last executing test programs: 9m44.159242574s ago: executing program 4 (id=134): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400000000e3ffffffffffffff", @ANYRES32=0x0, @ANYBLOB="7b130000000000001c0012800b00010067656e65766500"], 0x3c}}, 0x2000c0d0) write$P9_RVERSION(r2, &(0x7f0000000200)=ANY=[@ANYRESDEC=r2], 0x15) r4 = open(&(0x7f0000000100)='./file0\x00', 0x440, 0x0) write$FUSE_BMAP(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1, 0x2, r4}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) 9m41.841158609s ago: executing program 4 (id=137): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000001a300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[], 0x1c}}, 0x0) 9m40.182545511s ago: executing program 4 (id=139): r0 = socket$inet6(0x2d, 0x2, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, 0x0, 0x0) io_uring_setup(0x25b4, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$TCSBRKP(r1, 0x5425, 0x0) ioctl$TCSETSW2(r1, 0x5425, 0x0) socket$unix(0x1, 0x1, 0x0) 9m38.926659121s ago: executing program 4 (id=144): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000001a40)=""/102392, 0x18ff8) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f00000000c0)={0x1000, 0x0, {}, {0xffffffffffffffff}, 0x4}) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={0xffffffffffffffff, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8, &(0x7f0000000380)=[0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbf, &(0x7f0000000400)=[{}], 0x8, 0x10, &(0x7f0000000440), &(0x7f0000000480), 0x8, 0xef, 0x8, 0x8, &(0x7f00000004c0)}}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000006c0)={{}, &(0x7f0000000640), &(0x7f0000000680)}, 0x20) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000700)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x1000, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x2, 0x3}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) ioctl$SIOCRSSCAUSE(r2, 0x89e1, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 9m38.112119526s ago: executing program 4 (id=148): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/diskstats\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi2\x00', 0xa400, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x106f) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), r2) sendmsg$NL80211_CMD_GET_COALESCE(r2, 0x0, 0x4044880) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="280000000306010100000000001a0000020000"], 0x28}, 0x1, 0x0, 0x0, 0x40004}, 0x40080d0) 9m36.921055601s ago: executing program 4 (id=151): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, 0x0, 0x0) syz_usb_connect$hid(0x5, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffa}, {0x0, 0x0, 0x4}, 0x0, 0x0, 0x1}, {{@in6=@dev, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0xb7, 0x2, 0xfffffffe}}, 0xe8) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x1c) 9m21.659728026s ago: executing program 32 (id=151): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, 0x0, 0x0) syz_usb_connect$hid(0x5, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffa}, {0x0, 0x0, 0x4}, 0x0, 0x0, 0x1}, {{@in6=@dev, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0xb7, 0x2, 0xfffffffe}}, 0xe8) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x1c) 9m19.771695046s ago: executing program 3 (id=182): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x6, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r1 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000100)={0x4, r0}) r6 = syz_open_dev$dri(&(0x7f0000000040), 0x1ff, 0x80000) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r5}) 9m17.400565945s ago: executing program 3 (id=185): socket$inet_sctp(0x2, 0x5, 0x84) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r5, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) listen(r5, 0x3) 9m14.82608392s ago: executing program 3 (id=191): r0 = socket$alg(0x26, 0x5, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_pressure(r1, &(0x7f0000000040)='io.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r2, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) fchdir(0xffffffffffffffff) setns(0xffffffffffffffff, 0x20000) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x60000, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet6_tcp(0xa, 0x1, 0x0) shmget(0x1, 0x2000, 0x4, &(0x7f0000ffc000/0x2000)=nil) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r6 = openat$sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000300), 0x0) sendfile(r6, r5, &(0x7f0000002080)=0x64, 0x1) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r5, 0x6, 0x15, 0x0, 0x0) openat$cgroup_pressure(r1, &(0x7f0000000200)='memory.pressure\x00', 0x2, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000003c0)="4cf80c33db58d6f33b63b382a0e9cd16c86d6c135744495e689f0308505dc9dc7d", 0x21) 9m13.668525103s ago: executing program 3 (id=194): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x6, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000040), 0x1ff, 0x80000) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, &(0x7f00000000c0)) 9m11.855094387s ago: executing program 3 (id=197): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc000}, 0xc000) sched_setscheduler(0x0, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r3}, 0x18) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) recvfrom$inet(r2, 0x0, 0x0, 0xc9102120, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='mm_migrate_pages\x00', 0xffffffffffffffff, 0x0, 0x218}, 0x18) 9m10.547667982s ago: executing program 3 (id=199): mlockall(0x7) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x0) r0 = socket$inet_smc(0x2b, 0x1, 0x0) syz_io_uring_setup(0x10d, &(0x7f0000000540)={0x0, 0xd4bb, 0x80, 0x2, 0x1dd}, &(0x7f0000000380)=0x0, &(0x7f0000000180)=0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, 0x0, 0x8010) sendmsg$inet(r0, &(0x7f0000001640)={0x0, 0x0, 0x0}, 0x20000090) syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r3) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r3, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x10) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x400}) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000002c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x3801}, {0x2c}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r5}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 8m54.547324625s ago: executing program 33 (id=199): mlockall(0x7) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x0) r0 = socket$inet_smc(0x2b, 0x1, 0x0) syz_io_uring_setup(0x10d, &(0x7f0000000540)={0x0, 0xd4bb, 0x80, 0x2, 0x1dd}, &(0x7f0000000380)=0x0, &(0x7f0000000180)=0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, 0x0, 0x8010) sendmsg$inet(r0, &(0x7f0000001640)={0x0, 0x0, 0x0}, 0x20000090) syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r3) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r3, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x10) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x400}) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000002c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x3801}, {0x2c}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r5}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 28.890143856s ago: executing program 2 (id=1211): modify_ldt$write2(0x11, &(0x7f0000000240)={0x7ff, 0x20001000, 0x1000, 0x1, 0x3, 0x1, 0x1, 0x0, 0x0, 0x1}, 0x10) socket$kcm(0x10, 0x2, 0x0) r0 = syz_io_uring_setup(0x34b7, &(0x7f0000000000)={0x0, 0x0, 0x30c0, 0x4, 0x2a}, 0x0, &(0x7f0000000500)) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r0, 0xc, 0xf0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xf, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="2c3a0000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000004000085000000720000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa00}, 0x94) bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x48) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e23, 0x3, @empty}, 0x1c) socket$netlink(0x10, 0x3, 0x10) r2 = socket$netlink(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000100)=0x80000001, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r2) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x4001, 0x0, @loopback}, 0x1c) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r4, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) shutdown(r4, 0x1) 26.854284878s ago: executing program 2 (id=1217): getpeername$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000001440), 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r2 = getpid() syz_io_uring_submit(0x0, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = semget$private(0x0, 0x5, 0x0) semctl$GETALL(r5, 0x0, 0xd, 0x0) ioctl$IMDELTIMER(r0, 0x80044941, &(0x7f0000000080)=0x2) 25.841370048s ago: executing program 2 (id=1219): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f0000000180)=0x1, 0x0, 0x4) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./bus\x00', 0x40, 0x0) write(0xffffffffffffffff, &(0x7f0000004200), 0x0) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x4, 0x1, 0x101, 0x0, 0x0, {0x1, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x200048e0}, 0x4) sendmsg$NFNL_MSG_CTHELPER_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x14, 0x1, 0x9, 0x301, 0x0, 0x0, {0x7, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x44891}, 0x4004000) 22.011063347s ago: executing program 2 (id=1223): syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) setresuid(0xffffffffffffffff, 0xffffffffffffffff, 0xee01) ioctl$DRM_IOCTL_SET_VERSION(0xffffffffffffffff, 0xc0106407, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x8}) ioctl$DRM_IOCTL_GET_UNIQUE(0xffffffffffffffff, 0xc0106401, 0x0) r0 = io_uring_setup(0x177f, &(0x7f0000000140)={0x0, 0x0, 0x2, 0x0, 0xfffffffd}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r2, 0x8914, &(0x7f0000000000)) syz_init_net_socket$rose(0xb, 0x5, 0x0) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r3, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x1, @null}, 0x1c) connect$rose(r3, &(0x7f0000000240)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, 0x1, @null}, 0x1c) close_range(r0, 0xffffffffffffffff, 0x0) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'wlan0\x00'}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, 0x0, 0x0) 18.930987593s ago: executing program 6 (id=1229): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400000000e3ffffffffffffff", @ANYRES32=0x0, @ANYBLOB="7b130000000000001c0012800b00010067656e65766500"], 0x3c}}, 0x2000c0d0) write$P9_RVERSION(r2, &(0x7f0000000200)=ANY=[@ANYRESDEC=r2], 0x15) r4 = open(&(0x7f0000000100)='./file0\x00', 0x440, 0x0) write$FUSE_BMAP(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1, 0x2, r4}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0) r6 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) bind$netrom(r6, &(0x7f00000004c0)={{0x6, @rose, 0x1}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}, 0x48) r7 = eventfd2(0xff, 0x80001) io_uring_register$IORING_REGISTER_EVENTFD(0xffffffffffffffff, 0x4, &(0x7f0000000300)=r7, 0x1) 18.930472293s ago: executing program 5 (id=1230): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000001a40)=""/102392, 0x18ff8) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f00000000c0)={0x1000, 0x0, {}, {0xffffffffffffffff}, 0x4}) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={0xffffffffffffffff, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000380), &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbf, &(0x7f0000000400)=[{}], 0x8, 0x10, &(0x7f0000000440), &(0x7f0000000480), 0x8, 0xef, 0x8, 0x8, &(0x7f00000004c0)}}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000006c0)={{}, 0x0, &(0x7f0000000680)}, 0x20) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000700)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x1000, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x2, 0x3}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) ioctl$SIOCRSSCAUSE(r2, 0x89e1, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 18.496877286s ago: executing program 5 (id=1233): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f0000000180)=0x1, 0x0, 0x4) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./bus\x00', 0x40, 0x0) write(0xffffffffffffffff, &(0x7f0000004200), 0x0) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x4, 0x1, 0x101, 0x0, 0x0, {0x1, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x200048e0}, 0x4) sendmsg$NFNL_MSG_CTHELPER_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x14, 0x1, 0x9, 0x301, 0x0, 0x0, {0x7, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x44891}, 0x4004000) 15.239755066s ago: executing program 5 (id=1235): r0 = syz_open_dev$dmmidi(&(0x7f0000000300), 0x2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r0, 0x40045702, &(0x7f0000000000)) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r0, 0xc0305710, &(0x7f0000000040)={0x1, 0x7, 0x80000000, 0x1, 0xb71}) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100), 0x200002, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000019300), 0x0, 0x0) read$msr(r1, &(0x7f0000000300)=""/102392, 0x18ff8) add_key$keyring(0x0, &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000080)='hfs\x00', 0x8000, 0x0) 15.110080766s ago: executing program 0 (id=1236): r0 = socket$alg(0x26, 0x5, 0x0) accept4(r0, 0x0, 0x0, 0x80800) mmap(&(0x7f0000ff2000/0x3000)=nil, 0x3000, 0x300000d, 0x10, 0xffffffffffffffff, 0x2000) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a320000000068000000060a410400000000000000000100000708000b4000000000400004803c00018008000100636d7000300002801c00038005000100f41c295a5a6a65593d89a9057aa772a700000000080001400000050008000240"], 0xdc}, 0x1, 0x0, 0x0, 0x80}, 0x0) syz_usb_connect$printer(0x2, 0x0, 0x0, 0x0) keyctl$dh_compute(0x17, 0x0, 0x0, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) 15.109681256s ago: executing program 6 (id=1237): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x20}}, 0x0) socket(0x11, 0xa, 0x2) bind$alg(0xffffffffffffffff, &(0x7f00000006c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58) accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x8041, 0x0) write$dsp(r0, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) gettid() ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) 15.107792887s ago: executing program 1 (id=1238): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x13, 0x0, &(0x7f0000000240)) 14.417184221s ago: executing program 2 (id=1239): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_open_procfs(0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) syz_genetlink_get_family_id$ethtool(0x0, r0) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r0, 0x0, 0x48010) socket$netlink(0x10, 0x3, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = open(&(0x7f0000000000)='./bus\x00', 0x60142, 0x0) r6 = open(&(0x7f00000001c0)='./bus\x00', 0x101000, 0x0) copy_file_range(r6, 0x0, r5, 0x0, 0x3df1, 0x0) 13.702434069s ago: executing program 1 (id=1240): openat$tun(0xffffffffffffff9c, 0x0, 0x1c1842, 0x0) socket$packet(0x11, 0x3, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) socket$nl_netfilter(0x10, 0x3, 0xc) syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) getsockopt$IP_SET_OP_GET_BYINDEX(r1, 0x1, 0x53, &(0x7f0000000400)={0x7, 0x7, 0x2}, &(0x7f0000000440)=0x28) ioctl$UFFDIO_CONTINUE(0xffffffffffffffff, 0xc020aa08, &(0x7f0000000080)={{&(0x7f00003e4000/0x9000)=nil, 0x9000}}) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000040)=ANY=[@ANYBLOB="d0000000", @ANYRES16, @ANYBLOB="010000000000000000000100000008000100000000000400048008000c8004000b800800020001000000a00008801c000780080077144ebb00000800060000000000080005"], 0xd0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) 13.075131349s ago: executing program 6 (id=1241): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x1a3c82) syz_open_dev$sg(&(0x7f0000000280), 0x80000000002, 0x1) 10.254613993s ago: executing program 1 (id=1242): prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x88}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xb007}, 0x4) syz_io_uring_setup(0x10d, &(0x7f0000000380)={0x0, 0x25b9, 0x100, 0x0, 0x215}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) socket$tipc(0x1e, 0x2, 0x0) socket$tipc(0x1e, 0x5, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x43, &(0x7f0000000040)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) syz_io_uring_submit(r0, r1, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0x40, 0x0, 0xffffffffffffffff, 0x32, &(0x7f00000000c0)=@un=@abs={0x1, 0x0, 0x4e20}}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r3) r4 = socket(0x2b, 0x1, 0x1) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r3, 0x5) socket$inet_mptcp(0x2, 0x1, 0x106) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f00000006c0)=ANY=[@ANYBLOB="180000000000000000000000ffffffff180800002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000400008500000004000000b7080000000000007baaf8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ff", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000b300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) accept$packet(r4, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000100)=0x14) socketpair$unix(0x1, 0x1, 0x0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x2401, 0x0) 9.775263941s ago: executing program 6 (id=1243): r0 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000180)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f00000001c0)={0x0, 0x0, r1, 0x0}) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r0, 0xc01864b0, &(0x7f0000000000)={r1, r2, 0x1, 0x0, 0x3}) ioctl$DRM_IOCTL_MODE_GETFB2(0xffffffffffffffff, 0xc06864ce, &(0x7f0000000080)={0x0, 0x400, 0x3c0, 0x80000000, 0x1, [0x0, 0x0], [0x0, 0xfffffff7, 0x7, 0x4f2], [0xfffffffc, 0xd1, 0x78ee, 0x155], [0x4, 0x3, 0x0, 0xb]}) r4 = syz_open_dev$dri(0x0, 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETFB2(r4, 0xc06864ce, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, [0x0], [0x0, 0x3, 0x0, 0x4], [0x5, 0xb, 0x2], [0x10001, 0x0, 0x2, 0x5]}) ioctl$DRM_IOCTL_GEM_CLOSE(r4, 0x40086409, &(0x7f0000000100)={r5}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000100)={0x0}) ioctl$DRM_IOCTL_MODE_ADDFB2(0xffffffffffffffff, 0xc06864b8, &(0x7f00000002c0)={r2, 0x0, 0x8000, 0x1a8, 0x0, [r3, r5, r6], [0x8, 0x4, 0x1, 0xffffff7f], [0x4, 0xff, 0x7fff, 0xc], [0x7ff, 0x1ba, 0xc59, 0x99]}) 9.769702421s ago: executing program 0 (id=1244): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x24, 0x1, 0x4, 0x801, 0x0, 0x0, {0x5, 0x0, 0x1}, [@NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x5}, @NFULA_CFG_CMD={0x5, 0x1, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x240c0081}, 0x20000000) 8.954801387s ago: executing program 6 (id=1245): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f0000000180)=0x1, 0x0, 0x4) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./bus\x00', 0x40, 0x0) write(0xffffffffffffffff, &(0x7f0000004200), 0x0) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x4, 0x1, 0x101, 0x0, 