last executing test programs: 4m50.763840685s ago: executing program 1 (id=57): sendmsg$inet(0xffffffffffffffff, 0x0, 0x20040055) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='new default use'], 0x2a, 0x0) socket$inet(0x2, 0x1, 0x6) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) r3 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_int(r3, 0x29, 0x19, &(0x7f0000000000)=0x84, 0xfde1) openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0xc2d41, 0x0) 4m49.577155512s ago: executing program 1 (id=62): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000080)=@id={0x1e, 0x3, 0x0, {0x4e20, 0x1}}, 0x10) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf0667000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) r4 = syz_open_dev$vim2m(&(0x7f0000000680), 0x7ff, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r4, 0xc0285628, &(0x7f0000000000)={0xf0f003, 0x2}) setitimer(0x1, 0x0, 0x0) getitimer(0x1, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'bond0\x00'}) socket$nl_route(0x10, 0x3, 0x0) r5 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r6 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x8400, 0x0) ioctl$FS_IOC_SETFLAGS(r6, 0x40186f40, &(0x7f0000000440)=0x1f) r7 = syz_io_uring_setup(0x1073, &(0x7f0000000300)={0x0, 0xa902, 0x0, 0x6, 0xbfdbfdfc}, &(0x7f0000000000), &(0x7f00000001c0), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_NAPI(r7, 0x1b, 0x0, 0x1) syz_emit_vhci(&(0x7f0000001480)=ANY=[], 0x11) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000240)={0x5, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x13, &(0x7f0000000580)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @sched_cls=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r8, r5, 0x0, 0x0, 0x0, 0x0}, 0x94) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000000)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000080)=0x6, r9, 0x0, 0x0, 0x1}}, 0x20) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(0xffffffffffffffff, 0x40089413, &(0x7f0000000180)=0x5) 4m47.958322875s ago: executing program 1 (id=65): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000000)=0x200000000) write$vhost_msg_v2(r0, 0x0, 0x0) write$vhost_msg_v2(r0, &(0x7f0000000040)={0x2, 0x0, {&(0x7f0000000440)=""/173, 0xdc, 0x0, 0x2, 0x3}}, 0x48) 4m47.276859908s ago: executing program 1 (id=67): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x54, 0x0, &(0x7f0000000e00)=[@increfs, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) 4m46.954839532s ago: executing program 1 (id=68): bind$netlink(0xffffffffffffffff, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x4, 0xe4}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000140), 0x1400, 0x0) read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$kcm(0x29, 0x4, 0x0) r1 = socket(0xa, 0x3, 0x87) r2 = fsopen(0x0, 0x0) r3 = fsmount(r2, 0x1, 0x0) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), r1) sendmsg$TIPC_NL_MON_GET(r1, &(0x7f0000000500)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000440)={&(0x7f0000000300)=ANY=[@ANYBLOB="34010000", @ANYRES16=r4, @ANYBLOB="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"], 0x134}, 0x1, 0x0, 0x0, 0x20040000}, 0xc001) fchdir(r3) symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file2\x00', 0x200, 0x1) r5 = epoll_create1(0x80000) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x0, 0x10) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r6, &(0x7f00000000c0)={0xe000001a}) renameat2(r6, &(0x7f0000000480)='./file0\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) ioctl$int_in(r1, 0x5452, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) mount$tmpfs(0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x200000, 0x0) 4m45.297086405s ago: executing program 1 (id=71): mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x91c6b000) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], 0x0, 0x2, 0xba, &(0x7f0000000140)=""/186, 0x40f00, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x80002, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x800, 0x0, 0x0, 0x8a}, 0x9c) bind$inet6(r4, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r4, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x100, 0x0, 0x0, 0x0, 0x54}, 0x9c) preadv2(r1, &(0x7f0000000280)=[{&(0x7f0000000300)=""/37, 0x25}, {&(0x7f0000000100)=""/25, 0x19}], 0x2, 0xfffffffd, 0xfffffffc, 0x1e) ioctl$SG_BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000080)={0xc}) prctl$PR_SET_IO_FLUSHER(0x39, 0x1) 4m29.811842473s ago: executing program 32 (id=71): mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x91c6b000) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], 0x0, 0x2, 0xba, &(0x7f0000000140)=""/186, 0x40f00, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x80002, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x800, 0x0, 0x0, 0x8a}, 0x9c) bind$inet6(r4, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r4, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x100, 0x0, 0x0, 0x0, 0x54}, 0x9c) preadv2(r1, &(0x7f0000000280)=[{&(0x7f0000000300)=""/37, 0x25}, {&(0x7f0000000100)=""/25, 0x19}], 0x2, 0xfffffffd, 0xfffffffc, 0x1e) ioctl$SG_BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000080)={0xc}) prctl$PR_SET_IO_FLUSHER(0x39, 0x1) 3m49.918766636s ago: executing program 4 (id=178): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='new default use'], 0x2a, 0x0) socket$inet(0x2, 0x1, 0x6) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0xc2d41, 0x0) 3m47.916559811s ago: executing program 4 (id=180): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0x13, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000340)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x80811}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYRES64=r0], 0x8c}, 0x1, 0x0, 0x0, 0x40}, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_genetlink_get_family_id$smc(0x0, 0xffffffffffffffff) r3 = syz_open_dev$vim2m(0x0, 0x0, 0x2) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000a80)={0x0, 0x80000}) getpid() ioctl$SNDRV_TIMER_IOCTL_CREATE(r3, 0xc02054a5, &(0x7f0000000000)={0x89, r3, 'id1\x00'}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r5) sendmsg$NL80211_CMD_RELOAD_REGDB(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r6, 0x501, 0x70bd2d, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x20008011}, 0x40) sendmsg$NL80211_CMD_DEL_KEY(r5, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000700)=ANY=[@ANYRES16=r6, @ANYBLOB="000427bd7000fbdbdf250c00000008000300", @ANYRES32=0x0, @ANYBLOB="09000700a5b6e04ec0000000f1e6db2404000b000800090001ac0f000800000000000000ffff00"], 0x44}, 0x1, 0x0, 0x0, 0x804}, 0x24002000) ioctl$TIOCGETD(r4, 0x5424, &(0x7f00000001c0)) socket$nl_generic(0x10, 0x3, 0x10) r7 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x140, 0x0) ioctl$RTC_SET_TIME(r7, 0x4024700a, &(0x7f0000000100)={0x2b, 0x1e, 0xf, 0x2, 0x8, 0x3c0, 0x5, 0x2, 0x1}) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x880) 3m44.327972206s ago: executing program 4 (id=185): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$netlbl_unlabel(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0xe2981) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000007440), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r4, &(0x7f0000007580)={0x0, 0x0, &(0x7f0000007540)={&(0x7f0000007480)={0x44, r5, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bridge_slave_0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}]}]}, 0x44}}, 0x48040) 3m41.534259779s ago: executing program 4 (id=190): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() socket$tipc(0x1e, 0x5, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf0667000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) r3 = syz_open_dev$vim2m(&(0x7f0000000680), 0x7ff, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r3, 0xc0285628, &(0x7f0000000000)={0xf0f003, 0x2}) setitimer(0x1, 0x0, 0x0) 3m40.412572186s ago: executing program 4 (id=194): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x1, 0x7fff0000}]}) socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x5, &(0x7f00000000c0), 0x111, 0x6}}, 0x20) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) ppoll(&(0x7f0000000300)=[{r2, 0x4236}], 0x1, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x2, 0x4}}, 0x20) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 3m39.014835376s ago: executing program 4 (id=195): sendmmsg$alg(0xffffffffffffffff, &(0x7f0000001840)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000e00)=[@iv={0xa0, 0x117, 0x2, 0x85, "b82a0cb16360252088d993277287d9c3e0819c5c5944fc556f51534321d27e2e1bee83c0b2cfc9a3c9754d47dfaab086d771e5a03fa728f53df34923a87c43885a0dd5306e11116e5257fb784ac6486bf8c65afb8989d1ba4296b7d57ae4f321f6a508ad48876ae12c32c2ef395af89e8adf1f635cad418f7058def5be50fdeb77c35c3d97"}, @iv={0xd0, 0x117, 0x2, 0xbb, "1eaabd681b12740fdf95817bcbec61a682fdd66005e3083e4d8315ddc101fcc00b29901691c19d317f0b15963034125c3e7bc17b4d180a279c02d38d1079b216f488eca0bef3e1cbd99ff1b01c0196aa91b572d54167b82a18ac4a6403131885180e8f5f3b5b367a4cc6235b3f787c4a08e559af72d040fc9a5cfb9ab62d7df88b38aaf97e1e271326b30ec3ed62d400ce38381d2c18287e3c159f599c36e98867ad287b46714509b9d1496c38ac21a5d20e10913c4898a67e8c3b"}, @iv={0xc8, 0x117, 0x2, 0xae, "e67b2e3014f8166950211653d75fb4eaf8df7cd2e1bbbf7bd7d1128e58432799ba228f65dcdc06f8289763b1f31d24c0ce151942a204d147f259c45a026e38e4f5a8039635b873a5eabf307a5a5ef02b5c029e97e0b7c4cae7c25dcce97d544337e0532f78ff4f6772de7a8d1eec032856c362043231854b651d2a130e4516182d95104305e6628834a0881422aad9ee33d6908f4379cae33203ef2033f8d97c825a88414515874a63f06f653d83"}], 0x238, 0x1}], 0x1, 0x4085) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 3m23.87602281s ago: executing program 33 (id=195): sendmmsg$alg(0xffffffffffffffff, &(0x7f0000001840)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000e00)=[@iv={0xa0, 0x117, 0x2, 0x85, "b82a0cb16360252088d993277287d9c3e0819c5c5944fc556f51534321d27e2e1bee83c0b2cfc9a3c9754d47dfaab086d771e5a03fa728f53df34923a87c43885a0dd5306e11116e5257fb784ac6486bf8c65afb8989d1ba4296b7d57ae4f321f6a508ad48876ae12c32c2ef395af89e8adf1f635cad418f7058def5be50fdeb77c35c3d97"}, @iv={0xd0, 0x117, 0x2, 0xbb, "1eaabd681b12740fdf95817bcbec61a682fdd66005e3083e4d8315ddc101fcc00b29901691c19d317f0b15963034125c3e7bc17b4d180a279c02d38d1079b216f488eca0bef3e1cbd99ff1b01c0196aa91b572d54167b82a18ac4a6403131885180e8f5f3b5b367a4cc6235b3f787c4a08e559af72d040fc9a5cfb9ab62d7df88b38aaf97e1e271326b30ec3ed62d400ce38381d2c18287e3c159f599c36e98867ad287b46714509b9d1496c38ac21a5d20e10913c4898a67e8c3b"}, @iv={0xc8, 0x117, 0x2, 0xae, "e67b2e3014f8166950211653d75fb4eaf8df7cd2e1bbbf7bd7d1128e58432799ba228f65dcdc06f8289763b1f31d24c0ce151942a204d147f259c45a026e38e4f5a8039635b873a5eabf307a5a5ef02b5c029e97e0b7c4cae7c25dcce97d544337e0532f78ff4f6772de7a8d1eec032856c362043231854b651d2a130e4516182d95104305e6628834a0881422aad9ee33d6908f4379cae33203ef2033f8d97c825a88414515874a63f06f653d83"}], 0x238, 0x1}], 0x1, 0x4085) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 18.797003994s ago: executing program 0 (id=597): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000007c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes192\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000008c0), 0x0) write$tun(0xffffffffffffffff, 0x0, 0x19) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) fsopen(&(0x7f0000000180)='virtiofs\x00', 0x1) 17.606084731s ago: executing program 0 (id=598): socket$inet6(0xa, 0x80001, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) ptrace$poke(0x5, r0, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000080), 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r4, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r4, 0xc01064b5, &(0x7f0000000180)={&(0x7f0000000040)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r4, 0xc02064b6, &(0x7f0000000200)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r4, 0xc06864a2, &(0x7f0000000900)={0x0, 0x0, r6, r7, 0x3, 0x3, 0x7f, 0x8000ffd, {0xfffffffe, 0x2, 0x7, 0x9, 0x8000, 0x7, 0x5, 0x1, 0x8001, 0xd24, 0x1000, 0x600000, 0x7, 0x2, "774f1b1330d057b122d1558fb7445442c528a974ff0f0000bb3500"}}) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x20008800) bind$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000004d00)=[{{0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf00) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000000), 0x4) 14.428493983s ago: executing program 0 (id=603): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r0}, &(0x7f0000000840), &(0x7f0000000880)=r1}, 0x20) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000040)={r1, r3, 0x25, 0x2, @val=@netfilter={0x3, 0x1, 0x0, 0x1}}, 0x20) syz_emit_ethernet(0x2a, &(0x7f0000000300)=ANY=[], 0x0) 14.340408492s ago: executing program 0 (id=604): bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x101e01, 0x0) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000000)=0x7d) connect$inet(r0, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) writev(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) shutdown(r0, 0x1) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="18000000"], 0x78}, 0x1, 0x0, 0x0, 0x8000}, 0x0) recvmmsg(r5, &(0x7f0000002a40)=[{{0x0, 0x0, 0x0}, 0x9}], 0x1, 0x40002000, 0x0) recvmmsg(r5, &(0x7f0000002840)=[{{0x0, 0x0, 0x0}, 0xc}], 0x1, 0x60, 0x0) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x41, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) io_uring_setup(0x4fef, &(0x7f0000000040)={0x0, 0xa35e, 0x8000, 0x20000a, 0x35b}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000000140), 0x0, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) 12.780928737s ago: executing program 0 (id=607): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382408b0b00000109022400010000002009040000fd0301000009210000000122010009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000003c0)={0x24, 0x0, 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="002281"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x240, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x1000088}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x8081) r3 = syz_open_dev$vim2m(0x0, 0x7ff, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r3, 0xc02c564a, 0x0) writev(r2, 0x0, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, 0x0, 0x0) sendmmsg$inet6(r5, &(0x7f00000003c0)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x280020}, 0x1c, &(0x7f0000001640)=[{&(0x7f00000000c0)="d2", 0x1}], 0x1}}], 0x1, 0x8080) write$cgroup_subtree(r4, 0x0, 0xfe33) openat$ptmx(0xffffffffffffff9c, 0x0, 0x462040, 0x0) epoll_create(0x7e) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x20000000000, 0xffffffffffffffff, 0x0, 0xfffffffffffffffd, 0x1000001000, 0x46}, 0x0, &(0x7f0000000000)={0x3ff, 0x7, 0x0, 0x9, 0x0, 0xd, 0x80000002}, 0x0, 0x0) close(0x3) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0x3, &(0x7f0000000380)={r6, 0x0, 0x0}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$HIDIOCGCOLLECTIONINFO(r1, 0xc0104811, 0x0) 10.453388977s ago: executing program 2 (id=611): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000080)=@id={0x1e, 0x3, 0x0, {0x4e20, 0x1}}, 0x10) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf0667000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) r4 = syz_open_dev$vim2m(&(0x7f0000000680), 0x7ff, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r4, 0xc0285628, &(0x7f0000000000)={0xf0f003, 0x2}) setitimer(0x1, 0x0, 0x0) getitimer(0x1, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'bond0\x00'}) socket$nl_route(0x10, 0x3, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, 0x0, &(0x7f0000000080)=0x40) r5 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r6 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x8400, 0x0) ioctl$FS_IOC_SETFLAGS(r6, 0x40186f40, &(0x7f0000000440)=0x1f) r7 = syz_io_uring_setup(0x1073, &(0x7f0000000300)={0x0, 0xa902, 0x0, 0x6, 0xbfdbfdfc}, &(0x7f0000000000), 0x0, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_NAPI(r7, 0x1b, 0x0, 0x1) syz_emit_vhci(&(0x7f0000001480)=ANY=[], 0x11) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000240)={0x5, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x13, &(0x7f0000000580)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @sched_cls=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r8, r5, 0x0, 0x0, 0x0, 0x0}, 0x94) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000000)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000080)=0x6, r9, 0x0, 0x0, 0x1}}, 0x20) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(0xffffffffffffffff, 0x40089413, &(0x7f0000000180)=0x5) 6.748002929s ago: executing program 2 (id=613): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = openat$nullb(0xffffffffffffff9c, 0x0, 0x1, 0x0) ioctl$BLKSECDISCARD(r3, 0x127d, 0x0) ptrace(0x10, r2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x1) bind$inet6(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x32d, &(0x7f0000000880)={@local, @remote, @void, {@mpls_mc={0x8848, {[{0x0, 0x0, 0x1}], @ipv6=@generic={0x4, 0x6, "d3ec43", 0x2f3, 0x6, 0xff, @empty, @mcast1, {[@srh={0x1d, 0xe, 0x4, 0x7, 0x41, 0x40, 0x7f, [@mcast2, @remote, @empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @ipv4={'\x00', '\xff\xff', @remote}, @mcast2, @loopback]}, @dstopts={0x88, 0x9, '\x00', [@padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x8, {0x0, 0x0, 0x5, 0x45c}}, @ra={0x5, 0x2, 0x29c8}, @calipso={0x7, 0x30, {0x3, 0xa, 0x93, 0x6, [0x3, 0x7, 0x1, 0x9, 0x2]}}]}, @routing={0x32, 0x12, 0x2, 0x0, 0x0, [@dev={0xfe, 0x80, '\x00', 0x15}, @private1, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @local, @local, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private2, @mcast2]}, @hopopts={0x0, 0x10, '\x00', [@calipso={0x7, 0x20, {0x3, 0x6, 0x0, 0x8, [0x0, 0xeddc, 0x80]}}, @pad1, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x10001}, @jumbo={0xc2, 0x4, 0x40}, @hao={0xc9, 0x10, @remote}, @jumbo={0xc2, 0x4, 0x6}, @generic={0x7f, 0x32, "64d2d4a69f54a39f5a3cd68d3baf8fbe1ae4234c1f4142fd4ee23a15cb716c39b0982fcd6b8d04e9080d22030eda3d509a64"}]}], "0214d3b1281ca92a5ea49b4c5edb1e6c5ed1618c9da8e115f84d6817ddba0a8fcbddf7f8539b96f073c4924b8033718fcdb60350ba744d7f58dbe4a660555b916589604eb2c79d4840d915b48f3965f600d408702e5843c0aa76aae1b858ba09cd8267df709d33eaa073eb4323d290991a5fcebc321a880a946b51527d8e27b6f88911a9d1f982a786943e557637f349150c8d51ec1f2ce9113c704f3eaf739c2518c1f1847868ca8233e33b569625551119687ea0024905e3213b6d9b66c44f537d3a08843a272b5b3fba7849b6d2c0307724f3418a876941f98a88211680fcefe5460d2028c87b08b6b982921332d1d6500f8b3ff128ff0efb9b"}}}}}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x101000, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$sock_inet6_udp_SIOCOUTQ(0xffffffffffffffff, 0x894b, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x8080, 0x0) openat$6lowpan_control(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x101402, 0x0) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, 0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/bus/input/handlers\x00', 0x0, 0x0) pread64(r5, &(0x7f0000000600)=""/207, 0xcf, 0x0) ptrace$setregset(0x4205, r2, 0x1, &(0x7f0000000100)={0x0}) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x30, r1, 0x1, 0xffffff7f, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0xc, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}]}, 0x30}}, 0x0) 5.1113725s ago: executing program 2 (id=616): setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x1b, &(0x7f0000000040)=0x24, 0x4) mprotect(&(0x7f0000bdf000/0x1000)=nil, 0x1000, 0x6) futex(0x0, 0xa, 0x201, 0x0, 0x0, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) r0 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xd, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000500)={&(0x7f0000bdc000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000080)=""/58, 0x3a}, &(0x7f0000000540)=0x40) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000025300)=""/102392, 0x18ff8) prctl$PR_GET_TSC(0x43, &(0x7f0000000400)) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000007000000000000000000000000000000000000000000000000000000000000000200"/61], 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) r3 = socket$tipc(0x1e, 0x5, 0x0) poll(&(0x7f0000000140)=[{r3, 0x14}], 0x1, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b07080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf5af51d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3abe0fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4958ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945ecefa26b8471d42645288d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6eba3bd4c440e6e2172e3fcc01b8babb757b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa16509945ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd231088e570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88c3c44b3b7486f979e8a3174b531f573fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb423c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50261a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953e88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a72e1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867ec92d13a4fa4ae033a09673866cd77f4bcdaaa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d93e1fe9c0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9ea81232fbef665f6212f875b2a0000000000000000000000000000cf7b6c4ba9bec153d6834bfef080df374703a8ff56a63ec1fe5f2e05a79e3cace7283dd68d41e94420c325fe4dae144fde5ec25a87d625cab20753a77b323fa3783c8b675859b9012647885a242adfee2fe812ecbe5191e0a15142f7349e7627cc39d724e2e34e7a24154f26ae3125b36d0504965295d0453902ac7079b11a3a1e655e482331e3dc35b2e7e4e3ea99064fe5b9c8ae0ca3e5fd653f3286a99d81ce4eba765c38d097391ad4babac38ce5b4344e24a361cd54e5"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x814}, 0x0) socket$l2tp(0x2, 0x2, 0x73) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x840}, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) 3.676055877s ago: executing program 2 (id=618): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x77) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef91", 0x12) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {0x0}], 0x2, &(0x7f0000000380), 0x0, 0x4000000}], 0x1, 0x400c0) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 3.60649423s ago: executing program 3 (id=619): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r1, 0x4020aed2, &(0x7f00000000c0)={0x0, 0x201000, 0x8}) 3.549415729s ago: executing program 2 (id=620): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800002, 0xe) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) keyctl$KEYCTL_PKEY_VERIFY(0x1c, 0x0, &(0x7f0000000080)={'enc=', 'oaep', ' hash=', {'blake2s-224-generic\x00'}}, 0x0, 0x0) keyctl$KEYCTL_PKEY_QUERY(0x18, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="030000000400000004000000"], 0x48) r3 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) 2.531399429s ago: executing program 2 (id=621): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x6, 0x7, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000070000000000000002000000181100", @ANYBLOB], &(0x7f0000000140)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000480)={0x6, 0x3}, 0x8, 0x10, &(0x7f0000000500)={0x1, 0x2, 0x7}, 0x10, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000540)=[{0x4, 0x4, 0xc, 0xb}], 0x10, 0x1000}, 0x94) syz_usb_connect(0x0, 0x36, 0x0, 0x0) syz_usb_connect$midi(0x6, 0x0, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x800, 0x0) socket$packet(0x11, 0x3, 0x300) sendmsg$NL802154_CMD_SET_TX_POWER(0xffffffffffffffff, 0x0, 0x48000) socket(0x2, 0x80805, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) open$dir(&(0x7f0000000000)='./file0\x00', 0x105000, 0x53) sched_setscheduler(0x0, 0x1, &(0x7f0000000340)=0x6) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x20, 0x15, 0x301, 0x70bd28, 0x25dfdbfb, {0xc}, [@typed={0xc, 0x4, 0x0, 0x0, @str='\x00\x00\x00\x00\x00\x00\x00\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0xc000}, 0x4000000) 2.483853576s ago: executing program 3 (id=622): fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x40001e0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setgroups(0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f00000008c0)={0x2020}, 0x2020) getpid() mount(&(0x7f0000000000)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f00000000c0)='romfs\x00', 0x208010, 0x0) 2.007270487s ago: executing program 3 (id=623): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r1, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000500)={0x34, r2, 0xb97534d5fe9704cf, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x580}]}, 0x34}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) 1.611541369s ago: executing program 3 (id=624): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r0}, &(0x7f0000000840), &(0x7f0000000880)=r1}, 0x20) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000040)={r1, r3, 0x25, 0x2, @val=@netfilter={0x3, 0x1, 0x0, 0x1}}, 0x20) syz_emit_ethernet(0x2a, &(0x7f0000000300)=ANY=[], 0x0) 1.533767586s ago: executing program 0 (id=625): socket$inet6(0xa, 0x2, 0x0) setpriority(0x0, 0x0, 0x2a14b58) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() socket$packet(0x11, 0x3, 0x300) sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x301880, 0x20d) write$tun(r3, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x19) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[], 0x5c}}, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, 0x0, 0x10004000) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000006c0)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) fcntl$lock(r5, 0x24, &(0x7f0000000000)={0x0, 0x4, 0x5, 0x4001, 0xffffffffffffffff}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_DEBUG_SET(r7, 0x0, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r6) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)={0x1c, r8, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x4000054) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) 1.533423496s ago: executing program 3 (id=626): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000080)=@id={0x1e, 0x3, 0x0, {0x4e20, 0x1}}, 0x10) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf0667000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) r4 = syz_open_dev$vim2m(&(0x7f0000000680), 0x7ff, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r4, 0xc0285628, &(0x7f0000000000)={0xf0f003, 0x2}) setitimer(0x1, 0x0, 0x0) getitimer(0x1, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'bond0\x00'}) socket$nl_route(0x10, 0x3, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, 0x0, &(0x7f0000000080)=0x40) r5 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r6 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x8400, 0x0) ioctl$FS_IOC_SETFLAGS(r6, 0x40186f40, &(0x7f0000000440)=0x1f) r7 = syz_io_uring_setup(0x1073, &(0x7f0000000300)={0x0, 0xa902, 0x0, 0x6, 0xbfdbfdfc}, &(0x7f0000000000), &(0x7f00000001c0), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_NAPI(r7, 0x1b, 0x0, 0x1) syz_emit_vhci(&(0x7f0000001480)=ANY=[], 0x11) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x13, &(0x7f0000000580)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @sched_cls=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0}, 0x94) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000000)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000080)=0x6, r8, 0x0, 0x0, 0x1}}, 0x20) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(0xffffffffffffffff, 0x40089413, &(0x7f0000000180)=0x5) 0s ago: executing program 3 (id=627): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socket$igmp6(0xa, 0x3, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) ppoll(&(0x7f0000000300)=[{r1, 0x4236}], 0x1, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x8000001, &(0x7f0000000300), 0x2, 0x1}}, 0x20) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.196' (ED25519) to the list of known hosts. [ 69.432760][ T5584] cgroup: Unknown subsys name 'net' [ 69.693215][ T5584] cgroup: Unknown subsys name 'cpuset' [ 69.747966][ T5584] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 71.355333][ T1336] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.355428][ T1336] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.401969][ T5584] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 73.720087][ T5607] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 73.747050][ T5617] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 73.750699][ T5615] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 73.766109][ T5613] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 73.775450][ T5613] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 73.776846][ T5613] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 73.778734][ T5613] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 73.780807][ T5613] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 73.784736][ T5613] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 73.786147][ T5613] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 73.789733][ T5613] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 73.790637][ T5613] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 73.793948][ T4913] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 73.794349][ T4913] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 73.795780][ T5613] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 73.796421][ T5613] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 73.809517][ T5613] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 73.812956][ T5613] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 73.819771][ T59] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 73.823544][ T59] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 74.026823][ T5613] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 74.042936][ T59] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 74.045415][ T59] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 74.052731][ T59] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 74.054152][ T59] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 75.819675][ T5609] Bluetooth: hci1: command tx timeout [ 76.058560][ T59] Bluetooth: hci2: command tx timeout [ 76.058671][ T59] Bluetooth: hci0: command tx timeout [ 76.058846][ T5609] Bluetooth: hci3: command tx timeout [ 76.137917][ T5609] Bluetooth: hci4: command tx timeout [ 76.260684][ T5598] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.261728][ T5598] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.261859][ T5598] bridge_slave_0: entered allmulticast mode [ 76.263704][ T5598] bridge_slave_0: entered promiscuous mode [ 76.325865][ T5598] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.325961][ T5598] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.326438][ T5598] bridge_slave_1: entered allmulticast mode [ 76.329599][ T5598] bridge_slave_1: entered promiscuous mode [ 76.423524][ T5600] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.423652][ T5600] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.423752][ T5600] bridge_slave_0: entered allmulticast mode [ 76.425109][ T5600] bridge_slave_0: entered promiscuous mode [ 76.433074][ T5601] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.433189][ T5601] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.433336][ T5601] bridge_slave_0: entered allmulticast mode [ 76.435695][ T5601] bridge_slave_0: entered promiscuous mode [ 76.494017][ T5600] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.494084][ T5600] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.494197][ T5600] bridge_slave_1: entered allmulticast mode [ 76.497916][ T5600] bridge_slave_1: entered promiscuous mode [ 76.503632][ T5601] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.503766][ T5601] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.503929][ T5601] bridge_slave_1: entered allmulticast mode [ 76.507298][ T5601] bridge_slave_1: entered promiscuous mode [ 76.519824][ T5598] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.520603][ T5597] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.520714][ T5597] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.520912][ T5597] bridge_slave_0: entered allmulticast mode [ 76.523910][ T5597] bridge_slave_0: entered promiscuous mode [ 76.527130][ T5602] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.527242][ T5602] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.527454][ T5602] bridge_slave_0: entered allmulticast mode [ 76.533179][ T5602] bridge_slave_0: entered promiscuous mode [ 76.583759][ T5598] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.583965][ T5597] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.584359][ T5597] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.584855][ T5597] bridge_slave_1: entered allmulticast mode [ 76.587206][ T5597] bridge_slave_1: entered promiscuous mode [ 76.593003][ T5602] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.593137][ T5602] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.593299][ T5602] bridge_slave_1: entered allmulticast mode [ 76.596297][ T5602] bridge_slave_1: entered promiscuous mode [ 76.695163][ T5600] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.771466][ T5601] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.812356][ T5600] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.815155][ T5601] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.816896][ T5598] team0: Port device team_slave_0 added [ 76.840323][ T5597] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.846222][ T5602] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.877226][ T5598] team0: Port device team_slave_1 added [ 76.885058][ T5597] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.887042][ T5602] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.964664][ T5600] team0: Port device team_slave_0 added [ 76.966618][ T5601] team0: Port device team_slave_0 added [ 77.006480][ T5600] team0: Port device team_slave_1 added [ 77.009057][ T5601] team0: Port device team_slave_1 added [ 77.010230][ T5598] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.010242][ T5598] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 77.010265][ T5598] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.022516][ T5597] team0: Port device team_slave_0 added [ 77.028197][ T5602] team0: Port device team_slave_0 added [ 77.073670][ T5598] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.073680][ T5598] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 77.073694][ T5598] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.075900][ T5597] team0: Port device team_slave_1 added [ 77.077402][ T5602] team0: Port device team_slave_1 added [ 77.182391][ T5600] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.182405][ T5600] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 77.182425][ T5600] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.183724][ T5601] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.183737][ T5601] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 77.183759][ T5601] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.227735][ T5600] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.227750][ T5600] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 77.227773][ T5600] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.230095][ T5601] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.230108][ T5601] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 77.230130][ T5601] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.232929][ T5597] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.232941][ T5597] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 77.232964][ T5597] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.256553][ T5602] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.256570][ T5602] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 77.256594][ T5602] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.297282][ T5597] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.297298][ T5597] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 77.297339][ T5597] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.304625][ T5602] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.304640][ T5602] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 77.304666][ T5602] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.375199][ T5598] hsr_slave_0: entered promiscuous mode [ 77.376626][ T5598] hsr_slave_1: entered promiscuous mode [ 77.480637][ T5600] hsr_slave_0: entered promiscuous mode [ 77.481911][ T5600] hsr_slave_1: entered promiscuous mode [ 77.483816][ T5600] debugfs: 'hsr0' already exists in 'hsr' [ 77.483930][ T5600] Cannot create hsr debugfs directory [ 77.552747][ T5601] hsr_slave_0: entered promiscuous mode [ 77.554051][ T5601] hsr_slave_1: entered promiscuous mode [ 77.554916][ T5601] debugfs: 'hsr0' already exists in 'hsr' [ 77.554938][ T5601] Cannot create hsr debugfs directory [ 77.612068][ T5602] hsr_slave_0: entered promiscuous mode [ 77.612769][ T5602] hsr_slave_1: entered promiscuous mode [ 77.613351][ T5602] debugfs: 'hsr0' already exists in 'hsr' [ 77.613367][ T5602] Cannot create hsr debugfs directory [ 77.638461][ T5597] hsr_slave_0: entered promiscuous mode [ 77.640806][ T5597] hsr_slave_1: entered promiscuous mode [ 77.641699][ T5597] debugfs: 'hsr0' already exists in 'hsr' [ 77.641722][ T5597] Cannot create hsr debugfs directory [ 77.907606][ T5609] Bluetooth: hci1: command tx timeout [ 78.148824][ T5609] Bluetooth: hci3: command tx timeout [ 78.148859][ T5609] Bluetooth: hci0: command tx timeout [ 78.148879][ T5609] Bluetooth: hci2: command tx timeout [ 78.227837][ T59] Bluetooth: hci4: command tx timeout [ 78.733169][ T5598] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 78.779157][ T5598] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 78.796340][ T5598] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 78.812733][ T5598] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 78.816080][ T5598] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 78.836128][ T5598] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 78.859688][ T5598] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 78.893150][ T5598] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 79.004176][ T5601] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 79.041462][ T5601] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 79.054008][ T5601] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 79.090966][ T5601] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 79.093156][ T5601] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 79.131102][ T5601] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 79.155724][ T5601] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 79.197144][ T5601] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 79.351824][ T5597] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 79.392282][ T5597] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 79.398504][ T5597] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 79.430203][ T5597] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 79.442355][ T5597] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 79.481776][ T5597] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 79.505957][ T5597] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 79.543862][ T5597] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 79.681044][ T5602] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 79.712902][ T5602] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 79.725196][ T5602] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 79.752182][ T5602] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 79.758171][ T5602] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 79.781548][ T5602] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 79.811912][ T5602] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 79.839800][ T5602] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 79.883037][ T5598] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.977568][ T59] Bluetooth: hci1: command tx timeout [ 79.980033][ T5600] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 80.022176][ T5600] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 80.036836][ T5600] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 80.060454][ T5600] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 80.076963][ T5600] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 80.101413][ T5600] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 80.105464][ T5600] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 80.150811][ T5600] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 80.157090][ T5598] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.203724][ T1283] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.205552][ T1283] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.219029][ T5609] Bluetooth: hci0: command tx timeout [ 80.219111][ T5613] Bluetooth: hci3: command tx timeout [ 80.219174][ T59] Bluetooth: hci2: command tx timeout [ 80.265686][ T5601] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.282737][ T1283] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.282855][ T1283] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.299186][ T59] Bluetooth: hci4: command tx timeout [ 80.375990][ T5601] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.416631][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.416769][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.433616][ T5597] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.469795][ T1412] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.469989][ T1412] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.558946][ T5597] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.602955][ T5602] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.626776][ T1283] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.626896][ T1283] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.702223][ T1283] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.702312][ T1283] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.836814][ T5602] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.861444][ T5600] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.866537][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.866680][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.927025][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.927201][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.042439][ T5600] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.088356][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.088554][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.172522][ T1283] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.172612][ T1283] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.895516][ T43] cfg80211: failed to load regulatory.db [ 82.045251][ T5598] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.058954][ T59] Bluetooth: hci1: command tx timeout [ 82.297724][ T59] Bluetooth: hci2: command tx timeout [ 82.297759][ T59] Bluetooth: hci3: command tx timeout [ 82.297778][ T59] Bluetooth: hci0: command tx timeout [ 82.342936][ T5598] veth0_vlan: entered promiscuous mode [ 82.377999][ T5613] Bluetooth: hci4: command tx timeout [ 82.406104][ T5598] veth1_vlan: entered promiscuous mode [ 82.527819][ T5601] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.673963][ T5598] veth0_macvtap: entered promiscuous mode [ 82.760192][ T5598] veth1_macvtap: entered promiscuous mode [ 82.780900][ T5597] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.994709][ T5598] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.025358][ T5601] veth0_vlan: entered promiscuous mode [ 83.061376][ T5598] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.112857][ T5602] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.145063][ T1412] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.154701][ T5601] veth1_vlan: entered promiscuous mode [ 83.173108][ T1412] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.181427][ T1412] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.184171][ T1412] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.306503][ T5597] veth0_vlan: entered promiscuous mode [ 83.387858][ T5600] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.543038][ T5597] veth1_vlan: entered promiscuous mode [ 83.661317][ T5601] veth0_macvtap: entered promiscuous mode [ 83.720290][ T5601] veth1_macvtap: entered promiscuous mode [ 83.820974][ T39] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.820999][ T39] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.857652][ T5597] veth0_macvtap: entered promiscuous mode [ 83.860910][ T5601] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.920496][ T5600] veth0_vlan: entered promiscuous mode [ 83.922537][ T5597] veth1_macvtap: entered promiscuous mode [ 83.925239][ T5601] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.965554][ T56] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.965573][ T56] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.980470][ T1283] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.997730][ T1283] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.001209][ T5600] veth1_vlan: entered promiscuous mode [ 84.006137][ T1283] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.024394][ T5602] veth0_vlan: entered promiscuous mode [ 84.026058][ T1283] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.141817][ T5597] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.163787][ T5602] veth1_vlan: entered promiscuous mode [ 84.209691][ T5597] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.373154][ T39] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.397052][ T39] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.425629][ T39] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.434006][ T39] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.513442][ T5600] veth0_macvtap: entered promiscuous mode [ 84.620641][ T1283] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.620661][ T1283] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.644468][ T5600] veth1_macvtap: entered promiscuous mode [ 84.901960][ T5602] veth0_macvtap: entered promiscuous mode [ 85.042550][ T5602] veth1_macvtap: entered promiscuous mode [ 85.104142][ T66] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.104159][ T66] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.127276][ T5600] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.309632][ T5600] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.342354][ T1298] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.342372][ T1298] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.444490][ T39] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.466676][ T5602] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.466754][ T39] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.488763][ T39] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.512792][ T39] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.730949][ T5602] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.051173][ T66] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.077542][ T66] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.078787][ T1283] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.078803][ T1283] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.086842][ T66] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.347692][ T66] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.590896][ T5725] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 86.906127][ T5725] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 86.906172][ T5725] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 86.906195][ T5725] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 86.906215][ T5725] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 86.919033][ T5725] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 86.919062][ T5725] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 86.919079][ T5725] usb 4-1: Manufacturer: syz [ 87.016086][ T5725] usb 4-1: config 0 descriptor?? [ 87.198580][ T5802] syz.0.7 (5802) used greatest stack depth: 18584 bytes left [ 87.241365][ T66] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.241383][ T66] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.896636][ T5725] appleir 0003:05AC:8243.0001: unknown main item tag 0x0 [ 88.043953][ T5814] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2'. [ 88.265497][ T5725] appleir 0003:05AC:8243.0001: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.3-1/input0 [ 88.500813][ T56] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.500832][ T56] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.543019][ T9] usb 4-1: USB disconnect, device number 2 [ 91.142616][ T1283] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.142810][ T1283] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.742558][ T66] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.742579][ T66] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.445024][ T5835] faux_driver vkms: [drm] Unknown color mode 11; guessing buffer size. [ 93.700188][ T5842] fuse: Bad value for 'rootmode' [ 93.764833][ T5837] netlink: 68 bytes leftover after parsing attributes in process `syz.3.14'. [ 94.542570][ T5850] netlink: 68 bytes leftover after parsing attributes in process `syz.2.17'. [ 97.379911][ T5867] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 98.554491][ T5878] netlink: 68 bytes leftover after parsing attributes in process `syz.4.24'. [ 99.655812][ T5885] binder: BINDER_SET_CONTEXT_MGR already set [ 99.655828][ T5885] binder: 5884:5885 ioctl 4018620d 200000000040 returned -16 [ 99.692648][ T5885] binder: 5884:5885 ioctl c0306201 200000001440 returned -11 [ 102.603618][ T5900] hub 8-0:1.0: USB hub found [ 102.776588][ T5900] hub 8-0:1.0: 1 port detected [ 104.007549][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 104.011641][ T5905] syz.2.31 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 104.745475][ T5911] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 109.232504][ T5927] netlink: 8 bytes leftover after parsing attributes in process `syz.4.38'. [ 109.232870][ T5927] netlink: 'syz.4.38': attribute type 1 has an invalid length. [ 109.232888][ T5927] netlink: 4 bytes leftover after parsing attributes in process `syz.4.38'. [ 109.724442][ T5928] netlink: 8 bytes leftover after parsing attributes in process `syz.4.38'. [ 109.724487][ T5928] netlink: 'syz.4.38': attribute type 1 has an invalid length. [ 109.724515][ T5928] netlink: 4 bytes leftover after parsing attributes in process `syz.4.38'. [ 109.760402][ T5928] Zero length message leads to an empty skb [ 113.406835][ T5955] netlink: 68 bytes leftover after parsing attributes in process `syz.3.46'. [ 114.226391][ T5969] input: syz0 as /devices/virtual/input/input5 [ 114.395796][ T5979] hub 8-0:1.0: USB hub found [ 114.447347][ T5979] hub 8-0:1.0: 1 port detected [ 115.634042][ T6003] netlink: 68 bytes leftover after parsing attributes in process `syz.3.58'. [ 115.659960][ T6005] random: crng reseeded on system resumption [ 116.779409][ T6015] ubi31: attaching mtd0 [ 116.843745][ T6015] ubi31: scanning is finished [ 116.843802][ T6015] ubi31: empty MTD device detected [ 117.743707][ T6015] ubi31 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt31d", error -4 [ 118.760721][ T6032] binder: 6031:6032 ioctl 4018620d 0 returned -22 [ 121.931384][ T6051] random: crng reseeded on system resumption [ 123.556083][ T6060] netlink: 68 bytes leftover after parsing attributes in process `syz.2.75'. [ 124.613226][ T6068] binder: 6067:6068 ioctl 4018620d 0 returned -22 [ 126.149335][ T6082] input: syz0 as /devices/virtual/input/input6 [ 127.147528][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 127.332178][ T6089] random: crng reseeded on system resumption [ 127.545457][ T6091] binder: 6086:6091 ioctl c0306201 0 returned -14 [ 127.545708][ T6091] binder: 6086:6091 ioctl c0481273 200000000280 returned -22 [ 130.551599][ T6118] hub 8-0:1.0: USB hub found [ 130.559531][ T6118] hub 8-0:1.0: 1 port detected [ 131.920915][ T6125] random: crng reseeded on system resumption [ 132.791982][ T1336] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.792051][ T1336] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.297547][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 133.317537][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 133.941919][ T6133] binder: 6127:6133 ioctl c0306201 0 returned -14 [ 133.942159][ T6133] binder: 6127:6133 ioctl c0481273 200000000280 returned -22 [ 136.032880][ T6145] hub 8-0:1.0: USB hub found [ 136.034860][ T6145] hub 8-0:1.0: 1 port detected [ 136.507617][ T6159] random: crng reseeded on system resumption [ 136.827508][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 136.847512][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 136.900946][ T6164] binder: BINDER_SET_CONTEXT_MGR already set [ 136.900956][ T6164] binder: 6163:6164 ioctl 4018620d 200000004a80 returned -16 [ 136.954206][ T6165] binder: 6163:6165 ioctl c0306201 0 returned -14 [ 136.954390][ T6165] binder: 6163:6165 ioctl c0481273 200000000280 returned -22 [ 137.324283][ T59] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 137.364448][ T59] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 137.365717][ T59] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 137.385674][ T59] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 137.391095][ T59] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 139.505610][ T5613] Bluetooth: hci5: command tx timeout [ 141.067665][ T6192] hub 8-0:1.0: USB hub found [ 141.728359][ T5613] Bluetooth: hci5: command tx timeout [ 141.845881][ T6192] hub 8-0:1.0: 1 port detected [ 143.227511][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 143.277222][ T6209] binder: BINDER_SET_CONTEXT_MGR already set [ 143.277234][ T6209] binder: 6208:6209 ioctl 4018620d 200000004a80 returned -16 [ 143.349632][ T6212] binder: 6208:6212 ioctl c0306201 0 returned -14 [ 143.349818][ T6212] binder: 6208:6212 ioctl c0481273 200000000280 returned -22 [ 143.607863][ T6213] hub 8-0:1.0: USB hub found [ 143.630897][ T6213] hub 8-0:1.0: 1 port detected [ 143.817729][ T5613] Bluetooth: hci5: command tx timeout [ 143.849672][ T6217] usb usb1: usbfs: interface 0 claimed by hub while 'syz.0.120' sets config #-1 [ 144.734351][ T2853] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.123071][ T6230] netlink: 24 bytes leftover after parsing attributes in process `syz.4.125'. [ 145.887499][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 145.897850][ T5613] Bluetooth: hci5: command tx timeout [ 147.043612][ T2853] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.612881][ T6247] binder: 6242:6247 ioctl c0306201 0 returned -14 [ 147.615597][ T6247] binder: 6242:6247 ioctl c0481273 200000000280 returned -22 [ 147.792428][ T2853] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.982919][ T6250] random: crng reseeded on system resumption [ 149.247511][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 150.387481][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 150.388410][ T6259] ubi31: attaching mtd0 [ 150.390583][ T6259] ubi31: scanning is finished [ 151.153473][ T6265] hub 8-0:1.0: USB hub found [ 151.153804][ T6265] hub 8-0:1.0: 1 port detected [ 151.169090][ T6258] netlink: 68 bytes leftover after parsing attributes in process `syz.0.131'. [ 151.498167][ T2853] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.732275][ T6259] ubi31 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt31d", error -4 [ 152.323724][ T6273] ubi31: attaching mtd0 [ 152.344480][ T6273] ubi31: scanning is finished [ 153.406901][ T6280] comedi comedi3: pcl812: I/O base address or length out of range [ 154.514165][ T6282] fuse: Unknown parameter 'fd0xffffffffffffffff' [ 154.708973][ T6273] ubi31 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt31d", error -4 [ 155.096276][ T6287] netlink: 24 bytes leftover after parsing attributes in process `syz.3.138'. [ 156.034523][ T6166] bridge0: port 1(bridge_slave_0) entered blocking state [ 156.034634][ T6166] bridge0: port 1(bridge_slave_0) entered disabled state [ 156.034805][ T6166] bridge_slave_0: entered allmulticast mode [ 156.057131][ T6166] bridge_slave_0: entered promiscuous mode [ 156.113286][ T6166] bridge0: port 2(bridge_slave_1) entered blocking state [ 156.113433][ T6166] bridge0: port 2(bridge_slave_1) entered disabled state [ 156.113580][ T6166] bridge_slave_1: entered allmulticast mode [ 156.150051][ T6166] bridge_slave_1: entered promiscuous mode [ 156.423674][ T36] audit: type=1800 audit(1777735065.260:2): pid=6298 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.4.140" name="file0" dev="overlay" ino=181 res=0 errno=0 [ 156.800868][ T6166] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 156.895637][ T6303] binder: 6300:6303 ioctl c0306201 0 returned -14 [ 156.909521][ T6303] binder: 6300:6303 ioctl c0481273 200000000280 returned -22 [ 156.917222][ T6166] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 158.363051][ T2853] bridge_slave_1: left allmulticast mode [ 158.363269][ T2853] bridge_slave_1: left promiscuous mode [ 158.462800][ T2853] bridge0: port 2(bridge_slave_1) entered disabled state [ 159.921147][ T2853] bridge_slave_0: left allmulticast mode [ 159.921181][ T2853] bridge_slave_0: left promiscuous mode [ 159.921542][ T2853] bridge0: port 1(bridge_slave_0) entered disabled state [ 160.168268][ T6322] netlink: 68 bytes leftover after parsing attributes in process `syz.4.147'. [ 161.088182][ T6329] comedi comedi3: pcl812: I/O base address or length out of range [ 164.518601][ T2853] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 164.578262][ T2853] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 164.599601][ T2853] bond0 (unregistering): Released all slaves [ 164.617085][ T6346] binder: 6345:6346 ioctl c0306201 0 returned -14 [ 164.617366][ T6346] binder: 6345:6346 ioctl c0481273 200000000280 returned -22 [ 164.699940][ T6166] team0: Port device team_slave_0 added [ 164.726699][ T6166] team0: Port device team_slave_1 added [ 165.131609][ T6166] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 165.131626][ T6166] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 165.131650][ T6166] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 165.139322][ T6166] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 165.139338][ T6166] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 165.139361][ T6166] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 165.658669][ T6166] hsr_slave_0: entered promiscuous mode [ 165.662248][ T6166] hsr_slave_1: entered promiscuous mode [ 165.664288][ T6166] debugfs: 'hsr0' already exists in 'hsr' [ 165.664310][ T6166] Cannot create hsr debugfs directory [ 166.307480][ T6375] comedi comedi3: pcl812: I/O base address or length out of range [ 167.199057][ T10] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 167.880539][ T10] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 167.880584][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 167.880605][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 167.880624][ T10] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 167.887029][ T10] usb 1-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 167.887056][ T10] usb 1-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 167.887073][ T10] usb 1-1: Manufacturer: syz [ 167.946141][ T10] usb 1-1: config 0 descriptor?? [ 168.514241][ T6396] binder: 6391:6396 ioctl c0306201 0 returned -14 [ 168.514512][ T6396] binder: 6391:6396 ioctl c0481273 200000000280 returned -22 [ 168.516098][ T10] appleir 0003:05AC:8243.0002: unknown main item tag 0x0 [ 168.567328][ T10] appleir 0003:05AC:8243.0002: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.0-1/input0 [ 169.144968][ T6400] netlink: 68 bytes leftover after parsing attributes in process `syz.4.165'. [ 171.159231][ T5258] 8021q: adding VLAN 0 to HW filter on device eth1 [ 173.671413][ T6429] comedi comedi3: pcl812: I/O base address or length out of range [ 174.412954][ T10] usb 1-1: USB disconnect, device number 2 [ 174.455313][ T6440] binder: 6436:6440 ioctl c0306201 0 returned -14 [ 175.419861][ T6440] binder: 6436:6440 ioctl c0481273 200000000280 returned -22 [ 175.569746][ T6443] hub 8-0:1.0: USB hub found [ 175.577091][ T6443] hub 8-0:1.0: 1 port detected [ 177.233712][ T6457] random: crng reseeded on system resumption [ 179.336462][ T6458] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 180.193421][ T6475] hub 8-0:1.0: USB hub found [ 180.198565][ T6475] hub 8-0:1.0: 1 port detected [ 181.722108][ T6485] kAFS: No cell specified [ 183.848001][ T6499] comedi comedi3: pcl812: I/O base address or length out of range [ 184.378299][ T6508] binder: 6504:6508 ioctl c0306201 0 returned -14 [ 184.382590][ T6508] binder: 6504:6508 ioctl c0481273 200000000280 returned -22 [ 185.240490][ T5258] 8021q: adding VLAN 0 to HW filter on device eth2 [ 186.827579][ T5603] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 186.849214][ T2853] hsr_slave_0: left promiscuous mode [ 186.887070][ T2853] hsr_slave_1: left promiscuous mode [ 187.254654][ T5603] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 187.254950][ T5603] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 187.255032][ T5603] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 187.255117][ T5603] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 187.513757][ T2853] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 187.513785][ T5603] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 187.513807][ T5603] usb 3-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 187.513824][ T5603] usb 3-1: Manufacturer: syz [ 187.513898][ T2853] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 187.565700][ T5603] usb 3-1: config 0 descriptor?? [ 187.631837][ T2853] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 187.631894][ T2853] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 187.792700][ T5603] usbhid 3-1:0.0: can't add hid device: -71 [ 187.792942][ T5603] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 187.882939][ T5603] usb 3-1: USB disconnect, device number 2 [ 188.172826][ T2853] veth1_macvtap: left promiscuous mode [ 188.173092][ T2853] veth0_macvtap: left promiscuous mode [ 188.173410][ T2853] veth1_vlan: left promiscuous mode [ 188.173723][ T2853] veth0_vlan: left promiscuous mode [ 189.468918][ T6557] comedi comedi3: pcl812: I/O base address or length out of range [ 194.514580][ T1336] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.514649][ T1336] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.674075][ T6596] comedi comedi3: pcl812: I/O base address or length out of range [ 195.574334][ T6598] netlink: 24 bytes leftover after parsing attributes in process `syz.3.213'. [ 196.566889][ T5615] Bluetooth: hci3: command 0x0406 tx timeout [ 196.567061][ T5615] Bluetooth: hci2: command 0x0406 tx timeout [ 196.567085][ T5615] Bluetooth: hci4: command 0x0406 tx timeout [ 196.567179][ T4913] Bluetooth: hci1: command 0x0406 tx timeout [ 198.513236][ T2853] team0 (unregistering): Port device team_slave_1 removed [ 198.659638][ T2853] team0 (unregistering): Port device team_slave_0 removed [ 200.453941][ T6625] netlink: 4 bytes leftover after parsing attributes in process `syz.0.222'. [ 200.574604][ T59] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 200.611942][ T59] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 200.613547][ T59] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 200.615731][ T59] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 200.616388][ T59] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 202.080366][ T36] audit: type=1800 audit(1777735110.920:3): pid=6609 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.2.217" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0 [ 202.109810][ T6609] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 202.109835][ T6609] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 202.109849][ T6609] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 202.787525][ T5609] Bluetooth: hci0: command tx timeout [ 202.820800][ T6646] random: crng reseeded on system resumption [ 203.295620][ T59] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 203.406024][ T59] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 203.408867][ T59] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 203.410326][ T59] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 203.412395][ T59] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 205.094616][ T59] Bluetooth: hci0: command tx timeout [ 205.497600][ T59] Bluetooth: hci6: command tx timeout [ 206.102714][ T6685] netlink: 68 bytes leftover after parsing attributes in process `syz.2.232'. [ 207.120026][ T59] Bluetooth: hci0: command tx timeout [ 207.396694][ T6692] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 207.547485][ T5258] 8021q: adding VLAN 0 to HW filter on device eth3 [ 207.577672][ T59] Bluetooth: hci6: command tx timeout [ 208.223873][ T6711] random: crng reseeded on system resumption [ 209.179183][ T59] Bluetooth: hci0: command tx timeout [ 209.657541][ T59] Bluetooth: hci6: command tx timeout [ 209.774352][ T6728] input: syz1 as /devices/virtual/input/input7 [ 210.853335][ T6740] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 211.739446][ T59] Bluetooth: hci6: command tx timeout [ 212.005305][ T5258] 8021q: adding VLAN 0 to HW filter on device eth4 [ 212.670042][ T6761] ubi31: attaching mtd0 [ 212.699289][ T6761] ubi31: scanning is finished [ 213.496486][ T6765] netlink: 4 bytes leftover after parsing attributes in process `syz.2.250'. [ 213.615387][ T6761] ubi31 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt31d", error -4 [ 213.662188][ T6771] netlink: 8 bytes leftover after parsing attributes in process `syz.3.252'. [ 213.662222][ T6771] netlink: 'syz.3.252': attribute type 29 has an invalid length. [ 213.662235][ T6771] netlink: 8 bytes leftover after parsing attributes in process `syz.3.252'. [ 215.520770][ T5603] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 215.703819][ T5603] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 215.703865][ T5603] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 215.703889][ T5603] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 215.703908][ T5603] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 215.709181][ T5603] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 215.709259][ T5603] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 215.709279][ T5603] usb 4-1: Manufacturer: syz [ 215.927188][ T5603] usb 4-1: config 0 descriptor?? [ 217.603745][ T5603] usbhid 4-1:0.0: can't add hid device: -71 [ 217.603935][ T5603] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 217.822417][ T5603] usb 4-1: USB disconnect, device number 3 [ 219.163502][ T6801] syz.3.256 (6801) used greatest stack depth: 17928 bytes left [ 219.515362][ T6811] netlink: 8 bytes leftover after parsing attributes in process `syz.0.258'. [ 222.329628][ T6828] netlink: 68 bytes leftover after parsing attributes in process `syz.3.262'. [ 222.446989][ T6626] bridge0: port 1(bridge_slave_0) entered blocking state [ 222.457151][ T6626] bridge0: port 1(bridge_slave_0) entered disabled state [ 222.471779][ T6626] bridge_slave_0: entered allmulticast mode [ 222.577996][ T6626] bridge_slave_0: entered promiscuous mode [ 222.684772][ T6626] bridge0: port 2(bridge_slave_1) entered blocking state [ 222.684923][ T6626] bridge0: port 2(bridge_slave_1) entered disabled state [ 222.685468][ T6626] bridge_slave_1: entered allmulticast mode [ 222.733369][ T6626] bridge_slave_1: entered promiscuous mode [ 223.621797][ T2853] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.547827][ T6858] random: crng reseeded on system resumption [ 226.267819][ T6647] bridge0: port 1(bridge_slave_0) entered blocking state [ 226.269223][ T6647] bridge0: port 1(bridge_slave_0) entered disabled state [ 226.269493][ T6647] bridge_slave_0: entered allmulticast mode [ 226.276003][ T6647] bridge_slave_0: entered promiscuous mode [ 226.288977][ T6861] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 226.336132][ T5796] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 226.369025][ T5258] 8021q: adding VLAN 0 to HW filter on device eth5 [ 226.442335][ T6626] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 226.540694][ T5796] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 226.540744][ T5796] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 226.540781][ T5796] usb 1-1: New USB device found, idVendor=06cb, idProduct=73f4, bcdDevice= 0.00 [ 226.540799][ T5796] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 226.609531][ T5796] usb 1-1: config 0 descriptor?? [ 226.626071][ T5796] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 227.412312][ T6871] netlink: 68 bytes leftover after parsing attributes in process `syz.3.271'. [ 227.432605][ T2853] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.301160][ T895] usb 1-1: USB disconnect, device number 3 [ 228.319233][ T6647] bridge0: port 2(bridge_slave_1) entered blocking state [ 228.319348][ T6647] bridge0: port 2(bridge_slave_1) entered disabled state [ 228.319587][ T6647] bridge_slave_1: entered allmulticast mode [ 228.322069][ T6647] bridge_slave_1: entered promiscuous mode [ 228.357148][ T6626] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 228.722740][ T6888] netlink: 8 bytes leftover after parsing attributes in process `syz.3.273'. [ 229.027780][ T6893] random: crng reseeded on system resumption [ 229.933544][ T6895] input: syz1 as /devices/virtual/input/input8 [ 230.132997][ T2853] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.410264][ T6898] random: crng reseeded on system resumption [ 230.430869][ T6647] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 230.436916][ T6626] team0: Port device team_slave_0 added [ 230.641297][ T6647] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 230.662321][ T6626] team0: Port device team_slave_1 added [ 231.948224][ T6912] random: crng reseeded on system resumption [ 232.046539][ T2853] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.283984][ T6916] Bluetooth: MGMT ver 1.23 [ 232.284024][ T6916] Bluetooth: hci0: invalid length 0, exp 2 for type 7 [ 233.263287][ T6647] team0: Port device team_slave_0 added [ 233.390443][ T6626] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 233.390459][ T6626] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 233.390484][ T6626] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 233.408538][ T6647] team0: Port device team_slave_1 added [ 233.627016][ T6626] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 233.627032][ T6626] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 233.627054][ T6626] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 233.967156][ T6647] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 233.967172][ T6647] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 233.967195][ T6647] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 234.171820][ T6647] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 234.171837][ T6647] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 234.171862][ T6647] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 234.317377][ T6931] netlink: 8 bytes leftover after parsing attributes in process `syz.2.287'. [ 234.422422][ T6626] hsr_slave_0: entered promiscuous mode [ 234.434422][ T6626] hsr_slave_1: entered promiscuous mode [ 234.438901][ T6626] debugfs: 'hsr0' already exists in 'hsr' [ 234.438926][ T6626] Cannot create hsr debugfs directory [ 236.269327][ T6647] hsr_slave_0: entered promiscuous mode [ 236.295979][ T6647] hsr_slave_1: entered promiscuous mode [ 236.297032][ T6647] debugfs: 'hsr0' already exists in 'hsr' [ 236.297055][ T6647] Cannot create hsr debugfs directory [ 236.709558][ T6963] random: crng reseeded on system resumption [ 237.738996][ T36] audit: type=1326 audit(1777735146.580:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6966 comm="syz.2.295" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69f658cdd9 code=0x7ffc0000 [ 237.739045][ T36] audit: type=1326 audit(1777735146.580:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6966 comm="syz.2.295" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69f658cdd9 code=0x7ffc0000 [ 237.742330][ T36] audit: type=1326 audit(1777735146.580:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6966 comm="syz.2.295" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69f658cdd9 code=0x7ffc0000 [ 237.742378][ T36] audit: type=1326 audit(1777735146.580:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6966 comm="syz.2.295" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69f658cdd9 code=0x7ffc0000 [ 237.742419][ T36] audit: type=1326 audit(1777735146.580:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6966 comm="syz.2.295" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=152 compat=0 ip=0x7f69f658cdd9 code=0x7ffc0000 [ 237.742950][ T36] audit: type=1326 audit(1777735146.580:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6966 comm="syz.2.295" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69f658cdd9 code=0x7ffc0000 [ 237.742988][ T36] audit: type=1326 audit(1777735146.580:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6966 comm="syz.2.295" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69f658cdd9 code=0x7ffc0000 [ 237.743025][ T36] audit: type=1326 audit(1777735146.580:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6966 comm="syz.2.295" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69f658cdd9 code=0x7ffc0000 [ 237.743062][ T36] audit: type=1326 audit(1777735146.580:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6966 comm="syz.2.295" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69f658cdd9 code=0x7ffc0000 [ 237.743104][ T36] audit: type=1326 audit(1777735146.580:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6966 comm="syz.2.295" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f69f658cdd9 code=0x7ffc0000 [ 238.838297][ T5258] 8021q: adding VLAN 0 to HW filter on device eth6 [ 238.958657][ T6976] input: syz1 as /devices/virtual/input/input9 [ 239.063404][ T6979] random: crng reseeded on system resumption [ 239.079503][ T2853] bridge_slave_1: left allmulticast mode [ 239.079536][ T2853] bridge_slave_1: left promiscuous mode [ 239.120607][ T2853] bridge0: port 2(bridge_slave_1) entered disabled state [ 239.199558][ T2853] bridge_slave_0: left allmulticast mode [ 239.204055][ T2853] bridge_slave_0: left promiscuous mode [ 239.204311][ T2853] bridge0: port 1(bridge_slave_0) entered disabled state [ 240.627891][ T2853] bridge_slave_1: left allmulticast mode [ 240.627924][ T2853] bridge_slave_1: left promiscuous mode [ 240.628164][ T2853] bridge0: port 2(bridge_slave_1) entered disabled state [ 240.708523][ T2853] bridge_slave_0: left allmulticast mode [ 240.708544][ T2853] bridge_slave_0: left promiscuous mode [ 240.708726][ T2853] bridge0: port 1(bridge_slave_0) entered disabled state [ 241.759471][ T2853] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 241.765435][ T6998] netlink: 8 bytes leftover after parsing attributes in process `syz.3.303'. [ 241.868064][ T2853] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 241.933396][ T2853] bond0 (unregistering): Released all slaves [ 242.658810][ T2853] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 242.718153][ T2853] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 242.759865][ T2853] bond0 (unregistering): Released all slaves [ 242.793486][ T6985] warning: `syz.2.299' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 243.281023][ T7006] random: crng reseeded on system resumption [ 244.420929][ T5724] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 244.597586][ T5724] usb 4-1: Using ep0 maxpacket: 8 [ 244.601352][ T5724] usb 4-1: config 0 has an invalid interface number: 239 but max is 0 [ 244.601392][ T5724] usb 4-1: config 0 has no interface number 0 [ 244.601436][ T5724] usb 4-1: config 0 interface 239 altsetting 0 has an endpoint descriptor with address 0x64, changing to 0x4 [ 244.601461][ T5724] usb 4-1: config 0 interface 239 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 8 [ 244.601483][ T5724] usb 4-1: config 0 interface 239 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 244.605092][ T5724] usb 4-1: New USB device found, idVendor=04da, idProduct=390d, bcdDevice=99.1a [ 244.605119][ T5724] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 244.605137][ T5724] usb 4-1: Product: syz [ 244.605151][ T5724] usb 4-1: Manufacturer: syz [ 244.605164][ T5724] usb 4-1: SerialNumber: syz [ 244.680199][ T5724] usb 4-1: config 0 descriptor?? [ 244.681038][ T7009] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 244.893896][ T7009] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 244.896739][ T7009] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 244.909763][ T5724] ath6kl: Failed to submit usb control message: -71 [ 244.909823][ T5724] ath6kl: unable to send the bmi data to the device: -71 [ 244.909837][ T5724] ath6kl: Unable to send get target info: -71 [ 244.953186][ T5724] ath6kl: Failed to init ath6kl core: -71 [ 244.993055][ T5724] ath6kl_usb 4-1:0.239: probe with driver ath6kl_usb failed with error -71 [ 245.251111][ T5724] usb 4-1: USB disconnect, device number 4 [ 248.056423][ T7047] random: crng reseeded on system resumption [ 252.887660][ T2853] hsr_slave_0: left promiscuous mode [ 252.911662][ T2853] hsr_slave_1: left promiscuous mode [ 252.913997][ T2853] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 252.948811][ T2853] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 253.087690][ T2853] hsr_slave_0: left promiscuous mode [ 253.128004][ T2853] hsr_slave_1: left promiscuous mode [ 253.131558][ T2853] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 253.131582][ T2853] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 253.173409][ T2853] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 253.173434][ T2853] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 253.262215][ T2853] veth1_macvtap: left promiscuous mode [ 253.262308][ T2853] veth0_macvtap: left promiscuous mode [ 253.262626][ T2853] veth1_vlan: left promiscuous mode [ 253.262785][ T2853] veth0_vlan: left promiscuous mode [ 253.995546][ T7079] input: syz1 as /devices/virtual/input/input10 [ 254.148271][ T2853] team0 (unregistering): Port device team_slave_1 removed [ 254.248539][ T2853] team0 (unregistering): Port device team_slave_0 removed [ 255.688454][ T1336] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.688516][ T1336] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.160376][ T2853] team0 (unregistering): Port device team_slave_1 removed [ 256.218585][ T2853] team0 (unregistering): Port device team_slave_0 removed [ 257.888875][ T10] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 258.077581][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 258.097984][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 128, changing to 11 [ 258.098016][ T10] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 258.109990][ T10] usb 4-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 258.110018][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 258.110036][ T10] usb 4-1: Product: syz [ 258.110049][ T10] usb 4-1: Manufacturer: syz [ 258.110062][ T10] usb 4-1: SerialNumber: syz [ 258.420523][ T10] usb 4-1: config 0 descriptor?? [ 258.500078][ T5609] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 258.555663][ T5609] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 258.573920][ T5609] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 258.586514][ T5609] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 258.593477][ T5609] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 258.775110][ T10] usb 4-1: USB disconnect, device number 5 [ 260.311313][ T7139] binder: 7137:7139 ioctl 4018620d 0 returned -22 [ 260.399430][ T7142] binder: 7137:7142 ioctl c0306201 0 returned -14 [ 260.419646][ T7142] binder: 7137:7142 ioctl c0481273 200000000280 returned -22 [ 260.862647][ T59] Bluetooth: hci4: command tx timeout [ 260.896928][ T6647] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 261.379324][ T7157] netlink: 32 bytes leftover after parsing attributes in process `syz.3.340'. [ 261.386342][ T6647] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 261.386741][ T7157] netlink: 48 bytes leftover after parsing attributes in process `syz.3.340'. [ 261.386762][ T7157] netlink: 48 bytes leftover after parsing attributes in process `syz.3.340'. [ 261.466569][ T6647] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 262.246913][ T6647] netdevsim netdevsim6 netdevsim1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 262.260923][ T6647] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 262.938050][ T59] Bluetooth: hci4: command tx timeout [ 264.523820][ T5609] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 264.568476][ T5609] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 264.570129][ T5609] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 264.606430][ T5609] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 264.621916][ T5609] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 264.927667][ T2853] bridge_slave_1: left allmulticast mode [ 264.927701][ T2853] bridge_slave_1: left promiscuous mode [ 264.927956][ T2853] bridge0: port 2(bridge_slave_1) entered disabled state [ 265.017495][ T59] Bluetooth: hci4: command tx timeout [ 265.038368][ T2853] bridge_slave_0: left allmulticast mode [ 265.038387][ T2853] bridge_slave_0: left promiscuous mode [ 265.038549][ T2853] bridge0: port 1(bridge_slave_0) entered disabled state [ 265.041606][ T7190] netlink: 8 bytes leftover after parsing attributes in process `syz.3.343'. [ 265.041626][ T7190] netlink: 20 bytes leftover after parsing attributes in process `syz.3.343'. [ 266.326274][ T2853] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 266.482907][ T2853] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 266.621835][ T2853] bond0 (unregistering): Released all slaves [ 266.714263][ T7211] binder: 7210:7211 ioctl 4018620d 0 returned -22 [ 266.777577][ T59] Bluetooth: hci0: command tx timeout [ 266.785599][ T7213] binder: 7210:7213 ioctl c0306201 0 returned -14 [ 266.785817][ T7213] binder: 7210:7213 ioctl c0481273 200000000280 returned -22 [ 267.147739][ T59] Bluetooth: hci4: command tx timeout [ 267.219830][ T7194] netlink: 8 bytes leftover after parsing attributes in process `syz.3.343'. [ 267.219855][ T7194] netlink: 20 bytes leftover after parsing attributes in process `syz.3.343'. [ 267.409645][ T2853] hsr_slave_0: left promiscuous mode [ 267.443365][ T2853] hsr_slave_1: left promiscuous mode [ 267.443988][ T2853] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 267.483059][ T2853] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 268.873364][ T59] Bluetooth: hci0: command tx timeout [ 270.039112][ T2853] team0 (unregistering): Port device team_slave_1 removed [ 270.099608][ T2853] team0 (unregistering): Port device team_slave_0 removed [ 270.947922][ T59] Bluetooth: hci0: command tx timeout [ 271.964367][ T7267] hub 8-0:1.0: USB hub found [ 271.977970][ T7267] hub 8-0:1.0: 1 port detected [ 272.323456][ T7275] hub 8-0:1.0: USB hub found [ 272.349912][ T7275] hub 8-0:1.0: 1 port detected [ 273.060944][ T5609] Bluetooth: hci0: command tx timeout [ 274.662665][ T7278] bond1 (unregistering): Released all slaves [ 275.990776][ T7310] 9p: Bad value for 'rfdno' [ 277.024573][ T5258] 8021q: adding VLAN 0 to HW filter on device eth9 [ 280.142719][ T7345] bond1 (unregistering): Released all slaves [ 280.703710][ T5258] 8021q: adding VLAN 0 to HW filter on device eth10 [ 281.463362][ T7117] bridge0: port 1(bridge_slave_0) entered blocking state [ 281.463847][ T7117] bridge0: port 1(bridge_slave_0) entered disabled state [ 281.464026][ T7117] bridge_slave_0: entered allmulticast mode [ 281.490379][ T7117] bridge_slave_0: entered promiscuous mode [ 281.525097][ T7117] bridge0: port 2(bridge_slave_1) entered blocking state [ 281.525240][ T7117] bridge0: port 2(bridge_slave_1) entered disabled state [ 281.525626][ T7117] bridge_slave_1: entered allmulticast mode [ 281.538684][ T7117] bridge_slave_1: entered promiscuous mode [ 281.761072][ T7388] netlink: 'syz.0.382': attribute type 3 has an invalid length. [ 282.536103][ T7400] ubi31: attaching mtd0 [ 282.540579][ T7400] ubi31: scanning is finished [ 283.870676][ T7400] ubi31 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt31d", error -4 [ 285.434460][ T7117] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 285.665547][ T7117] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 285.702488][ T36] kauditd_printk_skb: 365 callbacks suppressed [ 285.702505][ T36] audit: type=1800 audit(1777735194.450:379): pid=7407 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.2.387" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0 [ 285.705906][ T7407] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 285.705928][ T7407] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 285.705939][ T7407] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 286.088936][ T7117] team0: Port device team_slave_0 added [ 286.089136][ T7171] bridge0: port 1(bridge_slave_0) entered blocking state [ 286.089258][ T7171] bridge0: port 1(bridge_slave_0) entered disabled state [ 286.089427][ T7171] bridge_slave_0: entered allmulticast mode [ 286.093075][ T7171] bridge_slave_0: entered promiscuous mode [ 286.138696][ T7117] team0: Port device team_slave_1 added [ 286.167177][ T7171] bridge0: port 2(bridge_slave_1) entered blocking state [ 286.167305][ T7171] bridge0: port 2(bridge_slave_1) entered disabled state [ 286.167666][ T7171] bridge_slave_1: entered allmulticast mode [ 286.170246][ T7171] bridge_slave_1: entered promiscuous mode [ 286.285507][ T7117] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 286.285524][ T7117] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 286.285548][ T7117] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 286.362407][ T7171] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 286.366434][ T7117] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 286.366447][ T7117] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 286.366471][ T7117] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 286.382687][ T7171] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 286.896613][ T7171] team0: Port device team_slave_0 added [ 287.520387][ T7171] team0: Port device team_slave_1 added [ 287.789914][ T7117] hsr_slave_0: entered promiscuous mode [ 288.019439][ T7460] netlink: 32 bytes leftover after parsing attributes in process `syz.2.397'. [ 288.046686][ T7117] hsr_slave_1: entered promiscuous mode [ 288.054832][ T7117] debugfs: 'hsr0' already exists in 'hsr' [ 288.056417][ T7117] Cannot create hsr debugfs directory [ 288.058567][ T7460] netlink: 48 bytes leftover after parsing attributes in process `syz.2.397'. [ 288.058656][ T7460] netlink: 48 bytes leftover after parsing attributes in process `syz.2.397'. [ 288.860583][ T5796] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 288.934057][ T5258] 8021q: adding VLAN 0 to HW filter on device eth11 [ 289.042123][ T7171] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 289.042139][ T7171] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 289.042163][ T7171] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 289.071046][ T7171] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 289.071063][ T7171] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 289.071087][ T7171] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 289.288206][ T5796] usb 4-1: Using ep0 maxpacket: 8 [ 290.694019][ T5796] usb 4-1: config 0 has an invalid interface number: 239 but max is 0 [ 290.694047][ T5796] usb 4-1: config 0 has no interface number 0 [ 290.694112][ T5796] usb 4-1: config 0 interface 239 altsetting 0 has an endpoint descriptor with address 0x64, changing to 0x4 [ 290.694135][ T5796] usb 4-1: config 0 interface 239 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 8 [ 290.694158][ T5796] usb 4-1: config 0 interface 239 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 290.697195][ T5796] usb 4-1: New USB device found, idVendor=04da, idProduct=390d, bcdDevice=99.1a [ 290.697221][ T5796] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 290.697239][ T5796] usb 4-1: Product: syz [ 290.697252][ T5796] usb 4-1: Manufacturer: syz [ 290.697266][ T5796] usb 4-1: SerialNumber: syz [ 290.948764][ T7474] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 290.988070][ T7474] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 291.042763][ T5796] usb 4-1: config 0 descriptor?? [ 291.065740][ T7456] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 292.151926][ T7482] input: syz1 as /devices/virtual/input/input14 [ 292.225791][ T7171] hsr_slave_0: entered promiscuous mode [ 292.227939][ T7171] hsr_slave_1: entered promiscuous mode [ 292.233114][ T7171] debugfs: 'hsr0' already exists in 'hsr' [ 292.233136][ T7171] Cannot create hsr debugfs directory [ 292.587551][ T5796] ath6kl: Failed to submit usb control message: -71 [ 292.587603][ T5796] ath6kl: unable to send the bmi data to the device: -71 [ 292.587616][ T5796] ath6kl: Unable to send get target info: -71 [ 292.620056][ T5796] ath6kl: Failed to init ath6kl core: -71 [ 292.623693][ T5796] ath6kl_usb 4-1:0.239: probe with driver ath6kl_usb failed with error -71 [ 292.676337][ T5796] usb 4-1: USB disconnect, device number 6 [ 292.791651][ T2853] bridge_slave_1: left allmulticast mode [ 292.791684][ T2853] bridge_slave_1: left promiscuous mode [ 292.791950][ T2853] bridge0: port 2(bridge_slave_1) entered disabled state [ 292.942562][ T7488] input: syz1 as /devices/virtual/input/input15 [ 293.038819][ T2853] bridge_slave_0: left allmulticast mode [ 293.038852][ T2853] bridge_slave_0: left promiscuous mode [ 293.060572][ T2853] bridge0: port 1(bridge_slave_0) entered disabled state [ 293.408966][ T2853] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 293.482011][ T2853] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 293.520129][ T2853] bond0 (unregistering): Released all slaves [ 294.170208][ T2853] hsr_slave_0: left promiscuous mode [ 294.189179][ T2853] hsr_slave_1: left promiscuous mode [ 294.190300][ T2853] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 294.238018][ T2853] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 295.134683][ T7513] input: syz1 as /devices/virtual/input/input16 [ 295.431830][ T2853] team0 (unregistering): Port device team_slave_1 removed [ 295.934229][ T7526] netlink: 'syz.3.418': attribute type 3 has an invalid length. [ 295.957992][ T2853] team0 (unregistering): Port device team_slave_0 removed [ 298.050871][ T7535] binder: 7534:7535 ioctl c0306201 0 returned -14 [ 298.056393][ T7535] binder: BINDER_SET_CONTEXT_MGR already set [ 298.056401][ T7535] binder: 7534:7535 ioctl 4018620d 200000004a80 returned -16 [ 298.153056][ T7539] binder: 7534:7539 ioctl c0306201 0 returned -14 [ 298.153222][ T7539] binder: 7534:7539 ioctl c0481273 200000000280 returned -22 [ 298.605155][ T7545] bond1 (unregistering): Released all slaves [ 298.781546][ T7560] input: syz1 as /devices/virtual/input/input17 [ 300.431442][ T5258] 8021q: adding VLAN 0 to HW filter on device eth12 [ 301.081089][ T7117] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 301.175529][ T7117] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 301.247782][ T7117] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 301.257531][ T819] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 301.456609][ T7117] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 301.519020][ T819] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 301.519065][ T819] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 301.519089][ T819] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 301.519110][ T819] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 301.521150][ T819] usb 1-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 301.521176][ T819] usb 1-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 301.521195][ T819] usb 1-1: Manufacturer: syz [ 301.616434][ T819] usb 1-1: config 0 descriptor?? [ 301.970545][ T7117] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 303.155101][ T819] usbhid 1-1:0.0: can't add hid device: -71 [ 303.162213][ T819] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 303.432605][ T819] usb 1-1: USB disconnect, device number 4 [ 304.100354][ T7117] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 304.314970][ T7117] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 304.589553][ T7615] netlink: 24 bytes leftover after parsing attributes in process `syz.3.439'. [ 304.733964][ T7117] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 306.178240][ T7631] netlink: 4 bytes leftover after parsing attributes in process `syz.0.441'. [ 306.678272][ T7649] hub 8-0:1.0: USB hub found [ 306.681024][ T7649] hub 8-0:1.0: 1 port detected [ 306.694401][ T7651] netlink: 8 bytes leftover after parsing attributes in process `syz.3.446'. [ 306.694432][ T7651] netlink: 20 bytes leftover after parsing attributes in process `syz.3.446'. [ 306.760991][ T7655] netlink: 8 bytes leftover after parsing attributes in process `syz.3.446'. [ 306.761024][ T7655] netlink: 20 bytes leftover after parsing attributes in process `syz.3.446'. [ 306.911638][ T7117] 8021q: adding VLAN 0 to HW filter on device bond0 [ 307.064096][ T7117] 8021q: adding VLAN 0 to HW filter on device team0 [ 307.149517][ T1279] bridge0: port 1(bridge_slave_0) entered blocking state [ 307.150468][ T1279] bridge0: port 1(bridge_slave_0) entered forwarding state [ 307.250756][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 307.250950][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 307.632346][ T7671] netlink: 24 bytes leftover after parsing attributes in process `syz.3.451'. [ 308.746732][ T7171] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 308.875621][ T7696] netlink: 8 bytes leftover after parsing attributes in process `syz.3.456'. [ 308.875654][ T7696] netlink: 20 bytes leftover after parsing attributes in process `syz.3.456'. [ 308.918997][ T7171] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 308.924992][ T7171] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 309.023434][ T7171] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 309.024152][ T7696] netlink: 8 bytes leftover after parsing attributes in process `syz.3.456'. [ 309.036065][ T7171] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 309.209635][ T7171] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 309.220409][ T7171] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 309.371480][ T7171] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 309.584950][ T7714] netlink: 'syz.0.459': attribute type 3 has an invalid length. [ 310.132068][ T7171] 8021q: adding VLAN 0 to HW filter on device bond0 [ 310.263294][ T7732] __nla_validate_parse: 1 callbacks suppressed [ 310.263312][ T7732] netlink: 24 bytes leftover after parsing attributes in process `syz.3.464'. [ 310.542979][ T7171] 8021q: adding VLAN 0 to HW filter on device team0 [ 310.636271][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 310.636427][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 310.831100][ T89] bridge0: port 2(bridge_slave_1) entered blocking state [ 310.836068][ T89] bridge0: port 2(bridge_slave_1) entered forwarding state [ 310.880790][ T7117] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 311.512896][ T59] Bluetooth: hci1: unexpected event for opcode 0x0000 [ 311.688879][ T7746] netlink: 8 bytes leftover after parsing attributes in process `syz.0.466'. [ 311.688913][ T7746] netlink: 20 bytes leftover after parsing attributes in process `syz.0.466'. [ 311.732061][ T7746] netlink: 8 bytes leftover after parsing attributes in process `syz.0.466'. [ 311.732094][ T7746] netlink: 20 bytes leftover after parsing attributes in process `syz.0.466'. [ 312.401671][ T7754] hub 8-0:1.0: USB hub found [ 312.611381][ T7754] hub 8-0:1.0: 1 port detected [ 313.966166][ T7775] IPVS: sync thread started: state = MASTER, mcast_ifn = bridge_slave_0, syncid = 0, id = 0 [ 314.778655][ T7117] veth0_vlan: entered promiscuous mode [ 314.825429][ T7779] netlink: 24 bytes leftover after parsing attributes in process `syz.0.474'. [ 314.960647][ T7784] hub 8-0:1.0: USB hub found [ 314.968227][ T7784] hub 8-0:1.0: 1 port detected [ 315.681741][ T59] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 315.681915][ T59] Bluetooth: hci1: Injecting HCI hardware error event [ 315.683981][ T59] Bluetooth: hci1: hardware error 0x00 [ 315.956122][ T7117] veth1_vlan: entered promiscuous mode [ 316.253300][ T7117] veth0_macvtap: entered promiscuous mode [ 316.369491][ T7117] veth1_macvtap: entered promiscuous mode [ 316.490010][ T7117] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 316.534291][ T7117] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 316.597280][ T7796] hub 8-0:1.0: USB hub found [ 316.597634][ T7796] hub 8-0:1.0: 1 port detected [ 316.665437][ T1412] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 316.671399][ T1412] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 316.676715][ T1412] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 316.686906][ T1412] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 317.109322][ T1336] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.109363][ T1336] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.067752][ T59] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 318.631132][ T7806] netlink: 24 bytes leftover after parsing attributes in process `syz.2.481'. [ 318.870578][ T5609] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 318.908355][ T5609] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 318.914769][ T5609] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 318.921687][ T7171] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 318.944733][ T5609] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 318.947018][ T5609] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 320.646607][ T7824] hub 8-0:1.0: USB hub found [ 320.648810][ T7824] hub 8-0:1.0: 1 port detected [ 321.427411][ T59] Bluetooth: hci5: command tx timeout [ 323.503663][ T59] Bluetooth: hci5: command tx timeout [ 323.620646][ T7853] netlink: 24 bytes leftover after parsing attributes in process `syz.0.488'. [ 324.895019][ T7861] netlink: 24 bytes leftover after parsing attributes in process `syz.2.490'. [ 325.583175][ T5609] Bluetooth: hci5: command tx timeout [ 325.621501][ T5609] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 325.665598][ T5609] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 325.681461][ T5609] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 325.695117][ T5609] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 325.712281][ T5609] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 326.201605][ T5609] Bluetooth: hci2: unexpected event for opcode 0x005a [ 326.465063][ T7882] netlink: 24 bytes leftover after parsing attributes in process `syz.0.497'. [ 326.489295][ T66] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.630039][ T7887] ubi31: attaching mtd0 [ 326.632617][ T7887] ubi31: scanning is finished [ 326.891304][ T7887] ubi31 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt31d", error -4 [ 328.277866][ T5609] Bluetooth: hci5: command tx timeout [ 328.277930][ T5609] Bluetooth: hci4: command tx timeout [ 328.605876][ T66] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 329.544081][ T66] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 329.629802][ T7915] netlink: 24 bytes leftover after parsing attributes in process `syz.3.501'. [ 330.311550][ T59] Bluetooth: hci4: command tx timeout [ 331.195860][ T66] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 332.378463][ T59] Bluetooth: hci4: command tx timeout [ 332.391143][ T7943] ubi31: attaching mtd0 [ 332.427715][ T7943] ubi31: scanning is finished [ 333.813191][ T7943] ubi31 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt31d", error -4 [ 333.997224][ T7807] bridge0: port 1(bridge_slave_0) entered blocking state [ 334.004902][ T7807] bridge0: port 1(bridge_slave_0) entered disabled state [ 334.005131][ T7807] bridge_slave_0: entered allmulticast mode [ 334.036007][ T7954] netlink: 4 bytes leftover after parsing attributes in process `syz.0.508'. [ 334.213196][ T7807] bridge_slave_0: entered promiscuous mode [ 334.276631][ T7807] bridge0: port 2(bridge_slave_1) entered blocking state [ 334.276756][ T7807] bridge0: port 2(bridge_slave_1) entered disabled state [ 334.276990][ T7807] bridge_slave_1: entered allmulticast mode [ 334.376430][ T7807] bridge_slave_1: entered promiscuous mode [ 334.460345][ T59] Bluetooth: hci4: command tx timeout [ 335.226407][ T7807] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 336.588072][ T7807] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 338.203114][ T7988] bond1 (unregistering): Released all slaves [ 338.372860][ T7807] team0: Port device team_slave_0 added [ 338.548064][ T7807] team0: Port device team_slave_1 added [ 338.777885][ T66] bridge_slave_1: left allmulticast mode [ 338.777921][ T66] bridge_slave_1: left promiscuous mode [ 338.778170][ T66] bridge0: port 2(bridge_slave_1) entered disabled state [ 338.841535][ T66] bridge_slave_0: left allmulticast mode [ 338.841557][ T66] bridge_slave_0: left promiscuous mode [ 338.841732][ T66] bridge0: port 1(bridge_slave_0) entered disabled state [ 339.608372][ T66] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 339.688163][ T66] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 339.709448][ T66] bond0 (unregistering): Released all slaves [ 339.804127][ T8016] netlink: 12 bytes leftover after parsing attributes in process `syz.2.521'. [ 339.804387][ T8016] bridge_slave_0: default FDB implementation only supports local addresses [ 339.945843][ T7807] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 339.945858][ T7807] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 339.945881][ T7807] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 339.951250][ T7807] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 339.951264][ T7807] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 339.951288][ T7807] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 340.256500][ T8026] input: syz1 as /devices/virtual/input/input21 [ 341.005251][ T7807] hsr_slave_0: entered promiscuous mode [ 341.008843][ T7807] hsr_slave_1: entered promiscuous mode [ 341.011314][ T7807] debugfs: 'hsr0' already exists in 'hsr' [ 341.011344][ T7807] Cannot create hsr debugfs directory [ 341.179505][ T66] hsr_slave_0: left promiscuous mode [ 341.222301][ T66] hsr_slave_1: left promiscuous mode [ 341.223350][ T66] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 341.223373][ T66] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 341.268540][ T66] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 341.268565][ T66] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 341.332872][ T8047] random: crng reseeded on system resumption [ 342.565429][ T66] veth1_macvtap: left promiscuous mode [ 342.587105][ T66] veth0_macvtap: left promiscuous mode [ 342.601763][ T66] veth1_vlan: left promiscuous mode [ 342.601970][ T66] veth0_vlan: left promiscuous mode [ 342.744331][ T8054] input: syz0 as /devices/virtual/input/input22 [ 344.728009][ T66] team0 (unregistering): Port device team_slave_1 removed [ 344.769273][ T66] team0 (unregistering): Port device team_slave_0 removed [ 344.899217][ T8070] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 344.899256][ T8070] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 344.899274][ T8070] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 344.934511][ T8056] bridge_slave_0: default FDB implementation only supports local addresses [ 345.091501][ T8074] input: syz1 as /devices/virtual/input/input23 [ 345.617653][ T819] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 345.788418][ T819] usb 4-1: too many configurations: 9, using maximum allowed: 8 [ 345.790100][ T819] usb 4-1: config 0 has no interfaces? [ 345.791513][ T819] usb 4-1: config 0 has no interfaces? [ 345.792777][ T819] usb 4-1: config 0 has no interfaces? [ 345.794058][ T819] usb 4-1: config 0 has no interfaces? [ 345.804020][ T819] usb 4-1: config 0 has no interfaces? [ 345.806759][ T819] usb 4-1: config 0 has no interfaces? [ 345.810297][ T819] usb 4-1: config 0 has no interfaces? [ 345.811980][ T819] usb 4-1: config 0 has no interfaces? [ 345.901746][ T819] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 345.901774][ T819] usb 4-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 345.901792][ T819] usb 4-1: Product: syz [ 345.901804][ T819] usb 4-1: Manufacturer: syz [ 345.901817][ T819] usb 4-1: SerialNumber: syz [ 345.959744][ T819] usb 4-1: config 0 descriptor?? [ 346.326320][ T10] usb 4-1: USB disconnect, device number 7 [ 346.334878][ T7868] bridge0: port 1(bridge_slave_0) entered blocking state [ 346.334988][ T7868] bridge0: port 1(bridge_slave_0) entered disabled state [ 346.335164][ T7868] bridge_slave_0: entered allmulticast mode [ 346.705203][ T7868] bridge_slave_0: entered promiscuous mode [ 346.926777][ T7868] bridge0: port 2(bridge_slave_1) entered blocking state [ 346.926842][ T7868] bridge0: port 2(bridge_slave_1) entered disabled state [ 346.926959][ T7868] bridge_slave_1: entered allmulticast mode [ 347.104143][ T7868] bridge_slave_1: entered promiscuous mode [ 347.403418][ T7868] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 347.410139][ T7868] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 347.851036][ T7868] team0: Port device team_slave_0 added [ 347.918535][ T7868] team0: Port device team_slave_1 added [ 348.343618][ T7868] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 348.343634][ T7868] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 348.343659][ T7868] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 348.497254][ T7868] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 348.497271][ T7868] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 348.499605][ T7868] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 349.282623][ T8121] bridge_slave_0: default FDB implementation only supports local addresses [ 349.425313][ T8126] netlink: 24 bytes leftover after parsing attributes in process `syz.2.545'. [ 349.594393][ T8128] input: syz1 as /devices/virtual/input/input24 [ 352.705324][ T7868] hsr_slave_0: entered promiscuous mode [ 352.713312][ T7868] hsr_slave_1: entered promiscuous mode [ 352.773526][ T7868] debugfs: 'hsr0' already exists in 'hsr' [ 352.773553][ T7868] Cannot create hsr debugfs directory [ 355.511734][ T819] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 355.747861][ T819] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 355.747906][ T819] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 355.747930][ T819] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 355.748032][ T819] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 355.749749][ T819] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 355.749777][ T819] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 355.749795][ T819] usb 4-1: Manufacturer: syz [ 356.801971][ T819] usb 4-1: config 0 descriptor?? [ 356.891010][ T8181] netlink: 24 bytes leftover after parsing attributes in process `syz.2.560'. [ 357.195273][ T8182] bond1 (unregistering): Released all slaves [ 357.384718][ T819] appleir 0003:05AC:8243.0003: unknown main item tag 0x0 [ 357.564898][ T8192] hub 8-0:1.0: USB hub found [ 357.571982][ T8192] hub 8-0:1.0: 1 port detected [ 358.391205][ T819] appleir 0003:05AC:8243.0003: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.3-1/input0 [ 359.385581][ T10] usb 4-1: USB disconnect, device number 8 [ 359.770619][ T8198] input: syz0 as /devices/virtual/input/input25 [ 359.992615][ T8200] fido_id[8200]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 361.769453][ T7807] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 361.872023][ T7807] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 362.007608][ T66] bridge_slave_1: left allmulticast mode [ 362.007641][ T66] bridge_slave_1: left promiscuous mode [ 362.008040][ T66] bridge0: port 2(bridge_slave_1) entered disabled state [ 362.141207][ T66] bridge_slave_0: left allmulticast mode [ 362.141249][ T66] bridge_slave_0: left promiscuous mode [ 362.142102][ T66] bridge0: port 1(bridge_slave_0) entered disabled state [ 363.993558][ T8222] input: syz0 as /devices/virtual/input/input26 [ 365.331717][ T8232] random: crng reseeded on system resumption [ 365.399926][ T66] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 365.562997][ T66] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 365.581265][ T8237] binder: 8233:8237 ioctl c0306201 0 returned -14 [ 365.581555][ T8237] binder: 8233:8237 ioctl c0481273 200000000280 returned -22 [ 365.610875][ T66] bond0 (unregistering): Released all slaves [ 365.650640][ T7807] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 365.700180][ T7807] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 365.977133][ T7807] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 367.069182][ T7807] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 368.948981][ T7807] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 368.984915][ T7807] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 370.677150][ T8263] hub 8-0:1.0: USB hub found [ 370.679427][ T8263] hub 8-0:1.0: 1 port detected [ 371.694310][ T66] hsr_slave_0: left promiscuous mode [ 371.756064][ T66] hsr_slave_1: left promiscuous mode [ 371.769354][ T66] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 371.820274][ T66] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 373.987492][ T10] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 374.040697][ T8276] input: syz0 as /devices/virtual/input/input27 [ 374.140298][ T10] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 374.140339][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 374.140352][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 374.140362][ T10] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 374.142889][ T10] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 374.142917][ T10] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 374.142935][ T10] usb 4-1: Manufacturer: syz [ 374.200122][ T10] usb 4-1: config 0 descriptor?? [ 374.764515][ T10] appleir 0003:05AC:8243.0004: unknown main item tag 0x0 [ 374.795342][ T10] appleir 0003:05AC:8243.0004: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.3-1/input0 [ 375.823370][ T10] usb 4-1: USB disconnect, device number 9 [ 376.873107][ T66] team0 (unregistering): Port device team_slave_1 removed [ 376.938186][ T66] team0 (unregistering): Port device team_slave_0 removed [ 376.977490][ T5864] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 377.253108][ T5864] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 377.253147][ T5864] usb 1-1: New USB device found, idVendor=06cb, idProduct=73f4, bcdDevice= 0.00 [ 377.253159][ T5864] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 377.985015][ T5864] usb 1-1: config 0 descriptor?? [ 378.015336][ T5258] 8021q: adding VLAN 0 to HW filter on device eth6 [ 378.030032][ T5864] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 378.257154][ T8312] binder: BINDER_SET_CONTEXT_MGR already set [ 378.257164][ T8312] binder: 8311:8312 ioctl 4018620d 200000004a80 returned -16 [ 378.433515][ T8312] binder: 8311:8312 ioctl c0306201 0 returned -14 [ 378.489208][ T819] usb 1-1: USB disconnect, device number 5 [ 378.530392][ T8319] binder: 8311:8319 ioctl c0306201 0 returned -14 [ 378.530553][ T8319] binder: 8311:8319 ioctl c0481273 200000000280 returned -22 [ 378.564302][ T1336] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.564371][ T1336] ieee802154 phy1 wpan1: encryption failed: -22 [ 380.192877][ T5609] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 380.346601][ T5609] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 380.378503][ T5609] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 380.386493][ T5609] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 380.417942][ T5609] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 382.804493][ T5609] Bluetooth: hci0: command tx timeout [ 382.879482][ T8351] input: syz0 as /devices/virtual/input/input28 [ 382.907625][ T43] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 383.059718][ T43] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 383.059765][ T43] usb 3-1: New USB device found, idVendor=06cb, idProduct=73f4, bcdDevice= 0.00 [ 383.059787][ T43] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 383.143605][ T43] usb 3-1: config 0 descriptor?? [ 384.780469][ T43] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 384.838917][ T43] usb 3-1: USB disconnect, device number 3 [ 384.873498][ T5609] Bluetooth: hci0: command tx timeout [ 385.238141][ T59] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 385.289403][ T59] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 385.298298][ T59] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 385.322060][ T59] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 385.326564][ T59] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 386.937524][ T5609] Bluetooth: hci0: command tx timeout [ 387.720691][ T5609] Bluetooth: hci5: command tx timeout [ 388.500169][ T8407] netlink: 16 bytes leftover after parsing attributes in process `syz.0.598'. [ 389.017423][ T5609] Bluetooth: hci0: command tx timeout [ 389.820163][ T5609] Bluetooth: hci5: command tx timeout [ 390.344020][ T8419] ubi31: attaching mtd0 [ 390.548564][ T8419] ubi31: scanning is finished [ 391.476671][ T8419] ubi31 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt31d", error -4 [ 391.897654][ T5609] Bluetooth: hci5: command tx timeout [ 393.132142][ T8438] input: syz0 as /devices/virtual/input/input29 [ 393.430049][ T43] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 393.589701][ T43] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 393.589758][ T43] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 393.589782][ T43] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 393.589802][ T43] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 393.591608][ T43] usb 1-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 393.591635][ T43] usb 1-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 393.591653][ T43] usb 1-1: Manufacturer: syz [ 393.710676][ T43] usb 1-1: config 0 descriptor?? [ 393.977502][ T5609] Bluetooth: hci5: command tx timeout [ 394.258087][ T43] appleir 0003:05AC:8243.0005: unknown main item tag 0x0 [ 394.376814][ T43] appleir 0003:05AC:8243.0005: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.0-1/input0 [ 395.254183][ T8374] bridge0: port 1(bridge_slave_0) entered blocking state [ 395.254304][ T8374] bridge0: port 1(bridge_slave_0) entered disabled state [ 395.254531][ T8374] bridge_slave_0: entered allmulticast mode [ 395.266317][ T8374] bridge_slave_0: entered promiscuous mode [ 395.368304][ T10] usb 1-1: USB disconnect, device number 6 [ 395.476296][ T8467] fido_id[8467]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory [ 395.522576][ T8374] bridge0: port 2(bridge_slave_1) entered blocking state [ 395.522693][ T8374] bridge0: port 2(bridge_slave_1) entered disabled state [ 395.523194][ T8374] bridge_slave_1: entered allmulticast mode [ 395.526942][ T8374] bridge_slave_1: entered promiscuous mode [ 396.125864][ T8475] ubi31: attaching mtd0 [ 396.128731][ T8475] ubi31: scanning is finished [ 396.736657][ T8340] bridge0: port 1(bridge_slave_0) entered blocking state [ 396.736722][ T8340] bridge0: port 1(bridge_slave_0) entered disabled state [ 396.736908][ T8340] bridge_slave_0: entered allmulticast mode [ 396.909896][ T8340] bridge_slave_0: entered promiscuous mode [ 398.217037][ T8475] ubi31 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt31d", error -4 [ 398.822079][ T66] bridge_slave_1: left allmulticast mode [ 398.822333][ T66] bridge_slave_1: left promiscuous mode [ 398.842709][ T66] bridge0: port 2(bridge_slave_1) entered disabled state [ 399.099145][ T66] bridge_slave_0: left allmulticast mode [ 399.099203][ T66] bridge_slave_0: left promiscuous mode [ 399.119735][ T66] bridge0: port 1(bridge_slave_0) entered disabled state [ 402.348789][ T66] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 402.463395][ T8512] hub 8-0:1.0: USB hub found [ 402.468185][ T8512] hub 8-0:1.0: 1 port detected [ 403.651843][ T66] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 403.802684][ T66] bond0 (unregistering): Released all slaves [ 403.842789][ T8340] bridge0: port 2(bridge_slave_1) entered blocking state [ 403.842878][ T8340] bridge0: port 2(bridge_slave_1) entered disabled state [ 403.843078][ T8340] bridge_slave_1: entered allmulticast mode [ 403.845708][ T8340] bridge_slave_1: entered promiscuous mode [ 403.914170][ T8374] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 404.186716][ T8374] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 404.394744][ T8340] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 404.678483][ T8340] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 404.705730][ T8374] team0: Port device team_slave_0 added [ 404.836553][ T8527] ubi31: attaching mtd0 [ 404.864783][ T8527] ubi31: scanning is finished [ 405.702877][ T8527] ubi31 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt31d", error -4 [ 405.806930][ T8374] team0: Port device team_slave_1 added [ 405.895402][ T59] ================================================================== [ 405.895417][ T59] BUG: KASAN: vmalloc-out-of-bounds in __list_del_entry_valid_or_report+0xb5/0x190 [ 405.895456][ T59] Read of size 8 at addr ffffc900136a6008 by task kworker/u9:0/59 [ 405.895472][ T59] [ 405.895498][ T59] CPU: 0 UID: 0 PID: 59 Comm: kworker/u9:0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 405.895517][ T59] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 405.895528][ T59] Workqueue: hci1 hci_rx_work [ 405.895561][ T59] Call Trace: [ 405.895568][ T59] [ 405.895575][ T59] dump_stack_lvl+0xe8/0x150 [ 405.895595][ T59] print_address_description+0x55/0x1e0 [ 405.895614][ T59] ? __list_del_entry_valid_or_report+0xb5/0x190 [ 405.895636][ T59] print_report+0x58/0x70 [ 405.895653][ T59] kasan_report+0x117/0x150 [ 405.895672][ T59] ? rt_spin_lock+0x20e/0x400 [ 405.895705][ T59] ? __list_del_entry_valid_or_report+0xb5/0x190 [ 405.895736][ T59] __list_del_entry_valid_or_report+0xb5/0x190 [ 405.895763][ T59] kcov_remote_start+0x2af/0x710 [ 405.895784][ T59] hci_rx_work+0x10f/0x1040 [ 405.895807][ T59] ? process_scheduled_works+0xa70/0x1860 [ 405.895828][ T59] process_scheduled_works+0xb5d/0x1860 [ 405.895860][ T59] ? __pfx_process_scheduled_works+0x10/0x10 [ 405.895882][ T59] ? assign_work+0x3d5/0x5e0 [ 405.895901][ T59] worker_thread+0xa53/0xfc0 [ 405.895930][ T59] kthread+0x388/0x470 [ 405.895951][ T59] ? __pfx_worker_thread+0x10/0x10 [ 405.895966][ T59] ? __pfx_kthread+0x10/0x10 [ 405.895989][ T59] ret_from_fork+0x514/0xb70 [ 405.896009][ T59] ? __pfx_ret_from_fork+0x10/0x10 [ 405.896028][ T59] ? __switch_to+0xc79/0x1410 [ 405.896054][ T59] ? __pfx_kthread+0x10/0x10 [ 405.896081][ T59] ret_from_fork_asm+0x1a/0x30 [ 405.896109][ T59] [ 405.896115][ T59] [ 405.896120][ T59] The buggy address belongs to a vmalloc virtual mapping [ 405.896136][ T59] Memory state around the buggy address: [ 405.896146][ T59] ffffc900136a5f00: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 405.896158][ T59] ffffc900136a5f80: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 405.896170][ T59] >ffffc900136a6000: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 405.896179][ T59] ^ [ 405.896188][ T59] ffffc900136a6080: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 405.896200][ T59] ffffc900136a6100: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 405.896209][ T59] ================================================================== [ 405.896284][ T59] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 405.896298][ T59] CPU: 0 UID: 0 PID: 59 Comm: kworker/u9:0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 405.896319][ T59] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 405.896331][ T59] Workqueue: hci1 hci_rx_work [ 405.896351][ T59] Call Trace: [ 405.896358][ T59] [ 405.896365][ T59] vpanic+0x56c/0xa60 [ 405.896389][ T59] ? __pfx_vpanic+0x10/0x10 [ 405.896416][ T59] panic+0xc5/0xd0 [ 405.896437][ T59] ? __pfx_panic+0x10/0x10 [ 405.896459][ T59] ? preempt_schedule_thunk+0x16/0x30 [ 405.896488][ T59] ? __list_del_entry_valid_or_report+0xb5/0x190 [ 405.896516][ T59] ? preempt_schedule_thunk+0x16/0x30 [ 405.896546][ T59] ? __list_del_entry_valid_or_report+0xb5/0x190 [ 405.896573][ T59] check_panic_on_warn+0x89/0xb0 [ 405.896600][ T59] ? __list_del_entry_valid_or_report+0xb5/0x190 [ 405.896627][ T59] end_report+0x73/0x170 [ 405.896647][ T59] ? __list_del_entry_valid_or_report+0xb5/0x190 [ 405.896674][ T59] kasan_report+0x128/0x150 [ 405.896701][ T59] ? rt_spin_lock+0x20e/0x400 [ 405.896725][ T59] ? __list_del_entry_valid_or_report+0xb5/0x190 [ 405.896753][ T59] __list_del_entry_valid_or_report+0xb5/0x190 [ 405.896780][ T59] kcov_remote_start+0x2af/0x710 [ 405.896799][ T59] hci_rx_work+0x10f/0x1040 [ 405.896820][ T59] ? process_scheduled_works+0xa70/0x1860 [ 405.896841][ T59] process_scheduled_works+0xb5d/0x1860 [ 405.896874][ T59] ? __pfx_process_scheduled_works+0x10/0x10 [ 405.896896][ T59] ? assign_work+0x3d5/0x5e0 [ 405.896916][ T59] worker_thread+0xa53/0xfc0 [ 405.896946][ T59] kthread+0x388/0x470 [ 405.896970][ T59] ? __pfx_worker_thread+0x10/0x10 [ 405.896989][ T59] ? __pfx_kthread+0x10/0x10 [ 405.897013][ T59] ret_from_fork+0x514/0xb70 [ 405.897034][ T59] ? __pfx_ret_from_fork+0x10/0x10 [ 405.897054][ T59] ? __switch_to+0xc79/0x1410 [ 405.897083][ T59] ? __pfx_kthread+0x10/0x10 [ 405.897107][ T59] ret_from_fork_asm+0x1a/0x30 [ 405.897137][ T59] [ 405.897469][ T59] Kernel Offset: disabled