last executing test programs: 7m49.065508545s ago: executing program 0 (id=117): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x80) fchdir(r3) r4 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) ftruncate(r4, 0x2007ffb) close(r4) openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x88882, 0x0) 7m47.577347024s ago: executing program 0 (id=119): add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0xd5108000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000001b00)={0x14, 0x2d, 0x1, 0x70bd26, 0x25dfdbfc, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x4c00d}, 0x20000000) 6m50.408996294s ago: executing program 0 (id=119): add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0xd5108000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000001b00)={0x14, 0x2d, 0x1, 0x70bd26, 0x25dfdbfc, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x4c00d}, 0x20000000) 5m57.990427126s ago: executing program 0 (id=119): add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0xd5108000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000001b00)={0x14, 0x2d, 0x1, 0x70bd26, 0x25dfdbfc, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x4c00d}, 0x20000000) 5m7.26465832s ago: executing program 0 (id=119): add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0xd5108000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000001b00)={0x14, 0x2d, 0x1, 0x70bd26, 0x25dfdbfc, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x4c00d}, 0x20000000) 3m4.555535414s ago: executing program 0 (id=119): add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0xd5108000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000001b00)={0x14, 0x2d, 0x1, 0x70bd26, 0x25dfdbfc, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x4c00d}, 0x20000000) 16.91690438s ago: executing program 4 (id=1019): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000001c0)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) socket$kcm(0x2, 0xa, 0x2) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000300)={"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"}) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000340001002dbd7000fedbdb2501000000080007"], 0x1c}, 0x1, 0x0, 0x0, 0x50}, 0x4000040) fsopen(&(0x7f0000000280)='configfs\x00', 0x1) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000001200)={0x50, 0x0, 0x0, {0x7, 0x27, 0x0, 0x500400, 0x403, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x10}}, 0x50) lgetxattr(&(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000004340)={0x2020}, 0x2020) ioctl$TUNGETVNETLE(0xffffffffffffffff, 0xc0189436, 0x0) sendto$packet(r0, &(0x7f0000000000), 0x0, 0x20008040, 0x0, 0x0) 12.863986434s ago: executing program 4 (id=1025): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000040), 0xa, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000080)=ANY=[]) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x2, &(0x7f0000000040)=[{0x74, 0x1, 0xfa, 0xe}, {0x6, 0x95, 0x2, 0x2}]}) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r1, 0x50009417, &(0x7f0000001280)={{r0}, 0x0, 0x0, @inherit={0x70, &(0x7f0000000400)=ANY=[@ANYBLOB="000000000000000005f7ffffff00977f03000000000000000c0000000000000002"]}, @devid}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 12.051821663s ago: executing program 2 (id=1026): r0 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000280)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a00)={r1, 0xd8, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001000), 0x8, 0x0, 0x8, 0xffffffffffffff0e, 0x0}}, 0x10) 11.958274437s ago: executing program 1 (id=1027): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x2c, r2, 0x1, 0x0, 0x0, {0x1c}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}]}, 0x2c}}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000480)=@abs={0x0, 0x0, 0x8004e24}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={&(0x7f0000000d00)='sched_switch\x00'}, 0x10) r6 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r6, &(0x7f0000000640)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x2, 0x4, 0x4, 0x5, {0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0xfffe}}}, 0x3a) mknod$loop(&(0x7f00000017c0)='./file0\x00', 0x1, 0x0) mount(&(0x7f00000000c0)=@filename='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000080)='ubifs\x00', 0x0, 0x0) 9.632946975s ago: executing program 1 (id=1029): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060"], 0xb8}}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x4000000) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB], 0xb8}}, 0x0) r2 = epoll_create(0x2e) epoll_pwait2(r2, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x25dfdbfe, {{@in6=@private0={0xfc, 0x0, '\x00', 0x40}, @in6=@ipv4={'\x00', '\xff\xff', @loopback}, 0x0, 0x400, 0x0, 0x0, 0xa, 0x60, 0x0, 0x0, 0x0, 0xee01}, {}, {}, 0x1}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x40, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x9}, {0x0, 0x5}}}, 0xb8}}, 0x4000) 9.632531216s ago: executing program 3 (id=1030): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xffffffffffffffb3}, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x80000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_pauseparam={0x12, 0x0, 0x0, 0xee1}}) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="11000000040000000400000005"], 0x50) r3 = socket$netlink(0x10, 0x3, 0x4) writev(r3, &(0x7f0000000300)=[{&(0x7f0000000340)="580000001400192340834b80040d8c560a117436c379000000000000000058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100070c100000000000224e0000", 0x58}], 0x1) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, 0x0, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xd, 0x0, &(0x7f0000000040)="25a688a800a344000000000000", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0}, 0x50) prctl$PR_SCHED_CORE(0x3e, 0x5, 0x0, 0x2, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000002000)=""/102400, 0x19000) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) 9.599555456s ago: executing program 4 (id=1031): openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000840)={&(0x7f00000009c0)=@bridge_getlink={0x28, 0x12, 0x101, 0x20000000, 0x0, {0x7, 0x0, 0x0, 0x0, 0x4140}, [@IFLA_EXT_MASK={0x8, 0x1d, 0xff}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000004}, 0x0) setsockopt$rose(r0, 0x104, 0x4, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRES32=r6, @ANYBLOB="20000100", @ANYRES32=r6], 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x40080) 9.59867217s ago: executing program 2 (id=1032): sendmsg$inet(0xffffffffffffffff, 0x0, 0x1) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket(0x200000000000011, 0x4000000000080002, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) bind$packet(r4, &(0x7f0000001100)={0x11, 0x3, r6, 0x1, 0x0, 0x6, @multicast}, 0x14) r7 = dup2(r4, r4) sendmmsg$unix(r7, &(0x7f0000008380), 0x400000000000174, 0x4008890) 9.218287452s ago: executing program 1 (id=1033): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0xe3680, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59) connect$inet6(r4, &(0x7f0000000200)={0xa, 0xffff, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f0000000040), 0x4) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_256={{0x304}, "0002002000", "07f217bd74511e465bbbd5000088363f63af84db44be5900", "00f8ff00", "8ce63ecbc640735f"}, 0x38) sendto$inet6(r4, 0x0, 0x0, 0x8000, 0x0, 0x0) close(r4) 8.360254481s ago: executing program 3 (id=1034): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000000000400000000000000008500000087000000180100002020702500000000002020207b1af8ff00"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x44004) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r5}, 0x10) syz_open_dev$I2C(0x0, 0x80, 0x14000) mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x2014800, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x8, 0x3, 0x590, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x4c0, 0xffffffff, 0xffffffff, 0x4c0, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x1a0, 0x1c0, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x81, 0x0, 0x24, 0x0, 'syz1\x00'}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x298, 0x300, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x1, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'syz1\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5f0) 8.203121329s ago: executing program 2 (id=1035): mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file1\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xffffffffffffffb3}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) ioctl$VIDIOC_S_INPUT(0xffffffffffffffff, 0xc0045627, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) read$qrtrtun(0xffffffffffffffff, 0x0, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x111, 0x4}}, 0x20) symlinkat(&(0x7f0000000140)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', r0, &(0x7f0000000000)='./file0\x00') mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') link(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='./bus\x00') syz_usb_connect(0x0, 0x0, 0x0, 0x0) 6.571167975s ago: executing program 4 (id=1036): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8f}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) r4 = gettid() futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) tkill(r4, 0x7) ptrace$setregs(0xd, r3, 0x2, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") ptrace$getregset(0x4205, r3, 0x200, &(0x7f0000000080)={0x0, 0x30}) 6.329690726s ago: executing program 3 (id=1037): ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1, 0x5}}, './file0\x00'}) syz_open_dev$evdev(0x0, 0x0, 0x8840) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000480), 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x40046208, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000340)={0x2, 0x4e20, @multicast2}, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000004380), r1) sendmsg$NFC_CMD_VENDOR(r1, &(0x7f00000045c0)={0x0, 0x0, &(0x7f0000004580)={&(0x7f0000004440)=ANY=[@ANYRES16=r2, @ANYBLOB="01002dbd7000ffdbdf251d000000"], 0x14}, 0x1, 0x0, 0x0, 0x40020}, 0x40000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000580), 0xa, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_procfs(0x0, &(0x7f0000019100)='net/fib_trie\x00') socket$inet_udp(0x2, 0x2, 0x0) ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000300)={&(0x7f0000000200), &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0], &(0x7f00000002c0), 0x0, 0x4, 0x1}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r4, 0x0, 0x40) 6.30385489s ago: executing program 1 (id=1038): bpf$MAP_CREATE(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0xc4c85512, &(0x7f0000000780)={{0x7, 0x1, 0x0, 0x800, 'syz0\x00'}, 0x1, [0x0, 0x80, 0x8000000000000000, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x5, 0x0, 0x0, 0x3, 0x0, 0x1, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x42, 0x0, 0xfffffffffffffffd, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x0, 0x0, 0xd453, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffc, 0x9, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7fffffff, 0x0, 0x0, 0x80000000000, 0x79, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffffc, 0x8, 0x0, 0x3, 0x0, 0x0, 0x0, 0x80000, 0x0, 0xfffffffffffffffd, 0x4000000000000, 0x200, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x34, 0x0, 0x4, 0x0, 0x400, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ffffffc, 0x20b50d5b]}) socket$nl_netfilter(0x10, 0x3, 0xc) socket$key(0xf, 0x3, 0x2) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_buf(r1, 0x29, 0x39, &(0x7f0000000040)="ff0204000000000000000000000000000000000000080000", 0x18) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e2b, 0xb, @private1={0xfc, 0x1, '\x00', 0x6}, 0x6}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000002940)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}}], 0x62, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x1, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0xd, &(0x7f0000000000)=@framed={{}, [@func={0x85, 0x0, 0x1, 0x0, 0x1}, @exit, @printk={@x}]}, &(0x7f0000000100)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) 5.029769146s ago: executing program 3 (id=1039): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000480)=@abs={0x0, 0x0, 0x8004e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffff05850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={&(0x7f0000000d00)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) dup(0xffffffffffffffff) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x4040890) r4 = socket$netlink(0x10, 0x3, 0xa) r5 = dup(r4) r6 = open(&(0x7f0000000140)='./file1\x00', 0x109cc2, 0x5c) ftruncate(r6, 0x200004) sendfile(r5, r6, 0x0, 0x80001d00c0d1) 5.020114035s ago: executing program 4 (id=1040): r0 = socket(0x2b, 0x80801, 0x1) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4, 0x3ff, @empty, 0x1}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r4}, 0x10) setresuid(0xee00, 0xee01, 0xee01) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0xfffffe00, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) sendfile(r5, r0, 0x0, 0x7fffffff) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc080}, 0xe821651e0a1b45fc) 4.918071444s ago: executing program 1 (id=1041): ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) dup(r3) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0585609, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0xff}) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x318, 0x1, 0x24}, 0x9c) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x28, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x9c}}, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000}) 2.625152457s ago: executing program 3 (id=1042): syz_open_dev$cec(0x0, 0x0, 0x180) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f00000000c0)=ANY=[@ANYRES32=r2], 0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = socket$netlink(0x10, 0x3, 0x0) getpeername(r3, 0x0, &(0x7f0000001180)) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000000a00)=""/102384, 0x18ff0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x16b601, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000006112000000000000950000000000000051fa7824c74186dc02ec0696c37b64e3b24da3180100000005345c0f63cdc2e82818254950ee03568b8809a1f04c7c4750eabfafcb9531b31e6a86827d1010c5a909ab98e00e19644a88e95ba26d1c9eecddb2d11c541418ceeb29b9b6829c6e433822bdb3cc85244aab66c1aae9314d7381fcfeb970bea672010000000000000043144648a07a975bd89dc398712376610faa54f12495b4659be8673086f6f3543205d4bc4ce05b8b961103673dff7f158052e6"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$sock_SIOCETHTOOL(r5, 0x89f0, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000000340)=@ethtool_regs={0x7}}) 2.6238621s ago: executing program 2 (id=1043): ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, &(0x7f0000000100)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x18) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) r3 = openat$audio(0xffffffffffffff9c, 0x0, 0xa2442, 0x0) write$dsp(r3, &(0x7f00000004c0)='\x00', 0x1) r4 = syz_open_dev$video4linux(&(0x7f0000000000), 0x5, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r4, 0x80885659, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000002fc0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x5a0b42ce9983b375, 0x2, 0x0, 0x0, 0x3000}, [@RTA_DST={0x8, 0x1, @dev}]}, 0x24}}, 0x0) 2.353737889s ago: executing program 1 (id=1044): bind$inet(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) socket$nl_xfrm(0x10, 0x3, 0x6) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x3a) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000009780)={0x2020}, 0x2020) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000080)={0x5, 0x40, 0xfa00, {{0xa, 0x0, 0x8001, @empty}, {0xa, 0x0, 0x0, @empty}}}, 0x48) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) sendmsg$RDMA_NLDEV_CMD_DELLINK(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)={0x18, 0x1404, 0x1, 0x70bd2d, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) 1.190486224s ago: executing program 2 (id=1045): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=@FILEID_UDF_WITH_PARENT={0x14}, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) request_key(&(0x7f0000000400)='pkcs7_test\x00', &(0x7f0000000440)={'syz', 0x0}, 0x0, 0xfffffffffffffffc) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)={0x20, r4, 0xb03, 0x0, 0x0, {}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8}]}]}, 0x20}}, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, 0x0, 0x0) r5 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r5, 0x8923, 0x0) 94.988329ms ago: executing program 2 (id=1046): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x8000) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) fanotify_init(0x8, 0x80000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x301, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}]}], {0x14}}, 0x68}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000005c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELFLOWTABLE={0x34, 0x18, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_HOOK={0x8, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x4}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x20008000) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r2 = open(&(0x7f0000000580)='./file1\x00', 0x80342, 0x1df2a23c5997fa5f) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000180)={0xa0, 0xffffffffffffffda, 0x0, {{0x8, 0x3, 0x5, 0x8, 0x3, 0x1, {0x1, 