0x0, {0x1, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x200048e0}, 0x4) sendmsg$NFNL_MSG_CTHELPER_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x14, 0x1, 0x9, 0x301, 0x0, 0x0, {0x7, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x44891}, 0x4004000) 7.914280789s ago: executing program 0 (id=1246): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400000000e3ffffffffffffff", @ANYRES32=0x0, @ANYBLOB="7b130000000000001c0012800b00010067656e65766500"], 0x3c}}, 0x2000c0d0) write$P9_RVERSION(r2, &(0x7f0000000200)=ANY=[@ANYRESDEC=r2], 0x15) r4 = open(&(0x7f0000000100)='./file0\x00', 0x440, 0x0) write$FUSE_BMAP(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1, 0x2, r4}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0) r6 = syz_io_uring_setup(0x49f, &(0x7f0000000080)={0x0, 0xe7a8, 0x1, 0x7ffc, 0x8040024e}, &(0x7f0000000140), &(0x7f0000000100)) r7 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) bind$netrom(r7, &(0x7f00000004c0)={{0x6, @rose, 0x1}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}, 0x48) r8 = eventfd2(0xff, 0x80001) io_uring_register$IORING_REGISTER_EVENTFD(r6, 0x4, &(0x7f0000000300)=r8, 0x1) 7.258190662s ago: executing program 6 (id=1247): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = getpid() setrlimit(0xb, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mlock2(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0) mlock2(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = socket$inet(0x10, 0x3, 0x0) mkdir(&(0x7f00000003c0)='./file0\x00', 0x21) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$9p_fd(0x0, &(0x7f0000000780)='./file0/../file0\x00', 0x0, 0x20000, 0x0) mount$bind(0x0, &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newqdisc={0xac, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r4, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x7c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x5, 0x4, 0x22, 0x1, 0x8, 0x0, 0x9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x18, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x8}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x6}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x7}]}}]}, 0xac}}, 0x0) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x3c, r6, 0x603, 0x70bd30, 0x25dfdbfd, {}, [@ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0xc3}, @ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0x9}, @ETHTOOL_A_LINKINFO_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x3c}}, 0x10) 5.185848007s ago: executing program 1 (id=1248): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400000000e3ffffffffffffff", @ANYRES32=0x0, @ANYBLOB="7b130000000000001c0012800b00010067656e65766500"], 0x3c}}, 0x2000c0d0) write$P9_RVERSION(r2, &(0x7f0000000200)=ANY=[@ANYRESDEC=r2], 0x15) r4 = open(&(0x7f0000000100)='./file0\x00', 0x440, 0x0) write$FUSE_BMAP(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1, 0x2, r4}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0) r6 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) bind$netrom(r6, &(0x7f00000004c0)={{0x6, @rose, 0x1}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}, 0x48) r7 = eventfd2(0xff, 0x80001) io_uring_register$IORING_REGISTER_EVENTFD(0xffffffffffffffff, 0x4, &(0x7f0000000300)=r7, 0x1) 5.15803894s ago: executing program 5 (id=1249): syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) setresuid(0xffffffffffffffff, 0xffffffffffffffff, 0xee01) ioctl$DRM_IOCTL_SET_VERSION(0xffffffffffffffff, 0xc0106407, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x8}) ioctl$DRM_IOCTL_GET_UNIQUE(0xffffffffffffffff, 0xc0106401, 0x0) r0 = io_uring_setup(0x177f, &(0x7f0000000140)={0x0, 0x0, 0x2, 0x0, 0xfffffffd}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r2, 0x8914, &(0x7f0000000000)) syz_init_net_socket$rose(0xb, 0x5, 0x0) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r3, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x1, @null}, 0x1c) connect$rose(r3, &(0x7f0000000240)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, 0x1, @null}, 0x1c) close_range(r0, 0xffffffffffffffff, 0x0) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'wlan0\x00'}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, 0x0, 0x0) 5.15672183s ago: executing program 0 (id=1250): sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20040000) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0xfc, 0x0}, 0x30004001) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) syz_emit_ethernet(0x7e, &(0x7f0000000880)={@link_local, @remote, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "2e5cea", 0x48, 0x3c, 0x0, @rand_addr=' \x01\x00', @mcast2, {[@hopopts={0x0, 0x3, '\x00', [@hao={0xc9, 0x10, @private2={0xfc, 0x2, '\x00', 0x1}}, @calipso={0x7, 0x8, {0x3, 0x0, 0x2, 0x5}}]}, @routing={0x2c, 0x0, 0x0, 0xb}], {0x0, 0x0, 0x18, 0x0, @wg=@data={0x4, 0x6}}}}}}}, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, 0x0) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, &(0x7f000000b000)={0x77359400}, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$kcm(0x29, 0x2, 0x0) ioctl$EXT4_IOC_GETSTATE(r0, 0x40046629, &(0x7f0000000180)) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[], &(0x7f0000000140)='GPL\x00'}, 0x94) r4 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r4, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x20000811) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000040)={r4, r3}) sendmsg$kcm(r2, &(0x7f0000002080)={0x0, 0x0, &(0x7f0000002000)=[{&(0x7f0000000880)="1a", 0x100000}], 0x1}, 0x0) close(r2) timer_settime(0x0, 0x1, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20044080) mq_open(0x0, 0x840, 0x100, 0x0) 2.458092074s ago: executing program 0 (id=1251): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x20}}, 0x0) socket(0x11, 0xa, 0x2) bind$alg(0xffffffffffffffff, &(0x7f00000006c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58) accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x8041, 0x0) write$dsp(r0, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) gettid() ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) 2.457605405s ago: executing program 5 (id=1252): openat$tun(0xffffffffffffff9c, 0x0, 0x1c1842, 0x0) socket$packet(0x11, 0x3, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) socket$nl_netfilter(0x10, 0x3, 0xc) syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) getsockopt$IP_SET_OP_GET_BYINDEX(r1, 0x1, 0x53, &(0x7f0000000400)={0x7, 0x7, 0x2}, &(0x7f0000000440)=0x28) ioctl$UFFDIO_CONTINUE(0xffffffffffffffff, 0xc020aa08, &(0x7f0000000080)={{&(0x7f00003e4000/0x9000)=nil, 0x9000}}) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000040)=ANY=[@ANYBLOB="d0000000", @ANYRES16, @ANYBLOB="010000000000000000000100000008000100000000000400048008000c8004000b800800020001000000a00008801c000780080077144ebb00000800060000000000080005"], 0xd0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) 2.294118508s ago: executing program 1 (id=1253): r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/diskstats\x00', 0x0, 0x0) socket$inet(0x2, 0x5, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x8010) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi2\x00', 0xa400, 0x0) sendfile(r0, r1, 0x0, 0x106f) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), r4) syz_genetlink_get_family_id$ethtool(0x0, r1) sendmsg$NL80211_CMD_GET_COALESCE(r4, 0x0, 0x4044880) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="280000000306010100000000001a0000020000"], 0x28}, 0x1, 0x0, 0x0, 0x40004}, 0x40080d0) 400.737638ms ago: executing program 5 (id=1254): prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x88}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xb007}, 0x4) syz_io_uring_setup(0x10d, &(0x7f0000000380)={0x0, 0x25b9, 0x100, 0x0, 0x215}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) socket$tipc(0x1e, 0x2, 0x0) socket$tipc(0x1e, 0x5, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x43, &(0x7f0000000040)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) syz_io_uring_submit(r0, r1, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0x40, 0x0, 0xffffffffffffffff, 0x32, &(0x7f00000000c0)=@un=@abs={0x1, 0x0, 0x4e20}}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r3) socket(0x2b, 0x1, 0x1) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r3, 0x5) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f00000006c0)=ANY=[@ANYBLOB="180000000000000000000000ffffffff180800002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000400008500000004000000b7080000000000007baaf8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ff", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000b300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @loopback}, 0x10) socketpair$unix(0x1, 0x1, 0x0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x2401, 0x0) 266.255579ms ago: executing program 2 (id=1255): r0 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x262) socket$igmp6(0xa, 0x3, 0x2) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) r7 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r7}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) write$P9_RGETLOCK(r6, &(0x7f00000000c0)=ANY=[], 0xffffff6a) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) tee(r5, r8, 0xfffffffffffffc01, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000c40)={0x0, 0x0, 0x41, 0x0, 0x1}, 0x28) tee(r5, r8, 0x60000000000, 0x0) ioctl$sock_bt_hidp_HIDPCONNDEL(r0, 0x400448c9, &(0x7f0000000000)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}) 256.13535ms ago: executing program 1 (id=1256): modify_ldt$write2(0x11, &(0x7f0000000240)={0x7ff, 0x20001000, 0x1000, 0x1, 0x3, 0x1, 0x1, 0x0, 0x0, 0x1}, 0x10) socket$kcm(0x10, 0x2, 0x0) r0 = syz_io_uring_setup(0x34b7, &(0x7f0000000000)={0x0, 0x0, 0x30c0, 0x4, 0x2a}, 0x0, &(0x7f0000000500)) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r0, 0xc, 0xf0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xf, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="2c3a0000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000004000085000000720000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa00}, 0x94) bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x48) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e23, 0x3, @empty}, 0x1c) socket$netlink(0x10, 0x3, 0x10) r2 = socket$netlink(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000100)=0x80000001, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r2) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x4001, 0x0, @loopback}, 0x1c) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r4, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) shutdown(r4, 0x1) 0s ago: executing program 0 (id=1257): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000300)) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000080)=0x200000000) r2 = dup2(r1, r1) preadv2(r2, &(0x7f0000000340)=[{&(0x7f00000003c0)=""/191, 0xbf}], 0x1, 0x1004, 0x3, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): Pv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 86.173295][ T4386] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.180157][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 86.206639][ T4266] device veth0_macvtap entered promiscuous mode [ 86.224620][ T4386] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.227474][ T4267] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.252730][ T4267] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.271287][ T4267] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.281744][ T4267] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.301831][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 86.322890][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 86.370473][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 86.397719][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 86.414258][ T4266] device veth1_macvtap entered promiscuous mode [ 86.524555][ T4266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.573984][ T4266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.607789][ T4266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.630145][ T4266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.653614][ T4266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.671315][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 86.679644][ T4266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.705104][ T4266] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.811355][ T48] Bluetooth: hci1: command 0x0419 tx timeout [ 86.817453][ T48] Bluetooth: hci2: command 0x0419 tx timeout [ 86.862719][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 86.870166][ T4269] Bluetooth: hci4: command 0x0419 tx timeout [ 86.871090][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 86.878243][ T4283] Bluetooth: hci3: command 0x0419 tx timeout [ 86.892580][ T48] Bluetooth: hci0: command 0x0419 tx timeout [ 86.900097][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 86.919823][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 87.131314][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 87.140507][ T0] NOHZ tick-stop error: local softirq work is pending, handler #208!!! [ 87.262034][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 87.341547][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 87.595405][ T27] cfg80211: failed to load regulatory.db [ 87.690506][ T4266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.732253][ T4266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.750518][ T4266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.766443][ T4266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.777306][ T4266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.793541][ T4266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.808978][ T4266] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.893666][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 87.922162][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 87.966687][ T4266] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.002210][ T4266] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.010984][ T4266] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.045075][ T4266] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.119408][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 88.161683][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 88.227876][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 88.260299][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 88.285067][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 88.294100][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 88.306724][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.329519][ T4276] device veth0_vlan entered promiscuous mode [ 88.372170][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.395556][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 88.422342][ T4276] device veth1_vlan entered promiscuous mode [ 88.449376][ T56] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.499318][ T56] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.608716][ T4391] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 88.613449][ T56] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.655378][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 88.663187][ T56] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.674368][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 88.785555][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 88.941211][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 89.218503][ T4382] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.313539][ T4382] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.335141][ T4276] device veth0_macvtap entered promiscuous mode [ 89.388885][ T4276] device veth1_macvtap entered promiscuous mode [ 89.421949][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 89.430009][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 89.456987][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 89.466078][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 89.502301][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 89.547357][ T4391] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 89.562318][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 89.636401][ T4391] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 89.910703][ T4391] usb 2-1: New USB device found, idVendor=0419, idProduct=0001, bcdDevice= 0.00 [ 90.029774][ T4391] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 90.033398][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.055711][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.067382][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.081232][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.092067][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.103631][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.114864][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.126200][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.147770][ T4276] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.166480][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 90.264048][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 90.302025][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 90.356855][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 90.870815][ T4391] usb 2-1: config 0 descriptor?? [ 90.906843][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.971901][ T4424] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 90.974041][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.010844][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.024989][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.035233][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.045932][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.056228][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.066940][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.080710][ T4276] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.155268][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 91.170380][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 91.242973][ T4276] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.259710][ T4276] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.270044][ T4276] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.283257][ T4276] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.407270][ T4391] samsung 0003:0419:0001.0001: hidraw0: USB HID v0.00 Device [HID 0419:0001] on usb-dummy_hcd.1-1/input0 [ 91.673858][ T4391] usb 2-1: USB disconnect, device number 2 [ 92.890205][ T41] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.914432][ T4442] netlink: 8 bytes leftover after parsing attributes in process `syz.2.16'. [ 92.961990][ T41] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.070135][ T4446] netlink: 4 bytes leftover after parsing attributes in process `syz.0.18'. [ 93.079320][ T4446] netlink: 4 bytes leftover after parsing attributes in process `syz.0.18'. [ 93.251439][ T4318] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 93.509400][ T4318] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 93.686578][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 93.694258][ T4318] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 93.709936][ T4450] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.711683][ T4436] fido_id[4436]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 93.725029][ T4450] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.732702][ T4318] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 93.772446][ T4318] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 93.801224][ T4318] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.811821][ T4418] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 93.825661][ T4318] usb 2-1: config 0 descriptor?? [ 94.773238][ T4318] plantronics 0003:047F:FFFF.0002: No inputs registered, leaving [ 95.280245][ T4318] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 97.438952][ T2121] usb 2-1: USB disconnect, device number 3 [ 98.573338][ T4484] netlink: 32 bytes leftover after parsing attributes in process `syz.1.26'. [ 98.935904][ T4454] syz.2.19 (4454): drop_caches: 2 [ 98.964048][ T4484] netlink: 32 bytes leftover after parsing attributes in process `syz.1.26'. [ 101.447829][ T4516] netlink: 20 bytes leftover after parsing attributes in process `syz.1.34'. [ 104.931241][ T27] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 105.370005][ T27] usb 1-1: New USB device found, idVendor=0b48, idProduct=1008, bcdDevice=b7.de [ 105.625452][ T27] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.652802][ T27] usb 1-1: Product: syz [ 105.725797][ T27] usb 1-1: Manufacturer: syz [ 105.758817][ T27] usb 1-1: SerialNumber: syz [ 105.772313][ T4518] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 105.813643][ T27] usb 1-1: config 0 descriptor?? [ 105.833384][ T27] usb 1-1: can't set config #0, error -71 [ 105.867795][ T27] usb 1-1: USB disconnect, device number 2 [ 110.117044][ T4568] mmap: syz.2.48 (4568) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 111.223566][ T4576] syz.4.41 (4576): drop_caches: 2 [ 114.211162][ T4597] syz.0.56 uses obsolete (PF_INET,SOCK_PACKET) [ 116.374428][ T4616] netlink: 20 bytes leftover after parsing attributes in process `syz.3.59'. [ 117.300178][ T4620] syz.0.63 (4620): drop_caches: 2 [ 121.169208][ T4651] netlink: 12 bytes leftover after parsing attributes in process `syz.0.70'. [ 122.719121][ T4657] capability: warning: `syz.0.70' uses deprecated v2 capabilities in a way that may be insecure [ 124.239907][ T4669] Zero length message leads to an empty skb [ 125.481306][ T4552] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 125.724055][ T4552] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 125.877858][ T4552] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 125.897560][ T4552] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 125.919474][ T4552] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 125.931749][ T4552] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.939816][ T4552] usb 1-1: Product: syz [ 125.944900][ T4552] usb 1-1: Manufacturer: syz [ 125.950631][ T4552] usb 1-1: SerialNumber: syz [ 125.965621][ T4552] cdc_mbim 1-1:1.0: CDC Union missing and no IAD found [ 125.973382][ T4552] cdc_mbim 1-1:1.0: bind() failure [ 126.890418][ T4402] usb 1-1: USB disconnect, device number 3 [ 128.066550][ T4695] lo speed is unknown, defaulting to 1000 [ 128.073337][ T4695] lo speed is unknown, defaulting to 1000 [ 128.080776][ T4695] lo speed is unknown, defaulting to 1000 [ 128.090059][ T4695] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 128.101754][ T4695] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 128.565164][ T4695] lo speed is unknown, defaulting to 1000 [ 128.573182][ T4695] lo speed is unknown, defaulting to 1000 [ 128.580281][ T4695] lo speed is unknown, defaulting to 1000 [ 128.587869][ T4695] lo speed is unknown, defaulting to 1000 [ 128.595068][ T4695] lo speed is unknown, defaulting to 1000 [ 128.602071][ T4695] lo speed is unknown, defaulting to 1000 [ 129.822093][ T4373] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 130.071392][ T4373] usb 3-1: Using ep0 maxpacket: 32 [ 130.217338][ T4373] usb 3-1: config 0 has an invalid interface number: 89 but max is 0 [ 130.417961][ T4373] usb 3-1: config 0 has no interface number 0 [ 130.478938][ T4373] usb 3-1: config 0 interface 89 has no altsetting 0 [ 131.362356][ T4373] usb 3-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e [ 131.410745][ T4373] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.429242][ T4373] usb 3-1: Product: syz [ 131.446647][ T4373] usb 3-1: Manufacturer: syz [ 131.471316][ T4373] usb 3-1: SerialNumber: syz [ 131.536004][ T4373] usb 3-1: config 0 descriptor?? [ 131.555319][ T4373] em28xx 3-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 131.565130][ T4373] em28xx 3-1:0.89: Video interface 89 found: bulk [ 131.691572][ T4373] em28xx 3-1:0.89: unknown em28xx chip ID (0) [ 131.798142][ T4373] em28xx 3-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 132.694294][ T4373] em28xx 3-1:0.89: board has no eeprom [ 132.821594][ T4373] em28xx 3-1:0.89: Identified as Terratec Grabby (card=67) [ 132.828888][ T4373] em28xx 3-1:0.89: analog set to bulk mode. [ 133.100530][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.214033][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.760618][ T126] em28xx 3-1:0.89: Registering V4L2 extension [ 133.779771][ T4373] usb 3-1: USB disconnect, device number 2 [ 133.799062][ T4373] em28xx 3-1:0.89: Disconnecting em28xx [ 134.075091][ T4741] binder: 4740:4741 ioctl c00c620f 2000000000c0 returned -22 [ 134.106887][ T4744] siw: device registration error -23 [ 134.494666][ T126] em28xx 3-1:0.89: Config register raw data: 0xffffffed [ 134.539047][ T126] em28xx 3-1:0.89: AC97 chip type couldn't be determined [ 134.557232][ T126] em28xx 3-1:0.89: No AC97 audio processor [ 134.775562][ T126] usb 3-1: Decoder not found [ 134.780446][ T126] em28xx 3-1:0.89: failed to create media graph [ 134.787288][ T126] em28xx 3-1:0.89: V4L2 device video103 deregistered [ 135.281353][ T126] em28xx 3-1:0.89: Registering snapshot button... [ 135.312217][ T126] input: em28xx snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.89/input/input6 [ 135.353795][ T126] em28xx 3-1:0.89: Remote control support is not available for this card. [ 135.494239][ T4373] em28xx 3-1:0.89: Closing input extension [ 135.508475][ T4373] em28xx 3-1:0.89: Deregistering snapshot button [ 136.178900][ T4373] em28xx 3-1:0.89: Freeing device [ 136.401327][ T4335] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 137.011870][ T4335] usb 4-1: Using ep0 maxpacket: 32 [ 137.030195][ T4335] usb 4-1: config 0 has an invalid interface number: 89 but max is 0 [ 137.445458][ T4335] usb 4-1: config 0 has no interface number 0 [ 137.452653][ T4335] usb 4-1: config 0 interface 89 has no altsetting 0 [ 137.481784][ T4335] usb 4-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e [ 137.508546][ T4335] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.759337][ T4335] usb 4-1: Product: syz [ 137.768704][ T4335] usb 4-1: Manufacturer: syz [ 137.777568][ T4335] usb 4-1: SerialNumber: syz [ 138.647906][ T4335] usb 4-1: config 0 descriptor?? [ 138.762598][ T4335] em28xx 4-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 138.773084][ T4335] em28xx 4-1:0.89: Video interface 89 found: bulk [ 139.322556][ T4795] process 'syz.1.110' launched '/dev/fd/4/./file0' with NULL argv: empty string added [ 139.363297][ T4335] em28xx 4-1:0.89: unknown em28xx chip ID (0) [ 140.692149][ T4335] em28xx 4-1:0.89: failed to get i2c transfer status from bridge register (error=-5) [ 140.703872][ T4335] em28xx 4-1:0.89: board has no eeprom [ 140.791221][ T4335] em28xx 4-1:0.89: Identified as Terratec Grabby (card=67) [ 140.798793][ T4335] em28xx 4-1:0.89: analog set to bulk mode. [ 141.815911][ T4335] usb 4-1: USB disconnect, device number 2 [ 141.830039][ T4335] em28xx 4-1:0.89: Disconnecting em28xx [ 141.841508][ T4552] em28xx 4-1:0.89: Registering V4L2 extension [ 142.321290][ T4823] netlink: 12 bytes leftover after parsing attributes in process `syz.3.119'. [ 142.471461][ T4825] netlink: 12 bytes leftover after parsing attributes in process `syz.4.116'. [ 145.641961][ T4552] em28xx 4-1:0.89: Config register raw data: 0xffffffed [ 145.648953][ T4552] em28xx 4-1:0.89: AC97 chip type couldn't be determined [ 145.856552][ T4552] em28xx 4-1:0.89: No AC97 audio processor [ 146.345341][ T4552] usb 4-1: Decoder not found [ 146.367848][ T4552] em28xx 4-1:0.89: failed to create media graph [ 146.436792][ T4552] em28xx 4-1:0.89: V4L2 device video103 deregistered [ 147.133928][ T4552] em28xx 4-1:0.89: Registering snapshot button... [ 147.151524][ T4552] input: em28xx snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.89/input/input7 [ 147.220156][ T4552] em28xx 4-1:0.89: Remote control support is not available for this card. [ 147.234949][ T4335] em28xx 4-1:0.89: Closing input extension [ 147.240858][ T4335] em28xx 4-1:0.89: Deregistering snapshot button [ 147.440009][ T4335] em28xx 4-1:0.89: Freeing device [ 150.703357][ T4893] netlink: 12 bytes leftover after parsing attributes in process `syz.4.134'. [ 151.623521][ T4901] netlink: 12 bytes leftover after parsing attributes in process `syz.1.136'. [ 155.238221][ T4930] netlink: 8 bytes leftover after parsing attributes in process `syz.1.145'. [ 155.251615][ T4930] device gtp0 entered promiscuous mode [ 159.048383][ T4980] netlink: 20 bytes leftover after parsing attributes in process `syz.3.156'. [ 162.819396][ T5041] syz.3.162 (5041): drop_caches: 2 [ 164.601181][ T126] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 164.872741][ T126] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 165.550675][ T126] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 165.563063][ T126] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 165.589438][ T126] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 165.708823][ T5063] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 167.358513][ T5079] ubi31: attaching mtd0 [ 168.015353][ T5079] ubi31: scanning is finished [ 168.020182][ T5079] ubi31: empty MTD device detected [ 168.055356][ T126] usb 3-1: USB disconnect, device number 3 [ 168.096765][ T5079] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 168.104521][ T5079] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 168.112298][ T5079] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 168.119495][ T5079] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 168.127059][ T5079] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 168.134094][ T5079] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 168.142533][ T5079] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 1534245012 [ 168.152851][ T5079] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 168.172572][ T5081] ubi31: background thread "ubi_bgt31d" started, PID 5081 [ 168.877191][ T5089] netlink: 8 bytes leftover after parsing attributes in process `syz.0.168'. [ 168.912437][ T5089] device gtp0 entered promiscuous mode [ 169.354376][ T4867] udevd[4867]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 171.081311][ T4257] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 171.471257][ T4257] usb 2-1: Using ep0 maxpacket: 32 [ 171.478417][ T4257] usb 2-1: config 0 has an invalid interface number: 89 but max is 0 [ 171.653336][ T4257] usb 2-1: config 0 has no interface number 0 [ 171.659529][ T4257] usb 2-1: config 0 interface 89 has no altsetting 0 [ 172.136392][ T4257] usb 2-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e [ 172.411249][ T4257] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 172.441174][ T4257] usb 2-1: Product: syz [ 172.445441][ T4257] usb 2-1: Manufacturer: syz [ 172.450205][ T4257] usb 2-1: SerialNumber: syz [ 172.702553][ T4257] usb 2-1: config 0 descriptor?? [ 172.804076][ T4257] usb 2-1: can't set config #0, error -71 [ 172.831287][ T4257] usb 2-1: USB disconnect, device number 4 [ 174.627115][ T5128] netlink: 8 bytes leftover after parsing attributes in process `syz.1.181'. [ 174.953458][ T5128] device gtp1 entered promiscuous mode [ 175.041185][ T126] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 175.344276][ T5137] netlink: 20 bytes leftover after parsing attributes in process `syz.0.183'. [ 176.184444][ T5136] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 176.275794][ T126] usb 3-1: device descriptor read/all, error -71 [ 176.484069][ T48] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 176.493753][ T48] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 176.502589][ T48] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 176.516426][ T48] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 176.524391][ T48] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 176.556997][ T48] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 177.022179][ T5146] netlink: 28 bytes leftover after parsing attributes in process `syz.2.187'. [ 177.340554][ T5141] lo speed is unknown, defaulting to 1000 [ 178.631363][ T48] Bluetooth: hci5: command 0x0409 tx timeout [ 178.729943][ T4327] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 178.792476][ T5153] IPVS: Error joining to the multicast group [ 179.048754][ T5163] syz.3.191 (5163): drop_caches: 2 [ 179.171182][ T4327] usb 3-1: Using ep0 maxpacket: 32 [ 179.644627][ T4327] usb 3-1: config 0 has an invalid interface number: 89 but max is 0 [ 179.673851][ T4327] usb 3-1: config 0 has no interface number 0 [ 179.680033][ T4327] usb 3-1: config 0 interface 89 has no altsetting 0 [ 179.703316][ T4327] usb 3-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e [ 179.720222][ T4327] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 179.731751][ T4327] usb 3-1: Product: syz [ 179.736736][ T4327] usb 3-1: Manufacturer: syz [ 179.741804][ T4327] usb 3-1: SerialNumber: syz [ 179.763205][ T4327] usb 3-1: config 0 descriptor?? [ 179.772919][ T4327] em28xx 3-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 179.782565][ T4327] em28xx 3-1:0.89: Video interface 89 found: bulk [ 180.280254][ T4399] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.702061][ T4282] Bluetooth: hci5: command 0x041b tx timeout [ 180.745773][ T5168] netlink: 8 bytes leftover after parsing attributes in process `syz.0.193'. [ 180.883130][ T4327] em28xx 3-1:0.89: unknown em28xx chip ID (0) [ 181.807049][ T5188] netlink: 20 bytes leftover after parsing attributes in process `syz.0.195'. [ 181.992050][ T4327] em28xx 3-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 182.000668][ T4327] em28xx 3-1:0.89: board has no eeprom [ 182.006257][ T4399] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.009332][ T4282] Bluetooth: hci5: command 0x040f tx timeout [ 183.182616][ T4327] em28xx 3-1:0.89: Identified as Terratec Grabby (card=67) [ 183.228796][ T4327] em28xx 3-1:0.89: analog set to bulk mode. [ 183.573136][ T4327] usb 3-1: USB disconnect, device number 6 [ 183.579695][ T4327] em28xx 3-1:0.89: Disconnecting em28xx [ 183.726380][ T4792] em28xx 3-1:0.89: Registering V4L2 extension [ 184.001249][ T14] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 184.552881][ T4399] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.733169][ T14] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 184.760618][ T14] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 184.778784][ T14] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 184.796210][ T14] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 184.843215][ T4399] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.078595][ T4282] Bluetooth: hci5: command 0x0419 tx timeout [ 185.090683][ T4792] em28xx 3-1:0.89: Config register raw data: 0xffffffed [ 185.101480][ T4792] em28xx 3-1:0.89: AC97 chip type couldn't be determined [ 185.108662][ T4792] em28xx 3-1:0.89: No AC97 audio processor [ 185.480005][ T14] usb 2-1: can't set config #27, error -71 [ 185.489152][ T4792] usb 3-1: Decoder not found [ 185.494379][ T4792] em28xx 3-1:0.89: failed to create media graph [ 185.610619][ T14] usb 2-1: USB disconnect, device number 5 [ 185.618818][ T4792] em28xx 3-1:0.89: V4L2 device video103 deregistered [ 185.683383][ T4792] em28xx 3-1:0.89: Registering snapshot button... [ 185.705332][ T4792] input: em28xx snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.89/input/input8 [ 185.732694][ T5141] chnl_net:caif_netlink_parms(): no params data found [ 185.798672][ T4792] em28xx 3-1:0.89: Remote control support is not available for this card. [ 185.847881][ T4327] em28xx 3-1:0.89: Closing input extension [ 185.854659][ T4327] em28xx 3-1:0.89: Deregistering snapshot button [ 186.527179][ T4327] em28xx 3-1:0.89: Freeing device [ 186.544275][ T5227] netlink: 8 bytes leftover after parsing attributes in process `syz.1.204'. [ 189.441302][ T5141] bridge0: port 1(bridge_slave_0) entered blocking state [ 189.449038][ T5141] bridge0: port 1(bridge_slave_0) entered disabled state [ 189.458024][ T5141] device bridge_slave_0 entered promiscuous mode [ 189.471782][ T5141] bridge0: port 2(bridge_slave_1) entered blocking state [ 189.479121][ T5141] bridge0: port 2(bridge_slave_1) entered disabled state [ 190.449593][ T5141] device bridge_slave_1 entered promiscuous mode [ 190.674406][ T5141] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 190.698986][ T5141] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 191.478989][ T5141] team0: Port device team_slave_0 added [ 192.793343][ T5141] team0: Port device team_slave_1 added [ 192.995589][ T5141] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 193.004211][ T5141] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 193.220666][ T5141] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 194.918539][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.926102][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.044339][ T5284] netlink: 8 bytes leftover after parsing attributes in process `syz.1.214'. [ 195.381714][ T5141] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 195.388826][ T5141] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 196.821796][ T5141] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 199.928882][ T5141] device hsr_slave_0 entered promiscuous mode [ 200.219858][ T5141] device hsr_slave_1 entered promiscuous mode [ 200.911302][ T5141] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 200.957498][ T5141] Cannot create hsr debugfs directory [ 201.897055][ T4282] Bluetooth: hci1: command 0x0406 tx timeout [ 201.903298][ T4282] Bluetooth: hci2: command 0x0406 tx timeout [ 201.909419][ T4282] Bluetooth: hci3: command 0x0406 tx timeout [ 201.915688][ T48] Bluetooth: hci0: command 0x0406 tx timeout [ 206.547371][ T5356] netlink: 12 bytes leftover after parsing attributes in process `syz.0.233'. [ 206.567342][ T4282] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 206.617336][ T4282] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 206.852061][ T4282] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 206.864274][ T48] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 