last executing test programs: 3m42.17928271s ago: executing program 3 (id=2093): bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0xd0, &(0x7f0000000000)=ANY=[@ANYBLOB="0180c20000008e25900ee8d386dd601646b085a2009a2f00ff020000000000000000000000000001fc010000000000000000000000000000000000000000000005020000000000000420880b00460000670c12d787bc48454ad5ab0dbcd795bf5fb1f628b38949083230f6690fa2"], 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0xfffffecc) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000480)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) openat$dir(0xffffffffffffff9c, 0x0, 0x10000, 0x22) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_open_dev$video4linux(&(0x7f0000000040), 0x6, 0x109000) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r4, 0xc0305602, &(0x7f0000000000)={0x0, 0xc}) mount(&(0x7f0000000040)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f00000000c0)='udf\x00', 0x0, 0x0) accept4$nfc_llcp(0xffffffffffffffff, &(0x7f0000000500), &(0x7f0000000240)=0x60, 0x40000) 3m37.57576451s ago: executing program 3 (id=2107): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(0xffffffffffffffff, 0x4080aebf, &(0x7f0000003680)={{0x0, 0x0, 0x80}, "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", "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"}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x0, 0x1c, &(0x7f0000000040)=ANY=[@ANYBLOB="0000000000000000b702000014000000b7030000030000008500000005000000bf0900000000000055090100000000009500000000000000b7020000000000007b2af0ff000000003609080000000000c39af0ffa0"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$KVM_RUN(r3, 0xae80, 0x0) 3m35.567907037s ago: executing program 3 (id=2117): r0 = msgget(0x0, 0x2aa) r1 = shmat(r0, &(0x7f0000ffa000/0x4000)=nil, 0x0) r2 = shmget(0xffffffffffffffff, 0x4000, 0x78000000, &(0x7f0000ff9000/0x4000)=nil) semctl$IPC_RMID(r2, 0x0, 0x0) r3 = shmat(r2, &(0x7f0000ffa000/0x3000)=nil, 0x6000) shmctl$SHM_INFO(r2, 0xe, &(0x7f0000000040)=""/30) semtimedop(0x0, &(0x7f00000003c0)=[{0x4}, {0x4, 0x7, 0x800}, {}, {0x4, 0x6}], 0x4, &(0x7f0000000280)={0x0, 0x989680}) msgctl$IPC_STAT(0x0, 0x2, 0x0) shmctl$IPC_RMID(r0, 0x0) r4 = msgget$private(0x0, 0x38) shmctl$SHM_UNLOCK(r2, 0xc) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff9000/0x3000)=nil) msgsnd(0x0, &(0x7f0000000080)=ANY=[@ANYRESDEC=0x0, @ANYRESOCT=r1, @ANYRESDEC=r3, @ANYRES16=r2], 0x0, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='maps\x00') r6 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000001c0), 0x1, 0x0) dup2(0xffffffffffffffff, r6) msgrcv(r4, &(0x7f0000000240), 0x8, 0x0, 0x2000) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/address_bits', 0x0, 0x0) msgsnd(0x0, &(0x7f00000002c0)=ANY=[@ANYRES32], 0x6f, 0x0) msgrcv(0x0, 0x0, 0x0, 0x2, 0x0) msgsnd(r4, &(0x7f0000000480)=ANY=[@ANYBLOB="0d835dbcd82d3106ecd6a4135f0e869fa166a0aa2c776481dc202ea4f61fa002912c76e5f366e3d20e28ba55ac908d9ce9d57df5655a8a468d1a90589d45079f3061215b96c107160b35bf82d78b85d92fae65edd1902ec9236264a5d22d0979bc24429bc591d82f70f469bf4c2f492bd5a894af7dcb0264c59dae", @ANYRESDEC, @ANYRES32, @ANYRESDEC=r7, @ANYRES64=r6, @ANYRES64=r7, @ANYRES64, @ANYRESHEX=r5], 0xfd, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000180)="5d7d55f285457f0bca07dad4d68934218e3e1fdeae91486ee8c3cfa6615474734bf067fb0c2369f83f", 0x29}], 0x1, 0x1, 0x200) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x5421, &(0x7f0000000140)) 3m35.036846242s ago: executing program 3 (id=2121): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}, r2}}, 0x48) write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f0000000080)={0xc, 0x8, 0xfa00, {0x0}}, 0x10) 3m34.435430875s ago: executing program 3 (id=2126): syz_usb_connect(0x0, 0x48, &(0x7f00000002c0)=ANY=[@ANYBLOB="120100004e4aa92082051600578e01020301090236000200000000090400000103ed020009050300000000000009040008"], 0x0) 3m31.71796681s ago: executing program 3 (id=2139): r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000006280)={r2, 0x1, 0x6, @broadcast}, 0x10) r3 = socket$netlink(0x10, 0x3, 0x4) r4 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0x0, r5) write(r3, &(0x7f0000000040)="2700000014000707030e0200120f0a001100000007dd8378626c5e43c93e7b1e469e0000000000", 0x27) 2m42.225266048s ago: executing program 4 (id=2230): socketpair$unix(0x1, 0x4000000000002, 0x0, &(0x7f00000001c0)) socket$tipc(0x1e, 0x5, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_setup(0x174a, &(0x7f0000000100), 0x0, 0x0) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = syz_io_uring_setup(0x24fa, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_setup(0x24f8, &(0x7f0000000240), 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x0, 0x0) syz_io_uring_setup(0x3f55, &(0x7f0000000740), 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_io_uring_setup(0x24f9, &(0x7f0000000200)={0x0, 0x815a, 0x0, 0x0, 0x0, 0x0, r0}, 0x0, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='pids.current\x00', 0x275a, 0x0) write$UHID_CREATE2(r4, &(0x7f0000000180)=ANY=[@ANYRES8=r3], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 2m42.032942843s ago: executing program 4 (id=2231): ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8922, &(0x7f0000000040)={'team0\x00'}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)}], 0x1}, 0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f00000000c0)='system.posix_acl_access\x00', &(0x7f0000000480), 0x24, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') getdents64(0xffffffffffffffff, &(0x7f0000002f40)=""/4098, 0x1002) syz_open_dev$video4linux(&(0x7f0000000000), 0x3, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_open_dev$vim2m(&(0x7f0000000c00), 0x101, 0x2) ioctl$vim2m_VIDIOC_DQBUF(r3, 0xc0585611, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000009000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0) r4 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003d000b08d25a802b8c7494f90224fc600b00000004000400070082c137153e3719ac018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 2m40.876468776s ago: executing program 4 (id=2232): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffdd, 0xa}, [@ldst={0x3, 0x0, 0x3, 0x1c10a1, 0x0, 0x4a}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0xb5, 0x10, &(0x7f0000000000), 0x7, 0x0, 0xffffffffffffffff, 0x68000000}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x8, [@ptr={0x8, 0x0, 0x0, 0x2, 0x1}, @fwd={0xa}]}, {0x0, [0x39, 0x5f, 0x30, 0x0, 0x2e, 0x0]}}, 0x0, 0x38, 0x0, 0x2, 0x340}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x10, 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="911000000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r0, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x4}, @TCA_RATE={0x6}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x4}]}, 0x48}}, 0x0) 2m34.047143311s ago: executing program 4 (id=2237): socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d00000007000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$PTP_EXTTS_REQUEST(0xffffffffffffffff, 0x40103d02, 0x0) listen(0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) r3 = syz_io_uring_setup(0x1f87, &(0x7f0000000080)={0x0, 0x0, 0x13580}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000140)=@IORING_OP_MSG_RING={0x28, 0x0, 0x0, r3, 0x0, 0x0}) io_uring_enter(r3, 0x54, 0x0, 0x0, 0x0, 0x0) 2m32.763182386s ago: executing program 4 (id=2239): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x119000, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, 0x0) ioctl$IOMMU_HWPT_ALLOC$NONE(0xffffffffffffffff, 0x3b89, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) epoll_create(0x0) socket$alg(0x26, 0x5, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x0, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0x8) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) pipe2$watch_queue(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) prlimit64(0x0, 0x7, &(0x7f0000000440), 0x0) r4 = add_key(&(0x7f0000000140)='cifs.spnego\x00', &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$KEYCTL_WATCH_KEY(0x20, r4, r3, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, r4, r2, 0xffffffff) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4400ae8f, &(0x7f0000000140)) ioctl$KVM_RUN(r5, 0xae80, 0x0) 2m26.155876088s ago: executing program 4 (id=2241): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) mount(&(0x7f0000000240)=@nullb, &(0x7f0000000340)='./file0\x00', &(0x7f00000002c0)='v7\x00', 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x48882, 0x0) sendfile(r1, r1, 0x0, 0x600) close_range(r0, 0xffffffffffffffff, 0x0) 1m39.42166395s ago: executing program 1 (id=2279): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000880)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a54000000060a0b040000000000000000020000002800048024000180090001006d65746100000000140002800800014000000000080002400000001b0900010073797a30000000000900020073797a32"], 0x7c}}, 0x0) 1m39.109723087s ago: executing program 1 (id=2280): r0 = socket(0x10, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @dev}, 0x2}}, 0x2e) close(r1) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000540)={{{@in, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in6=@mcast2}}, 0xe8) r3 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, &(0x7f0000000140)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}, 0x2, 0x3}}, 0x26) ioctl$PPPIOCGL2TPSTATS(r3, 0x80487436, &(0x7f0000005280)) sendmsg$nl_route(r0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) r5 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$int_in(r5, 0x5452, &(0x7f00000001c0)=0x1) close_range(r4, 0xffffffffffffffff, 0x0) 1m38.783538904s ago: executing program 1 (id=2281): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)={0x30, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x1}, @NL80211_ATTR_MAC={0xa}]}, 0x30}}, 0x0) 1m38.470247473s ago: executing program 1 (id=2282): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81105a, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x80000, 0x0) unshare(0x22020600) mount$bind(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x12f451, 0x0) mount$bind(&(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x88700a, 0x0) umount2(&(0x7f0000000100)='./file0/file0\x00', 0xb) 1m38.023145259s ago: executing program 1 (id=2283): r0 = creat(0x0, 0x1de) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x400000000010001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$kcm(0x29, 0x2, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r4, 0x10e, 0xb, &(0x7f0000000000)=0x2, 0x4) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYBLOB="180000006a00bd8a"], 0x18}}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ff5070000000000000300000000000c00095000000000000002ba728041598d6fbd30cb599e83d24bd8137a3aa81e0ed139a85d36bb3019d13bd2321af3c2bd67ce68f15c0ec71d0e6adfefcf1d8f7faf75e0f226bd917060000007142fa9ea4318123751c0a0e168c1886d0d4d35379bd223ec839bc16ee988e6e0dc8cedf3ceb9fbfbf9b0a49ef42d430f6296b72a83438810720a159cda90363db3d221e152dfca64057ff3c4744aeaccd3641110bec4e9027a0c8055bbfc3a96d2e8910c2c39e4babe802f5ab3e89cf6c662ed40000000022278d00031e5388ee5c867ddd58211d6ece3ccb0cd2b6d3cffd962867a3a2f624f992daa94a6a556f3218ce740068725c37074e468ee207d2f73902ebcfcf49822775985bf31b715f5888b24efa190000000000000000000000000000ddffffff020000000000000000ddffffff0000b27cf3d1848a54d7132be1bfb0adf9deab3323aa9fdfb52faf9cb09c3bfd09000000b91ab219ef00bb7b3de8f67ffcad3f6c3c2b1f03550000000000001cf41ab11f12fb1e0a494034007de7c6592df1a6c64d8f20a67745409e011f1264d43f153b3d34889f40159e800ea2474b540500a30b23bcee46762e2093bcc9eae5ee3e980026c96f80ee1a00000000740750fa4d9aaa705989b8e673e3296e52d337c56abf112874ec51d6fe048ba6866adebab53168770a71ad901ace383e41d277b103923a9d961f7a2591dbe4a912ffaf6f658f3f9cd16286744f83a83f138f8f92efd92239eafcc5c1b3f97a297c9e49a0c3300ef7b7fb5f09e0c8a868a353409e34d3e82279637599f35ad3f7ffffff3cac394c7bbdcd0e0eb52162e0c410ade7000026a4e739c60f03cc4146a77af02c1d4cefd4a2b94c0aed8477dfa8ceefb467f05c6977c78cdbf3f704ec73754910fe050038ec9e47de89298b7bf4d769ccc18eedd9068ca1457870eb30d219e23ccc8e06dddeb61799257ab5000013c86ba99523d61a00000000c270246c878d01160e6c07bf6cf8809c3a0d062357ba2515567230a6f8b2ad1e1f4933545fc3c741374211663f6b63b1dd044dd0a2768e825972fc4300001467c89fa0f82e8440105051e5510a33dcda5e4e202bd622549c4cffffff501d3a5dd7143fbf221fff161c12ca389cbe0000000000000fff2ecf631c6c5fd9c26a54d43fa050b88d1d43a8645bd9109b7e07869bba7131421c0f397073943330baafd243c0c6ffe673bab4113be7664e08bdd7115c61afcb718cf3c4680b2f6c7a8400e378a9b15bc20f49e298727340e87cdefb40e56e9cfad9931b8c552b2c7c503f3d0e7ab0e958adb8629aeec90e6d1857da822e40009995ae166deb9856291a43a6f7eb2e32cefbf463789eaf79b8d4c22be89f44b032dad13007b82e6044f643fc8cd07ae636a5dbe9864a117d27326850a7c3b570863f532c218b10af13d7be94987005088a83880ccab9c9920c2d2af8c5e13d52c83ac3fa7c3ae6c08384865b66d2204c2e4f3ae200f279b512b4dcb5dd9cba16b62040bf8702ae12c77e6e34991af603e3856a346cf708feeb708ab22b560cf8a4a6f31ba6d9b8cb0908000000000000001a342c010000000000e667a7592b33406f1f71c739b55db91d2309dc7ae401005f52053a39e7307c09ff3ac3e820b01c57dd74d4aafc4c383a17bc1de5347bb71ca16dcbbbaa2935ae662082b56cf666e63a759e0ef3ea7af6881513be94b362e15ffca8ec453b3a2a67be70c17b0f9c2eac765816c30c2e7133dca1c7669522e8dff8bc570a93fbdb688c3aef810000007a6ea6b11163392a19d87995b51cb6febd5f34a34998d2010fd5facf68c4f84e2f66e27c81a149d7b331983d3b74444953fc1216dfec10b724be3733c26f12538376e177ffef6fd2020000000000000008e4919a463d5332a2546032a3c06b94f168e8fc4bda0c294723fe306f26c477af4b926644672985fab7cc67bc5b5f5d38cdd8df95147ebe1cd88b0a4c6cde9951be10ba7dfddfefb238fac2303cc8982f1e55b005afcfea5eb037248fefad6bb02c162ce92ab17744c8ec3d2e80cf3205d36699fd381bc81231fb5e12e45f3059f361d08d6a6d019ebf105eaf43083c29512bcedd79ca9bf24e063d0c273ed70a2b70be521ea27dc8cf3c9bdf83b93405db07e82e2db484f8673e0e97dd7e8a872148613c3a04f3d67f4375ba5c7f1b00ffffff7f000000000801f71d79d812ced782646b5f79c8fc08bb5c11020108d702edd2ea9c96cf0d2d48aa5fc0a7bf1b51afd85350ad00b78c598fa8701b000884de790b54e5ab2e8ff0c7ae23e0b6eeac95c4c2eef2e5eb1d019d52099fbd404e8ece970f67856ba7e960bd8b1e4105ce7e31f7c9c3e3fa61aaa967b90087e91d703e98535b107b8f4653be4c46a3a1adb07d226952b8573b417018316fa96e2b8e7370baa16d4122c863709b08d4639a19a46ac90ac48a13ee9bcaa875fc700000000000003b40dc5c745fe2491e8425e600000000000000000000000000000000000000000000000000000000000000250318a44ad31baac0520a913301e630ae540f3289aebde8633f6f450c0738e16df6c7f1e0832a2a16fe6e39959735758248032cdf7320c6dc87b01e3f9a7811b200000000ae189de4b9b25f7c7a9c070000002af1c06315270de4a6605e4b4b58bef76fac54f11b84bd7bcd6b6a485edfb7684c770a39b38b08e18a51a4d4e66ca21c06a4b4198e1bc2ef990c9ba911efed626e5ee341a17bf8132b09000000d31df213c802d74797056fd3bca8b2d6cb134437cba0193ba4360bdcc98aad2560aa48291c4eb9d4e08ad7a9c5f04be1ab597124d84dfc7bd8cca8f68154a0ed356e773a797ca6d66748857b4abbf8830abeea2a46342e6a7378173cb29d5cdcd698a0203f78116b710008000000000000007c2d86b94472807c10eb9a8e2fb8bd79fe3a8316deff3ee641c9a080a2173642e673a672279bae4e7e28055da9497d7edb53be6e80482bd4d9a74b8dd4221fff0f0000705d7257ff7f76c78ba0b44ec0bdfa0d32d7042059b13a079639f14f9032b856d892ad6af5124c9c3130485e9682ff1f3c54e475d5bb496aef4bb537d7e191dfdeba109fdcf7864763f87a6d711cf52e520a6ce30e134c55e0caac037209d2f14fcddd00000000000000000000000000000000e609893bdce015e8ccfb36399844db61f6171b0b0e845e48728450c6ba4f7098f8e000676b59ab9f851f3ab77847ce05c89411277ec69c409b7ec50a3337a78675f38a568612c235ab5f2cd6d035d5f5f6a693c381adbbf7b37e37292783b2c7efe7d3a067906552f76d419e0300000000000000000000008f3a20b49fe7636806867283e35cff8d00e7b251bab3cf6377a24f8e8d4bda7503674bc94bf7f4d2fa6f25944bf0a186436d9f6831995976328a1fdc78492c65c1434855dc35c3cf7cf9610c5387794443c99b304799114132362849c3fa85d6379729ff9094933db0cfbe8887c50b87e1469fdf454cef4cbc5f7bf384000000000000a4e8c1a25f47c440144a9776be6cb40aafdb9d3cc8f6a6050974e1c4000000000000008b753f4e1bef9556efcc087a99dbf231167013a4b2eaf6338a0b100c98a331dffc09"], &(0x7f0000000140)='GPL\x00'}, 0x48) r6 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r6, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000040)={r6, r5}) sendmsg$kcm(r3, &(0x7f0000002080)={0x0, 0x0, &(0x7f0000002000)=[{&(0x7f0000000880)="1a", 0x100000}], 0x1}, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(r0, 0xc1105518, &(0x7f0000000380)={{0x2, 0x6, 0x8f3, 0x9, 'syz0\x00', 0x4}, 0x3, 0x40, 0x1493c36a, 0x0, 0x6, 0xfffffffa, 'syz1\x00', &(0x7f0000000340)=['\x00', 'GPL\x00', '-\xe9#\x00', '/dev/hwrng\x00', 'syz2\x00', '^\x00'], 0x1b}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$IPSET_CMD_SWAP(r2, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x50, 0x6, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz2\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz0\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz2\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x800}, 0x80) 1m37.440623335s ago: executing program 1 (id=2284): r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x8240) ioctl$EVIOCGSW(r0, 0x80084503, &(0x7f00000020c0)=""/4096) 51.356947767s ago: executing program 0 (id=2342): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6}]}}}]}, 0x3c}}, 0x0) 51.128720932s ago: executing program 0 (id=2344): r0 = socket(0x2b, 0x80801, 0x0) bind$unix(r0, &(0x7f0000000040)=@file={0x0, './file0\x00'}, 0x6e) 50.998466115s ago: executing program 0 (id=2345): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x16, 0xf, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1ab92b}, {0x85, 0x0, 0x0, 0x8a}, {0x4}}, {{0x5, 0x0, 0x4, 0x9, 0x0, 0x1, 0x2000}}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x9}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 50.828290691s ago: executing program 0 (id=2346): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_mptcp(0xa, 0x1, 0x106) syz_emit_vhci(&(0x7f00000004c0)=ANY=[@ANYBLOB="040e0501460c1f00c7f641737da8c5df97e629d54f8eef8f4b4c287248623393943b5ba71f4c252077dee7cda5f191af639f6bc9ccce6307303924e47e62deed5d1bb5921eea00000c30f73971da9388b9ec29139dedf9d61d113d31eeef342c9d"], 0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x2b, &(0x7f0000000040)=0x200000000005) syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="0400b100"/19], 0x13) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x1c9100, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0x18ff2}], 0x1, 0x0, 0x5) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_SET_EVBIT(r3, 0x40045564, 0x11) socket$nl_rdma(0x10, 0x3, 0x14) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0}, 0x10) r4 = syz_open_dev$usbfs(&(0x7f0000000100), 0x75, 0x1a9a81) ioctl$USBDEVFS_FREE_STREAMS(r4, 