last executing test programs: 8.024881174s ago: executing program 1 (id=405): ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f0000000000)={0x5, 0x802, 0xff, 0x21e, 0x401, 0x8000}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r0, &(0x7f0000000000), 0xd) 7.548136446s ago: executing program 1 (id=407): r0 = syz_usb_connect(0x2, 0x239, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e388d640697a01006ba8010203010902270201020010000904"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0xfffffffffffffffe) socket$inet_udplite(0x2, 0x2, 0x88) 6.53717148s ago: executing program 3 (id=410): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000000) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="040e04015a0c"], 0x7) prlimit64(0x0, 0xe, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) 6.370343536s ago: executing program 4 (id=411): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000140)=""/136, 0x88) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x200000c0, 0xffffffff, 0xfffffff8}, 0x10) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001a00010029bd70000000000002"], 0x3c}}, 0x0) 6.084887047s ago: executing program 4 (id=414): syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000380)={0x24, 0x0, &(0x7f0000000940)=ANY=[], &(0x7f0000000300)=ANY=[@ANYBLOB="002203000000a03a1caa574edfcb274da0"], &(0x7f0000000340)={0x0, 0x21, 0x9, {0x9, 0x21, 0x32, 0x40, 0x1, {0x22, 0xbce}}}}, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000000)={0x6, @local, 0x0, 0x0, 'none\x00', 0x0, 0xfffffffd, 0x33}, 0x2c) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x483, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) r1 = syz_open_procfs$pagemap(0x0, &(0x7f0000000000)) ioctl$PAGEMAP_SCAN(r1, 0xc0606610, &(0x7f0000000140)={0x60, 0x2, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x2, 0x0, 0x0, 0xf5, 0x5d, 0x4, 0x21, 0x40}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040)={0xffffffffffffffff}, 0x2, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0xe, @empty, 0x2}, {0xa, 0x4e23, 0x7, @mcast2, 0xd339}, r2, 0x7}}, 0x48) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r3, 0x0, 0x0) syz_open_procfs$userns(0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r4 = socket$kcm(0x2, 0x200000000000001, 0x106) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_GET(r5, 0x0, 0x20000010) sendmsg$inet(r4, 0x0, 0x30000091) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) 5.905955723s ago: executing program 0 (id=415): syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) prlimit64(0x0, 0xf, &(0x7f00000000c0)={0x8, 0x85}, 0x0) timer_create(0x3, 0x0, &(0x7f0000bbdffc)=0x0) timer_settime(0x0, 0x1, 0x0, 0x0) timer_settime(r0, 0x1, &(0x7f00000001c0), &(0x7f0000000240)) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@dellink={0x20, 0x11, 0x101, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0x20}}, 0x0) syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) 5.075039427s ago: executing program 2 (id=417): openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) r3 = gettid() timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000000040)=0x0) setuid(0xee01) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r5, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) socketpair$unix(0x1, 0x5, 0x0, 0x0) dup3(0xffffffffffffffff, r5, 0x0) timer_settime(r4, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r7 = userfaultfd(0x801) ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f0000000000)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x0, &(0x7f0000000040), 0x0, 0x4) ioctl$UFFDIO_ZEROPAGE(r7, 0xc020aa04, &(0x7f0000000300)={{&(0x7f0000a92000/0x1000)=nil, 0x1000}}) wait4(r0, 0x0, 0x80000000, &(0x7f0000000380)) 4.834910268s ago: executing program 3 (id=418): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) bind$netrom(r0, &(0x7f0000000f40)={{0x6, @rose}, [@default, @bcast, @netrom, @default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x48) sendto(r0, 0x0, 0x0, 0x80, &(0x7f0000001080)=@hci={0x1f, 0x0, 0x2}, 0x80) 4.64318152s ago: executing program 3 (id=419): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(r0, 0x4b67, &(0x7f00000001c0)={0x1, &(0x7f0000000000)=[{0x2000, 0x5}]}) 3.747462533s ago: executing program 2 (id=420): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) setreuid(0xffffffffffffffff, 0xee00) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$SCSI_IOCTL_GET_PCI(r0, 0x5393, &(0x7f0000000000)) 3.72006751s ago: executing program 0 (id=421): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000340)=ANY=[@ANYBLOB="f0000000100013070000000000000000fc020000000000000000000000000000fe8000000000000000000000000000100004000000000000000000202c000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe"], 0xf0}, 0x1, 0xe}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'caif0\x00'}) r1 = socket(0x10, 0x803, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000280)={0xffffffffffffffff, 0x53, 0xd, 0x9}) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB], 0x48}, 0x1, 0x0, 0x0, 0x20004810}, 0x0) lseek(0xffffffffffffffff, 0x80000000457, 0x0) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x6, 0x16, &(0x7f0000000780)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @func={0x85, 0x0, 0x1, 0x0, 0x7}, @printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x2}, @alu={0x4, 0x0, 0xb, 0x2, 0x2, 0xfffffffffffffffe, 0xfffffffffffffffc}, @printk={@llx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3ff}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}], &(0x7f0000000080)='GPL\x00', 0x2, 0xa2, &(0x7f00000006c0)=""/162, 0x41000, 0x39, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)=[0xffffffffffffffff, r0, 0x1], 0x0, 0x10, 0x4}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={r2, 0x0, 0x25, 0x2, @void}, 0x10) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) r4 = eventfd(0xffffffff) r5 = io_uring_setup(0x4238, &(0x7f0000000000)={0x0, 0x0, 0x40}) io_uring_register$IORING_REGISTER_RESTRICTIONS(r5, 0xb, &(0x7f00000004c0), 0x0) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r5, 0x13, &(0x7f0000000080)=[0xdb, 0x9], 0x2) ioctl$VHOST_SET_LOG_FD(r3, 0x4004af07, &(0x7f0000000240)=r4) ioctl$VHOST_SET_VRING_KICK(r3, 0x4008af20, &(0x7f0000000040)={0x1, r4}) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f0000000000)=0x1) syz_clone(0x1100, 0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x1843, 0x0) ioctl$TUNSETDEBUG(r6, 0x400454c9, 0xffffffffffffffff) ioctl$TUNSETLINK(r6, 0x400454cd, 0x308) 3.668005048s ago: executing program 3 (id=422): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000001000000850000000e000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000040)='sys_exit\x00', r0}, 0x10) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) 3.667439809s ago: executing program 4 (id=423): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000280), 0x42000, 0x0) read$FUSE(r2, &(0x7f0000002600)={0x2020}, 0x2020) 3.603939338s ago: executing program 1 (id=424): unshare(0x22020600) r0 = socket$can_j1939(0x1d, 0x2, 0x7) fallocate(r0, 0x22, 0x7, 0x10) 3.543161746s ago: executing program 2 (id=425): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000d00)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000800007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001100000095"], 0x0, 0xee, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$packet(0x11, 0x3, 0x300) socket$inet6_sctp(0xa, 0x1, 0x84) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0]}) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) socket$igmp6(0xa, 0x3, 0x2) socket$kcm(0x2d, 0x2, 0x0) io_uring_enter(0xffffffffffffffff, 0x847ba, 0x0, 0xe, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df33c9f7b9a60000000200000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 2.728074718s ago: executing program 3 (id=426): socket(0x10, 0x803, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000001c0), 0x400) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r2, 0xc0305302, &(0x7f0000000200)={0xfffffb1e, 0x9, 0x7fffffff, 0x58000000, 0x2}) r3 = fsmount(r1, 0x1, 0x0) fchdir(r3) r4 = open(&(0x7f0000000040)='./file1\x00', 0x80242, 0x0) sendfile(r4, r4, 0x0, 0x7f03) 2.399946901s ago: executing program 4 (id=427): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0xffffffff, 0x0, 0x0, 0x2}}, 0x0, 0x1a, 0x0, 0x1}, 0x28) 2.339200879s ago: executing program 1 (id=428): r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000001100)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000001080)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f00000003c0)={r1}, &(0x7f0000000100)=0x8) 2.275946923s ago: executing program 0 (id=429): mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0xc0089364, &(0x7f0000000180)) 1.687414022s ago: executing program 2 (id=430): r0 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) listen(r0, 0x7) mknodat$null(0xffffffffffffff9c, 0x0, 0xb0a54e68b1cd2fdb, 0x103) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="200000001000010700000000e9ffffff0a0000000c0002006e6c3830323131"], 0x20}}, 0x400c0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xc, &(0x7f00000002c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), r1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000001c00010428bd700000dcdf", @ANYRES32, @ANYBLOB="3e00e4090a000200bf"], 0x28}, 0x1, 0x0, 0x0, 0x40001}, 0x24040040) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x15, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x10}, {0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {0x1, 0x0, 0x0, 0xfffffffffffffffb}, 0x0, 0x6e6bb5}}, 0xb8}}, 0x0) 1.634620356s ago: executing program 4 (id=431): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r0, &(0x7f00000003c0)={&(0x7f0000000180), 0x10, &(0x7f0000000380)=[{&(0x7f0000000480)="c3e972bd85a6d84136d6dd55048d3593a74f338ce6772ab9a6f64041c2f6fbbecdc08ebcd3192b6a53662dae7c8e9c665e80a5d0925f728dcac30c29793992e588952653d414cb8ccdabc38767fee819ec5af0c5ee936880fe8549b4ed347779cab4ffd4e0b62c53a1c01db28f2b3f91c34211c9353bc1dece61511917c2245fd66cb8dffeacb4d46d627c97b498bf1ff6b313bfbc9765457c831771d5eec7997ec242e4505f01c1bb3e069b2e630f42a2be86598a61", 0x64}, {&(0x7f0000000300)='V', 0x1}, {&(0x7f0000001600)="3eed50d0125719a810f88e3f47186fe4dae74182dfd109a2587c4797410c9b8e39bd3d9aa144d5908647c30c8db69b5c17084c9b1bfbb8680737c4f88abcdbc7d294d72ab1b344270915df9ddf5635644c351c22b29d948ac4106bce7107570beed63077cfbc98ef71699eae65d37724d995b553e7a3ade619b522313ab382caf879feb48942878e605ee3ee2872794e3abe22a3f025068b628a5d92468092a5cc649bbbd978b5772e537939432a502122235ced312dafd108c9ffeb0b38cc16da9418ca01d485a6afb5827da4df6e1121ec307de14bb32b6a977608e4576a998182dd93d592ff43e55bfdbbce23ecd501e43b3e93ef8d9d01711dff54c301e299d3801a3cffe6c9883fbd0e47124dc02569f62d48b878fcb58ce99fcffcd2a5166eff3ad93cf1d137274993d86a3b3730d63ded759f6ca88fa449e5575b15321e5a58a1f888eed7466db4976ce35f6d2efb5ad05d99a66482dc607cb5acb24d326803bd337519cc98103f59c63b5962cd72e4497d1b00817d6e09de70270a09b493c2226617b1c9ef9d506be00d6e07f14633a966f04ecca90fb8d2b963ad6f3817935bd6534fa3da1c5dc468789cbf1192f3c0bff3777f1edd2ada5d35f88f12f29e952c44445ce623509d66811c80a9e0f13ad85aba37d86ff0da4dda601d9e8acb264233bc939fb056316612cff687d5c44157be05bcc88b333ff2a40041d98f1acfe6e2231a84e09bd7a54a0442cf87ce3ee8fd8da39da1862862ae40fc3cb3055c8b70e62f243850707341f51426bb3e71c7a4fffefab060db786000618b05eb087a424a2f30f6a232ff44b605f70ceec0a8f70e37907f6e0bbba21e9d5b7ecb6d287742b75c101ba79525918c3473eae38f3c177249dfa8816661c9921f0b0c858d53ab87c8407b97950c842111002edd1d1e80b801b495da28bcd5409bc971e55dab1857e188ac9728efc8f9a4543945f86ade13b445eacecbbf848a96410ac37c57e3e9e8bc8b8fadd559d225c7468639da2b5d1208558b51e94c14faa7947a7c60e81a96bb5d194cc7289adbc02ebb4b49be1f1efc429db2f9b79b5a22919dba0c35341042c5776942c52365367c4bfc95b42be383cca7107161ded7e851d0126da33d581f1e2b08d0c061e86d31e7a83f9b51c79b4034c7deda7697034e1404c6e8e459f76c2efe64350146c7437ef808e04ca14df5f6f500264fd977272bbf8fc096774e8eb61d0963430751ac1425a073f84346b0eba368cba7fa34adc420800d4f99927280eba199f9695cf88124fafc3a2b1226d2f2ab3ea27c69a127650cf5c725b54c02bd8729033cf699ce7f030f9a3442056244da3cfb61a8126dba11377624f39eb009242152fd7b8b88de7dd86057f29bfcb7b7df0e65e7e9ac9eeaa41afa62743698bff03d5b2d51fb6bca2d92294e8e177cfa3661b26f1c040e9bed983b7bc0aa154eb9c92e4ee25091318c53113a1c23ac62d2d71504cba99041f29a4f332133292cf20abec9222a2acca57cac48fa6c0668ee5eecb494741a64d33b011dcca74696d4614c5b45a5d20983b1708d365ed3ffa60f9161972a611c22642c3c259b41f943f6d7a8b60f284d325e38fe76f0645e069ff70cae38850ccf973193b6232c987df26239a574691f7f07fffa6deae1eb0324fe546573c36f2a2c31cd442517a9b036ae6a2a491e7343864693c107a5dc2585820863c146c1ba6caa4fea9b87d567716f4c8ca1a9d2848055cd750512d3b7415d090019dc8a04a1a1d28931093cd8f00e94c407ca1fa2a5ce903d9df26e008c07cd13afa783220e1bd5e6b60645f3dbb6ecb4156fedafa2dd25498c6a99d94f0b38125ea7741b75109dcac9f80635f79f5c8a0483bb9f05a3a5bf721c7541edb252449f8b