206.890708][ T48] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 206.898206][ T48] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 206.945618][ T4399] device hsr_slave_0 left promiscuous mode [ 206.958614][ T5358] DRBG: could not allocate CTR cipher TFM handle: ctr(aes) [ 206.981860][ T4399] device hsr_slave_1 left promiscuous mode [ 207.058180][ T4399] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 207.122198][ T4399] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 207.243427][ T4399] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 207.265513][ T4399] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 207.332583][ T4399] device bridge_slave_1 left promiscuous mode [ 207.353715][ T4399] bridge0: port 2(bridge_slave_1) entered disabled state [ 207.622775][ T4399] device bridge_slave_0 left promiscuous mode [ 207.622913][ T4399] bridge0: port 1(bridge_slave_0) entered disabled state [ 207.695573][ T4399] device veth1_macvtap left promiscuous mode [ 207.695837][ T4399] device veth0_macvtap left promiscuous mode [ 207.696052][ T4399] device veth1_vlan left promiscuous mode [ 207.696318][ T4399] device veth0_vlan left promiscuous mode [ 208.619244][ T5386] syz.1.236 (5386): drop_caches: 2 [ 208.941223][ T4269] Bluetooth: hci4: command 0x0409 tx timeout [ 210.461185][ T4257] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 210.554483][ T5397] netlink: 20 bytes leftover after parsing attributes in process `syz.2.238'. [ 211.021191][ T4269] Bluetooth: hci4: command 0x041b tx timeout [ 211.441972][ T4399] team0 (unregistering): Port device team_slave_1 removed [ 211.462996][ T4257] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 211.483312][ T4257] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 211.493382][ T4257] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 211.504343][ T4257] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 211.523122][ T5391] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 211.585452][ T4399] team0 (unregistering): Port device team_slave_0 removed [ 211.705941][ T4399] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 211.738871][ T4373] usb 2-1: USB disconnect, device number 6 [ 211.812795][ T4399] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 212.435100][ T4399] bond0 (unregistering): Released all slaves [ 212.766048][ T14] lo speed is unknown, defaulting to 1000 [ 212.824074][ T5407] IPVS: Error joining to the multicast group [ 212.954460][ T5141] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 213.006808][ T5141] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 213.102595][ T5410] fuse: Bad value for 'fd' [ 213.131484][ T4269] Bluetooth: hci4: command 0x040f tx timeout [ 213.200291][ T5141] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 213.234088][ T5141] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 213.316897][ T5414] lo speed is unknown, defaulting to 1000 [ 213.322943][ T5414] lo speed is unknown, defaulting to 1000 [ 213.329328][ T5414] lo speed is unknown, defaulting to 1000 [ 213.344565][ T5414] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 213.365406][ T5414] lo speed is unknown, defaulting to 1000 [ 213.372335][ T5414] lo speed is unknown, defaulting to 1000 [ 213.379220][ T5414] lo speed is unknown, defaulting to 1000 [ 213.386272][ T5414] lo speed is unknown, defaulting to 1000 [ 213.393306][ T5414] lo speed is unknown, defaulting to 1000 [ 213.400192][ T5414] lo speed is unknown, defaulting to 1000 [ 214.255514][ T5431] netlink: 8 bytes leftover after parsing attributes in process `syz.1.245'. [ 215.481518][ T4269] Bluetooth: hci4: command 0x0419 tx timeout [ 215.765673][ T5141] 8021q: adding VLAN 0 to HW filter on device bond0 [ 216.000344][ T5141] 8021q: adding VLAN 0 to HW filter on device team0 [ 216.046717][ T4399] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 216.078826][ T4399] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 216.227740][ T4399] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 216.251991][ T4399] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 216.386449][ T5436] DRBG: could not allocate CTR cipher TFM handle: ctr(aes) [ 216.392147][ T4399] bridge0: port 1(bridge_slave_0) entered blocking state [ 216.392267][ T4399] bridge0: port 1(bridge_slave_0) entered forwarding state [ 216.392859][ T4399] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 216.393598][ T4399] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 216.394180][ T4399] bridge0: port 2(bridge_slave_1) entered blocking state [ 216.394252][ T4399] bridge0: port 2(bridge_slave_1) entered forwarding state [ 216.397289][ T5352] chnl_net:caif_netlink_parms(): no params data found [ 216.769511][ T5449] binder: 5446:5449 ioctl 4018620d 0 returned -22 [ 216.899160][ T5048] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.145779][ T4399] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 217.187347][ T4399] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 217.231864][ T4399] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 217.242121][ T4399] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 217.253095][ T4399] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 218.180183][ T5048] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.017877][ T4399] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 219.087074][ T4399] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 219.114308][ T4399] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 219.147754][ T4399] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 219.177221][ T4399] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 219.298581][ T4399] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 219.300917][ T5482] siw: device registration error -23 [ 219.340727][ T4399] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 219.459925][ T5141] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 219.617761][ T5048] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.361651][ T4311] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 221.067670][ T4311] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 221.078769][ T4311] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 221.089611][ T4311] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 221.114918][ T4311] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 221.370022][ T4311] usb 2-1: can't set config #27, error -71 [ 221.384168][ T5048] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.071560][ T4311] usb 2-1: USB disconnect, device number 7 [ 222.095458][ T5500] netlink: 12 bytes leftover after parsing attributes in process `syz.2.257'. [ 223.160299][ T5352] bridge0: port 1(bridge_slave_0) entered blocking state [ 223.169839][ T5352] bridge0: port 1(bridge_slave_0) entered disabled state [ 223.203177][ T5352] device bridge_slave_0 entered promiscuous mode [ 223.548407][ T5513] binder: 5510:5513 ioctl 4018620d 0 returned -22 [ 223.759690][ T5352] bridge0: port 2(bridge_slave_1) entered blocking state [ 224.131903][ T5352] bridge0: port 2(bridge_slave_1) entered disabled state [ 224.140359][ T5352] device bridge_slave_1 entered promiscuous mode [ 224.342889][ T5352] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 224.372097][ T5352] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 224.468895][ T5514] DRBG: could not allocate CTR cipher TFM handle: ctr(aes) [ 224.526995][ T5352] team0: Port device team_slave_0 added [ 224.569685][ T5352] team0: Port device team_slave_1 added [ 224.789281][ T5040] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 224.798077][ T5040] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 225.594277][ T5141] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 225.933100][ T5352] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 225.940427][ T5352] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 225.967758][ T5352] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 226.527742][ T5352] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 226.546975][ T5352] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 226.601534][ T5352] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 228.477692][ T4345] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 228.659980][ T5352] device hsr_slave_0 entered promiscuous mode [ 228.846525][ T5352] device hsr_slave_1 entered promiscuous mode [ 228.860642][ T5352] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 229.654128][ T4345] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 229.658651][ T5352] Cannot create hsr debugfs directory [ 229.683128][ T4345] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 230.161816][ T4345] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 230.171188][ T4345] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 230.280940][ T5555] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 230.568917][ T5577] binder: 5574:5577 ioctl 4018620d 0 returned -22 [ 231.055183][ T4311] usb 3-1: USB disconnect, device number 7 [ 231.690594][ T4260] udevd[4260]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 232.190084][ T5587] siw: device registration error -23 [ 232.420657][ T5034] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 232.446107][ T5034] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 232.939263][ T5599] netlink: 12 bytes leftover after parsing attributes in process `syz.2.274'. [ 234.186187][ T5610] netlink: 8 bytes leftover after parsing attributes in process `syz.0.275'. [ 234.536638][ T5352] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 235.414548][ T5352] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 236.727395][ T5622] sched: RT throttling activated [ 237.638616][ T48] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 237.648344][ T48] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 237.658143][ T48] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 237.669419][ T5352] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 237.769011][ T48] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 237.795275][ T48] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 237.830177][ T48] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 237.848421][ T5352] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 239.902434][ T48] Bluetooth: hci3: command 0x0409 tx timeout [ 239.967449][ T5633] lo speed is unknown, defaulting to 1000 [ 240.150765][ T5048] device hsr_slave_0 left promiscuous mode [ 240.159373][ T5048] device hsr_slave_1 left promiscuous mode [ 240.166200][ T5048] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 240.173989][ T5048] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 240.200562][ T5048] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 240.208391][ T5048] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 240.216673][ T5048] device bridge_slave_1 left promiscuous mode [ 240.224309][ T5048] bridge0: port 2(bridge_slave_1) entered disabled state [ 240.234351][ T5048] device bridge_slave_0 left promiscuous mode [ 240.241746][ T5048] bridge0: port 1(bridge_slave_0) entered disabled state [ 240.278933][ T5048] device veth1_macvtap left promiscuous mode [ 240.285790][ T5048] device veth0_macvtap left promiscuous mode [ 240.292245][ T5048] device veth1_vlan left promiscuous mode [ 240.299330][ T5048] device veth0_vlan left promiscuous mode [ 240.844055][ T4373] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 241.060660][ T4373] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 241.096555][ T4373] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 241.107208][ T4373] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 241.116889][ T4373] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 241.250920][ T5649] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 241.981147][ T48] Bluetooth: hci3: command 0x041b tx timeout [ 242.138636][ T27] usb 3-1: USB disconnect, device number 8 [ 243.230180][ T5675] syz.2.287 (5675): drop_caches: 2 [ 243.471898][ T5679] netlink: 12 bytes leftover after parsing attributes in process `syz.2.289'. [ 244.121245][ T4269] Bluetooth: hci3: command 0x040f tx timeout [ 244.469556][ T5048] team0 (unregistering): Port device team_slave_1 removed [ 244.695023][ T5048] team0 (unregistering): Port device team_slave_0 removed [ 244.793249][ T5048] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 244.852504][ T5048] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 246.141184][ T4269] Bluetooth: hci3: command 0x0419 tx timeout [ 246.716868][ T5696] siw: device registration error -23 [ 246.723278][ T5048] bond0 (unregistering): Released all slaves [ 246.846443][ T5667] netlink: 8 bytes leftover after parsing attributes in process `syz.1.285'. [ 247.020033][ T5352] 8021q: adding VLAN 0 to HW filter on device bond0 [ 247.395932][ T4481] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 247.408595][ T4481] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 247.595986][ T5352] 8021q: adding VLAN 0 to HW filter on device team0 [ 247.879767][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 247.909598][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 247.910131][ T4380] bridge0: port 1(bridge_slave_0) entered blocking state [ 247.910199][ T4380] bridge0: port 1(bridge_slave_0) entered forwarding state [ 247.939667][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 247.940400][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 247.945593][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 247.946164][ T4380] bridge0: port 2(bridge_slave_1) entered blocking state [ 247.946230][ T4380] bridge0: port 2(bridge_slave_1) entered forwarding state [ 247.946730][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 247.961910][ T5046] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 248.013474][ T5040] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 248.014857][ T5040] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 248.015662][ T5040] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 248.016570][ T5040] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 248.018642][ T5040] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 248.638035][ T5040] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 248.638715][ T5040] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 248.651725][ T5352] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 248.652654][ T5352] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 249.233336][ T5040] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 249.233803][ T5040] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 250.390131][ T5633] chnl_net:caif_netlink_parms(): no params data found [ 250.925508][ T5712] tty tty2: ldisc open failed (-12), clearing slot 1 [ 253.082255][ T5747] syz.0.300 (5747): drop_caches: 2 [ 254.509922][ T5764] siw: device registration error -23 [ 254.553253][ T5760] netlink: 8 bytes leftover after parsing attributes in process `syz.1.303'. [ 254.621924][ T5633] bridge0: port 1(bridge_slave_0) entered blocking state [ 254.629090][ T5633] bridge0: port 1(bridge_slave_0) entered disabled state [ 254.698633][ T5633] device bridge_slave_0 entered promiscuous mode [ 254.742218][ T5027] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 254.791608][ T5027] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 254.799586][ T5633] bridge0: port 2(bridge_slave_1) entered blocking state [ 254.826219][ T5633] bridge0: port 2(bridge_slave_1) entered disabled state [ 254.867619][ T5633] device bridge_slave_1 entered promiscuous mode [ 255.032134][ T5352] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 255.044731][ T5767] netlink: 12 bytes leftover after parsing attributes in process `syz.2.305'. [ 255.915403][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.972138][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.203959][ T5633] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 256.641004][ T5633] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 257.607621][ T5633] team0: Port device team_slave_0 added [ 257.831362][ T4345] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 257.860344][ T5633] team0: Port device team_slave_1 added [ 258.403103][ T4345] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 258.435915][ T4345] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 258.506997][ T4345] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 258.531197][ T4345] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 258.718304][ T5790] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 259.558660][ T5810] syz.1.313 (5810): drop_caches: 2 [ 259.728822][ T4345] usb 3-1: USB disconnect, device number 9 [ 260.338238][ T5817] udevd[5817]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 260.832633][ T5823] netlink: 32 bytes leftover after parsing attributes in process `syz.0.314'. [ 261.083566][ T5633] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 261.090591][ T5633] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 261.276573][ T5828] netlink: 12 bytes leftover after parsing attributes in process `syz.1.317'. [ 262.141260][ T5633] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 262.893161][ T5633] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 262.900272][ T5633] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 262.937158][ T5633] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 263.120977][ T5840] netlink: 8 bytes leftover after parsing attributes in process `syz.0.321'. [ 264.075274][ T48] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 264.088294][ T5633] device hsr_slave_0 entered promiscuous mode [ 264.095587][ T5633] device hsr_slave_1 entered promiscuous mode [ 264.208771][ T5633] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 264.217075][ T5633] Cannot create hsr debugfs directory [ 264.230707][ T48] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 264.239769][ T48] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 264.251727][ T48] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 264.259196][ T48] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 264.271617][ T48] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 265.820226][ T5857] netlink: 32 bytes leftover after parsing attributes in process `syz.0.324'. [ 266.135545][ T5867] syz.1.325 (5867): drop_caches: 2 [ 266.621168][ T48] Bluetooth: hci4: command 0x0409 tx timeout [ 266.665671][ T5868] siw: device registration error -23 [ 267.511354][ T4345] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 267.847971][ T5844] lo speed is unknown, defaulting to 1000 [ 268.041627][ T4345] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 268.085893][ T4345] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 268.101127][ T4345] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 268.121096][ T4345] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 268.244554][ T5870] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 268.763787][ T48] Bluetooth: hci4: command 0x041b tx timeout [ 269.257308][ T5048] device hsr_slave_0 left promiscuous mode [ 269.293086][ T4311] usb 1-1: USB disconnect, device