last executing test programs: 26.362761951s ago: executing program 1 (id=1175): setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x1, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(0xffffffffffffffff, 0x11b, 0x6, 0x0, 0x0) socket$inet6(0xa, 0x802, 0x88) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0) r3 = socket(0x1e, 0x4, 0x0) r4 = syz_open_dev$vim2m(&(0x7f0000000400), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f0000000000)={0x6, 0x1, 0x1, 0x0, 0x3}) close_range(r3, 0xffffffffffffffff, 0x0) 24.973769703s ago: executing program 1 (id=1178): r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) r2 = openat$cgroup_subtree(r1, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000300)=ANY=[@ANYBLOB='-cpu'], 0x5) write$cgroup_subtree(r2, &(0x7f0000000480)={[{0x2b, 'rdma'}]}, 0x6) 24.745338395s ago: executing program 1 (id=1181): syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x90, 0x0, 0x0, {0x3, 0x0, 0x0, 0x5, 0x0, 0x0, {0x0, 0x0, 0x20, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x2}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000007c0)=ANY=[@ANYBLOB="280300002d00090027bd7000000000000400000013"], 0x328}}, 0x84) 24.591580824s ago: executing program 1 (id=1183): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001000000800000", @ANYRES32, @ANYBLOB="00000000000e9800"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) chdir(&(0x7f0000000340)='./file0\x00') renameat2(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x2) socket$nl_generic(0x10, 0x3, 0x10) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) 24.521177855s ago: executing program 1 (id=1184): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x18, &(0x7f0000000080)=0x80000049, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000340)=[@timestamp, @mss, @sack_perm, @window={0x3, 0x74a}, @timestamp, @mss, @timestamp, @sack_perm], 0x8) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) 24.241854014s ago: executing program 1 (id=1187): syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x46d, 0xc218, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x40, 0xb1, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x101, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0xc, 0x80}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) clock_gettime(0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f0000000040)={0x20, 0x12, 0x2, {0x2, 0x1}}, 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) 24.115032578s ago: executing program 32 (id=1187): syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x46d, 0xc218, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x40, 0xb1, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x101, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0xc, 0x80}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) clock_gettime(0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f0000000040)={0x20, 0x12, 0x2, {0x2, 0x1}}, 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) 14.461616979s ago: executing program 2 (id=1220): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x1c, r1, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x2}]}, 0x1c}}, 0x4844) sendmsg$FOU_CMD_DEL(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, r1, 0x1, 0x70bd25, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0xc0}, 0x80) bpf$MAP_CREATE(0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000180)=0x8) sched_setaffinity(r2, 0x0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, 0x0) sendmsg$netlink(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000700)=ANY=[@ANYBLOB, @ANYRES32=r6, @ANYBLOB="0b00e880976b6408686030000500"], 0x2c}], 0x1}, 0x0) r7 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r7, &(0x7f0000000440), 0x10) listen(r7, 0x0) r8 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r8, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) sendto$packet(r8, 0x0, 0x0, 0x44, 0x0, 0x0) r9 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$llc_int(r9, 0x10c, 0x4, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) 13.497037348s ago: executing program 2 (id=1222): sendmsg$NL80211_CMD_TDLS_OPER(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000540)={0x0, 0x28}, 0x1, 0x0, 0x0, 0x20048880}, 0x20000000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@newtaction={0x27c, 0x30, 0x400, 0x70bd29, 0x25dfdbff, {}, [{0x268, 0x1, [@m_nat={0xe4, 0x15, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x5, 0x800, 0x0, 0x6, 0x5}, @broadcast, @private=0xa010101, 0xff, 0x1}}]}, {0x91, 0x6, "10e888c9612e2e34f2a5c0d7a87138e300765dba5074c9d374932654344b0c3962c5b1337fa6db0058e4c409791d8494eb4f1d5e393184346fed949d96f5daa0ce947de3daaa6e95d07edeca20c84c34c3d590793d972426d03baeb20ac6787db577296c99e3e931b99974120505982554b03c14cf350d002b5185962405187e60822f26f3d3d50fc809abad8c"}, {0xc}, {0xc, 0x8, {0x2, 0x1}}}}, @m_gact={0xcc, 0x8, 0x0, 0x0, {{0x9}, {0x4}, {0x9d, 0x6, "0f617356f0a663079ab7576a2846e5b3b3d9b048dc90bac2c3b40552dc14f7774371c98d6e2763d4fda783e36f45e224484cc6a0e6a530d841c87c70bbf3448d6187a58197fa3ffb0b318a51cc59415ac311a355fe1d08f8de9966d8ba89a56bfbc37c6af7d37dcdeb618f98f29bf3b05a23cefbbf51193614c08c162352d9eaad342b2f307dd8babd71ab8a1c4f80bbbbccc8ce4d369a33f9"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2}}}}, @m_sample={0xb4, 0x1e, 0x0, 0x0, {{0xb}, {0x4}, {0x86, 0x6, "b994bedd346bce0500000000000000d115251a878473985c1ed7a3d4fca80601598de37da823754e06000000b3a3c993afbb7ebbbe1526dab34d44b5c23c87b684ba0a43c6d997aa4921c5a813b871326a35619082cefce7336f46644321281eb0d25aefbb3a49f1569225f999328fd102ad19375fb7bbd7b7fcbf6d8b3d9c2e08d6"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}]}]}, 0x27c}}, 0x48000) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x334}, {&(0x7f00000007c0)=""/154, 0x2c}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 11.622334012s ago: executing program 3 (id=1226): r0 = userfaultfd(0x801) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x22, 0x2, 0x24) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x100000f, 0x810, r0, 0x57c68000) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) writev(r4, &(0x7f0000000200), 0x0) shutdown(r4, 0x1) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) syz_open_dev$midi(0x0, 0x500, 0x0) close(r5) sendmmsg$inet(r3, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf00) 8.297622127s ago: executing program 3 (id=1233): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$rds(0x15, 0x5, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) r4 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_opts(r4, 0x29, 0x37, &(0x7f0000000000)=ANY=[@ANYBLOB="00020401"], 0x18) connect$inet6(r4, &(0x7f0000001940)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}, 0x1c) sendmmsg$inet6(r4, &(0x7f0000001840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r5 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newqdisc={0x68, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10}}}, @TCA_STAB={0x20, 0x8, 0x0, 0x1, [{{0x1c}, {0x4}}]}]}, 0x68}}, 0x0) socket$alg(0x26, 0x5, 0x0) 8.151758697s ago: executing program 0 (id=1234): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x3, 0x7f, 0x20000006, 0x4d, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x7, 0x3, 0x0, 0x5, 0x24, 0x1, 0x7, 0x3c5b, 0x1, 0x24, 0x6, 0x5, 0x5, 0xffffffff, 0xe661, 0x4, 0x7, 0x5, 0x8, 0x4c74, 0x80000000, 0x40000, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0x1, 0x407, 0x5, 0x3e, 0x8f, 0x4006, 0x6, 0x0, 0x0, 0x4, 0x8, 0x400, 0x80, 0x0, 0x5, 0x7, 0x8, 0x4, 0xfffffffe, 0x40], [0x10000007, 0xf0000000, 0x8000012f, 0x8004, 0x5, 0x6, 0x129432e6, 0xc8, 0xf9, 0xe, 0x2bf, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0xd, 0xea4, 0xffffffff, 0x4, 0x7, 0x7fff, 0x5a7c, 0x420, 0x401, 0x6, 0x0, 0xff, 0x1, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x9, 0x8, 0x9, 0x9, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0xfffffffe, 0x7, 0x9, 0x5, 0x3, 0x9, 0x1, 0x3, 0x6c0, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x8004, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x0, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x9, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x10000, 0x3, 0x5, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x1, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0xffe, 0xa2, 0x7, 0xa9, 0x5, 0x9, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0x0, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce7, 0x9, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0xffff, 0x2000a620, 0x2, 0x5, 0x1, 0x2, 0x5, 0xe7, 0x6, 0x16, 0xffffffff, 0x80000003, 0x5, 0x4, 0xc8, 0x9, 0xfffff000, 0x10000, 0x3, 0x7e, 0x100, 0x9602, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0x20000d7, 0x200, 0xffff3441, 0xfff]}, 0x45c) openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x80082) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 8.062360325s ago: executing program 0 (id=1235): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)}], 0x1}, 0x3) shutdown(r0, 0x2) 7.989888126s ago: executing program 0 (id=1236): socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x14, 0x30, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r3 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) request_key(&(0x7f0000000080)='cifs.idmap\x00', &(0x7f0000000100)={'syz', 0x2}, &(0x7f0000000140)='keyring\x00', r3) 7.094303803s ago: executing program 0 (id=1238): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="120110017a953210ac0504c777620102030109022d0001080540040904270102fffd01000921e700070122b30409050c0200020103400905df02"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000bc0)={0x24, 0x0, &(0x7f0000000b00)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x4ff}}, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000940)={0x84, &(0x7f0000000040)=ANY=[@ANYBLOB="001006"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) 6.304721414s ago: executing program 4 (id=1239): openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x286043, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) ioctl$TUNSETIFF(r1, 0x400454ca, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x813}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) r6 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/mm/ksm/run\x00', 0x2, 0x0) sendfile(r6, r6, 0x0, 0x3) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@gettfilter={0x24, 0x2e, 0x301, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x10, 0xf}, {}, {0xfff1, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0xc6e9f356b312f3bb}, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x0, @pix_mp={0x7ef, 0x9, 0x3031334d, 0x5, 0x0, [{0x3}, {0xffffffff}, {}, {0x0, 0x76dfbff1}, {}, {0x0, 0xffffffff}, {}, {0x3}], 0x0, 0x20}}) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) getsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, &(0x7f0000000000), &(0x7f0000000040)=0x4) ioctl$RTC_AIE_ON(r0, 0x7001) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) 5.48146755s ago: executing program 4 (id=1240): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000004c0)='sched_switch\x00', r0}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x44, 0x86}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f0000000480), 0x400034f, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r4}, 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x0, 0x0}, 0x10) close(r1) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0xffff}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8, 0x2, 0x2}]}}}, @IFLA_IFNAME={0x14, 0x3, 'xfrm0\x00'}]}, 0x50}}, 0x0) 4.366058347s ago: executing program 0 (id=1241): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x1c, r1, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x2}]}, 