0x802c550a, &(0x7f0000000000)=ANY=[@ANYBLOB="02002303100007006000000002000020d3"]) syz_emit_vhci(&(0x7f0000000280)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x0, 0x39}, @l2cap_cid_signaling={{0x35}, [@l2cap_create_chan_req={{0xc, 0xfb, 0x5}, {0x6, 0xfffe, 0x8}}, @l2cap_create_chan_rsp={{0xd, 0x7f, 0x8}, {0x2, 0x8, 0x0, 0x100}}, @l2cap_create_chan_rsp={{0xd, 0xf8, 0x8}, {0x9, 0xf, 0xa, 0x8}}, @l2cap_move_chan_rsp={{0xf, 0x1, 0x4}, {0x5, 0x7b}}, @l2cap_move_chan_cfm_rsp={{0x11, 0xc, 0x2}, {0x5}}, @l2cap_cmd_rej_unk={{0x1, 0x5b, 0x2}}]}}, 0x3e) ioctl$USBDEVFS_CONTROL(r4, 0x4008550d, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$UI_SET_LEDBIT(r3, 0x40045569, 0x1) ioctl$UI_DEV_SETUP(r3, 0x405c5503, &(0x7f0000000100)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r3, 0x5501) ioctl$UI_DEV_DESTROY(r3, 0x5502) r5 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYRES16=r5, @ANYBLOB="010000000000000000000b00000008000300b855954aff2c2dc08a911d3413d169466806a8c4085bb6cce64dd63a5c4f25f4290f60069147657551acd9fee7e0571a943e147bd5419fa1fe54bab5676a84f159e6639728bdf1b5b08ea46c5395deb5bbbb66cb5fab3b188c2e414f4d25ee0286071b6bcba79d1092a2c195229790d96b8f037cd45b937f4c2bbb6b4c9922995c4c207c47c1aac65ec363afd32e43eefd8fd4", @ANYRESHEX=r2], 0x44}}, 0x0) userfaultfd(0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)) bind$rds(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="240000000408010100000000000000000000000005000300ff0000000600024000000000409003d3e1025f07eee9e08d73a2d2521b12a3f6e01206fd1571a5610e1af91706c8bc1da94cc118aacaf9b47a516f6383581f3436ba9e6d73845a0cb2543617ab98606c549b897629a1eb5235f046d57e03a44cdc267b91bc61875c7a336e4018d91dc68af2aa844254f32fd548465cf54a571ec2faf3df0a0a932a7c515f5530e9bffc43b3d64ffe4b38e742"], 0x24}}, 0x0) ioctl$SNDCTL_SEQ_PANIC(0xffffffffffffffff, 0x5111) unshare(0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) 50.085529372s ago: executing program 0 (id=2347): r0 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r0, &(0x7f00000004c0)={&(0x7f0000000140)={0x2, 0x0, @local}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000180)="ba", 0x1}], 0x1}, 0x48044) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$nl_route(0x10, 0x3, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x0) socket$kcm(0x21, 0x0, 0x2) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$int_in(r3, 0x5452, &(0x7f0000000280)=0xffffffffffffffff) sendto$inet6(r3, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) connect$inet(r4, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) sendmmsg$inet(r4, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f0000002f00)=[{0x0}], 0x1}}], 0x1, 0xf000000) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)) sendto$inet(r4, &(0x7f0000000100)="e0", 0x1, 0x4000810, 0x0, 0x0) r5 = socket$qrtr(0x2a, 0x2, 0x0) r6 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/card2/oss_mixer\x00', 0x121401, 0x0) write$proc_mixer(r6, &(0x7f0000000140)=ANY=[@ANYBLOB='VOLUME \''], 0x35) close_range(r5, 0xffffffffffffffff, 0x0) 49.138040828s ago: executing program 0 (id=2348): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) socket(0x0, 0x0, 0x0) unshare(0x6a040000) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}}, 0x1c, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1200000000000000110000006700000020010000000000000009000000000000001ab6069c9e103e6603b255dd3aa9c6d988dc9070a7f4"], 0x28}, 0x0) socket$inet(0x2, 0x80001, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000140), &(0x7f0000000180)=0xc) r1 = openat$null(0xffffff9c, &(0x7f0000000000), 0x214782, 0x0) ioctl$IOMMU_HWPT_ALLOC$NONE(0xffffffffffffffff, 0x3b89, &(0x7f0000000080)={0x28, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_DESTROY$hwpt(r1, 0x3b80, &(0x7f0000000100)={0x8}) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) r2 = mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$key(0xf, 0x3, 0x2) mq_timedsend(r2, &(0x7f0000000380)="5cd7e11f0b98c28ba3346eecbba7180f68456e89d26928a06c2146e9b081a7ecd20ee46f887c5b7c4b9d59638c36d8036ed82c352dc5aeef5694246f118432f8d2467aa8fac3b82113b0b514b782fb33bcd362943978b24c83ea02b4a4f105c6c54a258f2fbf00f2f40852b22c51e4c2efe8ccd9075ef4955ffbde8902e478aa2829bdbd4f4f244189eff0aed3d3fed80f2ea6cfe958a51d419546bda0849c78215b4cee279d6be6292e1261a00e2a48636a612ad58ed112561d7f9b6a028d15c11066d6ec00c2c0363965695c7f915e3c93ebb1bcce00cf215791cc59a91d497ee96d4e4e78e8c79cd4e7e2182e37e55bac9945683007b8936eb863436f54e6c72daf2b3a5c130f895bee516ca1d49167ef5dd83ec7c03936a9d3f18bce9c56330b36a02667dc2a27dbf3d091fc80e7093a3bd477367f51a0a5534582ab2846abd0fbed11f18d05f606c5e09ad649a48cbb96b20ffe4549c4c8bbbf694f320dc0da927a3bb5251276e315ff1a7c34e29592d9666bba7f852d1aa561ffd8ad01b708a4fc626d04355cbbf5187b3d92e9afcf7b6d3343e20179ca72d67dc4bf8423a7ac515b276f41ba795ed05270a1f4c864056e4e49e34e937ca0692f0ac4284f28c38e4cf56bf56a5e491f7eca50bc7ccd8bb092e7c4a97c814e8482627a39acc87a0d58ef96d289129e3e7ad24021b67a7ae66a220816514399c771bbe2243c7e32d7449a5ee926992565d63655df56deb08c346177cba0cf6e8a927354fe9bc425a1e0ed7554d2dcd63a77a78413848d4092519dbf3a1043b4d119693a356fa3ee20a137ef7414926bf007605553d3917f96654b705fcfadfbb708d166a57c6edba14bd18ae87d32b57666825f9b522e6464e363569234bdcdc681c16907f1790262e3c736cb22877d3297d8db1cd9e43ed2c2115d5bc9802a079cae35652f29777530eb65f6b12fdf295978f77b57853be6c90e74f32cbc2e02c25736663feef4352e4e3cd857e52ecdbb14ccb3101b02caec408bcbf048e84c04f67478e6398bdb00b6284e996d302158813b896752976365fe0dd867d0d03fc3174a617d0268a183d508324464a439d59c04468f9da8086616adb407a5348f67634c16f0bdb49d8cf622ad040639ca0a24d291918776e170e0bc97ac64a92fe495f003fdf2db8f0a3a645b0ff725cd00504e96e109e85750a9ef82e2cdf5ae605c461d8183bdb9f2795bf9bbbefe6759dd62ce95d9461a690b0bc1925123404502d892a688cf8acbc08d7d6e278e5ec201a972412c4e79986219d77075cd00ddbf1e87ecd4d14fc34f1754618f61c4dee552c221c6dc8674763529be6cee48798c86b756e9ff769cef21ebd742bc487ff639ccf919545fefadd369f2fc472ea5691584bcb5186538f175e886e660638997df", 0x3ef, 0x0, 0x0) mq_timedsend(r2, 0x0, 0x0, 0x0, 0x0) dup2(r3, r2) mq_unlink(&(0x7f0000000340)='eth0\x00') 8.841422495s ago: executing program 2 (id=2380): r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x201, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) read$eventfd(r1, &(0x7f0000000100), 0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0xffffffffffffffff, 0x0, &(0x7f0000000240)={0x8}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454c9, 0x0) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0xffff0308) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000080)=""/152) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 7.832390951s ago: executing program 2 (id=2381): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000000000000000000049500"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r3}, 0x10) sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000480)={&(0x7f0000000340)={0x44, 0x0, 0x100, 0x70bd2a, 0x0, {{}, {@void, @val={0xc, 0x99, {0x7f, 0x59}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa}]}, 0x44}, 0x1, 0x0, 0x0, 0x51}, 0x24000045) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700) ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, 0x0) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) socket$unix(0x1, 0x1, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_audit(0x10, 0x3, 0x9) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo\x00') getdents64(r6, &(0x7f0000002f40)=""/4098, 0x1002) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={0x0}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0xa40, 0x0) syz_emit_ethernet(0x106, &(0x7f0000000380)={@remote, @remote, @void, {@generic={0x4, "105ac1a31505ed4bbc8f480d67e457a8676d7322e3d24830d25d127a167dea1f6531c7c6780f260a6046ab54733277f3540cbe5ab41e06d5f708ce568d7fe2e81f179023d2590c95556d875995c2bde2c16aa28d8359574c2aa984c187b1b2b0c0333f5f5b7cb70fa315ecee2db2686d60f5376ecdf29aee232a2088435b3a588c9b483a46d6dc2f8702dc3dacce50a5816a4ffb8591c4515d8fb80b6c4e4a0026c501dd14e89b19541a3b60483ff2e56c6c6c5104df91add1ce5dbe267c14aed33ac3c035c5b56dcca74948fd3c9081d77e458bfb6d579fc746ccb4084213c3b8080003a7a94e4de21d0bd18536385d5e26aabc8e6cc440"}}}, &(0x7f0000000700)={0x0, 0x4, [0xedb, 0x1f6, 0xcb, 0xc7d]}) r7 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r7, 0x0, 0xca, &(0x7f00000002c0)={0x0, 0x4, 0x0, 0x0, @vifc_lcl_addr=@initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) 2.012764015s ago: executing program 2 (id=2382): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xa, &(0x7f00000000c0), 0x4) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(0xffffffffffffffff, 0xc02c564a, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) write$FUSE_NOTIFY_STORE(r4, &(0x7f0000000180)={0x2e, 0x4, 0x0, {0x1, 0xfffffffffffffffa, 0x6, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x2e) syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') shmget$private(0x0, 0x4000, 0x0, &(0x7f0000000000/0x4000)=nil) listen(0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) write$uinput_user_dev(r5, &(0x7f00000005c0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd], [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, 0x45c) r6 = dup(r5) ioctl$UI_DEV_CREATE(r6, 0x5501) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, 0x0, 0x0) 1.070565471s ago: executing program 2 (id=2383): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x0, 0x27ad, 0xccc3, 0xf, 0x800, r0, 0x8, '\x00', 0x0, r1, 0x0, 0x1, 0x2}, 0x48) timer_create(0xfffffffffffffffc, 0x0, &(0x7f0000000080)) timer_settime(0x0, 0x0, 0x0, 0x0) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) timer_gettime(0x0, &(0x7f0000000280)) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, &(0x7f0000000300)=0x100000001, 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = userfaultfd(0x1) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000140)) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000100), 0xfecc) mmap(&(0x7f0000004000/0x3000)=nil, 0x3000, 0x380000c, 0x1010, r4, 0x80000000) ioctl$UFFDIO_WAKE(r3, 0x8010aa02, &(0x7f0000000040)={&(0x7f0000002000/0x4000)=nil, 0x4000}) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r5, &(0x7f0000000000), 0xe) setsockopt$bt_BT_DEFER_SETUP(r5, 0x112, 0xf, &(0x7f0000000080), 0x4) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f0000000000)=[@mss={0x2, 0x5}, @sack_perm, @sack_perm, @window={0x3, 0xc279, 0x4}], 0x4) 105.175158ms ago: executing program 2 (id=2384): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="020a040007"], 0x38}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="020100090e"], 0x70}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x3ef, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="020d000014000000000000000000000005000600000000000a00000000000000fc0100000000000000000000ea2fa43c000000000000000005000500000000000a0000000000000000000000000000000000000000000000000000000000000008001200020002000000000000000000100033000203"], 0xa0}}, 0x0) 0s ago: executing program 2 (id=2385): syz_open_dev$video(0x0, 0x0, 0x0) mbind(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x6002, &(0x7f0000000040)=0x3, 0x4, 0x0) set_mempolicy_home_node(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_PRI(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x68, r2, 0x401, 0x0, 0x0, {{}, {}, {0x4c, 0x18, {0x0, @link='broadcast-link\x00'}}}}, 0x68}}, 0x0) socket(0x0, 0x0, 0x0) io_submit(0x0, 0x0, 0x0) unshare(0x6a040000) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) r3 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r3, &(0x7f0000000340)={&(0x7f0000000240)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}}, 0x1c, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1200000000000000110000006700000020010000000000000009000000000000001ab6069c9e103e6603b255dd3aa9c6d988dc9070a7f4f227fdb4", @ANYRES32=0x0, @ANYBLOB], 0x28}, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000840)=@mangle={'mangle\x00', 0x64, 0x6, 0x560, 0x100, 0x1d8, 0x100, 0x100, 0x2a8, 0x490, 0x490, 0x490, 0x490, 0x490, 0x6, 0x0, {[{{@ipv6={@empty, @loopback, [], [], 'gre0\x00', 'bond0\x00'}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@srh={{0x30}}]}, @common=@unspec=@CONNSECMARK={0x28}}, {{@uncond, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28}}, {{@ipv6={@mcast2, @private1, [], [], 'pim6reg1\x00', 'vlan1\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@hl={{0x28}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@remote, @ipv6=@mcast1}}}, {{@ipv6={@private0, @remote, [], [], 'tunl0\x00', 'bond_slave_0\x00'}, 0x0, 0xa8, 0xd0}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5c0) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000040)={0x7ff, 0xef9, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f00000000c0)={0x5, 0x8}) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x10, r4, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r5, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="e40000000201010800000000000000000a000000d00001800c000280050001000000000014000180080001000000000008000200000000002c00018014000300ff01000000000000000000000000000114000400ff0100000000000000000000000000010c000280050001000000000047000280050001000100000006000640000000000600"], 0xe4}}, 0x0) r6 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) ioctl$SG_GET_REQUEST_TABLE(r6, 0x2284, &(0x7f0000000040)) kernel console output (not intermixed with test programs): hcd [ 775.285026][ T941] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 775.295037][ T941] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 775.305031][ T941] usb 5-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 775.314559][ T941] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 775.337959][ T941] usb 5-1: config 0 descriptor?? [ 775.464976][ T941] gspca_main: spca561-2.14.0 probing abcd:cdee [ 776.097083][ T941] spca561 5-1:0.0: probe with driver spca561 failed with error -22 [ 776.190337][ T941] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 776.217571][T11934] dccp_invalid_packet: P.Data Offset(224) too large [ 776.253605][ T941] usb 5-1: MIDIStreaming interface descriptor not found [ 776.367744][ T941] usb 5-1: USB disconnect, device number 24 [ 776.501593][T11937] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 776.540062][T11937] overlayfs: missing 'lowerdir' [ 776.947038][T11943] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.2101'. [ 777.882794][T11954] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2104'. [ 777.882887][T11954] netlink: 'syz.1.2104': attribute type 6 has an invalid length. [ 777.882912][T11954] netlink: 'syz.1.2104': attribute type 5 has an invalid length. [ 777.932291][T11954] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 777.932407][T11954] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 777.932442][T11954] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 777.932476][T11954] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 777.932586][T11954] vxlan0: entered promiscuous mode [ 777.942703][T11952] bridge_slave_1: left allmulticast mode [ 777.942735][T11952] bridge_slave_1: left promiscuous mode [ 777.943076][T11952] bridge0: port 2(bridge_slave_1) entered disabled state [ 778.768640][T11959] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 780.304724][ T941] usb 5-1: new low-speed USB device number 25 using dummy_hcd [ 780.499374][ T941] usb 5-1: descriptor type invalid, skip [ 780.564298][ T941] usb 5-1: No LPM exit latency info found, disabling LPM. [ 780.628148][ T941] usb 5-1: string descriptor 0 read error: -22 [ 780.667578][ T941] usb 5-1: New USB device found, idVendor=1415, idProduct=0003, bcdDevice=65.1d [ 780.739389][ T941] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 780.778609][ T941] usb 5-1: config 0 descriptor?? [ 781.026947][ T941] dvb-usb: found a 'Sony PlayTV' in cold state, will try to load a firmware [ 781.077597][ T941] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 781.094192][ T941] dib0700: firmware download failed at 7 with -22 [ 781.118145][ T941] usb 5-1: USB disconnect, device number 25 [ 781.426205][T12006] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2127'. [ 781.581936][T12007] netlink: 'syz.1.2124': attribute type 1 has an invalid length. [ 781.594460][T12007] netlink: 'syz.1.2124': attribute type 2 has an invalid length. [ 781.807013][ T941] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 781.834845][T12011] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2128'. [ 782.037078][ T941] usb 4-1: Using ep0 maxpacket: 32 [ 782.057732][ T941] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 782.157030][ T941] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 782.287649][ T941] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 782.427058][ T941] usb 4-1: config 0 interface 0 has no altsetting 1 [ 782.458313][ T941] usb 4-1: New USB device found, idVendor=0582, idProduct=0016, bcdDevice=8e.57 [ 782.507268][ T941] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 782.525099][ T941] usb 4-1: Product: syz [ 782.547617][ T941] usb 4-1: Manufacturer: syz [ 782.589355][ T941] usb 4-1: SerialNumber: syz [ 782.617379][ T941] usb 4-1: config 0 descriptor?? [ 782.631257][ T941] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 782.921441][ T941] usb 4-1: USB disconnect, device number 33 [ 783.047289][ T5322] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 783.269115][ T5322] usb 5-1: Using ep0 maxpacket: 16 [ 783.320987][ T5322] usb 5-1: config index 0 descriptor too short (expected 64742, got 92) [ 783.336749][ T5322] usb 5-1: config 1 has an invalid interface association descriptor of length 5, skipping [ 783.354000][ T5322] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 783.364754][ T5322] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 783.375199][ T5322] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 783.414578][ T5322] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 783.443269][ T5322] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 783.462404][ T5322] usb 5-1: Product: syz [ 783.476280][ T5322] usb 5-1: Manufacturer: syz [ 783.481478][ T5322] usb 5-1: SerialNumber: syz [ 783.503791][ T5322] cdc_ncm 5-1:1.0: skipping garbage [ 783.535571][ T5322] cdc_ncm 5-1:1.0: CDC Union missing and no IAD found [ 783.548449][ T5322] cdc_ncm 5-1:1.0: bind() failure [ 783.943933][T12034] syzkaller0: entered promiscuous mode [ 783.953453][T12034] syzkaller0: entered allmulticast mode [ 784.049178][ T5322] usb 5-1: USB disconnect, device number 26 [ 786.016947][ T5273] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 786.227371][ T5273] usb 5-1: Using ep0 maxpacket: 16 [ 786.257959][ T5273] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xC has an invalid bInterval 