last executing test programs: 8m15.310601428s ago: executing program 4 (id=5): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="02000000040000"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x11, 0xc, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000010000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) 8m8.357142022s ago: executing program 4 (id=27): accept4$phonet_pipe(0xffffffffffffffff, 0x0, 0x0, 0x800) bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={0x0, r0, 0x0, 0xfffffffffffffffc}, 0x18) r1 = socket(0x1e, 0x4, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r2) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000003040)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_TP_METER(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000003100)={&(0x7f00000001c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002bbd7000fbdbdf25020000000a000900aaaaaaaaaa44000008000300", @ANYRES32=r4], 0x30}, 0x1, 0x0, 0x0, 0x20000050}, 0x20040084) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x2c, r3, 0x8, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x44000}, 0x14) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x14, 0x0, 0x5, 0x801, 0x0, 0x0, {0x5, 0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x20044800}, 0x4010) r6 = socket(0x1e, 0x4, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r8 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r8, 0x201, 0x400000, 0x0, {{}, {}, {0x8, 0x11, 0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x0) setsockopt$packet_tx_ring(r6, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) 8m6.497025672s ago: executing program 4 (id=31): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) ioctl$TCSETS(r0, 0x40045431, 0x0) r1 = syz_open_pts(r0, 0x80) r2 = dup3(r1, r0, 0x80000) read$watch_queue(r2, &(0x7f0000001d40)=""/4095, 0xfff) 8m6.237379128s ago: executing program 4 (id=34): socket$netlink(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020047b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000020000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000006c0)='kfree\x00', r2}, 0x18) socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000dd0000000000003b810000850000006d000000a50000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='kfree\x00', r3}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYRESOCT=r3, @ANYRES64=r4], &(0x7f0000000240)='GPL\x00', 0xfffffffc, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) set_mempolicy(0x3, &(0x7f0000000000)=0x3, 0x80000000) mlockall(0x2) r5 = shmget$private(0x0, 0x400000, 0x8, &(0x7f000000e000/0x400000)=nil) shmctl$SHM_LOCK(r5, 0xb) shmat(r5, &(0x7f0000ffd000/0x1000)=nil, 0x7000) shmctl$SHM_UNLOCK(r5, 0xc) r6 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r6, &(0x7f0000000080)={0xa, 0x0, 0x3, 0x1, 0xfe}, 0x8) 7m51.125502241s ago: executing program 32 (id=34): socket$netlink(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020047b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000020000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000006c0)='kfree\x00', r2}, 0x18) socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000dd0000000000003b810000850000006d000000a50000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='kfree\x00', r3}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYRESOCT=r3, @ANYRES64=r4], &(0x7f0000000240)='GPL\x00', 0xfffffffc, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) set_mempolicy(0x3, &(0x7f0000000000)=0x3, 0x80000000) mlockall(0x2) r5 = shmget$private(0x0, 0x400000, 0x8, &(0x7f000000e000/0x400000)=nil) shmctl$SHM_LOCK(r5, 0xb) shmat(r5, &(0x7f0000ffd000/0x1000)=nil, 0x7000) shmctl$SHM_UNLOCK(r5, 0xc) r6 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r6, &(0x7f0000000080)={0xa, 0x0, 0x3, 0x1, 0xfe}, 0x8) 58.891510594s ago: executing program 1 (id=1505): prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x2, 0x0, 0x0, 0x7ffc0002}]}) r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f0000000200)={0x18, 0x2, {0xfeff, @local}}, 0x1e) connect$pptp(r0, &(0x7f0000000700)={0x18, 0x2, {0x0, @multicast1}}, 0x1e) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/237) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000080)="11d82a6ecc81", 0x6}, {0x0}, {0x0}], 0x3) 58.660466647s ago: executing program 1 (id=1509): socket$packet(0x11, 0x2, 0x300) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) pread64(0xffffffffffffffff, &(0x7f0000033240)=""/102400, 0x19000, 0x100008) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x48c00, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet_sctp(0x2, 0x5, 0x84) readv(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) 55.678093738s ago: executing program 1 (id=1517): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffffffd, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xfff1}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x2c00c884}, 0x20048050) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000027c0)=@newtfilter={0x8b0, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0x5, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x87c, 0x2, [@TCA_MATCHALL_ACT={0x878, 0x2, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x1ff, 0x3, 0x10000, 0x81, 0x7f, 0x5, 0x4, 0x2, 0x4, 0x5, 0x2234, 0x83, 0x81b, 0x800, 0x8, 0x0, 0x3, 0x7ed53619, 0x1, 0x2, 0x9644, 0x800004, 0x58b, 0x85a, 0x3ff, 0x46, 0x2, 0x1, 0x0, 0x80000000, 0x10001, 0x790, 0x5, 0x1, 0xfffffff9, 0x1a77, 0x9, 0x3, 0x400, 0x63c, 0x4, 0xffffffff, 0x1, 0x3, 0x1, 0x5b1f, 0x7b0, 0x7, 0x100, 0x6, 0xd, 0xff, 0x3, 0x10000, 0x6, 0x6b7, 0x1ff, 0x80, 0x4, 0x7, 0x3, 0xa14, 0x3, 0x2, 0x80000000, 0x81, 0x7, 0x8, 0x5, 0x10001, 0xf7, 0x3, 0xfffffff9, 0x9, 0x4, 0x8, 0xfff, 0x3, 0xfffffffd, 0x6, 0x7, 0x8, 0x100, 0xc0000000, 0x6, 0x6, 0x6, 0x8, 0x80000001, 0x8, 0x1d24, 0x2, 0x7, 0x0, 0x7f, 0x7, 0x9, 0xff, 0x24, 0x5, 0x7, 0x6, 0x10007a, 0x8, 0x0, 0x7, 0x470, 0x7f, 0x6, 0x0, 0x1, 0x0, 0x4, 0x10009, 0x61, 0x200, 0x6, 0x2, 0x2, 0x6, 0x10001, 0x8, 0x7, 0x11, 0xda56, 0x7ffffffe, 0x80, 0x2f0cb955, 0x7, 0xfed, 0xf, 0x6ae, 0x9, 0x1, 0x9, 0x8001, 0x0, 0xec000, 0x0, 0x1, 0x2, 0xfffffffb, 0x7, 0x8, 0x4, 0x1, 0xffffcf1b, 0x282, 0x5517bc7b, 0x3, 0x4, 0xb6b, 0x5, 0xf7800000, 0xac, 0x9, 0x3, 0x10, 0x9, 0x8, 0x80000001, 0x0, 0x74, 0x2, 0x7fffffff, 0x0, 0xa, 0x6, 0xffffffff, 0x8, 0x2, 0x7, 0x7f, 0x5, 0x3, 0xa, 0x1, 0x0, 0x9, 0x300, 0x5, 0x3, 0x6, 0xffffffff, 0xffb, 0xff, 0x5, 0x8, 0x3, 0x2, 0x5, 0xfca, 0x399d, 0x6, 0x8ab6, 0x18000, 0x2, 0xfffffff9, 0x2, 0x2, 0x528c, 0x5, 0x200, 0xac, 0xf, 0xd05, 0x9a2ce73, 0x4, 0x6, 0xe074, 0x6b10, 0x5, 0x1, 0x6, 0xb, 0xa26, 0xaf6, 0x0, 0xec, 0x8, 0xde16, 0xc418, 0xffffffff, 0xffffffff, 0x9, 0x400, 0x80001, 0x5, 0x354d, 0x5, 0x2, 0x1, 0x7, 0x0, 0x177, 0x7, 0x0, 0x80, 0x5, 0x8, 0xfffffffb, 0x9, 0xe7b, 0x0, 0x7, 0x42bf, 0x10000, 0x9, 0x9, 0x6, 0x4b75, 0x80000001, 0x1000, 0x5915, 0x10001, 0x1]}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x107e, 0x4, 0xec2, 0x6, 0x8, 0x400, 0x5, 0x1, 0x7, 0x470, 0x487, 0x100, 0xa99, 0xfffffeff, 0x5, 0x37f, 0x8, 0x6, 0x3, 0x3, 0x800, 0xd2f5, 0x40, 0x3, 0x4, 0x5, 0x7, 0x12, 0x2, 0x8, 0x101, 0xffffffff, 0x2, 0x10000, 0xa6, 0x3, 0x10000, 0x1000, 0x4, 0x0, 0x3, 0x0, 0xd, 0x6, 0x98, 0x8, 0x6, 0x9, 0x1000, 0xb3000, 0xf, 0x3, 0x9, 0xb4, 0x94d, 0x9, 0x8, 0x6, 0x100, 0x2, 0xffff, 0x4, 0x2, 0x3ff, 0x3e, 0xb828, 0x0, 0x0, 0x365, 0x8, 0x8, 0xf, 0x1, 0xfffffffe, 0xfffffff6, 0x93, 0x7fff, 0x92, 0x0, 0x7, 0xfffffffc, 0x7ff, 0x9, 0x2, 0x0, 0x2, 0x8, 0xffffff37, 0x3, 0x9, 0xc, 0xff, 0x3, 0x3, 0x400, 0x100000, 0x7f, 0x2, 0x8, 0x4, 0x7, 0x4, 0x7, 0xfffffffa, 0x101, 0xadd9, 0x1, 0x0, 0x7, 0x7fffffff, 0x40, 0x4, 0x0, 0x5, 0x4, 0x1, 0x8, 0x9, 0x6, 0x6, 0x2, 0xb, 0x3, 0x7f, 0xffff, 0x9, 0x1685, 0xa252, 0x2, 0x200, 0x3, 0x1, 0x400, 0xfffffffc, 0xfffffffc, 0x1000, 0x7ff, 0x1, 0x1f6, 0x751, 0x7, 0x40000000, 0x1, 0xffffdbb7, 0x50, 0xf, 0xf, 0xe, 0x3, 0x0, 0x81, 0xfff80000, 0x7a9, 0x1, 0x6, 0x3, 0x7ef8, 0x7, 0x5, 0x2, 0x0, 0x4e8, 0x80, 0x3, 0x8, 0x5, 0x0, 0x5, 0x7fff, 0x7, 0x8, 0x6a4941c5, 0x2ea567b4, 0x8, 0x80000000, 0x6, 0x40, 0x2, 0x4000fff, 0x8, 0x7, 0x1, 0x1, 0x0, 0x0, 0xd3bed341, 0x691f, 0x0, 0x2, 0x9, 0x6, 0x0, 0x1ff, 0x400003, 0x3, 0x6, 0x5fc8462f, 0x0, 0x7, 0xffff, 0xfffffffc, 0x5, 0x0, 0xb9a6, 0x522, 0x2, 0x2, 0x900, 0x8, 0xbb99, 0xb8000000, 0x8, 0xffffff01, 0xc0a1, 0x8, 0x8, 0x7, 0x59, 0x9, 0x2, 0x101, 0x5f502dc7, 0x7, 0x0, 0x4, 0x6, 0x80000001, 0xc000, 0xffffff97, 0x2, 0x40, 0x1, 0x40, 0x8, 0x3, 0x710, 0x8, 0x1, 0xfffff339, 0x3, 0x8001, 0x1, 0x8001, 0x9, 0x8, 0xfffffffa, 0x8, 0x9, 0x3, 0xe, 0x3, 0x9, 0xa, 0x7, 0xfffffff8]}, @TCA_POLICE_TBF={0x3c, 0x1, {0xfffffe00, 0x4, 0x5, 0x1, 0xdbec, {0x8, 0x0, 0xb55, 0x5, 0x7, 0xb}, {0x6, 0x2, 0xd, 0x5, 0x1, 0x5d17}, 0x2, 0x0, 0x6}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x8b0}, 0x1, 0x0, 0x0, 0x10}, 0x0) 53.967484044s ago: executing program 1 (id=1521): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f00000047c0)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="180000007a00010600000004000000000700000100000010"], 0x18}], 0x1}, 0x0) 53.447193935s ago: executing program 1 (id=1523): socket$nl_route(0x10, 0x3, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) socket$netlink(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d002007000000", @ANYRES32=r1, @ANYRES16=r2], 0x44}}, 0x0) 53.079703465s ago: executing program 1 (id=1526): syz_open_dev$sndpcmc(&(0x7f0000000a00), 0x0, 0x80181) ioctl$VIDIOC_ENUM_FREQ_BANDS(0xffffffffffffffff, 0xc0405665, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x6, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) capget(0x0, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = syz_io_uring_setup(0x892, &(0x7f0000000140)={0x0, 0xaee4, 0x0, 0x2, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000380)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x40, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x8001}}) io_uring_enter(r3, 0x2b93, 0xf9d0, 0x22, 0x0, 0x0) 37.222294076s ago: executing program 33 (id=1526): syz_open_dev$sndpcmc(&(0x7f0000000a00), 0x0, 0x80181) ioctl$VIDIOC_ENUM_FREQ_BANDS(0xffffffffffffffff, 0xc0405665, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x6, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) capget(0x0, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = syz_io_uring_setup(0x892, &(0x7f0000000140)={0x0, 0xaee4, 0x0, 0x2, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000380)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x40, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x8001}}) io_uring_enter(r3, 0x2b93, 0xf9d0, 0x22, 0x0, 0x0) 10.57613425s ago: executing program 0 (id=1624): r0 = msgget$private(0x0, 0x0) msgrcv(r0, 0x0, 0x0, 0x1, 0x3000) 9.280998527s ago: executing program 0 (id=1628): r0 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000100)={0xffffffffffffffff}, 0x13f, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000300)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x711, @remote, 0xbf}, {0xa, 0x4e20, 0xfffffffe, @mcast2, 0x10001}, r1, 0x403}}, 0x48) 9.007880041s ago: executing program 0 (id=1630): socket(0x1d, 0x3, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001000)=[{{0x0, 0x0, &(0x7f0000000380), 0x0, &(0x7f0000000400)=""/25, 0x19}}, {{&(0x7f0000000500)=@vsock={0x28, 0x0, 0x0, @host}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000580)=""/112, 0x70}, {0x0}, {&(0x7f0000000700)=""/96, 0x60}], 0x3}, 0x2ad}, {{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000840)=""/224, 0xe0}, {&(0x7f0000000940)=""/96, 0x60}, {&(0x7f00000009c0)=""/92, 0x5c}], 0x3, &(0x7f0000000a80)=""/196, 0xc4}, 0x3}], 0x3, 0x4002, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r4 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe) socket$inet6_sctp(0xa, 0x5, 0x84) keyctl$revoke(0x3, r4) socket$packet(0x11, 0x2, 0x300) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) keyctl$instantiate(0xc, 0x0, 0x0, 0x0, 0x0) r5 = userfaultfd(0x1) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r5, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2}) 8.908591911s ago: executing program 3 (id=1631): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0xd, 0x10}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x10001}]}}]}, 0x38}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0xd, 0xfff2}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_BUCKETS_LOG={0x8, 0x8, 0x1}]}}]}, 0x38}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400), 0x0, 0x0, 0x0}) r7 = openat$kvm(0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r7, 0xae01, 0x38) syz_clone3(&(0x7f0000000300)={0xd0280f80, 0x0, 0x0, 0x0, {0x100003c}, 0x0, 0x0, 0x0, 0x0}, 0x58) iopl(0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x3, @pix={0x434c, 0x8, 0x584e4f53, 0x4, 0x2, 0x7, 0x0, 0x5, 0x1, 0x4, 0x2, 0x7}}) r8 = syz_open_dev$sndctrl(&(0x7f0000000240), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r8, 0xc2c45512, &(0x7f0000000340)={{0x3, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x4, 0xffffffff, 0xffff, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x4000, 0x0, 0x0, 0xfffffffc, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1fb, 0x0, 0xffffffff, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x20, 0x0, 0x0, 0x0, 0x0, 0x47e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffdffc7, 0x8, 0xffff, 0x3, 0x2, 0x3, 0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64, 0x80000001, 0x0, 0x0, 0x8, 0xf1e9, 0x0, 0x0, 0x2147, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1ff, 0xfffffffc, 0x0, 0x0, 0x7, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x4, 0x1, 0x0, 0xffffffff, 0x0, 0x4000000]}) prlimit64(0x0, 0x4, &(0x7f0000000140)={0x2, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x1) sched_setaffinity(0x0, 0x0, 0x0) 8.163941729s ago: executing program 3 (id=1632): r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='.\x00', 0x30000, 0x40) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0x9362, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0x9362, 0x0) 7.786114081s ago: executing program 3 (id=1634): getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r0) keyctl$invalidate(0x15, 0x0) 7.504302994s ago: executing program 3 (id=1636): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'macvlan0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000380)=ANY=[@ANYBLOB="8400000010000305000000040000000000000000", @ANYRES32=0x0, @ANYBLOB="1546010000000000540012800c0001006d6163766c616e0044000280060002000100000008000100010000000800030003000000080007000500000008000100100000000600020001000000100005800a000400aaaaaaaaaa2e000008000500", @ANYRES32=r1, @ANYBLOB="08000a00fb"], 0x84}}, 0x20008040) 7.097691488s ago: executing program 3 (id=1638): epoll_create1(0x0) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, r0, 0x800, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x4f}, @void, @val={0xc, 0x99, {0x7, 0xd}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x4000010) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_FLUSH_PMKSA(r1, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x20, 0x0, 0x2, 0x70bd26, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x0, 0x2e}}}}, ["", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x20040050}, 0x4040000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_emit_ethernet(0x76, 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) socket$key(0xf, 0x3, 0x2) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) r4 = syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100, 0x0, 0x0, 0x0, r3}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r2, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r4, 0x2ded, 0x4000, 0x0, 0x0, 0x0) msgrcv(0x0, 0x0, 0x0, 0x1, 0x3000) 5.773040641s ago: executing program 3 (id=1642): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) setreuid(0x0, 0x0) ioctl$FITHAW(r0, 0xc0045878) 5.339314503s ago: executing program 0 (id=1646): getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r0) keyctl$invalidate(0x15, 0x0) 5.273915457s ago: executing program 0 (id=1648): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpgid(0x0) mmap$binder(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x1, 0x11, 0xffffffffffffffff, 0x800000000000) sched_setattr(r2, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x4, 0x0, 0x806, 0x5, 0xffffffff}, 0x0) openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) socket(0x10, 0x3, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) ioctl$KVM_SET_MEMORY_ATTRIBUTES(0xffffffffffffffff, 0x4020aed2, &(0x7f00000000c0)={0xffff1000, 0x301000, 0x8}) syz_emit_ethernet(0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x300000c, 0x50032, 0xffffffffffffffff, 0x0) 3.978740976s ago: executing program 5 (id=1650): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000300)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x711, @remote, 0xbf}, {0xa, 0x4e20, 0xfffffffe, @mcast2, 0x10001}, 0xffffffffffffffff, 0x403}}, 0x48) 3.84389616s ago: executing program 2 (id=1651): epoll_create1(0x0) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, r0, 0x800, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x4f}, @void, @val={0xc, 0x99, {0x7, 0xd}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x4000010) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_FLUSH_PMKSA(r1, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x20, 0x0, 0x2, 0x70bd26, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x0, 0x2e}}}}, ["", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x20040050}, 0x4040000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_emit_ethernet(0x76, 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) socket$key(0xf, 0x3, 0x2) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) r4 = syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100, 0x0, 0x0, 0x0, r3}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r2, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r4, 0x2ded, 0x4000, 0x0, 0x0, 0x0) msgrcv(0x0, 0x0, 0x0, 0x1, 0x3000) 3.563747009s ago: executing program 5 (id=1652): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000440)='\x00'/16, 0x10) r1 = accept4(r0, 0x0, 0x0, 0x80000) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f0000003b80)=[{{0x0, 0xd, &(0x7f00000003c0)=[{&(0x7f00000000c0)="e6", 0x1}], 0x1, 0x0, 0x0, 0x7000300}}, {{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000440)='&', 0x23fff}], 0x1}, 0xff03}], 0x4000070, 0x8000) 3.437476404s ago: executing program 5 (id=1653): r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='.