last executing test programs: 3m22.209067211s ago: executing program 1 (id=199): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000000440efff000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d10300002c0000000e0a010200000000000000000a0000000900010073797a31000000000900020073797a31"], 0xd8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 3m20.928659657s ago: executing program 1 (id=203): socket$packet(0x11, 0x3, 0x300) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000180)={&(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0x80800, 0x0, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = pidfd_getfd(r0, r0, 0x0) dup2(r1, r2) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3, 0x0, 0x4}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e25}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) io_uring_setup(0x3a84, &(0x7f0000001d80)={0x0, 0xfc33, 0x2, 0x1, 0x3d7}) prctl$PR_CAP_AMBIENT(0x2f, 0x1, 0x4) r7 = socket$inet6(0xa, 0x3, 0x2c) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x3c1, 0x3, 0x550, 0x3a0, 0x150, 0x150, 0x0, 0xf8010000, 0x480, 0x238, 0x238, 0x480, 0x238, 0x3, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, [], [], 'team_slave_0\x00', 'hsr0\x00', {}, {}, 0x84}, 0x0, 0x338, 0x3a0, 0x0, {}, [@common=@inet=@sctp={{0x148}, {[], [], [], 0x2, [], 0x0, 0x4}}, @common=@inet=@sctp={{0x148}, {[], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000]}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}, {{@ipv6={@empty, @mcast1, [], [], 'batadv_slave_0\x00', 'veth1\x00'}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff, 0x5, 0x4}, {0x2, 0x6, 0x5}, {0x4, 0x2, 0x6}, 0x1, 0x6}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5b0) syz_emit_ethernet(0x1080, &(0x7f0000002140)=ANY=[@ANYBLOB], 0x0) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) 3m17.843539814s ago: executing program 1 (id=206): setfsuid(0xee00) setresuid(0x0, 0x0, 0x0) syz_open_dev$vbi(&(0x7f00000002c0), 0x3, 0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) socket$inet6(0xa, 0x80003, 0xff) syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x143a02) r0 = syz_io_uring_setup(0x231, &(0x7f0000000080)={0x0, 0x2804, 0x10100}, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xffffff56}) io_uring_enter(r0, 0x7a98, 0x0, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x80003, 0xff) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8000}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) setpriority(0x2, 0x0, 0x4) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) openat2$dir(0xffffffffffffff9c, &(0x7f0000000480)='./bus\x00', 0x0, 0x0) pselect6(0x40, &(0x7f0000000000)={0x6, 0x2, 0x8000000000000000, 0x0, 0x2, 0x0, 0x100, 0x10001003}, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r4 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040)='::::\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) gettid() syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0xf59}, 0x0) 3m15.792150961s ago: executing program 1 (id=210): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0800034000000004400000000b0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d10300002c0000000e0a010200000000000000000a0000000900010073797a31000000000900020073797a31"], 0xd8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 3m14.584407128s ago: executing program 1 (id=212): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() ptrace$ARCH_SET_CPUID(0x1e, r0, 0x1, 0x1012) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = getpid() r4 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x3c, r7, 0x1, 0x0, 0x0, {0x33}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}]}, 0x3c}}, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f00000000c0)=0x0) r9 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)={0x1c, r9, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040}, 0x4000010) sendmsg$nfc_llcp(r4, &(0x7f0000000400)={&(0x7f0000000000)={0x27, r8, 0x0, 0x3, 0x33, 0x8, "3faed17fa2216df0fbd5bbd37eb489a06bf4bd218646c20106b6f9b8bde266d91576def47bd57b8a793cce0565920207a4e226aee52503cc3100cbcc87fb71", 0x19}, 0x60, &(0x7f0000000300)=[{&(0x7f0000000240)="1c2d077cf5f16ff0554b9c52a6e0ba6dac4bf6edf2ba356762629ffdc5fa6c9d23b0fcb2201e0dca3c308a30ea9d4566e4dedf39ece837c30ce87227cc66c1b8637f6730f679ddb0b08aa9be00a8b158f291fa7a9e3742bef295104137e6e962723be42fb7633f2fcae7322472a895b6b22760c226bbe114dd72e629f8b44b22b437574d", 0x84}, {&(0x7f00000000c0)="9d8057dd017f81b763252dc2f46de44af2585340fc32baaea8218bc499f6818ea8017ef18a9e2b74a0fad8ce2d33b3b1727446e6fc07734f8efa1f538f3b3f525d2ce598ca4e8e954a9d6afef5389598", 0x50}], 0x2, &(0x7f0000000340)={0x98, 0x116, 0x9, "bd5c1bcc985f8dff25efc0e271156ef89577b607731c44a0793b48909925f59d32665c3eeca8d0eeaf0723c4e680befc9e7532e855a0be4a6d7f22a6a9b447b30c65edc7df3918c775e7689a21d284ddb42970caebb66778924321db058e6f6355536ae619321c4d47ef794cd711907a0398ae8a1f5bf61206434400dd03e9b531f8"}, 0x98, 0x10}, 0x40080) r10 = syz_pidfd_open(r3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) setns(r10, 0x24020000) r11 = syz_clone(0x16040000, 0x0, 0x0, 0x0, 0x0, 0x0) r12 = syz_pidfd_open(r11, 0x0) setns(r12, 0x10000000) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x20004000) 3m13.526497119s ago: executing program 1 (id=215): setfsuid(0xee00) setresuid(0x0, 0x0, 0x0) syz_open_dev$vbi(&(0x7f00000002c0), 0x3, 0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) socket$inet6(0xa, 0x80003, 0xff) syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x80) r0 = syz_io_uring_setup(0x231, &(0x7f0000000080)={0x0, 0x2804, 0x10100}, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xffffff56}) io_uring_enter(r0, 0x7a98, 0x0, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x80003, 0xff) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8000}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000640)=0xffffffff) r3 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0x1b) write$binfmt_misc(r3, &(0x7f0000000dc0), 0x386) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) setpriority(0x2, 0x0, 0x4) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) openat2$dir(0xffffffffffffff9c, &(0x7f0000000480)='./bus\x00', 0x0, 0x0) pselect6(0x40, &(0x7f0000000000)={0x6, 0x2, 0x8000000000000000, 0x0, 0x2, 0x0, 0x100, 0x10001003}, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0xffffffffffffffee) r5 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040)='c:::\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) gettid() syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) 2m58.177686166s ago: executing program 32 (id=215): setfsuid(0xee00) setresuid(0x0, 0x0, 0x0) syz_open_dev$vbi(&(0x7f00000002c0), 0x3, 0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) socket$inet6(0xa, 0x80003, 0xff) syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x80) r0 = syz_io_uring_setup(0x231, &(0x7f0000000080)={0x0, 0x2804, 0x10100}, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xffffff56}) io_uring_enter(r0, 0x7a98, 0x0, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x80003, 0xff) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8000}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000640)=0xffffffff) r3 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0x1b) write$binfmt_misc(r3, &(0x7f0000000dc0), 0x386) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) setpriority(0x2, 0x0, 0x4) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) openat2$dir(0xffffffffffffff9c, &(0x7f0000000480)='./bus\x00', 0x0, 0x0) pselect6(0x40, &(0x7f0000000000)={0x6, 0x2, 0x8000000000000000, 0x0, 0x2, 0x0, 0x100, 0x10001003}, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0xffffffffffffffee) r5 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040)='c:::\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) gettid() syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) 4.695071731s ago: executing program 2 (id=611): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_TIOCOUTQ(r0, 0x5411, 0x0) 4.483512445s ago: executing program 0 (id=614): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000f80)=ANY=[@ANYBLOB="0500000004000000080000000b"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000480)='kfree\x00', r1, 0x0, 0x7fffffffffffffff}, 0x18) syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000500)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x50, 0xb, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x7b, 0x2}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x8, 0x1, 0x3, 0xf2, {0x7, 0x25, 0x1, 0x80, 0xf8, 0xbea7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x95, 0x4, 0xaf, {0x7, 0x25, 0x1, 0x80, 0x0, 0x6}}}}}}}]}}, 0x0) 4.424147471s ago: executing program 2 (id=615): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000006000000080000000c"], 0x50) r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f0000000040), 0x10) listen(r0, 0x5) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000001850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2, 0x0, 0x2}, 0x18) r3 = socket(0x28, 0x5, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000340)={0x200000, 0x200000, 0x0, 0x0, 0x5989}) setrlimit(0x40000000000008, &(0x7f0000000000)) connect$vsock_stream(r3, &(0x7f0000000080), 0x10) sendmsg$nl_route_sched(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000024c0)=@newtaction={0x14, 0x30, 0x1, 0x70bd28, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4004885}, 0x40004) setsockopt$sock_linger(r3, 0x1, 0x3c, &(0x7f00000000c0)={0x1, 0x79e}, 0x8) sendmmsg(r3, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x1, 0x24008094) 4.170704923s ago: executing program 3 (id=617): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000009900000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) syz_emit_ethernet(0x3a, &(0x7f0000000180)={@multicast, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x300, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e22, 0x18, 0x0, @wg=@data}}}}}, 0x0) 4.131266787s ago: executing program 2 (id=618): r0 = mq_open(&(0x7f0000001880)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\x1c`\xbd\xe1e\x80\x7f\xd2&l0\xc1b\xac\x8b\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL%Jw\x99y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3\x05\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xc8\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xc7\xa7\x82\xb9V}`\xb7\xfc@\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5m\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v>\x9b\n0\xb2 h\xad5\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\'/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f9\xce\x1eYV\xa2\xc4\x03PV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x9b\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xd1\x06F\xef\xbd\xeb\xf0\'\f\f\x003\xecp\x18\x9e\x1d\xeaH\xdaQ%+\xf4\xae\xab0\b\x17W\xba\xaf4E\xe62\xefm\xdd+\xb2\x1b:\xc0cc\x97\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x97s\x03`\xba\xf1\xdb\x05\xe5C)\x8f\xbchyL1:\xc2\xea\x8a\xfc\tq\xfa\xec&\xc7\xde\xf4\xf2\xb9\xe1\xa1\x80)1\xbe@Bt\xb7\xce\xc9\xee\xa8v\t\xfa,\xa2\x9a\xa3\\\xfbM\xb5\xfd\xa9\xe3\x9f\xf7\x85\x87w\x1d]& 8\xb5\xba\xea\xad\xa9\xd4V\xf1\xe9\xaaT\xc8\xff\xaf\xef\x91\xca\x9c\x80\xbeYd]\xfb\x1a\x96?\xb6\xd7{X\xa1H\xeb\xce\xd7\xb7\xf7\x15\xd6\x88\x91\xef{\xf8K@\xb6ch\x1e\x16\xd5m@\xa8\x91\xa5\xc5@\xa7\x00\xab\xc5\xc8\xc8\x9c\xe3:\xac\x1eG\xa0e\'/\x15G\x8e\xe5\x16\xd5S ]\xf8\xa1\xa46\x9a\xf0d!\xc8\x81S\xbc\x18\xdf\xa0\xfek\xb0(\xf7\xba5\x8e\xe5A\xd5l\xfbp\xcb\xa8\xf0b\x91\xc4\xd3+)Sy\x81\xe3\r%C\x03enM\xf1\xdf\xe3b\xb7\x9b\f\x82\xb1z\xcf^\x06\xcd\xa2\x96\xe3\xd5\xbd@1\xbe\x02\xad\\\x89\xd0\xe0\xa8\x11\xb4B\\\x14\\\xed5\x9c\xd7n\x8d\xec\xb5\xcc\xf8q', 0x42, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x6, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) mq_unlink(&(0x7f0000000000)='eth0\x00') r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) close(r0) 3.854276989s ago: executing program 2 (id=620): ioctl$int_in(0xffffffffffffffff, 0x5452, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000100)=[{0x28, 0x8, 0x0, 0xfffff034}, {0x80000006, 0x0, 0x9, 0x3ff}]}, 0x10) r1 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x20008000) 3.854134498s ago: executing program 3 (id=621): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xb, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3.547779396s ago: executing program 2 (id=623): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=@framed={{0x18, 0x0, 0x0, 0x0, 0x33, 0x0, 0x0, 0x0, 0x5}}, 0x0, 0x10000, 0xc5, &(0x7f0000000740)=""/197, 0x40f00, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000280)={0x2, 0x0, 0x6e, 0x5}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000580)=[0x1]}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000900)={&(0x7f0000000000)='rpcgss_svc_authenticate\x00', r0, 0x0, 0xb}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e000000c500000001f0ffff95"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) socket$packet(0x11, 0xa, 0x300) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0x0, 0x0, 0x0, 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={0x0}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) symlink(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') readlink(&(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000001200)=""/4096, 0x1000) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x22, &(0x7f0000000080)=0x1, 0x4) shutdown(r3, 0x1) bind$inet6(r3, &(0x7f0000000240)={0xa, 0x4e20, 0x9, @ipv4={'\x00', '\xff\xff', @loopback}, 0x5}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000000140)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x2, @empty, 0xfffffffe}, 0x1c, &(0x7f0000000b40)=[{&(0x7f0000000280)="d5", 0x1}, {&(0x7f0000000a40)="fbd3c8412e7da3bf91d0a355257c55499520c4ee3830cbf2bec3b93f59024564afdc025b45dcaa3febcc4b65dcd7f58245801b92429c258f8aa2a008994d0e38dfd9e935ed8bedc343d72d7e621ee8b477c2431c7280b0aaa429004dc354d048ce6fe7c2a7ac654587950eb0a9079572b42357a0c42b6dc24c649f9652dbef80a5fac55c8bc2ef496e3357f5e551c0010c815c9a68af67027fda2cab1d8a2c505c22e4beda406096bfe7f3171082f6cf69aff1bc8fa90f6807804820556b9ffc56e5299379bdf7155821a1d25dc37c8c0e53b662e9c0ad9bd1cb840d8a287a28298a2dcf0c0114", 0xe7}, {0x0}], 0x3}}, {{0x0, 0x0, 0x0}}], 0x2, 0x20080058) 3.547603703s ago: executing program 3 (id=624): r0 = socket$kcm(0x29, 0x2, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r2}, 0x10) write$cgroup_pressure(r0, &(0x7f0000000140)={'full'}, 0xfffffdef) 2.644400738s ago: executing program 2 (id=626): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000000001000001"], 0x50) r1 = socket$inet6(0xa, 0x80000, 0x8) setsockopt$inet6_int(r1, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x7fff, 0x4) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x4, @loopback}, 0x1c) dup(r0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={0xffffffffffffffff, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0], 0x0, 0x4b, &(0x7f0000000340)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000380), &(0x7f00000003c0), 0x8, 0x60, 0x8, 0x8, &(0x7f0000000440)}}, 0x10) r3 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x48001) syz_usb_disconnect(r3) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[], 0x0) ioctl$EVIOCRMFF(r3, 0x4004550f, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x8, &(0x7f0000000240)=ANY=[@ANYRES32=r1, @ANYRES32, @ANYRES16=0x0, @ANYRESOCT=0x0], &(0x7f0000000780)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000280)='kfree\x00'}, 0x18) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) close(r5) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNATTACHFILTER(r5, 0x401054d5, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x6}]}) ioctl$TUNSETOFFLOAD(r6, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r5, 0x40107447, &(0x7f0000000180)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x18) r7 = socket$netlink(0x10, 0x3, 0x0) writev(r7, &(0x7f0000000400)=[{&(0x7f0000000000)="390000001000111867090707a640400f0021ff3f31000000170a001700000000040037000900030001372564b758b9a64411f6bb744dc48f57", 0x39}], 0x1) 2.644223645s ago: executing program 3 (id=627): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000007000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$kcm(0x29, 0x2, 0x0) sendmmsg$inet(r2, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000080)="da", 0x1}], 0x1, &(0x7f0000000040)=ANY=[], 0xd0}}, {{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000001c0)='/', 0x1}], 0x1}}], 0x2, 0x0) close(r2) 2.340207954s ago: executing program 4 (id=630): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) 2.339945108s ago: executing program 3 (id=631): r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x6, 0x0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) openat$uhid(0xffffffffffffff9c, &(0x7f0000002e40), 0x2, 0x0) io_setup(0x8, &(0x7f0000004200)=0x0) r3 = syz_open_procfs(0x0, 0x0) io_submit(r2, 0x1, &(0x7f0000004540)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x5, 0x0, r3, 0x0}]) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r1, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r5, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x81, 0x42}, 0x10) connect$llc(r5, &(0x7f0000000340)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random="48bd00"}, 0x10) syz_init_net_socket$llc(0x1a, 