.506058][ T44] usb 2-1: Product: syz [ 872.518306][T15721] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 872.546528][ T44] usb 2-1: Manufacturer: syz [ 872.655980][ T44] usb 2-1: SerialNumber: syz [ 872.883271][ T44] usb 2-1: config 0 descriptor?? [ 872.890228][T15721] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 872.956334][T15735] lo speed is unknown, defaulting to 1000 [ 872.994572][T15735] lo speed is unknown, defaulting to 1000 [ 873.087635][T15721] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 873.171576][T15721] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 873.191917][T15721] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 873.209296][T15721] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 873.236624][T15721] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 2179491077 [ 873.316139][T15721] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 873.397895][T15733] ubi31: background thread "ubi_bgt31d" started, PID 15733 [ 873.421282][ T44] usb 2-1: can't set config #0, error -71 [ 873.437813][T15739] overlayfs: conflicting lowerdir path [ 873.496558][ T44] usb 2-1: USB disconnect, device number 26 [ 875.012076][T15749] syzkaller0: entered promiscuous mode [ 875.046811][T15749] syzkaller0: entered allmulticast mode [ 875.693276][T15764] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2750'. [ 875.765492][ T890] libceph: connect (1)[c::]:6789 error -101 [ 875.781381][ T890] libceph: mon0 (1)[c::]:6789 connect error [ 875.847966][T15759] ceph: No mds server is up or the cluster is laggy [ 875.960272][T15773] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2752'. [ 876.476403][T15779] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2754'. [ 876.798796][T15781] netlink: 'syz.0.2755': attribute type 1 has an invalid length. [ 877.741931][T15788] overlayfs: failed to clone upperpath [ 877.872733][T15781] 8021q: adding VLAN 0 to HW filter on device bond0 [ 878.101156][T15801] IPVS: Error connecting to the multicast addr [ 879.370382][T15817] Bluetooth: MGMT ver 1.23 [ 879.996983][T15826] netlink: 'syz.6.2772': attribute type 1 has an invalid length. [ 880.236752][T15826] 8021q: adding VLAN 0 to HW filter on device bond1 [ 880.267777][T15834] IPVS: sync thread started: state = MASTER, mcast_ifn = geneve0, syncid = 10802, id = 0 [ 880.326423][T15831] bond1: (slave geneve2): making interface the new active one [ 880.365140][T15831] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 880.804631][T15842] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2776'. [ 880.982801][T15845] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2775'. [ 882.040480][T15849] lo speed is unknown, defaulting to 1000 [ 882.047487][T15849] lo speed is unknown, defaulting to 1000 [ 882.454213][T15864] fuse: Bad value for 'fd' [ 882.635279][T15868] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2786'. [ 882.734110][T15868] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2786'. [ 882.798841][T15868] bridge0: port 2(bridge_slave_1) entered disabled state [ 882.806638][T15868] bridge0: port 1(bridge_slave_0) entered disabled state [ 882.875218][T15878] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2787'. [ 884.236840][T15886] xt_hashlimit: max too large, truncated to 1048576 [ 884.961700][T15889] 9pnet_virtio: no channels available for device syz [ 885.709293][T15891] lo speed is unknown, defaulting to 1000 [ 885.716524][T15891] lo speed is unknown, defaulting to 1000 [ 886.127290][T15904] autofs: Bad value for 'fd' [ 886.164767][T15894] tipc: Enabling of bearer rejected, failed to enable media [ 886.234251][T15908] fuse: Bad value for 'fd' [ 886.953289][T15925] 9pnet_virtio: no channels available for device syz [ 887.115322][T15929] xt_hashlimit: max too large, truncated to 1048576 [ 888.123915][T15934] lo speed is unknown, defaulting to 1000 [ 888.130996][T15934] lo speed is unknown, defaulting to 1000 [ 888.476674][T15940] autofs: Bad value for 'fd' [ 889.390404][T15951] fuse: Bad value for 'fd' [ 889.954573][T15958] netlink: 'syz.0.2813': attribute type 1 has an invalid length. [ 890.090031][T15958] 8021q: adding VLAN 0 to HW filter on device bond1 [ 890.760128][T15970] lo speed is unknown, defaulting to 1000 [ 890.767269][T15970] lo speed is unknown, defaulting to 1000 [ 890.909765][T15974] overlayfs: failed to clone upperpath [ 892.932860][T15989] bpf: Bad value for 'mode' [ 893.540038][T15996] netlink: 'syz.3.2824': attribute type 1 has an invalid length. [ 894.688203][T15996] 8021q: adding VLAN 0 to HW filter on device bond2 [ 895.236770][T16015] fuse: Bad value for 'fd' [ 896.829901][T16041] netlink: 'syz.3.2837': attribute type 1 has an invalid length. [ 897.039541][T16041] 8021q: adding VLAN 0 to HW filter on device bond3 [ 897.493522][T16053] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 897.546654][T16053] batadv_slave_0: entered promiscuous mode [ 900.439048][ T30] kauditd_printk_skb: 27 callbacks suppressed [ 900.439068][ T30] audit: type=1326 audit(1755751698.020:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16099 comm="syz.3.2854" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa82158ebe9 code=0x7ffc0000 [ 900.539229][ T30] audit: type=1326 audit(1755751698.020:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16099 comm="syz.3.2854" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa82158ebe9 code=0x7ffc0000 [ 900.629995][ T30] audit: type=1326 audit(1755751698.020:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16099 comm="syz.3.2854" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fa82158ebe9 code=0x7ffc0000 [ 900.705171][ T30] audit: type=1326 audit(1755751698.020:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16099 comm="syz.3.2854" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa82158ebe9 code=0x7ffc0000 [ 900.771348][ T30] audit: type=1326 audit(1755751698.020:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16099 comm="syz.3.2854" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa82158ebe9 code=0x7ffc0000 [ 900.911091][ T30] audit: type=1326 audit(1755751698.020:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16099 comm="syz.3.2854" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7fa82158ebe9 code=0x7ffc0000 [ 900.988677][ T30] audit: type=1326 audit(1755751698.020:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16099 comm="syz.3.2854" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa82152add9 code=0x7ffc0000 [ 901.111945][ T30] audit: type=1326 audit(1755751698.020:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16099 comm="syz.3.2854" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa82152add9 code=0x7ffc0000 [ 901.132539][T16105] No control pipe specified [ 901.210524][ T30] audit: type=1326 audit(1755751698.020:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16099 comm="syz.3.2854" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa82152add9 code=0x7ffc0000 [ 901.295189][ T30] audit: type=1326 audit(1755751698.020:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16099 comm="syz.3.2854" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa82152add9 code=0x7ffc0000 [ 901.337180][T16107] overlayfs: failed to clone upperpath [ 901.968727][T16120] lo speed is unknown, defaulting to 1000 [ 901.987113][T16120] lo speed is unknown, defaulting to 1000 [ 901.998829][T16120] lo speed is unknown, defaulting to 1000 [ 903.245288][T16120] infiniband sz1: set down [ 903.250517][T16120] infiniband sz1: added lo [ 903.296667][ T5851] lo speed is unknown, defaulting to 1000 [ 903.600524][T16120] RDS/IB: sz1: added [ 903.605516][T16120] smc: adding ib device sz1 with port count 1 [ 903.611975][T16120] smc: ib device sz1 port 1 has pnetid [ 903.728237][T16120] lo speed is unknown, defaulting to 1000 [ 903.925878][T16120] lo speed is unknown, defaulting to 1000 [ 904.064404][T16120] lo speed is unknown, defaulting to 1000 [ 904.204210][T16120] lo speed is unknown, defaulting to 1000 [ 904.344286][T16120] lo speed is unknown, defaulting to 1000 [ 904.519253][ T5851] lo speed is unknown, defaulting to 1000 [ 906.088727][T16149] No control pipe specified [ 906.147028][T16151] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 906.873976][T16169] xt_hashlimit: max too large, truncated to 1048576 [ 909.298373][T16193] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2879'. [ 911.045999][ T30] kauditd_printk_skb: 59 callbacks suppressed [ 911.046022][ T30] audit: type=1800 audit(1755751708.650:217): pid=16192 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.4.2879" name="bus" dev="ramfs" ino=58237 res=0 errno=0 [ 911.088333][T16201] fuse: Bad value for 'fd' [ 911.271590][T16204] No control pipe specified [ 911.730667][ C1] vcan0: j1939_tp_rxtimer: 0xffff888056d3b400: rx timeout, send abort [ 911.739118][ C1] vcan0: j1939_tp_rxtimer: 0xffff888068747000: rx timeout, send abort [ 911.747648][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888056d3b400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 911.762083][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888068747000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 913.676683][T16233] autofs: Bad value for 'fd' [ 914.487372][T14058] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 914.498179][T14058] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 914.508424][T14058] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 914.518537][T14058] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 914.530535][T14058] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 914.537809][T16249] overlayfs: failed to clone upperpath [ 914.604799][T16246] lo speed is unknown, defaulting to 1000 [ 914.615726][T16246] lo speed is unknown, defaulting to 1000 [ 914.625411][T16246] lo speed is unknown, defaulting to 1000 [ 915.226809][T16261] autofs: Bad value for 'fd' [ 915.504518][T16266] 9pnet_virtio: no channels available for device syz [ 915.987071][T16246] chnl_net:caif_netlink_parms(): no params data found [ 916.567932][T16246] bridge0: port 1(bridge_slave_0) entered blocking state [ 916.575315][T16246] bridge0: port 1(bridge_slave_0) entered disabled state [ 916.583074][T16246] bridge_slave_0: entered allmulticast mode [ 916.590913][T16246] bridge_slave_0: entered