last executing test programs: 2m18.62176574s ago: executing program 1 (id=219): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(arc4-generic)\x00'}, 0x58) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$loop(&(0x7f0000000040), 0x7, 0x20080) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) r3 = epoll_create1(0x0) fcntl$dupfd(r3, 0x2, 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f0000724000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000290000/0x4000)=nil) r6 = syz_open_dev$usbfs(&(0x7f0000000100), 0x775, 0x8000) munlockall() ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r6, 0x3ba0, &(0x7f0000000140)={0x48, 0x2, r2}) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r7, 0x6, 0x23, &(0x7f0000000240)={&(0x7f0000330000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f00000001c0)=""/126, 0x7e, 0x0, 0x0}, &(0x7f0000000380)=0x40) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) dup(r4) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) lsetxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f0000000540)={{}, {0x4, 0xffff}}, 0x24, 0x0) write$rfkill(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x1}, 0x8) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r1, 0x3ba0, &(0x7f00000003c0)={0x48, 0xc, r2, 0x0, 0x0, 0x200000000}) ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000000)={0x28, 0x6, r2, 0x0, &(0x7f0000ffb000/0x4000)=nil, 0x4000}) 2m11.561833658s ago: executing program 1 (id=230): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="d8564b45d6ed740000", @ANYRES16=0x0, @ANYBLOB="20002abd7000fddbdf250a000000080001007063690011000200303030303a30303a31302e300000000008000300000000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008000300020000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008000300010000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000800030000000000"], 0xb0}, 0x1, 0x0, 0x0, 0x48}, 0x40) socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), r0) r1 = socket(0x2a, 0x2, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) r2 = syz_open_dev$vbi(&(0x7f0000000080), 0x1, 0x2) ioctl$VIDIOC_S_OUTPUT(r2, 0xc004562f, &(0x7f00000000c0)=0x1) ioctl$VIDIOC_S_DV_TIMINGS(r2, 0xc0845657, &(0x7f0000000380)={0x0, @bt={0x12, 0x7c5, 0x1, 0x1, 0xd59f80, 0x4, 0x5, 0x7, 0x8, 0x5, 0x722, 0xe72, 0x8, 0x8, 0x2e, 0x8, {0xffff945a, 0x1}, 0x3, 0xed}}) open(&(0x7f0000000180)='.\x02\x00', 0x1a081, 0x37) mkdirat(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = syz_open_dev$vbi(&(0x7f0000000080), 0x1, 0x2) ioctl$VIDIOC_S_DV_TIMINGS(r3, 0xc0845657, &(0x7f0000000380)={0x0, @bt={0x12, 0x7c5, 0x1, 0x3, 0xd59f80, 0x4, 0x5, 0x7, 0x8, 0x5, 0x722, 0xe72, 0x7, 0x2800, 0x2e, 0x8, {0xffff945a, 0x1}, 0x2, 0xed}}) 2m10.351506014s ago: executing program 1 (id=234): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40000103, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10138, 0x2, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) r3 = socket$inet6(0xa, 0x1, 0x0) r4 = socket$key(0xf, 0x3, 0x2) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000340)={0x0, @in6={{0xa, 0x4e24, 0x2c1, @local, 0xfffffff9}}, 0x8, 0x1b56, 0x200, 0x5, 0x0, 0x0, 0x9}, &(0x7f00000000c0)=0x9c) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x23, &(0x7f0000000280)={r5, 0xffff}, 0x8) sendmsg$key(r4, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="020300090a0000000000000004000000030006000000000002000000ac1414000000000000000000020001000000000000000002fffffffb030005000000000002"], 0x50}}, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4}}, 0xe8) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={0x2, 0x9, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 2m8.489226231s ago: executing program 1 (id=237): r0 = socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) lseek(r4, 0x851, 0x0) execve(&(0x7f00000190c0)='./file0\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x1c3425, 0x0) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) execve(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000180)={[&(0x7f0000000300)=' wO\xd5\xce\x82\x89r\xa0\r\xc4Z\x15\xfds\x17g\n\xee\x9f\a0\xc3\x80\xbf\x80j$\xe6Z\xde\xf1pc\x96\x8f\xb5\x9d\xe3\x11m\x88~\xe3\xc7\xe3\t\xab\xbb@\xd9\xf8\xa2N\x03\xcf\xe4\xd6\x0ew\x10\xc2\xaa\x84bC\xc8\xd0\xe07\xa1\rIa\xb1^\xc5WG\xccV\xd3\x91\x84x\x9d\x8eg\x84\xeb\x9e;\x8f\xa1\xa3\xcf]@\x82\xcf\x01$;\xd5\xc0\xa8\xc8r\x0e_\xac\xef\xf5\r\xd5Q\v\b#E\xcf@a\xa2\xaa#\x13S\x04\x12$\xcb\xbeV!\x1d\xc7\x84_\\ \xc7oh$\xc9\x06m']}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r4, &(0x7f00000003c0)={&(0x7f0000000080), 0xc, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x4000) sendmsg$IPSET_CMD_LIST(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x14}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="580000001000030400000000fedbdf2500007400", @ANYRES32=0x0, @ANYBLOB="0008000007500500380012800b0001006272696467650000280002800500190002000000050017000000000008000100810000000a0014080000000000000000"], 0x58}, 0x1, 0x0, 0x0, 0x800}, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000002c0)={{{@in, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6=@private2}}, &(0x7f0000000000)=0xe8) setuid(r6) 2m6.597275841s ago: executing program 1 (id=239): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) r4 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x854}, 0x0) sendmsg$nl_route_sched(r4, 0x0, 0x880) r5 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r5, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x41, &(0x7f0000000000)=0x655e, 0x4) r6 = dup2(r5, r5) write$tun(r6, &(0x7f0000000040)=ANY=[@ANYRES64, @ANYRES8], 0x46) recvmmsg(r6, &(0x7f00000049c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2000, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r7) sendmsg$NLBL_CIPSOV4_C_ADD(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x1c, r8, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}]}, 0x1c}}, 0x0) 2m5.466135655s ago: executing program 1 (id=243): timer_create(0x3, 0x0, &(0x7f0000000080)) timer_settime(0x0, 0x1, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r3, 0x0, 0x1e0000}, 0x18) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'trusted:', 'syz', 0x20, 0xe8c}, 0x2d, 0xfffffffffffffff9) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) r4 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x20100, 0x0) ioctl$VIDIOC_S_INPUT(r4, 0xc0045627, &(0x7f0000000040)=0x2) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) r5 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x89e2, &(0x7f0000000340)={r5}) ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x89e2, &(0x7f0000000080)={r5}) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000640)="0a001c008e9381064e81f7a2db44b9b545c7910006007c09", 0x18}], 0x1}, 0x40008c4) ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x89e3, &(0x7f0000000180)={r5, r7}) timer_delete(0x0) r8 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0) 1m49.709557492s ago: executing program 32 (id=243): timer_create(0x3, 0x0, &(0x7f0000000080)) timer_settime(0x0, 0x1, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r3, 0x0, 0x1e0000}, 0x18) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'trusted:', 'syz', 0x20, 0xe8c}, 0x2d, 0xfffffffffffffff9) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) r4 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x20100, 0x0) ioctl$VIDIOC_S_INPUT(r4, 0xc0045627, &(0x7f0000000040)=0x2) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) r5 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x89e2, &(0x7f0000000340)={r5}) ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x89e2, &(0x7f0000000080)={r5}) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000640)="0a001c008e9381064e81f7a2db44b9b545c7910006007c09", 0x18}], 0x1}, 0x40008c4) ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x89e3, &(0x7f0000000180)={r5, r7}) timer_delete(0x0) r8 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0) 1m32.296078858s ago: executing program 0 (id=288): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r1, 0x0, 0xd}, 0x18) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/meminfo\x00', 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2a}}, 0x10) connect$inet(r3, &(0x7f0000000480)={0x2, 0x4e21, @multicast2}, 0x10) sendfile(r3, r2, 0x0, 0x20000023893) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_SET(r2, &(0x7f0000000600)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2105000}, 0xc, &(0x7f0000000480)={&(0x7f0000000880)=ANY=[@ANYRESOCT, @ANYRES16=r4, @ANYBLOB="02002cbd7000fddbdf250500800c00038008000200ff07000008000200010000803400038008000100ccc100000800020068d200000800010008000000080001007e000000080002000200000008000200100000003dfacb78d0092bec080001000700000008000100080000005400098008000200d00000000800000008000200040000000800020001800000000200f498000008000200020000000800010002000000080002000700080014000980080001000100008008000100050000000c00098008000100080000000e8ab2426c5b000000000000000000"], 0xe4}, 0x1, 0x0, 0x0, 0x2000000}, 0x80) openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) r5 = syz_open_dev$sndpcmp(&(0x7f0000000b00), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r5, 0xc2604110, &(0x7f0000000040)={0x0, [[0x20, 0x0, 0xfffffffc, 0x20000000, 0x0, 0xb, 0x2000], [0x10000, 0x0, 0x3, 0x4, 0x0, 0x0, 0x9, 0xe], [0x7, 0x0, 0x30, 0x0, 0x0, 0x10]], '\x00', [{}, {0x4}, {}, {0x0, 0x8}, {0x6, 0x7}, {0x8000000, 0x4005f, 0x1}, {0x1}, {0x1}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x2, 0x8000}, {}, {0x0, 0x400000}], '\x00', 0x1000}) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={0x0}}, 0x24004804) openat$kvm(0xffffffffffffff9c, 0x0, 0xec002, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2, 0x10010, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x9) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r6}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() 1m28.836603118s ago: executing program 0 (id=291): unshare(0x4040200) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) pipe2(0x0, 0x80000) syz_open_procfs(0x0, &(0x7f0000000100)='numa_maps\x00') syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) shutdown(0xffffffffffffffff, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) ptrace$pokeuser(0x6, r5, 0x358, 0x800000000000) ioctl$BTRFS_IOC_SNAP_DESTROY(0xffffffffffffffff, 0x5000940f, &(0x7f0000000080)={{}, "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"}) socket$nl_route(0x10, 0x3, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x8800) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@deltclass={0x24, 0x29, 0x20, 0x70bd6b, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0xc, 0x8}, {0x1, 0x6}, {0x8, 0x9}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0x5452, &(0x7f0000000140)) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x54, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8}, {0x4}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x6, 0x2, 0xbeef, 0x3ff, 0x2, 0xcdb9, 0xfffffff1}}, {0x4}}]}]}, 0x54}}, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f0000000280)={0xa, 0x2, 0x80000000, @mcast2}, 0x1c) 1m23.834869027s ago: executing program 0 (id=297): r0 = socket$nl_route(0x10, 0x3, 0x0) fsopen(0x0, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) r5 = openat$nullb(0xffffffffffffff9c, 0x0, 0x4000, 0x0) preadv2(r5, &(0x7f0000000080)=[{&(0x7f0000001200)=""/4096, 0x1000}], 0x1, 0x0, 0x0, 0x18) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$nl_sock_diag(0x10, 0x3, 0x4) r7 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000840), 0x121000, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) r9 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r9, 0x401c5820, &(0x7f00000008c0)={0xc0}) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x1d, 0x3, &(0x7f0000000340)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x8001}}, &(0x7f00000001c0)='syzkaller\x00', 0x400, 0xdb, &(0x7f0000000480)=""/219, 0x41000, 0x33, '\x00', 0x0, @lsm=0x2b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000580)={0x1, 0xa, 0x400, 0x12}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000008c0)=[0xffffffffffffffff, 0xffffffffffffffff, r7, r8, r9], 0x0, 0x10, 0x4}, 0x94) sendmsg$TCPDIAG_GETSOCK(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[], 0x4c}}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) connect$inet(r1, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) shutdown(r1, 0x1) creat(&(0x7f0000000040)='./file0\x00', 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x4a, &(0x7f00000002c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="380000004900831c3ebd7000fedbdf250a000000", @ANYRES32, @ANYBLOB="0380000014000100fe880000000000000000000000000101080002"], 0x38}, 0x1, 0x0, 0x0, 0x10000}, 0x4) syz_emit_ethernet(0x76, &(0x7f0000000040)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x40, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x502, {0x0, 0x6, "508359", 0x0, 0x0, 0x0, @private1, @remote, [@hopopts={0x3a, 0x0, '\x00', [@pad1]}]}}}}}}}, 0x0) 1m22.863400554s ago: executing program 0 (id=298): r0 = socket(0xf, 0x2, 0x3) ioctl(r0, 0xf, &(0x7f0000000000)) r1 = socket(0x2c, 0x2, 0x0) r2 = socket(0x28, 0x805, 0x0) bind$vsock_stream(r2, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r2, 0x7) connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) r3 = syz_open_procfs(0x0, &(0x7f0000000380)='net/wireless\x00') preadv(r3, &(0x7f0000000540)=[{&(0x7f00000003c0)=""/165, 0xa5}], 0x10000000000002f1, 0x4, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r4 = openat$smackfs_ipv6host(0xffffff9c, &(0x7f0000000380), 0x2, 0x0) write$smackfs_ipv6host(r4, &(0x7f0000000000)=@l2={{0x4, 0x3a, 0x9, 0x3a, 0xf00, 0x3a, 0x9, 0x3a, 0x4080, 0x3a, 0xf55, 0x3a, 0x8, 0x3a, 0x38}, 0x2f, 0x50, 0x20, '*\xff\x03'}, 0xb1) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$vcsu(0x0, 0xffffffffffff7fff, 0xa000) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000001c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000580)=ANY=[@ANYBLOB="0180c20000020180a144f7dce95842318104bb3ac200000008004500001c00000000e61090780800ffff7b3b47bbba50086cc55112ff14aa000017c100089078553d887e16feffc29331aee739a8139671bdb84a7a5d8a26e1a29487560cedf5051ec5fdf861827c54f7810480bd95004a7d45ebe04ec32440b3e5c835fba42c47b0eafd085e439c461dfbd829f96a4a1e36813cf24c974a4372640bd9965f710cbe5f1e43b651f49b1013fc1940e464436ca5255e7cf72503cfae"], 0x0) close(r7) socket(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) r8 = syz_io_uring_setup(0x110, &(0x7f0000000200)={0x0, 0xfec9, 0x8, 0x5, 0x3d4}, &(0x7f0000000180)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r9, r10, &(0x7f00000002c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x1, 0x0, 0x0, 0x3, 0x0, 0x0, {0x0, 0x0, r2}}) io_uring_enter(r8, 0xdb4, 0x0, 0x0, 0x0, 0x0) 1m20.593878646s ago: executing program 0 (id=302): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x2}, 0x94) r4 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_ENUM_FRAMESIZES(r4, 0xc02c564a, &(0x7f0000000040)={0x6, 0x34324258, 0x3, @discrete={0x3b79f0fc, 0xffffffff}}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10) r5 = fanotify_init(0x0, 0x0) r6 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x1, 0x7fff0000}]}) timerfd_gettime(0xffffffffffffffff, 0x0) fanotify_mark(r5, 0x641, 0x48001018, r6, 0x0) r7 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f00000000c0)=0x3) ioctl$TCSETSW2(r7, 0x80047456, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r8, 0x0, 0x0) openat$mice(0xffffffffffffff9c, 0x0, 0x800000) ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000045}, 0x20000000) fanotify_mark(r5, 0x441, 0x4800001b, r6, 0x0) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r9, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)="d8000000200081044e81f782db44b90402000000e8fe55a1180015000600142603600e1209000a0000000401a80016000a00114006000000036010fab94dcf5c0468c1d67f6f94007134cf6ee0808856e408e8d8ef52b49816277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9db22fe7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006d8df969b3ef35ce3bb9ad809d561cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970100040000", 0xd8}], 0x1}, 0x0) 1m14.977245381s ago: executing program 0 (id=305): r0 = socket$inet(0x2, 0x1, 0x100) listen(r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x2000000, 0x12, r1, 0x0) r2 = syz_open_dev$media(&(0x7f0000000000), 0x8000009, 0x8800) ioctl$MEDIA_IOC_G_TOPOLOGY(r2, 0xc0487c04, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x5, &(0x7f0000000080)=0xfffffffa, 0x4) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x50) r4 = socket$kcm(0xa, 0x5, 0x0) r5 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r5, &(0x7f00000001c0)={0xa, 0x4e1f, 0x2, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) sendmsg$kcm(r4, &(0x7f00000017c0)={&(0x7f0000000180)=@l2tp6={0xa, 0x0, 0x0, @private2}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000200)='%', 0x1}], 0x1, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800ec39000000008400000007000000deaf000000000000"], 0x18}, 0x51) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="18000900fcffffdf0000000000001b009500000000"], &(0x7f0000000300)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r7}, 0x10) r8 = syz_genetlink_get_family_id$fou(&(0x7f0000000440), r1) sendmsg$FOU_CMD_DEL(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)={0x14, r8, 0xd03, 0x70bd25, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x8088}, 0x80) bpf$MAP_LOOKUP_BATCH(0x19, 0x0, 0x0) unshare(0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0x7, 0x80000001, 0x7fff, 0x1, 0x5, 0x9, 0xa4, 0x5, 0xc3cfbe86, 0x4, 0xc1, 0x4, 0x1, 0x3, 0x5, 0x101, 0x1000, 0x9, 0x3, 0x3, 0x1, 0xfffffffa, 0x0, 0x6, 0x9, 0x4, 0x7, 0x5, 0x100000, 0x7fffffff, 0x3, 0xd, 0xe, 0x2312, 0x100, 0x8, 0x1c00, 0x7, 0x7, 0xbed4, 0x8, 0x8000100, 0x3, 0x0, 0x11000, 0x6, 0x5, 0x79b, 0x2, 0x1, 0x7f, 0x4, 0xa, 0x7, 0xf, 0x101, 0xd7, 0x1fa0860a, 0x7, 0xaa, 0x81, 0x2, 0x180000, 0x4007, 0x8b, 0x5, 0x2af, 0xf7, 0x5, 0x2, 0x6, 0x9, 0x8, 0x7, 0x4009, 0x0, 0x4, 0x100002, 0x8, 0x74e, 0x0, 0x3, 0x0, 0x10001, 0x2, 0xffffffff, 0x6, 0x6, 0xc, 0x80000000, 0xfdffffff, 0x2, 0x2, 0x84, 0x100, 0x5, 0x252, 0x81, 0xf, 0x5, 0x20006, 0x5, 0x4, 0xb, 0x2, 0xd9a, 0x80000001, 0x4, 0xfffffffd, 0x7, 0x2, 0x80000000, 0x8, 0x0, 0x4, 0x2, 0x40, 0x8, 0x4, 0x4, 0x401, 0x8, 0x8, 0x8, 0x1, 0x1fc, 0xc60, 0xffffdfff]}}) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x72a}}, './file0\x00'}) 58.874873497s ago: executing program 33 (id=305): r0 = socket$inet(0x2, 0x1, 0x100) listen(r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x2000000, 0x12, r1, 0x0) r2 = syz_open_dev$media(&(0x7f0000000000), 0x8000009, 0x8800) ioctl$MEDIA_IOC_G_TOPOLOGY(r2, 0xc0487c04, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x5, &(0x7f0000000080)=0xfffffffa, 0x4) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x50) r4 = socket$kcm(0xa, 0x5, 0x0) r5 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r5, &(0x7f00000001c0)={0xa, 0x4e1f, 0x2, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) sendmsg$kcm(r4, &(0x7f00000017c0)={&(0x7f0000000180)=@l2tp6={0xa, 0x0, 0x0, @private2}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000200)='%', 0x1}], 0x1, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800ec39000000008400000007000000deaf000000000000"], 0x18}, 0x51) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="18000900fcffffdf0000000000001b009500000000"], &(0x7f0000000300)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r7}, 0x10) r8 = syz_genetlink_get_family_id$fou(&(0x7f0000000440), r1) sendmsg$FOU_CMD_DEL(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)={0x14, r8, 0xd03, 0x70bd25, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x8088}, 0x80) bpf$MAP_LOOKUP_BATCH(0x19, 0x0, 0x0) unshare(0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0x7, 