0x801, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_procs(r6, &(0x7f0000000840)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r7, &(0x7f0000000040), 0x12) r8 = fsmount(r0, 0x0, 0x0) r9 = openat$cgroup_subtree(r8, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r9, &(0x7f0000000300)=ANY=[@ANYBLOB='-cpu'], 0x5) write$cgroup_subtree(r9, &(0x7f00000001c0)=ANY=[@ANYBLOB='+cpu'], 0x5) 2.138636603s ago: executing program 4 (id=633): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000500)=ANY=[@ANYBLOB="18000000", @ANYRES16=r1, @ANYBLOB="01002cbd70007fdbdf2508"], 0x18}, 0x1, 0x0, 0x0, 0x4000084}, 0x840) 2.012450997s ago: executing program 3 (id=635): pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f0000001980)=ANY=[@ANYBLOB], &(0x7f00000000c0)='syzkaller\x00'}, 0x94) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000031f2cc54d80cc86e9f070bf94514d8b745b74bee77ad08bbed07b49626f992ddcb8d0bfa3b0a88db0da81fefd9376340b09672ab1e0000000000000000"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r3, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000380)=r2}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x3, 0x10, &(0x7f0000000000)=@framed={{0x18, 0x8}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r4}, {}, {}, {0x7, 0x0, 0xb, 0x7}}, @printk]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r5, &(0x7f0000000380)={0xa, 0x14e24, 0x0, @mcast1}, 0x1c) newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x100) write$P9_RGETATTR(r0, &(0x7f00000007c0)={0xa0, 0x19, 0x2, {0x1000, {0x20, 0x4, 0x4}, 0x8, 0x0, r6, 0xffffffffffffffff, 0x100000001, 0x7, 0x6, 0x8, 0x1, 0x7ff, 0x7f, 0x10, 0x2, 0x2, 0x7fffffffffffffff, 0x1, 0xf, 0x4}}, 0xa0) connect$inet6(r5, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) sendmmsg$inet6(r5, &(0x7f0000001840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) sendmmsg(r5, &(0x7f0000001400)=[{{0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f0000000740)="d7921b9e26b6b4ad941e8a2f2fb63db984d78962c4727739d3bbcc270eb4e65b3e7bbeb55b65397ebb74c76a31a03957a50a51ea5eb66f21cfaa01e9328cd01abb07a3c712", 0x45}], 0x1, &(0x7f0000000c00)=ANY=[], 0xe0}}], 0x400000000000184, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c000000100003040000000000dcdf2500005d9328f24fcd00e97774006c631fef7cf22d5b32182715ed4f8d0cf4202cf6417fbfa2054c9c5bfabc5d346e9711bb3bbee68967c2accfd711eea397e5a2b7f45a65940a4a5e29d75baf68cbe7eda608410ddcf86752a440e64eaff9572688f2eae3d9", @ANYRES32=0x0, @ANYBLOB="00080000000000001c0012800b0001006d616373656300000c000280050003000e000000"], 0x3c}, 0x1, 0x0, 0x0, 0x20000801}, 0x24008804) ioctl$KDFONTOP_SET(r1, 0x4b72, &(0x7f0000000040)={0x0, 0x0, 0x1f, 0x1a, 0xdc, &(0x7f0000001440)="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"}) r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000e80)={0xffffffffffffffff}, 0x2, 0x9}}, 0x20) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000080050005000200000011000300686173683a69702c706f7274"], 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$IPSET_CMD_ADD(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070084000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) sendmsg$IPSET_CMD_LIST(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x38, 0x7, 0x6, 0x101, 0x0, 0x0, {0x2, 0x0, 0x2}, [@IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x91}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FLAGS={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x2000c094) r12 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000c80)={'lo\x00'}) connect$qrtr(r0, &(0x7f0000000200)={0x2a, 0xffffffff, 0x2}, 0xc) write$RDMA_USER_CM_CMD_QUERY(r8, &(0x7f00000000c0)={0x13, 0x10, 0x8, {0x0, r9, 0x1}}, 0x18) socket$nl_netfilter(0x10, 0x3, 0xc) 1.99040729s ago: executing program 4 (id=636): r0 = socket$inet_udplite(0x2, 0x2, 0x88) sendmmsg$inet(r0, &(0x7f0000003500)=[{{&(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10, 0x0, 0x0, &(0x7f00000008c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x41}, @private=0xa010101}}}], 0x20}}, {{&(0x7f00000000c0)={0x2, 0x4e20, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000540)=[@ip_retopts={{0x18, 0x0, 0x7, {[@cipso={0x86, 0x8, 0x3, [{0x7, 0x2}]}]}}}], 0x18}}], 0x2, 0x44004) 1.840246321s ago: executing program 4 (id=637): syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x11, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010100, @broadcast}, {{0x4e24, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}, 0x0) 1.766729351s ago: executing program 4 (id=638): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000007000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000e00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kfree\x00', r1, 0x0, 0xffffffffffffffff}, 0x18) r2 = socket(0x10, 0x3, 0x6) r3 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x90, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x2, [], 0x0, [0x4, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x0, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}, @TCA_RATE={0x6}]}, 0x90}}, 0x20000000) 1.60839492s ago: executing program 4 (id=639): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) syz_clone(0x4021400, 0x0, 0x9000, 0x0, 0x0, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) r1 = getpid() process_vm_readv(r1, &(0x7f0000000080)=[{&(0x7f0000000300)=""/53, 0x35}, {&(0x7f0000006180)=""/152, 0x98}, {&(0x7f0000000380)=""/236, 0xec}], 0x3, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x5f}], 0x1, 0x0) 1.183718695s ago: executing program 0 (id=640): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000006c0)='kfree\x00', r1}, 0x18) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) io_setup(0x2, &(0x7f0000000380)=0x0) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) io_submit(r3, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x2002000000, 0x4, 0x0, 0x1, 0x0, r2, &(0x7f0000000140)="0200ffff0000", 0x6, 0x0, 0x0, 0x2}]) 1.136152836s ago: executing program 5 (id=641): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00', r0}, 0x10) r1 = add_key$user(&(0x7f0000000000), &(0x7f0000000a80)={'syz', 0x0}, &(0x7f0000000ac0)="cd", 0x1, 0xffffffffffffffff) r2 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f0000000200)='asymmetric\x00', &(0x7f00000002c0)=@chain={'key_or_keyring:', r1}) keyctl$KEYCTL_MOVE(0x1e, r1, 0xffffffffffffffff, r2, 0x0) 980.048561ms ago: executing program 0 (id=642): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x1, 0x7fff0000}]}) lgetxattr(0x0, 0x0, 0x0, 0x0) 928.192423ms ago: executing program 5 (id=643): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40800, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000000c0)='kfree\x00', r2, 0x0, 0xfffffffffffffffd}, 0x18) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000240)=ANY=[@ANYBLOB="e80000006c00010029bd7000fcdbdf2500000000", @ANYRES32, @ANYBLOB="001000008000000008000f002000000014003500726f7365300000000000000000000000a40034801400350070696d367265673000000020000000001400350076657468305f6d614176746170000000140035006d61637674617030020000000000000014003500677265300000000000000000000000001400350076657468305f746f5f626174616476001400350001657468315f6d6163767461700000001400350067726530000000000000000000000000140035006261746164765f736c6176655f31000008000f"], 0xe8}}, 0x0) close(r0) 761.091336ms ago: executing program 0 (id=644): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg(r1, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x80) socketpair$tipc(0x1e, 0x2, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{}, 0x0, 0x0}, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000000c0)='kfree\x00', 0xffffffffffffffff, 0x0, 0xfffffffffffffffd}, 0x18) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000780)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x20, 0x7ffc1ffb}]}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000700)=ANY=[@ANYBLOB, @ANYRES32=r2], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioperm(0x5, 0xa, 0x100000000000) eventfd2(0x5, 0x0) syz_open_dev$loop(&(0x7f0000000f80), 0x0, 0x101083) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r0, 0xffffffffffffffff}, &(0x7f00000008c0), &(0x7f0000000880)=r3}, 0x20) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000000)={r3, r4}, 0xc) 634.287377ms ago: executing program 5 (id=645): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0, 0x0, 0xfffffffffffffffd}, 0x18) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x4a20, 0x0, @mcast2, 0x81}, {0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xda}, r2, 0x8}}, 0x48) 484.188787ms ago: executing program 0 (id=646): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000100000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x6c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='kfree\x00', r1}, 0x10) syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x200400) r2 = socket$igmp(0x2, 0x3, 0x2) sendmmsg$inet(r2, &(0x7f00000003c0)=[{{&(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000100)=[@ip_retopts={{0x14, 0x0, 0x7, {[@noop]}}}], 0x18}}], 0x1, 0x44000840) 360.011888ms ago: executing program 5 (id=647): r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000940), 0x42200, 0x0) ioctl$PTP_SYS_OFFSET(r0, 0x43403d05, 0x0) 276.821556ms ago: executing program 0 (id=648): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200001400001cb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x18) socket$netlink(0x10, 0x3, 0x10) r2 = socket$kcm(0x10, 0x2, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x0) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) 167.989377ms ago: executing program 5 (id=649): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500001000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r3 = dup(r2) ioctl$PTP_EXTTS_REQUEST2(r3, 0x43403d05, 0x0) 0s ago: executing program 5 (id=650): socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00'}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='kmem_cache_free\x00', r1}, 0x10) clock_settime(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x7, 0x4, 0x80, 0x4, 0x28}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r5}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x18) r7 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r7, 0x6, 0x0, 0x0, 0x0) r8 = fsmount(r7, 0x0, 0x0) r9 = openat$cgroup_subtree(r8, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r9, &(0x7f0000000300)=ANY=[@ANYBLOB='-cpu'], 0x5) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.210' (ED25519) to the list of known hosts. [ 86.984584][ T5824] cgroup: Unknown subsys name 'net' [ 87.099267][ T5824] cgroup: Unknown subsys name 'cpuset' [ 87.110651][ T5824] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 88.807402][ T5824] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 91.559856][ T5845] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 91.567980][ T5845] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 91.576519][ T5845] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 91.584676][ T5845] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 91.592695][ T5845] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 91.601630][ T5845] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 91.609543][ T5845] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 91.632101][ T5851] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 91.633634][ T5845] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 91.650227][ T5853] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 91.659185][ T5851] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 91.668159][ T5851] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 91.675385][ T5856] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 91.684143][ T5851] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 91.684446][ T5854] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 91.693797][ T5851] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 91.699800][ T5849] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 91.706122][ T5851] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 91.720448][ T5849] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 91.733712][ T5849] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 91.742260][ T5849] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 91.749940][ T5849] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 91.766506][ T5854] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 91.784742][ T5849] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 91.791938][ T5854] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 92.431057][ T5844] chnl_net:caif_netlink_parms(): no params data found [ 92.577473][ T5839] chnl_net:caif_netlink_parms(): no params data found [ 92.617667][ T5836] chnl_net:caif_netlink_parms(): no params data found [ 92.674697][ T5841] chnl_net:caif_netlink_parms(): no params data found [ 92.793173][ T5835] chnl_net:caif_netlink_parms(): no params data found [ 92.874321][ T5844] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.882075][ T5844] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.890159][ T5844] bridge_slave_0: entered allmulticast mode [ 92.898668][ T5844] bridge_slave_0: entered promiscuous mode [ 92.923442][ T5836] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.930657][ T5836] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.938251][ T5836] bridge_slave_0: entered allmulticast mode [ 92.945882][ T5836] bridge_slave_0: entered promiscuous mode [ 92.961303][ T5844] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.968616][ T5844] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.976243][ T5844] bridge_slave_1: entered allmulticast mode [ 92.983786][ T5844] bridge_slave_1: entered promiscuous mode [ 93.020672][ T5836] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.027912][ T5836] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.035400][ T5836] bridge_slave_1: entered allmulticast mode [ 93.042833][ T5836] bridge_slave_1: entered promiscuous mode [ 93.158098][ T5839] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.165423][ T5839] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.172685][ T5839] bridge_slave_0: entered allmulticast mode [ 93.185372][ T5839] bridge_slave_0: entered promiscuous mode [ 93.197364][ T5836] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.212140][ T5836] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.240206][ T5844] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.258288][ T5839] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.266342][ T5839] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.274248][ T5839] bridge_slave_1: entered allmulticast mode [ 93.281598][ T5839] bridge_slave_1: entered promiscuous mode [ 93.306881][ T5841] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.314511][ T5841] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.321732][ T5841] bridge_slave_0: entered allmulticast mode [ 93.329584][ T5841] bridge_slave_0: entered promiscuous mode [ 93.339800][ T5844] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.421450][ T5841] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.428730][ T5841] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.436886][ T5841] bridge_slave_1: entered allmulticast mode [ 93.444381][ T5841] bridge_slave_1: entered promiscuous mode [ 93.470734][ T5844] team0: Port device team_slave_0 added [ 93.477501][ T5835] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.484848][ T5835] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.492160][ T5835] bridge_slave_0: entered allmulticast mode [ 93.499812][ T5835] bridge_slave_0: entered promiscuous mode [ 93.532167][ T5836] team0: Port device team_slave_0 added [ 93.572256][ T5844] team0: Port device team_slave_1 added [ 93.580928][ T5841] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.590677][ T5835] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.601481][ T5835] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.608940][ T5835] bridge_slave_1: entered allmulticast mode [ 93.617253][ T5835] bridge_slave_1: entered promiscuous mode [ 93.627499][ T5839] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.641162][ T5839] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.652706][ T5836] team0: Port device team_slave_1 added [ 93.689509][ T5841] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.794442][ T5840] Bluetooth: hci0: command tx timeout [ 93.794484][ T5849] Bluetooth: hci4: command tx timeout [ 93.805996][ T51] Bluetooth: hci3: command tx timeout [ 93.818858][ T5835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.843094][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.850305][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.876918][ T5849] Bluetooth: hci2: command tx timeout [ 93.877307][ T51] Bluetooth: hci1: command tx timeout [ 93.888999][ T5836] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.901565][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.909101][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.935401][ T5844] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.950818][ T5841] team0: Port device team_slave_0 added [ 93.960386][ T5841] team0: Port device team_slave_1 added [ 93.969718][ T5835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 94.001922][ T5839] team0: Port device team_slave_0 added [ 94.008835][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.016210][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.042608][ T5836] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.061738][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.068930][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.094969][ T5844] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.136683][ T5839] team0: Port device team_slave_1 added [ 94.146041][ T5835] team0: Port device team_slave_0 added [ 94.192176][ T5835] team0: Port device team_slave_1 added [ 94.235949][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.242949][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.269303][ T5841] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.331896][ T5836] hsr_slave_0: entered promiscuous mode [ 94.339439][ T5836] hsr_slave_1: entered promiscuous mode [ 94.347195][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.354647][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.381576][ T5841] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.394107][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.401098][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.427611][ T5839] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.453157][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.460236][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.487077][ T5835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.521019][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.528676][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.555430][ T5839] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.587232][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.594535][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.621754][ T5835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.686465][ T5844] hsr_slave_0: entered promiscuous mode [ 94.693436][ T5844] hsr_slave_1: entered promiscuous mode [ 94.699625][ T5844] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 94.707927][ T5844] Cannot create hsr debugfs directory [ 94.748044][ T5841] hsr_slave_0: entered promiscuous mode [ 94.758404][ T5841] hsr_slave_1: entered promiscuous mode [ 94.764933][ T5841] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 94.772539][ T5841] Cannot create hsr debugfs directory [ 94.999967][ T5839] hsr_slave_0: entered promiscuous mode [ 95.006671][ T5839] hsr_slave_1: entered promiscuous mode [ 95.012825][ T5839] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 95.020519][ T5839] Cannot create hsr debugfs directory [ 95.066380][ T5835] hsr_slave_0: entered promiscuous mode [ 95.072905][ T5835] hsr_slave_1: entered promiscuous mode [ 95.079507][ T5835] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 95.087468][ T5835] Cannot create hsr debugfs directory [ 95.541764][ T5836] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 95.579821][ T5836] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 95.591216][ T5836] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 95.611356][ T5836] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 95.685052][ T5844] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 95.720754][ T5844] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 95.742852][ T5844] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 95.756632][ T5844] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 95.821558][ T5841] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 95.845854][ T5841] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 95.859685][ T5841] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 95.874435][ T51] Bluetooth: hci3: command tx timeout [ 95.879941][ T51] Bluetooth: hci4: command tx timeout [ 95.884001][ T5849] Bluetooth: hci0: command tx timeout [ 95.909345][ T5841] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 95.953803][ T5840] Bluetooth: hci1: command tx timeout [ 95.959391][ T5840] Bluetooth: hci2: command tx timeout [ 95.981330][ T5839] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 95.996380][ T5839] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 96.024728][ T5839] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 96.055453][ T5839] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 96.128805][ T5836] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.183146][ T5836] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.208184][ T5835] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 96.239242][ T5835] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 96.253094][ T5835] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 96.281007][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.288380][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.300648][ T5835] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 96.329968][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.337216][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.392298][ T5844] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.472381][ T5844] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.504619][ T65] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.511952][ T65] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.555060][ T65] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.562310][ T65] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.578352][ T5841] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.652440][ T5841] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.682926][ T5839] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.746581][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.753813][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.810031][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.817305][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.886788][ T5839] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.918770][ T5835] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.953250][ T1116] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.960476][ T1116] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.011940][ T1116] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.019211][ T1116] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.039683][ T5835] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.101147][ T5836] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.129928][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.137199][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.157190][ T9] cfg80211: failed to load regulatory.db [ 97.199983][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.207448][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.300304][ T5844] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.437447][ T5836] veth0_vlan: entered promiscuous mode [ 97.492725][ T5844] veth0_vlan: entered promiscuous mode [ 97.527800][ T5836] veth1_vlan: entered promiscuous mode [ 97.549970][ T5844] veth1_vlan: entered promiscuous mode [ 97.681903][ T5836] veth0_macvtap: entered promiscuous mode [ 97.695867][ T5844] veth0_macvtap: entered promiscuous mode [ 97.730441][ T5836] veth1_macvtap: entered promiscuous mode [ 97.757707][ T5841] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.769362][ T5844] veth1_macvtap: entered promiscuous mode [ 97.857113][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.917809][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.961666][ T5849] Bluetooth: hci3: command tx timeout [ 97.961678][ T51] Bluetooth: hci0: command tx timeout [ 97.973509][ T5840] Bluetooth: hci4: command tx timeout [ 97.976436][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.019765][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.034863][ T5849] Bluetooth: hci1: command tx timeout [ 98.037418][ T5835] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.040417][ T5840] Bluetooth: hci2: command tx timeout [ 98.060998][ T5841] veth0_vlan: entered promiscuous mode [ 98.073025][ T5844] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.082401][ T5844] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.092418][ T5844] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.101519][ T5844] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.116299][ T5836] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.125658][ T5836] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.135167][ T5836] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.144680][ T5836] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.177021][ T5839] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.187377][ T5841] veth1_vlan: entered promiscuous mode [ 98.381724][ T5841] veth0_macvtap: entered promiscuous mode [ 98.428576][ T5841] veth1_macvtap: entered promiscuous mode [ 98.497352][ T5835] veth0_vlan: entered promiscuous mode [ 98.509932][ T1116] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.536014][ T65] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.544375][ T1116] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.561515][ T65] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.590132][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.608564][ T5835] veth1_vlan: entered promiscuous mode [ 98.681119][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.691996][ T65] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.708086][ T65] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.714186][ T5841] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.727689][ T5841] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.736851][ T5841] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.745824][ T5841] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.797196][ T65] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.815207][ T65] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.861503][ T5835] veth0_macvtap: entered promiscuous mode [ 98.898928][ T5844] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 98.937788][ T5835] veth1_macvtap: entered promiscuous mode [ 98.960676][ T5839] veth0_vlan: entered promiscuous mode [ 99.045969][ T1095] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.076359][ T1095] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.326655][ T5839] veth1_vlan: entered promiscuous mode [ 99.381138][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 100.040083][ T5840] Bluetooth: hci4: command tx timeout [ 100.045744][ T5849] Bluetooth: hci3: command tx timeout [ 100.051210][ T5849] Bluetooth: hci0: command tx timeout [ 100.114304][ T5840] Bluetooth: hci1: command tx timeout [ 100.119848][ T5849] Bluetooth: hci2: command tx timeout [ 100.189368][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 100.197828][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.225094][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.274860][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 100.319988][ T5835] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.355176][ T5835] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.370409][ T5835] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.385139][ T5835] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.395981][ T5971] ======================================================= [ 100.395981][ T5971] WARNING: The mand mount option has been deprecated and [ 100.395981][ T5971] and is ignored by this kernel. Remove the mand [ 100.395981][ T5971] option from the mount to silence this warning. [ 100.395981][ T5971] ======================================================= [ 100.482404][ T5971] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 100.492564][ T5974] overlayfs: conflicting lowerdir path [ 100.515989][ T5975] overlay: Unknown parameter 'appraise' [ 100.552741][ T5976] kAFS: No cell specified [ 100.630923][ T5839] veth0_macvtap: entered promiscuous mode [ 100.809611][ T5839] veth1_macvtap: entered promiscuous mode [ 100.903732][ T1095] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.909880][ T5974] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7'. [ 100.931230][ T1095] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.657803][ T5922] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 101.855214][ T5922] usb 4-1: Using ep0 maxpacket: 16 [ 101.886423][ T5922] usb 4-1: config 0 has too many interfaces: 249, using maximum allowed: 32 [ 101.906593][ T5922] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 249 [ 101.929554][ T5922] usb 4-1: config 0 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 101.940128][ T5922] usb 4-1: config 0 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 101.956151][ T5922] usb 4-1: config 0 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 101.978338][ T5922] usb 4-1: config 0 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0 [ 102.005668][ T5922] usb 4-1: config 0 interface 0 has no altsetting 0 [ 102.012403][ T5922] usb 4-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 102.029148][ T5922] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.054413][ T5922] usb 4-1: config 0 descriptor?? [ 102.104764][ T5922] ums-sddr09 4-1:0.0: USB Mass Storage device detected [ 102.227736][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.237176][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.251913][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 102.317989][ T5922] ums-sddr09 4-1:0.0: probe with driver ums-sddr09 failed with error -22 [ 102.326957][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 102.388095][ T5989] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 102.410402][ T5839] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.453407][ T5839] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.470131][ T5839] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.488597][ T5839] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.878989][ T5922] usb 4-1: USB disconnect, device number 2 [ 102.971661][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.015257][ T6001] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 103.647315][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.690020][ T6007] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.755711][ T6007] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.244404][ T92] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 105.553744][ T92] usb 1-1: Using ep0 maxpacket: 32 [ 105.614777][ T6026] netlink: 12 bytes leftover after parsing attributes in process `syz.2.19'. [ 105.722499][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 105.830147][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 105.839885][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 105.927012][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 105.927289][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 105.936045][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 106.096864][ T92] usb 1-1: too many configurations: 236, using maximum allowed: 8 [ 106.135586][ T92] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 106.163393][ T92] usb 1-1: can't read configurations, error -61 [ 106.403847][ T92] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 106.746092][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 106.844401][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 107.053509][ T0] NOHZ tick-stop error: local softirq work is pending, handler #142!!! [ 107.263336][ T92] usb 1-1: Using ep0 maxpacket: 32 [ 107.490150][ T92] usb 1-1: device descriptor read/all, error -71 [ 107.497872][ T92] usb usb1-port1: attempt power cycle [ 107.509762][ T6030] openvswitch: netlink: Missing valid actions attribute. [ 107.583635][ T6030] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 107.647291][ T6038] FAULT_INJECTION: forcing a failure. [ 107.647291][ T6038] name failslab, interval 1, probability 0, space 0, times 1 [ 107.679555][ T6030] Bluetooth: MGMT ver 1.23 [ 107.721768][ T6038] CPU: 0 UID: 0 PID: 6038 Comm: syz.4.22 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 107.721808][ T6038] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 107.721830][ T6038] Call Trace: [ 107.721843][ T6038] [ 107.721853][ T6038] dump_stack_lvl+0x189/0x250 [ 107.721892][ T6038] ? __pfx____ratelimit+0x10/0x10 [ 107.721917][ T6038] ? __pfx_dump_stack_lvl+0x10/0x10 [ 107.721941][ T6038] ? __pfx__printk+0x10/0x10 [ 107.721976][ T6038] ? __pfx___might_resched+0x10/0x10 [ 107.722005][ T6038] should_fail_ex+0x414/0x560 [ 107.722033][ T6038] should_failslab+0xa8/0x100 [ 107.722060][ T6038] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 107.722083][ T6038] ? __alloc_skb+0x112/0x2d0 [ 107.722119][ T6038] __alloc_skb+0x112/0x2d0 [ 107.722158][ T6038] netlink_sendmsg+0x5c6/0xb30 [ 107.722199][ T6038] ? __pfx_netlink_sendmsg+0x10/0x10 [ 107.722240][ T6038] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 107.722262][ T6038] ? __pfx_netlink_sendmsg+0x10/0x10 [ 107.722290][ T6038] __sock_sendmsg+0x21c/0x270 [ 107.722320][ T6038] ____sys_sendmsg+0x505/0x830 [ 107.722360][ T6038] ? __pfx_____sys_sendmsg+0x10/0x10 [ 107.722403][ T6038] ? import_iovec+0x74/0xa0 [ 107.722438][ T6038] ___sys_sendmsg+0x21f/0x2a0 [ 107.722474][ T6038] ? __pfx____sys_sendmsg+0x10/0x10 [ 107.722545][ T6038] ? __fget_files+0x2a/0x420 [ 107.722567][ T6038] ? __fget_files+0x3a0/0x420 [ 107.722600][ T6038] __x64_sys_sendmsg+0x19b/0x260 [ 107.722635][ T6038] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 107.722678][ T6038] ? __pfx_ksys_write+0x10/0x10 [ 107.722695][ T6038] ? rcu_is_watching+0x15/0xb0 [ 107.722723][ T6038] ? do_syscall_64+0xbe/0x3b0 [ 107.722752][ T6038] do_syscall_64+0xfa/0x3b0 [ 107.722782][ T6038] ? lockdep_hardirqs_on+0x9c/0x150 [ 107.722804][ T6038] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.722824][ T6038] ? clear_bhb_loop+0x60/0xb0 [ 107.722849][ T6038] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.722869][ T6038] RIP: 0033:0x7f6b9cd8ebe9 [ 107.722895][ T6038] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 107.722913][ T6038] RSP: 002b:00007f6b9dcb6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 107.722937][ T6038] RAX: ffffffffffffffda RBX: 00007f6b9cfb5fa0 RCX: 00007f6b9cd8ebe9 [ 107.722952][ T6038] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000004 [ 107.722965][ T6038] RBP: 00007f6b9dcb6090 R08: 0000000000000000 R09: 0000000000000000 [ 107.722977][ T6038] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 107.722989][ T6038] R13: 00007f6b9cfb6038 R14: 00007f6b9cfb5fa0 R15: 00007ffd64d71b08 [ 107.723023][ T6038] [ 108.111636][ T6048] netlink: 830 bytes leftover after parsing attributes in process `syz.2.25'. [ 108.191054][ T6050] program syz.3.26 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 108.683640][ T6054] overlayfs: failed to resolve './file0': -2 [ 108.837333][ T6052] netlink: 76 bytes leftover after parsing attributes in process `syz.2.27'. [ 109.040239][ T6062] netlink: 209592 bytes leftover after parsing attributes in process `syz.2.31'. [ 109.146662][ T6062] netlink: 20 bytes leftover after parsing attributes in process `syz.2.31'. [ 109.232034][ T6068] binder: 6066:6068 ioctl c0306201 200000000080 returned -14 [ 109.258275][ T6062] ip6gretap0: entered promiscuous mode [ 109.276025][ T6068] binder: 6066:6068 ioctl c048ae65 200000000840 returned -22 [ 109.301354][ T6062] ip6gretap0: left promiscuous mode [ 109.483438][ T5909] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 110.299082][ T6073] binder: 6066:6073 ioctl 4604 200000000680 returned -22 [ 110.379568][ T5825] usb 3-1: new low-speed USB device number 2 using dummy_hcd [ 110.615149][ T5909] usb 2-1: Using ep0 maxpacket: 16 [ 110.710010][ T5909] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 110.723281][ T5909] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 110.733305][ T5909] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 110.750082][ T5909] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.767466][ T5909] usb 2-1: config 0 descriptor?? [ 110.823394][ T5825] usb 3-1: device descriptor read/64, error -71 [ 110.900141][ T6050] overlayfs: missing 'lowerdir' [ 111.093374][ T5825] usb 3-1: new low-speed USB device number 3 using dummy_hcd [ 111.203427][ T92] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 111.248160][ T5909] savu 0003:1E7D:2D5A.0001: unknown main item tag 0x0 [ 111.266295][ T5825] usb 3-1: device descriptor read/64, error -71 [ 111.274042][ T6089] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 111.287450][ T6088] netlink: 830 bytes leftover after parsing attributes in process `syz.3.37'. [ 111.304990][ T5909] savu 0003:1E7D:2D5A.0001: unknown main item tag 0x0 [ 111.311960][ T5909] savu 0003:1E7D:2D5A.0001: unknown main item tag 0x0 [ 111.363321][ T92] usb 1-1: Using ep0 maxpacket: 16 [ 111.394006][ T5825] usb usb3-port1: attempt power cycle [ 111.994282][ T6089] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 112.038507][ T92] usb 1-1: config 1 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 51, changing to 9 [ 112.063513][ T5909] savu 0003:1E7D:2D5A.0001: unknown main item tag 0x0 [ 112.094418][ T92] usb 1-1: config 1 interface 0 altsetting 8 bulk endpoint 0x82 has invalid maxpacket 8 [ 112.114091][ T5909] savu 0003:1E7D:2D5A.0001: unknown main item tag 0x0 [ 112.131673][ T92] usb 1-1: config 1 interface 0 has no altsetting 0 [ 112.158573][ T92] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 112.168740][ T5909] savu 0003:1E7D:2D5A.0001: hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.1-1/input0 [ 112.191837][ T92] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.414654][ T92] usb 1-1: Product: 쨕甠覂⠆飡 [ 112.414680][ T92] usb 1-1: Manufacturer: 峗╁͎樽〛禩寴닖댜﹧꺄떺迻관깍ႚ砛衣᷵ [ 112.414702][ T92] usb 1-1: SerialNumber: syz [ 112.452893][ T6082] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 112.462575][ T5909] usb 2-1: USB disconnect, device number 2 [ 113.365480][ T6108] misc userio: No port type given on /dev/userio [ 113.840257][ T6111] overlayfs: failed to resolve './file0': -2 [ 113.932333][ T92] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -71 [ 114.192467][ T5972] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 114.443964][ T92] usb 1-1: USB disconnect, device number 5 [ 114.622404][ T5972] usb 3-1: Using ep0 maxpacket: 16 [ 114.622995][ T6099] fido_id[6099]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 114.715436][ T5972] usb 3-1: config 0 has an invalid interface number: 105 but max is 0 [ 114.723957][ T5972] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 114.770624][ T5972] usb 3-1: config 0 has no interface number 0 [ 114.792949][ T5972] usb 3-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28 [ 114.833290][ T5972] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.895626][ T5972] usb 3-1: Product: syz [ 114.920103][ T5972] usb 3-1: Manufacturer: syz [ 114.927042][ T5972] usb 3-1: SerialNumber: syz [ 114.992299][ T5972] usb 3-1: config 0 descriptor?? [ 115.231605][ T5972] usb 3-1: USB disconnect, device number 5 [ 116.660709][ T6136] can0: slcan on ttyS3. [ 117.600514][ T6141] netlink: 830 bytes leftover after parsing attributes in process `syz.2.50'. [ 117.664225][ T6136] can0 (unregistered): slcan off ttyS3. [ 117.849461][ T6151] bridge0: entered promiscuous mode [ 117.878841][ T6151] bridge0: port 3(macsec1) entered blocking state [ 117.943679][ T6151] bridge0: port 3(macsec1) entered disabled state [ 117.950432][ T6151] macsec1: entered allmulticast mode [ 117.955932][ T6151] bridge0: entered allmulticast mode [ 118.076259][ T6151] macsec1: left allmulticast mode [ 118.092766][ T6151] bridge0: left allmulticast mode [ 118.380252][ T6151] bridge0: left promiscuous mode [ 118.827115][ T6164] misc userio: No port type given on /dev/userio [ 121.607264][ T6184] overlayfs: failed to resolve './file0': -2 [ 122.540370][ T6201] netlink: 830 bytes leftover after parsing attributes in process `syz.0.64'. [ 122.813341][ T92] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 122.834470][ T5936] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 123.375753][ T92] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 123.409827][ T92] usb 5-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 123.486598][ T5936] usb 4-1: Using ep0 maxpacket: 16 [ 123.487764][ T92] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.495581][ T5936] usb 4-1: config 0 has an invalid interface number: 105 but max is 0 [ 123.508485][ T5936] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 123.518826][ T5936] usb 4-1: config 0 has no interface number 0 [ 123.578078][ T5936] usb 4-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28 [ 123.585189][ T92] usb 5-1: config 0 descriptor?? [ 123.643467][ T5936] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.651544][ T5936] usb 4-1: Product: syz [ 123.676459][ T5936] usb 4-1: Manufacturer: syz [ 123.681145][ T5936] usb 4-1: SerialNumber: syz [ 123.750977][ T5936] usb 4-1: config 0 descriptor?? [ 123.784603][ T5936] usb 4-1: can't set config #0, error -71 [ 123.863506][ T5936] usb 4-1: USB disconnect, device number 3 [ 124.245006][ T92] lenovo 0003:17EF:6047.0002: hidraw0: USB HID v0.00 Device [HID 17ef:6047] on usb-dummy_hcd.4-1/input0 [ 125.739531][ T30] audit: type=1326 audit(1755616992.083:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6199 comm="syz.4.65" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6b9cd8ebe9 code=0x0 [ 125.779116][ T5936] libceph: connect (1)[c::]:6789 error -101 [ 125.813966][ T5936] libceph: mon0 (1)[c::]:6789 connect error [ 125.933565][ T6217] ceph: No mds server is up or the cluster is laggy [ 127.371392][ T6246] netlink: 1760 bytes leftover after parsing attributes in process `syz.0.74'. [ 127.381809][ T92] lenovo 0003:17EF:6047.0002: Sensitivity setting failed: -71 [ 127.415272][ T92] usb 5-1: USB disconnect, device number 2 [ 127.473277][ T5936] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 128.171047][ T5936] usb 3-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 128.213461][ T5936] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.253401][ T5936] usb 3-1: Product: syz [ 128.257740][ T5936] usb 3-1: Manufacturer: syz [ 128.262374][ T5936] usb 3-1: SerialNumber: syz [ 128.795777][ T5936] usb 3-1: config 0 descriptor?? [ 128.943904][ T6261] netlink: 830 bytes leftover after parsing attributes in process `syz.4.77'. [ 129.405846][ T6240] tipc: Started in network mode [ 129.410854][ T6240] tipc: Node identity 52ce7c84f6b1, cluster identity 4711 [ 129.453622][ T6240] tipc: Enabled bearer , priority 0 [ 129.468339][ T5936] usb 3-1: USB disconnect, device number 6 [ 129.711210][ T6266] syzkaller0: entered promiscuous mode [ 129.804580][ T6267] overlayfs: failed to resolve './file0': -2 [ 129.923584][ T6266] syzkaller0: entered allmulticast mode [ 130.142544][ T6237] tipc: Resetting bearer [ 130.146434][ T6076] udevd[6076]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 130.337290][ T6235] tipc: Resetting bearer [ 130.363328][ T5909] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 130.514849][ T6235] tipc: Disabling bearer [ 130.989660][ T927] tipc: Node number set to 2759818372 [ 131.263432][ T5909] usb 2-1: Using ep0 maxpacket: 16 [ 131.297517][ T5909] usb 2-1: config 0 has an invalid interface number: 105 but max is 0 [ 131.318749][ T6281] netlink: 'syz.3.84': attribute type 3 has an invalid length. [ 131.329180][ T5909] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 131.366985][ T5909] usb 2-1: config 0 has no interface number 0 [ 131.390737][ T5909] usb 2-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28 [ 131.420631][ T5909] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.447211][ T5909] usb 2-1: Product: syz [ 131.604050][ T5909] usb 2-1: Manufacturer: syz [ 131.609251][ T5909] usb 2-1: SerialNumber: syz [ 131.616951][ T5909] usb 2-1: config 0 descriptor?? [ 131.745346][ T6290] [U] [ 132.438455][ T92] usb 2-1: USB disconnect, device number 3 [ 133.835036][ T6307] netlink: 830 bytes leftover after parsing attributes in process `syz.2.92'. [ 133.954185][ T6309] netlink: 'syz.3.93': attribute type 10 has an invalid length. [ 134.003967][ T5936] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 134.205067][ T5936] usb 2-1: device descriptor read/64, error -71 [ 134.206431][ T6309] veth0_vlan: left promiscuous mode [ 134.266772][ T6309] veth0_vlan: entered promiscuous mode [ 134.312899][ T6309] team0: Device veth0_vlan failed to register rx_handler [ 134.479146][ T6309] syz.3.93 (6309) used greatest stack depth: 18920 bytes left [ 134.493409][ T5936] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 134.576223][ T6311] netlink: 12 bytes leftover after parsing attributes in process `syz.2.94'. [ 134.626313][ T6311] netlink: 20 bytes leftover after parsing attributes in process `syz.2.94'. [ 134.683803][ T5936] usb 2-1: device descriptor read/64, error -71 [ 134.833703][ T5936] usb usb2-port1: attempt power cycle [ 135.022493][ T6318] overlayfs: missing 'workdir' [ 135.283276][ T5936] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 135.329699][ T5936] usb 2-1: device descriptor read/8, error -71 [ 135.504087][ T6326] netlink: 'syz.3.98': attribute type 3 has an invalid length. [ 135.593386][ T5936] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 136.389020][ T5936] usb 2-1: device descriptor read/8, error -71 [ 136.617314][ T5936] usb usb2-port1: unable to enumerate USB device [ 138.274259][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.280781][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 138.340847][ T6342] overlayfs: failed to resolve './file0': -2 [ 138.614319][ T6348] Invalid logical block size (535) [ 139.166412][ T5909] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 139.491142][ T5909] usb 5-1: Using ep0 maxpacket: 16 [ 140.416841][ T10] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 140.763995][ T5909] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 140.771820][ T5909] usb 5-1: can't read configurations, error -71 [ 141.045050][ T92] libceph: connect (1)[c::]:6789 error -101 [ 141.884336][ T6369] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 142.003693][ T92] libceph: mon0 (1)[c::]:6789 connect error [ 142.179574][ T92] libceph: connect (1)[c::]:6789 error -101 [ 142.205464][ T92] libceph: mon0 (1)[c::]:6789 connect error [ 142.237740][ T6374] netlink: 'syz.3.109': attribute type 3 has an invalid length. [ 142.273654][ T5936] IPVS: starting estimator thread 0... [ 142.346115][ T6363] ceph: No mds server is up or the cluster is laggy [ 142.373493][ T6380] IPVS: using max 27 ests per chain, 64800 per kthread [ 142.386304][ T6384] xt_TCPMSS: Only works on TCP SYN packets [ 142.392870][ T6384] netlink: 32 bytes leftover after parsing attributes in process `syz.4.108'. [ 142.486893][ T92] libceph: connect (1)[c::]:6789 error -101 [ 142.501450][ T92] libceph: mon0 (1)[c::]:6789 connect error [ 142.908481][ T6391] netlink: 'syz.2.114': attribute type 10 has an invalid length. [ 143.022575][ T6391] veth0_vlan: left promiscuous mode [ 143.084641][ T6391] veth0_vlan: entered promiscuous mode [ 143.096420][ T6391] team0: Device veth0_vlan failed to register rx_handler [ 143.630300][ T6403] netlink: 52 bytes leftover after parsing attributes in process `syz.0.116'. [ 144.578523][ T6407] netdevsim netdevsim1: Direct firmware load for .. failed with error -2 [ 144.628460][ T6407] netdevsim netdevsim1: Falling back to sysfs fallback for: .. [ 145.915038][ T6415] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 146.103408][ T6423] netlink: 'syz.1.122': attribute type 3 has an invalid length. [ 146.203639][ T6421] syz.0.121 uses obsolete (PF_INET,SOCK_PACKET) [ 148.332408][ T30] audit: type=1326 audit(1755617014.683:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6443 comm="syz.2.128" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fda6ed8ebe9 code=0x0 [ 152.476258][ T6473] netlink: 'syz.1.134': attribute type 3 has an invalid length. [ 152.834376][ T5972] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 152.842141][ T5825] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 152.923714][ T5923] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 153.353306][ T5972] usb 4-1: device descriptor read/64, error -71 [ 153.443420][ T9] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 153.451138][ T5825] usb 1-1: Using ep0 maxpacket: 32 [ 153.459758][ T5825] usb 1-1: config 0 interface 0 altsetting 181 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 153.463260][ T5923] usb 3-1: Using ep0 maxpacket: 32 [ 153.476763][ T5825] usb 1-1: config 0 interface 0 altsetting 181 endpoint 0x3 has invalid wMaxPacketSize 0 [ 153.488126][ T5825] usb 1-1: config 0 interface 0 altsetting 181 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 153.500330][ T5923] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice=67.fe [ 153.501644][ T5825] usb 1-1: config 0 interface 0 has no altsetting 0 [ 153.513288][ T5923] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.530663][ T5923] usb 3-1: Product: syz [ 153.532251][ T5825] usb 1-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=25.11 [ 153.535806][ T5923] usb 3-1: Manufacturer: syz [ 153.554334][ T5825] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.554343][ T5923] usb 3-1: SerialNumber: syz [ 153.554364][ T5825] usb 1-1: Product: syz [ 153.590840][ T5923] usb 3-1: config 0 descriptor?? [ 153.603460][ T5972] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 153.623375][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 153.632937][ T5825] usb 1-1: Manufacturer: syz [ 153.648383][ T9] usb 2-1: config 0 has an invalid interface number: 219 but max is 0 [ 153.667927][ T5825] usb 1-1: SerialNumber: syz [ 153.677312][ T9] usb 2-1: config 0 has no interface number 0 [ 153.688060][ T9] usb 2-1: config 0 interface 219 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 153.700683][ T5825] usb 1-1: config 0 descriptor?? [ 153.729201][ T5825] usb 1-1: no audio or video endpoints found [ 153.753714][ T9] usb 2-1: config 0 interface 219 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 153.779171][ T9] usb 2-1: config 0 interface 219 altsetting 0 endpoint 0x8B has invalid maxpacket 28739, setting to 1024 [ 153.840759][ T5923] snd-usb-6fire 3-1:0.0: unknown device firmware state received from device: [ 153.866216][ T5923] eb 00 00 00 00 00 00 00 [ 153.870956][ T5923] snd-usb-6fire 3-1:0.0: probe with driver snd-usb-6fire failed with error -5 [ 154.042185][ T9] usb 2-1: config 0 interface 219 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 154.052522][ T9] usb 2-1: config 0 interface 219 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 154.088965][ T5825] usb 3-1: USB disconnect, device number 8 [ 155.084933][ T9] usb 2-1: New USB device found, idVendor=108c, idProduct=0169, bcdDevice=75.b9 [ 155.103224][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.111327][ T9] usb 2-1: Product: syz [ 155.286542][ T6495] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 