number 4 [ 269.302056][ T5048] device hsr_slave_1 left promiscuous mode [ 270.094467][ T5048] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 270.163383][ T5048] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 270.300124][ T5048] device bridge_slave_1 left promiscuous mode [ 270.346335][ T5048] bridge0: port 2(bridge_slave_1) entered disabled state [ 270.367588][ T5048] device bridge_slave_0 left promiscuous mode [ 270.519891][ T5892] netlink: 12 bytes leftover after parsing attributes in process `syz.2.333'. [ 270.550775][ T5048] bridge0: port 1(bridge_slave_0) entered disabled state [ 271.268112][ T4269] Bluetooth: hci4: command 0x040f tx timeout [ 273.381337][ T4269] Bluetooth: hci4: command 0x0419 tx timeout [ 273.780377][ T5048] team0 (unregistering): Port device team_slave_1 removed [ 273.824153][ T5048] team0 (unregistering): Port device team_slave_0 removed [ 273.870594][ T5048] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 273.915479][ T5048] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 274.314883][ T5919] syz.1.337 (5919): drop_caches: 2 [ 275.185535][ T5048] bond0 (unregistering): Released all slaves [ 275.472056][ T5909] netlink: 32 bytes leftover after parsing attributes in process `syz.0.335'. [ 276.931331][ T4437] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 277.169942][ T4437] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 277.221322][ T4437] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 277.951301][ T4437] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 277.991673][ T4437] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 278.118201][ T5926] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 278.369173][ T4437] usb 1-1: USB disconnect, device number 5 [ 279.632097][ T5958] netlink: 8 bytes leftover after parsing attributes in process `syz.2.344'. [ 279.725172][ T5844] chnl_net:caif_netlink_parms(): no params data found [ 279.939900][ T5963] syz.1.346 (5963): drop_caches: 2 [ 280.716188][ T5965] netlink: 12 bytes leftover after parsing attributes in process `syz.2.347'. [ 281.564314][ T5973] netlink: 32 bytes leftover after parsing attributes in process `syz.0.348'. [ 281.601412][ T5844] bridge0: port 1(bridge_slave_0) entered blocking state [ 281.622917][ T5844] bridge0: port 1(bridge_slave_0) entered disabled state [ 281.705744][ T5844] device bridge_slave_0 entered promiscuous mode [ 283.865300][ T5844] bridge0: port 2(bridge_slave_1) entered blocking state [ 283.927675][ T5844] bridge0: port 2(bridge_slave_1) entered disabled state [ 283.946992][ T5844] device bridge_slave_1 entered promiscuous mode [ 284.453460][ T5844] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 286.062518][ T4391] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 286.198823][ T5844] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 286.564085][ T4391] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 286.902496][ T4391] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 286.912957][ T4391] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 286.922824][ T4391] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 286.932223][ T5633] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 286.943501][ T5996] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 287.096037][ T6005] netlink: 8 bytes leftover after parsing attributes in process `syz.2.357'. [ 287.138877][ T5633] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 287.164091][ T5633] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 287.383836][ T5633] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 288.146415][ T4327] usb 2-1: USB disconnect, device number 8 [ 288.206110][ T6017] netlink: 12 bytes leftover after parsing attributes in process `syz.0.359'. [ 288.256989][ T5844] team0: Port device team_slave_0 added [ 288.279943][ T6012] netlink: 32 bytes leftover after parsing attributes in process `syz.2.358'. [ 288.567726][ T5844] team0: Port device team_slave_1 added [ 288.758577][ T6034] syz.2.361 (6034): drop_caches: 2 [ 288.948132][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 289.063709][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 289.561935][ T5844] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 289.871532][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 289.879098][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 290.521984][ T5844] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 290.549684][ T6039] netlink: 8 bytes leftover after parsing attributes in process `syz.0.362'. [ 291.384448][ T5844] device hsr_slave_0 entered promiscuous mode [ 291.417069][ T5844] device hsr_slave_1 entered promiscuous mode [ 291.465376][ T5844] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 291.477580][ T5844] Cannot create hsr debugfs directory [ 291.508159][ T5633] 8021q: adding VLAN 0 to HW filter on device bond0 [ 292.462629][ T6058] netlink: 20 bytes leftover after parsing attributes in process `syz.2.365'. [ 292.868542][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 292.931690][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 293.955001][ T4327] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 294.307358][ T4327] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 294.327170][ T6072] netlink: 12 bytes leftover after parsing attributes in process `syz.1.370'. [ 294.337610][ T4327] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 294.348641][ T4327] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 294.362182][ T4327] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 294.984980][ T6067] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 295.163766][ T48] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 295.175258][ T48] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 295.185299][ T48] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 295.198265][ T48] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 295.214716][ T6074] netlink: 32 bytes leftover after parsing attributes in process `syz.2.369'. [ 295.301291][ T4282] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 295.309864][ T48] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 295.349352][ T4311] usb 1-1: USB disconnect, device number 6 [ 295.435890][ T6080] netlink: 8 bytes leftover after parsing attributes in process `syz.2.371'. [ 295.490353][ T6077] lo speed is unknown, defaulting to 1000 [ 295.823090][ T6085] netlink: 8 bytes leftover after parsing attributes in process `syz.2.372'. [ 295.851483][ T6085] device gtp0 entered promiscuous mode [ 297.342262][ T4269] Bluetooth: hci3: command 0x0409 tx timeout [ 297.775203][ T5048] device hsr_slave_0 left promiscuous mode [ 297.883845][ T5048] device hsr_slave_1 left promiscuous mode [ 298.529472][ T6104] syz.2.375 (6104): drop_caches: 2 [ 298.693152][ T5048] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 298.709240][ T5048] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 298.740095][ T5048] device bridge_slave_1 left promiscuous mode [ 298.771309][ T5048] bridge0: port 2(bridge_slave_1) entered disabled state [ 298.818616][ T5048] device bridge_slave_0 left promiscuous mode [ 298.842475][ T5048] bridge0: port 1(bridge_slave_0) entered disabled state [ 300.652577][ T4269] Bluetooth: hci3: command 0x041b tx timeout [ 302.701303][ T4269] Bluetooth: hci3: command 0x040f tx timeout [ 302.911334][ T2121] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 303.007112][ T5048] team0 (unregistering): Port device team_slave_1 removed [ 303.075016][ T5048] team0 (unregistering): Port device team_slave_0 removed [ 303.119015][ T2121] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 303.131812][ T2121] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 303.148897][ T2121] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 303.159787][ T2121] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 303.178738][ T6136] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 303.192248][ T5048] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 303.256043][ T5048] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 303.407294][ T2121] usb 1-1: USB disconnect, device number 7 [ 303.708187][ T5048] bond0 (unregistering): Released all slaves [ 303.777294][ T6077] chnl_net:caif_netlink_parms(): no params data found [ 303.790170][ T6119] netlink: 20 bytes leftover after parsing attributes in process `syz.2.379'. [ 303.799607][ T6130] netlink: 8 bytes leftover after parsing attributes in process `syz.1.381'. [ 304.114045][ T6142] netlink: 8 bytes leftover after parsing attributes in process `syz.1.383'. [ 304.787142][ T4269] Bluetooth: hci3: command 0x0419 tx timeout [ 304.838659][ T6152] netlink: 12 bytes leftover after parsing attributes in process `syz.0.386'. [ 304.878375][ T5844] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 304.891514][ T5844] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 304.931823][ T5844] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 305.008756][ T5844] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 305.031215][ T6077] bridge0: port 1(bridge_slave_0) entered blocking state [ 305.038390][ T6077] bridge0: port 1(bridge_slave_0) entered disabled state [ 305.323083][ T6077] device bridge_slave_0 entered promiscuous mode [ 305.562591][ T6077] bridge0: port 2(bridge_slave_1) entered blocking state [ 305.609148][ T6077] bridge0: port 2(bridge_slave_1) entered disabled state [ 305.755398][ T6077] device bridge_slave_1 entered promiscuous mode [ 306.030162][ T5818] udevd[5818]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 306.996242][ T6077] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 307.945586][ T6077] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 308.065931][ T6181] syz.2.390 (6181): drop_caches: 2 [ 308.881581][ T6187] netlink: 8 bytes leftover after parsing attributes in process `syz.0.392'. [ 309.966697][ T6077] team0: Port device team_slave_0 added [ 309.975159][ T6196] netlink: 20 bytes leftover after parsing attributes in process `syz.1.393'. [ 310.261526][ T6077] team0: Port device team_slave_1 added [ 310.816663][ T4792] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 310.887304][ C0] raw-gadget.0 gadget.0: ignoring, device is not running [ 311.161204][ T4792] usb 1-1: device descriptor read/64, error -32 [ 311.451084][ T4792] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 311.822014][ T4792] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 311.857023][ T4792] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 311.867749][ T6077] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 311.883274][ T6077] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 311.928495][ T4792] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 311.971096][ T6077] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 311.998292][ T5844] 8021q: adding VLAN 0 to HW filter on device bond0 [ 312.010874][ T4792] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 312.026987][ T6077] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 312.191183][ T6077] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 312.192432][ T6218] netlink: 12 bytes leftover after parsing attributes in process `syz.2.399'. [ 312.231368][ T6077] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 312.288599][ T4792] usb 1-1: can't set config #27, error -71 [ 312.341371][ T4792] usb 1-1: USB disconnect, device number 9 [ 312.402389][ T5027] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 312.430383][ T5027] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 312.453989][ T5844] 8021q: adding VLAN 0 to HW filter on device team0 [ 312.627904][ T4481] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 312.638320][ T4481] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 312.647499][ T4481] bridge0: port 1(bridge_slave_0) entered blocking state [ 312.654924][ T4481] bridge0: port 1(bridge_slave_0) entered forwarding state [ 312.692688][ T6077] device hsr_slave_0 entered promiscuous mode [ 313.352894][ T6077] device hsr_slave_1 entered promiscuous mode [ 313.366863][ T6077] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 313.378848][ T6077] Cannot create hsr debugfs directory [ 313.460875][ T4481] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 313.473153][ T4481] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 313.484466][ T4481] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 313.494173][ T4481] bridge0: port 2(bridge_slave_1) entered blocking state [ 313.502731][ T4481] bridge0: port 2(bridge_slave_1) entered forwarding state [ 313.512610][ T4481] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 313.610580][ T5046] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 314.530056][ T5844] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 314.587640][ T5844] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 315.456359][ T5046] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 315.534790][ T5046] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 315.605185][ T5046] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 315.688599][ T5046] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 315.707864][ T5046] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 315.732250][ T5046] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 315.784857][ T5046] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 315.821788][ T5046] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 315.842648][ T6244] netlink: 8 bytes leftover after parsing attributes in process `syz.0.402'. [ 315.852354][ T6247] netlink: 20 bytes leftover after parsing attributes in process `syz.1.404'. [ 316.153759][ T6253] syz.2.405 (6253): drop_caches: 2 [ 316.881259][ T5046] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 316.901770][ T5046] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 317.101382][ T14] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 317.352827][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.359203][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.376886][ T14] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 317.388588][ T14] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 317.399824][ T14] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 317.412542][ T14] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 317.453081][ T6264] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 317.724104][ T14] usb 3-1: USB disconnect, device number 10 [ 319.307714][ T6285] netlink: 12 bytes leftover after parsing attributes in process `syz.2.411'. [ 319.445824][ T5844] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 319.462572][ T5053] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 319.482754][ T5053] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 319.595417][ T6077] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 319.618563][ T6077] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 320.766403][ T6077] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 320.805117][ T6077] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 321.552109][ T6299] netlink: 8 bytes leftover after parsing attributes in process `syz.2.414'. [ 321.811904][ T5048] device hsr_slave_0 left promiscuous mode [ 321.930377][ T5048] device hsr_slave_1 left promiscuous mode [ 322.060741][ T5048] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 322.212485][ T5048] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 322.315488][ T5048] device bridge_slave_1 left promiscuous mode [ 322.323889][ T5048] bridge0: port 2(bridge_slave_1) entered disabled state [ 322.671680][ T5048] device bridge_slave_0 left promiscuous mode [ 323.124436][ T5048] bridge0: port 1(bridge_slave_0) entered disabled state [ 323.763818][ T4282] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 323.784132][ T4282] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 323.793010][ T4282] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 323.806096][ T4282] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 323.818296][ T4282] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 323.827568][ T4282] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 323.873196][ T5048] team0 (unregistering): Port device team_slave_1 removed [ 323.899027][ T5048] team0 (unregistering): Port device team_slave_0 removed [ 323.926586][ T5048] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 323.965862][ T5048] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 324.208395][ T5048] bond0 (unregistering): Released all slaves [ 324.296957][ T6318] netlink: 20 bytes leftover after parsing attributes in process `syz.0.416'. [ 324.606703][ T6323] lo speed is unknown, defaulting to 1000 [ 325.332361][ T4345] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 325.397313][ T6328] syz.2.420 (6328): drop_caches: 2 [ 325.691628][ T6340] netlink: 12 bytes leftover after parsing attributes in process `syz.2.422'. [ 325.837910][ T6342] trusted_key: encrypted_key: insufficient parameters specified [ 325.953243][ T4269] Bluetooth: hci4: command 0x0409 tx timeout [ 326.421480][ T4345] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 326.433415][ T4345] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 326.443818][ T4345] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 326.444048][ T6077] 8021q: adding VLAN 0 to HW filter on device bond0 [ 326.459957][ T4345] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 326.490119][ T6332] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 326.612394][ T4481] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 326.620327][ T4481] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 326.662993][ T6077] 8021q: adding VLAN 0 to HW filter on device team0 [ 326.707433][ T4481] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 326.729387][ T4481] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 326.774957][ T4481] bridge0: port 1(bridge_slave_0) entered blocking state [ 326.782230][ T4481] bridge0: port 1(bridge_slave_0) entered forwarding state [ 326.808521][ T14] usb 2-1: USB disconnect, device number 9 [ 326.849884][ T4481] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 326.874493][ T4481] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 326.899675][ T4481] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 326.924027][ T4481] bridge0: port 2(bridge_slave_1) entered blocking state [ 326.931279][ T4481] bridge0: port 2(bridge_slave_1) entered forwarding state [ 327.001174][ T6323] chnl_net:caif_netlink_parms(): no params data found [ 327.033631][ T4481] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 327.049372][ T4481] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 327.059728][ T4481] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 327.156068][ T4481] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 327.169510][ T4481] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 327.187244][ T4481] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 327.388696][ T4481] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 327.612321][ T4481] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 