0x80000001, 0x7fff, 0x1, 0x5, 0x9, 0xa4, 0x5, 0xc3cfbe86, 0x4, 0xc1, 0x4, 0x1, 0x3, 0x5, 0x101, 0x1000, 0x9, 0x3, 0x3, 0x1, 0xfffffffa, 0x0, 0x6, 0x9, 0x4, 0x7, 0x5, 0x100000, 0x7fffffff, 0x3, 0xd, 0xe, 0x2312, 0x100, 0x8, 0x1c00, 0x7, 0x7, 0xbed4, 0x8, 0x8000100, 0x3, 0x0, 0x11000, 0x6, 0x5, 0x79b, 0x2, 0x1, 0x7f, 0x4, 0xa, 0x7, 0xf, 0x101, 0xd7, 0x1fa0860a, 0x7, 0xaa, 0x81, 0x2, 0x180000, 0x4007, 0x8b, 0x5, 0x2af, 0xf7, 0x5, 0x2, 0x6, 0x9, 0x8, 0x7, 0x4009, 0x0, 0x4, 0x100002, 0x8, 0x74e, 0x0, 0x3, 0x0, 0x10001, 0x2, 0xffffffff, 0x6, 0x6, 0xc, 0x80000000, 0xfdffffff, 0x2, 0x2, 0x84, 0x100, 0x5, 0x252, 0x81, 0xf, 0x5, 0x20006, 0x5, 0x4, 0xb, 0x2, 0xd9a, 0x80000001, 0x4, 0xfffffffd, 0x7, 0x2, 0x80000000, 0x8, 0x0, 0x4, 0x2, 0x40, 0x8, 0x4, 0x4, 0x401, 0x8, 0x8, 0x8, 0x1, 0x1fc, 0xc60, 0xffffdfff]}}) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x72a}}, './file0\x00'}) 8.313992124s ago: executing program 3 (id=398): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETA(r0, 0x5406, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f00000006c0)=0x16) 7.647972935s ago: executing program 3 (id=399): syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x8, &(0x7f0000000500)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc}, [@map_idx_val={0x18, 0x3, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2}, @map_idx={0x18, 0x9, 0x5, 0x0, 0x8}, @ldst={0x0, 0x3, 0x0, 0x8, 0x7, 0xfffffffffffffff4, 0xffffffffffffffff}]}, &(0x7f0000000300)='syzkaller\x00'}, 0x94) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x8081, 0x0) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={0x0}}, 0x20004000) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000200), 0x4501, 0x0) bind$inet6(r2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) preadv(r4, &(0x7f00000015c0)=[{0x0}], 0x1, 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socket(0x10, 0x3, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000002}, 0x0, 0x0, 0x0, 0x1}}, 0xb8}}, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000580)=ANY=[@ANYBLOB="a0000000210001000000000000000000fc0200000000000000000000000000006401010200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="040000000000000050001100ac1414aa0000000000000000000a000000000000000000000000000000000000e0000002000000000000000000000000fe8000e6ffffff0000000000000000aa51040000020000005c000a00907fb7cfda4a2e8967d5a5db8b0b9ce293b5bc5c234288307af0f0a5578cfc6f13cfb7184f311c12b03622889b9519c05d9f"], 0xa0}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r7 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r7, 0x0, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r1, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$NONE(r0, 0x3b89, &(0x7f0000000180)={0x28, 0x1, r9, r1, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_DESTROY$stdev(r0, 0x3b80, &(0x7f0000000400)={0x8, r8}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 6.693104574s ago: executing program 3 (id=402): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) openat$comedi(0xffffffffffffff9c, &(0x7f000000b200)='/dev/comedi1\x00', 0x8040, 0x0) openat$audio1(0xffffffffffffff9c, &(0x7f0000000240), 0x88002, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x18, 0x10, &(0x7f0000000200)=ANY=[], &(0x7f0000000300)='syzkaller\x00', 0x81, 0xaa, &(0x7f0000000400)=""/170, 0x41000, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1000004, 0x810, r1, 0xa543c000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) r3 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x27, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) writev(r4, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) setsockopt$inet_msfilter(r3, 0x0, 0x29, &(0x7f00000000c0)=ANY=[], 0x14) syz_emit_vhci(&(0x7f0000000200)=ANY=[], 0xd) r5 = bpf$MAP_CREATE(0x0, 0x0, 0x50) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) setsockopt$inet_int(r3, 0x0, 0x18, &(0x7f0000000200)=0x1, 0x4) socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x86, &(0x7f00000000c0)=ANY=[@ANYRESDEC=0x0, @ANYRESDEC=r5], 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r6 = syz_open_procfs(0x0, &(0x7f0000000480)='numa_maps\x00') read$FUSE(r6, &(0x7f00000023c0)={0x2020}, 0x2020) preadv(r6, &(0x7f0000000080)=[{&(0x7f00000001c0)=""/133, 0x85}], 0x1, 0x114a, 0x0) read$FUSE(r6, &(0x7f0000004400)={0x2020}, 0x2020) ioctl$TIOCMBIC(0xffffffffffffffff, 0x5417, &(0x7f0000000080)) 3.472405916s ago: executing program 4 (id=406): setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000280)="ad56b6c582", 0x5) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040), 0x6) r2 = socket$unix(0x1, 0x1, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) recvmsg$unix(r2, 0x0, 0x0) open(0x0, 0x2000, 0x4) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='net/raw\x00') lseek(r3, 0x289e0cb5, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, 0x0, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r5, 0x400448ca, 0x0) r6 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETA(r6, 0x5406, &(0x7f0000000200)={0xffff, 0x0, 0x0, 0x800a, 0x2, "5f7300fbffffff00"}) ioctl$TIOCL_GETMOUSEREPORTING(r6, 0x5412, &(0x7f00000006c0)=0x16) fcntl$notify(0xffffffffffffffff, 0x402, 0x6) socket$igmp6(0xa, 0x3, 0x2) 2.863074031s ago: executing program 4 (id=407): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000200)={0xffff, 0x0, 0x0, 0x800a, 0x2, "5f7300fbffffff00"}) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, 0x0) 2.708095351s ago: executing program 3 (id=409): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000280000002800000007000000010000000000000f02000000000000000200000d010000000500e200010000000e000000030000000061"], 0x0, 0x47, 0x0, 0x1}, 0x28) 2.646276288s ago: executing program 4 (id=410): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x20, r4, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}]}, 0x20}}, 0x4000880) ioctl$EVIOCGMTSLOTS(0xffffffffffffffff, 0x8040450a, &(0x7f0000001ac0)=""/4096) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000000), 0x82000) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x128}, 0x0) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580), 0x100}, 0x0) select(0x2a, 0x0, 0x0, &(0x7f0000000400)={0xfefdffffffffffff, 0x1, 0x2, 0x300}, &(0x7f0000000440)={0x0, 0x2710}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000000)='source', 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mbind(&(0x7f00001fa000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x0, 0x0) prctl$PR_SET_IO_FLUSHER(0x39, 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) r7 = socket(0x1e, 0x1, 0x0) connect$tipc(r7, &(0x7f0000000040)=@id, 0x10) 2.536866975s ago: executing program 3 (id=411): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, &(0x7f0000000240)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, [@call={0x85, 0x0, 0x0, 0x7a}]}, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) 2.48916958s ago: executing program 2 (id=412): r0 = socket$alg(0x26, 0x5, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180500000000c800000000004b64ffec850000007d000000850000002a00000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r5, 0x6, 0x1, &(0x7f00000000c0)=@gcm_256={{0x7}, '\x00', "5171bb672965593497418688ac68cb126474cd3660dab9e2086e246728d7a040", '\x00\x00=*', "1202000000040030"}, 0x58) setsockopt$inet6_tcp_int(r5, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x18, 0xd, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000018110000", @ANYBLOB="0000000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) modify_ldt$write(0x1, &(0x7f00000003c0)={0x23, 0x1800, 0x400}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_ext={0x1c, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1f075, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x10000}, 0x94) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) ptrace$setregs(0xd, r6, 0x0, &(0x7f00000003c0)) ptrace$getregset(0x4205, r6, 0x1, &(0x7f0000000080)={&(0x7f00000000c0)=""/120, 0x78}) setsockopt$inet6_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x4e21, 0x7fff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x3}}, 0x0, 0x0, 0x4b, 0x0, "5d9ed5ab7ede1bcf73742bc36c0ea13d3dec33e0b7cc1ff724fe1906cf9f7945230bc5d9dfea4ffd1e48aaf9a42d97f58da594d5eb926f70f03d2d46f374a6b62ee9d04ac1bf0bef969bcbd8e4700616"}, 0xd8) connect$inet6(r5, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) r7 = accept4(r0, 0x0, 0x0, 0x80000) recvmsg(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000021840)=[{&(0x7f00000207c0)=""/39, 0x27}], 0x1}, 0x10041) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)) 2.428718007s ago: executing program 3 (id=413): socketpair$tipc(0x1e, 0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000040)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) pipe2$watch_queue(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) mount$fuse(0x0, 0x0, 0x0, 0x1048001, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r4, 0x89f0, &(0x7f0000000340)={'sit0\x00', &(0x7f0000000440)={'syztnl0\x00', 0x0, 0x20, 0x7800, 0x20, 0x81, {{0x6, 0x4, 0x3, 0x0, 0x18, 0x64, 0x0, 0x5, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x22}, @dev={0xac, 0x14, 0x14, 0x9}, {[@timestamp_addr={0x44, 0x4, 0xf4, 0x1, 0xd}]}}}}}) r5 = syz_open_dev$dri(&(0x7f0000000500), 0x73c, 0x6c440) socket$inet6(0xa, 0x80803, 0x87) ioctl$SNDCTL_DSP_SUBDIVIDE(r4, 0xc0045009, 0x0) syz_emit_ethernet(0x5e, &(0x7f00000004c0)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd603000bb00282b00fe800000000000000000000000000000fe8000000000000000000000000000aa87"], 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="280000006a0083130000000000000500000000000000000008000e0000000008"], 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x40040c0) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r7, 0x541c, &(0x7f00000000c0)={0x2, {0x2, 0x0, 0x300, 0x0, 0x8, 0x10}}) ioctl$DRM_IOCTL_DROP_MASTER(r5, 