last executing test programs: 4m58.92745713s ago: executing program 3 (id=4): syz_open_dev$vim2m(&(0x7f0000000100), 0xa7e, 0x2) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7ffffffd}]}) r2 = dup2(r0, r1) close_range(r2, 0xffffffffffffffff, 0x0) 4m58.790905954s ago: executing program 3 (id=6): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f00000bd000), 0x318, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)) close(0x3) 4m56.740512971s ago: executing program 0 (id=1): sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={0x0, 0x70}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=ANY=[@ANYBLOB="380000001800010000000000fedbdf25020000040001000900040000060015000200000014001680100008800c000380"], 0x38}}, 0x0) bind$inet6(r3, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x7e) sendto$inet6(r3, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x2, @loopback, 0xfffffffd}}, 0x0, 0x0, 0x500, 0x0, 0x54, 0xa}, 0x9c) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) 4m51.354323108s ago: executing program 3 (id=14): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'batadv_slave_1\x00', &(0x7f0000000080)=@ethtool_coalesce={0xf, 0x7ff, 0x5, 0x6, 0x233844d7, 0x1, 0x7, 0x4, 0x6, 0x2, 0x3, 0xca, 0x3, 0x111, 0x9, 0xbe, 0x7fff, 0x9, 0x800, 0x7f, 0x4a, 0x3, 0xad}}) 4m47.969972429s ago: executing program 3 (id=17): sendmsg$key(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=ANY=[@ANYBLOB="380000001800010000000000fedbdf25020000040001000900040000060015000200000014001680100008800c000380"], 0x38}}, 0x0) bind$inet6(r3, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x7e) sendto$inet6(r3, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x2, @loopback, 0xfffffffd}}, 0x0, 0x0, 0x500, 0x0, 0x54, 0xa}, 0x9c) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) 4m44.765828108s ago: executing program 3 (id=20): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000022c0)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2b, 0x2, {0x0, 0x0, 0x0, r3, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a29c}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x1003d1, 0x3, 0x20000000, 0x6, 0x86}, 0x69}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0xc804}, 0x2) close(r1) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r4, &(0x7f0000000280)={&(0x7f0000000540)=@xdp={0x2c, 0x0, r6, 0x42}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000200)="27030200dc0f14000e00003c0ff000000000ff11", 0x14}, {&(0x7f0000002680)="76e69c0141b4626c18e58316fb1785bc79a094726e33891c6d73f43317b7de31", 0x20}], 0x2}, 0x4005) 4m43.1841794s ago: executing program 0 (id=24): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x6, 0xc, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0xc, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r3, r2, 0x25, 0x4, @void}, 0x10) syz_emit_ethernet(0xd81, &(0x7f0000000740)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @val={@val={0x88a8, 0x5, 0x0, 0x4}, {0x8100, 0x7, 0x1, 0x4}}, {@mpls_mc={0x8848, {[], @generic="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"}}}}, 0x0) 4m42.64826819s ago: executing program 0 (id=25): r0 = socket$phonet(0x23, 0x2, 0x1) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000200)={'batadv_slave_1\x00', &(0x7f0000000000)=@ethtool_perm_addr}) 4m29.017497494s ago: executing program 32 (id=20): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000022c0)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2b, 0x2, {0x0, 0x0, 0x0, r3, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a29c}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x1003d1, 0x3, 0x20000000, 0x6, 0x86}, 0x69}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0xc804}, 0x2) close(r1) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r4, &(0x7f0000000280)={&(0x7f0000000540)=@xdp={0x2c, 0x0, r6, 0x42}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000200)="27030200dc0f14000e00003c0ff000000000ff11", 0x14}, {&(0x7f0000002680)="76e69c0141b4626c18e58316fb1785bc79a094726e33891c6d73f43317b7de31", 0x20}], 0x2}, 0x4005) 4m27.042047346s ago: executing program 33 (id=25): r0 = socket$phonet(0x23, 0x2, 0x1) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000200)={'batadv_slave_1\x00', &(0x7f0000000000)=@ethtool_perm_addr}) 3m33.397123677s ago: executing program 2 (id=145): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x2) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f00000003c0)={'wg2\x00', 0x0}) r4 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet6_int(r4, 0x29, 0x11, &(0x7f0000000680)=0xab21, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x800008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000002000)=""/102400, 0x19000) rt_tgsigqueueinfo(0x0, 0x0, 0x7, 0x0) syz_open_dev$media(0x0, 0xfff, 0xe2040) request_key(0x0, &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000080)={0x401, 0x4, {}, {}, 0x8, 0x4}) r6 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r6, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x401, 0x20000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8003}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r8}]}}}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x44}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054) sendmsg$nl_generic(r6, 0x0, 0xc000) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000880)={0x68, r2, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_IFINDEX={0x8, 0x1, r3}, @WGDEVICE_A_PEERS={0x4c, 0x8, 0x0, 0x1, [{0x48, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}]}]}]}, 0x68}}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x31, 0xffffffffffffffff, 0xffffe000) 3m32.584340443s ago: executing program 2 (id=146): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x3) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, 0x0) r1 = msgget$private(0x0, 0x207) msgsnd(r1, &(0x7f0000000300)=ANY=[@ANYRES32], 0x3f9, 0x0) msgrcv(r1, 0x0, 0x0, 0x0, 0x1800) 3m32.39039532s ago: executing program 2 (id=147): socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000000c0)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r1, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000100), 0x4) 3m31.85043954s ago: executing program 2 (id=148): pipe2$watch_queue(&(0x7f0000000000), 0x80) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) mount$fuse(0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000540)=ANY=[@ANYBLOB="9feb010018"], 0x0, 0x1a, 0x0, 0x1}, 0x28) socket(0x10, 0x80002, 0x0) syz_fuse_handle_req(r0, 0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x50, 0x0, 0x3, {0x7, 0x28, 0x101, 0x2098004, 0x0, 0x0, 0x0, 0xffffffbf, 0x0, 0x0, 0x100, 0x103}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) removexattr(0x0, &(0x7f0000000200)=@known='system.posix_acl_default\x00') socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000500)) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0xc}, 0x50) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000003c0), 0x0, 0x1, r1}, 0x38) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10805}, 0x44049) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46", 0xb5}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 3m31.559640593s ago: executing program 2 (id=149): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) close(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000040), 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000100)=ANY=[@ANYRES32=r3, @ANYRES32=r2, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r3}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) 3m31.229780898s ago: executing program 2 (id=150): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x3, &(0x7f0000000140)=[{0x6, 0x5, 0x7, 0x7ffc0002}, {0xf, 0x7, 0x1, 0x4}, {0x1000, 0x4, 0x4c, 0xfffffffb}]}) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x8000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$NBD_SET_FLAGS(r1, 0xab0a, 0xfffffffffffffff3) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) r3 = socket(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000005c0)={'ip6gretap0\x00', 0x0}) bind$packet(r3, &(0x7f0000000180)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @remote}, 0x14) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000000)=0xe9, 0x4) sendmsg$netlink(r3, &(0x7f0000002ac0)={0x0, 0x0, 0x0}, 0x20040890) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) r5 = syz_open_dev$loop(&(0x7f0000000280), 0xffff, 0x14f600) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.stat\x00', 0x275a, 0x0) write$binfmt_misc(r6, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r5, 0x4c0a, 0x0) r7 = getpid() r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r9, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r7}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) ioctl$NBD_DO_IT(r1, 0xab03) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) ioctl$sock_SIOCINQ(r0, 0x8905, &(0x7f0000000000)) 3m15.509818828s ago: executing program 34 (id=150): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x3, &(0x7f0000000140)=[{0x6, 0x5, 0x7, 0x7ffc0002}, {0xf, 0x7, 0x1, 0x4}, {0x1000, 0x4, 0x4c, 0xfffffffb}]}) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x8000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$NBD_SET_FLAGS(r1, 0xab0a, 0xfffffffffffffff3) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) r3 = socket(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000005c0)={'ip6gretap0\x00', 0x0}) bind$packet(r3, &(0x7f0000000180)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @remote}, 0x14) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000000)=0xe9, 0x4) sendmsg$netlink(r3, &(0x7f0000002ac0)={0x0, 0x0, 0x0}, 0x20040890) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) r5 = syz_open_dev$loop(&(0x7f0000000280), 0xffff, 0x14f600) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.stat\x00', 0x275a, 0x0) write$binfmt_misc(r6, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r5, 0x4c0a, 0x0) r7 = getpid() r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r9, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r7}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) ioctl$NBD_DO_IT(r1, 0xab03) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) ioctl$sock_SIOCINQ(r0, 0x8905, &(0x7f0000000000)) 19.947934366s ago: executing program 1 (id=410): r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x2000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000001c0)=0x11) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000100)=0x2) r1 = fsopen(&(0x7f0000000000)='configfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) fsmount(r1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) timer_create(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000032680)=""/102400, 0x19000) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xffde}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000600)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xe, 0x7}, {}, {0xd, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x8, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x4}]}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x10c) 12.251921694s ago: executing program 4 (id=416): socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = syz_open_procfs(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000280)={0x0}}, 0x8080) getpid() ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058ff0b, &(0x7f0000000200)=@mmap={0x1, 0x1, 0x4, 0x10, 0x200, {}, {0x3, 0x8, 0xe, 0x9f, 0x0, 0x7b, "c16599e2"}, 0xabdb, 0x1, {}, 0xbaa}) pread64(r0, &(0x7f0000000080)=""/102356, 0x18fd4, 0x200) syz_io_uring_setup(0x88f, 0x0, 0x0, 0x0) socket(0x1, 0x803, 0x0) 11.854181358s ago: executing program 5 (id=417): mount(0x0, &(0x7f00000000c0)='.\x00', 0x0, 0x281c012, 0x0) socket(0x10, 0x803, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) socketpair$unix(0x1, 0x1, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000100)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r2}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x1}], 0x1}, 0x804) recvfrom(0xffffffffffffffff, &(0x7f0000004000)=""/4112, 0xfffffffffffffedc, 0x2080, 0x0, 0x0) 11.741922679s ago: executing program 1 (id=418): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x10) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x60}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000c00)=@newtfilter={0x24, 0x2c, 0x1, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x7, 0xc}, {0x8, 0x3}, {0x8, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f00000004c0)={0x7, 0x800000000000008a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000080)={0x1, "0600000000000000c64c3b6e6ff82a75e5318fca4288c2ffbdbec772020acd2c"}) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f9078640101000000000024806558000000000000000010000800000086dd"], 0x0) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x48041}, 0x20050881) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) syz_open_dev$evdev(&(0x7f0000000040), 0x2, 0x0) chmod(&(0x7f0000000140)='./file0\x00', 0x50) 10.407307728s ago: executing program 5 (id=419): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x8ad01, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x5) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) tkill(0x0, 0xb) setrlimit(0x7, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) dup(0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000840)={0x101ff, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_open_dev$loop(0x0, 0x3, 0x189083) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'pcmmio\x00', [0xf27, 0xd7b, 0x1, 0x2000004, 0x5, 0x5, 0x4, 0x7, 0x54c6cff3, 0xfd, 0x5, 0x1, 0x1, 0x1, 0x2000006, 0x6a, 0x0, 0xc7c, 0x3, 0x40000003, 0x89, 0xcaa3, 0x0, 0x20001e57, 0x3, 0x2000e66, 0x3, 0x1, 0x10004087, 0x0, 0xfffffff8]}) 10.118410722s ago: executing program 4 (id=420): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000000c0)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(r0, 0x1, &(0x7f0000000180)=0x3) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000180)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc000) renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x2) 9.167925768s ago: executing program 5 (id=421): socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$xdp(0x2c, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000440)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800c0001006d61637674617000040002800800", @ANYRES32=r3], 0x44}, 0x1, 0x0, 0x0, 0x20000004}, 0x0) getsockopt$XDP_MMAP_OFFSETS(r1, 0x11b, 0x1, &(0x7f00000000c0), &(0x7f0000000140)=0x7d) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)) syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) 8.207651511s ago: executing program 4 (id=422): r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket(0x1e, 0x4, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$tipc(r1, &(0x7f0000000040)=@id, 0x10) sendmmsg$unix(r1, 0x0, 0x0, 0x101d0) r5 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) bind$can_j1939(r5, &(0x7f0000000180)={0x1d, r6, 0x0, {0x0, 0x0, 0x1}, 0x2}, 0x18) sendmsg$can_j1939(r5, &(0x7f00000002c0)={&(0x7f00000000c0)={0x1d, 0x0, 0x15, {0x0, 0x1ee}}, 0x18, &(0x7f00000004c0)={&(0x7f0000000140)}}, 0x0) flock(0xffffffffffffffff, 0x2) setsockopt$packet_int(r0, 0x107, 0x3, 0x0, 0x0) keyctl$join(0x1, &(0x7f0000000000)={'syz', 0x1}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010007000000000000000000000a20000000000a03000000000000000100010000000900010073797a300000000048000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f0c00098008000140000100075c0000000e0a01020000000000000000010000000900020073797a320000"], 0xec}, 0x1, 0x0, 0x0, 0x24004005}, 0x0) 6.270449117s ago: executing program 4 (id=423): openat(0xffffffffffffff9c, 0x0, 0x129242, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioprio_get$pid(0x3, 0x0) unshare(0x20040600) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x140, 0x0) unshare(0x12010200) ioctl$RTC_SET_TIME(r3, 0x4024700a, 0x0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) bind$inet6(r4, &(0x7f0000000080)={0xa, 0x4e21, 0x5, @ipv4={'\x00', '\xff\xff', @empty}, 0x7}, 0x1c) ftruncate(r4, 0xfffffffd) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x4e21, 0x659, @empty, 0xff}, 0x1c) r5 = fcntl$dupfd(r4, 0x406, r4) write$cgroup_pid(r5, 0x0, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r4, 0x29, 0x1, 0x0, 0x0) socket(0xa, 0x3, 0x6) lsetxattr$security_capability(&(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x0, 0x0, 0x0) open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[], 0x50) 6.254483189s ago: executing program 5 (id=424): prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) setsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0x13, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000240)={0x2, &(0x7f0000000000)=[{0x30, 0x0, 0xfd, 0x5ae9}, {0x20, 0x7f, 0x6, 0x7fffffff}]}, 0x10) sendmmsg$inet(r0, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a80)="2a73ed35", 0x732a}], 0x1}}], 0x400000000000292, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0x10, &(0x7f0000000340)=ANY=[@ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000003f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x15) read$msr(r2, &(0x7f0000001a40)=""/102392, 