0, changing to 7 [ 786.299476][ T5273] usb 5-1: New USB device found, idVendor=0d46, idProduct=0081, bcdDevice=19.82 [ 786.326922][ T5273] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 786.352599][ T5273] usb 5-1: Product: syz [ 786.362767][ T5273] usb 5-1: Manufacturer: syz [ 786.379388][ T5273] usb 5-1: SerialNumber: syz [ 786.398420][ T5273] usb 5-1: config 0 descriptor?? [ 786.430317][ T5273] kobil_sct 5-1:0.0: KOBIL USB smart card terminal converter detected [ 786.473688][ T5273] usb 5-1: KOBIL USB smart card terminal converter now attached to ttyUSB0 [ 786.729867][ T29] audit: type=1400 audit(1723457650.514:1139): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="#!" requested=w pid=12052 comm="syz.1.2145" dest=20006 [ 786.872697][ T5255] usb 5-1: USB disconnect, device number 27 [ 786.927993][ T5255] kobil ttyUSB0: KOBIL USB smart card terminal converter now disconnected from ttyUSB0 [ 786.971109][ T5255] kobil_sct 5-1:0.0: device disconnected [ 790.467360][T12074] sctp: [Deprecated]: syz.1.2151 (pid 12074) Use of int in maxseg socket option. [ 790.467360][T12074] Use struct sctp_assoc_value instead [ 791.671475][T12084] openvswitch: netlink: nsh attr 1 has unexpected len 0 expected 8 [ 794.850113][ T5227] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 794.917645][ T9108] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 794.930735][T12113] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 794.938876][ T9108] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 794.951529][T12113] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 794.960539][ T9108] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 794.968610][T12113] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 794.981712][ T9108] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 794.995083][T12113] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 795.035823][T12113] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 795.044504][T12113] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 795.072491][T12113] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 795.285798][T12113] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 795.300152][T12113] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 795.338597][T12113] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 795.369591][T12113] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 795.387805][T12113] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 795.395338][T12113] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 796.462167][T12042] syz_tun: entered promiscuous mode [ 796.612017][T12105] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2159'. [ 796.756442][T12042] syz_tun: left promiscuous mode [ 797.017006][ T5227] Bluetooth: hci6: command tx timeout [ 797.187304][ T5227] Bluetooth: hci7: command tx timeout [ 797.507273][ T5227] Bluetooth: hci8: command tx timeout [ 797.814749][T12135] Bluetooth: MGMT ver 1.23 [ 799.040430][ T2472] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 799.108118][ T5227] Bluetooth: hci6: command tx timeout [ 799.257133][ T5227] Bluetooth: hci7: command tx timeout [ 799.577441][ T5227] Bluetooth: hci8: command tx timeout [ 801.177606][ T5227] Bluetooth: hci6: command tx timeout [ 801.338077][ T5227] Bluetooth: hci7: command tx timeout [ 801.664089][ T5227] Bluetooth: hci8: command tx timeout [ 802.000914][ T2472] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 802.233131][ T2472] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 802.297243][T12112] chnl_net:caif_netlink_parms(): no params data found [ 802.531632][ T2472] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 803.150938][T12181] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2179'. [ 803.177527][T12181] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2179'. [ 803.194991][T12181] vlan0: entered promiscuous mode [ 803.259855][ T5227] Bluetooth: hci6: command tx timeout [ 803.417742][ T5227] Bluetooth: hci7: command tx timeout [ 803.630172][T12112] bridge0: port 1(bridge_slave_0) entered blocking state [ 803.642074][T12112] bridge0: port 1(bridge_slave_0) entered disabled state [ 803.651354][T12112] bridge_slave_0: entered allmulticast mode [ 803.662406][T12112] bridge_slave_0: entered promiscuous mode [ 803.672122][T12112] bridge0: port 2(bridge_slave_1) entered blocking state [ 803.681228][T12112] bridge0: port 2(bridge_slave_1) entered disabled state [ 803.691293][T12112] bridge_slave_1: entered allmulticast mode [ 803.714882][T12112] bridge_slave_1: entered promiscuous mode [ 803.739418][ T5227] Bluetooth: hci8: command tx timeout [ 803.892858][T12112] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 803.982616][T12116] chnl_net:caif_netlink_parms(): no params data found [ 804.010237][T12195] loop0: detected capacity change from 0 to 7 [ 804.036969][T12112] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 804.067791][T12195] Dev loop0: unable to read RDB block 7 [ 804.073453][T12195] loop0: unable to read partition table [ 804.118559][T12195] loop0: partition table beyond EOD, truncated [ 804.134712][T12195] loop_reread_partitions: partition scan of loop0 (被xڬdƤݡ [ 804.134712][T12195] ) failed (rc=-5) [ 804.160435][ T2472] bridge_slave_0: left allmulticast mode [ 804.185776][ T2472] bridge_slave_0: left promiscuous mode [ 804.197543][ T2472] bridge0: port 1(bridge_slave_0) entered disabled state [ 804.645748][T12203] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.2186'. [ 804.660038][T12203] openvswitch: netlink: IP tunnel attribute has 3048 unknown bytes. [ 805.986883][ T47] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 806.199135][ T47] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 806.237056][ T47] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 806.284782][ T47] usb 5-1: New USB device found, idVendor=056e, idProduct=010d, bcdDevice= 0.00 [ 806.311173][ T47] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 806.338057][ T47] usb 5-1: config 0 descriptor?? [ 807.314375][ T47] elecom 0003:056E:010D.0025: item fetching failed at offset 0/3 [ 807.336446][ T47] elecom 0003:056E:010D.0025: probe with driver elecom failed with error -22 [ 807.556646][ T5319] usb 5-1: USB disconnect, device number 28 [ 807.691516][ T2472] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 807.726197][ T2472] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 807.755479][ T2472] bond0 (unregistering): Released all slaves [ 807.851185][T12110] chnl_net:caif_netlink_parms(): no params data found [ 807.881341][T12112] team0: Port device team_slave_0 added [ 808.050456][T12112] team0: Port device team_slave_1 added [ 808.608721][T12112] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 808.656919][T12112] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 808.682854][ C1] vkms_vblank_simulate: vblank timer overrun [ 808.769076][T12112] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 808.940796][T12112] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 808.969417][T12112] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 808.995877][T12112] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 809.022127][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 809.028543][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.107658][ T2472] hsr_slave_0: left promiscuous mode [ 809.114247][ T2472] hsr_slave_1: left promiscuous mode [ 809.145132][ T2472] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 809.170735][ T2472] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 809.195633][ T2472] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 809.222295][ T2472] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 809.273449][ T2472] batman_adv: batadv0: Removing interface: vlan0 [ 809.385567][ T2472] veth1_macvtap: left promiscuous mode [ 809.398143][ T2472] veth0_macvtap: left promiscuous mode [ 809.406222][ T2472] veth1_vlan: left promiscuous mode [ 809.414015][ T2472] veth0_vlan: left promiscuous mode [ 812.731192][ T2472] team0 (unregistering): Port device team_slave_1 removed [ 812.925002][ T2472] team0 (unregistering): Port device team_slave_0 removed [ 814.541874][T12116] bridge0: port 1(bridge_slave_0) entered blocking state [ 814.578688][T12116] bridge0: port 1(bridge_slave_0) entered disabled state [ 814.586006][T12116] bridge_slave_0: entered allmulticast mode [ 814.633671][T12116] bridge_slave_0: entered promiscuous mode [ 814.660420][T12110] bridge0: port 1(bridge_slave_0) entered blocking state [ 814.677073][T12110] bridge0: port 1(bridge_slave_0) entered disabled state [ 814.693489][T12110] bridge_slave_0: entered allmulticast mode [ 814.737461][T12110] bridge_slave_0: entered promiscuous mode [ 814.748365][T12110] bridge0: port 2(bridge_slave_1) entered blocking state [ 814.766998][T12110] bridge0: port 2(bridge_slave_1) entered disabled state [ 814.774344][T12110] bridge_slave_1: entered allmulticast mode [ 814.809311][T12110] bridge_slave_1: entered promiscuous mode [ 814.953803][T12110] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 814.975713][T12116] bridge0: port 2(bridge_slave_1) entered blocking state [ 814.985259][T12116] bridge0: port 2(bridge_slave_1) entered disabled state [ 814.994183][T12116] bridge_slave_1: entered allmulticast mode [ 815.014462][T12116] bridge_slave_1: entered promiscuous mode [ 815.062924][T12110] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 815.138194][T12116] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 815.197907][ T5271] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 815.222682][T12112] hsr_slave_0: entered promiscuous mode [ 815.262567][T12112] hsr_slave_1: entered promiscuous mode [ 815.291711][T12112] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 815.310034][T12112] Cannot create hsr debugfs directory [ 815.329624][T12116] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 815.407060][ T5271] usb 2-1: Using ep0 maxpacket: 8 [ 815.423242][ T5271] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 815.436281][T12110] team0: Port device team_slave_0 added [ 815.447003][ T5271] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 815.478396][ T5271] usb 2-1: Product: syz [ 815.492087][ T5271] usb 2-1: Manufacturer: syz [ 815.503429][ T5271] usb 2-1: SerialNumber: syz [ 815.523612][ T5271] usb 2-1: config 0 descriptor?? [ 815.592148][T12110] team0: Port device team_slave_1 added [ 815.708587][T12116] team0: Port device team_slave_0 added [ 815.732726][T12116] team0: Port device team_slave_1 added [ 815.752981][ T5271] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 815.865968][ T2472] IPVS: stop unused estimator thread 0... [ 816.029475][T12110] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 816.051734][T12110] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 816.103721][T12110] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 816.130306][T12110] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 816.270246][T12110] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 816.378941][T12275] xt_CT: You must specify a L4 protocol and not use inversions on it [ 817.027424][T12110] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 817.248833][T12116] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 817.255836][T12116] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 817.357688][T12116] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 817.429375][T12116] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 817.480709][T12116] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 817.508181][T12116] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 817.580561][ T5271] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 817.604581][ T5271] usb 2-1: USB disconnect, device number 29 [ 817.790523][ T2472] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 818.008102][T12116] hsr_slave_0: entered promiscuous mode [ 818.072671][T12116] hsr_slave_1: entered promiscuous mode [ 818.109078][T12116] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 818.116653][T12116] Cannot create hsr debugfs directory [ 818.414256][ T2472] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 818.743372][T12284] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 818.769141][T12284] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 818.787654][T12284] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 818.815560][T12284] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 819.994263][ T2472] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 820.171384][ T2472] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 820.301771][T12110] hsr_slave_0: entered promiscuous mode [ 820.328892][T12110] hsr_slave_1: entered promiscuous mode [ 820.350588][T12110] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 820.365258][T12110] Cannot create hsr debugfs directory [ 820.442474][T12292] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2211'. [ 820.901719][T12298] tipc: Can't bind to reserved service type 0 [ 822.286063][ T2472] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 822.607273][ T5271] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 822.642678][ T2472] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 822.821514][ T5271] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 822.858285][ T5271] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 822.879042][ T5271] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 822.906970][ T5271] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 822.924822][T12306] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 822.950668][ T5271] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 822.971299][ T2472] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 823.185492][ T2472] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 823.418608][T10098] usb 2-1: USB disconnect, device number 30 [ 823.626584][ T2472] bridge_slave_1: left allmulticast mode [ 823.634481][ T2472] bridge_slave_1: left promiscuous mode [ 823.640943][ T2472] bridge0: port 2(bridge_slave_1) entered disabled state [ 825.797813][ T2472] bridge_slave_0: left allmulticast mode [ 825.803967][ T2472] bridge_slave_0: left promiscuous mode [ 825.818307][ T2472] bridge0: port 1(bridge_slave_0) entered disabled state [ 826.328475][ T2472] bridge_slave_1: left allmulticast mode [ 826.940943][ T2472] bridge_slave_1: left promiscuous mode [ 826.946765][ T2472] bridge0: port 2(bridge_slave_1) entered disabled state [ 827.338042][ T2472] bridge_slave_0: left allmulticast mode [ 827.356974][ T2472] bridge_slave_0: left promiscuous mode [ 827.559769][ T2472] bridge0: port 1(bridge_slave_0) entered disabled state [ 829.738099][T12113] Bluetooth: hci8: command 0x0405 tx timeout [ 830.951089][ T2472] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 830.973031][ T2472] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 830.994483][ T2472] bond0 (unregistering): Released all slaves [ 831.393139][ T2472] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 831.426710][ T2472] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 831.451817][ T2472] bond0 (unregistering): Released all slaves [ 831.810636][T12112] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 831.971300][T12112] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 832.233435][T12112] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 832.310352][T12112] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 833.753997][ T2472] hsr_slave_0: left promiscuous mode [ 833.794021][ T2472] hsr_slave_1: left promiscuous mode [ 833.827801][ T2472] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 833.866957][ T2472] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 833.883349][T12359] netlink: 'syz.4.2231': attribute type 1 has an invalid length. [ 833.894500][T12359] netlink: 168864 bytes leftover after parsing attributes in process `syz.4.2231'. [ 833.898295][ T2472] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 833.957078][ T2472] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 834.015155][ T2472] hsr_slave_0: left promiscuous mode [ 834.051826][ T2472] hsr_slave_1: left promiscuous mode [ 834.091688][ T2472] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 834.121446][ T2472] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 834.144563][ T2472] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 834.153357][ T2472] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 834.319249][ T2472] veth1_macvtap: left promiscuous mode [ 834.326064][ T2472] veth0_macvtap: left promiscuous mode [ 834.359006][ T2472] veth1_vlan: left promiscuous mode [ 834.388152][ T2472] veth0_vlan: left promiscuous mode [ 834.432147][ T2472] veth1_vlan: left promiscuous mode [ 834.452666][ T2472] veth0_vlan: left promiscuous mode [ 836.473769][T12372] netlink: 276 bytes leftover after parsing attributes in process `syz.1.2236'. [ 837.142501][ T2472] team0 (unregistering): Port device team_slave_1 removed [ 837.265364][ T2472] team0 (unregistering): Port device team_slave_0 removed [ 839.858325][ T2472] team0 (unregistering): Port device team_slave_1 removed [ 839.987542][ T2472] team0 (unregistering): Port device team_slave_0 removed [ 841.545009][T12112] 8021q: adding VLAN 0 to HW filter on device bond0 [ 841.834009][T12112] 8021q: adding VLAN 0 to HW filter on device team0 [ 841.945098][ T2519] bridge0: port 1(bridge_slave_0) entered blocking state [ 841.952318][ T2519] bridge0: port 1(bridge_slave_0) entered forwarding state [ 842.918196][ T1056] bridge0: port 2(bridge_slave_1) entered blocking state [ 842.925329][ T1056] bridge0: port 2(bridge_slave_1) entered forwarding state [ 849.107059][T12110] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 849.175853][T12110] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 849.226148][T12112] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 849.294404][T12110] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 849.346013][T12110] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 849.493987][T12386] macsec1: entered allmulticast mode [ 849.530749][T12386] batadv0: entered allmulticast mode [ 849.558416][T12386] batadv0: left allmulticast mode [ 849.819177][T12116] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 849.870754][T12116] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 849.972760][T12116] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 850.023312][T12116] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 850.187585][ T2472] IPVS: stop unused estimator thread 0... [ 850.356727][T12110] 8021q: adding VLAN 0 to HW filter on device bond0 [ 850.530998][T12112] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 