0x17f, 0x20ff, 0x5, 0x89, 0xd615, 0xb, 0x7fffffff, 0xfffffffe, 0x8000, 0x0, 0x0, 0x0, 0x3ff, 0x1}}, {0x0, 0x13}}}, 0xa0) sendfile(r2, r2, &(0x7f0000000080), 0x7f03) 1.298372ms ago: executing program 3 (id=1047): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = syz_open_dev$video4linux(&(0x7f0000000040), 0x2cf1389d, 0x0) ioctl$VIDIOC_QUERYMENU(r3, 0xc02c5625, &(0x7f0000000000)={0xf00001, 0x9, @value=0x7fffffff}) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$xdp(0x2c, 0x3, 0x0) close(r4) ioprio_get$pid(0x1, 0x0) ioctl$sock_inet_SIOCRTMSG(0xffffffffffffffff, 0x890d, 0x0) ioprio_set$pid(0x2, 0x0, 0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/vmstat\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x20000023896) 0s ago: executing program 4 (id=1048): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) socket$nl_route(0x10, 0x3, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000380)='./bus\x00', 0x0, 0x0) fanotify_init(0x200, 0x0) syz_io_uring_setup(0xd1, &(0x7f0000000480)={0x0, 0x8a6f, 0x100, 0x22, 0x335}, 0x0, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000600), 0x8) syz_open_dev$mouse(&(0x7f0000000000), 0x0, 0x8042) syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x822b01) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) socket$inet6(0xa, 0x800000000000002, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{}, 0x0, &(0x7f0000000200)=r2}, 0x1e) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r1], &(0x7f0000000180), &(0x7f0000000200), &(0x7f00000001c0)}) kernel console output (not intermixed with test programs): [1, 0] type 2 family 0 port 6081 - 0 [ 98.813983][ T5835] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.823226][ T5835] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.882021][ T1165] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.896153][ T30] audit: type=1326 audit(1750253360.122:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5944 comm="syz.3.4" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f021598e929 code=0x7ffc0000 [ 98.908083][ T2973] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.935626][ T1165] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.935884][ T2973] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.951641][ T30] audit: type=1326 audit(1750253360.122:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5944 comm="syz.3.4" exe="/root/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7f021598e929 code=0x7ffc0000 [ 98.981268][ T30] audit: type=1326 audit(1750253360.122:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5944 comm="syz.3.4" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f021598e929 code=0x7ffc0000 [ 99.041958][ T30] audit: type=1326 audit(1750253360.122:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5944 comm="syz.3.4" exe="/root/syz-executor" sig=0 arch=c000003e syscall=227 compat=0 ip=0x7f021598e929 code=0x7ffc0000 [ 99.075985][ T30] audit: type=1326 audit(1750253360.000:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5944 comm="syz.3.4" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f021598e929 code=0x7ffc0000 [ 99.099245][ T30] audit: type=1326 audit(1750253360.000:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5944 comm="syz.3.4" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f021598e929 code=0x7ffc0000 [ 99.159588][ T2973] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.181833][ T2973] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.199513][ T30] audit: type=1326 audit(1750253360.000:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5944 comm="syz.3.4" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f021598e929 code=0x7ffc0000 [ 99.236349][ T30] audit: type=1326 audit(1750253360.000:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5944 comm="syz.3.4" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f021598e929 code=0x7ffc0000 [ 99.306271][ T30] audit: type=1326 audit(1750253360.080:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5944 comm="syz.3.4" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f021598e929 code=0x7ffc0000 [ 99.382135][ T30] audit: type=1326 audit(1750253360.080:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5944 comm="syz.3.4" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f021598e929 code=0x7ffc0000 [ 99.421705][ T2997] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.449402][ T2997] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.487111][ T5833] Bluetooth: hci0: command tx timeout [ 99.526459][ T5833] Bluetooth: hci1: command tx timeout [ 99.555177][ T2973] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.570281][ T2973] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.630127][ T5950] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2'. [ 99.640947][ T5833] Bluetooth: hci3: command tx timeout [ 99.655741][ T5833] Bluetooth: hci2: command tx timeout [ 99.695845][ T5833] Bluetooth: hci4: command tx timeout [ 100.556708][ T1110] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.379124][ T1110] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.577779][ T1165] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.627761][ T1165] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.996588][ T5976] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 106.434967][ T5889] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 106.465127][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 106.474284][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 107.417068][ T5889] usb 2-1: Using ep0 maxpacket: 32 [ 107.426864][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 107.437576][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 107.619308][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 107.721685][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 107.824139][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 107.926457][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 108.028825][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 108.374464][ T5889] usb 2-1: device descriptor read/all, error -71 [ 109.506759][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 116.052835][ T6064] netlink: 8 bytes leftover after parsing attributes in process `syz.1.32'. [ 116.546323][ T6064] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 116.763018][ T6064] netlink: 24 bytes leftover after parsing attributes in process `syz.1.32'. [ 116.901341][ T6072] netlink: 136 bytes leftover after parsing attributes in process `syz.0.34'. [ 116.932524][ T6072] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check. [ 117.270219][ T6077] xt_TCPMSS: Only works on TCP SYN packets [ 120.949108][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 120.949129][ T30] audit: type=1800 audit(1750253382.050:15): pid=6097 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.1.42" name="bus" dev="ramfs" ino=8381 res=0 errno=0 [ 122.222704][ T6112] warning: `syz.1.45' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 123.773479][ T6122] bridge_slave_0: left allmulticast mode [ 123.779472][ T6122] bridge_slave_0: left promiscuous mode [ 123.786421][ T6122] bridge0: port 1(bridge_slave_0) entered disabled state [ 123.882950][ T6122] bridge_slave_1: left allmulticast mode [ 123.908143][ T6122] bridge_slave_1: left promiscuous mode [ 123.934086][ T6122] bridge0: port 2(bridge_slave_1) entered disabled state [ 123.958542][ T6122] bond0: (slave bond_slave_0): Releasing backup interface [ 123.971846][ T6122] bond0: (slave bond_slave_1): Releasing backup interface [ 124.010648][ T6122] team0: Port device team_slave_0 removed [ 124.024709][ T6122] team0: Port device team_slave_1 removed [ 124.049741][ T6122] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 124.061783][ T6122] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 124.072933][ T6122] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 125.438123][ T6122] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 125.516328][ T6146] binder: BINDER_SET_CONTEXT_MGR already set [ 125.555645][ T6146] binder: 6144:6146 ioctl 4018620d 200000000040 returned -16 [ 125.573120][ T6150] binder: 6144:6150 ioctl c0306201 200000000a00 returned -14 [ 132.085405][ T6201] netlink: 12 bytes leftover after parsing attributes in process `syz.3.67'. [ 133.232025][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.239274][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.607659][ T6214] zonefs (nullb0) ERROR: Not a zoned block device [ 136.288312][ T6205] Set syz1 is full, maxelem 65536 reached [ 136.445816][ T5915] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 136.608597][ T5915] usb 4-1: config 0 has no interfaces? [ 136.614274][ T5915] usb 4-1: New USB device found, idVendor=28bd, idProduct=0935, bcdDevice= 0.00 [ 136.625763][ T5915] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.661032][ T5915] usb 4-1: config 0 descriptor?? [ 136.930986][ T43] usb 4-1: USB disconnect, device number 2 [ 138.424702][ T6235] netlink: 60 bytes leftover after parsing attributes in process `syz.0.78'. [ 138.466581][ T5889] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 138.648299][ T6240] netlink: 104 bytes leftover after parsing attributes in process `syz.2.80'. [ 138.888143][ T5889] usb 2-1: Using ep0 maxpacket: 32 [ 139.621836][ T5889] usb 2-1: unable to get BOS descriptor or descriptor too short [ 139.681435][ T5889] usb 2-1: config 127 has an invalid interface number: 51 but max is 0 [ 139.772217][ T5889] usb 2-1: config 127 has no interface number 0 [ 139.852320][ T5889] usb 2-1: config 127 interface 51 has no altsetting 0 [ 140.135991][ T5889] usb 2-1: string descriptor 0 read error: -71 [ 140.142393][ T5889] usb 2-1: New USB device found, idVendor=1410, idProduct=a005, bcdDevice=53.d4 [ 140.225607][ T5889] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.457052][ T5889] usb 2-1: can't set config #127, error -71 [ 140.706069][ T5889] usb 2-1: USB disconnect, device number 4 [ 141.287534][ T6259] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 141.495132][ T6259] netlink: 12 bytes leftover after parsing attributes in process `syz.4.86'. [ 145.578130][ T6284] syzkaller0: entered promiscuous mode [ 145.584134][ T6284] syzkaller0: entered allmulticast mode [ 148.320284][ T30] audit: type=1326 audit(1750253409.420:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6314 comm="syz.0.101" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0e41b8e929 code=0x0 [ 149.857333][ T6328] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 150.417934][ T6339] Cannot find add_set index 0 as target [ 151.248719][ T6343] netlink: 8 bytes leftover after parsing attributes in process `syz.2.111'. [ 151.723630][ T30] audit: type=1804 audit(1750253412.820:17): pid=6353 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.1.113" name="/newroot/26/bus/bus" dev="overlay" ino=163 res=1 errno=0 [ 153.629742][ T1002] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.038859][ T6371] ptrace attach of "./syz-executor exec"[5839] was attempted by " [ 154.916629][ T1002] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.486779][ T6388] netlink: 4 bytes leftover after parsing attributes in process `syz.4.125'. [ 157.376631][ T1002] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.639372][ T5833] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 157.652534][ T5833] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 157.662101][ T5833] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 157.677701][ T5833] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 157.685341][ T5833] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 157.699846][ T1002] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.048347][ T6411] process 'syz.4.131' launched './file0' with NULL argv: empty string added [ 159.186379][ T1002] bridge_slave_1: left allmulticast mode [ 159.199051][ T1002] bridge_slave_1: left promiscuous mode [ 159.213880][ T1002] bridge0: port 2(bridge_slave_1) entered disabled state [ 159.935662][ T5833] Bluetooth: hci0: command tx timeout [ 160.213698][ T1002] bridge_slave_0: left allmulticast mode [ 160.240737][ T1002] bridge_slave_0: left promiscuous mode [ 160.248028][ T1002] bridge0: port 1(bridge_slave_0) entered disabled state [ 160.757771][ T6431] gfs2: gfs2 mount does not exist [ 162.005961][ T5833] Bluetooth: hci0: command tx timeout [ 164.091373][ T5833] Bluetooth: hci0: command tx timeout [ 164.137859][ T1002] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 164.152013][ T1002] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 164.163361][ T1002] bond0 (unregistering): Released all slaves [ 164.276078][ T6456] netlink: 'syz.2.144': attribute type 10 has an invalid length. [ 165.511480][ T6456] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 165.756132][ T6478] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 166.056870][ T43] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 166.235870][ T5833] Bluetooth: hci0: command tx timeout [ 166.244162][ T43] usb 5-1: Using ep0 maxpacket: 8 [ 166.344765][ T43] usb 5-1: config 0 has no interfaces? [ 166.448531][ T43] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 167.004138][ T43] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.032043][ T43] usb 5-1: config 0 descriptor?? [ 168.047320][ T6505] ======================================================= [ 168.047320][ T6505] WARNING: The mand mount option has been deprecated and [ 168.047320][ T6505] and is ignored by this kernel. Remove the mand [ 168.047320][ T6505] option from the mount to silence this warning. [ 168.047320][ T6505] ======================================================= [ 168.090532][ T6402] chnl_net:caif_netlink_parms(): no params data found [ 168.248488][ T1002] hsr_slave_0: left promiscuous mode [ 168.267586][ T1002] hsr_slave_1: left promiscuous mode [ 168.276730][ T1002] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 168.296546][ T1002] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 168.346938][ T1002] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 168.355172][ T6515] netlink: 4 bytes leftover after parsing attributes in process `syz.2.159'. [ 168.372152][ T1002] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 168.464379][ T1002] veth1_macvtap: left promiscuous mode [ 168.477714][ T1002] veth0_macvtap: left promiscuous mode [ 168.495132][ T1002] veth1_vlan: left promiscuous mode [ 168.502913][ T1002] veth0_vlan: left promiscuous mode [ 169.274987][ T3549] usb 5-1: USB disconnect, device number 2 [ 171.696988][ T3549] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 172.080736][ T3549] usb 2-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 172.105777][ T3549] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 172.134571][ T3549] usb 2-1: config 0 descriptor?? [ 172.753347][ T1002] team0 (unregistering): Port device team_slave_1 removed [ 172.824727][ T3549] usb 2-1: Cannot set autoneg [ 172.840089][ T1002] team0 (unregistering): Port device team_slave_0 removed [ 172.846027][ T3549] MOSCHIP usb-ethernet driver 2-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 172.924245][ T3549] usb 2-1: USB disconnect, device number 5 [ 174.110903][ T6515] syz_tun: entered promiscuous mode [ 174.126076][ T6515] macvtap1: entered promiscuous mode [ 174.133325][ T6515] macvtap1: entered allmulticast mode [ 174.154813][ T6515] syz_tun: entered allmulticast mode [ 174.203024][ T6518] syz_tun: left allmulticast mode [ 174.221660][ T6518] syz_tun: left promiscuous mode [ 175.983726][ T6567] team0 (unregistering): Port device team_slave_0 removed [ 176.008804][ T6567] team0 (unregistering): Port device team_slave_1 removed [ 176.482378][ T6600] netlink: 36 bytes leftover after parsing attributes in process `syz.2.179'. [ 177.087328][ T6585] syz.4.176 (6585) used greatest stack depth: 17992 bytes left [ 177.146722][ T6402] bridge0: port 1(bridge_slave_0) entered blocking state [ 177.171065][ T6402] bridge0: port 1(bridge_slave_0) entered disabled state [ 177.195881][ T6402] bridge_slave_0: entered allmulticast mode [ 177.204205][ T6402] bridge_slave_0: entered promiscuous mode [ 177.377946][ T6402] bridge0: port 2(bridge_slave_1) entered blocking state [ 177.385187][ T6402] bridge0: port 2(bridge_slave_1) entered disabled state [ 177.393127][ T6402] bridge_slave_1: entered allmulticast mode [ 177.401207][ T6402] bridge_slave_1: entered promiscuous mode [ 178.707867][ T6402] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 179.839636][ T6402] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 181.270050][ T6402] team0: Port device team_slave_0 added [ 181.669959][ T6402] team0: Port device team_slave_1 added [ 183.189099][ T6402] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 183.252311][ T6402] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 183.318064][ T6402] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 183.340619][ T6402] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 183.355317][ T6402] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 183.394749][ T6402] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 183.560260][ T5820] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 184.885769][ T5820] usb 2-1: Using ep0 maxpacket: 32 [ 185.030107][ T6402] hsr_slave_0: entered promiscuous mode [ 185.057078][ T6402] hsr_slave_1: entered promiscuous mode [ 185.063544][ T6402] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 185.102863][ T6402] Cannot create hsr debugfs directory [ 185.115145][ T5820] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 