last executing test programs: 4.792144098s ago: executing program 0 (id=912): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x5c, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x2002c0c4}, 0x0) 4.744968046s ago: executing program 0 (id=913): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r0, 0x0, 0x6f2}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) 3.892236463s ago: executing program 0 (id=934): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=@newqdisc={0x40, 0x24, 0x3fe3aa0262d8c583, 0x10000, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x12, 0x2, [@TCA_HHF_ADMIT_BYTES={0x8, 0x5, 0x9}, @TCA_HHF_HH_FLOWS_LIMIT={0x0, 0x3, 0x101}]}}]}, 0x40}}, 0x0) 3.733089335s ago: executing program 0 (id=937): mremap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3000, 0xa, &(0x7f0000ffb000/0x3000)=nil) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bond0\x00', 0x0}) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0x3da, 0x4) sendto$packet(r0, &(0x7f00000000c0)="3f03fe7f0302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c153cfdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) 3.684571515s ago: executing program 0 (id=938): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000), 0x109000, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb47, 0x9, 0x8, 0x80000001, 0x3}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0x0, 0x0) io_submit(0x0, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=@newlink={0x38, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x6, 0x0, 0x0, 0xffffff81}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000700), r1) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x3) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f00000006c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000500)=ANY=[], 0x94}, 0x1, 0x0, 0x0, 0x4000010}, 0x5) r5 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@ipv6_newnexthop={0x34, 0x68, 0x1, 0x70bd25, 0xfffffffe, {}, [@NHA_ENCAP={0xc, 0x8, 0x0, 0x1, @LWTUNNEL_IP_DST={0x63, 0x2, @dev={0xac, 0x14, 0x14, 0x21}}}, @NHA_ENCAP_TYPE={0x6, 0x7, 0x8}, @NHA_OIF={0x8, 0x5, r6}]}, 0x34}}, 0x40040d0) recvmmsg(r0, &(0x7f00000086c0)=[{{0x0, 0x0, 0x0}, 0x102}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, 0x0}, 0x1f}], 0x3, 0x4022, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000600), r0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000006c0015000000d9fece23b82004000000", @ANYRES32=r8, @ANYBLOB="000080000000000018003480050035"], 0x38}, 0x1, 0x300}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_AD_USER_PORT_KEY={0x6, 0x19, 0x7}, @IFLA_BOND_MODE={0x5, 0x1, 0x4}]}}}]}, 0x44}, 0x1, 0xba01}, 0x0) 2.821129702s ago: executing program 2 (id=943): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc00"/27], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x40, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0xaa3, 0xfffffffffffffff8}, {0x0, 0x8}}}, 0xb8}}, 0x0) 2.68842926s ago: executing program 0 (id=945): syz_usb_connect(0x2, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000011620140480b05101e8c00000001090212000100000000090401"], 0x0) syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x80402) getresuid(&(0x7f0000002f80), &(0x7f0000002fc0), &(0x7f0000003000)) r0 = socket$inet6(0xa, 0x3, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) pipe2$9p(&(0x7f0000001900), 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00'}, 0x10) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x2d) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0xff}, 0x7}, 0x1c) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)="88", 0xfdef}], 0x1) 2.687431855s ago: executing program 2 (id=946): prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r3, 0x84, 0x81, 0x0, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r4, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_STOP(r4, 0x54a1) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r3, 0x84, 0x19, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_IPV6_RTHDR(0xffffffffffffffff, 0x29, 0x39, 0x0, 0x18) unshare(0x64000600) 1.550309984s ago: executing program 4 (id=954): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mremap(&(0x7f00003ef000/0x3000)=nil, 0x3000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, 0x0, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) r3 = accept$alg(r2, 0x0, 0x0) sendmsg$alg(r3, 0x0, 0x0) write$binfmt_script(r3, 0x0, 0x0) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet(r5, &(0x7f0000000d00)=[{{&(0x7f0000000040)={0x2, 0x4e21, @rand_addr=0x64010101}, 0x10, 0x0}}, {{&(0x7f0000000880)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10, 0x0}}], 0x2, 0x4000) mmap(&(0x7f0000fa2000/0x3000)=nil, 0x3000, 0x3, 0x13, 0xffffffffffffffff, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a40), 0x4) madvise(&(0x7f000042f000/0x800000)=nil, 0x800000, 0x15) 1.526509726s ago: executing program 2 (id=955): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000011c0)="93bffce623851797a8dc79018d7716840ffc6906bb2b0eb2fe32d2f0048678cd35ef833c350900f95a94770a6845b091e69f243dea0d601c54e9c93ee3568b89a3427c84262ff67b679ccac305b5cea1dcd151d7bb5754603b6b0e362d8041bdc61529260e6c4046d55927c96dcce1609b9c4f8424b9da760270a470f95b99ebb6000000000000", 0x87}, {&(0x7f0000000400)="029993440c7a1d95d3bb8cf353fd63c588ffa39f0ff0fced20927ea4b2a247d082247558bef6b2b2cd6a0dffece1b36526e9388c344fb7ac429e434ccb0330483c0604aaf296d8218e240055cb92f17b1b47fd7b1b178ca0d1c470154ed985a179f87c9bc40206c86df9abc5", 0x6c}, {&(0x7f00000002c0)="ec75d081fcb7e79634ec1a1abfdebb6a38b0c57cc77b83d2eea81aad8f73b36abc2019cb08fcaaec9647a07d0a0965f0f1e39afd84e7e2523aaded5e09aa1e36fcc90c269ad6d38d57619127cee4253655c33b71054226c3b00b9ee6ae29f0b07bc6fe7981126ca804c1f64e6c19ba36b2778c5f4a1c58625fe19516af43c9870c5b8191e23778abe7df2280d459b1651686a53ca52dce9570444c153f9c2903ae4c868074e89477bf6ed2ab648b0498ac8c0f90844ed9a26675199d5ff9b391c1dec077b5099cf9aecd1a9d94e2", 0xce}, {&(0x7f0000000b80)="b97edc68d716252c8449bee174f6e06d864889b733fe11a2cd1b83edf4ee89f557882a6e115f6f313802bf3c797417d7b969c918598823448ed396000e44f8cc6a7a99db9bc97830b2df7971360f878a6cb35677e337e3ea1f6828196b30e485", 0x60}], 0x4}}, {{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000a00)="b1f56ee29c433328d3b2a83bd97e37007087acae7568edff43ed556d76770122635aea1dc48755381c71590cd542e796cc2669e2af442a03760c5cdfc691b3da35ad6a8d2ef9c2baa53a8dec36a2e434d46e643a1277b1dd932f3ef2cf46c257d6a19523b8b789ef34b46e461725b5e437323385b88c368f8bb5b933aa9169f5f7b51dd5319b801662", 0x89}, {&(0x7f0000000740)="5be3b011e12323e4ab88c0472f0700000000000000e71ba6231f303d2db97401439932cfd4855c4cc243dae723789d8a9a16be3135c5f82691837c90", 0x3c}], 0x2}}], 0x2, 0xc0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x501, 0x10008095, 0x0, 0x0) 1.341036405s ago: executing program 1 (id=957): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) r2 = pidfd_getfd(r1, r1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000440)='kfree\x00', 0xffffffffffffffff, 0x0, 0x5}, 0x18) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r3, 0x0, 0x3}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0}, 0x18) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000000), 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)={0x50, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x3}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x50}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000ec0)=ANY=[@ANYBLOB="440000000906010200120000000c0000000000000900020073797a310000000005000100070000001c0007800c00018008000140fffffffe0c000280080001407f"], 0x44}, 0x1, 0x0, 0x0, 0x10008086}, 0x4000050) setns(r2, 0x66020000) getsockname(r2, &(0x7f0000000280)=@isdn, &(0x7f00000000c0)=0x80) 1.339596238s ago: executing program 1 (id=958): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f00000001c0)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb}, 0x94) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r3 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000080)={r0}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/clients\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000003c0), 0x0, 0x1, 0x6) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_vs\x00') connect$inet(r4, &(0x7f0000000140)={0x2, 0x4e21, @empty}, 0x10) preadv(r5, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/79, 0x4f}], 0x1, 0xc9, 0x1) madvise(&(0x7f00005ce000/0x3000)=nil, 0x3000, 0xb) pread64(r2, &(0x7f0000000400)=""/154, 0x9a, 0x51) set_mempolicy(0x3, &(0x7f0000000000)=0x7, 0x7) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) syz_clone(0x20223000, 0x0, 0x0, 0x0, 0x0, 0x0) 1.235899522s ago: executing program 2 (id=959): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a64000000060a0b040000000000000000020000003800048034000180090001007866726d000000002400028008000140000000140500030000000000080002400000000408000440000000060900010073797a30000000000900020073797a32"], 0x8c}, 0x1, 0x0, 0x0, 0x20040885}, 0x40000) 1.200660102s ago: executing program 3 (id=960): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r0, 0x0, 0x6f2}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) 940.200674ms ago: executing program 2 (id=961): syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) mq_open(0x0, 0x40, 0x59, 0x0) connect$inet(r0, &(0x7f00000000c0)={0x2, 0xfffa, @empty}, 0x10) syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local={0x3}, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010100, @multicast2}, "00186371ae9b1c03"}}}}}, 0x0) 938.692387ms ago: executing program 1 (id=962): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 787.274798ms ago: executing program 1 (id=963): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f0000000680)=[@in6={0xa, 0x4e20, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x2}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000280)={0x1, 0x4008, 0x4, 0x0, r2}, &(0x7f00000002c0)=0x10) 770.906352ms ago: executing program 1 (id=964): clock_adjtime(0x3, 0x0) socket$inet6(0xa, 0x1, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x8) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeef, 0x8031, 0xffffffffffffffff, 0x55779000) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) madvise(&(0x7f0000304000/0x3000)=nil, 0x3000, 0x9) r4 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r4, 0x10e, 0xc, &(0x7f0000000040)=0x40, 0x4) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000003c0)=0x14) 663.204106ms ago: executing program 1 (id=965): prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r3, 0x84, 0x81, 0x0, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r4, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_STOP(r4, 0x54a1) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r3, 0x84, 0x19, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_IPV6_RTHDR(0xffffffffffffffff, 0x29, 0x39, 0x0, 0x18) unshare(0x64000600) 601.081808ms ago: executing program 4 (id=966): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc}) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r0, 0x3b82, 0x0) 593.048864ms ago: executing program 4 (id=967): r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='oom_score_adj\x00') writev(r0, &(0x7f0000000140)=[{&(0x7f00000000c0)='2', 0x1}], 0x1) 564.893738ms ago: executing program 4 (id=968): r0 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000440)={'syztnl1\x00', &(0x7f0000000640)={'ip6_vti0\x00', 0x0, 0x0, 0x0, 0x3, 0x9, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0xc0}}) 489.098428ms ago: executing program 4 (id=969): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x103a42, 0x0) ftruncate(r1, 0x6000000) r2 = fanotify_init(0x200, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) fanotify_mark(r2, 0x71, 0x40000009, r3, 0x0) semget$private(0x0, 0x2, 0x201) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x4000) 479.696258ms ago: executing program 4 (id=970): openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x6000}}) write$FUSE_INIT(r0, &(0x7f0000000280)={0x50, 0x0, 0x0, {0x7, 0x2b, 0x0, 0x19101204, 0x0, 0x0, 0x1, 0xe, 0x0, 0x0, 0x100, 0x200}}, 0x50) newfstatat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x100) syz_fuse_handle_req(r0, &(0x7f0000004200)="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", 0x2000, &(0x7f00000010c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x78, 0x0, 0x4, {0x8001, 0xcd, 0x0, {0xfffffffffffffffe, 0x80, 0x10, 0x7ff, 0xf, 0x2, 0xf79c000, 0x8, 0x20b, 0x6000, 0x578, 0x0, 0x0, 0x80000003, 0xc}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 445.08637ms ago: executing program 2 (id=971): clock_adjtime(0x3, 0x0) socket$inet6(0xa, 