0x641f) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='gid_map\x00') writev(r8, &(0x7f00000015c0)=[{&(0x7f00000000c0)='w', 0x1}], 0x1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) 984.838812ms ago: executing program 2 (id=414): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="d8564b45d6ed740000", @ANYRES16=0x0, @ANYBLOB="20002abd7000fddbdf250a000000080001007063690011000200303030303a30303a31302e300000000008000300000000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008000300020000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008000300010000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000800030000000000"], 0xb0}, 0x1, 0x0, 0x0, 0x48}, 0x40) socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), r0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) ioctl$VIDIOC_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f0000000380)={0x0, @bt={0x12, 0x7c5, 0x1, 0x1, 0xd59f80, 0x4, 0x5, 0x7, 0x8, 0x5, 0x722, 0xe72, 0x8, 0x8, 0x2e, 0x8, {0xffff945a, 0x1}, 0x3, 0xed}}) r1 = syz_open_dev$vbi(&(0x7f0000000080), 0x1, 0x2) ioctl$VIDIOC_S_DV_TIMINGS(r1, 0xc0845657, &(0x7f0000000380)={0x0, @bt={0x12, 0x7c5, 0x1, 0x3, 0xd59f80, 0x4, 0x5, 0x7, 0x8, 0x5, 0x722, 0xe72, 0x7, 0x2800, 0x2e, 0x8, {0xffff945a, 0x1}, 0x2, 0xed}}) 852.526884ms ago: executing program 2 (id=415): futex(&(0x7f000000cffc), 0x5, 0x100000, 0x0, &(0x7f0000000000), 0x2000000) 759.962521ms ago: executing program 2 (id=416): setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000280)="ad56b6c582", 0x5) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040), 0x6) r2 = socket$unix(0x1, 0x1, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) recvmsg$unix(r2, 0x0, 0x0) open(0x0, 0x2000, 0x4) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='net/raw\x00') lseek(r3, 0x289e0cb5, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, 0x0, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r5, 0x400448ca, 0x0) r6 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETA(r6, 0x5406, &(0x7f0000000200)={0xffff, 0x0, 0x0, 0x800a, 0x2, "5f7300fbffffff00"}) ioctl$TIOCL_GETMOUSEREPORTING(r6, 0x5412, &(0x7f00000006c0)=0x16) fcntl$notify(0xffffffffffffffff, 0x402, 0x6) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000180)=@raw={'raw\x00', 0x8, 0x3, 0x4a8, 0x0, 0xffffffff, 0xffffffff, 0x150, 0xffffffff, 0x3d8, 0xffffffff, 0xffffffff, 0x3d8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x128, 0x150, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x508) 640.91157ms ago: executing program 4 (id=417): arch_prctl$ARCH_GET_UNTAG_MASK(0x4001, 0x0) 144.440134ms ago: executing program 4 (id=418): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000200)={0xffff, 0x0, 0x0, 0x800a, 0x2, "5f7300fbffffff00"}) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, 0x0) 93.801311ms ago: executing program 2 (id=419): quotactl$Q_SYNC(0xffffffff80000100, 0x1000000, 0x0, 0x0) 1.154342ms ago: executing program 2 (id=420): fsopen(&(0x7f0000000100)='adfs\x00', 0x0) 0s ago: executing program 4 (id=421): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) socketpair$unix(0x1, 0x2, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000002000)=""/102400, 0x19000) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) recvmsg(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000140)=""/30, 0x1e}], 0x1}, 0x10101) write$uinput_user_dev(r1, &(0x7f0000000800)={'syz1\x00', {0x0, 0x0, 0x1}, 0x2004a, [0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x296, 0x970, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, 0x0, 0x0, 0xf, 0x5], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x8, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x3, 0x800000, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x80000, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff], [0x11, 0x80000a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x3, 0x200, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0xfffffffd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3, 0x400], [0x0, 0x0, 0x74e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x930, 0x0, 0xa, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xbd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffe900, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe]}, 0x45c) ioctl$UI_DEV_CREATE(r1, 0x5501) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.54' (ED25519) to the list of known hosts. [ 73.103928][ T5822] cgroup: Unknown subsys name 'net' [ 73.256064][ T5822] cgroup: Unknown subsys name 'cpuset' [ 73.264752][ T5822] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 74.702120][ T5822] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 77.272214][ T5849] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 77.277601][ T5844] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 77.280163][ T5849] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 77.289163][ T5843] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 77.303644][ T5849] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 77.303668][ T5843] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 77.311331][ T5849] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 77.325556][ T5843] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 77.326621][ T5849] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 77.339958][ T5844] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 77.347511][ T5844] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 77.355428][ T5849] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 77.363270][ T5843] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 77.370891][ T5853] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 77.371877][ T5843] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 77.385454][ T5852] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 77.394141][ T5853] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 77.394175][ T5852] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 77.408558][ T5849] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 77.411729][ T5851] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 77.426417][ T5843] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 77.434259][ T5843] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 77.435780][ T5837] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 77.442614][ T5843] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 77.460592][ T5843] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 78.129273][ T5835] chnl_net:caif_netlink_parms(): no params data found [ 78.158451][ T5833] chnl_net:caif_netlink_parms(): no params data found [ 78.245221][ T5845] chnl_net:caif_netlink_parms(): no params data found [ 78.355769][ T5834] chnl_net:caif_netlink_parms(): no params data found [ 78.406369][ T5832] chnl_net:caif_netlink_parms(): no params data found [ 78.554105][ T5835] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.562339][ T5835] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.573140][ T5835] bridge_slave_0: entered allmulticast mode [ 78.580325][ T5835] bridge_slave_0: entered promiscuous mode [ 78.634845][ T5833] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.642023][ T5833] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.649797][ T5833] bridge_slave_0: entered allmulticast mode [ 78.657422][ T5833] bridge_slave_0: entered promiscuous mode [ 78.666283][ T5833] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.673652][ T5833] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.680823][ T5833] bridge_slave_1: entered allmulticast mode [ 78.688053][ T5833] bridge_slave_1: entered promiscuous mode [ 78.709454][ T5835] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.716752][ T5835] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.724489][ T5835] bridge_slave_1: entered allmulticast mode [ 78.731500][ T5835] bridge_slave_1: entered promiscuous mode [ 78.757638][ T5845] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.765316][ T5845] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.772990][ T5845] bridge_slave_0: entered allmulticast mode [ 78.780167][ T5845] bridge_slave_0: entered promiscuous mode [ 78.836570][ T5834] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.843949][ T5834] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.851164][ T5834] bridge_slave_0: entered allmulticast mode [ 78.858577][ T5834] bridge_slave_0: entered promiscuous mode [ 78.866445][ T5845] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.874835][ T5845] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.882238][ T5845] bridge_slave_1: entered allmulticast mode [ 78.890562][ T5845] bridge_slave_1: entered promiscuous mode [ 78.900664][ T5833] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.935551][ T5834] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.943082][ T5834] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.950310][ T5834] bridge_slave_1: entered allmulticast mode [ 78.960344][ T5834] bridge_slave_1: entered promiscuous mode [ 79.002162][ T5833] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.025417][ T5835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.067507][ T5834] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.079326][ T5845] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.104175][ T5835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.113508][ T5832] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.120700][ T5832] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.130028][ T5832] bridge_slave_0: entered allmulticast mode [ 79.138054][ T5832] bridge_slave_0: entered promiscuous mode [ 79.152208][ T5834] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.181204][ T5845] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.194364][ T5833] team0: Port device team_slave_0 added [ 79.223462][ T5832] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.230714][ T5832] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.238848][ T5832] bridge_slave_1: entered allmulticast mode [ 79.246319][ T5832] bridge_slave_1: entered promiscuous mode [ 79.291146][ T5833] team0: Port device team_slave_1 added [ 79.314650][ T5835] team0: Port device team_slave_0 added [ 79.335310][ T5834] team0: Port device team_slave_0 added [ 79.344655][ T5832] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.392350][ T5835] team0: Port device team_slave_1 added [ 79.400452][ T5834] team0: Port device team_slave_1 added [ 79.420389][ T5832] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.446198][ T5845] team0: Port device team_slave_0 added [ 79.453308][ T5846] Bluetooth: hci3: command tx timeout [ 79.453727][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.459028][ T5846] Bluetooth: hci2: command tx timeout [ 79.470020][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.498709][ T5833] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.533500][ T5846] Bluetooth: hci4: command tx timeout [ 79.533508][ T5843] Bluetooth: hci1: command tx timeout [ 79.533729][ T5843] Bluetooth: hci0: command tx timeout [ 79.555034][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.562105][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.588401][ T5834] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.615804][ T5845] team0: Port device team_slave_1 added [ 79.623069][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.630064][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.656912][ T5833] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.686036][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.693104][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.719582][ T5834] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.741018][ T5832] team0: Port device team_slave_0 added [ 79.766851][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.774173][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.800438][ T5835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.816045][ T5832] team0: Port device team_slave_1 added [ 79.835177][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.842158][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.869286][ T5845] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.882976][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.890076][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.916664][ T5845] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.928481][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.936017][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.962130][ T5835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.044941][ T5834] hsr_slave_0: entered promiscuous mode [ 80.051517][ T5834] hsr_slave_1: entered promiscuous mode [ 80.091331][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.098864][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.125359][ T5832] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.138555][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.145847][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.171986][ T5832] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.217253][ T5833] hsr_slave_0: entered promiscuous mode [ 80.223639][ T5833] hsr_slave_1: entered promiscuous mode [ 80.229814][ T5833] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 80.237747][ T5833] Cannot create hsr debugfs directory [ 80.288468][ T5845] hsr_slave_0: entered promiscuous mode [ 80.295161][ T5845] hsr_slave_1: entered promiscuous mode [ 80.301914][ T5845] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 80.309872][ T5845] Cannot create hsr debugfs directory [ 80.417834][ T5835] hsr_slave_0: entered promiscuous mode [ 80.424803][ T5835] hsr_slave_1: entered promiscuous mode [ 80.431007][ T5835] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 80.438662][ T5835] Cannot create hsr debugfs directory [ 80.529392][ T5832] hsr_slave_0: entered promiscuous mode [ 80.536173][ T5832] hsr_slave_1: entered promiscuous mode [ 80.542262][ T5832] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 80.550160][ T5832] Cannot create hsr debugfs directory [ 81.024334][ T5845] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 81.040592][ T5845] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 81.056370][ T5845] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 81.077912][ T5845] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 81.142170][ T5834] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 81.155652][ T5834] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 81.182086][ T5834] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 81.192408][ T5834] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 81.275817][ T5835] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 81.286865][ T5835] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 81.306380][ T5835] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 81.316131][ T5835] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 81.409145][ T5833] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 81.440428][ T5833] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 81.456171][ T5833] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 81.470238][ T5833] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 81.488046][ T5845] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.533266][ T5843] Bluetooth: hci2: command tx timeout [ 81.534471][ T5155] Bluetooth: hci3: command tx timeout [ 81.608759][ T5845] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.617116][ T5155] Bluetooth: hci0: command tx timeout [ 81.623238][ T5155] Bluetooth: hci4: command tx timeout [ 81.625066][ T5843] Bluetooth: hci1: command tx timeout [ 81.661729][ T66] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.668996][ T66] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.682062][ T5832] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 81.693527][ T5832] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 81.740268][ T5834] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.751917][ T5832] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 81.773708][ T66] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.780882][ T66] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.810174][ T5832] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 81.867657][ T5834] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.917536][ T1313] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.924972][ T1313] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.971457][ T1313] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.978676][ T1313] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.079141][ T5835] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.142172][ T5835] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.199848][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.207554][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.218231][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.225464][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.271718][ T5833] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.399979][ T5833] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.419422][ T5832] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.452689][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.459935][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.510305][ T1313] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.517542][ T1313] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.579433][ T5832] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.669295][ T1313] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.676622][ T1313] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.761635][ T5833] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 82.801420][ T66] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.808681][ T66] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.865749][ T5845] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.940545][ T5834] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.009204][ T5835] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.121098][ T5834] veth0_vlan: entered promiscuous mode [ 83.184073][ T5845] veth0_vlan: entered promiscuous mode [ 83.264252][ T5834] veth1_vlan: entered promiscuous mode [ 83.284883][ T5845] veth1_vlan: entered promiscuous mode [ 83.420781][ T5833] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.480401][ T5845] veth0_macvtap: entered promiscuous mode [ 83.499705][ T5834] veth0_macvtap: entered promiscuous mode [ 83.537976][ T5845] veth1_macvtap: entered promiscuous mode [ 83.560945][ T5834] veth1_macvtap: entered promiscuous mode [ 83.613649][ T5155] Bluetooth: hci2: command tx timeout [ 83.619301][ T5843] Bluetooth: hci3: command tx timeout [ 83.620287][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.665438][ T5832] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.680461][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.691212][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.693373][ T5843] Bluetooth: hci4: command tx timeout [ 83.704377][ T5155] Bluetooth: hci1: command tx timeout [ 83.706016][ T5846] Bluetooth: hci0: command tx timeout [ 83.715383][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.718758][ T5834] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.732153][ T5834] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.741584][ T5834] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.750455][ T5834] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.793834][ T5845] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.802750][ T5845] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.811469][ T5845] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.822207][ T5845] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.867831][ T5833] veth0_vlan: entered