last executing test programs: 6m34.089882628s ago: executing program 0 (id=248): openat$procfs(0xffffffffffffff9c, 0x0, 0x1800, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x46) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_IO_FLUSHER(0x39, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0xc, 0x4, 0xffffbe0000000001, 0x8, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) sysinfo(&(0x7f00000015c0)=""/4096) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) socket(0x11, 0x3, 0x0) sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="2400000014001b0528bd7000ffdbdf2511000d0001000405fa97"], 0x24}, 0x1, 0x0, 0x0, 0x2400a051}, 0x44000) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000780)={'netdevsim0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x3f, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x8}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x8}]}, 0x40}}, 0x0) r4 = socket$kcm(0x10, 0x100000000002, 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000001100)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19, 0x0, 0xffffffffffffffff, 0x54}, 0x42) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000040)=r5, 0x4) sendmsg$kcm(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)="39000000140081ae00002c000500015601618575e285af0180000000171300883795c04a31ba377a1b2cc32b38d3740000ffffffffffffffff", 0x39}], 0x1, 0x0, 0x0, 0xc00e}, 0x0) 6m29.661260777s ago: executing program 0 (id=253): socket$nl_netfilter(0x10, 0x3, 0xc) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xfffffff9) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/231, &(0x7f00000000c0)=""/87, 0x0, 0x100000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0x78, &(0x7f0000000600)=""/120}]}) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)={0x1, r1}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x32, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2d8d}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) 6m29.077582847s ago: executing program 0 (id=255): writev(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}], 0x1) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000140)=0x6) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(0xffffffffffffffff, 0x0, 0x0) fchdir(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1840, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x0) write(r4, &(0x7f0000004200)='t', 0x1) semget$private(0x7d000000000000, 0x4000, 0x555) sendfile(r4, r3, 0x0, 0x40001) 6m25.188686618s ago: executing program 0 (id=261): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r7, 0xffffffffffffffff, 0x26}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r7}, &(0x7f0000000000), &(0x7f0000000080)=r1}, 0x20) recvmsg$unix(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000006c0)=""/179, 0x33fe0}], 0x1}, 0x0) sendmsg$inet(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000001740)}, 0x0) 6m20.752679448s ago: executing program 0 (id=264): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2000000022, &(0x7f0000000480)={0x77359400}) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={0xffffffffffffffff, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000002c0)="d2ff03076003008cb89e08f086dd", 0x0, 0xd5b3, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000180)=0x70) 6m18.346525496s ago: executing program 0 (id=267): openat$procfs(0xffffffffffffff9c, 0x0, 0x1800, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x46) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_IO_FLUSHER(0x39, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0xc, 0x4, 0xffffbe0000000001, 0x8, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) sysinfo(&(0x7f00000015c0)=""/4096) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) socket(0x11, 0x3, 0x0) sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="2400000014001b0528bd7000ffdbdf2511000d0001000405fa97"], 0x24}, 0x1, 0x0, 0x0, 0x2400a051}, 0x44000) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000780)={'netdevsim0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x3f, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x8}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x8}]}, 0x40}}, 0x0) r4 = socket$kcm(0x10, 0x100000000002, 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000001100)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19, 0x0, 0xffffffffffffffff, 0x54}, 0x42) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000040)=r5, 0x4) sendmsg$kcm(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)="39000000140081ae00002c000500015601618575e285af0180000000171300883795c04a31ba377a1b2cc32b38d3740000ffffffffffffffff", 0x39}], 0x1, 0x0, 0x0, 0xc00e}, 0x0) 6m2.605953152s ago: executing program 32 (id=267): openat$procfs(0xffffffffffffff9c, 0x0, 0x1800, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x46) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_IO_FLUSHER(0x39, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0xc, 0x4, 0xffffbe0000000001, 0x8, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) sysinfo(&(0x7f00000015c0)=""/4096) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) socket(0x11, 0x3, 0x0) sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="2400000014001b0528bd7000ffdbdf2511000d0001000405fa97"], 0x24}, 0x1, 0x0, 0x0, 0x2400a051}, 0x44000) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000780)={'netdevsim0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x3f, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x8}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x8}]}, 0x40}}, 0x0) r4 = socket$kcm(0x10, 0x100000000002, 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000001100)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19, 0x0, 0xffffffffffffffff, 0x54}, 0x42) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000040)=r5, 0x4) sendmsg$kcm(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)="39000000140081ae00002c000500015601618575e285af0180000000171300883795c04a31ba377a1b2cc32b38d3740000ffffffffffffffff", 0x39}], 0x1, 0x0, 0x0, 0xc00e}, 0x0) 4m37.855384265s ago: executing program 2 (id=400): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000001580)={0x0, 0xffffffffffffff3c, &(0x7f0000000300)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911040000000000000003c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x20000216}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62458c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f00000025c0)="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", 0xcb3}, {&(0x7f00000006c0)="97b13f5cf9f584c87e0e637d2ff483a311bb412cb3b03c3d9e97e435f2fceb58ff0402ed7b96244b43386c222917662028d7a01206a1990722ccef1d8f39f7c8ae242e58359217b1c6161ea741445cf16b0c48eb18a6c72174dfb7cd1bd0f409dad5a432bed4afb470da3656dd30d70769e229dc91037321d618e1eff4a176ea46d5cd4d5da97f80356e46d9e8166bf2d97210b631654ece218a2a204a1786ab5a60a881a7a294cd2f92438350e6e3ec4439ebe06133ff65b1e32b809ba0482783b563ec8e5778285da5211e5821135433053a7921319c544d5e797f"}, {&(0x7f00000007c0)="75c37714a0bada8343bceb64ccb6d95a2a37b020e0bf1f6a1de4584223a2f285aaca30a9554cd5cdc1659cb9fec462cc5c2220a7cd891ec3bad99fe3c06e15a109ec0fdb6aeeee5ef8e4bfc28e17984a3860b907d549492d47a447782b7357ea72f4b2c26512a6a33c0247b730a6182ea5a99aee25fcee07f9cb0a80595cd5f744fa6898fdffda5b34b19474b8e853467329e4aea36cfd0e00735d37beb0f895c5688259a8935194eefd3a96d55707133a08f03e14da563160a545396b93341f41c161c93687e28a"}, {&(0x7f0000000b00)="1b080b7a30aec939ce8e26e0cbbe37fc064ceef965fd5e3b6739c966492dbdf71c04423d8a403e56dfd224e4e55918a5e31e683fec5cc9460882a0d1628d02d51a8da997073f856e2cd00586c6e8c89c71cf8be6121b0b3a85d597a1afb0cc311f30cc26183c8e594ce5ff62661c9e32cbc9dd9a72985e9857f3bddb52382b6c27ca85d5774cf17b92e2d2097f12a8687e70f90d46381a47706a9124a2cf61b84f26aae22fd4da84ae35b93f7be9fdfdfbf33c59f5c657e9f7e81b81b786082f88af4de07808ff3c954bae"}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) recvmsg$unix(r1, &(0x7f0000001140)={0x0, 0x2, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1}, 0x40000100) 4m36.994658718s ago: executing program 4 (id=401): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r0, 0x0, 0xd}, 0x18) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000540)=0x4) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0xf}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x4000, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x4e24, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa845942824251d7d17b5191584bcd4fbe40a23424d00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"b3472eb9cd42d2030000002000", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) recvmmsg(r2, &(0x7f0000006000)=[{{0x0, 0x0, 0x0}, 0x7fffffff}], 0x1, 0x102, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000200000000"], 0x0, 0x3}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) 4m35.816047495s ago: executing program 4 (id=403): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000001580)={0x0, 0xffffffffffffff3c, &(0x7f0000000300)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911040000000000000003c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x20000216}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62458c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f00000025c0)="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", 0xcb3}, {&(0x7f00000006c0)="97b13f5cf9f584c87e0e637d2ff483a311bb412cb3b03c3d9e97e435f2fceb58ff0402ed7b96244b43386c222917662028d7a01206a1990722ccef1d8f39f7c8ae242e58359217b1c6161ea741445cf16b0c48eb18a6c72174dfb7cd1bd0f409dad5a432bed4afb470da3656dd30d70769e229dc91037321d618e1eff4a176ea46d5cd4d5da97f80356e46d9e8166bf2d97210b631654ece218a2a204a1786ab5a60a881a7a294cd2f92438350e6e3ec4439ebe06133ff65b1e32b809ba0482783b563ec8e5778285da5211e5821135433053a7921319c544d5e797f"}, {&(0x7f00000007c0)="75c37714a0bada8343bceb64ccb6d95a2a37b020e0bf1f6a1de4584223a2f285aaca30a9554cd5cdc1659cb9fec462cc5c2220a7cd891ec3bad99fe3c06e15a109ec0fdb6aeeee5ef8e4bfc28e17984a3860b907d549492d47a447782b7357ea72f4b2c26512a6a33c0247b730a6182ea5a99aee25fcee07f9cb0a80595cd5f744fa6898fdffda5b34b19474b8e853467329e4aea36cfd0e00735d37beb0f895c5688259a8935194eefd3a96d55707133a08f03e14da563160a545396b93341f41c161c93687e28a"}, {&(0x7f0000000b00)="1b080b7a30aec939ce8e26e0cbbe37fc064ceef965fd5e3b6739c966492dbdf71c04423d8a403e56dfd224e4e55918a5e31e683fec5cc9460882a0d1628d02d51a8da997073f856e2cd00586c6e8c89c71cf8be6121b0b3a85d597a1afb0cc311f30cc26183c8e594ce5ff62661c9e32cbc9dd9a72985e9857f3bddb52382b6c27ca85d5774cf17b92e2d2097f12a8687e70f90d46381a47706a9124a2cf61b84f26aae22fd4da84ae35b93f7be9fdfdfbf33c59f5c657e9f7e81b81b786082f88af4de07808ff3c954bae"}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) recvmsg$unix(r1, &(0x7f0000001140)={0x0, 0x2, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1}, 0x40000100) 4m34.510278936s ago: executing program 2 (id=404): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0xcd0b3000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000001580)={0x0, 0xffffffffffffff3c, &(0x7f0000000300)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911040000000000000003c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x20000216}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62458c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f00000025c0)="87fb74cf4d67adbbd062637f514c1f5eb18d7b442e6457a356c6cb1f71a43dfae773c8489cce5145f92615d4bdb13ef54d6ae90ec7733180fcf5adf3e13fdb05b57b748bd14eda042a97fdd84498304a504a0a159b972e8200c2d0f536a3465ec498ed12b924bd134057df36129d3ebe3dd3ce9f0671e5278143e4afa3d43f444681de1b5f9725fca34fa357fe2154981666fb9dc202fc17a0199eb1c25bdd1005e590e84783ee9894c888998dc25a83c14aeee31d114acfa0bcd235d571cd765f4b9259ba43e6fc30291d8a642146c4771898030b736aeee6b247abb0784b154e104e7dcda401f9b1736fea30a41a4153fe6a9a525bd0a3487571f914f05b590e242341ade289d8f5b842c6be4a93c2755dfd47174def782a2f8f61c068b5a012f02c0801601e860def788121e8808c01fed4c920a3698d0d684920918c95b17f76bbcb4f265c931d8f79560ff8114b70f4dd6791e2ed70cfeb89905791b88be26efe1c5c66b7b50b3d2be0dbc066dfc31618f9507f6f340b85a2f76a6dcac9d6ccc289ace5e5fecd25afe22ffa451f5e365ab33cc985f2e9d7f7fb1be4794740a94215d7db14b0ffcec19e5e3c5ae0d8578ef3b65d2a7a77a11e390a6c3a6b391061c886b961e3c2f42d62047bfe1356a44b840d3d956105f4c0fa95db08c4933f00de77cdc057c28b41fecfc8398c442be1ad065954f6c9dfeb2fd7207e8548a00a1d50bdf522d2abfdafd71723616a34830fbfa8fc81e0c2639cc12f363a4919b7a00ac8189dad3e7e54122a2ef430f623658d5e281c9a19442995bb9b0e3f7d13e3016b6f9523be196bf23bbcc5ec802f43ef8b651d688d9d5a44f35c9847e4c32bce3e9ebed2326adadc76f06a195db32c80b3090d7cd65c9d8518ba4e528c5eb5c7a1c5695b21595fa8a8621734bfda8afddd65e1f37a1990220a00fa9bd2c22b0117ceb08ae6af3c944c2eca924abfddad065d1472d0c3f742a49b1e78c669471873706ad157d831d7482b773f07b0673a6ce1e227a7a4d13744bf459434c0ab1c323a38b1a84cbf1ce9741f2b8fdcc2e073e56171603d035aacd83e71d5132831f4f1e8bf517979f132a33fd03783272e9b8c96dfa4e1d320a58d82acfc8d3d53a5a52daafe4dc8be08f4ad53e11cc21374b6ff4ff5ea2ecc5d3f7c057f74f0098e57d990090475cdaffdef0da917653ed10fb70b94b72e5b4d95cbea0fc1dd2579635ad6ab545ba4d7b6d2f5442bdb78beb6c8ed62942a439117025b4566b48d9f3a17fdf4577e8606a4bc4c26557e58312fd2d1a541ebec3e5ae28eef8b2ab0597083716dd12889335570ee7839530eee879d9b137606cd4dd7103991671b4464bb68529eb19fb7a8845e3491bfbac688a87cf0744f429ea112014402915c4c1f6bae08d689d3cb7d641d7befe8fc74a2242310a9a367a39531b4c86da5b39df524e52f33ff9c40b48cb196ffc9ca855b6e698ade8a83e52b9ddc5031ff09e1907e4f8b0d07e64e1fb8e427f8819a7be907aa216bf8e2a4c7cc87ed53bf9490d4cc788b91f3b9f705e984a7e62c7a495e8421b97c39dc954b35468f17c6682334f4e16308448f457faeffff6d1f818522fa441d3a48168bdb12ffebace436a3915b63076cb6a655718647f87eaaf313b5bbd430421eed3a2215e439600a56eac8c65291eb103326a8034662bd337ab51577d9110ec7151be5cc9c54b2a30891acac5ad006ed537dbeb8f16eecbde7cf4e71373faf3c36b772f6d7ea9346875c8cf1049d49d4f8eb01b946c11e8c8e3ab2015f282167acddcc77fff03e1be9134252af0abfe538b4d25fc4ff874b52b9fb0996b5f32b4141dbd30578ff46e13ef6c63fc1620f62cb11a3dce401993976c272a5f62fde3f2a0e654d19e7a39dcdb622b9526d2a15cc18e6f817c916a00775353dd9c8954e66d0445b59bb0f5e6e3b46447232f52a0e398b057d123ef503afcbd48544db6434d2025bfc8dab72262a4fa5426a03061e7f8966e0086ff8ab5a91ab59f19b830394ee8bc76d6fb4816b8f4cde35b7eb9d3811228d51c54828f97fd1e648196c81bc73ed56249a59f318704e84656a6cedd2b8c1e1808d1cc648749abc643131e494c01336d4a14b8609656f2c972dc23c5c2e43fe40119fb88b5ec2aade35c03646e347354c493de8ab3672ccf94af0df333c6678299129d79be0eec281c5b3858ce3995566a390b674635b356692e3e9c53a089638ba0d69e772b7b410a5ae03de12e7de755ee559e1707b7b8003aabc8e2ce03c01e3183ff2d93262f6d5ceaafecdae66bc7cb3952c5a6571d864d502f281db5a228695badca5d022fdb6da56ab15dc377d1c1f8581ff56e28c2b2a84edb629547d28275c2ed571103b4ca7cdeb0776ba9f9dffcd78d21c3d4caa9289ed199672f4e7b912068c49c817114c37d37ea03954bae87d1ddae3da2ad85feb2fbb735b75a51f7bee5c8d88cc7bf64700d1a46ec6b631ae22ac7b06730a86a26bdcb992e1c7b50142de96b14a8468e4514068a30896fc677fddefaebb125c693a8d460469c7fe535f844781940f66d6abd091191c3122d584f5b0f5b0d443713d7d5186124d73de28aca30b719d4a55e09d259bddbf16995aeb1000880890afbd24d4066b0398985a40999de22ce176348e1c1f57eaf75b92a1e4f1482e89a00ac2cc36b20e36af9ec310599c19a5b1d6f8fadba104c58c801c6633315f82ebfa88faddd0b693e2f827f586c1cc5538e93bcf10f81af6dd7ee727df3b5018c0b4e31e40d040a47503b6ace4d29a1162ce487351825255f5584aff7cbd421f85c3d9fbb3784abd9848f16028b68f0d32ed8bb80106e8cc4acb939ff88bd39976d166b2addebf628b3fcd056da2f60e1b90f7a32702954921908ebccb683622a1f574ceba6951bef5e751c338c8279318dc28e36b9fc2bb17c3ad08aceb00fc388e6db112a738f86a4a1eb11526e1b9d73250b326285ed47c4398d93a3933d9a784249b65ad7d78a1f81d96ef36493ed693045a2150a8eb43cecc0c93e7d20b15b39a0646b081c2923b816365b7fbb41683a41732d942c5aa12faf876ec7f036becde8f3295af6dacff38d076d8e06260fee167703bb610745374a2758a6b88e465ca77d1f3105ae8b6b04a1eb509fb178d6249dbbc84d5d1d069278449a89d03e4a9a395d8170c329a296cfc329798cb9b9f1078d098cf3f989fd4ec53e013fbe917df35292d44fb1f3da4da4432a1847d4721514ade8cda5e5c0b51183580fc35266a970ebba74faeda56d4dcb56df51f96ad237452cedbd0cb2bee112713c3d450835811bf3da9745136d428e148fd0932dc77c8d8e61a16c625241fad8425b4ece394eedd5f165bd94923bfa1172be8edc8a4fcaae5f77ee8cc510192b27964da09c3e84efb4bc7154da1a24da8b7e544b42278d2574687ec76143afa6cf193d52a2a7f4c20ee57b6056a1337d5e408117a6cf1ab49c8980f39597f69902085d3e8d374d44e6ab4ed1185a26be2bc7281e9cfbbeb6bed899aa1924d3faa06d95999fbeaf2337494e0c2c39eef5a73fcde84459a9ea48d4e015d9e5bb5839354967ce02f637bc8678d2595b9a918fc36b927d7501f0ac2e3471ce02b5df355689c87f191ef5390900a41deec29984e45a878ece964b0009aad561316fc3b30ce1b49266d32eb17cd30f3e17e1f59014e8c518940dd0a093d1349c1a7c2581963bbe0ba372b6426e81c33c71b2ec8141c5713e52a37fff0a417a5b259e1420d9fb6a731f5baa0cc494221947895aa8fa14745a986a366bff9d0c239a19f85372497565b5b703da16439019df5f3d29f4247fb528854c9648630f03e9dedde5a08a47728ea6a4d42e62eff6fa3bd402325e0f4387b60171c37c180f958ad80955779c899517e7ea76eed00598e01552eaaf08b723daf9d466e8c57af43a15a46528b1119f5074aa3c51f77357ebe158275bc06b89640d7ce3c0a03af01418d7dc6ae8a1be8ab08c1722d66d1e9277480b8b178447667c024f9b78f8a878a2d7cf8e83e5104f6964b2907a989abafc7d7d0df941abf3d7283b6a11d46c2911a42182ec27ab785d92946e1ee8ef44846d561850d2a98c305c382f36d4cfc9b2bfd3b86ef21a0d187adcafbec8268c7d662a34dda1c83c4967097743133bc8c587edf249f5668c34ddb112fa4eb1bea9c8f6a000f1f34428b54688a5e214a7919868b25dbe930e86a243ecf54afe0b518c647d04873d2cf62cb2ab27f00015537a4fd2ea3dc8777abdf3284622347016566da0b9c406ca8c40694e4013a53fbf2e803d51b0bbe5e9df5fc74f66be618856357ccf803c53ed0e3b3fe79f69f0ede9b565d8f7a8ce5aa8cbb4e8fa61be3fd00ffb07e45065498925c14c0b311942d4ed951ad6237aadb5405bc7b2d79e1fd295b7c2ed8efa883e44c86a5053e2f421c6d4dc0c47d3a05d911db37d6efdb8e50fb3f06139ac147bc7162c21aece79eaf72e9779f19eb5395cec3d15a7594ea70a6b373d98651d2215b210f037ea3f8a57ded74474f6fdb64a08b56af52168da70b30aee03472cd8bee5af04cad7303004a4aba464b99", 0xcb3}, {&(0x7f00000006c0)="97b13f5cf9f584c87e0e637d2ff483a311bb412cb3b03c3d9e97e435f2fceb58ff0402ed7b96244b43386c222917662028d7a01206a1990722ccef1d8f39f7c8ae242e58359217b1c6161ea741445cf16b0c48eb18a6c72174dfb7cd1bd0f409dad5a432bed4afb470da3656dd30d70769e229dc91037321d618e1eff4a176ea46d5cd4d5da97f80356e46d9e8166bf2d97210b631654ece218a2a204a1786ab5a60a881a7a294cd2f92438350e6e3ec4439ebe06133ff65b1e32b809ba0482783b563ec8e5778285da5211e5821135433053a7921319c544d5e797f"}, {&(0x7f00000007c0)="75c37714a0bada8343bceb64ccb6d95a2a37b020e0bf1f6a1de4584223a2f285aaca30a9554cd5cdc1659cb9fec462cc5c2220a7cd891ec3bad99fe3c06e15a109ec0fdb6aeeee5ef8e4bfc28e17984a3860b907d549492d47a447782b7357ea72f4b2c26512a6a33c0247b730a6182ea5a99aee25fcee07f9cb0a80595cd5f744fa6898fdffda5b34b19474b8e853467329e4aea36cfd0e00735d37beb0f895c5688259a8935194eefd3a96d55707133a08f03e14da563160a545396b93341f41c161c93687e28a"}, {&(0x7f0000000b00)="1b080b7a30aec939ce8e26e0cbbe37fc064ceef965fd5e3b6739c966492dbdf71c04423d8a403e56dfd224e4e55918a5e31e683fec5cc9460882a0d1628d02d51a8da997073f856e2cd00586c6e8c89c71cf8be6121b0b3a85d597a1afb0cc311f30cc26183c8e594ce5ff62661c9e32cbc9dd9a72985e9857f3bddb52382b6c27ca85d5774cf17b92e2d2097f12a8687e70f90d46381a47706a9124a2cf61b84f26aae22fd4da84ae35b93f7be9fdfdfbf33c59f5c657e9f7e81b81b786082f88af4de07808ff3c954bae"}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) recvmsg$unix(r1, &(0x7f0000001140)={0x0, 0x2, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1}, 0x40000100) 4m34.341616274s ago: executing program 4 (id=405): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r0}, 0x8) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0) renameat(r1, &(0x7f00000004c0)='./cgroup.net/devices.allow\x00', r1, &(0x7f0000000500)='./cgroup.net/cgroup.procs\x00') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0600000004000000101000008900000000000000", @ANYBLOB, @ANYRES32=0x0], 0x50) r6 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r6, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r6, 0x0, 