0x18ff8) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) mremap(&(0x7f00007ff000/0x4000)=nil, 0x4000, 0x4000, 0x7, &(0x7f0000580000/0x4000)=nil) r4 = socket$kcm(0xa, 0x2, 0x0) socket(0x2, 0x80805, 0x0) r5 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000040)={0x84, @loopback, 0x4e20, 0x3, 'wrr\x00', 0x1, 0x2, 0x6a}, 0x2c) syz_open_dev$tty20(0xc, 0x4, 0x1) sendmsg$sock(r4, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r6, 0x0, 0x0) sendmsg$kcm(r6, 0x0, 0x20000000) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) 4.932494738s ago: executing program 4 (id=425): socket$kcm(0x10, 0x2, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) ioctl$AUTOFS_IOC_PROTOVER(r0, 0x80049363, &(0x7f0000000040)) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000180)=0x10000000005) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x400000000001, 0x0, 0x1, 0x0) r2 = getpid() r3 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0xff58) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000300)={r4}, 0xc) sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffd000) r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ioprio_set$pid(0x0, r5, 0x4007) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000240)={{&(0x7f0000400000/0x1000)=nil, 0x20400000}, 0x1}) r7 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r7, 0xc100565c, &(0x7f00000013c0)={0x0, 0x2, 0x2, {0x5, @vbi={0x0, 0x0, 0x4, 0x0, [], [0x8200], 0x1}}}) ioctl$BTRFS_IOC_INO_PATHS(r4, 0xc0389423, &(0x7f00000002c0)={0x8, 0x50, [0x2, 0x80000000, 0x0, 0x7], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) write$sequencer(0xffffffffffffffff, 0x0, 0x10) ioctl$VIDIOC_QBUF(r7, 0xc058565d, &(0x7f0000000200)=@fd={0x0, 0x5, 0x4, 0x0, 0x0, {}, {0x2, 0x0, 0x0, 0x0, 0x0, 0x75, "804000"}, 0x0, 0x2, {}, 0x20800}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x22, 0x0, 0x0) 2.942475344s ago: executing program 4 (id=426): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000140)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}]}) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000940)='./file0\x00', 0x0, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000100)={{r5, 0xffffffffffffffff}, &(0x7f0000000240), &(0x7f0000000140)='%-010d \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000001c0)={r6}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x10, &(0x7f0000000a00)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) mknodat(r4, &(0x7f00000003c0)='./file1\x00', 0x0, 0x652f759a) chdir(0x0) mkdir(&(0x7f0000000240)='./bus\x00', 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x48010) renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000000200)='./bus/file0\x00', 0x0) 2.762952541s ago: executing program 1 (id=427): mount(0x0, &(0x7f00000000c0)='.\x00', 0x0, 0x281c012, 0x0) socket(0x10, 0x803, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000010c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000100)=ANY=[@ANYRES32=r4, @ANYRES32=r3, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r4}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) sendmsg$inet(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x1}], 0x1}, 0x804) recvfrom(r1, &(0x7f0000004000)=""/4112, 0xfffffffffffffedc, 0x2080, 0x0, 0x0) 2.452965326s ago: executing program 1 (id=428): socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = syz_open_procfs(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000280)={0x0}}, 0x8080) getpid() ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058ff0b, &(0x7f0000000200)=@mmap={0x1, 0x1, 0x4, 0x10, 0x200, {}, {0x3, 0x8, 0xe, 0x9f, 0x0, 0x7b, "c16599e2"}, 0xabdb, 0x1, {}, 0xbaa}) pread64(r0, &(0x7f0000000080)=""/102356, 0x18fd4, 0x200) syz_io_uring_setup(0x88f, 0x0, 0x0, 0x0) socket(0x1, 0x803, 0x0) 2.374828253s ago: executing program 5 (id=429): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000040000000000000018110000", @ANYRES16=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000590000"], 0x0, 0x4, 0x0, 0x0, 0x41100, 0x27, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback=0x3c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r1, 0x0, 0x0) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x2c}, 0x44004) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) fcntl$setownex(r3, 0xf, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x8081) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RTOINFO(r5, 0x84, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x5, 0xfffffffffffffffd, 0x400008001, 0x0, 0x1002001000, 0x45}, 0x0, &(0x7f0000000080)={0x3ff, 0x4, 0x100000, 0x9, 0x1, 0x10, 0x80000002, 0xfffffffffffffffc}, 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000380)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000340)=0x1, r6, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f00000003c0)={0x7, 0x8, 0xfa00, {r6, 0x7}}, 0x10) 1.22881442s ago: executing program 1 (id=430): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000000c0)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(r0, 0x1, &(0x7f0000000180)=0x3) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000180)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc000) renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x2) 255.680294ms ago: executing program 1 (id=431): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b7000000ff000000bfa30000000000000703000000feffff720af0fff8ffffff69a4f0ff000000002d040200000000001d400200000000004704000001ed000062030000000000000c440000000000007a0a00fe00ffffffd704000040000000b5000000000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710e4d58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00c37dfca3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebba2c598b4fc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a1074649c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c0dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6acdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c3bfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fed000000007baa5b6a686b50"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, 0x0, 0x0, 0x4, 0x0, 0x0, 0x41100, 0x27, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback=0x3c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r1, 0x0, 0x0) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x2c}, 0x44004) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) fcntl$setownex(r3, 0xf, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x8081) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) setsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x5, 0xfffffffffffffffd, 0x400008001, 0x0, 0x1002001000, 0x45}, 0x0, &(0x7f0000000080)={0x3ff, 0x4, 0x100000, 0x9, 0x1, 0x10, 0x80000002, 0xfffffffffffffffc}, 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000380)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000340)=0x1, r5, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f00000003c0)={0x7, 0x8, 0xfa00, {r5, 0x7}}, 0x10) 0s ago: executing program 5 (id=432): socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$xdp(0x2c, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000440)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800c0001006d61637674617000040002800800", @ANYRES32=r3], 0x44}, 0x1, 0x0, 0x0, 0x20000004}, 0x0) getsockopt$XDP_MMAP_OFFSETS(r1, 0x11b, 0x1, &(0x7f00000000c0), &(0x7f0000000140)=0x7d) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)) syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.191' (ED25519) to the list of known hosts. [ 84.108141][ T5777] cgroup: Unknown subsys name 'net' [ 84.359264][ T5777] cgroup: Unknown subsys name 'cpuset' [ 84.424565][ T5777] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 86.338275][ T5777] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 88.834171][ T5801] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 88.843230][ T5807] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 88.846129][ T5807] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 88.848701][ T5807] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 88.859619][ T5807] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 88.860371][ T5807] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 88.864371][ T5807] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 88.864816][ T5807] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 88.871175][ T5807] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 88.871591][ T5807] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 88.871778][ T5807] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 88.872152][ T5807] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 88.881558][ T5807] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 88.881725][ T5807] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 88.882303][ T5807] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 88.884092][ T5807] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 88.884381][ T5807] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 88.884879][ T5807] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 88.914569][ T5807] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 88.918406][ T5799] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 88.920578][ T5799] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 88.928481][ T5799] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 88.935213][ T5799] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 88.971516][ T5799] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 88.976000][ T60] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 89.923244][ T5803] chnl_net:caif_netlink_parms(): no params data found [ 89.954617][ T5793] chnl_net:caif_netlink_parms(): no params data found [ 90.161531][ T5792] chnl_net:caif_netlink_parms(): no params data found [ 90.185830][ T5791] chnl_net:caif_netlink_parms(): no params data found [ 90.243272][ T5796] chnl_net:caif_netlink_parms(): no params data found [ 90.391800][ T5803] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.392772][ T5803] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.392919][ T5803] bridge_slave_0: entered allmulticast mode [ 90.400086][ T5803] bridge_slave_0: entered promiscuous mode [ 90.429081][ T5793] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.429202][ T5793] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.429567][ T5793] bridge_slave_0: entered allmulticast mode [ 90.431337][ T5793] bridge_slave_0: entered promiscuous mode [ 90.475861][ T5803] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.476020][ T5803] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.476201][ T5803] bridge_slave_1: entered allmulticast mode [ 90.478087][ T5803] bridge_slave_1: entered promiscuous mode [ 90.511964][ T5793] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.512084][ T5793] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.512224][ T5793] bridge_slave_1: entered allmulticast mode [ 90.518795][ T5793] bridge_slave_1: entered promiscuous mode [ 90.687179][ T5803] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.711620][ T5793] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.736871][ T5792] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.737029][ T5792] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.737158][ T5792] bridge_slave_0: entered allmulticast mode [ 90.738924][ T5792] bridge_slave_0: entered promiscuous mode [ 90.744426][ T5803] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.745595][ T5791] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.745901][ T5791] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.746359][ T5791] bridge_slave_0: entered allmulticast mode [ 90.756420][ T5791] bridge_slave_0: entered promiscuous mode [ 90.776690][ T5793] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.939108][ T5792] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.939268][ T5792] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.939449][ T5792] bridge_slave_1: entered allmulticast mode [ 90.941494][ T5792] bridge_slave_1: entered promiscuous mode [ 90.975366][ T5808] Bluetooth: hci1: command tx timeout [ 90.975542][ T5809] Bluetooth: hci0: command tx timeout [ 90.978756][ T5791] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.978875][ T5791] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.979227][ T5791] bridge_slave_1: entered allmulticast mode [ 90.981145][ T5791] bridge_slave_1: entered promiscuous mode [ 91.025886][ T5796] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.025990][ T5796] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.026340][ T5796] bridge_slave_0: entered allmulticast mode [ 91.028236][ T5796] bridge_slave_0: entered promiscuous mode [ 91.055197][ T5809] Bluetooth: hci4: command tx timeout [ 91.055291][ T5809] Bluetooth: hci2: command tx timeout [ 91.119373][ T5796] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.119509][ T5796] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.119679][ T5796] bridge_slave_1: entered allmulticast mode [ 91.123080][ T5796] bridge_slave_1: entered promiscuous mode [ 91.143734][ T5808] Bluetooth: hci3: command tx timeout [ 91.167770][ T5803] team0: Port device team_slave_0 added [ 91.188893][ T5793] team0: Port device team_slave_0 added [ 91.211893][ T5792] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.216007][ T5803] team0: Port device team_slave_1 added [ 91.238849][ T5791] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.242377][ T5793] team0: Port device team_slave_1 added [ 91.275892][ T5792] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.300395][ T5791] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.325888][ T5796] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.391930][ T5796] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.418884][ T5803] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.418898][ T5803] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.418917][ T5803] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.471370][ T5793] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.471388][ T5793] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.471416][ T5793] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.522324][ T5792] team0: Port device team_slave_0 added [ 91.523266][ T5803] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.523282][ T5803] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.523310][ T5803] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.536545][ T5791] team0: Port device team_slave_0 added [ 91.541794][ T5793] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.541836][ T5793] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.541910][ T5793] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.617571][ T5792] team0: Port device team_slave_1 added [ 91.638346][ T5791] team0: Port device team_slave_1 added [ 91.652673][ T5796] team0: Port device team_slave_0 added [ 91.691141][ T5796] team0: Port device team_slave_1 added [ 91.742458][ T5792] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.742471][ T5792] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.742491][ T5792] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.790694][ T5791] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.790708][ T5791] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.790728][ T5791] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.854570][ T5792] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.854588][ T5792] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.854617][ T5792] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.902676][ T5791] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.902728][ T5791] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.902803][ T5791] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.948641][ T1568] cfg80211: failed to load regulatory.db [ 91.967049][ T5796] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.967061][ T5796] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.967081][ T5796] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.461880][ T5803] hsr_slave_0: entered promiscuous mode [ 92.463056][ T5803] hsr_slave_1: entered promiscuous mode [ 92.486638][ T5796] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.486651][ T5796] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.486671][ T5796] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.504714][ T5793] hsr_slave_0: entered promiscuous mode [ 92.508461][ T5793] hsr_slave_1: entered promiscuous mode [ 92.511611][ T5793] debugfs: 'hsr0' already exists in 'hsr' [ 92.511920][ T5793] Cannot create hsr debugfs directory [ 92.702066][ T5792] hsr_slave_0: entered promiscuous mode [ 92.703060][ T5792] hsr_slave_1: entered promiscuous mode [ 92.706186][ T5792] debugfs: 'hsr0' already exists in 'hsr' [ 92.706251][ T5792] Cannot create hsr debugfs directory [ 92.729960][ T5791] hsr_slave_0: entered promiscuous mode [ 92.731035][ T5791] hsr_slave_1: entered promiscuous mode [ 92.731713][ T5791] debugfs: 