promiscuous mode [ 916.603069][T16246] bridge0: port 2(bridge_slave_1) entered blocking state [ 916.611428][T16246] bridge0: port 2(bridge_slave_1) entered disabled state [ 916.619135][ T5845] Bluetooth: hci2: command tx timeout [ 916.619921][T16246] bridge_slave_1: entered allmulticast mode [ 916.633667][T16246] bridge_slave_1: entered promiscuous mode [ 916.652103][T16284] overlayfs: failed to clone upperpath [ 916.937678][T16246] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 917.161215][T16246] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 917.411006][T16246] team0: Port device team_slave_0 added [ 917.447143][T16246] team0: Port device team_slave_1 added [ 917.738556][T16246] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 917.756216][T16246] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 917.831206][T16246] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 917.861837][T16246] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 917.885230][T16246] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 917.942299][T16246] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 918.036752][T16266] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2904'. [ 918.151830][T16246] hsr_slave_0: entered promiscuous mode [ 918.170601][T16246] hsr_slave_1: entered promiscuous mode [ 918.197265][T16246] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 918.213463][T16246] Cannot create hsr debugfs directory [ 918.696075][ T5845] Bluetooth: hci2: command tx timeout [ 919.437179][T16246] 8021q: adding VLAN 0 to HW filter on device bond0 [ 919.534261][T16246] 8021q: adding VLAN 0 to HW filter on device team0 [ 919.827654][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 919.836181][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 919.927483][ T6328] bridge0: port 2(bridge_slave_1) entered blocking state [ 919.934660][ T6328] bridge0: port 2(bridge_slave_1) entered forwarding state [ 920.776169][ T5845] Bluetooth: hci2: command tx timeout [ 922.377568][T16246] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 922.529289][T16343] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2926'. [ 922.946148][ T5845] Bluetooth: hci2: command tx timeout [ 923.537476][T16246] veth0_vlan: entered promiscuous mode [ 923.595727][T16246] veth1_vlan: entered promiscuous mode [ 923.650214][T16367] overlayfs: failed to clone upperpath [ 923.966142][T16246] veth0_macvtap: entered promiscuous mode [ 924.042778][T16246] veth1_macvtap: entered promiscuous mode [ 924.189023][T16246] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 924.385702][T16246] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 925.836406][ T6328] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 925.881329][ T6328] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 926.108789][ T1139] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 926.150868][ T1139] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 927.983983][T16407] rdma_rxe: rxe_newlink: failed to add lo [ 928.527436][T14058] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 928.570616][T14058] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 928.582779][T14058] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 928.592815][T14058] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 928.600713][T14058] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 929.059258][T16409] lo speed is unknown, defaulting to 1000 [ 929.076184][T16409] lo speed is unknown, defaulting to 1000 [ 929.086208][T16409] lo speed is unknown, defaulting to 1000 [ 929.531109][T16420] fuse: Bad value for 'fd' [ 929.722652][ T6005] bridge_slave_1: left allmulticast mode [ 929.752531][ T6005] bridge_slave_1: left promiscuous mode [ 930.227930][ T6005] bridge0: port 2(bridge_slave_1) entered disabled state [ 930.353606][ T6005] bridge_slave_0: left allmulticast mode [ 930.393451][ T6005] bridge_slave_0: left promiscuous mode [ 930.428326][ T6005] bridge0: port 1(bridge_slave_0) entered disabled state [ 930.776287][T14058] Bluetooth: hci5: command tx timeout [ 931.686600][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.693054][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 932.612916][ T6005] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 932.614525][T16464] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 932.635435][ T6005] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 932.645302][ T6005] bond0 (unregistering): Released all slaves [ 932.663099][ T6005] bond1 (unregistering): Released all slaves [ 932.827113][ T6005] bond2 (unregistering): Released all slaves [ 932.859266][T14058] Bluetooth: hci5: command tx timeout [ 932.983239][ T6005] bond3 (unregistering): Released all slaves [ 933.182840][ T6005] tipc: Left network mode [ 934.592796][T16481] fuse: Bad value for 'fd' [ 934.879530][T16493] IPVS: Error connecting to the multicast addr [ 934.944182][T14058] Bluetooth: hci5: command tx timeout [ 935.202524][T16409] chnl_net:caif_netlink_parms(): no params data found [ 935.938958][ T6005] hsr_slave_0: left promiscuous mode [ 936.015546][ T6005] hsr_slave_1: left promiscuous mode [ 936.032441][ T6005] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 937.026271][T14058] Bluetooth: hci5: command tx timeout [ 937.823373][ T6005] team0 (unregistering): Port device team_slave_1 removed [ 938.019577][ T6005] team0 (unregistering): Port device team_slave_0 removed [ 938.457118][T16528] rdma_rxe: rxe_newlink: failed to add lo [ 939.575426][T16534] fuse: Bad value for 'fd' [ 939.812440][T16537] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2966'. [ 940.703626][ T12] smc: removing ib device sz1 [ 942.637913][T16409] bridge0: port 1(bridge_slave_0) entered blocking state [ 942.645319][T16409] bridge0: port 1(bridge_slave_0) entered disabled state [ 942.654695][T16409] bridge_slave_0: entered allmulticast mode [ 942.692796][T16409] bridge_slave_0: entered promiscuous mode [ 942.733496][T16409] bridge0: port 2(bridge_slave_1) entered blocking state [ 942.756262][T16409] bridge0: port 2(bridge_slave_1) entered disabled state [ 942.763578][T16409] bridge_slave_1: entered allmulticast mode [ 942.834087][T16409] bridge_slave_1: entered promiscuous mode [ 943.160419][T16571] fuse: Bad value for 'fd' [ 943.656868][T16409] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 943.709145][T16409] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 943.885570][T16582] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2980'. [ 944.140522][T16586] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 944.171039][T16409] team0: Port device team_slave_0 added [ 944.372301][T16409] team0: Port device team_slave_1 added [ 944.449083][ T5845] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 944.466257][ T5845] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 944.475788][ T5845] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 944.484892][ T5845] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 944.493813][ T5845] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 945.041291][T16409] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 945.086650][T16409] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 945.139967][T16409] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 945.240433][T16409] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 945.256259][ C0] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 945.266146][T16409] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 945.399320][T16409] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 945.581515][T16592] lo speed is unknown, defaulting to 1000 [ 945.751414][T16592] lo speed is unknown, defaulting to 1000 [ 945.775003][T16409] hsr_slave_0: entered promiscuous mode [ 945.806950][ T6005] IPVS: stop unused estimator thread 0... [ 945.848164][T16409] hsr_slave_1: entered promiscuous mode [ 945.887549][T16409] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 945.912510][T16618] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2987'. [ 945.938273][T16409] Cannot create hsr debugfs directory [ 946.001780][T16620] fuse: Bad value for 'fd' [ 946.176965][T16626] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 946.296007][ C0] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 946.329048][T16629] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 946.420595][T16626] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 946.442936][T16626] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 946.454206][T16626] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2990'. [ 946.529428][T16637] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 946.540558][ T5845] Bluetooth: hci0: command tx timeout [ 946.655760][T16640] netlink: 'syz.1.2993': attribute type 4 has an invalid length. [ 946.907758][T16629] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 946.926428][T16629] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 946.935742][T16629] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 946.952796][T16629] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 947.019883][ T5918] lo speed is unknown, defaulting to 1000 [ 947.025693][ T5918] syz2: Port: 1 Link DOWN [ 947.337060][ C0] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 947.453788][T16652] fuse: Bad value for 'fd' [ 947.473106][ T6005] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 947.828487][ T6005] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 947.880913][T16664] 9pnet_fd: Insufficient options for proto=fd [ 947.889312][T16664] overlayfs: failed to clone upperpath [ 948.045311][ T6005] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 948.120246][T16672] fuse: Bad value for 'fd' [ 948.225263][ T6005] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 948.365478][T16592] chnl_net:caif_netlink_parms(): no params data found [ 948.376045][ C0] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 948.414476][T16681] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3001'. [ 948.616095][ T5845] Bluetooth: hci0: command tx timeout [ 948.627173][T16409] 8021q: adding VLAN 0 to HW filter on device bond0 [ 948.876120][T16694] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 948.942966][T16592] bridge0: port 1(bridge_slave_0) entered blocking