0xca, &(0x7f0000003d80)={0x1, 0x1, 0x0, 0x0, @vifc_lcl_ifindex, @dev}, 0x10) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000380), 0x0, 0x80, r5, 0x0, 0x7}, 0x38) 4m32.134450246s ago: executing program 4 (id=409): r0 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="700000001000030400008000000000000000", @ANYRES32, @ANYBLOB="0000000003120100500012800b0001006272696467650000400002800800050001000000060027000000000008000100"], 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x40) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x48010) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="090000000400000004000000020000000000", @ANYRES32=0x1, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000400"/21], 0x50) ioctl$VFAT_IOCTL_READDIR_BOTH(r0, 0x82307201, 0x0) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000080)={0x2, 0x0, 0x401}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x18}}, 0x24080) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1bfdffffa162ff"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r6}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='L\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000009000000380003800800030000000000080001000000000008000500e00000021400020070696d36726567080000000000000000060007"], 0x4c}}, 0x0) prctl$PR_SET_KEEPCAPS(0x8, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) r7 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r7, &(0x7f0000000200)={0x18, 0x2, {0xfeff, @local}}, 0x1e) connect$pptp(r7, &(0x7f0000000000)={0x18, 0x2, {0xfffb, @empty}}, 0x1e) setsockopt$sock_int(r1, 0x1, 0x13, &(0x7f00000000c0)=0x5, 0x4) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000240)={0x1, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x11, &(0x7f0000000540)=ANY=[@ANYBLOB="180000008000000000000000fdffffff8500000007000000b7080000000000007b8af8ff00000000b7080000161300007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018030000", @ANYRES32=r0, @ANYBLOB="0000000000000100b705000008000000850000006900000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) read(r0, &(0x7f0000000180)=""/57, 0x39) mlock(&(0x7f0000ffb000/0x1000)=nil, 0xffffffffdf004fff) 4m30.142774139s ago: executing program 2 (id=412): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r0, 0x0, 0xd}, 0x18) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000540)=0x4) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0xf}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x4000, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x4e24, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa845942824251d7d17b5191584bcd4fbe40a23424d00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"b3472eb9cd42d2030000002000", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000200000000"], 0x0, 0x3}, 0x94) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 4m29.950115775s ago: executing program 4 (id=414): socket$nl_netfilter(0x10, 0x3, 0xc) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/231, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0x78, &(0x7f0000000600)=""/120}]}) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)={0x1, r1}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x32, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2d8d}, 0x94) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) 4m27.268437305s ago: executing program 2 (id=415): writev(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}], 0x1) ioctl$int_in(0xffffffffffffffff, 0x5452, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) fchdir(r3) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1840, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x0) write(r5, &(0x7f0000004200)='t', 0x1) semget$private(0x7d000000000000, 0x4000, 0x555) sendfile(r5, r4, 0x0, 0x40001) 4m22.886091688s ago: executing program 4 (id=419): socket$nl_netfilter(0x10, 0x3, 0xc) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/231, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0x78, &(0x7f0000000600)=""/120}]}) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)={0x1, r1}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x32, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2d8d}, 0x94) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$radio(0x0, 0x1, 0x2) getpid() 4m22.846012387s ago: executing program 2 (id=420): openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) close(r0) socket$inet6_udp(0xa, 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00007c2000/0x4000)=nil, &(0x7f00009dc000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000726000/0x13000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x7, 0x20002f9}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000580), 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) r2 = socket$inet(0x2, 0x80001, 0x84) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='8', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 4m22.438791557s ago: executing program 2 (id=422): openat$procfs(0xffffffffffffff9c, 0x0, 0x1800, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x46) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_IO_FLUSHER(0x39, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) sysinfo(&(0x7f00000015c0)=""/4096) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) socket(0x11, 0x3, 0x0) sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="2400000014001b0528bd7000ffdbdf2511000d0001000405fa97"], 0x24}, 0x1, 0x0, 0x0, 0x2400a051}, 0x44000) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000780)={'netdevsim0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x3f, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x8}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x8}]}, 0x40}}, 0x0) r5 = socket$kcm(0x10, 0x100000000002, 0x4) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000001100)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19, 0x0, 0xffffffffffffffff, 0x54}, 0x42) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000040)=r6, 0x4) sendmsg$kcm(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)="39000000140081ae00002c000500015601618575e285af0180000000171300883795c04a31ba377a1b2cc32b38d3740000ffffffffffffffff", 0x39}], 0x1, 0x0, 0x0, 0xc00e}, 0x0) 4m7.332534883s ago: executing program 33 (id=419): socket$nl_netfilter(0x10, 0x3, 0xc) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/231, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0x78, &(0x7f0000000600)=""/120}]}) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)={0x1, r1}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x32, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2d8d}, 0x94) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$radio(0x0, 0x1, 0x2) getpid() 4m7.220027887s ago: executing program 34 (id=422): openat$procfs(0xffffffffffffff9c, 0x0, 0x1800, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x46) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_IO_FLUSHER(0x39, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) sysinfo(&(0x7f00000015c0)=""/4096) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) socket(0x11, 0x3, 0x0) sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="2400000014001b0528bd7000ffdbdf2511000d0001000405fa97"], 0x24}, 0x1, 0x0, 0x0, 0x2400a051}, 0x44000) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000780)={'netdevsim0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x3f, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x8}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x8}]}, 0x40}}, 0x0) r5 = socket$kcm(0x10, 0x100000000002, 0x4) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000001100)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19, 0x0, 0xffffffffffffffff, 0x54}, 0x42) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000040)=r6, 0x4) sendmsg$kcm(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)="39000000140081ae00002c000500015601618575e285af0180000000171300883795c04a31ba377a1b2cc32b38d3740000ffffffffffffffff", 0x39}], 0x1, 0x0, 0x0, 0xc00e}, 0x0) 14.926995124s ago: executing program 7 (id=1084): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000000)={0x2, 'wg2\x00', 0x2}, 0x18) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x0, 0x301, 0x70bd2a, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000090}, 0x40) readv(r1, &(0x7f00000004c0)=[{&(0x7f0000000040)=""/2, 0x2}], 0x1) 13.895783384s ago: executing program 7 (id=1099): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x88}}, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=ANY=[@ANYBLOB="3c0000001800dd8d0000000000000000020000000000000600000000060015000100000018001680140001"], 0x3c}, 0x1, 0x0, 0x0, 0x20000010}, 0x200000a0) 13.627338323s ago: executing program 7 (id=1104): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="50000000020605000000000000000720000000000c00078008000640000000000500010006000000050005000200000005000400000000000900020073797a31000000000c000300686173683a6970"], 0x50}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000001c0007800c00018008000140640101020c000280080001407f"], 0x44}, 0x1, 0x0, 0x0, 0x10040047}, 0x8004) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x1c, 0x8, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x10) 2.742524044s ago: executing program 5 (id=1207): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket(0x2b, 0x1, 0x1) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000004100)={'syztnl2\x00', 0x0}) sendmmsg$inet(r1, &(0x7f0000004440)=[{{0x0, 0x0, 0x0}}], 0x1, 0x240048c5) listen(r0, 0x5) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000180)={0x1, &(0x7f0000000000)=[{0x6, 0x7, 0x0, 0x7fff8000}]}) 2.528171222s ago: executing program 1 (id=1210): sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="78000000070a010200000000000000000a0000080900010073797a31000000005800048054000180090001006d6574610000000044000280080001400000000c081c0340000000000800034000000017000003400000000f080002400000002308000140000000120800014000000014080001"], 0x78}, 0x1, 0x0, 0x0, 0x80}, 0x44000) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(0x0, r0) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0000000000000000000c000280"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0) 2.365133542s ago: executing program 1 (id=1213): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x18, 0x1410, 0x8b7fbbc5948fecd9, 0x70bd29, 0x25dfd9fc, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}]}, 0x18}, 0x1, 0x0, 0x0, 0x20004085}, 0x4004080) 2.203483628s ago: executing program 5 (id=1216): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000001c0)={0xaa, 0x380}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000100)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000113000/0x3000)=nil, 0x400000, 0x3, 0x2}) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_pidfd_open(r1, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$FS_IOC_GETVERSION(r2, 0xc040ff0b, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xc) write$sysctl(0xffffffffffffffff, &(0x7f0000000580)='1\x00', 0x2) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) 2.179740134s ago: executing program 7 (id=1217): r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000180)={'lo\x00'}) r1 = socket(0x10, 0x3, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000001a80)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe50a10a000600014002020c600e41b0000900ac000a0501000000160012000a00ff120048035c3b61c1d67f6f94007134cf6efb8007a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667daffffffffff1f215ce3bb9ad809d5e1cace81ed", 0xa2}], 0x1}, 0x894) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000080)={'sit0\x00', &(0x7f0000001000)={'syztnl2\x00', 0x0, 0x0, 0xa000, 0x8, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x64, 0x0, 0x0, 0x29, 0x0, @empty, @rand_addr=0x3}}}}) 2.141218336s ago: executing program 1 (id=1218): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, 0x0, 0x0) listen(r1, 0xfffffffc) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x34, r3, 0x1, 0x0, 0x80000000, {}, [@MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @broadcast}}]}]}, 0x34}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)={0x28, r5, 0x1, 0xff1f0000, 0x0, {0x7}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1f}]}]}, 0x28}}, 0x0) 1.923451888s ago: executing program 1 (id=1221): r0 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000040)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0x0, 0xfff3}, {}, {0xffff}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x8, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x4}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x10, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x2}]}]}]}}]}, 0x4c}}, 0x0) socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0xd}}}, 0x24}, 0x1, 0x0, 0x0, 0x200400c4}, 0x20008014) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.807161268s ago: executing program 7 (id=1223): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x1403, 0x1, 0x70bd2a, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'bond0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000800) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x20, 0x1410, 0x8b7fbbc5948fecd9, 0x70bd29, 0x25dfd9fc, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x20004085}, 0x4004080) 1.710909908s ago: executing program 1 (id=1225): socketpair$unix(0x1, 0x3, 0x0, 0x0) openat$audio(0xffffff9c, 0x0, 0x402, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) semget(0x1, 0x4, 0x10) syz_usb_connect(0x1, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a82300000904000002ca744d00090503034d00ff99090805", @ANYRES32], &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x8000000) read(r1, &(0x7f0000000380)=""/144, 0x90) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x94, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) 1.625747957s ago: executing program 7 (id=1226): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x54, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}]}, 0x54}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, 0x3, 0x6, 0x101, 0x0, 0x0, {0x2, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20044800}, 0x4c800) 1.44053271s ago: executing program 6 (id=1229): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x90}, 0x44080) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b30, &(0x7f0000000040)={'wlan0\x00'}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b30, &(0x7f0000000300)={'wlan0\x00'}) 1.399487339s ago: executing program 3 (id=1230): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000940)={0x78, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x18, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x7fff, 0x101, 0x3, 0x5d1, 0xff7f, 0x6, 0xdd7]}}]}]}]}, 0x78}}, 0x0) 1.261220414s ago: executing program 3 (id=1231): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, 0x0, 0x0) listen(r1, 0xfffffffc) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x34, r3, 0x1, 0x0, 0x80000000, {}, [@MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @broadcast}}]}]}, 0x34}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)={0x28, r5, 0x1, 0xff1f0000, 0x0, {0x7}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1f}]}]}, 0x28}}, 0x0) 1.245019424s ago: executing program 6 (id=1232): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b40)={{0x14}, [@NFT_MSG_NEWRULE={0x94, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x68, 0x4, 0x0, 0x1, [{0x64, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x54, 0x2, 0x0, 0x1, [@NFTA_TARGET_INFO={0x39, 0x3, "9b6a37b458a8056dd9a87f963d140d7a9d3ac869f3a860917523679abf4579f9cd656422a633a39f03000000000000000000000001"}, @NFTA_TARGET_NAME={0xa, 0x1, 'HMARK\x00'}, @NFTA_TARGET_REV={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xbc}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) 1.218490279s ago: executing program 5 (id=1233): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000940)=@bridge_setlink={0x44, 0x13, 0xa29, 0x0, 0x0, {0x7, 0x0, 0x0, r1}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET={0x8, 0x2, 0x0, 0x1, {0x4, 0x5, 0x0, 0x0, [{0x8, 0x0, 0x0, 0x0, 0x123e}, {0x8, 0x5}, {0x8}]}}]}]}, 0x44}}, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000080)="5c00000011006bec9e3be35c6e17aa31076b876c0d000000ba090000160af3653c001ac00400020208000200030001002c000000eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0000300000000000000ffffc6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 922.146378ms ago: executing program 5 (id=1234): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x78) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[], 0x88}}, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000280)="c021", 0x1700}], 0x1) 778.576151ms ago: executing program 3 (id=1235): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140)) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, 0x0, 0x0) 739.136586ms ago: executing program 6 (id=1236): ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(0xffffffffffffffff, 0xc020660b, &(0x7f0000000180)={@desc={0x1, 0x0, @desc1}}) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000640)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@func={0x2, 0x0, 0x0, 0xc, 0x2}, @func_proto]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x34}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x6, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0xf, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x25, r0, 0x8, &(0x7f0000000180)={0x0, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) 613.336938ms ago: executing program 5 (id=1237): r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 442.12443ms ago: executing program 3 (id=1238): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000500)={'tunl0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000300000000400000000000000000", @ANYRES32=r1, @ANYBLOB="00000000000000001c0012800900010069706970000000000c00028006000f000305"], 0x3c}, 0x1, 0x2}, 0x0) 441.719883ms ago: executing program 6 (id=1239): r0 = syz_io_uring_setup(0xd2, &(0x7f0000000480)={0x0, 0x0, 0x800, 0x0, 0x34f}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x30, 0x1, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x50, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r0, 0x47bc, 0x97ff, 0x0, 0x0, 0x0) 413.254871ms ago: executing program 5 (id=1240): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x30, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000100)=ANY=[@ANYBLOB="5000000008021100000108021100000008021100000000000200000000100000640001000006020202020202010182"], 0x57) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, 0x0) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=ANY=[@ANYBLOB="b000000008021100000108021100a9000802110000001000000002"], 0x1e) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000440)=ANY=[@ANYBLOB="10000000080211000001080211000000080211000000200001000000010001"], 0x20) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8b18, &(0x7f0000000000)={'wlan1\x00'}) 280.045766ms ago: executing program 3 (id=1241): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_START_AP(r0, 0x0, 0x0) 272.199543ms ago: executing program 6 (id=1242): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x90}, 0x44080) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b30, &(0x7f0000000040)={'wlan0\x00'}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b30, &(0x7f0000000300)={'wlan0\x00'}) 67.722428ms ago: executing program 3 (id=1243): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000d00)=ANY=[@ANYBLOB="120100021982302013042360e5ec0102030109021b0001000060020904840001ee48b100090582"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003) ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000a40)={&(0x7f0000000100)=[{0x1e, 0x1, 0x5, &(0x7f0000000240)="70c643ee82"}], 0x1}) 