155.497336][ T9] usb 2-1: Manufacturer: syz [ 155.560325][ T9] usb 2-1: SerialNumber: syz [ 155.606048][ T9] usb 2-1: config 0 descriptor?? [ 155.630128][ T6482] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 155.892882][ T6508] netlink: 316 bytes leftover after parsing attributes in process `syz.3.141'. [ 157.147632][ T9] etas_es58x 2-1:0.219: Starting syz syz (Serial Number syz) [ 157.362891][ T9] usb 2-1: USB disconnect, device number 8 [ 157.398756][ T927] usb 1-1: USB disconnect, device number 6 [ 157.491008][ T6517] xt_policy: neither incoming nor outgoing policy selected [ 158.370571][ T30] audit: type=1326 audit(1755617024.703:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6511 comm="syz.2.143" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fda6ed8ebe9 code=0x0 [ 159.053556][ T6529] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 159.095906][ T6530] netdevsim netdevsim4: Direct firmware load for .. failed with error -2 [ 159.123417][ T6530] netdevsim netdevsim4: Falling back to sysfs fallback for: .. [ 159.165269][ T6531] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1, syncid = 0, id = 0 [ 160.788339][ T6551] binder: 6550:6551 ioctl c0306201 200000000080 returned -14 [ 160.883544][ T6553] binder: 6552:6553 ioctl c0306201 200000000080 returned -14 [ 160.893221][ T6554] binder: 6550:6554 ioctl c048ae65 200000000840 returned -22 [ 160.938904][ T6553] FAULT_INJECTION: forcing a failure. [ 160.938904][ T6553] name failslab, interval 1, probability 0, space 0, times 0 [ 161.000222][ T6553] CPU: 1 UID: 0 PID: 6553 Comm: syz.4.154 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 161.000253][ T6553] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 161.000267][ T6553] Call Trace: [ 161.000276][ T6553] [ 161.000286][ T6553] dump_stack_lvl+0x189/0x250 [ 161.000317][ T6553] ? __pfx____ratelimit+0x10/0x10 [ 161.000341][ T6553] ? __pfx_dump_stack_lvl+0x10/0x10 [ 161.000365][ T6553] ? __pfx__printk+0x10/0x10 [ 161.000400][ T6553] ? __pfx___might_resched+0x10/0x10 [ 161.000423][ T6553] ? fs_reclaim_acquire+0x7d/0x100 [ 161.000454][ T6553] should_fail_ex+0x414/0x560 [ 161.000483][ T6553] should_failslab+0xa8/0x100 [ 161.000509][ T6553] __kmalloc_noprof+0xcb/0x4f0 [ 161.000528][ T6553] ? kfree+0x4d/0x440 [ 161.000558][ T6553] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 161.000593][ T6553] tomoyo_realpath_from_path+0xe3/0x5d0 [ 161.000624][ T6553] ? tomoyo_domain+0xda/0x130 [ 161.000659][ T6553] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 161.000683][ T6553] tomoyo_path_number_perm+0x1e8/0x5a0 [ 161.000710][ T6553] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 161.000753][ T6553] ? __lock_acquire+0xab9/0xd20 [ 161.000797][ T6553] ? __fget_files+0x2a/0x420 [ 161.000825][ T6553] ? __fget_files+0x2a/0x420 [ 161.000848][ T6553] ? __fget_files+0x3a0/0x420 [ 161.000870][ T6553] ? __fget_files+0x2a/0x420 [ 161.000899][ T6553] security_file_ioctl+0xcb/0x2d0 [ 161.000926][ T6553] __se_sys_ioctl+0x47/0x170 [ 161.000959][ T6553] do_syscall_64+0xfa/0x3b0 [ 161.000990][ T6553] ? lockdep_hardirqs_on+0x9c/0x150 [ 161.001013][ T6553] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 161.001035][ T6553] ? clear_bhb_loop+0x60/0xb0 [ 161.001062][ T6553] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 161.001086][ T6553] RIP: 0033:0x7f6b9cd8ebe9 [ 161.001105][ T6553] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 161.001128][ T6553] RSP: 002b:00007f6b9dcb6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 161.001151][ T6553] RAX: ffffffffffffffda RBX: 00007f6b9cfb5fa0 RCX: 00007f6b9cd8ebe9 [ 161.001167][ T6553] RDX: 0000200000000180 RSI: 00000000c0306201 RDI: 0000000000000003 [ 161.001180][ T6553] RBP: 00007f6b9dcb6090 R08: 0000000000000000 R09: 0000000000000000 [ 161.001194][ T6553] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 161.001206][ T6553] R13: 00007f6b9cfb6038 R14: 00007f6b9cfb5fa0 R15: 00007ffd64d71b08 [ 161.001240][ T6553] [ 161.245075][ C1] vkms_vblank_simulate: vblank timer overrun [ 161.298809][ T6554] binder: 6550:6554 ioctl 4604 200000000680 returned -22 [ 161.383620][ T5923] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 161.497978][ T6553] ERROR: Out of memory at tomoyo_realpath_from_path. [ 162.914375][ T6574] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 163.285798][ T30] audit: type=1326 audit(1755617029.633:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6562 comm="syz.3.159" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fad0ff8ebe9 code=0x0 [ 164.314665][ T6592] FAULT_INJECTION: forcing a failure. [ 164.314665][ T6592] name failslab, interval 1, probability 0, space 0, times 0 [ 164.327672][ T6592] CPU: 0 UID: 0 PID: 6592 Comm: syz.2.164 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 164.327701][ T6592] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 164.327716][ T6592] Call Trace: [ 164.327722][ T6592] [ 164.327728][ T6592] dump_stack_lvl+0x189/0x250 [ 164.327750][ T6592] ? lockdep_hardirqs_on+0x9c/0x150 [ 164.327768][ T6592] ? __pfx_dump_stack_lvl+0x10/0x10 [ 164.327785][ T6592] ? __pfx__printk+0x10/0x10 [ 164.327815][ T6592] should_fail_ex+0x414/0x560 [ 164.327834][ T6592] should_failslab+0xa8/0x100 [ 164.327853][ T6592] __kmalloc_cache_node_noprof+0x73/0x3d0 [ 164.327869][ T6592] ? __get_vm_area_node+0x13f/0x300 [ 164.327888][ T6592] __get_vm_area_node+0x13f/0x300 [ 164.327907][ T6592] __vmalloc_node_range_noprof+0x301/0x12f0 [ 164.327931][ T6592] ? bpf_prog_alloc_no_stats+0x4a/0x4b0 [ 164.327961][ T6592] ? __pfx___schedule+0x10/0x10 [ 164.327975][ T6592] ? irqentry_exit+0x74/0x90 [ 164.327995][ T6592] ? lockdep_hardirqs_on+0x9c/0x150 [ 164.328021][ T6592] ? rcu_is_watching+0x15/0xb0 [ 164.328038][ T6592] ? trace_irq_disable+0x37/0x110 [ 164.328061][ T6592] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 164.328087][ T6592] ? bpf_prog_alloc_no_stats+0x4a/0x4b0 [ 164.328109][ T6592] __vmalloc_noprof+0xb1/0xf0 [ 164.328126][ T6592] ? bpf_prog_alloc_no_stats+0x4a/0x4b0 [ 164.328152][ T6592] bpf_prog_alloc_no_stats+0x4a/0x4b0 [ 164.328179][ T6592] bpf_prog_alloc+0x3c/0x1a0 [ 164.328207][ T6592] bpf_prog_load+0x735/0x1930 [ 164.328240][ T6592] ? __pfx_bpf_prog_load+0x10/0x10 [ 164.328284][ T6592] __sys_bpf+0x5f1/0x860 [ 164.328308][ T6592] ? __pfx___sys_bpf+0x10/0x10 [ 164.328342][ T6592] ? irqentry_exit+0x74/0x90 [ 164.328365][ T6592] __x64_sys_bpf+0x7c/0x90 [ 164.328386][ T6592] do_syscall_64+0xfa/0x3b0 [ 164.328404][ T6592] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 164.328419][ T6592] ? asm_sysvec_call_function_single+0x1a/0x20 [ 164.328434][ T6592] ? clear_bhb_loop+0x60/0xb0 [ 164.328452][ T6592] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 164.328467][ T6592] RIP: 0033:0x7fda6ed8ebe9 [ 164.328480][ T6592] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 164.328493][ T6592] RSP: 002b:00007fda6fcad038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 164.328509][ T6592] RAX: ffffffffffffffda RBX: 00007fda6efb6090 RCX: 00007fda6ed8ebe9 [ 164.328520][ T6592] RDX: 0000000000000094 RSI: 00002000000000c0 RDI: 0000000000000005 [ 164.328530][ T6592] RBP: 00007fda6fcad090 R08: 0000000000000000 R09: 0000000000000000 [ 164.328539][ T6592] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 164.328548][ T6592] R13: 00007fda6efb6128 R14: 00007fda6efb6090 R15: 00007ffcc6cbccd8 [ 164.328571][ T6592] [ 164.328772][ T6592] syz.2.164: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 164.622374][ T6592] CPU: 0 UID: 0 PID: 6592 Comm: syz.2.164 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 164.622402][ T6592] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 164.622414][ T6592] Call Trace: [ 164.622424][ T6592] [ 164.622431][ T6592] dump_stack_lvl+0x189/0x250 [ 164.622453][ T6592] ? __pfx_rcu_read_unlock_special+0x10/0x10 [ 164.622478][ T6592] ? __pfx_dump_stack_lvl+0x10/0x10 [ 164.622495][ T6592] ? __pfx__printk+0x10/0x10 [ 164.622515][ T6592] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 164.622535][ T6592] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 164.622559][ T6592] warn_alloc+0x214/0x310 [ 164.622582][ T6592] ? __pfx_warn_alloc+0x10/0x10 [ 164.622601][ T6592] ? __get_vm_area_node+0x13f/0x300 [ 164.622620][ T6592] ? __get_vm_area_node+0x2b5/0x300 [ 164.622641][ T6592] __vmalloc_node_range_noprof+0x326/0x12f0 [ 164.622659][ T6592] ? __pfx___schedule+0x10/0x10 [ 164.622716][ T6592] ? irqentry_exit+0x74/0x90 [ 164.622732][ T6592] ? lockdep_hardirqs_on+0x9c/0x150 [ 164.622758][ T6592] ? rcu_is_watching+0x15/0xb0 [ 164.622774][ T6592] ? trace_irq_disable+0x37/0x110 [ 164.622798][ T6592] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 164.622824][ T6592] ? bpf_prog_alloc_no_stats+0x4a/0x4b0 [ 164.622847][ T6592] __vmalloc_noprof+0xb1/0xf0 [ 164.622864][ T6592] ? bpf_prog_alloc_no_stats+0x4a/0x4b0 [ 164.622890][ T6592] bpf_prog_alloc_no_stats+0x4a/0x4b0 [ 164.622918][ T6592] bpf_prog_alloc+0x3c/0x1a0 [ 164.622945][ T6592] bpf_prog_load+0x735/0x1930 [ 164.622977][ T6592] ? __pfx_bpf_prog_load+0x10/0x10 [ 164.623022][ T6592] __sys_bpf+0x5f1/0x860 [ 164.623046][ T6592] ? __pfx___sys_bpf+0x10/0x10 [ 164.623080][ T6592] ? irqentry_exit+0x74/0x90 [ 164.623103][ T6592] __x64_sys_bpf+0x7c/0x90 [ 164.623124][ T6592] do_syscall_64+0xfa/0x3b0 [ 164.623142][ T6592] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 164.623166][ T6592] ? asm_sysvec_call_function_single+0x1a/0x20 [ 164.623186][ T6592] ? clear_bhb_loop+0x60/0xb0 [ 164.623212][ T6592] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 164.623231][ T6592] RIP: 0033:0x7fda6ed8ebe9 [ 164.623250][ T6592] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 164.623267][ T6592] RSP: 002b:00007fda6fcad038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 164.623283][ T6592] RAX: ffffffffffffffda RBX: 00007fda6efb6090 RCX: 00007fda6ed8ebe9 [ 164.623294][ T6592] RDX: 0000000000000094 RSI: 00002000000000c0 RDI: 0000000000000005 [ 164.623304][ T6592] RBP: 00007fda6fcad090 R08: 0000000000000000 R09: 0000000000000000 [ 164.623313][ T6592] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 164.623322][ T6592] R13: 00007fda6efb6128 R14: 00007fda6efb6090 R15: 00007ffcc6cbccd8 [ 164.623345][ T6592] [ 164.623579][ T6592] Mem-Info: [ 164.623654][ T6592] active_anon:254 inactive_anon:7584 isolated_anon:0 [ 164.623654][ T6592] active_file:5320 inactive_file:38065 isolated_file:0 [ 164.623654][ T6592] unevictable:768 dirty:52 writeback:0 [ 164.623654][ T6592] slab_reclaimable:9984 slab_unreclaimable:97174 [ 164.623654][ T6592] mapped:33145 shmem:3462 pagetables:1186 [ 164.623654][ T6592] sec_pagetables:0 bounce:0 [ 164.623654][ T6592] kernel_misc_reclaimable:0 [ 164.623654][ T6592] free:1328511 free_pcp:15327 free_cma:0 [ 164.623738][ T6592] Node 0 active_anon:1016kB inactive_anon:30336kB active_file:21080kB inactive_file:152260kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:132580kB dirty:208kB writeback:0kB shmem:12312kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12444kB pagetables:4608kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 164.623822][ T6592] Node 1 active_anon:0kB inactive_anon:0kB active_file:200kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:136kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 164.623904][ T6592] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 164.624011][ T6592] lowmem_reserve[]: 0 2500 2502 2502 2502 [ 164.624275][ T6592] Node 0 DMA32 free:1404140kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:1012kB inactive_anon:30292kB active_file:19308kB inactive_file:152192kB unevictable:1536kB writepending:208kB present:3129332kB managed:2560996kB mlocked:0kB bounce:0kB free_pcp:36464kB local_pcp:16020kB free_cma:0kB [ 164.624399][ T6592] lowmem_reserve[]: 0 0 1 1 1 [ 164.624661][ T6592] Node 0 Normal free:8kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:4kB inactive_anon:44kB active_file:1772kB inactive_file:68kB unevictable:0kB writepending:0kB present:1048580kB managed:1904kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 164.624775][ T6592] lowmem_reserve[]: 0 0 0 0 0 [ 164.625038][ T6592] Node 1 Normal free:3894536kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:200kB inactive_file:0kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:24836kB local_pcp:9644kB free_cma:0kB [ 164.625154][ T6592] lowmem_reserve[]: 0 0 0 0 0 [ 164.625415][ T6592] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 164.626406][ T6592] Node 0 DMA32: 2015*4kB (UM) 1132*8kB (UME) 487*16kB (UM) 268*32kB (UME) 135*64kB (UME) 55*128kB (UME) 35*256kB (UM) 21*512kB (UME) 10*1024kB (UM) 7*2048kB (UME) 320*4096kB (UM) = 1404172kB [ 164.627629][ T6592] Node 0 Normal: 0*4kB 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 164.628414][ T6592] Node 1 Normal: 200*4kB (U) 67*8kB (UME) 57*16kB (UME) 72*32kB (UME) 23*64kB (UME) 7*128kB (UME) 6*256kB (UME) 6*512kB (UME) 2*1024kB (UM) 1*2048kB (E) 947*4096kB (M) = 3894536kB [ 164.629927][ T6592] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 164.629970][ T6592] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 164.630011][ T6592] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 164.630052][ T6592] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 164.630094][ T6592] 46843 total pagecache pages [ 164.630135][ T6592] 0 pages in swap cache [ 164.630168][ T6592] Free swap = 124996kB [ 164.630205][ T6592] Total swap = 124996kB [ 164.630352][ T6592] 2097051 pages RAM [ 164.630391][ T6592] 0 pages HighMem/MovableOnly [ 164.630428][ T6592] 424695 pages reserved [ 164.630465][ T6592] 0 pages cma reserved [ 165.410049][ T6598] netlink: 56 bytes leftover after parsing attributes in process `syz.4.165'. [ 165.410400][ T6598] netlink: 16 bytes leftover after parsing attributes in process `syz.4.165'. [ 166.618634][ T6607] mmap: syz.0.170 (6607) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 166.631910][ T5849] Bluetooth: hci2: Malformed Event: 0x02 [ 167.598059][ T6612] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 171.379232][ T6632] No control pipe specified [ 171.449426][ T6630] netdevsim netdevsim0: Direct firmware load for .. failed with error -2 [ 171.809818][ T6630] netdevsim netdevsim0: Falling back to sysfs fallback for: .. [ 172.234465][ T6648] loop9: detected capacity change from 0 to 7 [ 172.248744][ T6648] Buffer I/O error on dev loop9, logical block 0, async page read [ 172.257911][ T6648] Buffer I/O error on dev loop9, logical block 0, async page read [ 172.266823][ T6648] Buffer I/O error on dev loop9, logical block 0, async page read [ 172.276119][ T6648] Buffer I/O error on dev loop9, logical block 0, async page read [ 172.286164][ T6648] Buffer I/O error on dev loop9, logical block 0, async page read [ 172.296007][ T6648] Buffer I/O error on dev loop9, logical block 0, async page read [ 172.304923][ T6648] Buffer I/O error on dev loop9, logical block 0, async page read [ 172.313540][ T6648] ldm_validate_partition_table(): Disk read failed. [ 172.321435][ T6648] Buffer I/O error on dev loop9, logical block 0, async page read [ 172.330378][ T6648] Buffer I/O error on dev loop9, logical block 0, async page read [ 172.339303][ T6648] Buffer I/O error on dev loop9, logical block 0, async page read [ 172.348926][ T6648] Dev loop9: unable to read RDB block 0 [ 172.357083][ T6648] loop9: unable to read partition table [ 172.363569][ T6648] loop9: partition table beyond EOD, truncated [ 172.369884][ T6648] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 172.369884][ T6648] ) failed (rc=-5) [ 173.988211][ T6658] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 174.359894][ T6662] overlayfs: missing 'lowerdir' [ 174.614706][ T6663] Mount JFS Failure: -22 [ 175.883288][ T30] audit: type=1326 audit(1755617042.223:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6676 comm="syz.1.189" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7ee118ebe9 code=0x0 [ 175.949950][ T5923] usb 5-1: new low-speed USB device number 5 using dummy_hcd [ 177.921163][ T5923] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 177.982667][ T6685] xt_CT: No such helper "pptp" [ 178.123963][ T5923] usb 5-1: config 0 has no interface number 0 [ 178.130156][ T5923] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 178.307089][ T5923] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 179.080689][ T5923] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 179.090192][ T5923] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.373787][ T5923] usb 5-1: config 0 descriptor?? [ 179.418512][ T6696] netdevsim netdevsim3: Direct firmware load for .. failed with error -2 [ 179.429329][ T6696] netdevsim netdevsim3: Falling back to sysfs fallback for: .. [ 179.461686][ T5923] usb 5-1: can't set config #0, error -71 [ 179.487342][ T5923] usb 5-1: USB disconnect, device number 5 [ 183.877768][ T6737] xt_CT: No such helper "pptp" [ 184.501423][ T6749] xt_policy: neither incoming nor outgoing policy selected [ 186.136387][ T6757] netlink: 'syz.4.209': attribute type 10 has an invalid length. [ 186.171636][ T6758] netlink: 'syz.1.210': attribute type 3 has an invalid length. [ 186.223270][ T6761] sp0: Synchronizing with TNC [ 186.285105][ T6757] veth0_vlan: left promiscuous mode [ 186.295502][ T6757] veth0_vlan: entered promiscuous mode [ 186.307391][ T6757] team0: Device veth0_vlan failed to register rx_handler [ 187.278032][ T6761] kthread_run failed with