state [ 948.956325][T16592] bridge0: port 1(bridge_slave_0) entered disabled state [ 948.968252][T16592] bridge_slave_0: entered allmulticast mode [ 948.982174][T16592] bridge_slave_0: entered promiscuous mode [ 949.041471][T16592] bridge0: port 2(bridge_slave_1) entered blocking state [ 949.053466][T16592] bridge0: port 2(bridge_slave_1) entered disabled state [ 949.062620][T16688] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 949.124052][T16592] bridge_slave_1: entered allmulticast mode [ 949.149464][T16592] bridge_slave_1: entered promiscuous mode [ 949.254414][T16699] fuse: Bad value for 'fd' [ 949.380218][T16592] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 949.416045][ C0] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 949.432772][T16409] 8021q: adding VLAN 0 to HW filter on device team0 [ 949.459312][T16592] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 949.562205][ T6329] bridge0: port 1(bridge_slave_0) entered blocking state [ 949.569482][ T6329] bridge0: port 1(bridge_slave_0) entered forwarding state [ 949.690446][ T6329] bridge0: port 2(bridge_slave_1) entered blocking state [ 949.697712][ T6329] bridge0: port 2(bridge_slave_1) entered forwarding state [ 949.728553][ T6005] bridge_slave_1: left allmulticast mode [ 949.734287][ T6005] bridge_slave_1: left promiscuous mode [ 949.751445][ T6005] bridge0: port 2(bridge_slave_1) entered disabled state [ 949.765680][T16707] 9pnet_fd: Insufficient options for proto=fd [ 949.776034][ T6005] bridge_slave_0: left allmulticast mode [ 949.782789][ T6005] bridge_slave_0: left promiscuous mode [ 949.792020][T16707] overlayfs: failed to clone upperpath [ 949.797862][ T6005] bridge0: port 1(bridge_slave_0) entered disabled state [ 949.841708][ T6005] bridge_slave_1: left allmulticast mode [ 949.855137][ T6005] bridge_slave_1: left promiscuous mode [ 949.876511][ T6005] bridge0: port 2(bridge_slave_1) entered disabled state [ 949.889675][ T6005] bridge_slave_0: left allmulticast mode [ 949.895422][ T6005] bridge_slave_0: left promiscuous mode [ 949.920378][ T6005] bridge0: port 1(bridge_slave_0) entered disabled state [ 950.063143][T16713] netlink: 'syz.4.3010': attribute type 10 has an invalid length. [ 950.716396][ T5845] Bluetooth: hci0: command tx timeout [ 951.234393][ T6005] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 951.247915][ T6005] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 951.264696][ T6005] bond0 (unregistering): Released all slaves [ 951.506743][ C0] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 951.957116][ T6005] bond0 (unregistering): Released all slaves [ 952.136004][ T6005] bond1 (unregistering): Released all slaves [ 952.170955][T16592] team0: Port device team_slave_0 added [ 952.191103][T16711] bond0: option arp_validate: mode dependency failed, not supported in mode balance-alb(6) [ 952.226490][T16592] team0: Port device team_slave_1 added [ 952.232654][T16712] bond0: option arp_interval: mode dependency failed, not supported in mode balance-alb(6) [ 952.642434][T16728] fuse: Bad value for 'fd' [ 952.647095][ T6005] tipc: Left network mode [ 952.655321][T16592] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 952.664998][T16592] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 952.727536][ T6005] IPVS: stopping master sync thread 15834 ... [ 952.757328][T16592] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 952.780678][ T5845] Bluetooth: hci0: command tx timeout [ 953.105476][T16592] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 953.365021][T16592] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 953.588983][T16732] cgroup: fork rejected by pids controller in /syz6 [ 953.809671][T16592] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 954.527983][T16592] hsr_slave_0: entered promiscuous mode [ 954.543046][T16592] hsr_slave_1: entered promiscuous mode [ 954.563793][T16592] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 954.582534][T16592] Cannot create hsr debugfs directory [ 955.576064][ C0] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 956.321224][ T6005] hsr_slave_0: left promiscuous mode [ 956.345847][ T6005] hsr_slave_1: left promiscuous mode [ 956.469828][ T6005] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 956.486414][ T6005] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 956.512619][ T6005] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 956.530578][ T6005] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 956.686390][ T6005] hsr_slave_0: left promiscuous mode [ 956.849351][ T6005] hsr_slave_1: left promiscuous mode [ 956.883902][ T6005] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 956.930317][ T6005] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 957.017736][ T6005] batman_adv: batadv0: Removing interface: virt_wifi0 [ 957.355288][ T6005] veth1_macvtap: left promiscuous mode [ 957.391650][T17094] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3023'. [ 957.401013][ T6005] veth0_macvtap: left promiscuous mode [ 957.431459][ T6005] veth1_vlan: left promiscuous mode [ 957.449065][ T6005] veth0_vlan: left promiscuous mode [ 957.484927][ T6005] veth1_macvtap: left promiscuous mode [ 957.490738][ T6005] veth0_macvtap: left promiscuous mode [ 957.500381][ T6005] veth1_vlan: left promiscuous mode [ 957.513767][ T6005] veth0_vlan: left promiscuous mode [ 958.282289][T17104] fuse: Bad value for 'fd' [ 958.924954][ T6005] team0 (unregistering): Port device team_slave_1 removed [ 958.984817][ T6005] team0 (unregistering): Port device team_slave_0 removed [ 959.959433][ T6005] team0 (unregistering): Port device team_slave_1 removed [ 960.015642][ T6005] team0 (unregistering): Port device team_slave_0 removed [ 960.761922][T16409] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 961.373872][T16592] 8021q: adding VLAN 0 to HW filter on device bond0 [ 961.401582][T17138] netlink: 'syz.1.3033': attribute type 8 has an invalid length. [ 961.678372][T17133] lo speed is unknown, defaulting to 1000 [ 961.726133][T16592] 8021q: adding VLAN 0 to HW filter on device team0 [ 961.760414][T17133] lo speed is unknown, defaulting to 1000 [ 961.857097][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 961.864402][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 961.928428][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 961.935648][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 962.051779][T17147] fuse: Bad value for 'fd' [ 962.659543][T16409] veth0_vlan: entered promiscuous mode [ 962.706447][T17165] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3040'. [ 962.744516][T16409] veth1_vlan: entered promiscuous mode [ 962.833203][T16409] veth0_macvtap: entered promiscuous mode [ 962.929498][T16409] veth1_macvtap: entered promiscuous mode [ 963.024148][ T6005] IPVS: stop unused estimator thread 0... [ 963.061115][T16409] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 963.145016][T16409] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 963.206389][T17179] netlink: 'syz.1.3042': attribute type 10 has an invalid length. [ 963.656276][ C0] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 963.664365][T16592] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 963.719629][ T6329] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 963.776150][ T6329] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 964.120476][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 964.141697][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 965.274341][T16592] veth0_vlan: entered promiscuous mode [ 965.313118][T16592] veth1_vlan: entered promiscuous mode [ 965.455401][T16592] veth0_macvtap: entered promiscuous mode [ 965.519309][T16592] veth1_macvtap: entered promiscuous mode [ 965.613786][T16592] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 965.644687][T16592] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 966.067742][T17243] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3055'. [ 966.096066][T17243] netlink: 'syz.0.3055': attribute type 4 has an invalid length. [ 966.121014][T17243] netlink: 'syz.0.3055': attribute type 1 has an invalid length. [ 966.149509][T17243] netlink: 'syz.0.3055': attribute type 2 has an invalid length. [ 966.178363][T17243] netlink: 129968 bytes leftover after parsing attributes in process `syz.0.3055'. [ 966.230456][T17243] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3055'. [ 966.376564][ T6005] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 966.384463][ T6005] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 966.554471][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 966.604564][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 969.184893][T14058] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 969.210395][T14058] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 969.222469][T14058] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 969.235329][T14058] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 969.247013][T14058] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 969.290663][T17277] overlayfs: failed to clone upperpath [ 969.504898][T17275] lo speed is unknown, defaulting to 1000 [ 969.579188][T17275] lo speed is unknown, defaulting to 1000 [ 970.412775][ T6328] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 970.830727][T17302] : entered promiscuous mode [ 970.895173][ T6328] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 971.366242][T14058] Bluetooth: hci2: command tx timeout [ 971.582496][ T6328] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 972.455854][T17275] chnl_net:caif_netlink_parms(): no params data found [ 972.853542][ T6328] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 973.423985][T14058] Bluetooth: hci2: command tx timeout [ 973.722538][T17275] bridge0: port 1(bridge_slave_0) entered blocking state [ 973.762914][T17275] bridge0: port 1(bridge_slave_0) entered disabled state [ 973.846967][T17275] bridge_slave_0: entered allmulticast mode [ 973.880348][T17275] bridge_slave_0: entered promiscuous mode [ 973.933482][T17275] bridge0: port 2(bridge_slave_1) entered blocking state [ 973.982529][T17275] bridge0: port 2(bridge_slave_1) entered disabled state [ 974.017563][T17275] bridge_slave_1: entered allmulticast mode [ 