66.481291ms ago: executing program 6 (id=1244): r0 = socket$inet6(0xa, 0x5, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x380000, @loopback}, 0x1c) 0s ago: executing program 1 (id=1245): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, 0x0, 0x0) listen(r1, 0xfffffffc) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x34, r3, 0x1, 0x0, 0x80000000, {}, [@MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @broadcast}}]}]}, 0x34}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)={0x28, r5, 0x1, 0xff1f0000, 0x0, {0x7}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1f}]}]}, 0x28}}, 0x0) kernel console output (not intermixed with test programs): 805] 8021q: adding VLAN 0 to HW filter on device team0 [ 115.446045][ T3462] bridge0: port 1(bridge_slave_0) entered blocking state [ 115.446275][ T3462] bridge0: port 1(bridge_slave_0) entered forwarding state [ 115.468917][ T5802] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 115.518729][ T3462] bridge0: port 2(bridge_slave_1) entered blocking state [ 115.518866][ T3462] bridge0: port 2(bridge_slave_1) entered forwarding state [ 115.751689][ T5811] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 115.843435][ T5802] veth0_vlan: entered promiscuous mode [ 115.938592][ T5802] veth1_vlan: entered promiscuous mode [ 116.045857][ T5806] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 116.131025][ T5811] veth0_vlan: entered promiscuous mode [ 116.193662][ T5802] veth0_macvtap: entered promiscuous mode [ 116.200368][ T5811] veth1_vlan: entered promiscuous mode [ 116.228405][ T5813] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 116.238067][ T5802] veth1_macvtap: entered promiscuous mode [ 116.324908][ T5802] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 116.392924][ T5802] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 116.466551][ T5811] veth0_macvtap: entered promiscuous mode [ 116.468478][ T3462] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.489201][ T3462] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.510362][ T3462] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.530625][ T5811] veth1_macvtap: entered promiscuous mode [ 116.539031][ T3462] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.680249][ T5813] veth0_vlan: entered promiscuous mode [ 116.721052][ T5805] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 116.796729][ T5811] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 116.804780][ T5813] veth1_vlan: entered promiscuous mode [ 116.858275][ T5811] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 116.923723][ T985] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 116.923745][ T985] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 116.953779][ T3462] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.978095][ T3462] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.980612][ T3462] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.010722][ T3462] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.109054][ T5806] veth0_vlan: entered promiscuous mode [ 117.115786][ T3487] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 117.115841][ T3487] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 117.197260][ T5813] veth0_macvtap: entered promiscuous mode [ 117.281649][ T5813] veth1_macvtap: entered promiscuous mode [ 117.288893][ T5806] veth1_vlan: entered promiscuous mode [ 117.324331][ T5805] veth0_vlan: entered promiscuous mode [ 117.412078][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 117.412101][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 117.447021][ T5805] veth1_vlan: entered promiscuous mode [ 117.506868][ T5813] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 117.605240][ T5813] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 117.611101][ T5912] Bluetooth: MGMT ver 1.23 [ 117.611149][ T5912] Bluetooth: hci0: invalid length 0, exp 2 for type 23 [ 117.657907][ T3487] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.660594][ T3524] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 117.660683][ T3524] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 117.687487][ T3487] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.707484][ T3487] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.711811][ T3487] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.769733][ T5806] veth0_macvtap: entered promiscuous mode [ 117.868558][ T5806] veth1_macvtap: entered promiscuous mode [ 117.958413][ T5805] veth0_macvtap: entered promiscuous mode [ 118.132429][ T5805] veth1_macvtap: entered promiscuous mode [ 119.306092][ T5922] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 120.056442][ T985] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 120.056459][ T985] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 120.100441][ T5806] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 120.154291][ T5806] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 120.418124][ T5805] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 120.479722][ T69] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.485569][ T69] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.342800][ T69] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.346614][ T5805] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 121.370349][ T2230] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 121.370370][ T2230] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 121.426074][ T69] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.523922][ T985] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.527062][ T985] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.608214][ T985] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.609879][ T985] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.692089][ T5940] syz.0.9 (5940) used greatest stack depth: 18656 bytes left [ 127.673446][ T41] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 127.673472][ T41] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 128.413070][ T5959] dvmrp1: entered allmulticast mode [ 128.737161][ T5956] dvmrp1: left allmulticast mode [ 129.044844][ T3524] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 129.044866][ T3524] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 129.119542][ T69] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 129.119564][ T69] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 129.260079][ T2230] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 129.260112][ T2230] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 133.326627][ T5989] tmpfs: Bad value for 'mpol' [ 135.921922][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 135.926607][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 135.931951][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 135.937928][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 135.941916][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 139.221934][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 139.231919][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 139.241931][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 139.251923][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 139.261918][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 141.313654][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 141.313764][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 144.795247][ T6037] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 145.323580][ T6047] tmpfs: Bad value for 'mpol' [ 146.624011][ T6054] Bluetooth: hci0: invalid length 0, exp 2 for type 23 [ 148.432411][ T5924] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 150.699500][ T10] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 150.932751][ T5924] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 150.932793][ T5924] usb 1-1: can't read configurations, error -71 [ 151.161614][ T10] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 151.161651][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.161676][ T10] usb 5-1: Product: syz [ 151.161690][ T10] usb 5-1: Manufacturer: syz [ 151.161704][ T10] usb 5-1: SerialNumber: syz [ 151.270626][ T10] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 151.898408][ T6088] ip6gretap0: entered promiscuous mode [ 151.898601][ T6088] vlan2: entered promiscuous mode [ 152.627197][ T906] usb 5-1: USB disconnect, device number 2 [ 152.702490][ T5999] usb 5-1: ath9k_htc: Firmware - ath9k_htc/htc_9271-1.4.0.fw download failed [ 152.716138][ T906] usb 5-1: ath9k_htc: USB layer deinitialized [ 152.942234][ T5953] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 153.097239][ T5953] usb 4-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice=c6.98 [ 153.097274][ T5953] usb 4-1: New USB device strings: Mfr=14, Product=0, SerialNumber=0 [ 153.097295][ T5953] usb 4-1: Manufacturer: syz [ 153.173043][ T5953] usb 4-1: config 0 descriptor?? [ 155.293876][ T5953] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 155.857387][ T6100] ip6gretap0: entered promiscuous mode [ 155.860000][ T6100] vlan2: entered promiscuous mode [ 156.151262][ T5953] ftdi_sio ttyUSB0: unknown device type: 0xc698 [ 156.382069][ T5953] usb 4-1: USB disconnect, device number 2 [ 156.414330][ T5953] ftdi_sio 4-1:0.0: device disconnected [ 156.822622][ T5924] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 158.911964][ T5924] usb 1-1: device not accepting address 4, error -71 [ 164.312073][ T6144] Bluetooth: hci0: invalid length 0, exp 2 for type 22 [ 169.478151][ T6212] ip6gretap0: entered promiscuous mode [ 169.480316][ T6212] vlan2: entered promiscuous mode [ 170.427012][ T5883] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 170.576204][ T5883] usb 5-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice=c6.98 [ 170.576235][ T5883] usb 5-1: New USB device strings: Mfr=14, Product=0, SerialNumber=0 [ 170.576259][ T5883] usb 5-1: Manufacturer: syz [ 170.624723][ T5883] usb 5-1: config 0 descriptor?? [ 170.647914][ T5883] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected [ 170.670711][ T5883] ftdi_sio ttyUSB0: unknown device type: 0xc698 [ 172.791372][ T5953] usb 5-1: USB disconnect, device number 3 [ 172.826742][ T5953] ftdi_sio 5-1:0.0: device disconnected [ 173.497311][ T6227] vlan2: entered promiscuous mode [ 175.185794][ T5883] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 175.347129][ T5883] usb 4-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice=c6.98 [ 175.347160][ T5883] usb 4-1: New USB device strings: Mfr=14, Product=0, SerialNumber=0 [ 175.347180][ T5883] usb 4-1: Manufacturer: syz [ 175.379575][ T5883] usb 4-1: config 0 descriptor?? [ 175.474633][ T5883] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 175.478612][ T5883] ftdi_sio ttyUSB0: unknown device type: 0xc698 [ 175.502415][ T5883] usb 4-1: USB disconnect, device number 3 [ 175.504995][ T5883] ftdi_sio 4-1:0.0: device disconnected [ 186.655763][ T6322] dvmrp1: entered allmulticast mode [ 187.018074][ T6319] dvmrp1: left allmulticast mode [ 189.700653][ T6341] Bluetooth: hci0: invalid length 0, exp 2 for type 22 [ 195.282269][ T6367] ip6gretap0: entered promiscuous mode [ 195.282402][ T6367] vlan2: entered promiscuous mode [ 196.687488][ T5883] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 198.930269][ T5883] usb 3-1: device descriptor read/all, error -71 [ 199.507583][ T5970] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 199.570535][ T6398] Bluetooth: hci0: invalid length 0, exp 2 for type 22 [ 200.322457][ T5970] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 200.322480][ T5970] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.322495][ T5970] usb 4-1: Product: syz [ 200.322505][ T5970] usb 4-1: Manufacturer: syz [ 200.322515][ T5970] usb 4-1: SerialNumber: syz [ 200.484288][ T5970] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 201.040856][ T6406] vlan2: entered promiscuous mode [ 201.754911][ T6038] usb 4-1: ath9k_htc: Firmware - ath9k_htc/htc_9271-1.4.0.fw download failed [ 201.795491][ T6038] usb 4-1: ath9k_htc: USB layer deinitialized [ 201.857975][ T9] usb 4-1: USB disconnect, device number 4 [ 201.898030][ T6110] udevd[6110]: setting mode of /dev/bus/usb/004/004 to 020664 failed: No such file or directory [ 201.898163][ T6110] udevd[6110]: setting owner of /dev/bus/usb/004/004 to uid=0, gid=0 failed: No such file or directory [ 201.972030][ T805] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 202.288784][ T805] usb 5-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice=c6.98 [ 202.288869][ T805] usb 5-1: New USB device strings: Mfr=14, Product=0, SerialNumber=0 [ 202.288917][ T805] usb 5-1: Manufacturer: syz [ 203.015021][ T805] usb 5-1: config 0 descriptor?? [ 203.039949][ T805] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected [ 203.061579][ T805] ftdi_sio ttyUSB0: unknown device type: 0xc698 [ 204.686136][ T5924] usb 5-1: USB disconnect, device number 4 [ 204.696680][ T5924] ftdi_sio 5-1:0.0: device disconnected [ 204.714218][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 204.714303][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 211.320933][ T6467] vlan2: entered promiscuous mode [ 213.602008][ T5808] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 213.880359][ T5808] usb 4-1: device descriptor read/all, error -71 [ 216.960039][ T6496] dvmrp1: entered allmulticast mode [ 218.069027][ T6495] dvmrp1: left allmulticast mode [ 221.388484][ T6523] Bluetooth: hci0: invalid length 0, exp 2 for type 23 [ 222.877489][ T5868] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 223.030687][ T6522] geneve2: entered allmulticast mode [ 223.055756][ T5868] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 223.055779][ T5868] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 223.055793][ T5868] usb 3-1: Product: syz [ 223.055804][ T5868] usb 3-1: Manufacturer: syz [ 223.055815][ T5868] usb 3-1: SerialNumber: syz [ 224.938604][ T5868] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 225.121149][ T5883] usb 3-1: ath9k_htc: Firmware - ath9k_htc/htc_9271-1.4.0.fw download failed [ 225.232826][ T5883] usb 3-1: ath9k_htc: USB layer deinitialized [ 225.285354][ T5868] usb 3-1: USB disconnect, device number 4 [ 226.395777][ T37] audit: type=1804 audit(1767614071.293:2): pid=6542 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz.4.145" name="bus" dev="ramfs" ino=9845 res=1 errno=0 [ 227.262096][ T5810] Bluetooth: hci1: command 0x0406 tx timeout [ 227.264697][ T5810] Bluetooth: hci3: command 0x0406 tx timeout [ 227.264859][ T5810] Bluetooth: hci2: command 0x0406 tx timeout [ 227.264883][ T5810] Bluetooth: hci4: command 0x0406 tx timeout [ 239.571416][ T6630] QAT: failed to copy from user cfg_data. [ 245.071789][ T5861] IPVS: starting estimator thread 0... [ 245.322197][ T6655] IPVS: using max 7 ests per chain, 16800 per kthread [ 252.409376][ T37] audit: type=1804 audit(1767614098.143:3): pid=6689 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz.1.184" name="bus" dev="ramfs" ino=10597 res=1 errno=0 [ 255.072468][ T6702] QAT: failed to copy from user cfg_data. [ 258.524909][ T6712] QAT: failed to copy from user cfg_data. [ 263.226905][ T6726] netlink: 'syz.1.193': attribute type 1 has an invalid length. [ 263.226922][ T6726] netlink: 'syz.1.193': attribute type 3 has an invalid length. [ 263.226974][ T6726] netlink: 132 bytes leftover after parsing attributes in process `syz.1.193'. [ 265.800268][ T6780] mmap: syz.4.198 (6780) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 266.189211][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 266.189284][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 269.634112][ T6707] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 269.682823][ T6811] comedi comedi0: Minor 3 could not be opened [ 270.754100][ T6707] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 270.754123][ T6707] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 270.754137][ T6707] usb 2-1: Product: syz [ 270.754147][ T6707] usb 2-1: Manufacturer: syz [ 270.754157][ T6707] usb 2-1: SerialNumber: syz [ 270.847231][ T6707] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 270.878902][ T5868] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 271.994100][ T5868] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 272.013265][ T5868] ath9k_htc: Failed to initialize the device [ 272.089387][ T5868] usb 2-1: ath9k_htc: USB layer deinitialized [ 272.426144][ T5868] usb 2-1: USB disconnect, device number 2 [ 276.718367][ T6850] netlink: 52 bytes leftover after parsing attributes in process `syz.0.218'. [ 276.819447][ T6850] Zero length message leads to an empty skb [ 289.022098][ T5887] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 289.292780][ T5887] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 289.292812][ T5887] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 289.292832][ T5887] usb 1-1: Product: syz [ 289.292847][ T5887] usb 1-1: Manufacturer: syz [ 289.292863][ T5887] usb 1-1: SerialNumber: syz [ 289.410203][ T5887] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 289.439657][ T805] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 291.181843][ T805] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 291.182049][ T805] ath9k_htc: Failed to initialize the device [ 291.538661][ T805] usb 1-1: ath9k_htc: USB layer deinitialized [ 292.289684][ T805] usb 1-1: USB disconnect, device number 6 [ 309.053292][ T7007] tmpfs: Bad value for 'mpol' [ 309.251184][ T7009] fuse: Bad value for 'group_id' [ 309.251206][ T7009] fuse: Bad value for 'group_id' [ 327.792252][ T7102] dvmrp1: entered allmulticast mode [ 328.159866][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 328.159945][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 328.220395][ T7097] dvmrp1: left allmulticast mode [ 335.017587][ T5115] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 335.069571][ T5115] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 335.071682][ T5115] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 335.073931][ T5115] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 335.075169][ T5115] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 337.834164][ T5804] Bluetooth: hci5: command tx timeout [ 340.759071][ T5804] Bluetooth: hci5: command tx timeout [ 340.771213][ T2230] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 342.782951][ T5804] Bluetooth: hci5: command tx timeout [ 342.817842][ T2230] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 343.265342][ T2230] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.301828][ T5804] Bluetooth: hci5: command tx timeout [ 346.658410][ T37] audit: type=1804 audit(1767614192.393:4): pid=7190 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz.3.304" name="bus" dev="ramfs" ino=11768 res=1 errno=0 [ 347.043692][ T2230] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 350.847526][ T7139] chnl_net:caif_netlink_parms(): no params data found [ 355.500392][ T7139] bridge0: port 1(bridge_slave_0) entered blocking state [ 355.511004][ T7139] bridge0: port 1(bridge_slave_0) entered disabled state [ 355.511203][ T7139] bridge_slave_0: entered allmulticast mode [ 355.538034][ T7139] bridge_slave_0: entered promiscuous mode [ 355.591288][ T7139] bridge0: port 2(bridge_slave_1) entered blocking state [ 355.591402][ T7139] bridge0: port 2(bridge_slave_1) entered disabled state [ 355.591600][ T7139] bridge_slave_1: entered allmulticast mode [ 355.870539][ T7139] bridge_slave_1: entered promiscuous mode [ 357.986535][ T2230] bridge_slave_1: left allmulticast mode [ 357.986690][ T2230] bridge_slave_1: left promiscuous mode [ 357.989006][ T2230] bridge0: port 2(bridge_slave_1) entered disabled state [ 360.255256][ T2230] bridge_slave_0: left allmulticast mode [ 360.255288][ T2230] bridge_slave_0: left promiscuous mode [ 360.255863][ T2230] bridge0: port 1(bridge_slave_0) entered disabled state [ 367.561981][ T37] audit: type=1326 audit(1767614213.283:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7285 comm="syz.2.329" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fcb034df749 code=0x0 [ 367.782539][ T2230] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 367.842699][ T2230] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 367.864853][ T2230] bond0 (unregistering): Released all slaves [ 368.087860][ T7139] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 368.098174][ T7139] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 370.261654][ T5804] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:201' [ 370.261709][ T5804] CPU: 0 UID: 0 PID: 5804 Comm: kworker/u9:2 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 370.261735][ T5804] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 370.261755][ T5804] Workqueue: hci4 hci_rx_work [ 370.261800][ T5804] Call Trace: [ 370.261812][ T5804] [ 370.261822][ T5804] dump_stack_lvl+0xe8/0x150 [ 370.261859][ T5804] sysfs_create_dir_ns+0x259/0x280 [ 370.261892][ T5804] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 370.261926][ T5804] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 370.261965][ T5804] ? rt_spin_unlock+0x161/0x200 [ 370.261998][ T5804] kobject_add_internal+0x6b1/0xcd0 [ 370.262045][ T5804] kobject_add+0x155/0x220 [ 370.262077][ T5804] ? __pfx_kobject_add+0x10/0x10 [ 370.262111][ T5804] ? get_device_parent+0x370/0x3a0 [ 370.262141][ T5804] device_add+0x408/0xb80 [ 370.262169][ T5804] hci_conn_add_sysfs+0xd5/0x210 [ 370.262208][ T5804] le_conn_complete_evt+0xf1d/0x1420 [ 370.262246][ T5804] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 370.262275][ T5804] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 370.262297][ T5804] ? lockdep_hardirqs_on+0x7b/0x110 [ 370.262320][ T5804] ? skb_pull_data+0xfb/0x200 [ 370.262358][ T5804] hci_le_conn_complete_evt+0x187/0x480 [ 370.262395][ T5804] hci_event_packet+0x78f/0x1260 [ 370.262436][ T5804] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 370.262466][ T5804] ? __pfx_hci_event_packet+0x10/0x10 [ 370.262502][ T5804] ? rt_spin_unlock+0x150/0x200 [ 370.262545][ T5804] ? hci_send_to_monitor+0xe2/0x590 [ 370.262579][ T5804] hci_rx_work+0x3ee/0x1060 [ 370.262609][ T5804] ? process_scheduled_works+0x9ef/0x1770 [ 370.262644][ T5804] process_scheduled_works+0xad1/0x1770 [ 370.262704][ T5804] ? __pfx_process_scheduled_works+0x10/0x10 [ 370.262728][ T5804] ? do_raw_spin_lock+0x121/0x290 [ 370.262773][ T5804] worker_thread+0x8a0/0xda0 [ 370.262830][ T5804] kthread+0x711/0x8a0 [ 370.262867][ T5804] ? __pfx_worker_thread+0x10/0x10 [ 370.262893][ T5804] ? __pfx_kthread+0x10/0x10 [ 370.262923][ T5804] ? rt_spin_unlock+0x150/0x200 [ 370.262957][ T5804] ? rt_spin_unlock+0x161/0x200 [ 370.262986][ T5804] ? __pfx_kthread+0x10/0x10 [ 370.263027][ T5804] ret_from_fork+0x510/0xa50 [ 370.263055][ T5804] ? __pfx_ret_from_fork+0x10/0x10 [ 370.263078][ T5804] ? __switch_to+0xc9e/0x1480 [ 370.263120][ T5804] ? __pfx_kthread+0x10/0x10 [ 370.263154][ T5804] ret_from_fork_asm+0x1a/0x30 [ 370.263210][ T5804] [ 370.264304][ T5804] kobject: kobject_add_internal failed for hci4:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 370.264448][ T5804] Bluetooth: hci4: failed to register connection device [ 370.689965][ T7139] team0: Port device team_slave_0 added [ 370.700803][ T7139] team0: Port device team_slave_1 added [ 372.301950][ T5115] Bluetooth: hci4: command 0x0406 tx timeout [ 375.382077][ T5115] Bluetooth: hci4: command 0x0406 tx timeout [ 378.041784][ T7139] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 378.041799][ T7139] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 378.041820][ T7139] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 378.161212][ T7139] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 378.161324][ T7139] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 378.161351][ T7139] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 379.366636][ T37] audit: type=1326 audit(1767614225.103:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7346 comm="syz.2.344" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fcb034df749 code=0x0 [ 381.061877][ T2230] hsr_slave_0: left promiscuous mode [ 381.102001][ T2230] hsr_slave_1: left promiscuous mode [ 381.103277][ T2230] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 381.103433][ T2230] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 381.424074][ T2230] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 381.424414][ T2230] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 384.187642][ T2230] veth1_macvtap: left promiscuous mode [ 384.187950][ T2230] veth0_macvtap: left promiscuous mode [ 384.189917][ T2230] veth1_vlan: left promiscuous mode [ 384.190346][ T2230] veth0_vlan: left promiscuous mode [ 387.110080][ T37] audit: type=1804 audit(1767614232.823:7): pid=7410 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz.3.356" name="bus" dev="ramfs" ino=12626 res=1 errno=0 [ 387.504040][ T37] audit: type=1326 audit(1767614233.243:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7411 comm="syz.1.357" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f635056f749 code=0x0 [ 389.039424][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 389.039539][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 394.181385][ T5804] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 394.194311][ T5804] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 394.195612][ T5804] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 394.197035][ T5804] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 394.198378][ T5804] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 394.516687][ T6904] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 394.697474][ T6904] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 394.697513][ T6904] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 394.697579][ T6904] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 394.697600][ T6904] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 394.752321][ T7454] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 394.830229][ T6904] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 394.835252][ T2230] team0 (unregistering): Port device team_slave_1 removed [ 395.065089][ T2230] team0 (unregistering): Port device team_slave_0 removed [ 395.196644][ T6904] usb 4-1: USB disconnect, device number 7 [ 396.303858][ T5115] Bluetooth: hci0: command tx timeout [ 397.081495][ T7437] dvmrp1: entered allmulticast mode [ 397.089403][ T7447] dvmrp1: entered allmulticast mode [ 397.089696][ T7437] dvmrp1: left allmulticast mode [ 397.215965][ T7447] dvmrp1: left allmulticast mode [ 397.566454][ T7139] hsr_slave_0: entered promiscuous mode [ 397.567498][ T7139] hsr_slave_1: entered promiscuous mode [ 398.442039][ T5115] Bluetooth: hci0: command tx timeout [ 400.462084][ T5115] Bluetooth: hci0: command tx timeout [ 402.277796][ T7498] tmpfs: Bad value for 'mpol' [ 402.544086][ T5115] Bluetooth: hci0: command tx timeout [ 407.987841][ T7450] chnl_net:caif_netlink_parms(): no params data found [ 408.905961][ T2230] bridge_slave_1: left allmulticast mode [ 408.907486][ T2230] bridge_slave_1: left promiscuous mode [ 408.908944][ T2230] bridge0: port 2(bridge_slave_1) entered disabled state [ 409.060357][ T2230] bridge_slave_0: left allmulticast mode [ 409.060381][ T2230] bridge_slave_0: left promiscuous mode [ 409.060652][ T2230] bridge0: port 1(bridge_slave_0) entered disabled state [ 411.993899][ T2230] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 412.302185][ T2230] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 412.396126][ T2230] bond0 (unregistering): Released all slaves [ 412.851551][ T37] audit: type=1804 audit(1767614258.583:9): pid=7569 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz.2.391" name="bus" dev="ramfs" ino=12827 res=1 errno=0 [ 413.172194][ T2230] hsr_slave_0: left promiscuous mode [ 413.271867][ T2230] hsr_slave_1: left promiscuous mode [ 413.272915][ T2230] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 413.308478][ T2230] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 415.674030][ T2230] team0 (unregistering): Port device team_slave_1 removed [ 417.026352][ T2230] team0 (unregistering): Port device team_slave_0 removed [ 423.300367][ T7619] dvmrp1: entered allmulticast mode [ 423.300628][ T7619] dvmrp1: left allmulticast mode [ 423.981679][ T7572] warning: `syz.1.392' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 424.254647][ T37] audit: type=1326 audit(1767614269.993:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7633 comm="syz.4.409" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1de763f749 code=0x0 [ 425.097103][ T7450] bridge0: port 1(bridge_slave_0) entered blocking state [ 425.098337][ T7450] bridge0: port 1(bridge_slave_0) entered disabled state [ 425.142007][ T7450] bridge_slave_0: entered allmulticast mode [ 425.670651][ T7450] bridge_slave_0: entered promiscuous mode [ 425.693858][ T7450] bridge0: port 2(bridge_slave_1) entered blocking state [ 425.693948][ T7450] bridge0: port 2(bridge_slave_1) entered disabled state [ 425.695753][ T7450] bridge_slave_1: entered allmulticast mode [ 425.737982][ T7450] bridge_slave_1: entered promiscuous mode [ 429.513314][ T37] audit: type=1804 audit(1767614275.123:11): pid=7667 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz.2.415" name="bus" dev="ramfs" ino=13554 res=1 errno=0 [ 429.559574][ T7450] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 429.636240][ T7450] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 430.867095][ T7450] team0: Port device team_slave_0 added [ 430.874111][ T7450] team0: Port device team_slave_1 added [ 433.384264][ T7450] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 433.384278][ T7450] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 433.384297][ T7450] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 433.386169][ T7450] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 433.386184][ T7450] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 433.386210][ T7450] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 433.715908][ T7693] netlink: 4 bytes leftover after parsing attributes in process `syz.1.421'. [ 433.950895][ T37] audit: type=1326 audit(1767614279.683:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7697 comm="syz.1.423" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f635056f749 code=0x0 [ 434.054680][ T7450] hsr_slave_0: entered promiscuous mode [ 434.101976][ T7450] hsr_slave_1: entered promiscuous mode [ 446.557449][ T7450] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 448.570098][ T7450] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 448.731502][ T7450] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 448.858889][ T7450] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 449.496718][ T5812] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 449.509193][ T5812] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 449.553450][ T61] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 449.560233][ T61] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 449.561245][ T61] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 449.564571][ T61] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 449.567844][ T61] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 449.592757][ T61] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 449.646045][ T61] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 449.646902][ T61] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 450.482634][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 450.482710][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 451.746442][ T7774] dvmrp1: entered allmulticast mode [ 452.212284][ T61] Bluetooth: hci5: command tx timeout [ 452.212693][ T5115] Bluetooth: hci6: command tx timeout [ 452.257307][ T7768] dvmrp1: left allmulticast mode [ 454.221927][ T61] Bluetooth: hci5: command tx timeout [ 454.222006][ T5115] Bluetooth: hci6: command tx timeout [ 455.446255][ T61] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 455.465175][ T61] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 455.471473][ T61] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 455.524950][ T61] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 455.546121][ T61] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 455.725439][ T10] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 456.132313][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 456.191086][ T10] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 456.191193][ T10] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 456.301983][ T61] Bluetooth: hci6: command tx timeout [ 456.302003][ T5115] Bluetooth: hci5: command tx timeout [ 456.756615][ T10] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 456.756638][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 456.756653][ T10] usb 4-1: Product: syz [ 456.756663][ T10] usb 4-1: Manufacturer: syz [ 456.756674][ T10] usb 4-1: SerialNumber: syz [ 456.760485][ T10] usb 4-1: config 0 descriptor?? [ 457.409414][ T3487] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 457.662177][ T61] Bluetooth: hci1: command tx timeout [ 457.785812][ T3487] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 458.219718][ T3487] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 458.381962][ T61] Bluetooth: hci5: command tx timeout [ 458.431242][ T10] usb 4-1: USB disconnect, device number 8 [ 458.471881][ T61] Bluetooth: hci6: command tx timeout [ 458.888309][ T3487] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 460.119417][ T61] Bluetooth: hci1: command tx timeout [ 460.295640][ T7756] chnl_net:caif_netlink_parms(): no params data found [ 462.144920][ T61] Bluetooth: hci1: command tx timeout [ 463.265335][ T7753] chnl_net:caif_netlink_parms(): no params data found [ 464.222178][ T61] Bluetooth: hci1: command tx timeout [ 466.288164][ T7756] bridge0: port 1(bridge_slave_0) entered blocking state [ 466.288295][ T7756] bridge0: port 1(bridge_slave_0) entered disabled state [ 466.288516][ T7756] bridge_slave_0: entered allmulticast mode [ 466.290439][ T7756] bridge_slave_0: entered promiscuous mode [ 466.717878][ T7756] bridge0: port 2(bridge_slave_1) entered blocking state [ 466.718012][ T7756] bridge0: port 2(bridge_slave_1) entered disabled state [ 466.718236][ T7756] bridge_slave_1: entered allmulticast mode [ 466.721041][ T7756] bridge_slave_1: entered promiscuous mode [ 467.076610][ T7753] bridge0: port 1(bridge_slave_0) entered blocking state [ 467.076859][ T7753] bridge0: port 1(bridge_slave_0) entered disabled state [ 467.077119][ T7753] bridge_slave_0: entered allmulticast mode [ 467.114165][ T7753] bridge_slave_0: entered promiscuous mode [ 467.252077][ T7753] bridge0: port 2(bridge_slave_1) entered blocking state [ 467.252241][ T7753] bridge0: port 2(bridge_slave_1) entered disabled state [ 467.252499][ T7753] bridge_slave_1: entered allmulticast mode [ 467.255493][ T7753] bridge_slave_1: entered promiscuous mode [ 467.272105][ T5953] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 467.344517][ T7756] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 467.422055][ T5953] usb 2-1: Using ep0 maxpacket: 16 [ 467.424125][ T5953] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 467.424181][ T5953] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 467.426785][ T5953] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 467.426814][ T5953] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 467.426835][ T5953] usb 2-1: Product: syz [ 467.426850][ T5953] usb 2-1: Manufacturer: syz [ 467.426872][ T5953] usb 2-1: SerialNumber: syz [ 467.437074][ T5953] usb 2-1: config 0 descriptor?? [ 467.550026][ T7756] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 467.917715][ T3487] bridge_slave_1: left allmulticast mode [ 467.917745][ T3487] bridge_slave_1: left promiscuous mode [ 467.918023][ T3487] bridge0: port 2(bridge_slave_1) entered disabled state [ 468.003109][ T3487] bridge_slave_0: left allmulticast mode [ 468.003175][ T3487] bridge_slave_0: left promiscuous mode [ 468.003390][ T3487] bridge0: port 1(bridge_slave_0) entered disabled state [ 470.329830][ T31] usb 2-1: USB disconnect, device number 3 [ 474.592921][ T3487] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 474.704345][ T3487] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 474.746850][ T3487] bond0 (unregistering): Released all slaves [ 475.697846][ T7753] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 475.920658][ T7753] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 475.992138][ T5988] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 476.151919][ T5988] usb 4-1: Using ep0 maxpacket: 16 [ 476.157535][ T5988] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 476.187006][ T5988] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 476.187029][ T5988] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 476.187043][ T5988] usb 4-1: Product: syz [ 476.187053][ T5988] usb 4-1: Manufacturer: syz [ 476.187064][ T5988] usb 4-1: SerialNumber: syz [ 476.191134][ T5988] usb 4-1: config 0 descriptor?? [ 476.363698][ T7756] team0: Port device team_slave_0 added [ 476.562977][ T7756] team0: Port device team_slave_1 added [ 478.442892][ T7753] team0: Port device team_slave_0 added [ 479.153518][ T805] usb 4-1: USB disconnect, device number 9 [ 480.669671][ T7801] chnl_net:caif_netlink_parms(): no params data found [ 480.700508][ T7753] team0: Port device team_slave_1 added [ 481.845778][ T7756] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 481.845797][ T7756] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 481.845827][ T7756] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 483.637068][ T7756] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 483.637083][ T7756] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 483.637102][ T7756] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 484.298501][ T7753] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 484.298535][ T7753] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 484.298578][ T7753] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 485.009338][ T3487] hsr_slave_0: left promiscuous mode [ 485.319898][ T3487] hsr_slave_1: left promiscuous mode [ 485.320758][ T3487] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 485.320778][ T3487] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 485.358029][ T3487] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 485.358059][ T3487] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 485.477021][ T3487] veth1_macvtap: left promiscuous mode [ 485.477106][ T3487] veth0_macvtap: left promiscuous mode [ 485.477282][ T3487] veth1_vlan: left promiscuous mode [ 485.477411][ T3487] veth0_vlan: left promiscuous mode [ 485.601885][ T5999] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 485.751859][ T5999] usb 4-1: Using ep0 maxpacket: 16 [ 485.771969][ T5999] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 485.778618][ T5999] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 485.778647][ T5999] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 485.778666][ T5999] usb 4-1: Product: syz [ 485.778686][ T5999] usb 4-1: Manufacturer: syz [ 485.778696][ T5999] usb 4-1: SerialNumber: syz [ 485.833503][ T5999] usb 4-1: config 0 descriptor?? [ 488.662338][ T805] usb 4-1: USB disconnect, device number 10 [ 490.588499][ T805] IPVS: starting estimator thread 0... [ 490.841955][ T8036] IPVS: using max 7 ests per chain, 16800 per kthread [ 492.603326][ T37] audit: type=1326 audit(1767614338.343:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8042 