promiscuous mode [ 83.901213][ T5833] veth1_vlan: entered promiscuous mode [ 83.974703][ T5835] veth0_vlan: entered promiscuous mode [ 84.027400][ T5832] veth0_vlan: entered promiscuous mode [ 84.048134][ T5835] veth1_vlan: entered promiscuous mode [ 84.089732][ T5832] veth1_vlan: entered promiscuous mode [ 84.105650][ T50] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.116933][ T5833] veth0_macvtap: entered promiscuous mode [ 84.125467][ T50] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.134699][ T4651] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.151595][ T4651] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.166994][ T5833] veth1_macvtap: entered promiscuous mode [ 84.241668][ T4651] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.257452][ T5832] veth0_macvtap: entered promiscuous mode [ 84.263527][ T4651] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.280929][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.303644][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.312221][ T5835] veth0_macvtap: entered promiscuous mode [ 84.328854][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.343852][ T5833] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.357069][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.368828][ T5833] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.382545][ T5833] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.391629][ T5833] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.436988][ T5832] veth1_macvtap: entered promiscuous mode [ 84.461648][ T5845] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 84.478646][ T5835] veth1_macvtap: entered promiscuous mode [ 84.508125][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.599700][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.620243][ T5958] binder: 5957:5958 ioctl c0306201 0 returned -14 [ 84.665004][ T5832] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.678676][ T5832] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.689150][ T5832] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.707265][ T5832] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.813068][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 84.904180][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 85.006562][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 85.015326][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 85.313800][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 85.431744][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.456714][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.573603][ T5835] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.582360][ T5835] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.603244][ T5835] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.616366][ T5835] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.733525][ T5846] Bluetooth: hci3: command tx timeout [ 85.734093][ T5843] Bluetooth: hci2: command tx timeout [ 85.773179][ T5843] Bluetooth: hci0: command tx timeout [ 85.773811][ T5846] Bluetooth: hci4: command tx timeout [ 85.778623][ T5843] Bluetooth: hci1: command tx timeout [ 85.858698][ T5968] xt_TCPMSS: Only works on TCP SYN packets [ 85.924659][ T66] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.140186][ T66] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.609966][ T1313] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.791290][ T1313] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.850671][ T5901] IPVS: starting estimator thread 0... [ 87.043241][ T5975] IPVS: using max 24 ests per chain, 57600 per kthread [ 87.110831][ T9] cfg80211: failed to load regulatory.db [ 87.301180][ T1313] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.322220][ T1313] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.383654][ T5977] overlay: filesystem on ./bus not supported [ 87.396880][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.444316][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.562903][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 87.976375][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 87.985410][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 88.078815][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 88.088098][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 88.399170][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.416572][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.607873][ T1313] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.633709][ T1313] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.403171][ T6012] netlink: 4 bytes leftover after parsing attributes in process `syz.3.14'. [ 92.660199][ T6026] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 92.834509][ T6025] warning: `syz.1.17' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 93.895447][ T6019] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 95.385879][ T6037] syz.3.19 uses obsolete (PF_INET,SOCK_PACKET) [ 98.884892][ T6070] netlink: 116 bytes leftover after parsing attributes in process `syz.1.25'. [ 102.227792][ T6081] tty tty20: ldisc open failed (-12), clearing slot 19 [ 102.331587][ T6087] fuse: Bad value for 'fd' [ 106.411830][ T6110] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 109.387088][ T6131] netlink: 'syz.3.41': attribute type 1 has an invalid length. [ 113.355395][ T6154] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 113.500669][ T6139] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 113.539974][ T6163] syzkaller1: entered promiscuous mode [ 113.546825][ T6163] syzkaller1: entered allmulticast mode [ 113.901479][ T6166] erofs (device nbd0): cannot find valid erofs superblock [ 116.128746][ T6178] can0: slcan on ttyS3. [ 117.644477][ T6178] can0 (unregistered): slcan off ttyS3. [ 123.706168][ T30] audit: type=1400 audit(1754067269.781:2): lsm=SMACK fn=smack_file_fcntl action=denied subject="w" object="_" requested=w pid=6223 comm="syz.1.62" path="/16" dev="tmpfs" ino=95 [ 123.925573][ T6270] Zero length message leads to an empty skb [ 124.242804][ T6238] wg2: entered promiscuous mode [ 124.571310][ T6238] wg2: entered allmulticast mode [ 126.188162][ T6303] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 126.966352][ T6301] (unnamed net_device) (uninitialized): peer notification delay (9) is not a multiple of miimon (5), value rounded to 5 ms [ 128.381644][ T6301] 8021q: adding VLAN 0 to HW filter on device bond1 [ 131.206583][ T6336] syz.1.75 uses old SIOCAX25GETINFO [ 132.906447][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.927407][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.763428][ T6346] netlink: 'syz.0.78': attribute type 1 has an invalid length. [ 134.771544][ T6346] netlink: 'syz.0.78': attribute type 2 has an invalid length. [ 134.824650][ T6346] : entered promiscuous mode [ 135.198835][ T6351] Bluetooth: MGMT ver 1.23 [ 135.967312][ T6354] 9pnet_virtio: no channels available for device [ 136.515598][ T6359] netlink: 12 bytes leftover after parsing attributes in process `syz.3.84'. [ 137.558326][ T6367] netlink: 'syz.1.85': attribute type 4 has an invalid length. [ 137.566208][ T6367] netlink: 152 bytes leftover after parsing attributes in process `syz.1.85'. [ 137.629639][ T6367] : renamed from bond0 (while UP) [ 139.155592][ T6378] netlink: 16 bytes leftover after parsing attributes in process `syz.4.87'. [ 139.805893][ T5936] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 140.270984][ T5936] usb 5-1: device descriptor read/64, error -71 [ 142.002676][ T6403] No such timeout policy "syz0" [ 144.550930][ T6415] usb usb1: check_ctrlrecip: process 6415 (syz.1.94) requesting ep 01 but needs 81 [ 144.560410][ T6415] usb usb1: usbfs: process 6415 (syz.1.94) did not claim interface 0 before use [ 148.914970][ T6449] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 153.815765][ T6464] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 154.319783][ T926] IPVS: starting estimator thread 0... [ 154.805872][ T6467] IPVS: using max 25 ests per chain, 60000 per kthread [ 155.182725][ T5908] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 155.400813][ T5908] usb 2-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 155.639520][ T5908] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 155.697388][ T5908] usb 2-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice= 0.9c [ 155.732804][ T5908] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.755630][ T5908] usb 2-1: Product: syz [ 155.771188][ T5908] usb 2-1: Manufacturer: syz [ 155.977842][ T6480] netlink: 40 bytes leftover after parsing attributes in process `syz.3.110'. [ 155.995275][ T5908] usb 2-1: SerialNumber: syz [ 156.217328][ T5908] usb 2-1: config 0 descriptor?? [ 156.280448][ T5908] ims_pcu 2-1:0.0: Missing CDC union descriptor [ 156.290006][ T5908] ims_pcu 2-1:0.0: probe with driver ims_pcu failed with error -22 [ 156.472119][ T6471] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 156.494938][ T6471] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 157.697719][ T6493] process 'syz.1.108' launched './file0' with NULL argv: empty string added [ 157.782612][ T30] audit: type=1326 audit(1754067303.871:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6479 comm="syz.4.111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d9a58eb69 code=0x7fc00000 [ 157.920640][ T5894] usb 2-1: USB disconnect, device number 2 [ 161.624752][ T926] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 162.049140][ T5901] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 162.983288][ T926] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 163.120928][ T5901] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 163.621559][ T5939] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 163.812525][ T6536] ceph: No mds server is up or the cluster is laggy [ 163.828818][ T24] libceph: connect (1)[c::]:6789 