last executing test programs: 1m57.581446078s ago: executing program 4 (id=145): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) ioprio_set$pid(0x5, r0, 0x2004) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f00000000c0)='nomand\x00', &(0x7f0000000100)='****\x00', 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) timer_create(0x2, 0x0, &(0x7f00000002c0)) clock_nanosleep(0x2, 0x0, &(0x7f0000000480)={0x0, 0x989680}, 0x0) unshare(0x6a040000) 1m55.141599861s ago: executing program 4 (id=147): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000580)=ANY=[@ANYBLOB="600000000206010200000800000100000200000014000780080012400006000008001340000000ed12000300686173683a6e65742c706f7274000000050005000a00000005000400000000000900020073797a31000000000500010007"], 0x60}}, 0x0) 1m50.216607641s ago: executing program 1 (id=161): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001000)=ANY=[@ANYBLOB="0a00000004000000080000000a"], 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0xe, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 1m50.007615115s ago: executing program 1 (id=162): r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(twofish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000000)="b7f2288d3aaea2bc0000def1260a00"/32, 0x20) r2 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$inet_sctp(r2, &(0x7f0000005f00)=[{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000380)="10fb478f8e4990cd962993ad8dd206d2060d81e87f1b49d6be24051a259d124d3ba0b6f677b873c2082876bef74261d8b93054abb23fcc0341511f7cc53bb18d6d87be7bdb79930fdc799e152cd2d6cd25956eaec876858a5f5f9da686ab52bf", 0x60}], 0x1, 0x0, 0x0, 0x4040000}], 0x1, 0x800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)=""/93, 0x5d}, {&(0x7f00000008c0)=""/96, 0x60}], 0x2}, 0x40000042) 1m49.84121049s ago: executing program 4 (id=164): listen(0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x20, 0xf, &(0x7f0000000940)=ANY=[@ANYBLOB="18000000ea8f0000000000000500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b703000038a15d838500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x67a021c03d2005e9, 0x4, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000a00)={r1, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600, 0x1}}, 0x20) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x400ad80, &(0x7f0000000a80)={0xa, 0x4e23, 0x5b3, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x8}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x4010}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r3, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x54, r4, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @multicast1}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) 1m49.781565712s ago: executing program 1 (id=165): r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = dup(r1) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000004680)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}, @in={0x2, 0x4e24, @local}], 0x2c) sendmsg$inet6(r1, &(0x7f0000004700)={&(0x7f0000004740)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, 0x0}, 0x4048043) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000004800)='syz_tun\x00', 0x10) writev(r2, &(0x7f0000004880)=[{&(0x7f0000004900)="61e2", 0x2}], 0x1) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000004ac0)={0x0, @in={{0x2, 0x4e21, @empty}}, 0x5, 0x3, 0xf06, 0x1, 0x94, 0xfffffffd, 0x5}, 0x9c) write$nbd(r2, &(0x7f0000004b80)=ANY=[], 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000004c00)={0x0, @in6={{0xa, 0x4e60, 0xfffffff2, @empty}}, 0xffffec47, 0x9, 0xffff1896, 0x100, 0x25, 0xfffffffc}, 0x9c) close_range(r0, 0xffffffffffffffff, 0x0) 1m49.417294309s ago: executing program 4 (id=169): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000980)={0x14, 0x19, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x0) recvmsg(r0, &(0x7f0000000d00)={0x0, 0x0, 0x0}, 0x10020) 1m49.394205436s ago: executing program 1 (id=170): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./debug\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./debug/failslab/ignore-gfp-wait\x00', 0x2, 0x0) write(r1, &(0x7f00000004c0)='N', 0x1) write(0xffffffffffffffff, &(0x7f0000000540)='Y\x00', 0x1) close(0xffffffffffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./debug/failslab/times\x00', 0x2, 0x0) write(r2, &(0x7f00000005c0), 0x0) close(r2) write(0xffffffffffffffff, &(0x7f0000000600)='0', 0x1) r3 = openat$make_it_fail(0xffffffffffffff9c, &(0x7f00000006c0)='/proc/thread-self/make-it-fail\x00', 0x1, 0x0) write(r3, &(0x7f0000000700)='1', 0x1) r4 = syz_open_dev$dvb_demux(&(0x7f0000000740), 0x0, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x19, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x9, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = fsopen(&(0x7f00000007c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_ERRQUEUE(r6, 0x6b, 0x4, &(0x7f0000000840), 0x4) ioctl$DVB_DEMUX_DMX_START(r4, 0x6f29) 1m48.998616696s ago: executing program 4 (id=172): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001000)=ANY=[@ANYBLOB="0a00000004000000080000000a"], 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0xe, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 1m48.85148282s ago: executing program 1 (id=173): close(0x3) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000080)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f00000001c0)='X', 0xfee4, 0x0, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) bpf$MAP_CREATE(0x0, 0x0, 0x50) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000a40)=ANY=[@ANYBLOB='a *?: r\x00'], 0x8) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000a80)='syz1\x00', 0x1ff) r1 = socket$packet(0x11, 0x3, 0x300) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000b00)={0x1f, 0xffff, 0x3}, 0x6) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000bc0)={'bridge_slave_0\x00'}) syz_genetlink_get_family_id$mptcp(&(0x7f0000000c00), 0xffffffffffffffff) sendmmsg$inet6(r0, &(0x7f0000000e00)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000ec0)="af", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000000f40)="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", 0x38f}, {&(0x7f0000001300)="c51f242683b88066430d481bd86b56b4ab7b2eb59a9a8a6fe0e268a66cb131ba376e44317fc1", 0x26}], 0x2}}], 0x2, 0x20040010) close(0x3) 1m48.73722552s ago: executing program 4 (id=174): r0 = socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0x12, &(0x7f0000000580)=r3, 0x4) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000005c0), 0xc1842, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000600)={'syzkaller0\x00', 0x7101}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close(r5) socketpair(0x1, 0x1, 0x0, &(0x7f0000000700)) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000840)={'syzkaller0\x00', @random="6f4913451e8b"}) write$cgroup_devices(r4, &(0x7f0000000880)=ANY=[@ANYBLOB="1e000300008c71ef28ff4b"], 0xffdd) 1m48.393426371s ago: executing program 1 (id=177): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) ioprio_set$pid(0x5, r0, 0x2004) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f00000000c0)='nomand\x00', &(0x7f0000000100)='****\x00', 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) timer_create(0x2, 0x0, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000000480)={0x0, 0x989680}, 0x0) unshare(0x6a040000) 1m33.185708843s ago: executing program 32 (id=174): r0 = socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0x12, &(0x7f0000000580)=r3, 0x4) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000005c0), 0xc1842, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000600)={'syzkaller0\x00', 0x7101}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close(r5) socketpair(0x1, 0x1, 0x0, &(0x7f0000000700)) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000840)={'syzkaller0\x00', @random="6f4913451e8b"}) write$cgroup_devices(r4, &(0x7f0000000880)=ANY=[@ANYBLOB="1e000300008c71ef28ff4b"], 0xffdd) 1m32.865092799s ago: executing program 33 (id=177): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) ioprio_set$pid(0x5, r0, 0x2004) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f00000000c0)='nomand\x00', &(0x7f0000000100)='****\x00', 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) timer_create(0x2, 0x0, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000000480)={0x0, 0x989680}, 0x0) unshare(0x6a040000) 9.445425857s ago: executing program 3 (id=778): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NG_TYPE={0x8}, @NFTA_NG_DREG={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_NG_MODULUS={0x8}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x84}, 0x1, 0x0, 0x0, 0x6040850}, 0x94) 8.977378721s ago: executing program 3 (id=781): r0 = syz_usb_connect$lan78xx(0x5, 0x3f, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000000)={0x34, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000940)={0x34, &(0x7f0000000680)={0x0, 0x30}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000003f00)={0x84, &(0x7f0000003b00)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000880)={0x1c, &(0x7f0000000140)={0x40, 0x6}, 0x0, 0x0, 0x0, 0x0, 0x0}) 4.53012583s ago: executing program 3 (id=800): r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000200), &(0x7f0000002340)=0x4) syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x158}, 0x0, 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x39, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000200000040d118af1e0000010203010902270001010080fa0904000003ffffff00070581020002000705820200020007050302"], 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, &(0x7f0000000100)={0x1c, &(0x7f0000000140)={0x60, 0x1, 0x2, "93d7"}, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_ep_write(r1, 0x82, 0x3, &(0x7f0000000180)='\x00\x00\x00') syz_usb_ep_write(r1, 0x81, 0x6, &(0x7f00000001c0)="9d152a5c0b09") socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl(r2, 0x8923, &(0x7f0000000040)='veth0:') 2.627504996s ago: executing program 5 (id=821): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NG_TYPE={0x8}, @NFTA_NG_DREG={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_NG_MODULUS={0x8}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x84}, 0x1, 0x0, 0x0, 0x6040850}, 0x94) 2.462253644s ago: executing program 6 (id=823): write$tcp_congestion(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB="1400e8ff04080102"], 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x4000) bind$unix(0xffffffffffffffff, &(0x7f0000000180)=@file={0x1}, 0x6e) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x3) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="040302"], 0x4) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0xa8002, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000280)="c021", 0x1700}], 0x1) 2.409677941s ago: executing program 0 (id=824): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24040045) r0 