0x1c}}, 0x4844) sendmsg$FOU_CMD_DEL(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, r1, 0x1, 0x70bd25, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0xc0}, 0x80) bpf$MAP_CREATE(0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000180)=0x8) sched_setaffinity(r2, 0x0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, 0x0) sendmsg$netlink(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000700)=ANY=[@ANYBLOB, @ANYRES32=r6, @ANYBLOB="0b00e880976b6408686030000500"], 0x2c}], 0x1}, 0x0) r7 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r7, &(0x7f0000000440), 0x10) listen(r7, 0x0) r8 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r8, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) sendto$packet(r8, 0x0, 0x0, 0x44, 0x0, 0x0) r9 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$llc_int(r9, 0x10c, 0x4, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) 3.182833955s ago: executing program 0 (id=1242): r0 = userfaultfd(0x801) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x22, 0x2, 0x24) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x100000f, 0x810, r0, 0x57c68000) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) writev(r4, &(0x7f0000000200), 0x0) shutdown(r4, 0x1) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) syz_open_dev$midi(0x0, 0x500, 0x0) close(r5) sendmmsg$inet(r3, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf00) 2.997931486s ago: executing program 2 (id=1243): syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_keypress_notify={{0x3c, 0x7}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x1}}}, 0xa) 2.925876769s ago: executing program 4 (id=1244): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="1400000016000b63d25a80648c2594f917240685", 0x14}], 0x1}, 0x0) 2.833981236s ago: executing program 2 (id=1245): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x50840}, 0x0) 2.693812633s ago: executing program 3 (id=1246): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x200}}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000b00)={0x4, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042", 0xffffffffffffffff}) r3 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REG(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c0100", @ANYRES16=r3, @ANYRES16], 0x14c}, 0x1, 0x0, 0x0, 0x20000014}, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000000)={0x8, "b546baa5cc590d3033de259c2996817bb959ebab028deda525e19bdeffafde25", 0xffffffffffffffff}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x85}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x6) r5 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r5, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) getrlimit(0xa, &(0x7f00000001c0)) r8 = syz_open_dev$video(&(0x7f0000000580), 0x7, 0x0) ioctl$VIDIOC_S_CTRL(r8, 0xc008561c, &(0x7f0000000240)={0xf0f02a, 0x7ffc}) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$SYNC_IOC_MERGE(r2, 0xc0303e03, &(0x7f0000000f80)={"d1ed39d88b014976ab94c1fb10628c46d2e681cdb9e5c1a31965c61e0df52c5e", r4}) 2.602054076s ago: executing program 2 (id=1247): socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x14, 0x30, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r3 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) request_key(&(0x7f0000000080)='cifs.idmap\x00', &(0x7f0000000100)={'syz', 0x2}, &(0x7f0000000140)='keyring\x00', r3) 1.66438942s ago: executing program 3 (id=1248): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000002000000000000000000000a00000000000000000000000d"], 0x0, 0x32, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) ioctl$SIOCNRDECOBS(0xffffffffffffffff, 0x89e2) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0xd0}, 0x1, 0x0, 0x0, 0x20040081}, 0x4008040) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) socket(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'netdevsim0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001400b59500000000000000000a000000", @ANYRES32=r4, @ANYBLOB="14000200fe"], 0x48}}, 0x0) 1.06704447s ago: executing program 4 (id=1249): openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x286043, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) ioctl$TUNSETIFF(r1, 0x400454ca, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x813}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) r6 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/mm/ksm/run\x00', 0x2, 0x0) sendfile(r6, r6, 0x0, 0x3) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@gettfilter={0x24, 0x2e, 0x301, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x10, 0xf}, {}, {0xfff1, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0xc6e9f356b312f3bb}, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x0, @pix_mp={0x7ef, 0x9, 0x3031334d, 0x5, 0x0, [{0x3}, {0xffffffff}, {}, {0x0, 0x76dfbff1}, {}, {0x0, 0xffffffff}, {}, {0x3}], 0x0, 0x20}}) getsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, &(0x7f0000000000), &(0x7f0000000040)=0x4) ioctl$RTC_AIE_ON(r0, 0x7001) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) 288.641928ms ago: executing program 3 (id=1250): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa10000000000000701"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x7b}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x9, 0x4, 0x6, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x19, 0x4, 0x4, 0x9, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000500)='workqueue_queue_work\x00', r1}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xe, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 121.813275ms ago: executing program 3 (id=1251): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_open_procfs(0xffffffffffffffff, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$inet_udp_int(r0, 0x11, 0x66, &(0x7f0000001040)=0x3dba, 0x4) syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000006600000008000300", @ANYRES32=r8, @ANYBLOB="080026008f0900000800b7"], 0x2c}}, 0x0) 66.55253ms ago: executing program 2 (id=1252): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x1c, r1, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x2}]}, 0x1c}}, 0x4844) sendmsg$FOU_CMD_DEL(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, r1, 0x1, 0x70bd25, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0xc0}, 0x80) bpf$MAP_CREATE(0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000180)=0x8) sched_setaffinity(r2, 0x0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, 0x0) sendmsg$netlink(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000700)=ANY=[@ANYBLOB, @ANYRES32=r6, @ANYBLOB="0b00e880976b64086860300005000180"], 0x2c}], 0x1}, 0x0) r7 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r7, &(0x7f0000000440), 0x10) listen(r7, 0x0) r8 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r8, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) sendto$packet(r8, 0x0, 0x0, 0x44, 0x0, 0x0) r9 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$llc_int(r9, 0x10c, 0x4, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) 45.057799ms ago: executing program 4 (id=1253): sendmsg$NL80211_CMD_TDLS_OPER(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000540)={0x0, 0x28}, 0x1, 0x0, 0x0, 0x20048880}, 0x20000000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@newtaction={0x290, 0x30, 0x400, 0x70bd29, 0x25dfdbff, {}, [{0x27c, 0x1, [@m_nat={0xe4, 0x15, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x5, 0x800, 0x0, 0x6, 0x5}, @broadcast, @private=0xa010101, 0xff, 0x1}}]}, {0x91, 0x6, "10e888c9612e2e34f2a5c0d7a87138e300765dba5074c9d374932654344b0c3962c5b1337fa6db0058e4c409791d8494eb4f1d5e393184346fed949d96f5daa0ce947de3daaa6e95d07edeca20c84c34c3d590793d972426d03baeb20ac6787db577296c99e3e931b99974120505982554b03c14cf350d002b5185962405187e60822f26f3d3d50fc809abad8c"}, {0xc}, {0xc, 0x8, {0x2, 0x1}}}}, @m_gact={0xcc, 0x8, 0x0, 0x0, {{0x9}, {0x4}, {0x9d, 0x6, "0f617356f0a663079ab7576a2846e5b3b3d9b048dc90bac2c3b40552dc14f7774371c98d6e2763d4fda783e36f45e224484cc6a0e6a530d841c87c70bbf3448d6187a58197fa3ffb0b318a51cc59415ac311a355fe1d08f8de9966d8ba89a56bfbc37c6af7d37dcdeb618f98f29bf3b05a23cefbbf51193614c08c162352d9eaad342b2f307dd8babd71ab8a1c4f80bbbbccc8ce4d369a33f9"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2}}}}, @m_sample={0xc8, 0x1e, 0x0, 0x0, {{0xb}, {0x4}, {0x9c, 0x6, "b994bedd346bce0500000000000000d115251a878473985c1ed7a3d4fca80601598de37da823754e06000000b3a3c993afbb7ebbbe1526dab34d44b5c23c87b684ba0a43c6d997aa4921c5a813b871326a35619082cefce7336f46644321281eb0d25aefbb3a49f1569225f999328fd102ad19375fb7bbd7b7fcbf6d8b3d9c2e08d675477de0b8bb08de621609e209dc52b7268675f10327"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}]}]}, 0x290}}, 0x48000) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x334}, {&(0x7f00000007c0)=""/154, 0x2c}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 0s ago: executing program 4 (id=1254): syz_open_dev$usbmon(&(0x7f0000000240), 0x7, 0x802000) r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_buf(r0, 0x0, 0x2c, &(0x7f0000000000)="7e6e69bbd8a458ed27fcb80a4155c36ec7bba71ec05b1b839c5d615102971741578475644d1a72af6edb067efc516fdafe2874eee95b0ae384aeb83f9b6921d31b674b26f98a04135006a87078ba7b760195a9e97b637ccf077e148ffd2286f7f666c75387c15a49e48a5ec2d6d34eba9347f473d44ab887ab51176a1aaa317818dffcfc995c7ac43f2ac34305e525c3c5085a92a6a175c384cd300b38eee0d4a21449536364aeaae7c1a9e5db35cfa2ed817abc13897c8ecf5f74ce53a5c00a0155b3830269404b6c57c3de510165992c712a8f", 0xd4) pread64(0xffffffffffffffff, &(0x7f0000000140)=""/15, 0xf, 0x4) fadvise64(0xffffffffffffffff, 0xfffffffffffffffc, 0xfffffffffffffff8, 0x4) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.10.6' (ED25519) to the list of known hosts. [ 31.369171][ T6455] cgroup: Unknown subsys name 'net' [ 31.610130][ T6455] cgroup: Unknown subsys name 'cpuset' [ 31.613514][ T6455] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 31.894200][ T6455] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SS [ 33.262301][ T6472] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 33.277552][ T55] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 33.279764][ T6473] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 33.282120][ T55] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 33.282223][ T55] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 33.287525][ T6473] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 33.288433][ T6476] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 33.288759][ T6476] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 33.294807][ T6473] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 33.306282][ T6037] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 33.319594][ T6479] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 33.320136][ T6472] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 33.320737][ T6472] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 33.321057][ T6472] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 33.321586][ T6472] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 33.321898][ T6472] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 33.333397][ T6479] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 33.335871][ T6479] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 33.338698][ T6479] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 33.341398][ T6479] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 33.375377][ T6479] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 33.376030][ T6479] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 33.381931][ T6479] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 