comm="syz.1.481" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f635056f749 code=0x0 [ 496.348124][ T6662] IPVS: starting estimator thread 0... [ 496.635633][ T8066] IPVS: using max 1 ests per chain, 2400 per kthread [ 498.422821][ T3487] team0 (unregistering): Port device team_slave_1 removed [ 498.966701][ T3487] team0 (unregistering): Port device team_slave_0 removed [ 499.082112][ T37] audit: type=1326 audit(1767614344.813:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8078 comm="syz.1.491" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f635056f749 code=0x0 [ 506.661316][ T8111] tmpfs: Bad value for 'mpol' [ 509.553875][ T5115] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 509.572106][ T5115] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 509.578610][ T5115] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 509.580019][ T5115] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 509.580970][ T5115] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 511.666047][ T5115] Bluetooth: hci0: command tx timeout [ 511.920698][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 511.920770][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 512.548404][ T61] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 512.580208][ T61] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 512.623132][ T61] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 512.662526][ T61] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 512.663511][ T61] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 513.541932][ T7753] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 513.541951][ T7753] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 513.541978][ T7753] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 513.742056][ T61] Bluetooth: hci0: command tx timeout [ 514.882102][ T61] Bluetooth: hci2: command tx timeout [ 515.831984][ T61] Bluetooth: hci0: command tx timeout [ 516.476998][ T5115] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 516.777644][ T5115] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 516.780054][ T5115] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 516.799190][ T5115] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 516.800317][ T5115] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 516.952267][ T61] Bluetooth: hci2: command tx timeout [ 517.903184][ T61] Bluetooth: hci0: command tx timeout [ 518.941950][ T61] Bluetooth: hci7: command tx timeout [ 519.022221][ T61] Bluetooth: hci2: command tx timeout [ 520.954374][ T3487] IPVS: stop unused estimator thread 0... [ 521.041119][ T61] Bluetooth: hci7: command tx timeout [ 521.112211][ T61] Bluetooth: hci2: command tx timeout [ 523.460926][ T5115] Bluetooth: hci7: command tx timeout [ 524.844524][ T8135] chnl_net:caif_netlink_parms(): no params data found [ 524.870581][ T8123] chnl_net:caif_netlink_parms(): no params data found [ 525.503402][ T5115] Bluetooth: hci7: command tx timeout [ 528.153551][ T37] audit: type=1804 audit(1767614373.873:15): pid=8240 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz.1.520" name="bus" dev="ramfs" ino=15653 res=1 errno=0 [ 532.759250][ T8135] bridge0: port 1(bridge_slave_0) entered blocking state [ 532.759478][ T8135] bridge0: port 1(bridge_slave_0) entered disabled state [ 532.759743][ T8135] bridge_slave_0: entered allmulticast mode [ 532.912971][ T8135] bridge_slave_0: entered promiscuous mode [ 533.272418][ T8123] bridge0: port 1(bridge_slave_0) entered blocking state [ 533.272519][ T8123] bridge0: port 1(bridge_slave_0) entered disabled state [ 533.272710][ T8123] bridge_slave_0: entered allmulticast mode [ 533.274614][ T8123] bridge_slave_0: entered promiscuous mode [ 533.276900][ T8135] bridge0: port 2(bridge_slave_1) entered blocking state [ 533.277326][ T8135] bridge0: port 2(bridge_slave_1) entered disabled state [ 533.277527][ T8135] bridge_slave_1: entered allmulticast mode [ 533.280166][ T8135] bridge_slave_1: entered promiscuous mode [ 533.343187][ T8123] bridge0: port 2(bridge_slave_1) entered blocking state [ 533.343332][ T8123] bridge0: port 2(bridge_slave_1) entered disabled state [ 533.343556][ T8123] bridge_slave_1: entered allmulticast mode [ 533.345688][ T8123] bridge_slave_1: entered promiscuous mode [ 533.596512][ T8155] chnl_net:caif_netlink_parms(): no params data found [ 533.856893][ T8135] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 533.893740][ T8123] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 533.984576][ T8135] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 533.991202][ T8123] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 538.263322][ T8135] team0: Port device team_slave_0 added [ 538.562631][ T8123] team0: Port device team_slave_0 added [ 538.617757][ T8135] team0: Port device team_slave_1 added [ 538.694436][ T8123] team0: Port device team_slave_1 added [ 539.051941][ T5999] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 539.214651][ T5999] usb 2-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 539.214680][ T5999] usb 2-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 539.214719][ T5999] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 539.214735][ T5999] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 539.353080][ T8155] bridge0: port 1(bridge_slave_0) entered blocking state [ 539.353515][ T8155] bridge0: port 1(bridge_slave_0) entered disabled state [ 539.353729][ T8155] bridge_slave_0: entered allmulticast mode [ 539.355985][ T8155] bridge_slave_0: entered promiscuous mode [ 539.358733][ T8135] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 539.358749][ T8135] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 539.358775][ T8135] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 539.361347][ T8123] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 539.361361][ T8123] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 539.361387][ T8123] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 539.416585][ T8155] bridge0: port 2(bridge_slave_1) entered blocking state [ 539.417210][ T8155] bridge0: port 2(bridge_slave_1) entered disabled state [ 539.418212][ T8155] bridge_slave_1: entered allmulticast mode [ 539.429609][ T8155] bridge_slave_1: entered promiscuous mode [ 539.472826][ T8135] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 539.472871][ T8135] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 539.472952][ T8135] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 539.555689][ T5887] usb 2-1: USB disconnect, device number 4 [ 539.598858][ T8123] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 539.598877][ T8123] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 539.598904][ T8123] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 539.814477][ T37] audit: type=1326 audit(1767614385.553:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8300 comm="syz.3.534" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f347b00f749 code=0x0 [ 539.883854][ T8155] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 540.054788][ T3487] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 540.161140][ T8155] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 543.211169][ T3487] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 543.538160][ T8123] hsr_slave_0: entered promiscuous mode [ 543.595475][ T8123] hsr_slave_1: entered promiscuous mode [ 543.669978][ T8123] debugfs: 'hsr0' already exists in 'hsr' [ 543.674494][ T8123] Cannot create hsr debugfs directory [ 544.035556][ T8135] hsr_slave_0: entered promiscuous mode [ 544.085131][ T8135] hsr_slave_1: entered promiscuous mode [ 544.121657][ T8135] debugfs: 'hsr0' already exists in 'hsr' [ 544.122113][ T8135] Cannot create hsr debugfs directory [ 544.483051][ T8155] team0: Port device team_slave_0 added [ 544.563222][ T8155] team0: Port device team_slave_1 added [ 545.225577][ T3487] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 545.814310][ T3487] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 545.900366][ T8155] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 545.900380][ T8155] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 545.900400][ T8155] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 546.057613][ T8155] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 546.057631][ T8155] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 546.057660][ T8155] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 547.379955][ T37] audit: type=1326 audit(1767614393.093:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8335 comm="syz.1.544" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f635056f749 code=0x0 [ 547.570163][ T8155] hsr_slave_0: entered promiscuous mode [ 547.571348][ T8155] hsr_slave_1: entered promiscuous mode [ 547.575064][ T8155] debugfs: 'hsr0' already exists in 'hsr' [ 547.575158][ T8155] Cannot create hsr debugfs directory [ 549.310980][ T3487] bridge_slave_1: left allmulticast mode [ 549.311010][ T3487] bridge_slave_1: left promiscuous mode [ 549.311307][ T3487] bridge0: port 2(bridge_slave_1) entered disabled state [ 549.403516][ T3487] bridge_slave_0: left allmulticast mode [ 549.403548][ T3487] bridge_slave_0: left promiscuous mode [ 549.403868][ T3487] bridge0: port 1(bridge_slave_0) entered disabled state [ 549.476766][ T3487] bridge_slave_1: left allmulticast mode [ 549.476797][ T3487] bridge_slave_1: left promiscuous mode [ 549.477048][ T3487] bridge0: port 2(bridge_slave_1) entered disabled state [ 549.546386][ T3487] bridge_slave_0: left allmulticast mode [ 549.546419][ T3487] bridge_slave_0: left promiscuous mode [ 549.547318][ T3487] bridge0: port 1(bridge_slave_0) entered disabled state [ 549.609812][ T3487] bridge_slave_1: left allmulticast mode [ 549.609845][ T3487] bridge_slave_1: left promiscuous mode [ 549.610140][ T3487] bridge0: port 2(bridge_slave_1) entered disabled state [ 549.678443][ T3487] bridge_slave_0: left allmulticast mode [ 549.678476][ T3487] bridge_slave_0: left promiscuous mode [ 549.678770][ T3487] bridge0: port 1(bridge_slave_0) entered disabled state [ 549.756381][ T3487] bridge_slave_1: left allmulticast mode [ 549.756413][ T3487] bridge_slave_1: left promiscuous mode [ 549.756674][ T3487] bridge0: port 2(bridge_slave_1) entered disabled state [ 549.860191][ T3487] bridge_slave_0: left allmulticast mode [ 549.860221][ T3487] bridge_slave_0: left promiscuous mode [ 549.860676][ T3487] bridge0: port 1(bridge_slave_0) entered disabled state [ 551.631145][ T3487] bond0 (unregistering): Released all slaves [ 551.884636][ T3487] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 551.952649][ T3487] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 552.019392][ T3487] bond0 (unregistering): Released all slaves [ 552.407019][ T3487] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 552.542884][ T3487] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 552.608178][ T3487] bond0 (unregistering): Released all slaves [ 553.812490][ T37] audit: type=1326 audit(1767614399.553:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8370 comm="syz.1.554" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f635056f749 code=0x0 [ 554.257017][ T3487] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 554.529733][ T3487] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 554.774542][ T3487] bond0 (unregistering): Released all slaves [ 560.959204][ T37] audit: type=1326 audit(1767614406.673:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8402 comm="syz.3.563" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f347b00f749 code=0x0 [ 563.414462][ T6707] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 563.586138][ T3487] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 563.616252][ T6707] usb 4-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 563.616309][ T6707] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 563.616335][ T6707] usb 4-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 563.616385][ T6707] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 563.616408][ T6707] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 563.695140][ T3487] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 563.714831][ T6707] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 563.715902][ T6707] usb 4-1: invalid MIDI out EP 0 [ 563.740008][ T3487] bond0 (unregistering): Released all slaves [ 563.993695][ T6707] snd-usb-audio 4-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 564.017185][ T6707] usb 4-1: USB disconnect, device number 11 [ 567.766242][ T8123] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 568.651986][ T8123] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 568.752120][ T8123] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 568.969229][ T37] audit: type=1326 audit(1767614414.703:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8458 comm="syz.3.573" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f347b00f749 code=0x0 [ 569.525401][ T8123] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 569.671253][ T3487] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 569.757379][ T61] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 569.787177][ T61] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 569.803129][ T61] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 569.804423][ T61] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 569.821082][ T61] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 569.883300][ T5115] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 569.894628][ T5115] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 569.910996][ T5115] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 569.918349][ T5115] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 569.923485][ T5115] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 570.293606][ T3487] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 570.326918][ T3487] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 570.558067][ T3487] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 570.991956][ T3487] hsr_slave_0: left promiscuous mode [ 571.043834][ T3487] hsr_slave_1: left promiscuous mode [ 571.044637][ T3487] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 571.082162][ T3487] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 571.401920][ T3487] hsr_slave_0: left promiscuous mode [ 571.425128][ T3487] hsr_slave_1: left promiscuous mode [ 571.425928][ T3487] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 571.425948][ T3487] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 571.641310][ T3487] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 571.641352][ T3487] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 571.796736][ T3487] veth1_macvtap: left promiscuous mode [ 571.796843][ T3487] veth0_macvtap: left promiscuous mode [ 571.808842][ T3487] veth1_vlan: left promiscuous mode [ 571.809379][ T3487] veth0_vlan: left promiscuous mode [ 571.901911][ T61] Bluetooth: hci1: command tx timeout [ 571.982118][ T61] Bluetooth: hci5: command tx timeout [ 573.380495][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 573.380572][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 574.000829][ T61] Bluetooth: hci1: command tx timeout [ 574.061958][ T61] Bluetooth: hci5: command tx timeout [ 576.062012][ T61] Bluetooth: hci1: command tx timeout [ 576.081485][ T3487] team0 (unregistering): Port device team_slave_1 removed [ 576.150761][ T61] Bluetooth: hci5: command tx timeout [ 576.322659][ T3487] team0 (unregistering): Port device team_slave_0 removed [ 576.346715][ T37] audit: type=1326 audit(1767614422.083:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8500 comm="syz.3.583" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f347b00f749 code=0x0 [ 576.529438][ T5115] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 576.553945][ T5115] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 576.555149][ T5115] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 576.556481][ T5115] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 576.558796][ T5115] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 577.372678][ T3487] team0 (unregistering): Port device team_slave_1 removed [ 577.546074][ T3487] team0 (unregistering): Port device team_slave_0 removed [ 577.551907][ T5887] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 577.705014][ T5887] usb 4-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 577.705078][ T5887] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 577.705106][ T5887] usb 4-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 577.705146][ T5887] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 577.705167][ T5887] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 577.836450][ T5887] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 577.848948][ T5887] usb 4-1: invalid MIDI out EP 0 [ 578.020074][ T5887] snd-usb-audio 4-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 578.075414][ T8514] udevd[8514]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 578.102922][ T5887] usb 4-1: USB disconnect, device number 12 [ 578.141801][ T61] Bluetooth: hci1: command tx timeout [ 578.231080][ T61] Bluetooth: hci5: command tx timeout [ 578.701940][ T61] Bluetooth: hci0: command tx timeout [ 580.905567][ T61] Bluetooth: hci0: command tx timeout [ 582.732724][ T3487] team0 (unregistering): Port device team_slave_1 removed [ 582.942120][ T61] Bluetooth: hci0: command tx timeout [ 582.942981][ T3487] team0 (unregistering): Port device team_slave_0 removed [ 583.748191][ T37] audit: type=1326 audit(1767614429.483:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8535 comm="syz.3.591" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f347b00f749 code=0x0 [ 585.021896][ T61] Bluetooth: hci0: command tx timeout [ 587.044858][ T3487] team0 (unregistering): Port device team_slave_1 removed [ 587.182016][ T5970] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 587.292698][ T3487] team0 (unregistering): Port device team_slave_0 removed [ 587.341852][ T5970] usb 4-1: Using ep0 maxpacket: 16 [ 587.344384][ T5970] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 587.346821][ T5970] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 587.346849][ T5970] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 587.346863][ T5970] usb 4-1: Product: syz [ 587.346873][ T5970] usb 4-1: Manufacturer: syz [ 587.346884][ T5970] usb 4-1: SerialNumber: syz [ 587.350735][ T5970] usb 4-1: config 0 descriptor?? [ 587.410581][ T5970] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 587.410629][ T5970] em28xx 4-1:0.0: DVB interface 0 found: bulk [ 587.976761][ T5970] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 588.437500][ T5970] em28xx 4-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 588.437536][ T5970] em28xx 4-1:0.0: board has no eeprom [ 588.811920][ T5970] em28xx 4-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 588.811952][ T5970] em28xx 4-1:0.0: dvb set to bulk mode. [ 588.812335][ T10] em28xx 4-1:0.0: Binding DVB extension [ 589.868511][ T8551] em28xx 4-1:0.0: reading from i2c device at 0xfffe failed (error=-5) [ 589.882726][ T5887] usb 4-1: USB disconnect, device number 13 [ 589.885222][ T5887] em28xx 4-1:0.0: Disconnecting em28xx [ 589.950012][ T10] em28xx 4-1:0.0: Registering input extension [ 589.951468][ T5887] em28xx 4-1:0.0: Closing input extension [ 590.079126][ T5887] em28xx 4-1:0.0: Freeing device [ 597.696732][ T8470] chnl_net:caif_netlink_parms(): no params data found [ 599.800609][ T8468] chnl_net:caif_netlink_parms(): no params data found [ 599.892596][ T8505] chnl_net:caif_netlink_parms(): no params data found [ 604.702164][ T6662] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 604.910775][ T6662] usb 2-1: Using ep0 maxpacket: 16 [ 605.678246][ T6662] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 