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x1, 0x14a}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}], 0x1) io_uring_enter(r0, 0x2219, 0xcf74, 0x16, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xf, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @cgroup_device, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.385004695s ago: executing program 5 (id=825): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000002a00)={0x0, 0x0, &(0x7f0000002a40)={&(0x7f0000002a80)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x5c, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x30, 0x3, 0x0, 0x1, [{0x2c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x20, 0xb, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_LIMIT_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}]}}}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xe0}}, 0x0) 1.92527084s ago: executing program 0 (id=827): r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000000c0)={[0x12e8, 0x9, 0x88fd, 0x6, 0x7, 0x8000003fe, 0x4002004c4, 0x1000, 0x8, 0x97, 0xf, 0x4, 0x9, 0x2, 0x1, 0x2000000000008], 0xeeee7ffb, 0x514}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.843545182s ago: executing program 5 (id=828): socket(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0xd, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000fcffffff000000008000000018010000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000020000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000100000085000000a6000000850000000e0000"], &(0x7f0000000480)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 1.826299169s ago: executing program 2 (id=829): r0 = socket$kcm(0x1e, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f0000000900), 0x43) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000d00)={0x0, 0x0}) close(r1) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f0000000d80), 0x4bd) sendmsg$sock(r0, 0x0, 0x0) 1.748587366s ago: executing program 3 (id=830): bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000c80)={0x1f, 0x15, &(0x7f0000000d40)=ANY=[], &(0x7f0000000e00)='GPL\x00', 0x9, 0x0, 0x0, 0x40f00, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000e40)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 1.613218153s ago: executing program 2 (id=831): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000880)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d0019feffe69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb46c4c0a285057e3061b978", 0x5b}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000900)=""/4087, 0xff7}, {&(0x7f00000001c0)=""/56, 0x38}], 0x2}, 0x20) 1.613076206s ago: executing program 5 (id=832): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newqdisc={0x24, 0x24, 0xd0f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x1}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 1.61281482s ago: executing program 3 (id=833): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./debug\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) write(r1, &(0x7f00000004c0)='N', 0x1) write(0xffffffffffffffff, &(0x7f0000000540)='Y\x00', 0x1) close(0xffffffffffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./debug/failslab/times\x00', 0x2, 0x0) write(r2, &(0x7f00000005c0), 0x0) close(r2) write(0xffffffffffffffff, &(0x7f0000000600)='0', 0x1) r3 = openat$make_it_fail(0xffffffffffffff9c, &(0x7f00000006c0)='/proc/thread-self/make-it-fail\x00', 0x1, 0x0) write(r3, &(0x7f0000000700)='1', 0x1) r4 = syz_open_dev$dvb_demux(&(0x7f0000000740), 0x0, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x19, 0x3, 0x0, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x9, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = fsopen(&(0x7f00000007c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_ERRQUEUE(r6, 0x6b, 0x4, &(0x7f0000000840), 0x4) ioctl$DVB_DEMUX_DMX_START(r4, 0x6f29) 1.560339002s ago: executing program 5 (id=834): bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x12, 0x2, 0x4, 0x2}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r0, 0x2000300, 0xe, 0x0, &(0x7f0000000600)="63e4ed8e46080000003389f7f986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 1.506177723s ago: executing program 0 (id=835): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NG_TYPE={0x8}, @NFTA_NG_DREG={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_NG_MODULUS={0x8}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x84}, 0x1, 0x0, 0x0, 0x6040850}, 0x94) 1.442187475s ago: executing program 5 (id=836): r0 = syz_usb_connect(0x0, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040a61b01000100000000010902200001010080320904"], 0x0) socket$pppl2tp(0x18, 0x1, 0x1) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, 0x0, 0x20) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000540)={0x34, &(0x7f0000000280)={0x20, 0x13}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$dvb_frontend(&(0x7f0000000100), 0x1, 0x802) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000640)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0x0) 1.441351485s ago: executing program 3 (id=837): socket$inet_smc(0x2b, 0x1, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000000100), 0x1, 0x2) syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) ioctl$SNDRV_PCM_IOCTL_READI_FRAMES(r0, 0x80184151, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0x0, 0x0}) syz_io_uring_setup(0x81, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x80002, 0x0) r1 = socket$key(0xf, 0x3, 0x2) syz_usb_connect$uac1(0x3, 0xdc, &(0x7f0000000740)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=r1, @ANYBLOB='\a'], 0x0) 1.385348961s ago: executing program 6 (id=838): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40815}, 0xc000) 1.325854814s ago: executing program 0 (id=839): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) 1.300642379s ago: executing program 6 (id=840): r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000300)={0xa, @pix_mp={0x10001, 0x40000c, 0x31324d59, 0x7, 0x3, [{0x2319, 0x81}, {0xfffffffd, 0x7}, {0x4, 0xadf}, {0x5, 0x4018}, {0x0, 0x8}, {}, {0xfffffffe, 0x1}, {0xaa}], 0x0, 0x9, 0x1, 0x2, 0x2}}) 1.20538179s ago: executing program 6 (id=841): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) migrate_pages(0xffffffffffffffff, 0xfffffffeffffffff, 0x0, 0x0) 1.183452682s ago: executing program 6 (id=842): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000040)={0x6, "152a44e3112c0000f5a82d86c200000000000000000000000000000800"}) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x801, 0x0) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000380)={{0x1, 0x7ff, 0x4b, 0x8009}, 'syz0\x00', 0x8}) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000040), 0xfffffffffffffffe, 0x2) r3 = dup3(r2, r1, 0x80000) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$HIDIOCSFEATURE(r3, 0xc0404806, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r5 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000080), 0x8100, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r5, 0xc0184800, &(0x7f0000000100)={0x4, r4}) ioctl$DMA_BUF_SET_NAME_A(r6, 0x40086203, &(0x7f00000001c0)='\x02\x00\x00\x00\x05\x00\x00\x00-control\x00') r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x8, 0x4, 0x8b, 0xfffa}, 0x1d, [0x7ffe, 0xc95a, 0x1, 0x9, 0x80, 0x2, 0x3, 0x7f, 0x6, 0x4d, 0x9, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x6, 0x4, 0x8, 0x4, 0x3c5b, 0x1, 0x3, 0x9, 0x1, 0x1f461e2c, 0x0, 0xe660, 0x4, 0x7, 0x101, 0x7fff, 0x1, 0x80000000, 0x4, 0x3, 0xe, 0xfffffffb, 0x71, 0xfffffff8, 0x7, 0x0, 0x0, 0x4, 0x80003e, 0x8f, 0x6, 0x10000006, 0x0, 0x5, 0x4, 0x8, 0x0, 0x2, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x1, 0xffff, 0x134, 0x7ffe, 0x9, 0xfffffff3, 0x129432e6, 0xcb, 0x6, 0xd, 0x2bf, 0x6c9, 0x9, 0x6, 0x3, 0x0, 0x7, 0x5, 0x0, 0xe, 0x312, 0x74, 0xea4, 0x0, 0x4, 0x4, 0x8000, 0x3, 0x400, 0x5, 0x6, 0x7, 0xff, 0x5, 0x5, 0x5f31, 0x4, 0x0, 0x2, 0x100002, 0xa, 0x4, 0x9, 0x8, 0x800, 0x6, 0x7, 0x8002, 0x1, 0xfe000000, 0xff7f, 0x2, 0x7f, 0x9, 0x2, 0xffffffff, 0x9, 0x1, 0x7, 0x80000003, 0x9, 0x48c93690, 0x42, 0x7], [0x400, 0x4, 0x0, 0x5, 0xfffffffe, 0xfffff76b, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x83, 0x80000003, 0x200009, 0x100003e7, 0x9, 0x5, 0x3, 0x2, 0xf38, 0x8, 0x4, 0x6d01, 0x5, 0x38, 0x800003, 0x200, 0x80, 0xf, 0xd, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0x53cf697b, 0x4, 0x6, 0xac8, 0x7, 0x2, 0x3, 0x7ff, 0xfffffffc, 0x2, 0x4, 0xffff, 0x0, 0x1a, 0x1c, 0x120000, 0x3, 0x8, 0xaaed, 0x4, 0x65], [0x9, 0xbb31, 0x3, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0x5, 0x20000ce7, 0x1ff, 0x2, 0xf58, 0x5, 0x3, 0x101, 0x10000, 0x6, 0x7ffe, 0x80000000, 0x200a620, 0x2, 0xc, 0x1, 0x4, 0x14c, 0x60a7, 0xe, 0x6, 0xffffffff, 0x80000000, 0x5, 0x8, 0x5, 0xee1, 0xfffff000, 0xffff, 0x3, 0x7f, 0x104, 0x9606, 0x7, 0x2, 0x4, 0x8006, 0x1, 0x0, 0x4, 0x8, 0x30b1d693, 0xa1f, 0x8, 0x7, 0x1, 0x6c1b, 0x2, 0x4, 0xb0b2748, 0x1, 0x1, 0x200, 0xffbf2441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) close_range(r7, 0xffffffffffffffff, 0x0) 709.809933ms ago: executing program 2 (id=843): socket(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0xd, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000fcffffff000000008000000018010000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000020000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000100000085000000a6000000850000000e000000"], &(0x7f0000000480)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 449.78239ms ago: executing program 2 (id=844): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newqdisc={0x24, 0x24, 0xd0f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x1}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 340.822525ms ago: executing program 2 (id=845): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x18, 0x5, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000000800005d10000000000000c300e0ffffed"], &(0x7f0000000100)='GPL\x00', 0x1}, 0x94) 332.143337ms ago: executing program 0 (id=846): bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x12, 0x2, 0x4, 0x2}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x3, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe1d}}, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r0, 0x2000300, 0xe, 0x0, &(0x7f0000000600)="63e4ed8e46080000003389f7f986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 199.847985ms ago: executing program 6 (id=847): r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000000c0)={[0x12e8, 0x9, 0x88fd, 0x6, 0x7, 0x8000003fe, 0x4002004c4, 0x1000, 0x8, 0x97, 0xf, 0x4, 0x9, 0x2, 0x1, 0x2000000000008], 0xeeee7ffb, 0x514}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000001c0)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_open_dev$usbfs(&(0x7f0000000200), 0x204, 0x82) 22.62007ms ago: executing program 2 (id=848): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x94}, 0x1, 0x0, 0x0, 0x4008091}, 0x24004000) 0s ago: executing program 0 (id=849): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NG_TYPE={0x8}, @NFTA_NG_DREG={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_NG_MODULUS={0x8}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x84}, 0x1, 0x0, 0x0, 0x6040850}, 0x94) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.93' (ED25519) to the list of known hosts. [ 91.400206][ T5573] cgroup: Unknown subsys name 'net' [ 91.623252][ T5573] cgroup: Unknown subsys name 'cpuset' [ 91.695671][ T5573] cgroup: Unknown subsys name 'rlimit' [ 92.007979][ T2224] cfg80211: failed to load regulatory.db Setting up swapspace version 1, size = 127995904 bytes [ 93.776701][ T5573] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 96.468925][ T4902] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 96.477103][ T4902] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 96.480259][ T4902] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 96.485165][ T4902] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 96.490132][ T4902] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 96.603603][ T4902] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 96.634416][ T4902] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 96.647152][ T4902] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 96.650481][ T4902] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 96.653139][ T4902] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 96.798732][ T5596] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 96.809176][ T5596] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 96.837860][ T5596] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 96.864465][ T5596] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 96.873660][ T5596] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 96.876240][ T5602] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 96.879377][ T5596] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 96.894653][ T5602] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 96.897345][ T5602] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 96.916113][ T5602] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 96.920592][ T5602] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 96.923416][ T5602] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 96.943671][ T5602] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 96.949455][ T5596] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 96.967587][ T5586] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 98.588036][ T4902] Bluetooth: hci0: command tx timeout [ 98.744938][ T4902] Bluetooth: hci1: command tx timeout [ 99.064947][ T5596] Bluetooth: hci2: command tx timeout [ 99.064955][ T5602] Bluetooth: hci4: command tx timeout [ 99.065211][ T4902] Bluetooth: hci3: command tx timeout [ 99.530842][ T5585] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.531981][ T5585] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.532120][ T5585] bridge_slave_0: entered allmulticast mode [ 99.534393][ T5585] bridge_slave_0: entered promiscuous mode [ 99.608366][ T5585] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.608454][ T5585] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.608579][ T5585] bridge_slave_1: entered allmulticast mode [ 99.610497][ T5585] bridge_slave_1: entered promiscuous mode [ 99.790279][ T5588] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.790522][ T5588] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.790695][ T5588] bridge_slave_0: entered allmulticast mode [ 99.793692][ T5588] bridge_slave_0: entered promiscuous mode [ 99.842074][ T5585] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 99.895909][ T5593] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.896018][ T5593] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.896150][ T5593] bridge_slave_0: entered allmulticast mode [ 99.898193][ T5593] bridge_slave_0: entered promiscuous mode [ 99.900754][ T5588] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.900881][ T5588] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.901058][ T5588] bridge_slave_1: entered allmulticast mode [ 99.903573][ T5588] bridge_slave_1: entered promiscuous mode [ 99.980501][ T5585] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 100.003154][ T5593] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.003261][ T5593] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.003390][ T5593] bridge_slave_1: entered allmulticast mode [ 100.008491][ T5593] bridge_slave_1: entered promiscuous mode [ 100.047217][ T5594] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.047332][ T5594] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.047456][ T5594] bridge_slave_0: entered allmulticast mode [ 100.049395][ T5594] bridge_slave_0: entered promiscuous mode [ 100.108608][ T5592] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.108770][ T5592] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.109136][ T5592] bridge_slave_0: entered allmulticast mode [ 100.111022][ T5592] bridge_slave_0: entered promiscuous mode [ 100.162184][ T5594] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.162351][ T5594] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.162513][ T5594] bridge_slave_1: entered allmulticast mode [ 100.165085][ T5594] bridge_slave_1: entered promiscuous mode [ 100.208026][ T5592] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.208157][ T5592] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.209130][ T5592] bridge_slave_1: entered allmulticast mode [ 100.211016][ T5592] bridge_slave_1: entered promiscuous mode [ 100.250557][ T5588] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 100.276125][ T5585] team0: Port device team_slave_0 added [ 100.307008][ T5593] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 100.310871][ T5588] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 100.353237][ T5585] team0: Port device team_slave_1 added [ 100.386904][ T5593] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 100.421360][ T5594] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 100.448961][ T5592] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 100.488933][ T5594] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 100.513593][ T5592] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 100.539175][ T5588] team0: Port device team_slave_0 added [ 100.561710][ T5585] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 100.561730][ T5585] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 100.561771][ T5585] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 100.624070][ T5593] team0: Port device team_slave_0 added [ 100.632384][ T5588] team0: Port device team_slave_1 added [ 100.660221][ T5585] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 100.660246][ T5585] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 100.660269][ T5585] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 100.664975][ T4902] Bluetooth: hci0: command tx timeout [ 100.717423][ T5593] team0: Port device team_slave_1 added [ 100.740831][ T5594] team0: Port device team_slave_0 added [ 100.758757][ T5592] team0: Port device team_slave_0 added [ 100.797323][ T5594] team0: Port device team_slave_1 added [ 100.804062][ T5592] team0: Port device team_slave_1 added [ 100.831800][ T5588] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 100.831813][ T5588] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 100.831832][ T5588] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 100.835047][ T4902] Bluetooth: hci1: command tx timeout [ 100.907163][ T5593] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 100.907178][ T5593] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 100.907197][ T5593] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 100.908461][ T5588] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 100.908477][ T5588] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 100.908506][ T5588] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 101.145057][ T5596] Bluetooth: hci2: command tx timeout [ 101.145168][ T5602] Bluetooth: hci4: command tx timeout [ 101.145239][ T4902] Bluetooth: hci3: command tx timeout [ 101.521130][ T5593] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 101.521149][ T5593] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.521175][ T5593] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 101.586077][ T5594] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 101.586096][ T5594] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.586126][ T5594] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 101.644376][ T5592] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 101.644396][ T5592] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.644423][ T5592] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 101.700296][ T5594] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 101.700316][ T5594] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.700345][ T5594] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 101.758771][ T5585] hsr_slave_0: entered promiscuous mode [ 101.759891][ T5585] hsr_slave_1: entered promiscuous mode [ 101.762488][ T5592] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 101.762500][ T5592] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.762520][ T5592] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 101.929294][ T5588] hsr_slave_0: entered promiscuous mode [ 101.930299][ T5588] hsr_slave_1: entered promiscuous mode [ 101.931227][ T5588] debugfs: 'hsr0' already exists in 'hsr' [ 101.931329][ T5588] Cannot create hsr debugfs directory [ 101.999121][ T5593] hsr_slave_0: entered promiscuous mode [ 102.000073][ T5593] hsr_slave_1: entered promiscuous mode [ 102.000858][ T5593] debugfs: 'hsr0' already exists in 'hsr' [ 102.000884][ T5593] Cannot create hsr debugfs directory [ 102.193503][ T5594] hsr_slave_0: entered promiscuous mode [ 102.194535][ T5594] hsr_slave_1: entered promiscuous mode [ 102.198963][ T5594] debugfs: 'hsr0' already exists in 'hsr' [ 102.198986][ T5594] Cannot create hsr debugfs directory [ 102.233471][ T5592] hsr_slave_0: entered promiscuous mode [ 102.234465][ T5592] hsr_slave_1: entered promiscuous mode [ 102.238607][ T5592] debugfs: 'hsr0' already exists in 'hsr' [ 102.238683][ T5592] Cannot create hsr debugfs directory [ 102.745101][ T4902] Bluetooth: hci0: command tx timeout [ 102.905135][ T4902] Bluetooth: hci1: command tx timeout [ 103.061282][ T5585] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 103.131403][ T5585] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 103.139618][ T5585] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 103.164095][ T5585] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 103.186992][ T5585] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 103.210653][ T5585] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 103.225922][ T5596] Bluetooth: hci2: command tx