185.132511][ T5820] usb 2-1: config 0 has no interface number 0 [ 185.145165][ T5820] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 185.159839][ T5820] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.168058][ T5820] usb 2-1: Product: syz [ 185.172335][ T5820] usb 2-1: Manufacturer: syz [ 185.181156][ T5820] usb 2-1: SerialNumber: syz [ 185.200682][ T5820] usb 2-1: config 0 descriptor?? [ 185.237951][ T5820] smsc95xx v2.0.0 [ 185.242360][ T5820] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 185.267491][ T5820] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -22 [ 185.292495][ T30] audit: type=1326 audit(1750253446.390:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6677 comm="syz.2.197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad45b8e929 code=0x7ffc0000 [ 185.371177][ T30] audit: type=1326 audit(1750253446.390:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6677 comm="syz.2.197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7fad45b8e929 code=0x7ffc0000 [ 185.392943][ T30] audit: type=1326 audit(1750253446.390:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6677 comm="syz.2.197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad45b8e929 code=0x7ffc0000 [ 185.453869][ T30] audit: type=1326 audit(1750253446.390:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6677 comm="syz.2.197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad45b8e929 code=0x7ffc0000 [ 185.564229][ T30] audit: type=1326 audit(1750253446.410:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6677 comm="syz.2.197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7fad45b8e929 code=0x7ffc0000 [ 185.585767][ C0] vkms_vblank_simulate: vblank timer overrun [ 185.643195][ T5915] usb 2-1: USB disconnect, device number 6 [ 185.652018][ T6682] netlink: 8 bytes leftover after parsing attributes in process `syz.3.199'. [ 185.689748][ T30] audit: type=1326 audit(1750253446.430:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6677 comm="syz.2.197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad45b8e929 code=0x7ffc0000 [ 185.784821][ T30] audit: type=1326 audit(1750253446.430:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6677 comm="syz.2.197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fad45b8d290 code=0x7ffc0000 [ 185.864595][ T6685] nilfs2: Unknown parameter 'barrierfo' [ 185.905218][ T30] audit: type=1326 audit(1750253446.430:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6677 comm="syz.2.197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad45b8e929 code=0x7ffc0000 [ 186.896481][ T30] audit: type=1326 audit(1750253446.430:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6677 comm="syz.2.197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=243 compat=0 ip=0x7fad45b8e929 code=0x7ffc0000 [ 186.963135][ T30] audit: type=1326 audit(1750253446.430:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6677 comm="syz.2.197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad45b8e929 code=0x7ffc0000 [ 186.984622][ C0] vkms_vblank_simulate: vblank timer overrun [ 189.174268][ T6724] xt_time: unknown flags 0xc [ 194.209873][ T6760] netlink: 28 bytes leftover after parsing attributes in process `syz.1.216'. [ 194.582625][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.589141][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 196.345432][ T6402] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 196.390866][ T6402] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 196.470476][ T6402] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 196.523775][ T6402] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 197.103755][ T6799] netlink: 'syz.3.224': attribute type 10 has an invalid length. [ 197.111985][ T6799] netlink: 40 bytes leftover after parsing attributes in process `syz.3.224'. [ 197.177294][ T6799] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 198.191931][ T6402] 8021q: adding VLAN 0 to HW filter on device bond0 [ 198.351260][ T6402] 8021q: adding VLAN 0 to HW filter on device team0 [ 198.417397][ T65] bridge0: port 1(bridge_slave_0) entered blocking state [ 198.425327][ T65] bridge0: port 1(bridge_slave_0) entered forwarding state [ 198.581483][ T3029] bridge0: port 2(bridge_slave_1) entered blocking state [ 198.588749][ T3029] bridge0: port 2(bridge_slave_1) entered forwarding state [ 200.361087][ T6402] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 200.650984][ T6402] veth0_vlan: entered promiscuous mode [ 201.538932][ T6402] veth1_vlan: entered promiscuous mode [ 202.339755][ T6853] netlink: 24 bytes leftover after parsing attributes in process `syz.2.235'. [ 202.349343][ T6853] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 203.042285][ T6402] veth0_macvtap: entered promiscuous mode [ 203.263278][ T6402] veth1_macvtap: entered promiscuous mode [ 203.899742][ T6866] orangefs_mount: mount request failed with -4 [ 204.000738][ T5820] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 204.131251][ T6402] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 204.198198][ T6402] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 204.227529][ T5820] usb 5-1: New USB device found, idVendor=055f, idProduct=c420, bcdDevice=6a.33 [ 204.259578][ T6402] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.269235][ T5820] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 204.313673][ T6402] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.325185][ T5820] usb 5-1: config 0 descriptor?? [ 204.364741][ T6402] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.378125][ T5820] gspca_main: sunplus-2.14.0 probing 055f:c420 [ 204.409067][ T6402] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.551620][ T6872] overlayfs: statfs failed on './file0' [ 204.652779][ T6872] overlayfs: statfs failed on './file0' [ 204.986870][ T5820] gspca_sunplus: reg_w_riv err -71 [ 205.094470][ T5820] sunplus 5-1:0.0: probe with driver sunplus failed with error -71 [ 205.729173][ T5820] usb 5-1: USB disconnect, device number 3 [ 207.107436][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 207.215791][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 207.497147][ T6896] capability: warning: `syz.2.245' uses deprecated v2 capabilities in a way that may be insecure [ 208.177953][ T5833] Bluetooth: hci4: connection err: -111 [ 208.209001][ T2997] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 208.284545][ T2997] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 209.594681][ T3549] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 209.747573][ T6915] netlink: 'syz.1.252': attribute type 1 has an invalid length. [ 210.517784][ T3549] usb 5-1: Using ep0 maxpacket: 16 [ 210.533988][ T3549] usb 5-1: config 0 has an invalid interface number: 68 but max is 0 [ 210.554908][ T3549] usb 5-1: config 0 has no interface number 0 [ 210.582608][ T3549] usb 5-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=dc.c4 [ 210.607442][ T3549] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 210.657035][ T3549] usb 5-1: Product: syz [ 210.662554][ T3549] usb 5-1: Manufacturer: syz [ 211.154940][ T3549] usb 5-1: SerialNumber: syz [ 211.182620][ T3549] usb 5-1: config 0 descriptor?? [ 211.373261][ T3549] usb 5-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 211.412074][ T3549] usb 5-1: USB disconnect, device number 4 [ 211.418946][ T49] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.434719][ T1002] usb 5-1: Failed to submit usb control message: -71 [ 211.474255][ T1002] usb 5-1: unable to send the bmi data to the device: -71 [ 211.495586][ T1002] usb 5-1: unable to get target info from device [ 211.575914][ T1002] usb 5-1: could not get target info (-71) [ 211.581994][ T1002] usb 5-1: could not probe fw (-71) [ 211.723834][ T49] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.011272][ T49] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.274267][ T6944] netlink: 4 bytes leftover after parsing attributes in process `syz.3.257'. [ 213.699433][ T49] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.816637][ T6944] bridge0: port 2(bridge_slave_1) entered disabled state [ 213.969196][ T6944] bridge_slave_1 (unregistering): left allmulticast mode [ 213.989744][ T6944] bridge_slave_1 (unregistering): left promiscuous mode [ 214.012463][ T6944] bridge0: port 2(bridge_slave_1) entered disabled state [ 214.111319][ T43] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 214.266986][ T43] usb 3-1: Using ep0 maxpacket: 16 [ 214.295923][ T43] usb 3-1: config 0 has an invalid interface number: 251 but max is 0 [ 214.304189][ T43] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 214.368549][ T43] usb 3-1: config 0 has no interface number 0 [ 214.408355][ T43] usb 3-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 214.439696][ T43] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 214.478898][ T43] usb 3-1: Product: syz [ 214.483136][ T43] usb 3-1: Manufacturer: syz [ 214.554750][ T43] usb 3-1: SerialNumber: syz [ 214.567030][ T49] bridge_slave_1: left allmulticast mode [ 214.572763][ T49] bridge_slave_1: left promiscuous mode [ 214.596988][ T43] usb 3-1: config 0 descriptor?? [ 214.605869][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 214.621611][ T43] asix 3-1:0.251: probe with driver asix failed with error -22 [ 214.700942][ T49] bridge_slave_0: left allmulticast mode [ 214.732927][ T49] bridge_slave_0: left promiscuous mode [ 214.765557][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 214.862137][ T5837] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 214.871322][ T5837] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 214.880681][ T5837] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 214.894921][ T5837] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 214.903516][ T5837] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 216.777884][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 216.836358][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 216.854998][ T49] bond0 (unregistering): Released all slaves [ 216.966095][ T5841] Bluetooth: hci0: command tx timeout [ 217.033237][ T43] usb 3-1: USB disconnect, device number 2 [ 217.039939][ T3549] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 217.125734][ T5841] Bluetooth: hci1: command 0x0406 tx timeout [ 217.136226][ T51] Bluetooth: hci3: command 0x0406 tx timeout [ 217.142290][ T51] Bluetooth: hci4: command 0x0406 tx timeout [ 217.148729][ T5841] Bluetooth: hci2: command 0x0406 tx timeout [ 217.375578][ T3549] usb 5-1: Using ep0 maxpacket: 32 [ 217.387449][ T3549] usb 5-1: unable to get BOS descriptor or descriptor too short [ 217.401911][ T3549] usb 5-1: config 253 has an invalid interface number: 202 but max is 0 [ 217.414269][ T3549] usb 5-1: config 253 has no interface number 0 [ 217.424148][ T30] kauditd_printk_skb: 12 callbacks suppressed [ 217.424165][ T30] audit: type=1326 audit(1750253478.390:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6996 comm="syz.2.265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad45b8e929 code=0x7ffc0000 [ 217.424839][ T3549] usb 5-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=58.16 [ 217.461262][ T3549] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 217.470566][ T3549] usb 5-1: Product: syz [ 217.474806][ T3549] usb 5-1: Manufacturer: syz [ 217.479565][ T3549] usb 5-1: SerialNumber: syz [ 218.216723][ T30] audit: type=1326 audit(1750253478.610:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6996 comm="syz.2.265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad45b8e929 code=0x7ffc0000 [ 218.342148][ T30] audit: type=1326 audit(1750253479.400:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6996 comm="syz.2.265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7fad45b8e929 code=0x7ffc0000 [ 218.460827][ T30] audit: type=1326 audit(1750253479.400:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6996 comm="syz.2.265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad45b8e929 code=0x7ffc0000 [ 218.561361][ T30] audit: type=1326 audit(1750253479.400:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6996 comm="syz.2.265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad45b8e929 code=0x7ffc0000 [ 218.699081][ T30] audit: type=1326 audit(1750253479.400:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6996 comm="syz.2.265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=227 compat=0 ip=0x7fad45b8e929 code=0x7ffc0000 [ 218.818121][ T30] audit: type=1326 audit(1750253479.000:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6996 comm="syz.2.265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad45b8e929 code=0x7ffc0000 [ 218.840915][ T30] audit: type=1326 audit(1750253479.000:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6996 comm="syz.2.265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad45b8e929 code=0x7ffc0000 [ 218.897537][ T30] audit: type=1326 audit(1750253479.060:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6996 comm="syz.2.265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fad45b8e929 code=0x7ffc0000 [ 219.299983][ T5836] Bluetooth: hci0: command tx timeout [ 219.805599][ T30] audit: type=1326 audit(1750253479.060:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6996 comm="syz.2.265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad45b8e929 code=0x7ffc0000 [ 220.129320][ T3549] usb 5-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 220.143318][ T1002] usb 5-1: Failed to submit usb control message: -71 [ 220.842203][ T3549] usb 5-1: USB disconnect, device number 5 [ 220.850916][ T1002] usb 5-1: unable to send the bmi data to the device: -71 [ 220.865518][ T1002] usb 5-1: unable to get target info from device [ 220.874839][ T1002] usb 5-1: could not get target info (-71) [ 220.931029][ T1002] usb 5-1: could not probe fw (-71) [ 221.518398][ T5836] Bluetooth: hci0: command tx timeout [ 223.527069][ T5836] Bluetooth: hci0: command tx timeout [ 224.293239][ T7042] block device autoloading is deprecated and will be removed. [ 224.303042][ T7042] syz.2.274: attempt to access beyond end of device [ 224.303042][ T7042] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 225.827052][ T49] hsr_slave_0: left promiscuous mode [ 225.860370][ T49] hsr_slave_1: left promiscuous mode [ 225.890736][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 225.920118][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 225.952684][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 225.993863][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 226.045571][ T3549] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 226.552791][ T49] veth1_macvtap: left promiscuous mode [ 226.607110][ T3549] usb 5-1: Using ep0 maxpacket: 32 [ 226.613104][ T49] veth0_macvtap: left promiscuous mode [ 226.627472][ T3549] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.c0 [ 226.643036][ T49] veth1_vlan: left promiscuous mode [ 226.649607][ T49] veth0_vlan: left promiscuous mode [ 226.663124][ T3549] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 226.713553][ T3549] usb 5-1: config 0 descriptor?? [ 227.788976][ T3549] dvb-usb: found a 'Elgato EyeTV Sat' in cold state, will try to load a firmware [ 227.843706][ T3549] usb 5-1: Direct firmware load for dvb-usb-az6027-03.fw failed with error -2 [ 227.886504][ T3549] usb 5-1: Falling back to sysfs fallback for: dvb-usb-az6027-03.fw [ 229.592824][ T7072] mmap: syz.3.283 (7072) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 229.672402][ T7072] gfs2: gfs2 mount does not exist [ 229.939634][ T49] team0 (unregistering): Port device team_slave_1 removed [ 229.997007][ T49] team0 (unregistering): Port device team_slave_0 removed [ 230.119820][ T7079] xt_hashlimit: max too large, truncated to 1048576 [ 232.071487][ T7105] xt_hashlimit: size too large, truncated to 1048576 [ 232.881763][ T6970] chnl_net:caif_netlink_parms(): no params data found [ 233.759192][ T5915] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 234.016554][ T5915] usb 2-1: Using ep0 maxpacket: 32 [ 234.044514][ T5915] usb 2-1: config 0 has an invalid interface number: 78 but max is 0 [ 234.075358][ T5915] usb 2-1: config 0 has no interface number 0 [ 234.135579][ T5915] usb 2-1: config 0 interface 78 has no altsetting 0 [ 234.157308][ T5915] usb 2-1: New USB device found, idVendor=0e41, idProduct=4250, bcdDevice=60.11 [ 234.174798][ T5915] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 234.200034][ T5915] usb 2-1: Product: syz [ 234.204359][ T5915] usb 2-1: Manufacturer: syz [ 234.213093][ T5915] usb 2-1: SerialNumber: syz [ 234.241269][ T5915] usb 2-1: config 0 descriptor?? [ 234.387547][ T5915] snd_usb_pod 2-1:0.78: Line 6 BassPODxt found [ 234.598139][ T5915] snd_usb_pod 2-1:0.78: endpoint not available, using fallback values [ 234.622889][ T5915] snd_usb_pod 2-1:0.78: invalid control EP [ 234.658877][ T5915] snd_usb_pod 2-1:0.78: cannot start listening: -22 [ 234.685370][ T5915] snd_usb_pod 2-1:0.78: Line 6 BassPODxt now disconnected [ 234.696314][ T6970] bridge0: port 1(bridge_slave_0) entered blocking state [ 234.710583][ T6970] bridge0: port 1(bridge_slave_0) entered disabled state [ 234.722124][ T6970] bridge_slave_0: entered allmulticast mode [ 234.733571][ T5915] snd_usb_pod 2-1:0.78: probe with driver snd_usb_pod failed with error -22 [ 234.746791][ T6970] bridge_slave_0: entered promiscuous mode [ 235.334959][ T6970] bridge0: port 2(bridge_slave_1) entered blocking state [ 235.422977][ T5943] usb 2-1: USB disconnect, device number 7 [ 235.463231][ T6970] bridge0: port 2(bridge_slave_1) entered disabled state [ 