33.385499][ T6479] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 33.388420][ T6479] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 33.613473][ T6469] chnl_net:caif_netlink_parms(): no params data found [ 33.675272][ T6475] chnl_net:caif_netlink_parms(): no params data found [ 33.680529][ T6477] chnl_net:caif_netlink_parms(): no params data found [ 33.775072][ T6469] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.775214][ T6469] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.775338][ T6469] bridge_slave_0: entered allmulticast mode [ 33.776144][ T6469] bridge_slave_0: entered promiscuous mode [ 33.778474][ T6469] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.778517][ T6469] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.778629][ T6469] bridge_slave_1: entered allmulticast mode [ 33.779425][ T6469] bridge_slave_1: entered promiscuous mode [ 33.820197][ T6469] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 33.820354][ T6470] chnl_net:caif_netlink_parms(): no params data found [ 33.823998][ T6469] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 33.836863][ T6475] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.836951][ T6475] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.837375][ T6475] bridge_slave_0: entered allmulticast mode [ 33.838161][ T6475] bridge_slave_0: entered promiscuous mode [ 33.871754][ T6475] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.871829][ T6475] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.871939][ T6475] bridge_slave_1: entered allmulticast mode [ 33.872708][ T6475] bridge_slave_1: entered promiscuous mode [ 33.899751][ T6469] team0: Port device team_slave_0 added [ 33.902933][ T6469] team0: Port device team_slave_1 added [ 33.932773][ T6475] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 33.934157][ T6475] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 33.941354][ T6477] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.943522][ T6477] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.945591][ T6477] bridge_slave_0: entered allmulticast mode [ 33.948267][ T6477] bridge_slave_0: entered promiscuous mode [ 33.951051][ T6482] chnl_net:caif_netlink_parms(): no params data found [ 33.962584][ T6469] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 33.964541][ T6469] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 33.967187][ T6469] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 33.976126][ T6477] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.977538][ T6477] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.977640][ T6477] bridge_slave_1: entered allmulticast mode [ 33.978469][ T6477] bridge_slave_1: entered promiscuous mode [ 33.995751][ T6469] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 33.995801][ T6469] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 33.996142][ T6469] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 34.006425][ T6475] team0: Port device team_slave_0 added [ 34.048098][ T6470] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.049910][ T6470] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.050027][ T6470] bridge_slave_0: entered allmulticast mode [ 34.050846][ T6470] bridge_slave_0: entered promiscuous mode [ 34.060689][ T6475] team0: Port device team_slave_1 added [ 34.063713][ T6477] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 34.065917][ T6477] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 34.084721][ T6470] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.086792][ T6470] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.087590][ T6470] bridge_slave_1: entered allmulticast mode [ 34.088368][ T6470] bridge_slave_1: entered promiscuous mode [ 34.122445][ T6477] team0: Port device team_slave_0 added [ 34.133735][ T6470] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 34.136869][ T6469] hsr_slave_0: entered promiscuous mode [ 34.137458][ T6469] hsr_slave_1: entered promiscuous mode [ 34.144872][ T6475] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 34.146832][ T6475] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 34.154164][ T6475] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 34.158478][ T6475] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 34.160466][ T6475] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 34.161288][ T6475] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 34.162582][ T6477] team0: Port device team_slave_1 added [ 34.186363][ T6470] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 34.213613][ T6482] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.215674][ T6482] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.218144][ T6482] bridge_slave_0: entered allmulticast mode [ 34.221241][ T6482] bridge_slave_0: entered promiscuous mode [ 34.232432][ T6470] team0: Port device team_slave_0 added [ 34.239437][ T6477] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 34.239511][ T6477] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 34.239558][ T6477] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 34.240866][ T6477] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 34.240908][ T6477] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 34.240944][ T6477] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 34.261026][ T6482] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.261081][ T6482] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.261184][ T6482] bridge_slave_1: entered allmulticast mode [ 34.262032][ T6482] bridge_slave_1: entered promiscuous mode [ 34.274111][ T6470] team0: Port device team_slave_1 added [ 34.312022][ T6482] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 34.322220][ T6475] hsr_slave_0: entered promiscuous mode [ 34.324244][ T6475] hsr_slave_1: entered promiscuous mode [ 34.326136][ T6475] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 34.327409][ T6475] Cannot create hsr debugfs directory [ 34.333635][ T6470] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 34.333870][ T6470] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 34.333898][ T6470] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 34.348662][ T6482] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 34.368112][ T6470] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 34.368173][ T6470] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 34.368215][ T6470] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 34.394753][ T6477] hsr_slave_0: entered promiscuous mode [ 34.397634][ T6477] hsr_slave_1: entered promiscuous mode [ 34.399235][ T6477] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 34.399441][ T6477] Cannot create hsr debugfs directory [ 34.426231][ T6482] team0: Port device team_slave_0 added [ 34.443415][ T6470] hsr_slave_0: entered promiscuous mode [ 34.443892][ T6470] hsr_slave_1: entered promiscuous mode [ 34.444143][ T6470] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 34.444169][ T6470] Cannot create hsr debugfs directory [ 34.454742][ T6482] team0: Port device team_slave_1 added [ 34.509639][ T6482] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 34.509701][ T6482] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 34.509727][ T6482] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 34.510821][ T6482] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 34.510846][ T6482] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 34.510871][ T6482] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 34.635899][ T6482] hsr_slave_0: entered promiscuous mode [ 34.637675][ T6482] hsr_slave_1: entered promiscuous mode [ 34.639493][ T6482] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 34.639744][ T6482] Cannot create hsr debugfs directory [ 34.685251][ T6469] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 34.691745][ T6469] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 34.703146][ T6469] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 34.712851][ T6469] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 34.754994][ T6477] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 34.759321][ T6477] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 34.773448][ T6477] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 34.776914][ T6477] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 34.812507][ T6475] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 34.816117][ T6475] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 34.825522][ T6475] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 34.829297][ T6475] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 34.886117][ T6469] 8021q: adding VLAN 0 to HW filter on device bond0 [ 34.888917][ T6470] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 34.892448][ T6470] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 34.896096][ T6470] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 34.914045][ T6470] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 34.924011][ T6477] 8021q: adding VLAN 0 to HW filter on device bond0 [ 34.935635][ T6469] 8021q: adding VLAN 0 to HW filter on device team0 [ 34.955789][ T6482] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 34.964502][ T4360] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.964652][ T4360] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.974831][ T6477] 8021q: adding VLAN 0 to HW filter on device team0 [ 34.976646][ T6482] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 34.981783][ T6482] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 34.986202][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.986289][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.988074][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.988115][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.996234][ T6482] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 35.015169][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.015240][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 35.068007][ T6477] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 35.068081][ T6477] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 35.121413][ T6475] 8021q: adding VLAN 0 to HW filter on device bond0 [ 35.134055][ T6470] 8021q: adding VLAN 0 to HW filter on device bond0 [ 35.145475][ T6482] 8021q: adding VLAN 0 to HW filter on device bond0 [ 35.159659][ T6482] 8021q: adding VLAN 0 to HW filter on device team0 [ 35.180008][ T6470] 8021q: adding VLAN 0 to HW filter on device team0 [ 35.184097][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.184180][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 35.190667][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.190743][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 35.198619][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.198696][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 35.208060][ T6477] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 35.224024][ T6482] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 35.227011][ T6482] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 35.232460][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.232645][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 35.240871][ T6475] 8021q: adding VLAN 0 to HW filter on device team0 [ 35.262429][ T4056] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.262504][ T4056] bridge0: port 1(bridge_slave_0) entered forwarding state [ 35.276132][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.276214][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 35.299605][ T6475] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 35.302598][ T6475] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 