\x00', 0x30000, 0x40) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0x9362, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0x9362, 0x0) 3.273634437s ago: executing program 5 (id=1654): r0 = openat$dsp(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r0, 0x5008, 0x0) 3.11620378s ago: executing program 5 (id=1655): truncate(&(0x7f0000000000)='./file0\x00', 0x96f) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e78, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{}, 0x80}}]}, {0x2}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x40000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000280)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f0000000340), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x200000, &(0x7f0000000c00)=ANY=[]) chdir(&(0x7f0000000300)='./file0\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x4c}, 0x1, 0x0, 0x0, 0x8800}, 0xc8) 1.891812821s ago: executing program 5 (id=1656): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000080)={0x4, 0x1, 0x17, 0x1, 0x100, &(0x7f0000000440)="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"}) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = dup(r1) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c) sendmsg$inet6(r2, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x2}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000640), r3) sendmsg$MPTCP_PM_CMD_GET_ADDR(r3, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f00000001c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010027b77000fd0800040000000000040d11d56edee1f51dd1d14c32ba018000000000000000"], 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x4) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r5, 0x8918, &(0x7f00000003c0)={'\x00', {0x2, 0x4e24, @loopback}}) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, 0x0, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r6, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r6, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x800}, 0x1c) listen(r6, 0x0) r7 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r7, 0x1, 0x2e, &(0x7f0000000180)=0x7b, 0x4) shutdown(r7, 0x0) recvmmsg(r7, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000840)=ANY=[@ANYBLOB="aaaaaaaaaaaa1a0e2c5ffd4d080045000028000000000006007800000000ffffffff00004e2283449040c442b09bfff89e253e37da2e1fc5f556d844313acd32802f667b1af821a4575f33daf2b6d35eb6ea430e4a9afa2c06b9ae42437a19f23a1fd0bb94f2d967a279ff038199b29420faec62", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5011000090780000"], 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e21, @empty}}, 0x5, 0x3, 0xf06, 0x1, 0x94, 0xfffffffd, 0x5}, 0x9c) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000140)={0x0, 0xffffff3b, 0xfa00, {0x0, 0x0, 0x13f, 0x5}}, 0xff37) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x4e60, 0xfffffff2, @empty}}, 0xffffec47, 0x9, 0xffff1896, 0x100, 0x25, 0x7fff}, 0x9c) 1.856478726s ago: executing program 2 (id=1657): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_procfs(0x0, &(0x7f0000004600)='map_files\x00') fchdir(r1) sendmmsg$unix(r0, &(0x7f0000002d80)=[{{&(0x7f0000000080)=@abs={0x1, 0x30, 0x4e30}, 0x6e, 0x0}}], 0x1, 0x40008004) 1.660424473s ago: executing program 2 (id=1658): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'macvlan0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000380)=ANY=[@ANYBLOB="8400000010000305000000040000000000000000", @ANYRES32=0x0, @ANYBLOB="1546010000000000540012800c0001006d6163766c616e0044000280060002000100000008000100010000000800030003000000080007000500000008000100100000000600020001000000100005800a000400aaaaaaaaaa2e000008000500", @ANYRES32=r1, @ANYBLOB="08000a00fb"], 0x84}}, 0x20008040) 1.407816964s ago: executing program 2 (id=1659): truncate(&(0x7f0000000000)='./file0\x00', 0x96f) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e78, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{}, 0x80}}]}, {0x2}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x40000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000280)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f0000000340), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x200000, &(0x7f0000000c00)=ANY=[]) chdir(&(0x7f0000000300)='./file0\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x4c}, 0x1, 0x0, 0x0, 0x8800}, 0xc8) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000080)={r3, 0xffffffffffffffff, 0x2d, 0x0, @val=@netfilter={0x2, 0x0, 0x6, 0x1}}, 0x20) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x6000, 0x1) fsopen(&(0x7f0000000100)='squashfs\x00', 0x1) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, &(0x7f0000000140)=0x10) 1.3956966s ago: executing program 0 (id=1660): poll(0x0, 0x0, 0x89) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0xfbc6, 0x10100, 0x8000003}, &(0x7f0000000080)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {0x230}}) io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x0, 0x0, 0x0) poll(0x0, 0x0, 0x800) 189.527596ms ago: executing program 2 (id=1661): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000300)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x711, @remote, 0xbf}, {0xa, 0x4e20, 0xfffffffe, @mcast2, 0x10001}, 0xffffffffffffffff, 0x403}}, 0x48) 0s ago: executing program 2 (id=1662): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) close(r0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x18, 0x6, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000000000000ffffff80e500020000000000c500fcff000000008500feffd100000095"], &(0x7f00000000c0)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000300)='percpu_alloc_percpu\x00', r0, 0x0, 0x10}, 0x18) socket$packet(0x11, 0x3, 0x300) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.222' (ED25519) to the list of known hosts. syzkaller login: [ 89.687828][ T5785] cgroup: Unknown subsys name 'net' [ 89.948751][ T5785] cgroup: Unknown subsys name 'cpuset' [ 90.003825][ T5785] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 91.903960][ T5785] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 91.996411][ T43] cfg80211: failed to load regulatory.db [ 95.134771][ T5814] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 95.139038][ T5814] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 95.141114][ T5814] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 95.141927][ T5814] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 95.152336][ T5814] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 95.155294][ T5816] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 95.161742][ T5814] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 95.166328][ T5814] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 95.167155][ T5814] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 95.167754][ T5814] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 95.177910][ T5814] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 95.179722][ T5814] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 95.181730][ T5814] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 95.184226][ T5817] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 95.191240][ T5816] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 95.191685][ T5817] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 95.211502][ T5816] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 95.224363][ T5814] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 95.228009][ T5814] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 95.229916][ T5814] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 95.240161][ T5814] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 95.244552][ T5803] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 95.262866][ T5803] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 95.264697][ T61] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 95.280329][ T5803] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 96.318650][ T5801] chnl_net:caif_netlink_parms(): no params data found [ 96.349393][ T5797] chnl_net:caif_netlink_parms(): no params data found [ 96.373579][ T5800] chnl_net:caif_netlink_parms(): no params data found [ 96.554701][ T5799] chnl_net:caif_netlink_parms(): no params data found [ 96.731818][ T5798] chnl_net:caif_netlink_parms(): no params data found [ 97.334586][ T5810] Bluetooth: hci2: command tx timeout [ 97.335003][ T5803] Bluetooth: hci3: command tx timeout [ 97.335406][ T5803] Bluetooth: hci4: command tx timeout [ 97.335532][ T5812] Bluetooth: hci0: command tx timeout [ 97.414531][ T5812] Bluetooth: hci1: command tx timeout [ 97.494768][ T5801] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.496060][ T5801] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.496488][ T5801] bridge_slave_0: entered allmulticast mode [ 97.498438][ T5801] bridge_slave_0: entered promiscuous mode [ 97.537192][ T5797] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.537310][ T5797] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.537456][ T5797] bridge_slave_0: entered allmulticast mode [ 97.539310][ T5797] bridge_slave_0: entered promiscuous mode [ 97.541686][ T5800] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.541810][ T5800] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.542051][ T5800] bridge_slave_0: entered allmulticast mode [ 97.549479][ T5800] bridge_slave_0: entered promiscuous mode [ 97.694379][ T5801] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.694520][ T5801] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.694655][ T5801] bridge_slave_1: entered allmulticast mode [ 97.696518][ T5801] bridge_slave_1: entered promiscuous mode [ 97.745318][ T5797] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.745449][ T5797] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.745636][ T5797] bridge_slave_1: entered allmulticast mode [ 97.748670][ T5797] bridge_slave_1: entered promiscuous mode [ 97.751072][ T5800] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.751202][ T5800] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.751376][ T5800] bridge_slave_1: entered allmulticast mode [ 97.757085][ T5800] bridge_slave_1: entered promiscuous mode [ 98.125227][ T5799] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.125314][ T5799] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.125469][ T5799] bridge_slave_0: entered allmulticast mode [ 98.127353][ T5799] bridge_slave_0: entered promiscuous mode [ 98.444258][ T5799] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.444502][ T5799] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.444688][ T5799] bridge_slave_1: entered allmulticast mode [ 98.446766][ T5799] bridge_slave_1: entered promiscuous mode [ 98.452403][ T5801] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 98.452688][ T5798] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.452841][ T5798] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.453063][ T5798] bridge_slave_0: entered allmulticast mode [ 98.469915][ T5798] bridge_slave_0: entered promiscuous mode [ 98.498713][ T5797] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 98.578427][ T5800] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 98.678842][ T5801] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 98.679767][ T5798] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.679902][ T5798] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.680085][ T5798] bridge_slave_1: entered allmulticast mode [ 98.682860][ T5798] bridge_slave_1: entered promiscuous mode [ 98.705904][ T5797] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 98.718834][ T5800] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 99.047652][ T5799] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 99.367421][ T5799] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 99.369626][ T5801] team0: Port device team_slave_0 added [ 99.372833][ T5798] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 99.399577][ T5797] team0: Port device team_slave_0 added [ 99.405997][ T5800] team0: Port device team_slave_0 added [ 99.413285][ T5810] Bluetooth: hci3: command tx timeout [ 99.414742][ T5812] Bluetooth: hci2: command tx timeout [ 99.424350][ T5810] Bluetooth: hci0: command tx timeout [ 99.424365][ T5812] Bluetooth: hci4: command tx timeout [ 99.486659][ T5801] team0: Port device team_slave_1 added [ 99.489171][ T5798] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 99.492074][ T5797] team0: Port device team_slave_1 added [ 99.503307][ T5812] Bluetooth: hci1: command tx timeout [ 99.520771][ T5800] team0: Port device team_slave_1 added [ 100.117313][ T5799] team0: Port device team_slave_0 added [ 100.396316][ T5799] team0: Port device team_slave_1 added [ 100.397395][ T5801] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 100.397407][ T5801] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 100.397426][ T5801] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 100.401179][ T5798] team0: Port device team_slave_0 added [ 100.402110][ T5797] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 100.402125][ T5797] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 100.402155][ T5797] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 100.409222][ T5800] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 100.409265][ T5800] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 100.409333][ T5800] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 100.554860][ T5801] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 100.554873][ T5801] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 100.554893][ T5801] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 100.557528][ T5798] team0: Port device team_slave_1 added [ 100.558260][ T5800] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 100.558270][ T5800] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 100.558290][ T5800] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 100.559295][ T5797] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 100.559304][ T5797] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 100.559323][ T5797] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 100.779724][ T5799] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 100.779739][ T5799] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 100.779759][ T5799] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 100.897257][ T5799] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 100.897270][ T5799] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 100.897290][ T5799] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 100.899756][ T5798] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 100.899768][ T5798] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 100.899788][ T5798] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 101.048098][ T5798] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 101.048113][ T5798] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.048135][ T5798] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 101.482707][ T5801] hsr_slave_0: entered promiscuous mode [ 101.486676][ T5801] hsr_slave_1: entered promiscuous mode [ 101.493472][ T5812] Bluetooth: hci4: command tx timeout [ 101.493510][ T5812] Bluetooth: hci2: command tx timeout [ 101.493698][ T5803] Bluetooth: hci3: command tx timeout [ 101.493890][ T5810] Bluetooth: hci0: command tx timeout [ 101.521953][ T5800] hsr_slave_0: entered promiscuous mode [ 101.523030][ T5800] hsr_slave_1: entered promiscuous mode [ 101.536329][ T5800] debugfs: 'hsr0' already exists in 'hsr' [ 101.536433][ T5800] Cannot create hsr debugfs directory [ 101.555879][ T5797] hsr_slave_0: entered promiscuous mode [ 101.556920][ T5797] hsr_slave_1: entered promiscuous mode [ 101.557676][ T5797] debugfs: 'hsr0' already exists in 'hsr' [ 101.557694][ T5797] Cannot create hsr debugfs directory [ 101.574024][ T5810] Bluetooth: hci1: command tx timeout [ 101.791911][ T5799] hsr_slave_0: entered promiscuous mode [ 101.792930][ T5799] hsr_slave_1: entered promiscuous mode [ 101.796747][ T5799] debugfs: 'hsr0' already exists in 'hsr' [ 101.796846][ T5799] Cannot create hsr debugfs directory [ 102.110994][ T5798] hsr_slave_0: entered promiscuous mode [ 102.112231][ T5798] hsr_slave_1: entered promiscuous mode [ 102.112918][ T5798] debugfs: 'hsr0' already exists in 'hsr' [ 102.112937][ T5798] Cannot create hsr debugfs directory [ 103.573842][ T5116] Bluetooth: hci3: command tx timeout [ 103.573871][ T5116] Bluetooth: hci4: command tx timeout [ 103.573910][ T5803] Bluetooth: hci0: command tx timeout [ 103.573939][ T5810] Bluetooth: hci2: command tx timeout [ 103.652876][ T5801] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 103.654137][ T5812] Bluetooth: hci1: command tx timeout [ 103.701847][ T5801] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 103.738498][ T5801] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 103.790736][ T5801] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 103.886346][ T5800] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 103.919476][ T5800] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 103.957793][ T5800] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 104.017358][ T5800] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 104.161015][ T5797] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 104.213049][ T5797] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 104.251454][ T5797] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 104.305901][ T5797] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 104.428676][ T5799] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 104.472185][ T5799] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 104.518997][ T5799] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 104.580797][ T5799] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 104.711492][ T5798] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 104.751350][ T5801] 8021q: adding VLAN 0 to HW filter on device bond0 [ 104.751713][ T5798] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 104.790995][ T5798] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 104.831787][ T5798] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 104.936653][ T5801] 8021q: adding VLAN 0 to HW filter on device team0 [ 104.979861][ T1182] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.980621][ T1182] bridge0: port 1(bridge_slave_0) entered forwarding state [ 105.001283][ T5800] 8021q: adding VLAN 0 to HW filter on device bond0 [ 105.036377][ T1182] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.036546][ T1182] bridge0: port 2(bridge_slave_1) entered forwarding state [ 105.115807][ T5800] 8021q: adding VLAN 0 to HW filter on device team0 [ 105.132526][ T5797] 8021q: adding VLAN 0 to HW filter on device bond0 [ 105.160602][ T1157] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.161208][ T1157] bridge0: port 1(bridge_slave_0) entered forwarding state [ 105.224137][ T1157] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.224253][ T1157] bridge0: port 2(bridge_slave_1) entered forwarding state [ 105.268468][ T5797] 8021q: adding VLAN 0 to HW filter on device team0 [ 105.298497][ T5799] 8021q: adding VLAN 0 to HW filter on device bond0 [ 105.321400][ T1157] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.321603][ T1157] bridge0: port 1(bridge_slave_0) entered forwarding state [ 105.359388][ T1157] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.360173][ T1157] bridge0: port 2(bridge_slave_1) entered forwarding state [ 105.461999][ T5799] 8021q: adding VLAN 0 to HW filter on device team0 [ 105.497678][ T5798] 8021q: adding VLAN 0 to HW filter on device bond0 [ 105.513506][ T1042] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.513681][ T1042] bridge0: port 1(bridge_slave_0) entered forwarding state [ 105.568991][ T1042] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.569191][ T1042] bridge0: port 2(bridge_slave_1) entered forwarding state [ 105.642338][ T5798] 8021q: adding VLAN 0 to HW filter on device team0 [ 105.715931][ T1157] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.716053][ T1157] bridge0: port 1(bridge_slave_0) entered forwarding state [ 105.784389][ T1157] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.784568][ T1157] bridge0: port 2(bridge_slave_1) entered forwarding state [ 105.970485][ T5801] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 106.145925][ T5800] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 106.376878][ T5797] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 106.430105][ T5800] veth0_vlan: entered promiscuous mode [ 106.510924][ T5800] veth1_vlan: entered promiscuous mode [ 106.625455][ T5799] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 106.664765][ T5797] veth0_vlan: entered promiscuous mode [ 106.746645][ T5797] veth1_vlan: entered promiscuous mode [ 106.749798][ T5800] veth0_macvtap: entered promiscuous mode [ 106.789452][ T5800] veth1_macvtap: entered promiscuous mode [ 106.811528][ T5798] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 106.882018][ T5800] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 106.917320][ T5800] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 106.917520][ T5799] veth0_vlan: entered promiscuous mode [ 106.954454][ T5797] veth0_macvtap: entered promiscuous mode [ 106.971937][ T69] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.989962][ T69] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.006457][ T69] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.010376][ T5797] veth1_macvtap: entered promiscuous mode [ 107.012531][ T69] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.033839][ T5799] veth1_vlan: entered promiscuous mode [ 107.049496][ T5801] veth0_vlan: entered promiscuous mode [ 107.175902][ T5801] veth1_vlan: entered promiscuous mode [ 107.189257][ T5798] veth0_vlan: entered promiscuous mode [ 107.205202][ T5797] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 107.291890][ T5797] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 107.356190][ T5798] veth1_vlan: entered promiscuous mode [ 107.395746][ T1157] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.406572][ T1157] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.427185][ T1157] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.430535][ T1157] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.430555][ T1157] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.461150][ T69] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.463009][ T5799] veth0_macvtap: entered promiscuous mode [ 107.547917][ T5799] veth1_macvtap: entered promiscuous mode [ 107.649690][ T3768] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.649707][ T3768] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.728273][ T5801] veth0_macvtap: entered promiscuous mode [ 107.773899][ T5801] veth1_macvtap: entered promiscuous mode [ 107.780520][ T5798] veth0_macvtap: entered promiscuous mode [ 107.796963][ T5799] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 107.850602][ T5798] veth1_macvtap: entered promiscuous mode [ 107.861281][ T5799] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 107.876930][ T1182] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.876951][ T1182] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.933060][ T3768] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.940681][ T3768] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.963625][ T3768] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.968391][ T5801] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 107.968463][ T3768] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.056037][ T5798] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 108.059372][ T5801] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 108.150500][ T1153] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.150522][ T1153] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.200567][ T5918] Bluetooth: MGMT ver 1.23 [ 108.234808][ T5798] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 108.236930][ T1042] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.270461][ T1042] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.285262][ T1042] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.289446][ T1042] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.345972][ T1042] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.364231][ T1042] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.431785][ T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.465482][ T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.653276][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.653299][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.791009][ T5920] team0: Device gtp0 is of different type [ 109.247667][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.247691][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.381474][ T68] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.381494][ T68] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.341433][ T1182] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.341455][ T1182] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.560979][ T45] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.561001][ T45] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.639803][ T5940] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1'. [ 110.916939][ T1157] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.916962][ T1157] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.999829][ T5947] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12'. [ 111.640619][ T5959] netlink: 8 bytes leftover after parsing attributes in process `syz.0.14'. [ 111.666962][ T5959] tipc: Started in network mode [ 111.666985][ T5959] tipc: Node identity 4, cluster identity 4711 [ 111.666998][ T5959] tipc: Node number set to 4 [ 115.957119][ T5987] syz.1.19 (5987): drop_caches: 2 [ 116.310571][ T5971] syz.2.15 (5971): drop_caches: 2 [ 117.579832][ T6008] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 117.644464][ T6008] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 118.193029][ T6014] netlink: 8 bytes leftover after parsing attributes in process `syz.4.27'. [ 119.576155][ T6014] tipc: Started in network mode [ 119.576180][ T6014] tipc: Node identity 4, cluster identity 4711 [ 119.576193][ T6014] tipc: Node number set to 4 [ 120.203186][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 120.206331][ T6035] syz.3.33 (6035): drop_caches: 2 [ 120.608447][ T6047] syz.0.35 (6047): drop_caches: 2 [ 121.635794][ T6049] bridge0: port 2(bridge_slave_1) entered disabled state [ 121.652961][ T6049] bridge0: port 1(bridge_slave_0) entered disabled state [ 122.289305][ T6049] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 122.315571][ T6049] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 122.860351][ T6064] sctp: [Deprecated]: syz.1.42 (pid 6064) Use of int in max_burst socket option. [ 122.860351][ T6064] Use struct sctp_assoc_value instead [ 122.873198][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 123.503201][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 124.393574][ T6081] syz.1.46 (6081): drop_caches: 2 [ 124.403180][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 124.407632][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 124.567660][ T6057] kthread_run failed with err -4 [ 124.764574][ T1480] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.962464][ T1480] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.962532][ T6093] netlink: 96 bytes leftover after parsing attributes in process `syz.2.49'. [ 125.983148][ T1480] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.983201][ T1480] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.033315][ T6038] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 126.033355][ T6038] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 126.314731][ T6111] netlink: 4 bytes leftover after parsing attributes in process `syz.2.53'. [ 127.209768][ T6117] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 127.542782][ T6125] sctp: [Deprecated]: syz.0.56 (pid 6125) Use of int in max_burst socket option. [ 127.542782][ T6125] Use struct sctp_assoc_value instead [ 127.584609][ T6126] netlink: 4 bytes leftover after parsing attributes in process `syz.1.57'. [ 127.692481][ T6038] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 127.692507][ T6038] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 127.857851][ T6038] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 127.857878][ T6038] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 128.369304][ T6038] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 128.369322][ T6038] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 128.593229][ T6038] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 128.593256][ T6038] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 129.053294][ T6140] Zero length message leads to an empty skb [ 133.041263][ T6186] bridge0: port 2(bridge_slave_1) entered disabled state [ 133.046778][ T6186] bridge0: port 1(bridge_slave_0) entered disabled state [ 133.282610][ T6208] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 133.860078][ T6186] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 133.881393][ T6186] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 134.938690][ T12] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.166185][ T12] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.428642][ T3768] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.428734][ T3768] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.882700][ T5810] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 135.902662][ T5810] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 135.911629][ T5810] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 135.942603][ T5810] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 135.954414][ T5810] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 136.044951][ T5812] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 136.045903][ T5812] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 136.048345][ T5812] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 136.089129][ T5812] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 136.090194][ T5812] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 137.261262][ T6264] bridge0: port 2(bridge_slave_1) entered disabled state [ 137.272521][ T6264] bridge0: port 1(bridge_slave_0) entered disabled state [ 138.061482][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.061600][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 138.135692][ T5812] Bluetooth: hci5: command tx timeout [ 138.339748][ T6264] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 138.390006][ T6264] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 140.252596][ T5812] Bluetooth: hci5: command tx timeout [ 140.405283][ T6305] netlink: 12 bytes leftover after parsing attributes in process `syz.0.87'. [ 140.735598][ T45] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.781910][ T6305] veth0_macvtap: left promiscuous mode [ 141.911560][ T45] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.228137][ T45] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.293252][ T5812] Bluetooth: hci5: command tx timeout [ 142.652518][ T12] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.906161][ T45] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.918657][ T6328] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 142.918721][ T6328] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 142.918744][ T6328] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 142.923242][ T37] audit: type=1800 audit(1766964204.880:2): pid=6328 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.1.93" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0 [ 143.728495][ T12] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.771796][ T37] audit: type=1326 audit(1766964205.730:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6341 comm="syz.2.99" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f893b9cf749 code=0x7ffc0000 [ 143.771852][ T37] audit: type=1326 audit(1766964205.730:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6341 comm="syz.2.99" exe="/root/syz-executor" sig=0 arch=c000003e syscall=127 compat=0 ip=0x7f893b9cf749 code=0x7ffc0000 [ 