605.826912][ T6662] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 605.826942][ T6662] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 605.826962][ T6662] usb 2-1: Product: syz [ 605.826975][ T6662] usb 2-1: Manufacturer: syz [ 605.826988][ T6662] usb 2-1: SerialNumber: syz [ 605.877347][ T6662] usb 2-1: config 0 descriptor?? [ 605.889941][ T6662] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 605.889987][ T6662] em28xx 2-1:0.0: DVB interface 0 found: bulk [ 605.970853][ T8470] bridge0: port 1(bridge_slave_0) entered blocking state [ 605.971060][ T8470] bridge0: port 1(bridge_slave_0) entered disabled state [ 605.971326][ T8470] bridge_slave_0: entered allmulticast mode [ 605.987474][ T8470] bridge_slave_0: entered promiscuous mode [ 606.798490][ T6662] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 606.816027][ T8470] bridge0: port 2(bridge_slave_1) entered blocking state [ 606.817262][ T8470] bridge0: port 2(bridge_slave_1) entered disabled state [ 606.818242][ T8470] bridge_slave_1: entered allmulticast mode [ 606.827493][ T8470] bridge_slave_1: entered promiscuous mode [ 606.834356][ T8468] bridge0: port 1(bridge_slave_0) entered blocking state [ 606.834587][ T8468] bridge0: port 1(bridge_slave_0) entered disabled state [ 606.834970][ T8468] bridge_slave_0: entered allmulticast mode [ 606.880689][ T8468] bridge_slave_0: entered promiscuous mode [ 606.983889][ T8468] bridge0: port 2(bridge_slave_1) entered blocking state [ 606.984016][ T8468] bridge0: port 2(bridge_slave_1) entered disabled state [ 606.984241][ T8468] bridge_slave_1: entered allmulticast mode [ 606.989089][ T8468] bridge_slave_1: entered promiscuous mode [ 607.153841][ T8505] bridge0: port 1(bridge_slave_0) entered blocking state [ 607.153998][ T8505] bridge0: port 1(bridge_slave_0) entered disabled state [ 607.154208][ T8505] bridge_slave_0: entered allmulticast mode [ 607.157205][ T8505] bridge_slave_0: entered promiscuous mode [ 607.237862][ T6662] em28xx 2-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 607.237894][ T6662] em28xx 2-1:0.0: board has no eeprom [ 607.611765][ T6662] em28xx 2-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 607.611794][ T6662] em28xx 2-1:0.0: dvb set to bulk mode. [ 607.613765][ T5887] em28xx 2-1:0.0: Binding DVB extension [ 607.848531][ T8505] bridge0: port 2(bridge_slave_1) entered blocking state [ 607.848760][ T8505] bridge0: port 2(bridge_slave_1) entered disabled state [ 607.849028][ T8505] bridge_slave_1: entered allmulticast mode [ 607.875108][ T8505] bridge_slave_1: entered promiscuous mode [ 608.127972][ T8470] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 608.466842][ T8468] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 608.520991][ T8470] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 608.554580][ T8643] em28xx 2-1:0.0: reading from i2c device at 0xfffe failed (error=-5) [ 608.557253][ T5808] usb 2-1: USB disconnect, device number 5 [ 608.559760][ T5808] em28xx 2-1:0.0: Disconnecting em28xx [ 608.643974][ T5887] em28xx 2-1:0.0: Registering input extension [ 608.644421][ T5808] em28xx 2-1:0.0: Closing input extension [ 611.081482][ T5808] em28xx 2-1:0.0: Freeing device [ 611.099456][ T8468] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 611.224123][ T8505] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 611.456746][ T8505] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 611.567643][ T8470] team0: Port device team_slave_0 added [ 611.700240][ T8468] team0: Port device team_slave_0 added [ 611.708748][ T8470] team0: Port device team_slave_1 added [ 611.911090][ T8468] team0: Port device team_slave_1 added [ 612.005411][ T8505] team0: Port device team_slave_0 added [ 612.437894][ T8505] team0: Port device team_slave_1 added [ 612.868552][ T8470] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 612.868566][ T8470] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 612.868586][ T8470] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 613.256047][ T8470] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 613.256107][ T8470] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 613.256137][ T8470] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 613.475343][ T8468] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 613.475362][ T8468] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 613.475391][ T8468] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 614.110064][ T8468] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 614.110083][ T8468] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 614.110113][ T8468] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 614.114217][ T8505] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 614.114249][ T8505] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 614.114321][ T8505] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 614.223884][ T8505] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 614.223902][ T8505] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 614.223930][ T8505] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 614.821897][ T10] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 614.948386][ T8470] hsr_slave_0: entered promiscuous mode [ 614.949975][ T8470] hsr_slave_1: entered promiscuous mode [ 614.974266][ T10] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 614.974304][ T10] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 614.974347][ T10] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 614.974363][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 615.089027][ T8688] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 615.158087][ T10] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 615.598703][ T8468] hsr_slave_0: entered promiscuous mode [ 615.636319][ T8468] hsr_slave_1: entered promiscuous mode [ 615.676704][ T8468] debugfs: 'hsr0' already exists in 'hsr' [ 615.676735][ T8468] Cannot create hsr debugfs directory [ 615.833747][ T10] usb 4-1: USB disconnect, device number 14 [ 615.920675][ T8705] udevd[8705]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 616.043340][ T8505] hsr_slave_0: entered promiscuous mode [ 616.044833][ T8505] hsr_slave_1: entered promiscuous mode [ 616.045864][ T8505] debugfs: 'hsr0' already exists in 'hsr' [ 616.045891][ T8505] Cannot create hsr debugfs directory [ 621.947944][ T8768] process 'syz.1.647' launched './file2' with NULL argv: empty string added [ 622.152789][ T8776] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.648'. [ 622.154076][ T6707] usb 4-1: new full-speed USB device number 15 using dummy_hcd [ 622.315979][ T6707] usb 4-1: config 0 has an invalid interface number: 84 but max is 0 [ 622.316010][ T6707] usb 4-1: config 0 has no interface number 0 [ 622.316044][ T6707] usb 4-1: config 0 interface 84 has no altsetting 0 [ 622.318644][ T6707] usb 4-1: New USB device found, idVendor=0565, idProduct=0003, bcdDevice=fb.88 [ 622.318670][ T6707] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 622.318686][ T6707] usb 4-1: Product: syz [ 622.318697][ T6707] usb 4-1: Manufacturer: syz [ 622.318709][ T6707] usb 4-1: SerialNumber: syz [ 622.377487][ T6707] usb 4-1: config 0 descriptor?? [ 622.628078][ T6707] kaweth 4-1:0.84: Firmware present in device. [ 622.821917][ T6707] kaweth 4-1:0.84: Statistics collection: 0 [ 622.821943][ T6707] kaweth 4-1:0.84: Multicast filter limit: 0 [ 622.821960][ T6707] kaweth 4-1:0.84: MTU: 0 [ 622.821975][ T6707] kaweth 4-1:0.84: Read MAC address 00:00:00:00:00:00 [ 623.425027][ T6707] kaweth 4-1:0.84: Error setting receive filter [ 623.425733][ T6707] kaweth 4-1:0.84: probe with driver kaweth failed with error -5 [ 623.462458][ T6707] usb 4-1: USB disconnect, device number 15 [ 624.755209][ T8814] bridge0: port 2(bridge_slave_1) entered disabled state [ 624.756938][ T8814] bridge0: port 1(bridge_slave_0) entered disabled state [ 625.267825][ T8814] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 625.283878][ T8814] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 626.268271][ T8818] bridge_slave_0: left allmulticast mode [ 626.268302][ T8818] bridge_slave_0: left promiscuous mode [ 626.268560][ T8818] bridge0: port 1(bridge_slave_0) entered disabled state [ 626.333444][ T8818] bridge_slave_1: left allmulticast mode [ 626.333467][ T8818] bridge_slave_1: left promiscuous mode [ 626.333633][ T8818] bridge0: port 2(bridge_slave_1) entered disabled state [ 626.422680][ T8818] bond0: (slave bond_slave_0): Releasing backup interface [ 626.503791][ T8818] bond0: (slave bond_slave_1): Releasing backup interface [ 626.562730][ T8818] team0: Port device team_slave_0 removed [ 626.583007][ T8818] team0: Port device team_slave_1 removed [ 626.583471][ T8818] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 626.635047][ T8818] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 626.653060][ T8818] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 626.657039][ T8820] team0: Mode changed to "activebackup" [ 626.657974][ T8822] vlan0: entered promiscuous mode [ 626.694702][ T6180] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 626.779840][ T8831] netlink: zone id is out of range [ 626.779856][ T8831] netlink: zone id is out of range [ 626.779865][ T8831] netlink: zone id is out of range [ 626.779873][ T8831] netlink: zone id is out of range [ 626.779882][ T8831] netlink: zone id is out of range [ 626.779890][ T8831] netlink: zone id is out of range [ 626.779898][ T8831] netlink: zone id is out of range [ 626.779906][ T8831] netlink: zone id is out of range [ 626.779914][ T8831] netlink: zone id is out of range [ 626.837856][ T6180] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 626.868751][ T6180] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 626.932075][ T6102] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 627.167618][ T3487] bridge_slave_1: left allmulticast mode [ 627.167651][ T3487] bridge_slave_1: left promiscuous mode [ 627.167974][ T3487] bridge0: port 2(bridge_slave_1) entered disabled state [ 627.214080][ T3487] bridge_slave_0: left allmulticast mode [ 627.214103][ T3487] bridge_slave_0: left promiscuous mode [ 627.214300][ T3487] bridge0: port 1(bridge_slave_0) entered disabled state [ 627.288517][ T3487] bridge_slave_1: left allmulticast mode [ 627.288549][ T3487] bridge_slave_1: left promiscuous mode [ 627.288792][ T3487] bridge0: port 2(bridge_slave_1) entered disabled state [ 627.353575][ T3487] bridge_slave_0: left allmulticast mode [ 627.353605][ T3487] bridge_slave_0: left promiscuous mode [ 627.353885][ T3487] bridge0: port 1(bridge_slave_0) entered disabled state [ 627.440170][ T3487] bridge_slave_1: left allmulticast mode [ 627.440202][ T3487] bridge_slave_1: left promiscuous mode [ 627.440456][ T3487] bridge0: port 2(bridge_slave_1) entered disabled state [ 627.493612][ T3487] bridge_slave_0: left allmulticast mode [ 627.493644][ T3487] bridge_slave_0: left promiscuous mode [ 627.493928][ T3487] bridge0: port 1(bridge_slave_0) entered disabled state [ 627.909548][ T3487] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 628.012594][ T3487] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 628.074873][ T3487] bond0 (unregistering): Released all slaves [ 628.323724][ T3487] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 628.412963][ T3487] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 628.478626][ T3487] bond0 (unregistering): Released all slaves [ 628.703564][ T3487] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 628.803825][ T3487] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 628.865780][ T3487] bond0 (unregistering): Released all slaves [ 628.935052][ T8851] bridge_slave_0: left allmulticast mode [ 628.935076][ T8851] bridge_slave_0: left promiscuous mode [ 628.935281][ T8851] bridge0: port 1(bridge_slave_0) entered disabled state [ 629.075415][ T8851] bridge_slave_1: left allmulticast mode [ 629.075439][ T8851] bridge_slave_1: left promiscuous mode [ 629.075612][ T8851] bridge0: port 2(bridge_slave_1) entered disabled state [ 629.225781][ T8851] bond0: (slave bond_slave_0): Releasing backup interface [ 629.323539][ T8851] bond0: (slave bond_slave_1): Releasing backup interface [ 629.414654][ T8851] team0: Port device team_slave_0 removed [ 629.457818][ T8851] team0: Port device team_slave_1 removed [ 629.458820][ T8851] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 629.458838][ T8851] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 629.515918][ T8851] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 629.516057][ T8851] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 629.586445][ T8853] vxcan1: entered promiscuous mode [ 629.597274][ T8853] team0: Port device vxcan1 added [ 629.938361][ T3487] hsr_slave_0: left promiscuous mode [ 629.966403][ T5115] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 629.977231][ T5115] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 629.981054][ T5115] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 630.024423][ T5115] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 630.028602][ T5115] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 630.047384][ T3487] hsr_slave_1: left promiscuous mode [ 630.049200][ T3487] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 630.131560][ T3487] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 630.149205][ T61] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 630.159599][ T61] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 630.177450][ T61] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 630.179328][ T61] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 630.180579][ T61] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 630.320526][ T3487] hsr_slave_0: left promiscuous mode [ 630.355878][ T3487] hsr_slave_1: left promiscuous mode [ 630.357511][ T3487] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 630.383474][ T3487] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 630.871920][ T5808] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 631.003034][ T3487] hsr_slave_0: left promiscuous mode [ 631.047165][ T3487] hsr_slave_1: left promiscuous mode [ 631.048143][ T5808] usb 2-1: too many configurations: 65, using maximum allowed: 8 [ 631.049046][ T3487] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 631.095228][ T5808] usb 2-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 631.095261][ T5808] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 631.136931][ T5808] uvcvideo 2-1:250.0: Found UVC 0.00 device (046d:08c1) [ 631.136973][ T5808] uvcvideo 2-1:250.0: No valid video chain found. [ 631.277023][ T3487] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 631.310679][ T6662] usb 2-1: USB disconnect, device number 6 [ 631.324724][ T8892] netlink: 'syz.3.683': attribute type 6 has an invalid length. [ 632.042966][ T3487] team0 (unregistering): Port device team_slave_1 removed [ 632.141935][ T5115] Bluetooth: hci2: command tx timeout [ 632.272753][ T3487] team0 (unregistering): Port device team_slave_0 removed [ 632.323635][ T5115] Bluetooth: hci6: command tx timeout [ 633.031980][ T5808] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 633.184770][ T5808] usb 2-1: config 16 has an invalid interface number: 235 but max is 0 [ 633.184799][ T5808] usb 2-1: config 16 has no interface number 0 [ 633.184856][ T5808] usb 2-1: config 16 interface 235 altsetting 2 endpoint 0x4 has invalid wMaxPacketSize 0 [ 633.184874][ T5808] usb 2-1: config 16 interface 235 has no altsetting 0 [ 633.187448][ T5808] usb 2-1: New USB device found, idVendor=04e6, idProduct=000b, bcdDevice= 1.00 [ 633.187469][ T5808] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 633.187485][ T5808] usb 2-1: Product: syz [ 633.187495][ T5808] usb 2-1: Manufacturer: syz [ 633.187506][ T5808] usb 2-1: SerialNumber: syz [ 633.283746][ T5808] usb-storage 2-1:16.235: USB Mass Storage device detected [ 633.339576][ T5808] usb-storage 2-1:16.235: Quirks match for vid 04e6 pid 000b: 4 [ 633.495541][ T5887] usb 2-1: USB disconnect, device number 7 [ 633.582723][ T3487] team0 (unregistering): Port device team_slave_1 removed [ 633.742723][ T3487] team0 (unregistering): Port device team_slave_0 removed [ 634.221941][ T5115] Bluetooth: hci2: command tx timeout [ 634.390337][ T5115] Bluetooth: hci6: command tx timeout [ 634.808575][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 634.808764][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 634.992482][ T3487] team0 (unregistering): Port device team_slave_1 removed [ 635.142635][ T3487] team0 (unregistering): Port device team_slave_0 removed [ 636.031803][ T6009] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 636.206876][ T8949] tipc: Started in network mode [ 636.206894][ T8949] tipc: Node identity 84e, cluster identity 4711 [ 636.206903][ T8949] tipc: Node number set to 2126 [ 636.224803][ T6009] usb 2-1: config 16 has an invalid interface number: 235 but max is 0 [ 636.224832][ T6009] usb 2-1: config 16 has no interface number 0 [ 636.224903][ T6009] usb 2-1: config 16 interface 235 altsetting 2 endpoint 0x4 has invalid wMaxPacketSize 0 [ 636.224928][ T6009] usb 2-1: config 16 interface 235 has no altsetting 0 [ 636.228259][ T6009] usb 2-1: New USB device found, idVendor=04e6, idProduct=000b, bcdDevice= 1.00 [ 636.228287][ T6009] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 636.228307][ T6009] usb 2-1: Product: syz [ 636.228322][ T6009] usb 2-1: Manufacturer: syz [ 636.228336][ T6009] usb 2-1: SerialNumber: syz [ 636.301810][ T5115] Bluetooth: hci2: command tx timeout [ 636.388055][ T6009] usb-storage 2-1:16.235: USB Mass Storage device detected [ 636.407566][ T6009] usb-storage 2-1:16.235: Quirks match for vid 04e6 pid 000b: 4 [ 636.466869][ T5115] Bluetooth: hci6: command tx timeout [ 636.576621][ T5887] usb 2-1: USB disconnect, device number 8 [ 636.771604][ T8470] netdevsim netdevsim6: probe with driver netdevsim failed with error -12 [ 637.353429][ T61] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 637.375833][ T61] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 637.377103][ T61] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 637.378416][ T61] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 637.428225][ T61] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 637.916832][ T8864] chnl_net:caif_netlink_parms(): no params data found [ 638.162009][ T8983] usb usb1: usbfs: process 8983 (syz.3.713) did not claim interface 0 before use [ 638.320734][ T8992] comedi comedi2: pcmmio: I/O port conflict (0x2f00,32) [ 638.320838][ T8989] comedi comedi2: pcmmio: I/O port conflict (0x2f00,32) [ 638.382414][ T61] Bluetooth: hci2: command tx timeout [ 638.543361][ T61] Bluetooth: hci6: command tx timeout [ 639.251930][ T6707] usb 2-1: new full-speed USB device number 9 using dummy_hcd [ 639.357437][ T9021] comedi comedi2: pcmmio: I/O port conflict (0x2f00,32) [ 639.410169][ T8869] chnl_net:caif_netlink_parms(): no params data found [ 639.413391][ T6707] usb 2-1: config 0 has an invalid interface number: 84 but max is 0 [ 639.413417][ T6707] usb 2-1: config 0 has no interface number 0 [ 639.413469][ T6707] usb 2-1: config 0 interface 84 has no altsetting 0 [ 639.431835][ T6707] usb 2-1: New USB device found, idVendor=0565, idProduct=0003, bcdDevice=fb.88 [ 639.431962][ T6707] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 639.431986][ T6707] usb 2-1: Product: syz [ 639.432000][ T6707] usb 2-1: Manufacturer: syz [ 639.432014][ T6707] usb 2-1: SerialNumber: syz [ 639.508195][ T6707] usb 2-1: config 0 descriptor?? [ 639.533280][ T9026] comedi comedi2: pcmmio: I/O port conflict (0x2f00,32) [ 639.667890][ T61] Bluetooth: hci7: command tx timeout [ 639.740305][ T6707] kaweth 2-1:0.84: Firmware present in device. [ 639.931330][ T6707] kaweth 2-1:0.84: Statistics collection: 0 [ 639.931355][ T6707] kaweth 2-1:0.84: Multicast filter limit: 0 [ 639.931371][ T6707] kaweth 2-1:0.84: MTU: 0 [ 639.931384][ T6707] kaweth 2-1:0.84: Read MAC address 00:00:00:00:00:00 [ 640.114574][ T8864] bridge0: port 1(bridge_slave_0) entered blocking state [ 640.114889][ T8864] bridge0: port 1(bridge_slave_0) entered disabled state [ 640.115259][ T8864] bridge_slave_0: entered allmulticast mode [ 640.147196][ T8864] bridge_slave_0: entered promiscuous mode [ 640.196250][ T8864] bridge0: port 2(bridge_slave_1) entered blocking state [ 640.196510][ T8864] bridge0: port 2(bridge_slave_1) entered disabled state [ 640.196860][ T8864] bridge_slave_1: entered allmulticast mode [ 640.201315][ T8864] bridge_slave_1: entered promiscuous mode [ 640.234613][ T9040] comedi comedi2: pcmmio: I/O port conflict (0x2f00,32) [ 640.347838][ T6707] kaweth 2-1:0.84: Error setting SOFS wait [ 640.348122][ T6707] kaweth 2-1:0.84: probe with driver kaweth failed with error -5 [ 640.421885][ T6707] usb 2-1: USB disconnect, device number 9 [ 640.716991][ T8864] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 641.063639][ T8864] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 642.150683][ T61] Bluetooth: hci7: command tx timeout [ 642.561913][ T9064] geneve2: entered promiscuous mode [ 642.561944][ T9064] geneve2: entered allmulticast mode [ 642.646568][ T8869] bridge0: port 1(bridge_slave_0) entered blocking state [ 642.646776][ T8869] bridge0: port 1(bridge_slave_0) entered disabled state [ 642.646987][ T8869] bridge_slave_0: entered allmulticast mode [ 642.649858][ T8869] bridge_slave_0: entered promiscuous mode [ 642.877395][ T9078] comedi comedi2: pcmmio: I/O port conflict (0x2f00,32) [ 642.970654][ T8869] bridge0: port 2(bridge_slave_1) entered blocking state [ 642.970957][ T8869] bridge0: port 2(bridge_slave_1) entered disabled state [ 642.971181][ T8869] bridge_slave_1: entered allmulticast mode [ 642.981895][ T8869] bridge_slave_1: entered promiscuous mode [ 642.998814][ T9083] syz.3.754 uses obsolete (PF_INET,SOCK_PACKET) [ 643.265003][ T9085] team0: Port device vxcan1 removed [ 643.280552][ T9085] net_ratelimit: 3 callbacks suppressed [ 643.280569][ T9085] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 643.295533][ T8864] team0: Port device team_slave_0 added [ 643.543165][ T8864] team0: Port device team_slave_1 added [ 643.615154][ T8869] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 643.732229][ T9099] comedi comedi2: pcmmio: I/O port conflict (0x2f00,32) [ 643.761901][ T6009] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 643.791399][ T8869] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 643.914171][ T6009] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 643.914201][ T6009] usb 2-1: config 1 has an invalid descriptor of length 48, skipping remainder of the config [ 643.914221][ T6009] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 643.914273][ T6009] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 48, changing to 9 [ 643.914300][ T6009] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8240, setting to 1024 [ 643.916612][ T6009] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 643.916640][ T6009] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 643.916661][ T6009] usb 2-1: Product: syz [ 643.916676][ T6009] usb 2-1: Manufacturer: syz [ 644.023765][ T6009] cdc_wdm 2-1:1.0: skipping garbage [ 644.023780][ T6009] cdc_wdm 2-1:1.0: skipping garbage [ 644.054288][ T6009] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 644.054335][ T6009] cdc_wdm 2-1:1.0: Unknown control protocol [ 644.054548][ T9103] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 644.176701][ T8864] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 644.176727][ T8864] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 644.176754][ T8864] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 644.225347][ T61] Bluetooth: hci7: command tx timeout [ 644.327087][ T8864] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 644.327104][ T8864] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 644.327132][ T8864] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 644.388973][ T8869] team0: Port device team_slave_0 added [ 644.409698][ T8967] chnl_net:caif_netlink_parms(): no params data found [ 644.427798][ T8869] team0: Port device team_slave_1 added [ 644.794653][ T9119] comedi comedi2: pcmmio: I/O port conflict (0x2f00,32) [ 644.821928][ T6009] usb 2-1: USB disconnect, device number 10 [ 645.192336][ T9123] vxcan1: entered promiscuous mode [ 645.195642][ T9123] team0: Port device vxcan1 added [ 645.196453][ T8869] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 645.196464][ T8869] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 645.196483][ T8869] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 645.284629][ T8864] hsr_slave_0: entered promiscuous mode [ 645.286128][ T8864] hsr_slave_1: entered promiscuous mode [ 645.287319][ T8864] debugfs: 'hsr0' already exists in 'hsr' [ 645.287345][ T8864] Cannot create hsr debugfs directory [ 645.288694][ T8869] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 645.288709][ T8869] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 645.288736][ T8869] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 645.347570][ T3487] bridge_slave_1: left allmulticast mode [ 645.347600][ T3487] bridge_slave_1: left promiscuous mode [ 645.347889][ T3487] bridge0: port 2(bridge_slave_1) entered disabled state [ 645.453871][ T3487] bridge_slave_0: left allmulticast mode [ 645.453903][ T3487] bridge_slave_0: left promiscuous mode [ 645.454177][ T3487] bridge0: port 1(bridge_slave_0) entered disabled state [ 645.499244][ T9133] netlink: 8 bytes leftover after parsing attributes in process `syz.3.775'. [ 645.499267][ T9133] netlink: 4 bytes leftover after parsing attributes in process `syz.3.775'. [ 645.554818][ T3487] bridge_slave_1: left allmulticast mode [ 645.554841][ T3487] bridge_slave_1: left promiscuous mode [ 645.555015][ T3487] bridge0: port 2(bridge_slave_1) entered disabled state [ 645.613064][ T3487] bridge_slave_0: left allmulticast mode [ 645.613086][ T3487] bridge_slave_0: left promiscuous mode [ 645.613275][ T3487] bridge0: port 1(bridge_slave_0) entered disabled state [ 645.675338][ T3487] bridge_slave_1: left allmulticast mode [ 645.675371][ T3487] bridge_slave_1: left promiscuous mode [ 645.675622][ T3487] bridge0: port 2(bridge_slave_1) entered disabled state [ 645.769469][ T3487] bridge_slave_0: left allmulticast mode [ 645.769499][ T3487] bridge_slave_0: left promiscuous mode [ 645.769779][ T3487] bridge0: port 1(bridge_slave_0) entered disabled state [ 646.257003][ T3487] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 646.301901][ T61] Bluetooth: hci7: command tx timeout [ 646.373095][ T3487] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 646.475584][ T3487] bond0 (unregistering): Released all slaves [ 646.692592][ T3487] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 646.782724][ T3487] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 646.844955][ T3487] bond0 (unregistering): Released all slaves [ 647.103710][ T3487] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 647.182926][ T3487] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 647.254635][ T3487] bond0 (unregistering): Released all slaves [ 647.346306][ T9130] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 648.077552][ T8967] bridge0: port 1(bridge_slave_0) entered blocking state [ 648.077696][ T8967] bridge0: port 1(bridge_slave_0) entered disabled state [ 648.077868][ T8967] bridge_slave_0: entered allmulticast mode [ 648.079857][ T8967] bridge_slave_0: entered promiscuous mode [ 648.251949][ T6009] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 648.274282][ T8967] bridge0: port 2(bridge_slave_1) entered blocking state [ 648.274446][ T8967] bridge0: port 2(bridge_slave_1) entered disabled state [ 648.274673][ T8967] bridge_slave_1: entered allmulticast mode [ 648.276957][ T8967] bridge_slave_1: entered promiscuous mode [ 648.313753][ T8869] hsr_slave_0: entered promiscuous mode [ 648.314937][ T8869] hsr_slave_1: entered promiscuous mode [ 648.315683][ T8869] debugfs: 'hsr0' already exists in 'hsr' [ 648.315701][ T8869] Cannot create hsr debugfs directory [ 648.401850][ T6009] usb 4-1: Using ep0 maxpacket: 32 [ 648.404841][ T6009] usb 4-1: unable to get BOS descriptor or descriptor too short [ 648.406170][ T6009] usb 4-1: config 13 has an invalid interface number: 75 but max is 0 [ 648.406195][ T6009] usb 4-1: config 13 has no interface number 0 [ 648.406230][ T6009] usb 4-1: config 13 interface 75 has no altsetting 0 [ 648.409078][ T6009] usb 4-1: New USB device found, idVendor=06cd, idProduct=0114, bcdDevice= d.c2 [ 648.409104][ T6009] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 648.409124][ T6009] usb 4-1: Product: syz [ 648.409135][ T6009] usb 4-1: Manufacturer: syz [ 648.409145][ T6009] usb 4-1: SerialNumber: syz [ 648.734504][ T6009] hub 4-1:13.75: bad descriptor, ignoring hub [ 648.734545][ T6009] hub 4-1:13.75: probe with driver hub failed with error -5 [ 648.736159][ T6009] keyspan 4-1:13.75: Keyspan - (without firmware) converter detected [ 648.739391][ T8967] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 648.795547][ T6009] usb 4-1: USB disconnect, device number 16 [ 648.796436][ T6009] keyspan 4-1:13.75: device disconnected [ 648.882214][ T3487] hsr_slave_0: left promiscuous mode [ 648.921945][ T3487] hsr_slave_1: left promiscuous mode [ 648.922833][ T3487] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 648.945175][ T3487] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 649.102451][ T3487] hsr_slave_0: left promiscuous mode [ 649.122066][ T3487] hsr_slave_1: left promiscuous mode [ 649.123192][ T3487] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 649.172913][ T3487] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 649.332076][ T3487] hsr_slave_0: left promiscuous mode [ 649.371989][ T3487] hsr_slave_1: left promiscuous mode [ 649.373741][ T3487] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 649.422970][ T3487] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 650.112860][ T3487] team0 (unregistering): Port device team_slave_1 removed [ 650.272832][ T3487] team0 (unregistering): Port device team_slave_0 removed [ 651.432661][ T3487] team0 (unregistering): Port device team_slave_1 removed [ 651.584777][ T3487] team0 (unregistering): Port device team_slave_0 removed [ 652.733296][ T3487] team0 (unregistering): Port device team_slave_1 removed [ 652.862995][ T3487] team0 (unregistering): Port device team_slave_0 removed [ 653.405476][ T8967] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 654.136805][ T8967] team0: Port device team_slave_0 added [ 654.171095][ T8967] team0: Port device team_slave_1 added [ 654.632900][ T8967] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 654.632914][ T8967] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 654.632934][ T8967] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 654.838655][ T8967] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 654.838672][ T8967] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 654.838700][ T8967] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 655.122717][ T9212] netlink: 20 bytes leftover after parsing attributes in process `syz.3.806'. [ 655.655209][ T8967] hsr_slave_0: entered promiscuous mode [ 655.656580][ T8967] hsr_slave_1: entered promiscuous mode [ 655.772029][ T9222] ubi0: attaching mtd0 [ 655.835272][ T9222] ubi0: scanning is finished [ 655.835295][ T9222] ubi0: empty MTD device detected [ 656.227602][ T8864] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 656.229460][ T9222] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 656.229485][ T9222] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3244 bytes [ 656.229503][ T9222] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 656.229519][ T9222] ubi0: VID header offset: 788 (aligned 788), data offset: 852 [ 656.229536][ T9222] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 656.229551][ T9222] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 18 [ 656.229569][ T9222] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 3005782290 [ 656.229590][ T9222] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 656.231175][ T9230] ubi0: background thread "ubi_bgt0d" started, PID 9230 [ 656.385230][ T9229] netlink: 20 bytes leftover after parsing attributes in process `syz.1.814'. [ 656.442102][ T8864] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 656.491109][ T8864] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 656.814230][ T8864] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 657.289814][ T9256] netlink: 'syz.3.823': attribute type 6 has an invalid length. [ 657.306471][ T9252] netlink: 20 bytes leftover after parsing attributes in process `syz.1.822'. [ 657.442596][ T8869] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 657.507380][ T9258] bridge0: port 1(syz_tun) entered blocking state [ 657.510563][ T9258] bridge0: port 1(syz_tun) entered disabled state [ 657.526462][ T9258] syz_tun: entered allmulticast mode [ 657.530039][ T9258] syz_tun: entered promiscuous mode [ 657.593219][ T8869] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 657.629105][ T8869] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 657.719728][ T8869] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 657.782242][ T9265] team0: Port device vxcan1 removed [ 658.006804][ T8967] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 658.056729][ T8967] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 658.088736][ T9281] netlink: 20 bytes leftover after parsing attributes in process `syz.1.832'. [ 658.088813][ T8967] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 658.172099][ T8967] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 658.458552][ T8864] 8021q: adding VLAN 0 to HW filter on device bond0 [ 658.598825][ T8869] 8021q: adding VLAN 0 to HW filter on device bond0 [ 658.617610][ T8864] 8021q: adding VLAN 0 to HW filter on device team0 [ 658.734175][ T3487] bridge0: port 1(bridge_slave_0) entered blocking state [ 658.734406][ T3487] bridge0: port 1(bridge_slave_0) entered forwarding state [ 658.798202][ T3487] bridge0: port 2(bridge_slave_1) entered blocking state [ 658.798340][ T3487] bridge0: port 2(bridge_slave_1) entered forwarding state [ 658.889077][ T8869] 8021q: adding VLAN 0 to HW filter on device team0 [ 658.923606][ T9310] netlink: 20 bytes leftover after parsing attributes in process `syz.3.841'. [ 658.950464][ T2852] bridge0: port 1(bridge_slave_0) entered blocking state [ 658.950623][ T2852] bridge0: port 1(bridge_slave_0) entered forwarding state [ 659.030853][ T2852] bridge0: port 2(bridge_slave_1) entered blocking state [ 659.031004][ T2852] bridge0: port 2(bridge_slave_1) entered forwarding state [ 659.251612][ T8967] 8021q: adding VLAN 0 to HW filter on device bond0 [ 659.434886][ T8967] 8021q: adding VLAN 0 to HW filter on device team0 [ 659.513587][ T6180] bridge0: port 1(bridge_slave_0) entered blocking state [ 659.518795][ T6180] bridge0: port 1(bridge_slave_0) entered forwarding state [ 659.584534][ T6180] bridge0: port 2(bridge_slave_1) entered blocking state [ 659.584688][ T6180] bridge0: port 2(bridge_slave_1) entered forwarding state [ 660.257271][ T8864] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 660.654815][ T8967] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 660.710049][ T8869] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 661.419584][ T8864] veth0_vlan: entered promiscuous mode [ 661.480567][ T8864] veth1_vlan: entered promiscuous mode [ 661.572286][ T8864] veth0_macvtap: entered promiscuous mode [ 661.608211][ T8864] veth1_macvtap: entered promiscuous mode [ 661.645127][ T8864] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 661.665922][ T8864] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 661.720412][ T12] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 661.738054][ T6011] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 661.741223][ T6011] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 661.773612][ T6011] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 662.230278][ T8967] veth0_vlan: entered promiscuous mode [ 662.275163][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 662.275185][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 662.332319][ T8869] veth0_vlan: entered promiscuous mode [ 662.347928][ T8967] veth1_vlan: entered promiscuous mode [ 662.441058][ T8869] veth1_vlan: entered promiscuous mode [ 662.459896][ T6180] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 662.459919][ T6180] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 662.667805][ T8967] veth0_macvtap: entered promiscuous mode [ 662.703544][ T8967] veth1_macvtap: entered promiscuous mode [ 662.707756][ T8869] veth0_macvtap: entered promiscuous mode [ 662.728580][ T8869] veth1_macvtap: entered promiscuous mode [ 662.769340][ T8967] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 662.844209][ T8967] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 662.848076][ T8869] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 662.870990][ T8869] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 662.884838][ T5970] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 662.944587][ T6269] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 662.957091][ T6269] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 662.978933][ T6269] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 663.000284][ T6269] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 663.016139][ T6269] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 663.048303][ T6269] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 663.219125][ T6269] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 663.855533][ T5970] usb 4-1: Using ep0 maxpacket: 32 [ 663.893734][ T5970] usb 4-1: unable to get BOS descriptor or descriptor too short [ 663.894556][ T5970] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 663.894580][ T5970] usb 4-1: can't read configurations, error -71 [ 663.970342][ T6269] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 664.495680][ T3524] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 664.495703][ T3524] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 664.841952][ T2852] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 664.841972][ T2852] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 664.913234][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 664.913257][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 664.999794][ T6186] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 664.999817][ T6186] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 665.423775][ T9481] netlink: 4 bytes leftover after parsing attributes in process `syz.6.432'. [ 666.827843][ T9518] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 666.849772][ T9518] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 666.935192][ T9521] netlink: 4 bytes leftover after parsing attributes in process `syz.3.911'. [ 667.437717][ T9536] syz_tun: entered allmulticast mode [ 667.879907][ T9553] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 668.297972][ T9567] bridge0: port 3(syz_tun) entered blocking state [ 668.298190][ T9567] bridge0: port 3(syz_tun) entered disabled state [ 668.301073][ T9567] syz_tun: entered promiscuous mode [ 668.318959][ T9567] bridge0: port 3(syz_tun) entered blocking state [ 668.319465][ T9567] bridge0: port 3(syz_tun) entered forwarding state [ 668.597908][ T9578] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 668.834253][ T9586] netlink: 8 bytes leftover after parsing attributes