'hsr0' already exists in 'hsr' [ 92.731730][ T5791] Cannot create hsr debugfs directory [ 92.812707][ T5796] hsr_slave_0: entered promiscuous mode [ 92.814896][ T5796] hsr_slave_1: entered promiscuous mode [ 92.817387][ T5796] debugfs: 'hsr0' already exists in 'hsr' [ 92.817445][ T5796] Cannot create hsr debugfs directory [ 93.053860][ T5808] Bluetooth: hci0: command tx timeout [ 93.053892][ T5808] Bluetooth: hci1: command tx timeout [ 93.143849][ T5808] Bluetooth: hci4: command tx timeout [ 93.143952][ T5809] Bluetooth: hci2: command tx timeout [ 93.213841][ T5809] Bluetooth: hci3: command tx timeout [ 93.691263][ T5803] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 93.717223][ T5803] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 93.750578][ T5803] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 93.783377][ T5803] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 93.890303][ T5793] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 93.931334][ T5793] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 93.973449][ T5793] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 94.025296][ T5793] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 94.136133][ T5792] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 94.171655][ T5792] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 94.211822][ T5792] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 94.268284][ T5792] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 94.400115][ T5791] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 94.445273][ T5791] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 94.509162][ T5791] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 94.569963][ T5791] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 94.676371][ T5803] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.725684][ T5796] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 94.781463][ T5796] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 94.815555][ T5796] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 94.854444][ T5796] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 94.910370][ T5803] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.968598][ T1013] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.969650][ T1013] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.007524][ T5793] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.028215][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.028960][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.133330][ T5793] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.133857][ T5808] Bluetooth: hci1: command tx timeout [ 95.133943][ T5809] Bluetooth: hci0: command tx timeout [ 95.192604][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.192795][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.214068][ T5808] Bluetooth: hci4: command tx timeout [ 95.214154][ T5809] Bluetooth: hci2: command tx timeout [ 95.219527][ T5792] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.258259][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.258405][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.294706][ T5809] Bluetooth: hci3: command tx timeout [ 95.347930][ T5792] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.409604][ T5791] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.413244][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.413394][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.475346][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.475522][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.576363][ T5791] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.593220][ T5796] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.635971][ T157] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.636193][ T157] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.712334][ T2135] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.712517][ T2135] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.772375][ T5796] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.826366][ T1118] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.827221][ T1118] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.887206][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.887340][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.006860][ T5803] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.178992][ T5793] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.346574][ T5803] veth0_vlan: entered promiscuous mode [ 96.402406][ T5803] veth1_vlan: entered promiscuous mode [ 96.443227][ T5792] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.500978][ T5793] veth0_vlan: entered promiscuous mode [ 96.581757][ T5793] veth1_vlan: entered promiscuous mode [ 96.641187][ T5803] veth0_macvtap: entered promiscuous mode [ 96.670846][ T5803] veth1_macvtap: entered promiscuous mode [ 96.716393][ T5792] veth0_vlan: entered promiscuous mode [ 96.735917][ T5791] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.785023][ T5803] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.815025][ T5792] veth1_vlan: entered promiscuous mode [ 96.822740][ T5796] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.841752][ T5793] veth0_macvtap: entered promiscuous mode [ 96.858927][ T5803] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.897695][ T5793] veth1_macvtap: entered promiscuous mode [ 96.925975][ T67] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.931012][ T67] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.958122][ T67] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.978370][ T67] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.117684][ T5793] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.214665][ T5809] Bluetooth: hci0: command tx timeout [ 97.214702][ T5809] Bluetooth: hci1: command tx timeout [ 97.218703][ T5793] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.257369][ T5792] veth0_macvtap: entered promiscuous mode [ 97.282563][ T1013] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.293998][ T5808] Bluetooth: hci2: command tx timeout [ 97.294028][ T5808] Bluetooth: hci4: command tx timeout [ 97.297118][ T1013] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.300360][ T1013] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.320042][ T5792] veth1_macvtap: entered promiscuous mode [ 97.339671][ T1013] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.374514][ T5809] Bluetooth: hci3: command tx timeout [ 97.405684][ T5796] veth0_vlan: entered promiscuous mode [ 97.454138][ T2135] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.454167][ T2135] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.548350][ T5796] veth1_vlan: entered promiscuous mode [ 97.612779][ T5792] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.642448][ T2135] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.642470][ T2135] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.680254][ T5792] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.740716][ T5791] veth0_vlan: entered promiscuous mode [ 97.746039][ T1118] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.746094][ T1118] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.777054][ T157] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.795743][ T157] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.803246][ T157] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.835622][ T157] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.859290][ T5791] veth1_vlan: entered promiscuous mode [ 97.949223][ T1118] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.949244][ T1118] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.034436][ T5796] veth0_macvtap: entered promiscuous mode [ 98.118144][ T5796] veth1_macvtap: entered promiscuous mode [ 98.313052][ T67] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.313075][ T67] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.341004][ T5796] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.344465][ T5791] veth0_macvtap: entered promiscuous mode [ 98.388408][ T5796] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.409300][ T5791] veth1_macvtap: entered promiscuous mode [ 98.708884][ T1013] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.710772][ T1013] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.713070][ T1013] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.756968][ T67] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.757044][ T67] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.770154][ T1013] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.712654][ T5791] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.773745][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 99.859281][ T5791] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.972813][ T49] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.986482][ T49] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.007007][ T49] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.026704][ T49] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.462033][ T2135] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.462056][ T2135] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.778019][ T157] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.778042][ T157] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.044009][ T2135] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.044032][ T2135] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.341246][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.341270][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.423653][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 101.423709][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 103.065059][ T5932] process 'syz.4.5' launched './file0' with NULL argv: empty string added [ 103.395344][ T5937] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1'. [ 105.654023][ T5860] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 105.834267][ T5860] usb 2-1: Using ep0 maxpacket: 8 [ 105.861964][ T5860] usb 2-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 105.861999][ T5860] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.862019][ T5860] usb 2-1: Product: syz [ 105.862034][ T5860] usb 2-1: Manufacturer: syz [ 105.862049][ T5860] usb 2-1: SerialNumber: syz [ 105.997110][ T5860] usb 2-1: config 0 descriptor?? [ 106.079638][ T5964] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 106.291080][ T5965] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(12) [ 106.291644][ T5965] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 106.299777][ T5965] vhci_hcd vhci_hcd.0: Device attached [ 106.341364][ T5860] gspca_main: se401-2.14.0 probing 047d:5003 [ 107.070894][ T5966] vhci_hcd: connection closed [ 107.375295][ T13] vhci_hcd vhci_hcd.4: stop threads [ 107.375837][ T13] vhci_hcd vhci_hcd.4: release socket [ 107.409720][ T0] NOHZ tick-stop error: local softirq work is pending, handler #01!!! [ 107.451618][ T13] vhci_hcd vhci_hcd.4: disconnect device [ 107.519585][ T5860] input: se401 as /devices/platform/dummy_hcd.1/usb2/2-1/input/input5 [ 110.149470][ T5970] batman_adv: batadv0: Adding interface: gretap1 [ 110.149623][ T5970] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 110.149782][ T5970] batman_adv: batadv0: Interface activated: gretap1 [ 110.448003][ T5860] usb 2-1: USB disconnect, device number 2 [ 110.684343][ T5970] syz.2.16 (5970) used greatest stack depth: 18376 bytes left [ 111.053888][ T5958] usb 5-1: new low-speed USB device number 2 using dummy_hcd [ 111.140761][ T5987] netlink: 8 bytes leftover after parsing attributes in process `syz.3.17'. [ 112.083743][ T5958] usb 5-1: device descriptor read/64, error -71 [ 112.088748][ T5986] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 112.343765][ T5958] usb 5-1: new low-speed USB device number 3 using dummy_hcd [ 112.473696][ T5958] usb 5-1: device descriptor read/64, error -71 [ 112.727034][ T5958] usb usb5-port1: attempt power cycle [ 112.766255][ T5990] syzkaller0: entered promiscuous mode [ 112.766285][ T5990] syzkaller0: entered allmulticast mode [ 112.823641][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 113.273668][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 113.363637][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 113.506187][ T5958] usb 5-1: new low-speed USB device number 4 using dummy_hcd [ 113.547445][ T5958] usb 5-1: device descriptor read/8, error -71 [ 118.085857][ T6031] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(12) [ 118.087995][ T6031] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 118.094442][ T6031] vhci_hcd vhci_hcd.0: Device attached [ 118.347527][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 118.347561][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 118.361049][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 118.667334][ T6033] vhci_hcd: connection closed [ 118.685082][ T5780] usb 41-1: new low-speed USB device number 2 using vhci_hcd [ 118.745694][ T5999] vhci_hcd vhci_hcd.4: stop threads [ 118.745819][ T5999] vhci_hcd vhci_hcd.4: release socket [ 118.766092][ T5999] vhci_hcd vhci_hcd.4: disconnect device [ 121.903817][ T1568] usb 5-1: new low-speed USB device number 6 using dummy_hcd [ 122.132409][ T1568] usb 5-1: device descriptor read/64, error -71 [ 122.394399][ T1568] usb 5-1: new low-speed USB device number 7 using dummy_hcd [ 122.594307][ T1568] usb 5-1: device descriptor read/64, error -71 [ 122.704086][ T1568] usb usb5-port1: attempt power cycle [ 123.043982][ T1568] usb 5-1: new low-speed USB device number 8 using dummy_hcd [ 123.083121][ T1568] usb 5-1: device descriptor read/8, error -71 [ 123.323798][ T1568] usb 5-1: new low-speed USB device number 9 using dummy_hcd [ 123.354530][ T1568] usb 5-1: device descriptor read/8, error -71 [ 123.464879][ T1568] usb usb5-port1: unable to enumerate USB device [ 123.844008][ T5780] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 125.659997][ T5809] Bluetooth: hci0: Unknown advertising packet type: 0x30 [ 125.660025][ T5809] Bluetooth: hci0: Malformed LE Event: 0x0d [ 128.125208][ T5808] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 128.132735][ T5808] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 128.154132][ T5808] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 128.171245][ T5808] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 128.172216][ T5808] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 128.669573][ T6078] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 129.353444][ T6082] input: syz1 as /devices/virtual/input/input6 [ 129.654003][ T6041] netlink: 8 bytes leftover after parsing attributes in process `syz.2.31'. [ 130.255295][ T5809] Bluetooth: hci5: command tx timeout [ 131.089040][ T6089] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 131.693138][ T6095] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(12) [ 131.693183][ T6095] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 131.693503][ T6095] vhci_hcd vhci_hcd.0: Device attached [ 131.914543][ T6096] vhci_hcd: connection closed [ 131.980011][ T12] vhci_hcd vhci_hcd.1: stop threads [ 131.980077][ T12] vhci_hcd vhci_hcd.1: release socket [ 131.980167][ T12] vhci_hcd vhci_hcd.1: disconnect device [ 132.359586][ T5809] Bluetooth: hci5: command tx timeout [ 132.919152][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.919249][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.324923][ T48] usb 3-1: new low-speed USB device number 2 using dummy_hcd [ 133.592078][ T48] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 133.592253][ T48] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 133.592289][ T48] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.285143][ T48] usb 3-1: config 0 descriptor?? [ 134.337308][ T48] ldusb 3-1:0.0: Interrupt in endpoint not found [ 134.364656][ T6101] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 134.423765][ T5809] Bluetooth: hci5: command tx timeout [ 134.518150][ T5808] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 134.549416][ T5808] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 134.562673][ T5808] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 134.584196][ T5808] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 134.591742][ T5808] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 134.634369][ T10] usb 3-1: USB disconnect, device number 2 [ 135.398076][ T6121] netlink: 96 bytes leftover after parsing attributes in process `syz.2.50'. [ 136.494785][ T5809] Bluetooth: hci5: command tx timeout [ 136.614755][ T6128] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 136.755367][ T5809] Bluetooth: hci6: command tx timeout [ 137.548451][ T6136] input: syz1 as /devices/virtual/input/input7 [ 138.592197][ T157] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.814695][ T5809] Bluetooth: hci6: command tx timeout [ 139.017375][ T157] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.023702][ T5868] usb 5-1: new low-speed USB device number 10 using dummy_hcd [ 139.071330][ T6153] warning: `syz.1.59' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 