0x1, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)="89000000120081ae08060cdc030ec0007f03e3f70000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120c000200040001400400446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x52}, 0x8) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeef, 0x8031, 0xffffffffffffffff, 0x55779000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_route(0x10, 0x3, 0x0) close(0xffffffffffffffff) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000003c0)=0x14) ioctl$TIOCVHANGUP(r0, 0x5437, 0x2) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace$cont(0x11, r4, 0x10000000000005, 0xfffffffffffffffa) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 188.905929ms ago: executing program 3 (id=972): r0 = socket$inet_sctp(0x2, 0x5, 0x84) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r0, 0x84, 0x74, &(0x7f0000000040)=""/184, &(0x7f0000000100)=0xb8) 171.189966ms ago: executing program 3 (id=973): r0 = fsopen(&(0x7f0000000000)='9p\x00', 0x1) unshare(0x22020600) fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, &(0x7f0000000040)='&[&\x18\x00', &(0x7f0000000080)="6903", 0x2) 128.354687ms ago: executing program 3 (id=974): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000280)={0x1, 0x4008, 0x4}, &(0x7f00000002c0)=0x10) 53.014886ms ago: executing program 3 (id=975): clock_adjtime(0x3, 0x0) socket$inet6(0xa, 0x1, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x8) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeef, 0x8031, 0xffffffffffffffff, 0x55779000) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) madvise(&(0x7f0000304000/0x3000)=nil, 0x3000, 0x9) r4 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r4, 0x10e, 0xc, &(0x7f0000000040)=0x40, 0x4) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000003c0)=0x14) 0s ago: executing program 3 (id=976): r0 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r0, &(0x7f0000009c40)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000240)=""/171, 0xab}, {0x0}], 0x2}, 0x3ff}], 0x1, 0x40000000, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0xd6, &(0x7f00000005c0)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xc8, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x1, 0x4e20, 0xb4, 0x0, @opaque="0896a54392cb4021f18fc2b08c6da017f13bb6277fbb54a24ee63866955029934abf05f8165523d397c1a52b2c0d2623fa0f2b4d31e9635c81c97f439b21b85355c1118a89c42f815c04d15c85457623bb6d283db5f6aac3645d3f12777ae998c7021e0cf96fe01f5da28e55e61a4cb6c35fe2c282ae674e3c18e9aaac459f0d2a5392800c49ba78c491867ccd6b55d682e49393ca880ab62771d5a728786119d5351c36721af34c7445950b"}}}}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.140' (ED25519) to the list of known hosts. [ 29.102835][ T6537] cgroup: Unknown subsys name 'net' [ 29.231854][ T6537] cgroup: Unknown subsys name 'cpuset' [ 29.233759][ T6537] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 29.377864][ T6537] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SS [ 30.429413][ T6551] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 30.442006][ T6555] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 30.453540][ T6561] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 30.453767][ T6561] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 30.453854][ T6561] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 30.454146][ T6561] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 30.454432][ T6561] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 30.454607][ T6561] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 30.456188][ T6562] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 30.456340][ T6562] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 30.456508][ T6562] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 30.458641][ T6563] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 30.459012][ T6561] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 30.459311][ T6563] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 30.459592][ T6563] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 30.460257][ T6563] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 30.460924][ T6563] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 30.461277][ T6563] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 30.462901][ T6563] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 30.463444][ T6563] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 30.463788][ T6563] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 30.465016][ T6563] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 30.465417][ T6563] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 30.468533][ T6560] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 30.469576][ T6563] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 30.621598][ T6548] chnl_net:caif_netlink_parms(): no params data found [ 30.647814][ T6547] chnl_net:caif_netlink_parms(): no params data found [ 30.662830][ T6553] chnl_net:caif_netlink_parms(): no params data found [ 30.678183][ T6548] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.679700][ T6548] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.681155][ T6548] bridge_slave_0: entered allmulticast mode [ 30.682724][ T6548] bridge_slave_0: entered promiscuous mode [ 30.713218][ T6548] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.714462][ T6548] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.715703][ T6548] bridge_slave_1: entered allmulticast mode [ 30.717070][ T6548] bridge_slave_1: entered promiscuous mode [ 30.739292][ T6548] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.745904][ T6547] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.745940][ T6547] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.745996][ T6547] bridge_slave_0: entered allmulticast mode [ 30.746466][ T6547] bridge_slave_0: entered promiscuous mode [ 30.756857][ T6548] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.763409][ T6547] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.764195][ T6547] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.764285][ T6547] bridge_slave_1: entered allmulticast mode [ 30.764759][ T6547] bridge_slave_1: entered promiscuous mode [ 30.772287][ T6557] chnl_net:caif_netlink_parms(): no params data found [ 30.779636][ T6548] team0: Port device team_slave_0 added [ 30.782715][ T6549] chnl_net:caif_netlink_parms(): no params data found [ 30.789362][ T6547] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.793426][ T6553] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.794790][ T6553] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.794879][ T6553] bridge_slave_0: entered allmulticast mode [ 30.795335][ T6553] bridge_slave_0: entered promiscuous mode [ 30.798107][ T6553] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.798130][ T6553] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.798177][ T6553] bridge_slave_1: entered allmulticast mode [ 30.798583][ T6553] bridge_slave_1: entered promiscuous mode [ 30.799540][ T6548] team0: Port device team_slave_1 added [ 30.810412][ T6547] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.821797][ T6548] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.821823][ T6548] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.821837][ T6548] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.822720][ T6548] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.822727][ T6548] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.822740][ T6548] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.852650][ T6548] hsr_slave_0: entered promiscuous mode [ 30.852966][ T6548] hsr_slave_1: entered promiscuous mode [ 30.858139][ T6547] team0: Port device team_slave_0 added [ 30.859964][ T6553] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.861343][ T6553] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.869809][ T6547] team0: Port device team_slave_1 added [ 30.884201][ T6557] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.884319][ T6557] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.884372][ T6557] bridge_slave_0: entered allmulticast mode [ 30.884763][ T6557] bridge_slave_0: entered promiscuous mode [ 30.899507][ T6557] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.899581][ T6557] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.899646][ T6557] bridge_slave_1: entered allmulticast mode [ 30.900058][ T6557] bridge_slave_1: entered promiscuous mode [ 30.904584][ T6547] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.904592][ T6547] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.904605][ T6547] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.905172][ T6547] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.905179][ T6547] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.905190][ T6547] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.914092][ T6553] team0: Port device team_slave_0 added [ 30.914839][ T6553] team0: Port device team_slave_1 added [ 30.921354][ T6549] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.921416][ T6549] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.921467][ T6549] bridge_slave_0: entered allmulticast mode [ 30.923031][ T6549] bridge_slave_0: entered promiscuous mode [ 30.923617][ T6549] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.923632][ T6549] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.923674][ T6549] bridge_slave_1: entered allmulticast mode [ 30.924051][ T6549] bridge_slave_1: entered promiscuous mode [ 30.941736][ T6553] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.941761][ T6553] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.941776][ T6553] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.949614][ T6557] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.952191][ T6557] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.960045][ T6547] hsr_slave_0: entered promiscuous mode [ 30.960319][ T6547] hsr_slave_1: entered promiscuous mode [ 30.960795][ T6547] debugfs: 'hsr0' already exists in 'hsr' [ 30.960833][ T6547] Cannot create hsr debugfs directory [ 30.961257][ T6553] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.961264][ T6553] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.961276][ T6553] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.963781][ T6549] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.964905][ T6549] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.985711][ T6557] team0: Port device team_slave_0 added [ 31.002959][ T6557] team0: Port device team_slave_1 added [ 31.006347][ T6549] team0: Port device team_slave_0 added [ 31.008218][ T6549] team0: Port device team_slave_1 added [ 31.016191][ T6553] hsr_slave_0: entered promiscuous mode [ 31.017538][ T6553] hsr_slave_1: entered promiscuous mode [ 31.018730][ T6553] debugfs: 'hsr0' already exists in 'hsr' [ 31.019733][ T6553] Cannot create hsr debugfs directory [ 31.036078][ T6557] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.037332][ T6557] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.040706][ T6557] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.041384][ T6557] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.041393][ T6557] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.041404][ T6557] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.052221][ T6549] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.052242][ T6549] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.052255][ T6549] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.067351][ T6549] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.067382][ T6549] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.067409][ T6549] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.119903][ T6557] hsr_slave_0: entered promiscuous mode [ 31.121161][ T6557] hsr_slave_1: entered promiscuous mode [ 31.121363][ T6557] debugfs: 'hsr0' already exists in 'hsr' [ 31.121373][ T6557] Cannot create hsr debugfs directory [ 31.125387][ T6549] hsr_slave_0: entered promiscuous mode [ 31.125702][ T6549] hsr_slave_1: entered promiscuous mode [ 31.125865][ T6549] debugfs: 'hsr0' already exists in 'hsr' [ 31.125873][ T6549] Cannot create hsr debugfs directory [ 31.175053][ T6548] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 31.188934][ T6548] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 31.191442][ T6548] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 31.194124][ T6548] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 31.227713][ T6548] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.227808][ T6548] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.227958][ T6548] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.227981][ T6548] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.233041][ T6547] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 31.235855][ T6547] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 31.241814][ T6547] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 31.246855][ T6547] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 31.267014][ T6553] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 31.269326][ T6553] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 31.277193][ T6553] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 31.279505][ T6553] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 31.287211][ T6547] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.287258][ T6547] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.287339][ T6547] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.287369][ T6547] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.298515][ T6548] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.309748][ T6553] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.309786][ T6553] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.309864][ T6553] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.309898][ T6553] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.317781][ T6557] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 31.320064][ T6557] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 31.333280][ T6557] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 31.336857][ T6548] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.340062][ T2017] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.341933][ T2017] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.343740][ T2017] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.345796][ T2017] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.347840][ T2017] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.350443][ T2017] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.359086][ T6557] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 31.378021][ T2017] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.378073][ T2017] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.381001][ T2017] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.381031][ T2017] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.388464][ T6548] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 31.391032][ T6548] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 31.394470][ T6549] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 31.396669][ T6549] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 31.404964][ T6553] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.407758][ T6553] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.416263][ T6547] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.419949][ T6549] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 31.427851][ T6549] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 31.436764][ T6547] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.445093][ T1822] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.445131][ T1822] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.445737][ T1822] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.445754][ T1822] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.451821][ T1822] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.451871][ T1822] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.452213][ T1822] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.452228][ T1822] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.488306][ T6548] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.527533][ T6548] veth0_vlan: entered promiscuous mode [ 31.529023][ T6548] veth1_vlan: entered promiscuous mode [ 31.547554][ T6547] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.553914][ T6557] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.565843][ T6549] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.581929][ T6547] veth0_vlan: entered promiscuous mode [ 31.584361][ T6549] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.592888][ T6553] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.595795][ T6547] veth1_vlan: entered promiscuous mode [ 31.607353][ T6548] veth0_macvtap: entered promiscuous mode [ 31.608346][ T6548] veth1_macvtap: entered promiscuous mode [ 31.610429][ T6557] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.612000][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.612018][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.614821][ T14] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.614842][ T14] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.618395][ T1991] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.618439][ T1991] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.622483][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.622520][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.634532][ T6548] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.636098][ T6548] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.636710][ T6547] veth0_macvtap: entered promiscuous mode [ 31.638108][ T6547] veth1_macvtap: entered promiscuous mode [ 31.649822][ T6549] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 31.652202][ T6549] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 31.658424][ T6547] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.659271][ T6547] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.666558][ T6553] veth0_vlan: entered promiscuous mode [ 31.667702][ T42] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.667849][ T42] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.667866][ T42] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.667879][ T42] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.687376][ T6553] veth1_vlan: entered promiscuous mode [ 31.689331][ T42] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.689441][ T42] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.689463][ T42] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.689476][ T42] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.725275][ T6553] veth0_macvtap: entered promiscuous mode [ 31.734026][ T6553] veth1_macvtap: entered promiscuous mode [ 31.756484][ T6553] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.759499][ T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.759525][ T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.769266][ T6553] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.778308][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.782808][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.785730][ T6549] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.792366][ T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.792395][ T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.801853][ T6557] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.811534][ T42] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.811732][ T42] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.811859][ T42] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.811943][ T42] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.835706][ T2017] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.835738][ T2017] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.847002][ T6549] veth0_vlan: entered promiscuous mode [ 31.855995][ T6548] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 31.859447][ T6549] veth1_vlan: entered promiscuous mode [ 31.884474][ T6549] veth0_macvtap: entered promiscuous mode [ 31.886725][ T6549] veth1_macvtap: entered promiscuous mode [ 31.891955][ T6549] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.894927][ T6549] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.921845][ T1991] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.921890][ T1991] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.921907][ T1991] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.921919][ T1991] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.936686][ T6557] veth0_vlan: entered promiscuous mode [ 31.951338][ T6557] veth1_vlan: entered promiscuous mode [ 31.966586][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.966618][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.973775][ T6557] veth0_macvtap: entered promiscuous mode [ 31.995555][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.997632][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.001834][ T6557] veth1_macvtap: entered promiscuous mode [ 32.007392][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.009748][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.028258][ T6557] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.034388][ T6557] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.044888][ T2017] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.044936][ T2017] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.044951][ T2017] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.044964][ T2017] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.052005][ T1991] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.052030][ T1991] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.119519][ T2017] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.119548][ T2017] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.137850][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.137879][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.169797][ T6674] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1'. [ 32.173234][ T6674] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1'. [ 32.197977][ T6676] binder: 6675:6676 tried to acquire reference to desc 0, got 1 instead [ 32.253942][ T6679] binder: 6675:6679 got reply transaction with no transaction stack [ 32.255545][ T6679] binder: 6675:6679 transaction reply to 0:0 failed 6/29201/-71, code 0 size 0-0 line 3054 [ 32.501013][ T52] Bluetooth: hci4: command tx timeout [ 32.501094][ T52] Bluetooth: hci2: command tx timeout [ 32.501148][ T52] Bluetooth: hci1: command tx timeout [ 32.501190][ T52] Bluetooth: hci0: command tx timeout [ 32.501230][ T52] Bluetooth: hci3: command tx timeout [ 32.959842][ T6692] tipc: Started in network mode [ 32.959878][ T6692] tipc: Node identity 4a16bd1bf0fc, cluster identity 4711 [ 32.959981][ T6692] tipc: Enabled bearer , priority 0 [ 32.967294][ T6692] tipc: Resetting bearer [ 32.982075][ T6691] tipc: Disabling bearer [ 32.997046][ T6636] binder: release 6675:6679 transaction 5 out, still active [ 32.997078][ T6636] binder: undelivered TRANSACTION_COMPLETE [ 33.005000][ T26] binder: undelivered TRANSACTION_ERROR: 29201 [ 33.006120][ T26] binder: send failed reply for transaction 5, target dead [ 33.018664][ T6695] syzkaller1: entered promiscuous mode [ 33.019761][ T6695] syzkaller1: entered allmulticast mode [ 33.035824][ T6697] ubi0: attaching mtd0 [ 33.047524][ T6697] ubi0: scanning is finished [ 33.048620][ T6697] ubi0: empty MTD device detected [ 33.215815][ T6700] netlink: 'syz.1.10': attribute type 4 has an invalid length. [ 33.363609][ T6697] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 33.363649][ T6697] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 33.363673][ T6697] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 33.363687][ T6697] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 33.363702][ T6697] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 33.363713][ T6697] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 33.363723][ T6697] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 2663707537 [ 33.363733][ T6697] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 33.375645][ T6707] ubi0: background thread "ubi_bgt0d" started, PID 6707 [ 33.399969][ T6712] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 33.400275][ T6712] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 33.423509][ T6715] tipc: Enabling of bearer rejected, failed to enable media [ 33.455637][ T6720] netlink: 12 bytes leftover after parsing attributes in process `syz.0.17'. [ 33.466017][ T6720] netlink: 12 bytes leftover after parsing attributes in process `syz.0.17'. [ 34.206804][ T6777] binder: 6776:6777 tried to acquire reference to desc 0, got 1 instead [ 34.207272][ T6777] binder: 6776:6777 ioctl c0306201 0 returned -14 [ 34.207383][ T6777] binder: 6776:6777 got reply transaction with no transaction stack [ 34.207394][ T6777] binder: 6776:6777 transaction reply to 0:0 failed 11/29201/-71, code 0 size 0-0 line 3054 [ 34.251594][ T6636] binder: undelivered TRANSACTION_ERROR: 29201 [ 34.414322][ T6785] syzkaller1: entered promiscuous mode [ 34.415713][ T6785] syzkaller1: entered allmulticast mode [ 34.585427][ T6560] Bluetooth: hci3: command tx timeout [ 34.585467][ T6560] Bluetooth: hci0: command tx timeout [ 34.585498][ T6560] Bluetooth: hci1: command tx timeout [ 34.585516][ T6560] Bluetooth: hci2: command tx timeout [ 34.585533][ T6560] Bluetooth: hci4: command tx timeout [ 34.603981][ T6799] ubi: mtd0 is already attached to ubi0 [ 34.640259][ T6802] netlink: 12 bytes leftover after parsing attributes in process `syz.3.28'. [ 34.683431][ T6802] netlink: 12 bytes leftover after parsing attributes in process `syz.3.28'. [ 34.785921][ T6822] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 34.786085][ T6822] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 34.991278][ T6831] netlink: 'syz.1.32': attribute type 4 has an invalid length. [ 35.389971][ T6860] binder: 6858:6860 tried to acquire reference to desc 0, got 1 instead [ 35.393415][ T6860] binder: 6858:6860 ioctl c0306201 0 returned -14 [ 35.395098][ T6860] binder: 6858:6860 got reply transaction with no transaction stack [ 35.397199][ T6860] binder: 6858:6860 transaction reply to 0:0 failed 16/29201/-71, code 0 size 0-0 line 3054 [ 35.426536][ T6864] tipc: Enabling of bearer rejected, failed to enable media [ 35.431150][ T24] binder: undelivered TRANSACTION_ERROR: 29201 [ 35.698419][ T6897] ubi0: detaching mtd0 [ 35.708883][ T6897] ubi0: mtd0 is detached [ 35.995594][ T6902] netlink: 12 bytes leftover after parsing attributes in process `syz.2.41'. [ 35.999009][ T6902] netlink: 12 bytes leftover after parsing attributes in process `syz.2.41'. [ 36.273259][ T6928] tipc: Enabled bearer , priority 0 [ 36.275889][ T6928] tipc: Resetting bearer [ 36.278631][ T6926] tipc: Disabling bearer [ 36.366718][ T6940] binder: 6939:6940 tried to acquire reference to desc 0, got 1 instead [ 36.368771][ T6940] binder: 6939:6940 ioctl c0306201 0 returned -14 [ 36.374704][ T6940] binder: 6939:6940 got reply transaction with no transaction stack [ 36.374715][ T6940] binder: 6939:6940 transaction reply to 0:0 failed 21/29201/-71, code 0 size 0-0 line 3054 [ 36.392567][ T6943] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 36.395915][ T6943] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 36.419873][ T6948] tipc: Enabling of bearer rejected, failed to enable media [ 36.516099][ T6964] netlink: 68 bytes leftover after parsing attributes in process `syz.2.49'. [ 36.661383][ T6560] Bluetooth: hci2: command tx timeout [ 36.661545][ T6560] Bluetooth: hci1: command tx timeout [ 36.661698][ T6560] Bluetooth: hci0: command tx timeout [ 36.661831][ T6560] Bluetooth: hci3: command tx timeout [ 36.662781][ T52] Bluetooth: hci4: command tx timeout [ 36.734943][ T6976] netlink: 'syz.1.48': attribute type 4 has an invalid length. [ 36.923441][ T6983] netlink: 12 bytes leftover after parsing attributes in process `syz.3.52'. [ 37.023887][ T6985] warning: `syz.3.53' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 37.130151][ T6998] tipc: Started in network mode [ 37.131858][ T6998] tipc: Node identity 2e6954016fdc, cluster identity 4711 [ 37.133141][ T6998] tipc: Enabled bearer , priority 0 [ 37.137225][ T6998] tipc: Resetting bearer [ 37.150227][ T6997] tipc: Disabling bearer [ 37.406037][ T7021] binder: 7020:7021 tried to acquire reference to desc 0, got 1 instead [ 37.408193][ T7023] tipc: Enabling of bearer rejected, failed to enable media [ 37.417268][ T7021] binder: 7020:7021 got reply transaction with no transaction stack [ 37.422936][ T7021] binder_debug: 1 callbacks suppressed [ 37.422999][ T7021] binder: 7020:7021 transaction reply to 0:0 failed 26/29201/-71, code 0 size 0-0 line 3054 [ 37.472546][ T24] binder: undelivered TRANSACTION_ERROR: 29201 [ 38.325488][ T7066] loop4: detected capacity change from 0 to 1024 [ 38.328530][ T7066] ======================================================= [ 38.328530][ T7066] WARNING: The mand mount option has been deprecated and [ 38.328530][ T7066] and is ignored by this kernel. Remove the mand [ 38.328530][ T7066] option from the mount to silence this warning. [ 38.328530][ T7066] ======================================================= [ 38.338601][ T7064] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 38.389605][ T7066] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 38.482283][ T7084] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 38.482468][ T7084] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 38.762910][ T7090] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 38.763128][ T7090] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 38.790776][ T6551] Bluetooth: hci4: command tx timeout [ 38.791543][ T6551] Bluetooth: hci3: command tx timeout [ 38.791685][ T6551] Bluetooth: hci0: command tx timeout [ 38.791702][ T6551] Bluetooth: hci1: command tx timeout [ 38.791718][ T6551] Bluetooth: hci2: command tx timeout [ 39.013390][ T7107] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 39.205796][ T6557] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.461016][ T9] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 39.614310][ T9] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 39.614341][ T9] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 39.614353][ T9] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 39.615807][ T9] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 39.615816][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 39.615823][ T9] usb 1-1: Product: syz [ 39.615829][ T9] usb 1-1: Manufacturer: syz [ 39.615834][ T9] usb 1-1: SerialNumber: syz [ 39.638070][ T9] hub 1-1:1.0: bad descriptor, ignoring hub [ 39.638102][ T9] hub 1-1:1.0: probe with driver hub failed with error -5 [ 39.844197][ T9] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 2 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 39.896988][ T7138] syzkaller1: entered promiscuous mode [ 39.897021][ T7138] syzkaller1: entered allmulticast mode [ 39.957016][ T7161] tipc: Enabling of bearer rejected, failed to enable media [ 40.240966][ T6550] usb 1-1: USB disconnect, device number 2 [ 40.249503][ T6550] usblp0: removed [ 40.600624][ T6550] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 40.762643][ T6550] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 40.765129][ T6550] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 40.767161][ T6550] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 40.772387][ T6550] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 40.772421][ T6550] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 40.772451][ T6550] usb 1-1: Product: syz [ 40.772459][ T6550] usb 1-1: Manufacturer: syz [ 40.772466][ T6550] usb 1-1: SerialNumber: syz [ 40.780071][ T6550] hub 1-1:1.0: bad descriptor, ignoring hub [ 40.780110][ T6550] hub 1-1:1.0: probe with driver hub failed with error -5 [ 41.066216][ T7291] tipc: Enabling of bearer rejected, failed to enable media [ 41.276036][ T7308] loop1: detected capacity change from 0 to 1024 [ 41.336385][ T7308] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 41.512051][ T7317] syzkaller1: entered promiscuous mode [ 41.512097][ T7317] syzkaller1: entered allmulticast mode [ 42.018410][ T6550] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 3 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 42.042435][ T6550] usb 1-1: USB disconnect, device number 3 [ 42.056137][ T6550] usblp0: removed [ 42.184409][ T6547] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.192551][ T7334] tipc: Enabling of bearer rejected, failed to enable media [ 42.387363][ T7354] __nla_validate_parse: 1 callbacks suppressed [ 42.387493][ T7354] netlink: 12 bytes leftover after parsing attributes in process `syz.2.94'. [ 42.389422][ T7354] netlink: 12 bytes leftover after parsing attributes in process `syz.2.94'. [ 42.455423][ T7358] syzkaller1: entered promiscuous mode [ 42.456410][ T7358] syzkaller1: entered allmulticast mode [ 42.788767][ T7359] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 42.788977][ T7359] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 42.848854][ T7368] loop3: detected capacity change from 0 to 1024 [ 42.879479][ T7368] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 43.696439][ T7393] netlink: 12 bytes leftover after parsing attributes in process `syz.2.105'. [ 43.699015][ T7393] netlink: 12 bytes leftover after parsing attributes in process `syz.2.105'. [ 43.722266][ T7395] tipc: Enabling of bearer rejected, failed to enable media [ 43.740292][ T6548] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.787469][ T7400] syzkaller1: entered promiscuous mode [ 43.787573][ T7400] syzkaller1: entered allmulticast mode [ 44.370351][ T7429] netlink: 12 bytes leftover after parsing attributes in process `syz.1.116'. [ 44.374685][ T7429] netlink: 12 bytes leftover after parsing attributes in process `syz.1.116'. [ 44.433383][ T7431] loop1: detected capacity change from 0 to 1024 [ 44.456071][ T7431] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 44.868753][ T7438] syzkaller1: entered promiscuous mode [ 44.870110][ T7438] syzkaller1: entered allmulticast mode [ 44.971731][ T7440] tipc: Enabling of bearer rejected, failed to enable media [ 45.392073][ T6547] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.524996][ T7469] netlink: 12 bytes leftover after parsing attributes in process `syz.1.127'. [ 45.529991][ T7469] netlink: 12 bytes leftover after parsing attributes in process `syz.1.127'. [ 45.578086][ T7474] syzkaller1: entered promiscuous mode [ 45.580628][ T7474] syzkaller1: entered allmulticast mode [ 45.693683][ T7483] tipc: Enabling of bearer rejected, failed to enable media [ 45.922648][ T7495] loop1: detected capacity change from 0 to 1024 [ 45.968298][ T7495] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 46.026202][ T7500] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 46.026399][ T7500] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 46.619577][ T7518] binder: 7511:7518 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 46.619623][ T7518] binder: 7518 RLIMIT_NICE not set [ 46.619684][ T7518] binder: 7511:7518 ioctl c0306201 20000480 returned -14 [ 46.823947][ T6547] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.075028][ T7560] syzkaller1: entered promiscuous mode [ 47.076437][ T7560] syzkaller1: entered allmulticast mode [ 47.081322][ T7562] binder: 7561:7562 tried to acquire reference to desc 0, got 1 instead [ 47.084889][ T7562] binder: 7561:7562 ioctl c0306201 0 returned -14 [ 47.087711][ T6550] binder: release 7561:7562 transaction 33 out, still active [ 47.100648][ T6550] binder: undelivered TRANSACTION_COMPLETE [ 47.119228][ T7567] tipc: Enabling of bearer rejected, failed to enable media [ 47.121528][ T6550] binder: send failed reply for transaction 33, target dead [ 47.231008][ T7582] tipc: Started in network mode [ 47.232155][ T7582] tipc: Node identity ae0f7bc1b512, cluster identity 4711 [ 47.234047][ T7582] tipc: Enabled bearer , priority 0 [ 47.237990][ T7582] tipc: Resetting bearer [ 47.241699][ T7581] tipc: Disabling bearer [ 47.592457][ T7621] loop2: detected capacity change from 0 to 1024 [ 47.630162][ T7621] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 48.424200][ T7668] debugfs: 'ttyS3' already exists in 'caif_serial' [ 48.455930][ T6553] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.546848][ T7680] syzkaller1: entered promiscuous mode [ 48.546885][ T7680] syzkaller1: entered allmulticast mode [ 48.690122][ T7697] tipc: Enabled bearer , priority 0 [ 48.695467][ T7697] tipc: Resetting bearer [ 48.700342][ T7695] tipc: Disabling bearer [ 49.217901][ T7735] loop0: detected capacity change from 0 to 1024 [ 49.254025][ T7735] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 49.915646][ T7793] syzkaller1: entered promiscuous mode [ 49.915671][ T7793] syzkaller1: entered allmulticast mode [ 50.183150][ T7803] tipc: Enabled bearer , priority 0 [ 50.187232][ T7803] tipc: Resetting bearer [ 50.193479][ T7802] tipc: Disabling bearer [ 50.212129][ T6549] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.784357][ T26] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 50.822129][ T26] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 50.879110][ T7847] Zero length message leads to an empty skb [ 51.108196][ T7851] syzkaller1: entered promiscuous mode [ 51.108223][ T7851] syzkaller1: entered allmulticast mode [ 51.310754][ T7864] loop3: detected capacity change from 0 to 1024 [ 51.354222][ T7864] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 51.524165][ T7893] tipc: Started in network mode [ 51.524201][ T7893] tipc: Node identity ba109e303fee, cluster identity 4711 [ 51.524322][ T7893] tipc: Enabled bearer , priority 0 [ 51.525996][ T7893] tipc: Resetting bearer [ 51.529878][ T7875] tipc: Disabling bearer [ 51.816086][ T7910] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 51.818521][ T7910] tipc: Enabled bearer , priority 10 [ 52.080593][ T6550] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 52.106803][ T6605] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 52.112823][ T6605] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 52.115262][ T7923] syzkaller1: entered promiscuous mode [ 52.115291][ T7923] syzkaller1: entered allmulticast mode [ 52.193330][ T6548] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.242062][ T6550] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 52.242100][ T6550] usb 1-1: config 0 has no interface number 0 [ 52.242134][ T6550] usb 1-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 52.242149][ T6550] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 52.248876][ T6550] usb 1-1: config 0 descriptor?? [ 52.252684][ T6550] usb 1-1: selecting invalid altsetting 1 [ 52.255298][ T6550] dvb_ttusb_budget: ttusb_init_controller: error [ 52.256663][ T6550] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 52.307323][ T6550] DVB: Unable to find symbol cx22700_attach() [ 52.557782][ T6550] DVB: Unable to find symbol tda10046_attach() [ 52.557812][ T6550] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 52.660411][ T7937] tipc: Enabled bearer , priority 0 [ 52.669608][ T7937] tipc: Resetting bearer [ 52.676582][ T7936] tipc: Disabling bearer [ 52.822738][ T6550] tipc: Node number set to 2248056368 [ 52.919052][ T7948] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 52.922054][ T7948] tipc: Enabled bearer , priority 10 [ 53.121726][ T7958] loop4: detected capacity change from 0 to 1024 [ 53.146073][ T7958] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 53.196641][ T7965] syzkaller1: entered promiscuous mode [ 53.196687][ T7965] syzkaller1: entered allmulticast mode [ 53.391941][ T7976] netlink: 84 bytes leftover after parsing attributes in process `syz.2.204'. [ 54.004357][ T6550] tipc: Node number set to 1102402561 [ 54.082281][ T6557] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.212595][ T7995] syzkaller0: entered promiscuous mode [ 54.213729][ T7995] syzkaller0: entered allmulticast mode [ 54.776040][ T8008] syzkaller1: entered promiscuous mode [ 54.776073][ T8008] syzkaller1: entered allmulticast mode [ 55.014530][ T8014] loop3: detected capacity change from 0 to 1024 [ 55.026927][ T8014] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 55.660405][ T8032] syzkaller0: entered promiscuous mode [ 55.660436][ T8032] syzkaller0: entered allmulticast mode [ 55.798568][ T2321] usb 1-1: USB disconnect, device number 4 [ 55.885797][ T6548] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.899168][ T8039] loop4: detected capacity change from 0 to 2048 [ 55.993890][ T8043] syzkaller1: entered promiscuous mode [ 55.993922][ T8043] syzkaller1: entered allmulticast mode [ 56.005298][ T8039] EXT4-fs (loop4): failed to initialize system zone (-117) [ 56.005389][ T8039] EXT4-fs (loop4): mount failed [ 57.296993][ T8071] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 57.297173][ T8071] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 57.363243][ T8035] Set syz1 is full, maxelem 65536 reached [ 57.386552][ T8073] loop4: detected capacity change from 0 to 1024 [ 57.407830][ T8073] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 58.022856][ T8089] syzkaller1: entered promiscuous mode [ 58.022886][ T8089] syzkaller1: entered allmulticast mode [ 58.239999][ T6557] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.802881][ T8114] loop0: detected capacity change from 0 to 2048 [ 58.834106][ T8114] EXT4-fs (loop0): failed to initialize system zone (-117) [ 58.834170][ T8114] EXT4-fs (loop0): mount failed [ 59.140840][ T8125] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 59.143080][ T8125] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 59.805438][ T8136] syzkaller1: entered promiscuous mode [ 59.806510][ T8136] syzkaller1: entered allmulticast mode [ 59.928315][ T8140] loop4: detected capacity change from 0 to 1024 [ 59.958461][ T8140] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 60.292928][ T8112] Set syz1 is full, maxelem 65536 reached [ 60.752729][ T6557] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.066284][ T8177] debugfs: 'ttyS3' already exists in 'caif_serial' [ 61.367489][ T8197] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 61.367653][ T8197] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 61.889531][ T8221] Set syz1 is full, maxelem 65536 reached [ 61.900828][ T8221] loop4: detected capacity change from 0 to 2048 [ 61.916870][ T8221] EXT4-fs (loop4): failed to initialize system zone (-117) [ 61.918351][ T8221] EXT4-fs (loop4): mount failed [ 61.964915][ T8225] loop4: detected capacity change from 0 to 1024 [ 61.979675][ T8225] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 62.846166][ T6557] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.927965][ T8256] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 62.931603][ T8256] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 63.247893][ T8261] infiniband syz!: set active [ 63.247920][ T8261] infiniband syz!: added team_slave_0 [ 63.276013][ T8261] RDS/IB: syz!: added [ 63.276121][ T8261] smc: adding ib device syz! with port count 1 [ 63.276168][ T8261] smc: ib device syz! port 1 has pnetid [ 63.285548][ T8265] Set syz1 is full, maxelem 65536 reached [ 63.316653][ T8265] loop0: detected capacity change from 0 to 2048 [ 63.380934][ T8265] EXT4-fs (loop0): failed to initialize system zone (-117) [ 63.380997][ T8265] EXT4-fs (loop0): mount failed [ 64.169606][ T8272] syzkaller0: entered promiscuous mode [ 64.169638][ T8272] syzkaller0: entered allmulticast mode [ 64.345679][ T8311] loop3: detected capacity change from 0 to 1024 [ 64.388890][ T8311] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 64.504346][ T2414] ieee802154 phy0 wpan0: encryption failed: -22 [ 64.504406][ T2414] ieee802154 phy1 wpan1: encryption failed: -22 [ 64.521792][ T1821] cfg80211: failed to load regulatory.db [ 64.544926][ T8328] netlink: 68 bytes leftover after parsing attributes in process `syz.2.291'. [ 64.928744][ T8349] loop1: detected capacity change from 0 to 2048 [ 65.080188][ T8349] EXT4-fs (loop1): failed to initialize system zone (-117) [ 65.080254][ T8349] EXT4-fs (loop1): mount failed [ 65.221272][ T8354] syz!: rxe_newlink: already configured on team_slave_0 [ 65.513334][ T8360] tipc: Enabled bearer , priority 0 [ 65.558431][ T8358] tipc: Disabling bearer [ 65.745637][ T8369] syzkaller0: entered promiscuous mode [ 65.747119][ T8369] syzkaller0: entered allmulticast mode [ 65.944430][ T8386] netlink: 60 bytes leftover after parsing attributes in process `syz.2.303'. [ 66.004076][ T6548] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.080822][ T6612] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 66.232593][ T8334] Set syz1 is full, maxelem 65536 reached [ 66.526035][ T8424] tipc: Enabled bearer , priority 0 [ 66.552640][ T8423] tipc: Disabling bearer [ 66.609190][ T6612] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 66.609223][ T6612] usb 1-1: config 0 has no interface number 0 [ 66.609251][ T6612] usb 1-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 66.609263][ T6612] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 66.611182][ T6612] usb 1-1: config 0 descriptor?? [ 66.612511][ T6612] usb 1-1: selecting invalid altsetting 1 [ 66.612538][ T6612] dvb_ttusb_budget: ttusb_init_controller: error [ 66.612544][ T6612] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 66.631729][ T6612] DVB: Unable to find symbol cx22700_attach() [ 66.691412][ T6612] DVB: Unable to find symbol tda10046_attach() [ 66.691443][ T6612] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 66.893561][ T8447] syzkaller0: entered promiscuous mode [ 66.893590][ T8447] syzkaller0: entered allmulticast mode [ 67.205477][ T8452] loop1: detected capacity change from 0 to 1024 [ 67.265510][ T8457] netlink: 60 bytes leftover after parsing attributes in process `syz.2.316'. [ 67.427395][ T8464] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 67.428878][ T8464] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 67.432635][ T8464] vhci_hcd: invalid port number 15 [ 67.433960][ T8464] vhci_hcd: invalid port number 15 [ 67.439914][ T8464] trusted_key: syz.3.317 sent an empty control message without MSG_MORE. [ 67.581495][ T8452] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 67.643984][ T8469] loop2: detected capacity change from 0 to 2048 [ 67.680401][ T8469] EXT4-fs (loop2): failed to initialize system zone (-117) [ 67.680469][ T8469] EXT4-fs (loop2): mount failed [ 67.709448][ T8443] ALSA: mixer_oss: invalid OSS volume '' [ 67.853408][ T8478] tipc: Enabled bearer , priority 0 [ 67.857457][ T8476] tipc: Disabling bearer [ 68.224728][ T6547] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.691534][ T8466] Set syz1 is full, maxelem 65536 reached [ 68.728680][ T8496] syzkaller0: entered promiscuous mode [ 68.729883][ T8496] syzkaller0: entered allmulticast mode [ 68.825160][ T8500] netlink: 60 bytes leftover after parsing attributes in process `syz.2.329'. [ 68.865098][ T26] usb 1-1: USB disconnect, device number 5 [ 69.162531][ T8515] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 69.363749][ T8519] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 69.363941][ T8519] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 69.414289][ T8522] Set syz1 is full, maxelem 65536 reached [ 69.425076][ T8522] loop1: detected capacity change from 0 to 2048 [ 69.434270][ T8522] EXT4-fs (loop1): failed to initialize system zone (-117) [ 69.434338][ T8522] EXT4-fs (loop1): mount failed [ 69.831691][ T8507] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 69.876379][ T8534] syzkaller0: entered promiscuous mode [ 69.876409][ T8534] syzkaller0: entered allmulticast mode [ 69.931560][ T8539] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 69.931732][ T8539] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 70.024762][ T8540] netlink: 68 bytes leftover after parsing attributes in process `syz.0.342'. [ 70.558136][ T8557] Set syz1 is full, maxelem 65536 reached [ 70.567046][ T8557] loop2: detected capacity change from 0 to 2048 [ 70.582559][ T8557] EXT4-fs (loop2): failed to initialize system zone (-117) [ 70.582630][ T8557] EXT4-fs (loop2): mount failed [ 70.860580][ T8570] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 71.198507][ T8572] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 71.198671][ T8572] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 71.497249][ T8583] syzkaller0: entered promiscuous mode [ 71.498483][ T8583] syzkaller0: entered allmulticast mode [ 71.535782][ T8584] debugfs: 'ttyS3' already exists in 'caif_serial' [ 71.753407][ T8605] Set syz1 is full, maxelem 65536 reached [ 71.777906][ T8605] loop1: detected capacity change from 0 to 2048 [ 71.819535][ T8605] EXT4-fs (loop1): failed to initialize system zone (-117) [ 71.819606][ T8605] EXT4-fs (loop1): mount failed [ 73.021432][ T8684] syzkaller0: entered promiscuous mode [ 73.022622][ T8684] syzkaller0: entered allmulticast mode [ 73.090129][ T8693] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 73.094144][ T8693] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 73.162185][ T8699] Set syz1 is full, maxelem 65536 reached [ 73.190180][ T8699] loop4: detected capacity change from 0 to 2048 [ 73.205210][ T8699] EXT4-fs (loop4): failed to initialize system zone (-117) [ 73.205267][ T8699] EXT4-fs (loop4): mount failed [ 73.896239][ T8736] tipc: Enabling of bearer rejected, failed to enable media [ 74.298487][ T8759] syzkaller0: entered promiscuous mode [ 74.298519][ T8759] syzkaller0: entered allmulticast mode [ 74.514342][ T8768] netlink: 'syz.2.381': attribute type 4 has an invalid length. [ 74.661986][ T8772] Set syz1 is full, maxelem 65536 reached [ 74.681806][ T8772] loop2: detected capacity change from 0 to 2048 [ 74.773193][ T8772] EXT4-fs (loop2): failed to initialize system zone (-117) [ 74.774628][ T8772] EXT4-fs (loop2): mount failed [ 74.869169][ T8787] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 74.871976][ T8787] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 75.371396][ T8816] tipc: Enabling of bearer rejected, failed to enable media [ 75.636518][ T8836] syzkaller0: entered promiscuous mode [ 75.637576][ T8836] syzkaller0: entered allmulticast mode [ 75.941538][ T8844] netlink: 'syz.0.392': attribute type 4 has an invalid length. [ 76.048005][ T8848] Set syz1 is full, maxelem 65536 reached [ 76.079350][ T8848] loop2: detected capacity change from 0 to 2048 [ 76.142307][ T8848] EXT4-fs (loop2): failed to initialize system zone (-117) [ 76.142376][ T8848] EXT4-fs (loop2): mount failed [ 76.415334][ T8871] netlink: 48 bytes leftover after parsing attributes in process `syz.1.398'. [ 76.597557][ T8884] tipc: Enabling of bearer rejected, failed to enable media [ 76.654728][ T8888] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 76.680687][ T8888] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 76.776815][ T8898] Set syz1 is full, maxelem 65536 reached [ 76.789784][ T8898] loop1: detected capacity change from 0 to 2048 [ 76.813318][ T8898] EXT4-fs (loop1): failed to initialize system zone (-117) [ 76.813383][ T8898] EXT4-fs (loop1): mount failed [ 77.468855][ T8919] netlink: 'syz.2.410': attribute type 4 has an invalid length. [ 77.506736][ T8921] netlink: 48 bytes leftover after parsing attributes in process `syz.3.412'. [ 77.683247][ T8926] tipc: Enabling of bearer rejected, failed to enable media [ 77.726809][ T8930] trusted_key: encrypted_key: keylen parameter is missing [ 77.995934][ T8943] loop3: detected capacity change from 0 to 2048 [ 78.022440][ T8943] EXT4-fs (loop3): failed to initialize system zone (-117) [ 78.022499][ T8943] EXT4-fs (loop3): mount failed [ 78.039928][ T8947] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 78.040100][ T8947] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 78.585235][ T8959] wg1: entered promiscuous mode [ 78.585268][ T8959] wg1: entered allmulticast mode [ 78.802176][ T8964] netlink: 48 bytes leftover after parsing attributes in process `syz.1.424'. [ 79.202980][ T8973] tipc: Enabling of bearer rejected, failed to enable media [ 79.568649][ T8937] Set syz1 is full, maxelem 65536 reached [ 79.897388][ T9001] netlink: 'syz.3.432': attribute type 4 has an invalid length. [ 79.960544][ T6605] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 80.110545][ T6605] usb 1-1: Using ep0 maxpacket: 8 [ 80.113750][ T6605] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 80.113784][ T6605] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 80.118614][ T6605] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 80.118647][ T6605] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 80.118679][ T6605] usb 1-1: Product: syz [ 80.118695][ T6605] usb 1-1: Manufacturer: syz [ 80.118709][ T6605] usb 1-1: SerialNumber: syz [ 80.125142][ T6605] usb 1-1: config 0 descriptor?? [ 80.819782][ T9022] tipc: Enabling of bearer rejected, failed to enable media [ 80.825280][ T9020] netlink: 'syz.1.440': attribute type 72 has an invalid length. [ 80.825310][ T9020] netlink: 40 bytes leftover after parsing attributes in process `syz.1.440'. [ 80.874561][ T9031] Set syz1 is full, maxelem 65536 reached [ 80.887435][ T9031] loop1: detected capacity change from 0 to 2048 [ 80.913020][ T9031] EXT4-fs (loop1): failed to initialize system zone (-117) [ 80.913073][ T9031] EXT4-fs (loop1): mount failed [ 81.785402][ T9073] netlink: 'syz.2.449': attribute type 4 has an invalid length. [ 82.146944][ T9092] netlink: 'syz.4.452': attribute type 72 has an invalid length. [ 82.146985][ T9092] netlink: 40 bytes leftover after parsing attributes in process `syz.4.452'. [ 82.248778][ T9104] tipc: Enabling of bearer rejected, failed to enable media [ 82.333436][ T9116] Set syz1 is full, maxelem 65536 reached [ 82.341584][ T9116] loop1: detected capacity change from 0 to 2048 [ 82.425285][ T9116] EXT4-fs (loop1): failed to initialize system zone (-117) [ 82.425351][ T9116] EXT4-fs (loop1): mount failed [ 82.886938][ T6612] usb 1-1: USB disconnect, device number 6 [ 83.159712][ T9164] debugfs: 'ttyS3' already exists in 'caif_serial' [ 83.326060][ T9167] netlink: 'syz.3.463': attribute type 72 has an invalid length. [ 83.326091][ T9167] netlink: 40 bytes leftover after parsing attributes in process `syz.3.463'. [ 83.775786][ T9198] netlink: 'syz.1.465': attribute type 12 has an invalid length. [ 83.890087][ T9200] tipc: Enabling of bearer rejected, failed to enable media [ 84.093844][ T9212] netlink: 'syz.0.467': attribute type 4 has an invalid length. [ 84.246221][ T9220] Set syz1 is full, maxelem 65536 reached [ 84.296464][ T9220] loop2: detected capacity change from 0 to 2048 [ 84.306772][ T9220] EXT4-fs (loop2): failed to initialize system zone (-117) [ 84.308558][ T9220] EXT4-fs (loop2): mount failed [ 84.847145][ T9244] netlink: 40 bytes leftover after parsing attributes in process `syz.4.474'. [ 85.058939][ T9264] syzkaller0: entered promiscuous mode [ 85.058972][ T9264] syzkaller0: entered allmulticast mode [ 85.295733][ T9273] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 85.759233][ T9293] tipc: Enabling of bearer rejected, failed to enable media [ 85.804754][ T9297] Set syz1 is full, maxelem 65536 reached [ 85.819007][ T9297] loop4: detected capacity change from 0 to 2048 [ 85.852705][ T9297] EXT4-fs (loop4): failed to initialize system zone (-117) [ 85.852766][ T9297] EXT4-fs (loop4): mount failed [ 85.932083][ T9308] netlink: 4 bytes leftover after parsing attributes in process `syz.4.484'. [ 86.043979][ T9319] netlink: 40 bytes leftover after parsing attributes in process `syz.0.487'. [ 86.079541][ T9318] netlink: 40 bytes leftover after parsing attributes in process `syz.4.486'. [ 86.252381][ T9329] netlink: 'syz.1.485': attribute type 4 has an invalid length. [ 86.465926][ T9335] syzkaller0: entered promiscuous mode [ 86.467033][ T9335] syzkaller0: entered allmulticast mode [ 86.950763][ T9358] Set syz1 is full, maxelem 65536 reached [ 86.967047][ T9358] loop1: detected capacity change from 0 to 2048 [ 86.983771][ T9358] EXT4-fs (loop1): failed to initialize system zone (-117) [ 86.983825][ T9358] EXT4-fs (loop1): mount failed [ 87.080300][ T9376] tipc: Enabling of bearer rejected, failed to enable media [ 87.208554][ T9387] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 87.729633][ T9418] netlink: 40 bytes leftover after parsing attributes in process `syz.0.502'. [ 87.807761][ T9424] fuse: Bad value for 'fd' [ 87.866356][ T9426] Set syz1 is full, maxelem 65536 reached [ 87.937816][ T9435] syzkaller0: entered promiscuous mode [ 87.937849][ T9435] syzkaller0: entered allmulticast mode [ 87.951608][ T9432] netlink: 'syz.4.504': attribute type 4 has an invalid length. [ 87.972869][ T9426] loop0: detected capacity change from 0 to 2048 [ 88.093952][ T9426] EXT4-fs (loop0): failed to initialize system zone (-117) [ 88.094022][ T9426] EXT4-fs (loop0): mount failed [ 88.702622][ T9476] fuse: Bad value for 'fd' [ 88.756950][ T9480] Set syz1 is full, maxelem 65536 reached [ 88.767105][ T9480] loop3: detected capacity change from 0 to 2048 [ 88.775278][ T9480] EXT4-fs (loop3): failed to initialize system zone (-117) [ 88.776601][ T9480] EXT4-fs (loop3): mount failed [ 88.896983][ T9491] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 88.897165][ T9491] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 89.046590][ T9497] netlink: 8 bytes leftover after parsing attributes in process `syz.2.524'. [ 89.053433][ T9497] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 89.226506][ T9515] Set syz1 is full, maxelem 65536 reached [ 89.244768][ T9515] loop2: detected capacity change from 0 to 2048 [ 89.275583][ T9515] EXT4-fs (loop2): failed to initialize system zone (-117) [ 89.275642][ T9515] EXT4-fs (loop2): mount failed [ 89.301309][ T9516] netlink: 'syz.0.525': attribute type 4 has an invalid length. [ 90.768820][ T9599] syz.4.542 uses obsolete (PF_INET,SOCK_PACKET) [ 90.927628][ T9613] tipc: Enabling of bearer rejected, already enabled [ 91.097458][ T9623] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 91.097888][ T9623] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 91.718272][ T9651] netlink: 'syz.2.548': attribute type 4 has an invalid length. [ 92.253612][ T9682] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 92.255213][ T9682] tipc: Enabled bearer , priority 10 [ 92.960771][ T6605] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 92.978481][ T9732] tipc: Enabling of bearer rejected, failed to enable media [ 92.978806][ T9732] syzkaller0: entered promiscuous mode [ 92.978816][ T9732] syzkaller0: entered allmulticast mode [ 93.152459][ T6605] usb 1-1: Using ep0 maxpacket: 8 [ 93.156085][ T6605] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 93.156383][ T6605] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.156403][ T6605] usb 1-1: Product: syz [ 93.156415][ T6605] usb 1-1: Manufacturer: syz [ 93.156422][ T6605] usb 1-1: SerialNumber: syz [ 93.157689][ T6605] usb 1-1: config 0 descriptor?? [ 93.335460][ T2321] tipc: Node number set to 454917057 [ 93.362914][ T6605] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 93.596947][ T6605] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 93.628480][ T9748] netlink: 'syz.1.569': attribute type 4 has an invalid length. [ 93.843154][ T9758] netlink: 4 bytes leftover after parsing attributes in process `syz.2.572'. [ 94.119944][ T9776] netlink: 4 bytes leftover after parsing attributes in process `syz.3.578'. [ 95.300521][ T9836] fuse: Bad value for 'fd' [ 95.528869][ T9845] netlink: 'syz.3.589': attribute type 4 has an invalid length. [ 95.713489][ T26] usb 1-1: USB disconnect, device number 7 [ 96.060322][ T9857] netlink: 24 bytes leftover after parsing attributes in process `syz.1.593'. [ 96.880555][ T26] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 97.015153][ T9892] netlink: 24 bytes leftover after parsing attributes in process `syz.1.605'. [ 97.032562][ T26] usb 1-1: Using ep0 maxpacket: 8 [ 97.039367][ T26] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 97.039402][ T26] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.039415][ T26] usb 1-1: Product: syz [ 97.039426][ T26] usb 1-1: Manufacturer: syz [ 97.039436][ T26] usb 1-1: SerialNumber: syz [ 97.046879][ T26] usb 1-1: config 0 descriptor?? [ 97.253353][ T26] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 97.329697][ T9902] netlink: 'syz.1.607': attribute type 4 has an invalid length. [ 97.457176][ T26] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 97.731235][ T9917] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 98.657934][ T9939] loop4: detected capacity change from 0 to 2048 [ 98.659727][ T9939] udf: Bad value for 'session' [ 98.669682][ T9939] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 98.672506][ T9939] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 98.832811][ T9946] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 98.838155][ T9946] netlink: 'syz.1.621': attribute type 33 has an invalid length. [ 98.839415][ T9946] netlink: 152 bytes leftover after parsing attributes in process `syz.1.621'. [ 98.849095][ T9946] netlink: 4 bytes leftover after parsing attributes in process `syz.1.621'. [ 99.177042][ T9958] netlink: 'syz.1.624': attribute type 4 has an invalid length. [ 99.346631][ T9960] Set syz1 is full, maxelem 65536 reached [ 99.365304][ T9960] loop3: detected capacity change from 0 to 2048 [ 99.374927][ T9960] EXT4-fs (loop3): failed to initialize system zone (-117) [ 99.374990][ T9960] EXT4-fs (loop3): mount failed [ 99.416100][ T9964] netlink: 24 bytes leftover after parsing attributes in process `syz.3.626'. [ 99.456600][ T9967] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 99.458850][ T9967] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 99.624553][ T26] usb 1-1: USB disconnect, device number 8 [ 99.649227][ T9969] tipc: Enabling of bearer rejected, failed to enable media [ 99.649643][ T9969] syzkaller0: entered promiscuous mode [ 99.649653][ T9969] syzkaller0: entered allmulticast mode [ 100.219375][ T9983] netlink: 40 bytes leftover after parsing attributes in process `syz.3.632'. [ 100.291645][ T9991] Set syz1 is full, maxelem 65536 reached [ 100.301161][ T9991] loop3: detected capacity change from 0 to 2048 [ 100.318649][ T9993] batadv0: entered promiscuous mode [ 100.318805][ T9993] vlan2: entered promiscuous mode [ 100.332327][ T9991] EXT4-fs (loop3): failed to initialize system zone (-117) [ 100.332391][ T9991] EXT4-fs (loop3): mount failed [ 100.470901][ T9999] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 100.472698][ T9999] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 100.880238][T10005] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 100.883121][T10005] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 101.505417][T10023] Set syz1 is full, maxelem 65536 reached [ 101.515388][T10023] loop4: detected capacity change from 0 to 2048 [ 101.535240][T10023] EXT4-fs (loop4): failed to initialize system zone (-117) [ 101.535299][T10023] EXT4-fs (loop4): mount failed [ 101.573601][T10027] syzkaller0: entered promiscuous mode [ 