143.771898][ T37] audit: type=1326 audit(1766964205.730:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6341 comm="syz.2.99" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f893b9cf749 code=0x7ffc0000 [ 143.772413][ T37] audit: type=1326 audit(1766964205.730:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6341 comm="syz.2.99" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f893b9cf749 code=0x7ffc0000 [ 143.772826][ T37] audit: type=1326 audit(1766964205.730:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6341 comm="syz.2.99" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f893b9cf749 code=0x7ffc0000 [ 143.775941][ T37] audit: type=1326 audit(1766964205.740:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6341 comm="syz.2.99" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f893b9cf749 code=0x7ffc0000 [ 143.778986][ T37] audit: type=1326 audit(1766964205.740:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6341 comm="syz.2.99" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f893b9cf749 code=0x7ffc0000 [ 143.792468][ T37] audit: type=1326 audit(1766964205.750:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6341 comm="syz.2.99" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f893b9cf749 code=0x7ffc0000 [ 143.801023][ T37] audit: type=1326 audit(1766964205.760:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6341 comm="syz.2.99" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f893b9cf749 code=0x7ffc0000 [ 144.017347][ T6345] netlink: 60 bytes leftover after parsing attributes in process `syz.2.99'. [ 144.017373][ T6345] netlink: 12 bytes leftover after parsing attributes in process `syz.2.99'. [ 144.017469][ T6345] netlink: 60 bytes leftover after parsing attributes in process `syz.2.99'. [ 144.058979][ T6249] chnl_net:caif_netlink_parms(): no params data found [ 144.267608][ T6345] netlink: 60 bytes leftover after parsing attributes in process `syz.2.99'. [ 144.267632][ T6345] netlink: 12 bytes leftover after parsing attributes in process `syz.2.99'. [ 144.267707][ T6345] netlink: 60 bytes leftover after parsing attributes in process `syz.2.99'. [ 144.382586][ T5812] Bluetooth: hci5: command tx timeout [ 144.449120][ T12] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.615731][ T6345] netlink: 60 bytes leftover after parsing attributes in process `syz.2.99'. [ 144.615754][ T6345] netlink: 12 bytes leftover after parsing attributes in process `syz.2.99'. [ 144.615809][ T6345] netlink: 60 bytes leftover after parsing attributes in process `syz.2.99'. [ 144.966481][ T12] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.673571][ T6249] bridge0: port 1(bridge_slave_0) entered blocking state [ 146.681316][ T6249] bridge0: port 1(bridge_slave_0) entered disabled state [ 146.681575][ T6249] bridge_slave_0: entered allmulticast mode [ 146.705148][ T6249] bridge_slave_0: entered promiscuous mode [ 146.810762][ T6249] bridge0: port 2(bridge_slave_1) entered blocking state [ 146.810872][ T6249] bridge0: port 2(bridge_slave_1) entered disabled state [ 146.811044][ T6249] bridge_slave_1: entered allmulticast mode [ 146.835890][ T6249] bridge_slave_1: entered promiscuous mode [ 147.157328][ T6391] sctp: [Deprecated]: syz.2.111 (pid 6391) Use of int in max_burst socket option. [ 147.157328][ T6391] Use struct sctp_assoc_value instead [ 147.343447][ T6249] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 147.348707][ T6249] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 148.073123][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 148.073171][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 148.073238][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 148.073275][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 148.073312][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 148.907203][ T6408] sctp: [Deprecated]: syz.0.117 (pid 6408) Use of int in max_burst socket option. [ 148.907203][ T6408] Use struct sctp_assoc_value instead [ 150.537991][ T6249] team0: Port device team_slave_0 added [ 150.584076][ T6249] team0: Port device team_slave_1 added [ 151.244213][ T12] bridge_slave_1: left allmulticast mode [ 151.244400][ T12] bridge_slave_1: left promiscuous mode [ 151.246460][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 151.450099][ T12] bridge_slave_0: left allmulticast mode [ 151.450138][ T12] bridge_slave_0: left promiscuous mode [ 151.450415][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 154.113951][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 154.203820][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 154.226919][ T12] bond0 (unregistering): Released all slaves [ 154.264883][ T6249] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 154.264898][ T6249] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 154.264919][ T6249] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 154.278639][ T6432] tipc: Started in network mode [ 154.278691][ T6432] tipc: Node identity 4, cluster identity 4711 [ 154.278724][ T6432] tipc: Node number set to 4 [ 154.615733][ T6249] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 154.615751][ T6249] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 154.615783][ T6249] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 155.864937][ T12] tipc: Left network mode [ 158.633440][ T6476] tipc: Started in network mode [ 158.633461][ T6476] tipc: Node identity 4, cluster identity 4711 [ 158.633474][ T6476] tipc: Node number set to 4 [ 158.661773][ T6249] hsr_slave_0: entered promiscuous mode [ 158.662875][ T6249] hsr_slave_1: entered promiscuous mode [ 158.666179][ T6249] debugfs: 'hsr0' already exists in 'hsr' [ 158.666253][ T6249] Cannot create hsr debugfs directory [ 161.367372][ T6513] 9pnet: p9_errstr2errno: server reported unknown error 0x0000000 [ 162.705070][ T12] hsr_slave_0: left promiscuous mode [ 162.757199][ T6533] syz.2.152 (6533) used greatest stack depth: 16312 bytes left [ 162.760598][ T12] hsr_slave_1: left promiscuous mode [ 162.762052][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 162.762197][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 162.824660][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 162.824692][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 162.950402][ T12] veth1_macvtap: left promiscuous mode [ 162.950679][ T12] veth0_macvtap: left promiscuous mode [ 162.950984][ T12] veth1_vlan: left promiscuous mode [ 162.951411][ T12] veth0_vlan: left promiscuous mode [ 164.257297][ T6547] netlink: 176 bytes leftover after parsing attributes in process `syz.1.156'. [ 166.284370][ T6570] syz.3.164 (6570): drop_caches: 2 [ 170.314070][ T12] team0 (unregistering): Port device team_slave_1 removed [ 170.493983][ T12] team0 (unregistering): Port device team_slave_0 removed [ 172.379834][ T6583] tipc: Started in network mode [ 172.379859][ T6583] tipc: Node identity 4, cluster identity 4711 [ 172.379874][ T6583] tipc: Node number set to 4 [ 174.836821][ T6249] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 175.190870][ T6249] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 175.334706][ T6249] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 175.416197][ T6249] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 175.965537][ T6249] 8021q: adding VLAN 0 to HW filter on device bond0 [ 176.096315][ T6249] 8021q: adding VLAN 0 to HW filter on device team0 [ 176.116345][ T5978] bridge0: port 1(bridge_slave_0) entered blocking state [ 176.133842][ T5978] bridge0: port 1(bridge_slave_0) entered forwarding state [ 176.177172][ T3768] bridge0: port 2(bridge_slave_1) entered blocking state [ 176.193244][ T3768] bridge0: port 2(bridge_slave_1) entered forwarding state [ 177.062426][ T6658] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 177.062454][ T6658] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 178.958301][ T6249] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 180.647618][ T6249] veth0_vlan: entered promiscuous mode [ 180.701583][ T6249] veth1_vlan: entered promiscuous mode [ 180.803707][ T6249] veth0_macvtap: entered promiscuous mode [ 180.811722][ T6249] veth1_macvtap: entered promiscuous mode [ 180.855875][ T6249] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 180.920888][ T6249] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 180.985277][ T44] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.985329][ T44] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.985368][ T44] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.985406][ T44] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.578196][ T6756] netlink: 8 bytes leftover after parsing attributes in process `syz.3.201'. [ 181.662297][ T5978] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 181.662319][ T5978] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 181.853440][ T3768] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 181.853463][ T3768] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 182.048504][ T6765] netlink: 12 bytes leftover after parsing attributes in process `syz.0.203'. [ 182.595641][ T6779] netlink: 12 bytes leftover after parsing attributes in process `syz.0.207'. [ 182.780045][ T6784] sctp: [Deprecated]: syz.5.79 (pid 6784) Use of int in max_burst socket option. [ 182.780045][ T6784] Use struct sctp_assoc_value instead [ 183.652308][ T6797] syz.1.211 (6797): drop_caches: 2 [ 183.886423][ T6801] mmap: syz.1.212 (6801) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 183.990634][ T6800] bridge_slave_0: left allmulticast mode [ 183.990658][ T6800] bridge_slave_0: left promiscuous mode [ 183.991028][ T6800] bridge0: port 1(bridge_slave_0) entered disabled state [ 184.066643][ T6800] bridge_slave_1: left allmulticast mode [ 184.066675][ T6800] bridge_slave_1: left promiscuous mode [ 184.068063][ T6800] bridge0: port 2(bridge_slave_1) entered disabled state [ 184.228698][ T6800] bond0: (slave bond_slave_0): Releasing backup interface [ 184.315004][ T6800] bond0: (slave bond_slave_1): Releasing backup interface [ 184.453038][ T6800] team0: Port device team_slave_0 removed [ 184.716893][ T6800] team0: Port device team_slave_1 removed [ 184.717600][ T6800] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 184.717618][ T6800] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 185.337494][ T6800] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 185.337526][ T6800] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 185.865387][ T6800] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 185.867630][ T6812] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 185.867660][ T6812] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 185.867674][ T6812] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 187.445414][ T6845] netlink: 8 bytes leftover after parsing attributes in process `syz.3.226'. [ 187.495691][ T6845] netlink: 8 bytes leftover after parsing attributes in process `syz.3.226'. [ 187.691813][ T6852] sctp: [Deprecated]: syz.0.227 (pid 6852) Use of int in max_burst socket option. [ 187.691813][ T6852] Use struct sctp_assoc_value instead [ 188.645507][ T6860] 9pnet: p9_errstr2errno: server reported unknown error 0x0000000 [ 191.946923][ T6879] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 196.467112][ T6918] sctp: [Deprecated]: syz.3.245 (pid 6918) Use of int in max_burst socket option. [ 196.467112][ T6918] Use struct sctp_assoc_value instead [ 197.033249][ T6927] 9pnet: p9_errstr2errno: server reported unknown error [ 199.496817][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.496900][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 200.332727][ T6970] pim6reg: entered allmulticast mode [ 201.307808][ T6969] pim6reg: left allmulticast mode [ 201.785776][ T6976] 9pnet: p9_errstr2errno: server reported unknown error [ 202.170568][ T6983] syz.2.261 (6983): drop_caches: 2 [ 203.621675][ T7007] netlink: 12 bytes leftover after parsing attributes in process `syz.2.266'. [ 204.012033][ T7016] IPv6: NLM_F_CREATE should be specified when creating new route [ 204.291095][ T7019] netlink: 176 bytes leftover after parsing attributes in process `syz.1.270'. [ 204.853137][ T7022] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 205.236642][ T7027] netlink: 'syz.1.272': attribute type 6 has an invalid length. [ 208.025379][ T7083] netlink: 'syz.3.282': attribute type 6 has an invalid length. [ 208.403302][ T7090] netlink: 176 bytes leftover after parsing attributes in process `syz.3.283'. [ 209.623302][ T7111] IPv6: NLM_F_CREATE should be specified when creating new route [ 210.859571][ T7117] syz.5.292 (7117): drop_caches: 2 [ 212.930097][ T7131] bridge0: port 2(bridge_slave_1) entered disabled state [ 212.930936][ T7131] bridge0: port 1(bridge_slave_0) entered disabled state [ 213.445235][ T7158] syz.2.306 (7158): drop_caches: 2 [ 213.460154][ T7131] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 213.467476][ T7131] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 214.087571][ T144] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.103036][ T144] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.115510][ T144] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.115564][ T144] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.674767][ T7190] netlink: 12 bytes leftover after parsing attributes in process `syz.0.317'. [ 216.022600][ T37] kauditd_printk_skb: 17 callbacks suppressed [ 216.022618][ T37] audit: type=1326 audit(1766964277.980:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7198 comm="syz.2.319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f893b9cf749 code=0x7ffc0000 [ 216.051506][ T37] audit: type=1326 audit(1766964278.010:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7198 comm="syz.2.319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=127 compat=0 ip=0x7f893b9cf749 code=0x7ffc0000 [ 216.051909][ T37] audit: type=1326 audit(1766964278.010:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7198 comm="syz.2.319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f893b9cf749 code=0x7ffc0000 [ 216.052183][ T37] audit: type=1326 audit(1766964278.010:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7198 comm="syz.2.319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f893b9cf749 code=0x7ffc0000 [ 216.052495][ T37] audit: type=1326 audit(1766964278.010:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7198 comm="syz.2.319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f893b9cf749 code=0x7ffc0000 [ 216.052921][ T37] audit: type=1326 audit(1766964278.010:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7198 comm="syz.2.319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f893b9cf749 code=0x7ffc0000 [ 216.089221][ T37] audit: type=1326 audit(1766964278.040:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7198 comm="syz.2.319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f893b9cf749 code=0x7ffc0000 [ 216.090216][ T37] audit: type=1326 audit(1766964278.050:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7198 comm="syz.2.319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f893b9cf749 code=0x7ffc0000 [ 216.100636][ T37] audit: type=1326 audit(1766964278.060:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7198 comm="syz.2.319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f893b9cf749 code=0x7ffc0000 [ 216.118564][ T37] audit: type=1326 audit(1766964278.070:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7198 comm="syz.2.319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f893b9cf749 code=0x7ffc0000 [ 216.343633][ T7203] netlink: 60 bytes leftover after parsing attributes in process `syz.2.319'. [ 216.343673][ T7203] netlink: 12 bytes leftover after parsing attributes in process `syz.2.319'. [ 216.343730][ T7203] netlink: 60 bytes leftover after parsing attributes in process `syz.2.319'. [ 216.609816][ T7203] netlink: 60 bytes leftover after parsing attributes in process `syz.2.319'. [ 216.609847][ T7203] netlink: 12 bytes leftover after parsing attributes in process `syz.2.319'. [ 216.609901][ T7203] netlink: 60 bytes leftover after parsing attributes in process `syz.2.319'. [ 218.205946][ T7229] syz.3.327 (7229): drop_caches: 2 [ 218.886133][ T7248] macsec0: entered promiscuous mode [ 218.886432][ T7248] macsec0: entered allmulticast mode [ 218.886448][ T7248] veth1_macvtap: entered allmulticast mode [ 219.269532][ T7221] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 221.768759][ T7278] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 223.224401][ T7281] macsec0: entered promiscuous mode [ 223.224591][ T7281] macsec0: entered allmulticast mode [ 223.224602][ T7281] veth1_macvtap: entered allmulticast mode [ 223.866254][ T7291] veth1_macvtap: left allmulticast mode [ 223.866530][ T7291] macsec0: left promiscuous mode [ 223.866553][ T7291] macsec0: left allmulticast mode [ 226.661771][ T7303] netlink: 28 bytes leftover after parsing attributes in process `syz.2.352'. [ 