974.058539][T17275] bridge_slave_1: entered promiscuous mode [ 974.511274][T17275] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 974.568869][T17275] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 975.033795][T17358] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3082'. [ 975.497156][T14058] Bluetooth: hci2: command tx timeout [ 975.916697][T17363] fuse: Bad value for 'fd' [ 977.016603][ T6328] team0: Port device »»»»»» removed [ 977.051048][ T6328] »»»»»» (unregistering): (slave bond_slave_0): Releasing backup interface [ 977.111155][ T6328] »»»»»» (unregistering): (slave bond_slave_1): Releasing backup interface [ 977.154774][ T6328] »»»»»» (unregistering): Released all slaves [ 977.582828][T14058] Bluetooth: hci2: command tx timeout [ 977.754492][ T6328] bond0 (unregistering): Released all slaves [ 977.863949][T17275] team0: Port device team_slave_0 added [ 977.946433][T17275] team0: Port device team_slave_1 added [ 977.961197][ T6328] tipc: Left network mode [ 978.056081][T17385] binder: 17384:17385 ioctl 4018620d 0 returned -22 [ 978.479701][T17390] binder: 17384:17390 ioctl c0306201 0 returned -14 [ 979.601477][T17404] fuse: Unknown parameter 'grou00000000000000000000' [ 979.952305][T17409] xt_hashlimit: max too large, truncated to 1048576 [ 979.982407][T17275] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 980.961136][T17275] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 981.146202][T17275] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 981.159426][T17275] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 981.166556][T17275] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 981.193047][T17275] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 981.320465][T17415] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3103'. [ 983.688528][T17275] hsr_slave_0: entered promiscuous mode [ 983.703486][T17275] hsr_slave_1: entered promiscuous mode [ 983.923330][ T6328] hsr_slave_0: left promiscuous mode [ 983.954997][ T6328] hsr_slave_1: left promiscuous mode [ 984.051759][ T6328] veth1_macvtap: left promiscuous mode [ 984.062302][ T6328] veth0_macvtap: left promiscuous mode [ 984.076793][ T6328] veth1_vlan: left promiscuous mode [ 984.082220][ T6328] veth0_vlan: left promiscuous mode [ 986.089231][ T6328] team0 (unregistering): Port device virt_wifi0 removed [ 986.212352][T17473] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3118'. [ 986.353386][ T6328] team0 (unregistering): Port device team_slave_1 removed [ 986.403182][ T6328] team0 (unregistering): Port device team_slave_0 removed [ 986.973500][ T5904] lo speed is unknown, defaulting to 1000 [ 986.995928][ T5904] syz0: Port: 1 Link DOWN [ 987.182662][T17473] bridge0: port 2(bridge_slave_1) entered disabled state [ 987.191632][T17473] bridge0: port 1(bridge_slave_0) entered disabled state [ 988.442190][T17496] lo speed is unknown, defaulting to 1000 [ 988.522203][T17496] lo speed is unknown, defaulting to 1000 [ 989.907535][T17514] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 990.076099][T17496] lo speed is unknown, defaulting to 1000 [ 990.332080][T17496] infiniband sz1: set active [ 990.336976][T17496] infiniband sz1: added lo [ 990.389746][T17496] RDS/IB: sz1: added [ 990.393891][T17496] smc: adding ib device sz1 with port count 1 [ 990.400210][T17496] smc: ib device sz1 port 1 has pnetid [ 990.410584][ T5911] lo speed is unknown, defaulting to 1000 [ 990.428093][T17496] lo speed is unknown, defaulting to 1000 [ 990.438898][ T5851] lo speed is unknown, defaulting to 1000 [ 990.609772][T17526] netlink: 'syz.1.3130': attribute type 10 has an invalid length. [ 990.741024][T17496] lo speed is unknown, defaulting to 1000 [ 991.106333][ T6328] IPVS: stop unused estimator thread 0... [ 991.947599][T17496] lo speed is unknown, defaulting to 1000 [ 991.998340][T17539] overlayfs: failed to clone upperpath [ 992.131019][T17275] 8021q: adding VLAN 0 to HW filter on device bond0 [ 992.793973][T17496] lo speed is unknown, defaulting to 1000 [ 993.080805][T17275] 8021q: adding VLAN 0 to HW filter on device team0 [ 993.090222][T17496] lo speed is unknown, defaulting to 1000 [ 993.113496][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.120316][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.551396][T17275] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 993.599187][T17275] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 993.699374][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 993.706702][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 993.763507][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 993.770772][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 993.866469][T17558] syz_tun: entered allmulticast mode [ 993.920290][T17557] syz_tun: left allmulticast mode [ 994.540371][T17275] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 996.746255][T17275] veth0_vlan: entered promiscuous mode [ 996.825766][T17275] veth1_vlan: entered promiscuous mode [ 997.060338][T17275] veth0_macvtap: entered promiscuous mode [ 997.121571][T17275] veth1_macvtap: entered promiscuous mode [ 997.244765][T17275] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 997.329662][T17275] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 997.825074][ T6328] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 997.884103][ T6328] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 998.113384][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 998.158912][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1001.399058][T17680] overlayfs: conflicting lowerdir path [ 1001.434039][ T5845] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1001.451059][ T5845] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1001.460330][ T5845] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1001.470822][ T5845] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1001.484689][ T5845] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1002.345455][T17677] lo speed is unknown, defaulting to 1000 [ 1002.367437][T17677] lo speed is unknown, defaulting to 1000 [ 1003.577844][T14058] Bluetooth: hci1: command tx timeout [ 1005.106111][ T5918] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 1005.276378][ T5918] usb 4-1: Using ep0 maxpacket: 8 [ 1005.287771][ T5918] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1005.306494][ T5918] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1005.327075][ T5918] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1005.367171][ T5918] usb 4-1: config 0 descriptor?? [ 1005.440833][ T5918] iowarrior 4-1:0.0: no interrupt-in endpoint found [ 1005.656031][T14058] Bluetooth: hci1: command tx timeout [ 1006.626487][T17729] fuse: Bad value for 'user_id' [ 1006.631509][T17729] fuse: Bad value for 'user_id' [ 1006.674599][ T5963] bond0 (unregistering): Released all slaves [ 1006.780021][T17731] cgroup: Unknown subsys name 'cpuset' [ 1006.990665][ T5963] bond1 (unregistering): Released all slaves [ 1007.268471][ T5963] bond2 (unregistering): Released all slaves [ 1007.796032][T14058] Bluetooth: hci1: command tx timeout [ 1008.594609][ T5911] usb 4-1: USB disconnect, device number 26 [ 1008.595044][ T5963] tipc: Left network mode [ 1008.787122][T17752] usb usb1: usbfs: process 17752 (syz.3.3183) did not claim interface 9 before use [ 1009.181360][T17758] fuse: Bad value for 'fd' [ 1009.815985][T14058] Bluetooth: hci1: command tx timeout [ 1010.275277][T17677] chnl_net:caif_netlink_parms(): no params data found [ 1011.819493][T17781] sz1: rxe_newlink: already configured on lo [ 1012.084847][ T5963] hsr_slave_0: left promiscuous mode [ 1012.298725][ T5963] hsr_slave_1: left promiscuous mode [ 1012.815990][T17232] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 1012.975981][T17232] usb 4-1: Using ep0 maxpacket: 8 [ 1012.983452][T17232] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1012.996564][T17232] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1013.026337][T17232] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1013.036465][T17232] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1013.063778][T17232] usb 4-1: config 0 descriptor?? [ 1013.327927][T17232] iowarrior 4-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 1013.680018][T17790] iowarrior 4-1:0.0: Error -90 while submitting URB [ 1013.819237][T16789] usb 4-1: USB disconnect, device number 27 [ 1014.854492][T17800] fuse: Bad value for 'fd' [ 1014.954577][T17802] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3198'. [ 1016.406130][T17677] bridge0: port 1(bridge_slave_0) entered blocking state [ 1016.419370][T17677] bridge0: port 1(bridge_slave_0) entered disabled state [ 1016.446229][T17677] bridge_slave_0: entered allmulticast mode [ 1016.454600][T17677] bridge_slave_0: entered promiscuous mode [ 1016.467465][T17677] bridge0: port 2(bridge_slave_1) entered blocking state [ 1016.474942][T17677] bridge0: port 2(bridge_slave_1) entered disabled state [ 1016.525798][T17677] bridge_slave_1: entered allmulticast mode [ 1016.552332][T17677] bridge_slave_1: entered promiscuous mode [ 1016.738491][T17828] rdma_rxe: rxe_newlink: failed to add lo [ 1017.564242][T17677] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1017.605286][T17832] fuse: Bad value for 'fd' [ 1017.617111][T17677] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1017.970747][ T5963] IPVS: stop unused estimator thread 0... [ 1018.030592][T17677] team0: Port device team_slave_0 added [ 1018.117088][T17677] team0: Port device team_slave_1 added [ 1018.618223][T17677] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1018.660468][T17677] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1018.719474][T17677] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1018.760674][T17677] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1018.775964][T17677] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1018.859230][T17677] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1019.100880][T17677] hsr_slave_0: entered promiscuous mode [ 1019.129222][T17677] hsr_slave_1: entered promiscuous mode [ 1019.268032][T17677] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1019.277227][T17677] Cannot create hsr debugfs directory [ 1020.776481][T17869] binder: 17868:17869 ioctl c0306201 200000000440 