850.599276][T12110] 8021q: adding VLAN 0 to HW filter on device team0 [ 850.724755][ T279] bridge0: port 1(bridge_slave_0) entered blocking state [ 850.732053][ T279] bridge0: port 1(bridge_slave_0) entered forwarding state [ 850.754109][ T279] bridge0: port 2(bridge_slave_1) entered blocking state [ 850.761436][ T279] bridge0: port 2(bridge_slave_1) entered forwarding state [ 850.842158][T12116] 8021q: adding VLAN 0 to HW filter on device bond0 [ 850.903375][T12112] veth0_vlan: entered promiscuous mode [ 850.952339][T12112] veth1_vlan: entered promiscuous mode [ 851.189218][T12396] syz.1.2242: vmalloc error: size 16777216, failed to allocated page array size 32768, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=syz1,mems_allowed=0-1 [ 851.236102][T12396] CPU: 0 UID: 0 PID: 12396 Comm: syz.1.2242 Not tainted 6.11.0-rc3-syzkaller #0 [ 851.245191][T12396] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 851.255285][T12396] Call Trace: [ 851.258568][T12396] [ 851.261495][T12396] dump_stack_lvl+0x241/0x360 [ 851.266235][T12396] ? __pfx_dump_stack_lvl+0x10/0x10 [ 851.271440][T12396] ? __pfx__printk+0x10/0x10 [ 851.276039][T12396] ? __rcu_read_unlock+0xa1/0x110 [ 851.281133][T12396] warn_alloc+0x278/0x410 [ 851.285512][T12396] ? __pfx_warn_alloc+0x10/0x10 [ 851.290408][T12396] ? packet_set_ring+0x6da/0x2450 [ 851.295483][T12396] ? __get_vm_area_node+0x23d/0x270 [ 851.300748][T12396] __vmalloc_node_range_noprof+0x69f/0x1460 [ 851.306687][T12396] ? __pfx___alloc_pages_noprof+0x10/0x10 [ 851.312476][T12396] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 851.318861][T12396] ? __pfx_alloc_pages_mpol_noprof+0x10/0x10 [ 851.324847][T12396] ? packet_set_ring+0x62b/0x2450 [ 851.329894][T12396] ? rcu_is_watching+0x15/0xb0 [ 851.334706][T12396] ? packet_set_ring+0x6da/0x2450 [ 851.339765][T12396] vzalloc_noprof+0x79/0x90 [ 851.344285][T12396] ? packet_set_ring+0x6da/0x2450 [ 851.349323][T12396] packet_set_ring+0x6da/0x2450 [ 851.354198][T12396] ? __pfx_packet_set_ring+0x10/0x10 [ 851.359497][T12396] ? __might_fault+0xaa/0x120 [ 851.364178][T12396] ? __might_fault+0xc6/0x120 [ 851.368867][T12396] packet_setsockopt+0x1140/0x1970 [ 851.373978][T12396] ? mark_lock+0x9a/0x350 [ 851.378362][T12396] ? __pfx_packet_setsockopt+0x10/0x10 [ 851.383905][T12396] ? __pfx_lock_acquire+0x10/0x10 [ 851.385314][T12116] 8021q: adding VLAN 0 to HW filter on device team0 [ 851.389044][T12396] ? __fget_files+0x29/0x470 [ 851.389122][T12396] ? __pfx_lock_release+0x10/0x10 [ 851.405331][T12396] ? bpf_lsm_socket_setsockopt+0x9/0x10 [ 851.410972][T12396] ? security_socket_setsockopt+0x87/0xb0 [ 851.416752][T12396] ? __pfx_packet_setsockopt+0x10/0x10 [ 851.422237][T12396] do_sock_setsockopt+0x3af/0x720 [ 851.427276][T12396] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 851.432823][T12396] ? __fget_files+0x29/0x470 [ 851.437416][T12396] ? __fget_files+0x3f6/0x470 [ 851.442101][T12396] __sys_setsockopt+0x1ae/0x250 [ 851.446957][T12396] __x64_sys_setsockopt+0xb5/0xd0 [ 851.451985][T12396] do_syscall_64+0xf3/0x230 [ 851.456486][T12396] ? clear_bhb_loop+0x35/0x90 [ 851.461183][T12396] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 851.467098][T12396] RIP: 0033:0x7ff2909779f9 [ 851.471561][T12396] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 851.491206][T12396] RSP: 002b:00007ff291734038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 851.499628][T12396] RAX: ffffffffffffffda RBX: 00007ff290b06058 RCX: 00007ff2909779f9 [ 851.507602][T12396] RDX: 0000000000000005 RSI: 0000000000000107 RDI: 0000000000000008 [ 851.515588][T12396] RBP: 00007ff2909e58ee R08: 000000000000001c R09: 0000000000000000 [ 851.523669][T12396] R10: 00000000200000c0 R11: 0000000000000246 R12: 0000000000000000 [ 851.531656][T12396] R13: 0000000000000000 R14: 00007ff290b06058 R15: 00007ffc4fa69a38 [ 851.539647][T12396] [ 851.564797][T12110] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 851.586935][T12110] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 851.624804][T12112] veth0_macvtap: entered promiscuous mode [ 851.637372][T12396] Mem-Info: [ 851.655026][ T279] bridge0: port 1(bridge_slave_0) entered blocking state [ 851.662195][ T279] bridge0: port 1(bridge_slave_0) entered forwarding state [ 851.670239][T12396] active_anon:13 inactive_anon:3725 isolated_anon:0 [ 851.670239][T12396] active_file:3394 inactive_file:1052 isolated_file:0 [ 851.670239][T12396] unevictable:768 dirty:146 writeback:0 [ 851.670239][T12396] slab_reclaimable:8665 slab_unreclaimable:99535 [ 851.670239][T12396] mapped:25463 shmem:2269 pagetables:624 [ 851.670239][T12396] sec_pagetables:0 bounce:0 [ 851.670239][T12396] kernel_misc_reclaimable:0 [ 851.670239][T12396] free:1406393 free_pcp:1351 free_cma:0 [ 851.716728][T12396] Node 0 active_anon:52kB inactive_anon:14900kB active_file:13576kB inactive_file:4200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:101852kB dirty:584kB writeback:0kB shmem:7540kB shmem_thp:4096kB shmem_pmdmapped:2048kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10032kB pagetables:2496kB sec_pagetables:0kB all_unreclaimable? no [ 851.751503][T12396] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:8kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 851.791238][T12396] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 851.828891][T12396] lowmem_reserve[]: 0 2563 2565 0 0 [ 851.840283][T12396] Node 0 DMA32 free:1658852kB boost:0kB min:35036kB low:43792kB high:52548kB reserved_highatomic:0KB active_anon:48kB inactive_anon:14804kB active_file:12220kB inactive_file:4088kB unevictable:1536kB writepending:584kB present:3129332kB managed:2653296kB mlocked:0kB bounce:0kB free_pcp:5052kB local_pcp:4640kB free_cma:0kB [ 851.871528][T12396] lowmem_reserve[]: 0 0 1 0 0 [ 851.876674][T12396] Node 0 Normal free:8kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB active_anon:4kB inactive_anon:96kB active_file:1356kB inactive_file:112kB unevictable:0kB writepending:0kB present:1048576kB managed:1640kB mlocked:0kB bounce:0kB free_pcp:20kB local_pcp:4kB free_cma:0kB [ 851.907196][T12396] lowmem_reserve[]: 0 0 0 0 0 [ 851.915691][T12396] Node 1 Normal free:3951512kB boost:0kB min:54844kB low:68552kB high:82260kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:8kB unevictable:1536kB writepending:0kB present:4194304kB managed:4109120kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 851.961330][T12396] lowmem_reserve[]: 0 0 0 0 0 [ 851.986924][T12396] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 852.001487][T12396] Node 0 DMA32: 209*4kB (UME) 391*8kB (UME) 394*16kB (UME) 1212*32kB (UME) 507*64kB (UME) 217*128kB (UME) 110*256kB (UME) 67*512kB (UM) 33*1024kB (UME) 15*2048kB (UME) 348*4096kB (UM) = 1661660kB [ 852.022876][T12396] Node 0 Normal: 0*4kB 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 852.036826][T12396] Node 1 Normal: 2*4kB (U) 14*8kB (U) 14*16kB (U) 10*32kB (U) 10*64kB (UM) 7*128kB (U) 3*256kB (UM) 2*512kB (UM) 5*1024kB (U) 3*2048kB (U) 961*4096kB (M) = 3951512kB [ 852.058229][T12396] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 852.068823][T12396] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 852.078472][T12396] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 852.088554][T12396] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 852.098179][T12396] 6713 total pagecache pages [ 852.102918][T12396] 0 pages in swap cache [ 852.107280][T12396] Free swap = 124448kB [ 852.111567][T12396] Total swap = 124996kB [ 852.138060][T12396] 2097051 pages RAM [ 852.145736][ T1056] bridge0: port 2(bridge_slave_1) entered blocking state [ 852.153094][ T1056] bridge0: port 2(bridge_slave_1) entered forwarding state [ 852.166905][T12396] 0 pages HighMem/MovableOnly [ 852.171766][T12396] 402197 pages reserved [ 852.176018][T12396] 0 pages cma reserved [ 852.209374][T12112] veth1_macvtap: entered promiscuous mode [ 852.276350][T12112] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 852.314422][T12112] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 852.334944][T12112] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 852.361072][T12112] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 852.399969][T12112] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 852.434216][T12112] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 852.538137][T12112] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 852.664531][T12112] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 852.691704][T12112] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 852.741193][T12112] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 852.769880][T12112] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 852.789566][T12112] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 852.828105][T12112] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 852.912700][T12112] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 853.015699][T12112] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 853.058394][T12112] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 853.099565][T12112] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 853.136906][T12112] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 853.187911][T12110] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 853.609268][ T2472] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 853.632686][ T2472] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 853.679123][T12110] veth0_vlan: entered promiscuous mode [ 853.798889][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 853.813535][T12110] veth1_vlan: entered promiscuous mode [ 853.837291][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 853.976070][T12116] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 854.274186][T12116] veth0_vlan: entered promiscuous mode [ 854.326619][T12116] veth1_vlan: entered promiscuous mode [ 856.628450][T12113] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 856.641923][T12113] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 856.660052][T12113] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 856.694710][ T5224] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 856.705604][ T5224] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 856.714297][ T9108] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 856.726495][ T5224] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 856.733724][ T9108] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 856.767284][ T5227] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 856.813574][ T5227] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 856.827777][ T5227] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 856.837442][ T5227] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 856.960234][ T5227] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 856.976740][ T5227] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 856.997589][ T5227] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 857.011567][ T5227] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 857.021201][ T5227] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 857.035384][ T5227] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 857.061661][ T29] audit: type=1326 audit(1723457720.834:1140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12425 comm="syz.1.2247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2909779f9 code=0x7ffc0000 [ 857.084582][ T29] audit: type=1326 audit(1723457720.834:1141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12425 comm="syz.1.2247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2909779f9 code=0x7ffc0000 [ 857.114379][ T29] audit: type=1326 audit(1723457720.834:1142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12425 comm="syz.1.2247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=106 compat=0 ip=0x7ff2909779f9 code=0x7ffc0000 [ 857.216630][ T29] audit: type=1326 audit(1723457720.834:1143): auid=4294967295 uid=0 gid=60928 ses=4294967295 subj=_ pid=12425 comm="syz.1.2247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2909779f9 code=0x7ffc0000 [ 857.286959][ T29] audit: type=1326 audit(1723457720.834:1144): auid=4294967295 uid=0 gid=60928 ses=4294967295 subj=_ pid=12425 comm="syz.1.2247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7ff2909779f9 code=0x7ffc0000 [ 857.309872][ T29] audit: type=1326 audit(1723457720.834:1145): auid=4294967295 uid=0 gid=60928 ses=4294967295 subj=_ pid=12425 comm="syz.1.2247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2909779f9 code=0x7ffc0000 [ 857.332870][ T29] audit: type=1326 audit(1723457720.834:1146): auid=4294967295 uid=0 gid=60928 ses=4294967295 subj=_ pid=12425 comm="syz.1.2247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2909779f9 code=0x7ffc0000 [ 857.359236][ T29] audit: type=1326 audit(1723457720.834:1147): auid=4294967295 uid=0 gid=60928 ses=4294967295 subj=_ pid=12425 comm="syz.1.2247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7ff2909779f9 code=0x7ffc0000 [ 857.383836][ T29] audit: type=1326 audit(1723457720.834:1148): auid=4294967295 uid=0 gid=60928 ses=4294967295 subj=_ pid=12425 comm="syz.1.2247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2909779f9 code=0x7ffc0000 [ 857.422030][ T29] audit: type=1326 audit(1723457720.834:1149): auid=4294967295 uid=0 gid=60928 ses=4294967295 subj=_ pid=12425 comm="syz.1.2247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2909779f9 code=0x7ffc0000 [ 858.867105][T12113] Bluetooth: hci1: command tx timeout [ 858.881557][ T11] bridge_slave_1: left allmulticast mode [ 858.887351][ T11] bridge_slave_1: left promiscuous mode [ 858.897213][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 858.908990][ T11] bridge_slave_0: left allmulticast mode [ 858.914683][ T11] bridge_slave_0: left promiscuous mode [ 858.933309][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 858.941861][T12113] Bluetooth: hci3: command tx timeout [ 859.085183][T12442] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2249'. [ 859.177011][T12113] Bluetooth: hci5: command tx timeout [ 860.691141][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 860.712634][ T5227] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 860.743851][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 860.761366][ T5227] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 860.781975][ T5227] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 860.793526][ T11] bond0 (unregistering): Released all slaves [ 860.807222][ T5227] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 860.817367][ T5227] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 860.824756][ T5227] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 860.857300][ T5322] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 860.937202][ T5227] Bluetooth: hci1: command tx timeout [ 861.027415][ T5227] Bluetooth: hci3: command tx timeout [ 861.127260][ T5322] usb 2-1: Using ep0 maxpacket: 16 [ 861.134422][ T5322] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 861.189805][ T5322] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 861.213264][ T5322] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 861.234003][ T5322] usb 2-1: Product: syz [ 861.257055][ T5322] usb 2-1: Manufacturer: syz [ 861.261721][ T5227] Bluetooth: hci5: command tx timeout [ 861.261772][ T5322] usb 2-1: SerialNumber: syz [ 861.298048][ T5322] usb 2-1: config 0 descriptor?? [ 861.306491][ T11] hsr_slave_0: left promiscuous mode [ 861.346596][ T11] hsr_slave_1: left promiscuous mode [ 861.359332][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 861.390664][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 861.468402][ T11] veth1_vlan: left promiscuous mode [ 861.477063][ T11] veth0_vlan: left promiscuous mode [ 861.561935][ T5322] usb 2-1: USB disconnect, device number 31 [ 862.576990][ T5322] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 862.593131][ T11] team0 (unregistering): Port device team_slave_1 removed [ 862.703347][ T11] team0 (unregistering): Port device team_slave_0 removed [ 862.766956][ T5322] usb 2-1: Using ep0 maxpacket: 32 [ 862.775157][ T5322] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 862.813898][ T5322] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 862.849985][ T5322] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 862.859610][ T5227] Bluetooth: hci4: command tx timeout [ 862.869280][ T5322] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 862.921896][ T5322] hub 2-1:4.0: USB hub found [ 863.024527][ T5227] Bluetooth: hci1: command tx timeout [ 863.097096][ T5227] Bluetooth: hci3: command tx timeout [ 863.154157][ T5322] hub 2-1:4.0: 1 port detected [ 863.349059][ T5227] Bluetooth: hci5: command tx timeout [ 863.355544][ T5322] hub 2-1:4.0: hub_hub_status failed (err = -71) [ 863.382874][ T5322] hub 2-1:4.0: config failed, can't get hub status (err -71) [ 863.496658][ T5322] usb 2-1: USB disconnect, device number 32 [ 864.458232][T12423] chnl_net:caif_netlink_parms(): no params data found [ 864.734075][T12466] UBIFS error (pid: 12466): cannot open "u?kfs", error -22 [ 864.893590][T12421] chnl_net:caif_netlink_parms(): no params data found [ 864.937283][ T5227] Bluetooth: hci4: command tx timeout [ 865.007348][ T5273] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 865.097199][ T5227] Bluetooth: hci1: command tx timeout [ 865.167969][ T5273] usb 2-1: device descriptor read/64, error -71 [ 865.170605][T12426] chnl_net:caif_netlink_parms(): no params data found [ 865.182131][ T5227] Bluetooth: hci3: command tx timeout [ 865.417141][ T5227] Bluetooth: hci5: command tx timeout [ 865.467572][ T5273] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 865.506613][T12423] bridge0: port 1(bridge_slave_0) entered blocking state [ 865.537077][T12423] bridge0: port 1(bridge_slave_0) entered disabled state [ 865.546170][T12423] bridge_slave_0: entered allmulticast mode [ 865.568552][T12423] bridge_slave_0: entered promiscuous mode [ 865.588728][T12423] bridge0: port 2(bridge_slave_1) entered blocking state [ 865.595907][T12423] bridge0: port 2(bridge_slave_1) entered disabled state [ 865.641780][T12423] bridge_slave_1: entered allmulticast mode [ 865.682579][T12423] bridge_slave_1: entered promiscuous mode [ 865.690801][ T5273] usb 2-1: device descriptor read/64, error -71 [ 865.831285][ T5273] usb usb2-port1: attempt power cycle [ 865.961355][T12423] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 866.067635][T12421] bridge0: port 1(bridge_slave_0) entered blocking state [ 866.074801][T12421] bridge0: port 1(bridge_slave_0) entered disabled state [ 866.082944][T12421] bridge_slave_0: entered allmulticast mode [ 866.093222][T12421] bridge_slave_0: entered promiscuous mode [ 866.140327][T12423] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 866.263018][T12421] bridge0: port 2(bridge_slave_1) entered blocking state [ 866.287162][ T5273] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 866.295827][T12421] bridge0: port 2(bridge_slave_1) entered disabled state [ 866.315659][T12421] bridge_slave_1: entered allmulticast mode [ 866.330099][ T5273] usb 2-1: device descriptor read/8, error -71 [ 866.365249][T12421] bridge_slave_1: entered promiscuous mode [ 866.628842][ T5273] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 866.678268][ T5273] usb 2-1: device descriptor read/8, error -71 [ 866.780128][T12423] team0: Port device team_slave_0 added [ 866.828932][ T5273] usb usb2-port1: unable to enumerate USB device [ 866.845841][T12423] team0: Port device team_slave_1 added [ 866.910430][T12421] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 866.951796][T12421] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 867.017429][ T5227] Bluetooth: hci4: command tx timeout [ 867.204656][T12426] bridge0: port 1(bridge_slave_0) entered blocking state [ 867.236728][T12426] bridge0: port 1(bridge_slave_0) entered disabled state [ 867.244310][T12426] bridge_slave_0: entered allmulticast mode [ 867.297572][T12426] bridge_slave_0: entered promiscuous mode [ 867.397248][T12423] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 867.404223][T12423] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 867.451745][T12423] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 867.497205][T12426] bridge0: port 2(bridge_slave_1) entered blocking state [ 867.504337][T12426] bridge0: port 2(bridge_slave_1) entered disabled state [ 867.547070][T12426] bridge_slave_1: entered allmulticast mode [ 867.554781][T12426] bridge_slave_1: entered promiscuous mode [ 867.729755][T12421] team0: Port device team_slave_0 added [ 867.738289][T12423] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 867.745271][T12423] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 867.856842][T12423] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 868.385879][T12421] team0: Port device team_slave_1 added [ 868.520696][T12426] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 868.688734][T12421] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 868.695728][T12421] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 868.757191][T12421] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 868.791294][T12426] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 868.966971][ T5269] usb 2-1: new low-speed USB device number 37 using dummy_hcd [ 869.015550][T12421] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 869.023080][T12421] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 869.059019][T12421] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 869.097243][ T5227] Bluetooth: hci4: command tx timeout [ 869.155561][T12453] chnl_net:caif_netlink_parms(): no params data found [ 869.191243][T12423] hsr_slave_0: entered promiscuous mode [ 869.209737][ T5269] usb 2-1: config index 0 descriptor too short (expected 1307, got 27) [ 869.227208][ T5269] usb 2-1: config 0 has an invalid interface number: 0 but max is -1 [ 869.237806][ T5269] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 869.259299][ T5269] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 869.267352][T12423] hsr_slave_1: entered promiscuous mode [ 869.270882][ T5269] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 869.296957][ T5269] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 869.307101][ T5269] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 869.308403][T12423] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 869.337225][ T5269] usb 2-1: string descriptor 0 read error: -22 [ 869.349414][ T5269] usb 2-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 869.366962][ T5269] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 869.386309][ T5269] usb 2-1: config 0 descriptor?? [ 869.392617][T12423] Cannot create hsr debugfs directory [ 869.404008][ T5269] hub 2-1:0.0: bad descriptor, ignoring hub [ 869.411319][ T5269] hub 2-1:0.0: probe with driver hub failed with error -5 [ 869.430801][ T5269] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input32 [ 869.513569][T12426] team0: Port device team_slave_0 added [ 869.548600][T12426] team0: Port device team_slave_1 added [ 869.711437][ T5269] usb 2-1: USB disconnect, device number 37 [ 869.742956][ C1] vxcan0: j1939_tp_rxtimer: 0xffff888071811c00: rx timeout, send abort [ 869.755441][ C1] vxcan0: j1939_xtp_rx_abort_one: 0xffff888071811c00: 0x20000: (3) A timeout occurred and this is the connection abort to close the session. [ 869.847843][T12421] hsr_slave_0: entered promiscuous mode [ 869.868371][T12421] hsr_slave_1: entered promiscuous mode [ 869.882071][T12421] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 869.906874][T12421] Cannot create hsr debugfs directory [ 870.009421][T12426] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 870.016420][T12426] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 870.043072][T12426] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 870.133561][T12426] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 870.153069][T12426] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 870.182648][T12426] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 870.473597][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.480066][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.738127][T12453] bridge0: port 1(bridge_slave_0) entered blocking state [ 870.745366][T12453] bridge0: port 1(bridge_slave_0) entered disabled state [ 870.757292][T12453] bridge_slave_0: entered allmulticast mode [ 870.764852][T12453] bridge_slave_0: entered promiscuous mode [ 870.779087][T12453] bridge0: port 2(bridge_slave_1) entered blocking state [ 870.786259][T12453] bridge0: port 2(bridge_slave_1) entered disabled state [ 870.794517][T12453] bridge_slave_1: entered allmulticast mode [ 870.809217][T12453] bridge_slave_1: entered promiscuous mode [ 870.982225][ T11] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 871.336169][ T11] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 871.378667][T12426] hsr_slave_0: entered promiscuous mode [ 871.401707][T12426] hsr_slave_1: entered promiscuous mode [ 871.408646][T12426] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 871.416444][T12426] Cannot create hsr debugfs directory [ 871.427545][ T5273] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 871.497915][T12453] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 871.512995][T12453] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 871.568790][ T11] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 871.659264][ T5273] usb 2-1: config index 0 descriptor too short (expected 23569, got 27) [ 871.676857][ T5273] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 871.708342][ T5273] usb 2-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 871.736362][ T5273] usb 2-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 871.766831][ T5273] usb 2-1: Manufacturer: syz [ 871.774125][ T5273] usb 2-1: config 0 descriptor?? [ 871.889552][ T11] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 871.947306][ T5273] rc_core: IR keymap rc-hauppauge not found [ 871.953286][ T5273] Registered IR keymap rc-empty [ 871.970298][ T5273] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 872.009364][T12453] team0: Port device team_slave_0 added [ 872.027364][ T5273] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input33 [ 872.048076][T12453] team0: Port device team_slave_1 added [ 872.048970][T12490] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 872.104821][T12490] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 872.269713][T12490] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 872.322470][T12453] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 872.337466][T12490] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 872.376205][T12453] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 872.412215][T12453] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 872.425979][ T5273] usb 2-1: USB disconnect, device number 38 [ 872.531669][T12453] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 872.566825][T12453] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 872.625847][T12453] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 872.928677][T12453] hsr_slave_0: entered promiscuous mode [ 872.944639][T12453] hsr_slave_1: entered promiscuous mode [ 872.953242][T12453] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 872.961001][T12453] Cannot create hsr debugfs directory [ 873.074294][ T11] bridge_slave_1: left allmulticast mode [ 873.117358][ T11] bridge_slave_1: left promiscuous mode [ 873.123301][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 873.169292][ T11] bridge_slave_0: left allmulticast mode [ 873.174958][ T11] bridge_slave_0: left promiscuous mode [ 873.207269][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 873.230464][ T11] bridge_slave_1: left allmulticast mode [ 873.259488][ T11] bridge_slave_1: left promiscuous mode [ 873.287460][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 873.318105][ T11] bridge_slave_0: left allmulticast mode [ 873.337347][ T11] bridge_slave_0: left promiscuous mode [ 873.343179][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 874.061455][T12500] binder: 12497:12500 ioctl 4018620d 0 returned -22 [ 876.367792][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 876.401605][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 876.439690][ T11] bond0 (unregistering): Released all slaves [ 876.995064][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 877.018604][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 877.050628][ T11] bond0 (unregistering): Released all slaves [ 878.325402][ T11] hsr_slave_0: left promiscuous mode [ 878.357799][ T11] hsr_slave_1: left promiscuous mode [ 878.397357][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 878.408368][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 878.497526][ T11] hsr_slave_0: left promiscuous mode [ 878.507360][ T11] hsr_slave_1: left promiscuous mode [ 878.527252][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 878.534855][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 878.569436][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 878.586910][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 878.709405][ T11] veth1_vlan: left promiscuous mode [ 878.714856][ T11] veth0_vlan: left promiscuous mode [ 878.748006][ T11] veth1_macvtap: left promiscuous mode [ 878.753618][ T11] veth0_macvtap: left promiscuous mode [ 878.767032][ T11] veth1_vlan: left promiscuous mode [ 878.772443][ T11] veth0_vlan: left promiscuous mode [ 880.599387][ T11] team0 (unregistering): Port device team_slave_1 removed [ 880.764500][ T11] team0 (unregistering): Port device team_slave_0 removed [ 883.810400][ T11] team0 (unregistering): Port device team_slave_1 removed [ 884.039123][ T11] team0 (unregistering): Port device team_slave_0 removed [ 886.758735][T12513] Option ' ' to dns_resolver key: bad/missing value [ 886.987775][T12515] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2268'. [ 887.488339][T12519] netlink: 'syz.1.2270': attribute type 3 has an invalid length. [ 887.776367][T12423] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 888.018801][T12423] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 890.812441][T12453] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 891.042394][T12423] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 891.072244][T12423] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 892.049726][T12453] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 892.189497][T12453] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 892.308894][T12453] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 892.489310][T12423] 8021q: adding VLAN 0 to HW filter on device bond0 [ 892.541846][T12423] 8021q: adding VLAN 0 to HW filter on device team0 [ 892.626952][ T5273] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 892.715301][ T2472] bridge0: port 1(bridge_slave_0) entered blocking state [ 892.722487][ T2472] bridge0: port 1(bridge_slave_0) entered forwarding state [ 892.748117][ T2472] bridge0: port 2(bridge_slave_1) entered blocking state [ 892.755417][ T2472] bridge0: port 2(bridge_slave_1) entered forwarding state [ 892.828229][ T5273] usb 2-1: Using ep0 maxpacket: 16 [ 892.838987][ T5273] usb 2-1: config index 0 descriptor too short (expected 65138, got 92) [ 892.855758][T12421] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 892.871820][ T5273] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 892.907005][ T5273] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 892.959498][T12421] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 892.982090][T12421] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 892.989554][ T5273] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 892.989589][ T5273] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 892.989618][ T5273] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 892.989643][ T5273] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 892.998987][ T5273] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 893.074667][T12421] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 893.075737][ T5273] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 893.099034][ T5273] usb 2-1: Product: syz [ 893.113209][ T5273] usb 2-1: Manufacturer: syz [ 893.118064][ T5273] usb 2-1: SerialNumber: syz [ 893.389052][ T5273] cdc_ncm 2-1:1.0: bind() failure [ 893.407743][ T5273] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 893.414612][ T5273] cdc_ncm 2-1:1.1: bind() failure [ 893.444827][T12426] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 893.468273][ T5273] usb 2-1: USB disconnect, device number 39 [ 893.491230][T12426] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 893.605096][T12426] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 893.649082][T12426] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 893.899096][T12453] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 893.927956][T12453] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 893.969608][T12453] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 894.011111][T12453] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 894.072825][T12423] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 894.342565][T12421] 8021q: adding VLAN 0 to HW filter on device bond0 [ 894.470527][T12541] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 262207 (only 8 groups) [ 894.534582][T12421] 8021q: adding VLAN 0 to HW filter on device team0 [ 894.568052][T12426] 8021q: adding VLAN 0 to HW filter on device bond0 [ 894.630364][T12423] veth0_vlan: entered promiscuous mode [ 894.640972][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 894.648225][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 894.691070][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 894.698537][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 894.865744][T12423] veth1_vlan: entered promiscuous mode [ 894.961473][T12426] 8021q: adding VLAN 0 to HW filter on device team0 [ 895.147215][ T2472] bridge0: port 1(bridge_slave_0) entered blocking state [ 895.154431][ T2472] bridge0: port 1(bridge_slave_0) entered forwarding state [ 895.196104][ T279] bridge0: port 2(bridge_slave_1) entered blocking state [ 895.203391][ T279] bridge0: port 2(bridge_slave_1) entered forwarding state [ 895.276377][T12423] veth0_macvtap: entered promiscuous mode [ 895.474134][T12423] veth1_macvtap: entered promiscuous mode [ 895.636721][T12453] 8021q: adding VLAN 0 to HW filter on device bond0 [ 895.800868][T12423] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 895.839446][T12423] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 895.873914][T12423] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 895.941246][T12423] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 895.969650][T12423] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 896.037134][T12423] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 896.079342][T12423] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 896.155342][T12453] 8021q: adding VLAN 0 to HW filter on device team0 [ 896.210997][T12423] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 896.247697][T12423] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 896.276880][T12423] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 896.311615][T12423] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 896.327060][T12423] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 896.388291][T12423] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 896.412817][T12423] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 896.465917][T12426] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 896.576175][ T2519] bridge0: port 1(bridge_slave_0) entered blocking state [ 896.583436][ T2519] bridge0: port 1(bridge_slave_0) entered forwarding state [ 896.631132][ T2519] bridge0: port 2(bridge_slave_1) entered blocking state [ 896.638420][ T2519] bridge0: port 2(bridge_slave_1) entered forwarding state [ 896.700840][T12423] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 896.720748][T12423] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 896.742100][T12423] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 896.772875][T12423] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 896.932329][T12421] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 897.094490][T12453] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 897.420334][T12421] veth0_vlan: entered promiscuous mode [ 897.505669][T12421] veth1_vlan: entered promiscuous mode [ 897.587451][ T2472] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 897.629141][ T2472] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 898.039601][T12426] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 898.085162][T12421] veth0_macvtap: entered promiscuous mode [ 898.103827][T12421] veth1_macvtap: entered promiscuous mode [ 898.393473][ T2472] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 898.436883][ T2472] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 898.552344][ T279] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 898.568061][ T279] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 898.676004][T12421] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 898.686863][T12421] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 