226.661875][ T7303] netlink: 28 bytes leftover after parsing attributes in process `syz.2.352'. [ 226.761716][ T7306] ªªªªªª: renamed from wg2 [ 227.160818][ T7321] usb usb1: usbfs: interface 0 claimed by hub while 'syz.5.358' sets config #0 [ 227.162747][ T7321] usb usb1: usbfs: interface 0 claimed by hub while 'syz.5.358' sets config #1 [ 227.484581][ T7329] usb usb1: usbfs: interface 0 claimed by hub while 'syz.2.363' sets config #0 [ 227.485487][ T7329] usb usb1: usbfs: interface 0 claimed by hub while 'syz.2.363' sets config #1 [ 227.883396][ T7334] netlink: 'syz.1.364': attribute type 1 has an invalid length. [ 228.189072][ T7334] 8021q: adding VLAN 0 to HW filter on device bond1 [ 228.428738][ T7336] bond1: (slave dummy0): making interface the new active one [ 228.430943][ T7336] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 229.301213][ T7352] Illegal XDP return value 4294967274 on prog (id 118) dev syz_tun, expect packet loss! [ 229.484267][ T7357] netlink: 28 bytes leftover after parsing attributes in process `syz.1.373'. [ 229.484295][ T7357] netlink: 28 bytes leftover after parsing attributes in process `syz.1.373'. [ 229.488295][ T7357] ªªªªªª: renamed from wg2 (while UP) [ 230.347801][ T7374] syz.2.380 (7374): drop_caches: 2 [ 232.421866][ T7367] veth1_macvtap: left allmulticast mode [ 232.422125][ T7367] macsec0: left promiscuous mode [ 232.422145][ T7367] macsec0: left allmulticast mode [ 232.829296][ T7394] macsec0: entered promiscuous mode [ 232.829526][ T7394] macsec0: entered allmulticast mode [ 232.829538][ T7394] veth1_macvtap: entered allmulticast mode [ 232.835011][ T1157] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.983187][ T37] kauditd_printk_skb: 17 callbacks suppressed [ 232.983206][ T37] audit: type=1326 audit(1766964294.940:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7395 comm="syz.3.385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39bbe8f749 code=0x7ffc0000 [ 232.983554][ T37] audit: type=1326 audit(1766964294.950:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7395 comm="syz.3.385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=127 compat=0 ip=0x7f39bbe8f749 code=0x7ffc0000 [ 232.983822][ T37] audit: type=1326 audit(1766964294.950:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7395 comm="syz.3.385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39bbe8f749 code=0x7ffc0000 [ 232.984390][ T37] audit: type=1326 audit(1766964294.950:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7395 comm="syz.3.385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f39bbe8f749 code=0x7ffc0000 [ 232.984771][ T37] audit: type=1326 audit(1766964294.950:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7395 comm="syz.3.385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39bbe8f749 code=0x7ffc0000 [ 232.985330][ T37] audit: type=1326 audit(1766964294.950:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7395 comm="syz.3.385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f39bbe8f749 code=0x7ffc0000 [ 232.986368][ T37] audit: type=1326 audit(1766964294.950:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7395 comm="syz.3.385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39bbe8f749 code=0x7ffc0000 [ 232.987058][ T37] audit: type=1326 audit(1766964294.950:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7395 comm="syz.3.385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f39bbe8f749 code=0x7ffc0000 [ 232.987351][ T37] audit: type=1326 audit(1766964294.950:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7395 comm="syz.3.385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39bbe8f749 code=0x7ffc0000 [ 232.987960][ T37] audit: type=1326 audit(1766964294.950:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7395 comm="syz.3.385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7f39bbe8f749 code=0x7ffc0000 [ 233.180159][ T7400] netlink: 60 bytes leftover after parsing attributes in process `syz.3.385'. [ 233.180231][ T7400] netlink: 12 bytes leftover after parsing attributes in process `syz.3.385'. [ 233.180342][ T7400] netlink: 60 bytes leftover after parsing attributes in process `syz.3.385'. [ 233.308541][ T1157] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.322472][ T1157] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.322520][ T1157] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.498945][ T7400] netlink: 60 bytes leftover after parsing attributes in process `syz.3.385'. [ 233.498972][ T7400] netlink: 12 bytes leftover after parsing attributes in process `syz.3.385'. [ 233.499025][ T7400] netlink: 60 bytes leftover after parsing attributes in process `syz.3.385'. [ 233.727487][ T7400] netlink: 60 bytes leftover after parsing attributes in process `syz.3.385'. [ 233.727514][ T7400] netlink: 12 bytes leftover after parsing attributes in process `syz.3.385'. [ 233.727567][ T7400] netlink: 60 bytes leftover after parsing attributes in process `syz.3.385'. [ 235.176856][ T7418] syz.5.391 (7418): drop_caches: 2 [ 236.318882][ T7432] netlink: 32 bytes leftover after parsing attributes in process `syz.0.396'. [ 242.569168][ T7478] __nla_validate_parse: 9 callbacks suppressed [ 242.569189][ T7478] netlink: 32 bytes leftover after parsing attributes in process `syz.1.408'. [ 245.662593][ T7498] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 248.021288][ T7520] syz.0.419 (7520): drop_caches: 2 [ 248.658835][ T7525] netlink: 32 bytes leftover after parsing attributes in process `syz.2.421'. [ 249.583871][ T7543] netlink: 92 bytes leftover after parsing attributes in process `syz.5.428'. [ 253.222192][ T7584] netlink: 92 bytes leftover after parsing attributes in process `syz.5.441'. [ 254.943399][ T7601] netlink: 28 bytes leftover after parsing attributes in process `syz.5.448'. [ 254.943433][ T7601] netlink: 28 bytes leftover after parsing attributes in process `syz.5.448'. [ 255.085227][ T7601] ªªªªªª: renamed from wg2 [ 256.529796][ T7619] netlink: 92 bytes leftover after parsing attributes in process `syz.1.454'. [ 257.357957][ T7635] netlink: 4 bytes leftover after parsing attributes in process `syz.1.460'. [ 257.629876][ T7646] netlink: 92 bytes leftover after parsing attributes in process `syz.3.466'. [ 260.263379][ T7669] syz.0.471 (7669): drop_caches: 2 [ 260.946551][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 260.950035][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 261.065821][ T7680] netlink: 92 bytes leftover after parsing attributes in process `syz.2.478'. [ 262.234395][ T7693] hub 1-0:1.0: USB hub found [ 262.238674][ T7693] hub 1-0:1.0: 1 port detected [ 264.524121][ T7713] netlink: 92 bytes leftover after parsing attributes in process `syz.2.489'. [ 269.358268][ T7754] netlink: 92 bytes leftover after parsing attributes in process `syz.0.504'. [ 269.884315][ T7762] netlink: 32 bytes leftover after parsing attributes in process `syz.0.505'. [ 269.999360][ T7760] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 271.797508][ T7778] syz.0.509 uses obsolete (PF_INET,SOCK_PACKET) [ 273.598547][ T7799] netlink: 92 bytes leftover after parsing attributes in process `syz.3.515'. [ 273.842102][ T7803] netlink: 32 bytes leftover after parsing attributes in process `syz.1.516'. [ 274.161906][ T7805] bond1: (slave dummy0): Releasing active interface [ 275.701529][ T7827] netlink: 92 bytes leftover after parsing attributes in process `syz.5.527'. [ 278.996877][ T7864] netlink: 92 bytes leftover after parsing attributes in process `syz.1.538'. [ 280.200091][ T7875] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 284.436415][ T7906] netlink: 92 bytes leftover after parsing attributes in process `syz.0.550'. [ 284.834916][ T7913] netlink: 28 bytes leftover after parsing attributes in process `syz.1.552'. [ 284.834944][ T7913] netlink: 28 bytes leftover after parsing attributes in process `syz.1.552'. [ 286.014869][ T7923] 9p: Bad value for 'rfdno' [ 289.841936][ T7950] IPv6: NLM_F_CREATE should be specified when creating new route [ 293.883142][ T7982] netlink: 16 bytes leftover after parsing attributes in process `syz.5.568'. [ 299.784100][ T8017] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 299.784149][ T8017] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 299.784171][ T8017] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 300.237484][ T8037] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 302.030871][ T8076] netlink: 4 bytes leftover after parsing attributes in process `syz.5.595'. [ 306.584364][ T8104] serio: Serial port ptm0 [ 309.486278][ T8125] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 311.161329][ T8142] netlink: 'syz.0.615': attribute type 10 has an invalid length. [ 311.172150][ T8142] team0: Port device dummy0 added [ 311.188239][ T8142] ======================================================= [ 311.188239][ T8142] WARNING: The mand mount option has been deprecated and [ 311.188239][ T8142] and is ignored by this kernel. Remove the mand [ 311.188239][ T8142] option from the mount to silence this warning. [ 311.188239][ T8142] ======================================================= [ 312.752642][ T8174] netlink: 4 bytes leftover after parsing attributes in process `syz.5.628'. [ 314.826494][ T8198] usb usb1: usbfs: interface 0 claimed by hub while 'syz.1.636' sets config #0 [ 314.826983][ T8198] usb usb1: usbfs: interface 0 claimed by hub while 'syz.1.636' sets config #1 [ 316.182654][ T37] kauditd_printk_skb: 41 callbacks suppressed [ 316.182672][ T37] audit: type=1326 audit(1766964378.140:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8212 comm="syz.1.641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f308ab6f749 code=0x7ffc0000 [ 316.222311][ T37] audit: type=1326 audit(1766964378.180:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8212 comm="syz.1.641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=127 compat=0 ip=0x7f308ab6f749 code=0x7ffc0000 [ 316.222371][ T37] audit: type=1326 audit(1766964378.180:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8212 comm="syz.1.641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f308ab6f749 code=0x7ffc0000 [ 316.222419][ T37] audit: type=1326 audit(1766964378.180:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8212 comm="syz.1.641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f308ab6f749 code=0x7ffc0000 [ 316.222464][ T37] audit: type=1326 audit(1766964378.180:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8212 comm="syz.1.641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f308ab6f749 code=0x7ffc0000 [ 316.222510][ T37] audit: type=1326 audit(1766964378.180:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8212 comm="syz.1.641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f308ab6f749 code=0x7ffc0000 [ 316.222556][ T37] audit: type=1326 audit(1766964378.180:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8212 comm="syz.1.641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f308ab6f749 code=0x7ffc0000 [ 316.222603][ T37] audit: type=1326 audit(1766964378.180:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8212 comm="syz.1.641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f308ab6f749 code=0x7ffc0000 [ 316.222648][ T37] audit: type=1326 audit(1766964378.180:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8212 comm="syz.1.641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f308ab6f749 code=0x7ffc0000 [ 316.222694][ T37] audit: type=1326 audit(1766964378.180:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8212 comm="syz.1.641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7f308ab6f749 code=0x7ffc0000 [ 317.463170][ T8227] netlink: 16 bytes leftover after parsing attributes in process `syz.5.645'. [ 318.226260][ T8231] netlink: 12 bytes leftover after parsing attributes in process `syz.1.647'. [ 319.933749][ T8244] netlink: 16 bytes leftover after parsing attributes in process `syz.5.650'. [ 321.925673][ T8260] veth1_macvtap: left allmulticast mode [ 321.925943][ T8260] macsec0: left promiscuous mode [ 321.925963][ T8260] macsec0: left allmulticast mode [ 322.455991][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 322.457339][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 328.453307][ T37] kauditd_printk_skb: 19 callbacks suppressed [ 328.453328][ T37] audit: type=1326 audit(1766964390.410:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8336 comm="syz.2.684" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f893b9cf749 code=0x0 [ 330.340600][ T8367] netlink: 4 bytes leftover after parsing attributes in process `syz.1.696'. [ 330.740353][ T8377] serio: Serial port ptm0 [ 344.754162][ T8477] usb usb1: usbfs: interface 0 claimed by hub while 'syz.0.732' sets config #0 [ 344.754900][ T8477] usb usb1: usbfs: interface 0 claimed by hub while 'syz.0.732' sets config #1 [ 345.103224][ T1182] batman_adv: batadv1: adding TT local entry 33:33:00:00:00:01 to non-existent VLAN -1 [ 345.513531][ T8487] netlink: 12 bytes leftover after parsing attributes in process `syz.5.738'. [ 345.597505][ T8488] ªªªªªª: renamed from wg2 [ 348.947860][ T8529] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 350.135788][ T8546] netlink: 36 bytes leftover after parsing attributes in process `syz.2.761'. [ 352.844204][ T8580] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 354.477491][ T8610] capability: warning: `syz.5.783' uses 32-bit capabilities (legacy support in use) [ 354.480836][ T8610] program syz.5.783 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 357.559482][ T8668] netlink: 4 bytes leftover after parsing attributes in process `syz.1.805'. [ 364.346649][ T8733] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 365.025876][ T5981] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 365.155573][ T5981] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 365.340796][ T8732] lec:lec_atm_close: lec0: Shut down! [ 369.843473][ T31] lec:lec_start_xmit: lec0:No lecd attached [ 370.427915][ T37] audit: type=1326 audit(1766964432.370:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8818 comm="syz.3.855" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39bbe8f749 code=0x7ffc0000 [ 370.428286][ T37] audit: type=1326 audit(1766964432.390:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8818 comm="syz.3.855" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f39bbe8f749 code=0x7ffc0000 [ 370.428619][ T37] audit: type=1326 audit(1766964432.390:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8818 comm="syz.3.855" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39bbe8f749 code=0x7ffc0000 [ 370.428920][ T37] audit: type=1326 audit(1766964432.390:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8818 comm="syz.3.855" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39bbe8f749 code=0x7ffc0000 [ 370.429637][ T37] audit: type=1326 audit(1766964432.390:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8818 comm="syz.3.855" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7f39bbe8f749 code=0x7ffc0000 [ 370.430494][ T37] audit: type=1326 audit(1766964432.390:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8818 comm="syz.3.855" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39bbe8f749 code=0x7ffc0000 [ 370.430547][ T37] audit: type=1326 audit(1766964432.390:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8818 comm="syz.3.855" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39bbe8f749 code=0x7ffc0000 [ 371.184750][ T8836] tipc: Enabled bearer , priority 10 [ 373.238085][ T37] audit: type=1326 audit(1766964435.200:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8864 comm="syz.2.868" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f893b9cf749 code=0x7ffc0000 [ 373.238430][ T37] audit: type=1326 audit(1766964435.200:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8864 comm="syz.2.868" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f893b9cf749 code=0x7ffc0000 [ 373.292977][ T37] audit: type=1326 audit(1766964435.250:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8864 comm="syz.2.868" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f893b9cf749 code=0x7ffc0000 [ 375.547800][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5700 ms [ 375.548182][ C1] lec:lec_tx_timeout: lec0 [ 375.548761][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 375.731302][ T37] kauditd_printk_skb: 3 callbacks suppressed [ 375.731323][ T37] audit: type=1326 audit(1766964437.690:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8906 comm="syz.0.881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f070c12f749 code=0x7ffc0000 [ 375.731472][ T37] audit: type=1326 audit(1766964437.690:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8906 comm="syz.0.881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f070c12f749 code=0x7ffc0000 [ 375.791881][ T37] audit: type=1326 audit(1766964437.750:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8906 