returned -14 [ 1021.592136][T17882] tipc: Enabling of bearer rejected, failed to enable media [ 1022.263285][T17677] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1022.303269][T17677] 8021q: adding VLAN 0 to HW filter on device team0 [ 1022.346727][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 1022.354000][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1022.430078][ T1156] bridge0: port 2(bridge_slave_1) entered blocking state [ 1022.437486][ T1156] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1024.569742][T17677] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1024.583484][T17938] netlink: 'syz.6.3229': attribute type 8 has an invalid length. [ 1025.913475][T17677] veth0_vlan: entered promiscuous mode [ 1025.953372][T17677] veth1_vlan: entered promiscuous mode [ 1026.139090][T17677] veth0_macvtap: entered promiscuous mode [ 1026.202765][T17677] veth1_macvtap: entered promiscuous mode [ 1026.803663][T17677] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1026.852533][T17677] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1027.090585][T17969] tipc: Enabling of bearer rejected, failed to enable media [ 1027.364935][ T5963] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1027.400527][ T5963] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1027.512378][T17986] netlink: 'syz.4.3237': attribute type 4 has an invalid length. [ 1027.531700][ T6328] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1027.556511][ T6328] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1027.575229][T17986] netlink: 'syz.4.3237': attribute type 4 has an invalid length. [ 1027.719350][T17991] netlink: 'syz.0.3239': attribute type 8 has an invalid length. [ 1029.596773][T18021] tipc: Enabling of bearer rejected, failed to enable media [ 1033.545947][T18083] lo speed is unknown, defaulting to 1000 [ 1033.566492][T18083] lo speed is unknown, defaulting to 1000 [ 1034.072739][ T30] audit: type=1326 audit(1755751830.884:218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18071 comm="syz.0.3260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fc058ebe9 code=0x7ffc0000 [ 1034.289801][ T30] audit: type=1326 audit(1755751830.884:219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18071 comm="syz.0.3260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fc058ebe9 code=0x7ffc0000 [ 1034.406214][ T30] audit: type=1326 audit(1755751830.894:220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18071 comm="syz.0.3260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=115 compat=0 ip=0x7f6fc058ebe9 code=0x7ffc0000 [ 1034.585546][ T30] audit: type=1326 audit(1755751830.894:221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18071 comm="syz.0.3260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fc058ebe9 code=0x7ffc0000 [ 1034.638869][ T30] audit: type=1326 audit(1755751830.894:222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18071 comm="syz.0.3260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fc058ebe9 code=0x7ffc0000 [ 1034.662935][ T30] audit: type=1326 audit(1755751830.894:223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18071 comm="syz.0.3260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6fc058ebe9 code=0x7ffc0000 [ 1034.685156][ T30] audit: type=1326 audit(1755751830.904:224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18071 comm="syz.0.3260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fc058ebe9 code=0x7ffc0000 [ 1034.709807][ T30] audit: type=1326 audit(1755751830.904:225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18071 comm="syz.0.3260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fc058ebe9 code=0x7ffc0000 [ 1034.985022][ T30] audit: type=1326 audit(1755751830.914:226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18071 comm="syz.0.3260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6fc058ebe9 code=0x7ffc0000 [ 1035.489647][ T24] libceph: connect (1)[c::]:6789 error -101 [ 1035.525122][ T24] libceph: mon0 (1)[c::]:6789 connect error [ 1035.647801][ T30] audit: type=1326 audit(1755751830.934:227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18071 comm="syz.0.3260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fc058ebe9 code=0x7ffc0000 [ 1035.966135][T18103] libceph: connect (1)[c::]:6789 error -101 [ 1035.972292][T18103] libceph: mon0 (1)[c::]:6789 connect error [ 1036.107691][T18099] ceph: No mds server is up or the cluster is laggy [ 1036.373229][T18108] overlayfs: failed to clone upperpath [ 1036.798771][T18117] openvswitch: netlink: Flow actions attr not present in new flow. [ 1038.529890][T14058] Bluetooth: Unknown LE signaling command 0x00 [ 1038.539961][T14058] Bluetooth: Wrong link type (-22) [ 1038.811530][T18163] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3284'. [ 1038.924926][T18167] openvswitch: netlink: Flow actions attr not present in new flow. [ 1041.497265][T18218] openvswitch: netlink: Flow actions attr not present in new flow. [ 1047.158683][T18279] overlayfs: failed to clone upperpath [ 1053.335978][T14058] Bluetooth: hci5: command 0x0406 tx timeout [ 1053.702231][T18339] netlink: 'syz.4.3329': attribute type 6 has an invalid length. [ 1053.847485][T18344] overlayfs: failed to clone upperpath [ 1054.568199][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 1055.306802][T18358] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1056.495669][T18370] workqueue: Failed to create a rescuer kthread for wq "ceph-completion": -EINTR [ 1062.071902][T18416] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1062.501483][T18418] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3345'. [ 1066.945966][T18301] Bluetooth: hci0: command 0x0406 tx timeout [ 1070.280057][T18506] lo speed is unknown, defaulting to 1000 [ 1070.304214][T18506] lo speed is unknown, defaulting to 1000 [ 1070.845709][ T30] kauditd_printk_skb: 12 callbacks suppressed [ 1070.845729][ T30] audit: type=1326 audit(1755751867.704:240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18500 comm="syz.3.3367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a72d8ebe9 code=0x7ffc0000 [ 1071.126050][ T30] audit: type=1326 audit(1755751867.714:241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18500 comm="syz.3.3367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a72d8ebe9 code=0x7ffc0000 [ 1071.235931][ T30] audit: type=1326 audit(1755751867.714:242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18500 comm="syz.3.3367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=115 compat=0 ip=0x7f5a72d8ebe9 code=0x7ffc0000 [ 1071.281210][ T30] audit: type=1326 audit(1755751867.714:243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18500 comm="syz.3.3367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a72d8ebe9 code=0x7ffc0000 [ 1071.346001][ T30] audit: type=1326 audit(1755751867.714:244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18500 comm="syz.3.3367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a72d8ebe9 code=0x7ffc0000 [ 1071.575943][ T30] audit: type=1326 audit(1755751867.714:245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18500 comm="syz.3.3367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5a72d8ebe9 code=0x7ffc0000 [ 1072.286005][T17232] usb 2-1: new low-speed USB device number 27 using dummy_hcd [ 1072.386252][ T30] audit: type=1326 audit(1755751867.724:246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18500 comm="syz.3.3367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a72d8ebe9 code=0x7ffc0000 [ 1073.289556][ T30] audit: type=1326 audit(1755751867.724:247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18500 comm="syz.3.3367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a72d8ebe9 code=0x7ffc0000 [ 1073.317067][T17232] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 1073.357871][T17232] usb 2-1: config 0 has no interface number 0 [ 1073.395412][T17232] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1073.500717][ T30] audit: type=1326 audit(1755751867.724:248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18500 comm="syz.3.3367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5a72d8ebe9 code=0x7ffc0000 [ 1073.546403][T17232] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 1073.630561][T17232] usb 2-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1073.666682][ T30] audit: type=1326 audit(1755751867.724:249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18500 comm="syz.3.3367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a72d8ebe9 code=0x7ffc0000 [ 1073.721536][T17232] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 1073.760407][T17232] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 1073.775586][T17232] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1073.803461][T17232] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1073.905690][T17232] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1073.936626][T17232] usb 2-1: config 0 descriptor?? [ 1073.963519][T18514] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1073.981038][T18514] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1074.056557][T17232] ldusb 2-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1074.098882][T18534] overlayfs: failed to clone upperpath [ 1074.309644][T17232] usb 2-1: USB disconnect, device number 27 [ 1074.347973][T17232] ldusb 2-1:0.55: LD USB Device #0 now disconnected [ 1076.304563][T17232] usb 2-1: new low-speed USB device number 28 using dummy_hcd [ 1076.435972][T17232] usb 2-1: device descriptor read/64, error -71 [ 1076.578343][T18574] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3384'. [ 1076.696542][T17232] usb 2-1: new low-speed USB device number 29 using dummy_hcd [ 1076.865938][T17232] usb 2-1: device descriptor read/64, error -71 [ 1076.996692][T17232] usb usb2-port1: attempt power cycle [ 1078.756085][T17232] usb 2-1: new low-speed USB device number 30 using dummy_hcd [ 1078.814150][T17232] usb 2-1: device descriptor read/8, error -71 [ 1079.333089][T17232] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 1079.405957][T17232] usb 2-1: Using ep0 maxpacket: 16 [ 1079.507196][T17232] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 1079.512497][T18617] netlink: 68 bytes leftover after parsing attributes in process `syz.4.3393'. [ 