898.706944][T12421] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 898.745444][T12421] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 898.755539][T12421] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 898.766473][T12421] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 898.776489][T12421] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 898.796835][T12421] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 898.825970][T12421] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 898.993728][ T2472] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 899.057196][ T2472] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 899.134827][T12421] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 899.176818][T12421] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 899.196816][T12421] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 899.219839][T12421] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 899.237144][T12421] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 899.266125][T12421] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 899.276313][T12421] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 899.296881][T12421] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 899.328925][T12421] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 899.415311][T12453] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 899.424087][T12113] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 899.437287][T12113] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 899.448148][T12113] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 900.071080][T12113] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 900.457251][T12113] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 900.465709][T12113] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 900.590118][ T2472] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 900.606922][ T2472] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 901.431175][T12421] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 901.446955][T12421] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 901.455817][T12421] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 901.516698][T12421] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 901.561341][T12426] veth0_vlan: entered promiscuous mode [ 901.761145][ T2472] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 901.787936][ T2472] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 902.039226][T12426] veth1_vlan: entered promiscuous mode [ 902.452375][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 902.452395][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 902.543974][T12113] Bluetooth: hci0: command tx timeout [ 902.611048][T12426] veth0_macvtap: entered promiscuous mode [ 902.630754][T12426] veth1_macvtap: entered promiscuous mode [ 903.019102][ T2472] bridge_slave_1: left allmulticast mode [ 903.037759][ T2472] bridge_slave_1: left promiscuous mode [ 903.043495][ T2472] bridge0: port 2(bridge_slave_1) entered disabled state [ 903.093238][ T2472] bridge_slave_0: left allmulticast mode [ 903.119507][ T2472] bridge_slave_0: left promiscuous mode [ 903.143120][ T2472] bridge0: port 1(bridge_slave_0) entered disabled state [ 904.348308][T12609] Bluetooth: MGMT ver 1.23 [ 904.627048][T12113] Bluetooth: hci0: command tx timeout [ 904.969065][ T2472] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 905.072342][ T2472] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 905.145533][ T2472] bond0 (unregistering): Released all slaves [ 905.228304][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 905.256698][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 905.412991][T12453] veth0_vlan: entered promiscuous mode [ 906.064710][ T29] kauditd_printk_skb: 32 callbacks suppressed [ 906.064733][ T29] audit: type=1326 audit(906.024:1182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12615 comm="syz.0.2160" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f32d45779f9 code=0x0 [ 906.347299][T12426] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 906.407447][T12426] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 906.417775][T12426] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 906.431835][T12426] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 906.441944][T12426] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 906.452985][T12426] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 906.467043][T12426] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 906.479104][T12426] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 906.492949][T12426] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 906.504708][T12426] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 906.542959][T12426] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 906.697462][T12113] Bluetooth: hci0: command tx timeout [ 906.713790][ C1] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 906.796459][T12627] bridge_slave_1: left allmulticast mode [ 906.809540][T12627] bridge_slave_1: left promiscuous mode [ 906.832783][T12627] bridge0: port 2(bridge_slave_1) entered disabled state [ 906.973031][T12628] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2295'. [ 907.004276][T12453] veth1_vlan: entered promiscuous mode [ 907.224013][T12426] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 907.236924][T12426] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 907.260170][T12426] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 907.291577][T12426] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 907.307447][T12426] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 907.320795][T12426] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 907.332807][T12426] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 907.354028][T12426] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 907.366810][T12426] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 907.385473][T12426] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 907.415659][T12426] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 907.599051][ T2472] hsr_slave_0: left promiscuous mode [ 907.671546][ T2472] hsr_slave_1: left promiscuous mode [ 907.691191][ T2472] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 907.735931][ T2472] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 907.749069][ T2472] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 907.757002][ T2472] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 907.835765][ T2472] veth1_macvtap: left promiscuous mode [ 907.860670][ T2472] veth0_macvtap: left promiscuous mode [ 907.866442][ T2472] veth1_vlan: left promiscuous mode [ 907.904351][ T2472] veth0_vlan: left promiscuous mode [ 907.958648][T10098] libceph: connect (1)[c::]:6789 error -101 [ 907.978124][T10098] libceph: mon0 (1)[c::]:6789 connect error [ 908.010816][ T29] audit: type=1326 audit(907.974:1183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12637 comm="syz.0.2297" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f32d45779f9 code=0x0 [ 908.029400][T10098] libceph: connect (1)[c::]:6789 error -101 [ 908.059742][T10098] libceph: mon0 (1)[c::]:6789 connect error [ 908.351423][T10098] libceph: connect (1)[c::]:6789 error -101 [ 908.365669][T10098] libceph: mon0 (1)[c::]:6789 connect error [ 908.752068][T12638] ceph: No mds server is up or the cluster is laggy [ 909.057133][T12113] Bluetooth: hci0: command tx timeout [ 909.620780][ T25] libceph: connect (1)[c::]:6789 error -101 [ 909.627086][ T25] libceph: mon0 (1)[c::]:6789 connect error [ 910.832486][ T2472] team0 (unregistering): Port device team_slave_1 removed [ 910.920142][ T2472] team0 (unregistering): Port device team_slave_0 removed [ 912.345242][T12426] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 912.357731][T12426] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 912.367759][T12426] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 912.376510][T12426] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 912.398102][T12573] chnl_net:caif_netlink_parms(): no params data found [ 912.454821][T12657] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2302'. [ 912.478224][T12657] netlink: 'syz.0.2302': attribute type 15 has an invalid length. [ 912.675068][T12453] veth0_macvtap: entered promiscuous mode [ 912.718584][T12665] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2303'. [ 912.804460][T12453] veth1_macvtap: entered promiscuous mode [ 912.920022][T12667] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2304'. [ 912.937234][T12667] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2304'. [ 912.967677][T12453] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 912.987227][T12453] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 913.001395][T12453] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 913.011928][T12453] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 913.022269][T12453] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 913.043257][T12453] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 913.053549][T12453] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 913.065316][T12453] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 913.075802][T12453] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 913.087643][T12453] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 913.104558][T12453] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 913.313249][T12453] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 913.333010][T12453] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 913.357012][T12453] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 913.377146][T12453] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 913.394752][T12453] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 913.405700][T12453] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 913.425584][T12453] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 913.437458][T12453] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 913.497310][T12453] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 913.548679][T12453] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 913.611040][T12453] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 913.654092][T12573] bridge0: port 1(bridge_slave_0) entered blocking state [ 913.687673][T12573] bridge0: port 1(bridge_slave_0) entered disabled state [ 913.735418][ T29] audit: type=1400 audit(913.694:1184): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="#!" requested=w pid=12676 comm="syz.0.2306" [ 913.752639][T12573] bridge_slave_0: entered allmulticast mode [ 913.778457][T12573] bridge_slave_0: entered promiscuous mode [ 913.837677][T12573] bridge0: port 2(bridge_slave_1) entered blocking state [ 913.905575][T12573] bridge0: port 2(bridge_slave_1) entered disabled state [ 913.978232][T12573] bridge_slave_1: entered allmulticast mode [ 914.007761][T12573] bridge_slave_1: entered promiscuous mode [ 914.264910][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 914.274488][T12453] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 914.290998][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 914.298977][T12453] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 914.315563][T12453] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 914.327053][T12453] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 914.522974][T12573] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 914.601274][T12573] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 914.764513][ T1056] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 914.810061][ T1056] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 915.349693][T12573] team0: Port device team_slave_0 added [ 915.479469][T12573] team0: Port device team_slave_1 added [ 915.757622][T12573] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 915.764637][T12573] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 915.887437][T12573] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 915.965706][T12573] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 916.036806][T12573] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 916.273545][T12573] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 917.320035][ T2472] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 917.337841][ T2472] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 917.383038][ T5227] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 917.419757][ T5227] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 917.430226][ T5227] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 917.439179][ T5227] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 917.447163][ T5227] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 917.454647][ T5227] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 918.764462][T12573] hsr_slave_0: entered promiscuous mode [ 918.773673][T12573] hsr_slave_1: entered promiscuous mode [ 918.784601][T12573] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 918.794871][T12573] Cannot create hsr debugfs directory [ 919.354132][ T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 919.578850][ T5227] Bluetooth: hci5: command tx timeout [ 919.689932][ T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 919.880565][ T1056] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 919.916656][ T1056] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 920.223914][ T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 921.060910][ T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 921.445535][T12113] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 921.658123][ T9108] Bluetooth: hci5: command tx timeout [ 921.658551][T12113] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 921.675091][T12113] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 921.686377][T12113] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 921.737942][T12113] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 921.745474][T12113] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 921.792668][T12724] overlayfs: failed to resolve './file1': -2 [ 923.247966][ T12] bridge_slave_1: left allmulticast mode [ 923.253661][ T12] bridge_slave_1: left promiscuous mode [ 923.297202][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 923.357692][ T12] bridge_slave_0: left allmulticast mode [ 923.363415][ T12] bridge_slave_0: left promiscuous mode [ 923.398590][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 923.418377][ T29] audit: type=1326 audit(923.384:1185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12736 comm="syz.0.2322" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f32d45779f9 code=0x0 [ 923.653780][T12747] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 923.747101][ T5227] Bluetooth: hci5: command tx timeout [ 924.617234][ T5227] Bluetooth: hci6: command tx timeout [ 925.267750][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 925.327591][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 925.352474][ T12] bond0 (unregistering): Released all slaves [ 925.817429][ T5227] Bluetooth: hci5: command tx timeout [ 926.707906][ T5227] Bluetooth: hci6: command tx timeout [ 926.967889][T12757] netlink: 3084 bytes leftover after parsing attributes in process `syz.0.2326'. [ 926.994585][ T12] hsr_slave_0: left promiscuous mode [ 927.011367][T12757] netlink: 'syz.0.2326': attribute type 1 has an invalid length. [ 927.029260][ T12] hsr_slave_1: left promiscuous mode [ 927.047669][T12757] netlink: 193500 bytes leftover after parsing attributes in process `syz.0.2326'. [ 927.074695][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 927.084818][T12757] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2326'. [ 927.103380][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 927.122567][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 927.165683][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 927.373199][ T12] veth1_macvtap: left promiscuous mode [ 927.384218][ T12] veth0_macvtap: left promiscuous mode [ 927.394529][ T12] veth1_vlan: left promiscuous mode [ 927.407084][ T12] veth0_vlan: left promiscuous mode [ 928.777119][ T5227] Bluetooth: hci6: command tx timeout [ 929.716270][ T12] team0 (unregistering): Port device team_slave_1 removed [ 929.856175][ T12] team0 (unregistering): Port device team_slave_0 removed [ 930.859027][ T5227] Bluetooth: hci6: command tx timeout [ 931.328810][T12691] chnl_net:caif_netlink_parms(): no params data found [ 931.856479][T12767] syz.2.2328 (12767): attempted to duplicate a private mapping with mremap. This is not supported. [ 931.907647][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.914033][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 932.393841][T12573] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 932.592344][T12691] bridge0: port 1(bridge_slave_0) entered blocking state [ 932.610643][T12691] bridge0: port 1(bridge_slave_0) entered disabled state [ 932.679649][T12691] bridge_slave_0: entered allmulticast mode [ 932.717319][T12691] bridge_slave_0: entered promiscuous mode [ 932.807346][T12573] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 932.867404][T12691] bridge0: port 2(bridge_slave_1) entered blocking state [ 932.874575][T12691] bridge0: port 2(bridge_slave_1) entered disabled state [ 932.918421][T12691] bridge_slave_1: entered allmulticast mode [ 932.957368][T12691] bridge_slave_1: entered promiscuous mode [ 933.042936][T12573] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 933.087495][T12573] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 933.194062][T12782] 9pnet_fd: Insufficient options for proto=fd [ 933.323084][T12691] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 933.368001][T12718] chnl_net:caif_netlink_parms(): no params data found [ 933.479459][T12691] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 933.643806][T12691] team0: Port device team_slave_0 added [ 933.782469][T12691] team0: Port device team_slave_1 added [ 934.211824][ T12] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 934.512311][T12797] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.2333'. [ 934.573417][ T12] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 934.619311][T12691] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 934.635646][T12691] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 934.767276][T12691] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 934.815970][T12691] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 934.861672][T12691] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 934.897370][ T5273] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 934.921577][T12691] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 934.970319][T12718] bridge0: port 1(bridge_slave_0) entered blocking state [ 934.984170][T12718] bridge0: port 1(bridge_slave_0) entered disabled state [ 934.997393][T12718] bridge_slave_0: entered allmulticast mode [ 935.016392][T12718] bridge_slave_0: entered promiscuous mode [ 935.035903][T12718] bridge0: port 2(bridge_slave_1) entered blocking state [ 935.077360][T12718] bridge0: port 2(bridge_slave_1) entered disabled state [ 935.117852][T12718] bridge_slave_1: entered allmulticast mode [ 935.119408][ T5273] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 935.131700][T12718] bridge_slave_1: entered promiscuous mode [ 935.194534][ T5273] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 935.223613][ T5273] usb 1-1: config 0 descriptor?? [ 935.252714][ T12] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 935.265179][ T5273] cp210x 1-1:0.0: cp210x converter detected [ 935.348432][ T29] audit: type=1326 audit(935.314:1186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12799 comm="syz.2.2334" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb77b5779f9 code=0x0 [ 935.674078][ T12] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 935.752097][T12797] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 935.804016][T12797] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 935.956647][T12691] hsr_slave_0: entered promiscuous mode [ 935.986132][T12691] hsr_slave_1: entered promiscuous mode [ 936.017067][T12691] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 936.026788][T12691] Cannot create hsr debugfs directory [ 936.055816][T12718] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 936.118292][T12718] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 936.167216][ T5227] Bluetooth: hci1: unknown advertising packet type: 0x23 [ 936.167329][ T5227] Bluetooth: hci1: unknown advertising packet type: 0x56 [ 936.176400][ T5227] Bluetooth: hci1: unknown advertising packet type: 0x8e [ 936.183676][ T5227] Bluetooth: hci1: unknown advertising packet type: 0x1a [ 936.190865][ T5227] Bluetooth: hci1: unknown advertising packet type: 0x12 [ 936.198836][ T5227] Bluetooth: hci1: unknown advertising packet type: 0xfa [ 936.207278][ T5227] Bluetooth: hci1: unknown advertising packet type: 0x66 [ 936.311794][T12810] 9pnet: Unknown protocol version 9p2000.