327.637092][ T4481] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 327.867261][ T4481] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 328.161178][ T4269] Bluetooth: hci4: command 0x041b tx timeout [ 328.527913][ T4481] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 329.563531][ T6323] bridge0: port 1(bridge_slave_0) entered blocking state [ 329.570702][ T6323] bridge0: port 1(bridge_slave_0) entered disabled state [ 329.607801][ T6323] device bridge_slave_0 entered promiscuous mode [ 329.638479][ T6323] bridge0: port 2(bridge_slave_1) entered blocking state [ 329.661467][ T6323] bridge0: port 2(bridge_slave_1) entered disabled state [ 329.690613][ T6323] device bridge_slave_1 entered promiscuous mode [ 330.241351][ T4282] Bluetooth: hci4: command 0x040f tx timeout [ 330.819310][ T6388] syz.1.430 (6388): drop_caches: 2 [ 331.094735][ T6393] trusted_key: encrypted_key: insufficient parameters specified [ 331.328799][ T6383] netlink: 20 bytes leftover after parsing attributes in process `syz.0.429'. [ 331.429431][ T6323] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 331.530214][ T6396] netlink: 12 bytes leftover after parsing attributes in process `syz.1.433'. [ 331.594139][ T6323] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 331.844642][ T6323] team0: Port device team_slave_0 added [ 332.202252][ T6323] team0: Port device team_slave_1 added [ 332.301685][ T4269] Bluetooth: hci4: command 0x0419 tx timeout [ 332.471991][ T6323] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 332.479026][ T6323] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 332.571632][ T4552] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 333.189761][ T6323] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 333.394298][ T6323] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 333.402644][ T4552] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 333.416705][ T6323] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 334.088302][ T4552] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 334.099668][ T4552] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 334.109532][ T4552] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 334.118008][ T6323] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 334.151731][ T6404] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 334.234588][ T6077] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 334.266997][ T5046] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 334.326167][ T5046] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 334.432125][ T4552] usb 1-1: USB disconnect, device number 10 [ 334.648333][ T6323] device hsr_slave_0 entered promiscuous mode [ 334.716724][ T6323] device hsr_slave_1 entered promiscuous mode [ 335.036073][ T6323] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 335.044897][ T6323] Cannot create hsr debugfs directory [ 337.034139][ T6444] netlink: 12 bytes leftover after parsing attributes in process `syz.0.443'. [ 337.064230][ T6438] netlink: 20 bytes leftover after parsing attributes in process `syz.2.440'. [ 337.896626][ T6460] trusted_key: encrypted_key: insufficient parameters specified [ 340.393606][ T4399] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 340.420350][ T4399] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 340.876194][ T4399] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 340.965837][ T4399] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 340.979427][ T6488] syz.1.451 (6488): drop_caches: 2 [ 341.057319][ T6077] device veth0_vlan entered promiscuous mode [ 341.075772][ T4399] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 341.112288][ T4399] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 341.525787][ T6077] device veth1_vlan entered promiscuous mode [ 341.561256][ T4345] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 341.721962][ T5048] device hsr_slave_0 left promiscuous mode [ 342.469717][ T5048] device hsr_slave_1 left promiscuous mode [ 342.485086][ T5048] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 342.833922][ T4345] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 342.855292][ T4345] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 342.896208][ T5048] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 342.911073][ T4345] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 342.920443][ T4345] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 342.957630][ T5048] device bridge_slave_1 left promiscuous mode [ 342.963361][ T6484] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 342.964538][ T5048] bridge0: port 2(bridge_slave_1) entered disabled state [ 342.980548][ T5048] device bridge_slave_0 left promiscuous mode [ 342.987473][ T5048] bridge0: port 1(bridge_slave_0) entered disabled state [ 343.233163][ T4345] usb 3-1: USB disconnect, device number 11 [ 344.017930][ T5048] team0 (unregistering): Port device team_slave_1 removed [ 344.075889][ T5048] team0 (unregistering): Port device team_slave_0 removed [ 344.168521][ T6507] netlink: 12 bytes leftover after parsing attributes in process `syz.0.455'. [ 344.190035][ T5048] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 344.238523][ T5048] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 345.386737][ T5048] bond0 (unregistering): Released all slaves [ 346.122271][ T4399] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 346.140324][ T6497] netlink: 16 bytes leftover after parsing attributes in process `syz.1.452'. [ 346.222728][ T6515] netlink: 8 bytes leftover after parsing attributes in process `syz.2.457'. [ 346.455048][ T6323] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 346.504477][ T5057] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 346.523881][ T5057] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 346.577876][ T6077] device veth0_macvtap entered promiscuous mode [ 346.604659][ T6077] device veth1_macvtap entered promiscuous mode [ 346.644685][ T6323] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 346.675267][ T6523] syz.2.460 (6523): drop_caches: 2 [ 346.710298][ T5818] udevd[5818]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 346.908424][ T6323] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 347.013269][ T6077] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 347.042565][ T6077] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 347.056014][ T6077] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 347.068465][ T6077] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 347.082983][ T6077] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 347.098133][ T6077] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 347.113789][ T6077] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 347.129565][ T6323] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 347.321377][ T5053] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 347.330389][ T5053] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 347.340712][ T5053] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 347.403694][ T5053] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 348.471309][ T6077] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 348.482396][ T6077] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 348.493050][ T6077] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 348.507879][ T6077] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 348.518760][ T6077] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 348.529493][ T6077] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 348.546171][ T6077] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 348.590265][ T5053] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 349.114724][ T5053] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 349.432054][ T6077] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 349.443706][ T6077] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 349.453139][ T6077] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 349.462360][ T6077] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.101603][ T4257] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 350.370839][ T6558] netlink: 16 bytes leftover after parsing attributes in process `syz.2.466'. [ 350.672814][ T4257] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 350.821364][ T4257] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 350.836109][ T4257] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 350.846850][ T4257] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 351.092161][ T6545] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 351.113902][ T5027] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 351.201178][ T5027] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 351.260918][ T6323] 8021q: adding VLAN 0 to HW filter on device bond0 [ 351.314748][ T4257] usb 2-1: USB disconnect, device number 10 [ 351.722346][ T6566] netlink: 8 bytes leftover after parsing attributes in process `syz.0.468'. [ 351.749978][ T5027] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 351.769616][ T5048] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 351.786558][ T5027] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 351.804996][ T5048] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 351.824804][ T5027] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 351.855870][ T5027] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 351.887296][ T6323] 8021q: adding VLAN 0 to HW filter on device team0 [ 351.971450][ T5046] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 351.980944][ T5046] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 352.004586][ T5046] bridge0: port 1(bridge_slave_0) entered blocking state [ 352.011887][ T5046] bridge0: port 1(bridge_slave_0) entered forwarding state [ 352.031578][ T5046] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 352.062237][ T5046] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 352.187941][ T5046] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 352.252011][ T5046] bridge0: port 2(bridge_slave_1) entered blocking state [ 352.259374][ T5046] bridge0: port 2(bridge_slave_1) entered forwarding state [ 352.296956][ T5046] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 352.348564][ T5027] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 352.397317][ T5027] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 352.438797][ T5027] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 352.448994][ T6586] netlink: 12 bytes leftover after parsing attributes in process `syz.0.471'. [ 352.479657][ T5027] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 352.499868][ T5027] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 352.646412][ T5027] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 352.816602][ T5027] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 352.860446][ T5027] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 352.877169][ T5027] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 352.894086][ T5027] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 354.452902][ T6598] syz.2.474 (6598): drop_caches: 2 [ 354.819209][ T6603] netlink: 16 bytes leftover after parsing attributes in process `syz.1.475'. [ 357.265505][ T6625] netlink: 8 bytes leftover after parsing attributes in process `syz.2.480'. [ 359.270020][ T6637] netlink: 20 bytes leftover after parsing attributes in process `syz.0.484'. [ 360.117627][ T5027] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 360.132163][ T5027] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 360.171871][ T6323] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 360.340396][ T6643] netlink: 12 bytes leftover after parsing attributes in process `syz.0.486'. [ 361.378589][ T6654] syz.1.488 (6654): drop_caches: 2 [ 361.652111][ T6657] netlink: 8 bytes leftover after parsing attributes in process `syz.2.487'. [ 364.310045][ T6681] netlink: 32 bytes leftover after parsing attributes in process `syz.2.493'. [ 365.098393][ T6323] device veth0_vlan entered promiscuous mode [ 365.233717][ T5043] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 365.944718][ T6694] netlink: 20 bytes leftover after parsing attributes in process `syz.1.497'. [ 366.103716][ T5043] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 366.113787][ T5043] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 366.132336][ T5043] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 366.152020][ T5043] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 366.171459][ T5043] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 366.247298][ T6323] device veth1_vlan entered promiscuous mode [ 366.447050][ T6701] netlink: 8 bytes leftover after parsing attributes in process `syz.5.498'. [ 366.478721][ T5043] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 366.513190][ T5043] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 368.140375][ T6323] device veth0_macvtap entered promiscuous mode [ 368.359180][ T5043] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 368.572146][ T6323] device veth1_macvtap entered promiscuous mode [ 369.465761][ T6323] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 369.518721][ T6711] syz.1.501 (6711): drop_caches: 2 [ 369.536665][ T6323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 369.564835][ T6323] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 369.585163][ T6323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 369.601612][ T6323] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 369.615601][ T6323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 369.682095][ T6323] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 369.731151][ T6323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 369.839203][ T6323] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 370.261502][ T6323] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 370.292522][ T6323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 370.331058][ T6323] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 370.348941][ T6323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 370.360252][ T6323] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 370.371354][ T6323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 370.381780][ T6323] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 370.401052][ T6323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 370.565061][ T6323] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 370.587848][ T5034] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 370.614168][ T5034] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 370.777516][ T5034] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 370.788109][ T5034] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 370.816851][ T6323] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 371.186630][ T6323] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 371.252432][ T6323] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 371.646621][ T6323] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 371.688899][ T6727] netlink: 32 bytes leftover after parsing attributes in process `syz.5.505'. [ 372.175892][ T6738] netlink: 20 bytes leftover after parsing attributes in process `syz.0.510'. [ 372.844654][ T5053] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 374.056757][ T5053] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 375.291170][ T6748] syz.0.513 (6748): drop_caches: 2 [ 375.367411][ T4399] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 375.392072][ T6754] netlink: 8 bytes leftover after parsing attributes in process `syz.5.512'. [ 375.412993][ T5027] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 375.441284][ T5027] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 375.486020][ T4399] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 378.783910][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.790413][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.321228][ T6778] netlink: 32 bytes leftover after parsing attributes in process `syz.0.518'. [ 381.308712][ T6797] netlink: 20 bytes leftover after parsing attributes in process `syz.1.523'. [ 381.725121][ T6802] syz.0.525 (6802): drop_caches: 2 [ 383.579020][ T6806] netlink: 4 bytes leftover after parsing attributes in process `syz.5.526'. [ 384.776093][ T6827] netlink: 32 bytes leftover after parsing attributes in process `syz.0.529'. [ 390.438627][ T6864] netlink: 20 bytes leftover after parsing attributes in process `syz.0.539'. [ 391.455295][ T6874] syz.6.540 (6874): drop_caches: 2 [ 391.526123][ T6878] netlink: 32 bytes leftover after parsing attributes in process `syz.2.542'. [ 394.765800][ T6889] netlink: 4 bytes leftover after parsing attributes in process `syz.2.545'. [ 394.949192][ T6894] siw: device registration error -23 [ 399.501089][ T4345] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 400.331209][ T4345] usb 1-1: device descriptor read/64, error -71 [ 400.655840][ T6933] netlink: 32 bytes leftover after parsing attributes in process `syz.6.555'. [ 401.081254][ T4345] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 401.212895][ T6938] syz.6.557 (6938): drop_caches: 2 [ 401.469768][ T6943] netlink: 4 bytes leftover after parsing attributes in process `syz.0.559'. [ 402.445131][ T6949] siw: device registration error -23 [ 406.472759][ T6978] netlink: 20 bytes leftover after parsing attributes in process `syz.5.568'. [ 406.821208][ T4318] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 407.581302][ T4318] usb 1-1: device descriptor read/64, error -71 [ 407.851179][ T4318] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 409.510770][ T6991] syz.6.572 (6991): drop_caches: 2 [ 412.420762][ T7013] netlink: 20 bytes leftover after parsing attributes in process `syz.2.575'. [ 414.417695][ T7045] netlink: 20 bytes leftover after parsing attributes in process `syz.6.584'. [ 417.081104][ T4327] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 418.094740][ T4327] usb 7-1: device descriptor read/64, error -71 [ 418.109380][ T7069] IPVS: Error joining to the multicast group [ 418.371166][ T4327] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 418.671073][ T4327] usb 7-1: device descriptor read/64, error -71 [ 418.802442][ T4327] usb usb7-port1: attempt power cycle [ 420.457277][ T7093] netlink: 20 bytes leftover after parsing attributes in process `syz.2.598'. [ 422.022417][ T4269] Bluetooth: hci3: command 0x0406 tx timeout [ 424.526585][ T7127] siw: device registration error -23 [ 424.824079][ T7131] syz.1.610 (7131): drop_caches: 2 [ 425.141898][ T7136] fuse: Bad value for 'fd' [ 427.311584][ T4345] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 428.256564][ T7158] netlink: 20 bytes leftover after parsing attributes in process `syz.1.614'. [ 428.771161][ T4345] usb 7-1: device descriptor read/64, error -71 [ 430.281450][ T4345] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 430.354188][ T7169] netlink: 20 bytes leftover after parsing attributes in process `syz.2.618'. [ 431.103637][ T7180] siw: device registration error -23 [ 431.114307][ T7183] netlink: 8 bytes leftover after