139.146826][ T6075] chnl_net:caif_netlink_parms(): no params data found [ 139.199820][ T5868] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 139.199879][ T5868] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 139.199905][ T5868] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.236954][ T5868] usb 5-1: config 0 descriptor?? [ 139.283948][ T5868] ldusb 5-1:0.0: Interrupt in endpoint not found [ 139.824806][ T9] usb 5-1: USB disconnect, device number 10 [ 139.929730][ T157] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.379585][ T157] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.802987][ T6104] chnl_net:caif_netlink_parms(): no params data found [ 140.893752][ T5809] Bluetooth: hci6: command tx timeout [ 140.984848][ T6075] bridge0: port 1(bridge_slave_0) entered blocking state [ 141.006294][ T6075] bridge0: port 1(bridge_slave_0) entered disabled state [ 141.006783][ T6075] bridge_slave_0: entered allmulticast mode [ 141.011964][ T6075] bridge_slave_0: entered promiscuous mode [ 141.491557][ T6075] bridge0: port 2(bridge_slave_1) entered blocking state [ 141.491681][ T6075] bridge0: port 2(bridge_slave_1) entered disabled state [ 141.491893][ T6075] bridge_slave_1: entered allmulticast mode [ 141.504895][ T6075] bridge_slave_1: entered promiscuous mode [ 141.675318][ T6179] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 141.821572][ T6075] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 141.954973][ T6185] input: syz1 as /devices/virtual/input/input8 [ 142.141987][ T6075] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 142.359853][ T6104] bridge0: port 1(bridge_slave_0) entered blocking state [ 142.359983][ T6104] bridge0: port 1(bridge_slave_0) entered disabled state [ 142.360194][ T6104] bridge_slave_0: entered allmulticast mode [ 142.390284][ T6104] bridge_slave_0: entered promiscuous mode [ 142.437747][ T6075] team0: Port device team_slave_0 added [ 142.440099][ T6104] bridge0: port 2(bridge_slave_1) entered blocking state [ 142.440202][ T6104] bridge0: port 2(bridge_slave_1) entered disabled state [ 142.440414][ T6104] bridge_slave_1: entered allmulticast mode [ 142.475760][ T6104] bridge_slave_1: entered promiscuous mode [ 142.496181][ T6075] team0: Port device team_slave_1 added [ 142.974340][ T5809] Bluetooth: hci6: command tx timeout [ 143.288349][ T157] bridge_slave_1: left allmulticast mode [ 143.288518][ T157] bridge_slave_1: left promiscuous mode [ 143.290968][ T157] bridge0: port 2(bridge_slave_1) entered disabled state [ 143.375739][ T157] bridge_slave_0: left allmulticast mode [ 143.375772][ T157] bridge_slave_0: left promiscuous mode [ 143.376405][ T157] bridge0: port 1(bridge_slave_0) entered disabled state [ 143.383897][ T9] usb 3-1: new low-speed USB device number 3 using dummy_hcd [ 143.529301][ T6202] program syz.1.72 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 143.538309][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 143.538349][ T9] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 143.538366][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.577490][ T9] usb 3-1: config 0 descriptor?? [ 143.593209][ T9] ldusb 3-1:0.0: Interrupt in endpoint not found [ 143.788327][ T9] usb 3-1: USB disconnect, device number 3 [ 145.480566][ T6217] mmap: syz.1.75 (6217) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 146.007736][ T157] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 146.074857][ T157] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 146.105656][ T6223] input: syz1 as /devices/virtual/input/input9 [ 146.131881][ T157] bond0 (unregistering): Released all slaves [ 146.196984][ T6104] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 146.201164][ T6075] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 146.201177][ T6075] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 146.201197][ T6075] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 146.277833][ T6104] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 146.283096][ T6075] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 146.283109][ T6075] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 146.283129][ T6075] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 146.647958][ T6104] team0: Port device team_slave_0 added [ 147.326083][ T6104] team0: Port device team_slave_1 added [ 147.459092][ T6075] hsr_slave_0: entered promiscuous mode [ 147.460788][ T6075] hsr_slave_1: entered promiscuous mode [ 147.462886][ T6075] debugfs: 'hsr0' already exists in 'hsr' [ 147.462912][ T6075] Cannot create hsr debugfs directory [ 147.613859][ T5860] usb 2-1: new low-speed USB device number 3 using dummy_hcd [ 147.773484][ T6104] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 147.773504][ T6104] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 147.773537][ T6104] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 147.775036][ T6235] netlink: 8 bytes leftover after parsing attributes in process `syz.4.81'. [ 147.848949][ T6104] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 147.848969][ T6104] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 147.849002][ T6104] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 147.883059][ T5860] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 147.883151][ T5860] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 147.883210][ T5860] usb 2-1: config 0 has no interface number 0 [ 147.883385][ T5860] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 147.883463][ T5860] usb 2-1: config 0 interface 55 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 147.883715][ T5860] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 147.883797][ T5860] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.959954][ T5860] usb 2-1: config 0 descriptor?? [ 148.260984][ T6104] hsr_slave_0: entered promiscuous mode [ 148.262529][ T6104] hsr_slave_1: entered promiscuous mode [ 148.284438][ T6104] debugfs: 'hsr0' already exists in 'hsr' [ 148.284467][ T6104] Cannot create hsr debugfs directory [ 148.608741][ T5860] ldusb 2-1:0.55: Interrupt in endpoint not found [ 148.651691][ T6239] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 148.797967][ T5794] usb 2-1: USB disconnect, device number 3 [ 149.973822][ T157] hsr_slave_0: left promiscuous mode [ 150.014694][ T157] hsr_slave_1: left promiscuous mode [ 150.017313][ T157] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 150.017394][ T157] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 150.083098][ T157] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 150.083129][ T157] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 150.858180][ T157] veth1_macvtap: left promiscuous mode [ 150.858407][ T157] veth0_macvtap: left promiscuous mode [ 150.858688][ T157] veth1_vlan: left promiscuous mode [ 150.858958][ T157] veth0_vlan: left promiscuous mode [ 151.243929][ T6267] input: syz1 as /devices/virtual/input/input10 [ 152.828635][ T6278] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(10) [ 152.828678][ T6278] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 152.829849][ T6278] vhci_hcd vhci_hcd.0: Device attached [ 153.550299][ T6279] vhci_hcd: connection closed [ 153.629029][ T1112] vhci_hcd vhci_hcd.1: stop threads [ 153.629133][ T1112] vhci_hcd vhci_hcd.1: release socket [ 153.629267][ T1112] vhci_hcd vhci_hcd.1: disconnect device [ 154.220270][ T6288] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 154.220292][ T6288] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 154.649871][ T157] team0 (unregistering): Port device team_slave_1 removed [ 154.734569][ T157] team0 (unregistering): Port device team_slave_0 removed [ 156.510633][ T6312] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 157.632434][ T6075] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 158.333705][ T6075] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 158.482299][ T6075] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 158.564830][ T6075] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 162.066715][ T6104] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 162.164073][ T6104] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 162.209855][ T6104] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 162.290375][ T6104] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 163.378444][ T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.962789][ T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.770771][ T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.270149][ T6075] 8021q: adding VLAN 0 to HW filter on device bond0 [ 167.833506][ T6395] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(12) [ 167.833599][ T6395] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 167.835212][ T6395] vhci_hcd vhci_hcd.0: Device attached [ 167.846147][ T6401] vhci_hcd: connection closed [ 167.855965][ T49] vhci_hcd vhci_hcd.2: stop threads [ 167.856033][ T49] vhci_hcd vhci_hcd.2: release socket [ 167.857577][ T49] vhci_hcd vhci_hcd.2: disconnect device [ 168.607401][ T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.510332][ T6075] 8021q: adding VLAN 0 to HW filter on device team0 [ 169.605094][ T5952] bridge0: port 1(bridge_slave_0) entered blocking state [ 169.605193][ T5952] bridge0: port 1(bridge_slave_0) entered forwarding state [ 169.660742][ T5951] bridge0: port 2(bridge_slave_1) entered blocking state [ 169.660874][ T5951] bridge0: port 2(bridge_slave_1) entered forwarding state [ 169.995880][ T6415] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.113'. [ 170.118663][ T6104] 8021q: adding VLAN 0 to HW filter on device bond0 [ 170.354888][ T12] bridge_slave_1: left allmulticast mode [ 170.354923][ T12] bridge_slave_1: left promiscuous mode [ 170.360430][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 170.456086][ T12] bridge_slave_0: left allmulticast mode [ 170.456215][ T12] bridge_slave_0: left promiscuous mode [ 170.456459][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 173.414434][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 173.475139][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 173.506102][ T12] bond0 (unregistering): Released all slaves [ 173.553068][ T6452] batman_adv: batadv0: Adding interface: gretap1 [ 173.553082][ T6452] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 173.553106][ T6452] batman_adv: batadv0: Interface activated: gretap1 [ 173.774226][ T6104] 8021q: adding VLAN 0 to HW filter on device team0 [ 173.878073][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 173.879260][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 174.518676][ T5921] bridge0: port 2(bridge_slave_1) entered blocking state [ 174.519071][ T5921] bridge0: port 2(bridge_slave_1) entered forwarding state [ 175.983828][ T12] hsr_slave_0: left promiscuous mode [ 176.039078][ T12] hsr_slave_1: left promiscuous mode [ 176.042443][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 176.042464][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 176.101328][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 176.101359][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 176.292658][ T12] veth1_macvtap: left promiscuous mode [ 176.292773][ T12] veth0_macvtap: left promiscuous mode [ 176.293025][ T12] veth1_vlan: left promiscuous mode [ 176.293202][ T12] veth0_vlan: left promiscuous mode [ 178.106070][ T5809] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 178.106182][ T5809] Bluetooth: hci0: Injecting HCI hardware error event [ 178.109781][ T5808] Bluetooth: hci0: hardware error 0x00 [ 178.486626][ T12] team0 (unregistering): Port device team_slave_1 removed [ 178.547017][ T12] team0 (unregistering): Port device team_slave_0 removed [ 178.836231][ T6075] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 181.664061][ T5808] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 181.943696][ T5878] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 182.093867][ T5878] usb 3-1: Using ep0 maxpacket: 16 [ 182.270245][ T5878] usb 3-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 182.270372][ T5878] usb 3-1: config 0 interface 0 has no altsetting 0 [ 182.272844][ T5878] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 182.273367][ T5878] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.557055][ T5878] usb 3-1: config 0 descriptor?? [ 182.705266][ T5878] usbhid 3-1:0.0: can't add hid device: -71 [ 182.706757][ T5878] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 182.763708][ T5878] usb 3-1: USB disconnect, device number 4 [ 182.768059][ T6104] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 183.450348][ T6075] veth0_vlan: entered promiscuous mode [ 183.547361][ T6075] veth1_vlan: entered promiscuous mode [ 184.364133][ T6075] veth0_macvtap: entered promiscuous mode [ 184.384280][ T6075] veth1_macvtap: entered promiscuous mode [ 184.571934][ T6075] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 184.634099][ T6075] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 185.117345][ T1112] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.121348][ T1112] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.123362][ T1112] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.159001][ T1112] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.710298][ T1013] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 185.710322][ T1013] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 185.753331][ T6104] veth0_vlan: entered promiscuous mode [ 185.871560][ T6104] veth1_vlan: entered promiscuous mode [ 186.007788][ T67] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 186.007809][ T67] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 186.848883][ T5808] block nbd2: Receive control failed (result -32) [ 186.862412][ T5808] block nbd2: Receive control failed (result -32) [ 186.962274][ T6586] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.066543][ T6591] block nbd2: shutting down sockets [ 190.528571][ T6586] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.029154][ T6586] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.168417][ T5809] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 192.171553][ T5809] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 192.172598][ T5809] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 192.197629][ T5809] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 192.198916][ T5809] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 194.430783][ T5808] Bluetooth: hci1: command tx timeout [ 194.472627][ T6648] loop5: detected capacity change from 0 to 7 [ 194.523807][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.523881][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.790566][ T6628] Dev loop5: unable to read RDB block 7 [ 194.790594][ T6628] loop5: AHDI p1 [ 194.790626][ T6628] loop5: partition table partially beyond EOD, truncated [ 194.813494][ T6586] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.897603][ T6648] Dev loop5: unable to read RDB block 7 [ 194.897628][ T6648] loop5: AHDI p1 [ 194.897647][ T6648] loop5: partition table partially beyond EOD, truncated [ 195.349972][ T1568] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 195.350016][ T1568] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 196.427592][ T1568] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz0] on syz1 [ 196.495503][ T5808] Bluetooth: hci1: command tx timeout [ 198.573869][ T5808] Bluetooth: hci1: command tx timeout [ 198.782126][ T6672] netlink: 4 bytes leftover after parsing attributes in process `syz.1.167'. [ 199.921143][ T6690] input: syz1 as /devices/virtual/input/input11 [ 200.775936][ T5808] Bluetooth: hci1: command tx timeout [ 200.917939][ T36] audit: type=1326 audit(1773257860.126:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6700 comm="syz.1.173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb878b9c799 code=0x7ffc0000 [ 200.918396][ T36] audit: type=1326 audit(1773257860.136:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6700 comm="syz.1.173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb878b9c799 code=0x7ffc0000 [ 200.918964][ T36] audit: type=1326 audit(1773257860.136:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6700 comm="syz.1.173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fb878b9c799 code=0x7ffc0000 [ 200.919378][ T36] audit: type=1326 audit(1773257860.146:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6700 comm="syz.1.173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb878b9c799 code=0x7ffc0000 [ 200.920943][ T36] audit: type=1326 audit(1773257860.146:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6700 comm="syz.1.173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb878b9c799 code=0x7ffc0000 [ 201.161728][ T36] audit: type=1326 audit(1773257860.146:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6700 comm="syz.1.173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7fb878b9c799 code=0x7ffc0000 [ 202.130257][ T10] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 202.130296][ T10] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 203.203651][ T10] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz0] on syz1 [ 203.455817][ T5951] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.526523][ T5809] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 203.536165][ T5809] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 203.537358][ T5809] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 203.538918][ T5809] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 203.539999][ T5809] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 203.652038][ T5951] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.780178][ T6719] fido_id[6719]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 204.857530][ T41] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.616058][ T5809] Bluetooth: hci4: command tx timeout [ 206.535343][ T5952] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.897840][ T6747] input: syz1 as /devices/virtual/input/input12 [ 207.694220][ T5809] Bluetooth: hci4: command tx timeout [ 210.180522][ T5809] Bluetooth: hci4: command tx timeout [ 212.423813][ T60] Bluetooth: hci3: command 0x0406 tx timeout [ 212.423850][ T60] Bluetooth: hci4: command tx timeout [ 212.569700][ T6624] chnl_net:caif_netlink_parms(): no params data found [ 212.836276][ T6801] input: syz1 as /devices/virtual/input/input13 [ 215.562567][ T6718] chnl_net:caif_netlink_parms(): no params data found [ 218.459659][ T5809] Bluetooth: hci3: unexpected event for opcode 0x203d [ 218.555696][ T6842] netlink: 16 bytes leftover after parsing attributes in process `syz.5.203'. [ 218.555721][ T6842] netlink: 4 bytes leftover after parsing attributes in process `syz.5.203'. [ 218.665323][ T67] bridge_slave_1: left allmulticast mode [ 218.665354][ T67] bridge_slave_1: left promiscuous mode [ 218.666418][ T67] bridge0: port 2(bridge_slave_1) entered disabled state [ 218.758353][ T67] bridge_slave_0: left allmulticast mode [ 218.758388][ T67] bridge_slave_0: left promiscuous mode [ 218.783684][ T67] bridge0: port 1(bridge_slave_0) entered disabled state [ 221.004511][ T67] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 221.064479][ T67] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 221.085908][ T67] bond0 (unregistering): Released all slaves [ 221.303166][ T6624] bridge0: port 1(bridge_slave_0) entered blocking state [ 221.303301][ T6624] bridge0: port 1(bridge_slave_0) entered disabled state [ 221.303506][ T6624] bridge_slave_0: entered allmulticast mode [ 221.306420][ T6624] bridge_slave_0: entered promiscuous mode [ 221.418526][ T6624] bridge0: port 2(bridge_slave_1) entered blocking state [ 221.418667][ T6624] bridge0: port 2(bridge_slave_1) entered disabled state [ 221.418926][ T6624] bridge_slave_1: entered allmulticast mode [ 221.421797][ T6624] bridge_slave_1: entered promiscuous mode [ 221.561739][ T6871] input: syz1 as /devices/virtual/input/input14 [ 222.003806][ T67] hsr_slave_0: left promiscuous mode [ 222.567335][ T5809] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 222.567491][ T5809] Bluetooth: hci3: Injecting HCI hardware error event [ 222.599868][ T5808] Bluetooth: hci3: hardware error 0x00 [ 222.784215][ T67] hsr_slave_1: left promiscuous mode [ 222.811565][ T67] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 222.937032][ T67] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 222.975224][ T67] veth1_vlan: left promiscuous mode [ 222.975347][ T67] veth0_vlan: left promiscuous mode [ 223.651885][ T67] team0 (unregistering): Port device team_slave_1 removed [ 223.776278][ T6888] netlink: 12 bytes leftover after parsing attributes in process `syz.4.211'. [ 223.880044][ T67] team0 (unregistering): Port device team_slave_0 removed [ 224.459260][ T6624] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 224.460043][ T6718] bridge0: port 1(bridge_slave_0) entered blocking state [ 224.460248][ T6718] bridge0: port 1(bridge_slave_0) entered disabled state [ 224.460433][ T6718] bridge_slave_0: entered allmulticast mode [ 224.462878][ T6718] bridge_slave_0: entered promiscuous mode [ 224.584044][ T6624] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 224.584278][ T6718] bridge0: port 2(bridge_slave_1) entered blocking state [ 224.584397][ T6718] bridge0: port 2(bridge_slave_1) entered disabled state [ 224.584593][ T6718] bridge_slave_1: entered allmulticast mode [ 224.624262][ T6718] bridge_slave_1: entered promiscuous mode [ 224.906650][ T6900] fuse: Bad value for 'fd' [ 224.947081][ T6624] team0: Port device team_slave_0 added [ 224.950844][ T6718] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 224.959352][ T6624] team0: Port device team_slave_1 added [ 224.962628][ T6718] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 224.993705][ T5808] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 225.150473][ T6903] netlink: 16 bytes leftover after parsing attributes in process `syz.5.217'. [ 225.150497][ T6903] netlink: 4 bytes leftover after parsing attributes in process `syz.5.217'. [ 226.769281][ T6624] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 226.769299][ T6624] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 226.769327][ T6624] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 226.791735][ T6718] team0: Port device team_slave_0 added [ 226.837853][ T6624] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 226.837869][ T6624] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 226.837892][ T6624] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 226.840322][ T6718] team0: Port device team_slave_1 added [ 227.276244][ T6718] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 227.276264][ T6718] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 227.276294][ T6718] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 227.283367][ T6718] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 227.283382][ T6718] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 227.283418][ T6718] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 227.503276][ T6624] hsr_slave_0: entered promiscuous mode [ 227.514472][ T6624] hsr_slave_1: entered promiscuous mode [ 227.863230][ T6718] hsr_slave_0: entered promiscuous mode [ 227.876692][ T6718] hsr_slave_1: entered promiscuous mode [ 227.896406][ T6718] debugfs: 'hsr0' already exists in 'hsr' [ 227.896436][ T6718] Cannot create hsr debugfs directory [ 228.174112][ T5808] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0 [ 228.176733][ T5808] Bluetooth: hci5: Injecting HCI hardware error event [ 228.178531][ T5808] Bluetooth: hci5: hardware error 0x00 [ 230.207557][ T6937] Zero length message leads to an empty skb [ 232.560193][ T5808] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 232.860229][ T5780] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 232.860269][ T5780] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 232.992536][ T5780] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz0] on syz1 [ 233.473130][ T6960] ======================================================= [ 233.473130][ T6960] WARNING: The mand mount option has been deprecated and [ 233.473130][ T6960] and is ignored by this kernel. Remove the mand [ 233.473130][ T6960] option from the mount to silence this warning. [ 233.473130][ T6960] ======================================================= [ 236.323174][ T67] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.950374][ T67] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.149240][ T67] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.707249][ T67] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.872260][ T7007] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(12) [ 242.872343][ T7007] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 242.877075][ T7007] vhci_hcd vhci_hcd.0: Device attached [ 243.396988][ T48] usb 35-1: new low-speed USB device number 2 using vhci_hcd [ 245.355457][ T7008] vhci_hcd: connection reset by peer [ 245.597026][ T5999] vhci_hcd vhci_hcd.1: stop threads [ 245.597233][ T5999] vhci_hcd vhci_hcd.1: release socket [ 245.597592][ T5999] vhci_hcd vhci_hcd.1: disconnect device [ 248.543754][ T48] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 248.902952][ T67] bridge_slave_1: left allmulticast mode [ 248.902981][ T67] bridge_slave_1: left promiscuous mode [ 248.903235][ T67] bridge0: port 2(bridge_slave_1) entered disabled state [ 249.005951][ T67] bridge_slave_0: left allmulticast mode [ 249.005981][ T67] bridge_slave_0: left promiscuous mode [ 249.006227][ T67] bridge0: port 1(bridge_slave_0) entered disabled state [ 249.240412][ T67] batman_adv: batadv0: Interface deactivated: gretap1 [ 253.423788][ T67] batman_adv: batadv0: Removing interface: gretap1 [ 253.514983][ T5809] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 253.517507][ T5809] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 253.518400][ T5809] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 253.519365][ T5809] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 253.519890][ T5809] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 253.624861][ T67] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 253.679061][ T67] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 253.706911][ T67] bond0 (unregistering): Released all slaves [ 254.087864][ T36] audit: type=1326 audit(1773257913.636:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7065 comm="syz.5.247" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f96ecfcc799 code=0x0 [ 254.203038][ T7068] netlink: 8 bytes leftover after parsing attributes in process `syz.5.247'. [ 255.409415][ T7071] netlink: 8 bytes leftover after parsing attributes in process `syz.5.247'. [ 255.573049][ T7071] netlink: 8 bytes leftover after parsing attributes in process `syz.5.247'. [ 255.613685][ T5808] Bluetooth: hci2: command tx timeout [ 255.780614][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.780673][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.049931][ T7071] netlink: 8 bytes leftover after parsing attributes in process `syz.5.247'. [ 257.832890][ T5808] Bluetooth: hci2: command tx timeout [ 257.907667][ T67] hsr_slave_0: left promiscuous mode [ 257.997157][ T67] hsr_slave_1: left promiscuous mode [ 258.001965][ T67] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 258.001986][ T67] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 258.055155][ T67] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 258.055177][ T67] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 258.365046][ T67] veth1_macvtap: left promiscuous mode [ 258.365121][ T67] veth0_macvtap: left promiscuous mode [ 258.365285][ T67] veth1_vlan: left promiscuous mode [ 258.365401][ T67] veth0_vlan: left promiscuous mode [ 258.384271][ T5903] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 259.603673][ T5903] usb 5-1: device descriptor read/64, error -71 [ 259.767462][ T5860] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 259.767498][ T5860] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 259.774859][ T5860] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz0] on syz1 [ 259.856840][ T5808] Bluetooth: hci2: command tx timeout [ 260.126860][ T5903] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 262.063655][ T5808] Bluetooth: hci2: command tx timeout [ 263.705146][ T5809] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 263.727675][ T5809] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 263.728894][ T5809] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 263.834792][ T5809] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 263.835755][ T5809] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 264.664304][ T67] team0 (unregistering): Port device team_slave_1 removed [ 264.718277][ T67] team0 (unregistering): Port device team_slave_0 removed [ 266.293593][ T5809] Bluetooth: hci1: command tx timeout [ 268.288916][ T5780] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 268.288956][ T5780] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 268.333735][ T5809] Bluetooth: hci1: command tx timeout [ 268.730539][ T5780] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz0] on syz1 [ 270.405021][ T7164] fido_id[7164]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 271.783579][ T5809] Bluetooth: hci1: command tx timeout [ 272.741681][ T7062] chnl_net:caif_netlink_parms(): no params data found [ 273.854213][ T5809] Bluetooth: hci1: command tx timeout [ 274.052737][ T7062] bridge0: port 1(bridge_slave_0) entered blocking state [ 274.052947][ T7062] bridge0: port 1(bridge_slave_0) entered disabled state [ 274.053148][ T7062] bridge_slave_0: entered allmulticast mode [ 274.056782][ T7062] bridge_slave_0: entered promiscuous mode [ 274.093400][ T7062] bridge0: port 2(bridge_slave_1) entered blocking state [ 274.096787][ T7062] bridge0: port 2(bridge_slave_1) entered disabled state [ 274.097438][ T7062] bridge_slave_1: entered allmulticast mode [ 274.107172][ T7062] bridge_slave_1: entered promiscuous mode [ 274.550283][ T7062] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 274.636404][ T7062] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 274.783994][ T7132] chnl_net:caif_netlink_parms(): no params data found [ 275.837095][ T7224] loop5: detected capacity change from 0 to 7 [ 275.859179][ T7224] Dev loop5: unable to read RDB block 7 [ 275.859233][ T7224] loop5: unable to read partition table [ 275.859493][ T7224] loop5: partition table beyond EOD, truncated [ 275.859516][ T7224] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 276.948877][ T7062] team0: Port device team_slave_0 added [ 277.106792][ T7062] team0: Port device team_slave_1 added [ 277.312063][ T7062] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 277.312081][ T7062] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 277.312110][ T7062] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 277.384632][ T7062] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 277.384653][ T7062] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 277.384686][ T7062] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 279.050804][ T5878] IPVS: starting estimator thread 0... [ 279.194224][ T7251] IPVS: using max 7 ests per chain, 16800 per kthread [ 279.261513][ T7132] bridge0: port 1(bridge_slave_0) entered blocking state [ 279.261611][ T7132] bridge0: port 1(bridge_slave_0) entered disabled state [ 279.261789][ T7132] bridge_slave_0: entered allmulticast mode [ 279.287846][ T7132] bridge_slave_0: entered promiscuous mode [ 279.292219][ T7132] bridge0: port 2(bridge_slave_1) entered blocking state [ 279.309146][ T7132] bridge0: port 2(bridge_slave_1) entered disabled state [ 279.309456][ T7132] bridge_slave_1: entered allmulticast mode [ 279.344855][ T7132] bridge_slave_1: entered promiscuous mode [ 279.771823][ T7265] netlink: 108 bytes leftover after parsing attributes in process `syz.4.282'. [ 279.902821][ T7062] hsr_slave_0: entered promiscuous mode [ 279.915490][ T7062] hsr_slave_1: entered promiscuous mode [ 279.916453][ T7062] debugfs: 'hsr0' already exists in 'hsr' [ 279.916478][ T7062] Cannot create hsr debugfs directory [ 279.923211][ T7132] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 280.008854][ T7132] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 281.771447][ T7132] team0: Port device team_slave_0 added [ 282.240746][ T7132] team0: Port device team_slave_1 added [ 283.184281][ T7291] loop5: detected capacity change from 0 to 7 [ 283.190673][ T7291] Dev loop5: unable to read RDB block 7 [ 283.190701][ T7291] loop5: AHDI p1 [ 283.190725][ T7291] loop5: partition table partially beyond EOD, truncated [ 283.222580][ T7132] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 283.222598][ T7132] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 283.222626][ T7132] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 283.337513][ T7132] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 283.337532][ T7132] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 283.337562][ T7132] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 283.632137][ T5780] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 283.632176][ T5780] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 283.933850][ T5780] hid-generic 0000:0000:0000.0006: hidraw0: HID v0.00 Device [syz0] on syz1 [ 285.185672][ T7300] fido_id[7300]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 285.338763][ T7304] binder: 7303:7304 unknown command 1472 [ 285.338788][ T7304] binder: 7303:7304 ioctl c0306201 200000000080 returned -22 [ 285.625263][ T7310] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(12) [ 285.625442][ T7310] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 285.625954][ T7310] vhci_hcd vhci_hcd.0: Device attached [ 285.726020][ T7132] hsr_slave_0: entered promiscuous mode [ 285.727393][ T7132] hsr_slave_1: entered promiscuous mode [ 285.783858][ T7132] debugfs: 'hsr0' already exists in 'hsr' [ 285.783891][ T7132] Cannot create hsr debugfs directory [ 286.456227][ T5903] usb 35-1: new low-speed USB device number 3 using vhci_hcd [ 286.529269][ T7311] vhci_hcd: connection reset by peer [ 286.531230][ T49] vhci_hcd vhci_hcd.1: stop threads [ 286.531277][ T49] vhci_hcd vhci_hcd.1: release socket [ 286.531347][ T49] vhci_hcd vhci_hcd.1: disconnect device [ 288.569797][ T7336] binder: 7335:7336 unknown command 1472 [ 288.569814][ T7336] binder: 7335:7336 ioctl c0306201 200000000080 returned -22 [ 288.678936][ T1013] bridge_slave_1: left allmulticast mode [ 288.678966][ T1013] bridge_slave_1: left promiscuous mode [ 288.679228][ T1013] bridge0: port 2(bridge_slave_1) entered disabled state [ 289.034972][ T1013] bridge_slave_0: left allmulticast mode [ 289.035002][ T1013] bridge_slave_0: left promiscuous mode [ 289.036231][ T1013] bridge0: port 1(bridge_slave_0) entered disabled state [ 289.157640][ T1013] bridge_slave_1: left allmulticast mode [ 289.157670][ T1013] bridge_slave_1: left promiscuous mode [ 289.157936][ T1013] bridge0: port 2(bridge_slave_1) entered disabled state [ 289.388673][ T1013] bridge_slave_0: left allmulticast mode [ 289.388705][ T1013] bridge_slave_0: left promiscuous mode [ 289.388950][ T1013] bridge0: port 1(bridge_slave_0) entered disabled state [ 290.088103][ T1013] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 290.188218][ T1013] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 290.248119][ T1013] bond0 (unregistering): Released all slaves [ 290.566461][ T1013] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 290.827127][ T7363] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(12) [ 290.827229][ T7363] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 290.830879][ T7363] vhci_hcd vhci_hcd.0: Device attached [ 291.358951][ T1013] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 291.644708][ T7364] vhci_hcd: connection reset by peer [ 291.690566][ T94] vhci_hcd vhci_hcd.1: stop threads [ 291.690644][ T94] vhci_hcd vhci_hcd.1: release socket [ 291.742180][ T94] vhci_hcd vhci_hcd.1: disconnect device [ 291.825794][ T5903] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 291.827711][ T1013] bond0 (unregistering): Released all slaves [ 297.387190][ T7403] binder: 7402:7403 unknown command 1472 [ 297.387211][ T7403] binder: 7402:7403 ioctl c0306201 200000000080 returned -22 [ 298.775213][ T1013] hsr_slave_0: left promiscuous mode [ 298.824175][ T1013] hsr_slave_1: left promiscuous mode [ 298.825152][ T1013] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 298.914415][ T1013] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 298.919327][ T5878] IPVS: starting estimator thread 0... [ 300.013806][ T7413] IPVS: using max 9 ests per chain, 21600 per kthread [ 300.113712][ T1013] hsr_slave_0: left promiscuous mode [ 300.154716][ T1013] hsr_slave_1: left promiscuous mode [ 300.155694][ T1013] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 300.204490][ T1013] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 300.716037][ T1013] team0 (unregistering): Port device team_slave_1 removed [ 302.528373][ T1013] team0 (unregistering): Port device team_slave_0 removed [ 303.077263][ T1013] team0 (unregistering): Port device team_slave_1 removed [ 303.155651][ T1013] team0 (unregistering): Port device team_slave_0 removed [ 308.046206][ T48] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 308.046242][ T48] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 308.090647][ T48] hid-generic 0000:0000:0000.0007: hidraw0: HID v0.00 Device [syz0] on syz1 [ 309.362611][ T7471] fido_id[7471]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 310.828879][ T7062] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 311.761093][ T7062] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 315.632397][ T7062] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 316.772543][ T5808] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 316.794089][ T5808] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 316.796929][ T5808] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 316.797951][ T5808] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 316.799380][ T5808] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 317.047166][ T7132] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 317.109118][ T7132] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 317.158036][ T48] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 317.158077][ T48] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 317.168937][ T48] hid-generic 0000:0000:0000.0008: hidraw0: HID v0.00 Device [syz0] on syz1 [ 317.223352][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.223443][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.465701][ T7132] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 318.698460][ T7132] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 318.827237][ T7523] fido_id[7523]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 318.893620][ T5808] Bluetooth: hci4: command tx timeout [ 320.005940][ T7547] CUSE: unknown device info "" [ 320.005957][ T7547] CUSE: unknown device info "" [ 320.005967][ T7547] CUSE: unknown device info "" [ 320.005975][ T7547] CUSE: unknown device info "" [ 320.005984][ T7547] CUSE: unknown device info "ÿ" [ 320.005993][ T7547] CUSE: unknown device info "" [ 320.006002][ T7547] CUSE: unknown device info "" [ 320.006010][ T7547] CUSE: unknown device info "ÿ" [ 320.006019][ T7547] CUSE: DEVNAME unspecified [ 320.976002][ T5808] Bluetooth: hci4: command tx timeout [ 323.173080][ T5808] Bluetooth: hci4: command tx timeout [ 324.318340][ T5940] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 324.318379][ T5940] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 325.561578][ T5808] Bluetooth: hci4: command tx timeout [ 325.600610][ T5940] hid-generic 0000:0000:0000.0009: hidraw0: HID v0.00 Device [syz0] on syz1 [ 326.107212][ T7591] fido_id[7591]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 326.419370][ T5809] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 326.452750][ T5809] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 326.474285][ T5809] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 326.500139][ T5809] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 326.521268][ T5809] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 328.671491][ T5809] Bluetooth: hci2: command tx timeout [ 330.283841][ T7602] CUSE: unknown device info "" [ 330.283858][ T7602] CUSE: unknown device info "" [ 330.283868][ T7602] CUSE: unknown device info "" [ 330.283876][ T7602] CUSE: unknown device info "" [ 330.283885][ T7602] CUSE: unknown device info "ÿ" [ 330.283894][ T7602] CUSE: unknown device info "" [ 330.283902][ T7602] CUSE: unknown device info "" [ 330.283911][ T7602] CUSE: unknown device info "ÿ" [ 330.283920][ T7602] CUSE: DEVNAME unspecified [ 330.391939][ T7511] chnl_net:caif_netlink_parms(): no params data found [ 330.733696][ T5809] Bluetooth: hci2: command tx timeout [ 332.863379][ T5809] Bluetooth: hci2: command tx timeout [ 332.972776][ T7621] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 333.294457][ T7511] bridge0: port 1(bridge_slave_0) entered blocking state [ 333.294653][ T7511] bridge0: port 1(bridge_slave_0) entered disabled state [ 333.294873][ T7511] bridge_slave_0: entered allmulticast mode [ 333.297627][ T7511] bridge_slave_0: entered promiscuous mode [ 333.422395][ T7511] bridge0: port 2(bridge_slave_1) entered blocking state [ 333.422547][ T7511] bridge0: port 2(bridge_slave_1) entered disabled state [ 333.422775][ T7511] bridge_slave_1: entered allmulticast mode [ 333.917224][ T7511] bridge_slave_1: entered promiscuous mode [ 333.975742][ T7621] input: syz0 as /devices/virtual/input/input15 [ 334.146330][ T1013] bridge_slave_1: left allmulticast mode [ 334.146359][ T1013] bridge_slave_1: left promiscuous mode [ 334.146612][ T1013] bridge0: port 2(bridge_slave_1) entered disabled state [ 334.235658][ T1013] bridge_slave_0: left allmulticast mode [ 334.235689][ T1013] bridge_slave_0: left promiscuous mode [ 334.235957][ T1013] bridge0: port 1(bridge_slave_0) entered disabled state [ 334.567660][ T10] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 334.567700][ T10] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 335.566922][ T10] hid-generic 0000:0000:0000.000A: hidraw0: HID v0.00 Device [syz0] on syz1 [ 337.420240][ T7641] fido_id[7641]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 338.487847][ T5809] Bluetooth: hci2: command tx timeout [ 338.794481][ T7645] CUSE: unknown device info "" [ 338.794508][ T7645] CUSE: unknown device info "" [ 338.794517][ T7645] CUSE: unknown device info "" [ 338.794525][ T7645] CUSE: unknown device info "" [ 338.794533][ T7645] CUSE: unknown device info "ÿ" [ 338.794541][ T7645] CUSE: unknown device info "" [ 338.794549][ T7645] CUSE: unknown device info "" [ 338.794557][ T7645] CUSE: unknown device info "ÿ" [ 338.794565][ T7645] CUSE: DEVNAME unspecified [ 339.076391][ T7650] fuse: Bad value for 'fd' [ 339.154043][ T1013] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 340.879750][ T1013] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 341.987871][ T1013] bond0 (unregistering): Released all slaves [ 342.655896][ T7511] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 342.826197][ T7668] batman_adv: batadv0: Adding interface: gretap1 [ 342.826210][ T7668] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 342.826233][ T7668] batman_adv: batadv0: Interface activated: gretap1 [ 342.831038][ T7511] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 343.252479][ T5958] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 343.616417][ T5958] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 345.322686][ T5958] hid-generic 0000:0000:0000.000B: hidraw0: HID v0.00 Device [syz0] on syz1 [ 345.428730][ T1013] hsr_slave_0: left promiscuous mode [ 345.498923][ T1013] hsr_slave_1: left promiscuous mode [ 345.500942][ T1013] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 345.533193][ T7685] fido_id[7685]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 345.575935][ T1013] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 345.818017][ T7691] fuse: Bad value for 'fd' [ 347.358740][ T7709] fuse: Bad value for 'fd' [ 348.482375][ T1013] team0 (unregistering): Port device team_slave_1 removed [ 348.551761][ T5958] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 348.551798][ T5958] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 348.584297][ T1013] team0 (unregistering): Port device team_slave_0 removed [ 348.595221][ T5958] hid-generic 0000:0000:0000.000C: hidraw0: HID v0.00 Device [syz0] on syz1 [ 350.074311][ T7717] fido_id[7717]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 350.367204][ T7725] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(12) [ 350.367283][ T7725] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 350.377164][ T7725] vhci_hcd vhci_hcd.0: Device attached [ 350.884063][ T5878] usb 41-1: new low-speed USB device number 3 using vhci_hcd [ 352.038775][ T7726] vhci_hcd: connection reset by peer [ 352.069882][ T1118] vhci_hcd vhci_hcd.4: stop threads [ 352.069912][ T1118] vhci_hcd vhci_hcd.4: release socket [ 352.070219][ T1118] vhci_hcd vhci_hcd.4: disconnect device [ 353.247883][ T7511] team0: Port device team_slave_0 added [ 353.342301][ T7511] team0: Port device team_slave_1 added [ 353.760352][ T10] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 353.760390][ T10] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 354.793705][ T10] hid-generic 0000:0000:0000.000D: hidraw0: HID v0.00 Device [syz0] on syz1 [ 356.070065][ T7742] fido_id[7742]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 356.072866][ T7511] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 356.072884][ T7511] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 356.072913][ T7511] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 356.134611][ T5878] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 356.155580][ T7594] chnl_net:caif_netlink_parms(): no params data found [ 356.256825][ T10] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 356.256862][ T10] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 356.278850][ T10] hid-generic 0000:0000:0000.000E: hidraw0: HID v0.00 Device [syz0] on syz1 [ 356.394586][ T7511] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 356.394605][ T7511] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 356.394633][ T7511] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 357.156824][ T7511] hsr_slave_0: entered promiscuous mode [ 357.158184][ T7511] hsr_slave_1: entered promiscuous mode [ 357.423779][ T7594] bridge0: port 1(bridge_slave_0) entered blocking state [ 357.423912][ T7594] bridge0: port 1(bridge_slave_0) entered disabled state [ 357.424221][ T7594] bridge_slave_0: entered allmulticast mode [ 357.461185][ T7594] bridge_slave_0: entered promiscuous mode [ 357.566219][ T7594] bridge0: port 2(bridge_slave_1) entered blocking state [ 357.566393][ T7594] bridge0: port 2(bridge_slave_1) entered disabled state [ 357.566602][ T7594] bridge_slave_1: entered allmulticast mode [ 357.569403][ T7594] bridge_slave_1: entered promiscuous mode [ 358.075688][ T7780] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 359.156770][ T7788] netlink: 16 bytes leftover after parsing attributes in process `syz.4.382'. [ 359.156795][ T7788] netlink: 4 bytes leftover after parsing attributes in process `syz.4.382'. [ 359.347375][ T7594] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 360.265266][ T7594] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 362.387130][ T7594] team0: Port device team_slave_0 added [ 362.473189][ T7594] team0: Port device team_slave_1 added [ 364.682119][ T5940] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 364.846445][ T5940] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 364.846483][ T5940] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 364.846507][ T5940] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 364.846553][ T5940] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 364.846578][ T5940] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 364.929721][ T5940] usb 5-1: config 0 descriptor?? [ 365.945682][ T5940] plantronics 0003:047F:FFFF.000F: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 366.158377][ T7850] netlink: 140 bytes leftover after parsing attributes in process `syz.4.395'. [ 367.402604][ T7594] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 367.402623][ T7594] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 367.402755][ T7594] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 367.654127][ T5878] usb 5-1: reset high-speed USB device number 13 using dummy_hcd [ 368.391919][ T7594] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 368.391992][ T7594] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 368.392022][ T7594] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 369.763957][ T7872] vcan0: tx address claim with dlc 0 [ 369.810372][ T7872] netlink: 72 bytes leftover after parsing attributes in process `syz.5.402'. [ 370.088771][ T48] usb 5-1: USB disconnect, device number 13 [ 371.146192][ T7880] ptrace attach of "./syz-executor exec"[6075] was attempted by " [ 373.699262][ T7594] hsr_slave_0: entered promiscuous mode [ 373.700621][ T7594] hsr_slave_1: entered promiscuous mode [ 373.701539][ T7594] debugfs: 'hsr0' already exists in 'hsr' [ 373.701565][ T7594] Cannot create hsr debugfs directory [ 378.275820][ T7917] vcan0: tx address claim with dlc 0 [ 378.278392][ T7917] netlink: 72 bytes leftover after parsing attributes in process `syz.4.411'. [ 379.690272][ T7920] netlink: 8 bytes leftover after parsing attributes in process `syz.5.412'. [ 380.303351][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 380.303429][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 380.490043][ T5809] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 380.529099][ T5809] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 380.534829][ T5809] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 380.554965][ T5809] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 380.560132][ T5809] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 380.638100][ T1013] bridge_slave_1: left allmulticast mode [ 380.638123][ T1013] bridge_slave_1: left promiscuous mode [ 380.638287][ T1013] bridge0: port 2(bridge_slave_1) entered disabled state [ 381.043001][ T1013] bridge_slave_0: left allmulticast mode [ 381.043032][ T1013] bridge_slave_0: left promiscuous mode [ 381.043281][ T1013] bridge0: port 1(bridge_slave_0) entered disabled state [ 382.143758][ T7932] ptrace attach of "./syz-executor exec"[6075] was attempted by "./syz-executor exec"[7932] [ 382.816864][ T5808] Bluetooth: hci1: command tx timeout [ 383.453727][ T5868] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 383.603762][ T5868] usb 6-1: Using ep0 maxpacket: 16 [ 383.607803][ T5868] usb 6-1: unable to get BOS descriptor or descriptor too short [ 383.609701][ T5868] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 255, changing to 7 [ 383.634782][ T5868] usb 6-1: New USB device found, idVendor=1235, idProduct=000e, bcdDevice= 0.40 [ 383.634866][ T5868] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 383.634920][ T5868] usb 6-1: Product: syz [ 383.634961][ T5868] usb 6-1: Manufacturer: syz [ 383.635002][ T5868] usb 6-1: SerialNumber: syz [ 383.935728][ T1013] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 384.065053][ T1013] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 384.148210][ T1013] bond0 (unregistering): Released all slaves [ 384.281893][ T5809] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 384.301086][ T5809] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 384.315738][ T5809] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 384.318159][ T5809] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 384.320688][ T5809] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 384.893728][ T5808] Bluetooth: hci1: command tx timeout [ 385.121826][ T5868] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 385.139397][ T5868] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 385.176251][ T5868] usb 6-1: USB disconnect, device number 2 [ 386.424713][ T7951] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.418'. [ 386.493634][ T5808] Bluetooth: hci4: command tx timeout [ 387.579625][ T5808] Bluetooth: hci1: command tx timeout [ 387.708233][ T1013] hsr_slave_0: left promiscuous mode [ 387.946759][ T1013] hsr_slave_1: left promiscuous mode [ 387.947746][ T1013] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 388.026076][ T1013] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 388.573655][ T5808] Bluetooth: hci4: command tx timeout [ 388.918491][ T1013] team0 (unregistering): Port device team_slave_1 removed [ 389.067382][ T1013] team0 (unregistering): Port device team_slave_0 removed [ 389.475393][ T7966] vcan0: tx address claim with dlc 0 [ 389.477513][ T7966] netlink: 60 bytes leftover after parsing attributes in process `syz.4.422'. [ 389.626275][ T5808] Bluetooth: hci1: command tx timeout [ 390.653580][ T5808] Bluetooth: hci4: command tx timeout [ 393.809751][ T5808] Bluetooth: hci4: command tx timeout [ 504.833456][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 504.833472][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P7937/1:b..l P29/2:b..l P7720/1:b..l P5791/1:b..l P7918/1:b..l [ 504.833533][ C1] rcu: (detected by 1, t=10502 jiffies, g=25381, q=287 ncpus=2) [ 504.833551][ C1] task:syz-executor state:R running task stack:23520 pid:7918 tgid:7918 ppid:7907 task_flags:0x400140 flags:0x00080000 [ 504.833610][ C1] Call Trace: [ 504.833621][ C1] [ 504.833632][ C1] __schedule+0x1553/0x5240 [ 504.833794][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 504.833859][ C1] ? __pfx___schedule+0x10/0x10 [ 504.833883][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 504.833904][ C1] preempt_schedule_irq+0x4d/0xa0 [ 504.833924][ C1] irqentry_exit+0x599/0x620 [ 504.833953][ C1] ? trace_irq_disable+0x3b/0x150 [ 504.833987][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 504.834018][ C1] RIP: 0010:rcu_is_watching+0x67/0xb0 [ 504.834062][ C1] Code: 89 f7 e8 ac 0b 81 00 48 c7 c3 18 4f 4f 92 49 03 1e 48 89 d8 48 c1 e8 03 42 0f b6 04 38 84 c0 75 34 8b 03 65 ff 0d 79 b9 a4 10 <74> 11 83 e0 04 c1 e8 02 5b 41 5e 41 5f e9 d7 bb 7c 09 cc e8 61 f7 [ 504.834075][ C1] RSP: 0018:ffffc90004c76a58 EFLAGS: 00000286 [ 504.834116][ C1] RAX: 00000000003bf7bc RBX: ffff8880b8833f18 RCX: 0000000080000001 [ 504.834127][ C1] RDX: 0000000000000000 RSI: ffffffff8ba65e60 RDI: ffffffff8ba65e20 [ 504.834138][ C1] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 504.834146][ C1] R10: dffffc0000000000 R11: fffffbfff1ed4617 R12: dffffc0000000000 [ 504.834158][ C1] R13: ffff888019c4f1d8 R14: ffffffff8d801790 R15: dffffc0000000000 [ 504.834181][ C1] ? rcu_is_watching+0x15/0xb0 [ 504.834197][ C1] ? kernfs_root+0x1c/0x230 [ 504.834279][ C1] kernfs_root+0x14e/0x230 [ 504.834298][ C1] kernfs_add_one+0x2e1/0x5c0 [ 504.834321][ C1] __kernfs_create_file+0x22b/0x2e0 [ 504.834351][ C1] sysfs_add_file_mode_ns+0x238/0x300 [ 504.834382][ C1] internal_create_group+0x673/0x1180 [ 504.834412][ C1] ? __pfx_internal_create_group+0x10/0x10 [ 504.834432][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 504.834461][ C1] sysfs_create_groups+0x59/0x120 [ 504.834481][ C1] device_add_attrs+0xdd/0x5b0 [ 504.834568][ C1] ? __pfx_device_add_attrs+0x10/0x10 [ 504.834596][ C1] ? device_add_class_symlinks+0x222/0x240 [ 504.834624][ C1] device_add+0x496/0xb80 [ 504.834647][ C1] ? device_initialize+0x25b/0x450 [ 504.834672][ C1] netdev_register_kobject+0x178/0x310 [ 504.834724][ C1] register_netdevice+0x12d7/0x1d10 [ 504.834767][ C1] ? __pfx_register_netdevice+0x10/0x10 [ 504.834792][ C1] ? __asan_memset+0x22/0x50 [ 504.834861][ C1] ip6gre_newlink_common+0x403/0x5b0 [ 504.834898][ C1] ? __pfx_ip6gre_newlink_common+0x10/0x10 [ 504.834918][ C1] ? lockdep_rtnl_is_held+0x26/0x40 [ 504.834940][ C1] ? ip6gre_tunnel_find+0x501/0x5a0 [ 504.834967][ C1] ip6gre_newlink+0x228/0x350 [ 504.834986][ C1] ? __pfx_ip6gre_newlink+0x10/0x10 [ 504.835005][ C1] rtnl_newlink_create+0x329/0xb70 [ 504.835026][ C1] ? __pfx___nla_validate_parse+0x10/0x10 [ 504.835105][ C1] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 504.835138][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 504.835160][ C1] ? full_name_hash+0x92/0xe0 [ 504.835219][ C1] rtnl_newlink+0x1666/0x1be0 [ 504.835249][ C1] ? __pfx_rtnl_newlink+0x10/0x10 [ 504.835276][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 504.835295][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 504.835311][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 504.835328][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 504.835345][ C1] ? unwind_next_frame+0xa5/0x23c0 [ 504.835381][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 504.835399][ C1] ? is_bpf_text_address+0x292/0x2b0 [ 504.835432][ C1] ? is_bpf_text_address+0x26/0x2b0 [ 504.835455][ C1] ? kernel_text_address+0xa5/0xe0 [ 504.835495][ C1] ? __pfx_rtnl_newlink+0x10/0x10 [ 504.835513][ C1] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 504.835534][ C1] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 504.835551][ C1] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 504.835572][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 504.835594][ C1] netlink_rcv_skb+0x232/0x4b0 [ 504.835630][ C1] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 504.835651][ C1] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 504.835677][ C1] ? netlink_deliver_tap+0x2e/0x1b0 [ 504.835702][ C1] netlink_unicast+0x831/0x9f0 [ 504.835724][ C1] ? __pfx_netlink_unicast+0x10/0x10 [ 504.835741][ C1] ? netlink_sendmsg+0x650/0xb40 [ 504.835758][ C1] ? skb_put+0x11b/0x210 [ 504.835781][ C1] netlink_sendmsg+0x813/0xb40 [ 504.835806][ C1] ? __pfx_netlink_sendmsg+0x10/0x10 [ 504.835831][ C1] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 504.835891][ C1] ? __pfx_netlink_sendmsg+0x10/0x10 [ 504.835911][ C1] __sys_sendto+0x67f/0x710 [ 504.835936][ C1] ? __pfx___sys_sendto+0x10/0x10 [ 504.835975][ C1] ? fd_install+0x97/0x3e0 [ 504.836012][ C1] ? fd_install+0x30c/0x3e0 [ 504.836036][ C1] __x64_sys_sendto+0xde/0x100 [ 504.836059][ C1] do_syscall_64+0x14d/0xf80 [ 504.836080][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 504.836096][ C1] ? clear_bhb_loop+0x40/0x90 [ 504.836120][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 504.836135][ C1] RIP: 0033:0x7f969419cfce [ 504.836152][ C1] RSP: 002b:00007ffcea202028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 504.836167][ C1] RAX: ffffffffffffffda RBX: 000055557f638500 RCX: 00007f969419cfce [ 504.836178][ C1] RDX: 0000000000000054 RSI: 00007f9694f84670 RDI: 0000000000000003 [ 504.836188][ C1] RBP: 0000000000000001 R08: 00007ffcea2020a4 R09: 000000000000000c [ 504.836197][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 504.836206][ C1] R13: 0000000000000000 R14: 00007f9694f84670 R15: 0000000000000000 [ 504.836228][ C1] [ 504.836234][ C1] task:syz-executor state:R running task stack:22432 pid:5791 tgid:5791 ppid:5790 task_flags:0x400140 flags:0x00080000 [ 504.836282][ C1] Call Trace: [ 504.836287][ C1] [ 504.836295][ C1] __schedule+0x1553/0x5240 [ 504.836331][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 504.836347][ C1] ? __pfx___schedule+0x10/0x10 [ 504.836364][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 504.836398][ C1] preempt_schedule_irq+0x4d/0xa0 [ 504.836418][ C1] irqentry_exit+0x599/0x620 [ 504.836438][ C1] ? rcu_is_watching+0x15/0xb0 [ 504.836458][ C1] asm_sysvec_reschedule_ipi+0x1a/0x20 [ 504.836474][ C1] RIP: 0010:kasan_check_range+0x1ca/0x2c0 [ 504.836497][ C1] Code: dc 4d 01 f3 49 8d 5c 24 07 4d 85 e4 49 0f 49 dc 48 83 e3 f8 49 29 dc 74 0e 41 80 3b 00 75 7c 49 ff c3 49 ff cc 75 f2 5b 41 5c <41> 5d 41 5e 41 5f 5d c3 cc cc cc cc cc 45 84 ff 0f 85 a1 00 00 00 [ 504.836510][ C1] RSP: 0018:ffffc900045e75a0 EFLAGS: 00000256 [ 504.836522][ C1] RAX: ffffffff81ff7f01 RBX: 0000000000004092 RCX: ffffffff81ff7f7b [ 504.836533][ C1] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffea000201d1c0 [ 504.836542][ C1] RBP: 1ffffd4000403a39 R08: ffffea000201d1c7 R09: 1ffffd4000403a38 [ 504.836554][ C1] R10: dffffc0000000000 R11: fffff94000403a39 R12: 0000000000000000 [ 504.836564][ C1] R13: 1ffffd4000403a38 R14: fffff94000403a39 R15: 1ffffd4000403a38 [ 504.836581][ C1] ? folio_contains+0x71/0x2b0 [ 504.836640][ C1] ? folio_contains+0xeb/0x2b0 [ 504.836667][ C1] folio_contains+0xeb/0x2b0 [ 504.836691][ C1] find_lock_entries+0x7c5/0xa90 [ 504.836716][ C1] ? find_lock_entries+0x12a/0xa90 [ 504.836742][ C1] ? __pfx_find_lock_entries+0x10/0x10 [ 504.836776][ C1] shmem_undo_range+0x2d6/0x1660 [ 504.836841][ C1] ? __pfx_shmem_undo_range+0x10/0x10 [ 504.836884][ C1] ? rtlock_slowlock_locked+0xfb/0x3c80 [ 504.836918][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 504.836935][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 504.836962][ C1] shmem_evict_inode+0x240/0x9e0 [ 504.836982][ C1] ? lockdep_hardirqs_on+0x7a/0x110 [ 504.837002][ C1] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 504.837023][ C1] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 504.837040][ C1] ? __pfx_shmem_evict_inode+0x10/0x10 [ 504.837060][ C1] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 504.837078][ C1] ? rt_spin_unlock+0x14f/0x200 [ 504.837097][ C1] ? rt_spin_unlock+0x160/0x200 [ 504.837116][ C1] ? __pfx_shmem_evict_inode+0x10/0x10 [ 504.837136][ C1] evict+0x61e/0xb10 [ 504.837157][ C1] ? __pfx_evict+0x10/0x10 [ 504.837169][ C1] ? rt_spin_unlock+0x160/0x200 [ 504.837187][ C1] ? iput+0xb25/0xe80 [ 504.837230][ C1] filename_unlinkat+0x445/0x610 [ 504.837251][ C1] ? __pfx_filename_unlinkat+0x10/0x10 [ 504.837272][ C1] ? do_getname+0x151/0x250 [ 504.837290][ C1] __se_sys_unlink+0x2e/0x140 [ 504.837308][ C1] do_syscall_64+0x14d/0xf80 [ 504.837328][ C1] ? trace_irq_disable+0x3b/0x150 [ 504.837346][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 504.837362][ C1] ? clear_bhb_loop+0x40/0x90 [ 504.837381][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 504.837396][ C1] RIP: 0033:0x7f81bd1eb887 [ 504.837408][ C1] RSP: 002b:00007ffc24e13508 EFLAGS: 00000206 ORIG_RAX: 0000000000000057 [ 504.837422][ C1] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f81bd1eb887 [ 504.837433][ C1] RDX: 00007ffc24e13530 RSI: 00007ffc24e135c0 RDI: 00007ffc24e135c0 [ 504.837444][ C1] RBP: 00007ffc24e135c0 R08: 00007ffc24e145c0 R09: 00000000ffffffff [ 504.837454][ C1] R10: 0000000000000100 R11: 0000000000000206 R12: 00007ffc24e14650 [ 504.837464][ C1] R13: 00007f81bd282050 R14: 000000000005fa1c R15: 00007ffc24e14690 [ 504.837487][ C1] [ 504.837492][ C1] task:kworker/u8:17 state:R running task stack:23256 pid:7720 tgid:7720 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 504.837541][ C1] Workqueue: events_unbound nsim_dev_trap_report_work [ 504.837580][ C1] Call Trace: [ 504.837585][ C1] [ 504.837593][ C1] __schedule+0x1553/0x5240 [ 504.837616][ C1] ? nsim_dev_trap_report_work+0x7fa/0xbc0 [ 504.837635][ C1] ? ret_from_fork_asm+0x1a/0x30 [ 504.837676][ C1] ? __pfx___schedule+0x10/0x10 [ 504.837696][ C1] ? lockdep_hardirqs_on+0x7a/0x110 [ 504.837716][ C1] ? irqentry_exit+0x59e/0x620 [ 504.837742][ C1] ? preempt_schedule_thunk+0x16/0x30 [ 504.837761][ C1] preempt_schedule_common+0x82/0xd0 [ 504.837782][ C1] preempt_schedule_thunk+0x16/0x30 [ 504.837804][ C1] _raw_spin_unlock_irqrestore+0x74/0x80 [ 504.837826][ C1] debug_check_no_obj_freed+0x52e/0x550 [ 504.837882][ C1] ? skb_release_data+0x6f0/0x940 [ 504.837909][ C1] kmem_cache_free+0xff/0x6b0 [ 504.837968][ C1] ? nsim_dev_trap_report_work+0x7fa/0xbc0 [ 504.837987][ C1] ? nsim_dev_trap_report_work+0x72e/0xbc0 [ 504.838006][ C1] nsim_dev_trap_report_work+0x7fa/0xbc0 [ 504.838036][ C1] ? process_scheduled_works+0xa25/0x1830 [ 504.838059][ C1] process_scheduled_works+0xb02/0x1830 [ 504.838124][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 504.838152][ C1] ? assign_work+0x3d5/0x5e0 [ 504.838176][ C1] worker_thread+0xa50/0xfc0 [ 504.838217][ C1] kthread+0x388/0x470 [ 504.838234][ C1] ? __pfx_worker_thread+0x10/0x10 [ 504.838254][ C1] ? __pfx_kthread+0x10/0x10 [ 504.838271][ C1] ret_from_fork+0x51e/0xb90 [ 504.838300][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 504.838321][ C1] ? __switch_to+0xc7d/0x1450 [ 504.838350][ C1] ? __pfx_kthread+0x10/0x10 [ 504.838366][ C1] ret_from_fork_asm+0x1a/0x30 [ 504.838393][ C1] [ 504.838398][ C1] task:ktimers/1 state:R running task stack:23344 pid:29 tgid:29 ppid:2 task_flags:0x4208040 flags:0x00080000 [ 504.838445][ C1] Call Trace: [ 504.838450][ C1] [ 504.838458][ C1] __schedule+0x1553/0x5240 [ 504.838496][ C1] ? __pfx___schedule+0x10/0x10 [ 504.838513][ C1] ? lockdep_hardirqs_on+0x7a/0x110 [ 504.838534][ C1] ? rcu_is_watching+0x15/0xb0 [ 504.838557][ C1] ? preempt_schedule_thunk+0x16/0x30 [ 504.838576][ C1] preempt_schedule_common+0x82/0xd0 [ 504.838597][ C1] preempt_schedule_thunk+0x16/0x30 [ 504.838619][ C1] rt_spin_lock+0x316/0x400 [ 504.838635][ C1] ? lockdep_hardirqs_on+0x7a/0x110 [ 504.838656][ C1] ? __pfx_rt_spin_lock+0x10/0x10 [ 504.838671][ C1] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 504.838687][ C1] ? reacquire_held_locks+0x104/0x190 [ 504.838710][ C1] snd_seq_timer_get_cur_time+0x8d/0x360 [ 504.838750][ C1] ? __pfx_snd_seq_timer_get_cur_time+0x10/0x10 [ 504.838776][ C1] ? rt_spin_unlock+0x160/0x200 [ 504.838794][ C1] ? snd_seq_prioq_cell_out+0x2ab/0x3e0 [ 504.838821][ C1] snd_seq_check_queue+0x2e2/0x580 [ 504.838841][ C1] ? rt_spin_lock+0x1e0/0x400 [ 504.838864][ C1] ? __pfx_snd_seq_check_queue+0x10/0x10 [ 504.838886][ C1] ? rt_spin_unlock+0x160/0x200 [ 504.838904][ C1] ? snd_seq_timer_interrupt+0x34f/0x470 [ 504.838928][ C1] ? rt_spin_unlock+0x160/0x200 [ 504.838946][ C1] ? __pfx_snd_seq_timer_interrupt+0x10/0x10 [ 504.838969][ C1] snd_timer_interrupt+0x10a8/0x1360 [ 504.839008][ C1] snd_hrtimer_callback+0x213/0x3a0 [ 504.839034][ C1] ? __pfx_snd_hrtimer_callback+0x10/0x10 [ 504.839055][ C1] __hrtimer_run_queues+0x55f/0xda0 [ 504.839090][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 504.839107][ C1] ? read_tsc+0x9/0x20 [ 504.839137][ C1] hrtimer_run_softirq+0x192/0x5d0 [ 504.839162][ C1] handle_softirqs+0x1de/0x6f0 [ 504.839198][ C1] ? smpboot_thread_fn+0x4d/0xa50 [ 504.839222][ C1] run_ktimerd+0x69/0x100 [ 504.839246][ C1] smpboot_thread_fn+0x541/0xa50 [ 504.839271][ C1] ? smpboot_thread_fn+0x4d/0xa50 [ 504.839301][ C1] kthread+0x388/0x470 [ 504.839317][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 504.839339][ C1] ? __pfx_kthread+0x10/0x10 [ 504.839356][ C1] ret_from_fork+0x51e/0xb90 [ 504.839380][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 504.839400][ C1] ? __switch_to+0xc7d/0x1450 [ 504.839421][ C1] ? __pfx_kthread+0x10/0x10 [ 504.839438][ C1] ret_from_fork_asm+0x1a/0x30 [ 504.839464][ C1] [ 504.839469][ C1] task:syz.4.415 state:R running task stack:22488 pid:7937 tgid:7937 ppid:5791 task_flags:0x400640 flags:0x00080000 [ 504.839515][ C1] Call Trace: [ 504.839519][ C1] [ 504.839528][ C1] __schedule+0x1553/0x5240 [ 504.839553][ C1] ? try_to_take_rt_mutex+0x840/0xb00 [ 504.839579][ C1] ? rtlock_slowlock_locked+0xfb/0x3c80 [ 504.839599][ C1] ? __pfx___schedule+0x10/0x10 [ 504.839629][ C1] preempt_schedule_irq+0x4d/0xa0 [ 504.839649][ C1] irqentry_exit+0x599/0x620 [ 504.839669][ C1] ? trace_irq_disable+0x3b/0x150 [ 504.839691][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 504.839708][ C1] RIP: 0010:lock_acquire+0x20b/0x2e0 [ 504.839722][ C1] Code: e9 30 ff ff ff e8 85 3d 82 09 f7 c3 00 02 00 00 0f 84 38 ff ff ff 65 48 8b 05 f1 fa ad 10 48 3b 44 24 30 75 33 fb 48 83 c4 38 <5b> 41 5c 41 5d 41 5e 41 5f 5d e9 56 fd 85 09 cc 48 8d 3d 5e 3e cd [ 504.839734][ C1] RSP: 0018:ffffc900050ce8e0 EFLAGS: 00000292 [ 504.839746][ C1] RAX: 3bd12b42a1999a00 RBX: 0000000000000246 RCX: 0000000000000046 [ 504.839756][ C1] RDX: 000000002b53cda5 RSI: ffffffff8d7bb822 RDI: ffffffff8ba65e80 [ 504.839767][ C1] RBP: 0000000000000000 R08: ffffffff8b24a1d0 R09: ffffffff8ddcb880 [ 504.839778][ C1] R10: dffffc0000000000 R11: fffffbfff1ed4617 R12: 0000000000000002 [ 504.839788][ C1] R13: ffffffff8ddcb880 R14: 0000000000000000 R15: 0000000000000000 [ 504.839803][ C1] ? rt_spin_lock+0x1e0/0x400 [ 504.839827][ C1] rt_spin_lock+0x1fc/0x400 [ 504.839843][ C1] ? rt_spin_lock+0x1e0/0x400 [ 504.839860][ C1] ? __pfx_rt_spin_lock+0x10/0x10 [ 504.839883][ C1] pmd_lock+0x7c/0x90 [ 504.839940][ C1] __get_user_pages+0x171e/0x2800 [ 504.839984][ C1] get_dump_page+0x1b5/0x410 [ 504.840007][ C1] ? __pfx_get_dump_page+0x10/0x10 [ 504.840030][ C1] ? __asan_memset+0x22/0x50 [ 504.840049][ C1] ? iov_iter_bvec+0xb8/0x180 [ 504.840112][ C1] dump_user_range+0x20a/0x12d0 [ 504.840163][ C1] ? __pfx_dump_user_range+0x10/0x10 [ 504.840189][ C1] ? elf_coredump_extra_notes_write+0x441/0x4d0 [ 504.840217][ C1] ? __pfx_elf_coredump_extra_notes_write+0x10/0x10 [ 504.840243][ C1] ? __kmalloc_cache_noprof+0x3a6/0x690 [ 504.840272][ C1] elf_core_dump+0x34c2/0x3ad0 [ 504.840300][ C1] ? __pfx_elf_core_dump+0x10/0x10 [ 504.840316][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 504.840332][ C1] ? irqentry_exit+0x176/0x620 [ 504.840351][ C1] ? asm_exc_page_fault+0x26/0x30 [ 504.840368][ C1] ? mas_ascend+0x304/0x890 [ 504.840413][ C1] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 504.840441][ C1] ? 