13e63c370a6146332f03ca1f1b6fe0bed984f13744bb7fa0fe322e83ddf9ffb2083e94f33604a0a199220c450dad94bf154805e7f9e4350ca2d81adf2978c87dcc8a8a7d56297ec124bfef0d28f35777205e973272c87e01070f14f5b14daa3b5104d9ff6b296c4f16ed49eb42d35e7ba3bccb7a26c33a263df88aadd596e9d9de0abbd4d449df11081f2cd62e1d8962b9b9feb25a3b8e03537d61a61c11ac22b7211d12c84e60a6abcc219e558b2513d8c530b3c7a57cdc47de545aafbb2a13c0e6c75b1b92fa241c713c83a09c92b2b61d565120372a9143415583c9596f27a663d4967cd653b08cebd6cb96c1f0dc80d57267ac9a8281d7149bde880828ee27d69a6818db58320db29d1b044eaf6ab8a5108bc522de406990b5393b1f7e7bab71bf6cf8eed1cd59c7607d662e8b313f5c4fce0f59b1027371381011b63dd5b2b09739082c0d62ffad96e30153a395234937d377c32fe7af82aca3a19d0ebc4a5c5fb5ff190f14d5695c703b571fb4bf03756635cafc6cf6267eab836c347a9d07e8089fc105346934cf3364e5be370b3c42b94bc5ae3d17a817398566a2953251eb91697d67278145df9a4b917bcca1bf211780b22f4caacfcb7604c84f943d05f6fdf8edbd258d7d8dbf84f9d99e57472c5b1c2337d749a1f345e662e2536d23c7a63bbbbf00f8b5b0a2106a0342ab27b9a10b82e82668cd49e0cbb09d7be0217645f1dda3be59c8232fa290d34791cda52aa5b5cec6339ab96a2eb3f5328cc7c0e6717c2824344547a2ed518f6b2b4e4fe5b684596aa6a9d3988fc5d5ff4cb46cec99d951b8386b10949a163af974b7543df97b4882a4ed60e927a1deb67c5f814235bef65fea79a2c712815be7403c93a3707fb90d4604ec3a6a3b0928f253f6ab6bd56c958e026c8c58172c4ac2a3efe2ecd5cea70c8313f9ac2d638bc296ba99e2ca86d2fd06b5402cdcddc3f3c9845d5ae77f6f36963b91e8f6cdccd17abe8d40ed02463af4bb0e496344f350097f1cc13313fa1e172b63556ed2b8a8121c01a5fb343ff7767821626fc49b0d6bd522e1c9bf137d5a5bccb4bc8dbb64c83a82ef6c2894f3896c9f6bf0c3764011d53eeb6db9ea9dae22d3ebcca4942d5828c0bca0d9ea37701d5a06c066ac4fe318e11e9c0d6c658ac810fb5d7836cfffe4ccbb0934e5567d74695980a156d4bf1c18861c5a29ccd349999dc20562d00e1f6c1851ae563541086438d60b975c8ceb466414ff60efa0b2dee790fd0659ffa98b92414c13d5a6825368f56c4984412205041cd8e006c7127d4395ecdffb5addf80ef938ce54a367154c4fc286d5f969325c12b13655a9a956dd3b98281f537e837669fc55d8930676e807aa8cd046e0f4583d59f86cb99f3f7a7ddde1fb39111fdec7677d2fee4b8f4814a5def5ebcc67c653384ce80eaffd880405f7edf8fd3ea049f040595df4a75e2f892e7a85e0ba351fb8d263bfff7168bb85017b360fcd2ba89346682a6ea7ccc46afbdb5ab444e3f477238b2ab503bde914d3cf1789539cde9c0621152cd97bff9f235d88a1ef4ea4309db3a05d401af7fb82784b050ef529dab4f1f003eb29710a962f7538c521e617e2f0efac36182d09985e1d725cc38c3833a53742a02f76fb2854a9e45f0febacf3bda83f11183ef5b9fef02ebcdf56d4104b175bad937d8f61964f97d673577cdcbbb48d8eb62b063ee6563b9ff053719baff871bcd83822d865b2f7ef023076425ac5cd71b1f2309de0c6f14cc9c4d3e8fad945f756a7c8a084ea1bfdf5ac6e740043e7f7bdaca06774b084ae314c2636529d4fdcd965c7f8c07156572620b827d694efdc9d2bfc5aa9391220a83765f2c71fcd48d4acaed60afb53d1013fa3b15e948ec4159f7d130ef85b594018346e99034c18738285223ea53a6b1d5cf11a607de2e19608ba03ec970a915b773824261f3fc931dd6d3b934d89f07baf14776314c3eeb8cd0537ef5736f565fbd14e520d4ab2f77ed9597b76ff91f8d1f99ebd6e473efda7accb273975a06944d1037032129992b994ca791a09b4d83980a1e494b0f97098df5f6fb6bbb02722adb11dc319c565c2c363cbd19d9fb3efb4613b62d6584cd53f7bd80e3e89304f444ce9dd1835661e3bb4de02ccf568a2a5daaf0d56898d4286c3fb62e22af62d7ac318685834467f337561dde2e0c1e2827cdffcf42c17728ee64b3ff4ccc0227590badd0bd7e448b8cca0892d6a5e0130d2ac665f47c6b28daa101c1b319869bdd39fa924d6d9ba7d72feda5f21ac78641c7d4801d41c7879721b3be4dab40d9c4a78552440101f373489cc5240b0144a9ce32691a784b6dfe971a21bb5980ff67da2d1bb90b223c9e192a39c1aeadd1f5c790811079c0b51a97105c99b6f95d71bb3ea47c33d9dcb0a53c929c44499e184a3cd722c908d3b0d157e28ffdeb2ed7192e780d96a7a2f0fd5a87bdc973e049da0caf931f26f5a21813e2e602ceb2259997e0205ce48fd9424bd6d4d75dd4301f429ee30745cd839a40dbeab4c3db2f0f10bbaea071ca41d1392385681730a3678a5f60f604dbe19cb9d7dd234337e327451b8cc65394af399432ef7fc3765d055874ebdca14e5999292d6f72f31e92bacf25db5ef8f5212952c1910de06ddbe1687a0e1837922f2228289916ed3aeb7b9cc24da3ae47139e371930afa6d3573df6732c26c0c7ae06d9cedfa77160711bcb06e6553338deae4c5731cf53cc154113096d02f3036d7d9edfcdc331e4bb860c5208489212e904eab70e7f860b0379895cbdecbf7a0b7a25e5b853c7dbe08a4e296a30afec8cf5a9f6ea4aef32a508655d539a770b21e660c9ee1d7688c56abeb7cf1afccc8d59780cf26312589e0c8e1bc00ad7b1325cd9a5dd69246e0b33407c381ea09265154aec297e4ccdf9785a1042a83e77c13d4ce4360782f2428f9916b5cd123b089eb683d30c1e895b9944aa905a1a5b52301d8cc5e4741834ead6ebdb5dc05c9c49c5e883e99d40b9838037beaf876534d747856103e59caf6266fbbe760b6ef83d004634b74f14f8eb4aef93c4cc9cbbd78d83d532c70feef51ea3f170b25d81a6a9b074bfca7e9b3771bf83517e0dd9d0600f70b86b20f61fe36076f8bada334b2390fa954973bc901619a3cfd039349cb328625f495ab288dbdd6dbfd022c2a83f59e0b998619a12e35891b5ae9e83a71765507b4a571cd2241e5885c705244c1022688bef7c5065fbcf219fc01753adb611b3fbc09403dcb10a4f99d788667eff75fa27074ca8481a633530e26163ccf7dada049d23e717e067b6fa5b2f652bc50abda9e7ccdc5f2f3c35ecc2c4431c819c9691be4422e379750774e9f39dae06f26423c8a4278789c9f3111b43f6dd25b0ad47c4cc5fda3f3ed82079c9366e0adced883488f429c1d7e1b351fd0bb204dd7977ef224c4df6d7a5f7697bc6500a7d03a8a914154779fa7092bf1be6bad4092367ce5d295a5d5d0e7c469f372ca2011d612637025e89f178ae9ada0c5b73bcb7d7c034ff595263cd4216e3c76ba5f3d81932a088a90bf8043e877e299c670ef1622a098d5519d9adc4ee7d4cd00e5934a4375fa83fdb81214b892482b31bdde59a70aaf25cb7f417c3a2a91c4e54b48149f6c41d9d396ee6ff13e3028c64a7c9b1f2e7c6e67184a3d52d6f570db3d225c947423c4c6533f22df57d15c5e5a3183422bd378b06fe4732a9401dcb19840fb8fa5c50a0ff497fef362c507753e46b8881d3e767f3b1d893a3805941c94f2efa05ce34b9ea81d716984af6834230d4707a87089d40779503ee6a9bb245d7d997f14acb80e89731c042bbbbe3dcd05177b0ee0eec23455830ef5b65aca357f2b0b887e0b9821c0", 0x1000}, {&(0x7f0000000340)="b768eb20304f2fdc5a9694a4867840d93170ca1a86406f", 0xfffffec0}], 0x4, 0x0, 0x0, 0x8010}, 0x0) r2 = dup2(r1, r0) setsockopt$sock_attach_bpf(r1, 0x1, 0x21, &(0x7f0000000040), 0x4) sendmmsg(r2, &(0x7f0000008800)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002840)=ANY=[], 0x10b0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x5, 0x20004095) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r2) sendmsg$NFT_BATCH(r2, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000008a40)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_DELRULE={0x1dc, 0x8, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x6}, [@NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x2}, @NFTA_RULE_EXPRESSIONS={0xd4, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_FIB_FLAGS={0x8}, @NFTA_FIB_FLAGS={0x8}, @NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0x30}, @NFTA_FIB_RESULT={0x8}]}}}, {0x38, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_NAT_REG_PROTO_MIN={0x8, 0x5, 0x1, 0x0, 0x3}, @NFTA_NAT_REG_ADDR_MIN={0x8, 0x3, 0x1, 0x0, 0x17}, @NFTA_NAT_REG_PROTO_MIN={0x8, 0x5, 0x1, 0x0, 0xf}, @NFTA_NAT_FLAGS={0x8, 0x7, 0x1, 0x0, 0x45}, @NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0xa}]}}}, {0x50, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x40, 0x2, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x74cd}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xb95a}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xff}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x7}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x3}]}}}, {0xc, 0x1, 0x0, 0x1, @fib={{0x8}, @void}}, {0xc, 0x1, 0x0, 0x1, @cmp={{0x8}, @void}}]}, @NFTA_RULE_USERDATA={0x79, 0x7, 0x1, 0x0, "0e04c0dcaeaa81514cc98252dc6e3987e69c3b066f9ac3afa3a88f839ea49ed5a055187c1a978438ac3d7f777420cea6ec911d0f59db4df23edf48a756836c9baca689f61f6e0a92e463bac156e66dbd941a103ac488f90732d42750d4cf0813c2137dfa3752ed31d7672eb002ffba597ceaea2a97"}, @NFTA_RULE_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_COMPAT={0x54, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x3b}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x5e}, @NFTA_RULE_COMPAT_FLAGS={0x8}]}, @NFTA_RULE_ID={0x8}]}, @NFT_MSG_DELOBJ={0x2ec, 0x14, 0xa, 0x400, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_OBJ_USERDATA={0x101, 0x8, "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"}, @NFTA_OBJ_USERDATA={0xe1, 0x8, "87dbf310164abe4663d06d1acbff085eed304c8cbbf05a0c7ec4567e3606d0c3aebef93214284f68c128bffdb9fdc1e9ee4427a7ebd2793cad7bd561b0928a5e8730c22e6acf9619ffef0b7cb675e21b91824d92125b65479322add11c0c7f275acc8a75368c35b80d442eb1d16533ee53f11fe572d5367dda956ec95de5b4b6242ccd029505fe53046bf9ba7b1c5cb5ff7649a939859d042ade597152da58dc288939b49b9bcb4ca6d29ad49f4f1de22c66b7bce8c71aee36f01a353457525d29e616723e9f240fbdd06b77648302208cfe8b6d84f3c2ad88c8d0eab3"}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_OBJ_USERDATA={0xa5, 0x8, "be4307bbb15cef95c97bae3909db888f196367c96be31691743b09b6e48c4a93dfe4570d1714601e46717e2998f0f3332fb9f000e36761e77e372e03dccf8d88bccc3e6044b2314090a407ee49d3c90b3527f7c60020dbce2b44be99d3bef057dc2506a8de9731d623d239d15c2897041fef27b2dfa5ce94a99028dc5ca64318b45f6418b5fd4ab6a4f2f4082b664abfab8119831a94487e5adc678f09a59fe355"}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x3}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x5}]}, @NFT_MSG_DELSETELEM={0xf0, 0xe, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x2}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_LIST_ELEMENTS={0xc8, 0x3, 0x0, 0x1, [{0xc4, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_KEY_END={0xb4, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x58, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0x4c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x5e0}, 0x1, 0x0, 0x0, 0xc010}, 0x4000000) 1.536062559s ago: executing program 3 (id=432): keyctl$instantiate(0xc, 0x0, 0x0, 0x2a, 0xfffffffffffffff9) syz_usb_connect$uac1(0x2, 0xaf, &(0x7f00000001c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9d, 0x3, 0x1, 0x0, 0x70, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x9}, [@feature_unit={0xd, 0x24, 0x6, 0x0, 0x0, 0x3, [0x8, 0x3, 0x0]}, @input_terminal={0xc, 0x24, 0x2, 0x6, 0x101, 0x6, 0x0, 0x1000, 0x4, 0xff}, @input_terminal={0xc, 0x24, 0x2, 0x8, 0x201, 0x3, 0x1}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x40, 0x0, 0x0, {0x7, 0x25, 0x1, 0x2, 0x0, 0x81}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0x12, 0x24, 0x2, 0x2, 0x3, 0x7, 0x3, "ee1f00000000000000"}, @as_header={0x7, 0x24, 0x1, 0x28, 0xc, 0x3}]}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0x9, 0x0, 0x0, {0x7, 0x25, 0x1, 0x80, 0x2, 0x7}}}}}}}]}}, 0x0) 1.504511499s ago: executing program 0 (id=433): socket$nl_netfilter(0x10, 0x3, 0xc) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdir(0x0, 0x0) r1 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, 0x0) read$FUSE(r1, 0x0, 0x0) syz_fuse_handle_req(r1, 0x0, 0x0, 0x0) r2 = syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0xb783, 0x80, 0x0, 0x1b7}, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x0, 0x4, r5, 0x0, 0x0, 0x0, 0x80000, 0x2}) io_uring_enter(r2, 0x47f6, 0x0, 0x0, 0x0, 0x0) 1.47823397s ago: executing program 1 (id=434): r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$inet(r0, &(0x7f0000002780)={0x0, 0x0, 0x0, 0x0, &(0x7f0000009f00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @rand_addr=0x64010101, @empty}}}, @ip_retopts={{0x10, 0x110, 0xd}}], 0x30}, 0x0) 341.9167ms ago: executing program 2 (id=435): r0 = syz_open_dev$radio(&(0x7f0000000080), 0x2, 0x2) ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0x40305652, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x0, 0x4, 0xfa000, 0x65f3c}) 287.908618ms ago: executing program 4 (id=436): socket$netlink(0x10, 0x3, 0x0) socket$can_raw(0x1d, 0x3, 0x1) socket$inet6_mptcp(0xa, 0x1, 0x106) sendmsg$IPVS_CMD_GET_DAEMON(0xffffffffffffffff, 0x0, 0x40000) r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreq(r1, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x3e, &(0x7f0000000040)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x20, 0xfc, 0x2, 0x0, @rand_addr=0x1c, @multicast1=0xe0000300}, @dest_unreach={0x3, 0x6, 0x0, 0x0, 0xfa, 0x9, {0x5, 0x4, 0x0, 0x3d, 0xfff6, 0x65, 0x5, 0x1, 0x4, 0x3, @private=0xa010102, @local}}}}}}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r2, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600, 0x1}}, 0x20) socket$kcm(0x2, 0x3, 0x2) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r3, 0x0, 0xd2, &(0x7f00000000c0)={@multicast1=0x1c, @empty=0xe0000300, 0x0, "8a79348df081496d0420922f45a71c1daa8b610468cd140526c41efcd3a4a422", 0x3, 0x1, 0x85}, 0x3c) 287.603792ms ago: executing program 0 (id=437): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4c, 0x9, 0x6, 0x0, 0x3}, 0x0) ftruncate(0xffffffffffffffff, 0x9) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) sendfile(r1, r0, 0x0, 0x5) 187.631992ms ago: executing program 1 (id=438): socket$packet(0x11, 0x3, 0x300) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) syz_emit_ethernet(0x66, &(0x7f00000002c0)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "02adf7", 0x30, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @time_exceed={0x2, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, '\x00', 0x0, 0x3a, 0x0, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}}}}}}}}, 