235.483971][ T6970] bridge_slave_1: entered allmulticast mode [ 235.505250][ T6970] bridge_slave_1: entered promiscuous mode [ 235.791868][ T7153] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 236.282179][ T6970] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 236.319792][ T6970] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 236.698161][ T6970] team0: Port device team_slave_0 added [ 236.710641][ T7167] netlink: 4 bytes leftover after parsing attributes in process `syz.1.299'. [ 236.729410][ T7161] 8021q: adding VLAN 0 to HW filter on device bond0 [ 236.744902][ T7161] bond0: (slave rose0): Enslaving as an active interface with an up link [ 237.133288][ T6970] team0: Port device team_slave_1 added [ 237.344376][ T6970] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 237.362277][ T6970] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 237.399738][ T6970] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 237.422324][ T6970] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 237.451020][ T6970] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 237.521310][ T6970] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 237.718265][ T6970] hsr_slave_0: entered promiscuous mode [ 237.749199][ T6970] hsr_slave_1: entered promiscuous mode [ 237.789500][ T6970] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 237.826106][ T6970] Cannot create hsr debugfs directory [ 238.013038][ T7186] netfs: Couldn't get user pages (rc=-14) [ 238.184645][ T7188] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 239.056288][ T7199] netlink: 4 bytes leftover after parsing attributes in process `syz.2.309'. [ 239.193005][ T7206] netlink: 28 bytes leftover after parsing attributes in process `syz.1.308'. [ 239.205759][ T7206] netlink: 8 bytes leftover after parsing attributes in process `syz.1.308'. [ 239.284266][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 239.284370][ T30] audit: type=1326 audit(1750253499.940:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7197 comm="syz.4.310" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faaf2d8e929 code=0x7ffc0000 [ 239.408122][ T30] audit: type=1326 audit(1750253499.940:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7197 comm="syz.4.310" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faaf2d8e929 code=0x7ffc0000 [ 239.408210][ T30] audit: type=1326 audit(1750253500.040:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7197 comm="syz.4.310" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7faaf2d8e929 code=0x7ffc0000 [ 239.408259][ T30] audit: type=1326 audit(1750253500.040:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7197 comm="syz.4.310" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faaf2d8e929 code=0x7ffc0000 [ 239.408305][ T30] audit: type=1326 audit(1750253500.050:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7197 comm="syz.4.310" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faaf2d8e929 code=0x7ffc0000 [ 239.420322][ T30] audit: type=1326 audit(1750253500.060:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7197 comm="syz.4.310" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7faaf2d8e929 code=0x7ffc0000 [ 239.421070][ T30] audit: type=1326 audit(1750253500.080:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7197 comm="syz.4.310" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faaf2d8e929 code=0x7ffc0000 [ 239.430109][ T30] audit: type=1326 audit(1750253500.080:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7197 comm="syz.4.310" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faaf2d8e929 code=0x7ffc0000 [ 239.435323][ T30] audit: type=1326 audit(1750253500.080:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7197 comm="syz.4.310" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7faaf2d8e929 code=0x7ffc0000 [ 239.435675][ T30] audit: type=1326 audit(1750253500.090:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7197 comm="syz.4.310" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faaf2d8e929 code=0x7ffc0000 [ 239.503835][ T7209] netlink: 9 bytes leftover after parsing attributes in process `syz.4.310'. [ 240.194582][ T7209] gretap0: entered promiscuous mode [ 242.795238][ T7232] netlink: 'syz.3.315': attribute type 12 has an invalid length. [ 246.720978][ T6970] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 247.118028][ T6970] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 247.257737][ T6970] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 247.349935][ T6970] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 248.955196][ T6970] 8021q: adding VLAN 0 to HW filter on device bond0 [ 249.064590][ T7298] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 250.481034][ T6970] 8021q: adding VLAN 0 to HW filter on device team0 [ 251.538167][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 251.545384][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 251.772797][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 251.780185][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 256.408915][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.423542][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.112409][ T6970] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 257.539847][ T6970] veth0_vlan: entered promiscuous mode [ 257.741887][ T6970] veth1_vlan: entered promiscuous mode [ 257.987001][ T6970] veth0_macvtap: entered promiscuous mode [ 258.005952][ T6970] veth1_macvtap: entered promiscuous mode [ 258.104524][ T6970] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 258.171720][ T6970] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 258.327496][ T6970] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.420038][ T6970] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.435556][ T6970] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.444510][ T6970] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.509327][ T30] kauditd_printk_skb: 12 callbacks suppressed [ 258.509349][ T30] audit: type=1800 audit(1750253519.170:79): pid=7375 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.3.344" name="bus" dev="ramfs" ino=12951 res=0 errno=0 [ 259.673042][ T30] audit: type=1326 audit(1750253520.350:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7396 comm="syz.2.348" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fad45b8e929 code=0x0 [ 259.749121][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 259.781727][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 260.896845][ T2973] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 260.915605][ T2973] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 261.151039][ T7407] netlink: 28 bytes leftover after parsing attributes in process `syz.2.350'. [ 262.702534][ T5836] Bluetooth: hci2: unexpected event for opcode 0x1005 [ 263.866459][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 264.575148][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.737117][ T5836] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 266.747544][ T5836] Bluetooth: hci2: Injecting HCI hardware error event [ 266.755988][ T5837] Bluetooth: hci2: hardware error 0x00 [ 267.812949][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.110881][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.234056][ T7521] IPv6: syztnl0: Disabled Multicast RS [ 269.235699][ T12] bridge_slave_1: left allmulticast mode [ 269.241433][ T12] bridge_slave_1: left promiscuous mode [ 269.268400][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 269.332869][ T12] bridge_slave_0: left allmulticast mode [ 269.358362][ T12] bridge_slave_0: left promiscuous mode [ 269.364241][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 269.414086][ T5833] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 269.424126][ T5833] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 269.434895][ T5833] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 269.451847][ T5833] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 269.467951][ T5833] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 269.765765][ T5837] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 270.102535][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 270.124408][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 270.156191][ T12] bond0 (unregistering): Released all slaves [ 271.525761][ T5837] Bluetooth: hci0: command tx timeout [ 272.182993][ T7583] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 273.598006][ T12] hsr_slave_0: left promiscuous mode [ 273.605998][ T5837] Bluetooth: hci0: command tx timeout [ 276.985660][ T5837] Bluetooth: hci0: command tx timeout [ 276.997573][ T12] hsr_slave_1: left promiscuous mode [ 278.376290][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 278.383894][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 278.498012][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 278.530549][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 278.860477][ T12] veth1_macvtap: left promiscuous mode [ 278.886938][ T12] veth0_macvtap: left promiscuous mode [ 278.915403][ T12] veth1_vlan: left promiscuous mode [ 278.923959][ T12] veth0_vlan: left promiscuous mode [ 278.974995][ T30] audit: type=1800 audit(1750253539.660:81): pid=7616 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.3.385" name="nullb0" dev="tmpfs" ino=540 res=0 errno=0 [ 279.056347][ T5837] Bluetooth: hci0: command tx timeout [ 279.431892][ T7618] netlink: 100 bytes leftover after parsing attributes in process `syz.3.387'. [ 280.962471][ T7633] Invalid ELF header magic: != ELF [ 281.044150][ T12] team0 (unregistering): Port device team_slave_1 removed [ 282.220291][ T12] team0 (unregistering): Port device team_slave_0 removed [ 282.334425][ T30] audit: type=1326 audit(1750253543.030:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7641 comm="syz.3.391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f021598e929 code=0x7fc00000 [ 282.561225][ T30] audit: type=1326 audit(1750253543.250:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7641 comm="syz.3.391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f021598e929 code=0x7fc00000 [ 282.582578][ C0] vkms_vblank_simulate: vblank timer overrun [ 282.685029][ T30] audit: type=1326 audit(1750253543.250:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7641 comm="syz.3.391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f021598e929 code=0x7fc00000 [ 282.770632][ T30] audit: type=1326 audit(1750253543.250:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7641 comm="syz.3.391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f021598e929 code=0x7fc00000 [ 282.821794][ T7662] ubi31: attaching mtd0 [ 282.823154][ T30] audit: type=1326 audit(1750253543.250:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7641 comm="syz.3.391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f021598e929 code=0x7fc00000 [ 282.847881][ C0] vkms_vblank_simulate: vblank timer overrun [ 282.882247][ T7662] ubi31 error: ubi_attach_mtd_dev: bad VID header (12288) or data offsets (12352) [ 282.943509][ T30] audit: type=1326 audit(1750253543.250:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7641 comm="syz.3.391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f021598e929 code=0x7fc00000 [ 282.965079][ C0] vkms_vblank_simulate: vblank timer overrun [ 282.983460][ T7668] netlink: 4 bytes leftover after parsing attributes in process `syz.1.395'. [ 283.020747][ T30] audit: type=1326 audit(1750253543.290:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7641 comm="syz.3.391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f021598e929 code=0x7fc00000 [ 283.035138][ T7670] netlink: 12 bytes leftover after parsing attributes in process `syz.1.395'. [ 283.119706][ T7676] netlink: 4 bytes leftover after parsing attributes in process `syz.3.396'. [ 283.520147][ T7626] netlink: 28 bytes leftover after parsing attributes in process `syz.2.386'. [ 283.557633][ T7669] vlan2: entered promiscuous mode [ 283.569499][ T7669] vlan2: entered allmulticast mode [ 283.574902][ T7669] hsr_slave_1: entered allmulticast mode [ 283.839335][ T7631] netlink: 28 bytes leftover after parsing attributes in process `syz.2.386'. [ 284.135753][ T7685] infiniband syz0: set active [ 284.140635][ T7685] infiniband syz0: added bond_slave_1 [ 284.200245][ T7685] RDS/IB: syz0: added [ 284.205127][ T7685] smc: adding ib device syz0 with port count 1 [ 284.211764][ T7685] smc: ib device syz0 port 1 has pnetid [ 284.802433][ T7698] xt_socket: unknown flags 0x4c [ 286.992574][ T7539] chnl_net:caif_netlink_parms(): no params data found [ 287.425660][ T43] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 287.607806][ T43] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 287.627541][ T43] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 287.656972][ T43] usb 3-1: config 0 descriptor?? [ 287.683878][ T7539] bridge0: port 1(bridge_slave_0) entered blocking state [ 287.715845][ T7539] bridge0: port 1(bridge_slave_0) entered disabled state [ 287.735038][ T7539] bridge_slave_0: entered allmulticast mode [ 287.757811][ T7539] bridge_slave_0: entered promiscuous mode [ 287.787582][ T7539] bridge0: port 2(bridge_slave_1) entered blocking state [ 287.805822][ T7539] bridge0: port 2(bridge_slave_1) entered disabled state [ 287.813329][ T7539] bridge_slave_1: entered allmulticast mode [ 287.842542][ T7539] bridge_slave_1: entered promiscuous mode [ 287.885437][ T43] udl 3-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 287.915712][ T43] [drm:udl_init] *ERROR* Selecting channel failed [ 287.984386][ T43] [drm] Initialized udl 0.0.1 for 3-1:0.0 on minor 2 [ 288.021808][ T43] [drm] Initialized udl on minor 2 [ 288.041266][ T43] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 288.082700][ T43] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 288.118555][ T5943] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 288.149345][ T43] usb 3-1: USB disconnect, device number 3 [ 288.158895][ T7539] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 288.168893][ T5943] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 288.213548][ T7539] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 288.516413][ T7539] team0: Port device team_slave_0 added [ 288.568511][ T7539] team0: Port device team_slave_1 added [ 289.635080][ T7742] overlayfs: failed to clone upperpath [ 289.669233][ T7539] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 290.706641][ T7539] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 291.044812][ T7539] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 291.261127][ T7539] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 291.291409][ T7539] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 291.356481][ T7539] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 292.388765][ T3549] dvb-usb: did not find the firmware file 'dvb-usb-az6027-03.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 292.425000][ T3549] dvb_usb_az6027 5-1:0.0: probe with driver dvb_usb_az6027 failed with error -110 [ 292.474212][ T3549] usb 5-1: USB disconnect, device number 6 [ 292.606435][ T7539] hsr_slave_0: entered promiscuous mode [ 292.613666][ T7539] hsr_slave_1: entered promiscuous mode [ 292.637695][ T7539] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 292.681479][ T7539] Cannot create hsr debugfs directory [ 296.879964][ T1213] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 297.142579][ T1213] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 297.239396][ T1213] usb 3-1: config 0 has no interfaces? [ 297.334544][ T1213] usb 3-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 297.496398][ T1213] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 297.631892][ T1213] usb 3-1: Product: syz [ 297.677348][ T1213] usb 3-1: Manufacturer: syz [ 297.740576][ T1213] usb 3-1: SerialNumber: syz [ 297.853149][ T1213] usb 3-1: config 0 descriptor?? [ 298.050851][ T7804] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 298.207725][ T5915] usb 3-1: USB disconnect, device number 4 [ 300.668922][ T7539] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 301.240743][ T7539] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 301.472609][ T7539] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 301.500537][ T7539] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 301.572395][ T7847] /dev/nullb0: Can't lookup blockdev [ 302.977321][ T7865] syz.2.433: attempt to access beyond end of device [ 302.977321][ T7865] nbd2: rw=0, sector=0, nr_sectors = 1 limit=0 [ 302.990498][ T7865] efs: cannot read volume header [ 303.545213][ T30] audit: type=1326 audit(1750253563.233:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7850 comm="syz.3.432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f021598e929 code=0x7fc00000 [ 303.667726][ T7539] 8021q: adding VLAN 0 to HW filter on device bond0 [ 303.730092][ T7539] 8021q: adding VLAN 0 to HW filter on device team0 [ 303.815648][ T7871] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 304.557356][ T7480] bridge0: port 1(bridge_slave_0) entered blocking state [ 304.564741][ T7480] bridge0: port 1(bridge_slave_0) entered forwarding state [ 304.796361][ T7877] netlink: 'syz.2.436': attribute type 1 has an invalid length. [ 304.804419][ T7877] netlink: 'syz.2.436': attribute type 2 has an invalid length. [ 305.894433][ T7480] bridge0: port 2(bridge_slave_1) entered blocking state [ 305.901823][ T7480] bridge0: port 2(bridge_slave_1) entered forwarding state [ 306.499856][ T7893] syz.2.441 (7893) used obsolete PPPIOCDETACH ioctl [ 307.585575][ T1213] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 307.765791][ T7915] overlayfs: missing 'lowerdir' [ 308.245731][ T1213] usb 2-1: Using ep0 maxpacket: 8 [ 308.280433][ T1213] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 308.310165][ T1213] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 308.319802][ T7919] dvmrp8: entered allmulticast mode [ 308.333607][ T7539] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 308.350757][ T1213] usb 2-1: Product: syz [ 308.354948][ T1213] usb 2-1: Manufacturer: syz [ 308.383631][ T1213] usb 2-1: SerialNumber: syz [ 308.421047][ T1213] usb 2-1: config 0 descriptor?? [ 308.490274][ T7922] binder: 7921:7922 ioctl 400c620e 200000000600 returned -22 [ 308.533306][ T7922] binder: 7921:7922 ioctl c0306201 2000000003c0 returned -14 [ 308.551392][ T7539] veth0_vlan: entered promiscuous mode [ 308.575166][ T7539] veth1_vlan: entered promiscuous mode [ 308.668716][ T1213] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 308.751104][ T7539] veth0_macvtap: entered promiscuous mode [ 308.769743][ T7539] veth1_macvtap: entered promiscuous mode [ 308.843194][ T7539] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 308.948136][ T7539] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 308.981263][ T7539] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.994219][ T7539] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.003380][ T7539] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.016910][ T7539] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.315660][ T7478] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 309.323550][ T7478] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 310.513603][ T1002] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 310.634013][ T1002] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 310.666102][ T7944] NILFS (nullb0): couldn't find nilfs on the device [ 311.108327][ T1213] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 311.870991][ T1213] usb 2-1: USB disconnect, device number 8 [ 313.070358][ T7956] xt_CT: You must specify a L4 protocol and not use inversions on it [ 314.909666][ T6141] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 315.134962][ T6141] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 315.214628][ T6141] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 315.275216][ T6141] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 315.431208][ T6141] bridge_slave_1: left allmulticast mode [ 315.441631][ T6141] bridge_slave_1: left promiscuous mode [ 315.447774][ T6141] bridge0: port 2(bridge_slave_1) entered disabled state [ 315.461047][ T6141] bridge_slave_0: left allmulticast mode [ 315.467579][ T6141] bridge_slave_0: left promiscuous mode [ 315.473298][ T6141] bridge0: port 1(bridge_slave_0) entered disabled state [ 315.560792][ T7975] Zero length message leads to an empty skb [ 316.879344][ T7989] ptrace attach of "./syz-executor exec"[5835] was attempted by " [ 317.520940][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 318.298043][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.501274][ T5836] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 318.513686][ T5836] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 318.528551][ T5836] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 318.552013][ T5836] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 318.562420][ T5836] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 318.700213][ T8010] [U]  [ 318.703389][ T8010] [U] K{‘ [ 318.707702][ T8010] [U] ÄT Ž1ÊÀŠªFÌÇÄFËŠÎ`GÊJǘÜGÖƯ¹¬¡—ÞÈOÕÑ/ÜMCÇ [ 318.721725][ T8010] [U] TžØ–/,~ˆÄœ­‹JÕßÊ}8ÎÊÞ'O1Ü"™7-΂JQœK—¤WºÏQÉ5C%"¬H12–¦Y“„‰ž€ÊXÍ`ˆ‚Íȼ`+³Û(·Â¿!(ÉÛÉZ'ÀTXLN»I®GÅJ– °ÜÝ­·PÅ~÷7Í!‘ÕÒ"بÎ ¾ª(È5ˆOBܤ‡ÍƒJÖ [ 318.740431][ T8010] [U] ±K\&—}6£6œXÎHX ¥Ôµ„ÌÞ.`¸A“$Û40|϶¿9°ØÞ¨„¯À ÏU‚Ò4ÔÄ®VBZÃÐ}ÌWÔM”TºŽÍQŸÝΦR’ 4”ß [ 318.760839][ T8010] [U] ".H6ØÞ"ÖKÇ[›‰¤ŒJÁ4ÇØIN¨™[Z(•„C|TË]Z{Â3ŸC=»¨XÎԞ˅Î4¿W‰)\T‘XJØSH{Q;̹¢…ÖTÔÇ+‹¦÷GÍÈß®D„.Ë‚³>Yž÷ÉWUH„FN—ŽÇHL]SÔ2ŠÇÙ\G%ŠO¼&Z)µК'¨PUL‚_<à ¢Ø°‰Ò®ÔÅ`Ò±TÔÁÞœÐËÞ;_Ô"(‘U{7Jœ¿2X ‘/€'ÝÙCÑÌÕIº©ÀÏH¿CÕ³žV¦=‘AIÇ%W¼ESž RšŸJŠÎœƒÚ”GÂ÷RÁ¹Í¡HI˜¢œAÏÌ6-ÚDÚV¨Á I"ØÅNƨ ÞÚASC~4Áª¹8CØ*­OO5/ßœJš~º§¡W—VK+¬®‰Œ3ÈÇY)Ž¹M°¸ÆV¶ÌYQƽ€DTR¯OTPEM%F×ÊEJÍA5ÆÔT_-X~ ^AAÛ‚Ò˜½QÖÅ [ 318.808989][ T8010] [U] +W‰G?]£Ó'A: »Ú)ÕÏÓ™“' B>T¢ ¡F/™÷<'ÈUÓ'–¼H§IÉ.+]EŸ.½-É¿ß¿Ò%÷È>2`¶^Uß8F.Š6¤Å3ÓØ+ËA¾Â««„°G3ÓPÂÓ6:^0ÀTÉÈV÷'EÕT¼€ÛÂYC‰N¾ÞRÏ©ÞNÈPJ× ;ÆZ†ÊÔÑÛ‘8!¯È\Ù…¸AØÊ–2Á£$е™Â­WI.ÍÇ#ŠÈ/BAI¼Ä`ÐÁ4J’ÔDÎY@ÓZ„ÜGW÷5Ë¿BÄ µÙœ NÓY"VI2ÛÌ [ 318.835735][ T8010] [U] ÔT¦_K5¸T¬YJÐÞÎ9ÐÕCÊ$BRŸLÚNUL ¶Ü9WÈÝÍ|žGÅ"ʃÆ%ÇÚ¶ÊCªØ°¶ºQÎÙ ŸÇ3‹ÆQ¯ÔN^HP*½Ü$ µ.Î7YÓ±œ2³ [ 318.849648][ T8010] [U] ½?©ß HÜÄ*ÙÁ”Î3Í7Üɾ^#Q"0~‡ ‚Ð(ÉOÏX LŒB£,'VÎÓ=‹ÝËCÌS«…’G‚S¶Þ0•Ö‚‹Ù`˜›žÙ‡Ÿ†=1(÷ξ™÷P#Ò2DO*Ƀ [ 318.866745][ T8010] [U] ©S¹“Gžµ²¶“˜GUÐÔD-{¸™Â|&“®ŸŸÑ2µ›LÞC_©œ!`¨ÍOZÖ¥¢B¶³%>ÊRѶÖWχݎSSÂH"£YA4£O.šYÙÛÄ„RTÔ¶ŒBÚ[+/<>—¡{Q¢Ú×_²ÕLX8ÊU„ÇØÎ{ÐZ³ÍØ)ßÒ7?ËRR;ßC¿R HײڣÁ»¨È1Å>)©Mă‰ÏT§²Ú(ÌÇAÏ„}9·Ú¥ÃJ*MÑœ¥Ä¡«'L¹£Q ÌDWŸÒظ=ؽ|Q¬ ÏÆ™W;5ÆÙŽª!ÑDB¸X`ɧÖ/÷ÂE`ƦM¢XÎÂ"Ä\ [ 318.980831][ T8010] [U] {;Ž Õ¥ÂÙ˜_ˆO2«Ñ)ÎO®›.2ÐW2ʲ¨ÐYÙÃÃX_ HPϱœSªD­¦Ø:]‚{Ë©ÔÝÆȽ [ 318.991445][ T8010] [U] I,Ç>ÇÓ¤ ÎÙ51Ñ÷^1ÒN4¯OǶÞ'0Ý?Ö’IÙ9W.Ï_.¶WŠA¼ŠVˆ±`)ÑZ¬ÏÆC6GIÓ¹²A»¬XL[¢›½¡FÜ*ÀÑO‰W)+‡Ç'\NÆ[K@ÑËÄÜ2ÇǬ–®¡P"^`Á‰Í Ø¿ [ 319.005544][ T8010] [U] 22½“Æ©ÐÛ©X?0;3U± [ 319.015409][ T8010] [U] ÞœÕÆÓSOBX 8”Wˆ4Á‘(Ð~/§¿ÍKÇUžÃÔ–OQËE+·G®-YµGY_•>V¢ÜÈË—3.HÁÓ™]Í„²2‘”)™DË, ‘Ä ÞD~×D©£¡+ÃW; A\˜FPÉÞȘ|$ºØ)KØI³ÉÐÉ¿KÑYT^RÍÜÙÇ™µ“ËA=±#–Üœ ÝÍ¿ËAE©TÅ1·Îݯ4K¯.E"RÚS|ПÀSÖ’Á:•Ù>P ™…RÐ"Z‰Ú­ÛÚÉ#P!˜KY"›}ÃÆF¿N84ܳƒÅHÞ±£O•ÈS¿™Ì«%DLWÙMÆ²Ç [ 319.042521][ T8010] [U] [ª['XN€'²÷ Á¿Ü,MR¦«/žšœÂ1D=!DŽX91BÙWÇ»R—LF…ƒÆK̤ZÕÊ# `Ì‘ LØ›§Ëœ»×B~ÅMÒÔÖ [ 319.054107][ T8010] [U] ™LÖ>ÑD+ˆD¯§—®Ì"5ŽÊH3<ª¨ÅIR=F^”FNÕÓÜÀ‰¿Û­VÛ÷œDÁOIOÚ:UÖ>ÖY [ 319.063787][ T8010] [U] 'B—6VÝ20³Ä·Çž¥·×ŒÏ"T8Ñ{9ÆFW]ÔÊÄÌ© [ 319.072498][ T8010] [U] Ù72Þ‰ÏÂÃUÞC6™ÎÜÔÏ„I]8Cª£TÛ¨QSKYÞÎIÒÀ¹ ¿|V'ÛTV/ÙÅG•$[ 9KH`Ú"Ü‘ÚÕ}€Ñ[^=ˆÚ0Á]½Ã%ÆÌ‚T“Šž¹ØFÌ_VÖ4C¸ÒÅ [ 319.086208][ T8010] [U] ¹ EC [ 319.094630][ T8010] [U] —”|‚ÊÌ<ÄÎ:^Ü3$7NK~Ø-™@÷¦?Ÿ–/MTL·Û¾©IˆWȬ@G~TØ{ÊÜP¿+Æ$ªJP|µ ŽÇIÛRIÓPMÐ Õ·YÓ Ú”8ÌTÉÐÞVžÙßÆË,ÎLÂ,Õ [ 319.697884][ T8003] [U] ˆKÌÚÛÕ‰)0ÄÄÝ~ܳʪÁIP'ÍFÓÒœZÚÞR¬™ß @BÓ]Â5ÝÊ{­©Ê¼Ô'À8ÅÆ¥F‡¹UTQUDÇ©¤K;7ͪ0C[„ÃY–¼ÈYC¦¶»Ø°Mª™LÒ8’T…ÍšÎ5³ÝÝRX™¶ÐWÍ X¤²ÓOQHVI'8œ¥Î…Lµ [ 320.726295][ T5837] Bluetooth: hci0: command tx timeout [ 320.981169][ T6141] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 321.035319][ T6141] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 321.079907][ T6141] bond0 (unregistering): Released all slaves [ 322.807140][ T5836] Bluetooth: hci0: command tx timeout [ 324.515749][ T5943] usb 2-1: new full-speed USB device number 9 using dummy_hcd [ 324.835272][ T5943] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 324.885504][ T5836] Bluetooth: hci0: command tx timeout [ 325.010644][ T5943] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 325.046463][ T5943] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 325.079328][ T5943] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 325.434290][ T5943] usb 2-1: usb_control_msg returned -32 [ 325.473559][ T5943] usbtmc 2-1:16.0: can't read capabilities [ 326.185882][ T8075] PKCS7: Unknown OID: [5] (bad) [ 326.190961][ T8075] PKCS7: Only support pkcs7_signedData type [ 326.976406][ T5836] Bluetooth: hci0: command tx timeout [ 327.925189][ T1213] usb 2-1: USB disconnect, device number 9 [ 327.971386][ T6141] hsr_slave_0: left promiscuous mode [ 328.838403][ T6141] hsr_slave_1: left promiscuous mode [ 329.016560][ T6141] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 329.024055][ T6141] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 329.320843][ T6141] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 329.351950][ T6141] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 329.431866][ T8101] kvm: emulating exchange as write [ 329.450450][ T6141] veth1_macvtap: left promiscuous mode [ 329.458180][ T6141] veth0_macvtap: left promiscuous mode [ 329.466478][ T6141] veth1_vlan: left promiscuous mode [ 329.476008][ T6141] veth0_vlan: left promiscuous mode [ 329.665533][ T43] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 330.795770][ T43] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 331.074265][ T43] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 331.083643][ T43] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 331.116971][ T8124] netlink: 104 bytes leftover after parsing attributes in process `syz.3.493'. [ 331.244299][ T43] usb 3-1: config 0 descriptor?? [ 332.206566][ T8133] netlink: 44 bytes leftover after parsing attributes in process `syz.1.495'. [ 333.035625][ T1213] usb 3-1: USB disconnect, device number 5 [ 333.589892][ T8147] ptrace attach of "./syz-executor exec"[8148] was attempted by "./syz-executor exec"[8147] [ 339.346708][ T6141] team0 (unregistering): Port device team_slave_1 removed [ 339.913253][ T6141] team0 (unregistering): Port device team_slave_0 removed [ 341.934331][ T8203] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 344.352645][ T8144] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 344.438040][ T8215] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 344.456092][ T8215] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 344.534747][ T8215] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 344.566373][ T8215] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 344.654097][ T8002] chnl_net:caif_netlink_parms(): no params data found [ 344.818115][ T8215] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 344.843322][ T8215] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 344.979182][ T8233] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.518'. [ 345.048958][ T8215] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 345.055025][ T8215] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 345.124818][ T8215] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 346.485593][ T5836] Bluetooth: hci1: command 0x0406 tx timeout [ 346.565515][ T5836] Bluetooth: hci3: command 0x0406 tx timeout [ 347.016229][ T5836] Bluetooth: hci4: command 0x0406 tx timeout [ 347.125650][ T5836] Bluetooth: hci0: command 0x0c1a tx timeout [ 347.150258][ T8002] bridge0: port 1(bridge_slave_0) entered blocking state [ 347.777887][ T8002] bridge0: port 1(bridge_slave_0) entered disabled state [ 347.785098][ T8002] bridge_slave_0: entered allmulticast mode [ 347.797674][ T8002] bridge_slave_0: entered promiscuous mode [ 347.819927][ T8002] bridge0: port 2(bridge_slave_1) entered blocking state [ 347.827600][ T8002] bridge0: port 2(bridge_slave_1) entered disabled state [ 347.845745][ T8002] bridge_slave_1: entered allmulticast mode [ 347.867681][ T8002] bridge_slave_1: entered promiscuous mode [ 348.039174][ T30] audit: type=1326 audit(1750253607.733:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8264 comm="syz.1.527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f532358e929 code=0x7ffc0000 [ 348.105152][ T30] audit: type=1326 audit(1750253607.763:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8264 comm="syz.1.527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f532358e929 code=0x7ffc0000 [ 348.161268][ T8002] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 348.180232][ T30] audit: type=1326 audit(1750253607.763:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8264 comm="syz.1.527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f532358e929 code=0x7ffc0000 [ 348.241020][ T30] audit: type=1326 audit(1750253607.763:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8264 comm="syz.1.527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f532358e929 code=0x7ffc0000 [ 348.300050][ T30] audit: type=1326 audit(1750253607.763:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8264 comm="syz.1.527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f532358e929 code=0x7ffc0000 [ 348.473950][ T30] audit: type=1326 audit(1750253607.763:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8264 comm="syz.1.527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f532358e929 code=0x7ffc0000 [ 349.143832][ T5837] Bluetooth: hci3: command 0x0406 tx timeout [ 349.150025][ T5837] Bluetooth: hci4: command 0x0406 tx timeout [ 349.216255][ T5837] Bluetooth: hci0: command 0x0c1a tx timeout [ 349.223506][ T30] audit: type=1326 audit(1750253607.763:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8264 comm="syz.1.527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f532358e929 code=0x7ffc0000 [ 349.246183][ T5836] Bluetooth: hci1: command 0x0406 tx timeout [ 349.249712][ T30] audit: type=1326 audit(1750253607.763:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8264 comm="syz.1.527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f532358e929 code=0x7ffc0000 [ 349.273601][ C1] vkms_vblank_simulate: vblank timer overrun [ 349.284763][ T8265] tipc: Started in network mode [ 349.505502][ T30] audit: type=1326 audit(1750253607.763:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8264 comm="syz.1.527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=429 compat=0 ip=0x7f532358e929 code=0x7ffc0000 [ 349.527541][ C1] vkms_vblank_simulate: vblank timer overrun [ 349.553047][ T30] audit: type=1326 audit(1750253607.763:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8264 comm="syz.1.527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f532358e929 code=0x7ffc0000 [ 349.574594][ C1] vkms_vblank_simulate: vblank timer overrun [ 349.608729][ T8265] tipc: Node identity 2000007, cluster identity 4711 [ 349.690397][ T8265] tipc: Node number set to 33554439 [ 349.705185][ T8002] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 349.981172][ T8002] team0: Port device team_slave_0 added [ 350.041979][ T8002] team0: Port device team_slave_1 added [ 350.056139][ T5820] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 350.336276][ T5820] usb 5-1: Using ep0 maxpacket: 16 [ 350.707937][ T5820] usb 5-1: config 1 has an invalid descriptor of length 97, skipping remainder of the config [ 350.743583][ T5820] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 350.771661][ T5820] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 350.787700][ T8002] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 350.795340][ T5820] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 350.804169][ T8002] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 350.896842][ T5820] usb 5-1: Product: syz [ 350.944021][ T5820] usb 5-1: Manufacturer: syz [ 350.950457][ T5820] usb 5-1: SerialNumber: syz [ 351.044699][ T8002] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 351.352125][ T5836] Bluetooth: hci0: command 0x0c1a tx timeout [ 351.551011][ T8002] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 351.596516][ T5820] usb 5-1: 0:2 : does not exist [ 351.615812][ T8002] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 351.674456][ T5820] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 351.698732][ T8002] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 354.017638][ T5820] usb 5-1: USB disconnect, device number 7 [ 354.472905][ T8002] hsr_slave_0: entered promiscuous mode [ 354.607125][ T8002] hsr_slave_1: entered promiscuous mode [ 354.724710][ T8002] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 354.836120][ T8002] Cannot create hsr debugfs directory [ 357.258087][ T8335] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 357.290840][ T8335] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 357.317255][ T8335] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 357.331547][ T8335] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 357.989993][ T8362] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 360.519826][ T8364] kvm: kvm [8363]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x81 [ 360.646769][ T8364] kvm: kvm [8363]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x1 [ 361.291498][ T8364] kvm: kvm [8363]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x81 [ 361.429417][ T8392] netlink: 4 bytes leftover after parsing attributes in process `syz.4.550'. [ 362.340569][ T8386] vlan2: entered promiscuous mode [ 362.369548][ T8386] vlan2: entered allmulticast mode [ 362.374931][ T8386] hsr_slave_1: entered allmulticast mode [ 366.480424][ T8002] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 366.600076][ T8002] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 367.659486][ T8002] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 368.671468][ T8002] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 369.206016][ T8002] 8021q: adding VLAN 0 to HW filter on device bond0 [ 369.293359][ T8454] xt_CT: You must specify a L4 protocol and not use inversions on it [ 370.027967][ T8002] 8021q: adding VLAN 0 to HW filter on device team0 [ 370.534017][ T7478] bridge0: port 1(bridge_slave_0) entered blocking state [ 370.541359][ T7478] bridge0: port 1(bridge_slave_0) entered forwarding state [ 370.701466][ T8002] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 370.715557][ T8002] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 370.747774][ T7478] bridge0: port 2(bridge_slave_1) entered blocking state [ 370.755091][ T7478] bridge0: port 2(bridge_slave_1) entered forwarding state [ 371.976177][ T5914] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 372.635491][ T5914] usb 5-1: Using ep0 maxpacket: 16 [ 372.647658][ T5914] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2e22, bcdDevice= 0.00 [ 372.708423][ T5914] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 372.769521][ T5914] usb 5-1: config 0 descriptor?? [ 373.021976][ T8002] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 373.035613][ T1213] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 373.209509][ T8002] veth0_vlan: entered promiscuous mode [ 373.219873][ T1213] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 