ڴ>;1gˏӟ?u [ 936.331551][T12810] cgroup: Unknown subsys name 'euid>00000000000000000000' [ 936.401226][T12811] Cannot find set identified by id 0 to match [ 937.311857][ T5273] cp210x 1-1:0.0: failed to get vendor val 0x3711 size 2: -71 [ 937.336971][ T5273] cp210x 1-1:0.0: GPIO initialisation failed: -71 [ 937.348711][ T5273] usb 1-1: cp210x converter now attached to ttyUSB0 [ 937.367384][ T5273] usb 1-1: USB disconnect, device number 42 [ 937.403134][T12718] team0: Port device team_slave_0 added [ 937.427423][ T5273] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 937.497515][ T5273] cp210x 1-1:0.0: device disconnected [ 937.524412][T12718] team0: Port device team_slave_1 added [ 937.720628][ T12] bridge_slave_1: left allmulticast mode [ 937.726378][ T12] bridge_slave_1: left promiscuous mode [ 937.759355][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 937.858604][ T12] bridge_slave_0: left allmulticast mode [ 937.864411][ T12] bridge_slave_0: left promiscuous mode [ 937.877040][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 937.911416][ T12] bridge_slave_1: left allmulticast mode [ 937.947087][ T12] bridge_slave_1: left promiscuous mode [ 937.953007][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 938.054423][ T12] bridge_slave_0: left allmulticast mode [ 938.077162][ T12] bridge_slave_0: left promiscuous mode [ 938.083007][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 938.416991][T12823] binder: BINDER_SET_CONTEXT_MGR already set [ 938.427171][T12823] binder: 12818:12823 ioctl 4018620d 20000000 returned -16 [ 940.799940][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 940.826500][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 940.843568][ T12] bond0 (unregistering): Released all slaves [ 941.482420][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 941.503397][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 941.538574][ T12] bond0 (unregistering): Released all slaves [ 941.598817][T12718] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 941.633439][T12718] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 941.733946][T12718] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 941.872652][T12718] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 941.906879][T12718] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 941.939015][T12718] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 942.408125][T12718] hsr_slave_0: entered promiscuous mode [ 942.424061][T12718] hsr_slave_1: entered promiscuous mode [ 942.442631][T12718] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 942.521005][T12718] Cannot create hsr debugfs directory [ 942.694849][T12836] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 942.719968][T12836] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 942.740617][T12836] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 944.275142][T12573] 8021q: adding VLAN 0 to HW filter on device bond0 [ 944.412432][T12573] 8021q: adding VLAN 0 to HW filter on device team0 [ 944.666964][ T5273] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 944.796831][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 944.804033][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 944.878894][ T5273] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 944.917091][ T5273] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 944.942144][ T5227] Bluetooth: hci1: Received unexpected HCI Event 0x00 [ 944.999583][ T5273] usb 3-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 945.027450][ T5273] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 945.038513][ T5273] usb 3-1: config 0 descriptor?? [ 945.060744][T12847] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 945.080766][ T5227] Bluetooth: Unknown BR/EDR signaling command 0x0c [ 945.087850][ T5227] Bluetooth: Wrong link type (-22) [ 945.094114][ T5227] Bluetooth: Unknown BR/EDR signaling command 0x0d [ 945.101363][ T5227] Bluetooth: Wrong link type (-22) [ 945.106629][ T5227] Bluetooth: Unknown BR/EDR signaling command 0x0d [ 945.113587][ T5227] Bluetooth: Wrong link type (-22) [ 945.123779][ T5227] Bluetooth: Unknown BR/EDR signaling command 0x0f [ 945.130421][ T5227] Bluetooth: Wrong link type (-22) [ 945.135713][ T5227] Bluetooth: Unknown BR/EDR signaling command 0x11 [ 945.142548][ T5227] Bluetooth: Wrong link type (-22) [ 945.152248][ T5227] Bluetooth: hci1: link tx timeout [ 945.158572][ T5227] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 945.199722][T12847] input: syz0 as /devices/virtual/input/input34 [ 945.494537][ T5273] hid-steam 0003:28DE:1142.0026: unknown main item tag 0x0 [ 945.541023][ T5273] hid-steam 0003:28DE:1142.0026: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.2-1/input0 [ 945.595573][ T12] hsr_slave_0: left promiscuous mode [ 945.610637][ T12] hsr_slave_1: left promiscuous mode [ 945.638178][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 945.674506][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 945.700443][ T5273] hid-steam 0003:28DE:1142.0026: Steam wireless receiver connected [ 945.789471][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 945.864825][ T5273] hid-steam 0003:28DE:1142.0027: unknown main item tag 0x0 [ 945.866971][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 946.145048][ T5273] hid-steam 0003:28DE:1142.0027: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.2-1/input0 [ 946.259639][ T5273] usb 3-1: USB disconnect, device number 33 [ 946.279033][ T12] hsr_slave_0: left promiscuous mode [ 946.314826][ T12] hsr_slave_1: left promiscuous mode [ 946.340342][ T5273] hid-steam 0003:28DE:1142.0026: Steam wireless receiver disconnected [ 946.360231][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 946.392745][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 946.496946][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 946.508579][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 947.177304][ T5227] Bluetooth: hci1: command 0x0406 tx timeout [ 947.596917][ T12] veth1_macvtap: left promiscuous mode [ 947.650408][ T12] veth0_macvtap: left promiscuous mode [ 947.656311][ T12] veth1_vlan: left promiscuous mode [ 947.863692][ T12] veth0_vlan: left promiscuous mode [ 947.891358][ T12] veth1_macvtap: left promiscuous mode [ 947.913106][ T12] veth0_macvtap: left promiscuous mode [ 947.927820][ T12] veth1_vlan: left promiscuous mode [ 947.933232][ T12] veth0_vlan: left promiscuous mode [ 947.976567][T12861] cifs: Unknown parameter '[bIT&:"1:ӭ'4,Zz-#F<]%gC [ 947.976567][T12861] SȘȞZ6' [ 950.946123][ T12] team0 (unregistering): Port device team_slave_1 removed [ 951.140010][ T12] team0 (unregistering): Port device team_slave_0 removed [ 953.827779][ T12] team0 (unregistering): Port device team_slave_1 removed [ 954.001291][ T12] team0 (unregistering): Port device team_slave_0 removed [ 955.636156][ T9289] bridge0: port 2(bridge_slave_1) entered blocking state [ 955.643395][ T9289] bridge0: port 2(bridge_slave_1) entered forwarding state [ 955.758664][T12864] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2350'. [ 955.813118][T12865] 8021q: adding VLAN 0 to HW filter on device team1 [ 955.855985][T12865] bond0: (slave team1): Enslaving as an active interface with an up link [ 956.648950][T12691] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 956.754289][T12691] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 956.998001][T12691] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 957.137438][T12691] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 958.045267][ T5227] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 958.056551][ T5227] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 958.066475][ T5227] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 958.076961][ T5227] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 958.086203][ T5227] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 958.095579][ T5227] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 958.380460][T12573] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 958.640453][T12573] veth0_vlan: entered promiscuous mode [ 958.949873][T12718] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 958.989466][T12718] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 959.316997][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 959.638924][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 959.825717][T12718] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 959.999145][T12113] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 960.010918][T12113] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 960.025587][T12113] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 960.084581][T12113] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 960.139200][ T9108] Bluetooth: hci1: command tx timeout [ 960.146637][T12113] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 960.154200][T12113] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 960.177936][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 960.253238][T12718] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 960.651890][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 960.701929][T12691] 8021q: adding VLAN 0 to HW filter on device bond0 [ 960.724937][T12896] : renamed from ipvlan1 [ 960.899873][T12691] 8021q: adding VLAN 0 to HW filter on device team0 [ 960.909803][T12886] chnl_net:caif_netlink_parms(): no params data found [ 961.052545][ T9239] bridge0: port 1(bridge_slave_0) entered blocking state [ 961.059755][ T9239] bridge0: port 1(bridge_slave_0) entered forwarding state [ 961.552438][ T2472] bridge0: port 2(bridge_slave_1) entered blocking state [ 961.559772][ T2472] bridge0: port 2(bridge_slave_1) entered forwarding state [ 961.739203][ T12] bridge_slave_1: left allmulticast mode [ 961.778014][ T12] bridge_slave_1: left promiscuous mode [ 961.784097][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 961.792421][T12905] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2358'. [ 961.823376][ T12] bridge_slave_0: left allmulticast mode [ 961.869812][ T12] bridge_slave_0: left promiscuous mode [ 961.899053][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 962.217515][ T5227] Bluetooth: hci1: command tx timeout [ 962.300634][ T5227] Bluetooth: hci4: command tx timeout [ 964.387468][T12113] Bluetooth: hci4: command tx timeout [ 964.395320][ T5227] Bluetooth: hci1: command tx timeout [ 965.056625][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 965.217281][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 965.261443][ T12] bond0 (unregistering): Released all slaves [ 965.328928][T12886] bridge0: port 1(bridge_slave_0) entered blocking state [ 965.336166][T12886] bridge0: port 1(bridge_slave_0) entered disabled state [ 965.346992][T12886] bridge_slave_0: entered allmulticast mode [ 965.355248][T12886] bridge_slave_0: entered promiscuous mode [ 965.378052][T12886] bridge0: port 2(bridge_slave_1) entered blocking state [ 965.409578][T12886] bridge0: port 2(bridge_slave_1) entered disabled state [ 965.433529][T12886] bridge_slave_1: entered allmulticast mode [ 965.450821][T12886] bridge_slave_1: entered promiscuous mode [ 965.939516][T12886] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 966.166409][T12886] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 966.186960][ T25] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 966.359707][T12893] chnl_net:caif_netlink_parms(): no params data found [ 966.417048][ T25] usb 3-1: Using ep0 maxpacket: 16 [ 966.425311][ T25] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 966.457532][ T5227] Bluetooth: hci1: command tx timeout [ 966.457655][T12113] Bluetooth: hci4: command tx timeout [ 966.473478][ T25] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 966.495968][ T25] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 966.506860][ T25] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 966.515218][ T25] usb 3-1: Manufacturer: syz [ 966.525744][ T25] usb 3-1: config 0 descriptor?? [ 966.560434][T12691] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 966.794062][T12919] fuse: Bad value for 'fd' [ 966.992950][T12886] team0: Port device team_slave_0 added [ 967.173750][T12886] team0: Port device team_slave_1 added [ 967.442985][ T12] hsr_slave_0: left promiscuous mode [ 967.467874][ T12] hsr_slave_1: left promiscuous mode [ 967.504675][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 967.515510][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 967.545534][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 967.569505][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 967.723647][ T12] veth1_macvtap: left promiscuous mode [ 967.746177][ T12] veth0_macvtap: left promiscuous mode [ 967.757526][ T12] veth1_vlan: left promiscuous mode [ 967.777798][ T12] veth0_vlan: left promiscuous mode [ 968.539003][T12113] Bluetooth: hci4: command tx timeout [ 968.720871][ T25] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 968.749721][ T25] usb 3-1: USB disconnect, device number 34 [ 968.926806][ T29] audit: type=1400 audit(968.884:1187): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="#!" requested=w pid=12926 comm="syz.2.2363" [ 970.090364][ T12] team0 (unregistering): Port device team_slave_1 removed [ 970.237780][ T12] team0 (unregistering): Port device team_slave_0 removed [ 971.759226][T12893] bridge0: port 1(bridge_slave_0) entered blocking state [ 971.788359][T12893] bridge0: port 1(bridge_slave_0) entered disabled state [ 971.795709][T12893] bridge_slave_0: entered allmulticast mode [ 971.838775][T12893] bridge_slave_0: entered promiscuous mode [ 971.858214][T12893] bridge0: port 2(bridge_slave_1) entered blocking state [ 971.865415][T12893] bridge0: port 2(bridge_slave_1) entered disabled state [ 971.914465][T12893] bridge_slave_1: entered allmulticast mode [ 971.937798][T12893] bridge_slave_1: entered promiscuous mode [ 971.987831][T12886] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 971.994832][T12886] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 972.059154][T12886] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 972.189111][T12886] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 972.196086][T12886] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 972.297192][T12886] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 972.409307][T12718] 8021q: adding VLAN 0 to HW filter on device bond0 [ 972.445809][T12893] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 972.469531][T12893] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 973.820501][T12691] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 973.933313][T12893] team0: Port device team_slave_0 added [ 973.992704][T12893] team0: Port device team_slave_1 added [ 974.082061][T12886] hsr_slave_0: entered promiscuous mode [ 974.123190][T12886] hsr_slave_1: entered promiscuous mode [ 974.157188][T12886] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 974.164860][T12886] Cannot create hsr debugfs directory [ 974.239461][T12718] 8021q: adding VLAN 0 to HW filter on device team0 [ 975.567011][T12893] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 975.574182][T12893] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 975.666846][T12893] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 975.758820][T12949] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.2369'. [ 975.896951][T12893] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 975.924377][T12893] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 976.026877][T12893] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 976.117246][T10098] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 976.170129][ T1056] bridge0: port 1(bridge_slave_0) entered blocking state [ 976.177369][ T1056] bridge0: port 1(bridge_slave_0) entered forwarding state [ 976.205765][ T1056] bridge0: port 2(bridge_slave_1) entered blocking state [ 976.213006][ T1056] bridge0: port 2(bridge_slave_1) entered forwarding state [ 976.329043][T10098] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 976.338408][T10098] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 976.398182][T10098] usb 3-1: config 0 descriptor?? [ 976.475541][ T5227] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 976.479724][T10098] cp210x 3-1:0.0: cp210x