0x0) 60.417922ms ago: executing program 0 (id=439): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0xd, 0xfff2}}}, 0x24}}, 0x0) 0s ago: executing program 2 (id=440): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000280)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) bind$can_j1939(0xffffffffffffffff, 0x0, 0x0) getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x1, &(0x7f00000000c0)=""/95, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8) open_tree(0xffffffffffffff9c, 0x0, 0x89901) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r1, 0x8983, &(0x7f0000000040)={0x6, 'bridge0\x00', {0x2}, 0x2}) r2 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$IMADDTIMER(r2, 0x80044940, &(0x7f0000000080)=0x14) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.20' (ED25519) to the list of known hosts. [ 85.212009][ T5824] cgroup: Unknown subsys name 'net' [ 85.348633][ T5824] cgroup: Unknown subsys name 'cpuset' [ 85.357701][ T5824] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 87.116161][ T5824] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 91.779258][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 91.795292][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 91.803452][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 91.826109][ T5838] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 91.833908][ T5838] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 91.843532][ T5838] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 91.874897][ T5838] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 91.882618][ T5838] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 91.894887][ T5838] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 91.902937][ T5838] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 92.028041][ T5157] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 92.036904][ T5838] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 92.045267][ T5838] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 92.053382][ T5838] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 92.061066][ T5157] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 92.069006][ T5838] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 92.076509][ T5157] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 92.085932][ T5157] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 92.094798][ T5157] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 92.102724][ T5157] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 92.124291][ T5843] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 92.166640][ T5851] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 92.174895][ T5851] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 92.184555][ T5851] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 92.202437][ T5851] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 92.491943][ T5835] chnl_net:caif_netlink_parms(): no params data found [ 92.773756][ T5839] chnl_net:caif_netlink_parms(): no params data found [ 92.848938][ T5835] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.857929][ T5835] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.866052][ T5835] bridge_slave_0: entered allmulticast mode [ 92.873411][ T5835] bridge_slave_0: entered promiscuous mode [ 92.940582][ T5835] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.948042][ T5835] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.955823][ T5835] bridge_slave_1: entered allmulticast mode [ 92.963114][ T5835] bridge_slave_1: entered promiscuous mode [ 92.984705][ T5844] chnl_net:caif_netlink_parms(): no params data found [ 93.118929][ T5835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.176057][ T5835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.264691][ T5848] chnl_net:caif_netlink_parms(): no params data found [ 93.278017][ T5845] chnl_net:caif_netlink_parms(): no params data found [ 93.297494][ T5839] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.305438][ T5839] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.312815][ T5839] bridge_slave_0: entered allmulticast mode [ 93.320333][ T5839] bridge_slave_0: entered promiscuous mode [ 93.336747][ T5835] team0: Port device team_slave_0 added [ 93.358695][ T5839] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.366579][ T5839] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.373867][ T5839] bridge_slave_1: entered allmulticast mode [ 93.381901][ T5839] bridge_slave_1: entered promiscuous mode [ 93.399439][ T5835] team0: Port device team_slave_1 added [ 93.519173][ T5844] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.526748][ T5844] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.533963][ T5844] bridge_slave_0: entered allmulticast mode [ 93.541874][ T5844] bridge_slave_0: entered promiscuous mode [ 93.582738][ T5839] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.596238][ T5844] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.603470][ T5844] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.610756][ T5844] bridge_slave_1: entered allmulticast mode [ 93.618757][ T5844] bridge_slave_1: entered promiscuous mode [ 93.640955][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.649069][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.675945][ T5835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.712049][ T5839] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.737026][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.748104][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.778693][ T5835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.838848][ T5844] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.853180][ T5844] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.893146][ T5848] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.900482][ T5848] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.907930][ T5848] bridge_slave_0: entered allmulticast mode [ 93.915586][ T5848] bridge_slave_0: entered promiscuous mode [ 93.924905][ T5851] Bluetooth: hci0: command tx timeout [ 93.969625][ T5845] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.976920][ T5845] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.987509][ T5845] bridge_slave_0: entered allmulticast mode [ 93.994365][ T5851] Bluetooth: hci1: command tx timeout [ 93.999208][ T5845] bridge_slave_0: entered promiscuous mode [ 94.008259][ T5848] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.016430][ T5848] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.023722][ T5848] bridge_slave_1: entered allmulticast mode [ 94.032616][ T5848] bridge_slave_1: entered promiscuous mode [ 94.071059][ T5839] team0: Port device team_slave_0 added [ 94.080304][ T5839] team0: Port device team_slave_1 added [ 94.107319][ T5844] team0: Port device team_slave_0 added [ 94.113542][ T5845] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.120795][ T5845] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.128010][ T5845] bridge_slave_1: entered allmulticast mode [ 94.135987][ T5845] bridge_slave_1: entered promiscuous mode [ 94.164347][ T5851] Bluetooth: hci2: command tx timeout [ 94.191390][ T5844] team0: Port device team_slave_1 added [ 94.234655][ T5851] Bluetooth: hci4: command tx timeout [ 94.234664][ T5838] Bluetooth: hci3: command tx timeout [ 94.252156][ T5848] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 94.266048][ T5848] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 94.295655][ T5835] hsr_slave_0: entered promiscuous mode [ 94.302281][ T5835] hsr_slave_1: entered promiscuous mode [ 94.325690][ T5845] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 94.338954][ T5845] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 94.364485][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.371470][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.397946][ T5839] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.411876][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.418946][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.445186][ T5839] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.527609][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.534862][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.561270][ T5844] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.589023][ T5848] team0: Port device team_slave_0 added [ 94.599069][ T5848] team0: Port device team_slave_1 added [ 94.629780][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.639645][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.666404][ T5844] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.680290][ T5845] team0: Port device team_slave_0 added [ 94.689933][ T5845] team0: Port device team_slave_1 added [ 94.767276][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.775069][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.801798][ T5848] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.816503][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.823494][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.849862][ T5848] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.926705][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.933716][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.960124][ T5845] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.973602][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.980707][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.006741][ T5845] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 95.023339][ T5839] hsr_slave_0: entered promiscuous mode [ 95.030488][ T5839] hsr_slave_1: entered promiscuous mode [ 95.037215][ T5839] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 95.044983][ T5839] Cannot create hsr debugfs directory [ 95.112666][ T5844] hsr_slave_0: entered promiscuous mode [ 95.119989][ T5844] hsr_slave_1: entered promiscuous mode [ 95.126618][ T5844] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 95.134511][ T5844] Cannot create hsr debugfs directory [ 95.191014][ T5848] hsr_slave_0: entered promiscuous mode [ 95.198764][ T5848] hsr_slave_1: entered promiscuous mode [ 95.205272][ T5848] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 95.212854][ T5848] Cannot create hsr debugfs directory [ 95.320270][ T5845] hsr_slave_0: entered promiscuous mode [ 95.335876][ T5845] hsr_slave_1: entered promiscuous mode [ 95.342280][ T5845] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 95.357677][ T5845] Cannot create hsr debugfs directory [ 95.680604][ T5835] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 95.723808][ T5835] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 95.768230][ T5835] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 95.809033][ T5835] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 95.962254][ T5839] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 95.995336][ T5851] Bluetooth: hci0: command tx timeout [ 96.000461][ T5839] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 96.012315][ T5839] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 96.040290][ T5839] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 96.076362][ T5851] Bluetooth: hci1: command tx timeout [ 96.118115][ T5844] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 96.130144][ T5844] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 96.141035][ T5844] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 96.156710][ T5844] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 96.234515][ T5851] Bluetooth: hci2: command tx timeout [ 96.255632][ T5848] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 96.271596][ T5848] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 96.282796][ T5848] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 96.314434][ T5851] Bluetooth: hci4: command tx timeout [ 96.319877][ T5851] Bluetooth: hci3: command tx timeout [ 96.336654][ T5848] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 96.428207][ T5835] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.477384][ T5845] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 96.490842][ T5845] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 96.516497][ T5835] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.528444][ T5839] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.535764][ T5845] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 96.560693][ T5845] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 96.601724][ T3558] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.609030][ T3558] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.646266][ T1150] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.653434][ T1150] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.710174][ T5839] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.731708][ T5844] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.755328][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.762500][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.823878][ T3558] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.831053][ T3558] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.849520][ T5835] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 96.894901][ T5844] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.921625][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.928875][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.951275][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.958520][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.012164][ T5848] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.060776][ T5848] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.120320][ T24] cfg80211: failed to load regulatory.db [ 97.131098][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.138340][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.179455][ T1150] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.186857][ T1150] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.270753][ T5845] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.360969][ T5835] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.408295][ T5845] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.442777][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.450090][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.547893][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.555147][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.682410][ T5835] veth0_vlan: entered promiscuous mode [ 97.711505][ T5845] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 97.828491][ T5835] veth1_vlan: entered promiscuous mode [ 97.881407][ T5839] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.953931][ T5844] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.031044][ T5835] veth0_macvtap: entered promiscuous mode [ 98.069106][ T5835] veth1_macvtap: entered promiscuous mode [ 98.084571][ T5851] Bluetooth: hci0: command tx timeout [ 98.120078][ T5839] veth0_vlan: entered promiscuous mode [ 98.153872][ T5848] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.162666][ T5851] Bluetooth: hci1: command tx timeout [ 98.177029][ T5839] veth1_vlan: entered promiscuous mode [ 98.206177][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.216965][ T5844] veth0_vlan: entered promiscuous mode [ 98.249682][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.271927][ T5835] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.281461][ T5835] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.290972][ T5835] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.299832][ T5835] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.315960][ T5851] Bluetooth: hci2: command tx timeout [ 98.341004][ T5845] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.351671][ T5844] veth1_vlan: entered promiscuous mode [ 98.395231][ T5851] Bluetooth: hci3: command tx timeout [ 98.400733][ T5851] Bluetooth: hci4: command tx timeout [ 98.410248][ T5839] veth0_macvtap: entered promiscuous mode [ 98.512211][ T5839] veth1_macvtap: entered promiscuous mode [ 98.570045][ T5848] veth0_vlan: entered promiscuous mode [ 98.640747][ T5844] veth0_macvtap: entered promiscuous mode [ 98.651890][ T5848] veth1_vlan: entered promiscuous mode [ 98.670760][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.722816][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.740188][ T5844] veth1_macvtap: entered promiscuous mode [ 98.772804][ T5839] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.782004][ T5839] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.791060][ T5839] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.801094][ T5839] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.823543][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.835649][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.854875][ T5848] veth0_macvtap: entered promiscuous mode [ 98.887347][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.900676][ T5848] veth1_macvtap: entered promiscuous mode [ 98.927813][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.960854][ T3528] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.963040][ T5844] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.971347][ T3528] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.989427][ T5844] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.998327][ T5844] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.007232][ T5844] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.078425][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.136964][ T5835] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 99.138105][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.189986][ T5848] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.216230][ T5848] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.227843][ T5848] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.239920][ T5848] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.259982][ T5845] veth0_vlan: entered promiscuous mode [ 99.303516][ T3528] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.308567][ T5845] veth1_vlan: entered promiscuous mode [ 99.315444][ T3528] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.366113][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.376021][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.558326][ T3528] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.567032][ T5845] veth0_macvtap: entered promiscuous mode [ 99.580162][ T5845] veth1_macvtap: entered promiscuous mode [ 99.604647][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.620495][ T3528] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.629485][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 100.204154][ T5851] Bluetooth: hci0: command tx timeout [ 100.232172][ T3528] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.240709][ T5851] Bluetooth: hci1: command tx timeout [ 100.269229][ T3528] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.318373][ T5845] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.327923][ T5845] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.338564][ T5845] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.349982][ T5845] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.395464][ T5851] Bluetooth: hci2: command tx timeout [ 100.475782][ T5851] Bluetooth: hci4: command tx timeout [ 100.481282][ T5851] Bluetooth: hci3: command tx timeout [ 100.578269][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.584962][ T5963] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4'. [ 100.610721][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.673128][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.711811][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.752611][ T3528] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.790701][ T3528] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.019690][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.040340][ T5954] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 101.062377][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.234839][ T5954] usb 3-1: Using ep0 maxpacket: 8 [ 101.275912][ T5954] usb 3-1: config 255 has too many interfaces: 254, using maximum allowed: 32 [ 101.314129][ T5954] usb 3-1: config 255 has an invalid descriptor of length 0, skipping remainder of the config [ 101.366845][ T5954] usb 3-1: config 255 has 0 interfaces, different from the descriptor's value: 254 [ 101.395881][ T5954] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 102.412350][ T5954] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.522010][ T5918] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 102.679140][ T5918] usb 2-1: Using ep0 maxpacket: 32 [ 102.729909][ T5918] usb 2-1: config 0 has an invalid interface number: 85 but max is 0 [ 102.769643][ T5918] usb 2-1: config 0 has no interface number 0 [ 102.801081][ T5918] usb 2-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 102.898770][ T5918] usb 2-1: config 0 interface 85 has no altsetting 0 [ 102.941019][ T5918] usb 2-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 102.997462][ T5918] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.035257][ T5918] usb 2-1: Product: syz [ 103.039497][ T5918] usb 2-1: Manufacturer: syz [ 103.061055][ T5918] usb 2-1: SerialNumber: syz [ 103.088298][ T5918] usb 2-1: config 0 descriptor?? [ 103.160267][ T6000] netlink: 'syz.0.12': attribute type 1 has an invalid length. [ 103.230372][ T6004] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 103.544488][ T5954] usb 3-1: string descriptor 0 read error: -71 [ 103.588235][ T5954] usb 3-1: USB disconnect, device number 2 [ 103.662636][ T6008] unknown channel width for channel at 909000KHz? [ 103.675525][ T6008] unknown channel width for channel at 909000KHz? [ 103.700638][ T6008] unknown channel width for channel at 909000KHz? [ 103.739507][ T5918] appletouch 2-1:0.85: Geyser mode initialized. [ 103.756215][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 104.059260][ T5918] input: appletouch as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.85/input/input5 [ 104.094369][ T5954] IPVS: starting estimator thread 0... [ 104.288002][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 104.345268][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 104.361701][ C1] appletouch 2-1:0.85: atp_complete: usb_submit_urb failed with result -1 [ 104.371404][ T6017] IPVS: using max 23 ests per chain, 55200 per kthread [ 104.494297][ T0] NOHZ tick-stop error: local softirq work is pending, handler #342!!! [ 104.660400][ T5918] usb 2-1: USB disconnect, device number 2 [ 104.660442][ C0] appletouch 2-1:0.85: atp_complete: usb_submit_urb failed with result -19 [ 104.774915][ T6016] netlink: 20 bytes leftover after parsing attributes in process `syz.2.18'. [ 104.784513][ T6016] netlink: 20 bytes leftover after parsing attributes in process `syz.2.18'. [ 105.118544][ T6015] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 105.155557][ T6015] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 105.211564][ T5918] appletouch 2-1:0.85: input: appletouch disconnected [ 105.213577][ T6015] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 105.271274][ T6015] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 105.294885][ T6015] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 105.343472][ T6022] binder: 6021:6022 ioctl 4c06 6 returned -22 [ 105.357791][ T6015] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 105.378238][ T6022] netlink: 12 bytes leftover after parsing attributes in process `syz.1.20'. [ 105.399438][ T6022] netlink: 12 bytes leftover after parsing attributes in process `syz.1.20'. [ 105.411580][ T6015] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 105.414610][ T0] NOHZ tick-stop error: local softirq work is pending, handler #342!!! [ 105.433017][ T6015] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 105.444871][ T6023] syz.1.20 uses obsolete (PF_INET,SOCK_PACKET) [ 105.461190][ T6023] netlink: 'syz.1.20': attribute type 10 has an invalid length. [ 105.479362][ T6015] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 105.522773][ T6023] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.536487][ T6015] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 105.549097][ T6015] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 105.556694][ T6023] bridge_slave_1: left allmulticast mode [ 105.573153][ T6023] bridge_slave_1: left promiscuous mode [ 105.716817][ T6023] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.735890][ T6023] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 105.740993][ T6015] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 105.767084][ T6015] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 105.773752][ T6015] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 106.591725][ T6015] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 106.865318][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 106.984490][ T5905] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 107.145134][ T5851] Bluetooth: hci0: command 0x0c1a tx timeout [ 107.274152][ T5851] Bluetooth: hci1: command 0x0c1a tx timeout [ 107.435508][ T5851] Bluetooth: hci2: command 0x0c1a tx timeout [ 107.633696][ T5851] Bluetooth: hci3: command 0x0c1a tx timeout [ 107.808636][ T5905] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 107.834975][ T5851] Bluetooth: hci4: command 0x0c1a tx timeout [ 107.847607][ T5905] usb 4-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 107.864512][ T5905] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 107.874755][ T5905] usb 4-1: Product: syz [ 107.878982][ T5905] usb 4-1: Manufacturer: syz [ 107.883617][ T5905] usb 4-1: SerialNumber: syz [ 107.905524][ T5905] usb 4-1: config 0 descriptor?? [ 108.005918][ T6046] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.016037][ T6047] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.28'. [ 108.174572][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 108.383729][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 108.588806][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 108.923027][ T6063] netlink: 'syz.2.32': attribute type 7 has an invalid length. [ 109.194504][ T5851] Bluetooth: hci0: command 0x0c1a tx timeout [ 109.208771][ T6063] : entered promiscuous mode [ 109.354204][ T5851] Bluetooth: hci1: command 0x0c1a tx timeout [ 109.407990][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 109.516496][ T5851] Bluetooth: hci2: command 0x0c1a tx timeout [ 109.603529][ T5904] usb 4-1: USB disconnect, device number 2 [ 109.675601][ T5851] Bluetooth: hci3: command 0x0c1a tx timeout [ 109.831076][ T6073] overlayfs: missing 'lowerdir' [ 109.917403][ T5851] Bluetooth: hci4: command 0x0c1a tx timeout [ 111.284219][ T5851] Bluetooth: hci0: command 0x0c1a tx timeout [ 111.439371][ T5851] Bluetooth: hci1: command 0x0c1a tx timeout [ 111.604201][ T5851] Bluetooth: hci2: command 0x0c1a tx timeout [ 111.842786][ T5851] Bluetooth: hci3: command 0x0c1a tx timeout [ 113.214392][ T5838] Bluetooth: hci4: command 0x0c1a tx timeout [ 113.624529][ T6082] netlink: 8 bytes leftover after parsing attributes in process `syz.2.39'. [ 113.633649][ T6082] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 115.584111][ T6104] Zero length message leads to an empty skb [ 117.901484][ T6115] FAULT_INJECTION: forcing a failure. [ 117.901484][ T6115] name failslab, interval 1, probability 0, space 0, times 1 [ 117.942490][ T6117] netlink: 180 bytes leftover after parsing attributes in process `syz.3.51'. [ 117.962768][ T6115] CPU: 1 UID: 0 PID: 6115 Comm: syz.2.50 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 117.962799][ T6115] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 117.962821][ T6115] Call Trace: [ 117.962833][ T6115] [ 117.962843][ T6115] dump_stack_lvl+0x189/0x250 [ 117.962881][ T6115] ? __pfx____ratelimit+0x10/0x10 [ 117.962906][ T6115] ? __pfx_dump_stack_lvl+0x10/0x10 [ 117.962930][ T6115] ? __pfx__printk+0x10/0x10 [ 117.962965][ T6115] ? __pfx___might_resched+0x10/0x10 [ 117.962989][ T6115] ? fs_reclaim_acquire+0x7d/0x100 [ 117.963021][ T6115] should_fail_ex+0x414/0x560 [ 117.963049][ T6115] should_failslab+0xa8/0x100 [ 117.963076][ T6115] __kmalloc_noprof+0xcb/0x4f0 [ 117.963095][ T6115] ? kfree+0x4d/0x440 [ 117.963125][ T6115] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 117.963160][ T6115] tomoyo_realpath_from_path+0xe3/0x5d0 [ 117.963191][ T6115] ? tomoyo_domain+0xda/0x130 [ 117.963227][ T6115] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 117.963250][ T6115] tomoyo_path_number_perm+0x1e8/0x5a0 [ 117.963277][ T6115] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 117.963320][ T6115] ? __lock_acquire+0xab9/0xd20 [ 117.963363][ T6115] ? __fget_files+0x2a/0x420 [ 117.963391][ T6115] ? __fget_files+0x2a/0x420 [ 117.963414][ T6115] ? __fget_files+0x3a0/0x420 [ 117.963443][ T6115] ? __fget_files+0x2a/0x420 [ 117.963472][ T6115] security_file_ioctl+0xcb/0x2d0 [ 117.963500][ T6115] __se_sys_ioctl+0x47/0x170 [ 117.963536][ T6115] do_syscall_64+0xfa/0x3b0 [ 117.963560][ T6115] ? lockdep_hardirqs_on+0x9c/0x150 [ 117.963583][ T6115] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.963605][ T6115] ? clear_bhb_loop+0x60/0xb0 [ 117.963632][ T6115] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.963653][ T6115] RIP: 0033:0x7fc5ed18ebe9 [ 117.963677][ T6115] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 117.963696][ T6115] RSP: 002b:00007fc5edf59038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 117.963719][ T6115] RAX: ffffffffffffffda RBX: 00007fc5ed3b5fa0 RCX: 00007fc5ed18ebe9 [ 117.963735][ T6115] RDX: 0000200000000380 RSI: 00000000c0845657 RDI: 0000000000000003 [ 117.963748][ T6115] RBP: 00007fc5edf59090 R08: 0000000000000000 R09: 0000000000000000 [ 117.963761][ T6115] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 117.963774][ T6115] R13: 00007fc5ed3b6038 R14: 00007fc5ed3b5fa0 R15: 00007ffff31d4d88 [ 117.963808][ T6115] [ 117.963817][ T6115] ERROR: Out of memory at tomoyo_realpath_from_path. [ 118.258798][ T6117] netlink: 8 bytes leftover after parsing attributes in process `syz.3.51'. [ 118.363184][ T6117] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 119.062794][ T6118] bond_slave_0: entered promiscuous mode [ 119.068740][ T6118] bond_slave_1: entered promiscuous mode [ 119.156018][ T6118] macvlan2: entered allmulticast mode [ 119.204217][ T6118] bond0: entered allmulticast mode [ 119.209419][ T6118] bond_slave_0: entered allmulticast mode [ 119.238810][ T6118] bond_slave_1: entered allmulticast mode [ 119.260048][ T6118] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 119.284643][ T6118] bridge0: port 3(macvlan2) entered blocking state [ 119.291379][ T6118] bridge0: port 3(macvlan2) entered disabled state [ 119.326643][ T6118] macvlan2: entered promiscuous mode [ 119.494837][ T6118] bond0: entered promiscuous mode [ 119.525527][ T6126] /dev/nullb0: Can't open blockdev [ 119.856647][ T6118] bridge0: port 3(macvlan2) entered blocking state [ 119.863281][ T6118] bridge0: port 3(macvlan2) entered forwarding state [ 120.991745][ T6118] syz.3.51 (6118) used greatest stack depth: 19776 bytes left [ 121.351897][ T30] audit: type=1326 audit(1755322006.259:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6144 comm="syz.4.59" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f264e98ebe9 code=0x7ffc0000 [ 121.420560][ T30] audit: type=1326 audit(1755322006.279:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6144 comm="syz.4.59" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f264e98ebe9 code=0x7ffc0000 [ 121.456393][ T6148] netlink: 8 bytes leftover after parsing attributes in process `syz.1.60'. [ 121.474232][ T30] audit: type=1326 audit(1755322006.279:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6144 comm="syz.4.59" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f264e98ebe9 code=0x7ffc0000 [ 121.555218][ T30] audit: type=1326 audit(1755322006.279:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6144 comm="syz.4.59" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f264e98ebe9 code=0x7ffc0000 [ 121.670429][ T30] audit: type=1326 audit(1755322006.279:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6144 comm="syz.4.59" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f264e98ebe9 code=0x7ffc0000 [ 121.781614][ T6151] xt_connbytes: Forcing CT accounting to be enabled [ 121.788680][ T6151] Cannot find set identified by id 0 to match [ 121.885319][ T30] audit: type=1326 audit(1755322006.279:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6144 comm="syz.4.59" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f264e98ebe9 code=0x7ffc0000 [ 122.078793][ T30] audit: type=1326 audit(1755322006.279:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6144 comm="syz.4.59" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f264e98ebe9 code=0x7ffc0000 [ 123.074511][ T30] audit: type=1326 audit(1755322006.279:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6144 comm="syz.4.59" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f264e98ebe9 code=0x7ffc0000 [ 123.096071][ T30] audit: type=1326 audit(1755322006.279:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6144 comm="syz.4.59" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f264e98ebe9 code=0x7ffc0000 [ 123.303473][ T30] audit: type=1326 audit(1755322006.279:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6144 comm="syz.4.59" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f264e98ebe9 code=0x7ffc0000 [ 123.568210][ T6167] Cannot find add_set index 0 as target [ 124.437308][ T6180] /dev/nullb0: Can't open blockdev [ 125.786351][ T6185] IPv6: NLM_F_CREATE should be specified when creating new route [ 126.334382][ T5904] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 126.415823][ T5975] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 126.426129][ T5905] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 126.556207][ T5904] usb 2-1: config 220 has an invalid descriptor of length 89, skipping remainder of the config [ 126.580700][ T5904] usb 2-1: config 220 has 1 interface, different from the descriptor's value: 3 [ 126.625451][ T5904] usb 2-1: config 220 interface 0 has no altsetting 0 [ 126.658514][ T5905] usb 3-1: config 0 has an invalid interface number: 117 but max is 0 [ 126.678335][ T5905] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 126.688755][ T5975] usb 1-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 126.698748][ T5975] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.707429][ T5954] kernel read not supported for file /dsp (pid: 5954 comm: kworker/0:6) [ 126.722394][ T5975] usb 1-1: Product: syz [ 126.726930][ T5975] usb 1-1: Manufacturer: syz [ 126.732153][ T5905] usb 3-1: config 0 has no interface number 0 [ 126.747060][ T5904] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 126.767400][ T5904] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.786510][ T5975] usb 1-1: SerialNumber: syz [ 126.791331][ T5905] usb 3-1: too many endpoints for config 0 interface 117 altsetting 0: 239, using maximum allowed: 30 [ 126.809110][ T5904] usb 2-1: Product: syz [ 126.813500][ T5904] usb 2-1: Manufacturer: syz [ 126.824573][ T5975] usb 1-1: config 0 descriptor?? [ 126.841316][ T5905] usb 3-1: config 0 interface 117 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 239 [ 126.863479][ T5904] usb 2-1: SerialNumber: syz [ 126.897888][ T5905] usb 3-1: New USB device found, idVendor=0742, idProduct=2009, bcdDevice=61.46 [ 126.907261][ T5905] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.915894][ T5905] usb 3-1: Product: syz [ 126.922108][ T5905] usb 3-1: Manufacturer: syz [ 126.927691][ T5905] usb 3-1: SerialNumber: syz [ 126.943178][ T5905] usb 3-1: config 0 descriptor?? [ 127.009016][ T5905] HFC-S_USB 3-1:0.117: probe with driver HFC-S_USB failed with error -5 [ 127.134743][ T5904] usb 2-1: Found UVC 7.01 device syz (8086:0b07) [ 127.149514][ T5904] usb 2-1: No valid video chain found. [ 127.166650][ T5904] usb 2-1: USB disconnect, device number 3 [ 127.213820][ T5905] usb 3-1: USB disconnect, device number 3 [ 127.276160][ T5975] usb 1-1: f81604_write: reg: 105 data: 8a failed: -EPROTO [ 127.310147][ T5975] f81604 1-1:0.0: Setting termination of CH#0 failed: -EPROTO [ 127.352984][ T5975] f81604 1-1:0.0: probe with driver f81604 failed with error -71 [ 127.969814][ T5975] usb 1-1: USB disconnect, device number 2 [ 131.004439][ T6231] netlink: 8 bytes leftover after parsing attributes in process `syz.4.83'. [ 131.582331][ T6248] capability: warning: `syz.4.88' uses deprecated v2 capabilities in a way that may be insecure [ 132.842171][ T6256] macsec1: entered allmulticast mode [ 132.847925][ T6256] macvlan1: entered allmulticast mode [ 132.853419][ T6256] veth1_vlan: entered allmulticast mode [ 132.944179][ T6243] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8) [ 132.951142][ T6243] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 133.001356][ T6243] vhci_hcd vhci_hcd.0: Device attached [ 133.087093][ T6256] macvlan1: left allmulticast mode [ 133.092396][ T6256] veth1_vlan: left allmulticast mode [ 133.185030][ T5975] vhci_hcd: vhci_device speed not set [ 133.194226][ T6255] vhci_hcd: connection closed [ 133.198783][ T13] vhci_hcd: stop threads [ 133.253256][ T13] vhci_hcd: release socket [ 133.258607][ T5975] usb 35-1: new full-speed USB device number 2 using vhci_hcd [ 133.326659][ T13] vhci_hcd: disconnect device [ 133.378337][ T6266] netlink: 12 bytes leftover after parsing attributes in process `syz.2.92'. [ 133.415494][ T6266] vlan2: entered promiscuous mode [ 133.422677][ T6266] dummy0: entered promiscuous mode [ 134.347140][ T6268] netlink: 'syz.0.93': attribute type 7 has an invalid length. [ 134.360995][ T6268] : entered promiscuous mode [ 134.819810][ T6285] netlink: 380 bytes leftover after parsing attributes in process `syz.3.99'. [ 134.870992][ T6287] netlink: 6 bytes leftover after parsing attributes in process `syz.1.96'. [ 135.097226][ T5954] IPVS: starting estimator thread 0... [ 135.194227][ T6294] IPVS: using max 28 ests per chain, 67200 per kthread [ 135.497913][ T6287] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 135.677363][ T6291] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 135.688329][ T6291] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 135.695719][ T6291] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 135.708401][ T6291] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 135.718783][ T6291] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 135.995023][ T5918] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 136.016334][ T6304] af_packet: tpacket_rcv: packet too big, clamped from 65256 to 0. macoff=72 [ 136.082491][ T6306] xt_connbytes: Forcing