1079.606207][T17232] usb 2-1: config 0 has no interface number 0 [ 1079.662435][T17232] usb 2-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 1079.696421][T17232] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1079.726796][T17232] usb 2-1: Product: syz [ 1079.758786][T17232] usb 2-1: Manufacturer: syz [ 1079.780778][T17232] usb 2-1: SerialNumber: syz [ 1079.820807][T17232] usb 2-1: config 0 descriptor?? [ 1079.861785][T17232] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 1081.234083][T17232] gspca_spca1528: reg_w err -71 [ 1081.266020][T17232] spca1528 2-1:0.1: probe with driver spca1528 failed with error -71 [ 1081.512666][T17232] usb 2-1: USB disconnect, device number 31 [ 1083.930427][T18663] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3404'. [ 1086.287373][T18697] xt_hashlimit: max too large, truncated to 1048576 [ 1086.427560][T14058] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci5/hci5:201' [ 1086.439329][T14058] CPU: 1 UID: 0 PID: 14058 Comm: kworker/u9:1 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 1086.439358][T14058] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1086.439373][T14058] Workqueue: hci5 hci_rx_work [ 1086.439403][T14058] Call Trace: [ 1086.439413][T14058] [ 1086.439423][T14058] dump_stack_lvl+0x189/0x250 [ 1086.439454][T14058] ? kernfs_path_from_node+0x2c/0x260 [ 1086.439483][T14058] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1086.439510][T14058] ? __pfx__printk+0x10/0x10 [ 1086.439541][T14058] ? __rcu_read_unlock+0x84/0xe0 [ 1086.439570][T14058] ? kernfs_path_from_node+0x2c/0x260 [ 1086.439598][T14058] ? kernfs_path_from_node+0x22c/0x260 [ 1086.439622][T14058] ? kernfs_path_from_node+0x2c/0x260 [ 1086.439652][T14058] sysfs_create_dir_ns+0x259/0x280 [ 1086.439682][T14058] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 1086.439710][T14058] ? do_raw_spin_unlock+0x122/0x240 [ 1086.439751][T14058] kobject_add_internal+0x59f/0xb40 [ 1086.439791][T14058] kobject_add+0x155/0x220 [ 1086.439824][T14058] ? __pfx_kobject_add+0x10/0x10 [ 1086.439851][T14058] ? _raw_spin_unlock+0x3f/0x50 [ 1086.439888][T14058] ? get_device_parent+0x366/0x3a0 [ 1086.439927][T14058] device_add+0x408/0xb50 [ 1086.439964][T14058] hci_conn_add_sysfs+0xd5/0x1e0 [ 1086.440003][T14058] le_conn_complete_evt+0xc3a/0x1220 [ 1086.440048][T14058] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 1086.440078][T14058] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 1086.440110][T14058] ? irqentry_exit+0x74/0x90 [ 1086.440135][T14058] ? __pfx___mutex_lock+0x10/0x10 [ 1086.440159][T14058] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1086.440182][T14058] ? skb_pull_data+0xfb/0x200 [ 1086.440211][T14058] hci_le_enh_conn_complete_evt+0x189/0x470 [ 1086.440241][T14058] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 1086.440274][T14058] hci_event_packet+0x78c/0x1200 [ 1086.440302][T14058] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 1086.440333][T14058] ? __pfx_hci_event_packet+0x10/0x10 [ 1086.440368][T14058] ? hci_send_to_monitor+0xe2/0x570 [ 1086.440401][T14058] hci_rx_work+0x46a/0xe80 [ 1086.440435][T14058] ? process_scheduled_works+0x9ef/0x17b0 [ 1086.440462][T14058] process_scheduled_works+0xade/0x17b0 [ 1086.440524][T14058] ? __pfx_process_scheduled_works+0x10/0x10 [ 1086.440571][T14058] worker_thread+0x8a0/0xda0 [ 1086.440598][T14058] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1086.440644][T14058] ? __kthread_parkme+0x7b/0x200 [ 1086.440682][T14058] kthread+0x70e/0x8a0 [ 1086.440714][T14058] ? __pfx_worker_thread+0x10/0x10 [ 1086.440738][T14058] ? __pfx_kthread+0x10/0x10 [ 1086.440769][T14058] ? _raw_spin_unlock_irq+0x23/0x50 [ 1086.440789][T14058] ? lockdep_hardirqs_on+0x9c/0x150 [ 1086.440809][T14058] ? __pfx_kthread+0x10/0x10 [ 1086.440838][T14058] ret_from_fork+0x3fc/0x770 [ 1086.440864][T14058] ? __pfx_ret_from_fork+0x10/0x10 [ 1086.440894][T14058] ? __switch_to_asm+0x39/0x70 [ 1086.440919][T14058] ? __switch_to_asm+0x33/0x70 [ 1086.440943][T14058] ? __pfx_kthread+0x10/0x10 [ 1086.440973][T14058] ret_from_fork_asm+0x1a/0x30 [ 1086.441020][T14058] [ 1086.441331][T14058] kobject: kobject_add_internal failed for hci5:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 1086.767792][T14058] Bluetooth: hci5: failed to register connection device [ 1087.137202][T18705] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3415'. [ 1089.274863][T18724] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3419'. [ 1089.285450][T18724] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 1089.285450][T18724] program syz.1.3419 not setting count and/or reply_len properly [ 1092.320224][T18772] xt_hashlimit: max too large, truncated to 1048576 [ 1092.476083][T18472] Bluetooth: hci2: command 0x0406 tx timeout [ 1097.453201][ T30] kauditd_printk_skb: 12 callbacks suppressed [ 1097.453219][ T30] audit: type=1326 audit(1755751895.014:262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18845 comm="syz.4.3444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40c438ebe9 code=0x7ffc0000 [ 1097.545912][ T30] audit: type=1326 audit(1755751895.014:263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18845 comm="syz.4.3444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f40c438ebe9 code=0x7ffc0000 [ 1097.567507][ T30] audit: type=1326 audit(1755751895.014:264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18845 comm="syz.4.3444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40c438ebe9 code=0x7ffc0000 [ 1097.589273][ T30] audit: type=1326 audit(1755751895.024:265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18845 comm="syz.4.3444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=78 compat=0 ip=0x7f40c438ebe9 code=0x7ffc0000 [ 1097.612820][ T30] audit: type=1326 audit(1755751895.024:266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18845 comm="syz.4.3444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40c438ebe9 code=0x7ffc0000 [ 1097.635551][ T30] audit: type=1326 audit(1755751895.024:267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18845 comm="syz.4.3444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f40c438ebe9 code=0x7ffc0000 [ 1097.876792][ T30] audit: type=1326 audit(1755751895.024:268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18845 comm="syz.4.3444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40c438ebe9 code=0x7ffc0000 [ 1098.166230][ T30] audit: type=1326 audit(1755751895.024:269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18845 comm="syz.4.3444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f40c438ebe9 code=0x7ffc0000 [ 1098.274065][ T30] audit: type=1326 audit(1755751895.024:270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18845 comm="syz.4.3444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40c438ebe9 code=0x7ffc0000 [ 1098.440200][ T30] audit: type=1326 audit(1755751895.024:271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18845 comm="syz.4.3444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=19 compat=0 ip=0x7f40c438ebe9 code=0x7ffc0000 [ 1099.243222][T18867] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3448'. [ 1099.324757][T18873] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 1099.324757][T18873] The task syz.3.3449 (18873) triggered the difference, watch for misbehavior. [ 1101.269444][T18897] xt_hashlimit: max too large, truncated to 1048576 [ 1102.634367][T18919] fuse: Unknown parameter '0x0000000000000004' [ 1114.706435][T19016] tipc: Enabling of bearer rejected, failed to enable media [ 1115.983641][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 1117.620379][T19049] sz1: rxe_newlink: already configured on lo [ 1118.742386][T19058] rdma_rxe: rxe_newlink: failed to add lo [ 1122.103703][T19087] lo speed is unknown, defaulting to 1000 [ 1122.122374][T19087] lo speed is unknown, defaulting to 1000 [ 1124.164874][T19097] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1124.432698][T19112] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3505'. [ 1124.752526][T19115] rdma_rxe: rxe_newlink: failed to add lo [ 1125.204394][T19124] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3507'. [ 1126.873932][T19137] syzkaller0: entered promiscuous mode [ 1126.901736][T19137] syzkaller0: entered allmulticast mode [ 1127.259764][ T30] kauditd_printk_skb: 14 callbacks suppressed [ 1127.259785][ T30] audit: type=1326 audit(1755751924.854:286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19150 comm="syz.0.3514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fc058ebe9 code=0x7ffc0000 [ 1127.302230][ T30] audit: type=1326 audit(1755751924.854:287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19150 comm="syz.0.3514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f6fc058ebe9 code=0x7ffc0000 [ 1127.330605][ T30] audit: type=1326 audit(1755751924.864:288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19150 comm="syz.0.3514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fc058ebe9 code=0x7ffc0000 [ 1127.356748][ T30] audit: type=1326 audit(1755751924.864:289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19150 comm="syz.0.3514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=78 compat=0 ip=0x7f6fc058ebe9 code=0x7ffc0000 [ 1127.384541][ T30] audit: type=1326 audit(1755751924.864:290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19150 comm="syz.0.3514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fc058ebe9 code=0x7ffc0000 [ 1127.580138][ T30] audit: type=1326 audit(1755751924.864:291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19150 comm="syz.0.3514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6fc058ebe9 code=0x7ffc0000 [ 1127.889518][ T30] audit: type=1326 audit(1755751924.864:292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19150 comm="syz.0.3514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fc058ebe9 code=0x7ffc0000 [ 1127.955912][ T30] audit: type=1326 audit(1755751924.864:293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19150 comm="syz.0.3514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fc058ebe9 code=0x7ffc0000 [ 1128.298770][T18472] Bluetooth: hci1: command 0x0406 tx timeout [ 1128.497016][T19168] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3520'. [ 1133.517933][T19195] lo speed