last executing test programs: 6m12.057838178s ago: executing program 2 (id=3): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x1, 0x5, 0x2, 0x7, 0x0, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000200), &(0x7f0000000740), 0x76, r1}, 0x38) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f0000000300)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4b, 0x0, 0x0, 0x0, 0x4000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r2}, 0x10) 6m11.868387255s ago: executing program 2 (id=10): rt_sigprocmask(0x0, &(0x7f0000001480)={[0xffffffffffffffff]}, 0x0, 0x8) r0 = getpgrp(0x0) r1 = gettid() rt_tgsigqueueinfo(r0, r1, 0x7, &(0x7f00000000c0)={0x3a, 0x8000006, 0x4}) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0xfffffffffffffff7]}, 0x8, 0x80000) read$FUSE(r2, &(0x7f0000002bc0)={0x2020}, 0x2020) 6m11.801006795s ago: executing program 2 (id=11): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) chroot(&(0x7f0000000000)='./file0/../file0\x00') mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) syz_clone(0x0, 0x0, 0x9, 0x0, 0x0, 0x0) pivot_root(&(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0)='./file0\x00') 6m11.369319186s ago: executing program 2 (id=14): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) recvmmsg(0xffffffffffffffff, &(0x7f0000006740)=[{{0x0, 0x0, &(0x7f0000005000)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000006540)=""/124, 0x7c}], 0x6}, 0x6}], 0x1, 0x0, 0x0) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1}, 0x18) connect$can_j1939(r0, &(0x7f0000000140)={0x1d, r1, 0x0, {0x1, 0xff, 0xa8fe8ad4eea2351f}, 0x2}, 0x18) sendmmsg(r0, &(0x7f0000003e40), 0x3fffffffffffe3d, 0xf5) 5m56.184469825s ago: executing program 32 (id=14): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) recvmmsg(0xffffffffffffffff, &(0x7f0000006740)=[{{0x0, 0x0, &(0x7f0000005000)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000006540)=""/124, 0x7c}], 0x6}, 0x6}], 0x1, 0x0, 0x0) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1}, 0x18) connect$can_j1939(r0, &(0x7f0000000140)={0x1d, r1, 0x0, {0x1, 0xff, 0xa8fe8ad4eea2351f}, 0x2}, 0x18) sendmmsg(r0, &(0x7f0000003e40), 0x3fffffffffffe3d, 0xf5) 5m50.217625509s ago: executing program 1 (id=129): openat$ptp0(0xffffffffffffff9c, &(0x7f0000000080), 0x1e1983, 0x0) r0 = creat(&(0x7f0000000100)='./file0\x00', 0x7a) write$binfmt_elf32(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="7f454c46000000000000000000000000030006000000000000000000380000000000000000191bda0000200001000000000280000000000003"], 0x69) close(r0) r1 = inotify_init1(0x0) inotify_add_watch(r1, &(0x7f0000000140)='./file0\x00', 0x4000205) execve(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) 5m50.019404795s ago: executing program 1 (id=132): r0 = mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) readv(r1, &(0x7f00000005c0)=[{&(0x7f0000000000)=""/109, 0x6d}], 0x1) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000240)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x1}) syz_memcpy_off$KVM_EXIT_MMIO(r0, 0x20, &(0x7f0000000100)="64be365de974de7ab149b947a8218d12625b0c29c0496e90", 0x0, 0x18) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000ffb000/0x1000)=nil, 0x1000}}) 5m49.790494973s ago: executing program 1 (id=135): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = dup(r2) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r3, 0x4068aea3, &(0x7f0000001980)={0xbe, 0x0, 0x80001}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000568000/0x18000)=nil, &(0x7f0000000300)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000080000034d564b"]) 5m49.533050555s ago: executing program 1 (id=136): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000300)='./file0/../file0\x00', &(0x7f0000000180)='./file0/file0\x00', 0x0, 0xa9501a, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000100)='./file0/../file0\x00', 0x0, 0x181097, 0x0) umount2(&(0x7f0000000140)='./file0\x00', 0x2) 5m49.308858526s ago: executing program 1 (id=137): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x1) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x8) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$binfmt_elf64(r0, &(0x7f0000002600)=ANY=[], 0x1820) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=[0x7, 0x5], &(0x7f0000000240), 0x0, 0x12}}, 0x40) 5m48.095870351s ago: executing program 1 (id=144): r0 = syz_clone(0x1000000, 0x0, 0xfffffd11, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') fchdir(r1) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r2 = syz_open_procfs(r0, &(0x7f0000000040)='stat\x00') pread64(r2, &(0x7f00000000c0)=""/22, 0x16, 0x6) 5m47.752381599s ago: executing program 33 (id=144): r0 = syz_clone(0x1000000, 0x0, 0xfffffd11, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') fchdir(r1) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r2 = syz_open_procfs(r0, &(0x7f0000000040)='stat\x00') pread64(r2, &(0x7f00000000c0)=""/22, 0x16, 0x6) 4m37.076235881s ago: executing program 3 (id=529): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'team_slave_1\x00'}) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) r4 = syz_genetlink_get_family_id$team(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x58, r4, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xaa69}}}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4005}, 0x40000) 4m36.988080613s ago: executing program 3 (id=530): pipe(&(0x7f0000000380)) r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_IO(r0, 0x2285, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) write$sndseq(r1, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}], 0x38) write$sndseq(r1, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"448cc880fe353ca0f2c2e953"}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0xc4) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0xb, 0x6, 0xff}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x3, 0x10007f, 0x20000006, 0x4d, 0x6, 0x3, 0x9, 0x2, 0xffff2d34, 0xffffff01, 0x6, 0x3, 0xfffffffc, 0x5, 0x4, 0x2, 0x7, 0x3c5b, 0x80000001, 0x24, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x3, 0x8, 0x4c74, 0x80000000, 0x0, 0x3, 0xe, 0x8, 0x8000806e, 0x7, 0x17, 0x1, 0x7, 0x200, 0x3e, 0x8c, 0x6, 0x6, 0x0, 0x5, 0x4, 0x8, 0x400, 0x80, 0x1, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432e6, 0xc8, 0xf9, 0xa, 0x8, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x1, 0x9, 0x8, 0x9, 0x6, 0x47, 0x8020, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x7, 0x3, 0x3, 0xbc45, 0x48c93690, 0x43, 0x103], [0x7, 0xa, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xf, 0x4, 0x6, 0x5, 0x0, 0x6, 0x5, 0x1, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x2, 0x6d03, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0xac8, 0xc2, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0x1000000a, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x80000000, 0xb, 0x5, 0x93a, 0x6, 0x1000006, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x4, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0x10000, 0x8000007f, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x96, 0xffffffff, 0x80000000, 0x0, 0x4, 0xc8, 0x1, 0xfffff000, 0x10080, 0x3, 0x7e, 0x100, 0x1000, 0x7, 0xae, 0x8, 0x6, 0x226, 0x5, 0x5, 0x1, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 4m36.347543439s ago: executing program 3 (id=532): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x2a, 0x2, 0x0) getsockname$packet(r1, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000600)=@newtfilter={0x88, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0xfffa}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x58, 0x2, [@TCA_FLOWER_ACT={0x54, 0x3, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1, 0x8, 0x7, 0xfc, 0x3}, 0xb}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x88}}, 0x24000000) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 4m36.204115519s ago: executing program 3 (id=534): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000300)='./file0/../file0\x00', &(0x7f0000000180)='./file0/file0\x00', 0x0, 0xa9501a, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x181097, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='tmpfs\x00', 0x0, 0x0) 4m36.043671867s ago: executing program 3 (id=536): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "87ee8ac6c46dad33", "2607080d7f4fcf00fd4ef2dece6c7c58", '\x00', '#\x00'}, 0x28) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "000037d7009400", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "e9be1eae", "bb10000000000001"}, 0x28) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0x0) 4m35.29644185s ago: executing program 3 (id=544): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, 0x0, 0x4000000) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000000)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2e}, @printk={@p, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x17}}]}, &(0x7f0000000080)='GPL\x00'}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f00000292c0)=""/102400, 0x19000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={r1, 0x0, 0xe, 0x0, &(0x7f00000000c0)="e0b9545dd30a3731677b2d0bfa91", 0x0, 0x27cb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 4m34.94081291s ago: executing program 34 (id=544): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, 0x0, 0x4000000) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000000)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2e}, @printk={@p, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x17}}]}, &(0x7f0000000080)='GPL\x00'}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f00000292c0)=""/102400, 0x19000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={r1, 0x0, 0xe, 0x0, &(0x7f00000000c0)="e0b9545dd30a3731677b2d0bfa91", 0x0, 0x27cb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 28.57643361s ago: executing program 6 (id=1508): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$netrom_NETROM_IDLE(0xffffffffffffffff, 0x103, 0x7, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)={0x38, 0x1403, 0x1, 0x70bd2d, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x408d4}, 0x800) 22.629494605s ago: executing program 6 (id=1515): pipe(&(0x7f0000000040)) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x161b01, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000580)=@allocspi={0xf8, 0x16, 0x1, 0x0, 0x0, {{{@in=@empty, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x32}, @in=@broadcast, {}, {}, {0x0, 0x0, 0xfffffffe}, 0x70bd26, 0x0, 0x2}}}, 0xf8}, 0x1, 0x0, 0x0, 0x840}, 0x0) 21.729161419s ago: executing program 5 (id=1518): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$rds(0x15, 0x5, 0x0) bind$rds(r4, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r4, &(0x7f0000000000)={&(0x7f0000000040)={0x2, 0x4e24, @local}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@rdma_args={0x48, 0x114, 0x1, {{0x3, 0x3}, {0x0, 0x1a000}, &(0x7f0000000440)=[{&(0x7f0000000a00)=""/4096, 0x1000}], 0x1, 0x60, 0x4}}], 0x48, 0x8004}, 0x0) 20.248482099s ago: executing program 5 (id=1519): r0 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x4, 0x80100008b}, 0x0) mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x10000, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './bus'}}], [], 0x2c}) chdir(&(0x7f0000000080)='./file0\x00') add_key$keyring(0x0, &(0x7f0000000780)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x2a82) utime(&(0x7f0000000240)='./bus\x00', &(0x7f0000000340)={0x1, 0x100}) 20.23918213s ago: executing program 4 (id=1520): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000001c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, 0x0, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x2d) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet_tcp_int(r4, 0x6, 0x14, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r4, 0x6, 0x15, &(0x7f00000002c0)=0x79f, 0x4) 18.870399273s ago: executing program 4 (id=1521): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x18) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffc000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) sched_setscheduler(0x0, 0x1, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x400, 0x0) ioctl$PPPIOCSPASS(r3, 0x40107447, 0x0) 18.792513636s ago: executing program 6 (id=1522): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r3, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) r4 = socket$packet(0x11, 0x3, 0x300) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendto$packet(r4, &(0x7f0000000080)="a99c383d33c9c607b1b9d49688a883", 0xf, 0x0, &(0x7f0000000000)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @link_local}, 0x14) recvmmsg(r3, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x10022, 0x0) 18.792208765s ago: executing program 0 (id=1523): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r4 = accept$alg(r3, 0x0, 0x0) write$binfmt_script(r4, &(0x7f0000000600), 0xfec8) recvmmsg(r4, &(0x7f00000008c0)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000140)=""/9, 0x9}, {&(0x7f0000000300)=""/225, 0xe1}], 0x2, 0x0, 0x0, 0x2000000}}], 0x1, 0xcb, 0x0) 18.605339693s ago: executing program 5 (id=1524): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x102, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xffffffed, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r4, {0x0, 0xd}, {0xb, 0xb}, {0xa, 0xb}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x9}, @TCA_FQ_CE_THRESHOLD={0x8, 0xc, 0x9}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x2001c061}, 0x4008000) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r7, &(0x7f0000000140)="bad388a8", 0x5dc, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r6, 0x1, 0xd8, 0x6, @random="98c8ca7122df"}, 0x14) 16.057511039s ago: executing program 0 (id=1526): bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x1d) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000040)={'\x00', 0x199d, 0x0, 0x1, 0x0, 0x8, 0x0}) prlimit64(r0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a31000000001400078005001500070000000800124000000000050005000200000005000400000000000d000300686173683a6e6574"], 0x5c}}, 0x0) 16.055949363s ago: executing program 5 (id=1527): syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) openat$nvme_fabrics(0xffffffffffffff9c, 0x0, 0x1a1002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0) 14.062348537s ago: executing program 7 (id=1528): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x3}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x9, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x10) bpf$MAP_CREATE(0x300000000000000, &(0x7f0000000100)=@base={0x18, 0x4, 0x41, 0x0, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4002, 0x5}, 0x48) 13.960398157s ago: executing program 6 (id=1529): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x48) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000040)='sys_enter\x00', r2}, 0x18) getrandom(0x0, 0x0, 0x2) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000656000/0x3000)=nil, 0x3000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x0, 0x0, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r3 = syz_io_uring_setup(0xa4d, &(0x7f0000000480)={0x0, 0x0, 0x80, 0x1, 0x24f}, &(0x7f00000000c0)=0x0, &(0x7f0000000340)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2c, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x42, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, 0x0, {0x2}}) io_uring_enter(r3, 0x47bc, 0x2000, 0x0, 0x0, 0x0) 10.515317977s ago: executing program 0 (id=1530): pwritev(0xffffffffffffffff, 0x0, 0x0, 0xffffffff, 0x7fff) r0 = syz_clone(0x40010011, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, 0x0) r1 = syz_pidfd_open(r0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r1, 0xff06, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f0000000380), 0x98081, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) read(r2, &(0x7f0000000080)=""/1, 0x1) shutdown(r2, 0x1) write$cgroup_pid(r2, &(0x7f00000000c0), 0x12) r3 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x1, 0x0) r5 = openat$cgroup_subtree(r4, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000300)=ANY=[@ANYBLOB='-cpu'], 0x5) read$FUSE(r2, &(0x7f0000002680)={0x2020}, 0x2020) 10.358801084s ago: executing program 4 (id=1531): setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@bloom_filter={0x1e, 0x0, 0x8002, 0x7, 0x0, 0xffffffffffffffff, 0x6}, 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001740)={r0, 0x0, &(0x7f0000000340)=""/66}, 0x20) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r1, 0x0, 0xd}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000540)=0x4) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r3, &(0x7f0000000240)="d3aa4b6885", 0x5, 0x4008891, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x2}, 0x1c) shutdown(r3, 0x1) recvmmsg(r3, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}], 0x414, 0x0, 0x0) 10.328369439s ago: executing program 5 (id=1532): bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x3000c003}, 0x80) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={0x0, 0x54}}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000500), 0x42, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket(0x2, 0x80805, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000140)={0x1ff, 0x200, 0x8, 0x4e}, 0x10) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x8000, 0x0) mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='befs\x00', 0x0, 0x0) 10.156488335s ago: executing program 7 (id=1533): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x589b}, 0x50) r3 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) r4 = fsmount(r3, 0x0, 0x0) fchdir(r4) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) 10.096485979s ago: executing program 0 (id=1534): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(0xffffffffffffffff) r3 = io_uring_setup(0x2efe, &(0x7f0000000700)={0x0, 0xe8e5, 0x1000, 0x20001, 0x2d6}) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f0000000540)=[{0x0}], 0x1) r4 = io_uring_setup(0x7625, &(0x7f0000000380)={0x0, 0x653f, 0x0, 0x1, 0xd4, 0x0, r3}) io_uring_register$IORING_REGISTER_FILES(r4, 0x1e, &(0x7f0000000000)=[r3], 0x1) 8.426987646s ago: executing program 0 (id=1535): signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_io_uring_setup(0x23d, 0x0, &(0x7f0000000300), &(0x7f0000000640)) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) ioctl$UI_SET_ABSBIT(0xffffffffffffffff, 0x40045567, 0x0) ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0x401c5504, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = socket(0x11, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'gre0\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @remote}, 0x14) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000300)=0xe9, 0x4) sendmsg$netlink(r0, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000280)=ANY=[@ANYBLOB="3f011400e0dc14"], 0xdd12}], 0x1}, 0x20040051) 8.418722008s ago: executing program 7 (id=1536): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r4, 0x402c5342, &(0x7f00000000c0)={0x0, 0xf4240, 0x7}) 8.158505729s ago: executing program 6 (id=1537): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) sendto$inet6(r3, &(0x7f0000000080)="b1", 0x1, 0x400c0d4, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) write$UHID_SET_REPORT_REPLY(r3, 0x0, 0xffe0) 8.157701664s ago: executing program 5 (id=1538): socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x106, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x3, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYRES16, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32], 0x3c}}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=@base={0x6, 0x4, 0x1000, 0x85}, 0x50) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x60000}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x58}}, 0x0) 7.431753656s ago: executing program 4 (id=1539): r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) r5 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r5, &(0x7f0000000000)=[{&(0x7f00000001c0)="580000001500add427323b472545b45602117fffffff81000e224e217f000001925aa80020007b00090080007f000001e809000000ff0000f03ac71033000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) 7.076304434s ago: executing program 7 (id=1540): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e22, @empty}, 0x10) setsockopt$inet_sctp_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f0000000900)={0x0, 0x0, 0x2, 0x7, 0x1ffd, 0x2}, 0x14) listen(r3, 0x1ff) r4 = socket$inet_sctp(0x2, 0x5, 0x84) sendto$inet(r4, &(0x7f00000000c0)="ab", 0x1, 0xc1, &(0x7f0000000140)={0x2, 0x4e22, @loopback}, 0x10) 6.130694962s ago: executing program 0 (id=1541): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace$pokeuser(0x6, r3, 0x388, 0x41d9fda7) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x15, &(0x7f0000000700)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r4, &(0x7f0000006000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4048020}, 0x28000) 6.130216182s ago: executing program 4 (id=1542): ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d) r5 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r5, 0x0, 0x24008004) r6 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r6, &(0x7f0000000040), 0x0) 5.238001485s ago: executing program 7 (id=1543): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000080000000800000000"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x3, &(0x7f00000003c0)=@framed, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r3}, 0x18) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000240)={0x8, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108) 3.503212348s ago: executing program 4 (id=1544): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x2) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000100)={0x40000000, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)={0x2, 0x18, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@loopback, @in=@empty}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @private1}}]}, 0x78}}, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, &(0x7f00000000c0)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syslog(0x2, &(0x7f0000001940)=""/87, 0x57) timer_create(0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) io_uring_setup(0x3f1, 0x0) poll(0x0, 0x0, 0x6) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x8}) syz_open_dev$loop(0x0, 0xf01c, 0x0) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) 126.055487ms ago: executing program 7 (id=1545): mkdir(0x0, 0x1) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xff}}}, 0x6b) mount$overlay(0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r0, &(0x7f0000000100)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e22, 0x9, @loopback, 0x3}}, 0x24) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) dup(r1) syz_io_uring_setup(0x239, &(0x7f0000000080)={0x0, 0x0, 0x10100}, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x0, 0x0}) r2 = syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0x717e, 0x100, 0x14, 0x193}, &(0x7f0000000140)=0x0, &(0x7f0000000180)=0x0) syz_open_dev$dri(0x0, 0x40100001, 0x189002) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) syz_open_dev$vcsa(0x0, 0x2, 0x214000) io_uring_enter(r2, 0x3516, 0x0, 0x0, 0x0, 0x0) 0s ago: executing program 6 (id=1546): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d00)={0xe, 0x4, &(0x7f0000000180)=ANY=[], &(0x7f0000000000)='syzkaller\x00'}, 0x94) r7 = socket$inet6_icmp(0xa, 0x2, 0x3a) setsockopt$inet6_group_source_req(r7, 0x29, 0x2b, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r5, r6, 0x5}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r5}, &(0x7f00000006c0), &(0x7f0000000700)=r4}, 0x20) sendmsg$inet(r3, &(0x7f0000000980)={0x0, 0x0, 0x0}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.190' (ED25519) to the list of known hosts. [ 81.138334][ T5784] cgroup: Unknown subsys name 'net' [ 81.389116][ T5784] cgroup: Unknown subsys name 'cpuset' [ 81.484666][ T5784] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 83.295377][ T5784] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 86.076087][ T5803] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 86.077963][ T5801] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 86.083467][ T5803] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 86.085567][ T5801] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 86.088181][ T5801] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 86.088322][ T5803] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 86.089963][ T5801] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 86.091139][ T5801] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 86.096134][ T5801] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 86.111182][ T5801] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 86.115275][ T5801] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 86.119293][ T5801] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 86.120099][ T5801] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 86.122922][ T5801] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 86.123825][ T5801] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 86.228554][ T5801] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 86.232824][ T5801] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 86.237612][ T5801] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 86.250373][ T5801] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 86.251193][ T5801] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 86.296426][ T5801] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 86.299011][ T5801] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 86.304274][ T5801] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 86.330434][ T5801] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 86.332658][ T5801] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 86.848794][ T995] cfg80211: failed to load regulatory.db [ 87.112281][ T5805] chnl_net:caif_netlink_parms(): no params data found [ 87.182583][ T5796] chnl_net:caif_netlink_parms(): no params data found [ 87.190814][ T5797] chnl_net:caif_netlink_parms(): no params data found [ 87.350096][ T5810] chnl_net:caif_netlink_parms(): no params data found [ 87.738539][ T5809] chnl_net:caif_netlink_parms(): no params data found [ 88.117518][ T5804] Bluetooth: hci1: command tx timeout [ 88.118752][ T5805] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.118886][ T5805] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.119401][ T5805] bridge_slave_0: entered allmulticast mode [ 88.121126][ T5805] bridge_slave_0: entered promiscuous mode [ 88.194317][ T5801] Bluetooth: hci2: command tx timeout [ 88.195218][ T5804] Bluetooth: hci0: command tx timeout [ 88.355464][ T5804] Bluetooth: hci3: command tx timeout [ 88.434391][ T5804] Bluetooth: hci4: command tx timeout [ 88.475423][ T5805] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.475505][ T5805] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.475619][ T5805] bridge_slave_1: entered allmulticast mode [ 88.477119][ T5805] bridge_slave_1: entered promiscuous mode [ 88.478079][ T5796] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.478211][ T5796] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.478350][ T5796] bridge_slave_0: entered allmulticast mode [ 88.479943][ T5796] bridge_slave_0: entered promiscuous mode [ 88.483412][ T5797] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.483533][ T5797] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.483704][ T5797] bridge_slave_0: entered allmulticast mode [ 88.487832][ T5797] bridge_slave_0: entered promiscuous mode [ 88.646230][ T5797] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.646358][ T5797] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.646550][ T5797] bridge_slave_1: entered allmulticast mode [ 88.648097][ T5797] bridge_slave_1: entered promiscuous mode [ 88.659022][ T5796] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.659209][ T5796] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.659744][ T5796] bridge_slave_1: entered allmulticast mode [ 88.662372][ T5796] bridge_slave_1: entered promiscuous mode [ 88.665516][ T5810] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.665641][ T5810] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.666114][ T5810] bridge_slave_0: entered allmulticast mode [ 88.668798][ T5810] bridge_slave_0: entered promiscuous mode [ 88.885097][ T5810] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.885255][ T5810] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.885376][ T5810] bridge_slave_1: entered allmulticast mode [ 88.886895][ T5810] bridge_slave_1: entered promiscuous mode [ 88.891109][ T5805] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.187190][ T5805] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.190085][ T5797] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.248749][ T5796] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.577042][ T5797] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.577281][ T5809] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.577377][ T5809] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.577485][ T5809] bridge_slave_0: entered allmulticast mode [ 89.578983][ T5809] bridge_slave_0: entered promiscuous mode [ 89.582773][ T5796] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.587464][ T5810] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.735233][ T5809] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.735386][ T5809] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.735512][ T5809] bridge_slave_1: entered allmulticast mode [ 89.737007][ T5809] bridge_slave_1: entered promiscuous mode [ 89.797092][ T5810] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.799412][ T5805] team0: Port device team_slave_0 added [ 90.086517][ T5805] team0: Port device team_slave_1 added [ 90.089108][ T5797] team0: Port device team_slave_0 added [ 90.176934][ T5796] team0: Port device team_slave_0 added [ 90.194209][ T5804] Bluetooth: hci1: command tx timeout [ 90.274353][ T5804] Bluetooth: hci0: command tx timeout [ 90.274387][ T5804] Bluetooth: hci2: command tx timeout [ 90.297244][ T5797] team0: Port device team_slave_1 added [ 90.301575][ T5809] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.303426][ T5796] team0: Port device team_slave_1 added [ 90.306774][ T5810] team0: Port device team_slave_0 added [ 90.434345][ T5804] Bluetooth: hci3: command tx timeout [ 90.514348][ T5804] Bluetooth: hci4: command tx timeout [ 90.738645][ T5809] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.806496][ T5810] team0: Port device team_slave_1 added [ 90.807630][ T5805] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.807639][ T5805] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.807651][ T5805] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.115794][ T5805] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.115806][ T5805] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.115819][ T5805] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.116781][ T5797] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.116791][ T5797] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.116804][ T5797] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.203396][ T5796] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.203413][ T5796] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.203435][ T5796] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.292582][ T5797] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.292598][ T5797] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.292611][ T5797] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.295581][ T5809] team0: Port device team_slave_0 added [ 91.297876][ T5796] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.297889][ T5796] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.297912][ T5796] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.299461][ T5810] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.299472][ T5810] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.299495][ T5810] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.319421][ T5809] team0: Port device team_slave_1 added [ 91.331976][ T5810] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.331991][ T5810] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.332015][ T5810] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.785647][ T5809] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.785659][ T5809] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.785673][ T5809] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.883013][ T5805] hsr_slave_0: entered promiscuous mode [ 91.885565][ T5805] hsr_slave_1: entered promiscuous mode [ 91.965744][ T5809] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.965758][ T5809] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.965776][ T5809] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.117663][ T5797] hsr_slave_0: entered promiscuous mode [ 92.118484][ T5797] hsr_slave_1: entered promiscuous mode [ 92.119732][ T5797] debugfs: 'hsr0' already exists in 'hsr' [ 92.119812][ T5797] Cannot create hsr debugfs directory [ 92.126465][ T5796] hsr_slave_0: entered promiscuous mode [ 92.127710][ T5796] hsr_slave_1: entered promiscuous mode [ 92.128620][ T5796] debugfs: 'hsr0' already exists in 'hsr' [ 92.128641][ T5796] Cannot create hsr debugfs directory [ 92.274682][ T5804] Bluetooth: hci1: command tx timeout [ 92.299455][ T5810] hsr_slave_0: entered promiscuous mode [ 92.300267][ T5810] hsr_slave_1: entered promiscuous mode [ 92.300849][ T5810] debugfs: 'hsr0' already exists in 'hsr' [ 92.300868][ T5810] Cannot create hsr debugfs directory [ 92.354307][ T5801] Bluetooth: hci0: command tx timeout [ 92.354454][ T5804] Bluetooth: hci2: command tx timeout [ 92.514246][ T5804] Bluetooth: hci3: command tx timeout [ 92.594193][ T5804] Bluetooth: hci4: command tx timeout [ 93.060591][ T5809] hsr_slave_0: entered promiscuous mode [ 93.061455][ T5809] hsr_slave_1: entered promiscuous mode [ 93.062007][ T5809] debugfs: 'hsr0' already exists in 'hsr' [ 93.062026][ T5809] Cannot create hsr debugfs directory [ 94.198125][ T5805] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 94.222370][ T5805] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 94.260604][ T5805] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 94.309731][ T5805] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 94.354256][ T5804] Bluetooth: hci1: command tx timeout [ 94.419510][ T5796] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 94.434325][ T5804] Bluetooth: hci2: command tx timeout [ 94.434359][ T5804] Bluetooth: hci0: command tx timeout [ 94.470176][ T5796] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 94.491235][ T5796] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 94.542992][ T5796] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 94.595444][ T5801] Bluetooth: hci3: command tx timeout [ 94.655063][ T5797] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 94.674272][ T5801] Bluetooth: hci4: command tx timeout [ 94.703686][ T5797] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 94.744522][ T5797] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 94.794533][ T5797] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 94.939231][ T5810] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 94.981707][ T5810] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 95.008197][ T5810] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 95.057249][ T5810] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 95.201747][ T5805] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.202274][ T5809] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 95.247830][ T5809] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 95.281541][ T5809] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 95.325234][ T5809] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 95.399350][ T5805] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.430062][ T5796] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.448236][ T68] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.448737][ T68] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.488926][ T2854] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.489109][ T2854] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.539862][ T5796] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.576762][ T3681] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.576887][ T3681] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.582783][ T5797] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.619674][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.620057][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.690729][ T5797] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.693794][ T5810] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.742582][ T3681] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.742710][ T3681] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.799958][ T68] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.800100][ T68] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.838571][ T5810] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.891712][ T2854] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.891813][ T2854] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.920390][ T5809] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.956899][ T68] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.957042][ T68] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.038947][ T5809] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.087551][ T3681] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.087766][ T3681] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.149867][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.150018][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.227354][ T5805] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.448222][ T5796] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.590257][ T5805] veth0_vlan: entered promiscuous mode [ 96.662952][ T5805] veth1_vlan: entered promiscuous mode [ 96.759219][ T5810] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.787940][ T5797] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.870143][ T5805] veth0_macvtap: entered promiscuous mode [ 96.906782][ T5805] veth1_macvtap: entered promiscuous mode [ 96.971921][ T5809] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.022144][ T5805] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.057389][ T5805] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.058016][ T5810] veth0_vlan: entered promiscuous mode [ 97.078831][ T5797] veth0_vlan: entered promiscuous mode [ 97.110296][ T3681] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.120748][ T3681] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.132806][ T5810] veth1_vlan: entered promiscuous mode [ 97.133885][ T3681] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.153946][ T3681] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.159190][ T5797] veth1_vlan: entered promiscuous mode [ 97.366628][ T5796] veth0_vlan: entered promiscuous mode [ 97.369211][ T5809] veth0_vlan: entered promiscuous mode [ 97.438537][ T5796] veth1_vlan: entered promiscuous mode [ 97.455359][ T5809] veth1_vlan: entered promiscuous mode [ 97.458609][ T5810] veth0_macvtap: entered promiscuous mode [ 97.467026][ T5797] veth0_macvtap: entered promiscuous mode [ 97.487973][ T43] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.488001][ T43] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.500517][ T5810] veth1_macvtap: entered promiscuous mode [ 97.527140][ T5797] veth1_macvtap: entered promiscuous mode [ 97.592257][ T3681] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.592276][ T3681] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.615378][ T5810] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.633753][ T5797] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.653975][ T5810] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.690519][ T5796] veth0_macvtap: entered promiscuous mode [ 97.696287][ T5797] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.703466][ T5809] veth0_macvtap: entered promiscuous mode [ 97.713899][ T154] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.730328][ T154] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.747379][ T154] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.747968][ T5796] veth1_macvtap: entered promiscuous mode [ 97.764655][ T5809] veth1_macvtap: entered promiscuous mode [ 97.773062][ T154] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.779839][ T154] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.791130][ T154] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.828771][ T154] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.847575][ T154] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.980163][ T5796] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.981902][ T5809] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.103108][ T5796] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.108442][ T5809] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.219328][ T2854] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.222997][ T2854] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.239731][ T2854] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.239988][ T43] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.240003][ T43] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.264095][ T2854] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.290893][ T2854] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.312258][ T2854] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.368502][ T2854] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.413930][ T2854] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.422635][ T43] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.422655][ T43] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.588739][ T2854] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.588758][ T2854] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.812322][ T3933] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.812341][ T3933] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.035461][ T68] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.035487][ T68] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.203543][ T2854] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.203562][ T2854] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.361299][ T3933] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.361318][ T3933] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.527067][ T2854] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.527086][ T2854] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.953310][ T5947] loop7: detected capacity change from 0 to 16384 [ 101.235189][ T5950] loop7: detected capacity change from 16384 to 0 [ 101.292999][ C0] I/O error, dev loop7, sector 128 op 0x0:(READ) flags 0x80700 phys_seg 30 prio class 2 [ 103.386905][ T5967] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 106.104559][ T5987] netlink: 12 bytes leftover after parsing attributes in process `syz.1.29'. [ 106.708835][ T5995] netlink: 8 bytes leftover after parsing attributes in process `syz.4.31'. [ 107.437564][ T5801] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201' [ 107.437607][ T5801] CPU: 1 UID: 0 PID: 5801 Comm: kworker/u9:2 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 107.437640][ T5801] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 107.437652][ T5801] Workqueue: hci2 hci_rx_work [ 107.437692][ T5801] Call Trace: [ 107.437704][ T5801] [ 107.437712][ T5801] dump_stack_lvl+0x189/0x250 [ 107.437739][ T5801] ? __pfx_dump_stack_lvl+0x10/0x10 [ 107.437760][ T5801] ? __pfx__printk+0x10/0x10 [ 107.437788][ T5801] ? kernfs_path_from_node+0x2c/0x280 [ 107.437814][ T5801] ? kernfs_path_from_node+0x243/0x280 [ 107.437838][ T5801] ? kernfs_path_from_node+0x2c/0x280 [ 107.437868][ T5801] sysfs_create_dir_ns+0x259/0x280 [ 107.437894][ T5801] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 107.437920][ T5801] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 107.437948][ T5801] ? rt_spin_unlock+0x161/0x200 [ 107.437974][ T5801] kobject_add_internal+0x5a5/0xb50 [ 107.438006][ T5801] kobject_add+0x155/0x220 [ 107.438032][ T5801] ? __pfx_kobject_add+0x10/0x10 [ 107.438060][ T5801] ? get_device_parent+0x370/0x3a0 [ 107.438092][ T5801] device_add+0x408/0xb50 [ 107.438121][ T5801] hci_conn_add_sysfs+0xd5/0x1e0 [ 107.438146][ T5801] le_conn_complete_evt+0xf39/0x1500 [ 107.438190][ T5801] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 107.438220][ T5801] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 107.438250][ T5801] ? lockdep_hardirqs_on+0x9c/0x150 [ 107.438279][ T5801] ? skb_pull_data+0xfb/0x200 [ 107.438303][ T5801] hci_le_conn_complete_evt+0x187/0x450 [ 107.438340][ T5801] hci_event_packet+0x78f/0x1200 [ 107.438369][ T5801] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 107.438401][ T5801] ? __pfx_hci_event_packet+0x10/0x10 [ 107.438437][ T5801] ? hci_send_to_monitor+0xe2/0x570 [ 107.438471][ T5801] hci_rx_work+0x46a/0xe80 [ 107.438504][ T5801] ? process_scheduled_works+0x9ef/0x17b0 [ 107.438537][ T5801] process_scheduled_works+0xae1/0x17b0 [ 107.438599][ T5801] ? __pfx_process_scheduled_works+0x10/0x10 [ 107.438657][ T5801] worker_thread+0x8a0/0xda0 [ 107.438698][ T5801] kthread+0x711/0x8a0 [ 107.438724][ T5801] ? __pfx_worker_thread+0x10/0x10 [ 107.438742][ T5801] ? __pfx_kthread+0x10/0x10 [ 107.438761][ T5801] ? rt_spin_unlock+0x150/0x200 [ 107.438790][ T5801] ? rt_spin_unlock+0x161/0x200 [ 107.438813][ T5801] ? __pfx_kthread+0x10/0x10 [ 107.438833][ T5801] ret_from_fork+0x4bc/0x870 [ 107.438863][ T5801] ? __pfx_ret_from_fork+0x10/0x10 [ 107.438901][ T5801] ? __switch_to_asm+0x39/0x70 [ 107.438927][ T5801] ? __switch_to_asm+0x33/0x70 [ 107.438950][ T5801] ? __pfx_kthread+0x10/0x10 [ 107.438976][ T5801] ret_from_fork_asm+0x1a/0x30 [ 107.439021][ T5801] [ 107.439057][ T5801] kobject: kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 107.439099][ T5801] Bluetooth: hci2: failed to register connection device [ 107.457529][ T5786] libceph: connect (1)[c::]:6789 error -101 [ 107.458142][ T5786] libceph: mon0 (1)[c::]:6789 connect error [ 107.465416][ T5786] libceph: connect (1)[c::]:6789 error -101 [ 107.465636][ T5786] libceph: mon0 (1)[c::]:6789 connect error [ 107.548692][ T5786] libceph: connect (1)[c::]:6789 error -101 [ 107.548905][ T5786] libceph: mon0 (1)[c::]:6789 connect error [ 107.553493][ T5786] libceph: connect (1)[c::]:6789 error -101 [ 107.553705][ T5786] libceph: mon0 (1)[c::]:6789 connect error [ 107.726386][ T5786] libceph: connect (1)[c::]:6789 error -101 [ 107.726583][ T5786] libceph: mon0 (1)[c::]:6789 connect error [ 107.804553][ T5945] libceph: connect (1)[c::]:6789 error -101 [ 107.805630][ T5945] libceph: mon0 (1)[c::]:6789 connect error [ 108.177215][ T6001] ceph: No mds server is up or the cluster is laggy [ 108.181751][ T6007] ceph: No mds server is up or the cluster is laggy [ 108.235114][ T5945] libceph: connect (1)[c::]:6789 error -101 [ 108.235308][ T5945] libceph: mon0 (1)[c::]:6789 connect error [ 108.322931][ T5945] libceph: connect (1)[c::]:6789 error -101 [ 108.323135][ T5945] libceph: mon0 (1)[c::]:6789 connect error [ 109.275613][ T6040] netlink: 4 bytes leftover after parsing attributes in process `syz.0.46'. [ 109.937973][ T6045] netlink: 76 bytes leftover after parsing attributes in process `syz.4.47'. [ 110.427598][ T6060] sock: sock_set_timeout: `syz.3.54' (pid 6060) tries to set negative timeout [ 110.676086][ T5945] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 110.904392][ T5945] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 110.904423][ T5945] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 110.904444][ T5945] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 110.904489][ T5945] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 110.904510][ T5945] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.014285][ T5945] usb 5-1: config 0 descriptor?? [ 111.470737][ T5945] plantronics 0003:047F:FFFF.0001: unbalanced delimiter at end of report description [ 111.471626][ T5945] plantronics 0003:047F:FFFF.0001: parse failed [ 111.471730][ T5945] plantronics 0003:047F:FFFF.0001: probe with driver plantronics failed with error -22 [ 111.679403][ T5945] usb 5-1: USB disconnect, device number 2 [ 111.796426][ T5804] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 112.000354][ T6081] syz.1.63 (6081) used greatest stack depth: 18360 bytes left [ 112.042657][ T6083] sctp: [Deprecated]: syz.1.64 (pid 6083) Use of struct sctp_assoc_value in delayed_ack socket option. [ 112.042657][ T6083] Use struct sctp_sack_info instead [ 114.034257][ T992] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 114.186596][ T992] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 114.186629][ T992] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 114.186649][ T992] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 114.186690][ T992] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 114.186711][ T992] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.281213][ T992] usb 1-1: config 0 descriptor?? [ 114.362194][ T5804] Bluetooth: hci2: command 0x0406 tx timeout [ 114.597263][ T6132] netlink: 'syz.3.86': attribute type 1 has an invalid length. [ 114.827820][ T992] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 115.291732][ T992] usb 1-1: USB disconnect, device number 2 [ 115.524828][ T6145] loop6: detected capacity change from 0 to 7 [ 115.572244][ T6145] Dev loop6: unable to read RDB block 7 [ 115.572300][ T6145] loop6: unable to read partition table [ 115.572568][ T6145] loop6: partition table beyond EOD, truncated [ 115.585791][ T6145] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 115.766414][ T61] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 115.792925][ T61] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 115.797161][ T61] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 115.800666][ T61] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 115.801743][ T61] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 116.044595][ T6159] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 116.045532][ T6159] netlink: 4 bytes leftover after parsing attributes in process `syz.3.95'. [ 116.230709][ T6159] bridge_slave_1: left allmulticast mode [ 116.230729][ T6159] bridge_slave_1: left promiscuous mode [ 116.233354][ T6159] bridge0: port 2(bridge_slave_1) entered disabled state [ 116.346138][ T6159] bridge_slave_0: left allmulticast mode [ 116.346167][ T6159] bridge_slave_0: left promiscuous mode [ 116.346407][ T6159] bridge0: port 1(bridge_slave_0) entered disabled state [ 116.510794][ T6170] netlink: 12 bytes leftover after parsing attributes in process `syz.4.99'. [ 117.647399][ T5801] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 117.874440][ T61] Bluetooth: hci6: command tx timeout [ 118.202898][ T3933] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.564902][ T31] kernel write not supported for file bpf-prog (pid: 31 comm: kworker/1:0) [ 118.985492][ T5885] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 119.211218][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c0!!! [ 119.824346][ T3933] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.832621][ T5885] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 119.832657][ T5885] usb 5-1: can't read configurations, error -61 [ 119.962269][ T61] Bluetooth: hci6: command tx timeout [ 119.995331][ T5885] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 120.161058][ T5885] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 120.161096][ T5885] usb 5-1: can't read configurations, error -61 [ 120.161518][ T5885] usb usb5-port1: attempt power cycle [ 120.514561][ T5885] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 120.551426][ T5885] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 120.551461][ T5885] usb 5-1: can't read configurations, error -61 [ 120.578944][ T3933] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.580353][ T6257] netlink: 24 bytes leftover after parsing attributes in process `syz.0.128'. [ 120.694211][ T5885] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 120.721228][ T5885] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 120.721264][ T5885] usb 5-1: can't read configurations, error -61 [ 120.722123][ T5885] usb usb5-port1: unable to enumerate USB device [ 120.908399][ T6263] process 'syz.1.129' launched './file0' with NULL argv: empty string added [ 121.147449][ T3933] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.314169][ T5878] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 121.342102][ T6149] chnl_net:caif_netlink_parms(): no params data found [ 121.496416][ T5878] usb 4-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 121.496448][ T5878] usb 4-1: config 0 interface 0 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 121.496470][ T5878] usb 4-1: config 0 interface 0 has no altsetting 0 [ 121.496503][ T5878] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 121.496525][ T5878] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.564178][ T5878] usb 4-1: config 0 descriptor?? [ 122.212657][ T61] Bluetooth: hci6: command tx timeout [ 122.226941][ T5878] usb 4-1: string descriptor 0 read error: -22 [ 122.422639][ T5878] uclogic 0003:256C:006D.0003: interface is invalid, ignoring [ 122.474730][ T6149] bridge0: port 1(bridge_slave_0) entered blocking state [ 122.480901][ T6149] bridge0: port 1(bridge_slave_0) entered disabled state [ 122.481134][ T6149] bridge_slave_0: entered allmulticast mode [ 122.520738][ T6149] bridge_slave_0: entered promiscuous mode [ 122.646324][ T995] usb 4-1: USB disconnect, device number 2 [ 122.755080][ T6149] bridge0: port 2(bridge_slave_1) entered blocking state [ 122.755235][ T6149] bridge0: port 2(bridge_slave_1) entered disabled state [ 122.755473][ T6149] bridge_slave_1: entered allmulticast mode [ 122.762512][ T6149] bridge_slave_1: entered promiscuous mode [ 123.122988][ T6149] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 123.139572][ T6149] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 123.281358][ T3933] bridge_slave_1: left allmulticast mode [ 123.281514][ T3933] bridge_slave_1: left promiscuous mode [ 123.283853][ T3933] bridge0: port 2(bridge_slave_1) entered disabled state [ 123.479767][ T3933] bridge_slave_0: left allmulticast mode [ 123.479797][ T3933] bridge_slave_0: left promiscuous mode [ 123.480043][ T3933] bridge0: port 1(bridge_slave_0) entered disabled state [ 123.937748][ T5801] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 123.944445][ T5801] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 123.948954][ T5801] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 123.950604][ T5801] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 123.951427][ T5801] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 124.274251][ T61] Bluetooth: hci6: command tx timeout [ 124.606493][ T6334] Driver unsupported XDP return value 0 on prog (id 26) dev N/A, expect packet loss! [ 125.507139][ T3933] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 125.585053][ T3933] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 125.606339][ T3933] bond0 (unregistering): Released all slaves [ 125.964463][ T6149] team0: Port device team_slave_0 added [ 126.040007][ T61] Bluetooth: hci1: command tx timeout [ 126.335663][ T6149] team0: Port device team_slave_1 added [ 126.927586][ T6149] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 126.927602][ T6149] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 126.927716][ T6149] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 126.992179][ T6350] netlink: 8 bytes leftover after parsing attributes in process `syz.3.156'. [ 127.003986][ T6149] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 127.004662][ T6149] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 127.004689][ T6149] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 127.284548][ T6357] netlink: 12 bytes leftover after parsing attributes in process `syz.3.159'. [ 128.114466][ T61] Bluetooth: hci1: command tx timeout [ 128.114648][ T3933] hsr_slave_0: left promiscuous mode [ 128.164278][ T3933] hsr_slave_1: left promiscuous mode [ 128.165452][ T3933] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 128.165552][ T3933] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 128.216094][ T3933] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 128.216113][ T3933] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 128.323088][ T3933] veth1_macvtap: left promiscuous mode [ 128.323498][ T3933] veth0_macvtap: left promiscuous mode [ 128.323797][ T3933] veth1_vlan: left promiscuous mode [ 128.329178][ T3933] veth0_vlan: left promiscuous mode [ 130.194308][ T61] Bluetooth: hci1: command tx timeout [ 130.454741][ T3933] team0 (unregistering): Port device team_slave_1 removed [ 130.654764][ T3933] team0 (unregistering): Port device team_slave_0 removed [ 132.276801][ T61] Bluetooth: hci1: command tx timeout [ 132.735827][ T6357] Zero length message leads to an empty skb [ 132.923302][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.979303][ T6373] netlink: 566 bytes leftover after parsing attributes in process `syz.4.164'. [ 132.998905][ T6149] hsr_slave_0: entered promiscuous mode [ 133.000298][ T6149] hsr_slave_1: entered promiscuous mode [ 133.001290][ T6149] debugfs: 'hsr0' already exists in 'hsr' [ 133.001313][ T6149] Cannot create hsr debugfs directory [ 133.214083][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 133.674079][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 133.854083][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 134.142574][ T995] kernel write not supported for file bpf-prog (pid: 995 comm: kworker/1:2) [ 136.869128][ T3933] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.997505][ T6324] chnl_net:caif_netlink_parms(): no params data found [ 137.310533][ T3933] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.753095][ T6451] evm: overlay not supported [ 137.815672][ T3933] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.241430][ T3933] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.447588][ T6324] bridge0: port 1(bridge_slave_0) entered blocking state [ 138.449075][ T6324] bridge0: port 1(bridge_slave_0) entered disabled state [ 138.449309][ T6324] bridge_slave_0: entered allmulticast mode [ 138.456614][ T6324] bridge_slave_0: entered promiscuous mode [ 138.484282][ T6324] bridge0: port 2(bridge_slave_1) entered blocking state [ 138.484454][ T6324] bridge0: port 2(bridge_slave_1) entered disabled state [ 138.484644][ T6324] bridge_slave_1: entered allmulticast mode [ 138.487726][ T6324] bridge_slave_1: entered promiscuous mode [ 138.596181][ T6149] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 138.740797][ T6149] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 138.813728][ T6324] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 138.815480][ T6149] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 138.891965][ T6324] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 138.898024][ T6149] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 139.309912][ T6324] team0: Port device team_slave_0 added [ 139.340294][ T6324] team0: Port device team_slave_1 added [ 139.572087][ T6324] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 139.572103][ T6324] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 139.572128][ T6324] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 139.597292][ T6496] capability: warning: `syz.3.197' uses 32-bit capabilities (legacy support in use) [ 139.660727][ T6324] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 139.660742][ T6324] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 139.660765][ T6324] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 139.756447][ T3933] bridge_slave_1: left allmulticast mode [ 139.756474][ T3933] bridge_slave_1: left promiscuous mode [ 139.756741][ T3933] bridge0: port 2(bridge_slave_1) entered disabled state [ 139.764947][ T31] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 139.845836][ T3933] bridge_slave_0: left allmulticast mode [ 139.845864][ T3933] bridge_slave_0: left promiscuous mode [ 139.846104][ T3933] bridge0: port 1(bridge_slave_0) entered disabled state [ 139.915917][ T31] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 139.915947][ T31] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 139.916009][ T31] usb 1-1: config 0 interface 0 has no altsetting 0 [ 139.916042][ T31] usb 1-1: New USB device found, idVendor=054c, idProduct=03d5, bcdDevice= 0.00 [ 139.916064][ T31] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.919312][ T31] usb 1-1: config 0 descriptor?? [ 140.356400][ T31] input: HID 054c:03d5 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:054C:03D5.0004/input/input5 [ 140.458429][ T31] sony 0003:054C:03D5.0004: input,hidraw0: USB HID v0.00 Joystick [HID 054c:03d5] on usb-dummy_hcd.0-1/input0 [ 140.546905][ T1237] usb 1-1: USB disconnect, device number 3 [ 141.074075][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 141.464107][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 141.554087][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 141.745813][ T6518] trusted_key: syz.0.205 sent an empty control message without MSG_MORE. [ 142.124173][ T992] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 142.274994][ T3933] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 142.286712][ T992] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 142.292462][ T992] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 142.292489][ T992] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.292507][ T992] usb 1-1: Product: syz [ 142.292519][ T992] usb 1-1: Manufacturer: syz [ 142.292532][ T992] usb 1-1: SerialNumber: syz [ 142.365293][ T3933] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 142.389421][ T3933] bond0 (unregistering): Released all slaves [ 143.107863][ T6533] kvm: MWAIT instruction emulated as NOP! [ 143.427552][ T6324] hsr_slave_0: entered promiscuous mode [ 143.433054][ T6324] hsr_slave_1: entered promiscuous mode [ 143.435262][ T6324] debugfs: 'hsr0' already exists in 'hsr' [ 143.435288][ T6324] Cannot create hsr debugfs directory [ 143.548416][ T992] cdc_ncm 1-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 143.548451][ T992] cdc_ncm 1-1:1.0: setting tx_max = 36 [ 143.690705][ T992] cdc_ncm 1-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.0-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 143.757273][ T5786] usb 1-1: USB disconnect, device number 4 [ 143.759940][ T5786] cdc_ncm 1-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.0-1, CDC NCM (NO ZLP) [ 144.196542][ T31] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 144.327114][ T12] Bluetooth: hci3: Frame reassembly failed (-84) [ 144.327352][ T12] Bluetooth: hci3: Frame reassembly failed (-84) [ 144.347025][ T31] usb 4-1: Using ep0 maxpacket: 32 [ 144.351903][ T31] usb 4-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 144.351932][ T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.351949][ T31] usb 4-1: Product: syz [ 144.351957][ T31] usb 4-1: Manufacturer: syz [ 144.351964][ T31] usb 4-1: SerialNumber: syz [ 144.358293][ T31] usb 4-1: config 0 descriptor?? [ 144.368518][ T31] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 144.394404][ T3933] hsr_slave_0: left promiscuous mode [ 144.435888][ T3933] hsr_slave_1: left promiscuous mode [ 144.439218][ T3933] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 144.439244][ T3933] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 144.465372][ T3933] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 144.465399][ T3933] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 144.587633][ T3933] veth1_macvtap: left promiscuous mode [ 144.587702][ T3933] veth0_macvtap: left promiscuous mode [ 144.587847][ T3933] veth1_vlan: left promiscuous mode [ 144.587960][ T3933] veth0_vlan: left promiscuous mode [ 145.821170][ T31] gspca_stk1135: reg_w 0xf err -71 [ 145.822227][ T31] gspca_stk1135: serial bus timeout: status=0x00 [ 145.822240][ T31] gspca_stk1135: Sensor write failed [ 145.822258][ T31] gspca_stk1135: serial bus timeout: status=0x00 [ 145.822266][ T31] gspca_stk1135: Sensor write failed [ 145.822289][ T31] gspca_stk1135: serial bus timeout: status=0x00 [ 145.822297][ T31] gspca_stk1135: Sensor read failed [ 145.822320][ T31] gspca_stk1135: serial bus timeout: status=0x00 [ 145.822328][ T31] gspca_stk1135: Sensor read failed [ 145.822335][ T31] gspca_stk1135: Detected sensor type unknown (0x0) [ 145.822365][ T31] gspca_stk1135: serial bus timeout: status=0x00 [ 145.822370][ T31] gspca_stk1135: Sensor read failed [ 145.822385][ T31] gspca_stk1135: serial bus timeout: status=0x00 [ 145.822389][ T31] gspca_stk1135: Sensor read failed [ 145.822402][ T31] gspca_stk1135: serial bus timeout: status=0x00 [ 145.822406][ T31] gspca_stk1135: Sensor write failed [ 145.822419][ T31] gspca_stk1135: serial bus timeout: status=0x00 [ 145.822423][ T31] gspca_stk1135: Sensor write failed [ 145.822479][ T31] stk1135 4-1:0.0: probe with driver stk1135 failed with error -71 [ 145.826418][ T31] usb 4-1: USB disconnect, device number 3 [ 146.264140][ T5878] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 146.356452][ T5801] Bluetooth: hci3: command 0x1003 tx timeout [ 146.356467][ T61] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 146.431781][ T5878] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 146.431825][ T5878] usb 5-1: New USB device found, idVendor=046d, idProduct=c71f, bcdDevice= 0.00 [ 146.431847][ T5878] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.484783][ T5878] usb 5-1: config 0 descriptor?? [ 146.909410][ T5878] hid (null): report_id 0 is invalid [ 146.912264][ T5878] logitech-djreceiver 0003:046D:C71F.0005: report_id 0 is invalid [ 146.912276][ T5878] logitech-djreceiver 0003:046D:C71F.0005: item 0 0 1 8 parsing failed [ 146.912691][ T5878] logitech-djreceiver 0003:046D:C71F.0005: logi_dj_probe: parse failed [ 146.912733][ T5878] logitech-djreceiver 0003:046D:C71F.0005: probe with driver logitech-djreceiver failed with error -22 [ 147.116362][ T6540] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 147.116606][ T6540] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 147.119222][ T31] usb 5-1: USB disconnect, device number 7 [ 147.126927][ T3933] team0 (unregistering): Port device team_slave_1 removed [ 147.364748][ T3933] team0 (unregistering): Port device team_slave_0 removed [ 149.578760][ T6546] macvtap1: entered promiscuous mode [ 149.578781][ T6546] vlan0: entered promiscuous mode [ 149.579384][ T6546] macvtap1: entered allmulticast mode [ 149.579398][ T6546] vlan0: entered allmulticast mode [ 149.579409][ T6546] veth0_vlan: entered allmulticast mode [ 149.632332][ T6547] macvtap2: entered promiscuous mode [ 149.632571][ T6547] macvtap2: entered allmulticast mode [ 150.213957][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 150.214000][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 150.409614][ T6577] qnx6: unable to read the first superblock [ 150.410059][ T6577] qnx6: unable to read the first superblock [ 150.410068][ T6577] qnx6: unable to read the first superblock [ 150.612793][ T6149] 8021q: adding VLAN 0 to HW filter on device bond0 [ 150.896536][ T6149] 8021q: adding VLAN 0 to HW filter on device team0 [ 151.103583][ T6361] bridge0: port 1(bridge_slave_0) entered blocking state [ 151.103717][ T6361] bridge0: port 1(bridge_slave_0) entered forwarding state [ 151.150545][ T6324] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 151.243954][ T6324] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 151.336935][ T6361] bridge0: port 2(bridge_slave_1) entered blocking state [ 151.338366][ T6361] bridge0: port 2(bridge_slave_1) entered forwarding state [ 151.375867][ T6324] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 151.506676][ T6324] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 151.734230][ T5885] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 151.895742][ T5885] usb 4-1: Using ep0 maxpacket: 32 [ 151.898489][ T5885] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 151.898518][ T5885] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 151.898554][ T5885] usb 4-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 151.898575][ T5885] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 151.960259][ T5885] usb 4-1: config 0 descriptor?? [ 152.196538][ T5945] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 152.346765][ T5945] usb 1-1: Using ep0 maxpacket: 32 [ 152.354834][ T5945] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 152.354866][ T5945] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 152.354903][ T5945] usb 1-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 152.354923][ T5945] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.362161][ T5945] usb 1-1: config 0 descriptor?? [ 152.413744][ T5885] ft260 0003:0403:6030.0006: unknown main item tag 0x7 [ 152.577597][ T5885] ft260 0003:0403:6030.0006: chip code: 6424 8183 [ 152.623216][ T6324] 8021q: adding VLAN 0 to HW filter on device bond0 [ 152.778459][ T5885] ft260 0003:0403:6030.0006: failed to retrieve system status [ 152.778884][ T5885] ft260 0003:0403:6030.0006: probe with driver ft260 failed with error -5 [ 152.833745][ T6324] 8021q: adding VLAN 0 to HW filter on device team0 [ 152.840806][ T5945] ft260 0003:0403:6030.0007: unknown main item tag 0x7 [ 152.860478][ T6240] bridge0: port 1(bridge_slave_0) entered blocking state [ 152.862033][ T6240] bridge0: port 1(bridge_slave_0) entered forwarding state [ 152.886818][ T6240] bridge0: port 2(bridge_slave_1) entered blocking state [ 152.887315][ T6240] bridge0: port 2(bridge_slave_1) entered forwarding state [ 152.951777][ T6149] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 153.037996][ T5945] ft260 0003:0403:6030.0007: chip code: 6424 8183 [ 153.239897][ T5945] ft260 0003:0403:6030.0007: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.0-1/input0 [ 153.442718][ T5945] ft260 0003:0403:6030.0007: failed to retrieve status: -32, no wakeup [ 153.702889][ T5878] usb 1-1: USB disconnect, device number 5 [ 154.017582][ T6324] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 154.057685][ T6149] veth0_vlan: entered promiscuous mode [ 154.082578][ T6149] veth1_vlan: entered promiscuous mode [ 154.223430][ T6149] veth0_macvtap: entered promiscuous mode [ 154.248361][ T6149] veth1_macvtap: entered promiscuous mode [ 154.328976][ T6149] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 154.360281][ T6149] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 154.393819][ T2854] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.420583][ T2854] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.440483][ T2854] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.449419][ T2854] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.499043][ T5945] usb 4-1: USB disconnect, device number 4 [ 154.555680][ T992] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 154.749617][ T992] usb 1-1: config 0 has an invalid interface number: 133 but max is 0 [ 154.749643][ T992] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 154.749661][ T992] usb 1-1: config 0 has no interface number 0 [ 154.749701][ T992] usb 1-1: config 0 interface 133 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 154.752765][ T992] usb 1-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 154.752792][ T992] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.752811][ T992] usb 1-1: Product: syz [ 154.752824][ T992] usb 1-1: Manufacturer: syz [ 154.752837][ T992] usb 1-1: SerialNumber: syz [ 154.765771][ T992] usb 1-1: config 0 descriptor?? [ 155.096060][ T6240] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 155.096082][ T6240] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 155.132926][ T6639] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input6 [ 155.373745][ T992] keyspan 1-1:0.133: Keyspan 1 port adapter converter detected [ 155.386987][ T992] keyspan 1-1:0.133: found no endpoint descriptor for endpoint 82 [ 155.401582][ T992] keyspan 1-1:0.133: found no endpoint descriptor for endpoint 81 [ 155.401672][ T992] keyspan 1-1:0.133: found no endpoint descriptor for endpoint 1 [ 155.401752][ T992] keyspan 1-1:0.133: found no endpoint descriptor for endpoint 2 [ 155.420274][ T1237] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 155.438175][ T992] usb 1-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 155.460537][ T992] usb 1-1: USB disconnect, device number 6 [ 155.528049][ T992] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 155.531121][ T992] keyspan 1-1:0.133: device disconnected [ 155.571919][ T1237] usb 5-1: config 0 has no interfaces? [ 155.571957][ T1237] usb 5-1: New USB device found, idVendor=0403, idProduct=da73, bcdDevice=dc.8d [ 155.571979][ T1237] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.591510][ T2854] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 155.591530][ T2854] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 155.596576][ T6324] veth0_vlan: entered promiscuous mode [ 155.656750][ T1237] usb 5-1: config 0 descriptor?? [ 155.751584][ T6324] veth1_vlan: entered promiscuous mode [ 155.852748][ T6324] veth0_macvtap: entered promiscuous mode [ 155.876059][ T6324] veth1_macvtap: entered promiscuous mode [ 155.993197][ T6324] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 156.066340][ T6324] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 156.168177][ T43] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.168441][ T43] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.168479][ T43] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.168513][ T43] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.453804][ T5786] usb 5-1: USB disconnect, device number 8 [ 156.637143][ T6361] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 156.637163][ T6361] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 156.702952][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 156.702972][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 157.937336][ T6695] netlink: 'syz.5.260': attribute type 1 has an invalid length. [ 158.021620][ T6695] bond1 (unregistering): Released all slaves [ 158.101494][ T6704] syz_tun: entered allmulticast mode [ 158.188703][ T6700] dvmrp8: entered allmulticast mode [ 158.210058][ T6705] kvm: emulating exchange as write [ 158.232382][ T6699] syz_tun: left allmulticast mode [ 158.232831][ T6699] dvmrp8: left allmulticast mode [ 159.140180][ T6734] netlink: 'syz.6.275': attribute type 1 has an invalid length. [ 159.140204][ T6734] netlink: 'syz.6.275': attribute type 4 has an invalid length. [ 159.140218][ T6734] netlink: 15334 bytes leftover after parsing attributes in process `syz.6.275'. [ 159.694347][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 160.638105][ T6754] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 164.097192][ T6841] netlink: 'syz.5.318': attribute type 1 has an invalid length. [ 164.137391][ T5945] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 164.144164][ T992] usb 1-1: new full-speed USB device number 7 using dummy_hcd [ 164.287814][ T5945] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 164.287845][ T5945] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 164.287865][ T5945] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 164.287904][ T5945] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 164.287925][ T5945] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.307288][ T992] usb 1-1: unable to get BOS descriptor or descriptor too short [ 164.308349][ T992] usb 1-1: not running at top speed; connect to a high speed hub [ 164.315870][ T992] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 164.315894][ T992] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 164.338684][ T992] usb 1-1: string descriptor 0 read error: -22 [ 164.338836][ T992] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 164.338857][ T992] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.388680][ T992] usb 1-1: 0:2 : does not exist [ 164.408886][ T5945] usb 5-1: config 0 descriptor?? [ 164.859753][ T5945] plantronics 0003:047F:FFFF.0008: reserved main item tag 0xe [ 164.859803][ T5945] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 164.904602][ T5945] plantronics 0003:047F:FFFF.0008: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 165.116257][ T5945] usb 5-1: USB disconnect, device number 9 [ 165.946728][ T992] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 165.954994][ T992] usb 1-1: Warning! Unlikely big volume range (=4294967294), cval->res is probably wrong. [ 165.955019][ T992] usb 1-1: [5] FU [Mic Capture Volume] ch = 1, val = 0/20196/-8016 [ 165.988884][ T992] usb 1-1: 5:0: cannot get min/max values for control 3 (id 5) [ 166.019080][ T992] usb 1-1: 5:0: failed to get current value for ch 1 (-22) [ 166.240047][ T992] usb 1-1: 5:0: cannot get min/max values for control 3 (id 5) [ 166.248505][ T992] usb 1-1: USB disconnect, device number 7 [ 166.580185][ T6869] syz.4.327 (6869) used greatest stack depth: 16432 bytes left [ 167.401460][ T37] audit: type=1326 audit(1760320582.619:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6896 comm="syz.3.340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34d016eec9 code=0x7ffc0000 [ 167.401605][ T37] audit: type=1326 audit(1760320582.629:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6896 comm="syz.3.340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34d016eec9 code=0x7ffc0000 [ 167.402153][ T37] audit: type=1326 audit(1760320582.629:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6896 comm="syz.3.340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34d016eec9 code=0x7ffc0000 [ 167.402326][ T37] audit: type=1326 audit(1760320582.629:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6896 comm="syz.3.340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f34d016eec9 code=0x7ffc0000 [ 167.496140][ T37] audit: type=1326 audit(1760320582.629:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6896 comm="syz.3.340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34d016eec9 code=0x7ffc0000 [ 167.496189][ T37] audit: type=1326 audit(1760320582.649:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6896 comm="syz.3.340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34d016eec9 code=0x7ffc0000 [ 167.496228][ T37] audit: type=1326 audit(1760320582.649:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6896 comm="syz.3.340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34d016eec9 code=0x7ffc0000 [ 167.496268][ T37] audit: type=1326 audit(1760320582.649:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6896 comm="syz.3.340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34d016eec9 code=0x7ffc0000 [ 167.496308][ T37] audit: type=1326 audit(1760320582.629:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6896 comm="syz.3.340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34d016eec9 code=0x7ffc0000 [ 167.496347][ T37] audit: type=1326 audit(1760320582.649:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6896 comm="syz.3.340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f34d016eec9 code=0x7ffc0000 [ 168.194341][ T1237] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 168.357008][ T1237] usb 4-1: Using ep0 maxpacket: 16 [ 168.364118][ T1237] usb 4-1: config 1 has an invalid descriptor of length 97, skipping remainder of the config [ 168.364141][ T1237] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 168.369287][ T1237] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 168.369313][ T1237] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 168.369331][ T1237] usb 4-1: Product: syz [ 168.369345][ T1237] usb 4-1: Manufacturer: syz [ 168.369358][ T1237] usb 4-1: SerialNumber: syz [ 168.625499][ T1237] usb 