101.573630][T10027] syzkaller0: entered allmulticast mode [ 101.715924][T10031] netlink: 'syz.2.645': attribute type 4 has an invalid length. [ 102.973878][T10070] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 102.977001][T10070] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 103.395563][T10099] loop3: detected capacity change from 0 to 2048 [ 103.398870][T10099] udf: Bad value for 'session' [ 103.429465][T10099] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 103.430840][T10099] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 103.549895][T10103] Set syz1 is full, maxelem 65536 reached [ 103.551479][T10102] syzkaller0: entered promiscuous mode [ 103.551493][T10102] syzkaller0: entered allmulticast mode [ 103.569867][T10103] loop1: detected capacity change from 0 to 2048 [ 103.608180][T10103] EXT4-fs (loop1): failed to initialize system zone (-117) [ 103.608242][T10103] EXT4-fs (loop1): mount failed [ 104.070322][T10144] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 104.074666][T10144] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 104.074835][T10144] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 104.126500][T10134] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 104.278785][T10143] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 104.285168][T10143] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 104.412778][T10155] netlink: 'syz.1.662': attribute type 4 has an invalid length. [ 104.502943][T10157] netlink: 24 bytes leftover after parsing attributes in process `syz.0.666'. [ 105.050876][ T2321] usb 1-1: new full-speed USB device number 9 using dummy_hcd [ 105.202712][ T2321] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 105.204297][ T2321] usb 1-1: config 0 has no interface number 0 [ 105.205538][ T2321] usb 1-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 105.207346][ T2321] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.214294][ T2321] usb 1-1: config 0 descriptor?? [ 105.218311][ T2321] usb 1-1: selecting invalid altsetting 1 [ 105.220042][ T2321] dvb_ttusb_budget: ttusb_init_controller: error [ 105.222557][ T2321] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 105.340733][ T2321] DVB: Unable to find symbol cx22700_attach() [ 105.410398][ T2321] DVB: Unable to find symbol tda10046_attach() [ 105.412684][ T2321] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 105.498081][T10177] loop4: detected capacity change from 0 to 2048 [ 105.513256][T10177] EXT4-fs (loop4): failed to initialize system zone (-117) [ 105.513309][T10177] EXT4-fs (loop4): mount failed [ 105.885404][T10187] netlink: 'syz.1.675': attribute type 1 has an invalid length. [ 105.885700][T10187] netlink: 'syz.1.675': attribute type 1 has an invalid length. [ 105.886185][T10187] netlink: 'syz.1.675': attribute type 1 has an invalid length. [ 107.139938][T10212] Set syz1 is full, maxelem 65536 reached [ 107.144715][T10212] Set syz1 is full, maxelem 65536 reached [ 107.158105][T10212] loop3: detected capacity change from 0 to 2048 [ 107.174052][T10212] EXT4-fs (loop3): failed to initialize system zone (-117) [ 107.174112][T10212] EXT4-fs (loop3): mount failed [ 107.439739][T10224] tipc: Enabling of bearer rejected, failed to enable media [ 107.644867][ T1821] usb 1-1: USB disconnect, device number 9 [ 107.714861][ T2235] I/O error, dev loop3, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 0 prio class 2 [ 107.875732][T10260] Set syz1 is full, maxelem 65536 reached [ 107.876578][T10260] Set syz1 is full, maxelem 65536 reached [ 107.889244][T10260] loop0: detected capacity change from 0 to 2048 [ 107.902412][T10260] EXT4-fs (loop0): failed to initialize system zone (-117) [ 107.902488][T10260] EXT4-fs (loop0): mount failed [ 108.438345][T10271] tipc: Enabling of bearer rejected, failed to enable media [ 108.474862][T10279] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 108.475043][T10279] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 109.224906][T10299] syzkaller0: entered promiscuous mode [ 109.224941][T10299] syzkaller0: entered allmulticast mode [ 109.453067][T10326] loop1: detected capacity change from 0 to 2048 [ 109.702562][T10326] EXT4-fs (loop1): failed to initialize system zone (-117) [ 109.702632][T10326] EXT4-fs (loop1): mount failed [ 110.309162][T10375] tipc: Enabled bearer , priority 0 [ 110.309614][T10375] mac80211_hwsim hwsim8 syzkaller0: entered promiscuous mode [ 110.309628][T10375] mac80211_hwsim hwsim8 syzkaller0: entered allmulticast mode [ 110.311538][T10375] tipc: Resetting bearer [ 110.458846][T10398] mac80211_hwsim hwsim11 syzkaller0: entered promiscuous mode [ 110.458882][T10398] mac80211_hwsim hwsim11 syzkaller0: entered allmulticast mode [ 110.463979][T10401] Set syz1 is full, maxelem 65536 reached [ 110.478694][T10401] loop2: detected capacity change from 0 to 2048 [ 110.555298][T10401] EXT4-fs (loop2): failed to initialize system zone (-117) [ 110.557166][T10401] EXT4-fs (loop2): mount failed [ 111.027805][T10431] netlink: 28 bytes leftover after parsing attributes in process `syz.0.727'. [ 111.084493][T10431] hub 9-0:1.0: USB hub found [ 111.084833][T10431] hub 9-0:1.0: 8 ports detected [ 111.375476][T10433] tipc: Enabled bearer , priority 0 [ 111.433417][ T6605] tipc: Node number set to 3135946011 [ 111.625487][T10454] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode [ 111.625518][T10454] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode [ 112.169308][T10464] tipc: Enabling of bearer rejected, already enabled [ 112.339740][T10481] syzkaller0: entered promiscuous mode [ 112.339776][T10481] syzkaller0: entered allmulticast mode [ 112.448390][T10494] tipc: Enabling of bearer rejected, already enabled [ 112.501979][ T6605] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 112.506538][ T6605] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 112.669655][T10499] netlink: 12 bytes leftover after parsing attributes in process `syz.4.753'. [ 112.672252][T10499] netlink: 18 bytes leftover after parsing attributes in process `syz.4.753'. [ 113.170181][T10535] tipc: Started in network mode [ 113.170310][T10535] tipc: Node identity 080211000001, cluster identity 4711 [ 113.170382][T10535] tipc: Enabled bearer , priority 0 [ 113.224010][T10485] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 113.305435][T10549] loop2: detected capacity change from 0 to 7 [ 113.308442][T10549] loop2: p1 p4 [ 113.309350][T10549] loop2: partition table partially beyond EOD, truncated [ 113.317038][T10549] loop2: p1 size 1919251295 extends beyond EOD, truncated [ 113.319486][T10549] loop2: p4 start 2495 is beyond EOD, truncated [ 113.333647][ T6723] udevd[6723]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 113.388647][T10561] tipc: Enabling of bearer rejected, failed to enable media [ 113.437191][ T6605] IPVS: starting estimator thread 0... [ 113.522781][T10571] IPVS: using max 70 ests per chain, 168000 per kthread [ 113.597490][T10591] tipc: Enabling of bearer rejected, already enabled [ 113.641459][T10595] tipc: Enabling of bearer rejected, failed to enable media [ 113.730366][T10609] syzkaller1: entered promiscuous mode [ 113.732991][T10609] syzkaller1: entered allmulticast mode [ 113.925841][T10632] tipc: Enabling of bearer rejected, already enabled [ 114.291290][ T2321] tipc: Node number set to 134418688 [ 114.395629][T10661] tipc: Enabling of bearer rejected, failed to enable media [ 114.416679][T10664] fuse: Unknown parameter 'user_id00000000000000000000' [ 114.425540][T10664] binder: 10663:10664 ioctl c00c620f 200001c0 returned -22 [ 114.473850][T10669] netlink: 'syz.2.811': attribute type 33 has an invalid length. [ 114.473885][T10669] netlink: 152 bytes leftover after parsing attributes in process `syz.2.811'. [ 114.482009][T10669] netlink: 4 bytes leftover after parsing attributes in process `syz.2.811'. [ 114.570613][ T1821] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 114.723664][ T1821] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 114.725608][ T1821] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 114.727518][ T1821] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 114.732027][ T1821] usb 1-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 114.733662][ T1821] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.733695][ T1821] usb 1-1: Product: syz [ 114.733706][ T1821] usb 1-1: Manufacturer: syz [ 114.733717][ T1821] usb 1-1: SerialNumber: syz [ 114.903768][ T1821] usb 1-1: config 0 descriptor?? [ 114.954492][T10698] af_packet: tpacket_rcv: packet too big, clamped from 102 to 4294967286. macoff=82 [ 114.982664][T10686] wireguard0: entered promiscuous mode [ 114.982699][T10686] wireguard0: entered allmulticast mode [ 115.108864][ T1821] adutux 1-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 115.123791][T10710] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 115.125659][T10710] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 115.515171][ T6605] usb 1-1: USB disconnect, device number 10 [ 115.627745][T10725] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 115.630822][T10725] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 115.851679][T10729] netlink: 4 bytes leftover after parsing attributes in process `syz.4.833'. [ 116.104639][T10754] capability: warning: `syz.4.844' uses deprecated v2 capabilities in a way that may be insecure [ 116.215569][T10762] netlink: 4 bytes leftover after parsing attributes in process `syz.4.846'. [ 116.233131][T10766] syzkaller0: entered promiscuous mode [ 116.233161][T10766] syzkaller0: entered allmulticast mode [ 116.513262][T10769] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 116.513451][T10769] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 116.517489][T10771] binder: 10770:10771 got transaction to invalid handle, 1 [ 116.517517][T10771] binder: 10770:10771 cannot find target node [ 116.517973][T10771] binder: 10770:10771 transaction call to 0:0 failed 34/29201/-22, code 0 size 0-0 line 3151 [ 116.518287][T10771] binder: 10770:10771 ioctl c0306201 200001c0 returned -14 [ 117.427996][ T31] audit: type=1326 audit(117.400:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10784 comm="syz.4.856" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb9d5c0a8 code=0x7ffc0000 [ 117.432727][ T31] audit: type=1326 audit(117.400:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10784 comm="syz.4.856" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb9d5c0a8 code=0x7ffc0000 [ 117.434942][ T31] audit: type=1326 audit(117.410:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10784 comm="syz.4.856" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=436 compat=0 ip=0xffffb9d5c0a8 code=0x7ffc0000 [ 117.434983][ T31] audit: type=1326 audit(117.410:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10784 comm="syz.4.856" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb9d5c0a8 code=0x7ffc0000 [ 117.435178][ T31] audit: type=1326 audit(117.410:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10784 comm="syz.4.856" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=80 compat=0 ip=0xffffb9d5c0a8 code=0x7ffc0000 [ 117.435245][ T31] audit: type=1326 audit(117.410:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10784 comm="syz.4.856" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb9d5c0a8 code=0x7ffc0000 [ 118.764714][T10799] loop6: detected capacity change from 0 to 7 [ 118.766559][T10799] Dev loop6: unable to read RDB block 7 [ 118.768002][T10799] loop6: AHDI p1 p2 p3 p4 [ 118.769013][T10799] loop6: partition table partially beyond EOD, truncated [ 118.774880][T10799] loop6: p1 start 926365495 is beyond EOD, truncated [ 118.774924][T10799] loop6: p2 size 47 extends beyond EOD, truncated [ 118.778171][T10799] loop6: p3 start 1886353253 is beyond EOD, truncated [ 118.930106][ T6723] udevd[6723]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 119.026690][T10817] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 119.028596][T10817] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 119.951913][T10854] netlink: 8 bytes leftover after parsing attributes in process `syz.1.879'. [ 119.951953][T10854] netlink: 'syz.1.879': attribute type 30 has an invalid length. [ 119.956541][T10291] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 119.956647][T10291] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 119.956691][T10291] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 119.956715][T10291] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 121.068156][T10912] netlink: 52 bytes leftover after parsing attributes in process `syz.0.906'. [ 121.068187][T10912] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 121.286511][ T31] audit: type=1326 audit(121.260:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10935 comm="syz.3.917" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa955c0a8 code=0x7ffc0000 [ 121.286612][ T31] audit: type=1326 audit(121.260:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10935 comm="syz.3.917" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa955c0a8 code=0x7ffc0000 [ 121.287603][ T31] audit: type=1326 audit(121.260:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10935 comm="syz.3.917" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=91 compat=0 ip=0xffffa955c0a8 code=0x7ffc0000 [ 121.287621][ T31] audit: type=1326 audit(121.260:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10935 comm="syz.3.917" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa955c0a8 code=0x7ffc0000 [ 121.517681][T10948] netlink: 36 bytes leftover after parsing attributes in process `syz.3.922'. [ 121.517709][T10948] netlink: 16 bytes leftover after parsing attributes in process `syz.3.922'. [ 121.518059][T10948] netlink: 36 bytes leftover after parsing attributes in process `syz.3.922'. [ 121.518084][T10948] netlink: 36 bytes leftover after parsing attributes in process `syz.3.922'. [ 121.534796][T10950] fuse: Bad value for 'fd' [ 121.853666][T10972] netlink: 44 bytes leftover after parsing attributes in process `syz.3.932'. [ 122.138204][T10979] netlink: 6 bytes leftover after parsing attributes in process `syz.0.934'. [ 122.204865][T10984] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 122.217814][T10984] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 122.503402][T10994] wireguard0: entered promiscuous mode [ 122.503433][T10994] wireguard0: entered allmulticast mode [ 122.505499][T10994] netlink: 8 bytes leftover after parsing attributes in process `syz.0.938'. [ 123.480568][ T1821] usb 1-1: new full-speed USB device number 11 using dummy_hcd [ 123.885017][ T1821] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 123.885056][ T1821] usb 1-1: config 0 has no interface number 0 [ 123.885078][ T1821] usb 1-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 123.885091][ T1821] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.890958][ T1821] usb 1-1: config 0 descriptor?? [ 123.896924][ T1821] usb 1-1: selecting invalid altsetting 1 [ 123.897273][ T1821] dvb_ttusb_budget: ttusb_init_controller: error [ 123.897280][ T1821] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 123.928765][ T1821] DVB: Unable to find symbol cx22700_attach() [ 123.942362][ T1821] DVB: Unable to find symbol tda10046_attach() [ 123.942391][ T1821] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 125.941037][ T2414] ieee802154 phy0 wpan0: encryption failed: -22 [ 125.941078][ T2414] ieee802154 phy1 wpan1: encryption failed: -22 [ 148.050484][ C0] watchdog: BUG: soft lockup - CPU#0 stuck for 22s! [kworker/0:3:6605] [ 148.050503][ C0] Modules linked in: [ 148.050509][ C0] irq event stamp: 474757 [ 148.052904][ C0] hardirqs last enabled at (474756): [] exit_to_kernel_mode+0xc0/0xf0 [ 148.054366][ C0] hardirqs last disabled at (474757): [] el1_interrupt+0x24/0x54 [ 148.055801][ C0] softirqs last enabled at (470332): [] pppoe_device_event+0x494/0x4c4 [ 148.057398][ C0] softirqs last disabled at (470334): [] local_bh_disable+0x10/0x34 [ 148.058954][ C0] CPU: 0 UID: 0 PID: 6605 Comm: kworker/0:3 Not tainted 6.17.0-rc1-syzkaller-g8f5ae30d69d7 #0 PREEMPT [ 148.058972][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 [ 148.058977][ C0] Workqueue: events ser_release [ 148.058992][ C0] pstate: 03400005 (nzcv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 148.059000][ C0] pc : queued_spin_lock_slowpath+0x138/0xaec [ 148.059008][ C0] lr : queued_spin_lock_slowpath+0x144/0xaec [ 148.059014][ C0] sp : ffff8000a4377440 [ 148.059017][ C0] x29: ffff8000a43774e0 x28: 1fffe0001eb28e29 x27: 1fffe00018a393d2 [ 148.059026][ C0] x26: ffff0000c51c9e80 x25: dfff800000000000 x24: ffff70001486ee8c [ 148.059033][ C0] x23: 0000000000000001 x22: ffff0000c51c9e90 x21: ffff0000f5947148 [ 148.059040][ C0] x20: ffff0000f5947150 x19: ffff0000f5947140 x18: 1fffe0003379be88 [ 148.059047][ C0] x17: ffff80008f7be000 x16: ffff8000805354d8 x15: 0000000000000001 [ 148.059054][ C0] x14: 1fffe0001eb28e28 x13: 0000000000000000 x12: 0000000000000000 [ 148.059060][ C0] x11: ffff60001eb28e29 x10: dfff800000000000 x9 : 0000000000000000 [ 148.059067][ C0] x8 : 0000000000000001 x7 : ffff8000894fa224 x6 : 0000000000000000 [ 148.059073][ C0] x5 : 0000000000000000 x4 : 0000000000000001 x3 : ffff80008b029af8 [ 148.059080][ C0] x2 : 0000000000000000 x1 : 0000000000000001 x0 : 0000000000000001 [ 148.059086][ C0] Call trace: [ 148.059088][ C0] queued_spin_lock_slowpath+0x138/0xaec (P) [ 148.059096][ C0] do_raw_spin_lock+0x2a8/0x2cc [ 148.059105][ C0] _raw_spin_lock+0x50/0x60 [ 148.059110][ C0] netif_tx_lock+0x9c/0x1d8 [ 148.059117][ C0] dev_deactivate_many+0x274/0xabc [ 148.059123][ C0] __dev_close_many+0x238/0x704 [ 148.059130][ C0] netif_close_many+0x1e8/0x448 [ 148.059136][ C0] netif_close+0x148/0x1f8 [ 148.059142][ C0] dev_close+0xf8/0x1e4 [ 148.059146][ C0] ser_release+0x150/0x1ec [ 148.059151][ C0] process_one_work+0x7e8/0x155c [ 148.059156][ C0] worker_thread+0x958/0xed8 [ 148.059161][ C0] kthread+0x5fc/0x75c [ 148.059166][ C0] ret_from_fork+0x10/0x20 [ 148.059173][ C0] Sending NMI from CPU 0 to CPUs 1: [ 148.059183][ C1] NMI backtrace for cpu 1 [ 148.059193][ C1] CPU: 1 UID: 0 PID: 2414 Comm: aoe_tx0 Not tainted 6.17.0-rc1-syzkaller-g8f5ae30d69d7 #0 PREEMPT [ 148.059204][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 [ 148.059210][ C1] pstate: 83400005 (Nzcv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 148.059219][ C1] pc : _raw_spin_unlock_irqrestore+0x44/0x98 [ 148.059229][ C1] lr : _raw_spin_unlock_irqrestore+0x38/0x98 [ 148.059235][ C1] sp : ffff8000a24376a0 [ 148.059237][ C1] x29: ffff8000a24376a0 x28: ffff0000de3f4430 x27: 0000000000000000 [ 148.059247][ C1] x26: ffff0000de3f43c0 x25: ffff0000d21a8238 x24: dfff800000000000 [ 148.059254][ C1] x23: 0000000000000003 x22: 0000000000000000 x21: ffff800091382c40 [ 148.059261][ C1] x20: ffff800097897d40 x19: 0000000000000000 x18: 00000000ffffffff [ 148.059268][ C1] x17: ffff800093507000 x16: ffff8000805293e8 x15: 0000000000000001 [ 148.059274][ C1] x14: 1ffff00012f12fa8 x13: 0000000000000000 x12: 0000000000000000 [ 148.059281][ C1] x11: ffff800093306be8 x10: 0000000000000003 x9 : 0000000000000000 [ 148.059287][ C1] x8 : 00000000000000c0 x7 : ffff800083e11828 x6 : 0000000000000000 [ 148.059294][ C1] x5 : 0000000000000001 x4 : 0000000000000001 x3 : 0000000000000010 [ 148.059300][ C1] x2 : 0000000000000002 x1 : ffff80008edc258c x0 : ffff80010c5fd000 [ 148.059307][ C1] Call trace: [ 148.059309][ C1] _raw_spin_unlock_irqrestore+0x44/0x98 (P) [ 148.059316][ C1] uart_port_unlock_deref+0x108/0x2ec [ 148.059324][ C1] uart_write_room+0xa4/0x15c [ 148.059330][ C1] tty_write_room+0x6c/0x8c [ 148.059336][ C1] handle_tx+0x128/0x5fc [ 148.059342][ C1] caif_xmit+0x108/0x150 [ 148.059348][ C1] dev_hard_start_xmit+0x2b0/0x890 [ 148.059353][ C1] __dev_queue_xmit+0x1600/0x32a8 [ 148.059358][ C1] tx+0x9c/0x1cc [ 148.059363][ C1] kthread+0x164/0x354 [ 148.059372][ C1] kthread+0x5fc/0x75c [ 148.059379][ C1] ret_from_fork+0x10/0x20 [ 148.060183][ C0] Kernel panic - not syncing: softlockup: hung tasks [ 148.117511][ C0] CPU: 0 UID: 0 PID: 6605 Comm: kworker/0:3 Tainted: G L 6.17.0-rc1-syzkaller-g8f5ae30d69d7 #0 PREEMPT [ 148.119218][ C0] Tainted: [L]=SOFTLOCKUP [ 148.119790][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 [ 148.121371][ C0] Workqueue: events ser_release [ 148.122149][ C0] Call trace: [ 148.122662][ C0] show_stack+0x2c/0x3c (C) [ 148.123430][ C0] __dump_stack+0x30/0x40 [ 148.124144][ C0] dump_stack_lvl+0x30/0x12c [ 148.124878][ C0] dump_stack+0x1c/0x28 [ 148.125571][ C0] vpanic+0x280/0x780 [ 148.126269][ C0] vpanic+0x0/0x780 [ 148.126890][ C0] softlockup_fn+0x0/0x120 [ 148.127603][ C0] __hrtimer_run_queues+0x3ec/0xb78 [ 148.128439][ C0] hrtimer_interrupt+0x2b8/0xb50 [ 148.129225][ C0] arch_timer_handler_virt+0x74/0x88 [ 148.130092][ C0] handle_percpu_devid_irq+0x174/0x308 [ 148.130998][ C0] generic_handle_domain_irq+0xe0/0x140 [ 148.131907][ C0] gic_handle_irq+0x6c/0x190 [ 148.132663][ C0] call_on_irq_stack+0x30/0x48 [ 148.133413][ C0] do_interrupt_handler+0xd4/0x138 [ 148.134249][ C0] el1_interrupt+0x34/0x54 [ 148.134980][ C0] el1h_64_irq_handler+0x18/0x24 [ 148.135804][ C0] el1h_64_irq+0x6c/0x70 [ 148.136504][ C0] queued_spin_lock_slowpath+0x138/0xaec (P) [ 148.137479][ C0] do_raw_spin_lock+0x2a8/0x2cc [ 148.138224][ C0] _raw_spin_lock+0x50/0x60 [ 148.138900][ C0] netif_tx_lock+0x9c/0x1d8 [ 148.139624][ C0] dev_deactivate_many+0x274/0xabc [ 148.140444][ C0] __dev_close_many+0x238/0x704 [ 148.141211][ C0] netif_close_many+0x1e8/0x448 [ 148.141973][ C0] netif_close+0x148/0x1f8 [ 148.142676][ C0] dev_close+0xf8/0x1e4 [ 148.143331][ C0] ser_release+0x150/0x1ec [ 148.144036][ C0] process_one_work+0x7e8/0x155c [ 148.144757][ C0] worker_thread+0x958/0xed8 [ 148.145435][ C0] kthread+0x5fc/0x75c [ 148.146059][ C0] ret_from_fork+0x10/0x20 [ 148.146719][ C0] SMP: stopping secondary CPUs [ 148.147450][ C0] Kernel Offset: disabled [ 148.148172][ C0] CPU features: 0x40000,00007800,109c1141,5427fea7 [ 148.149193][ C0] Memory Limit: none [ 148.149801][ C0] [ 148.150153][ C0] ============================= [ 148.150865][ C0] [ BUG: Invalid wait context ] [ 148.151578][ C0] 6.17.0-rc1-syzkaller-g8f5ae30d69d7 #0 Tainted: G L [ 148.152854][ C0] ----------------------------- [ 148.153671][ C0] kworker/0:3/6605 is trying to lock: [ 148.154474][ C0] ffff0000c1ab4628 (&k->list_lock){+.+.}-{3:3}, at: bus_for_each_dev+0xa0/0x290 [ 148.155831][ C0] other info that might help us debug this: [ 148.156666][ C0] context-{2:2} [ 148.157165][ C0] 6 locks held by kworker/0:3/6605: [ 148.157873][ C0] #0: ffff0000c0028d48 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x63c/0x155c [ 148.159394][ C0] #1: ffff8000a4377bc0 (ser_release_work){+.+.}-{0:0}, at: process_one_work+0x6d4/0x155c [ 148.160803][ C0] #2: ffff800092a58268 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_lock+0x20/0x2c [ 148.161962][ C0] #3: ffff0000d21a84f0 (&dev->tx_global_lock){+.-.}-{3:3}, at: netif_tx_lock+0x3c/0x1d8 [ 148.163320][ C0] #4: ffff0000f5947158 (_xmit_NONE#2){+...}-{3:3}, at: netif_tx_lock+0x9c/0x1d8 [ 148.164578][ C0] #5: ffff80008f9a9060 (rcu_read_lock){....}-{1:3}, at: rcu_lock_acquire+0x10/0x4c [ 148.166111][ C0] stack backtrace: [ 148.166736][ C0] CPU: 0 UID: 0 PID: 6605 Comm: kworker/0:3 Tainted: G L 6.17.0-rc1-syzkaller-g8f5ae30d69d7 #0 PREEMPT [ 148.168658][ C0] Tainted: [L]=SOFTLOCKUP [ 148.169301][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 [ 148.170967][ C0] Workqueue: events ser_release [ 148.171772][ C0] Call trace: [ 148.172233][ C0] show_stack+0x2c/0x3c (C) [ 148.172915][ C0] __dump_stack+0x30/0x40 [ 148.173568][ C0] dump_stack_lvl+0x30/0x12c [ 148.174236][ C0] dump_stack+0x1c/0x28 [ 148.174837][ C0] __lock_acquire+0xaec/0x30a4 [ 148.175517][ C0] lock_acquire+0x14c/0x2e0 [ 148.176246][ C0] _raw_spin_lock+0x48/0x60 [ 148.176922][ C0] bus_for_each_dev+0xa0/0x290 [ 148.177608][ C0] coresight_panic_cb+0x2c/0x3c [ 148.178293][ C0] notifier_call_chain+0x1b8/0x4e4 [ 148.179060][ C0] atomic_notifier_call_chain+0xd0/0x180 [ 148.179831][ C0] vpanic+0x318/0x780 [ 148.180414][ C0] vpanic+0x0/0x780 [ 148.180960][ C0] softlockup_fn+0x0/0x120 [ 148.181554][ C0] __hrtimer_run_queues+0x3ec/0xb78 [ 148.182271][ C0] hrtimer_interrupt+0x2b8/0xb50 [ 148.182966][ C0] arch_timer_handler_virt+0x74/0x88 [ 148.183694][ C0] handle_percpu_devid_irq+0x174/0x308 [ 148.184437][ C0] generic_handle_domain_irq+0xe0/0x140 [ 148.185207][ C0] gic_handle_irq+0x6c/0x190 [ 148.185844][ C0] call_on_irq_stack+0x30/0x48 [ 148.186523][ C0] do_interrupt_handler+0xd4/0x138 [ 148.187216][ C0] el1_interrupt+0x34/0x54 [ 148.187844][ C0] el1h_64_irq_handler+0x18/0x24 [ 148.188619][ C0] el1h_64_irq+0x6c/0x70 [ 148.189293][ C0] queued_spin_lock_slowpath+0x138/0xaec (P) [ 148.190320][ C0] do_raw_spin_lock+0x2a8/0x2cc [ 148.191119][ C0] _raw_spin_lock+0x50/0x60 [ 148.191803][ C0] netif_tx_lock+0x9c/0x1d8 [ 148.192465][ C0] dev_deactivate_many+0x274/0xabc [ 148.193316][ C0] __dev_close_many+0x238/0x704 [ 148.194132][ C0] netif_close_many+0x1e8/0x448 [ 148.194892][ C0] netif_close+0x148/0x1f8 [ 148.195586][ C0] dev_close+0xf8/0x1e4 [ 148.196269][ C0] ser_release+0x150/0x1ec [ 148.196955][ C0] process_one_work+0x7e8/0x155c [ 148.197655][ C0] worker_thread+0x958/0xed8 [ 148.198391][ C0] kthread+0x5fc/0x75c [ 148.199044][ C0] ret_from_fork+0x10/0x20 [ 148.394705][ C0] Rebooting in 86400 seconds..