CT accounting to be enabled [ 136.089283][ T6306] Cannot find set identified by id 0 to match [ 136.393027][ T5918] usb 3-1: Using ep0 maxpacket: 32 [ 136.486297][ T5918] usb 3-1: config 0 interface 0 has no altsetting 0 [ 137.392578][ T6317] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 137.398847][ T6317] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 137.410281][ T6317] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 137.416338][ T6317] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 137.425385][ T6317] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 137.431365][ T6317] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 137.440739][ T6317] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 137.446849][ T6317] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 137.455585][ T6317] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 137.461544][ T6317] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 137.631835][ T5918] usb 3-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 137.647865][ T5918] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.657895][ T5918] usb 3-1: Product: syz [ 137.662176][ T5918] usb 3-1: Manufacturer: syz [ 137.666931][ T5918] usb 3-1: SerialNumber: syz [ 137.687632][ T5918] usb 3-1: config 0 descriptor?? [ 138.226322][ T6328] process 'syz.4.108' launched './file0' with NULL argv: empty string added [ 138.525817][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.539894][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 138.878433][ T5918] gs_usb 3-1:0.0: Couldn't send data format (err=-110) [ 138.934164][ T5975] vhci_hcd: vhci_device speed not set [ 138.998348][ T5918] gs_usb 3-1:0.0: probe with driver gs_usb failed with error -110 [ 139.434913][ T5918] usb 3-1: USB disconnect, device number 4 [ 139.594541][ T6338] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 139.854162][ T6341] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 139.936332][ T6341] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 140.523322][ T6355] netlink: 20 bytes leftover after parsing attributes in process `syz.4.115'. [ 140.637299][ T6355] vlan3: entered promiscuous mode [ 140.644653][ T6355] macvtap0: entered promiscuous mode [ 141.907809][ T6370] netlink: 8 bytes leftover after parsing attributes in process `syz.0.120'. [ 143.545678][ T6389] netlink: 'syz.3.123': attribute type 7 has an invalid length. [ 144.190402][ T6395] 9pnet_fd: Insufficient options for proto=fd [ 145.131781][ T6389] : entered promiscuous mode [ 146.451690][ T5925] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 146.636357][ T5925] usb 3-1: Using ep0 maxpacket: 8 [ 146.646766][ T5925] usb 3-1: unable to get BOS descriptor or descriptor too short [ 146.678239][ T5925] usb 3-1: config 1 interface 0 altsetting 8 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 146.751064][ T5925] usb 3-1: config 1 interface 0 has no altsetting 0 [ 146.811242][ T6423] netlink: 8 bytes leftover after parsing attributes in process `syz.1.130'. [ 146.822291][ T6423] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 146.842868][ T5925] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 146.907385][ T5925] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.940707][ T5925] usb 3-1: Product: syz [ 146.968292][ T6423] FAULT_INJECTION: forcing a failure. [ 146.968292][ T6423] name failslab, interval 1, probability 0, space 0, times 0 [ 146.981309][ T5925] usb 3-1: Manufacturer: syz [ 146.981336][ T5925] usb 3-1: SerialNumber: syz [ 146.997200][ T6423] CPU: 0 UID: 0 PID: 6423 Comm: syz.1.130 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 146.997228][ T6423] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 146.997240][ T6423] Call Trace: [ 146.997249][ T6423] [ 146.997258][ T6423] dump_stack_lvl+0x189/0x250 [ 146.997288][ T6423] ? lockdep_hardirqs_on+0x9c/0x150 [ 146.997313][ T6423] ? __pfx_dump_stack_lvl+0x10/0x10 [ 146.997346][ T6423] ? dump_stack+0x9/0x20 [ 146.997376][ T6423] should_fail_ex+0x414/0x560 [ 146.997404][ T6423] should_failslab+0xa8/0x100 [ 146.997430][ T6423] __kmalloc_cache_noprof+0x70/0x3d0 [ 146.997452][ T6423] ? sctp_association_new+0x89/0x25f0 [ 146.997490][ T6423] sctp_association_new+0x89/0x25f0 [ 146.997531][ T6423] ? __sanitizer_cov_trace_switch+0x5a/0x130 [ 146.997567][ T6423] sctp_connect_new_asoc+0x2c5/0x690 [ 146.997602][ T6423] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 146.997638][ T6423] ? sctp_sendmsg+0x153c/0x2810 [ 146.997666][ T6423] sctp_sendmsg+0x155c/0x2810 [ 146.997701][ T6423] ? __pfx_sctp_sendmsg+0x10/0x10 [ 146.997726][ T6423] ? irqentry_exit+0x74/0x90 [ 146.997756][ T6423] ? sock_rps_record_flow+0x19/0x410 [ 146.997785][ T6423] ? inet_sendmsg+0x2f4/0x370 [ 146.997807][ T6423] __sock_sendmsg+0x19c/0x270 [ 146.997831][ T6423] __sys_sendto+0x3bd/0x520 [ 146.997857][ T6423] ? __pfx___sys_sendto+0x10/0x10 [ 146.997903][ T6423] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 146.997941][ T6423] __x64_sys_sendto+0xde/0x100 [ 146.997968][ T6423] do_syscall_64+0xfa/0x3b0 [ 146.997989][ T6423] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 146.998005][ T6423] ? asm_sysvec_call_function_single+0x1a/0x20 [ 146.998022][ T6423] ? clear_bhb_loop+0x60/0xb0 [ 146.998042][ T6423] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 146.998058][ T6423] RIP: 0033:0x7fc07598ebe9 [ 146.998074][ T6423] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 146.998088][ T6423] RSP: 002b:00007fc073bd5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 146.998106][ T6423] RAX: ffffffffffffffda RBX: 00007fc075bb6090 RCX: 00007fc07598ebe9 [ 146.998118][ T6423] RDX: 0000000000000001 RSI: 0000200000000240 RDI: 0000000000000007 [ 146.998128][ T6423] RBP: 00007fc073bd5090 R08: 0000200000000080 R09: 000000000000001c [ 146.998139][ T6423] R10: 0000000000000051 R11: 0000000000000246 R12: 0000000000000001 [ 146.998149][ T6423] R13: 00007fc075bb6128 R14: 00007fc075bb6090 R15: 00007ffcb38575e8 [ 146.998175][ T6423] [ 149.167869][ T5925] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -71 [ 149.254956][ T5925] usb 3-1: USB disconnect, device number 5 [ 150.767584][ T6470] vlan2: entered promiscuous mode [ 150.772699][ T6470] geneve0: entered promiscuous mode [ 151.647051][ T5975] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 151.970207][ T5954] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 151.994203][ T5975] usb 3-1: Using ep0 maxpacket: 8 [ 151.999989][ T6488] netlink: 8 bytes leftover after parsing attributes in process `syz.0.145'. [ 152.041619][ T5975] usb 3-1: unable to get BOS descriptor or descriptor too short [ 152.067091][ T6488] netlink: 8 bytes leftover after parsing attributes in process `syz.0.145'. [ 152.162032][ T5975] usb 3-1: config 4 has an invalid interface number: 255 but max is 0 [ 152.258107][ T5954] usb 4-1: Using ep0 maxpacket: 32 [ 152.268612][ T6488] netlink: 8 bytes leftover after parsing attributes in process `syz.0.145'. [ 152.284779][ T5975] usb 3-1: config 4 has no interface number 0 [ 152.290942][ T5975] usb 3-1: config 4 interface 255 has no altsetting 0 [ 152.305572][ T6492] netlink: 8 bytes leftover after parsing attributes in process `syz.0.145'. [ 152.326056][ T6492] netlink: 8 bytes leftover after parsing attributes in process `syz.0.145'. [ 152.328586][ T5954] usb 4-1: unable to get BOS descriptor or descriptor too short [ 152.357655][ T5954] usb 4-1: config 128 has an invalid interface number: 127 but max is 3 [ 152.368751][ T5975] usb 3-1: New USB device found, idVendor=a257, idProduct=2013, bcdDevice= e.87 [ 152.384673][ T5954] usb 4-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 152.395313][ T5975] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.413591][ T5975] usb 3-1: Product: syz [ 152.423190][ T5954] usb 4-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 152.438813][ T5975] usb 3-1: Manufacturer: syz [ 152.447859][ T5954] usb 4-1: config 128 has no interface number 0 [ 152.454517][ T5975] usb 3-1: SerialNumber: syz [ 152.468336][ T5954] usb 4-1: config 128 interface 127 has no altsetting 0 [ 152.491051][ T5954] usb 4-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 152.504196][ T5954] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.514583][ T5954] usb 4-1: Product: syz [ 152.520677][ T5954] usb 4-1: Manufacturer: syz [ 152.550196][ T5954] usb 4-1: SerialNumber: syz [ 152.717791][ T5975] usb 3-1: USB disconnect, device number 6 [ 153.144324][ T5954] usb 4-1: USB disconnect, device number 3 [ 154.237718][ T5889] udevd[5889]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:128.127/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 154.264342][ T6498] DRBG: could not allocate digest TFM handle: hmac(sha512) [ 158.364683][ T5925] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 159.338737][ T5925] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 159.355429][ T5925] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 159.367302][ T5925] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 159.401885][ T5925] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.873255][ T5925] usb 3-1: config 0 descriptor?? [ 160.478521][ T6580] netlink: 'syz.3.165': attribute type 7 has an invalid length. [ 160.987891][ T5925] cp2112 0003:10C4:EA90.0001: unknown main item tag 0x0 [ 161.075802][ T5925] cp2112 0003:10C4:EA90.0001: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.2-1/input0 [ 161.276227][ T5925] cp2112 0003:10C4:EA90.0001: Part Number: 0x82 Device Version: 0xFE [ 162.210510][ T6592] netlink: 24 bytes leftover after parsing attributes in process `syz.0.167'. [ 162.271324][ T5925] cp2112 0003:10C4:EA90.0001: error setting SMBus config [ 162.339762][ T5925] cp2112 0003:10C4:EA90.0001: probe with driver cp2112 failed with error -71 [ 162.426930][ T5925] usb 3-1: USB disconnect, device number 7 [ 163.071746][ T6591] fido_id[6591]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 164.388194][ T5829] IPVS: starting estimator thread 0... [ 164.524719][ T6618] IPVS: using max 23 ests per chain, 55200 per kthread [ 167.246545][ T6634] netlink: 12 bytes leftover after parsing attributes in process `syz.1.176'. [ 167.264721][ T6637] netlink: 20 bytes leftover after parsing attributes in process `syz.0.178'. [ 167.847960][ T6644] SET target dimension over the limit! [ 168.607476][ T30] kauditd_printk_skb: 24 callbacks suppressed [ 168.607499][ T30] audit: type=1326 audit(1755322053.059:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6647 comm="syz.3.180" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7efcb318ebe9 code=0x7ffe0000 [ 169.361621][ T6435] udevd[6435]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 169.394224][ T5905] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 169.410724][ T5889] udevd[5889]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 169.476209][ T5954] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 169.637279][ T5905] usb 1-1: config index 0 descriptor too short (expected 36, got 9) [ 169.655963][ T5905] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 169.675187][ T5905] usb 1-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00 [ 169.722588][ T5954] usb 2-1: config 0 has an invalid interface number: 117 but max is 0 [ 170.449543][ T5905] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.515965][ T5954] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 170.561090][ T5905] usb 1-1: config 0 descriptor?? [ 170.597516][ T5954] usb 2-1: config 0 has no interface number 0 [ 170.825886][ T5954] usb 2-1: too many endpoints for config 0 interface 117 altsetting 0: 239, using maximum allowed: 30 [ 171.046141][ T5954] usb 2-1: config 0 interface 117 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 239 [ 171.123546][ T5905] usb 1-1: USB disconnect, device number 3 [ 171.155761][ T5954] usb 2-1: New USB device found, idVendor=0742, idProduct=2009, bcdDevice=61.46 [ 171.181613][ T5954] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.208241][ T5954] usb 2-1: Product: syz [ 171.222828][ T5954] usb 2-1: Manufacturer: syz [ 171.243107][ T5954] usb 2-1: SerialNumber: syz [ 171.297213][ T5954] usb 2-1: config 0 descriptor?? [ 171.317612][ T5954] HFC-S_USB 2-1:0.117: probe with driver HFC-S_USB failed with error -5 [ 171.692376][ T5918] usb 2-1: USB disconnect, device number 4 [ 173.139530][ T6682] overlayfs: missing 'lowerdir' [ 173.259143][ T6682] Mount JFS Failure: -22 [ 177.834906][ T6723] netlink: 12 bytes leftover after parsing attributes in process `syz.4.199'. [ 177.896433][ T6726] IPVS: length: 162 != 24 [ 177.958717][ T6736] netlink: 'syz.1.201': attribute type 11 has an invalid length. [ 178.021398][ T6739] netlink: 28 bytes leftover after parsing attributes in process `syz.4.199'. [ 179.231482][ T6729] bond1: (slave veth3): Enslaving as an active interface with an up link [ 179.494405][ T30] audit: type=1800 audit(1755322064.399:37): pid=6750 