is unknown, defaulting to 1000 [ 1133.551501][T19195] lo speed is unknown, defaulting to 1000 [ 1133.943277][T19218] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3533'. [ 1134.590009][T19227] input: syz0 as /devices/virtual/input/input10 [ 1134.600292][ T30] audit: type=1326 audit(1755751932.164:294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19222 comm="syz.1.3537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6c6f8ebe9 code=0x7ffc0000 [ 1134.670634][ T30] audit: type=1326 audit(1755751932.164:295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19222 comm="syz.1.3537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7fa6c6f8ebe9 code=0x7ffc0000 [ 1134.692151][ C0] vkms_vblank_simulate: vblank timer overrun [ 1134.894450][ T30] audit: type=1326 audit(1755751932.164:296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19222 comm="syz.1.3537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6c6f8ebe9 code=0x7ffc0000 [ 1135.155261][T19236] lo speed is unknown, defaulting to 1000 [ 1135.190540][ T30] audit: type=1326 audit(1755751932.164:297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19222 comm="syz.1.3537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=78 compat=0 ip=0x7fa6c6f8ebe9 code=0x7ffc0000 [ 1135.338201][ T30] audit: type=1326 audit(1755751932.164:298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19222 comm="syz.1.3537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6c6f8ebe9 code=0x7ffc0000 [ 1135.359828][ C0] vkms_vblank_simulate: vblank timer overrun [ 1135.469309][T19236] lo speed is unknown, defaulting to 1000 [ 1135.695434][ T30] audit: type=1326 audit(1755751932.164:299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19222 comm="syz.1.3537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa6c6f8ebe9 code=0x7ffc0000 [ 1135.726234][ T30] audit: type=1326 audit(1755751932.164:300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19222 comm="syz.1.3537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6c6f8ebe9 code=0x7ffc0000 [ 1135.748652][ T30] audit: type=1326 audit(1755751932.164:301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19222 comm="syz.1.3537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa6c6f8ebe9 code=0x7ffc0000 [ 1135.771459][ T30] audit: type=1326 audit(1755751932.174:302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19222 comm="syz.1.3537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6c6f8ebe9 code=0x7ffc0000 [ 1135.793036][ C0] vkms_vblank_simulate: vblank timer overrun [ 1135.875895][ T30] audit: type=1326 audit(1755751932.174:303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19222 comm="syz.1.3537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=19 compat=0 ip=0x7fa6c6f8ebe9 code=0x7ffc0000 [ 1135.971431][T19247] tipc: Enabling of bearer rejected, failed to enable media [ 1136.851197][T19275] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3548'. [ 1137.251951][T19285] sz1: rxe_newlink: already configured on lo [ 1142.660085][T19400] IPVS: stopping backup sync thread 19401 ... [ 1142.660927][T19401] IPVS: sync thread started: state = BACKUP, mcast_ifn = bond0, syncid = 8, id = 0 [ 1142.715227][T19403] netlink: 260 bytes leftover after parsing attributes in process `syz.6.3586'. [ 1142.770600][T19403] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3586'. [ 1142.804046][T19403] netlink: 32 bytes leftover after parsing attributes in process `syz.6.3586'. [ 1143.474201][T19410] bridge_slave_0: left allmulticast mode [ 1143.520057][T19410] bridge_slave_0: left promiscuous mode [ 1143.538025][T19410] bridge0: port 1(bridge_slave_0) entered disabled state [ 1143.601357][T19410] bridge_slave_1: left allmulticast mode [ 1143.683233][T19410] bridge_slave_1: left promiscuous mode [ 1143.711719][T19410] bridge0: port 2(bridge_slave_1) entered disabled state [ 1143.834784][T19410] bond0: (slave bond_slave_0): Releasing backup interface [ 1143.910337][T19410] bond0: (slave bond_slave_1): Releasing backup interface [ 1144.069431][T19410] team0: Port device team_slave_0 removed [ 1144.115567][T19410] team0: Port device team_slave_1 removed [ 1144.131523][T19410] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1144.143255][T19410] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1144.170063][T19410] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1144.185761][T19410] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1144.354420][T19413] vlan2: entered promiscuous mode [ 1144.400012][T19413] team0: entered promiscuous mode [ 1144.405139][T19413] team_slave_0: entered promiscuous mode [ 1144.452946][T19413] team_slave_1: entered promiscuous mode [ 1144.733777][T19425] netlink: 240 bytes leftover after parsing attributes in process `syz.3.3591'. [ 1145.930310][T19459] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3602'. [ 1146.557292][T19468] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 1146.832134][T19475] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3605'. [ 1146.872161][T19475] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3605'. [ 1147.334731][T19487] overlayfs: conflicting lowerdir path [ 1147.717431][T19495] fuse: Bad value for 'fd' [ 1148.354141][T19502] lo speed is unknown, defaulting to 1000 [ 1148.388055][T19502] lo speed is unknown, defaulting to 1000 [ 1148.638217][T19516] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3619'. [ 1148.798401][T19518] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3616'. [ 1149.840223][T19534] xt_hashlimit: max too large, truncated to 1048576 [ 1150.566769][T19531] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3622'. [ 1150.631929][T19531] netlink: 'syz.0.3622': attribute type 10 has an invalid length. [ 1150.830878][T19531] syz_tun: entered promiscuous mode [ 1151.659479][T19531] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 1152.576248][T19568] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3631'. [ 1155.749930][T19609] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3642'. [ 1158.295367][T19664] rdma_rxe: rxe_newlink: failed to add lo [ 1158.836570][T19672] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3656'. [ 1158.866765][T19672] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3656'. [ 1163.048803][T19738] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3674'. [ 1163.520656][T19748] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3679'. [ 1165.111248][T19773] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3687'. [ 1166.099841][ T30] kauditd_printk_skb: 11 callbacks suppressed [ 1166.099864][ T30] audit: type=1326 audit(1755751963.064:315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19776 comm="syz.0.3686" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fc058ebe9 code=0x7ffc0000 [ 1166.152926][T19787] lo speed is unknown, defaulting to 1000 [ 1166.159886][T19787] lo speed is unknown, defaulting to 1000 [ 1166.349970][ T30] audit: type=1326 audit(1755751963.064:316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19776 comm="syz.0.3686" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fc058ebe9 code=0x7ffc0000 [ 1166.443363][ T30] audit: type=1326 audit(1755751963.064:317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19776 comm="syz.0.3686" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7f6fc058ebe9 code=0x7ffc0000 [ 1166.776622][T19807] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3695'. [ 1166.877860][T19807] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 1167.366201][T19817] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3688'. [ 1167.637216][T19814] netlink: 'syz.4.3697': attribute type 5 has an invalid length. [ 1168.840696][T19845] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3704'. [ 1168.865960][T19845] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3704'. [ 1168.995180][T19845] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3704'. [ 1169.112366][T19845] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3704'. [ 1169.139427][T19845] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3704'. [ 1169.502264][T19464] af_packet: tpacket_rcv: packet too big, clamped from 80 to 4294967272. macoff=96 [ 1172.046785][T19920] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3715'. [ 1172.232730][T19926] netlink: 'syz.6.3721': attribute type 10 has an invalid length. [ 1172.600388][T19931] netlink: 'syz.0.3723': attribute type 10 has an invalid length. [ 1174.649799][T19974] ip6t_srh: unknown srh invflags 4449 [ 1175.232737][T19985] netlink: 'syz.6.3737': attribute type 10 has an invalid length. [ 1175.707610][T19978] DRBG: could not allocate digest TFM handle: hmac(sha512) [ 1176.001377][T20015] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3743'. [ 1176.344536][T20020] 9pnet_fd: Insufficient options for proto=fd [ 1176.393126][T20020] overlayfs: failed to clone upperpath [ 1177.420286][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 1178.589770][T20053] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3756'. [ 1179.442064][T20080] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3763'. [ 1179.451605][T20080] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3763'. [ 1179.537126][T20080] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 1179.605701][T20087] 9pnet_fd: Insufficient options for proto=fd [ 1179.639640][T20087] overlayfs: failed to clone upperpath [ 1179.863071][ T24] IPVS: starting estimator thread 0... [ 1179.967537][T20092] IPVS: using max 45 ests per chain, 108000 per kthread [ 1181.223044][T20115] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3770'. [ 1183.081170][T20132] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3776'. [ 1183.354830][T20141] netlink: 'syz.0.3777': attribute type 10 has an invalid length. [ 1183.458982][T20147] netlink: 'syz.0.3777': attribute type 10 has an invalid length. [ 1183.639248][T20141] team0: Port device dummy0 added [ 1183.687480][T20150] 9pnet_fd: Insufficient options for proto=fd [ 1183.697898][T20150] overlayfs: failed to clone upperpath [ 1183.731346][T20147] [ 1183.733740][T20147] ====================================================== [ 1183.740787][T20147] WARNING: possible circular locking dependency detected [ 1183.747831][T20147] 6.16.0-syzkaller #0 Not tainted [ 1183.753051][T20147] ------------------------------------------------------ [ 1183.760097][T20147] syz.0.3777/20147 is trying to acquire lock: [ 1183.766200][T20147] ffff888024a24e00 (team->team_lock_key#8){+.