35.310465][ T6469] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 35.326080][ T6470] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 35.338472][ T6477] veth0_vlan: entered promiscuous mode [ 35.342739][ T6477] veth1_vlan: entered promiscuous mode [ 35.357843][ T6477] veth0_macvtap: entered promiscuous mode [ 35.361146][ T6477] veth1_macvtap: entered promiscuous mode [ 35.369296][ T6476] Bluetooth: hci1: command tx timeout [ 35.369299][ T6479] Bluetooth: hci3: command tx timeout [ 35.369472][ T6479] Bluetooth: hci0: command tx timeout [ 35.374129][ T6473] Bluetooth: hci2: command tx timeout [ 35.387008][ T6477] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 35.392154][ T6477] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 35.405996][ T6477] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.407610][ T6477] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.407642][ T6477] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.407669][ T6477] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.412941][ T6469] veth0_vlan: entered promiscuous mode [ 35.415280][ T6469] veth1_vlan: entered promiscuous mode [ 35.422586][ T6482] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 35.447635][ T6473] Bluetooth: hci4: command tx timeout [ 35.455050][ T6469] veth0_macvtap: entered promiscuous mode [ 35.473066][ T6469] veth1_macvtap: entered promiscuous mode [ 35.519947][ T6482] veth0_vlan: entered promiscuous mode [ 35.522989][ T6482] veth1_vlan: entered promiscuous mode [ 35.535630][ T6469] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 35.535737][ T6469] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.536255][ T6469] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 35.538802][ T4056] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 35.538854][ T4056] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 35.544543][ T6475] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 35.562465][ T6469] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 35.562519][ T6469] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.563343][ T6469] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 35.575027][ T6475] veth0_vlan: entered promiscuous mode [ 35.581021][ T6469] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.581086][ T6469] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.581142][ T6469] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.581170][ T6469] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.591868][ T44] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 35.591926][ T44] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 35.598458][ T6470] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 35.603479][ T6475] veth1_vlan: entered promiscuous mode [ 35.646738][ T6482] veth0_macvtap: entered promiscuous mode [ 35.651414][ T6482] veth1_macvtap: entered promiscuous mode [ 35.665982][ T6475] veth0_macvtap: entered promiscuous mode [ 35.678487][ T6475] veth1_macvtap: entered promiscuous mode [ 35.682732][ T6475] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 35.693770][ T6475] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.693992][ T6475] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 35.694013][ T6475] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.695034][ T6475] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 35.698586][ T6475] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 35.698618][ T6475] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.698637][ T6475] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 35.698655][ T6475] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.699107][ T6475] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 35.701209][ T6475] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.701249][ T6475] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.701277][ T6475] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.701304][ T6475] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.710646][ T6477] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 35.752918][ T6482] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 35.752990][ T6482] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.753009][ T6482] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 35.753027][ T6482] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.753044][ T6482] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 35.753062][ T6482] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.753619][ T6482] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 35.754693][ T6482] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 35.754721][ T6482] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.754738][ T6482] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 35.754756][ T6482] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.754772][ T6482] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 35.754790][ T6482] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.755173][ T6482] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 35.756398][ T6482] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.756445][ T6482] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.756474][ T6482] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.756503][ T6482] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.834884][ T1580] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 35.834953][ T1580] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 35.836557][ T6473] Bluetooth: hci3: Invalid connection link type handle 0x00c8 [ 35.869218][ T6470] veth0_vlan: entered promiscuous mode [ 35.909891][ T6470] veth1_vlan: entered promiscuous mode [ 35.912238][ T44] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 35.912298][ T44] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 35.929070][ T4360] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 35.929129][ T4360] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 35.945147][ T6470] veth0_macvtap: entered promiscuous mode [ 35.955889][ T6470] veth1_macvtap: entered promiscuous mode [ 35.956094][ T44] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 35.956121][ T44] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 35.969874][ T6470] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 35.972821][ T6470] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.975590][ T6470] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 35.979345][ T6470] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.982176][ T6470] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 35.985110][ T6470] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.988147][ T6470] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 35.991071][ T6470] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.994447][ T6470] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 36.015910][ T6556] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 36.021742][ T6470] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 36.036988][ T6470] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 36.039969][ T6470] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 36.040024][ T6470] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 36.040049][ T6470] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 36.040073][ T6470] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 36.040102][ T6470] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 36.040125][ T6470] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 36.041140][ T6470] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 36.073823][ T6470] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.076516][ T6470] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.079234][ T6470] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.081673][ T6470] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.102273][ T4360] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 36.102352][ T4360] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 36.134489][ T44] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 36.136997][ T44] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 36.188422][ T44] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 36.197603][ T44] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 36.242531][ T31] audit: type=1800 audit(35.970:2): pid=6560 uid=0 auid=4294967295 ses=4294967295 subj=_ op=set_data cause=unavailable-hash-algorithm comm="syz.0.8" name="/" dev="tmpfs" ino=3 res=0 errno=0 [ 36.249366][ T6568] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 36.249631][ T6568] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 36.272283][ T1580] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 36.272375][ T1580] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 36.373195][ T6575] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 36.373455][ T6575] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 36.780199][ T6589] capability: warning: `syz.2.13' uses deprecated v2 capabilities in a way that may be insecure [ 37.006274][ T6596] netlink: 36 bytes leftover after parsing attributes in process `syz.1.16'. [ 37.995060][ T6473] Bluetooth: hci1: command tx timeout [ 37.995131][ T6473] Bluetooth: hci3: command tx timeout [ 37.995181][ T6473] Bluetooth: hci2: command tx timeout [ 37.995234][ T6473] Bluetooth: hci0: command tx timeout [ 37.995254][ T6472] Bluetooth: hci4: command tx timeout [ 38.027645][ T6604] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9'. [ 38.383352][ T6606] syz.2.18 uses obsolete (PF_INET,SOCK_PACKET) [ 38.472812][ T6613] Zero length message leads to an empty skb [ 39.438908][ T6621] netlink: 12 bytes leftover after parsing attributes in process `syz.2.22'. [ 39.450302][ T6621] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 39.450431][ T6621] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 39.450461][ T6621] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 39.450489][ T6621] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 39.477847][ T6621] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 39.477924][ T6621] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 39.477970][ T6621] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 39.478031][ T6621] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 40.007169][ T6479] Bluetooth: hci4: command tx timeout [ 40.007244][ T6479] Bluetooth: hci0: command tx timeout [ 40.007292][ T6479] Bluetooth: hci3: command tx timeout [ 40.007336][ T6479] Bluetooth: hci1: command tx timeout [ 41.265338][ T6642] netlink: 8 bytes leftover after parsing attributes in process `syz.2.31'. [ 41.265420][ T6642] netlink: 20 bytes leftover after parsing attributes in process `syz.2.31'. [ 42.254876][ T6473] Bluetooth: hci1: command tx timeout [ 42.255465][ T6473] Bluetooth: hci3: command tx timeout [ 42.255937][ T6473] Bluetooth: hci0: command tx timeout [ 42.256354][ T6473] Bluetooth: hci4: command tx timeout [ 42.753625][ T6479] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 42.756126][ T6479] Bluetooth: hci2: Injecting HCI hardware error event [ 42.758867][ T6473] Bluetooth: hci2: hardware error 0x00 [ 43.675715][ T6681] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 43.675960][ T6681] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 43.836514][ T6688] loop3: detected capacity change from 0 to 1024 [ 43.844581][ T6688] netlink: 'syz.3.43': attribute type 4 has an invalid length. [ 43.904573][ T6692] No control pipe specified [ 44.105884][ T6701] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 44.106211][ T6701] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 44.222002][ T6703] tipc: Started in network mode [ 