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.1.204" name="SYSV798dd818" dev="tmpfs" ino=0 res=0 errno=0 [ 179.612894][ T6739] 8021q: adding VLAN 0 to HW filter on device bond1 [ 179.901324][ T6752] vlan3: entered promiscuous mode [ 179.933335][ T6752] vlan3: entered allmulticast mode [ 179.981448][ T6752] hsr_slave_1: entered allmulticast mode [ 180.018737][ T6752] netlink: 4 bytes leftover after parsing attributes in process `syz.2.205'. [ 183.704592][ T6781] xt_CT: No such helper "netbios-ns" [ 188.985910][ T6841] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 189.064477][ T6841] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 190.194421][ T6845] overlayfs: statfs failed on './file0' [ 190.787806][ T6866] vlan2: entered promiscuous mode [ 190.792979][ T6866] syz_tun: entered promiscuous mode [ 191.691548][ T6870] netlink: 6 bytes leftover after parsing attributes in process `syz.1.229'. [ 191.790781][ T6870] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 191.907880][ T6869] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1113132006 (1113132006 ns) > initial count (497682314 ns). Using initial count to start timer. [ 191.973854][ T6874] nvme_fabrics: unknown parameter or missing value 'ó' in ctrl creation request [ 193.120331][ T6892] overlayfs: missing 'lowerdir' [ 193.521719][ T6893] Mount JFS Failure: -22 [ 195.461596][ T6902] netlink: 20 bytes leftover after parsing attributes in process `syz.2.239'. [ 197.147030][ T6916] xt_CT: No such helper "netbios-ns" [ 197.384130][ T5954] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 197.586900][ T6929] netlink: 20 bytes leftover after parsing attributes in process `syz.2.246'. [ 197.664378][ T6928] warning: `syz.2.246' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 197.704913][ T5954] usb 2-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 197.724218][ T5954] usb 2-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 197.754192][ T5954] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 197.797505][ T5954] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 197.945190][ T6926] tipc: Started in network mode [ 197.950291][ T6926] tipc: Node identity 8acdedf1819, cluster identity 4711 [ 197.959171][ T6926] tipc: Enabled bearer , priority 0 [ 198.008847][ T6926] syzkaller0: entered promiscuous mode [ 198.094314][ T6926] syzkaller0: entered allmulticast mode [ 198.195162][ T6925] tipc: Resetting bearer [ 199.068468][ T6925] tipc: Disabling bearer [ 199.075714][ T5905] tipc: Node number set to 190705137 [ 199.082810][ T5954] gspca_stv0680: usb_control_msg error 0, request = 0x88, error = -32 [ 199.162924][ T5954] stv0680 2-1:4.0: STV(e): camera ping failed!! [ 199.362601][ T6951] netlink: 16 bytes leftover after parsing attributes in process `syz.4.248'. [ 199.527654][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.535470][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 199.767299][ T5954] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -110 [ 199.794404][ T5954] stv0680 2-1:4.0: last error: 0, command = 0x0 [ 200.132042][ T6955] netlink: 36 bytes leftover after parsing attributes in process `syz.0.249'. [ 200.294511][ T5954] usb 2-1: USB disconnect, device number 5 [ 200.517070][ T6960] netlink: 8 bytes leftover after parsing attributes in process `syz.2.250'. [ 200.526403][ T6960] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 200.830378][ T6967] netlink: 8 bytes leftover after parsing attributes in process `syz.2.254'. [ 201.053873][ T6976] overlayfs: missing 'lowerdir' [ 201.379988][ T6967] nbd: socks must be embedded in a SOCK_ITEM attr [ 204.260231][ T6435] udevd[6435]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 204.843370][ T5889] udevd[5889]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 205.523306][ T7014] sctp: [Deprecated]: syz.4.260 (pid 7014) Use of int in maxseg socket option. [ 205.523306][ T7014] Use struct sctp_assoc_value instead [ 206.116111][ T7013] mmap: syz.0.261 (7013) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 206.569684][ T6215] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 206.885209][ T7029] netlink: 4 bytes leftover after parsing attributes in process `syz.2.265'. [ 206.942064][ T5905] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 206.957396][ T7038] overlayfs: missing 'lowerdir' [ 212.826828][ T12] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 213.162624][ T7064] netlink: 'syz.2.270': attribute type 5 has an invalid length. [ 217.362001][ T7118] overlayfs: missing 'lowerdir' [ 218.869850][ T6388] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 219.535746][ T7147] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 219.647242][ T7147] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 220.010635][ T5954] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 221.035711][ T7158] hub 8-0:1.0: USB hub found [ 221.041818][ T7158] hub 8-0:1.0: 1 port detected [ 221.167455][ T5925] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 221.324846][ T5925] usb 2-1: Using ep0 maxpacket: 16 [ 221.340546][ T5925] usb 2-1: config 0 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 221.389789][ T5925] usb 2-1: config 0 interface 0 has no altsetting 0 [ 221.444611][ T5925] usb 2-1: New USB device found, idVendor=172f, idProduct=0034, bcdDevice= 0.00 [ 221.490579][ T5925] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 221.709596][ T5925] usb 2-1: config 0 descriptor?? [ 222.499951][ T7174] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 222.548781][ T7174] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 222.609172][ T7174] IPv6: NLM_F_CREATE should be specified when creating new route [ 223.909480][ T7177] batadv0: entered promiscuous mode [ 223.942870][ T7177] batadv0: left promiscuous mode [ 224.486966][ T13] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 224.583377][ T7196] No such timeout policy "syz0" [ 225.455842][ T3420] usb 4-1: new low-speed USB device number 4 using dummy_hcd [ 226.063433][ T5925] usbhid 2-1:0.0: can't add hid device: -71 [ 226.078064][ T5925] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 226.086452][ T3420] usb 4-1: device descriptor read/64, error -71 [ 226.102488][ T5925] usb 2-1: USB disconnect, device number 7 [ 226.378613][ T3420] usb 4-1: new low-speed USB device number 5 using dummy_hcd [ 226.673827][ T3420] usb 4-1: device descriptor read/64, error -71 [ 226.796829][ T3420] usb usb4-port1: attempt power cycle [ 227.755622][ T3420] usb 4-1: new low-speed USB device number 6 using dummy_hcd [ 228.411949][ T3420] usb 4-1: device descriptor read/8, error -71 [ 230.924442][ T6452] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 235.004688][ T3420] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 235.244224][ T3420] usb 1-1: Using ep0 maxpacket: 32 [ 235.274958][ T3420] usb 1-1: too many configurations: 17, using maximum allowed: 8 [ 235.307966][ T3420] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 235.321829][ T3420] usb 1-1: config 0 has no interface number 0 [ 235.341834][ T3420] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 235.368376][ T5954] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 235.385521][ T3420] usb 1-1: config 0 has no interface number 0 [ 235.409088][ T3420] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 235.440802][ T3420] usb 1-1: config 0 has no interface number 0 [ 235.499107][ T3420] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 235.529452][ T3420] usb 1-1: config 0 has no interface number 0 [ 235.555776][ T3420] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 235.582918][ T3420] usb 1-1: config 0 has no interface number 0 [ 235.587125][ T7305] input: syz0 as /devices/virtual/input/input13 [ 235.611049][ T3420] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 235.641757][ T3420] usb 1-1: config 0 has no interface number 0 [ 235.675847][ T3420] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 235.727671][ T3420] usb 1-1: config 0 has no interface number 0 [ 235.761054][ T3420] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 235.775840][ T3420] usb 1-1: config 0 has no interface number 0 [ 235.798158][ T3420] usb 1-1: New USB device found, idVendor=108c, idProduct=0168, bcdDevice=84.b2 [ 235.811113][ T3420] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 235.841607][ T3420] usb 1-1: Product: syz [ 235.860691][ T3420] usb 1-1: Manufacturer: syz [ 235.877883][ T3420] usb 1-1: SerialNumber: syz [ 235.912403][ T3420] usb 1-1: config 0 descriptor?? [ 235.924988][ T3420] etas_es58x 1-1:0.2: Starting syz syz (Serial Number syz) [ 236.005684][ T5954] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 236.572402][ T5954] usb 2-1: Using ep0 maxpacket: 32 [ 236.579042][ T3420] etas_es58x 1-1:0.2: could not retrieve the product info string [ 236.611856][ T5954] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 236.656943][ T5954] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 236.728235][ T5954] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 236.740766][ T3420] usb 1-1: USB disconnect, device number 4 [ 236.758747][ T5954] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 236.770135][ T5954] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 236.812508][ T3420] etas_es58x 1-1:0.2: Disconnecting syz syz [ 236.819399][ T5954] usb 2-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 236.869566][ T5954] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 236.906160][ T5954] usb 2-1: Product: syz [ 236.933498][ T5954] usb 2-1: Manufacturer: syz [ 236.964822][ T5954] usb 2-1: SerialNumber: syz [ 237.038082][ T5954] usb 2-1: config 0 descriptor?? [ 237.257217][ T5954] iforce 2-1:0.0: usb_submit_urb failed: -32 [ 237.284892][ T6452] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 237.511788][ T5954] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 237.543381][ T5954] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 237.563243][ T5954] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 237.588873][ T5954] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 237.614183][ T5954] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 237.639173][ T5954] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 237.679607][ T5954] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 237.724426][ T5954] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 237.754994][ T5954] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 237.794220][ T5954] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 237.813148][ T5954] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 237.829260][ T5954] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 237.886762][ T5954] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 237.905912][ T5954] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 237.968668][ T5954] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 237.974137][ T3420] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 237.987597][ T5954] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 237.997454][ T5954] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 238.144244][ T3420] usb 1-1: Using ep0 maxpacket: 16 [ 238.500130][ T5954] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 238.515330][ T5954] input input14: Timeout waiting for response from device. [ 238.533195][ T5954] usb 2-1: USB disconnect, device number 8 [ 238.562869][ T3420] usb 1-1: unable to get BOS descriptor or descriptor too short [ 238.641678][ T3420] usb 1-1: config 0 has no interfaces? [ 238.675902][ T3420] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 238.704744][ T3420] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 238.754506][ T3420] usb 1-1: Product: syz [ 238.758732][ T3420] usb 1-1: Manufacturer: syz [ 238.791460][ T3420] usb 1-1: SerialNumber: syz [ 238.945555][ T7351] pim6reg1: entered promiscuous mode [ 238.950928][ T7351] pim6reg1: entered allmulticast mode [ 239.036324][ T3420] usb 1-1: config 0 descriptor?? [ 239.130553][ T7356] Bluetooth: MGMT ver 1.23 [ 239.873553][ T7336] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 239.904987][ T7336] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 239.956738][ T3420] usb 1-1: USB disconnect, device number 5 [ 241.337636][ T7371] netlink: 32 bytes leftover after parsing attributes in process `syz.1.347'. [ 243.356620][ T1166] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 246.178606][ T7429] bridge_slave_1: entered promiscuous mode [ 246.532317][ T7425] binder: BINDER_SET_CONTEXT_MGR already set [ 246.571020][ T7425] binder: 7424:7425 ioctl 4018620d 200000000040 returned -16 [ 246.603262][ T7425] binder: 7424:7425 ioctl c018620c 200000000280 returned -1 [ 246.964852][ T7437] netlink: 8 bytes leftover after parsing attributes in process `syz.4.367'. [ 248.961429][ T5905] usb 4-1: new low-speed USB device number 8 using dummy_hcd [ 249.040737][ T1166] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 