timeout [ 103.226029][ T5602] Bluetooth: hci4: command tx timeout [ 103.226113][ T4902] Bluetooth: hci3: command tx timeout [ 103.256589][ T5585] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 103.280471][ T5585] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 103.411557][ T5594] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 103.450502][ T5594] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 103.453830][ T5594] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 103.512038][ T5594] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 103.523992][ T5594] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 103.562968][ T5594] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 103.596229][ T5594] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 103.640979][ T5594] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 103.786090][ T5592] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 103.829760][ T5592] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 103.853893][ T5592] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 103.878704][ T5592] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 103.882144][ T5592] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 103.929546][ T5592] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 103.972927][ T5592] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 103.999955][ T5592] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 104.183991][ T5588] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 104.211562][ T5588] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 104.227201][ T5588] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 104.260492][ T5588] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 104.290090][ T5588] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 104.320405][ T5588] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 104.363269][ T5588] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 104.402299][ T5588] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 104.489215][ T5585] 8021q: adding VLAN 0 to HW filter on device bond0 [ 104.576325][ T5593] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 104.619955][ T5593] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 104.640652][ T5593] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 104.679181][ T5593] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 104.696853][ T5593] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 104.740747][ T5593] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 104.760820][ T5593] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 104.800835][ T5593] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 104.825457][ T4902] Bluetooth: hci0: command tx timeout [ 104.826174][ T5585] 8021q: adding VLAN 0 to HW filter on device team0 [ 104.893801][ T68] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.895815][ T68] bridge0: port 1(bridge_slave_0) entered forwarding state [ 104.939140][ T5594] 8021q: adding VLAN 0 to HW filter on device bond0 [ 104.958163][ T1021] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.959050][ T1021] bridge0: port 2(bridge_slave_1) entered forwarding state [ 104.986017][ T4902] Bluetooth: hci1: command tx timeout [ 105.091536][ T5594] 8021q: adding VLAN 0 to HW filter on device team0 [ 105.135580][ T5592] 8021q: adding VLAN 0 to HW filter on device bond0 [ 105.161286][ T1439] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.164041][ T1439] bridge0: port 1(bridge_slave_0) entered forwarding state [ 105.222237][ T3282] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.222585][ T3282] bridge0: port 2(bridge_slave_1) entered forwarding state [ 105.305465][ T4902] Bluetooth: hci3: command tx timeout [ 105.305501][ T4902] Bluetooth: hci4: command tx timeout [ 105.305525][ T4902] Bluetooth: hci2: command tx timeout [ 105.307160][ T5592] 8021q: adding VLAN 0 to HW filter on device team0 [ 105.390663][ T1021] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.390899][ T1021] bridge0: port 1(bridge_slave_0) entered forwarding state [ 105.421312][ T5588] 8021q: adding VLAN 0 to HW filter on device bond0 [ 105.479760][ T3282] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.480024][ T3282] bridge0: port 2(bridge_slave_1) entered forwarding state [ 105.612162][ T5588] 8021q: adding VLAN 0 to HW filter on device team0 [ 105.706941][ T5593] 8021q: adding VLAN 0 to HW filter on device bond0 [ 105.712460][ T209] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.712636][ T209] bridge0: port 1(bridge_slave_0) entered forwarding state [ 105.811112][ T209] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.811346][ T209] bridge0: port 2(bridge_slave_1) entered forwarding state [ 105.912787][ T5593] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.052618][ T68] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.052763][ T68] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.129860][ T68] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.130004][ T68] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.627274][ T5585] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.170489][ T5585] veth0_vlan: entered promiscuous mode [ 107.195794][ T5594] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.275685][ T5585] veth1_vlan: entered promiscuous mode [ 107.480827][ T5592] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.606808][ T5585] veth0_macvtap: entered promiscuous mode [ 107.662559][ T5585] veth1_macvtap: entered promiscuous mode [ 107.678355][ T5594] veth0_vlan: entered promiscuous mode [ 107.767617][ T5594] veth1_vlan: entered promiscuous mode [ 107.854307][ T5588] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.886193][ T5585] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 107.921960][ T5585] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 107.934221][ T5593] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.942593][ T5592] veth0_vlan: entered promiscuous mode [ 108.040243][ T5594] veth0_macvtap: entered promiscuous mode [ 108.052572][ T5592] veth1_vlan: entered promiscuous mode [ 108.181564][ T5594] veth1_macvtap: entered promiscuous mode [ 108.577794][ T5594] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 108.697121][ T5588] veth0_vlan: entered promiscuous mode [ 108.703155][ T5594] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 108.793836][ T5592] veth0_macvtap: entered promiscuous mode [ 108.829600][ T5588] veth1_vlan: entered promiscuous mode [ 108.861341][ T5592] veth1_macvtap: entered promiscuous mode [ 108.943109][ T1021] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.943131][ T1021] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.139311][ T5592] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 109.300786][ T5592] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 109.353055][ T209] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.353076][ T209] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.570132][ T5588] veth0_macvtap: entered promiscuous mode [ 109.578843][ T5593] veth0_vlan: entered promiscuous mode [ 109.598027][ T68] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.598048][ T68] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.601937][ T5588] veth1_macvtap: entered promiscuous mode [ 109.681570][ T5585] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 109.768252][ T5593] veth1_vlan: entered promiscuous mode [ 110.082177][ T5588] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 110.094242][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.094263][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.283245][ T5588] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 110.369382][ T68] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.369408][ T68] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.636279][ T5593] veth0_macvtap: entered promiscuous mode [ 110.649231][ T1021] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.649293][ T1021] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.709766][ T5593] veth1_macvtap: entered promiscuous mode [ 111.547954][ T5593] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 111.580561][ T1410] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.580586][ T1410] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.582416][ T5593] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 111.746488][ T46] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.216433][ T1410] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.216456][ T1410] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.828555][ T209] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.828582][ T209] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.915165][ T5826] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 113.134267][ T68] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.150837][ T68] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.327106][ T209] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.327130][ T209] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.398880][ T1302] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.399996][ T1302] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.400316][ T1302] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.478549][ T1302] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.735697][ T3282] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.735745][ T3282] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.735783][ T3282] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.735818][ T3282] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.735854][ T3282] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.735891][ T3282] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.735921][ T3282] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.735953][ T3282] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.735989][ T3282] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.736026][ T3282] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.736064][ T3282] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.736103][ T3282] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.748241][ T1302] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.301501][ T5851] overlayfs: missing 'lowerdir' [ 115.507922][ T5864] syz.0.34 uses obsolete (PF_INET,SOCK_PACKET) [ 115.890058][ C1] Illegal XDP return value 16128 on prog (id 10) dev bond_slave_0, expect packet loss! [ 115.916058][ T5869] netlink: 36 bytes leftover after parsing attributes in process `syz.3.36'. [ 116.555536][ T5888] overlayfs: missing 'lowerdir' [ 116.744672][ T5895] netlink: 72 bytes leftover after parsing attributes in process `syz.0.47'. [ 117.144166][ T5906] tipc: Started in network mode [ 117.144205][ T5906] tipc: Node identity ac14140f, cluster identity 4711 [ 117.207304][ T5906] tipc: Enabled bearer , priority 10 [ 117.427233][ T5920] IPv6: NLM_F_CREATE should be specified