373.243841][ T8002] veth1_vlan: entered promiscuous mode [ 373.262604][ T5914] koneplus 0003:1E7D:2E22.0001: item fetching failed at offset 3/5 [ 373.276468][ T1213] usb 2-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 373.306559][ T5914] koneplus 0003:1E7D:2E22.0001: parse failed [ 373.313649][ T1213] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 373.324629][ T5914] koneplus 0003:1E7D:2E22.0001: probe with driver koneplus failed with error -22 [ 373.338279][ T1213] usb 2-1: config 0 descriptor?? [ 373.384047][ T8002] veth0_macvtap: entered promiscuous mode [ 373.452789][ T8002] veth1_macvtap: entered promiscuous mode [ 373.527031][ T8002] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 373.559871][ T8002] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 373.692253][ T8002] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 373.714271][ T30] kauditd_printk_skb: 31 callbacks suppressed [ 373.714285][ T30] audit: type=1326 audit(1750253633.403:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8478 comm="syz.1.567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f532358e929 code=0x7ffc0000 [ 373.751462][ T8002] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 373.784814][ T8002] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 373.795994][ T30] audit: type=1326 audit(1750253633.403:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8478 comm="syz.1.567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f532358e929 code=0x7ffc0000 [ 373.814422][ T8002] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 373.818104][ T30] audit: type=1326 audit(1750253633.403:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8478 comm="syz.1.567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f532358d290 code=0x7ffc0000 [ 373.856710][ T30] audit: type=1326 audit(1750253633.403:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8478 comm="syz.1.567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f532358e929 code=0x7ffc0000 [ 373.888105][ T5943] usb 2-1: USB disconnect, device number 10 [ 374.009885][ T30] audit: type=1326 audit(1750253633.443:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8478 comm="syz.1.567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f532358e929 code=0x7ffc0000 [ 374.068330][ T30] audit: type=1326 audit(1750253633.443:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8478 comm="syz.1.567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f532358e929 code=0x7ffc0000 [ 374.131615][ T30] audit: type=1326 audit(1750253633.443:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8478 comm="syz.1.567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f5323590847 code=0x7ffc0000 [ 374.153725][ T30] audit: type=1326 audit(1750253633.443:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8478 comm="syz.1.567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f53235907bc code=0x7ffc0000 [ 374.176310][ T30] audit: type=1326 audit(1750253633.453:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8478 comm="syz.1.567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f53235906f4 code=0x7ffc0000 [ 374.293078][ T30] audit: type=1326 audit(1750253633.453:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8478 comm="syz.1.567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f53235906f4 code=0x7ffc0000 [ 375.344143][ T7483] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 375.359006][ T7483] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 375.538485][ T5915] usb 5-1: USB disconnect, device number 8 [ 376.837105][ T8531] netlink: 4 bytes leftover after parsing attributes in process `syz.4.574'. [ 379.578394][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.593650][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.727549][ T5837] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 379.741972][ T5837] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 379.750944][ T5837] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 379.887287][ T5837] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 379.896516][ T5837] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 379.936546][ T1002] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 382.222139][ T5836] Bluetooth: hci0: command tx timeout [ 382.831404][ T1002] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 384.248291][ T5837] Bluetooth: hci0: command tx timeout [ 385.345574][ T43] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 385.365566][ T1002] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 385.565249][ T43] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 385.598149][ T43] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 385.629486][ T43] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 385.649672][ T1002] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 385.683500][ T43] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 385.996013][ T43] usb 3-1: usb_control_msg returned -32 [ 386.001701][ T43] usbtmc 3-1:16.0: can't read capabilities [ 386.845531][ T5837] Bluetooth: hci0: command tx timeout [ 386.994235][ T8611] usbtmc 3-1:16.0: send_request_dev_dep_msg_in returned -90 [ 387.414226][ T8622] openvswitch: netlink: Duplicate or invalid key (type 0). [ 388.320110][ T8622] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 388.493623][ T5915] usb 3-1: USB disconnect, device number 6 [ 388.895579][ T5837] Bluetooth: hci0: command tx timeout [ 389.486903][ T1002] bridge_slave_1: left allmulticast mode [ 389.524642][ T1002] bridge_slave_1: left promiscuous mode [ 389.563423][ T1002] bridge0: port 2(bridge_slave_1) entered disabled state [ 390.501254][ T1002] bridge_slave_0: left allmulticast mode [ 390.518536][ T8644] netlink: 3 bytes leftover after parsing attributes in process `syz.1.602'. [ 390.704656][ T1002] bridge_slave_0: left promiscuous mode [ 390.835143][ T1002] bridge0: port 1(bridge_slave_0) entered disabled state [ 391.291920][ T8654] netlink: 'syz.3.604': attribute type 1 has an invalid length. [ 393.882041][ T1002] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 393.922743][ T1002] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 393.951616][ T1002] bond0 (unregistering): Released all slaves [ 395.346428][ T8654] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 395.541726][ T8699] netlink: 20 bytes leftover after parsing attributes in process `syz.2.611'. [ 395.666588][ T8700] netlink: 20 bytes leftover after parsing attributes in process `syz.2.611'. [ 398.724789][ T8557] chnl_net:caif_netlink_parms(): no params data found [ 399.836610][ T5915] IPVS: starting estimator thread 0... [ 399.965753][ T8734] IPVS: using max 26 ests per chain, 62400 per kthread [ 400.316764][ T5915] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 401.176188][ T5915] usb 5-1: config 220 has an invalid interface number: 76 but max is 2 [ 401.184721][ T5915] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 401.195672][ T5915] usb 5-1: config 220 has no interface number 2 [ 401.202427][ T5915] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 401.216775][ T5915] usb 5-1: config 220 interface 0 has no altsetting 0 [ 401.223599][ T5915] usb 5-1: config 220 interface 76 has no altsetting 0 [ 401.230562][ T5915] usb 5-1: config 220 interface 1 has no altsetting 0 [ 401.248284][ T5915] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 401.275420][ T5915] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 401.283665][ T5915] usb 5-1: Product: syz [ 401.305414][ T5915] usb 5-1: Manufacturer: syz [ 401.310271][ T5915] usb 5-1: SerialNumber: syz [ 401.754619][ T5915] usb 5-1: selecting invalid altsetting 0 [ 401.782881][ T5915] usb 5-1: Found UVC 7.01 device syz (8086:0b07) [ 402.760013][ T5915] usb 5-1: No valid video chain found. [ 402.774966][ T5915] usb 5-1: selecting invalid altsetting 0 [ 402.782503][ T5915] usbtest 5-1:220.1: probe with driver usbtest failed with error -22 [ 402.794485][ T5915] usb 5-1: USB disconnect, device number 9 [ 403.432395][ T8764] netlink: 8 bytes leftover after parsing attributes in process `syz.1.625'. [ 403.466475][ T8764] netlink: 8 bytes leftover after parsing attributes in process `syz.1.625'. [ 403.520212][ T8557] bridge0: port 1(bridge_slave_0) entered blocking state [ 403.547850][ T8557] bridge0: port 1(bridge_slave_0) entered disabled state [ 403.752338][ T8557] bridge_slave_0: entered allmulticast mode [ 403.879656][ T8557] bridge_slave_0: entered promiscuous mode [ 404.335033][ T8557] bridge0: port 2(bridge_slave_1) entered blocking state [ 404.345666][ T8557] bridge0: port 2(bridge_slave_1) entered disabled state [ 404.352970][ T8557] bridge_slave_1: entered allmulticast mode [ 404.396591][ T8557] bridge_slave_1: entered promiscuous mode [ 404.958462][ T1002] hsr_slave_0: left promiscuous mode [ 405.043558][ T1002] hsr_slave_1: left promiscuous mode [ 405.776458][ T1002] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 405.783932][ T1002] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 405.848353][ T1002] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 405.866743][ T1002] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 405.968562][ T1002] veth1_macvtap: left promiscuous mode [ 406.187105][ T1002] veth0_macvtap: left promiscuous mode [ 406.195721][ T1002] veth1_vlan: left promiscuous mode [ 406.201167][ T1002] veth0_vlan: left promiscuous mode [ 407.417637][ T8796] netlink: 'syz.1.631': attribute type 11 has an invalid length. [ 408.979187][ T1002] team0 (unregistering): Port device team_slave_1 removed [ 409.882163][ T1002] team0 (unregistering): Port device team_slave_0 removed [ 410.880827][ T8557] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 410.971333][ T8557] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 411.101290][ T8557] team0: Port device team_slave_0 added [ 411.159682][ T8557] team0: Port device team_slave_1 added [ 411.308872][ T8557] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 411.338819][ T8557] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 411.371643][ T8557] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 411.397399][ T8557] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 411.407471][ T8557] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 411.449901][ T8557] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 414.793941][ T8888] random: crng reseeded on system resumption [ 415.391390][ T8557] hsr_slave_0: entered promiscuous mode [ 416.049687][ T8557] hsr_slave_1: entered promiscuous mode [ 416.074757][ T8557] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 416.174061][ T5837] Bluetooth: hci4: unexpected event for opcode 0x0c7b [ 416.176022][ T8557] Cannot create hsr debugfs directory [ 417.885736][ T5943] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 418.076391][ T5943] usb 5-1: Using ep0 maxpacket: 32 [ 418.103008][ T5943] usb 5-1: New USB device found, idVendor=046d, idProduct=08b7, bcdDevice=99.db [ 418.133060][ T5943] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 418.174104][ T5943] usb 5-1: config 0 descriptor?? [ 418.215253][ T8933] Driver unsupported XDP return value 0 on prog (id 156) dev N/A, expect packet loss! [ 418.232794][ T5943] pwc: Logitech ViewPort AV 100 webcam detected. [ 418.409401][ T8557] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 418.461570][ T8557] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 418.536880][ T8557] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 418.587931][ T8557] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 418.663617][ T5943] pwc: send_video_command error -71 [ 418.681689][ T8945] netlink: 'syz.3.661': attribute type 1 has an invalid length. [ 418.697279][ T5943] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 418.720061][ T5943] Philips webcam 5-1:0.0: probe with driver Philips webcam failed with error -71 [ 418.776886][ T5943] usb 5-1: USB disconnect, device number 10 [ 418.931299][ T8945] netlink: 28 bytes leftover after parsing attributes in process `syz.3.661'. [ 418.949831][ T8956] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 418.961418][ T8958] 8021q: adding VLAN 0 to HW filter on device bond1 [ 418.963684][ T12] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 419.624471][ T8945] bond1 (unregistering): (slave ip6gretap1): Removing an active aggregator [ 419.792078][ T8945] bond1 (unregistering): (slave ip6gretap1): Releasing backup interface [ 420.647851][ T8945] bond1 (unregistering): Released all slaves [ 420.713232][ T8980] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 420.761977][ T8990] xt_hashlimit: size too large, truncated to 1048576 [ 421.251619][ T13] Bluetooth: hci5: Frame reassembly failed (-84) [ 421.405762][ T13] Bluetooth: hci5: Frame reassembly failed (-84) [ 421.611263][ T8557] 8021q: adding VLAN 0 to HW filter on device bond0 [ 421.661155][ T8557] 8021q: adding VLAN 0 to HW filter on device team0 [ 421.840112][ T7480] bridge0: port 1(bridge_slave_0) entered blocking state [ 421.847397][ T7480] bridge0: port 1(bridge_slave_0) entered forwarding state [ 421.874281][ T7480] bridge0: port 2(bridge_slave_1) entered blocking state [ 421.881663][ T7480] bridge0: port 2(bridge_slave_1) entered forwarding state [ 422.750161][ T8557] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 423.394491][ T5836] Bluetooth: hci5: command 0x1003 tx timeout [ 423.484173][ T5837] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 426.942372][ T8557] veth0_vlan: entered promiscuous mode [ 427.797572][ T8557] veth1_vlan: entered promiscuous mode [ 429.007354][ T8557] veth0_macvtap: entered promiscuous mode [ 429.511050][ T8557] veth1_macvtap: entered promiscuous mode [ 429.649912][ T8557] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 429.797187][ T8557] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 429.809037][ T8557] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 429.817950][ T8557] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 429.827187][ T8557] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 429.836269][ T8557] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 431.427173][ T7483] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 431.435062][ T7483] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 431.727976][ T6141] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 431.741021][ T6141] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 437.602909][ T7480] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 437.838635][ T5889] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 437.885596][ T7480] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 437.958838][ T7480] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 438.033141][ T5889] usb 5-1: Using ep0 maxpacket: 8 [ 438.044055][ T5889] usb 5-1: config index 0 descriptor too short (expected 28277, got 36) [ 438.052932][ T5889] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 438.107133][ T7480] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 438.117857][ T5889] usb 5-1: config 0 has no interfaces? [ 438.123347][ T5889] usb 5-1: New USB device found, idVendor=046d, idProduct=c20e, bcdDevice= 0.00 [ 438.136808][ T5889] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 438.190631][ T5889] usb 5-1: config 0 descriptor?? [ 438.329444][ T7480] bridge_slave_1: left allmulticast mode [ 438.335208][ T7480] bridge_slave_1: left promiscuous mode [ 438.346661][ T7480] bridge0: port 2(bridge_slave_1) entered disabled state [ 438.368943][ T7480] bridge_slave_0: left allmulticast mode [ 438.381189][ T7480] bridge_slave_0: left promiscuous mode [ 438.388231][ T7480] bridge0: port 1(bridge_slave_0) entered disabled state [ 439.954580][ T30] kauditd_printk_skb: 19 callbacks suppressed [ 439.954595][ T30] audit: type=1800 audit(1750253699.555:160): pid=9123 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.3.697" name="bus" dev="tmpfs" ino=1006 res=0 errno=0 [ 440.491540][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.498233][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.431025][ T5836] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 441.441452][ T5836] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 441.450893][ T5836] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 441.459626][ T5836] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 441.468634][ T5836] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 441.534269][ T9137] overlayfs: failed to clone lowerpath [ 442.145663][ T9] usb 5-1: USB disconnect, device number 11 [ 442.867604][ T7480] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 442.997105][ T7480] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 443.283920][ T7480] bond0 (unregistering): Released all slaves [ 444.088962][ T5837] Bluetooth: hci0: command tx timeout [ 445.170043][ T5889] IPVS: starting estimator thread 0... [ 445.737073][ T9177] --map-set only usable from mangle table [ 445.927554][ T9176] IPVS: using max 24 ests per chain, 57600 per kthread [ 446.168302][ T5837] Bluetooth: hci0: command tx timeout [ 446.322737][ T9187] netlink: 4 bytes leftover after parsing attributes in process `syz.3.708'. [ 448.482788][ T5837] Bluetooth: hci0: command tx timeout [ 450.729297][ T5837] Bluetooth: hci0: command tx timeout [ 451.639554][ T9222] tls_set_device_offload: netdev not found [ 452.091270][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 452.251027][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 452.681978][ T7480] hsr_slave_0: left promiscuous mode [ 452.713581][ T7480] hsr_slave_1: left promiscuous mode [ 452.742641][ T7480] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 452.781386][ T7480] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 452.809598][ T7480] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 452.850790][ T7480] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 453.194290][ T7480] veth1_macvtap: left promiscuous mode [ 453.679947][ T7480] veth0_macvtap: left promiscuous mode [ 453.697106][ T9245] NILFS (nullb0): couldn't find nilfs on the device [ 453.705060][ T7480] veth1_vlan: left promiscuous mode [ 453.713778][ T7480] veth0_vlan: left promiscuous mode [ 456.123191][ T9271] trusted_key: encrypted_key: insufficient parameters specified [ 456.635874][ T9272] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 457.527462][ T7480] team0 (unregistering): Port device team_slave_1 removed [ 457.582865][ T7480] team0 (unregistering): Port device team_slave_0 removed [ 459.100731][ T9294] netlink: 4 bytes leftover after parsing attributes in process `syz.3.735'. [ 459.226651][ T9292] netlink: 'syz.2.734': attribute type 1 has an invalid length. [ 460.608220][ T9135] chnl_net:caif_netlink_parms(): no params data found [ 461.109604][ T9319] netlink: 4 bytes leftover after parsing attributes in process `syz.3.735'. [ 461.120524][ T9301] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 461.442252][ T9292] veth3: entered promiscuous mode [ 461.463594][ T9292] bond1: (slave veth3): Enslaving as a backup interface with a down link [ 463.575650][ T9135] bridge0: port 1(bridge_slave_0) entered blocking state [ 463.599995][ T9135] bridge0: port 1(bridge_slave_0) entered disabled state [ 463.619955][ T9135] bridge_slave_0: entered allmulticast mode [ 463.640761][ T9135] bridge_slave_0: entered promiscuous mode [ 463.680175][ T9135] bridge0: port 2(bridge_slave_1) entered blocking state [ 463.699190][ T9135] bridge0: port 2(bridge_slave_1) entered disabled state [ 463.714313][ T9135] bridge_slave_1: entered allmulticast mode [ 463.732314][ T9135] bridge_slave_1: entered promiscuous mode [ 465.289551][ T9135] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 465.363025][ T9135] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 466.492366][ T9135] team0: Port device team_slave_0 added [ 466.709753][ T9135] team0: Port device team_slave_1 added [ 467.403589][ T9135] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 467.421119][ T9135] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 467.453501][ T9135] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 467.582728][ T9135] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 467.589747][ T9135] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 467.780621][ T9135] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 467.916027][ T9386] lo speed is unknown, defaulting to 1000 [ 467.923469][ T9386] lo speed is unknown, defaulting to 1000 [ 467.935365][ T9386] lo speed is unknown, defaulting to 1000 [ 467.967105][ T9386] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 468.034042][ T9386] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 468.154876][ T9386] lo speed is unknown, defaulting to 1000 [ 468.171974][ T9386] lo speed is unknown, defaulting to 1000 [ 468.188045][ T9386] lo speed is unknown, defaulting to 1000 [ 468.204933][ T9386] lo speed is unknown, defaulting to 1000 [ 468.262119][ T9386] lo speed is unknown, defaulting to 1000 [ 468.871248][ T9395] netlink: 28 bytes leftover after parsing attributes in process `syz.2.755'. [ 468.952087][ T9395] netlink: 'syz.2.755': attribute type 7 has an invalid length. [ 469.212151][ T9403] netlink: 32 bytes leftover after parsing attributes in process `syz.4.754'. [ 469.458486][ T9395] netlink: 'syz.2.755': attribute type 8 has an invalid length. [ 469.516368][ T9403] netlink: 216 bytes leftover after parsing attributes in process `syz.4.754'. [ 469.524028][ T9395] netlink: 4 bytes leftover after parsing attributes in process `syz.2.755'. [ 469.525761][ T9403] netlink: 216 bytes leftover after parsing attributes in process `syz.4.754'. [ 469.546873][ T9403] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 470.063290][ T9135] hsr_slave_0: entered promiscuous mode [ 470.452263][ T9135] hsr_slave_1: entered promiscuous mode [ 470.481395][ T9135] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 470.489030][ T9135] Cannot create hsr debugfs directory [ 473.125667][ T9443] netlink: 8 bytes leftover after parsing attributes in process `syz.4.765'. [ 473.804763][ T5837] Bluetooth: hci3: command 0x0406 tx timeout [ 475.737125][ T9489] netlink: 12 bytes leftover after parsing attributes in process `syz.3.775'. [ 476.097683][ T9500] netlink: 8 bytes leftover after parsing attributes in process `syz.1.779'. [ 478.851083][ T9518] trusted_key: encrypted_key: master key parameter 'use' is invalid [ 479.072694][ T9518] fuse: Bad value for 'fd' [ 479.726794][ T9532] netlink: 'syz.2.786': attribute type 1 has an invalid length. [ 479.737662][ T5915] Process accounting resumed [ 479.981482][ T9135] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 479.996464][ T9135] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 480.601278][ T9514] Process accounting resumed [ 481.125724][ T9543] Can't find a SQUASHFS superblock on nullb0 [ 481.912942][ T9135] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 482.019253][ T9135] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 483.103526][ T9564] netlink: 4 bytes leftover after parsing attributes in process `syz.1.792'. [ 483.338206][ T9564] netlink: 4 bytes leftover after parsing attributes in process `syz.1.792'. [ 485.274138][ T9135] 8021q: adding VLAN 0 to HW filter on device bond0 [ 485.368387][ T9584] xt_socket: unknown flags 0x50 [ 485.675914][ T9135] 8021q: adding VLAN 0 to HW filter on device team0 [ 486.376832][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 486.384185][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 487.400067][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 487.407360][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 487.675046][ T9135] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 487.685893][ T9135] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 487.951758][ T5837] Bluetooth: hci4: unexpected event for opcode 0x1004 [ 492.083764][ T5837] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 492.093521][ T5837] Bluetooth: hci4: Injecting HCI hardware error event [ 492.102405][ T5837] Bluetooth: hci4: hardware error 0x00 [ 492.565314][ T9135] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 492.940271][ T9135] veth0_vlan: entered promiscuous mode [ 492.990388][ T9135] veth1_vlan: entered promiscuous mode [ 493.257780][ T9135] veth0_macvtap: entered promiscuous mode [ 493.284955][ T9135] veth1_macvtap: entered promiscuous mode [ 493.596650][ T9135] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 493.730632][ T9654] netlink: 8 bytes leftover after parsing attributes in process `syz.2.809'. [ 494.224236][ T5837] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 494.478517][ T9652] fuse: Unknown parameter 'fd0xffffffffffffffff' [ 494.488796][ T9135] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 495.472575][ T9135] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 495.484069][ T9135] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 495.494025][ T9135] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 495.503076][ T9135] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 495.516649][ T9652] netlink: 'syz.1.810': attribute type 1 has an invalid length. [ 496.710149][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 496.793777][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 496.839052][ T9665] kvm: kvm [9661]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x800 [ 496.886132][ T9665] kvm: kvm [9661]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc2) = 0x4800 [ 496.928148][ T9683] netlink: 4 bytes leftover after parsing attributes in process `syz.1.819'. [ 496.939471][ T1002] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 496.941112][ T9665] kvm: kvm [9661]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0x11e) = 0x4000 [ 496.951327][ T1002] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 497.000882][ T9665] kvm: kvm [9661]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0x186) = 0x4000 [ 497.010776][ T9687] vlan0: entered promiscuous mode [ 497.024052][ T9687] vlan0: entered allmulticast mode [ 497.054545][ T9687] hsr_slave_1: entered allmulticast mode [ 497.194669][ T9687] netlink: 4 bytes leftover after parsing attributes in process `syz.1.819'. [ 501.448818][ T6141] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 501.576510][ T6141] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 501.688860][ T6141] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 501.779523][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.786181][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.823750][ T6141] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 502.021399][ T6141] bridge_slave_1: left allmulticast mode [ 502.030940][ T6141] bridge_slave_1: left promiscuous mode [ 502.037497][ T6141] bridge0: port 2(bridge_slave_1) entered disabled state [ 502.075735][ T6141] bridge_slave_0: left allmulticast mode [ 502.088304][ T6141] bridge_slave_0: left promiscuous mode [ 502.094246][ T6141] bridge0: port 1(bridge_slave_0) entered disabled state [ 506.118823][ T5836] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 506.142149][ T5836] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 506.159440][ T5836] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 506.173143][ T5836] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 506.183261][ T5836] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 507.285879][ T6141] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 507.307445][ T6141] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 507.320023][ T6141] bond0 (unregistering): Released all slaves [ 507.350325][ T9736] tipc: Started in network mode [ 507.356645][ T9736] tipc: Node identity ac14140f, cluster identity 4711 [ 507.364076][ T9736] tipc: New replicast peer: 255.255.255.255 [ 507.371346][ T9736] tipc: Enabled bearer , priority 10 [ 508.323156][ T5836] Bluetooth: hci0: command tx timeout [ 508.498239][ T5915] tipc: Node number set to 2886997007 [ 509.353201][ T9776] lo speed is unknown, defaulting to 1000 [ 509.386119][ T9799] siw: device registration error -23 [ 510.381624][ T9821] netlink: 'syz.2.837': attribute type 10 has an invalid length. [ 510.382979][ T5836] Bluetooth: hci0: command tx timeout [ 511.769006][ T9821] team0: Device syz_tun failed to register rx_handler [ 512.495812][ T5836] Bluetooth: hci0: command tx timeout [ 514.720785][ T5915] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 514.733906][ T5836] Bluetooth: hci0: command tx timeout [ 515.214165][ T9862] trusted_key: encrypted_key: insufficient parameters specified [ 515.430987][ T5915] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 515.580723][ T5915] usb 5-1: New USB device found, idVendor=056e, idProduct=00fc, bcdDevice= 0.00 [ 515.616823][ T5915] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 515.691132][ T5915] usb 5-1: config 0 descriptor?? [ 515.802993][ T6141] hsr_slave_0: left promiscuous mode [ 515.831305][ T6141] hsr_slave_1: left promiscuous mode [ 515.854476][ T6141] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 516.079787][ T6141] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 516.122391][ T6141] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 516.156195][ T6141] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 516.895031][ T5915] usbhid 5-1:0.0: can't add hid device: -71 [ 516.909178][ T5915] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 516.920344][ T5915] usb 5-1: USB disconnect, device number 12 [ 517.171875][ T6141] veth1_macvtap: left promiscuous mode [ 517.207909][ T6141] veth0_macvtap: left promiscuous mode [ 517.213763][ T6141] veth1_vlan: left promiscuous mode [ 517.270083][ T6141] veth0_vlan: left promiscuous mode [ 522.306188][ T5943] libceph: connect (1)[c::]:6789 error -101 [ 522.317109][ T5943] libceph: mon0 (1)[c::]:6789 connect error [ 523.358423][ T5943] libceph: connect (1)[c::]:6789 error -101 [ 523.364707][ T5943] libceph: mon0 (1)[c::]:6789 connect error [ 523.472823][ T9916] ceph: No mds server is up or the cluster is laggy [ 527.436608][ T9954] x_tables: ip_tables: recent.0 match: invalid size 216 (kernel) != (user) 4096 [ 530.067884][ T6141] team0 (unregistering): Port device team_slave_1 removed [ 530.130830][ T6141] team0 (unregistering): Port device team_slave_0 removed [ 530.785428][ T9913] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 531.487932][ T9946] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 531.574055][ T9946] batadv_slave_0: entered promiscuous mode [ 531.804827][ T9776] chnl_net:caif_netlink_parms(): no params data found [ 533.776362][ T9996] syz.4.875 (9996): drop_caches: 2 [ 535.764628][ T9776] bridge0: port 1(bridge_slave_0) entered blocking state [ 535.774791][ T9776] bridge0: port 1(bridge_slave_0) entered disabled state [ 535.793062][ T9776] bridge_slave_0: entered allmulticast mode [ 535.823790][ T9776] bridge_slave_0: entered promiscuous mode [ 535.868877][ T9776] bridge0: port 2(bridge_slave_1) entered blocking state [ 535.878351][ T9776] bridge0: port 2(bridge_slave_1) entered disabled state [ 535.907203][ T9776] bridge_slave_1: entered allmulticast mode [ 535.917919][ T9776] bridge_slave_1: entered promiscuous mode [ 536.017468][T10025] netlink: 12 bytes leftover after parsing attributes in process `syz.1.885'. [ 536.050099][T10026] netlink: 'syz.2.884': attribute type 10 has an invalid length. [ 536.219831][T10025] 8021q: VLANs not supported on nlmon0 [ 536.954406][T10035] xt_CT: You must specify a L4 protocol and not use inversions on it [ 537.604567][ T9776] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 537.657278][ T9776] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 539.001649][ T5836] Bluetooth: hci3: unexpected event for opcode 0x1405 [ 539.130116][ T9776] team0: Port device team_slave_0 added [ 539.152870][ T9776] team0: Port device team_slave_1 added [ 543.191672][T10087] netlink: 20 bytes leftover after parsing attributes in process `syz.3.896'. [ 543.341650][ T9776] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 543.359484][ T9776] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 543.405927][ T9776] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 543.486087][ T9776] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 543.519304][ T9776] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 543.592174][ T9776] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 546.066114][ T9776] hsr_slave_0: entered promiscuous mode [ 546.073206][ T9776] hsr_slave_1: entered promiscuous mode [ 546.079827][ T9776] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 546.087394][ T9776] Cannot create hsr debugfs directory [ 546.373189][T10114] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 546.409675][T10114] bond2: entered promiscuous mode [ 546.414798][T10114] bond2: entered allmulticast mode [ 546.420567][T10114] 8021q: adding VLAN 0 to HW filter on device bond2 [ 546.507594][T10115] netlink: 'syz.4.905': attribute type 10 has an invalid length. [ 546.694342][T10115] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 548.226379][T10135] overlayfs: failed to clone upperpath [ 549.306108][T10140] vlan2: entered allmulticast mode [ 549.311423][T10140] mac80211_hwsim hwsim9 wlan1: entered allmulticast mode [ 550.767039][ T9776] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 550.875277][ T9776] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 551.141132][ T9776] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 551.158144][ T9776] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 552.169446][T10179] netlink: 'syz.1.918': attribute type 2 has an invalid length. [ 554.869337][ T9776] 8021q: adding VLAN 0 to HW filter on device bond0 [ 555.929314][ T9776] 8021q: adding VLAN 0 to HW filter on device team0 [ 556.930220][ T9776] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 556.941004][ T9776] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 557.269197][T10215] overlayfs: failed to clone upperpath [ 557.349721][ T7480] bridge0: port 1(bridge_slave_0) entered blocking state [ 557.357243][ T7480] bridge0: port 1(bridge_slave_0) entered forwarding state [ 557.399179][ T7480] bridge0: port 2(bridge_slave_1) entered blocking state [ 557.406448][ T7480] bridge0: port 2(bridge_slave_1) entered forwarding state [ 557.495420][T10215] capability: warning: `syz.3.926' uses 32-bit capabilities (legacy support in use) [ 558.072343][T10231] syz.4.929 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 559.625901][T10244] netlink: 24 bytes leftover after parsing attributes in process `syz.2.931'. [ 559.733600][T10248] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 559.792373][T10250] netlink: 8 bytes leftover after parsing attributes in process `syz.3.933'. [ 559.835794][T10250] netlink: 8 bytes leftover after parsing attributes in process `syz.3.933'. [ 559.875379][T10248] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 561.297962][ T9776] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 561.306926][T10248] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 561.563957][T10271] netlink: 8 bytes leftover after parsing attributes in process `syz.2.936'. [ 561.775780][T10271] netlink: 8 bytes leftover