comm="syz.0.881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f070c12f749 code=0x7ffc0000 [ 375.792046][ T37] audit: type=1326 audit(1766964437.750:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8906 comm="syz.0.881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f070c12f749 code=0x7ffc0000 [ 375.792217][ T37] audit: type=1326 audit(1766964437.750:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8906 comm="syz.0.881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f070c12f749 code=0x7ffc0000 [ 375.798307][ T37] audit: type=1326 audit(1766964437.750:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8906 comm="syz.0.881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7f070c12f749 code=0x7ffc0000 [ 375.798451][ T37] audit: type=1326 audit(1766964437.760:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8906 comm="syz.0.881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f070c12f749 code=0x7ffc0000 [ 376.519217][ T8876] lec:lec_atm_close: lec0: Shut down! [ 376.684179][ T8930] process 'syz.3.888' launched '/dev/fd/6' with NULL argv: empty string added [ 376.908175][ T8934] tipc: Enabling of bearer rejected, already enabled [ 377.146662][ T37] audit: type=1326 audit(1766964439.100:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8939 comm="syz.5.894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f635d1ef749 code=0x7ffc0000 [ 377.146719][ T37] audit: type=1326 audit(1766964439.110:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8939 comm="syz.5.894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f635d1ef749 code=0x7ffc0000 [ 377.200548][ T37] audit: type=1326 audit(1766964439.160:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8939 comm="syz.5.894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f635d1ef749 code=0x7ffc0000 [ 380.046446][ T8979] netlink: 'syz.5.906': attribute type 10 has an invalid length. [ 380.046482][ T8979] syz_tun: entered promiscuous mode [ 380.051825][ T8979] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 381.973068][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5460 ms [ 381.973105][ C1] lec:lec_tx_timeout: lec0 [ 381.973250][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 383.823874][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 383.823947][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 386.995751][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5020 ms [ 386.996696][ C1] lec:lec_tx_timeout: lec0 [ 387.002695][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 388.835781][ T9113] netlink: 'syz.0.948': attribute type 10 has an invalid length. [ 388.835818][ T9113] syz_tun: entered promiscuous mode [ 388.840060][ T9113] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 391.171962][ T9156] tipc: Started in network mode [ 391.171996][ T9156] tipc: Node identity 7f000001, cluster identity 4711 [ 391.195652][ T9156] tipc: Enabled bearer , priority 10 [ 392.345548][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5340 ms [ 392.345634][ C1] lec:lec_tx_timeout: lec0 [ 392.347218][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 392.972427][ T5981] tipc: Node number set to 2130706433 [ 393.342178][ T9180] No control pipe specified [ 393.353958][ T9180] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 393.354022][ T9180] overlayfs: missing 'lowerdir' [ 393.894006][ T9189] program syz.1.975 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 393.947986][ T10] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 393.965422][ T10] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 394.378676][ T9202] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 396.294760][ T9235] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 396.294805][ T9235] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 396.294825][ T9235] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 396.602740][ T5981] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 396.631551][ T5981] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 396.877952][ T9247] fido_id[9247]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 397.762580][ T9246] gretap0: entered promiscuous mode [ 399.495308][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 7150 ms [ 399.495344][ C1] lec:lec_tx_timeout: lec0 [ 399.499345][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 400.083666][ T9282] program syz.3.1006 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 400.343923][ T9292] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1011'. [ 402.578850][ T9322] netlink: 2048 bytes leftover after parsing attributes in process `syz.5.1022'. [ 402.578893][ T9322] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1022'. [ 403.098481][ T10] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 403.115126][ T10] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz1] on syz0 [ 403.133992][ T31] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 403.295472][ T9335] overlayfs: failed to resolve './file1': -2 [ 403.383252][ T31] usb 3-1: Using ep0 maxpacket: 32 [ 403.401095][ T31] usb 3-1: config 0 has no interfaces? [ 403.421515][ T31] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 403.421547][ T31] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 403.421570][ T31] usb 3-1: Product: syz [ 403.421586][ T31] usb 3-1: Manufacturer: syz [ 403.421603][ T31] usb 3-1: SerialNumber: syz [ 403.530974][ T9333] fido_id[9333]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 403.625432][ T31] usb 3-1: config 0 descriptor?? [ 405.117358][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5620 ms [ 405.117399][ C1] lec:lec_tx_timeout: lec0 [ 405.117836][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 406.110801][ T31] usb 3-1: USB disconnect, device number 2 [ 409.495597][ T9378] lec:lec_atm_close: lec0: Shut down! [ 412.062653][ T9432] netlink: 196 bytes leftover after parsing attributes in process `syz.5.1054'. [ 413.413251][ T9442] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1059'. [ 413.639969][ T9447] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1059'. [ 414.913189][ T9429] lec0: mtu less than device minimum [ 414.913224][ T9429] lec:lec_atm_send: lec0: change_mtu to 0 failed [ 414.913469][ T9429] lec:lec_atm_close: lec0: Shut down! [ 415.443204][ T9469] syz_tun: left promiscuous mode [ 416.827616][ T9495] netlink: 'syz.5.1077': attribute type 10 has an invalid length. [ 419.384777][ T9512] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 419.384823][ T9512] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 419.384846][ T9512] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 419.443143][ T9495] syz_tun: entered promiscuous mode [ 419.973221][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5060 ms [ 419.973261][ C1] lec:lec_tx_timeout: lec0 [ 419.973354][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 420.050381][ T9523] program syz.2.1086 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 420.439826][ T9539] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 420.567623][ T10] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 420.613795][ T10] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz1] on syz0 [ 424.483142][ T9576] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1103'. [ 424.623621][ T9578] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1104'. [ 424.983042][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 424.983079][ C1] lec:lec_tx_timeout: lec0 [ 424.983225][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 425.015852][ T9589] syz_tun: left promiscuous mode [ 425.539903][ T9596] netlink: 240 bytes leftover after parsing attributes in process `syz.3.1108'. [ 425.710654][ T9579] lec:lec_atm_close: lec0: Shut down! [ 427.409365][ T9621] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1117'. [ 431.838952][ T9649] bond0: entered promiscuous mode [ 431.838977][ T9649] bond_slave_0: entered promiscuous mode [ 431.839245][ T9649] bond_slave_1: entered promiscuous mode [ 432.150064][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 6440 ms [ 432.150103][ C1] lec:lec_tx_timeout: lec0 [ 432.150716][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 432.261524][ T9649] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 432.271133][ T9649] bond0: left promiscuous mode [ 432.271158][ T9649] bond_slave_0: left promiscuous mode [ 432.271772][ T9649] bond_slave_1: left promiscuous mode [ 432.486243][ T9657] evm: overlay not supported [ 432.841939][ T9665] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1130'. [ 432.841969][ T9665] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1130'. [ 432.890493][ T9665] ªªªªªª: renamed from wg2 [ 437.561344][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5410 ms [ 437.561622][ C1] lec:lec_tx_timeout: lec0 [ 437.566422][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 439.646017][ T9721] bond0: entered promiscuous mode [ 439.647192][ T9721] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 439.747937][ T9724] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 439.768353][ T9721] bond0: left promiscuous mode [ 443.745437][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 6180 ms [ 443.745508][ C1] lec:lec_tx_timeout: lec0 [ 443.745851][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 444.248103][ T5981] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 444.279355][ T5981] hid-generic 0000:0000:0000.0006: hidraw0: HID v0.00 Device [syz1] on syz0 [ 445.399988][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 445.400061][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 446.900387][ T5981] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 447.053216][ T5981] usb 6-1: Using ep0 maxpacket: 8 [ 447.081729][ T5981] usb 6-1: config 2 has an invalid interface number: 31 but max is 0 [ 447.081757][ T5981] usb 6-1: config 2 has no interface number 0 [ 447.081794][ T5981] usb 6-1: config 2 interface 31 has no altsetting 0 [ 447.086422][ T5981] usb 6-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 447.086453][ T5981] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 447.086475][ T5981] usb 6-1: Product: syz [ 447.086491][ T5981] usb 6-1: Manufacturer: syz [ 447.086508][ T5981] usb 6-1: SerialNumber: syz [ 447.345969][ T5981] ch9200 6-1:2.31: probe with driver ch9200 failed with error -22 [ 447.439291][ T5981] usb 6-1: USB disconnect, device number 2 [ 448.051679][ T9812] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 449.103042][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5360 ms [ 449.103081][ C1] lec:lec_tx_timeout: lec0 [ 449.103309][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 450.265301][ T9827] gretap0: left promiscuous mode [ 450.768352][ T9842] netlink: 'syz.0.1189': attribute type 1 has an invalid length. [ 451.041853][ T9842] 8021q: adding VLAN 0 to HW filter on device bond1 [ 452.104716][ T9842] team0: Port device dummy0 removed [ 452.110971][ T9842] bond1: (slave dummy0): making interface the new active one [ 452.112527][ T9842] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 452.138193][ T31] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 452.173791][ T31] hid-generic 0000:0000:0000.0007: hidraw0: HID v0.00 Device [syz1] on syz0 [ 453.325443][ T9860] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 454.066195][ T9877] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1198'. [ 454.113033][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 454.113066][ C1] lec:lec_tx_timeout: lec0 [ 454.113151][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 454.823579][ T9883] netlink: 2048 bytes leftover after parsing attributes in process `syz.2.1199'. [ 454.823605][ T9883] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1199'. [ 459.151157][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5030 ms [ 459.151189][ C1] lec:lec_tx_timeout: lec0 [ 459.151524][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 464.163017][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5020 ms [ 464.163055][ C1] lec:lec_tx_timeout: lec0 [ 464.163211][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 467.228343][ T9970] program syz.5.1225 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 468.926457][ T9983] lec:lec_atm_close: lec0: Shut down! [ 472.441525][T10046] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 473.188971][T10037] lec:lec_atm_close: lec0: Shut down! [ 473.239415][T10057] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1255'. [ 477.603446][T10085] lec:lec_atm_close: lec0: Shut down! [ 478.113867][T10112] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 482.933204][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5330 ms [ 482.933242][ C1] lec:lec_tx_timeout: lec0 [ 482.933387][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 483.681774][T10161] overlayfs: failed to resolve './file0': -2 [ 484.180113][T10173] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1293'. [ 484.518233][T10150] lec:lec_atm_close: lec0: Shut down! [ 484.897896][ T5787] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 485.073071][ T5787] usb 3-1: Using ep0 maxpacket: 16 [ 485.077044][ T5787] usb 3-1: config 134 has an invalid interface number: 94 but max is 0 [ 485.077075][ T5787] usb 3-1: config 134 has an invalid descriptor of length 36, skipping remainder of the config [ 485.077096][ T5787] usb 3-1: config 134 has no interface number 0 [ 485.077131][ T5787] usb 3-1: config 134 interface 94 has no altsetting 0 [ 485.089734][ T5787] usb 3-1: New USB device found, idVendor=0582, idProduct=003b, bcdDevice=57.40 [ 485.089836][ T5787] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 485.089897][ T5787] usb 3-1: Product: syz [ 485.089938][ T5787] usb 3-1: Manufacturer: syz [ 485.089981][ T5787] usb 3-1: SerialNumber: syz [ 486.614792][ T5787] usb 3-1: USB disconnect, device number 3 [ 486.820786][T10195] udevd[10195]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:134.94/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 487.573733][ T37] kauditd_printk_skb: 5 callbacks suppressed [ 487.573752][ T37] audit: type=1326 audit(1766964549.530:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10229 comm="syz.5.1314" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f635d1ef749 code=0x0 [ 490.129136][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5610 ms [ 490.129174][ C1] lec:lec_tx_timeout: lec0 [ 490.129667][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 490.428313][T10265] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1325'. [ 490.428346][T10265] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1325'. [ 490.428463][T10265] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1325'. [ 490.817855][T10266] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 490.935663][T10270] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1326'. [ 495.039540][T10309] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1338'. [ 495.143065][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5020 ms [ 495.143105][ C1] lec:lec_tx_timeout: lec0 [ 495.143203][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 495.494512][T10314] capability: warning: `syz.5.1340' uses deprecated v2 capabilities in a way that may be insecure [ 500.392149][T10320] lec:lec_atm_close: lec0: Shut down! [ 500.654026][T10337] lec:lec_atm_close: lec0: Shut down! [ 502.604712][ T5787] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 503.783871][ T5787] usb 6-1: Using ep0 maxpacket: 16 [ 504.193181][ T5787] usb 6-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 504.193239][ T5787] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 504.193267][ T5787] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 8 [ 504.193293][ T5787] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 255 [ 504.269636][ T5787] usb 6-1: string descriptor 0 read error: -71 [ 504.269686][ T5787] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 504.269711][ T5787] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 504.343211][ T5787] usb 6-1: can't set config #1, error -71 [ 504.360713][ T5787] usb 6-1: USB disconnect, device number 3 [ 506.203261][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5550 ms [ 506.203417][ C1] lec:lec_tx_timeout: lec0 [ 506.207331][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 506.884380][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 506.884452][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 507.003111][ T5787] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 507.167531][T10414] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1368'. [ 507.182900][ T5787] usb 6-1: Using ep0 maxpacket: 32 [ 507.190733][ T5787] usb 6-1: config 0 has no interfaces? [ 507.206139][ T5787] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 507.206171][ T5787] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 507.206194][ T5787] usb 6-1: Product: syz [ 507.206209][ T5787] usb 6-1: Manufacturer: syz [ 507.206225][ T5787] usb 6-1: SerialNumber: syz [ 507.249593][ T5787] usb 6-1: config 0 descriptor?? [ 507.488745][ T10] usb 6-1: USB disconnect, device number 4 [ 507.764698][T10430] netlink: 'syz.3.1373': attribute type 1 has an invalid length. [ 507.876517][T10430] 8021q: adding VLAN 0 to HW filter on device bond1 [ 507.905757][T10434] bond1: (slave dummy0): making interface the new active one [ 507.906836][T10434] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 511.986745][T10455] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1377'. [ 512.446622][T10460] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1380'. [ 512.453058][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 6250 ms [ 512.453091][ C1] lec:lec_tx_timeout: lec0 [ 512.455326][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 513.063445][ T5787] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 513.213043][ T5787] usb 4-1: Using ep0 maxpacket: 32 [ 513.217406][ T5787] usb 4-1: config 0 has no interfaces? [ 513.222332][ T5787] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 513.222366][ T5787] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 513.222389][ T5787] usb 4-1: Product: syz [ 513.222405][ T5787] usb 4-1: Manufacturer: syz [ 513.222421][ T5787] usb 4-1: SerialNumber: syz [ 513.285070][ T5787] usb 4-1: config 0 descriptor?? [ 513.517531][ T10] usb 4-1: USB disconnect, device number 2 [ 513.796201][T10478] deleting an unspecified loop device is not supported. [ 516.718040][T10495] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 518.331727][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5870 ms [ 518.331768][ C1] lec:lec_tx_timeout: lec0 [ 518.332211][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 519.492334][T10520] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1401'. [ 519.512882][T10520] netlink: 'syz.3.1401': attribute type 10 has an invalid length. [ 519.553172][T10520] syz_tun: entered promiscuous mode [ 519.557724][T10520] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 519.848044][T10529] netlink: 2028 bytes leftover after parsing attributes in process `syz.0.1403'. [ 519.848069][T10529] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1403'. [ 521.012553][ T5787] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 521.163071][ T5787] usb 3-1: Using ep0 maxpacket: 16 [ 521.165482][ T5787] usb 3-1: config 0 has an invalid interface number: 255 but max is 7 [ 521.165509][ T5787] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 521.165533][ T5787] usb 3-1: config 0 has no interface number 0 [ 521.168686][ T5787] usb 3-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 521.168716][ T5787] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 521.168755][ T5787] usb 3-1: Product: syz [ 521.168771][ T5787] usb 3-1: Manufacturer: syz [ 521.168788][ T5787] usb 3-1: SerialNumber: syz [ 521.244424][ T5787] usb 3-1: config 0 descriptor?? [ 521.261893][ T5787] ftdi_sio 3-1:0.255: FTDI USB Serial Device converter detected [ 521.275571][ T5787] usb 3-1: Detected FT232R [ 521.925219][ T5787] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 522.141292][ T5787] ftdi_sio 3-1:0.255: GPIO initialisation failed: -5 [ 522.358212][ T5787] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 522.545559][ T5981] usb 3-1: USB disconnect, device number 4 [ 522.591877][ T5981] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 522.592874][ T5981] ftdi_sio 3-1:0.255: device disconnected [ 523.972975][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5650 ms [ 523.973012][ C1] lec:lec_tx_timeout: lec0 [ 523.973292][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 524.633855][T10581] bond0: entered promiscuous mode [ 524.633880][T10581] bond_slave_0: entered promiscuous mode [ 524.634156][T10581] bond_slave_1: entered promiscuous mode [ 524.667885][T10581] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 524.683589][T10581] bond0: left promiscuous mode [ 524.683613][T10581] bond_slave_0: left promiscuous mode [ 524.683891][T10581] bond_slave_1: left promiscuous mode [ 524.767875][T10585] netlink: 'syz.5.1420': attribute type 10 has an invalid length. [ 524.767896][T10585] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1420'. [ 526.121066][T10587] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 526.121104][T10587] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 526.121133][T10587] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 526.311737][T10585] ipvlan2: entered promiscuous mode [ 526.312856][T10585] bridge0: port 3(ipvlan2) entered blocking state [ 526.333255][T10585] bridge0: port 3(ipvlan2) entered disabled state [ 526.333514][T10585] ipvlan2: entered allmulticast mode [ 526.333532][T10585] bridge0: entered allmulticast mode [ 526.340630][T10585] ipvlan2: left allmulticast mode [ 526.340651][T10585] bridge0: left allmulticast mode [ 527.909503][T10592] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 528.751309][T10624] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 528.982993][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 528.983028][ C1] lec:lec_tx_timeout: lec0 [ 528.983137][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 529.955857][T10629] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 529.955903][T10629] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 529.955926][T10629] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 533.224766][T10665] Can't find a SQUASHFS superblock on nullb0 [ 533.280960][T10667] Can't find a SQUASHFS superblock on nullb0 [ 534.883411][T10684] netlink: 'syz.3.1455': attribute type 1 has an invalid length. [ 535.984898][T10684] 8021q: adding VLAN 0 to HW filter on device bond2 [ 536.149411][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 7160 ms [ 536.149452][ C1] lec:lec_tx_timeout: lec0 [ 536.150350][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 537.097275][T10684] bond1: (slave dummy0): Releasing active interface [ 537.122673][T10684] bond2: (slave dummy0): making interface the new active one [ 537.130749][T10684] bond2: (slave dummy0): Enslaving as an active interface with an up link [ 538.040923][T10692] bond0: entered promiscuous mode [ 538.040946][T10692] bond_slave_0: entered promiscuous mode [ 538.056072][T10692] bond_slave_1: entered promiscuous mode [ 538.056332][T10692] syz_tun: entered promiscuous mode [ 538.080374][T10692] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 538.280970][T10709] IPVS: set_ctl: invalid protocol: 108 172.20.20.57:20001 [ 538.299758][T10710] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 541.034998][T10738] Can't find a SQUASHFS superblock on nullb0 [ 541.364782][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5220 ms [ 541.364958][ C1] lec:lec_tx_timeout: lec0 [ 541.366935][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 541.576431][ T5787] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 541.743532][ T37] audit: type=1326 audit(1766964603.430:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10745 comm="syz.5.1475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f635d1ef749 code=0x7ffc0000 [ 541.743656][ T37] audit: type=1326 audit(1766964603.440:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10745 comm="syz.5.1475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f635d1ef749 code=0x7ffc0000 [ 541.743705][ T37] audit: type=1326 audit(1766964603.450:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10745 comm="syz.5.1475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=29 compat=0 ip=0x7f635d1ef749 code=0x7ffc0000 [ 541.743750][ T37] audit: type=1326 audit(1766964603.480:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10745 comm="syz.5.1475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f635d1ef749 code=0x7ffc0000 [ 541.743795][ T37] audit: type=1326 audit(1766964603.480:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10745 comm="syz.5.1475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f635d1ef749 code=0x7ffc0000 [ 541.743839][ T37] audit: type=1326 audit(1766964603.490:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10745 comm="syz.5.1475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=25 compat=0 ip=0x7f635d1ef749 code=0x7ffc0000 [ 541.743891][ T37] audit: type=1326 audit(1766964603.510:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10745 comm="syz.5.1475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f635d1ef749 code=0x7ffc0000 [ 541.743936][ T37] audit: type=1326 audit(1766964603.510:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10745 comm="syz.5.1475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f635d1ef749 code=0x7ffc0000 [ 541.743982][ T37] audit: type=1326 audit(1766964603.530:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10745 comm="syz.5.1475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f635d1f1667 code=0x7ffc0000 [ 541.744028][ T37] audit: type=1326 audit(1766964603.570:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10745 comm="syz.5.1475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f635d1f15dc code=0x7ffc0000 [ 541.923018][ T5787] usb 3-1: Using ep0 maxpacket: 16 [ 541.992777][ T5787] usb 3-1: config 134 has an invalid interface number: 94 but max is 0 [ 541.992807][ T5787] usb 3-1: config 134 has an invalid interface number: 1 but max is 0 [ 541.992829][ T5787] usb 3-1: config 134 has an invalid descriptor of length 205, skipping remainder of the config [ 541.992850][ T5787] usb 3-1: config 134 has 2 interfaces, different from the descriptor's value: 1 [ 541.992881][ T5787] usb 3-1: config 134 has no interface number 0 [ 542.038304][ T5787] usb 3-1: config 134 interface 94 altsetting 45 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 542.038359][ T5787] usb 3-1: config 134 interface 1 altsetting 4 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 542.038389][ T5787] usb 3-1: config 134 interface 94 has no altsetting 0 [ 542.038409][ T5787] usb 3-1: config 134 interface 1 has no altsetting 0 [ 542.041982][ T5787] usb 3-1: New USB device found, idVendor=0582, idProduct=003b, bcdDevice=57.40 [ 542.042010][ T5787] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 542.042031][ T5787] usb 3-1: Product: syz [ 542.042046][ T5787] usb 3-1: Manufacturer: syz [ 542.042060][ T5787] usb 3-1: SerialNumber: syz [ 542.610250][ T5787] usb 3-1: selecting invalid altsetting 0 [ 542.677459][ T5787] usb 3-1: USB disconnect, device number 5 [ 544.232394][T10464] udevd[10464]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:134.94/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 545.157985][T10772] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 545.438511][T10783] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1488'. [ 545.563072][ T5989] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 545.624707][T10787] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 545.755276][ T5989] usb 3-1: Using ep0 maxpacket: 16 [ 546.384923][ T5989] usb 3-1: config 0 has an invalid interface number: 24 but max is 7 [ 546.384956][ T5989] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 546.384980][ T5989] usb 3-1: config 0 has no interface number 0 [ 546.385014][ T5989] usb 3-1: too many endpoints for config 0 interface 24 altsetting 159: 244, using maximum allowed: 30 [ 546.385057][ T5989] usb 3-1: config 0 interface 24 altsetting 159 has 0 endpoint descriptors, different from the interface descriptor's value: 244 [ 546.385089][ T5989] usb 3-1: config 0 interface 24 has no altsetting 0 [ 546.388130][ T5989] usb 3-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 546.388161][ T5989] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 546.388184][ T5989] usb 3-1: Product: syz [ 546.388200][ T5989] usb 3-1: Manufacturer: syz [ 546.388217][ T5989] usb 3-1: SerialNumber: syz [ 546.395424][ T5989] usb 3-1: config 0 descriptor?? [ 546.509992][ T5989] ftdi_sio 3-1:0.24: FTDI USB Serial Device converter detected [ 546.511858][ T5989] usb 3-1: Detected FT232R [ 546.639275][ T5989] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 546.853658][ T5989] ftdi_sio 3-1:0.24: GPIO initialisation failed: -5 [ 546.893612][ T5989] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 547.013159][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5650 ms [ 547.015708][ C1] lec:lec_tx_timeout: lec0 [ 547.016903][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 547.133625][ T5989] usb 3-1: USB disconnect, device number 6 [ 547.149866][ T5989] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 547.150655][ T5989] ftdi_sio 3-1:0.24: device disconnected [ 547.447153][T10829] binder: 10826:10829 ioctl c0306201 200000000680 returned -14 [ 547.993231][ T5992] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 548.210377][ T5992] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 548.210416][ T5992] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 548.210442][ T5992] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 548.210488][ T5992] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 548.210514][ T5992] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 548.978897][ T5992] usb 4-1: config 0 descriptor?? [ 550.464006][ T5992] usbhid 4-1:0.0: can't add hid device: -71 [ 550.464143][ T5992] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 550.480847][ T5992] usb 4-1: USB disconnect, device number 3 [ 550.594002][T10859] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1516'. [ 551.181015][T10869] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 551.401389][T10873] netlink: 'syz.0.1512': attribute type 2 has an invalid length. [ 552.022990][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 552.023026][ C1] lec:lec_tx_timeout: lec0 [ 552.023130][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 553.772937][T10893] fuse: Bad value for 'fd' [ 556.105364][T10902] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 556.105384][T10902] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 556.219159][T10902] vhci_hcd vhci_hcd.0: Device attached [ 556.452215][T10906] vhci_hcd: connection closed [ 556.472216][ T68] vhci_hcd vhci_hcd.3: stop threads [ 556.493111][ T68] vhci_hcd vhci_hcd.3: release socket [ 556.519942][ T68] vhci_hcd vhci_hcd.3: disconnect device [ 557.042982][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5020 ms [ 557.043018][ C1] lec:lec_tx_timeout: lec0 [ 557.043162][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 558.338452][T10936] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1541'. [ 558.788743][T10939] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1543'. [ 558.916465][T10944] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 558.916487][T10944] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 558.974178][T10944] vhci_hcd vhci_hcd.0: Device attached [ 559.033855][T10939] bond1: (slave dummy0): Releasing active interface [ 559.035449][T10945] vhci_hcd: connection closed [ 559.036918][ T6021] vhci_hcd vhci_hcd.3: stop threads [ 559.036942][ T6021] vhci_hcd vhci_hcd.3: release socket [ 559.036980][ T6021] vhci_hcd vhci_hcd.3: disconnect device [ 559.831821][T10960] mkiss: ax0: crc mode is auto. [ 560.123555][T10965] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 562.033071][ T5989] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 562.053011][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 562.053047][ C1] lec:lec_tx_timeout: lec0 [ 562.053140][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 562.183052][ T5989] usb 4-1: Using ep0 maxpacket: 32 [ 562.185531][ T5989] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 562.188713][ T5989] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 562.188741][ T5989] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 562.188763][ T5989] usb 4-1: Product: syz [ 562.188778][ T5989] usb 4-1: Manufacturer: syz [ 562.188794][ T5989] usb 4-1: SerialNumber: syz [ 562.248730][ T5989] usb 4-1: config 0 descriptor?? [ 562.251882][T10980] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 562.625666][T10987] binder: 10985:10987 ioctl c0306201 200000000080 returned -14 [ 564.082106][T10999] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 565.701844][T10999] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 565.708081][T10999] overlayfs: failed to look up (tracing) for ino (-66) [ 567.063334][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 567.063413][ C1] lec:lec_tx_timeout: lec0 [ 567.063689][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 568.760512][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 568.889477][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 571.232458][T11018] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1565'. [ 571.459281][T11018] macvlan2: entered allmulticast mode [ 571.459356][T11018] veth1_vlan: entered allmulticast mode [ 571.833461][ T5981] usb 4-1: USB disconnect, device number 4 [ 571.893691][T11018] veth1_vlan: left allmulticast mode [ 572.072986][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 572.073022][ C1] lec:lec_tx_timeout: lec0 [ 572.073143][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 572.206652][ T5810] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 572.228063][ T5810] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 572.234829][T11023] futex_wake_op: syz.5.1566 tries to shift op by -1; fix this program [ 572.272120][ T37] kauditd_printk_skb: 45 callbacks suppressed [ 572.272139][ T37] audit: type=1326 audit(1766964634.230:221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11022 comm="syz.5.1566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f635d1ef749 code=0x7ffc0000 [ 572.272187][ T37] audit: type=1326 audit(1766964634.230:222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11022 comm="syz.5.1566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=333 compat=0 ip=0x7f635d1ef749 code=0x7ffc0000 [ 572.272231][ T37] audit: type=1326 audit(1766964634.230:223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11022 comm="syz.5.1566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f635d1ef749 code=0x7ffc0000 [ 572.272287][ T37] audit: type=1326 audit(1766964634.230:224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11022 comm="syz.5.1566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f635d1ef749 code=0x7ffc0000 [ 572.272331][ T37] audit: type=1326 audit(1766964634.230:225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11022 comm="syz.5.1566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f635d1ef749 code=0x7ffc0000 [ 572.272378][ T37] audit: type=1326 audit(1766964634.230:226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11022 comm="syz.5.1566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f635d1ef749 code=0x7ffc0000 [ 572.272421][ T37] audit: type=1326 audit(1766964634.230:227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11022 comm="syz.5.1566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f635d1ef749 code=0x7ffc0000 [ 572.446537][ T37] audit: type=1326 audit(1766964634.410:228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11022 comm="syz.5.1566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f635d1e65e7 code=0x7ffc0000 [ 572.446601][ T37] audit: type=1326 audit(1766964634.410:229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11022 comm="syz.5.1566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f635d18b829 code=0x7ffc0000 [ 572.446649][ T37] audit: type=1326 audit(1766964634.410:230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11022 comm="syz.5.1566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f635d1ef749 code=0x7ffc0000 [ 572.533293][ T5810] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 572.557928][ T5810] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 572.558991][ T5810] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 572.636802][ T5812] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 572.637260][ T5812] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 572.637710][ T5812] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 572.639007][ T5812] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 572.641841][ T5812] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 573.422616][T11024] chnl_net:caif_netlink_parms(): no params data found [ 574.693143][ T5812] Bluetooth: hci4: command tx timeout [ 575.659066][T11055] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1573'. [ 576.312314][T11055] mac80211_hwsim hwsim12 wlan0: entered promiscuous mode [ 576.775451][ T5812] Bluetooth: hci4: command tx timeout [ 577.083084][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 577.083123][ C1] lec:lec_tx_timeout: lec0 [ 577.083227][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 577.167158][T11058] tmpfs: Unsupported parameter 'huge' [ 577.185129][T11058] 9pnet_virtio: no channels available for device syz [ 577.725459][ T37] kauditd_printk_skb: 99 callbacks suppressed [ 577.725511][ T37] audit: type=1326 audit(1766964639.640:330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11063 comm="syz.5.1577" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f635d1ef749 code=0x0 [ 577.850113][T11069] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1577'. [ 577.850269][T11069] openvswitch: netlink: Flow actions attr not present in new flow. [ 578.853056][ T5812] Bluetooth: hci4: command tx timeout [ 580.261755][T11024] bridge0: port 1(bridge_slave_0) entered blocking state [ 580.262763][T11024] bridge0: port 1(bridge_slave_0) entered disabled state [ 580.264706][T11024] bridge_slave_0: entered allmulticast mode [ 580.271606][T11024] bridge_slave_0: entered promiscuous mode [ 580.357271][T11024] bridge0: port 2(bridge_slave_1) entered blocking state [ 580.357387][T11024] bridge0: port 2(bridge_slave_1) entered disabled state [ 580.357576][T11024] bridge_slave_1: entered allmulticast mode [ 580.365813][T11024] bridge_slave_1: entered promiscuous mode [ 580.933198][ T5810] Bluetooth: hci4: command tx timeout [ 581.186749][T11024] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 581.495613][T11024] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 581.905399][T11024] team0: Port device team_slave_0 added [ 581.920183][T11024] team0: Port device team_slave_1 added [ 582.287641][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5200 ms [ 582.287675][ C1] lec:lec_tx_timeout: lec0 [ 582.292644][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 582.455444][T11106] 9pnet_virtio: no channels available for device syz [ 583.350708][T11111] input: syz0 as /devices/virtual/input/input5 [ 584.656544][T11024] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 584.656563][T11024] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 584.656592][T11024] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 584.658823][T11024] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 584.658836][T11024] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 584.658863][T11024] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 585.278117][T11128] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 586.369191][ T37] audit: type=1326 audit(1766964648.330:331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11124 comm="syz.5.1596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f635d1ef749 code=0x7fc00000 [ 586.369346][ T37] audit: type=1326 audit(1766964648.330:332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11124 comm="syz.5.1596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f635d1ef749 code=0x7fc00000 [ 586.369473][ T37] audit: type=1326 audit(1766964648.330:333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11124 comm="syz.5.1596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f635d1ef749 code=0x7fc00000 [ 586.369629][ T37] audit: type=1326 audit(1766964648.330:334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11124 comm="syz.5.1596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f635d1ef749 code=0x7fc00000 [ 586.369772][ T37] audit: type=1326 audit(1766964648.330:335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11124 comm="syz.5.1596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f635d1ef749 code=0x7fc00000 [ 586.369913][ T37] audit: type=1326 audit(1766964648.330:336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11124 comm="syz.5.1596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f635d1ef749 code=0x7fc00000 [ 586.370083][ T37] audit: type=1326 audit(1766964648.330:337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11124 comm="syz.5.1596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f635d1ef749 code=0x7fc00000 [ 586.370233][ T37] audit: type=1326 audit(1766964648.330:338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11124 comm="syz.5.1596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f635d1ef749 code=0x7fc00000 [ 586.370400][ T37] audit: type=1326 audit(1766964648.330:339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11124 comm="syz.5.1596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f635d1ef749 code=0x7fc00000 [ 586.371242][ T37] audit: type=1326 audit(1766964648.330:340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11124 comm="syz.5.1596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f635d1ef749 code=0x7fc00000 [ 588.459053][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 6170 ms [ 588.459089][ C1] lec:lec_tx_timeout: lec0 [ 588.461225][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 588.718989][T11024] hsr_slave_0: entered promiscuous mode [ 588.720418][T11024] hsr_slave_1: entered promiscuous mode [ 590.065547][ T10] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 590.213124][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 590.215560][ T10] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 590.215589][ T10] usb 4-1: config 179 has no interface number 0 [ 590.215639][ T10] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 590.215679][ T10] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 590.215709][ T10] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 590.215736][ T10] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 590.215764][ T10] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 590.215809][ T10] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 590.215832][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 590.341801][T11177] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 590.849100][ C0] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 590.849173][ C0] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 590.849529][ T10] usb 4-1: USB disconnect, device number 5 [ 590.890305][T11143] input: Generic X-Box pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:179.65/input/input7 [ 593.251082][ T45] bond0 (unregistering): Released all slaves [ 594.373051][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5920 ms [ 594.373086][ C1] lec:lec_tx_timeout: lec0 [ 594.373201][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 595.236246][ T45] bond1 (unregistering): Released all slaves [ 595.468502][ T45] tipc: Disabling bearer [ 595.482940][ T45] tipc: Left network mode [ 599.265805][T11299] 9pnet_virtio: no channels available for device syz [ 599.676699][T11300] SQUASHFS error: Failed to read block 0x0: -5 [ 600.132982][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5760 ms [ 600.133017][ C1] lec:lec_tx_timeout: lec0 [ 600.133144][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 600.433173][ T45] hsr_slave_0: left promiscuous mode [ 600.455091][ T45] hsr_slave_1: left promiscuous mode [ 601.458963][T11331] 9pnet_virtio: no channels available for device syz [ 603.487953][T11348] 9pnet_virtio: no channels available for device syz [ 605.142971][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 605.143008][ C1] lec:lec_tx_timeout: lec0 [ 605.143168][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 605.235713][T11363] 9pnet_virtio: no channels available for device syz [ 606.519784][T11369] BUG: sleeping function called from invalid context at kernel/locking/spinlock_rt.c:48 [ 606.519803][T11369] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 11369, name: syz.2.1662 [ 606.519816][T11369] preempt_count: 2, expected: 0 [ 606.519823][T11369] RCU nest depth: 1, expected: 1 [ 606.519833][T11369] 2 locks held by syz.2.1662/11369: [ 606.519843][T11369] #0: ffffffff8d5ae940 (rcu_read_lock){....}-{1:3}, at: bpf_trace_run10+0x1f2/0x510 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 606.519905][T11369] #1: ffff8880b883fe88 (&s->lock_key#14){+.+.}-{3:3}, at: ___slab_alloc+0x12f/0x13e0 [ 606.519947][T11369] Preemption disabled at: [ 606.519950][T11369] [<0000000000000000>] 0x0 [ 606.519983][T11369] CPU: 0 UID: 0 PID: 11369 Comm: syz.2.1662 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 606.520000][T11369] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 606.520013][T11369] Call Trace: [ 606.520021][T11369] [ 606.520027][T11369] dump_stack_lvl+0xe8/0x150 [ 606.520052][T11369] __might_resched+0x32a/0x480 [ 606.520073][T11369] rt_spin_lock+0xc7/0x3e0 [ 606.520098][T11369] ? __pfx_rt_spin_lock+0x10/0x10 [ 606.520117][T11369] ? __lock_acquire+0x6b6/0x2cf0 [ 606.520141][T11369] ? __lock_acquire+0x6b6/0x2cf0 [ 606.520165][T11369] ___slab_alloc+0x12f/0x13e0 [ 606.520184][T11369] ? unwind_next_frame+0xa5/0x23d0 [ 606.520210][T11369] ? lock_acquire+0x107/0x340 [ 606.520230][T11369] ? __bpf_stream_push_str+0xa8/0x2b0 [ 606.520266][T11369] __slab_alloc+0xc6/0x1f0 [ 606.520283][T11369] ? __bpf_stream_push_str+0xa8/0x2b0 [ 606.520300][T11369] kmalloc_nolock_noprof+0x1be/0x440 [ 606.520323][T11369] ? __bpf_stream_push_str+0xa8/0x2b0 [ 606.520342][T11369] __bpf_stream_push_str+0xa8/0x2b0 [ 606.520355][T11369] ? __asan_memcpy+0x40/0x70 [ 606.520377][T11369] ? __pfx___bpf_stream_push_str+0x10/0x10 [ 606.520401][T11369] bpf_stream_stage_printk+0x14e/0x1c0 [ 606.520415][T11369] ? __pfx_find_from_stack_cb+0x10/0x10 [ 606.520434][T11369] ? arch_bpf_stack_walk+0x112/0x170 [ 606.520461][T11369] ? __pfx_bpf_stream_stage_printk+0x10/0x10 [ 606.520490][T11369] bpf_prog_report_may_goto_violation+0xc4/0x190 [ 606.520506][T11369] ? __pfx_bpf_prog_report_may_goto_violation+0x10/0x10 [ 606.520521][T11369] ? irqentry_exit+0x5dd/0x660 [ 606.520536][T11369] ? trace_irq_disable+0x37/0x100 [ 606.520556][T11369] ? read_tsc+0x9/0x20 [ 606.520573][T11369] bpf_check_timed_may_goto+0xaa/0xb0 [ 606.520601][T11369] arch_bpf_timed_may_goto+0x21/0x40 [ 606.520620][T11369] bpf_prog_6fd842a53d323cc5+0x53/0x5f [ 606.520637][T11369] bpf_trace_run10+0x2e4/0x510 [ 606.520657][T11369] ? bpf_trace_run10+0x1f2/0x510 [ 606.520675][T11369] ? __pfx_bpf_trace_run10+0x10/0x10 [ 606.520694][T11369] ? packet_create+0x19d/0x790 [ 606.520730][T11369] __bpf_trace_percpu_alloc_percpu+0x364/0x400 [ 606.520762][T11369] ? packet_create+0x19d/0x790 [ 606.520783][T11369] ? __pfx___bpf_trace_percpu_alloc_percpu+0x10/0x10 [ 606.520809][T11369] ? packet_create+0x19d/0x790 [ 606.520830][T11369] ? packet_create+0x19d/0x790 [ 606.520851][T11369] ? __lock_acquire+0x6b6/0x2cf0 [ 606.520878][T11369] ? do_raw_spin_lock+0x121/0x290 [ 606.520904][T11369] ? do_raw_spin_lock+0x121/0x290 [ 606.520933][T11369] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 606.520948][T11369] ? lockdep_hardirqs_on+0x7b/0x110 [ 606.520969][T11369] ? rt_mutex_slowunlock+0x1be/0x2e0 [ 606.520991][T11369] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 606.521020][T11369] ? packet_create+0x19d/0x790 [ 606.521041][T11369] pcpu_alloc_noprof+0x1557/0x16d0 [ 606.521080][T11369] packet_create+0x19d/0x790 [ 606.521106][T11369] __sock_create+0x4b3/0x9d0 [ 606.521140][T11369] __sys_socket+0xd7/0x1b0 [ 606.521159][T11369] __x64_sys_socket+0x7a/0x90 [ 606.521175][T11369] do_syscall_64+0xec/0xf80 [ 606.521190][T11369] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 606.521206][T11369] ? trace_irq_disable+0x37/0x100 [ 606.521222][T11369] ? clear_bhb_loop+0x60/0xb0 [ 606.521241][T11369] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 606.521257][T11369] RIP: 0033:0x7f893b9cf749 [ 606.521271][T11369] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 606.521285][T11369] RSP: 002b:00007f8939c2e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 606.521300][T11369] RAX: ffffffffffffffda RBX: 00007f893bc25fa0 RCX: 00007f893b9cf749 [ 606.521312][T11369] RDX: 0000000000000300 RSI: 0000000000000003 RDI: 0000000000000011 [ 606.521321][T11369] RBP: 00007f893ba53f91 R08: 0000000000000000 R09: 0000000000000000 [ 606.521331][T11369] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 606.521340][T11369] R13: 00007f893bc26038 R14: 00007f893bc25fa0 R15: 00007ffcbaf1da08 [ 606.521366][T11369] [ 610.153046][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 610.153084][ C1] lec:lec_tx_timeout: lec0 [ 610.153185][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 611.063885][T11367] bond0: (slave syz_tun): Releasing backup interface [ 611.466435][T11311] bond0: (slave syz_tun): Releasing backup interface [ 611.733771][T11353] bond0: (slave syz_tun): Releasing backup interface [ 611.773695][T11353] syz_tun (unregistering): left promiscuous mode [ 616.132964][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5980 ms [ 616.132997][ C1] lec:lec_tx_timeout: lec0 [ 616.133165][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 616.263395][ T45] bridge_slave_1: left allmulticast mode [ 616.263418][ T45] bridge_slave_1: left promiscuous mode [ 616.263609][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 616.344544][ T45] bridge_slave_0: left allmulticast mode [ 616.344572][ T45] bridge_slave_0: left promiscuous mode [ 616.344863][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 616.447602][ T45] bridge_slave_1: left allmulticast mode [ 616.447634][ T45] bridge_slave_1: left promiscuous mode [ 616.447882][ T45] bridge0: port 2(bridge_slave_1) entered disabled state