when creating new route [ 117.427609][ T5920] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 117.427624][ T5920] IPv6: NLM_F_CREATE should be set when creating new route [ 117.537567][ T5926] overlayfs: missing 'lowerdir' [ 117.770689][ T5931] netlink: 72 bytes leftover after parsing attributes in process `syz.3.63'. [ 118.369486][ T5945] tipc: Started in network mode [ 118.369526][ T5945] tipc: Node identity ac14140f, cluster identity 4711 [ 118.370014][ T5948] netlink: 8 bytes leftover after parsing attributes in process `syz.1.71'. [ 118.420454][ T5945] tipc: Enabled bearer , priority 10 [ 118.449519][ T5720] tipc: Node number set to 2886997007 [ 118.812314][ T5958] netlink: 72 bytes leftover after parsing attributes in process `syz.3.76'. [ 119.287625][ T5968] overlayfs: missing 'lowerdir' [ 119.496586][ T198] tipc: Node number set to 2886997007 [ 119.772475][ T5980] tipc: Started in network mode [ 119.772615][ T5980] tipc: Node identity ac14140f, cluster identity 4711 [ 119.810730][ T5987] netlink: 32 bytes leftover after parsing attributes in process `syz.0.90'. [ 119.815220][ T5980] tipc: Enabled bearer , priority 10 [ 120.260736][ T6003] netlink: 'syz.2.93': attribute type 2 has an invalid length. [ 120.333038][ T6004] netlink: 12 bytes leftover after parsing attributes in process `syz.3.89'. [ 120.390131][ T6004] Bluetooth: ISO socket layer initialized [ 121.447279][ T31] tipc: Node number set to 2886997007 [ 121.814368][ T6022] netlink: 72 bytes leftover after parsing attributes in process `syz.2.102'. [ 121.933631][ T6025] tipc: Started in network mode [ 121.933667][ T6025] tipc: Node identity ac14140f, cluster identity 4711 [ 121.949004][ T6025] tipc: Enabled bearer , priority 10 [ 122.524409][ T6047] netlink: 12 bytes leftover after parsing attributes in process `syz.3.109'. [ 123.503305][ T6054] netlink: 72 bytes leftover after parsing attributes in process `syz.2.117'. [ 124.375209][ T198] tipc: Node number set to 2886997007 [ 132.909629][ T1331] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.909727][ T1331] ieee802154 phy1 wpan1: encryption failed: -22 [ 135.485147][ T6058] tipc: Enabling of bearer rejected, already enabled [ 135.489854][ T6085] netlink: 12 bytes leftover after parsing attributes in process `syz.1.128'. [ 135.589945][ T6095] binder: 6094:6095 ioctl c0306201 2000000007c0 returned -22 [ 136.100090][ T6112] tipc: Enabling of bearer rejected, already enabled [ 136.175580][ T6114] binder: 6113:6114 ioctl c0306201 2000000007c0 returned -22 [ 137.194827][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 137.214836][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 137.224821][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 137.234847][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 137.244820][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 137.254827][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 137.264820][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 137.274843][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 137.284817][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 137.294822][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 139.561650][ T6137] netlink: 12 bytes leftover after parsing attributes in process `syz.0.142'. [ 140.274088][ T6145] tipc: Enabling of bearer rejected, already enabled [ 145.149936][ T6187] tipc: Enabling of bearer rejected, already enabled [ 145.300157][ T6193] FAULT_INJECTION: forcing a failure. [ 145.300157][ T6193] name fail_futex, interval 1, probability 0, space 0, times 1 [ 145.300215][ T6193] CPU: 0 UID: 0 PID: 6193 Comm: syz.2.168 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 145.300243][ T6193] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 145.300265][ T6193] Call Trace: [ 145.300275][ T6193] [ 145.300285][ T6193] dump_stack_lvl+0xe8/0x150 [ 145.300336][ T6193] should_fail_ex+0x46b/0x600 [ 145.300381][ T6193] get_futex_key+0x1b4/0x1580 [ 145.300423][ T6193] ? __pfx_futex_wake_mark+0x10/0x10 [ 145.300460][ T6193] ? __pfx_get_futex_key+0x10/0x10 [ 145.300512][ T6193] futex_wake+0x119/0x600 [ 145.300545][ T6193] ? __pfx_futex_wait+0x10/0x10 [ 145.300577][ T6193] ? __pfx_futex_wake+0x10/0x10 [ 145.300622][ T6193] do_futex+0x458/0x4e0 [ 145.300652][ T6193] ? __pfx_do_futex+0x10/0x10 [ 145.300687][ T6193] __se_sys_futex+0x3a8/0x450 [ 145.300727][ T6193] ? ksys_write+0xfe/0x270 [ 145.300758][ T6193] ? __pfx___se_sys_futex+0x10/0x10 [ 145.300784][ T6193] ? __pfx_ksys_write+0x10/0x10 [ 145.300821][ T6193] ? __x64_sys_futex+0x21/0xf0 [ 145.300850][ T6193] do_syscall_64+0x166/0x520 [ 145.300882][ T6193] ? trace_irq_disable+0x3b/0x140 [ 145.300915][ T6193] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 145.300939][ T6193] ? clear_bhb_loop+0x70/0xc0 [ 145.300968][ T6193] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 145.300992][ T6193] RIP: 0033:0x7f97fa62e1d9 [ 145.301020][ T6193] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 145.301040][ T6193] RSP: 002b:00007f97f88860e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 145.301065][ T6193] RAX: ffffffffffffffda RBX: 00007f97fa8b5fa8 RCX: 00007f97fa62e1d9 [ 145.301082][ T6193] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f97fa8b5fac [ 145.301097][ T6193] RBP: 00007f97fa8b5fa0 R08: 3fffffffffffffff R09: 0000000000000000 [ 145.301113][ T6193] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 145.301128][ T6193] R13: 00007f97fa8b6038 R14: 00007ffda07a71b0 R15: 00007ffda07a7298 [ 145.301164][ T6193] [ 148.399490][ T6234] FAULT_INJECTION: forcing a failure. [ 148.399490][ T6234] name fail_futex, interval 1, probability 0, space 0, times 0 [ 148.399534][ T6234] CPU: 1 UID: 0 PID: 6234 Comm: syz.3.181 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 148.399552][ T6234] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 148.399572][ T6234] Call Trace: [ 148.399580][ T6234] [ 148.399588][ T6234] dump_stack_lvl+0xe8/0x150 [ 148.399618][ T6234] should_fail_ex+0x46b/0x600 [ 148.399650][ T6234] get_futex_key+0x1b4/0x1580 [ 148.399679][ T6234] ? __pfx_futex_wake_mark+0x10/0x10 [ 148.399705][ T6234] ? __pfx_get_futex_key+0x10/0x10 [ 148.399740][ T6234] futex_wake+0x119/0x600 [ 148.399763][ T6234] ? __pfx_futex_wait+0x10/0x10 [ 148.399784][ T6234] ? __pfx_futex_wake+0x10/0x10 [ 148.399817][ T6234] do_futex+0x458/0x4e0 [ 148.399838][ T6234] ? __pfx_do_futex+0x10/0x10 [ 148.399863][ T6234] __se_sys_futex+0x3a8/0x450 [ 148.399883][ T6234] ? ksys_write+0xfe/0x270 [ 148.399906][ T6234] ? __pfx___se_sys_futex+0x10/0x10 [ 148.399924][ T6234] ? __pfx_ksys_write+0x10/0x10 [ 148.400004][ T6234] ? __x64_sys_futex+0x21/0xf0 [ 148.400033][ T6234] do_syscall_64+0x166/0x520 [ 148.400074][ T6234] ? trace_irq_disable+0x3b/0x140 [ 148.400098][ T6234] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 148.400115][ T6234] ? clear_bhb_loop+0x70/0xc0 [ 148.400134][ T6234] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 148.400151][ T6234] RIP: 0033:0x7ffb6976e1d9 [ 148.400166][ T6234] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 148.400179][ T6234] RSP: 002b:00007ffb679c60e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 148.400197][ T6234] RAX: ffffffffffffffda RBX: 00007ffb699f5fa8 RCX: 00007ffb6976e1d9 [ 148.400209][ T6234] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007ffb699f5fac [ 148.400219][ T6234] RBP: 00007ffb699f5fa0 R08: 3fffffffffffffff R09: 0000000000000000 [ 148.400230][ T6234] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 148.400240][ T6234] R13: 00007ffb699f6038 R14: 00007ffebfac8bf0 R15: 00007ffebfac8cd8 [ 148.400265][ T6234] [ 158.501577][ T6213] syzkaller0: entered promiscuous mode [ 158.513856][ T6230] tipc: Enabling of bearer rejected, already enabled [ 158.729112][ T6249] netlink: 12 bytes leftover after parsing attributes in process `syz.3.189'. [ 159.023342][ T6257] FAULT_INJECTION: forcing a failure. [ 159.023342][ T6257] name fail_futex, interval 1, probability 0, space 0, times 0 [ 159.023381][ T6257] CPU: 0 UID: 0 PID: 6257 Comm: syz.3.192 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 159.023408][ T6257] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 159.023428][ T6257] Call Trace: [ 159.023435][ T6257] [ 159.023442][ T6257] dump_stack_lvl+0xe8/0x150 [ 159.023473][ T6257] should_fail_ex+0x46b/0x600 [ 159.023504][ T6257] get_futex_key+0x1b4/0x1580 [ 159.023534][ T6257] ? __pfx_futex_wake_mark+0x10/0x10 [ 159.023560][ T6257] ? __pfx_get_futex_key+0x10/0x10 [ 159.023595][ T6257] futex_wake+0x119/0x600 [ 159.023617][ T6257] ? __pfx_futex_wait+0x10/0x10 [ 159.023638][ T6257] ? __pfx_futex_wake+0x10/0x10 [ 159.023671][ T6257] do_futex+0x458/0x4e0 [ 159.023693][ T6257] ? __pfx_do_futex+0x10/0x10 [ 159.023717][ T6257] __se_sys_futex+0x3a8/0x450 [ 159.023738][ T6257] ? ksys_write+0xfe/0x270 [ 159.023762][ T6257] ? __pfx___se_sys_futex+0x10/0x10 [ 159.023780][ T6257] ? __pfx_ksys_write+0x10/0x10 [ 159.023806][ T6257] ? __x64_sys_futex+0x21/0xf0 [ 159.023825][ T6257] do_syscall_64+0x166/0x520 [ 159.023849][ T6257] ? trace_irq_disable+0x3b/0x140 [ 159.023876][ T6257] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 159.023892][ T6257] ? clear_bhb_loop+0x70/0xc0 [ 159.023912][ T6257] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 159.023928][ T6257] RIP: 0033:0x7ffb6976e1d9 [ 159.023943][ T6257] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 159.023956][ T6257] RSP: 002b:00007ffb679c60e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 159.023974][ T6257] RAX: ffffffffffffffda RBX: 00007ffb699f5fa8 RCX: 00007ffb6976e1d9 [ 159.023986][ T6257] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007ffb699f5fac [ 159.023996][ T6257] RBP: 00007ffb699f5fa0 R08: 3fffffffffffffff R09: 0000000000000000 [ 159.024007][ T6257] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 159.024017][ T6257] R13: 00007ffb699f6038 R14: 00007ffebfac8bf0 R15: 00007ffebfac8cd8 [ 159.024042][ T6257] [ 161.943401][ T6282] ======================================================= [ 161.943401][ T6282] WARNING: The mand mount option has been deprecated and [ 161.943401][ T6282] and is ignored by this kernel. Remove the mand [ 161.943401][ T6282] option from the mount to silence this warning. [ 161.943401][ T6282] ======================================================= [ 161.995212][ T6282] overlayfs: missing 'lowerdir' [ 162.162269][ T5596] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 162.187553][ T5596] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 162.214891][ T5596] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 162.225747][ T5596] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 162.227243][ T5596] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 162.778558][ T5596] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 162.816098][ T5596] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 162.820505][ T5596] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 