4-1: 0:2 : does not exist [ 168.661504][ T1237] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 168.782054][ T1237] usb 4-1: USB disconnect, device number 5 [ 169.021245][ T6922] netlink: 'syz.5.350': attribute type 1 has an invalid length. [ 170.417006][ T6946] bridge0: port 2(bridge_slave_1) entered disabled state [ 170.709685][ T6950] input: syz0 as /devices/virtual/input/input7 [ 171.986674][ T6995] capability: warning: `syz.6.377' uses deprecated v2 capabilities in a way that may be insecure [ 172.104161][ T992] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 172.256749][ T992] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 172.263934][ T992] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 172.263962][ T992] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 172.263980][ T992] usb 4-1: Product: syz [ 172.263993][ T992] usb 4-1: Manufacturer: syz [ 172.264239][ T992] usb 4-1: SerialNumber: syz [ 173.564273][ T992] cdc_ncm 4-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 173.564299][ T992] cdc_ncm 4-1:1.0: setting tx_max = 36 [ 173.627900][ T992] cdc_ncm 4-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.3-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 173.850093][ T5945] usb 4-1: USB disconnect, device number 6 [ 173.853694][ T5945] cdc_ncm 4-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.3-1, CDC NCM (NO ZLP) [ 176.241415][ T7073] netlink: 'syz.5.411': attribute type 10 has an invalid length. [ 177.113877][ T7088] netlink: 12 bytes leftover after parsing attributes in process `syz.3.416'. [ 177.423835][ T7073] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 178.249640][ T7101] overlayfs: failed to clone upperpath [ 181.332547][ C1] vkms_vblank_simulate: vblank timer overrun [ 182.498677][ T7171] mmap: syz.3.447 (7171) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 182.651376][ T7176] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 184.059993][ T7210] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.465'. [ 184.062069][ T7209] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.465'. [ 184.716302][ T5787] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 184.734148][ T5945] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 184.899497][ T5945] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 184.899528][ T5945] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 184.899618][ T5945] usb 6-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 184.899640][ T5945] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 184.941886][ T5787] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 184.941915][ T5787] usb 1-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 184.941927][ T5787] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 184.982655][ T5787] usb 1-1: config 0 descriptor?? [ 184.985732][ T7225] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 185.013609][ T5945] usb 6-1: config 0 descriptor?? [ 185.198770][ T7225] netlink: 'syz.0.473': attribute type 10 has an invalid length. [ 185.198793][ T7225] netlink: 40 bytes leftover after parsing attributes in process `syz.0.473'. [ 185.199245][ T7225] batadv0: entered promiscuous mode [ 185.199269][ T7225] batadv0: entered allmulticast mode [ 185.203479][ T7225] bridge0: port 3(batadv0) entered blocking state [ 185.203691][ T7225] bridge0: port 3(batadv0) entered disabled state [ 185.211885][ T7225] bridge0: port 3(batadv0) entered blocking state [ 185.212708][ T7225] bridge0: port 3(batadv0) entered forwarding state [ 185.297930][ T5787] usbhid 1-1:0.0: can't add hid device: -71 [ 185.299703][ T5787] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 185.348702][ T5787] usb 1-1: USB disconnect, device number 8 [ 185.469651][ T6511] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 185.469671][ T6511] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 185.850511][ T5945] hid-led 0003:27B8:01ED.0009: probe with driver hid-led failed with error -71 [ 185.892826][ T5945] usb 6-1: USB disconnect, device number 2 [ 186.740244][ T7249] syz.0.482 uses obsolete (PF_INET,SOCK_PACKET) [ 186.743882][ T7249] netlink: 8 bytes leftover after parsing attributes in process `syz.0.482'. [ 187.673680][ C1] vkms_vblank_simulate: vblank timer overrun [ 189.695054][ T7275] vlan2: entered allmulticast mode [ 189.695068][ T7275] veth0_to_bond: entered allmulticast mode [ 192.344630][ T7345] netlink: 4 bytes leftover after parsing attributes in process `syz.5.512'. [ 194.560731][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.241544][ T7413] netlink: 'syz.5.539': attribute type 4 has an invalid length. [ 195.304435][ T7415] netlink: 'syz.5.539': attribute type 4 has an invalid length. [ 196.319242][ T6511] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.788928][ T6511] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.037054][ T5801] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 197.051234][ T5801] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 197.052677][ T5801] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 197.053995][ T5801] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 197.072838][ T5801] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 197.397898][ T6511] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.814326][ T7447] syz.0.554 (7447) used greatest stack depth: 15824 bytes left [ 197.897414][ T6511] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.141931][ T7469] netlink: 20 bytes leftover after parsing attributes in process `syz.5.564'. [ 198.172128][ T37] kauditd_printk_skb: 22 callbacks suppressed [ 198.172145][ T37] audit: type=1326 audit(1760320613.399:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7472 comm="syz.4.565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4266a3eec9 code=0x7ffc0000 [ 198.172417][ T37] audit: type=1326 audit(1760320613.399:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7472 comm="syz.4.565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4266a3eec9 code=0x7ffc0000 [ 198.226918][ T37] audit: type=1326 audit(1760320613.459:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7472 comm="syz.4.565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4266a3eec9 code=0x7ffc0000 [ 198.227458][ T37] audit: type=1326 audit(1760320613.459:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7472 comm="syz.4.565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4266a3eec9 code=0x7ffc0000 [ 198.227698][ T37] audit: type=1326 audit(1760320613.459:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7472 comm="syz.4.565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4266a3eec9 code=0x7ffc0000 [ 198.228283][ T37] audit: type=1326 audit(1760320613.459:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7472 comm="syz.4.565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4266a3eec9 code=0x7ffc0000 [ 198.230352][ T37] audit: type=1326 audit(1760320613.459:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7472 comm="syz.4.565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4266a3eec9 code=0x7ffc0000 [ 198.230630][ T37] audit: type=1326 audit(1760320613.459:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7472 comm="syz.4.565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4266a3eec9 code=0x7ffc0000 [ 198.230928][ T37] audit: type=1326 audit(1760320613.459:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7472 comm="syz.4.565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4266a3eec9 code=0x7ffc0000 [ 198.231256][ T37] audit: type=1326 audit(1760320613.459:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7472 comm="syz.4.565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4266a3eec9 code=0x7ffc0000 [ 198.448687][ T7474] netlink: 20 bytes leftover after parsing attributes in process `syz.5.564'. [ 198.448714][ T7474] nbd: device at index 64 is going down [ 198.637971][ T7436] chnl_net:caif_netlink_parms(): no params data found [ 199.164290][ T61] Bluetooth: hci3: command tx timeout [ 200.658367][ T6511] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 200.718971][ T6511] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 200.762917][ T6511] bond0 (unregistering): Released all slaves [ 201.244177][ T61] Bluetooth: hci3: command tx timeout [ 201.576471][ T7436] bridge0: port 1(bridge_slave_0) entered blocking state [ 201.576600][ T7436] bridge0: port 1(bridge_slave_0) entered disabled state [ 201.576824][ T7436] bridge_slave_0: entered allmulticast mode [ 201.599611][ T7436] bridge_slave_0: entered promiscuous mode [ 201.610143][ T7436] bridge0: port 2(bridge_slave_1) entered blocking state [ 201.610285][ T7436] bridge0: port 2(bridge_slave_1) entered disabled state [ 201.610496][ T7436] bridge_slave_1: entered allmulticast mode [ 201.613253][ T7436] bridge_slave_1: entered promiscuous mode [ 202.249963][ T7436] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 202.330145][ T7436] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 203.024274][ T6511] hsr_slave_0: left promiscuous mode [ 203.115731][ T6511] hsr_slave_1: left promiscuous mode [ 203.116669][ T6511] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 203.116693][ T6511] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 203.169646][ T6511] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 203.169671][ T6511] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 203.300543][ T6511] vlan0: left allmulticast mode [ 203.300564][ T6511] veth0_vlan: left allmulticast mode [ 203.300593][ T6511] vlan0: left promiscuous mode [ 203.301203][ T6511] veth1_macvtap: left promiscuous mode [ 203.301298][ T6511] veth0_macvtap: left promiscuous mode [ 203.301550][ T6511] veth1_vlan: left promiscuous mode [ 203.301738][ T6511] veth0_vlan: left promiscuous mode [ 203.327578][ T61] Bluetooth: hci3: command tx timeout [ 204.728682][ T7589] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 204.729172][ T7588] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 205.394196][ T61] Bluetooth: hci3: command tx timeout [ 206.558010][ T37] kauditd_printk_skb: 8 callbacks suppressed [ 206.558028][ T37] audit: type=1326 audit(1760320621.789:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7625 comm="syz.4.627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4266a3eec9 code=0x7fc00000 [ 206.560473][ T37] audit: type=1326 audit(1760320621.789:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7625 comm="syz.4.627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4266a3eec9 code=0x7fc00000 [ 207.673872][ C1] vkms_vblank_simulate: vblank timer overrun [ 207.919794][ T37] audit: type=1326 audit(1760320623.149:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7625 comm="syz.4.627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f42669daf79 code=0x7fc00000 [ 207.919843][ T37] audit: type=1326 audit(1760320623.149:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7625 comm="syz.4.627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f42669db03f code=0x7fc00000 [ 207.919867][ T37] audit: type=1326 audit(1760320623.149:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7625 comm="syz.4.627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f4266a3eec9 code=0x7fc00000 [ 208.285539][ T6511] team0 (unregistering): Port device team_slave_1 removed [ 208.484955][ T6511] team0 (unregistering): Port device team_slave_0 removed [ 208.543794][ T7653] overlayfs: failed to clone upperpath [ 209.322410][ C1] vkms_vblank_simulate: vblank timer overrun [ 210.122807][ C1] vkms_vblank_simulate: vblank timer overrun [ 210.571525][ C1] vkms_vblank_simulate: vblank timer overrun [ 210.942347][ T7648] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-all": -EINTR [ 211.051231][ T7436] team0: Port device team_slave_0 added [ 211.078798][ T7436] team0: Port device team_slave_1 added [ 211.399592][ T7436] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 211.399610][ T7436] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 211.399634][ T7436] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 211.410152][ T7436] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 211.410169][ T7436] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 211.410201][ T7436] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 211.794310][ T5808] Bluetooth: hci2: command 0x0406 tx timeout [ 211.794369][ T5804] Bluetooth: hci0: command 0x0406 tx timeout [ 211.846390][ T7436] hsr_slave_0: entered promiscuous mode [ 211.847586][ T7436] hsr_slave_1: entered promiscuous mode [ 211.848409][ T7436] debugfs: 'hsr0' already exists in 'hsr' [ 211.848430][ T7436] Cannot create hsr debugfs directory [ 212.264175][ T5787] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 212.419463][ T5787] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 212.419490][ T5787] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 212.419507][ T5787] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 212.419563][ T5787] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 212.419587][ T5787] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 212.460581][ T5787] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 212.460611][ T5787] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 212.460631][ T5787] usb 6-1: Product: syz [ 212.460644][ T5787] usb 6-1: Manufacturer: syz [ 212.576717][ T5787] cdc_wdm 6-1:1.0: skipping garbage [ 212.576743][ T5787] cdc_wdm 6-1:1.0: skipping garbage [ 212.613430][ T5787] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 212.613454][ T5787] cdc_wdm 6-1:1.0: Unknown control protocol [ 213.173246][ T7436] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 213.196547][ T7436] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 213.228297][ T7436] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 213.259486][ T7436] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 213.736806][ T7436] 8021q: adding VLAN 0 to HW filter on device bond0 [ 213.763976][ T7436] 8021q: adding VLAN 0 to HW filter on device team0 [ 213.769290][ T7709] overlayfs: failed to clone upperpath [ 213.791366][ T6361] bridge0: port 1(bridge_slave_0) entered blocking state [ 213.791490][ T6361] bridge0: port 1(bridge_slave_0) entered forwarding state [ 213.820702][ T2854] bridge0: port 2(bridge_slave_1) entered blocking state [ 213.821117][ T2854] bridge0: port 2(bridge_slave_1) entered forwarding state [ 213.918746][ T7711] overlayfs: failed to clone upperpath [ 214.092571][ T7718] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.660'. [ 214.143740][ T7436] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 214.425906][ T7726] loop2: detected capacity change from 0 to 7 [ 214.430847][ T7726] loop2: [ 214.430882][ T7726] loop2: partition table partially beyond EOD, truncated [ 214.467112][ T7436] veth0_vlan: entered promiscuous mode [ 214.486780][ T7436] veth1_vlan: entered promiscuous mode [ 214.542903][ T7436] veth0_macvtap: entered promiscuous mode [ 214.556727][ T7436] veth1_macvtap: entered promiscuous mode [ 214.582033][ T7436] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 214.602888][ T7436] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 214.623915][ T12] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.627067][ T12] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.627112][ T12] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.627145][ T12] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.976982][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 214.977003][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 215.081591][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 215.081611][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 215.093303][ T5945] usb 6-1: USB disconnect, device number 3 [ 215.283712][ T5787] libceph: connect (1)[c::]:6789 error -101 [ 215.283935][ T5787] libceph: mon0 (1)[c::]:6789 connect error [ 215.285426][ T5787] libceph: connect (1)[c::]:6789 error -101 [ 215.285802][ T5787] libceph: mon0 (1)[c::]:6789 connect error [ 215.317772][ T7736] ceph: No mds server is up or the cluster is laggy [ 217.545635][ T37] audit: type=1326 audit(1760320632.779:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7793 comm="syz.4.685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4266a3eec9 code=0x7ffc0000 [ 217.552852][ T37] audit: type=1326 audit(1760320632.779:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7793 comm="syz.4.685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f4266a3eec9 code=0x7ffc0000 [ 217.552904][ T37] audit: type=1326 audit(1760320632.779:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7793 comm="syz.4.685" exe="/root/syz-executor" sig=0 arch=40000003 syscall=94 compat=1 ip=0x200000000006 code=0x7ffc0000 [ 217.552945][ T37] audit: type=1326 audit(1760320632.779:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7793 comm="syz.4.685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4266a3eec9 code=0x7ffc0000 [ 217.689376][ T5787] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 217.850762][ T5787] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 217.850797][ T5787] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 217.850821][ T5787] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 217.850864][ T5787] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 217.850885][ T5787] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 217.858699][ T5787] usb 6-1: config 0 descriptor?? [ 218.342245][ T5787] plantronics 0003:047F:FFFF.000A: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 218.645421][ C1] plantronics 0003:047F:FFFF.000A: hid_field_extract() called with n (132) > 32! (ktimers/1) [ 218.849700][ T5885] usb 6-1: USB disconnect, device number 4 [ 222.252686][ T7872] netlink: 12 bytes leftover after parsing attributes in process `syz.7.715'. [ 222.414827][ T7872] veth3: entered promiscuous mode [ 224.029354][ T5945] usb 1-1: new full-speed USB device number 9 using dummy_hcd [ 224.197955][ T5945] usb 1-1: unable to get BOS descriptor or descriptor too short [ 224.198706][ T5945] usb 1-1: not running at top speed; connect to a high speed hub [ 224.200228][ T5945] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 224.200249][ T5945] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 224.207754][ T5945] usb 1-1: string descriptor 0 read error: -22 [ 224.207900][ T5945] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 224.207920][ T5945] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 224.223965][ T5945] usb 1-1: 0:2 : does not exist [ 225.684583][ T7917] overlayfs: failed to clone upperpath [ 225.947061][ T5945] usb 1-1: 5:0: cannot get min/max values for control 3 (id 5) [ 225.952130][ T5945] usb 1-1: 5:0: failed to get current value for ch 1 (-22) [ 226.034526][ T5945] usb 1-1: 5:0: cannot get min/max values for control 3 (id 5) [ 226.055315][ T5945] usb 1-1: USB disconnect, device number 9 [ 227.203850][ T37] audit: type=1326 audit(1760320642.429:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7940 comm="syz.0.741" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef1dc3eec9 code=0x7ffc0000 [ 227.218523][ T37] audit: type=1326 audit(1760320642.449:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7940 comm="syz.0.741" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef1dc3eec9 code=0x7ffc0000 [ 227.218574][ T37] audit: type=1326 audit(1760320642.449:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7940 comm="syz.0.741" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7fef1dc3eec9 code=0x7ffc0000 [ 227.218613][ T37] audit: type=1326 audit(1760320642.449:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7940 comm="syz.0.741" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef1dc3eec9 code=0x7ffc0000 [ 227.218650][ T37] audit: type=1326 audit(1760320642.449:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7940 comm="syz.0.741" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef1dc3eec9 code=0x7ffc0000 [ 227.218687][ T37] audit: type=1326 audit(1760320642.449:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7940 comm="syz.0.741" exe="/root/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7fef1dc3eec9 code=0x7ffc0000 [ 227.227648][ T37] audit: type=1326 audit(1760320642.459:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7940 comm="syz.0.741" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef1dc3eec9 code=0x7ffc0000 [ 227.227698][ T37] audit: type=1326 audit(1760320642.459:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7940 comm="syz.0.741" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef1dc3eec9 code=0x7ffc0000 [ 227.227738][ T37] audit: type=1326 audit(1760320642.459:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7940 comm="syz.0.741" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fef1dc3eec9 code=0x7ffc0000 [ 227.227777][ T37] audit: type=1326 audit(1760320642.459:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7940 comm="syz.0.741" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef1dc3eec9 code=0x7ffc0000 [ 228.237492][ T5945] kernel write not supported for file bpf-prog (pid: 5945 comm: kworker/1:5) [ 228.866675][ T7979] netlink: 4 bytes leftover after parsing attributes in process `syz.0.757'. [ 229.098940][ T7979] bridge0: port 3(batadv0) entered disabled state [ 229.217960][ T7979] bridge_slave_1: left allmulticast mode [ 229.217989][ T7979] bridge_slave_1: left promiscuous mode [ 229.218206][ T7979] bridge0: port 2(bridge_slave_1) entered disabled state [ 229.308294][ T7979] bridge_slave_0: left allmulticast mode [ 229.308322][ T7979] bridge_slave_0: left promiscuous mode [ 229.308572][ T7979] bridge0: port 1(bridge_slave_0) entered disabled state [ 230.034236][ T992] usb 6-1: new full-speed USB device number 5 using dummy_hcd [ 230.641934][ T992] usb 6-1: unable to get BOS descriptor or descriptor too short [ 230.642382][ T992] usb 6-1: not running at top speed; connect to a high speed hub [ 230.647875][ T992] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 230.647898][ T992] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 230.652299][ T992] usb 6-1: string descriptor 0 read error: -22 [ 230.652449][ T992] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 230.652471][ T992] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 230.797015][ T992] usb 6-1: 0:2 : does not exist [ 232.421438][ T992] usb 6-1: Warning! Unlikely big volume range (=4294967294), cval->res is probably wrong. [ 232.421463][ T992] usb 6-1: [5] FU [Mic Capture Volume] ch = 1, val = 0/20196/-8016 [ 232.462590][ T992] usb 6-1: 5:0: cannot get min/max values for control 3 (id 5) [ 232.480673][ T992] usb 6-1: 5:0: failed to get current value for ch 1 (-22) [ 232.508853][ T992] usb 6-1: 5:0: cannot get min/max values for control 3 (id 5) [ 232.513868][ T992] usb 6-1: USB disconnect, device number 5 [ 234.861246][ T8037] netlink: 'syz.4.779': attribute type 13 has an invalid length. [ 235.716090][ T8071] overlayfs: failed to clone lowerpath [ 235.745713][ T8073] netlink: 'syz.0.793': attribute type 4 has an invalid length. [ 235.824390][ T8075] netlink: 'syz.0.793': attribute type 4 has an invalid length. [ 236.245612][ T8080] netlink: 232 bytes leftover after parsing attributes in process `syz.7.797'. [ 236.709832][ T8085] netlink: 32 bytes leftover after parsing attributes in process `syz.0.799'. [ 238.343511][ T8132] netlink: 'syz.4.819': attribute type 1 has an invalid length. [ 238.400562][ T8132] bond1: (slave gretap1): making interface the new active one [ 238.401030][ T8132] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 240.205492][ T8162] bridge_slave_0: left allmulticast mode [ 240.205511][ T8162] bridge_slave_0: left promiscuous mode [ 240.205690][ T8162] bridge0: port 1(bridge_slave_0) entered disabled state [ 240.215984][ T8163] netlink: 4 bytes leftover after parsing attributes in process `syz.7.831'. [ 240.315222][ T8162] bridge_slave_1: left allmulticast mode [ 240.315242][ T8162] bridge_slave_1: left promiscuous mode [ 240.315379][ T8162] bridge0: port 2(bridge_slave_1) entered disabled state [ 240.442574][ T8162] bond0: (slave bond_slave_0): Releasing backup interface [ 240.525066][ T8162] bond0: (slave bond_slave_1): Releasing backup interface [ 240.605152][ T8162] team0: Port device team_slave_0 removed [ 240.654495][ T8162] team0: Port device team_slave_1 removed [ 240.655162][ T8162] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 240.655179][ T8162] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 240.708345][ T8162] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 240.708372][ T8162] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 240.736920][ T8162] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 241.473469][ T8191] netlink: 'syz.0.841': attribute type 4 has an invalid length. [ 242.514338][ T5801] Bluetooth: hci6: command 0x0406 tx timeout [ 243.580347][ T37] kauditd_printk_skb: 12 callbacks suppressed [ 243.580367][ T37] audit: type=1800 audit(1760320658.649:83): pid=8213 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.7.849" name="/" dev="fuse" ino=3 res=0 errno=0 [ 246.085003][ T8283] 9pnet_fd: Insufficient options for proto=fd [ 246.366042][ T37] audit: type=1804 audit(1760320661.589:84): pid=8291 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz.4.881" name="bus" dev="ramfs" ino=21411 res=1 errno=0 [ 246.475995][ T8293] netlink: 4 bytes leftover after parsing attributes in process `syz.5.882'. [ 246.859568][ T8307] netlink: 'syz.4.889': attribute type 1 has an invalid length. [ 246.903296][ T8307] 8021q: adding VLAN 0 to HW filter on device bond2 [ 247.025801][ T8307] bond2: (slave veth3): Enslaving as an active interface with a down link [ 247.051220][ T8310] bond2: (slave veth0_to_bond): making interface the new active one [ 247.053678][ T8310] veth0_to_bond: entered promiscuous mode [ 247.083194][ T8310] bond2: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 247.298289][ T8312] bond2: (slave veth5): Enslaving as an active interface with a down link [ 251.694429][ T5786] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 251.718806][ T8384] overlayfs: failed to clone lowerpath [ 251.749873][ T8384] overlayfs: failed to clone upperpath [ 251.854104][ T5786] usb 6-1: Using ep0 maxpacket: 32 [ 251.856770][ T5786] usb 6-1: config 0 has an invalid interface number: 85 but max is 0 [ 251.856795][ T5786] usb 6-1: config 0 has no interface number 0 [ 251.856841][ T5786] usb 6-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 251.856866][ T5786] usb 6-1: config 0 interface 85 has no altsetting 0 [ 251.860440][ T5786] usb 6-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 251.860467][ T5786] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 251.860486][ T5786] usb 6-1: Product: syz [ 251.860499][ T5786] usb 6-1: Manufacturer: syz [ 251.860512][ T5786] usb 6-1: SerialNumber: syz [ 251.872023][ T5786] usb 6-1: config 0 descriptor?? [ 252.631147][ T5786] appletouch 6-1:0.85: Geyser mode initialized. [ 252.643565][ T5786] input: appletouch as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.85/input/input8 [ 252.882276][ T5786] usb 6-1: USB disconnect, device number 6 [ 252.882460][ C0] appletouch 6-1:0.85: atp_complete: usb_submit_urb failed with result -19 [ 252.986623][ T5786] appletouch 6-1:0.85: input: appletouch disconnected [ 253.036835][ T8415] 9pnet_fd: Insufficient options for proto=fd [ 255.812574][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 258.421099][ T8457] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 259.297272][ T6240] veth0_to_bond: left promiscuous mode [ 259.377639][ T8482] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 260.203521][ T992] libceph: connect (1)[c::]:6789 error -101 [ 260.203707][ T992] libceph: mon0 (1)[c::]:6789 connect error [ 260.205532][ T992] libceph: connect (1)[c::]:6789 error -101 [ 260.205720][ T992] libceph: mon0 (1)[c::]:6789 connect error [ 260.242743][ T8497] ceph: No mds server is up or the cluster is laggy [ 264.882406][ T8566] overlayfs: failed to clone upperpath [ 266.504878][ T8593] warning: `syz.0.1002' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 266.511672][ T8593] netlink: 'syz.0.1002': attribute type 10 has an invalid length. [ 266.739851][ T8593] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 271.986725][ T8656] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1019'. [ 272.725032][ T8668] Bluetooth: (null): Invalid header checksum [ 273.219884][ T8686] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1031'. [ 273.298884][ T8686] 8021q: adding VLAN 0 to HW filter on device bond3 [ 273.331760][ T8686] macvlan2: entered promiscuous mode [ 273.331787][ T8686] macvlan2: entered allmulticast mode [ 273.333328][ T8686] bond3: entered promiscuous mode [ 273.370379][ T8686] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 273.518042][ T8686] bond3: left promiscuous mode [ 273.900700][ T8693] 9pnet_fd: Insufficient options for proto=fd [ 275.091929][ T8717] vxcan1: entered allmulticast mode [ 275.866164][ T1237] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 276.028947][ T1237] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 276.028966][ T1237] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 276.028994][ T1237] usb 6-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 276.029005][ T1237] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 276.033111][ T1237] usb 6-1: config 0 descriptor?? [ 276.505376][ T1237] usbhid 6-1:0.0: can't add hid device: -71 [ 276.505499][ T1237] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 276.512207][ T1237] usb 6-1: USB disconnect, device number 7 [ 283.577525][ T37] audit: type=1326 audit(1760320698.809:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8786 comm="syz.0.1067" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fef1dc3eec9 code=0x0 [ 283.786206][ T8802] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1072'. [ 284.015474][ T8805] sch_tbf: burst 88 is lower than device veth3 mtu (1514) ! [ 284.211211][ T8815] overlayfs: failed to clone upperpath [ 286.246075][ T8841] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1084'. [ 286.246215][ T8841] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 286.555216][ T8841] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 287.593628][ T8874] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1096'. [ 289.434963][ T61] Bluetooth: hci1: command 0x0406 tx timeout [ 290.663087][ T8921] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1116'. [ 294.925543][ T8955] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.057555][ T8955] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.343691][ T8955] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.709093][ T37] audit: type=1800 audit(1760320711.929:86): pid=8973 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.0.1133" name="bus" dev="ramfs" ino=24584 res=0 errno=0 [ 296.709327][ T8955] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.011869][ T8983] overlayfs: failed to clone upperpath [ 297.066227][ T6361] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 297.095790][ T6361] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 297.125414][ T3933] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 297.157009][ T6361] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 297.752143][ T8995] netlink: 'syz.0.1144': attribute type 4 has an invalid length. [ 297.758504][ T8995] netlink: 'syz.0.1144': attribute type 4 has an invalid length. [ 297.836698][ T8997] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1143'. [ 297.912314][ T8998] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1143'. [ 298.328710][ T9004] overlayfs: failed to clone upperpath [ 298.628229][ T8996] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 300.747063][ T9041] netlink: 'syz.7.1160': attribute type 1 has an invalid length. [ 301.802116][ T9041] 8021q: adding VLAN 0 to HW filter on device bond1 [ 302.141996][ T9047] bond1: (slave veth5): Enslaving as an active interface with a down link [ 302.351419][ T9052] bond1: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 302.656584][ T9041] bond1: (slave veth7): Enslaving as an active interface with a down link [ 303.323834][ T37] audit: type=1326 audit(1760320718.549:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9077 comm="syz.7.1174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd223deec9 code=0x7ffc0000 [ 303.346250][ T37] audit: type=1326 audit(1760320718.579:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9077 comm="syz.7.1174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd223deec9 code=0x7ffc0000 [ 303.377051][ T37] audit: type=1326 audit(1760320718.579:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9077 comm="syz.7.1174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7fbd223deec9 code=0x7ffc0000 [ 303.379788][ T37] audit: type=1326 audit(1760320718.609:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9077 comm="syz.7.1174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd223deec9 code=0x7ffc0000 [ 303.380110][ T37] audit: type=1326 audit(1760320718.609:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9077 comm="syz.7.1174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd223deec9 code=0x7ffc0000 [ 303.448801][ T37] audit: type=1326 audit(1760320718.609:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9077 comm="syz.7.1174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7fbd223deec9 code=0x7ffc0000 [ 303.475821][ T37] audit: type=1326 audit(1760320718.709:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9077 comm="syz.7.1174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd223deec9 code=0x7ffc0000 [ 303.475874][ T37] audit: type=1326 audit(1760320718.709:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9077 comm="syz.7.1174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd223deec9 code=0x7ffc0000 [ 308.806924][ T9140] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1195'. [ 316.784691][ T9197] netlink: 'syz.4.1214': attribute type 3 has an invalid length. [ 316.785234][ T9197] netlink: 'syz.4.1214': attribute type 3 has an invalid length. [ 317.264747][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.864271][ T9218] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1221'. [ 319.319914][ T61] Bluetooth: hci3: command 0x0406 tx timeout [ 319.661426][ T9230] xt_limit: Overflow, try lower: 324382443/4200216956 [ 320.095847][ T9242] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1231'. [ 321.757521][ T9260] overlayfs: failed to clone upperpath [ 323.061170][ T9269] syz_tun: entered allmulticast mode [ 323.187097][ T9268] syz_tun: left allmulticast mode [ 335.474213][ T5787] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 335.644220][ T5787] usb 8-1: Using ep0 maxpacket: 8 [ 336.361607][ T5787] usb 8-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 336.361636][ T5787] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 336.361656][ T5787] usb 8-1: Product: syz [ 336.361670][ T5787] usb 8-1: Manufacturer: syz [ 336.361683][ T5787] usb 8-1: SerialNumber: syz [ 336.419082][ T5787] usb 8-1: config 0 descriptor?? [ 336.542187][ T5787] gspca_main: se401-2.14.0 probing 047d:5003 [ 337.442979][ T5787] gspca_se401: write req failed req 0x57 val 0x00 error -71 [ 337.443090][ T5787] se401 8-1:0.0: probe with driver se401 failed with error -71 [ 337.462728][ T5787] usb 8-1: USB disconnect, device number 2 [ 341.642417][ T9423] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1290'. [ 341.642453][ T9423] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1290'. [ 346.307248][ T9456] uprobe: syz.4.1301:9456 failed to unregister, leaking uprobe [ 348.401089][ T9487] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 355.661367][ T9559] fuse: Unknown parameter 'fd0x0000000000000004' [ 355.782372][ C0] vkms_vblank_simulate: vblank timer overrun [ 356.322499][ C0] vkms_vblank_simulate: vblank timer overrun [ 356.782382][ C0] vkms_vblank_simulate: vblank timer overrun [ 356.805126][ C0] vkms_vblank_simulate: vblank timer overrun [ 356.876126][ C0] vkms_vblank_simulate: vblank timer overrun [ 357.742031][ C0] vkms_vblank_simulate: vblank timer overrun [ 358.310100][ C0] vkms_vblank_simulate: vblank timer overrun [ 358.856043][ C0] vkms_vblank_simulate: vblank timer overrun [ 359.328836][ C0] vkms_vblank_simulate: vblank timer overrun [ 359.624643][ C0] vkms_vblank_simulate: vblank timer overrun [ 359.937238][ C0] vkms_vblank_simulate: vblank timer overrun [ 360.012748][ C0] vkms_vblank_simulate: vblank timer overrun [ 361.077165][ T9626] netlink: 36 bytes leftover after parsing attributes in process `syz.7.1356'. [ 361.077185][ T9626] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1356'. [ 361.077217][ T9626] netlink: 36 bytes leftover after parsing attributes in process `syz.7.1356'. [ 361.077272][ T9626] netlink: 36 bytes leftover after parsing attributes in process `syz.7.1356'. [ 369.322593][ T9686] F2FS-fs (loop11): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 369.322842][ T9686] F2FS-fs (loop11): Can't find valid F2FS filesystem in 1th superblock [ 369.329899][ T9686] F2FS-fs (loop11): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 369.329925][ T9686] F2FS-fs (loop11): Can't find valid F2FS filesystem in 2th superblock [ 371.553789][ T9692] macsec1: entered promiscuous mode [ 371.553813][ T9692] vlan0: entered promiscuous mode [ 371.607428][ T9692] vlan0: left promiscuous mode [ 373.395657][ T37] audit: type=1326 audit(1760320788.619:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9714 comm="syz.7.1386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd223deec9 code=0x7ffc0000 [ 373.517077][ T37] audit: type=1326 audit(1760320788.669:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9714 comm="syz.7.1386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd223deec9 code=0x7ffc0000 [ 374.097557][ T37] audit: type=1326 audit(1760320788.759:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9714 comm="syz.7.1386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd223deec9 code=0x7ffc0000 [ 374.097614][ T37] audit: type=1326 audit(1760320789.319:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9714 comm="syz.7.1386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd223deec9 code=0x7ffc0000 [ 374.097659][ T37] audit: type=1326 audit(1760320789.319:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9714 comm="syz.7.1386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fbd223def03 code=0x7ffc0000 [ 374.097701][ T37] audit: type=1326 audit(1760320789.319:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9714 comm="syz.7.1386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7fbd223def87 code=0x7ffc0000 [ 374.097745][ T37] audit: type=1326 audit(1760320789.319:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9714 comm="syz.7.1386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7fbd2239632d code=0x7ffc0000 [ 374.097786][ T37] audit: type=1326 audit(1760320789.319:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9714 comm="syz.7.1386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7fbd22413609 code=0x7ffc0000 [ 374.224135][ T37] audit: type=1326 audit(1760320789.439:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9714 comm="syz.7.1386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd223deec9 code=0x7ffc0000 [ 374.224185][ T37] audit: type=1326 audit(1760320789.439:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9714 comm="syz.7.1386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fbd223deec9 code=0x7ffc0000 [ 375.644183][ T5786] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 375.797041][ T5786] usb 8-1: too many configurations: 37, using maximum allowed: 8 [ 375.936570][ T5801] Bluetooth: hci3: Unknown advertising packet type: 0x7f [ 375.936611][ T5801] Bluetooth: hci3: Malformed LE Event: 0x0d [ 375.957913][ T9715] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 375.958354][ T9715] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 375.978304][ T5786] usb 8-1: string descriptor 0 read error: -71 [ 375.978466][ T5786] usb 8-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 375.978494][ T5786] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 376.405634][ T5786] usb 8-1: can't set config #1, error -71 [ 377.009090][ T5786] usb 8-1: USB disconnect, device number 3 [ 379.459248][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 383.939624][ C1] af_packet: tpacket_rcv: packet too big, clamped from 70 to 4294967286. macoff=82 [ 387.559012][ T9806] Invalid ELF header magic: != ELF [ 397.442741][ T5801] Bluetooth: hci0: unexpected event for opcode 0x2031 [ 398.623692][ T37] kauditd_printk_skb: 94 callbacks suppressed [ 398.623706][ T37] audit: type=1326 audit(1760320813.849:199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9899 comm="syz.4.1444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4266a3eec9 code=0x7ffc0000 [ 398.677466][ T37] audit: type=1326 audit(1760320813.889:200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9899 comm="syz.4.1444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f4266a3eec9 code=0x7ffc0000 [ 398.726019][ T37] audit: type=1326 audit(1760320813.949:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9899 comm="syz.4.1444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4266a3eec9 code=0x7ffc0000 [ 398.774666][ T37] audit: type=1326 audit(1760320813.959:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9899 comm="syz.4.1444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4266a3eec9 code=0x7ffc0000 [ 399.315532][ T37] audit: type=1326 audit(1760320814.549:203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9899 comm="syz.4.1444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4266a3eec9 code=0x7ffc0000 [ 399.315976][ T37] audit: type=1326 audit(1760320814.549:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9899 comm="syz.4.1444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4266a3eec9 code=0x7ffc0000 [ 399.316451][ T37] audit: type=1326 audit(1760320814.549:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9899 comm="syz.4.1444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4266a3eec9 code=0x7ffc0000 [ 399.316763][ T37] audit: type=1326 audit(1760320814.549:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9899 comm="syz.4.1444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4266a3eec9 code=0x7ffc0000 [ 399.317314][ T37] audit: type=1326 audit(1760320814.549:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9899 comm="syz.4.1444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f4266a3eec9 code=0x7ffc0000 [ 399.317611][ T37] audit: type=1326 audit(1760320814.549:208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9899 comm="syz.4.1444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4266a3eec9 code=0x7ffc0000 [ 430.900276][ T37] kauditd_printk_skb: 32 callbacks suppressed [ 430.900294][ T37] audit: type=1800 audit(1760320846.129:241): pid=10066 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.4.1491" name="bus" dev="ramfs" ino=31794 res=0 errno=0 [ 438.251104][T10107] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1501'. [ 438.699717][ T61] Bluetooth: hci0: command 0x0406 tx timeout [ 441.913074][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 449.846293][T10161] rdma_op ffff888032f95a70 conn xmit_rdma 0000000000000000 [ 450.828336][T10163] overlayfs: failed to clone upperpath [ 471.268878][ T26] ================================================================== [ 471.268889][ T26] BUG: KASAN: vmalloc-out-of-bounds in run_irq_workd+0x116/0x190 [ 471.268910][ T26] Read of size 8 at addr ffffc90005c91090 by task irq_work/1/26 [ 471.268919][ T26] [ 471.268932][ T26] CPU: 1 UID: 0 PID: 26 Comm: irq_work/1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 471.268943][ T26] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 471.268955][ T26] Call Trace: [ 471.268961][ T26] [ 471.268968][ T26] dump_stack_lvl+0x189/0x250 [ 471.268981][ T26] ? run_irq_workd+0x116/0x190 [ 471.268992][ T26] ? __pfx_dump_stack_lvl+0x10/0x10 [ 471.269003][ T26] ? __pfx__printk+0x10/0x10 [ 471.269016][ T26] ? __virt_addr_valid+0xdc/0x5c0 [ 471.269027][ T26] ? __virt_addr_valid+0xdc/0x5c0 [ 471.269039][ T26] print_report+0xca/0x240 [ 471.269052][ T26] ? run_irq_workd+0x116/0x190 [ 471.269062][ T26] kasan_report+0x118/0x150 [ 471.269074][ T26] ? run_irq_workd+0x116/0x190 [ 471.269086][ T26] run_irq_workd+0x116/0x190 [ 471.269096][ T26] ? __pfx_run_irq_workd+0x10/0x10 [ 471.269106][ T26] ? schedule+0x91/0x360 [ 471.269122][ T26] ? smpboot_thread_fn+0x4d/0xa60 [ 471.269131][ T26] ? smpboot_thread_fn+0x4d/0xa60 [ 471.269139][ T26] smpboot_thread_fn+0x542/0xa60 [ 471.269148][ T26] ? smpboot_thread_fn+0x4d/0xa60 [ 471.269158][ T26] kthread+0x711/0x8a0 [ 471.269170][ T26] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 471.269185][ T26] ? __pfx_kthread+0x10/0x10 [ 471.269195][ T26] ? rt_spin_unlock+0x150/0x200 [ 471.269208][ T26] ? rt_spin_unlock+0x161/0x200 [ 471.269219][ T26] ? __pfx_kthread+0x10/0x10 [ 471.269230][ T26] ret_from_fork+0x4bc/0x870 [ 471.269246][ T26] ? __pfx_ret_from_fork+0x10/0x10 [ 471.269261][ T26] ? __switch_to_asm+0x39/0x70 [ 471.269274][ T26] ? __switch_to_asm+0x33/0x70 [ 471.269286][ T26] ? __pfx_kthread+0x10/0x10 [ 471.269297][ T26] ret_from_fork_asm+0x1a/0x30 [ 471.269313][ T26] [ 471.269317][ T26] [ 471.269319][ T26] The buggy address belongs to a vmalloc virtual mapping [ 471.269331][ T26] Memory state around the buggy address: [ 471.269336][ T26] ffffc90005c90f80: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 471.269343][ T26] ffffc90005c91000: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 471.269349][ T26] >ffffc90005c91080: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 471.269357][ T26] ^ [ 471.269362][ T26] ffffc90005c91100: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 471.269368][ T26] ffffc90005c91180: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 471.269373][ T26] ================================================================== [ 471.269386][ T26] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 471.269393][ T26] CPU: 1 UID: 0 PID: 26 Comm: irq_work/1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 471.269403][ T26] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 471.269409][ T26] Call Trace: [ 471.269412][ T26] [ 471.269415][ T26] dump_stack_lvl+0x99/0x250 [ 471.269427][ T26] ? __asan_memcpy+0x40/0x70 [ 471.269441][ T26] ? __pfx_dump_stack_lvl+0x10/0x10 [ 471.269452][ T26] ? __pfx__printk+0x10/0x10 [ 471.269465][ T26] vpanic+0x237/0x6d0 [ 471.269475][ T26] ? __pfx_vpanic+0x10/0x10 [ 471.269486][ T26] panic+0xb9/0xc0 [ 471.269494][ T26] ? __pfx_panic+0x10/0x10 [ 471.269502][ T26] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 471.269518][ T26] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 471.269535][ T26] ? run_irq_workd+0x116/0x190 [ 471.269544][ T26] check_panic_on_warn+0x89/0xb0 [ 471.269557][ T26] ? run_irq_workd+0x116/0x190 [ 471.269567][ T26] end_report+0x78/0x160 [ 471.269576][ T26] kasan_report+0x129/0x150 [ 471.269587][ T26] ? run_irq_workd+0x116/0x190 [ 471.269598][ T26] run_irq_workd+0x116/0x190 [ 471.269608][ T26] ? __pfx_run_irq_workd+0x10/0x10 [ 471.269618][ T26] ? schedule+0x91/0x360 [ 471.269631][ T26] ? smpboot_thread_fn+0x4d/0xa60 [ 471.269640][ T26] ? smpboot_thread_fn+0x4d/0xa60 [ 471.269648][ T26] smpboot_thread_fn+0x542/0xa60 [ 471.269657][ T26] ? smpboot_thread_fn+0x4d/0xa60 [ 471.269668][ T26] kthread+0x711/0x8a0 [ 471.269679][ T26] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 471.269688][ T26] ? __pfx_kthread+0x10/0x10 [ 471.269698][ T26] ? rt_spin_unlock+0x150/0x200 [ 471.269710][ T26] ? rt_spin_unlock+0x161/0x200 [ 471.269721][ T26] ? __pfx_kthread+0x10/0x10 [ 471.269732][ T26] ret_from_fork+0x4bc/0x870 [ 471.269747][ T26] ? __pfx_ret_from_fork+0x10/0x10 [ 471.269762][ T26] ? __switch_to_asm+0x39/0x70 [ 471.269775][ T26] ? __switch_to_asm+0x33/0x70 [ 471.269787][ T26] ? __pfx_kthread+0x10/0x10 [ 471.269798][ T26] ret_from_fork_asm+0x1a/0x30 [ 471.269814][ T26] [ 471.269978][ T26] Kernel Offset: disabled