0xffffffffff600000 [ 504.840463][ C1] coredump_write+0x1221/0x1920 [ 504.840500][ C1] ? __pfx_coredump_write+0x10/0x10 [ 504.840552][ C1] ? unshare_files+0xa8/0x140 [ 504.840570][ C1] vfs_coredump+0x36af/0x4280 [ 504.840608][ C1] ? __pfx_vfs_coredump+0x10/0x10 [ 504.840633][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 504.840649][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 504.840670][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 504.840689][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 504.840705][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 504.840727][ C1] ? unwind_next_frame+0xa5/0x23c0 [ 504.840756][ C1] ? is_bpf_text_address+0x26/0x2b0 [ 504.840781][ C1] ? is_bpf_text_address+0x292/0x2b0 [ 504.840802][ C1] ? is_bpf_text_address+0x26/0x2b0 [ 504.840825][ C1] ? kernel_text_address+0xa5/0xe0 [ 504.840844][ C1] ? __kernel_text_address+0xd/0x30 [ 504.840861][ C1] ? unwind_get_return_address+0x4d/0x90 [ 504.840875][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 504.840897][ C1] ? arch_stack_walk+0xfb/0x150 [ 504.840920][ C1] ? stack_trace_save+0xa9/0x100 [ 504.840940][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 504.840962][ C1] ? stack_depot_save_flags+0x33/0x810 [ 504.840982][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 504.840998][ C1] ? kmem_cache_free+0x185/0x6b0 [ 504.841020][ C1] ? get_signal+0xa29/0x1310 [ 504.841039][ C1] ? arch_do_signal_or_restart+0xbc/0x830 [ 504.841057][ C1] ? irqentry_exit+0x176/0x620 [ 504.841076][ C1] ? asm_exc_page_fault+0x26/0x30 [ 504.841101][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 504.841150][ C1] ? rt_spin_unlock+0x14f/0x200 [ 504.841169][ C1] ? rt_spin_unlock+0x160/0x200 [ 504.841187][ C1] get_signal+0x10d7/0x1310 [ 504.841222][ C1] arch_do_signal_or_restart+0xbc/0x830 [ 504.841244][ C1] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 504.841278][ C1] irqentry_exit+0x176/0x620 [ 504.841299][ C1] ? trace_irq_disable+0x3b/0x150 [ 504.841321][ C1] asm_exc_page_fault+0x26/0x30 [ 504.841336][ C1] RIP: 0033:0x7f81bd1ec7a1 [ 504.841347][ C1] RSP: 002b:fffffffffffffe70 EFLAGS: 00010217 [ 504.841360][ C1] RAX: 0000000000000000 RBX: 00007f81bd466180 RCX: 00007f81bd1ec799 [ 504.841370][ C1] RDX: 0000000000000000 RSI: fffffffffffffe70 RDI: 0000000000008000 [ 504.841380][ C1] RBP: 00007f81bd282c99 R08: 0000000000000000 R09: 0000000000000000 [ 504.841389][ C1] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 504.841398][ C1] R13: 00007f81bd466218 R14: 00007f81bd466180 R15: 00007ffc24e14298 [ 504.841421][ C1] [ 504.841427][ C1] rcu: rcu_preempt kthread starved for 10502 jiffies! g25381 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 504.841444][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 504.841451][ C1] rcu: RCU grace-period kthread stack dump: [ 504.841456][ C1] task:rcu_preempt state:R running task stack:27560 pid:18 tgid:18 ppid:2 task_flags:0x208040 flags:0x00080000 [ 504.841506][ C1] Call Trace: [ 504.841511][ C1] [ 504.841519][ C1] __schedule+0x1553/0x5240 [ 504.841541][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 504.841570][ C1] ? __pfx___schedule+0x10/0x10 [ 504.841595][ C1] ? schedule+0x90/0x360 [ 504.841616][ C1] schedule+0x164/0x360 [ 504.841636][ C1] schedule_timeout+0x158/0x2c0 [ 504.841657][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 504.841677][ C1] ? __pfx_process_timeout+0x10/0x10 [ 504.841699][ C1] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 504.841720][ C1] ? prepare_to_swait_event+0x340/0x370 [ 504.841754][ C1] rcu_gp_fqs_loop+0x312/0x11d0 [ 504.841780][ C1] ? lockdep_hardirqs_on+0x7a/0x110 [ 504.841801][ C1] ? rcu_gp_init+0x1313/0x15b0 [ 504.841829][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 504.841851][ C1] ? _raw_spin_unlock_irq+0x2e/0x50 [ 504.841876][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 504.841900][ C1] rcu_gp_kthread+0x9e/0x2b0 [ 504.841925][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 504.841947][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 504.841969][ C1] ? __kthread_parkme+0x7a/0x1f0 [ 504.841992][ C1] ? __kthread_parkme+0x19c/0x1f0 [ 504.842019][ C1] kthread+0x388/0x470 [ 504.842035][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 504.842057][ C1] ? __pfx_kthread+0x10/0x10 [ 504.842074][ C1] ret_from_fork+0x51e/0xb90 [ 504.842097][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 504.842122][ C1] ? __switch_to+0xc7d/0x1450 [ 504.842144][ C1] ? __pfx_kthread+0x10/0x10 [ 504.842160][ C1] ret_from_fork_asm+0x1a/0x30 [ 504.842186][ C1] [ 504.842191][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 504.842205][ C1] Sending NMI from CPU 1 to CPUs 0: [ 504.842263][ C0] NMI backtrace for cpu 0 [ 504.842299][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 504.842318][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 504.842329][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 504.842354][ C0] Code: ce 5d 02 e9 13 c4 03 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 53 1c 27 00 fb f4 cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 [ 504.842369][ C0] RSP: 0018:ffffffff8da07dc0 EFLAGS: 00000242 [ 504.842384][ C0] RAX: 00000000006b76b3 RBX: ffffffff81994bed RCX: 0000000080000001 [ 504.842397][ C0] RDX: 0000000000000001 RSI: ffffffff8d55f1ba RDI: ffffffff8ba65e80 [ 504.842410][ C0] RBP: ffffffff8da07eb0 R08: ffff8880b8833f1b R09: 1ffff110171067e3 [ 504.842423][ C0] R10: dffffc0000000000 R11: ffffed10171067e4 R12: ffffffff8f6a30b0 [ 504.842437][ C0] R13: 1ffffffff1b605d8 R14: 0000000000000000 R15: 0000000000000000 [ 504.842448][ C0] FS: 0000000000000000(0000) GS:ffff88812633f000(0000) knlGS:0000000000000000 [ 504.842463][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 504.842475][ C0] CR2: 00007ffe85e79658 CR3: 000000005bf12000 CR4: 00000000003526f0 [ 504.842491][ C0] Call Trace: [ 504.842498][ C0] [ 504.842505][ C0] default_idle+0x9/0x20 [ 504.842531][ C0] default_idle_call+0x72/0xb0 [ 504.842559][ C0] do_idle+0x1bd/0x500 [ 504.842581][ C0] ? lockdep_hardirqs_on+0x7a/0x110 [ 504.842615][ C0] ? __pfx_do_idle+0x10/0x10 [ 504.842642][ C0] cpu_startup_entry+0x43/0x60 [ 504.842663][ C0] rest_init+0x2de/0x300 [ 504.842681][ C0] start_kernel+0x385/0x3d0 [ 504.842824][ C0] x86_64_start_reservations+0x24/0x30 [ 504.842866][ C0] x86_64_start_kernel+0x143/0x1c0 [ 504.842886][ C0] common_startup_64+0x13e/0x147 [ 504.842914][ C0] [ 684.845757][ C0] BUG: workqueue lockup - pool cpus=0 node=0 flags=0x0 nice=0 stuck for 284s! [ 684.845933][ C0] Showing busy workqueues and worker pools: [ 684.845957][ C0] workqueue events: flags=0x100 [ 684.846059][ C0] pwq 2: cpus=0 node=0 flags=0x0 nice=0 active=12 refcnt=13 [ 684.846160][ C0] pending: 5*nsim_dev_hwstats_traffic_work, ovs_dp_masks_rebalance, psi_avgs_work, 3*ovs_dp_masks_rebalance, rht_deferred_worker, vmstat_shepherd [ 684.846680][ C0] pwq 6: cpus=1 node=0 flags=0x0 nice=0 active=12 refcnt=13 [ 684.846795][ C0] pending: 2*release_one_tty, 2*nsim_dev_hwstats_traffic_work, psi_avgs_work, 3*ovs_dp_masks_rebalance, 2*psi_avgs_work, switchdev_deferred_process_work, rht_deferred_worker [ 684.847366][ C0] workqueue events_long: flags=0x100 [ 684.847398][ C0] pwq 2: cpus=0 node=0 flags=0x0 nice=0 active=10 refcnt=11 [ 684.847505][ C0] pending: 6*defense_work_handler, br_multicast_gc_work, 3*br_fdb_cleanup [ 684.847749][ C0] pwq 6: cpus=1 node=0 flags=0x0 nice=0 active=5 refcnt=6 [ 684.847854][ C0] pending: 3*defense_work_handler, br_multicast_gc_work, br_fdb_cleanup [ 684.848043][ C0] workqueue events_unbound: flags=0x2 [ 684.848074][ C0] pwq 8: cpus=0-1 flags=0x4 nice=0 active=16 refcnt=17 [ 684.848161][ C0] in-flight: 7720:nsim_dev_trap_report_work [ 684.848260][ C0] pending: 4*nsim_dev_trap_report_work, toggle_allocation_gate, 2*nsim_dev_trap_report_work, 6*cfg80211_wiphy_work, 2*idle_cull_fn [ 684.848655][ C0] pwq 8: cpus=0-1 flags=0x4 nice=0 active=10 refcnt=11 [ 684.848751][ C0] pending: crng_reseed, flush_memcg_stats_dwork, 3*idle_cull_fn, 5*macvlan_process_broadcast [ 684.849257][ C0] workqueue events_freezable: flags=0x104 [ 684.849282][ C0] pwq 2: cpus=0 node=0 flags=0x0 nice=0 active=1 refcnt=2 [ 684.849394][ C0] pending: update_balloon_stats_func [ 684.849516][ C0] workqueue events_power_efficient: flags=0x180 [ 684.849548][ C0] pwq 2: cpus=0 node=0 flags=0x0 nice=0 active=6 refcnt=7 [ 684.849653][ C0] pending: gc_worker, 2*neigh_managed_work, 2*neigh_periodic_work, check_lifetime [ 684.849924][ C0] pwq 6: cpus=1 node=0 flags=0x0 nice=0 active=6 refcnt=7 [ 684.850047][ C0] pending: wg_ratelimiter_gc_entries, do_cache_clean, 4*check_lifetime [ 684.850251][ C0] workqueue kvfree_rcu_reclaim: flags=0xa [ 684.850283][ C0] pwq 8: cpus=0-1 flags=0x4 nice=0 active=1 refcnt=2 [ 684.850385][ C0] pending: kfree_rcu_monitor [ 684.850485][ C0] pwq 8: cpus=0-1 flags=0x4 nice=0 active=2 refcnt=3 [ 684.850579][ C0] pending: kfree_rcu_work, kfree_rcu_monitor [ 684.850693][ C0] workqueue netns: flags=0x6000a [ 684.850724][ C0] pwq 8: cpus=0-1 flags=0x4 nice=0 active=1 refcnt=5 [ 684.850811][ C0] in-flight: 1013:cleanup_net [ 684.850926][ C0] inactive: cleanup_net [ 684.851009][ C0] workqueue mm_percpu_wq: flags=0x108 [ 684.851040][ C0] pwq 2: cpus=0 node=0 flags=0x0 nice=0 active=1 refcnt=2 [ 684.851138][ C0] pending: vmstat_update [ 684.851212][ C0] pwq 6: cpus=1 node=0 flags=0x0 nice=0 active=1 refcnt=2 [ 684.851351][ C0] pending: vmstat_update [ 684.851443][ C0] workqueue writeback: flags=0x4a [ 684.851474][ C0] pwq 8: cpus=0-1 flags=0x4 nice=0 active=1 refcnt=2 [ 684.851567][ C0] pending: wb_workfn [ 684.851730][ C0] workqueue kblockd: flags=0x18 [ 684.851762][ C0] pwq 3: cpus=0 node=0 flags=0x0 nice=-20 active=1 refcnt=2 [ 684.851869][ C0] pending: blk_mq_timeout_work [ 684.852014][ C0] workqueue gid-cache-wq: flags=0x20002 [ 684.852046][ C0] pwq 8: cpus=0-1 flags=0x4 nice=0 active=1 refcnt=4 [ 684.852145][ C0] pending: update_gid_event_work_handler [ 684.852397][ C0] workqueue mld: flags=0x40108 [ 684.852421][ C0] pwq 2: cpus=0 node=0 flags=0x0 nice=0 active=1 refcnt=2 [ 684.852525][ C0] pending: mld_ifc_work [ 684.852644][ C0] workqueue ipv6_addrconf: flags=0x6000a [ 684.852682][ C0] pwq 8: cpus=0-1 flags=0x4 nice=0 active=1 refcnt=8 [ 684.852800][ C0] in-flight: 41:addrconf_dad_work [ 684.852909][ C0] inactive: 4*addrconf_verify_work [ 684.853005][ C0] workqueue krxrpcd: flags=0x2001a [ 684.853036][ C0] pwq 9: cpus=0-1 node=0 flags=0x4 nice=-20 active=1 refcnt=10 [ 684.853233][ C0] pending: rxrpc_peer_keepalive_worker [ 684.853334][ C0] inactive: 6*rxrpc_peer_keepalive_worker [ 684.853398][ C0] workqueue bat_events: flags=0x6000a [ 684.853409][ C0] pwq 8: cpus=0-1 flags=0x4 nice=0 active=1 refcnt=50 [ 684.853442][ C0] pending: batadv_mcast_mla_update [ 684.853501][ C0] inactive: 5*batadv_mcast_mla_update, 6*batadv_iv_send_outstanding_bat_ogm_packet, batadv_bla_periodic_work, batadv_iv_send_outstanding_bat_ogm_packet, batadv_dat_purge, 6*batadv_iv_send_outstanding_bat_ogm_packet, 6*batadv_purge_orig, 4*batadv_iv_send_outstanding_bat_ogm_packet, 6*batadv_tt_purge, batadv_dat_purge, batadv_bla_periodic_work, batadv_dat_purge, batadv_bla_periodic_work, 2*batadv_dat_purge, 2*batadv_bla_periodic_work, batadv_dat_purge, batadv_bla_periodic_work [ 684.854503][ C0] workqueue wg-kex-wg0: flags=0x6 [ 684.854534][ C0] pwq 8: cpus=0-1 flags=0x4 nice=0 active=1 refcnt=2 [ 684.854634][ C0] pending: wg_packet_handshake_send_worker [ 684.854718][ C0] pwq 8: cpus=0-1 flags=0x4 nice=0 active=1 refcnt=2 [ 684.854813][ C0] pending: wg_packet_handshake_send_worker [ 684.854889][ C0] workqueue wg-crypt-wg0: flags=0x128 [ 684.854921][ C0] pwq 2: cpus=0 node=0 flags=0x0 nice=0 active=1 refcnt=2 [ 684.855027][ C0] pending: wg_packet_encrypt_worker [ 684.855112][ C0] workqueue wg-kex-wg1: flags=0x6 [ 684.855136][ C0] pwq 8: cpus=0-1 flags=0x4 nice=0 active=1 refcnt=2 [ 684.855229][ C0] pending: wg_packet_handshake_send_worker [ 684.855302][ C0] pwq 8: cpus=0-1 flags=0x4 nice=0 active=1 refcnt=2 [ 684.855402][ C0] pending: wg_packet_handshake_send_worker [ 684.855504][ C0] workqueue wg-kex-wg0: flags=0x6 [ 684.855535][ C0] pwq 8: cpus=0-1 flags=0x4 nice=0 active=2 refcnt=3 [ 684.855631][ C0] pending: 2*wg_packet_handshake_send_worker [ 684.855716][ C0] workqueue wg-crypt-wg0: flags=0x128 [ 684.855740][ C0] pwq 2: cpus=0 node=0 flags=0x0 nice=0 active=1 refcnt=2 [ 684.855852][ C0] pending: wg_packet_tx_worker [ 684.855926][ C0] workqueue wg-kex-wg2: flags=0x6 [ 684.855949][ C0] pwq 8: cpus=0-1 flags=0x4 nice=0 active=1 refcnt=2 [ 684.856046][ C0] pending: wg_packet_handshake_send_worker [ 684.856122][ C0] pwq 8: cpus=0-1 flags=0x4 nice=0 active=1 refcnt=2 [ 684.856217][ C0] pending: wg_packet_handshake_send_worker [ 684.856298][ C0] workqueue wg-kex-wg1: flags=0x6 [ 684.856328][ C0] pwq 8: cpus=0-1 flags=0x4 nice=0 active=1 refcnt=2 [ 684.856422][ C0] pending: wg_packet_handshake_send_worker [ 684.856473][ C0] pwq 8: cpus=0-1 flags=0x4 nice=0 active=1 refcnt=2 [ 684.856526][ C0] pending: wg_packet_handshake_send_worker [ 684.856633][ C0] workqueue wg-kex-wg2: flags=0x6 [ 684.856660][ C0] pwq 8: cpus=0-1 flags=0x4 nice=0 active=2 refcnt=3 [ 684.856755][ C0] pending: 2*wg_packet_handshake_send_worker [ 684.856849][ C0] workqueue wg-kex-wg0: flags=0x6 [ 684.856873][ C0] pwq 8: cpus=0-1 flags=0x4 nice=0 active=1 refcnt=2 [ 684.856970][ C0] pending: wg_packet_handshake_send_worker [ 684.857043][ C0] pwq 8: cpus=0-1 flags=0x4 nice=0 active=1 refcnt=2 [ 684.857117][ C0] pending: wg_packet_handshake_send_worker [ 684.857142][ C0] workqueue wg-crypt-wg0: flags=0x128 [ 684.857151][ C0] pwq 2: cpus=0 node=0 flags=0x0 nice=0 active=1 refcnt=2 [ 684.857185][ C0] pending: wg_packet_encrypt_worker [ 684.857254][ C0] workqueue wg-kex-wg1: flags=0x6 [ 684.857284][ C0] pwq 8: cpus=0-1 flags=0x4 nice=0 active=2 refcnt=3 [ 684.857410][ C0] pending: 2*wg_packet_handshake_send_worker [ 684.857502][ C0] workqueue wg-kex-wg2: flags=0x6 [ 684.857534][ C0] pwq 8: cpus=0-1 flags=0x4 nice=0 active=1 refcnt=2 [ 684.857668][ C0] pending: wg_packet_handshake_send_worker [ 684.857741][ C0] pwq 8: cpus=0-1 flags=0x4 nice=0 active=1 refcnt=2 [ 684.857848][ C0] pending: wg_packet_handshake_send_worker [ 684.857981][ C0] workqueue hci1: flags=0x20012 [ 684.858027][ C0] pwq 9: cpus=0-1 node=0 flags=0x4 nice=-20 active=1 refcnt=4 [ 684.858165][ C0] pending: hci_conn_timeout [ 684.858298][ C0] workqueue hci4: flags=0x20012 [ 684.858329][ C0] pwq 9: cpus=0-1 node=0 flags=0x4 nice=-20 active=1 refcnt=4 [ 684.858434][ C0] pending: hci_conn_timeout [ 684.858548][ C0] pool 8: cpus=0-1 flags=0x4 nice=0 hung=285s workers=18 idle: 2135 6159 12 94 49 1118 13 5952 157 5921 5951 5953 1112 67 5999 [ 684.859055][ C0] Showing backtraces of running workers in stalled CPU-bound worker pools: [ 684.878874][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 684.879055][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 687.053654][ T8008] Bluetooth: hci4: command 0x0406 tx timeout [ 687.053702][ T8008] Bluetooth: hci1: command 0x0406 tx timeout [ 689.108413][ T5809] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 689.122372][ T5809] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 689.144564][ T5809] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 689.170851][ T5809] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 689.171640][ T5809] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 SYZFAIL: failed to send rpc fd=3 want=4704 sent=0 n=-1 (errno 32: Broken pipe) [ 691.213611][ T5808] Bluetooth: hci2: command tx timeout [ 693.271538][ T1013] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 693.497534][ T1013] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 693.738255][ T1013] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 693.956204][ T1013] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 694.389992][ T1013] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 694.618875][ T1013] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 694.817644][ T1013] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0