162.830868][ T5596] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 162.836576][ T5596] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 164.836208][ T5602] Bluetooth: hci5: command tx timeout [ 165.006246][ T5602] Bluetooth: hci6: command tx timeout [ 165.311738][ T6313] netlink: 12 bytes leftover after parsing attributes in process `syz.0.201'. [ 165.311879][ T6313] netlink: 84 bytes leftover after parsing attributes in process `syz.0.201'. [ 165.311907][ T6313] netlink: 28 bytes leftover after parsing attributes in process `syz.0.201'. [ 165.660974][ T6320] overlayfs: missing 'lowerdir' [ 166.905900][ T5602] Bluetooth: hci5: command tx timeout [ 167.065075][ T5602] Bluetooth: hci6: command tx timeout [ 167.220185][ T6343] overlayfs: missing 'lowerdir' [ 167.626231][ T6353] netlink: 'syz.3.228': attribute type 29 has an invalid length. [ 167.730014][ T6356] netlink: 144 bytes leftover after parsing attributes in process `syz.2.229'. [ 168.010819][ T6366] overlay: Unknown parameter '/' [ 168.985103][ T5602] Bluetooth: hci5: command tx timeout [ 169.145133][ T5602] Bluetooth: hci6: command tx timeout [ 169.683120][ T6385] netlink: 144 bytes leftover after parsing attributes in process `syz.0.239'. [ 171.075122][ T5602] Bluetooth: hci5: command tx timeout [ 171.225144][ T5602] Bluetooth: hci6: command tx timeout [ 171.453081][ T6393] overlay: Unknown parameter '/' [ 178.458237][ T46] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.276031][ T46] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.389090][ T6478] sch_tbf: burst 65537 is lower than device lo mtu (65550) ! [ 180.974139][ T46] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.414714][ T46] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.710128][ T6542] netlink: 24 bytes leftover after parsing attributes in process `syz.2.294'. [ 182.710155][ T6542] netlink: 24 bytes leftover after parsing attributes in process `syz.2.294'. [ 182.958271][ T46] bridge_slave_1: left allmulticast mode [ 182.958378][ T46] bridge_slave_1: left promiscuous mode [ 182.988063][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 183.410825][ T46] bridge_slave_0: left allmulticast mode [ 183.410867][ T46] bridge_slave_0: left promiscuous mode [ 183.411386][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 185.203344][ T6602] netlink: 'syz.0.323': attribute type 1 has an invalid length. [ 185.435733][ T46] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 185.515767][ T46] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 185.566640][ T46] bond0 (unregistering): Released all slaves [ 185.893499][ T6570] warning: `syz.3.307' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 186.777192][ T6639] Zero length message leads to an empty skb [ 187.049271][ T6285] bridge0: port 1(bridge_slave_0) entered blocking state [ 187.049584][ T6285] bridge0: port 1(bridge_slave_0) entered disabled state [ 187.049762][ T6285] bridge_slave_0: entered allmulticast mode [ 187.053180][ T6285] bridge_slave_0: entered promiscuous mode [ 187.218651][ T6285] bridge0: port 2(bridge_slave_1) entered blocking state [ 187.218800][ T6285] bridge0: port 2(bridge_slave_1) entered disabled state [ 187.218965][ T6285] bridge_slave_1: entered allmulticast mode [ 187.251989][ T6285] bridge_slave_1: entered promiscuous mode [ 187.280505][ T6296] bridge0: port 1(bridge_slave_0) entered blocking state [ 187.280634][ T6296] bridge0: port 1(bridge_slave_0) entered disabled state [ 187.280784][ T6296] bridge_slave_0: entered allmulticast mode [ 187.317170][ T6296] bridge_slave_0: entered promiscuous mode [ 187.439311][ T6296] bridge0: port 2(bridge_slave_1) entered blocking state [ 187.439531][ T6296] bridge0: port 2(bridge_slave_1) entered disabled state [ 187.439742][ T6296] bridge_slave_1: entered allmulticast mode [ 187.469731][ T6296] bridge_slave_1: entered promiscuous mode [ 187.645504][ T6285] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 188.390821][ T6285] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 188.547959][ T6686] netlink: 'syz.3.360': attribute type 14 has an invalid length. [ 188.597513][ T6296] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 188.721961][ T6296] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 188.850265][ T6285] team0: Port device team_slave_0 added [ 188.948693][ T6285] team0: Port device team_slave_1 added [ 188.963648][ T6296] team0: Port device team_slave_0 added [ 189.133997][ T6296] team0: Port device team_slave_1 added [ 190.152191][ T46] hsr_slave_0: left promiscuous mode [ 190.195039][ T46] hsr_slave_1: left promiscuous mode [ 190.210821][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 190.210972][ T46] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 190.251134][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 190.251165][ T46] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 190.408697][ T46] veth1_macvtap: left promiscuous mode [ 190.408913][ T46] veth0_macvtap: left promiscuous mode [ 190.409116][ T46] veth1_vlan: left promiscuous mode [ 190.414560][ T46] veth0_vlan: left promiscuous mode [ 191.626354][ T46] team0 (unregistering): Port device team_slave_1 removed [ 191.690954][ T46] team0 (unregistering): Port device team_slave_0 removed [ 191.892670][ T6758] netlink: 272 bytes leftover after parsing attributes in process `syz.0.388'. [ 192.029216][ T6285] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 192.029235][ T6285] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 192.029265][ T6285] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 192.348758][ T6714] netlink: 128 bytes leftover after parsing attributes in process `syz.3.369'. [ 192.348801][ T6714] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 192.386047][ T5247] 8021q: adding VLAN 0 to HW filter on device eth2 [ 192.390472][ T6285] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 192.390488][ T6285] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 192.390512][ T6285] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 192.407710][ T6296] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 192.407769][ T6296] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 192.407842][ T6296] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 192.595119][ T6296] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 192.595140][ T6296] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 192.595170][ T6296] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 192.707228][ T6781] binder: 6779:6781 ioctl c0306201 0 returned -14 [ 193.024532][ T6285] hsr_slave_0: entered promiscuous mode [ 193.039094][ T6285] hsr_slave_1: entered promiscuous mode [ 193.140534][ T6296] hsr_slave_0: entered promiscuous mode [ 193.141904][ T6296] hsr_slave_1: entered promiscuous mode [ 193.144586][ T6296] debugfs: 'hsr0' already exists in 'hsr' [ 193.144611][ T6296] Cannot create hsr debugfs directory [ 193.298280][ T6800] binder: 6798:6800 ioctl c0306201 0 returned -14 [ 193.384398][ T6803] xt_socket: unknown flags 0x20 [ 194.372400][ T1331] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.385693][ T1331] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.257828][ T46] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.367599][ T5247] 8021q: adding VLAN 0 to HW filter on device eth1 [ 195.697693][ T6875] netlink: 16 bytes leftover after parsing attributes in process `syz.2.437'. [ 196.095876][ T6884] netlink: 8 bytes leftover after parsing attributes in process `syz.0.436'. [ 196.937451][ T46] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.223255][ T6285] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 197.342824][ T6285] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 197.680811][ T46] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.773280][ T6285] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 197.863655][ T6285] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 197.947269][ T5247] 8021q: adding VLAN 0 to HW filter on device eth3 [ 197.986819][ T6285] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 198.078560][ T6285] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 198.233504][ T6285] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 198.344666][ T6285] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 198.643379][ T46] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.129151][ T6296] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 199.218592][ T6296] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 199.239431][ T6296] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 199.297206][ T6296] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 199.419536][ T6296] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 199.490461][ T6296] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 199.506230][ T6296] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 199.613029][ T6296] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 199.903869][ T6977] netlink: 'syz.2.470': attribute type 3 has an invalid length. [ 199.903899][ T6977] netlink: 132 bytes leftover after parsing attributes in process `syz.2.470'. [ 200.286907][ T46] bridge_slave_1: left allmulticast mode [ 200.286946][ T46] bridge_slave_1: left promiscuous mode [ 200.293202][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 200.493126][ T46] bridge_slave_0: left allmulticast mode [ 200.493166][ T46] bridge_slave_0: left promiscuous mode [ 200.493441][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 201.294327][ T7020] binder: 7018:7020 ioctl c0306201 0 returned -14 [ 201.705395][ T7034] netlink: 7136 bytes leftover after parsing attributes in process `syz.0.491'. [ 201.705426][ T7034] netlink: 7136 bytes leftover after parsing attributes in process `syz.0.491'. [ 201.794349][ T7040] binder: 7039:7040 ioctl c0306201 0 returned -14 [ 201.917317][ T46] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 201.997330][ T46] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 202.043486][ T46] bond0 (unregistering): Released all slaves [ 202.181266][ T5247] 8021q: adding VLAN 0 to HW filter on device eth4 [ 202.366324][ T46] tipc: Disabling bearer [ 202.373860][ T46] tipc: Left network mode [ 202.420106][ T7060] binder: 7059:7060 ioctl c0306201 0 returned -14 [ 202.600891][ T7066] tipc: Enabling of bearer rejected, already enabled [ 202.664473][ T6285] 8021q: adding VLAN 0 to HW filter on device bond0 [ 203.011779][ T7080] netlink: 128 bytes leftover after parsing attributes in process `syz.2.510'. [ 203.011820][ T7080] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 203.262583][ T6285] 8021q: adding VLAN 0 to HW filter on device team0 [ 203.372767][ T209] bridge0: port 1(bridge_slave_0) entered blocking state [ 203.379009][ T209] bridge0: port 1(bridge_slave_0) entered forwarding state [ 203.586269][ T6296] 8021q: adding VLAN 0 to HW filter on device bond0 [ 203.616510][ T1021] bridge0: port 2(bridge_slave_1) entered blocking state [ 203.616765][ T1021] bridge0: port 2(bridge_slave_1) entered forwarding state [ 203.974307][ T6296] 8021q: adding VLAN 0 to HW filter on device team0 [ 204.081007][ T5247] 8021q: adding VLAN 0 to HW filter on device eth5 [ 204.488661][ T1302] bridge0: port 1(bridge_slave_0) entered blocking state [ 204.489477][ T1302] bridge0: port 1(bridge_slave_0) entered forwarding state [ 204.580560][ T1302] bridge0: port 2(bridge_slave_1) entered blocking state [ 204.580702][ T1302] bridge0: port 2(bridge_slave_1) entered forwarding state [ 205.916948][ T46] hsr_slave_0: left promiscuous mode [ 205.956445][ T46] hsr_slave_1: left promiscuous mode [ 205.957874][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 205.957917][ T46] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 206.020732][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 206.020766][ T46] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 206.204293][ T7175] netlink: 4 bytes leftover after parsing attributes in process `syz.0.546'. [ 206.328621][ T46] veth1_macvtap: left promiscuous mode [ 206.328740][ T46] veth0_macvtap: left promiscuous mode [ 206.329002][ T46] veth1_vlan: left promiscuous mode [ 206.329192][ T46] veth0_vlan: left promiscuous mode [ 206.481351][ T7190] netlink: 'syz.3.551': attribute type 2 has an invalid length. [ 206.481378][ T7190] netlink: 'syz.3.551': attribute type 2 has an invalid length. [ 206.966795][ T7205] netlink: 12 bytes leftover after parsing attributes in process `syz.2.557'. [ 207.536793][ T7226] netlink: 7136 bytes leftover after parsing attributes in process `syz.2.567'. [ 207.690758][ T7232] netlink: 12 bytes leftover after parsing attributes in process `syz.0.570'. [ 207.896836][ T7241] netlink: 'syz.3.573': attribute type 10 has an invalid length. [ 208.025834][ T46] team0 (unregistering): Port device team_slave_1 removed [ 208.127908][ T46] team0 (unregistering): Port device team_slave_0 removed [ 208.344175][ T7248] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 208.624345][ T5247] 8021q: adding VLAN 0 to HW filter on device eth6 [ 208.664449][ T7241] batman_adv: batadv0: Adding interface: vlan0 [ 208.664468][ T7241] batman_adv: batadv0: The MTU of interface vlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 208.664502][ T7241] batman_adv: batadv0: Interface activated: vlan0 [ 209.636017][ T5886] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 210.034887][ T5886] usb 3-1: Using ep0 maxpacket: 16 [ 210.077625][ T7283] netlink: 12 bytes leftover after parsing attributes in process `syz.0.583'. [ 210.100102][ T5886] usb 3-1: New USB device found, idVendor=12d1, idProduct=e155, bcdDevice=ce.aa [ 210.505738][ T5886] usb 3-1: config 6 has an invalid interface number: 105 but max is 0 [ 210.505771][ T5886] usb 3-1: config 6 has no interface number 0 [ 210.505810][ T5886] usb 3-1: config 6 interface 105 has no altsetting 0 [ 210.572298][ T7297] netlink: 8 bytes leftover after parsing attributes in process `syz.3.584'. [ 211.835904][ T5886] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 211.953945][ T6285] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 212.388887][ T5247] 8021q: adding VLAN 0 to HW filter on device eth7 [ 212.660256][ T5886] usb 3-1: can't set config #6, error -71 [ 213.040762][ T5886] usb 3-1: USB disconnect, device number 2 [ 213.080732][ T6296] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 213.836679][ T6285] veth0_vlan: entered promiscuous mode [ 214.031277][ T6285] veth1_vlan: entered promiscuous mode [ 214.271557][ T6285] veth0_macvtap: entered promiscuous mode [ 214.369957][ T6285] veth1_macvtap: entered promiscuous mode [ 214.533763][ T6285] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 214.629505][ T6285] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 214.660981][ T5247] 8021q: adding VLAN 0 to HW filter on device eth8 [ 214.731111][ T6296] veth0_vlan: entered promiscuous mode [ 215.005983][ T6296] veth1_vlan: entered promiscuous mode [ 215.828025][ T6296] veth0_macvtap: entered promiscuous mode [ 215.912606][ T67] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 215.912628][ T67] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 215.937148][ T6296] veth1_macvtap: entered promiscuous mode [ 216.052725][ T6296] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 216.253435][ T6296] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 216.289950][ T68] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 216.289976][ T68] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 216.290269][ T68] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.414863][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 217.414886][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 217.448156][ T3282] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.577963][ T46] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.579335][ T46] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.579382][ T46] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.579422][ T46] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.584145][ T46] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.584195][ T46] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.654363][ T7417] netlink: 12 bytes leftover after parsing attributes in process `syz.3.613'. [ 217.701730][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 217.701754][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 218.790497][ T7458] netlink: 12 bytes leftover after parsing attributes in process `syz.6.627'. [ 219.526218][ T7478] netlink: 8 bytes leftover after parsing attributes in process `syz.0.630'. [ 220.494802][ T7482] netlink: 11 bytes leftover after parsing attributes in process `syz.3.632'. [ 221.325124][ T7513] netlink: 12 bytes leftover after parsing attributes in process `syz.3.647'. [ 221.403727][ T7520] syz_tun: entered allmulticast mode [ 222.435000][ T60] Bluetooth: hci4: command 0x0406 tx timeout [ 222.435039][ T60] Bluetooth: hci1: command 0x0406 tx timeout [ 222.664867][ T5602] Bluetooth: hci2: command 0x0406 tx timeout [ 223.415310][ T7517] syz_tun: left allmulticast mode [ 223.588157][ T7571] netlink: 11 bytes leftover after parsing attributes in process `syz.2.667'. [ 223.604906][ T5701] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 223.775766][ T5701] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 223.848795][ T5701] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 223.848833][ T5701] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 223.848858][ T5701] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 223.848903][ T5701] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 224.032685][ T5701] usb 6-1: config 0 descriptor?? [ 224.642765][ T7558] fuse: Unknown parameter '90xffffffffffffffffUv1µÊîœtÈz}§' [ 225.729793][ T5701] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 225.729835][ T5701] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 225.729860][ T5701] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 225.729889][ T5701] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 226.539364][ T5701] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.00 Joystick [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 226.974298][ T5701] usb 6-1: USB disconnect, device number 2 [ 227.758909][ T7650] netlink: zone id is out of range [ 227.758930][ T7650] netlink: zone id is out of range [ 227.758946][ T7650] netlink: zone id is out of range [ 227.758956][ T7650] netlink: zone id is out of range [ 227.758965][ T7650] netlink: zone id is out of range [ 227.758973][ T7650] netlink: zone id is out of range [ 227.758983][ T7650] netlink: zone id is out of range [ 227.758992][ T7650] netlink: zone id is out of range [ 227.759000][ T7650] netlink: zone id is out of range [ 227.759009][ T7650] netlink: zone id is out of range [ 230.998344][ T7716] netlink: 8 bytes leftover after parsing attributes in process `syz.5.713'. [ 234.295634][ T49] usb 6-1: new full-speed USB device number 3 using dummy_hcd [ 234.752186][ T7776] netlink: 8 bytes leftover after parsing attributes in process `syz.2.734'. [ 235.278973][ T49] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 235.302541][ T49] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 235.302570][ T49] usb 6-1: Product: syz [ 235.302587][ T49] usb 6-1: Manufacturer: syz [ 235.302602][ T49] usb 6-1: SerialNumber: syz [ 235.478025][ T49] usb 6-1: config 0 descriptor?? [ 235.801513][ T49] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 235.980587][ T7798] netlink: 12 bytes leftover after parsing attributes in process `syz.3.742'. [ 237.316742][ T5780] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 237.586128][ T5780] usb 3-1: New USB device found, idVendor=15f4, idProduct=0015, bcdDevice=d1.6e [ 237.674693][ T5780] usb 3-1: config 54 has an invalid descriptor of length 0, skipping remainder of the config [ 237.712474][ T5780] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 237.712509][ T5780] usb 3-1: Product: syz [ 237.712564][ T5780] usb 3-1: Manufacturer: syz [ 237.712575][ T5780] usb 3-1: SerialNumber: syz [ 238.167144][ T5780] dvb-usb: found a 'Hanftek UMT-010 DVB-T USB2.0' in warm state. [ 238.168732][ T5780] dvb-usb: bulk message failed: -22 (3/0) [ 238.348823][ T49] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 238.582843][ T49] usb 6-1: USB disconnect, device number 3 [ 239.033243][ T7847] netlink: 8 bytes leftover after parsing attributes in process `syz.3.754'. [ 239.348762][ T5780] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 239.354197][ T5780] dvbdev: DVB: registering new adapter (Hanftek UMT-010 DVB-T USB2.0) [ 239.354277][ T5780] usb 3-1: media controller created [ 239.688411][ T5780] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 240.341861][ T5780] DVB: Unable to find symbol mt352_attach() [ 240.341880][ T5780] dvb-usb: no frontend was attached by 'Hanftek UMT-010 DVB-T USB2.0' [ 240.359320][ T5780] dvb-usb: bulk message failed: -22 (3/0) [ 240.375209][ T5780] dvb-usb: Hanftek UMT-010 DVB-T USB2.0 successfully initialized and connected. [ 240.506566][ T5780] usb 3-1: USB disconnect, device number 3 [ 240.909640][ T7876] net_ratelimit: 244 callbacks suppressed [ 240.909658][ T7876] openvswitch: netlink: nsh attr 251 is out of range max 3 [ 241.355055][ T5780] dvb-usb: Hanftek UMT-010 DVB-T USB2.0 successfully deinitialized and disconnected. [ 243.323340][ T7899] netlink: 36 bytes leftover after parsing attributes in process `syz.6.755'. [ 246.174986][ T5701] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 246.472502][ T5701] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 246.501681][ T5701] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 246.501713][ T5701] usb 4-1: Product: syz [ 246.501730][ T5701] usb 4-1: Manufacturer: syz [ 246.501747][ T5701] usb 4-1: SerialNumber: syz [ 246.561536][ T7943] netlink: 8 bytes leftover after parsing attributes in process `syz.5.782'. [ 247.685956][ T5701] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 247.686024][ T5701] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 249.362763][ T5701] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x0000011c. ret = -EPROTO [ 249.362823][ T5701] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 249.364059][ T5701] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 249.448108][ T5701] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -71 [ 249.513710][ T5701] usb 4-1: USB disconnect, device number 2 [ 249.713048][ T7976] netlink: 8 bytes leftover after parsing attributes in process `syz.2.794'. [ 249.772868][ T7976] netlink: 8 bytes leftover after parsing attributes in process `syz.2.794'. [ 250.484901][ T5886] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 250.636415][ T5886] usb 4-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 0.00 [ 250.639875][ T5886] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 250.639906][ T5886] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 250.701040][ T5886] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 250.701072][ T5886] usb 4-1: Product: syz [ 250.701088][ T5886] usb 4-1: Manufacturer: syz [ 250.701105][ T5886] usb 4-1: SerialNumber: syz [ 250.968188][ T5886] usb 4-1: Limiting number of CPorts to U8_MAX [ 251.937086][ C0] usb 4-1: short message received [ 252.180189][ T7991] X: renamed from veth0 (while UP) [ 252.291742][ C0] usb 4-1: failed to resubmit arpc in-urb: -19 [ 252.291798][ C0] usb 4-1: failed to resubmit arpc in-urb: -19 [ 252.291840][ C0] usb 4-1: failed to resubmit in-urb: -19 [ 252.291881][ C0] usb 4-1: failed to resubmit in-urb: -19 [ 252.291924][ C0] usb 4-1: failed to resubmit in-urb: -19 [ 252.291968][ C0] usb 4-1: failed to resubmit in-urb: -19 [ 252.293130][ T5780] usb 4-1: USB disconnect, device number 3 [ 252.359941][ T5780] usb 4-1: failed to send ARPC request 4: -19 [ 252.360040][ T5780] usb 4-1: failed to execute ARPC: -19 [ 252.360057][ T5780] usb 4-1: failed to flush cport 0: -19 [ 252.360076][ T5780] greybus greybus1: 0/0:0: failed to flush host cport: -19 [ 252.360255][ T5780] usb 4-1: failed to send ARPC request 2: -19 [ 252.360330][ T5780] usb 4-1: failed to execute ARPC: -19 [ 252.360348][ T5780] usb 4-1: failed to quiesce cport 0: -19 (0) [ 252.360367][ T5780] greybus greybus1: 0/0:0: failed to quiesce host cport: -19 [ 252.360634][ T5780] usb 4-1: failed to send ARPC request 3: -19 [ 252.360712][ T5780] usb 4-1: failed to execute ARPC: -19 [ 252.360729][ T5780] usb 4-1: failed to clear cport 0: -19 [ 252.360747][ T5780] greybus greybus1: 0/0:0: failed to clear host cport: -19 [ 252.607772][ T4902] Bluetooth: hci6: unexpected event 0x03 length: 1 < 11 [ 253.515103][ T5597] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 253.536566][ T5780] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 253.541027][ T8091] input: syz0 as /devices/virtual/input/input5 [ 253.665667][ T5597] usb 6-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice= 0.01 [ 253.666924][ T5597] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 253.666963][ T5597] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 253.705705][ T5780] usb 4-1: Using ep0 maxpacket: 16 [ 253.712287][ T5780] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 253.714445][ T5780] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 253.714472][ T5780] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 253.771793][ T5780] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 253.771822][ T5780] usb 4-1: Product: syz [ 253.771837][ T5780] usb 4-1: Manufacturer: syz [ 253.771851][ T5780] usb 4-1: SerialNumber: syz [ 253.857665][ T5780] usb 4-1: 0:2 : does not exist [ 254.033845][ T5780] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 254.062425][ T5597] as10x_usb: device has been detected [ 254.071883][ T5597] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan) [ 254.259592][ T5780] usb 4-1: USB disconnect, device number 4 [ 254.404163][ T5597] usb 6-1: DVB: registering adapter 1 frontend 0 (Abilis Systems DVB-Titan)... [ 254.702528][ T8106] INFO: trying to register non-static key. [ 254.708390][ T8106] The code is fine but needs lockdep annotation, or maybe [ 254.715531][ T8106] you didn't initialize this object before use? [ 254.721807][ T8106] turning off the locking correctness validator. [ 254.728169][ T8106] CPU: 0 UID: 0 PID: 8106 Comm: syz.5.836 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 254.739493][ T8106] Tainted: [L]=SOFTLOCKUP [ 254.743844][ T8106] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 254.753969][ T8106] Call Trace: [ 254.757286][ T8106] [ 254.760245][ T8106] dump_stack_lvl+0xe8/0x150 [ 254.764865][ T8106] assign_lock_key+0x133/0x150 [ 254.769657][ T8106] register_lock_class+0xcc/0x2e0 [ 254.774704][ T8106] ? __lock_acquire+0x747/0x2de0 [ 254.779694][ T8106] __lock_acquire+0x10c/0x2de0 [ 254.784498][ T8106] ? __lock_acquire+0x747/0x2de0 [ 254.789486][ T8106] ? __lock_acquire+0x747/0x2de0 [ 254.794484][ T8106] lock_acquire+0x115/0x350 [ 254.799025][ T8106] ? as102_stream_ctrl+0x27/0xc0 [ 254.804048][ T8106] ? as102_stream_ctrl+0x27/0xc0 [ 254.809044][ T8106] ? as102_stream_ctrl+0x27/0xc0 [ 254.814024][ T8106] mutex_lock_interruptible_nested+0x5a/0x1d0 [ 254.820121][ T8106] ? as102_stream_ctrl+0x27/0xc0 [ 254.825104][ T8106] as102_stream_ctrl+0x27/0xc0 [ 254.829923][ T8106] __dvb_frontend_open+0x2ef/0xc40 [ 254.835096][ T8106] ? mutex_lock_nested+0x152/0x1d0 [ 254.840237][ T8106] ? __pfx_dvb_frontend_open+0x10/0x10 [ 254.845729][ T8106] dvb_device_open+0x258/0x350 [ 254.850534][ T8106] chrdev_open+0x4dc/0x600 [ 254.854992][ T8106] ? __pfx_chrdev_open+0x10/0x10 [ 254.859963][ T8106] ? fsnotify_open_perm_and_set_mode+0x13b/0x6c0 [ 254.866341][ T8106] ? __pfx_chrdev_open+0x10/0x10 [ 254.871310][ T8106] do_dentry_open+0x849/0x1420 [ 254.876111][ T8106] vfs_open+0x3b/0x350 [ 254.880206][ T8106] ? path_openat+0x142d/0x1d60 [ 254.884998][ T8106] path_openat+0x1448/0x1d60 [ 254.889711][ T8106] do_file_open+0x23e/0x4a0 [ 254.894249][ T8106] ? __pfx_do_file_open+0x10/0x10 [ 254.899309][ T8106] ? alloc_fd+0x654/0x6d0 [ 254.903667][ T8106] do_sys_openat2+0x115/0x200 [ 254.908371][ T8106] ? __pfx_do_sys_openat2+0x10/0x10 [ 254.913605][ T8106] __x64_sys_openat+0x138/0x170 [ 254.918477][ T8106] do_syscall_64+0x166/0x520 [ 254.923117][ T8106] ? trace_irq_disable+0x3b/0x140 [ 254.928188][ T8106] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 254.934286][ T8106] ? clear_bhb_loop+0x70/0xc0 [ 254.938986][ T8106] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 254.944900][ T8106] RIP: 0033:0x7f1dc8d9ea0e [ 254.949426][ T8106] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 254.969046][ T8106] RSP: 002b:00007f1dc6ff3b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 254.977478][ T8106] RAX: ffffffffffffffda RBX: 00007f1dc6ff46c0 RCX: 00007f1dc8d9ea0e [ 254.985466][ T8106] RDX: 0000000000000802 RSI: 00007f1dc6ff3c00 RDI: ffffffffffffff9c [ 254.993451][ T8106] RBP: 00007f1dc6ff3c00 R08: 0000000000000000 R09: 0000000000000000 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 255.001445][ T8106] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 255.009432][ T8106] R13: 00007f1dc9066218 R14: 00007f1dc9066180 R15: 00007fff326213c8 [ 255.017612][ T8106] [ 255.066961][ T7823] udevd[7823]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 255.077111][ T5597] as10x_usb: error during firmware upload part1 [ 255.077670][ T5597] Registered device Abilis Systems DVB-Titan [ 255.225954][ T5780] usb 6-1: USB disconnect, device number 4 [ 255.236625][ T5780] Unregistered device Abilis Systems DVB-Titan [ 255.248787][ T5780] as10x_usb: device has been disconnected [ 255.806936][ T1331] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.806989][ T1331] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.726651][ T1439] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.166391][ T1439] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.396095][ T1439] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.616243][ T1439] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.985294][ T1439] bridge_slave_1: left allmulticast mode [ 257.985325][ T1439] bridge_slave_1: left promiscuous mode [ 257.985511][ T1439] bridge0: port 2(bridge_slave_1) entered disabled state [ 258.135627][ T1439] bridge_slave_0: left allmulticast mode [ 258.135657][ T1439] bridge_slave_0: left promiscuous mode [ 258.135838][ T1439] bridge0: port 1(bridge_slave_0) entered disabled state [ 258.815347][ T1439] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 258.895305][ T1439] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 258.916669][ T1439] bond0 (unregistering): Released all slaves [ 258.957545][ T5247] 8021q: adding VLAN 0 to HW filter on device eth9 [ 259.036344][ T1439] tipc: Disabling bearer [ 259.036502][ T1439] tipc: Left network mode [ 259.497361][ T5247] 8021q: adding VLAN 0 to HW filter on device eth10 [ 259.938645][ T5247] 8021q: adding VLAN 0 to HW filter on device eth11 [ 260.194873][ T1439] hsr_slave_0: left promiscuous mode [ 260.235561][ T1439] hsr_slave_1: left promiscuous mode [ 260.236323][ T1439] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 260.236345][ T1439] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 260.285529][ T1439] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 260.285568][ T1439] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 260.325449][ T1439] batman_adv: batadv0: Interface deactivated: vlan0 [ 260.325468][ T1439] batman_adv: batadv0: Removing interface: vlan0 [ 260.405240][ T1439] veth1_macvtap: left promiscuous mode [ 260.405289][ T1439] veth0_macvtap: left promiscuous mode [ 260.405381][ T1439] veth1_vlan: left promiscuous mode [ 260.405448][ T1439] veth0_vlan: left promiscuous mode [ 260.965300][ T1439] team0 (unregistering): Port device team_slave_1 removed [ 261.005892][ T1439] team0 (unregistering): Port device team_slave_0 removed [ 261.157196][ T5247] 8021q: adding VLAN 0 to HW filter on device eth12 [ 262.516150][ T1439] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.746458][ T1439] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.976213][ T1439] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.206520][ T1439] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.626441][ T1439] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.732185][ T5247] 8021q: adding VLAN 0 to HW filter on device eth13 [ 263.886807][ T1439] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 264.116374][ T1439] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 264.211003][ T5247] 8021q: adding VLAN 0 to HW filter on device eth14 [ 264.429370][ T1439] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 264.522337][ T5247] 8021q: adding VLAN 0 to HW filter on device eth15