err -4 [ 188.260419][ T6773] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 188.422427][ T6761] [U] [ 189.512019][ T6801] netlink: 24 bytes leftover after parsing attributes in process `syz.2.218'. [ 189.593832][ T5923] libceph: connect (1)[c::]:6789 error -101 [ 189.657137][ T5923] libceph: mon0 (1)[c::]:6789 connect error [ 189.784992][ T9] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 190.003835][ T9] usb 3-1: device descriptor read/64, error -71 [ 190.023715][ T5923] libceph: connect (1)[c::]:6789 error -101 [ 190.041961][ T5923] libceph: mon0 (1)[c::]:6789 connect error [ 190.181305][ T6799] ceph: No mds server is up or the cluster is laggy [ 190.306751][ T9] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 190.520005][ T6813] overlayfs: missing 'lowerdir' [ 190.576229][ T6814] Mount JFS Failure: -22 [ 191.117865][ T9] usb 3-1: device descriptor read/64, error -71 [ 192.614067][ T9] usb usb3-port1: attempt power cycle [ 193.923749][ T30] audit: type=1326 audit(1755617060.233:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6819 comm="syz.4.221" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6b9cd8ebe9 code=0x0 [ 196.535648][ T6839] netlink: 316 bytes leftover after parsing attributes in process `syz.0.226'. [ 199.604044][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.610606][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 201.320050][ T6869] Invalid logical block size (535) [ 202.121228][ T6879] Smack: duplicate mount options [ 202.502754][ T6883] [U] [ 208.004296][ T5840] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 208.021032][ T5840] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 208.045091][ T5840] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 208.317365][ T6923] netlink: 'syz.0.253': attribute type 2 has an invalid length. [ 208.331449][ T5840] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 208.343834][ T5840] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 208.453709][ T6925] netlink: 'syz.3.255': attribute type 1 has an invalid length. [ 208.545779][ T6928] netlink: 'syz.3.255': attribute type 1 has an invalid length. [ 208.576320][ T6927] netlink: 'syz.4.254': attribute type 27 has an invalid length. [ 208.607376][ T6927] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 210.443320][ T5840] Bluetooth: hci5: command tx timeout [ 210.573675][ T6952] Zero length message leads to an empty skb [ 210.794436][ T6956] SET target dimension over the limit! [ 211.748663][ T3440] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.849985][ T6920] chnl_net:caif_netlink_parms(): no params data found [ 212.511734][ T3440] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.523453][ T5840] Bluetooth: hci5: command tx timeout [ 213.090594][ T6973] overlayfs: failed to resolve './file0': -2 [ 213.931258][ T3440] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.026739][ T6982] netdevsim netdevsim4: Direct firmware load for .. failed with error -2 [ 214.046968][ T6982] netdevsim netdevsim4: Falling back to sysfs fallback for: .. [ 214.093790][ T927] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 214.124343][ T3440] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.159537][ T6920] bridge0: port 1(bridge_slave_0) entered blocking state [ 214.171350][ T6920] bridge0: port 1(bridge_slave_0) entered disabled state [ 214.181086][ T6920] bridge_slave_0: entered allmulticast mode [ 214.189834][ T6920] bridge_slave_0: entered promiscuous mode [ 214.201316][ T6920] bridge0: port 2(bridge_slave_1) entered blocking state [ 214.208803][ T6920] bridge0: port 2(bridge_slave_1) entered disabled state [ 214.218557][ T6920] bridge_slave_1: entered allmulticast mode [ 214.227945][ T6920] bridge_slave_1: entered promiscuous mode [ 214.253567][ T927] usb 3-1: Using ep0 maxpacket: 16 [ 214.261712][ T927] usb 3-1: config 0 has an invalid interface number: 105 but max is 0 [ 214.278456][ T927] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 214.292987][ T927] usb 3-1: config 0 has no interface number 0 [ 214.307069][ T927] usb 3-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28 [ 214.323467][ T927] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 214.340591][ T927] usb 3-1: Product: syz [ 214.345620][ T927] usb 3-1: Manufacturer: syz [ 214.351378][ T927] usb 3-1: SerialNumber: syz [ 214.365931][ T6920] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 214.378679][ T927] usb 3-1: config 0 descriptor?? [ 214.402317][ T6920] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 214.542336][ T6920] team0: Port device team_slave_0 added [ 214.593807][ T5840] Bluetooth: hci5: command tx timeout [ 214.772811][ T6970] netlink: 76 bytes leftover after parsing attributes in process `syz.2.264'. [ 214.791764][ T6077] usb 3-1: USB disconnect, device number 12 [ 214.817376][ T6920] team0: Port device team_slave_1 added [ 216.340109][ T3440] bridge_slave_1: left allmulticast mode [ 216.347892][ T3440] bridge_slave_1: left promiscuous mode [ 216.358957][ T3440] bridge0: port 2(bridge_slave_1) entered disabled state [ 216.473679][ T3440] bridge_slave_0: left allmulticast mode [ 216.476978][ T3440] bridge_slave_0: left promiscuous mode [ 216.478522][ T3440] bridge0: port 1(bridge_slave_0) entered disabled state [ 216.782452][ T5851] Bluetooth: hci5: command tx timeout [ 217.073470][ T5840] Bluetooth: hci4: command 0x0406 tx timeout [ 217.073909][ T5851] Bluetooth: hci2: command 0x0406 tx timeout [ 217.087879][ T5157] Bluetooth: hci0: command 0x0406 tx timeout [ 217.088581][ T5840] Bluetooth: hci1: command 0x0406 tx timeout [ 217.722075][ T7013] netlink: 56 bytes leftover after parsing attributes in process `syz.3.275'. [ 218.829959][ T7020] overlayfs: missing 'lowerdir' [ 218.875593][ T7020] Mount JFS Failure: -22 [ 219.999172][ T7022] tmpfs: Unknown parameter 'usrsrquotaNblock_hardlimit58' [ 220.042768][ T7022] capability: warning: `syz.2.278' uses deprecated v2 capabilities in a way that may be insecure [ 220.755413][ T7030] netlink: 4 bytes leftover after parsing attributes in process `syz.2.280'. [ 221.562987][ T3440] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 221.574801][ T3440] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 221.587777][ T3440] bond0 (unregistering): Released all slaves [ 221.614167][ T6920] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 221.624337][ T6920] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 221.674444][ T6920] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 221.703819][ T6920] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 221.723231][ T6920] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 221.899226][ T6920] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 223.172791][ T7045] overlayfs: failed to resolve './file0': -2 [ 223.358599][ T7030] hsr_slave_1 (unregistering): left promiscuous mode [ 223.849516][ T6920] hsr_slave_0: entered promiscuous mode [ 223.864620][ T6077] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 223.875181][ T6920] hsr_slave_1: entered promiscuous mode [ 224.213777][ T6920] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 224.221418][ T6920] Cannot create hsr debugfs directory [ 224.609425][ T7055] slcan: can't register candev [ 224.615247][ T6077] usb 5-1: Using ep0 maxpacket: 16 [ 224.615724][ T7055] Falling back ldisc for ttyS3. [ 224.706598][ T6077] usb 5-1: config 0 has an invalid interface number: 105 but max is 0 [ 224.716089][ T6077] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 224.746041][ T6077] usb 5-1: config 0 has no interface number 0 [ 224.776149][ T6077] usb 5-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28 [ 224.803620][ T6077] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 224.811711][ T6077] usb 5-1: Product: syz [ 224.835038][ T6077] usb 5-1: Manufacturer: syz [ 224.845013][ T6077] usb 5-1: SerialNumber: syz [ 224.870490][ T6077] usb 5-1: config 0 descriptor?? [ 225.512399][ T7074] netlink: 316 bytes leftover after parsing attributes in process `syz.0.287'. [ 226.733181][ T7076] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 226.982929][ T6077] usb 5-1: USB disconnect, device number 6 [ 227.267236][ T3440] hsr_slave_0: left promiscuous mode [ 227.332725][ T3440] hsr_slave_1: left promiscuous mode [ 227.384894][ T3440] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 227.440816][ T3440] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 227.627933][ T9] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 228.137278][ T3440] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 229.223628][ T3440] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 230.112245][ T7110] Invalid logical block size (535) [ 230.959489][ T3440] veth1_macvtap: left promiscuous mode [ 230.980445][ T3440] veth0_macvtap: left promiscuous mode [ 230.998171][ T3440] veth1_vlan: left promiscuous mode [ 231.010622][ T3440] veth0_vlan: left promiscuous mode [ 236.813692][ T3440] team0 (unregistering): Port device team_slave_1 removed [ 237.593060][ T3440] team0 (unregistering): Port device team_slave_0 removed [ 238.097158][ T7167] loop9: detected capacity change from 0 to 7 [ 238.108199][ T7167] buffer_io_error: 9 callbacks suppressed [ 238.108253][ T7167] Buffer I/O error on dev loop9, logical block 0, async page read [ 238.122920][ T7167] Buffer I/O error on dev loop9, logical block 0, async page read [ 238.132352][ T7167] Buffer I/O error on dev loop9, logical block 0, async page read [ 238.141657][ T7167] Buffer I/O error on dev loop9, logical block 0, async page read [ 238.150551][ T7167] Buffer I/O error on dev loop9, logical block 0, async page read [ 238.159332][ T7167] Buffer I/O error on dev loop9, logical block 0, async page read [ 238.167986][ T7167] Buffer I/O error on dev loop9, logical block 0, async page read [ 238.176359][ T7167] ldm_validate_partition_table(): Disk read failed. [ 238.183689][ T7167] Buffer I/O error on dev loop9, logical block 0, async page read [ 238.192449][ T7167] Buffer I/O error on dev loop9, logical block 0, async page read [ 238.201142][ T7167] Buffer I/O error on dev loop9, logical block 0, async page read [ 238.210238][ T7167] Dev loop9: unable to read RDB block 0 [ 238.217631][ T7167] loop9: unable to read partition table [ 238.224752][ T7167] loop9: partition table beyond EOD, truncated [ 238.231807][ T7167] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 238.231807][ T7167] ) failed (rc=-5) [ 238.801077][ T7164] hub 8-0:1.0: USB hub found [ 239.181899][ T7164] hub 8-0:1.0: 1 port detected [ 240.576105][ T7119] netdevsim netdevsim2: Direct firmware load for .. failed with error -2 [ 240.593411][ T7119] netdevsim netdevsim2: Falling back to sysfs fallback for: .. [ 240.773648][ T7179] pimreg: tun_chr_ioctl cmd 1074812118 [ 240.910804][ T9] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 241.083425][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 241.133671][ T9] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 241.826178][ T9] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 241.860281][ T9] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 241.872335][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 241.884008][ T9] usb 4-1: Product: syz [ 241.888210][ T9] usb 4-1: Manufacturer: syz [ 241.892835][ T9] usb 4-1: SerialNumber: syz [ 241.978757][ T7032] Bluetooth: hci3: received HCILL_GO_TO_SLEEP_ACK in state 1 [ 241.991664][ T6920] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 242.026326][ T6340] Bluetooth: hci3: Frame reassembly failed (-84) [ 242.051959][ T6340] Bluetooth: hci3: Frame reassembly failed (-84) [ 242.103570][ T6920] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 242.311479][ T9] usb 4-1: 0:2 : does not exist [ 243.690920][ T9] usb 4-1: USB disconnect, device number 7 [ 243.842222][ T5901] udevd[5901]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 243.868933][ T6920] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 244.047152][ T5854] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 245.400484][ T6920] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 247.022795][ T6920] 8021q: adding VLAN 0 to HW filter on device bond0 [ 247.151787][ T6920] 8021q: adding VLAN 0 to HW filter on device team0 [ 247.175598][ T3440] bridge0: port 1(bridge_slave_0) entered blocking state [ 247.182826][ T3440] bridge0: port 1(bridge_slave_0) entered forwarding state [ 247.405638][ T6006] bridge0: port 2(bridge_slave_1) entered blocking state [ 247.412868][ T6006] bridge0: port 2(bridge_slave_1) entered forwarding state [ 248.972086][ T7250] [U] [ 253.819561][ T6920] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 253.984219][ T7297] netlink: 830 bytes leftover after parsing attributes in process `syz.2.339'. [ 257.143206][ T24] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 257.303491][ T24] usb 5-1: device descriptor read/64, error -71 [ 258.013232][ T24] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 258.278883][ T24] usb 5-1: device descriptor read/64, error -71 [ 258.810420][ T7339] xt_TCPMSS: Only works on TCP SYN packets [ 258.882340][ T7339] netlink: 32 bytes leftover after parsing attributes in process `syz.3.348'. [ 258.991870][ T24] usb usb5-port1: attempt power cycle [ 259.170622][ T6920] veth0_vlan: entered promiscuous mode [ 259.288412][ T6920] veth1_vlan: entered promiscuous mode [ 259.427112][ T6920] veth0_macvtap: entered promiscuous mode [ 259.628179][ T6920] veth1_macvtap: entered promiscuous mode [ 260.215099][ T6920] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 260.306913][ T6920] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 260.997171][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 261.004317][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 261.431260][ T6920] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.513334][ T6920] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.522120][ T6920] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.554877][ T6920] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.567515][ T7355] netlink: 72 bytes leftover after parsing attributes in process `syz.0.352'. [ 261.627043][ T7355] netlink: 72 bytes leftover after parsing attributes in process `syz.0.352'. [ 263.239959][ T6223] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 263.253224][ T6223] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 263.499903][ T6006] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 263.566004][ T6006] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 264.061224][ T7387] [U] [ 269.000916][ T5854] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 269.023305][ T5854] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 269.056418][ T5854] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 269.088377][ T5854] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 269.107751][ T5854] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 270.241694][ T7424] xt_TCPMSS: Only works on TCP SYN packets [ 271.172919][ T5854] Bluetooth: hci3: command tx timeout [ 272.599887][ T7408] chnl_net:caif_netlink_parms(): no params data found [ 273.472588][ T5854] Bluetooth: hci3: command tx timeout [ 273.840729][ T7452] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 273.846942][ T7452] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 274.194605][ T7452] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 274.200564][ T7452] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 274.259917][ T7452] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 274.265997][ T7452] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 274.305964][ T7452] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 274.311918][ T7452] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 274.353391][ T7452] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 274.359374][ T7452] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 275.554940][ T7461] can0: slcan on ttyS3. [ 275.741899][ T7472] xt_TCPMSS: Only works on TCP SYN packets [ 276.445890][ T7472] syz.3.376: vmalloc error: size 23068672, failed to allocated page array size 45056, mode:0xcc2(GFP_KERNEL|__GFP_HIGHMEM), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 276.463315][ T7472] CPU: 0 UID: 0 PID: 7472 Comm: syz.3.376 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 276.463345][ T7472] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 276.463360][ T7472] Call Trace: [ 276.463371][ T7472] [ 276.463381][ T7472] dump_stack_lvl+0x189/0x250 [ 276.463427][ T7472] ? __pfx_dump_stack_lvl+0x10/0x10 [ 276.463453][ T7472] ? __pfx__printk+0x10/0x10 [ 276.463478][ T7472] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 276.463501][ T7472] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 276.463532][ T7472] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 276.463557][ T7472] warn_alloc+0x214/0x310 [ 276.463585][ T7472] ? __pfx_warn_alloc+0x10/0x10 [ 276.463614][ T7472] ? __get_vm_area_node+0x28f/0x300 [ 276.463633][ T7472] ? vicodec_start_streaming+0x97b/0x1470 [ 276.463667][ T7472] __vmalloc_node_range_noprof+0x67e/0x12f0 [ 276.463714][ T7472] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 276.463738][ T7472] ? rcu_is_watching+0x15/0xb0 [ 276.463759][ T7472] ? vicodec_start_streaming+0x97b/0x1470 [ 276.463788][ T7472] ? vicodec_start_streaming+0x97b/0x1470 [ 276.463815][ T7472] __kvmalloc_node_noprof+0x3b8/0x5f0 [ 276.463835][ T7472] ? vicodec_start_streaming+0x97b/0x1470 [ 276.463862][ T7472] ? trace_contention_end+0x39/0x120 [ 276.463891][ T7472] vicodec_start_streaming+0x97b/0x1470 [ 276.463928][ T7472] ? __pfx_vicodec_start_streaming+0x10/0x10 [ 276.463958][ T7472] vb2_start_streaming+0x128/0x460 [ 276.463991][ T7472] vb2_core_streamon+0x2e0/0x4f0 [ 276.464021][ T7472] v4l2_m2m_ioctl_streamon+0xe0/0x140 [ 276.464043][ T7472] __video_do_ioctl+0xc9b/0xdb0 [ 276.464079][ T7472] ? __pfx___video_do_ioctl+0x10/0x10 [ 276.464119][ T7472] video_usercopy+0x871/0x14f0 [ 276.464155][ T7472] ? __pfx___video_do_ioctl+0x10/0x10 [ 276.464182][ T7472] ? __pfx_video_usercopy+0x10/0x10 [ 276.464211][ T7472] ? smack_file_ioctl+0x24a/0x340 [ 276.464243][ T7472] ? __fget_files+0x2a/0x420 [ 276.464262][ T7472] ? __fget_files+0x3a0/0x420 [ 276.464285][ T7472] v4l2_ioctl+0x18a/0x1e0 [ 276.464312][ T7472] ? __pfx_v4l2_ioctl+0x10/0x10 [ 276.464338][ T7472] __se_sys_ioctl+0xfc/0x170 [ 276.464368][ T7472] do_syscall_64+0xfa/0x3b0 [ 276.464390][ T7472] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 276.464407][ T7472] ? asm_sysvec_call_function_single+0x1a/0x20 [ 276.464425][ T7472] ? clear_bhb_loop+0x60/0xb0 [ 276.464447][ T7472] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 276.464465][ T7472] RIP: 0033:0x7fad0ff8ebe9 [ 276.464486][ T7472] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 276.464501][ T7472] RSP: 002b:00007fad10e48038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 276.464525][ T7472] RAX: ffffffffffffffda RBX: 00007fad101b6180 RCX: 00007fad0ff8ebe9 [ 276.464537][ T7472] RDX: 0000200000000240 RSI: 0000000040045612 RDI: 000000000000000a [ 276.464549][ T7472] RBP: 00007fad10011e19 R08: 0000000000000000 R09: 0000000000000000 [ 276.464560][ T7472] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 276.464570][ T7472] R13: 00007fad101b6218 R14: 00007fad101b6180 R15: 00007ffd810b5838 [ 276.464597][ T7472] [ 276.464632][ T7472] Mem-Info: [ 276.851477][ T7472] active_anon:259 inactive_anon:6641 isolated_anon:0 [ 276.851477][ T7472] active_file:5532 inactive_file:37934 isolated_file:0 [ 276.851477][ T7472] unevictable:768 dirty:147 writeback:0 [ 276.851477][ T7472] slab_reclaimable:10150 slab_unreclaimable:99539 [ 276.851477][ T7472] mapped:33167 shmem:1374 pagetables:1220 [ 276.851477][ T7472] sec_pagetables:0 bounce:0 [ 276.851477][ T7472] kernel_misc_reclaimable:0 [ 276.851477][ T7472] free:1313380 free_pcp:20147 free_cma:0 [ 276.899157][ T7472] Node 0 active_anon:1036kB inactive_anon:26564kB active_file:21928kB inactive_file:151736kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:132668kB dirty:588kB writeback:0kB shmem:3960kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12560kB pagetables:4744kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 276.933647][ T7472] Node 1 active_anon:0kB inactive_anon:0kB active_file:200kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:136kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 276.966743][ T7472] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 276.996102][ T7472] lowmem_reserve[]: 0 2500 2502 2502 2502 [ 277.001969][ T7472] Node 0 DMA32 free:1343616kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:1032kB inactive_anon:26520kB active_file:20156kB inactive_file:151668kB unevictable:1536kB writepending:584kB present:3129332kB managed:2560996kB mlocked:0kB bounce:0kB free_pcp:55492kB local_pcp:14620kB free_cma:0kB [ 277.035400][ T7472] lowmem_reserve[]: 0 0 1 1 1 [ 277.041693][ T7472] Node 0 Normal free:8kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:4kB inactive_anon:44kB active_file:1772kB inactive_file:68kB unevictable:0kB writepending:4kB present:1048580kB managed:1904kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 277.071267][ T7472] lowmem_reserve[]: 0 0 0 0 0 [ 277.076461][ T7472] Node 1 Normal free:3894536kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:200kB inactive_file:0kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:25056kB local_pcp:9740kB free_cma:0kB [ 277.108226][ T7472] lowmem_reserve[]: 0 0 0 0 0 [ 277.112998][ T7472] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 277.125913][ T7472] Node 0 DMA32: 1990*4kB (UME) 1201*8kB (UE) 690*16kB (UME) 436*32kB (UME) 107*64kB (UME) 45*128kB (UME) 29*256kB (UME) 20*512kB (UME) 15*1024kB (UM) 7*2048kB (UME) 303*4096kB (M) = 1343616kB [ 277.146261][ T7472] Node 0 Normal: 0*4kB 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 277.158373][ T7472] Node 1 Normal: 200*4kB (U) 67*8kB (UME) 57*16kB (UME) 72*32kB (UME) 23*64kB (UME) 7*128kB (UME) 6*256kB (UME) 6*512kB (UME) 2*1024kB (UM) 1*2048kB (E) 947*4096kB (M) = 3894536kB [ 277.176861][ T7472] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 277.186552][ T7472] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 277.195958][ T7472] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 277.205712][ T7472] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 277.215099][ T7472] 44836 total pagecache pages [ 277.219817][ T7472] 0 pages in swap cache [ 277.224044][ T7472] Free swap = 124996kB [ 277.228246][ T7472] Total swap = 124996kB [ 277.232468][ T7472] 2097051 pages RAM [ 277.236391][ T7472] 0 pages HighMem/MovableOnly [ 277.243453][ T7472] 424695 pages reserved [ 277.247696][ T7472] 0 pages cma reserved [ 277.433895][ T7462] can0 (unregistered): slcan off ttyS3. [ 277.537770][ T3440] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.515692][ T7482] netdevsim netdevsim0: Direct firmware load for .. failed with error -2 [ 283.577630][ T7482] netdevsim netdevsim0: Falling back to sysfs fallback for: .. [ 283.686440][ T3440] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 284.267816][ T7499] Invalid logical block size (535) [ 284.669784][ T7408] bridge0: port 1(bridge_slave_0) entered blocking state [ 285.348862][ T7408] bridge0: port 1(bridge_slave_0) entered disabled state [ 285.388327][ T7408] bridge_slave_0: entered allmulticast mode [ 285.470596][ T7408] bridge_slave_0: entered promiscuous mode [ 285.532279][ T7408] bridge0: port 2(bridge_slave_1) entered blocking state [ 285.562131][ T7408] bridge0: port 2(bridge_slave_1) entered disabled state [ 285.623519][ T7408] bridge_slave_1: entered allmulticast mode [ 285.631483][ T7408] bridge_slave_1: entered promiscuous mode [ 285.746451][ T7513] xt_TCPMSS: Only works on TCP SYN packets [ 285.753951][ T7513] netlink: 32 bytes leftover after parsing attributes in process `syz.4.387'. [ 288.266217][ T3440] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.764714][ T7532] binder: 7525:7532 ioctl c0306201 200000000080 returned -14 [ 288.890527][ T7539] netlink: 28 bytes leftover after parsing attributes in process `syz.2.393'. [ 288.916678][ T7408] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 288.928014][ T7528] netlink: 'syz.3.391': attribute type 29 has an invalid length. [ 289.551479][ T3440] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.574659][ T7528] binder: BINDER_SET_CONTEXT_MGR already set [ 289.580942][ T7528] binder: 7525:7528 ioctl 4018620d 2000000002c0 returned -16 [ 289.614172][ T7544] trusted_key: encrypted_key: insufficient parameters specified [ 289.665717][ T7528] binder: 7525:7528 ioctl 4b6c 2000000001c0 returned -22 [ 289.724340][ T7534] bridge_slave_0: default FDB implementation only supports local addresses [ 289.742535][ T7408] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 289.788939][ T7528] binder: 7525:7528 ioctl c0306201 200000000240 returned -11 [ 289.859067][ T7534] binder: 7525:7534 ioctl 81f8943c 200000000700 returned -22 [ 289.875089][ T7528] binder: 7525:7528 ioctl d0009411 200000000900 returned -22 [ 290.339738][ T7408] team0: Port device team_slave_0 added [ 290.399227][ T7408] team0: Port device team_slave_1 added [ 291.131329][ T24] IPVS: starting estimator thread 0... [ 291.296563][ T7558] IPVS: using max 35 ests per chain, 84000 per kthread [ 291.299666][ T7562] xt_TCPMSS: Only works on TCP SYN packets [ 291.311624][ T7562] netlink: 32 bytes leftover after parsing attributes in process `syz.4.399'. [ 292.334068][ T7408] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 292.440253][ T7408] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 292.757687][ T7408] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 293.873688][ T7408] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 293.890954][ T7408] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 294.343905][ T7408] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 296.086130][ T7593] netlink: 12 bytes leftover after parsing attributes in process `syz.2.407'. [ 296.509630][ T7408] hsr_slave_0: entered promiscuous mode [ 296.556075][ T7408] hsr_slave_1: entered promiscuous mode [ 296.703281][ T7408] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 296.739728][ T7408] Cannot create hsr debugfs directory [ 298.058220][ T7614] can0: slcan on ttyS3. [ 298.292479][ T3440] bridge_slave_1: left allmulticast mode [ 298.298941][ T7615] can0 (unregistered): slcan off ttyS3. [ 298.337746][ T3440] bridge_slave_1: left promiscuous mode [ 298.380134][ T3440] bridge0: port 2(bridge_slave_1) entered disabled state [ 299.318040][ T3440] bridge_slave_0: left allmulticast mode [ 299.323949][ T3440] bridge_slave_0: left promiscuous mode [ 299.330732][ T3440] bridge0: port 1(bridge_slave_0) entered disabled state [ 307.968298][ T3440] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 308.118490][ T3440] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 308.139455][ T3440] bond0 (unregistering): Released all slaves [ 308.281000][ T7673] misc userio: No port type given on /dev/userio [ 311.016682][ T7703] warning: `syz.4.431' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 312.057033][ T7696] netdevsim netdevsim0: Direct firmware load for .. failed with error -2 [ 312.852917][ T7696] netdevsim netdevsim0: Falling back to sysfs fallback for: .. [ 313.479758][ T7714] overlayfs: missing 'lowerdir' [ 313.551149][ T7715] Mount JFS Failure: -22 [ 316.977225][ T3440] hsr_slave_0: left promiscuous mode [ 316.991862][ T3440] hsr_slave_1: left promiscuous mode [ 317.007397][ T3440] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 317.020735][ T3440] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 317.044223][ T3440] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 317.051722][ T3440] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 317.301674][ T3440] veth1_macvtap: left promiscuous mode [ 317.349877][ T3440] veth0_macvtap: left promiscuous mode [ 317.398258][ T3440] veth1_vlan: left promiscuous mode [ 317.427628][ T3440] veth0_vlan: left promiscuous mode [ 322.085121][ T7788] netlink: 12 bytes leftover after parsing attributes in process `syz.3.449'. [ 322.444711][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 322.451769][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 322.618947][ T3440] team0 (unregistering): Port device team_slave_1 removed [ 322.692742][ T3440] team0 (unregistering): Port device team_slave_0 removed [ 322.963601][ T6077] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 323.095980][ T7733] netdevsim netdevsim2: Direct firmware load for .. failed with error -2 [ 323.112445][ T7733] netdevsim netdevsim2: Falling back to sysfs fallback for: .. [ 323.130659][ T6077] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 323.151738][ T6077] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 323.187805][ T6077] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 323.233822][ T6077] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 323.253262][ T6077] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 323.297592][ T6077] usb 4-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 323.313881][ T6077] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 323.340461][ T6077] usb 4-1: Product: syz [ 323.348442][ T6077] usb 4-1: Manufacturer: syz [ 323.355445][ T6077] usb 4-1: SerialNumber: syz [ 323.371083][ T6077] usb 4-1: config 0 descriptor?? [ 323.774147][ T6077] radio-si470x 4-1:0.0: DeviceID=0xc8c8 ChipID=0x0000 [ 323.811698][ T6077] radio-si470x 4-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 323.979010][ T6077] radio-si470x 4-1:0.0: software version 200, hardware version 200 [ 323.993323][ T7408] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 324.031429][ T6077] radio-si470x 4-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 324.034723][ T7408] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 324.090533][ T7408] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 324.122042][ T7408] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 324.567437][ T6077] radio-si470x 4-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 324.583508][ T6077] radio-si470x 4-1:0.0: submitting int urb failed (-90) [ 324.593716][ T6077] radio-si470x 4-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 324.602490][ T6077] radio-si470x 4-1:0.0: probe with driver radio-si470x failed with error -22 [ 324.628743][ T7408] 8021q: adding VLAN 0 to HW filter on device bond0 [ 324.752841][ T7408] 8021q: adding VLAN 0 to HW filter on device team0 [ 324.800755][ T65] bridge0: port 1(bridge_slave_0) entered blocking state [ 324.807993][ T65] bridge0: port 1(bridge_slave_0) entered forwarding state [ 324.816448][ T6077] usb 4-1: USB disconnect, device number 8 [ 325.024910][ T1095] bridge0: port 2(bridge_slave_1) entered blocking state [ 325.032297][ T1095] bridge0: port 2(bridge_slave_1) entered forwarding state [ 330.415866][ T7859] netdevsim netdevsim0: Direct firmware load for .. failed with error -2 [ 330.502727][ T7859] netdevsim netdevsim0: Falling back to sysfs fallback for: .. [ 330.655738][ T7863] Invalid logical block size (535) [ 333.132787][ T7876] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 333.547610][ T5849] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 333.573348][ T5849] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 333.582767][ T5849] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 333.591891][ T5849] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 333.600052][ T5849] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 333.612512][ T5854] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 333.640195][ T5854] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 333.647915][ T5854] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 333.656403][ T5854] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 333.666143][ T5854] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 335.723260][ T5854] Bluetooth: hci3: command tx timeout [ 337.918425][ T5854] Bluetooth: hci3: command tx timeout [ 338.133385][ T7929] loop6: detected capacity change from 0 to 524287999 [ 339.968102][ T5854] Bluetooth: hci3: command tx timeout [ 341.073730][ T7885] chnl_net:caif_netlink_parms(): no params data found [ 341.376546][ T6340] bridge_slave_1: left allmulticast mode [ 341.382260][ T6340] bridge_slave_1: left promiscuous mode [ 341.553503][ T6340] bridge0: port 2(bridge_slave_1) entered disabled state [ 342.794657][ T5854] Bluetooth: hci3: command tx timeout [ 343.095104][ T6340] bridge_slave_0: left allmulticast mode [ 343.273151][ T6340] bridge_slave_0: left promiscuous mode [ 343.280150][ T6340] bridge0: port 1(bridge_slave_0) entered disabled state [ 344.613946][ T7996] misc userio: No port type given on /dev/userio [ 344.761970][ T7997] slcan: can't register candev [ 344.767203][ T7997] Falling back ldisc for ttyS3. [ 344.860558][ T7985] ceph: No mds server is up or the cluster is laggy [ 349.783063][ T6340] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 349.811287][ T6340] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 349.836222][ T6340] bond0 (unregistering): Released all slaves [ 350.271916][ T6340] hsr_slave_0: left promiscuous mode [ 350.573317][ T6340] hsr_slave_1: left promiscuous mode [ 351.314670][ T6340] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 351.439380][ T6340] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 351.606410][ T8044] overlayfs: missing 'lowerdir' [ 351.667016][ T8045] /dev/nullb0: Can't open blockdev [ 354.033525][ T8049] [U] [ 354.969812][ T8053] fuse: Bad value for 'fd' [ 356.696951][ T8060] ceph: No mds server is up or the cluster is laggy [ 360.206182][ T8079] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 360.345220][ T8079] netlink: 12 bytes leftover after parsing attributes in process `syz.3.502'. [ 360.919741][ T6340] team0 (unregistering): Port device team_slave_1 removed [ 361.289950][ T6340] team0 (unregistering): Port device team_slave_0 removed [ 363.030957][ T8085] syz_tun: entered promiscuous mode [ 363.038885][ T8085] macvtap1: entered allmulticast mode [ 363.048303][ T8085] syz_tun: entered allmulticast mode [ 363.087610][ T8085] syz_tun: left allmulticast mode [ 363.093015][ T8085] syz_tun: left promiscuous mode [ 363.225465][ T7885] bridge0: port 1(bridge_slave_0) entered blocking state [ 363.261909][ T7885] bridge0: port 1(bridge_slave_0) entered disabled state [ 363.277984][ T7885] bridge_slave_0: entered allmulticast mode [ 363.288590][ T7885] bridge_slave_0: entered promiscuous mode [ 363.322191][ T7885] bridge0: port 2(bridge_slave_1) entered blocking state [ 363.352654][ T7885] bridge0: port 2(bridge_slave_1) entered disabled state [ 363.384064][ T7885] bridge_slave_1: entered allmulticast mode [ 363.392362][ T7885] bridge_slave_1: entered