44.222229][ T6703] tipc: Node identity ac14140f, cluster identity 4711 [ 44.223852][ T6703] tipc: New replicast peer: 255.255.255.255 [ 44.225114][ T6703] tipc: Enabled bearer , priority 10 [ 44.784762][ T6707] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 44.786722][ T6707] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 44.810058][ T6709] dummy0: entered allmulticast mode [ 44.811474][ T6708] dummy0: left allmulticast mode [ 44.984130][ T6719] No control pipe specified [ 45.242558][ T6473] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 45.829913][ T24] tipc: Node number set to 2886997007 [ 46.120122][ T6479] Bluetooth: hci0: command 0x0c20 tx timeout [ 46.193528][ T6699] Bluetooth: hci0: Opcode 0x0c20 failed: -110 [ 46.878943][ T6479] Bluetooth: hci3: ACL packet too small [ 46.928367][ T6759] No control pipe specified [ 46.956910][ T6762] netlink: 8 bytes leftover after parsing attributes in process `syz.1.71'. [ 46.996057][ T6766] geneve2: entered promiscuous mode [ 46.998968][ T6766] geneve2: entered allmulticast mode [ 47.313980][ T6782] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 47.317187][ T6782] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 47.475198][ T6788] netlink: 164 bytes leftover after parsing attributes in process `syz.3.83'. [ 47.534229][ T6790] netlink: 8 bytes leftover after parsing attributes in process `syz.3.84'. [ 47.666205][ T6795] vlan2: entered allmulticast mode [ 47.670536][ T6795] macsec0: entered allmulticast mode [ 47.672411][ T6795] veth1_macvtap: entered allmulticast mode [ 47.847129][ T6479] Bluetooth: hci5: command 0x1003 tx timeout [ 47.891710][ T6473] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 48.567713][ T1786] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 48.593424][ T6796] ALSA: mixer_oss: invalid OSS volume '' [ 49.287257][ T6473] Bluetooth: hci0: command 0x0c20 tx timeout [ 49.297116][ T6779] Bluetooth: hci0: Opcode 0x0c20 failed: -110 [ 49.307299][ T6816] netlink: 8 bytes leftover after parsing attributes in process `syz.2.95'. [ 49.445735][ T1786] usb 1-1: config 0 has an invalid interface number: 214 but max is 0 [ 49.445857][ T1786] usb 1-1: config 0 has no interface number 0 [ 49.450701][ T1786] usb 1-1: config 0 interface 214 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 49.451046][ T1786] usb 1-1: config 0 interface 214 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 49.451093][ T1786] usb 1-1: config 0 interface 214 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 49.464611][ T1786] usb 1-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 49.464666][ T1786] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 49.464707][ T1786] usb 1-1: Product: syz [ 49.464732][ T1786] usb 1-1: Manufacturer: syz [ 49.464757][ T1786] usb 1-1: SerialNumber: syz [ 49.478747][ T1786] usb 1-1: config 0 descriptor?? [ 50.027207][ T1786] usbtouchscreen 1-1:0.214: Failed to read FW rev: -71 [ 50.029532][ T1786] usbtouchscreen 1-1:0.214: probe with driver usbtouchscreen failed with error -71 [ 50.073881][ T1786] usb 1-1: USB disconnect, device number 2 [ 50.412566][ T6851] netlink: 8 bytes leftover after parsing attributes in process `syz.2.109'. [ 51.206724][ T6856] loop0: detected capacity change from 0 to 512 [ 51.237097][ T6856] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 51.304005][ T6856] EXT4-fs (loop0): Couldn't remount RDWR because of unprocessed orphan inode list. Please umount/remount instead [ 51.581084][ T6477] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.715757][ T6882] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 54.109656][ T6896] block device autoloading is deprecated and will be removed. [ 57.410618][ T6929] loop0: detected capacity change from 0 to 1024 [ 57.458598][ T6929] netlink: 'syz.0.133': attribute type 4 has an invalid length. [ 59.720279][ T6972] loop2: detected capacity change from 0 to 1024 [ 60.419248][ T6987] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 60.421785][ T6987] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 60.617177][ T10] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 61.818014][ T7009] loop3: detected capacity change from 0 to 1024 [ 61.834903][ T10] usb 1-1: unable to get BOS descriptor or descriptor too short [ 61.835342][ T10] usb 1-1: not running at top speed; connect to a high speed hub [ 61.836077][ T10] usb 1-1: config 64 has an invalid interface number: 53 but max is 0 [ 61.836108][ T10] usb 1-1: config 64 has no interface number 0 [ 61.836135][ T10] usb 1-1: config 64 interface 53 has no altsetting 0 [ 61.838270][ T10] usb 1-1: New USB device found, idVendor=0451, idProduct=5152, bcdDevice=7a.4b [ 61.838303][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 61.838337][ T10] usb 1-1: Product: syz [ 61.838357][ T10] usb 1-1: Manufacturer: syz [ 61.838377][ T10] usb 1-1: SerialNumber: syz [ 62.420159][ T7017] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 62.420389][ T7017] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 63.630714][ T10] ti_usb_3410_5052 1-1:64.53: TI USB 5052 2 port adapter converter detected [ 63.634965][ T10] ti_usb_3410_5052 1-1:64.53: missing endpoints [ 63.770130][ T10] usb 1-1: USB disconnect, device number 3 [ 64.751460][ T7037] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input4 [ 64.783682][ T2380] ieee802154 phy0 wpan0: encryption failed: -22 [ 64.783811][ T2380] ieee802154 phy1 wpan1: encryption failed: -22 [ 65.241975][ T7075] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 65.244773][ T7075] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 66.215207][ T24] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 66.239781][ T7083] netlink: 8 bytes leftover after parsing attributes in process `syz.3.189'. [ 66.388410][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 66.392259][ T24] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 66.392421][ T24] usb 1-1: New USB device found, idVendor=046d, idProduct=c218, bcdDevice= 0.00 [ 66.392488][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 66.696681][ T24] usb 1-1: config 0 descriptor?? [ 66.795728][ T7073] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 66.812299][ T7073] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 66.896350][ T6473] Bluetooth: hci0: unexpected event for opcode 0x0000 [ 67.006942][ T7103] input: syz1 as /devices/virtual/input/input5 [ 67.184988][ T7107] netlink: 8 bytes leftover after parsing attributes in process `syz.1.200'. [ 67.317291][ T7117] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 67.320122][ T7117] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 67.471738][ T24] logitech 0003:046D:C218.0001: hidraw0: USB HID v1.01 Device [HID 046d:c218] on usb-dummy_hcd.0-1/input0 [ 67.471840][ T24] logitech 0003:046D:C218.0001: no inputs found [ 68.300083][ T6460] usb 1-1: USB disconnect, device number 4 [ 70.584995][ T26] cfg80211: failed to load regulatory.db [ 70.997295][ T6473] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 70.997439][ T6473] Bluetooth: hci0: Injecting HCI hardware error event [ 70.998805][ T6473] Bluetooth: hci0: hardware error 0x00 [ 71.775197][ T7146] netlink: 8 bytes leftover after parsing attributes in process `syz.3.212'. [ 71.954895][ T7189] fuse: Bad value for 'fd' [ 72.601599][ T7200] loop9: detected capacity change from 0 to 8 [ 73.023628][ T9] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz1 [ 73.031991][ T7200] loop9: [CUMANA/ADFS] p1 [ADFS] p1 [ 73.032089][ T7200] loop9: partition table partially beyond EOD, truncated [ 73.032143][ T7200] loop9: p1 size 81768186 extends beyond EOD, truncated [ 73.057344][ T7201] loop9: [CUMANA/ADFS] p1 [ADFS] p1 [ 73.057406][ T7201] loop9: partition table partially beyond EOD, truncated [ 73.057457][ T7201] loop9: p1 size 81768186 extends beyond EOD, truncated [ 73.541248][ T6473] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 73.790983][ T7229] Bluetooth: MGMT ver 1.23 [ 75.017393][ T7237] netlink: 8 bytes leftover after parsing attributes in process `syz.1.229'. [ 75.298568][ T7257] fuse: Bad value for 'fd' [ 77.107945][ T7280] netlink: 8 bytes leftover after parsing attributes in process `syz.0.240'. [ 77.224192][ T7287] netlink: 8 bytes leftover after parsing attributes in process `syz.4.242'. [ 79.523538][ T7331] netlink: 8 bytes leftover after parsing attributes in process `syz.0.253'. [ 83.108793][ T7406] fuse: Bad value for 'fd' [ 84.647196][ T6518] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 84.798309][ T6518] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 84.801805][ T6518] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 84.805857][ T6518] usb 1-1: New USB device found, idVendor=046d, idProduct=c218, bcdDevice= 0.00 [ 84.808777][ T6518] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.823611][ T6518] usb 1-1: config 0 descriptor?? [ 84.826521][ T7414] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 84.826612][ T7414] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 85.242757][ T6518] logitech 0003:046D:C218.0003: hidraw0: USB HID v1.01 Device [HID 046d:c218] on usb-dummy_hcd.0-1/input0 [ 85.242840][ T6518] logitech 0003:046D:C218.0003: no inputs found [ 85.445363][ T7440] fuse: Bad value for 'fd' [ 85.548236][ T6518] usb 1-1: USB disconnect, device number 5 [ 90.277362][ T7492] fuse: Bad value for 'fd' [ 90.931468][ T7498] syz.0.304: attempt to access beyond end of device [ 90.931468][ T7498] nbd0: rw=0, sector=0, nr_sectors = 1 limit=0 [ 92.064996][ T7517] tipc: Started in network mode [ 92.065060][ T7517] tipc: Node identity 4, cluster identity 4711 [ 92.065078][ T7517] tipc: Node number set to 4 [ 93.173889][ T7543] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 93.174125][ T7543] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 95.045732][ T7593] syz.3.341 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 95.066508][ T7593] netlink: 8 bytes leftover after parsing attributes in process `syz.3.341'. [ 95.071486][ T7593] netlink: 8 bytes leftover after parsing attributes in process `syz.3.341'. [ 95.216685][ T7605] netlink: 20 bytes leftover after parsing attributes in process `syz.3.347'. [ 95.961653][ T6520] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 96.139384][ T6520] usb 1-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00 [ 96.142078][ T6520] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.232882][ T6520] usb 1-1: config 0 descriptor?? [ 96.240729][ T6520] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 96.446789][ T6520] usb 1-1: Detected FT232B [ 96.688719][ T6520] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 96.692537][ T6520] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 96.750981][ T6520] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 96.859048][ T6520] usb 1-1: USB disconnect, device number 6 [ 96.969024][ T6520] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 96.975191][ T6520] ftdi_sio 1-1:0.0: device disconnected [ 97.000103][ T7650] netlink: 20 bytes leftover after parsing attributes in process `syz.2.362'. [ 101.318681][ T7735] affs: No valid root block on device nullb0 [ 102.159014][ T7748] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 102.161859][ T7748] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 105.011083][ T7801] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 105.011311][ T7801] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 105.379266][ T6479] Bluetooth: hci3: command 0x0406 tx timeout [ 108.877379][ T7852] netlink: 48 bytes leftover after parsing attributes in process `syz.2.426'. [ 109.273596][ T7868] netlink: 4 bytes leftover after parsing attributes in process `syz.3.435'. [ 110.039034][ T7878] xt_CT: No such helper "snmp" [ 112.420387][ T7909] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 112.423471][ T7909] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 114.013261][ T7926] netlink: 'syz.4.452': attribute type 23 has an invalid length. [ 116.884979][ T7968] netlink: 8 bytes leftover after parsing attributes in process `syz.1.466'. [ 117.378645][ T7983] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 117.379020][ T7983] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 117.413304][ T7986] netlink: 28 bytes leftover after parsing attributes in process `syz.4.473'. [ 119.400416][ T8022] netlink: 16 bytes leftover after parsing attributes in process `syz.2.484'. [ 120.257838][ T8035] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 120.259098][ T8035] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 121.274996][ T8044] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 121.276014][ T8044] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 123.663532][ T8034] delete_channel: no stack [ 124.714412][ T8099] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 124.718640][ T8099] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 126.065520][ T8119] netlink: 16 bytes leftover after parsing attributes in process `syz.1.515'. [ 126.187142][ T2380] ieee802154 phy0 wpan0: encryption failed: -22 [ 126.187222][ T2380] ieee802154 phy1 wpan1: encryption failed: -22 [ 128.107994][ T8135] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 128.108213][ T8135] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 128.260889][ T8144] loop9: detected capacity change from 0 to 8 [ 129.129398][ T1786] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz1] on syz1 [ 129.327121][ T8144] loop9: [CUMANA/ADFS] p1 [ADFS] p1 [ 129.327796][ T8144] loop9: partition table partially beyond EOD, truncated [ 129.327825][ T8144] loop9: p1 size 81768186 extends beyond EOD, truncated [ 129.877475][ T8146] loop9: [CUMANA/ADFS] p1 [ADFS] p1 [ 129.877538][ T8146] loop9: partition table partially beyond EOD, truncated [ 129.877592][ T8146] loop9: p1 size 81768186 extends beyond EOD, truncated [ 129.979081][ T8154] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 129.981695][ T8154] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 130.850557][ T8166] netlink: 16 bytes leftover after parsing attributes in process `syz.2.530'. [ 133.054181][ T8194] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 133.058336][ T8194] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 133.818020][ T8200] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 133.818237][ T8200] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 133.903831][ T8205] netlink: 16 bytes leftover after parsing attributes in process `syz.0.543'. [ 135.448281][ T8236] netlink: 16 bytes leftover after parsing attributes in process `syz.4.554'. [ 135.697297][ T6520] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 135.883240][ T6520] usb 1-1: no configurations [ 135.886646][ T6520] usb 1-1: can't read configurations, error -22 [ 136.057784][ T6520] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 136.337656][ T6520] usb 1-1: no configurations [ 136.339109][ T6520] usb 1-1: can't read configurations, error -22 [ 136.341479][ T6520] usb usb1-port1: attempt power cycle [ 136.697112][ T6520] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 136.717878][ T6520] usb 1-1: no configurations [ 136.719492][ T6520] usb 1-1: can't read configurations, error -22 [ 136.847347][ T6520] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 136.880046][ T6520] usb 1-1: no configurations [ 136.881562][ T6520] usb 1-1: can't read configurations, error -22 [ 136.887650][ T6520] usb usb1-port1: unable to enumerate USB device [ 137.000379][ T8261] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 137.000603][ T8261] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 137.098928][ T8267] netlink: 8 bytes leftover after parsing attributes in process `syz.1.566'. [ 139.661917][ T8314] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 139.662133][ T8314] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 139.954236][ T8324] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 139.955920][ T8324] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 141.961838][ T8360] loop9: detected capacity change from 0 to 8 [ 142.561136][ T10] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz1] on syz1 [ 142.581209][ T8360] loop9: [CUMANA/ADFS] p1 [ADFS] p1 [ 142.581264][ T8360] loop9: partition table partially beyond EOD, truncated [ 142.581302][ T8360] loop9: p1 size 81768186 extends beyond EOD, truncated [ 142.645822][ T8361] loop9: [CUMANA/ADFS] p1 [ADFS] p1 [ 142.645882][ T8361] loop9: partition table partially beyond EOD, truncated [ 142.645932][ T8361] loop9: p1 size 81768186 extends beyond EOD, truncated [ 142.980369][ T8371] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 142.980603][ T8371] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 145.043011][ T8407] loop9: detected capacity change from 0 to 8 [ 145.878653][ T26] hid-generic 0000:0000:0000.0006: hidraw0: HID v0.00 Device [syz1] on syz1 [ 145.898827][ T8407] loop9: [CUMANA/ADFS] p1 [ADFS] p1 [ 145.905087][ T8407] loop9: partition table partially beyond EOD, truncated [ 145.915193][ T8407] loop9: p1 size 81768186 extends beyond EOD, truncated [ 146.048577][ T8408] loop9: [CUMANA/ADFS] p1 [ADFS] p1 [ 146.048638][ T8408] loop9: partition table partially beyond EOD, truncated [ 146.048687][ T8408] loop9: p1 size 81768186 extends beyond EOD, truncated [ 146.110964][ T8414] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 146.111209][ T8414] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 148.601364][ T8461] loop9: detected capacity change from 0 to 8 [ 149.392057][ T6460] hid-generic 0000:0000:0000.0007: hidraw0: HID v0.00 Device [syz1] on syz1 [ 149.434391][ T8461] loop9: [CUMANA/ADFS] p1 [ADFS] p1 [ 149.434452][ T8461] loop9: partition table partially beyond EOD, truncated [ 149.434503][ T8461] loop9: p1 size 81768186 extends beyond EOD, truncated [ 149.500607][ T8465] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 149.500840][ T8465] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 149.543564][ T8462] loop9: [CUMANA/ADFS] p1 [ADFS] p1 [ 149.543633][ T8462] loop9: partition table partially beyond EOD, truncated [ 149.543661][ T8462] loop9: p1 size 81768186 extends beyond EOD, truncated [ 151.937879][ T8513] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 151.938104][ T8513] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 152.656070][ T8523] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 152.662841][ T8523] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 154.450694][ T8544] netlink: 8 bytes leftover after parsing attributes in process `syz.0.652'. [ 154.746520][ T8507] delete_channel: no stack [ 156.118443][ T8582] netlink: 8 bytes leftover after parsing attributes in process `syz.3.665'. [ 157.388265][ T8610] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 157.388513][ T8610] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 158.254682][ T8623] netlink: 8 bytes leftover after parsing attributes in process `syz.1.677'. [ 159.065082][ T6479] Bluetooth: hci3: command 0x0406 tx timeout [ 159.067284][ T6479] Bluetooth: hci1: command 0x0406 tx timeout [ 160.399085][ T8594] delete_channel: no stack [ 160.626382][ T8657] netlink: 28 bytes leftover after parsing attributes in process `syz.2.688'. [ 162.162248][ T8690] netlink: 28 bytes leftover after parsing attributes in process `syz.2.700'. [ 162.682917][ T8707] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 162.683156][ T8707] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 164.172258][ T8729] netlink: 28 bytes leftover after parsing attributes in process `syz.3.711'. [ 165.485736][ T8704] delete_channel: no stack [ 167.427133][ T10] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 167.872644][ T10] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 167.872711][ T10] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 167.872833][ T10] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 167.872868][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.887162][ T8814] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 167.892488][ T10] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 168.158703][ T8847] netlink: 'syz.4.750': attribute type 23 has an invalid length. [ 169.771974][ T6518] usb 1-1: USB disconnect, device number 11 [ 169.781286][ T8811] delete_channel: no stack [ 170.369741][ T8902] netlink: 'syz.4.770': attribute type 23 has an invalid length. [ 171.319237][ T8938] netlink: 'syz.4.785': attribute type 23 has an invalid length. [ 171.448733][ T8946] netlink: 28 bytes leftover after parsing attributes in process `syz.0.789'. [ 172.935853][ T8979] netlink: 'syz.4.797': attribute type 15 has an invalid length. [ 172.935977][ T8979] netlink: 24 bytes leftover after parsing attributes in process `syz.4.797'. [ 173.575194][ T8987] netlink: 28 bytes leftover after parsing attributes in process `syz.1.801'. [ 173.905153][ T9001] netlink: 'syz.1.807': attribute type 23 has an invalid length. [ 174.484256][ T9020] netlink: 28 bytes leftover after parsing attributes in process `syz.3.814'. [ 174.995364][ T9035] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 174.998664][ T9035] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 176.301758][ T9067] loop9: detected capacity change from 0 to 8 [ 176.396482][ T9067] loop9: [CUMANA/ADFS] p1 [ADFS] p1 [ 176.396631][ T9067] loop9: partition table partially beyond EOD, truncated [ 176.396802][ T9067] loop9: p1 size 81768186 extends beyond EOD, truncated [ 176.826268][ T6460] hid-generic 0000:0000:0000.0008: hidraw0: HID v0.00 Device [syz1] on syz1 [ 176.859068][ T9069] loop9: [CUMANA/ADFS] p1 [ADFS] p1 [ 176.859130][ T9069] loop9: partition table partially beyond EOD, truncated [ 176.859180][ T9069] loop9: p1 size 81768186 extends beyond EOD, truncated [ 180.706260][ T9129] netlink: 'syz.2.848': attribute type 23 has an invalid length. [ 181.716731][ T9144] ubi31: attaching mtd0 [ 181.723762][ T9144] ubi31: scanning is finished [ 181.723863][ T9144] ubi31: empty MTD device detected [ 183.164205][ T9144] ubi31 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt31d", error -4 [ 185.015470][ T10] IPVS: starting estimator thread 0... [ 185.151697][ T9187] IPVS: using max 40 ests per chain, 96000 per kthread [ 185.627036][ C0] hrtimer: interrupt took 32200 ns [ 186.698301][ T9217] netlink: 'syz.0.876': attribute type 23 has an invalid length. [ 187.483825][ T9247] loop9: detected capacity change from 0 to 8 [ 187.527164][ T9247] loop9: [CUMANA/ADFS] p1 [ADFS] p1 [ 187.527332][ T9247] loop9: partition table partially beyond EOD, truncated [ 187.528296][ T9247] loop9: p1 size 81768186 extends beyond EOD, truncated [ 187.717877][ T2380] ieee802154 phy0 wpan0: encryption failed: -22 [ 187.717978][ T2380] ieee802154 phy1 wpan1: encryption failed: -22 [ 187.754895][ T1786] hid-generic 0000:0000:0000.0009: hidraw0: HID v0.00 Device [syz1] on syz1 [ 187.978364][ T6557] loop9: [CUMANA/ADFS] p1 [ADFS] p1 [ 187.978435][ T6557] loop9: partition table partially beyond EOD, truncated [ 187.978462][ T6557] loop9: p1 size 81768186 extends beyond EOD, truncated [ 187.986544][ T9248] loop9: [CUMANA/ADFS] p1 [ADFS] p1 [ 187.986598][ T9248] loop9: partition table partially beyond EOD, truncated [ 187.986653][ T9248] loop9: p1 size 81768186 extends beyond EOD, truncated [ 189.388032][ T9266] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 