after parsing attributes in process `syz.2.936'. [ 562.393634][ T9776] veth0_vlan: entered promiscuous mode [ 563.308896][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.316627][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 565.386857][T10318] netlink: 'syz.1.944': attribute type 10 has an invalid length. [ 565.488602][ T5889] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 565.666224][ T5889] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 565.704748][ T5889] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 565.725640][ T5889] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 565.747837][ T5889] usb 5-1: Product: syz [ 565.758380][ T5889] usb 5-1: Manufacturer: syz [ 565.777119][ T5889] usb 5-1: SerialNumber: syz [ 565.828493][ T5837] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 565.840046][ T5837] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 565.850041][ T5837] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 565.859130][ T5837] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 565.869344][ T5837] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 566.040957][ T5889] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 13 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 566.166037][T10333] netlink: 8 bytes leftover after parsing attributes in process `syz.3.947'. [ 566.214402][T10333] netlink: 8 bytes leftover after parsing attributes in process `syz.3.947'. [ 566.570565][ T5943] usb 5-1: USB disconnect, device number 13 [ 566.898902][ T5943] usblp0: removed [ 567.349809][T10346] netlink: 8 bytes leftover after parsing attributes in process `syz.3.950'. [ 567.463026][T10346] netlink: 8 bytes leftover after parsing attributes in process `syz.3.950'. [ 568.082176][ T5837] Bluetooth: hci0: command tx timeout [ 570.440291][ T5836] Bluetooth: hci0: command tx timeout [ 570.463328][ T36] bridge_slave_1: left allmulticast mode [ 570.469051][ T36] bridge_slave_1: left promiscuous mode [ 570.880970][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 571.330058][ T36] bridge_slave_0: left allmulticast mode [ 571.335865][ T36] bridge_slave_0: left promiscuous mode [ 571.341722][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 572.514922][ T5837] Bluetooth: hci0: command tx timeout [ 573.268507][T10391] netlink: 8 bytes leftover after parsing attributes in process `syz.2.960'. [ 573.318867][T10391] netlink: 8 bytes leftover after parsing attributes in process `syz.2.960'. [ 573.371075][T10395] netlink: 'syz.1.959': attribute type 10 has an invalid length. [ 574.684479][ T5837] Bluetooth: hci0: command tx timeout [ 576.334320][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 576.350786][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 577.055263][ T36] bond0 (unregistering): Released all slaves [ 577.083747][T10323] lo speed is unknown, defaulting to 1000 [ 577.424879][T10425] netlink: 8 bytes leftover after parsing attributes in process `syz.3.965'. [ 577.974852][T10425] netlink: 8 bytes leftover after parsing attributes in process `syz.3.965'. [ 580.089515][T10456] netlink: 8 bytes leftover after parsing attributes in process `syz.2.972'. [ 580.777464][T10467] kAFS: No cell specified [ 581.517621][ T36] hsr_slave_0: left promiscuous mode [ 582.171108][ T36] hsr_slave_1: left promiscuous mode [ 582.181328][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 582.234424][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 582.283087][T10483] netlink: 'syz.1.976': attribute type 10 has an invalid length. [ 583.502786][ T36] veth0_vlan: left promiscuous mode [ 583.978578][T10499] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.979'. [ 585.016189][T10501] netlink: 8 bytes leftover after parsing attributes in process `syz.4.981'. [ 585.021071][T10501] netlink: 8 bytes leftover after parsing attributes in process `syz.4.981'. [ 591.112700][ T36] team0 (unregistering): Port device team_slave_1 removed [ 591.200078][ T36] team0 (unregistering): Port device team_slave_0 removed [ 593.648407][T10323] chnl_net:caif_netlink_parms(): no params data found [ 593.703257][T10575] vlan2: entered allmulticast mode [ 595.251989][T10323] bridge0: port 1(bridge_slave_0) entered blocking state [ 595.284648][T10323] bridge0: port 1(bridge_slave_0) entered disabled state [ 595.408302][T10323] bridge_slave_0: entered allmulticast mode [ 595.417645][T10323] bridge_slave_0: entered promiscuous mode [ 595.434352][T10323] bridge0: port 2(bridge_slave_1) entered blocking state [ 595.442848][T10323] bridge0: port 2(bridge_slave_1) entered disabled state [ 595.565171][T10604] hub 9-0:1.0: USB hub found [ 595.574940][T10604] hub 9-0:1.0: 1 port detected [ 596.412306][T10323] bridge_slave_1: entered allmulticast mode [ 596.480626][T10323] bridge_slave_1: entered promiscuous mode [ 596.562613][T10608] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 596.570479][T10608] overlayfs: failed to set xattr on upper [ 596.576280][T10608] overlayfs: ...falling back to redirect_dir=nofollow. [ 596.583146][T10608] overlayfs: ...falling back to index=off. [ 596.589024][T10608] overlayfs: ...falling back to uuid=null. [ 598.462396][T10323] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 598.475916][T10323] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 598.577999][T10624] netlink: 'syz.2.1002': attribute type 10 has an invalid length. [ 598.615728][T10624] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1002'. [ 598.646548][T10624] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 598.672617][T10627] syz.1.1003 uses obsolete (PF_INET,SOCK_PACKET) [ 598.706113][T10323] team0: Port device team_slave_0 added [ 598.737152][T10631] netlink: 'syz.3.1004': attribute type 10 has an invalid length. [ 598.748287][T10323] team0: Port device team_slave_1 added [ 598.861178][T10631] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 598.982160][T10323] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 599.000176][T10323] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 599.074507][T10323] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 599.200464][T10323] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 599.211045][T10323] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 600.082923][T10323] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 602.005493][T10323] hsr_slave_0: entered promiscuous mode [ 602.018267][T10323] hsr_slave_1: entered promiscuous mode [ 602.031436][T10323] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 602.040465][T10323] Cannot create hsr debugfs directory [ 606.158774][T10692] netlink: 'syz.4.1019': attribute type 7 has an invalid length. [ 608.486844][ T30] audit: type=1326 audit(1750253867.854:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10712 comm="syz.4.1025" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7faaf2d8e929 code=0x0 [ 609.040791][T10323] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 609.076620][T10323] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 609.103902][T10323] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 609.135452][T10323] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 609.433408][T10737] Invalid source name [ 609.437719][T10737] UBIFS error (pid: 10737): cannot open "./file0", error -22 [ 614.369536][T10323] 8021q: adding VLAN 0 to HW filter on device bond0 [ 614.582485][T10323] 8021q: adding VLAN 0 to HW filter on device team0 [ 614.603889][ T1002] bridge0: port 1(bridge_slave_0) entered blocking state [ 614.611191][ T1002] bridge0: port 1(bridge_slave_0) entered forwarding state [ 614.642667][T10775] overlayfs: failed to clone upperpath [ 614.915087][ T1002] bridge0: port 2(bridge_slave_1) entered blocking state [ 614.922572][ T1002] bridge0: port 2(bridge_slave_1) entered forwarding state [ 620.843218][T10323] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 620.905150][T10818] siw: device registration error -23 [ 620.920154][T10818] smc: removing ib device syz0 [ 622.274914][T10818] ------------[ cut here ]------------ [ 622.280493][T10818] WARNING: CPU: 1 PID: 10818 at drivers/infiniband/sw/rxe/rxe_pool.c:116 rxe_pool_cleanup+0x48/0x60 [ 622.291490][T10818] Modules linked in: [ 622.295913][T10818] CPU: 1 UID: 0 PID: 10818 Comm: syz.1.1044 Not tainted 6.16.0-rc2-syzkaller-00047-g52da431bf03b #0 PREEMPT(full) [ 622.308552][T10818] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 622.319087][T10818] RIP: 0010:rxe_pool_cleanup+0x48/0x60 [ 622.324616][T10818] Code: 00 fc ff df 80 3c 08 00 74 08 48 89 df e8 a0 04 89 f9 48 83 3b 00 75 0c e8 35 b1 27 f9 5b e9 cf 5e c9 02 cc e8 29 b1 27 f9 90 <0f> 0b 90 5b e9 bf 5e c9 02 cc 66 66 66 66 66 2e 0f 1f 84 00 00 00 [ 622.344370][T10818] RSP: 0018:ffffc9000433f098 EFLAGS: 00010246 [ 622.350537][T10818] RAX: ffffffff8898aa17 RBX: ffff88802721d3a0 RCX: 0000000000080000 [ 622.358678][T10818] RDX: ffffc90004952000 RSI: 000000000007ffff RDI: 0000000000080000 [ 622.366780][T10818] RBP: ffff88802721d080 R08: ffff88802721c783 R09: 1ffff11004e438f0 [ 622.374930][T10818] R10: dffffc0000000000 R11: ffffffff8896e740 R12: dffffc0000000000 [ 622.383018][T10818] R13: dffffc0000000000 R14: ffffffff8896e740 R15: dffffc0000000000 [ 622.391088][T10818] FS: 00007f53244616c0(0000) GS:ffff888125d85000(0000) knlGS:0000000000000000 [ 622.400183][T10818] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 622.407257][T10818] CR2: 0000001b3000dff8 CR3: 0000000032114000 CR4: 00000000003526f0 [ 622.415428][T10818] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 622.423591][T10818] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 622.431724][T10818] Call Trace: [ 622.435065][T10818] [ 622.438034][T10818] rxe_dealloc+0x27/0xc0 [ 622.442545][T10818] ? __pfx_rxe_dealloc+0x10/0x10 [ 622.447529][T10818] ib_dealloc_device+0x54/0x200 [ 622.452496][T10818] __ib_unregister_device+0x393/0x3f0 [ 622.457930][T10818] ? __pfx_ib_device_get_by_index+0x10/0x10 [ 622.464143][T10818] ib_unregister_device_and_put+0xb8/0xf0 [ 622.470107][T10818] nldev_dellink+0x2d1/0x320 [ 622.474743][T10818] ? __pfx_nldev_dellink+0x10/0x10 [ 622.480133][T10818] ? rcu_is_watching+0x15/0xb0 [ 622.484951][T10818] ? cap_capable+0x11f/0x460 [ 622.489646][T10818] ? safesetid_security_capable+0xa9/0x1a0 [ 622.495501][T10818] ? bpf_lsm_capable+0x9/0x20 [ 622.500299][T10818] ? security_capable+0x7e/0x2e0 [ 622.505294][T10818] ? __pfx_nldev_dellink+0x10/0x10 [ 622.511102][T10818] rdma_nl_rcv+0x6ab/0x980 [ 622.515579][T10818] ? __pfx_rdma_nl_rcv+0x10/0x10 [ 622.520652][T10818] ? __lock_acquire+0xab9/0xd20 [ 622.525598][T10818] ? netlink_deliver_tap+0x2e/0x1b0 [ 622.530953][T10818] ? netlink_deliver_tap+0x2e/0x1b0 [ 622.536224][T10818] netlink_unicast+0x758/0x8d0 [ 622.541103][T10818] netlink_sendmsg+0x805/0xb30 [ 622.545937][T10818] ? __pfx_netlink_sendmsg+0x10/0x10 [ 622.551341][T10818] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 622.556676][T10818] ? __pfx_netlink_sendmsg+0x10/0x10 [ 622.562100][T10818] __sock_sendmsg+0x21c/0x270 [ 622.566841][T10818] ____sys_sendmsg+0x505/0x830 [ 622.571707][T10818] ? __pfx_____sys_sendmsg+0x10/0x10 [ 622.577048][T10818] ? import_iovec+0x74/0xa0 [ 622.581649][T10818] ___sys_sendmsg+0x21f/0x2a0 [ 622.586383][T10818] ? __pfx____sys_sendmsg+0x10/0x10 [ 622.591832][T10818] ? __fget_files+0x2a/0x420 [ 622.596578][T10818] ? __fget_files+0x3a0/0x420 [ 622.601389][T10818] __x64_sys_sendmsg+0x19b/0x260 [ 622.606390][T10818] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 622.612473][T10818] ? rcu_is_watching+0x15/0xb0 [ 622.617295][T10818] ? do_syscall_64+0xbe/0x3b0 [ 622.622330][T10818] do_syscall_64+0xfa/0x3b0 [ 622.626898][T10818] ? lockdep_hardirqs_on+0x9c/0x150 [ 622.632228][T10818] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 622.638487][T10818] ? clear_bhb_loop+0x60/0xb0 [ 622.643266][T10818] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 622.649345][T10818] RIP: 0033:0x7f532358e929 [ 622.653804][T10818] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 622.673584][T10818] RSP: 002b:00007f5324461038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 622.682222][T10818] RAX: ffffffffffffffda RBX: 00007f53237b5fa0 RCX: 00007f532358e929 [ 622.690296][T10818] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000008 [ 622.698307][T10818] RBP: 00007f5323610b39 R08: 0000000000000000 R09: 0000000000000000 [ 622.706363][T10818] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 622.714897][T10818] R13: 0000000000000000 R14: 00007f53237b5fa0 R15: 00007ffe811bfbf8 [ 622.722959][T10818] [ 622.726014][T10818] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 622.733322][T10818] CPU: 1 UID: 0 PID: 10818 Comm: syz.1.1044 Not tainted 6.16.0-rc2-syzkaller-00047-g52da431bf03b #0 PREEMPT(full) [ 622.745602][T10818] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 622.755869][T10818] Call Trace: [ 622.759191][T10818] [ 622.762159][T10818] dump_stack_lvl+0x99/0x250 [ 622.766817][T10818] ? __asan_memcpy+0x40/0x70 [ 622.771443][T10818] ? __pfx_dump_stack_lvl+0x10/0x10 [ 622.776684][T10818] ? __pfx__printk+0x10/0x10 [ 622.781336][T10818] panic+0x2db/0x790 [ 622.785388][T10818] ? __pfx_panic+0x10/0x10 [ 622.790077][T10818] __warn+0x31b/0x4b0 [ 622.794098][T10818] ? rxe_pool_cleanup+0x48/0x60 [ 622.798998][T10818] ? rxe_pool_cleanup+0x48/0x60 [ 622.803907][T10818] report_bug+0x2be/0x4f0 [ 622.808280][T10818] ? rxe_pool_cleanup+0x48/0x60 [ 622.813173][T10818] ? rxe_pool_cleanup+0x48/0x60 [ 622.818089][T10818] ? rxe_pool_cleanup+0x4a/0x60 [ 622.823178][T10818] handle_bug+0x84/0x160 [ 622.827480][T10818] exc_invalid_op+0x1a/0x50 [ 622.832093][T10818] asm_exc_invalid_op+0x1a/0x20 [ 622.836997][T10818] RIP: 0010:rxe_pool_cleanup+0x48/0x60 [ 622.842530][T10818] Code: 00 fc ff df 80 3c 08 00 74 08 48 89 df e8 a0 04 89 f9 48 83 3b 00 75 0c e8 35 b1 27 f9 5b e9 cf 5e c9 02 cc e8 29 b1 27 f9 90 <0f> 0b 90 5b e9 bf 5e c9 02 cc 66 66 66 66 66 2e 0f 1f 84 00 00 00 [ 622.862354][T10818] RSP: 0018:ffffc9000433f098 EFLAGS: 00010246 [ 622.868462][T10818] RAX: ffffffff8898aa17 RBX: ffff88802721d3a0 RCX: 0000000000080000 [ 622.876553][T10818] RDX: ffffc90004952000 RSI: 000000000007ffff RDI: 0000000000080000 [ 622.884562][T10818] RBP: ffff88802721d080 R08: ffff88802721c783 R09: 1ffff11004e438f0 [ 622.892588][T10818] R10: dffffc0000000000 R11: ffffffff8896e740 R12: dffffc0000000000 [ 622.900679][T10818] R13: dffffc0000000000 R14: ffffffff8896e740 R15: dffffc0000000000 [ 622.908689][T10818] ? __pfx_rxe_dealloc+0x10/0x10 [ 622.913674][T10818] ? __pfx_rxe_dealloc+0x10/0x10 [ 622.918650][T10818] ? rxe_pool_cleanup+0x47/0x60 [ 622.923727][T10818] ? rxe_pool_cleanup+0x47/0x60 [ 622.928630][T10818] rxe_dealloc+0x27/0xc0 [ 622.932915][T10818] ? __pfx_rxe_dealloc+0x10/0x10 [ 622.937894][T10818] ib_dealloc_device+0x54/0x200 [ 622.942792][T10818] __ib_unregister_device+0x393/0x3f0 [ 622.948213][T10818] ? __pfx_ib_device_get_by_index+0x10/0x10 [ 622.954177][T10818] ib_unregister_device_and_put+0xb8/0xf0 [ 622.959943][T10818] nldev_dellink+0x2d1/0x320 [ 622.964573][T10818] ? __pfx_nldev_dellink+0x10/0x10 [ 622.969835][T10818] ? rcu_is_watching+0x15/0xb0 [ 622.974642][T10818] ? cap_capable+0x11f/0x460 [ 622.979274][T10818] ? safesetid_security_capable+0xa9/0x1a0 [ 622.985125][T10818] ? bpf_lsm_capable+0x9/0x20 [ 622.989872][T10818] ? security_capable+0x7e/0x2e0 [ 622.994861][T10818] ? __pfx_nldev_dellink+0x10/0x10 [ 623.000019][T10818] rdma_nl_rcv+0x6ab/0x980 [ 623.004490][T10818] ? __pfx_rdma_nl_rcv+0x10/0x10 [ 623.009462][T10818] ? __lock_acquire+0xab9/0xd20 [ 623.014388][T10818] ? netlink_deliver_tap+0x2e/0x1b0 [ 623.019622][T10818] ? netlink_deliver_tap+0x2e/0x1b0 [ 623.024860][T10818] netlink_unicast+0x758/0x8d0 [ 623.029683][T10818] netlink_sendmsg+0x805/0xb30 [ 623.034501][T10818] ? __pfx_netlink_sendmsg+0x10/0x10 [ 623.039841][T10818] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 623.045184][T10818] ? __pfx_netlink_sendmsg+0x10/0x10 [ 623.050507][T10818] __sock_sendmsg+0x21c/0x270 [ 623.055240][T10818] ____sys_sendmsg+0x505/0x830 [ 623.060099][T10818] ? __pfx_____sys_sendmsg+0x10/0x10 [ 623.065531][T10818] ? import_iovec+0x74/0xa0 [ 623.070071][T10818] ___sys_sendmsg+0x21f/0x2a0 [ 623.074793][T10818] ? __pfx____sys_sendmsg+0x10/0x10 [ 623.080084][T10818] ? __fget_files+0x2a/0x420 [ 623.084891][T10818] ? __fget_files+0x3a0/0x420 [ 623.089628][T10818] __x64_sys_sendmsg+0x19b/0x260 [ 623.094611][T10818] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 623.100215][T10818] ? rcu_is_watching+0x15/0xb0 [ 623.105116][T10818] ? do_syscall_64+0xbe/0x3b0 [ 623.109854][T10818] do_syscall_64+0xfa/0x3b0 [ 623.114520][T10818] ? lockdep_hardirqs_on+0x9c/0x150 [ 623.119851][T10818] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 623.126302][T10818] ? clear_bhb_loop+0x60/0xb0 [ 623.131116][T10818] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 623.137050][T10818] RIP: 0033:0x7f532358e929 [ 623.141500][T10818] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 623.161317][T10818] RSP: 002b:00007f5324461038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 623.169779][T10818] RAX: ffffffffffffffda RBX: 00007f53237b5fa0 RCX: 00007f532358e929 [ 623.177799][T10818] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000008 [ 623.186002][T10818] RBP: 00007f5323610b39 R08: 0000000000000000 R09: 0000000000000000 [ 623.194081][T10818] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 623.202106][T10818] R13: 0000000000000000 R14: 00007f53237b5fa0 R15: 00007ffe811bfbf8 [ 623.210150][T10818] [ 623.213512][T10818] Kernel Offset: disabled [ 623.217842][T10818] Rebooting in 86400 seconds..