249.174379][ T5905] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 249.224662][ T5905] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 249.264109][ T5905] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 8 [ 249.324092][ T5905] usb 4-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 249.377969][ T5905] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 249.423644][ T7458] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 249.481162][ T5905] hub 4-1:1.0: bad descriptor, ignoring hub [ 249.519405][ T5905] hub 4-1:1.0: probe with driver hub failed with error -5 [ 249.558120][ T5905] cdc_wdm 4-1:1.0: skipping garbage [ 249.584086][ T5905] cdc_wdm 4-1:1.0: skipping garbage [ 249.594278][ T5925] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 249.615412][ T5905] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 249.650657][ T5905] cdc_wdm 4-1:1.0: Unknown control protocol [ 249.668755][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 249.675589][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 249.682983][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 249.689654][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 249.697693][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 249.704357][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 249.714891][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 249.721570][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 249.729251][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 249.735917][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 249.742352][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 249.747794][ T7489] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 249.748983][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 249.749314][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 249.770668][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 249.777892][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 249.784548][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 249.790889][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 249.797542][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 249.804630][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 249.808902][ T5925] usb 5-1: config index 0 descriptor too short (expected 23569, got 27) [ 249.811255][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 249.833363][ T7458] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 249.857193][ T7489] overlayfs: missing 'lowerdir' [ 249.878498][ T7458] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 249.914116][ T5925] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 249.975555][ T5925] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 250.015803][ T5925] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 250.026772][ T5925] usb 5-1: Manufacturer: syz [ 250.029673][ T7492] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 250.055249][ T5925] usb 5-1: config 0 descriptor?? [ 250.081078][ T3420] usb 4-1: USB disconnect, device number 8 [ 250.304060][ T5925] rc_core: IR keymap rc-hauppauge not found [ 250.318487][ T5925] Registered IR keymap rc-empty [ 250.335393][ T5925] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 250.348707][ T5925] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input15 [ 250.374507][ C1] igorplugusb 5-1:0.0: Error: urb status = -32 [ 250.433111][ T5925] usb 5-1: USB disconnect, device number 2 [ 250.716655][ T5954] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 250.735063][ T1166] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 251.024243][ T5905] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 251.204183][ T5905] usb 4-1: Using ep0 maxpacket: 32 [ 251.221864][ T5905] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 251.245632][ T5905] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 251.294990][ T5905] usb 4-1: config 0 descriptor?? [ 251.653587][ T5905] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 251.692512][ T5905] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 251.767196][ T5905] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 251.784594][ T5905] usb 4-1: media controller created [ 252.139755][ T5905] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 252.453802][ T5905] az6027: usb out operation failed. (-71) [ 252.487987][ T5905] stb0899_attach: Driver disabled by Kconfig [ 252.505259][ T5905] az6027: no front-end attached [ 252.505259][ T5905] [ 252.553112][ T5905] az6027: usb out operation failed. (-71) [ 252.571532][ T5905] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 252.610710][ T5905] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input16 [ 252.691915][ T5905] dvb-usb: schedule remote query interval to 400 msecs. [ 252.745910][ T5905] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 252.783408][ T7562] Bluetooth: hci0: unsupported parameter 542 [ 252.804084][ T5954] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 252.818216][ T5905] usb 4-1: USB disconnect, device number 9 [ 252.828918][ T7562] Bluetooth: hci0: unsupported parameter 32768 [ 252.864307][ T7562] Bluetooth: hci0: unsupported parameter 542 [ 252.904226][ T7562] Bluetooth: hci0: unsupported parameter 32768 [ 253.004499][ T5954] usb 3-1: Using ep0 maxpacket: 32 [ 253.025200][ T5905] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 253.033898][ T5954] usb 3-1: config 0 has an invalid interface number: 225 but max is 0 [ 253.077921][ T5954] usb 3-1: config 0 has no interface number 0 [ 253.110770][ T5954] usb 3-1: New USB device found, idVendor=0856, idProduct=ac30, bcdDevice=7e.79 [ 253.159474][ T5954] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 253.194238][ T5954] usb 3-1: Product: syz [ 253.198482][ T5954] usb 3-1: Manufacturer: syz [ 253.203110][ T5954] usb 3-1: SerialNumber: syz [ 253.355960][ T7577] netlink: 4 bytes leftover after parsing attributes in process `syz.4.408'. [ 253.438780][ T5954] usb 3-1: config 0 descriptor?? [ 253.494366][ T5829] usb 2-1: new full-speed USB device number 9 using dummy_hcd [ 253.944272][ T5954] mos7840 3-1:0.225: required endpoints missing [ 253.951984][ T5829] usb 2-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 253.986703][ T5829] usb 2-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 254.004427][ T5954] usb 3-1: USB disconnect, device number 8 [ 254.007319][ T5829] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 254.059000][ T5829] usb 2-1: Product: syz [ 254.094071][ T5829] usb 2-1: Manufacturer: syz [ 254.099998][ T5829] usb 2-1: SerialNumber: syz [ 254.178999][ T5829] usb 2-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 254.571111][ T12] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 254.692846][ T7593] binder_alloc: 7592: binder_alloc_buf size 12280 failed, no address space [ 254.732319][ T7593] binder_alloc: allocated: 8 (num: 1 largest: 8), free: 8184 (num: 1 largest: 8184) [ 255.121012][ T5829] usb 2-1: dvb_usb_v2: this USB2.0 device cannot be run on a USB1.1 port (it lacks a hardware PID filter) [ 255.653015][ T7602] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 255.676108][ T7602] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 255.687763][ T7602] bond0 (unregistering): Released all slaves [ 256.888923][ T3558] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 257.063693][ T5905] usb 2-1: USB disconnect, device number 9 [ 258.234505][ T7631] Driver unsupported XDP return value 0 on prog (id 99) dev N/A, expect packet loss! [ 259.597779][ T7658] netlink: 104 bytes leftover after parsing attributes in process `syz.2.430'. [ 259.616007][ T5829] usb 4-1: new full-speed USB device number 10 using dummy_hcd [ 260.319550][ T6215] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 260.380802][ T5829] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 4 [ 260.424765][ T5829] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 260.484935][ T5829] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 260.524130][ T5829] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 260.555901][ T5829] usb 4-1: Product: syz [ 260.560119][ T5829] usb 4-1: Manufacturer: syz [ 260.582790][ T7663] syz_tun: entered allmulticast mode [ 260.608391][ T5829] usb 4-1: SerialNumber: syz [ 260.639897][ T7663] BUG: assuming non migratable context at ./include/linux/filter.h:703 [ 260.685759][ T7663] in_atomic(): 0, irqs_disabled(): 0, migration_disabled() 0 pid: 7663, name: syz.4.436 [ 260.709817][ T7663] 3 locks held by syz.4.436/7663: [ 260.740704][ T7663] #0: ffffffff8f509f08 (rtnl_mutex){+.+.}-{4:4}, at: ip_mroute_setsockopt+0x107/0xf60 [ 260.764146][ T7663] #1: ffffffff8e13f0e0 (rcu_read_lock){....}-{1:3}, at: ipmr_mfc_add+0x11b/0x2850 [ 260.778924][ T7663] #2: ffffffff8e13f0e0 (rcu_read_lock){....}-{1:3}, at: nf_hook+0x9d/0x380 [ 260.791688][ T7663] CPU: 1 UID: 0 PID: 7663 Comm: syz.4.436 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 260.791718][ T7663] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 260.791736][ T7663] Call Trace: [ 260.791745][ T7663] [ 260.791756][ T7663] dump_stack_lvl+0x189/0x250 [ 260.791791][ T7663] ? __pfx_dump_stack_lvl+0x10/0x10 [ 260.791824][ T7663] ? print_lock_name+0xde/0x100 [ 260.791860][ T7663] __cant_migrate+0x238/0x2e0 [ 260.791889][ T7663] ? __pfx___cant_migrate+0x10/0x10 [ 260.791931][ T7663] nf_hook_run_bpf+0x8f/0x1f0 [ 260.791954][ T7663] ? __pfx_ipt_do_table+0x10/0x10 [ 260.791985][ T7663] ? __pfx_nf_hook_run_bpf+0x10/0x10 [ 260.792007][ T7663] ? iptable_mangle_hook+0x189/0x4c0 [ 260.792042][ T7663] ? nf_hook+0x9d/0x380 [ 260.792059][ T7663] ? nf_nat_ipv4_out+0x2f7/0x4e0 [ 260.792086][ T7663] ? __pfx_nf_hook_run_bpf+0x10/0x10 [ 260.792109][ T7663] nf_hook_slow+0xc5/0x220 [ 260.792146][ T7663] nf_hook+0x217/0x380 [ 260.792171][ T7663] ? nf_hook+0x9d/0x380 [ 260.792191][ T7663] ? __pfx_nf_hook+0x10/0x10 [ 260.792215][ T7663] ? __pfx_ip_mc_finish_output+0x10/0x10 [ 260.792246][ T7663] ? skb_clone+0x246/0x3a0 [ 260.792272][ T7663] ip_mc_output+0x22d/0x590 [ 260.792292][ T7663] ? __pfx_ip_mc_finish_output+0x10/0x10 [ 260.792328][ T7663] ? ipmr_queue_xmit+0x1460/0x16f0 [ 260.792350][ T7663] ipmr_queue_xmit+0xf12/0x16f0 [ 260.792393][ T7663] ? __pfx_ipmr_queue_xmit+0x10/0x10 [ 260.792420][ T7663] ? __pfx_ipmr_forward_finish+0x10/0x10 [ 260.792471][ T7663] ipmr_mfc_add+0x1f63/0x2850 [ 260.792516][ T7663] ? ipmr_mfc_add+0x11b/0x2850 [ 260.792558][ T7663] ? __pfx_ipmr_mfc_add+0x10/0x10 [ 260.792590][ T7663] ? __might_fault+0xb0/0x130 [ 260.792645][ T7663] ip_mroute_setsockopt+0xcf1/0xf60 [ 260.792692][ T7663] ? __pfx_ip_mroute_setsockopt+0x10/0x10 [ 260.792725][ T7663] ? wake_up_q+0xca/0x110 [ 260.792775][ T7663] do_ip_setsockopt+0xf11/0x2d00 [ 260.792812][ T7663] ? __pfx_do_ip_setsockopt+0x10/0x10 [ 260.792864][ T7663] ? __fget_files+0x2a/0x420 [ 260.792895][ T7663] ip_setsockopt+0x66/0x110 [ 260.792922][ T7663] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 260.792955][ T7663] do_sock_setsockopt+0x179/0x1b0 [ 260.792996][ T7663] __x64_sys_setsockopt+0x13f/0x1b0 [ 260.793037][ T7663] do_syscall_64+0xfa/0x3b0 [ 260.793062][ T7663] ? lockdep_hardirqs_on+0x9c/0x150 [ 260.793086][ T7663] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 260.793109][ T7663] ? clear_bhb_loop+0x60/0xb0 [ 260.793137][ T7663] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 260.793159][ T7663] RIP: 0033:0x7f264e98ebe9 [ 260.793190][ T7663] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 260.793210][ T7663] RSP: 002b:00007f264f871038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 260.793234][ T7663] RAX: ffffffffffffffda RBX: 00007f264ebb5fa0 RCX: 00007f264e98ebe9 [ 260.793251][ T7663] RDX: 00000000000000d2 RSI: 0000000000000000 RDI: 000000000000000b [ 260.793264][ T7663] RBP: 00007f264ea11e19 R08: 000000000000003c R09: 0000000000000000 [ 260.793278][ T7663] R10: 00002000000000c0 R11: 0000000000000246 R12: 0000000000000000 [ 260.793293][ T7663] R13: 00007f264ebb6038 R14: 00007f264ebb5fa0 R15: 00007ffcbce89c78 [ 260.793337][ T7663] [ 261.112261][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 261.118728][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 261.280472][ T7662] syz_tun: left allmulticast mode [ 261.290796][ T5829] usb 4-1: 2:1 : unknown format tag 0x3 is detected. processed as MPEG. [ 261.300820][ T5829] usb 4-1: found format II with max.bitrate = 3, frame size=7 [ 261.308764][ T5829] usb 4-1: 2:1 : unknown format tag 0x3 is detected. processed as MPEG. [ 261.317389][ T5829] usb 4-1: found format II with max.bitrate = 3, frame size=7 [ 261.402182][ T5829] usb 4-1: USB disconnect, device number 10 [ 261.885696][ T7468] udevd[7468]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 262.244805][ T6452] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 265.514706][ T6452] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 267.994958][ T6388] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration