last executing test programs: 23.066222467s ago: executing program 1 (id=196): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@gettfilter={0x2c, 0x2e, 0x1, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xfff2, 0x3}, {0x0, 0xfff1}, {0x7, 0xffe0}}, [{0x8, 0xb, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) socket$nl_route(0x10, 0x3, 0x0) socket(0x1e, 0x1, 0x0) landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e}, 0x18, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSBRKP(r4, 0x5425, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x400, 0x43) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000080)=0x5, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x3, &(0x7f0000000000)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r5 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r5, &(0x7f0000009b80)=""/102392, 0x18ff8) iopl(0x3) r6 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010027bd7000fbdbdf25250000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008b00", @ANYRES32=0x0, @ANYBLOB="eb6036f5430d4210aff33ca510475eb1f49f27cd06d5f3695768e9200b"], 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) r9 = syz_open_dev$vbi(&(0x7f00000028c0), 0x0, 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB], 0x48) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r9, 0xc0845657, &(0x7f0000000040)={0x0, @bt={0xa00, 0x640, 0x0, 0x1, 0xd59f83, 0x7, 0x42, 0x19ef, 0x3, 0x3, 0x2800, 0x2810, 0x4002, 0xba3, 0x9, 0x0, {0x8, 0xffffffff}, 0xd3, 0x9}}) 12.976103726s ago: executing program 1 (id=221): r0 = syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r2, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x404c045}, 0x0) socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, 0x0, 0x0) getsockname$packet(r3, 0x0, &(0x7f0000000200)) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x16, 0x4, &(0x7f0000000500)=ANY=[], 0x0, 0x4, 0x0, 0x0, 0x41100, 0x7, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x10000000001, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(0xffffffffffffffff, 0xc1105511, &(0x7f0000000680)={{0x8, 0x2, 0x6, 0xc3b, '\x00', 0x8}, 0x4, 0x4, 0x10000, 0x0, 0x0, 0x3, 'syz1\x00', 0x0}) r4 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r4, &(0x7f0000002700)=""/102392, 0x18ff8) socket$kcm(0x10, 0x2, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="6000000002060103000000000000000000000004050001000700000013000300686173683a6e65742c696661636500000900020073797a30000000000500040000000000050005000a00000014000780050015000000000008001240"], 0x60}, 0x1, 0x0, 0x0, 0x8004}, 0x0) ptrace$poke(0x4, 0x0, 0x0, 0x8) r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000140), 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r6, 0xc0145401, &(0x7f0000000280)={0x1, 0x3, 0x82, 0x1, 0x100}) 9.485662193s ago: executing program 0 (id=233): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000380)={0x3c0, 0x78, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, {}, {0x0, 0x1f}, {}, {}, 0x0, 0x2, 0x0, 0x7, 0x1, 0x4, 0x8, 0x3, 0x202, 0x13d, 0x5, 0x3, 0x53, 0x202, 0x1, 0xb}) 8.869379499s ago: executing program 1 (id=236): socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r2, 0x1, 0x0, 0x25dfdbfd, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x6048800) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r3, &(0x7f0000000500)=ANY=[], 0x8) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) syz_usb_connect(0x2, 0x2d, &(0x7f0000000a00)=ANY=[@ANYBLOB="120100000c9768405e0483020b9901e402010902"], 0x0) r5 = syz_open_procfs(0x0, 0x0) writev(r5, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={r4, 0x0, 0x0}, 0x10) 8.272649577s ago: executing program 0 (id=237): syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x7, 0x20002f9}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000580), 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) r1 = socket$inet(0x2, 0x80001, 0x84) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{0x0, 0x60}], 0x1}, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='8', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845) madvise(&(0x7f0000bc0000/0x400000)=nil, 0x400000, 0x9) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 8.241977906s ago: executing program 3 (id=238): r0 = syz_usb_connect(0x5, 0x46, &(0x7f0000000780)=ANY=[@ANYBLOB="12010000e75fcc08c0070515c5b8010203010902340001000080000904ba00038e4ee2000905000000041a06010905010300021207c109050c04400006030f07059acbf5"], 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000100)={0x14, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1800001, 0x12, r1, 0x6a6db000) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r2, &(0x7f0000000000)="93", 0xf5) 8.180958883s ago: executing program 2 (id=239): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) close(0xffffffffffffffff) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x80102, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_IRQFD(r3, 0x4020ae76, &(0x7f00000001c0)={0xffffffffffffffff, 0x8, 0x1}) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f00000000c0)='veth1_to_team\x00', 0x10) sendto$inet(r4, 0x0, 0x0, 0x804, &(0x7f0000000080)={0x2, 0x4e22, @multicast1}, 0x10) setsockopt$inet_int(r4, 0x0, 0x14, &(0x7f0000000000)=0x9, 0x4) recvmmsg(r4, &(0x7f0000001d40)=[{{0x0, 0x0, 0x0}, 0x9}], 0x1, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/net\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000810}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c00018006000100bd0300000800034000000001"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 8.06256094s ago: executing program 0 (id=241): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000300), 0x2002, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000001180)=0x2000000) mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3, 0x12, r0, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r0, 0x5008, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, &(0x7f0000000040)) r1 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) ioctl$SNDRV_PCM_IOCTL_DRAIN(r1, 0x4144, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(r1, 0xc0984124, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) 7.4122422s ago: executing program 0 (id=243): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x800) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) openat$vicodec0(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x4c, 0x0, &(0x7f00000007c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000440)={@flat=@handle={0x73682a85, 0x101, 0x2}, @fda={0x66646185, 0xa, 0x0, 0x2}, @fda={0x66646185, 0x0, 0x1, 0x2c}}, &(0x7f00000002c0)={0x0, 0x18, 0x38}}, 0x400}], 0x0, 0x0, 0x0}) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000540)='./binderfs/binder0\x00', 0x800, 0x0) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r3, 0xfffffffffe) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, r4, 0xf2) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0x0) 6.993443638s ago: executing program 2 (id=244): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, &(0x7f0000000340)='syzkaller\x00'}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r1, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 6.37376875s ago: executing program 0 (id=246): r0 = syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r2, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x404c045}, 0x0) socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, 0x0, 0x0) getsockname$packet(r3, 0x0, &(0x7f0000000200)) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x16, 0x4, &(0x7f0000000500)=ANY=[], 0x0, 0x4, 0x0, 0x0, 0x41100, 0x7, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x10000000001, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(0xffffffffffffffff, 0xc1105511, &(0x7f0000000680)={{0x8, 0x2, 0x6, 0xc3b, '\x00', 0x8}, 0x4, 0x4, 0x10000, 0x0, 0x0, 0x3, 'syz1\x00', 0x0}) r4 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r4, &(0x7f0000002700)=""/102392, 0x18ff8) socket$kcm(0x10, 0x2, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="6000000002060103000000000000000000000004050001000700000013000300686173683a6e65742c696661636500000900020073797a30000000000500040000000000050005000a00000014000780050015000000000008001240"], 0x60}, 0x1, 0x0, 0x0, 0x8004}, 0x0) ptrace$poke(0x4, 0x0, 0x0, 0x8) r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000140), 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r6, 0xc0145401, &(0x7f0000000280)={0x1, 0x3, 0x82, 0x1, 0x100}) 6.284962867s ago: executing program 2 (id=247): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000780), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000c80)={0x34, r1, 0x1, 0x400a00, 0xa000000, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @initdev={0xac, 0x1e, 0x0, 0x0}}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @rand_addr=0x64010101}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x34}}, 0x0) 6.229371069s ago: executing program 2 (id=248): syz_usb_connect(0x2, 0x2d, &(0x7f0000000240)=ANY=[@ANYBLOB="120100000c9768405e0483020b9901e4020109021b000100000000090400fb0160291d00090509"], 0x0) syz_open_dev$audion(&(0x7f0000000000), 0x3, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) openat$rfkill(0xffffffffffffff9c, 0x0, 0x40900, 0x0) lsetxattr$security_capability(&(0x7f0000000000)='./cgroup/cgroup.procs\x00', 0x0, &(0x7f00000001c0)=@v3={0x3000000, [{0x5, 0x1ceb6d31}, {0x80000001, 0x81}]}, 0x18, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) r5 = socket$netlink(0x10, 0x3, 0x13) writev(r5, &(0x7f0000000100)=[{}], 0x1) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x1, 0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) close_range(r6, 0xffffffffffffffff, 0x0) r7 = socket$unix(0x1, 0x2, 0x0) r8 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r8, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001500add427323b472545b4560a117fff0b0082001b59000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee0000000000", 0x50}], 0x1) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000a00)={'xfrm0\x00', &(0x7f0000000080)=@ethtool_dump={0x40, 0x13, 0x200}}) socket$nl_generic(0x10, 0x3, 0x10) 5.46961387s ago: executing program 4 (id=250): socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000200)=0x5) r3 = socket$kcm(0x2, 0x2, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x31, &(0x7f0000000640), 0x4) 5.273617205s ago: executing program 1 (id=251): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) write$P9_RSTATu(r2, &(0x7f00000004c0)={0x232, 0x7d, 0x0, {{0x500, 0xf1, 0x0, 0x5000000, {}, 0x0, 0x0, 0x0, 0x0, 0x1f, '\x04nodev{cvfox%\xff\xff\xff\x81\x02\x00\x00\x00\x00\x001\xff\xce\xbc\x92\x00\x00\x00', 0x38, 'pJ\x86\xce\xc6\"\x00}\xfag>\xff\xeb\t\xb51\x1f[\xde\x05@\x00\x00\x00\x00\x18{\x82\x00\xb5\x00/\xa9Y_\xcb\x14\x03CT\xb9\xfd\x9e\xf1\x96\xa5\x1c\xd5\x15z\xdc\x81\x01\x00\x00\x00', 0x12, '\xcf\xb6\x00'/18, 0x55, '\xf8\xf6i\xfbqm\xcf1^\xca\xf3\x85@\x9a\xc6[\x94\bg\x8c,;\x9e\x1dR\xc3l\xde{\xa4\xa4\x00\xb4\xb0\xb4\xf1t\xa6f\xa8R\x9aE\x1b4\a\xdb\xda\xb2\x88K\xaf\x05\x00\x00\x00\x00\x00\x00\x00G\xec!\xca\xbf\xf2\x0f\x9c\x1c\xbe6\xf4\xfd\x1aL\xc2\x80\xe8\xd4\x89\xdad\x9a7\x00'}, 0x12c, 'odev-n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x11r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaa\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x9d\xba?\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xcd\xf9\x18\x85I\xb1\x12]lL\x9b\x18\xc2\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xdf$NL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12Qa\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xff\x00'/300}}, 0x232) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x106f) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='devices.list\x00', 0x275a, 0x0) kcmp$KCMP_EPOLL_TFD(r1, r1, 0x7, 0xffffffffffffffff, &(0x7f0000000280)={r5, r0, 0xfffffb6e}) r6 = socket$rds(0x15, 0x5, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r7, 0x0, 0x0) sendmsg$rds(r6, &(0x7f0000000680)={0x0, 0x0, 0x0}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 4.50819854s ago: executing program 4 (id=252): setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) ppoll(0x0, 0x0, &(0x7f0000000140), 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) r1 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r2 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000180)=[@increfs], 0x0, 0x0, 0x0}) dup3(r2, r1, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x4000) 4.425411761s ago: executing program 3 (id=253): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000300), 0x2002, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000001180)=0x2000000) mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3, 0x12, r0, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r0, 0x5008, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, &(0x7f0000000040)) r1 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) ioctl$SNDRV_PCM_IOCTL_DRAIN(r1, 0x4144, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(r1, 0xc0984124, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) 3.175930397s ago: executing program 3 (id=254): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) close(0xffffffffffffffff) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x80102, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_IRQFD(r3, 0x4020ae76, &(0x7f00000001c0)={0xffffffffffffffff, 0x8, 0x1}) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f00000000c0)='veth1_to_team\x00', 0x10) sendto$inet(r4, 0x0, 0x0, 0x804, &(0x7f0000000080)={0x2, 0x4e22, @multicast1}, 0x10) setsockopt$inet_int(r4, 0x0, 0x14, &(0x7f0000000000)=0x9, 0x4) recvmmsg(r4, &(0x7f0000001d40)=[{{0x0, 0x0, 0x0}, 0x9}], 0x1, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/net\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000810}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c00018006000100bd0300000800034000000001"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 2.897239725s ago: executing program 4 (id=255): socket$key(0xf, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r3, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r3, 0x80047437, 0xfffffffffffffffd) 2.673583804s ago: executing program 3 (id=256): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x800) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) openat$vicodec0(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x4c, 0x0, &(0x7f00000007c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000440)={@flat=@handle={0x73682a85, 0x101, 0x2}, @fda={0x66646185, 0xa, 0x0, 0x2}, @fda={0x66646185, 0x0, 0x1, 0x2c}}, &(0x7f00000002c0)={0x0, 0x18, 0x38}}, 0x400}], 0x0, 0x0, 0x0}) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000540)='./binderfs/binder0\x00', 0x800, 0x0) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r3, 0xfffffffffe) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, r4, 0xf2) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0x0) 1.948778737s ago: executing program 4 (id=257): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, &(0x7f0000000340)='syzkaller\x00'}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r1, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 1.427059821s ago: executing program 3 (id=258): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)=0x4) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000480)=0x482010) 1.352947308s ago: executing program 4 (id=259): syz_emit_ethernet(0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c20000030800450000280000000000069078ac1414bbac1414aa4e224001", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="0000fdffffff0000"], 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat(0xffffffffffffffff, 0x0, 0x440, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x351142, 0x1cd) newfstatat(0xffffffffffffff9c, &(0x7f00000004c0)='./file1\x00', 0x0, 0x6000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x89}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r0, &(0x7f000001a440)=""/102400, 0x19000) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2400c000}, 0x200048d0) socket$alg(0x26, 0x5, 0x0) pipe2$watch_queue(0x0, 0x80) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f000000bb40)="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", 0x2000, 0x0) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_netrom_SIOCADDRT(r2, 0x890b, &(0x7f0000000000)={0x1, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bpq0, 0x5, 'syz0\x00', @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0xa, 0x5, [@bcast, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @bcast, @default, @bcast]}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000580)=@newlink={0x44, 0x10, 0x200, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2040}, [@IFLA_MAP={0x24, 0xe, {0x8, 0xfffffffffffffffc, 0x0, 0xb39f, 0x2, 0x3}}]}, 0x44}}, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYRESHEX=r1], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000780), r3) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NLBL_MGMT_C_ADD(r3, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000c80)={0x34, r4, 0x1, 0x400a00, 0xa000000, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @initdev={0xac, 0x1e, 0x0, 0x0}}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @rand_addr=0x64010101}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x34}}, 0x0) socket(0x10, 0x3, 0x0) 1.258154088s ago: executing program 2 (id=260): bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32, @ANYBLOB="080000000000000000000000000000000000000094bee2e7e598fea2ad21014d1c3a2af3851e6a191fcbc10774798544f8927886f343cbbb8d43a9ce382b5df710fda8273783e73234acde", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0400"/28], 0x50) r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x10bb41) ioctl$USBDEVFS_RESET(r0, 0x8008550e) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000000)) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000002c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes)\x00'}, 0x3b) r2 = accept$alg(r1, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000480), 0x0) sendmmsg$alg(r2, &(0x7f0000000ec0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000ac0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x14}], 0x1, 0x0) recvmsg(r2, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000540)=""/33, 0x21}, {&(0x7f00000007c0)=""/137, 0x89}], 0x2}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000001a40)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, 0x0, 0x0, 0x2, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@newlink={0x54, 0x10, 0xffffffffffffffff, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x40000, 0x823}, [@IFLA_LINKINFO={0x1f, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @mcast1}]}}}, @IFLA_MASTER={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x40440e4}, 0x20040000) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000680)=@filter={'filter\x00', 0xe, 0x4, 0x370, 0xffffffff, 0x248, 0x0, 0xd0, 0xffffffff, 0xffffffff, 0x330, 0x330, 0x330, 0xffffffff, 0x4, &(0x7f0000000080), {[{{@ipv6={@loopback, @private2={0xfc, 0x2, '\x00', 0x1}, [0xff000000, 0xff000000, 0x0, 0xff], [0xff000000, 0x0, 0xffffffff, 0xff], 'lo\x00', 'dvmrp0\x00', {0xff}, {}, 0x84, 0x9, 0x4, 0x58}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x1}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0xe2, 0x28, "6c8c61c7cb55d04abaae4658fdaad4b05e818e14980e5fb6af19c6c71daf"}}}, {{@ipv6={@rand_addr=' \x01\x00', @mcast1, [0xff000000, 0xff000000, 0xff000000, 0xff], [0xffffff00, 0xffffff00, 0xff, 0xff000000], 'team_slave_1\x00', 'bond0\x00', {}, {}, 0x4, 0x40, 0x9, 0x28}, 0x0, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x2, 0x7f, {0xc}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d0) r6 = syz_init_net_socket$ax25(0x3, 0x5, 0xca) bind$ax25(r6, &(0x7f0000000100)={{0x3, @default, 0x1}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast]}, 0x48) r7 = io_uring_setup(0x669, &(0x7f00000002c0)) close_range(r7, 0xffffffffffffffff, 0x0) fcntl$setsig(r7, 0xa, 0x35) r8 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r8, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) 549.069571ms ago: executing program 3 (id=261): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/disk', 0x0, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/disk', 0x121a02, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f0000000200)={'syztnl0\x00', &(0x7f0000000180)={'tunl0\x00', 0x0, 0x7, 0x1, 0x4, 0x81, {{0xf, 0x4, 0x3, 0x37, 0x3c, 0x65, 0x0, 0xf, 0x4, 0x0, @remote, @local, {[@timestamp={0x44, 0xc, 0xee, 0x0, 0x4, [0x9, 0x10]}, @generic={0x86, 0x7, "1f19170b1d"}, @timestamp={0x44, 0x14, 0x95, 0x0, 0xc, [0x5, 0x82, 0xf, 0x40]}]}}}}}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000240)={0x1b, 0x0, 0x0, 0xfff, 0x0, r1, 0x4, '\x00', r2, 0xffffffffffffffff, 0x4, 0x0, 0x5}, 0x50) sendfile(r1, r0, &(0x7f0000002700)=0x23, 0x1c) prctl$PR_SET_THP_DISABLE(0x44, 0x200000000003) r3 = epoll_create1(0x80000) epoll_pwait(r3, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}], 0x7, 0x6, &(0x7f0000000140)={[0x5]}, 0x8) r4 = socket(0x1, 0x80802, 0x0) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r5, &(0x7f0000000100)={0xa000000d}) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f00000000c0)={0x10000001}) epoll_pwait(r5, &(0x7f0000000080)=[{}], 0x1, 0x80000000, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) close(r5) shutdown(r4, 0x0) close(r3) madvise(&(0x7f0000000000/0x2000)=nil, 0x8000000, 0x19) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 547.953735ms ago: executing program 4 (id=262): socket$kcm(0x2, 0x3, 0x106) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000200)=0x5) r3 = socket$kcm(0x2, 0x2, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x31, &(0x7f0000000640), 0x4) 219.489747ms ago: executing program 2 (id=263): socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r2, 0x1, 0x0, 0x25dfdbfd, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x6048800) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r3, &(0x7f0000000500)=ANY=[], 0x8) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) syz_usb_connect(0x2, 0x2d, &(0x7f0000000a00)=ANY=[@ANYBLOB="120100000c9768405e0483020b9901e402010902"], 0x0) r5 = syz_open_procfs(0x0, 0x0) writev(r5, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={r4, 0x0, 0x0}, 0x10) 218.680721ms ago: executing program 1 (id=273): r0 = syz_init_net_socket$ax25(0x3, 0x2, 0xcf) getsockopt$ax25_int(r0, 0x101, 0x7, &(0x7f00000004c0), 0x0) 105.333229ms ago: executing program 0 (id=264): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000300), 0x2002, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000001180)=0x2000000) mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3, 0x12, r0, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r0, 0x5008, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, &(0x7f0000000040)) r1 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) ioctl$SNDRV_PCM_IOCTL_DRAIN(r1, 0x4144, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(r1, 0xc0984124, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) 0s ago: executing program 1 (id=265): r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) write$cgroup_int(r0, 0x0, 0x0) syz_usb_connect(0x2, 0x51, &(0x7f0000000180)=ANY=[@ANYBLOB="120101024cf1c50863070210845f0102030109023f0001000000000904000005ff87e7000905880f020000000009050300000000000009050cfeffff01060209050f0000000000000905"], &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.122' (ED25519) to the list of known hosts. [ 63.612344][ T5816] cgroup: Unknown subsys name 'net' [ 63.737513][ T5816] cgroup: Unknown subsys name 'cpuset' [ 63.745787][ T5816] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 65.101492][ T5816] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 67.234359][ T5835] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 67.242294][ T5835] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 67.250781][ T5835] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 67.258562][ T5840] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 67.268311][ T5835] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 67.276465][ T5834] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 67.284477][ T5834] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 67.293520][ T5834] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 67.314485][ T5842] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 67.315438][ T5846] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 67.330023][ T5848] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 67.331031][ T5846] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 67.340304][ T5847] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 67.346825][ T5846] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 67.353870][ T5847] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 67.360001][ T5846] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 67.375686][ T5849] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 67.383372][ T5846] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 67.391274][ T5849] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 67.398731][ T5846] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 67.409362][ T5846] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 67.417085][ T51] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 67.426097][ T5846] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 67.433294][ T51] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 67.440940][ T5849] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 67.772955][ T5828] chnl_net:caif_netlink_parms(): no params data found [ 67.993232][ T5828] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.001217][ T5828] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.009009][ T5828] bridge_slave_0: entered allmulticast mode [ 68.016773][ T5828] bridge_slave_0: entered promiscuous mode [ 68.058725][ T5828] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.066121][ T5828] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.073737][ T5828] bridge_slave_1: entered allmulticast mode [ 68.081301][ T5828] bridge_slave_1: entered promiscuous mode [ 68.127461][ T5828] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.162444][ T5828] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.291774][ T5828] team0: Port device team_slave_0 added [ 68.320912][ T5828] team0: Port device team_slave_1 added [ 68.326853][ T5829] chnl_net:caif_netlink_parms(): no params data found [ 68.374836][ T5838] chnl_net:caif_netlink_parms(): no params data found [ 68.438293][ T5837] chnl_net:caif_netlink_parms(): no params data found [ 68.467388][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.474503][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 68.500659][ T5828] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.542297][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.549926][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 68.576667][ T5828] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.654685][ T5836] chnl_net:caif_netlink_parms(): no params data found [ 68.705375][ T5829] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.712636][ T5829] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.720113][ T5829] bridge_slave_0: entered allmulticast mode [ 68.727412][ T5829] bridge_slave_0: entered promiscuous mode [ 68.767794][ T5829] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.775159][ T5829] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.782333][ T5829] bridge_slave_1: entered allmulticast mode [ 68.789876][ T5829] bridge_slave_1: entered promiscuous mode [ 68.857199][ T5828] hsr_slave_0: entered promiscuous mode [ 68.863888][ T5828] hsr_slave_1: entered promiscuous mode [ 68.917254][ T5829] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.926781][ T5838] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.934312][ T5838] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.941691][ T5838] bridge_slave_0: entered allmulticast mode [ 68.949049][ T5838] bridge_slave_0: entered promiscuous mode [ 68.962327][ T5837] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.969677][ T5837] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.976962][ T5837] bridge_slave_0: entered allmulticast mode [ 68.984395][ T5837] bridge_slave_0: entered promiscuous mode [ 68.992886][ T5837] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.000436][ T5837] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.007733][ T5837] bridge_slave_1: entered allmulticast mode [ 69.015929][ T5837] bridge_slave_1: entered promiscuous mode [ 69.026394][ T5829] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.047602][ T5838] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.054824][ T5838] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.061984][ T5838] bridge_slave_1: entered allmulticast mode [ 69.069600][ T5838] bridge_slave_1: entered promiscuous mode [ 69.159427][ T5829] team0: Port device team_slave_0 added [ 69.203010][ T5837] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.215284][ T5829] team0: Port device team_slave_1 added [ 69.225845][ T5838] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.235309][ T5836] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.242568][ T5836] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.249873][ T5836] bridge_slave_0: entered allmulticast mode [ 69.257215][ T5836] bridge_slave_0: entered promiscuous mode [ 69.275330][ T5837] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.296660][ T5838] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.306758][ T5836] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.313986][ T5836] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.321357][ T5836] bridge_slave_1: entered allmulticast mode [ 69.328731][ T5836] bridge_slave_1: entered promiscuous mode [ 69.396398][ T5849] Bluetooth: hci0: command tx timeout [ 69.406173][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.413108][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 69.439878][ T5829] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.474229][ T5849] Bluetooth: hci2: command tx timeout [ 69.480399][ T5840] Bluetooth: hci1: command tx timeout [ 69.493782][ T5837] team0: Port device team_slave_0 added [ 69.502348][ T5837] team0: Port device team_slave_1 added [ 69.509343][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.516479][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 69.542449][ T5829] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.554566][ T5840] Bluetooth: hci3: command tx timeout [ 69.557743][ T5838] team0: Port device team_slave_0 added [ 69.560669][ T5849] Bluetooth: hci4: command tx timeout [ 69.570173][ T5838] team0: Port device team_slave_1 added [ 69.580981][ T5836] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.628502][ T5836] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.662358][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.669484][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 69.695422][ T5837] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.750049][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.757038][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 69.783165][ T5837] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.801037][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.808162][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 69.834229][ T5838] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.883922][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.890908][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 69.916963][ T5838] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.930302][ T5836] team0: Port device team_slave_0 added [ 69.975894][ T5836] team0: Port device team_slave_1 added [ 69.997873][ T5829] hsr_slave_0: entered promiscuous mode [ 70.006058][ T5829] hsr_slave_1: entered promiscuous mode [ 70.012453][ T5829] debugfs: 'hsr0' already exists in 'hsr' [ 70.018437][ T5829] Cannot create hsr debugfs directory [ 70.110311][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.117548][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.143949][ T5836] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.168643][ T5837] hsr_slave_0: entered promiscuous mode [ 70.175943][ T5837] hsr_slave_1: entered promiscuous mode [ 70.182304][ T5837] debugfs: 'hsr0' already exists in 'hsr' [ 70.188086][ T5837] Cannot create hsr debugfs directory [ 70.210876][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.217911][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.243845][ T5836] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.270898][ T5838] hsr_slave_0: entered promiscuous mode [ 70.277764][ T5838] hsr_slave_1: entered promiscuous mode [ 70.284399][ T5838] debugfs: 'hsr0' already exists in 'hsr' [ 70.290360][ T5838] Cannot create hsr debugfs directory [ 70.387394][ T5836] hsr_slave_0: entered promiscuous mode [ 70.394274][ T5836] hsr_slave_1: entered promiscuous mode [ 70.400769][ T5836] debugfs: 'hsr0' already exists in 'hsr' [ 70.407503][ T5836] Cannot create hsr debugfs directory [ 70.514947][ T5828] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 70.565964][ T5828] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 70.606387][ T5828] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 70.650817][ T5828] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 70.925857][ T5829] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 70.938970][ T5829] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 70.950085][ T5829] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 70.962007][ T5829] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 71.078524][ T5838] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 71.093830][ T5838] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 71.122934][ T5838] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 71.132989][ T5838] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 71.227660][ T5836] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 71.243955][ T5836] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 71.252512][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.260033][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.283515][ T5828] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.296588][ T5836] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 71.310783][ T5836] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 71.386553][ T5828] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.447067][ T5837] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 71.459660][ T5837] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 71.472983][ T1158] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.480680][ T1158] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.484229][ T5849] Bluetooth: hci0: command tx timeout [ 71.504891][ T5829] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.511748][ T5837] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 71.523471][ T5837] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 71.554251][ T1158] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.554856][ T5840] Bluetooth: hci2: command tx timeout [ 71.561622][ T1158] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.567417][ T5849] Bluetooth: hci1: command tx timeout [ 71.634915][ T5840] Bluetooth: hci3: command tx timeout [ 71.640596][ T5849] Bluetooth: hci4: command tx timeout [ 71.664008][ T5829] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.722402][ T1158] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.729548][ T1158] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.791023][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.798192][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.877041][ T5838] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.948037][ T5837] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.028968][ T5838] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.072403][ T5836] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.083295][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.090598][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.102607][ T5837] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.128676][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.135828][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.158798][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.165930][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.201478][ T5828] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.216535][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.223692][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.244690][ T5836] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.309003][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.316144][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.343510][ T79] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.350748][ T79] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.568687][ T5829] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.593750][ T5828] veth0_vlan: entered promiscuous mode [ 72.687810][ T5828] veth1_vlan: entered promiscuous mode [ 72.902995][ T5838] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.920434][ T5828] veth0_macvtap: entered promiscuous mode [ 72.932750][ T5829] veth0_vlan: entered promiscuous mode [ 72.962866][ T5828] veth1_macvtap: entered promiscuous mode [ 73.007773][ T5829] veth1_vlan: entered promiscuous mode [ 73.065060][ T5837] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.086303][ T5836] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.136449][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.145668][ T5838] veth0_vlan: entered promiscuous mode [ 73.192531][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.218150][ T5838] veth1_vlan: entered promiscuous mode [ 73.266358][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.277980][ T79] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.309277][ T79] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.319433][ T79] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.335433][ T5829] veth0_macvtap: entered promiscuous mode [ 73.390707][ T5829] veth1_macvtap: entered promiscuous mode [ 73.448251][ T5836] veth0_vlan: entered promiscuous mode [ 73.462840][ T5838] veth0_macvtap: entered promiscuous mode [ 73.503015][ T5838] veth1_macvtap: entered promiscuous mode [ 73.516311][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.554186][ T5849] Bluetooth: hci0: command tx timeout [ 73.573531][ T5836] veth1_vlan: entered promiscuous mode [ 73.590634][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.611621][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.626332][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.635291][ T5849] Bluetooth: hci1: command tx timeout [ 73.640938][ T5840] Bluetooth: hci2: command tx timeout [ 73.671688][ T79] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.681574][ T79] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.701549][ T79] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.713859][ T5837] veth0_vlan: entered promiscuous mode [ 73.724868][ T5840] Bluetooth: hci4: command tx timeout [ 73.724879][ T5849] Bluetooth: hci3: command tx timeout [ 73.738703][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.748176][ T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.756252][ T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.766769][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.813842][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.828912][ T5837] veth1_vlan: entered promiscuous mode [ 73.842898][ T5828] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 73.914390][ T5836] veth0_macvtap: entered promiscuous mode [ 73.948650][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.972697][ T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.003763][ T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.028496][ T5836] veth1_macvtap: entered promiscuous mode [ 74.057717][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.086406][ T58] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.099420][ T58] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.219873][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.239425][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.314314][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.469278][ T5837] veth0_macvtap: entered promiscuous mode [ 74.736961][ T5837] veth1_macvtap: entered promiscuous mode [ 74.764600][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.830104][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.852723][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.883707][ T36] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.898347][ T36] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.047252][ T36] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.069013][ T36] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.100875][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.299540][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 75.401905][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 75.504305][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 75.650329][ T5849] Bluetooth: hci0: command tx timeout [ 75.711986][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.721202][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.734940][ T5849] Bluetooth: hci2: command tx timeout [ 75.740489][ T5849] Bluetooth: hci1: command tx timeout [ 75.795067][ T5849] Bluetooth: hci4: command tx timeout [ 75.801018][ T5849] Bluetooth: hci3: command tx timeout [ 75.803051][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.898918][ T36] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.972537][ T36] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.004106][ T36] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.019142][ T36] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.410745][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.458863][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.620570][ T58] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.664171][ T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.770605][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.799105][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.967391][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.010813][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.109501][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 77.118100][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 77.126657][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 77.143394][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 77.484416][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 77.492947][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 77.501654][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 77.558243][ T5915] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 79.136056][ T5915] usb 1-1: Using ep0 maxpacket: 32 [ 79.174586][ T5915] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 79.193446][ T5915] usb 1-1: config 0 has no interface number 0 [ 79.222516][ T5915] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 79.261322][ T5915] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 79.284072][ T5915] usb 1-1: Product: syz [ 79.296626][ T5915] usb 1-1: Manufacturer: syz [ 79.319841][ T5915] usb 1-1: SerialNumber: syz [ 79.352874][ T5915] usb 1-1: config 0 descriptor?? [ 79.520689][ T5915] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 79.604887][ T5994] Zero length message leads to an empty skb [ 79.736133][ T5994] binder: binder_mmap: 5991 2000003d3000-2000003d7000 bad vm_flags failed -1 [ 80.062828][ T5915] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 80.093537][ T5915] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 80.682166][ C0] usb 1-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 80.684470][ T5920] usb 1-1: USB disconnect, device number 2 [ 80.831358][ T5850] udevd[5850]: setting mode of /dev/ttyUSB0 to 020660 failed: No such file or directory [ 80.847322][ T5920] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 80.882521][ T5850] udevd[5850]: setting owner of /dev/ttyUSB0 to uid=0, gid=18 failed: No such file or directory [ 80.916271][ T5920] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 80.992815][ T5920] quatech2 1-1:0.51: device disconnected [ 81.511452][ T24] cfg80211: failed to load regulatory.db [ 82.098169][ T6026] netlink: 20 bytes leftover after parsing attributes in process `syz.2.21'. [ 82.107159][ T6026] netlink: 11 bytes leftover after parsing attributes in process `syz.2.21'. [ 82.495956][ T6028] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 83.408883][ T9] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 83.830264][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 83.861541][ T9] usb 3-1: unable to get BOS descriptor or descriptor too short [ 83.899086][ T9] usb 3-1: config 10 has an invalid interface number: 7 but max is 0 [ 83.931916][ T9] usb 3-1: config 10 has no interface number 0 [ 83.958159][ T9] usb 3-1: New USB device found, idVendor=0499, idProduct=1045, bcdDevice=6f.0b [ 84.113611][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 84.668168][ T9] usb 3-1: Product: syz [ 84.673306][ T9] usb 3-1: Manufacturer: syz [ 84.719294][ T9] usb 3-1: SerialNumber: syz [ 86.016293][ T9] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 87.180837][ T6065] binder: BINDER_SET_CONTEXT_MGR already set [ 87.187208][ T6065] binder: 6062:6065 ioctl 4018620d 200000000040 returned -16 [ 87.492301][ T9] snd-usb-audio 3-1:10.7: probe with driver snd-usb-audio failed with error -2 [ 87.538188][ T9] usb 3-1: USB disconnect, device number 2 [ 87.636044][ T5850] udevd[5850]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:10.7/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 89.436250][ T6094] netlink: 60 bytes leftover after parsing attributes in process `syz.0.42'. [ 92.715281][ T6121] netlink: 20 bytes leftover after parsing attributes in process `syz.3.49'. [ 92.725203][ T6121] netlink: 11 bytes leftover after parsing attributes in process `syz.3.49'. [ 93.951957][ T6131] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 95.728182][ T6145] capability: warning: `syz.3.56' uses 32-bit capabilities (legacy support in use) [ 96.468312][ T6152] ubi31: attaching mtd0 [ 96.491646][ T6152] ubi31: scanning is finished [ 96.498552][ T6152] ubi31: empty MTD device detected [ 97.368624][ T6152] ubi31 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt31d", error -4 [ 97.714500][ T6162] netlink: 20 bytes leftover after parsing attributes in process `syz.3.64'. [ 97.723365][ T6162] netlink: 11 bytes leftover after parsing attributes in process `syz.3.64'. [ 103.548641][ T6213] netlink: 20 bytes leftover after parsing attributes in process `syz.1.77'. [ 103.558054][ T6213] netlink: 11 bytes leftover after parsing attributes in process `syz.1.77'. [ 104.854616][ T6231] netlink: 60 bytes leftover after parsing attributes in process `syz.3.82'. [ 105.614736][ T5887] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 105.838683][ T5887] usb 1-1: unable to get BOS descriptor or descriptor too short [ 105.863485][ T5887] usb 1-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 105.890073][ T5887] usb 1-1: config 4 has 0 interfaces, different from the descriptor's value: 1 [ 105.918753][ T5887] usb 1-1: New USB device found, idVendor=052b, idProduct=1803, bcdDevice=79.86 [ 105.928186][ T5887] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.938494][ T5887] usb 1-1: Product: syz [ 105.942748][ T5887] usb 1-1: Manufacturer: syz [ 105.948020][ T5887] usb 1-1: SerialNumber: syz [ 106.884890][ T5887] usb 1-1: USB disconnect, device number 3 [ 107.365575][ T6258] netlink: 20 bytes leftover after parsing attributes in process `syz.4.90'. [ 107.374653][ T6258] netlink: 11 bytes leftover after parsing attributes in process `syz.4.90'. [ 109.454600][ T6281] program syz.4.95 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 110.820569][ T6303] binder: BINDER_SET_CONTEXT_MGR already set [ 110.826937][ T6303] binder: 6300:6303 ioctl 4018620d 200000000040 returned -16 [ 111.359180][ T6307] netlink: 20 bytes leftover after parsing attributes in process `syz.3.104'. [ 111.368502][ T6307] netlink: 11 bytes leftover after parsing attributes in process `syz.3.104'. [ 114.535218][ T6344] netlink: 20 bytes leftover after parsing attributes in process `syz.1.116'. [ 114.544646][ T6344] netlink: 11 bytes leftover after parsing attributes in process `syz.1.116'. [ 115.191724][ T6352] netlink: 'syz.3.122': attribute type 1 has an invalid length. [ 115.216161][ T6352] netlink: 244 bytes leftover after parsing attributes in process `syz.3.122'. [ 115.914163][ T9] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 116.375834][ T6360] netlink: 'syz.0.119': attribute type 1 has an invalid length. [ 116.496103][ T9] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 116.518285][ T9] usb 3-1: config 0 has no interface number 0 [ 116.556207][ T9] usb 3-1: config 0 interface 1 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 116.639582][ T9] usb 3-1: config 0 interface 1 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 116.759168][ T9] usb 3-1: config 0 interface 1 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 116.775179][ T9] usb 3-1: config 0 interface 1 has no altsetting 0 [ 116.783809][ T9] usb 3-1: New USB device found, idVendor=145f, idProduct=0212, bcdDevice= 0.00 [ 116.795160][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.876314][ T6372] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 116.891910][ T6372] netlink: 'syz.1.124': attribute type 12 has an invalid length. [ 116.899782][ T6372] netlink: 'syz.1.124': attribute type 29 has an invalid length. [ 116.907599][ T6372] netlink: 'syz.1.124': attribute type 2 has an invalid length. [ 116.915389][ T6372] netlink: 136 bytes leftover after parsing attributes in process `syz.1.124'. [ 116.936387][ T6372] Bluetooth: MGMT ver 1.23 [ 116.941490][ T6372] Bluetooth: hci0: service_discovery: expected 4 bytes, got 7 bytes [ 117.302657][ T9] usb 3-1: config 0 descriptor?? [ 118.364863][ T6379] mmap: syz.1.138 (6379) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 118.763719][ T9] uclogic 0003:145F:0212.0001: pen parameters not found [ 119.123020][ T9] uclogic 0003:145F:0212.0001: interface is invalid, ignoring [ 120.075057][ T5894] usb 3-1: USB disconnect, device number 3 [ 120.182463][ T6391] netlink: 20 bytes leftover after parsing attributes in process `syz.3.130'. [ 120.191501][ T6391] netlink: 11 bytes leftover after parsing attributes in process `syz.3.130'. [ 122.373938][ T6427] netlink: 20 bytes leftover after parsing attributes in process `syz.1.144'. [ 122.383208][ T6427] netlink: 11 bytes leftover after parsing attributes in process `syz.1.144'. [ 123.544326][ T9] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 124.385331][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 124.395860][ T9] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 124.406083][ T9] usb 1-1: config 0 has no interface number 0 [ 124.769358][ T9] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 124.790825][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.810233][ T9] usb 1-1: Product: syz [ 124.815491][ T9] usb 1-1: Manufacturer: syz [ 124.820186][ T9] usb 1-1: SerialNumber: syz [ 124.854538][ T9] usb 1-1: config 0 descriptor?? [ 124.888701][ T9] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 125.153825][ T9] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 125.174236][ T5915] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 125.254677][ T9] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 125.368620][ T5915] usb 5-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 125.391374][ T5915] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.432617][ T5915] usb 5-1: config 0 descriptor?? [ 125.550380][ C0] usb 1-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 125.559684][ T9] usb 1-1: USB disconnect, device number 4 [ 125.616066][ T9] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 125.803937][ T9] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 126.176202][ T9] quatech2 1-1:0.51: device disconnected [ 128.635775][ T5915] usb 5-1: Cannot set autoneg [ 128.643542][ T5915] MOSCHIP usb-ethernet driver 5-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -61 [ 128.847086][ T29] usb 5-1: USB disconnect, device number 2 [ 130.419654][ T30] audit: type=1326 audit(1773632575.096:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6506 comm="syz.4.172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c7819c799 code=0x7ffc0000 [ 130.487022][ T5908] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 130.536507][ T30] audit: type=1326 audit(1773632575.106:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6506 comm="syz.4.172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c7819c799 code=0x7ffc0000 [ 130.558810][ T30] audit: type=1326 audit(1773632575.106:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6506 comm="syz.4.172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f0c7819c799 code=0x7ffc0000 [ 130.582501][ T30] audit: type=1326 audit(1773632575.106:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6506 comm="syz.4.172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c7819c799 code=0x7ffc0000 [ 130.654089][ T5908] usb 4-1: Using ep0 maxpacket: 32 [ 130.663917][ T5908] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 130.672270][ T30] audit: type=1326 audit(1773632575.106:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6506 comm="syz.4.172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c7819c799 code=0x7ffc0000 [ 130.707194][ T5908] usb 4-1: config 0 has no interface number 0 [ 130.727568][ T5908] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 130.769710][ T5908] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.781981][ T30] audit: type=1326 audit(1773632575.106:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6506 comm="syz.4.172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c7819c799 code=0x7ffc0000 [ 130.805627][ T6512] 9p: Bad value for 'rfdno' [ 130.810237][ T5908] usb 4-1: Product: syz [ 130.814712][ T5908] usb 4-1: Manufacturer: syz [ 130.827529][ T5908] usb 4-1: SerialNumber: syz [ 130.860351][ T5908] usb 4-1: config 0 descriptor?? [ 130.866030][ T30] audit: type=1326 audit(1773632575.106:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6506 comm="syz.4.172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c7819c799 code=0x7ffc0000 [ 130.893406][ T5908] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 130.962166][ T30] audit: type=1326 audit(1773632575.146:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6506 comm="syz.4.172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f0c7819c799 code=0x7ffc0000 [ 131.018457][ T30] audit: type=1326 audit(1773632575.486:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6506 comm="syz.4.172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c7819c799 code=0x7ffc0000 [ 131.069488][ T30] audit: type=1326 audit(1773632575.486:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6506 comm="syz.4.172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c7819c799 code=0x7ffc0000 [ 131.112776][ T5908] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 131.161527][ T5908] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 131.541899][ C0] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 131.550209][ T5894] usb 4-1: USB disconnect, device number 2 [ 131.704472][ T5894] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 132.001748][ T5894] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 132.048255][ T5894] quatech2 4-1:0.51: device disconnected [ 132.753198][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.765271][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 135.069805][ T6561] netlink: 'syz.2.184': attribute type 12 has an invalid length. [ 135.077687][ T6561] netlink: 'syz.2.184': attribute type 29 has an invalid length. [ 135.085538][ T6561] netlink: 'syz.2.184': attribute type 2 has an invalid length. [ 135.093244][ T6561] netlink: 136 bytes leftover after parsing attributes in process `syz.2.184'. [ 135.116215][ T6561] Bluetooth: hci0: service_discovery: expected 4 bytes, got 7 bytes [ 136.670789][ T6573] binder: BINDER_SET_CONTEXT_MGR already set [ 136.677532][ T6573] binder: 6570:6573 ioctl 4018620d 200000000040 returned -16 [ 137.994561][ T5915] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 138.156659][ T5915] usb 3-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 138.201997][ T5915] usb 3-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 138.228552][ T5915] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.251206][ T5915] usb 3-1: Product: syz [ 138.263216][ T5915] usb 3-1: Manufacturer: syz [ 138.279743][ T5915] usb 3-1: SerialNumber: syz [ 138.318952][ T5915] usb 3-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 139.282458][ T5915] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 139.331608][ T5915] dvbdev: DVB: registering new adapter (774 Friio White ISDB-T USB2.0) [ 139.366117][ T5915] usb 3-1: media controller created [ 139.780832][ T5915] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 142.382265][ T5915] usb 3-1: USB disconnect, device number 4 [ 143.189295][ T6618] binder: BINDER_SET_CONTEXT_MGR already set [ 143.196068][ T6618] binder: 6617:6618 ioctl 4018620d 200000000040 returned -16 [ 144.400482][ T6630] netlink: 20 bytes leftover after parsing attributes in process `syz.4.210'. [ 144.409709][ T6630] netlink: 11 bytes leftover after parsing attributes in process `syz.4.210'. [ 145.459985][ T5840] Bluetooth: Wrong link type (-71) [ 146.960539][ T6652] binder: BINDER_SET_CONTEXT_MGR already set [ 146.966894][ T6652] binder: 6649:6652 ioctl 4018620d 200000000040 returned -16 [ 148.298742][ T6664] netlink: 20 bytes leftover after parsing attributes in process `syz.3.223'. [ 148.307921][ T6664] netlink: 11 bytes leftover after parsing attributes in process `syz.3.223'. [ 150.922022][ T6690] binder: BINDER_SET_CONTEXT_MGR already set [ 150.928207][ T6690] binder: 6687:6690 ioctl 4018620d 200000000040 returned -16 [ 152.223191][ T6703] netlink: 20 bytes leftover after parsing attributes in process `syz.3.235'. [ 152.232411][ T6703] netlink: 11 bytes leftover after parsing attributes in process `syz.3.235'. [ 152.908994][ T6706] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.087507][ T6706] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.225314][ T6706] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.251566][ T5894] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 153.259773][ T5908] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 153.310076][ T6706] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.415792][ T5908] usb 4-1: Using ep0 maxpacket: 8 [ 153.433584][ T5894] usb 2-1: config 0 has no interfaces? [ 153.458817][ T5908] usb 4-1: config 0 has an invalid interface number: 186 but max is 0 [ 153.552296][ T5894] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 153.565955][ T5908] usb 4-1: config 0 has no interface number 0 [ 153.621532][ T5908] usb 4-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 153.664729][ T5894] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 153.766657][ T5894] usb 2-1: Product: syz [ 153.772928][ T5908] usb 4-1: config 0 interface 186 altsetting 0 endpoint 0x1 has an invalid bInterval 18, changing to 8 [ 153.800142][ T5894] usb 2-1: Manufacturer: syz [ 153.816186][ T5894] usb 2-1: SerialNumber: syz [ 153.847349][ T5908] usb 4-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 153.964802][ T5894] usb 2-1: config 0 descriptor?? [ 153.972855][ T5908] usb 4-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 154.001919][ T5908] usb 4-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 154.043280][ T6727] binder: BINDER_SET_CONTEXT_MGR already set [ 154.057209][ T6727] binder: 6725:6727 ioctl 4018620d 200000000040 returned -16 [ 154.467685][ T5908] usb 4-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 154.487255][ T5908] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.509708][ T5908] usb 4-1: Product: syz [ 154.513943][ T5908] usb 4-1: Manufacturer: syz [ 154.520486][ T5908] usb 4-1: SerialNumber: syz [ 154.544749][ T5908] usb 4-1: config 0 descriptor?? [ 154.547007][ T6730] netlink: 12 bytes leftover after parsing attributes in process `syz.4.245'. [ 154.602909][ T1155] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.710858][ T1155] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.809931][ T5908] iowarrior 4-1:0.186: IOWarrior product=0x1505, serial=42424242 interface=186 now attached to iowarrior0 [ 154.830565][ T1155] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.862728][ T1155] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.925182][ T5908] usb 2-1: USB disconnect, device number 2 [ 155.119715][ T6743] netlink: 20 bytes leftover after parsing attributes in process `syz.4.249'. [ 155.128873][ T6743] netlink: 11 bytes leftover after parsing attributes in process `syz.4.249'. [ 155.390346][ T5915] usb 4-1: USB disconnect, device number 3 [ 155.454150][ T29] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 155.676057][ T29] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 155.687946][ T29] usb 3-1: config 0 interface 0 has no altsetting 0 [ 155.698097][ T29] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 155.707701][ T29] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 156.292923][ T29] usb 3-1: Product: syz [ 156.310174][ T29] usb 3-1: Manufacturer: syz [ 156.322800][ T29] usb 3-1: SerialNumber: syz [ 156.342593][ T29] usb 3-1: config 0 descriptor?? [ 156.368770][ T29] usb 3-1: selecting invalid altsetting 0 [ 157.041582][ T6758] random: crng reseeded on system resumption [ 157.151484][ T6758] snd-usb-audio 3-1:0.0: Runtime PM usage count underflow! [ 157.750789][ T29] usb 3-1: USB disconnect, device number 5 [ 157.850207][ T6000] udevd[6000]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 159.426070][ T6769] binder: BINDER_SET_CONTEXT_MGR already set [ 159.432859][ T6769] binder: 6768:6769 ioctl 4018620d 200000000040 returned -16 [ 160.263020][ T6782] netlink: 20 bytes leftover after parsing attributes in process `syz.2.260'. [ 160.272293][ T6782] netlink: 11 bytes leftover after parsing attributes in process `syz.2.260'. [ 161.005277][ T6789] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.123542][ T6789] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.214082][ T5915] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 161.226717][ T6789] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.249727][ T6785] node ffff888055989080 offset 0 parent ffff888055988dc0 shift 0 count 64 values 0 array ffff88806bf88980 list ffff888055989098 ffff888055989098 marks 0 0 0 [ 161.267770][ T5908] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 161.277413][ T6785] ------------[ cut here ]------------ [ 161.282951][ T6785] kernel BUG at ./include/linux/xarray.h:1441! [ 161.292483][ T6785] Oops: invalid opcode: 0000 [#1] SMP KASAN PTI [ 161.298799][ T6785] CPU: 0 UID: 0 PID: 6785 Comm: syz.3.261 Not tainted syzkaller #0 PREEMPT(full) [ 161.307990][ T6785] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 161.318066][ T6785] RIP: 0010:hpage_collapse_scan_file+0x4f98/0x5230 [ 161.324575][ T6785] Code: ff 4c 89 e7 48 c7 c6 80 b1 dc 8b e8 82 df f1 fe 90 0f 0b 48 85 db 0f 84 03 01 00 00 e8 01 62 90 ff 48 89 df e8 69 5d 7b 09 90 <0f> 0b e8 f1 61 90 ff 48 89 df 48 c7 c6 80 b1 dc 8b e8 52 df f1 fe [ 161.344203][ T6785] RSP: 0018:ffffc90005fbf120 EFLAGS: 00010246 [ 161.350275][ T6785] RAX: 0000000000000000 RBX: ffff888055989080 RCX: c2b27368398c9400 [ 161.358240][ T6785] RDX: ffffc90006802000 RSI: 0000000000008b50 RDI: 0000000000008b51 [ 161.366201][ T6785] RBP: ffffc90005fbf428 R08: ffff8880b86247d3 R09: 1ffff110170c48fa [ 161.374167][ T6785] R10: dffffc0000000000 R11: ffffed10170c48fb R12: ffffea000137ec30 [ 161.382125][ T6785] R13: dffffc0000000000 R14: 0000000000000000 R15: ffffc90005fbf310 [ 161.390088][ T6785] FS: 00007f9a6be506c0(0000) GS:ffff888125436000(0000) knlGS:0000000000000000 [ 161.399008][ T6785] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 161.405581][ T6785] CR2: 00007f0c79012d58 CR3: 0000000034f64000 CR4: 00000000003526f0 [ 161.413541][ T6785] Call Trace: [ 161.416815][ T6785] [ 161.419740][ T6785] ? debug_object_free+0x2d7/0x490 [ 161.424854][ T6785] ? hpage_collapse_scan_file+0x1c1/0x5230 [ 161.430657][ T6785] ? __pfx_hpage_collapse_scan_file+0x10/0x10 [ 161.436709][ T6785] ? __flush_work+0xa26/0xc50 [ 161.441373][ T6785] ? __flush_work+0x100/0xc50 [ 161.446052][ T6785] ? __up_read+0x291/0x6b0 [ 161.450466][ T6785] ? __pfx___up_read+0x10/0x10 [ 161.455216][ T6785] ? madvise_collapse+0x41e/0xb80 [ 161.460267][ T6785] madvise_collapse+0x451/0xb80 [ 161.465113][ T6785] madvise_vma_behavior+0x1094/0x4460 [ 161.470476][ T6785] ? do_raw_spin_lock+0x12b/0x2f0 [ 161.475489][ T6785] ? __pfx_madvise_vma_behavior+0x10/0x10 [ 161.481196][ T6785] ? do_raw_spin_lock+0x12b/0x2f0 [ 161.486222][ T6785] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 161.491590][ T6785] ? debug_object_assert_init+0x209/0x370 [ 161.497307][ T6785] ? rcu_is_watching+0x15/0xb0 [ 161.502061][ T6785] ? trace_hrtimer_start+0x82/0x230 [ 161.507254][ T6785] ? finish_task_switch+0x41f/0xbe0 [ 161.512442][ T6785] ? lockdep_hardirqs_on+0x7a/0x110 [ 161.517628][ T6785] ? finish_task_switch+0x41f/0xbe0 [ 161.522817][ T6785] ? rcu_is_watching+0x15/0xb0 [ 161.527574][ T6785] ? trace_sched_exit_tp+0x3a/0x150 [ 161.532769][ T6785] ? __schedule+0x167b/0x5590 [ 161.537440][ T6785] ? mas_prev_slot+0xb7b/0xbf0 [ 161.542194][ T6785] ? find_vma_prev+0x123/0x1b0 [ 161.546956][ T6785] ? __pfx_find_vma_prev+0x10/0x10 [ 161.552058][ T6785] ? futex_unqueue+0x22/0x240 [ 161.556732][ T6785] ? __futex_wait+0x371/0x420 [ 161.561402][ T6785] madvise_walk_vmas+0x573/0xae0 [ 161.566332][ T6785] ? __pfx_madvise_walk_vmas+0x10/0x10 [ 161.571779][ T6785] ? blk_start_plug+0x6e/0x1b0 [ 161.576530][ T6785] madvise_do_behavior+0x386/0x540 [ 161.581637][ T6785] ? __pfx_madvise_do_behavior+0x10/0x10 [ 161.587261][ T6785] ? down_read+0x270/0x2e0 [ 161.591669][ T6785] ? madvise_lock+0x146/0x2e0 [ 161.596336][ T6785] do_madvise+0x1fa/0x2e0 [ 161.600655][ T6785] ? __pfx_do_madvise+0x10/0x10 [ 161.605493][ T6785] ? __se_sys_futex+0x3a8/0x450 [ 161.610332][ T6785] ? rcu_is_watching+0x15/0xb0 [ 161.615081][ T6785] __x64_sys_madvise+0xa6/0xc0 [ 161.619831][ T6785] do_syscall_64+0x14d/0xf80 [ 161.624409][ T6785] ? trace_irq_disable+0x3b/0x150 [ 161.629424][ T6785] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 161.635478][ T6785] ? clear_bhb_loop+0x40/0x90 [ 161.640143][ T6785] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 161.646018][ T6785] RIP: 0033:0x7f9a6af9c799 [ 161.650432][ T6785] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 161.670203][ T6785] RSP: 002b:00007f9a6be50028 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 161.678608][ T6785] RAX: ffffffffffffffda RBX: 00007f9a6b215fa0 RCX: 00007f9a6af9c799 [ 161.686569][ T6785] RDX: 0000000000000019 RSI: 0000000008000000 RDI: 0000200000000000 [ 161.694526][ T6785] RBP: 00007f9a6b032c99 R08: 0000000000000000 R09: 0000000000000000 [ 161.702482][ T6785] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 161.710439][ T6785] R13: 00007f9a6b216038 R14: 00007f9a6b215fa0 R15: 00007ffd8efd28c8 [ 161.718406][ T6785] [ 161.721410][ T6785] Modules linked in: [ 161.726338][ T6785] ---[ end trace 0000000000000000 ]--- [ 161.737505][ T6785] RIP: 0010:hpage_collapse_scan_file+0x4f98/0x5230 [ 161.744092][ T6785] Code: ff 4c 89 e7 48 c7 c6 80 b1 dc 8b e8 82 df f1 fe 90 0f 0b 48 85 db 0f 84 03 01 00 00 e8 01 62 90 ff 48 89 df e8 69 5d 7b 09 90 <0f> 0b e8 f1 61 90 ff 48 89 df 48 c7 c6 80 b1 dc 8b e8 52 df f1 fe [ 161.763848][ T6785] RSP: 0018:ffffc90005fbf120 EFLAGS: 00010246 [ 161.770017][ T6785] RAX: 0000000000000000 RBX: ffff888055989080 RCX: c2b27368398c9400 [ 161.778114][ T6785] RDX: ffffc90006802000 RSI: 0000000000008b50 RDI: 0000000000008b51 [ 161.786146][ T6785] RBP: ffffc90005fbf428 R08: ffff8880b86247d3 R09: 1ffff110170c48fa [ 161.794646][ T6785] R10: dffffc0000000000 R11: ffffed10170c48fb R12: ffffea000137ec30 [ 161.802662][ T6785] R13: dffffc0000000000 R14: 0000000000000000 R15: ffffc90005fbf310 [ 161.810770][ T6785] FS: 00007f9a6be506c0(0000) GS:ffff888125436000(0000) knlGS:0000000000000000 [ 161.826313][ T5915] usb 3-1: config 0 has no interfaces? [ 161.834977][ T5908] usb 2-1: unable to get BOS descriptor or descriptor too short [ 161.842765][ T5915] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 161.852719][ T5915] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 161.857147][ T6785] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 161.861898][ T5915] usb 3-1: Product: syz [ 161.869893][ T6785] CR2: 00007f0c79012d58 CR3: 0000000034f64000 CR4: 00000000003526f0 [ 161.874866][ T5908] usb 2-1: not running at top speed; connect to a high speed hub [ 161.881208][ T6785] Kernel panic - not syncing: Fatal exception [ 161.888440][ T6785] Kernel Offset: disabled