error -101 [ 164.159274][ T6542] netlink: 100 bytes leftover after parsing attributes in process `syz.2.125'. [ 164.761005][ T5936] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 164.775930][ T24] libceph: mon0 (1)[c::]:6789 connect error [ 164.976335][ T5894] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 166.013095][ T5894] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 167.313293][ T5894] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 168.427976][ T5939] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 169.021154][ T5908] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 169.729700][ T5894] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 170.194132][ T5908] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 171.548097][ T5894] usb 5-1: device descriptor read/64, error -71 [ 171.569167][ T5908] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 172.363040][ T6571] netlink: 'syz.1.131': attribute type 10 has an invalid length. [ 172.400196][ T6571] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 172.418784][ T6571] : (slave batadv0): Enslaving as an active interface with an up link [ 172.554123][ T5939] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 173.129143][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 173.138461][ T5894] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 173.226273][ T6571] syz.1.131 (6571) used greatest stack depth: 19256 bytes left [ 173.259235][ T5939] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 174.111415][ T6590] ksmbd: Unknown IPC event: 3, ignore. [ 174.282433][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 174.702723][ T6601] netlink: 'syz.2.138': attribute type 10 has an invalid length. [ 174.721269][ T6601] hsr0: entered promiscuous mode [ 174.786509][ T6601] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 174.799068][ T6601] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 174.817637][ T6601] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 175.351186][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 175.939949][ T926] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 176.428630][ T5894] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 177.466575][ T5894] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 179.276057][ T6630] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 179.376137][ T5936] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 179.393564][ T5894] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 180.514903][ T5894] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 182.296971][ T5901] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 182.434909][ T6661] netlink: 8 bytes leftover after parsing attributes in process `syz.3.150'. [ 182.451320][ T6661] netlink: 8 bytes leftover after parsing attributes in process `syz.3.150'. [ 182.462277][ T6661] netlink: 8 bytes leftover after parsing attributes in process `syz.3.150'. [ 182.472907][ T6661] netlink: 8 bytes leftover after parsing attributes in process `syz.3.150'. [ 182.668672][ T5939] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 182.854090][ T926] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 183.065823][ T6665] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 183.271098][ T6665] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 184.051382][ T6665] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 184.231920][ T5901] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 185.943065][ T6676] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 185.952117][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 186.114618][ T5939] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 186.248026][ T5894] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 186.472840][ T6663] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 186.482309][ T6663] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 187.749628][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 188.852984][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 188.918623][ T6692] random: crng reseeded on system resumption [ 189.134715][ T5939] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 190.038933][ T5901] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 191.452685][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 192.267303][ T5939] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 192.503420][ T6724] hub 6-0:1.0: USB hub found [ 192.511675][ T6724] hub 6-0:1.0: 1 port detected [ 192.900818][ T5936] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 193.043927][ T5901] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 194.098718][ T5901] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 194.336166][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.342605][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.138452][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 195.292953][ T5936] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 196.833238][ T5901] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 197.855997][ T5901] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 198.333109][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 198.968786][ T5901] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 199.632249][ T6763] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 199.641632][ T6763] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 199.651036][ T6763] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 199.678903][ T6763] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 199.687824][ T6763] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 199.697292][ T6763] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 201.236916][ T6775] netlink: 8 bytes leftover after parsing attributes in process `syz.3.177'. [ 201.920849][ T6768] syz.3.177 (6768) used greatest stack depth: 19192 bytes left [ 201.930913][ T9] net_ratelimit: 8 callbacks suppressed [ 201.930930][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 201.945695][ T5840] Bluetooth: hci0: command 0x0406 tx timeout [ 201.952344][ T52] Bluetooth: hci2: command 0x0406 tx timeout [ 201.958440][ T5840] Bluetooth: hci3: command 0x0406 tx timeout [ 201.962516][ T52] Bluetooth: hci1: command 0x0406 tx timeout [ 201.964681][ T5840] Bluetooth: hci4: command 0x0406 tx timeout [ 202.178014][ T5908] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 202.223007][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 202.363634][ T6778] veth0_to_team: entered promiscuous mode [ 202.369520][ T6778] veth0_to_team: entered allmulticast mode [ 202.967736][ T6781] bridge0: port 2(bridge_slave_1) entered disabled state [ 202.977233][ T6781] bridge0: port 1(bridge_slave_0) entered disabled state [ 203.226142][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 203.247447][ T6787] trusted_key: encrypted_key: insufficient parameters specified [ 204.272686][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 204.326219][ T6785] Process accounting resumed [ 204.464713][ T6794] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 204.578198][ T5939] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 204.604088][ T49] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 204.613529][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 204.623556][ T6798] batadv0: entered promiscuous mode [ 204.689051][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 204.921762][ T6796] batadv0: left promiscuous mode [ 205.498312][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 206.112901][ T6813] syz.1.186: attempt to access beyond end of device [ 206.112901][ T6813] nbd1: rw=0, sector=2, nr_sectors = 2 limit=0 [ 206.127277][ T6813] syz.1.186: attempt to access beyond end of device [ 206.127277][ T6813] nbd1: rw=0, sector=16, nr_sectors = 2 limit=0 [ 206.954650][ T6829] netlink: 'syz.3.187': attribute type 4 has an invalid length. [ 206.982735][ C1] net_ratelimit: 1 callbacks suppressed [ 206.982756][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 207.552647][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 207.772036][ T6832] ufs: You didn't specify the type of your ufs filesystem [ 207.772036][ T6832] [ 207.772036][ T6832] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 207.772036][ T6832] [ 207.772036][ T6832] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 207.804514][ T6832] ufs: ufstype=old is supported read-only [ 207.812906][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 207.813211][ T6832] syz.0.188: attempt to access beyond end of device [ 207.813211][ T6832] nbd0: rw=0, sector=16, nr_sectors = 2 limit=0 [ 208.061093][ T6823] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 208.290615][ T5908] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 208.492655][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 208.573072][ T5955] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 209.122488][ T5939] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 209.332787][ T5939] usb 3-1: Using ep0 maxpacket: 32 [ 209.435306][ T5939] usb 3-1: config 0 has an invalid interface number: 63 but max is 0 [ 209.630308][ T5908] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 209.632774][ T5939] usb 3-1: config 0 has no interface number 0 [ 210.659543][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 210.672698][ T5939] usb 3-1: config 0 interface 63 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 210.692643][ T5939] usb 3-1: config 0 interface 63 has no altsetting 0 [ 210.701386][ T5939] usb 3-1: string descriptor 0 read error: -71 [ 210.707856][ T5939] usb 3-1: New USB device found, idVendor=0bfd, idProduct=0023, bcdDevice=40.69 [ 210.799632][ T5908] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 210.888608][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 210.954652][ T6851] veth1_macvtap: left promiscuous mode [ 211.311995][ T5939] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 