189.388281][ T9266] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 189.693266][ T6476] Bluetooth: hci4: command 0x0406 tx timeout [ 190.239148][ T9292] loop9: detected capacity change from 0 to 8 [ 190.239570][ T9292] loop9: [CUMANA/ADFS] p1 [ADFS] p1 [ 190.239634][ T9292] loop9: partition table partially beyond EOD, truncated [ 190.239769][ T9292] loop9: p1 size 81768186 extends beyond EOD, truncated [ 190.305222][ T26] hid-generic 0000:0000:0000.000A: hidraw0: HID v0.00 Device [syz1] on syz1 [ 190.338790][ T7064] loop9: [CUMANA/ADFS] p1 [ADFS] p1 [ 190.338857][ T7064] loop9: partition table partially beyond EOD, truncated [ 190.338884][ T7064] loop9: p1 size 81768186 extends beyond EOD, truncated [ 190.346182][ T9294] loop9: [CUMANA/ADFS] p1 [ADFS] p1 [ 190.346228][ T9294] loop9: partition table partially beyond EOD, truncated [ 190.346266][ T9294] loop9: p1 size 81768186 extends beyond EOD, truncated [ 192.205151][ T9322] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 192.205393][ T9322] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 193.459728][ T9347] fuse: Unknown parameter 'group_id00000000000000000000' [ 194.906580][ T9371] loop9: detected capacity change from 0 to 8 [ 194.947902][ T6518] hid-generic 0000:0000:0000.000B: hidraw0: HID v0.00 Device [syz1] on syz1 [ 195.083281][ T9371] loop9: [CUMANA/ADFS] p1 [ADFS] p1 [ 195.083438][ T9371] loop9: partition table partially beyond EOD, truncated [ 195.083624][ T9371] loop9: p1 size 81768186 extends beyond EOD, truncated [ 195.388722][ T9372] loop9: [CUMANA/ADFS] p1 [ADFS] p1 [ 195.388786][ T9372] loop9: partition table partially beyond EOD, truncated [ 195.388861][ T9372] loop9: p1 size 81768186 extends beyond EOD, truncated [ 195.694442][ T9383] netlink: 12 bytes leftover after parsing attributes in process `syz.3.934'. [ 196.768188][ T9390] fuse: Bad value for 'user_id' [ 196.769752][ T9390] fuse: Bad value for 'user_id' [ 196.822377][ T9394] xt_CT: No such helper "snmp" [ 198.162365][ T9428] netlink: 12 bytes leftover after parsing attributes in process `syz.0.949'. [ 198.318574][ T9431] xt_CT: No such helper "snmp" [ 198.612243][ T9442] fuse: Bad value for 'user_id' [ 198.614873][ T9442] fuse: Bad value for 'user_id' [ 198.621312][ T9443] capability: warning: `syz.0.955' uses 32-bit capabilities (legacy support in use) [ 199.866331][ T9462] xt_CT: No such helper "snmp" [ 200.101950][ T9475] xt_NFQUEUE: number of queues (65532) out of range (got 66665) [ 200.508516][ T9486] fuse: Bad value for 'user_id' [ 200.508575][ T9486] fuse: Bad value for 'user_id' [ 202.925398][ T9530] fuse: Bad value for 'fd' [ 206.467953][ T9575] fuse: Bad value for 'fd' [ 209.104952][ T9632] fuse: Bad value for 'fd' [ 209.853708][ T9640] input: syz1 as /devices/virtual/input/input7 [ 210.593946][ T24] usb 1-1: new full-speed USB device number 12 using dummy_hcd [ 211.123957][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 211.124159][ T24] usb 1-1: New USB device found, idVendor=046d, idProduct=c218, bcdDevice= 0.00 [ 211.124265][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 211.232077][ T24] usb 1-1: config 0 descriptor?? [ 211.244613][ T9648] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 211.378924][ T9667] fuse: Bad value for 'fd' [ 212.136831][ T24] logitech 0003:046D:C218.000C: hidraw0: USB HID v1.01 Device [HID 046d:c218] on usb-dummy_hcd.0-1/input0 [ 212.140202][ T24] logitech 0003:046D:C218.000C: no inputs found [ 212.159248][ T24] usb 1-1: USB disconnect, device number 12 [ 214.466989][ T9716] fuse: Bad value for 'fd' [ 214.835091][ T6472] Bluetooth: hci1: unexpected event for opcode 0x1003 [ 215.197588][ T9728] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 215.226032][ T9728] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 217.606155][ T1786] hid-generic 0000:0000:0000.000D: hidraw0: HID v0.00 Device [syz1] on syz1 [ 218.061555][ T9768] fuse: Bad value for 'fd' [ 218.917923][ T6472] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 218.921415][ T6472] Bluetooth: hci1: Injecting HCI hardware error event [ 218.925285][ T6476] Bluetooth: hci1: hardware error 0x00 [ 220.318977][ T1786] usb 1-1: new full-speed USB device number 13 using dummy_hcd [ 221.108830][ T1786] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 221.112096][ T1786] usb 1-1: New USB device found, idVendor=046d, idProduct=c218, bcdDevice= 0.00 [ 221.114692][ T1786] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 221.118845][ T1786] usb 1-1: config 0 descriptor?? [ 221.121401][ T9825] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 221.139749][ T9846] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 221.142508][ T9846] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 221.573678][ C0] raw-gadget.0 gadget.0: ignoring, device is not running [ 221.574568][ T1786] usbhid 1-1:0.0: can't add hid device: -71 [ 221.574647][ T1786] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 221.577800][ T1786] usb 1-1: USB disconnect, device number 13 [ 221.927276][ T6476] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 222.549420][ T9879] fuse: Invalid rootmode [ 225.073366][ T9941] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 225.104700][ T9941] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 225.747420][ T26] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 225.923478][ T26] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 225.926629][ T26] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 225.935826][ T26] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 226.028284][ T26] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 226.032963][ T26] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 226.039730][ T26] usb 1-1: Product: syz [ 226.044650][ T26] usb 1-1: Manufacturer: syz [ 226.048828][ T26] usb 1-1: SerialNumber: syz [ 227.127402][ T26] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 14 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 227.218027][ T9964] fuse: Invalid rootmode [ 227.415308][ T24] usb 1-1: USB disconnect, device number 14 [ 227.416885][ T9950] usblp0:failed reading printer status (-71) [ 227.621351][ T9949] usblp0: removed [ 228.935806][ T9994] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1102'. [ 230.811426][T10019] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 230.814722][T10019] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 231.039703][T10026] fuse: Invalid rootmode [ 233.767861][T10075] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 233.768081][T10075] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 233.786398][T10076] fuse: Bad value for 'rootmode' [ 234.938200][T10090] loop9: detected capacity change from 0 to 8 [ 235.441453][T10090] loop9: [CUMANA/ADFS] p1 [ADFS] p1 [ 235.441530][T10090] loop9: partition table partially beyond EOD, truncated [ 235.441581][T10090] loop9: p1 size 81768186 extends beyond EOD, truncated [ 235.472719][T10091] loop9: [CUMANA/ADFS] p1 [ADFS] p1 [ 235.472780][T10091] loop9: partition table partially beyond EOD, truncated [ 235.472829][T10091] loop9: p1 size 81768186 extends beyond EOD, truncated [ 238.449409][T10141] fuse: Bad value for 'rootmode' [ 240.338937][T10197] netlink: 788 bytes leftover after parsing attributes in process `syz.3.1150'. [ 241.387194][T10209] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 241.387445][T10209] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 241.698849][T10216] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1153'. [ 244.770989][T10247] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 244.773676][T10247] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 245.768514][T10269] fuse: Unknown parameter 'use00000000000000000000' [ 247.826135][T10305] netlink: 768 bytes leftover after parsing attributes in process `syz.1.1181'. [ 248.638518][ T6472] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 248.641487][ T6472] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 248.643452][ T6472] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 248.648855][ T6472] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 248.652937][ T6472] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 248.732126][ T45] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.048411][ T2380] ieee802154 phy0 wpan0: encryption failed: -22 [ 249.048517][ T2380] ieee802154 phy1 wpan1: encryption failed: -22 [ 249.622471][ T45] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.838382][ T45] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.938671][ T45] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.991337][T10323] chnl_net:caif_netlink_parms(): no params data found [ 250.727283][ T6476] Bluetooth: hci0: command tx timeout [ 250.779412][T10323] bridge0: port 1(bridge_slave_0) entered blocking state [ 250.779825][T10323] bridge0: port 1(bridge_slave_0) entered disabled state [ 250.780460][T10323] bridge_slave_0: entered allmulticast mode [ 250.792484][T10323] bridge_slave_0: entered promiscuous mode [ 250.801956][ T45] bridge_slave_1: left allmulticast mode [ 250.802067][ T45] bridge_slave_1: left promiscuous mode [ 250.803018][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 250.824449][ T45] bridge_slave_0: left allmulticast mode [ 250.824502][ T45] bridge_slave_0: left promiscuous mode [ 250.824771][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 252.812806][ T6476] Bluetooth: hci0: command tx timeout [ 253.084140][T10396] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1205'. [ 254.887131][ T6476] Bluetooth: hci0: command tx timeout [ 254.921880][T10410] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 254.922100][T10410] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 254.972363][ T45] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 255.029442][ T45] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 255.078745][ T45] bond0 (unregistering): Released all slaves [ 255.117233][T10323] bridge0: port 2(bridge_slave_1) entered blocking state [ 255.119431][T10323] bridge0: port 2(bridge_slave_1) entered disabled state [ 255.121612][T10323] bridge_slave_1: entered allmulticast mode [ 255.124281][T10323] bridge_slave_1: entered promiscuous mode [ 255.278612][T10323] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 255.280298][T10323] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 256.049101][T10323] team0: Port device team_slave_0 added [ 256.241386][T10323] team0: Port device team_slave_1 added [ 256.905193][T10444] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1215'. [ 256.928525][T10323] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 256.930696][T10323] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 256.943995][T10323] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 256.953687][T10323] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 256.955869][T10323] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 256.967789][ T6476] Bluetooth: hci0: command tx timeout [ 257.038095][T10323] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 257.143411][T10451] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 257.143626][T10451] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 257.322068][T10454] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1219'. [ 257.387228][T10455] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1219'. [ 257.433498][T10323] hsr_slave_0: entered promiscuous mode [ 257.433998][T10323] hsr_slave_1: entered promiscuous mode [ 257.434262][T10323] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 257.434290][T10323] Cannot create hsr debugfs directory [ 258.331246][ T45] hsr_slave_0: left promiscuous mode [ 258.331769][ T45] hsr_slave_1: left promiscuous mode [ 258.332153][ T45] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 258.332231][ T45] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 258.332998][ T45] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 258.333055][ T45] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 258.359888][ T45] veth1_macvtap: left promiscuous mode [ 258.361638][ T45] veth0_macvtap: left promiscuous mode [ 258.363583][ T45] veth1_vlan: left promiscuous mode [ 258.365313][ T45] veth0_vlan: left promiscuous mode [ 259.294957][T10480] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1221'. [ 260.895148][T10443] Set syz1 is full, maxelem 65536 reached [ 261.602108][T10501] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 261.604741][T10501] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 263.672612][ T45] team0 (unregistering): Port device team_slave_1 removed [ 264.230161][T10493] delete_channel: no stack [ 264.410812][ T45] team0 (unregistering): Port device team_slave_0 removed [ 266.071544][ T1786] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 266.223871][ T1786] usb 1-1: Using ep0 maxpacket: 16 [ 266.226570][ T1786] usb 1-1: config 8 has an invalid interface number: 39 but max is 0 [ 266.226633][ T1786] usb 1-1: config 8 has no interface number 0 [ 266.226660][ T1786] usb 1-1: config 8 interface 39 altsetting 1 has an endpoint descriptor with address 0xDF, changing to 0x8F [ 266.226685][ T1786] usb 1-1: config 8 interface 39 altsetting 1 endpoint 0x8F has invalid wMaxPacketSize 0 [ 266.226708][ T1786] usb 1-1: config 8 interface 39 altsetting 1 bulk endpoint 0x8F has invalid maxpacket 0 [ 266.226870][ T1786] usb 1-1: config 8 interface 39 has no altsetting 0 [ 266.233934][ T1786] usb 1-1: New USB device found, idVendor=05ac, idProduct=c704, bcdDevice=62.77 [ 266.233970][ T1786] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 266.233992][ T1786] usb 1-1: Product: syz [ 266.234011][ T1786] usb 1-1: Manufacturer: syz [ 266.234030][ T1786] usb 1-1: SerialNumber: syz [ 267.054253][ T1786] ipheth 1-1:8.39: ipheth_enable_ncm: usb_control_msg: 0 [ 269.496730][ T1786] ipheth 1-1:8.39: Apple iPhone USB Ethernet device attached [ 269.502702][ T1786] usb 1-1: USB disconnect, device number 15 [ 269.678655][ T1786] ipheth 1-1:8.39: Apple iPhone USB Ethernet now disconnected [ 269.724801][T10323] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 269.840536][T10323] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 269.849732][T10323] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 269.854111][T10323] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 270.096879][T10323] 8021q: adding VLAN 0 to HW filter on device bond0 [ 270.106876][T10323] 8021q: adding VLAN 0 to HW filter on device team0 [ 270.113541][ T9907] bridge0: port 1(bridge_slave_0) entered blocking state [ 270.113621][ T9907] bridge0: port 1(bridge_slave_0) entered forwarding state [ 270.127920][ T9907] bridge0: port 2(bridge_slave_1) entered blocking state [ 270.127992][ T9907] bridge0: port 2(bridge_slave_1) entered forwarding state [ 270.413085][ T1786] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 270.868319][ T1786] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 270.868400][ T1786] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 270.868434][ T1786] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 270.868467][ T1786] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 270.873849][T10558] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 270.883179][ T1786] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 271.035772][T10323] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 271.239820][T10606] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1248'. [ 271.322531][T10323] veth0_vlan: entered promiscuous mode [ 271.355640][T10323] veth1_vlan: entered promiscuous mode [ 271.441634][T10323] veth0_macvtap: entered promiscuous mode [ 271.451279][T10323] veth1_macvtap: entered promiscuous mode [ 271.544466][T10323] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 271.544532][T10323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.544877][T10323] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 271.544898][T10323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.544916][T10323] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 271.544934][T10323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.544952][T10323] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 271.544970][T10323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.545822][T10323] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 271.550004][T10323] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 271.550036][T10323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.550053][T10323] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 271.550071][T10323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.550088][T10323] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 271.550106][T10323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.550123][T10323] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 271.551374][T10323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.552917][T10323] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 271.556803][T10323] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 271.556844][T10323] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 271.556872][T10323] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 271.556898][T10323] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.321386][ T9902] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 272.328116][ T9902] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 272.364060][ T9899] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 272.364117][ T9899] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 273.107930][T10651] [ 273.108585][T10651] ====================================================== [ 273.110503][T10651] WARNING: possible circular locking dependency detected [ 273.112374][T10651] 6.15.0-rc1-syzkaller-g0af2f6be1b42 #0 Not tainted [ 273.114220][T10651] ------------------------------------------------------ [ 273.116112][T10651] syz.4.1254/10651 is trying to acquire lock: [ 273.117731][T10651] ffff8000930815a8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_lock+0x20/0x2c [ 273.119911][T10651] [ 273.119911][T10651] but task is already holding lock: [ 273.121918][T10651] ffff0000d25fa1a0 (&smc->clcsock_release_lock){+.+.}-{4:4}, at: smc_setsockopt+0x170/0xd0c [ 273.124700][T10651] [ 273.124700][T10651] which lock already depends on the new lock. [ 273.124700][T10651] [ 273.127584][T10651] [ 273.127584][T10651] the existing dependency chain (in reverse order) is: [ 273.129994][T10651] [ 273.129994][T10651] -> #2 (&smc->clcsock_release_lock){+.+.}-{4:4}: [ 273.132353][T10651] __mutex_lock_common+0x1f0/0x2604 [ 273.133846][T10651] mutex_lock_nested+0x2c/0x38 [ 273.135263][T10651] smc_switch_to_fallback+0x48/0xa7c [ 273.136845][T10651] smc_sendmsg+0xfc/0x9f8 [ 273.138155][T10651] __sys_sendto+0x360/0x4d8 [ 273.139510][T10651] __arm64_sys_sendto+0xd8/0xf8 [ 273.140993][T10651] invoke_syscall+0x98/0x2b8 [ 273.142409][T10651] el0_svc_common+0x130/0x23c [ 273.143875][T10651] do_el0_svc+0x48/0x58 [ 273.145133][T10651] el0_svc+0x54/0x168 [ 273.146339][T10651] el0t_64_sync_handler+0x84/0x108 [ 273.147890][T10651] el0t_64_sync+0x198/0x19c [ 273.149227][T10651] [ 273.149227][T10651] -> #1 (sk_lock-AF_INET){+.+.}-{0:0}: [ 273.151368][T10651] sockopt_lock_sock+0x88/0x148 [ 273.152861][T10651] do_ip_setsockopt+0x138c/0x32c0 [ 273.154387][T10651] ip_setsockopt+0x80/0x128 [ 273.155760][T10651] raw_setsockopt+0x104/0x2a4 [ 273.157237][T10651] sock_common_setsockopt+0xb0/0xcc [ 273.158845][T10651] do_sock_setsockopt+0x2a0/0x4e0 [ 273.160358][T10651] __arm64_sys_setsockopt+0x170/0x1e0 [ 273.161943][T10651] invoke_syscall+0x98/0x2b8 [ 273.163340][T10651] el0_svc_common+0x130/0x23c [ 273.164720][T10651] do_el0_svc+0x48/0x58 [ 273.165934][T10651] el0_svc+0x54/0x168 [ 273.167159][T10651] el0t_64_sync_handler+0x84/0x108 [ 273.168643][T10651] el0t_64_sync+0x198/0x19c [ 273.169948][T10651] [ 273.169948][T10651] -> #0 (rtnl_mutex){+.+.}-{4:4}: [ 273.171865][T10651] __lock_acquire+0x17b8/0x32c4 [ 273.173344][T10651] lock_acquire+0x150/0x2e8 [ 273.174709][T10651] __mutex_lock_common+0x1f0/0x2604 [ 273.176235][T10651] mutex_lock_nested+0x2c/0x38 [ 273.177683][T10651] rtnl_lock+0x20/0x2c [ 273.178952][T10651] do_ip_setsockopt+0xd5c/0x32c0 [ 273.180420][T10651] ip_setsockopt+0x80/0x128 [ 273.181788][T10651] tcp_setsockopt+0xcc/0xe8 [ 273.183153][T10651] sock_common_setsockopt+0xb0/0xcc [ 273.184724][T10651] smc_setsockopt+0x1f8/0xd0c [ 273.186108][T10651] do_sock_setsockopt+0x2a0/0x4e0 [ 273.187609][T10651] __arm64_sys_setsockopt+0x170/0x1e0 [ 273.189190][T10651] invoke_syscall+0x98/0x2b8 [ 273.190679][T10651] el0_svc_common+0x130/0x23c [ 273.192086][T10651] do_el0_svc+0x48/0x58 [ 273.193364][T10651] el0_svc+0x54/0x168 [ 273.194616][T10651] el0t_64_sync_handler+0x84/0x108 [ 273.196176][T10651] el0t_64_sync+0x198/0x19c [ 273.197576][T10651] [ 273.197576][T10651] other info that might help us debug this: [ 273.197576][T10651] [ 273.200387][T10651] Chain exists of: [ 273.200387][T10651] rtnl_mutex --> sk_lock-AF_INET --> &smc->clcsock_release_lock [ 273.200387][T10651] [ 273.204045][T10651] Possible unsafe locking scenario: [ 273.204045][T10651] [ 273.206127][T10651] CPU0 CPU1 [ 273.207617][T10651] ---- ---- [ 273.209058][T10651] lock(&smc->clcsock_release_lock); [ 273.210466][T10651] lock(sk_lock-AF_INET); [ 273.212344][T10651] lock(&smc->clcsock_release_lock); [ 273.214461][T10651] lock(rtnl_mutex); [ 273.215563][T10651] [ 273.215563][T10651] *** DEADLOCK *** [ 273.215563][T10651] [ 273.217737][T10651] 1 lock held by syz.4.1254/10651: [ 273.219115][T10651] #0: ffff0000d25fa1a0 (&smc->clcsock_release_lock){+.+.}-{4:4}, at: smc_setsockopt+0x170/0xd0c [ 273.221970][T10651] [ 273.221970][T10651] stack backtrace: [ 273.223554][T10651] CPU: 0 UID: 0 PID: 10651 Comm: syz.4.1254 Not tainted 6.15.0-rc1-syzkaller-g0af2f6be1b42 #0 PREEMPT [ 273.226504][T10651] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 273.229206][T10651] Call trace: [ 273.230064][T10651] show_stack+0x2c/0x3c (C) [ 273.231223][T10651] dump_stack_lvl+0xe4/0x150 [ 273.232433][T10651] dump_stack+0x1c/0x28 [ 273.233577][T10651] print_circular_bug+0x32c/0x334 [ 273.234946][T10651] check_noncircular+0x15c/0x178 [ 273.236321][T10651] __lock_acquire+0x17b8/0x32c4 [ 273.237639][T10651] lock_acquire+0x150/0x2e8 [ 273.238845][T10651] __mutex_lock_common+0x1f0/0x2604 [ 273.240245][T10651] mutex_lock_nested+0x2c/0x38 [ 273.241498][T10651] rtnl_lock+0x20/0x2c [ 273.242582][T10651] do_ip_setsockopt+0xd5c/0x32c0 [ 273.243896][T10651] ip_setsockopt+0x80/0x128 [ 273.245216][T10651] tcp_setsockopt+0xcc/0xe8 [ 273.246422][T10651] sock_common_setsockopt+0xb0/0xcc [ 273.247809][T10651] smc_setsockopt+0x1f8/0xd0c [ 273.249065][T10651] do_sock_setsockopt+0x2a0/0x4e0 [ 273.250385][T10651] __arm64_sys_setsockopt+0x170/0x1e0 [ 273.251806][T10651] invoke_syscall+0x98/0x2b8 [ 273.253042][T10651] el0_svc_common+0x130/0x23c [ 273.254270][T10651] do_el0_svc+0x48/0x58 [ 273.255370][T10651] el0_svc+0x54/0x168 [ 273.256398][T10651] el0t_64_sync_handler+0x84/0x108 [ 273.257753][T10651] el0t_64_sync+0x198/0x19c SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 273.512709][ T6518] usb 1-1: USB disconnect, device number 16 [ 273.519726][T10556] delete_channel: no stack [ 280.177122][ T45] unregister_netdevice: waiting for batadv0 to become free. Usage count = 3