in process `syz.3.939'. [ 669.141489][ T9597] vxcan1: entered promiscuous mode [ 669.618544][ T9622] netlink: 8 bytes leftover after parsing attributes in process `syz.5.953'. [ 669.631890][ T5808] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 669.781850][ T5808] usb 8-1: Using ep0 maxpacket: 32 [ 669.786202][ T5808] usb 8-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 669.786231][ T5808] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 669.786245][ T5808] usb 8-1: Product: syz [ 669.786261][ T5808] usb 8-1: Manufacturer: syz [ 669.786271][ T5808] usb 8-1: SerialNumber: syz [ 669.790888][ T5808] usb 8-1: config 0 descriptor?? [ 669.890614][ T5808] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 670.609806][ T9653] 9pnet_virtio: no channels available for device /dev/md0 [ 670.731785][ T5999] usb 7-1: new full-speed USB device number 2 using dummy_hcd [ 670.767158][ T9657] netlink: 8 bytes leftover after parsing attributes in process `syz.3.966'. [ 670.821806][ T6662] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 670.885987][ T5999] usb 7-1: config 16 has an invalid interface number: 235 but max is 0 [ 670.886018][ T5999] usb 7-1: config 16 has no interface number 0 [ 670.886127][ T5999] usb 7-1: config 16 interface 235 has no altsetting 0 [ 670.947636][ T5999] usb 7-1: New USB device found, idVendor=04e6, idProduct=000b, bcdDevice= 1.00 [ 670.947659][ T5999] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 670.947673][ T5999] usb 7-1: Product: syz [ 670.947684][ T5999] usb 7-1: Manufacturer: syz [ 670.947694][ T5999] usb 7-1: SerialNumber: syz [ 670.991769][ T6662] usb 6-1: Using ep0 maxpacket: 32 [ 670.994390][ T6662] usb 6-1: config 0 has an invalid interface number: 132 but max is 0 [ 670.994418][ T6662] usb 6-1: config 0 has no interface number 0 [ 670.994466][ T6662] usb 6-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 670.998033][ T6662] usb 6-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 670.998064][ T6662] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 670.998085][ T6662] usb 6-1: Product: syz [ 670.998100][ T6662] usb 6-1: Manufacturer: syz [ 670.998116][ T6662] usb 6-1: SerialNumber: syz [ 671.077410][ T6662] usb 6-1: config 0 descriptor?? [ 671.090672][ T6662] em28xx 6-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 671.090711][ T6662] em28xx 6-1:0.132: Video interface 132 found: [ 671.186772][ T5999] usb-storage 7-1:16.235: USB Mass Storage device detected [ 671.330382][ T5999] usb-storage 7-1:16.235: Quirks match for vid 04e6 pid 000b: 4 [ 671.517332][ T6662] em28xx 6-1:0.132: unknown em28xx chip ID (0) [ 671.540962][ T5999] usb 7-1: USB disconnect, device number 2 [ 672.148441][ T9683] batman_adv: batadv0: Adding interface: dummy0 [ 672.148462][ T9683] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 672.148495][ T9683] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 672.348884][ T9685] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 672.711441][ T6662] em28xx 6-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 672.711498][ T6662] em28xx 6-1:0.132: board has no eeprom [ 672.791780][ T6662] em28xx 6-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 672.791812][ T6662] em28xx 6-1:0.132: analog set to bulk mode. [ 672.792394][ T5988] em28xx 6-1:0.132: Registering V4L2 extension [ 672.807021][ T9697] IPVS: sync thread started: state = BACKUP, mcast_ifn = wg2, syncid = 2, id = 0 [ 672.834125][ T9696] netlink: 8 bytes leftover after parsing attributes in process `syz.3.977'. [ 672.872279][ T6662] usb 6-1: USB disconnect, device number 2 [ 672.874993][ T6662] em28xx 6-1:0.132: Disconnecting em28xx [ 672.916442][ T5808] gspca_stk1135: reg_w 0x352 err -71 [ 672.917509][ T5808] gspca_stk1135: serial bus timeout: status=0x00 [ 672.917524][ T5808] gspca_stk1135: Sensor write failed [ 672.917557][ T5808] gspca_stk1135: serial bus timeout: status=0x00 [ 672.917568][ T5808] gspca_stk1135: Sensor write failed [ 672.917607][ T5808] gspca_stk1135: serial bus timeout: status=0x00 [ 672.917617][ T5808] gspca_stk1135: Sensor read failed [ 672.917653][ T5808] gspca_stk1135: serial bus timeout: status=0x00 [ 672.917662][ T5808] gspca_stk1135: Sensor read failed [ 672.917670][ T5808] gspca_stk1135: Detected sensor type unknown (0x0) [ 672.917708][ T5808] gspca_stk1135: serial bus timeout: status=0x00 [ 672.917718][ T5808] gspca_stk1135: Sensor read failed [ 672.917750][ T5808] gspca_stk1135: serial bus timeout: status=0x00 [ 672.917760][ T5808] gspca_stk1135: Sensor read failed [ 672.917793][ T5808] gspca_stk1135: serial bus timeout: status=0x00 [ 672.917803][ T5808] gspca_stk1135: Sensor write failed [ 672.917835][ T5808] gspca_stk1135: serial bus timeout: status=0x00 [ 672.917844][ T5808] gspca_stk1135: Sensor write failed [ 672.917947][ T5808] stk1135 8-1:0.0: probe with driver stk1135 failed with error -71 [ 673.097430][ T5808] usb 8-1: USB disconnect, device number 2 [ 673.582057][ T5988] em28xx 6-1:0.132: Config register raw data: 0xffffffed [ 673.582084][ T5988] em28xx 6-1:0.132: AC97 chip type couldn't be determined [ 673.582098][ T5988] em28xx 6-1:0.132: No AC97 audio processor [ 673.743702][ T5988] usb 6-1: Decoder not found [ 673.743725][ T5988] em28xx 6-1:0.132: failed to create media graph [ 673.743792][ T5988] em28xx 6-1:0.132: V4L2 device video103 deregistered [ 673.863879][ T5988] em28xx 6-1:0.132: Remote control support is not available for this card. [ 673.881975][ T6662] em28xx 6-1:0.132: Closing input extension [ 673.964990][ T6662] em28xx 6-1:0.132: Freeing device [ 675.835369][ T9799] IPVS: sync thread started: state = BACKUP, mcast_ifn = wg2, syncid = 2, id = 0 [ 676.103656][ T9810] netlink: 'syz.7.1015': attribute type 10 has an invalid length. [ 676.187379][ T9814] netlink: 'syz.7.1015': attribute type 10 has an invalid length. [ 676.764799][ T9806] vxcan1: left promiscuous mode [ 678.513056][ T9810] bridge0: port 3(syz_tun) entered disabled state [ 678.513335][ T9810] bridge0: port 2(bridge_slave_1) entered disabled state [ 678.515191][ T9810] bridge0: port 1(bridge_slave_0) entered disabled state [ 678.549685][ T9810] bridge0: port 3(syz_tun) entered blocking state [ 678.549859][ T9810] bridge0: port 3(syz_tun) entered forwarding state [ 678.550246][ T9810] bridge0: port 2(bridge_slave_1) entered blocking state [ 678.550425][ T9810] bridge0: port 2(bridge_slave_1) entered forwarding state [ 678.550955][ T9810] bridge0: port 1(bridge_slave_0) entered blocking state [ 678.551254][ T9810] bridge0: port 1(bridge_slave_0) entered forwarding state [ 678.616939][ T9810] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 678.685529][ T9814] 8021q: adding VLAN 0 to HW filter on device bond0 [ 678.701586][ T9814] team0: Port device bond0 added [ 678.714612][ T3487] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 678.716951][ T3487] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 678.717000][ T3487] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 678.717039][ T3487] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 679.263081][ T9884] netlink: 'syz.5.1048': attribute type 2 has an invalid length. [ 679.265190][ T9884] netlink: 'syz.5.1048': attribute type 2 has an invalid length. [ 679.423223][ T5887] IPVS: starting estimator thread 0... [ 679.484257][ T9900] vxcan1: left promiscuous mode [ 679.484686][ T9900] vlan0: left promiscuous mode [ 679.511823][ T9899] IPVS: using max 8 ests per chain, 19200 per kthread [ 680.290485][ T5887] IPVS: starting estimator thread 0... [ 680.337987][ T9931] batman_adv: batadv0: Adding interface: dummy0 [ 680.338006][ T9931] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 680.338038][ T9931] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 680.391977][ T9935] IPVS: using max 8 ests per chain, 19200 per kthread [ 681.365584][ T9981] netlink: 'syz.5.1086': attribute type 2 has an invalid length. [ 682.182324][T10012] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1098'. [ 682.934569][T10032] uprobe: syz.3.1106:10032 failed to unregister, leaking uprobe [ 683.064366][T10041] team0: No ports can be present during mode change [ 683.295732][T10047] No control pipe specified [ 684.286711][T10077] syz_tun: entered allmulticast mode [ 684.521736][ T805] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 684.711734][ T805] usb 6-1: Using ep0 maxpacket: 32 [ 684.744995][ T805] usb 6-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 684.745028][ T805] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 684.745049][ T805] usb 6-1: Product: syz [ 684.745065][ T805] usb 6-1: Manufacturer: syz [ 684.745080][ T805] usb 6-1: SerialNumber: syz [ 684.802449][ T805] usb 6-1: config 0 descriptor?? [ 684.836057][ T805] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 687.652969][ T805] gspca_stk1135: reg_w 0x351 err -71 [ 687.654021][ T805] gspca_stk1135: serial bus timeout: status=0x00 [ 687.654037][ T805] gspca_stk1135: Sensor write failed [ 687.654073][ T805] gspca_stk1135: serial bus timeout: status=0x00 [ 687.654083][ T805] gspca_stk1135: Sensor write failed [ 687.654121][ T805] gspca_stk1135: serial bus timeout: status=0x00 [ 687.654131][ T805] gspca_stk1135: Sensor read failed [ 687.654166][ T805] gspca_stk1135: serial bus timeout: status=0x00 [ 687.654177][ T805] gspca_stk1135: Sensor read failed [ 687.654185][ T805] gspca_stk1135: Detected sensor type unknown (0x0) [ 687.654225][ T805] gspca_stk1135: serial bus timeout: status=0x00 [ 687.654236][ T805] gspca_stk1135: Sensor read failed [ 687.654272][ T805] gspca_stk1135: serial bus timeout: status=0x00 [ 687.654282][ T805] gspca_stk1135: Sensor read failed [ 687.654317][ T805] gspca_stk1135: serial bus timeout: status=0x00 [ 687.654327][ T805] gspca_stk1135: Sensor write failed [ 687.654363][ T805] gspca_stk1135: serial bus timeout: status=0x00 [ 687.654373][ T805] gspca_stk1135: Sensor write failed [ 687.654464][ T805] stk1135 6-1:0.0: probe with driver stk1135 failed with error -71 [ 687.786644][ T805] usb 6-1: USB disconnect, device number 3 [ 689.471823][ T5887] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 689.631892][ T5887] usb 4-1: Using ep0 maxpacket: 32 [ 689.682639][ T5887] usb 4-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 689.682672][ T5887] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 689.682694][ T5887] usb 4-1: Product: syz [ 689.682710][ T5887] usb 4-1: Manufacturer: syz [ 689.682725][ T5887] usb 4-1: SerialNumber: syz [ 689.701105][ T5887] usb 4-1: config 0 descriptor?? [ 689.746002][ T5887] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 690.122954][T10219] overlay: filesystem on ./file0 not supported as upperdir [ 691.252199][T10235] 8021q: adding VLAN 0 to HW filter on device bond1 [ 692.193047][T10261] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1193'. [ 692.571792][ T5887] gspca_stk1135: reg_w 0x351 err -71 [ 692.572846][ T5887] gspca_stk1135: serial bus timeout: status=0x00 [ 692.572861][ T5887] gspca_stk1135: Sensor write failed [ 692.572896][ T5887] gspca_stk1135: serial bus timeout: status=0x00 [ 692.572907][ T5887] gspca_stk1135: Sensor write failed [ 692.572941][ T5887] gspca_stk1135: serial bus timeout: status=0x00 [ 692.572952][ T5887] gspca_stk1135: Sensor read failed [ 692.572985][ T5887] gspca_stk1135: serial bus timeout: status=0x00 [ 692.572996][ T5887] gspca_stk1135: Sensor read failed [ 692.573003][ T5887] gspca_stk1135: Detected sensor type unknown (0x0) [ 692.573042][ T5887] gspca_stk1135: serial bus timeout: status=0x00 [ 692.573052][ T5887] gspca_stk1135: Sensor read failed [ 692.573089][ T5887] gspca_stk1135: serial bus timeout: status=0x00 [ 692.573099][ T5887] gspca_stk1135: Sensor read failed [ 692.573135][ T5887] gspca_stk1135: serial bus timeout: status=0x00 [ 692.573146][ T5887] gspca_stk1135: Sensor write failed [ 692.573181][ T5887] gspca_stk1135: serial bus timeout: status=0x00 [ 692.573192][ T5887] gspca_stk1135: Sensor write failed [ 692.573282][ T5887] stk1135 4-1:0.0: probe with driver stk1135 failed with error -71 [ 692.588938][ T5887] usb 4-1: USB disconnect, device number 19 [ 693.866477][T10028] Set syz1 is full, maxelem 65536 reached [ 694.402784][T10327] siw: device registration error -23 [ 694.805618][ T6313] usb 2-1: new low-speed USB device number 11 using dummy_hcd [ 694.955056][ T6313] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 694.955122][ T6313] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 694.955152][ T6313] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 694.955177][ T6313] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 694.955203][ T6313] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 694.958117][ T6313] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 694.958175][ T6313] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 694.958204][ T6313] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 694.958230][ T6313] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 694.958255][ T6313] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 695.042784][ T6313] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 695.042857][ T6313] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 695.042887][ T6313] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 695.042914][ T6313] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 695.042942][ T6313] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 695.124896][ T6313] usb 2-1: string descriptor 0 read error: -22 [ 695.125044][ T6313] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 695.125073][ T6313] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 695.201431][ T6313] adutux 2-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 695.504222][ T805] usb 2-1: USB disconnect, device number 11 [ 695.919599][T10368] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 695.976800][T10362] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 695.979578][T10362] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 696.124987][ T6269] ------------[ cut here ]------------ [ 696.125012][ T6269] WARNING: net/wireless/scan.c:1194 at cfg80211_scan_done+0x2d5/0x460, CPU#1: kworker/u8:29/6269 [ 696.125069][ T6269] Modules linked in: [ 696.125091][ T6269] CPU: 1 UID: 0 PID: 6269 Comm: kworker/u8:29 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 696.125115][ T6269] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 696.125129][ T6269] Workqueue: events_unbound cfg80211_wiphy_work [ 696.125160][ T6269] RIP: 0010:cfg80211_scan_done+0x2d5/0x460 [ 696.125201][ T6269] Code: 75 7b 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 7a 8a 9c f7 90 0f 0b 90 e9 25 fe ff ff e8 6c 8a 9c f7 90 <0f> 0b 90 e9 db fe ff ff e8 5e 8a 9c f7 48 8d 3d f7 43 c7 04 67 48 [ 696.125220][ T6269] RSP: 0000:ffffc9000701f8e0 EFLAGS: 00010293 [ 696.125238][ T6269] RAX: ffffffff8a2321c4 RBX: ffff88803360be18 RCX: ffff888026768000 [ 696.125254][ T6269] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 696.125265][ T6269] RBP: ffffc9000701f9a8 R08: 0000000000000000 R09: 0000000000000000 [ 696.125287][ T6269] R10: dffffc0000000000 R11: fffffbfff1db66ef R12: ffff88803360be00 [ 696.125304][ T6269] R13: ffff88803360be78 R14: dffffc0000000000 R15: ffff888059880860 [ 696.125321][ T6269] FS: 0000000000000000(0000) GS:ffff888126def000(0000) knlGS:0000000000000000 [ 696.125339][ T6269] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 696.125353][ T6269] CR2: 000055558ca89808 CR3: 000000003762e000 CR4: 00000000003526f0 [ 696.125373][ T6269] Call Trace: [ 696.125381][ T6269] [ 696.125399][ T6269] ? __pfx_cfg80211_scan_done+0x10/0x10 [ 696.125447][ T6269] __ieee80211_scan_completed+0x550/0xb20 [ 696.125488][ T6269] cfg80211_wiphy_work+0x2ab/0x450 [ 696.125519][ T6269] ? process_scheduled_works+0x9ef/0x1770 [ 696.125548][ T6269] process_scheduled_works+0xad1/0x1770 [ 696.125605][ T6269] ? __pfx_process_scheduled_works+0x10/0x10 [ 696.125629][ T6269] ? do_raw_spin_lock+0x121/0x290 [ 696.125675][ T6269] worker_thread+0x8a0/0xda0 [ 696.125714][ T6269] ? __kthread_parkme+0x7b/0x200 [ 696.125753][ T6269] kthread+0x711/0x8a0 [ 696.125789][ T6269] ? __pfx_worker_thread+0x10/0x10 [ 696.125815][ T6269] ? __pfx_kthread+0x10/0x10 [ 696.125843][ T6269] ? rt_spin_unlock+0x150/0x200 [ 696.125880][ T6269] ? rt_spin_unlock+0x161/0x200 [ 696.125908][ T6269] ? __pfx_kthread+0x10/0x10 [ 696.125942][ T6269] ret_from_fork+0x510/0xa50 [ 696.125982][ T6269] ? __pfx_ret_from_fork+0x10/0x10 [ 696.126006][ T6269] ? __switch_to+0xc9e/0x1480 [ 696.126045][ T6269] ? __pfx_kthread+0x10/0x10 [ 696.126078][ T6269] ret_from_fork_asm+0x1a/0x30 [ 696.126133][ T6269] [ 696.126155][ T6269] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 696.126172][ T6269] CPU: 1 UID: 0 PID: 6269 Comm: kworker/u8:29 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 696.126196][ T6269] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 696.126210][ T6269] Workqueue: events_unbound cfg80211_wiphy_work [ 696.126238][ T6269] Call Trace: [ 696.126247][ T6269] [ 696.126257][ T6269] vpanic+0x1e0/0x670 [ 696.126293][ T6269] panic+0xb9/0xc0 [ 696.126323][ T6269] ? __pfx_panic+0x10/0x10 [ 696.126363][ T6269] ? ret_from_fork_asm+0x1a/0x30 [ 696.126402][ T6269] __warn+0x317/0x4b0 [ 696.126430][ T6269] ? cfg80211_scan_done+0x2d5/0x460 [ 696.126466][ T6269] ? cfg80211_scan_done+0x2d5/0x460 [ 696.126500][ T6269] __report_bug+0x288/0x500 [ 696.126536][ T6269] ? cfg80211_scan_done+0x2d5/0x460 [ 696.126577][ T6269] ? __pfx___report_bug+0x10/0x10 [ 696.126615][ T6269] ? __lock_acquire+0x6b6/0x2cf0 [ 696.126658][ T6269] ? cfg80211_scan_done+0x2d5/0x460 [ 696.126692][ T6269] report_bug+0x16a/0x220 [ 696.126726][ T6269] ? cfg80211_scan_done+0x2d5/0x460 [ 696.126758][ T6269] ? cfg80211_scan_done+0x2d7/0x460 [ 696.126792][ T6269] handle_bug+0x98/0x200 [ 696.126819][ T6269] exc_invalid_op+0x1a/0x50 [ 696.126844][ T6269] asm_exc_invalid_op+0x1a/0x20 [ 696.126864][ T6269] RIP: 0010:cfg80211_scan_done+0x2d5/0x460 [ 696.126899][ T6269] Code: 75 7b 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 7a 8a 9c f7 90 0f 0b 90 e9 25 fe ff ff e8 6c 8a 9c f7 90 <0f> 0b 90 e9 db fe ff ff e8 5e 8a 9c f7 48 8d 3d f7 43 c7 04 67 48 [ 696.126918][ T6269] RSP: 0000:ffffc9000701f8e0 EFLAGS: 00010293 [ 696.126936][ T6269] RAX: ffffffff8a2321c4 RBX: ffff88803360be18 RCX: ffff888026768000 [ 696.126952][ T6269] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 696.126973][ T6269] RBP: ffffc9000701f9a8 R08: 0000000000000000 R09: 0000000000000000 [ 696.126986][ T6269] R10: dffffc0000000000 R11: fffffbfff1db66ef R12: ffff88803360be00 [ 696.126999][ T6269] R13: ffff88803360be78 R14: dffffc0000000000 R15: ffff888059880860 [ 696.127021][ T6269] ? cfg80211_scan_done+0x2d4/0x460 [ 696.127064][ T6269] ? __pfx_cfg80211_scan_done+0x10/0x10 [ 696.127104][ T6269] __ieee80211_scan_completed+0x550/0xb20 [ 696.127141][ T6269] cfg80211_wiphy_work+0x2ab/0x450 [ 696.127171][ T6269] ? process_scheduled_works+0x9ef/0x1770 [ 696.127200][ T6269] process_scheduled_works+0xad1/0x1770 [ 696.127258][ T6269] ? __pfx_process_scheduled_works+0x10/0x10 [ 696.127281][ T6269] ? do_raw_spin_lock+0x121/0x290 [ 696.127326][ T6269] worker_thread+0x8a0/0xda0 [ 696.127369][ T6269] ? __kthread_parkme+0x7b/0x200 [ 696.127407][ T6269] kthread+0x711/0x8a0 [ 696.127443][ T6269] ? __pfx_worker_thread+0x10/0x10 [ 696.127469][ T6269] ? __pfx_kthread+0x10/0x10 [ 696.127497][ T6269] ? rt_spin_unlock+0x150/0x200 [ 696.127532][ T6269] ? rt_spin_unlock+0x161/0x200 [ 696.127559][ T6269] ? __pfx_kthread+0x10/0x10 [ 696.127593][ T6269] ret_from_fork+0x510/0xa50 [ 696.127621][ T6269] ? __pfx_ret_from_fork+0x10/0x10 [ 696.127642][ T6269] ? __switch_to+0xc9e/0x1480 [ 696.127681][ T6269] ? __pfx_kthread+0x10/0x10 [ 696.127713][ T6269] ret_from_fork_asm+0x1a/0x30 [ 696.127765][ T6269] [ 696.128379][ T6269] Kernel Offset: disabled