converter detected [ 976.497210][ T5227] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 976.509222][ T5227] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 976.535136][ T5227] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 976.547280][ T5227] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 976.556521][ T5227] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 976.604898][T12893] hsr_slave_0: entered promiscuous mode [ 976.625136][T12893] hsr_slave_1: entered promiscuous mode [ 976.655150][T12893] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 976.665301][T12893] Cannot create hsr debugfs directory [ 976.999730][T12949] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 977.079797][T12949] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 977.365706][ T5227] Bluetooth: hci3: unknown advertising packet type: 0x23 [ 977.365817][ T5227] Bluetooth: hci3: unknown advertising packet type: 0x56 [ 977.373734][ T5227] Bluetooth: hci3: unknown advertising packet type: 0x8e [ 977.381723][ T5227] Bluetooth: hci3: unknown advertising packet type: 0x1a [ 977.388967][ T5227] Bluetooth: hci3: unknown advertising packet type: 0x12 [ 977.396116][ T5227] Bluetooth: hci3: unknown advertising packet type: 0xfa [ 977.403276][ T5227] Bluetooth: hci3: unknown advertising packet type: 0x66 [ 977.743958][T10098] cp210x 3-1:0.0: failed to get vendor val 0x3711 size 2: -71 [ 977.770239][T10098] cp210x 3-1:0.0: GPIO initialisation failed: -71 [ 977.794616][T10098] usb 3-1: cp210x converter now attached to ttyUSB0 [ 977.804791][T10098] usb 3-1: USB disconnect, device number 35 [ 977.814650][T10098] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 977.828515][T10098] cp210x 3-1:0.0: device disconnected [ 978.293914][T12718] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 978.313408][T12718] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 978.617441][T12113] Bluetooth: hci0: command tx timeout [ 979.010309][T12951] chnl_net:caif_netlink_parms(): no params data found [ 979.070563][T12718] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 979.103857][T12886] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 979.159782][T12886] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 979.391341][T12886] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 979.744526][T12886] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 980.056872][T12113] Bluetooth: hci3: command 0x0406 tx timeout [ 980.062310][ T29] audit: type=1326 audit(1236.021:1188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12984 comm="syz.2.2373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb77b5779f9 code=0x7ffc0000 [ 980.154086][ T29] audit: type=1326 audit(1236.051:1189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12984 comm="syz.2.2373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb77b5779f9 code=0x7ffc0000 [ 980.237998][ T29] audit: type=1326 audit(1236.051:1190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12984 comm="syz.2.2373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb77b5779f9 code=0x7ffc0000 [ 980.297160][ T29] audit: type=1326 audit(1236.051:1191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12984 comm="syz.2.2373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb77b5779f9 code=0x7ffc0000 [ 980.327502][ T29] audit: type=1326 audit(1236.081:1192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12984 comm="syz.2.2373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fb77b5779f9 code=0x7ffc0000 [ 980.350017][ T29] audit: type=1326 audit(1236.081:1193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12984 comm="syz.2.2373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb77b5779f9 code=0x7ffc0000 [ 980.443888][T12951] bridge0: port 1(bridge_slave_0) entered blocking state [ 980.460202][T12951] bridge0: port 1(bridge_slave_0) entered disabled state [ 980.469468][T12951] bridge_slave_0: entered allmulticast mode [ 980.503745][T12951] bridge_slave_0: entered promiscuous mode [ 980.534197][ T29] audit: type=1326 audit(1236.081:1194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12984 comm="syz.2.2373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb77b5779f9 code=0x7ffc0000 [ 980.607229][ T29] audit: type=1326 audit(1236.081:1195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12984 comm="syz.2.2373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb77b5779f9 code=0x7ffc0000 [ 980.608598][T12951] bridge0: port 2(bridge_slave_1) entered blocking state [ 980.653294][T12951] bridge0: port 2(bridge_slave_1) entered disabled state [ 980.667712][T12951] bridge_slave_1: entered allmulticast mode [ 980.694481][T12951] bridge_slave_1: entered promiscuous mode [ 980.701130][ T5227] Bluetooth: hci0: command tx timeout [ 980.807228][ T29] audit: type=1326 audit(1236.081:1196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12984 comm="syz.2.2373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb77b5779f9 code=0x7ffc0000 [ 980.937128][ T29] audit: type=1326 audit(1236.081:1197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12984 comm="syz.2.2373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb77b5779f9 code=0x7ffc0000 [ 981.189721][ T12] bridge_slave_1: left allmulticast mode [ 981.227084][ T12] bridge_slave_1: left promiscuous mode [ 981.232970][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 981.323173][ T12] bridge_slave_0: left allmulticast mode [ 981.336827][ T12] bridge_slave_0: left promiscuous mode [ 981.373252][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 981.439828][ T12] bridge_slave_1: left allmulticast mode [ 981.445672][ T12] bridge_slave_1: left promiscuous mode [ 981.457266][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 981.547809][ T12] bridge_slave_0: left allmulticast mode [ 981.553553][ T12] bridge_slave_0: left promiscuous mode [ 981.577253][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 981.829363][T12113] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 981.850616][T12113] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 981.861733][T12113] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 981.876355][T12113] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 981.884272][T12113] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 981.891968][T12113] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 982.788751][ T5227] Bluetooth: hci0: command tx timeout [ 983.706517][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 983.731859][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 983.768917][ T12] bond0 (unregistering): Released all slaves [ 983.995927][ T5227] Bluetooth: hci5: command tx timeout [ 984.488309][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 984.537340][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 984.586975][ T12] bond0 (unregistering): Released all slaves [ 984.618171][T12951] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 984.642019][T12951] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 984.849881][T13004] netlink: 340 bytes leftover after parsing attributes in process `syz.2.2378'. [ 984.857351][ T5227] Bluetooth: hci0: command tx timeout [ 985.195545][T12951] team0: Port device team_slave_0 added [ 985.258289][T12951] team0: Port device team_slave_1 added [ 985.367201][ T12] hsr_slave_0: left promiscuous mode [ 985.376292][ T12] hsr_slave_1: left promiscuous mode [ 985.396538][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 985.414573][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 985.440767][ T12] hsr_slave_0: left promiscuous mode [ 985.475683][ T12] hsr_slave_1: left promiscuous mode [ 985.500934][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 985.528102][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 985.638492][ T12] veth0_vlan: left promiscuous mode [ 986.056834][ T5227] Bluetooth: hci5: command tx timeout [ 987.851385][ T12] team0 (unregistering): Port device team_slave_1 removed [ 987.984685][ T12] team0 (unregistering): Port device team_slave_0 removed [ 988.141257][ T5227] Bluetooth: hci5: command tx timeout [ 990.217960][ T5227] Bluetooth: hci5: command tx timeout [ 991.704237][ T12] team0 (unregistering): Port device team_slave_1 removed [ 991.800002][ T12] team0 (unregistering): Port device team_slave_0 removed [ 993.350415][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.366901][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.457397][T13016] pimreg: entered allmulticast mode [ 993.641979][T12951] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 993.649363][T12951] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 993.677263][T12951] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 994.122714][T12893] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 994.562807][T12951] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 994.597624][T12951] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 995.527209][T12951] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 995.577790][T12893] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 995.641404][T12893] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 995.705265][T12893] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 995.935319][T12886] 8021q: adding VLAN 0 to HW filter on device bond0 [ 996.207320][T13033] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2385'. [ 996.216523][T13033] netlink: 43 bytes leftover after parsing attributes in process `syz.2.2385'. [ 996.226157][T13033] netlink: 'syz.2.2385': attribute type 6 has an invalid length. [ 996.234173][T13033] netlink: 43 bytes leftover after parsing attributes in process `syz.2.2385'. [ 997.028177][T12951] hsr_slave_0: entered promiscuous mode [ 997.047483][T12951] hsr_slave_1: entered promiscuous mode [ 997.067084][T12951] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 997.079113][T12951] Cannot create hsr debugfs directory [ 997.136397][T12989] chnl_net:caif_netlink_parms(): no params data found [ 997.177342][ T30] INFO: task syz.4.2241:12389 blocked for more than 143 seconds. [ 997.200763][ T30] Not tainted 6.11.0-rc3-syzkaller #0 [ 997.207155][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 997.215895][ T30] task:syz.4.2241 state:D stack:26008 pid:12389 tgid:12388 ppid:10340 flags:0x00004006 [ 997.271906][ T30] Call Trace: [ 997.316856][ T30] [ 997.326811][ T30] __schedule+0x17ae/0x4a10 [ 997.331438][ T30] ? __pfx___schedule+0x10/0x10 [ 997.336479][ T30] ? __pfx_lock_release+0x10/0x10 [ 997.379791][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 997.385962][ T30] ? schedule+0x90/0x320 [ 997.390364][ T30] schedule+0x14b/0x320 [ 997.394566][ T30] io_schedule+0x8d/0x110 [ 997.429228][ T30] folio_wait_bit_common+0x882/0x12b0 [ 997.434684][ T30] ? __pfx_folio_wait_bit_common+0x10/0x10 [ 997.447169][ T30] ? __pfx_wake_page_function+0x10/0x10 [ 997.452830][ T30] ? __filemap_get_folio+0x984/0xc10 [ 997.467117][ T30] truncate_inode_pages_range+0xaaf/0xfc0 [ 997.472908][ T30] ? __pfx_truncate_inode_pages_range+0x10/0x10 [ 997.486979][ T30] ? lockdep_init_map_type+0xa1/0x910 [ 997.492524][ T30] ? __pfx_lockdep_init_map_type+0x10/0x10 [ 997.506851][ T30] ? __pfx_invalidate_bh_lru+0x10/0x10 [ 997.512350][ T30] ? __pfx_invalidate_bh_lru+0x10/0x10 [ 997.538390][ T30] set_blocksize+0x2f4/0x360 [ 997.543028][ T30] sb_set_blocksize+0x47/0xf0 [ 997.557158][ T30] v7_fill_super+0x14c/0x3e0 [ 997.572740][ T30] ? setup_bdev_super+0x4e6/0x5d0 [ 997.587001][ T30] mount_bdev+0x20a/0x2d0 [ 997.602428][ T30] ? __pfx_v7_fill_super+0x10/0x10 [ 997.607797][ T30] ? __pfx_mount_bdev+0x10/0x10 [ 997.612699][ T30] ? vfs_parse_fs_string+0x190/0x230 [ 997.627290][ T30] ? __pfx_vfs_parse_fs_string+0x10/0x10 [ 997.632987][ T30] ? cap_capable+0x1b4/0x250 [ 997.637806][ T30] legacy_get_tree+0xee/0x190 [ 997.648352][ T30] ? __pfx_v7_mount+0x10/0x10 [ 997.653082][ T30] vfs_get_tree+0x90/0x2a0 [ 997.676939][ T30] do_new_mount+0x2be/0xb40 [ 997.681484][ T30] ? __pfx_do_new_mount+0x10/0x10 [ 997.686519][ T30] __se_sys_mount+0x2d6/0x3c0 [ 997.712457][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 997.718617][ T30] ? __pfx___se_sys_mount+0x10/0x10 [ 997.723830][ T30] ? do_syscall_64+0x100/0x230 [ 997.746987][ T30] ? __x64_sys_mount+0x20/0xc0 [ 997.751794][ T30] do_syscall_64+0xf3/0x230 [ 997.756332][ T30] ? clear_bhb_loop+0x35/0x90 [ 997.803732][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 997.817260][ T30] RIP: 0033:0x7f1d48f779f9 [ 997.835495][ T30] RSP: 002b:00007f1d49cb7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 997.846985][ T30] RAX: ffffffffffffffda RBX: 00007f1d49105f80 RCX: 00007f1d48f779f9 [ 997.854991][ T30] RDX: 00000000200002c0 RSI: 0000000020000340 RDI: 0000000020000240 [ 997.886800][ T30] RBP: 00007f1d48fe58ee R08: 0000000000000000 R09: 0000000000000000 [ 997.894805][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 997.903280][ T30] R13: 0000000000000000 R14: 00007f1d49105f80 R15: 00007fff0d1514d8 [ 997.913762][ T30] [ 997.936945][ T30] [ 997.936945][ T30] Showing all locks held in the system: [ 997.944897][ T30] 1 lock held by pool_workqueue_/3: [ 997.987089][ T30] #0: ffff8880b923e9d8 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0xb0/0x140 [ 998.036803][ T30] 5 locks held by kworker/u8:1/12: [ 998.041977][ T30] #0: ffff8880162e3148 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 998.093014][ T30] #1: ffffc90000117d00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 998.106995][ T30] #2: ffffffff8fa632d0 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x16a/0xcc0 [ 998.116461][ T30] #3: ffff88806d5e9428 (&wg->device_update_lock){+.+.}-{3:3}, at: wg_destruct+0x110/0x2e0 [ 998.163495][ T30] #4: ffffffff8e73d6b8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x451/0x830 [ 998.177050][ T30] 1 lock held by khungtaskd/30: [ 998.182008][ T30] #0: ffffffff8e7382e0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 998.216922][ T30] 2 locks held by kworker/u8:7/2472: [ 998.222243][ T30] #0: ffff888015489148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 998.242578][ T30] #1: ffff8880b9228948 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: psi_task_switch+0x441/0x770 [ 998.256916][ T30] 2 locks held by getty/4977: [ 998.283507][ T30] #0: ffff88802ad340a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 998.297111][ T30] #1: ffffc9000311b2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6ac/0x1e00 [ 998.343320][ T30] 3 locks held by kworker/0:7/5322: [ 998.363428][ T30] #0: ffff888015480948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 998.381067][ T30] #1: ffffc90003c17d00 ((fqdir_free_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 998.397226][ T30] #2: ffffffff8e73d580 (rcu_state.barrier_mutex){+.+.}-{3:3}, at: rcu_barrier+0x4c/0x530 [ 998.416806][ T30] 2 locks held by syz.3.1144/8812: [ 998.427233][ T30] 1 lock held by ipvs-e:26:0/11525: [ 998.432461][ T30] #0: ffff8880b923e9d8 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0xb0/0x140 [ 998.447066][ T30] 1 lock held by syz.4.2241/12389: [ 998.465537][ T30] #0: ffff88802ca680e0 (&type->s_umount_key#85/1){+.+.}-{3:3}, at: alloc_super+0x221/0x9d0 [ 998.477024][ T30] 2 locks held by syz.2.2385/13032: [ 998.482259][ T30] #0: ffffffff8fa632d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x4c6/0x7b0 [ 998.497382][ T30] #1: ffffffff8e73d6b8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x451/0x830 [ 998.540881][ T30] [ 998.543253][ T30] ============================================= [ 998.543253][ T30] [ 998.619005][ T30] NMI backtrace for cpu 1 [ 998.623399][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.11.0-rc3-syzkaller #0 [ 998.632215][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 998.642304][ T30] Call Trace: [ 998.645612][ T30] [ 998.648561][ T30] dump_stack_lvl+0x241/0x360 [ 998.653250][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 998.658458][ T30] ? __pfx__printk+0x10/0x10 [ 998.663049][ T30] ? vprintk_emit+0x631/0x770 [ 998.667727][ T30] ? __pfx_vprintk_emit+0x10/0x10 [ 998.672758][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 998.677710][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 998.683171][ T30] ? _printk+0xd5/0x120 [ 998.687330][ T30] ? __pfx__printk+0x10/0x10 [ 998.691936][ T30] ? __wake_up_klogd+0xcc/0x110 [ 998.696796][ T30] ? __pfx__printk+0x10/0x10 [ 998.701389][ T30] ? __rcu_read_unlock+0xa1/0x110 [ 998.706414][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 998.712399][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 998.718386][ T30] watchdog+0xfee/0x1030 [ 998.722633][ T30] ? watchdog+0x1ea/0x1030 [ 998.727075][ T30] ? __pfx_watchdog+0x10/0x10 [ 998.731799][ T30] kthread+0x2f0/0x390 [ 998.735874][ T30] ? __pfx_watchdog+0x10/0x10 [ 998.740553][ T30] ? __pfx_kthread+0x10/0x10 [ 998.745148][ T30] ret_from_fork+0x4b/0x80 [ 998.749578][ T30] ? __pfx_kthread+0x10/0x10 [ 998.754172][ T30] ret_from_fork_asm+0x1a/0x30 [ 998.758947][ T30] [ 998.762470][ T30] Sending NMI from CPU 1 to CPUs 0: [ 998.767846][ C0] NMI backtrace for cpu 0 skipped: idling at acpi_safe_halt+0x21/0x30 [ 998.886786][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 998.893772][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.11.0-rc3-syzkaller #0 [ 998.902656][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 998.912810][ T30] Call Trace: [ 998.916097][ T30] [ 998.919035][ T30] dump_stack_lvl+0x241/0x360 [ 998.923768][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 998.928988][ T30] ? __pfx__printk+0x10/0x10 [ 998.933590][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 998.939591][ T30] ? vscnprintf+0x5d/0x90 [ 998.943931][ T30] panic+0x349/0x860 [ 998.947845][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 998.954021][ T30] ? __pfx_panic+0x10/0x10 [ 998.958447][ T30] ? tick_nohz_tick_stopped+0x82/0xb0 [ 998.963828][ T30] ? __irq_work_queue_local+0x137/0x410 [ 998.969392][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 998.974778][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 998.980938][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 998.987103][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 998.993267][ T30] watchdog+0x102d/0x1030 [ 998.997611][ T30] ? watchdog+0x1ea/0x1030 [ 999.002046][ T30] ? __pfx_watchdog+0x10/0x10 [ 999.006742][ T30] kthread+0x2f0/0x390 [ 999.010829][ T30] ? __pfx_watchdog+0x10/0x10 [ 999.015560][ T30] ? __pfx_kthread+0x10/0x10 [ 999.020165][ T30] ret_from_fork+0x4b/0x80 [ 999.024609][ T30] ? __pfx_kthread+0x10/0x10 [ 999.029216][ T30] ret_from_fork_asm+0x1a/0x30 [ 999.034006][ T30] [ 999.037320][ T30] Kernel Offset: disabled [ 999.041647][ T30] Rebooting in 86400 seconds..