parsing attributes in process `syz.2.620'. [ 431.500986][ C0] hrtimer: interrupt took 56718 ns [ 433.252815][ T7208] netlink: 20 bytes leftover after parsing attributes in process `syz.2.627'. [ 434.277545][ T7222] syz.1.630 (7222): drop_caches: 2 [ 434.730003][ T7229] netlink: 8 bytes leftover after parsing attributes in process `syz.6.635'. [ 434.831209][ T7227] netlink: 20 bytes leftover after parsing attributes in process `syz.0.633'. [ 434.871180][ T4345] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 435.493944][ T4345] usb 6-1: device descriptor read/64, error -71 [ 435.801093][ T4345] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 437.498552][ T7253] siw: device registration error -23 [ 437.894679][ T7263] netlink: 20 bytes leftover after parsing attributes in process `syz.6.642'. [ 439.871779][ T7276] fuse: Bad value for 'rootmode' [ 440.341326][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.348585][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 443.571065][ T7] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 445.222331][ T7322] siw: device registration error -23 [ 445.272968][ T7] usb 7-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 446.008528][ T7] usb 7-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 446.017798][ T7] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 446.027034][ T7] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 446.336453][ T7332] IPVS: Error joining to the multicast group [ 447.128280][ T7334] syz.2.662 (7334): drop_caches: 2 [ 447.254003][ T7] usb 7-1: can't set config #27, error -71 [ 447.274954][ T7] usb 7-1: USB disconnect, device number 7 [ 447.816830][ T7358] netlink: 4 bytes leftover after parsing attributes in process `syz.1.670'. [ 448.061154][ T4282] Bluetooth: hci4: command 0x0406 tx timeout [ 448.840263][ T7359] device bpq0 entered promiscuous mode [ 449.298546][ T7366] siw: device registration error -23 [ 451.096386][ T7372] netlink: 84 bytes leftover after parsing attributes in process `syz.5.671'. [ 454.374002][ T7390] IPVS: Error joining to the multicast group [ 454.507735][ T7394] syz.5.680 (7394): drop_caches: 2 [ 455.391574][ T4326] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 455.594296][ T4326] usb 1-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 455.605838][ T4326] usb 1-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 455.615652][ T4326] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 455.649517][ T4326] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 456.936295][ T4257] usb 1-1: USB disconnect, device number 15 [ 458.202830][ T7433] fuse: Unknown parameter 'use00000000000000000000' [ 458.874965][ T7437] netlink: 8 bytes leftover after parsing attributes in process `syz.6.691'. [ 459.348369][ T7443] IPVS: Error joining to the multicast group [ 462.591252][ T4373] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 462.791162][ T4373] usb 1-1: Using ep0 maxpacket: 16 [ 463.164423][ T4373] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 463.245989][ T4373] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8 has invalid wMaxPacketSize 0 [ 463.763749][ T4373] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 463.780823][ T7495] fuse: Unknown parameter 'use00000000000000000000' [ 463.841548][ T7496] sctp: [Deprecated]: syz.6.706 (pid 7496) Use of int in max_burst socket option deprecated. [ 463.841548][ T7496] Use struct sctp_assoc_value instead [ 463.875184][ T4373] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 463.900372][ T4373] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 464.008804][ T4373] usb 1-1: Manufacturer: syz [ 464.022956][ T4373] usb 1-1: config 0 descriptor?? [ 464.473367][ T4373] usb 1-1: USB disconnect, device number 16 [ 465.192721][ T7511] IPVS: Error joining to the multicast group [ 466.301057][ T4257] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 466.531372][ T7530] siw: device registration error -23 [ 467.568165][ T4257] usb 2-1: device descriptor read/all, error -71 [ 470.278728][ T7551] fuse: Unknown parameter 'user_i00000000000000000000' [ 473.191691][ T7633] IPVS: Error joining to the multicast group [ 473.546917][ T7642] siw: device registration error -23 [ 475.071239][ T4318] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 475.573141][ T7663] syz.6.730 (7663): drop_caches: 2 [ 475.867564][ T4318] usb 1-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 478.327913][ T4318] usb 1-1: config 27 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 478.339826][ T4318] usb 1-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 478.353783][ T4318] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 478.366666][ T4318] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 479.308030][ T4318] usb 1-1: can't set config #27, error -71 [ 479.339157][ T4318] usb 1-1: USB disconnect, device number 17 [ 479.690859][ T7682] fuse: Bad value for 'fd' [ 479.935807][ T7687] netlink: 20 bytes leftover after parsing attributes in process `syz.5.737'. [ 480.895407][ T7690] IPVS: Error joining to the multicast group [ 482.879936][ T7716] netlink: 128 bytes leftover after parsing attributes in process `syz.1.745'. [ 484.381944][ T7727] fuse: Bad value for 'fd' [ 484.947518][ T7743] device bpq0 left promiscuous mode [ 484.978723][ T7743] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 486.135542][ T7769] netlink: 'syz.2.755': attribute type 12 has an invalid length. [ 486.143841][ T7769] netlink: 'syz.2.755': attribute type 29 has an invalid length. [ 486.152908][ T7769] netlink: 148 bytes leftover after parsing attributes in process `syz.2.755'. [ 486.162302][ T7769] netlink: 59 bytes leftover after parsing attributes in process `syz.2.755'. [ 488.199612][ T7773] fuse: Unknown parameter 'user_id00000000000000000000' [ 491.737209][ T7816] netlink: 12 bytes leftover after parsing attributes in process `syz.0.769'. [ 492.132152][ T7822] fuse: Unknown parameter 'user_id00000000000000000000' [ 492.635605][ T7830] netlink: 20 bytes leftover after parsing attributes in process `syz.1.773'. [ 492.910146][ T4335] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 493.499515][ T7834] nfs: Unknown parameter 'no' [ 493.736183][ T4335] usb 7-1: device descriptor read/all, error -71 [ 495.618258][ T7866] fuse: Unknown parameter 'user_id00000000000000000000' [ 495.857852][ T7872] netlink: 12 bytes leftover after parsing attributes in process `syz.0.786'. [ 497.082697][ T7883] netlink: 12 bytes leftover after parsing attributes in process `syz.2.788'. [ 497.183907][ T7888] netlink: 20 bytes leftover after parsing attributes in process `syz.6.787'. [ 501.198914][ T7925] netlink: 24 bytes leftover after parsing attributes in process `syz.1.797'. [ 501.666409][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.673745][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.895049][ T7927] fuse: Bad value for 'fd' [ 502.045054][ T7930] netlink: 12 bytes leftover after parsing attributes in process `syz.6.801'. [ 503.071203][ T7953] netlink: 12 bytes leftover after parsing attributes in process `syz.1.806'. [ 506.053906][ T7986] fuse: Bad value for 'fd' [ 506.534521][ T7995] ======================================================= [ 506.534521][ T7995] WARNING: The mand mount option has been deprecated and [ 506.534521][ T7995] and is ignored by this kernel. Remove the mand [ 506.534521][ T7995] option from the mount to silence this warning. [ 506.534521][ T7995] ======================================================= [ 506.609051][ T7995] overlayfs: failed to resolve './file1': -2 [ 507.958837][ T8001] netlink: 12 bytes leftover after parsing attributes in process `syz.6.818'. [ 508.717553][ T8008] netlink: 'syz.2.819': attribute type 1 has an invalid length. [ 508.939965][ T8008] device bond1 entered promiscuous mode [ 508.999253][ T8008] 8021q: adding VLAN 0 to HW filter on device bond1 [ 509.059105][ T8010] 8021q: adding VLAN 0 to HW filter on device bond1 [ 509.068662][ T8010] bond1: (slave vcan1): The slave device specified does not support setting the MAC address [ 509.087707][ T8010] bond1: (slave vcan1): Setting fail_over_mac to active for active-backup mode [ 509.165543][ T8010] bond1: (slave vcan1): making interface the new active one [ 509.174854][ T8010] device vcan1 entered promiscuous mode [ 509.192929][ T8010] bond1: (slave vcan1): Enslaving as an active interface with an up link [ 509.268349][ T7594] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 518.307562][ T8069] netlink: 24 bytes leftover after parsing attributes in process `syz.6.833'. [ 530.313096][ T8170] netlink: 8 bytes leftover after parsing attributes in process `syz.0.851'. [ 531.570697][ T8175] netlink: 12 bytes leftover after parsing attributes in process `syz.5.855'. [ 533.749192][ T8199] netlink: 12 bytes leftover after parsing attributes in process `syz.2.862'. [ 538.587681][ T8217] netlink: 12 bytes leftover after parsing attributes in process `syz.1.870'. [ 539.501586][ T8223] netlink: 20 bytes leftover after parsing attributes in process `syz.5.869'. [ 539.838848][ T8239] netlink: 12 bytes leftover after parsing attributes in process `syz.5.873'. [ 541.249076][ T8254] netlink: 8 bytes leftover after parsing attributes in process `syz.0.868'. [ 541.967369][ T8262] netlink: 12 bytes leftover after parsing attributes in process `syz.1.877'. [ 542.141064][ T2121] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 544.421004][ T2121] usb 6-1: Using ep0 maxpacket: 8 [ 546.462748][ T2121] usb 6-1: device descriptor read/all, error -71 [ 547.710218][ T8288] netlink: 12 bytes leftover after parsing attributes in process `syz.2.884'. [ 548.502171][ T8289] netlink: 20 bytes leftover after parsing attributes in process `syz.1.883'. [ 551.027289][ T8312] netlink: 8 bytes leftover after parsing attributes in process `syz.0.889'. [ 553.674927][ T8379] netlink: 12 bytes leftover after parsing attributes in process `syz.0.896'. [ 556.633698][ T8399] netlink: 32 bytes leftover after parsing attributes in process `syz.0.899'. [ 557.344677][ T8409] netlink: 12 bytes leftover after parsing attributes in process `syz.1.894'. [ 560.043262][ T8411] netlink: 8 bytes leftover after parsing attributes in process `syz.5.903'. [ 563.107167][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.118502][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 564.068878][ T8449] netlink: 32 bytes leftover after parsing attributes in process `syz.5.912'. [ 564.830999][ T4325] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 566.404773][ T4325] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 566.453327][ T4325] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 566.469906][ T4325] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 566.479435][ T4325] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 566.499834][ T8444] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 566.889134][ T8471] netlink: 12 bytes leftover after parsing attributes in process `syz.2.918'. [ 569.697731][ T8474] netlink: 8 bytes leftover after parsing attributes in process `syz.1.917'. [ 571.891665][ T4311] usb 1-1: USB disconnect, device number 18 [ 574.205743][ T8508] block device autoloading is deprecated and will be removed. [ 574.376996][ T8531] netlink: 12 bytes leftover after parsing attributes in process `syz.0.930'. [ 577.387675][ T8513] block device autoloading is deprecated and will be removed. [ 578.921060][ T27] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 579.161660][ T27] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 579.243892][ T27] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 579.255354][ T27] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 579.265230][ T27] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 579.295074][ T8555] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 580.133313][ T26] audit: type=1326 audit(1755013989.983:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8551 comm="syz.2.936" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea23f8ebe9 code=0x7ffc0000 [ 580.266177][ T26] audit: type=1326 audit(1755013989.993:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8551 comm="syz.2.936" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea23f8ebe9 code=0x7ffc0000 [ 580.329942][ T8569] fuse: Bad value for 'group_id' [ 580.562014][ T26] audit: type=1326 audit(1755013990.003:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8551 comm="syz.2.936" exe="/root/syz-executor" sig=0 arch=c000003e syscall=289 compat=0 ip=0x7fea23f8ebe9 code=0x7ffc0000 [ 580.593434][ T26] audit: type=1326 audit(1755013990.003:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8551 comm="syz.2.936" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea23f8ebe9 code=0x7ffc0000 [ 580.771083][ T26] audit: type=1326 audit(1755013990.003:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8551 comm="syz.2.936" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea23f8ebe9 code=0x7ffc0000 [ 580.867621][ T26] audit: type=1326 audit(1755013990.003:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8551 comm="syz.2.936" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7fea23f8ebe9 code=0x7ffc0000 [ 580.926411][ T26] audit: type=1326 audit(1755013990.003:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8551 comm="syz.2.936" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea23f8ebe9 code=0x7ffc0000 [ 581.068077][ T26] audit: type=1326 audit(1755013990.003:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8551 comm="syz.2.936" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea23f8ebe9 code=0x7ffc0000 [ 581.277259][ T26] audit: type=1326 audit(1755013990.003:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8551 comm="syz.2.936" exe="/root/syz-executor" sig=0 arch=c000003e syscall=289 compat=0 ip=0x7fea23f8ebe9 code=0x7ffc0000 [ 581.311872][ T26] audit: type=1326 audit(1755013990.003:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8551 comm="syz.2.936" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea23f8ebe9 code=0x7ffc0000 [ 583.678971][ T8619] autofs4:pid:8619:autofs_fill_super: called with bogus options [ 585.249203][ T8628] netlink: 32 bytes leftover after parsing attributes in process `syz.5.955'. [ 586.142006][ T4345] usb 3-1: USB disconnect, device number 12 [ 588.155408][ T8664] netlink: 8 bytes leftover after parsing attributes in process `syz.0.962'. [ 588.997829][ T8673] netlink: 32 bytes leftover after parsing attributes in process `syz.2.966'. [ 592.341407][ T4345] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 592.715502][ T4345] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 592.838218][ T4345] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 592.913904][ T4345] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 593.227986][ T4345] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 593.273889][ T8701] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 593.648615][ T8724] pty pty21: ldisc open failed (-12), clearing slot 21 [ 594.138649][ T26] kauditd_printk_skb: 10 callbacks suppressed [ 594.138664][ T26] audit: type=1326 audit(1755014003.983:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8696 comm="syz.5.971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9a7f8ebe9 code=0x7ffc0000 [ 594.442737][ T8736] netlink: 32 bytes leftover after parsing attributes in process `syz.6.978'. [ 595.137404][ T26] audit: type=1326 audit(1755014004.213:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8696 comm="syz.5.971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9a7f8ebe9 code=0x7ffc0000 [ 595.169061][ T26] audit: type=1326 audit(1755014004.213:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8696 comm="syz.5.971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=289 compat=0 ip=0x7ff9a7f8ebe9 code=0x7ffc0000 [ 595.201104][ T26] audit: type=1326 audit(1755014004.213:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8696 comm="syz.5.971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9a7f8ebe9 code=0x7ffc0000 [ 595.264096][ T26] audit: type=1326 audit(1755014004.213:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8696 comm="syz.5.971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9a7f8ebe9 code=0x7ffc0000 [ 595.996483][ T26] audit: type=1326 audit(1755014004.213:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8696 comm="syz.5.971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7ff9a7f8ebe9 code=0x7ffc0000 [ 596.019101][ T26] audit: type=1326 audit(1755014004.213:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8696 comm="syz.5.971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9a7f8ebe9 code=0x7ffc0000 [ 596.042094][ T26] audit: type=1326 audit(1755014004.213:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8696 comm="syz.5.971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9a7f8ebe9 code=0x7ffc0000 [ 596.064572][ C0] vkms_vblank_simulate: vblank timer overrun [ 596.071803][ T26] audit: type=1326 audit(1755014004.213:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8696 comm="syz.5.971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=289 compat=0 ip=0x7ff9a7f8ebe9 code=0x7ffc0000 [ 596.095444][ C0] vkms_vblank_simulate: vblank timer overrun [ 596.102161][ T26] audit: type=1326 audit(1755014004.213:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8696 comm="syz.5.971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9a7f8ebe9 code=0x7ffc0000 [ 599.912902][ T8797] netlink: 32 bytes leftover after parsing attributes in process `syz.6.991'. [ 600.679531][ T4792] usb 6-1: USB disconnect, device number 6 [ 600.892966][ T8801] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 603.631658][ T8826] netlink: 12 bytes leftover after parsing attributes in process `syz.0.999'. [ 608.233106][ T8874] autofs4:pid:8874:autofs_fill_super: called with bogus options [ 609.147736][ T8890] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1016'. [ 610.326905][ T8897] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1020'. [ 610.372361][ T8897] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1020'. [ 612.373190][ T8931] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1026'. [ 615.798884][ T8950] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1031'. [ 615.962364][ T8952] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1032'. [ 616.072073][ T8953] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1032'. [ 617.007803][ T8973] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1039'. [ 619.141012][ T8983] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1042'. [ 621.495608][ T8987] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1043'. [ 622.366755][ T9000] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1056'. [ 622.501303][ T9003] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1047'. [ 622.553368][ T9010] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1047'. [ 623.356140][ T9020] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1051'. [ 624.554924][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.561354][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 