promiscuous mode [ 363.638928][ T7885] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 363.681840][ T7885] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 363.797148][ T8128] pim6reg1: entered promiscuous mode [ 363.802533][ T8128] pim6reg1: entered allmulticast mode [ 364.041910][ T7885] team0: Port device team_slave_0 added [ 364.114475][ T7885] team0: Port device team_slave_1 added [ 365.777334][ T7885] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 365.787721][ T7885] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 365.814373][ T7885] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 365.840478][ T7885] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 365.858877][ T7885] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 365.889575][ T7885] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 366.060990][ T7885] hsr_slave_0: entered promiscuous mode [ 366.069873][ T7885] hsr_slave_1: entered promiscuous mode [ 366.084125][ T7885] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 366.091881][ T7885] Cannot create hsr debugfs directory [ 367.291280][ T8187] wg2: entered promiscuous mode [ 367.305856][ T8187] wg2: entered allmulticast mode [ 367.457574][ T8200] A6: renamed from team_slave_1 (while UP) [ 367.789248][ T7885] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 367.832631][ T7885] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 367.879933][ T7885] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 367.910929][ T7885] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 368.093932][ T8220] wg2: entered promiscuous mode [ 368.100407][ T8220] wg2: entered allmulticast mode [ 368.777108][ T8234] wg2: left promiscuous mode [ 368.781808][ T8234] wg2: left allmulticast mode [ 368.846825][ T8239] wg2: entered promiscuous mode [ 368.852720][ T8239] wg2: entered allmulticast mode [ 368.942038][ T8236] pim6reg1: entered promiscuous mode [ 368.965327][ T8236] pim6reg1: entered allmulticast mode [ 371.229263][ T8278] syzkaller0: entered promiscuous mode [ 371.239091][ T8278] syzkaller0: entered allmulticast mode [ 372.909698][ T7885] 8021q: adding VLAN 0 to HW filter on device bond0 [ 373.018322][ T7885] 8021q: adding VLAN 0 to HW filter on device team0 [ 373.085445][ T6008] bridge0: port 1(bridge_slave_0) entered blocking state [ 373.092677][ T6008] bridge0: port 1(bridge_slave_0) entered forwarding state [ 373.135235][ T6008] bridge0: port 2(bridge_slave_1) entered blocking state [ 373.142454][ T6008] bridge0: port 2(bridge_slave_1) entered forwarding state [ 373.236161][ T8305] Illegal XDP return value 200953912 on prog (id 202) dev N/A, expect packet loss! [ 374.147621][ T8336] wg2: entered promiscuous mode [ 374.175144][ T8336] wg2: entered allmulticast mode [ 374.335590][ T7885] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 374.918936][ T8370] veth1_macvtap: left promiscuous mode [ 374.955563][ T8370] macsec0: entered promiscuous mode [ 376.247370][ T7885] veth0_vlan: entered promiscuous mode [ 376.341315][ T7885] veth1_vlan: entered promiscuous mode [ 376.989155][ T7885] veth0_macvtap: entered promiscuous mode [ 377.030692][ T7885] veth1_macvtap: entered promiscuous mode [ 377.266979][ T7885] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 377.307400][ T7885] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 377.340085][ T7885] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 377.371090][ T7885] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 377.409008][ T7885] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 377.463254][ T7885] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 377.510055][ T8433] tipc: Started in network mode [ 377.550240][ T8433] tipc: Node identity 4, cluster identity 4711 [ 377.563021][ T30] audit: type=1326 audit(1755617243.913:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8437 comm="syz.3.616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad0ff8ebe9 code=0x7ffc0000 [ 377.599752][ T8433] tipc: Node number set to 4 [ 377.631922][ T30] audit: type=1326 audit(1755617243.913:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8437 comm="syz.3.616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad0ff8ebe9 code=0x7ffc0000 [ 377.684188][ T30] audit: type=1326 audit(1755617243.913:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8437 comm="syz.3.616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fad0ff8ebe9 code=0x7ffc0000 [ 377.751525][ T30] audit: type=1326 audit(1755617243.913:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8437 comm="syz.3.616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad0ff8ebe9 code=0x7ffc0000 [ 377.853628][ T30] audit: type=1326 audit(1755617243.913:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8437 comm="syz.3.616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad0ff8ebe9 code=0x7ffc0000 [ 377.921062][ T6008] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 377.938399][ T30] audit: type=1326 audit(1755617243.913:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8437 comm="syz.3.616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fad0ff8ebe9 code=0x7ffc0000 [ 377.971354][ T6008] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 378.035319][ T30] audit: type=1326 audit(1755617243.913:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8437 comm="syz.3.616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad0ff8ebe9 code=0x7ffc0000 [ 378.060437][ T6008] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 378.086630][ T6008] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 378.122089][ T30] audit: type=1326 audit(1755617243.913:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8437 comm="syz.3.616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fad0ff8ebe9 code=0x7ffc0000 [ 378.227382][ T30] audit: type=1326 audit(1755617243.913:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8437 comm="syz.3.616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad0ff8ebe9 code=0x7ffc0000 [ 378.275000][ T30] audit: type=1326 audit(1755617243.913:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8437 comm="syz.3.616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fad0ff8ebe9 code=0x7ffc0000 [ 379.815289][ T8484] netlink: 4 bytes leftover after parsing attributes in process `syz.4.633'. [ 379.877033][ T5922] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 379.924503][ T8488] netlink: 28 bytes leftover after parsing attributes in process `syz.3.635'. [ 380.025504][ T5922] usb 3-1: device descriptor read/64, error -71 [ 380.287205][ T5922] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 380.433603][ T5922] usb 3-1: device descriptor read/64, error -71 [ 380.582923][ T5922] usb usb3-port1: attempt power cycle [ 380.933193][ T5922] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 380.969985][ T5922] usb 3-1: device descriptor read/8, error -71 [ 381.243340][ T5922] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 381.307056][ T5922] usb 3-1: device descriptor read/8, error -71 [ 381.459330][ T5922] usb usb3-port1: unable to enumerate USB device [ 381.757626][ T8531] netlink: 'syz.0.648': attribute type 10 has an invalid length. [ 381.776279][ T8531] team0: Port device dummy0 added [ 381.785251][ T8531] netlink: 'syz.0.648': attribute type 10 has an invalid length. [ 381.804745][ T8531] [ 381.807147][ T8531] ====================================================== [ 381.814243][ T8531] WARNING: possible circular locking dependency detected [ 381.821312][ T8531] 6.16.0-syzkaller #0 Not tainted [ 381.826373][ T8531] ------------------------------------------------------ [ 381.833427][ T8531] syz.0.648/8531 is trying to acquire lock: [ 381.839352][ T8531] ffff888030e74e00 (team->team_lock_key#5){+.+.}-{4:4}, at: team_device_event+0x182/0xa20 [ 381.849364][ T8531] [ 381.849364][ T8531] but task is already holding lock: [ 381.856918][ T8531] ffff88805ff26d30 (&dev_instance_lock_key#3){+.+.}-{4:4}, at: do_setlink+0x388/0x41c0 [ 381.866675][ T8531] [ 381.866675][ T8531] which lock already depends on the new lock. [ 381.866675][ T8531] [ 381.877110][ T8531] [ 381.877110][ T8531] the existing dependency chain (in reverse order) is: [ 381.886150][ T8531] [ 381.886150][ T8531] -> #1 (&dev_instance_lock_key#3){+.+.}-{4:4}: [ 381.894638][ T8531] lock_acquire+0x120/0x360 [ 381.899695][ T8531] __mutex_lock+0x182/0xe80 [ 381.904755][ T8531] dev_set_mtu+0x10e/0x260 [ 381.909723][ T8531] team_add_slave+0x8b8/0x2840 [ 381.915036][ T8531] do_set_master+0x530/0x6d0 [ 381.920192][ T8531] do_setlink+0xcf0/0x41c0 [ 381.925167][ T8531] rtnl_newlink+0x160b/0x1c70 [ 381.930387][ T8531] rtnetlink_rcv_msg+0x7cc/0xb70 [ 381.935869][ T8531] netlink_rcv_skb+0x205/0x470 [ 381.941178][ T8531] netlink_unicast+0x75c/0x8e0 [ 381.946491][ T8531] netlink_sendmsg+0x805/0xb30 [ 381.951884][ T8531] __sock_sendmsg+0x21c/0x270 [ 381.957097][ T8531] ____sys_sendmsg+0x505/0x830 [ 381.962418][ T8531] ___sys_sendmsg+0x21f/0x2a0 [ 381.967646][ T8531] __x64_sys_sendmsg+0x19b/0x260 [ 381.973127][ T8531] do_syscall_64+0xfa/0x3b0 [ 381.978166][ T8531] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 381.984600][ T8531] [ 381.984600][ T8531] -> #0 (team->team_lock_key#5){+.+.}-{4:4}: [ 381.992799][ T8531] validate_chain+0xb9b/0x2140 [ 381.998105][ T8531] __lock_acquire+0xab9/0xd20 [ 382.003408][ T8531] lock_acquire+0x120/0x360 [ 382.008457][ T8531] __mutex_lock+0x182/0xe80 [ 382.013522][ T8531] team_device_event+0x182/0xa20 [ 382.018999][ T8531] notifier_call_chain+0x1b3/0x3e0 [ 382.024648][ T8531] __dev_notify_flags+0x18d/0x2e0 [ 382.030218][ T8531] netif_change_flags+0xe8/0x1a0 [ 382.035700][ T8531] do_setlink+0xc55/0x41c0 [ 382.040662][ T8531] rtnl_newlink+0x160b/0x1c70 [ 382.045879][ T8531] rtnetlink_rcv_msg+0x7cc/0xb70 [ 382.051364][ T8531] netlink_rcv_skb+0x205/0x470 [ 382.056675][ T8531] netlink_unicast+0x75c/0x8e0 [ 382.061979][ T8531] netlink_sendmsg+0x805/0xb30 [ 382.067666][ T8531] __sock_sendmsg+0x21c/0x270 [ 382.072891][ T8531] ____sys_sendmsg+0x505/0x830 [ 382.078213][ T8531] ___sys_sendmsg+0x21f/0x2a0 [ 382.083444][ T8531] __x64_sys_sendmsg+0x19b/0x260 [ 382.088930][ T8531] do_syscall_64+0xfa/0x3b0 [ 382.093971][ T8531] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 382.100442][ T8531] [ 382.100442][ T8531] other info that might help us debug this: [ 382.100442][ T8531] [ 382.110690][ T8531] Possible unsafe locking scenario: [ 382.110690][ T8531] [ 382.118162][ T8531] CPU0 CPU1 [ 382.123544][ T8531] ---- ---- [ 382.128925][ T8531] lock(&dev_instance_lock_key#3); [ 382.134155][ T8531] lock(team->team_lock_key#5); [ 382.141725][ T8531] lock(&dev_instance_lock_key#3); [ 382.149469][ T8531] lock(team->team_lock_key#5); [ 382.154432][ T8531] [ 382.154432][ T8531] *** DEADLOCK *** [ 382.154432][ T8531] [ 382.162590][ T8531] 2 locks held by syz.0.648/8531: [ 382.167624][ T8531] #0: ffffffff8f509f08 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8db/0x1c70 [ 382.176717][ T8531] #1: ffff88805ff26d30 (&dev_instance_lock_key#3){+.+.}-{4:4}, at: do_setlink+0x388/0x41c0 [ 382.186849][ T8531] [ 382.186849][ T8531] stack backtrace: [ 382.192780][ T8531] CPU: 0 UID: 0 PID: 8531 Comm: syz.0.648 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 382.192803][ T8531] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 382.192821][ T8531] Call Trace: [ 382.192836][ T8531] [ 382.192846][ T8531] dump_stack_lvl+0x189/0x250 [ 382.192872][ T8531] ? __pfx_dump_stack_lvl+0x10/0x10 [ 382.192891][ T8531] ? __pfx__printk+0x10/0x10 [ 382.192915][ T8531] ? print_lock_name+0xde/0x100 [ 382.192938][ T8531] print_circular_bug+0x2ee/0x310 [ 382.192964][ T8531] check_noncircular+0x134/0x160 [ 382.192992][ T8531] validate_chain+0xb9b/0x2140 [ 382.193017][ T8531] ? __lock_acquire+0xab9/0xd20 [ 382.193040][ T8531] __lock_acquire+0xab9/0xd20 [ 382.193058][ T8531] ? team_device_event+0x182/0xa20 [ 382.193076][ T8531] lock_acquire+0x120/0x360 [ 382.193093][ T8531] ? team_device_event+0x182/0xa20 [ 382.193114][ T8531] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 382.193147][ T8531] __mutex_lock+0x182/0xe80 [ 382.193165][ T8531] ? team_device_event+0x182/0xa20 [ 382.193185][ T8531] ? __try_to_del_timer_sync+0x34a/0x3a0 [ 382.193218][ T8531] ? team_device_event+0x182/0xa20 [ 382.193235][ T8531] ? __pfx___mutex_lock+0x10/0x10 [ 382.193252][ T8531] ? __timer_delete_sync+0x218/0x2d0 [ 382.193286][ T8531] team_device_event+0x182/0xa20 [ 382.193304][ T8531] notifier_call_chain+0x1b3/0x3e0 [ 382.193328][ T8531] __dev_notify_flags+0x18d/0x2e0 [ 382.193355][ T8531] ? __pfx___dev_notify_flags+0x10/0x10 [ 382.193380][ T8531] ? __dev_change_flags+0x4cc/0x6d0 [ 382.193409][ T8531] ? __pfx___dev_change_flags+0x10/0x10 [ 382.193434][ T8531] ? __pfx_console_unlock+0x10/0x10 [ 382.193456][ T8531] ? irq_work_queue+0xbc/0x140 [ 382.193483][ T8531] netif_change_flags+0xe8/0x1a0 [ 382.193511][ T8531] do_setlink+0xc55/0x41c0 [ 382.193543][ T8531] ? __pfx_do_setlink+0x10/0x10 [ 382.193568][ T8531] ? _printk+0xcf/0x120 [ 382.193588][ T8531] ? __pfx____ratelimit+0x10/0x10 [ 382.193610][ T8531] ? __lock_acquire+0xab9/0xd20 [ 382.193628][ T8531] ? __mutex_trylock_common+0x153/0x260 [ 382.193650][ T8531] ? __pfx___mutex_trylock_common+0x10/0x10 [ 382.193672][ T8531] ? rcu_is_watching+0x15/0xb0 [ 382.193690][ T8531] ? trace_contention_end+0x39/0x120 [ 382.193711][ T8531] ? __mutex_lock+0x330/0xe80 [ 382.193734][ T8531] ? rtnl_newlink+0x8db/0x1c70 [ 382.193755][ T8531] ? rcu_is_watching+0x15/0xb0 [ 382.193773][ T8531] ? __pfx___mutex_lock+0x10/0x10 [ 382.193796][ T8531] ? ns_capable+0x8a/0xf0 [ 382.193814][ T8531] ? rtnl_link_get_net_capable+0x16a/0x350 [ 382.193840][ T8531] rtnl_newlink+0x160b/0x1c70 [ 382.193862][ T8531] ? netlink_sendmsg+0x805/0xb30 [ 382.193891][ T8531] ? __pfx_rtnl_newlink+0x10/0x10 [ 382.193923][ T8531] ? kasan_quarantine_put+0xdd/0x220 [ 382.193951][ T8531] ? lockdep_hardirqs_on+0x9c/0x150 [ 382.193971][ T8531] ? nlmon_xmit+0xb0/0x100 [ 382.193991][ T8531] ? kmem_cache_free+0x18f/0x400 [ 382.194011][ T8531] ? __local_bh_enable_ip+0x12d/0x1c0 [ 382.194029][ T8531] ? lockdep_hardirqs_on+0x9c/0x150 [ 382.194046][ T8531] ? __local_bh_enable_ip+0x12d/0x1c0 [ 382.194063][ T8531] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 382.194082][ T8531] ? __dev_queue_xmit+0x27e/0x3a70 [ 382.194099][ T8531] ? __dev_queue_xmit+0x27e/0x3a70 [ 382.194116][ T8531] ? __dev_queue_xmit+0x27e/0x3a70 [ 382.194133][ T8531] ? __dev_queue_xmit+0x1cd7/0x3a70 [ 382.194152][ T8531] ? __lock_acquire+0xab9/0xd20 [ 382.194177][ T8531] ? __pfx_rtnl_newlink+0x10/0x10 [ 382.194212][ T8531] rtnetlink_rcv_msg+0x7cc/0xb70 [ 382.194237][ T8531] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 382.194260][ T8531] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 382.194284][ T8531] ? ref_tracker_free+0x63a/0x7d0 [ 382.194304][ T8531] ? __copy_skb_header+0xa7/0x550 [ 382.194321][ T8531] ? __pfx_ref_tracker_free+0x10/0x10 [ 382.194340][ T8531] ? __skb_clone+0x63/0x7a0 [ 382.194358][ T8531] netlink_rcv_skb+0x205/0x470 [ 382.194384][ T8531] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 382.194408][ T8531] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 382.194437][ T8531] ? netlink_deliver_tap+0x2e/0x1b0 [ 382.194461][ T8531] ? netlink_deliver_tap+0x2e/0x1b0 [ 382.194488][ T8531] netlink_unicast+0x75c/0x8e0 [ 382.194514][ T8531] netlink_sendmsg+0x805/0xb30 [ 382.194544][ T8531] ? __pfx_netlink_sendmsg+0x10/0x10 [ 382.194572][ T8531] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 382.194590][ T8531] ? __pfx_netlink_sendmsg+0x10/0x10 [ 382.194615][ T8531] __sock_sendmsg+0x21c/0x270 [ 382.194637][ T8531] ____sys_sendmsg+0x505/0x830 [ 382.194666][ T8531] ? __pfx_____sys_sendmsg+0x10/0x10 [ 382.194698][ T8531] ? import_iovec+0x74/0xa0 [ 382.194725][ T8531] ___sys_sendmsg+0x21f/0x2a0 [ 382.194753][ T8531] ? __pfx____sys_sendmsg+0x10/0x10 [ 382.194797][ T8531] ? __fget_files+0x2a/0x420 [ 382.194815][ T8531] ? __fget_files+0x3a0/0x420 [ 382.194844][ T8531] __x64_sys_sendmsg+0x19b/0x260 [ 382.194872][ T8531] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 382.194904][ T8531] ? rcu_is_watching+0x15/0xb0 [ 382.194925][ T8531] ? do_syscall_64+0xbe/0x3b0 [ 382.194947][ T8531] do_syscall_64+0xfa/0x3b0 [ 382.194967][ T8531] ? lockdep_hardirqs_on+0x9c/0x150 [ 382.194984][ T8531] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 382.195001][ T8531] ? clear_bhb_loop+0x60/0xb0 [ 382.195021][ T8531] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 382.195039][ T8531] RIP: 0033:0x7fbacad8ebe9 [ 382.195056][ T8531] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 382.195072][ T8531] RSP: 002b:00007fbacbb80038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 382.195092][ T8531] RAX: ffffffffffffffda RBX: 00007fbacafb5fa0 RCX: 00007fbacad8ebe9 [ 382.195105][ T8531] RDX: 0000000000000000 RSI: 0000200000000600 RDI: 0000000000000007 [ 382.195116][ T8531] RBP: 00007fbacae11e19 R08: 0000000000000000 R09: 0000000000000000 [ 382.195127][ T8531] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 382.195137][ T8531] R13: 00007fbacafb6038 R14: 00007fbacafb5fa0 R15: 00007ffe682cdf48 [ 382.195157][ T8531] [ 383.002332][ T8531] team0: Port device dummy0 removed [ 383.010834][ T8531] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 383.875636][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 383.882062][ T1303] ieee802154 phy1 wpan1: encryption failed: -22