+.}-{4:4}, at: team_device_event+0x182/0xa20 [ 1183.776186][T20147] [ 1183.776186][T20147] but task is already holding lock: [ 1183.783575][T20147] ffff8880556dcd30 (&dev_instance_lock_key#3){+.+.}-{4:4}, at: do_setlink+0x388/0x41c0 [ 1183.793309][T20147] [ 1183.793309][T20147] which lock already depends on the new lock. [ 1183.793309][T20147] [ 1183.804202][T20147] [ 1183.804202][T20147] the existing dependency chain (in reverse order) is: [ 1183.813418][T20147] [ 1183.813418][T20147] -> #1 (&dev_instance_lock_key#3){+.+.}-{4:4}: [ 1183.821912][T20147] lock_acquire+0x120/0x360 [ 1183.826980][T20147] __mutex_lock+0x182/0xe80 [ 1183.832040][T20147] dev_set_mtu+0x10e/0x260 [ 1183.837358][T20147] team_add_slave+0x8b8/0x2840 [ 1183.842671][T20147] do_set_master+0x530/0x6d0 [ 1183.847817][T20147] do_setlink+0xcf0/0x41c0 [ 1183.852789][T20147] rtnl_newlink+0x160b/0x1c70 [ 1183.858031][T20147] rtnetlink_rcv_msg+0x7cc/0xb70 [ 1183.863518][T20147] netlink_rcv_skb+0x205/0x470 [ 1183.868846][T20147] netlink_unicast+0x75c/0x8e0 [ 1183.874181][T20147] netlink_sendmsg+0x805/0xb30 [ 1183.879584][T20147] __sock_sendmsg+0x21c/0x270 [ 1183.884809][T20147] ____sys_sendmsg+0x505/0x830 [ 1183.890141][T20147] ___sys_sendmsg+0x21f/0x2a0 [ 1183.895380][T20147] __x64_sys_sendmsg+0x19b/0x260 [ 1183.900950][T20147] do_syscall_64+0xfa/0x3b0 [ 1183.906075][T20147] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1183.912497][T20147] [ 1183.912497][T20147] -> #0 (team->team_lock_key#8){+.+.}-{4:4}: [ 1183.920775][T20147] validate_chain+0xb9b/0x2140 [ 1183.926072][T20147] __lock_acquire+0xab9/0xd20 [ 1183.931273][T20147] lock_acquire+0x120/0x360 [ 1183.936299][T20147] __mutex_lock+0x182/0xe80 [ 1183.941331][T20147] team_device_event+0x182/0xa20 [ 1183.946799][T20147] notifier_call_chain+0x1b3/0x3e0 [ 1183.952456][T20147] __dev_notify_flags+0x18d/0x2e0 [ 1183.958022][T20147] netif_change_flags+0xe8/0x1a0 [ 1183.963582][T20147] do_setlink+0xc55/0x41c0 [ 1183.968547][T20147] rtnl_newlink+0x160b/0x1c70 [ 1183.973778][T20147] rtnetlink_rcv_msg+0x7cc/0xb70 [ 1183.979274][T20147] netlink_rcv_skb+0x205/0x470 [ 1183.984586][T20147] netlink_unicast+0x75c/0x8e0 [ 1183.989884][T20147] netlink_sendmsg+0x805/0xb30 [ 1183.995181][T20147] __sock_sendmsg+0x21c/0x270 [ 1184.000397][T20147] ____sys_sendmsg+0x505/0x830 [ 1184.005697][T20147] ___sys_sendmsg+0x21f/0x2a0 [ 1184.010911][T20147] __x64_sys_sendmsg+0x19b/0x260 [ 1184.016396][T20147] do_syscall_64+0xfa/0x3b0 [ 1184.021429][T20147] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1184.027939][T20147] [ 1184.027939][T20147] other info that might help us debug this: [ 1184.027939][T20147] [ 1184.038169][T20147] Possible unsafe locking scenario: [ 1184.038169][T20147] [ 1184.045618][T20147] CPU0 CPU1 [ 1184.050984][T20147] ---- ---- [ 1184.056379][T20147] lock(&dev_instance_lock_key#3); [ 1184.061597][T20147] lock(team->team_lock_key#8); [ 1184.069331][T20147] lock(&dev_instance_lock_key#3); [ 1184.077306][T20147] lock(team->team_lock_key#8); [ 1184.082281][T20147] [ 1184.082281][T20147] *** DEADLOCK *** [ 1184.082281][T20147] [ 1184.090527][T20147] 2 locks held by syz.0.3777/20147: [ 1184.095730][T20147] #0: ffffffff8f509f08 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8db/0x1c70 [ 1184.104818][T20147] #1: ffff8880556dcd30 (&dev_instance_lock_key#3){+.+.}-{4:4}, at: do_setlink+0x388/0x41c0 [ 1184.114940][T20147] [ 1184.114940][T20147] stack backtrace: [ 1184.120857][T20147] CPU: 1 UID: 0 PID: 20147 Comm: syz.0.3777 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 1184.120876][T20147] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1184.120886][T20147] Call Trace: [ 1184.120895][T20147] [ 1184.120903][T20147] dump_stack_lvl+0x189/0x250 [ 1184.120926][T20147] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1184.120944][T20147] ? __pfx__printk+0x10/0x10 [ 1184.120966][T20147] ? print_lock_name+0xde/0x100 [ 1184.120985][T20147] print_circular_bug+0x2ee/0x310 [ 1184.121006][T20147] check_noncircular+0x134/0x160 [ 1184.121027][T20147] validate_chain+0xb9b/0x2140 [ 1184.121049][T20147] ? __lock_acquire+0xab9/0xd20 [ 1184.121067][T20147] __lock_acquire+0xab9/0xd20 [ 1184.121084][T20147] ? team_device_event+0x182/0xa20 [ 1184.121098][T20147] lock_acquire+0x120/0x360 [ 1184.121111][T20147] ? team_device_event+0x182/0xa20 [ 1184.121126][T20147] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 1184.121153][T20147] __mutex_lock+0x182/0xe80 [ 1184.121169][T20147] ? team_device_event+0x182/0xa20 [ 1184.121186][T20147] ? __try_to_del_timer_sync+0x34a/0x3a0 [ 1184.121207][T20147] ? team_device_event+0x182/0xa20 [ 1184.121222][T20147] ? __pfx___mutex_lock+0x10/0x10 [ 1184.121238][T20147] ? __timer_delete_sync+0x218/0x2d0 [ 1184.121266][T20147] team_device_event+0x182/0xa20 [ 1184.121281][T20147] notifier_call_chain+0x1b3/0x3e0 [ 1184.121301][T20147] __dev_notify_flags+0x18d/0x2e0 [ 1184.121324][T20147] ? __pfx___dev_notify_flags+0x10/0x10 [ 1184.121345][T20147] ? __dev_change_flags+0x4cc/0x6d0 [ 1184.121369][T20147] ? __pfx___dev_change_flags+0x10/0x10 [ 1184.121396][T20147] netif_change_flags+0xe8/0x1a0 [ 1184.121420][T20147] do_setlink+0xc55/0x41c0 [ 1184.121450][T20147] ? trace_sched_exit_tp+0x38/0x120 [ 1184.121476][T20147] ? __pfx_do_setlink+0x10/0x10 [ 1184.121498][T20147] ? __lock_acquire+0xab9/0xd20 [ 1184.121514][T20147] ? do_raw_spin_lock+0x121/0x290 [ 1184.121537][T20147] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 1184.121559][T20147] ? lockdep_hardirqs_on+0x9c/0x150 [ 1184.121575][T20147] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 1184.121597][T20147] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1184.121621][T20147] ? rcu_is_watching+0x15/0xb0 [ 1184.121639][T20147] ? __mutex_lock+0xa6d/0xe80 [ 1184.121655][T20147] ? __mutex_lock+0x51b/0xe80 [ 1184.121672][T20147] ? rtnl_newlink+0x8db/0x1c70 [ 1184.121692][T20147] ? __pfx___mutex_lock+0x10/0x10 [ 1184.121711][T20147] ? ns_capable+0x8a/0xf0 [ 1184.121728][T20147] ? rtnl_link_get_net_capable+0x16a/0x350 [ 1184.121753][T20147] rtnl_newlink+0x160b/0x1c70 [ 1184.121773][T20147] ? netlink_sendmsg+0x805/0xb30 [ 1184.121799][T20147] ? __pfx_rtnl_newlink+0x10/0x10 [ 1184.121827][T20147] ? kasan_quarantine_put+0xdd/0x220 [ 1184.121850][T20147] ? lockdep_hardirqs_on+0x9c/0x150 [ 1184.121867][T20147] ? nlmon_xmit+0xb0/0x100 [ 1184.121884][T20147] ? kmem_cache_free+0x18f/0x400 [ 1184.121902][T20147] ? __local_bh_enable_ip+0x12d/0x1c0 [ 1184.121918][T20147] ? lockdep_hardirqs_on+0x9c/0x150 [ 1184.121934][T20147] ? __local_bh_enable_ip+0x12d/0x1c0 [ 1184.121949][T20147] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 1184.121965][T20147] ? __dev_queue_xmit+0x27e/0x3a70 [ 1184.121981][T20147] ? __dev_queue_xmit+0x27e/0x3a70 [ 1184.121995][T20147] ? __dev_queue_xmit+0x27e/0x3a70 [ 1184.122011][T20147] ? __dev_queue_xmit+0x1cd7/0x3a70 [ 1184.122028][T20147] ? __lock_acquire+0xab9/0xd20 [ 1184.122050][T20147] ? __pfx_rtnl_newlink+0x10/0x10 [ 1184.122069][T20147] rtnetlink_rcv_msg+0x7cc/0xb70 [ 1184.122090][T20147] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 1184.122108][T20147] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1184.122127][T20147] ? ref_tracker_free+0x63a/0x7d0 [ 1184.122143][T20147] ? __copy_skb_header+0xa7/0x550 [ 1184.122157][T20147] ? __pfx_ref_tracker_free+0x10/0x10 [ 1184.122173][T20147] ? __skb_clone+0x63/0x7a0 [ 1184.122190][T20147] netlink_rcv_skb+0x205/0x470 [ 1184.122211][T20147] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1184.122231][T20147] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1184.122256][T20147] ? netlink_deliver_tap+0x2e/0x1b0 [ 1184.122276][T20147] ? netlink_deliver_tap+0x2e/0x1b0 [ 1184.122298][T20147] netlink_unicast+0x75c/0x8e0 [ 1184.122320][T20147] netlink_sendmsg+0x805/0xb30 [ 1184.122345][T20147] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1184.122368][T20147] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1184.122384][T20147] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1184.122405][T20147] __sock_sendmsg+0x21c/0x270 [ 1184.122423][T20147] ____sys_sendmsg+0x505/0x830 [ 1184.122456][T20147] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1184.122481][T20147] ? import_iovec+0x74/0xa0 [ 1184.122503][T20147] ___sys_sendmsg+0x21f/0x2a0 [ 1184.122527][T20147] ? __pfx____sys_sendmsg+0x10/0x10 [ 1184.122562][T20147] ? __fget_files+0x2a/0x420 [ 1184.122578][T20147] ? __fget_files+0x3a0/0x420 [ 1184.122598][T20147] __x64_sys_sendmsg+0x19b/0x260 [ 1184.122622][T20147] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1184.122649][T20147] ? do_user_addr_fault+0xc8a/0x1390 [ 1184.122674][T20147] ? do_syscall_64+0xbe/0x3b0 [ 1184.122692][T20147] do_syscall_64+0xfa/0x3b0 [ 1184.122709][T20147] ? lockdep_hardirqs_on+0x9c/0x150 [ 1184.122724][T20147] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1184.122739][T20147] ? clear_bhb_loop+0x60/0xb0 [ 1184.122756][T20147] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1184.122772][T20147] RIP: 0033:0x7f6fc058ebe9 [ 1184.122787][T20147] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1184.122802][T20147] RSP: 002b:00007f6fc1379038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1184.122819][T20147] RAX: ffffffffffffffda RBX: 00007f6fc07b6180 RCX: 00007f6fc058ebe9 [ 1184.122832][T20147] RDX: 0000000000000000 RSI: 0000200000000600 RDI: 0000000000000009 [ 1184.122842][T20147] RBP: 00007f6fc0611e19 R08: 0000000000000000 R09: 0000000000000000 [ 1184.122852][T20147] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1184.122868][T20147] R13: 00007f6fc07b6218 R14: 00007f6fc07b6180 R15: 00007ffc65ea16f8 [ 1184.122886][T20147] [ 1184.793763][T20147] team0: Port device dummy0 removed [ 1184.805205][T20147] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 1184.844249][T20159] tipc: Started in network mode [ 1184.872674][T20159] tipc: Node identity , cluster identity 4711 [ 1184.895740][T20159] tipc: Failed to set node id, please configure manually [ 1184.909144][T20159] tipc: Enabling of bearer rejected, failed to enable media