625.696676][ T9041] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1058'. [ 628.754006][ T9051] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1060'. [ 629.157844][ T9051] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1060'. [ 630.031319][ T9063] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1063'. [ 633.620057][ T9094] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1072'. [ 633.793067][ T9095] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1073'. [ 637.937785][ T9114] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1079'. [ 639.965656][ T9139] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1085'. [ 641.018484][ T9148] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1089'. [ 644.498493][ T9158] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1091'. [ 645.015010][ T9168] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1094'. [ 647.431858][ T9181] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1098'. [ 648.440340][ T9201] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1103'. [ 651.200907][ T9205] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1105'. [ 651.571642][ T9207] sctp: [Deprecated]: syz.2.1106 (pid 9207) Use of int in max_burst socket option deprecated. [ 651.571642][ T9207] Use struct sctp_assoc_value instead [ 653.690415][ T9228] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1111'. [ 653.960955][ T4391] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 653.964277][ T9233] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1111'. [ 654.018141][ T9234] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1112'. [ 654.161115][ T4391] usb 1-1: Using ep0 maxpacket: 16 [ 654.172889][ T4391] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 654.184568][ T4391] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 654.192893][ T4391] usb 1-1: Product: syz [ 654.197319][ T4391] usb 1-1: Manufacturer: syz [ 654.202123][ T4391] usb 1-1: SerialNumber: syz [ 654.208951][ T4391] r8152-cfgselector 1-1: config 0 descriptor?? [ 655.209600][ T9241] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1113'. [ 655.266506][ T4391] r8152-cfgselector 1-1: Unknown version 0x0000 [ 655.622950][ T4391] r8152-cfgselector 1-1: bad CDC descriptors [ 655.646319][ T4391] r8152-cfgselector 1-1: Unknown version 0x0000 [ 655.660642][ T4391] r8152-cfgselector 1-1: USB disconnect, device number 19 [ 657.359803][ T9258] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1118'. [ 658.712766][ T9266] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1123'. [ 660.410045][ T9283] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1125'. [ 660.444527][ T9283] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1125'. [ 661.567563][ T9294] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1120'. [ 664.645651][ T9300] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1129'. [ 668.052939][ T9330] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1137'. [ 671.424995][ T9353] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1143'. [ 671.751040][ T4311] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 672.701111][ T4311] usb 6-1: Using ep0 maxpacket: 16 [ 672.713146][ T4311] usb 6-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 672.726823][ T4311] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 672.821292][ T4311] usb 6-1: Product: syz [ 672.861153][ T4311] usb 6-1: Manufacturer: syz [ 672.865827][ T4311] usb 6-1: SerialNumber: syz [ 672.895092][ T4311] r8152-cfgselector 6-1: config 0 descriptor?? [ 673.482731][ T4311] r8152-cfgselector 6-1: Unknown version 0x0000 [ 673.492449][ T4311] r8152-cfgselector 6-1: bad CDC descriptors [ 673.516038][ T4311] r8152-cfgselector 6-1: Unknown version 0x0000 [ 673.530250][ T4311] r8152-cfgselector 6-1: USB disconnect, device number 7 [ 673.841785][ T9373] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1146'. [ 676.902919][ T9379] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1151'. [ 679.535877][ T9398] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1157'. [ 682.135110][ T9421] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1165'. [ 685.983090][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.989467][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 687.795099][ T9454] netlink: 128 bytes leftover after parsing attributes in process `syz.5.1171'. [ 689.251525][ T9471] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 689.328205][ T9474] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1180'. [ 689.390935][ T27] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 689.550171][ T9478] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1181'. [ 689.680945][ T27] usb 7-1: Using ep0 maxpacket: 16 [ 689.690366][ T27] usb 7-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 689.863901][ T9483] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1182'. [ 692.308383][ T27] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 692.316988][ T27] usb 7-1: Product: syz [ 692.321417][ T27] usb 7-1: Manufacturer: syz [ 692.326433][ T27] usb 7-1: SerialNumber: syz [ 692.347895][ T27] r8152-cfgselector 7-1: config 0 descriptor?? [ 692.439698][ T27] r8152-cfgselector 7-1: can't set config #0, error -71 [ 692.457571][ T27] r8152-cfgselector 7-1: Unknown version 0x0000 [ 692.491103][ T27] r8152-cfgselector 7-1: USB disconnect, device number 10 [ 695.576556][ T9526] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1194'. [ 696.019958][ T9531] netlink: 128 bytes leftover after parsing attributes in process `syz.6.1195'. [ 696.868248][ T9533] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1197'. [ 697.211123][ T126] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 697.411002][ T126] usb 7-1: Using ep0 maxpacket: 16 [ 697.443589][ T126] usb 7-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 697.560267][ T9551] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1202'. [ 699.037127][ T126] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 699.180440][ T126] usb 7-1: Product: syz [ 699.266386][ T126] usb 7-1: Manufacturer: syz [ 699.442424][ T126] usb 7-1: SerialNumber: syz [ 699.555074][ T126] r8152-cfgselector 7-1: config 0 descriptor?? [ 700.241082][ T4391] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 700.792192][ T126] r8152-cfgselector 7-1: Unknown version 0x0000 [ 700.900211][ T126] r8152-cfgselector 7-1: Unknown version 0x0000 [ 701.006673][ T126] r8152-cfgselector 7-1: bad CDC descriptors [ 701.057312][ T126] r8152-cfgselector 7-1: Unknown version 0x0000 [ 701.105836][ T126] r8152-cfgselector 7-1: USB disconnect, device number 11 [ 703.933300][ T9586] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1210'. [ 706.955656][ T9606] sctp: [Deprecated]: syz.1.1215 (pid 9606) Use of int in max_burst socket option deprecated. [ 706.955656][ T9606] Use struct sctp_assoc_value instead [ 707.763742][ T9614] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1218'. [ 711.804558][ T9630] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1222'. [ 714.760992][ T9651] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1229'. [ 714.952631][ T9656] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1231'. [ 718.570402][ T9678] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1236'. [ 725.900036][ T6238] block nbd5: Attempted send on invalid socket [ 725.912015][ T6238] I/O error, dev nbd5, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 726.339152][ T9723] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1246'. [ 728.497310][ T9729] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1248'. [ 731.581323][ T9746] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1253'. [ 734.141474][ T9764] ------------[ cut here ]------------ [ 734.147528][ T9764] WARNING: CPU: 0 PID: 9764 at net/sched/sch_taprio.c:1020 taprio_get_start_time+0x139/0x160 [ 734.157932][ T9764] Modules linked in: [ 734.161925][ T9764] CPU: 0 PID: 9764 Comm: syz.6.1247 Not tainted 6.1.147-syzkaller #0 [ 734.170027][ T9764] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 734.180737][ T9764] RIP: 0010:taprio_get_start_time+0x139/0x160 [ 734.187002][ T9764] Code: 89 d8 48 c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 7c fe 7d f9 4c 89 23 31 c0 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 67 e1 2d f9 <0f> 0b b8 f2 ff ff ff eb e7 44 89 e9 80 e1 07 80 c1 03 38 c1 0f 8c [ 734.207085][ T9764] RSP: 0018:ffffc90004436d88 EFLAGS: 00010287 [ 734.213354][ T9764] RAX: ffffffff8852e579 RBX: ffffc90004436e98 RCX: 0000000000080000 [ 734.221480][ T9764] RDX: ffffc90015514000 RSI: 0000000000001e46 RDI: 0000000000001e47 [ 734.229511][ T9764] RBP: 0000000000000001 R08: dffffc0000000000 R09: fffffbfff215ba77 [ 734.237579][ T9764] R10: fffffbfff215ba77 R11: 1ffffffff215ba76 R12: 000000aaeb29f4ac [ 734.245628][ T9764] R13: dffffc0000000000 R14: 0000000000000000 R15: 0000000000000000 [ 734.253827][ T9764] FS: 00007f6c7b3b26c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 734.262826][ T9764] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 734.269437][ T9764] CR2: 000000110c2b04bb CR3: 0000000070c99000 CR4: 00000000003506f0 [ 734.277558][ T9764] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 734.285595][ T9764] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 734.293807][ T9764] Call Trace: [ 734.297207][ T9764] [ 734.300235][ T9764] taprio_change+0x3daa/0x50f0 [ 734.305097][ T9764] ? taprio_destroy+0x4b0/0x4b0 [ 734.309987][ T9764] ? qdisc_create+0x7cb/0x1090 [ 734.314889][ T9764] ? ____sys_sendmsg+0x59b/0x970 [ 734.319878][ T9764] ? ___sys_sendmsg+0x21c/0x290 [ 734.324816][ T9764] ? __se_sys_sendmsg+0x19e/0x270 [ 734.329885][ T9764] ? do_syscall_64+0x4c/0xa0 [ 734.334596][ T9764] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 734.340974][ T9764] ? qdisc_alloc+0x95/0xa50 [ 734.345588][ T9764] ? fifo_init+0x3ab/0x650 [ 734.350055][ T9764] ? qdisc_peek_head+0x40/0x40 [ 734.354908][ T9764] ? qdisc_alloc+0x77a/0xa50 [ 734.359527][ T9764] ? mutex_is_locked+0xe/0x40 [ 734.364313][ T9764] ? taprio_peek+0x590/0x590 [ 734.368961][ T9764] qdisc_create+0x7cb/0x1090 [ 734.373657][ T9764] ? qdisc_notify+0x370/0x370 [ 734.378424][ T9764] tc_modify_qdisc+0xb2f/0x1cc0 [ 734.383475][ T9764] ? qdisc_offload_query_caps+0x140/0x140 [ 734.389284][ T9764] ? qdisc_offload_query_caps+0x140/0x140 [ 734.395136][ T9764] ? rtnetlink_rcv_msg+0x1d8/0xed0 [ 734.400479][ T9764] rtnetlink_rcv_msg+0x79b/0xed0 [ 734.405564][ T9764] ? rtnetlink_bind+0x80/0x80 [ 734.410557][ T9764] ? __local_bh_enable_ip+0x12a/0x1b0 [ 734.416037][ T9764] ? lockdep_hardirqs_on+0x94/0x140 [ 734.421418][ T9764] ? __local_bh_enable_ip+0x12a/0x1b0 [ 734.426855][ T9764] ? _local_bh_enable+0xa0/0xa0 [ 734.431808][ T9764] ? __dev_queue_xmit+0x26f/0x3760 [ 734.436988][ T9764] ? __dev_queue_xmit+0x26f/0x3760 [ 734.442260][ T9764] ? __dev_queue_xmit+0x15c9/0x3760 [ 734.447560][ T9764] ? __dev_queue_xmit+0x26f/0x3760 [ 734.452784][ T9764] ? netdev_core_pick_tx+0x340/0x340 [ 734.458229][ T9764] ? ref_tracker_free+0x630/0x7c0 [ 734.463615][ T9764] ? refcount_inc+0x70/0x70 [ 734.468452][ T9764] ? __copy_skb_header+0x417/0x5a0 [ 734.473675][ T9764] ? __skb_clone+0x480/0x790 [ 734.478321][ T9764] netlink_rcv_skb+0x1de/0x420 [ 734.483180][ T9764] ? rtnetlink_bind+0x80/0x80 [ 734.488015][ T9764] ? netlink_ack+0x1100/0x1100 [ 734.492892][ T9764] ? netlink_deliver_tap+0x2e/0x1b0 [ 734.498230][ T9764] netlink_unicast+0x74d/0x8d0 [ 734.503082][ T9764] netlink_sendmsg+0x89e/0xbc0 [ 734.507868][ T9764] ? netlink_getsockopt+0x540/0x540 [ 734.513201][ T9764] ? aa_sock_msg_perm+0x94/0x150 [ 734.518259][ T9764] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 734.523596][ T9764] ? security_socket_sendmsg+0x7c/0xa0 [ 734.529180][ T9764] ? netlink_getsockopt+0x540/0x540 [ 734.534461][ T9764] ____sys_sendmsg+0x59b/0x970 [ 734.539447][ T9764] ? __sys_sendmsg_sock+0x30/0x30 [ 734.544527][ T9764] ? __import_iovec+0x315/0x500 [ 734.549400][ T9764] ? import_iovec+0x6f/0xa0 [ 734.554041][ T9764] ___sys_sendmsg+0x21c/0x290 [ 734.558758][ T9764] ? __sys_sendmsg+0x270/0x270 [ 734.563618][ T9764] ? __fdget+0x17c/0x200 [ 734.567904][ T9764] __se_sys_sendmsg+0x19e/0x270 [ 734.572935][ T9764] ? __se_sys_futex+0x14a/0x440 [ 734.577986][ T9764] ? __x64_sys_sendmsg+0x80/0x80 [ 734.582987][ T9764] ? lockdep_hardirqs_on+0x94/0x140 [ 734.588225][ T9764] do_syscall_64+0x4c/0xa0 [ 734.592799][ T9764] ? clear_bhb_loop+0x60/0xb0 [ 734.597593][ T9764] ? clear_bhb_loop+0x60/0xb0 [ 734.602376][ T9764] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 734.608320][ T9764] RIP: 0033:0x7f6c7d58ebe9 [ 734.612801][ T9764] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 734.632568][ T9764] RSP: 002b:00007f6c7b3b2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 734.641429][ T9764] RAX: ffffffffffffffda RBX: 00007f6c7d7b6270 RCX: 00007f6c7d58ebe9 [ 734.649601][ T9764] RDX: 0000000000000000 RSI: 00002000000007c0 RDI: 0000000000000009 [ 734.658289][ T9764] RBP: 00007f6c7d611e19 R08: 0000000000000000 R09: 0000000000000000 [ 734.666320][ T9764] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 734.674906][ T9764] R13: 00007f6c7d7b6308 R14: 00007f6c7d7b6270 R15: 00007fff88395218 [ 734.683401][ T9764] [ 734.686478][ T9764] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 734.694033][ T9764] CPU: 0 PID: 9764 Comm: syz.6.1247 Not tainted 6.1.147-syzkaller #0 [ 734.702158][ T9764] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 734.712572][ T9764] Call Trace: [ 734.715950][ T9764] [ 734.718980][ T9764] dump_stack_lvl+0x168/0x22e [ 734.723686][ T9764] ? memcpy+0x3c/0x60 [ 734.727773][ T9764] ? show_regs_print_info+0x12/0x12 [ 734.732979][ T9764] ? load_image+0x3b0/0x3b0 [ 734.737522][ T9764] panic+0x2c9/0x710 [ 734.741656][ T9764] ? bpf_jit_dump+0xd0/0xd0 [ 734.746192][ T9764] __warn+0x2f8/0x4f0 [ 734.750371][ T9764] ? taprio_get_start_time+0x139/0x160 [ 734.756107][ T9764] ? taprio_get_start_time+0x139/0x160 [ 734.761666][ T9764] report_bug+0x2ba/0x4f0 [ 734.766013][ T9764] ? taprio_get_start_time+0x139/0x160 [ 734.771508][ T9764] handle_bug+0x3a/0x70 [ 734.775846][ T9764] exc_invalid_op+0x16/0x40 [ 734.780365][ T9764] asm_exc_invalid_op+0x16/0x20 [ 734.785337][ T9764] RIP: 0010:taprio_get_start_time+0x139/0x160 [ 734.791418][ T9764] Code: 89 d8 48 c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 7c fe 7d f9 4c 89 23 31 c0 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 67 e1 2d f9 <0f> 0b b8 f2 ff ff ff eb e7 44 89 e9 80 e1 07 80 c1 03 38 c1 0f 8c [ 734.811150][ T9764] RSP: 0018:ffffc90004436d88 EFLAGS: 00010287 [ 734.817239][ T9764] RAX: ffffffff8852e579 RBX: ffffc90004436e98 RCX: 0000000000080000 [ 734.825397][ T9764] RDX: ffffc90015514000 RSI: 0000000000001e46 RDI: 0000000000001e47 [ 734.833412][ T9764] RBP: 0000000000000001 R08: dffffc0000000000 R09: fffffbfff215ba77 [ 734.841665][ T9764] R10: fffffbfff215ba77 R11: 1ffffffff215ba76 R12: 000000aaeb29f4ac [ 734.849659][ T9764] R13: dffffc0000000000 R14: 0000000000000000 R15: 0000000000000000 [ 734.857650][ T9764] ? taprio_get_start_time+0x139/0x160 [ 734.863132][ T9764] ? taprio_get_start_time+0x139/0x160 [ 734.868682][ T9764] taprio_change+0x3daa/0x50f0 [ 734.873820][ T9764] ? taprio_destroy+0x4b0/0x4b0 [ 734.878698][ T9764] ? qdisc_create+0x7cb/0x1090 [ 734.883491][ T9764] ? ____sys_sendmsg+0x59b/0x970 [ 734.888551][ T9764] ? ___sys_sendmsg+0x21c/0x290 [ 734.893501][ T9764] ? __se_sys_sendmsg+0x19e/0x270 [ 734.898650][ T9764] ? do_syscall_64+0x4c/0xa0 [ 734.903277][ T9764] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 734.909377][ T9764] ? qdisc_alloc+0x95/0xa50 [ 734.913948][ T9764] ? fifo_init+0x3ab/0x650 [ 734.918562][ T9764] ? qdisc_peek_head+0x40/0x40 [ 734.923599][ T9764] ? qdisc_alloc+0x77a/0xa50 [ 734.928318][ T9764] ? mutex_is_locked+0xe/0x40 [ 734.933038][ T9764] ? taprio_peek+0x590/0x590 [ 734.937647][ T9764] qdisc_create+0x7cb/0x1090 [ 734.942260][ T9764] ? qdisc_notify+0x370/0x370 [ 734.946950][ T9764] tc_modify_qdisc+0xb2f/0x1cc0 [ 734.951825][ T9764] ? qdisc_offload_query_caps+0x140/0x140 [ 734.957576][ T9764] ? qdisc_offload_query_caps+0x140/0x140 [ 734.963307][ T9764] ? rtnetlink_rcv_msg+0x1d8/0xed0 [ 734.968468][ T9764] rtnetlink_rcv_msg+0x79b/0xed0 [ 734.973425][ T9764] ? rtnetlink_bind+0x80/0x80 [ 734.978121][ T9764] ? __local_bh_enable_ip+0x12a/0x1b0 [ 734.983604][ T9764] ? lockdep_hardirqs_on+0x94/0x140 [ 734.988813][ T9764] ? __local_bh_enable_ip+0x12a/0x1b0 [ 734.994204][ T9764] ? _local_bh_enable+0xa0/0xa0 [ 734.999083][ T9764] ? __dev_queue_xmit+0x26f/0x3760 [ 735.004209][ T9764] ? __dev_queue_xmit+0x26f/0x3760 [ 735.009424][ T9764] ? __dev_queue_xmit+0x15c9/0x3760 [ 735.014663][ T9764] ? __dev_queue_xmit+0x26f/0x3760 [ 735.019981][ T9764] ? netdev_core_pick_tx+0x340/0x340 [ 735.025293][ T9764] ? ref_tracker_free+0x630/0x7c0 [ 735.030335][ T9764] ? refcount_inc+0x70/0x70 [ 735.034881][ T9764] ? __copy_skb_header+0x417/0x5a0 [ 735.040035][ T9764] ? __skb_clone+0x480/0x790 [ 735.044680][ T9764] netlink_rcv_skb+0x1de/0x420 [ 735.049471][ T9764] ? rtnetlink_bind+0x80/0x80 [ 735.054528][ T9764] ? netlink_ack+0x1100/0x1100 [ 735.059330][ T9764] ? netlink_deliver_tap+0x2e/0x1b0 [ 735.064649][ T9764] netlink_unicast+0x74d/0x8d0 [ 735.069455][ T9764] netlink_sendmsg+0x89e/0xbc0 [ 735.074327][ T9764] ? netlink_getsockopt+0x540/0x540 [ 735.079647][ T9764] ? aa_sock_msg_perm+0x94/0x150 [ 735.084705][ T9764] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 735.090250][ T9764] ? security_socket_sendmsg+0x7c/0xa0 [ 735.095850][ T9764] ? netlink_getsockopt+0x540/0x540 [ 735.101101][ T9764] ____sys_sendmsg+0x59b/0x970 [ 735.106045][ T9764] ? __sys_sendmsg_sock+0x30/0x30 [ 735.111090][ T9764] ? __import_iovec+0x315/0x500 [ 735.115979][ T9764] ? import_iovec+0x6f/0xa0 [ 735.120518][ T9764] ___sys_sendmsg+0x21c/0x290 [ 735.125300][ T9764] ? __sys_sendmsg+0x270/0x270 [ 735.130137][ T9764] ? __fdget+0x17c/0x200 [ 735.134460][ T9764] __se_sys_sendmsg+0x19e/0x270 [ 735.139333][ T9764] ? __se_sys_futex+0x14a/0x440 [ 735.144201][ T9764] ? __x64_sys_sendmsg+0x80/0x80 [ 735.149272][ T9764] ? lockdep_hardirqs_on+0x94/0x140 [ 735.154755][ T9764] do_syscall_64+0x4c/0xa0 [ 735.159204][ T9764] ? clear_bhb_loop+0x60/0xb0 [ 735.164009][ T9764] ? clear_bhb_loop+0x60/0xb0 [ 735.168718][ T9764] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 735.174647][ T9764] RIP: 0033:0x7f6c7d58ebe9 [ 735.179099][ T9764] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 735.198893][ T9764] RSP: 002b:00007f6c7b3b2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 735.207511][ T9764] RAX: ffffffffffffffda RBX: 00007f6c7d7b6270 RCX: 00007f6c7d58ebe9 [ 735.215610][ T9764] RDX: 0000000000000000 RSI: 00002000000007c0 RDI: 0000000000000009 [ 735.223605][ T9764] RBP: 00007f6c7d611e19 R08: 0000000000000000 R09: 0000000000000000 [ 735.231713][ T9764] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 735.239817][ T9764] R13: 00007f6c7d7b6308 R14: 00007f6c7d7b6270 R15: 00007fff88395218 [ 735.247817][ T9764] [ 735.251328][ T9764] Kernel Offset: disabled [ 735.255783][ T9764] Rebooting in 86400 seconds..