211.445901][ T6848] Illegal XDP return value 4294967274 on prog (id 51) dev N/A, expect packet loss! [ 211.551167][ T5939] usb 3-1: config 0 descriptor?? [ 211.575269][ T5939] usb 3-1: can't set config #0, error -71 [ 211.820406][ T5939] usb 3-1: USB disconnect, device number 2 [ 212.391810][ T5901] net_ratelimit: 2 callbacks suppressed [ 212.391826][ T5901] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 213.694909][ T5901] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 214.084572][ T6882] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 214.829150][ T5936] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 214.857913][ T5901] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 219.318789][ T5901] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 219.346709][ T5936] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 219.932918][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 220.408793][ T5901] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 220.442942][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 220.451932][ T5955] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 220.925614][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 220.976076][ T5936] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 221.268388][ T6900] netlink: 20 bytes leftover after parsing attributes in process `syz.2.204'. [ 221.584059][ T5901] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 221.719364][ T6901] netlink: 4 bytes leftover after parsing attributes in process `syz.1.205'. [ 222.284024][ T6911] netlink: 4 bytes leftover after parsing attributes in process `syz.1.205'. [ 222.505298][ T6915] netdevsim netdevsim0: Direct firmware load for ./file0 failed with error -2 [ 222.514556][ T6915] netdevsim netdevsim0: Falling back to sysfs fallback for: ./file0 [ 222.553734][ T6918] mmap: syz.0.207 (6918) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 222.743739][ T5901] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 224.733312][ T30] audit: type=1326 audit(1754067369.831:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6926 comm="syz.2.209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa96b98eb69 code=0x7fc00000 [ 224.746677][ T5901] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 224.758510][ T30] audit: type=1326 audit(1754067369.831:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6926 comm="syz.2.209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7fa96b98eb69 code=0x7fc00000 [ 224.799778][ T5936] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 224.834526][ T30] audit: type=1326 audit(1754067369.831:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6926 comm="syz.2.209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa96b98eb69 code=0x7fc00000 [ 225.002751][ T30] audit: type=1326 audit(1754067369.831:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6926 comm="syz.2.209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa96b98eb69 code=0x7fc00000 [ 225.798276][ T5901] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 225.798333][ T30] audit: type=1326 audit(1754067369.831:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6926 comm="syz.2.209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa96b98eb69 code=0x7fc00000 [ 225.828770][ T30] audit: type=1326 audit(1754067369.841:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6926 comm="syz.2.209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa96b98eb69 code=0x7fc00000 [ 225.850561][ T30] audit: type=1326 audit(1754067369.841:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6926 comm="syz.2.209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa96b98eb69 code=0x7fc00000 [ 226.006769][ T30] audit: type=1326 audit(1754067369.841:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6926 comm="syz.2.209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa96b98eb69 code=0x7fc00000 [ 226.344148][ T1313] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 226.481295][ T5901] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 226.490788][ T30] audit: type=1326 audit(1754067369.841:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6926 comm="syz.2.209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa96b98eb69 code=0x7fc00000 [ 226.503837][ T5936] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 226.512571][ T30] audit: type=1326 audit(1754067369.841:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6926 comm="syz.2.209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa96b98eb69 code=0x7fc00000 [ 227.824921][ T5901] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 227.852738][ T5955] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 229.386366][ T5894] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 230.158415][ T6978] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 230.196164][ T5955] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 230.790624][ T5894] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 230.912689][ T5955] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 231.463137][ T5894] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 231.916813][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 231.959068][ T1313] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 231.972035][ T5955] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 231.987087][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 232.088598][ T6984] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 232.192967][ T1313] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 232.241131][ T5955] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 232.908727][ T5837] Bluetooth: hci4: command 0x0406 tx timeout [ 235.593346][ T5955] net_ratelimit: 10 callbacks suppressed [ 235.593362][ T5955] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 235.788598][ T7027] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 236.389478][ T5894] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 237.576118][ T5908] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 237.581202][ T7032] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 237.922846][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 237.931837][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 237.941240][ T5955] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 238.666916][ T5936] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 238.747973][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 240.083938][ T5894] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 240.101648][ T7049] sctp: failed to load transform for md5: -2 [ 240.132580][ T5936] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 240.316190][ T7065] syz.3.238: attempt to access beyond end of device [ 240.316190][ T7065] nbd3: rw=0, sector=0, nr_sectors = 1 limit=0 [ 240.330620][ T7065] (syz.3.238,7065,0):ocfs2_get_sector:1714 ERROR: status = -5 [ 240.338568][ T7065] (syz.3.238,7065,0):ocfs2_sb_probe:753 ERROR: status = -5 [ 240.346247][ T7065] (syz.3.238,7065,0):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 240.358678][ T7065] (syz.3.238,7065,0):ocfs2_fill_super:1177 ERROR: status = -5 [ 240.563603][ T5936] usb 5-1: device descriptor read/64, error -71 [ 240.853800][ T5936] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 241.654725][ T5894] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 241.668254][ T5908] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 241.767494][ T5955] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 242.740744][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 242.902849][ T7083] tipc: Started in network mode [ 242.909244][ T7083] tipc: Node identity ac14140f, cluster identity 4711 [ 242.916755][ T7083] tipc: New replicast peer: 255.255.255.255 [ 242.923707][ T7083] tipc: Enabled bearer , priority 10 [ 243.345187][ T5894] usb 3-1: Using ep0 maxpacket: 8 [ 243.421908][ T7089] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 243.925211][ T5939] tipc: Node number set to 2886997007 [ 244.500107][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 244.564634][ T7098] input input7: cannot allocate more than FF_MAX_EFFECTS effects [ 244.982549][ T1313] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 245.097168][ T5939] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 245.132539][ T5955] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 245.141052][ T5955] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 245.210726][ T5894] usb 3-1: unable to get BOS descriptor or descriptor too short [ 245.294347][ T5894] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 245.305351][ T5894] usb 3-1: can't read configurations, error -71 [ 245.652663][ T7111] fuse: Unknown parameter '`fd' [ 247.581065][ T5901] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 247.930796][ T7114] netlink: 4 bytes leftover after parsing attributes in process `syz.4.248'. [ 248.182677][ T5939] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 249.025981][ T5894] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 249.093607][ T50] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 249.105413][ T5901] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 249.132224][ T5908] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 249.293465][ T7127] ======================================================= [ 249.293465][ T7127] WARNING: The mand mount option has been deprecated and [ 249.293465][ T7127] and is ignored by this kernel. Remove the mand [ 249.293465][ T7127] option from the mount to silence this warning. [ 249.293465][ T7127] ======================================================= [ 249.484881][ T7127] syz.2.250: attempt to access beyond end of device [ 249.484881][ T7127] nbd2: rw=0, sector=0, nr_sectors = 1 limit=0 [ 249.498542][ T7127] efs: cannot read volume header [ 250.267983][ T5908] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 250.355362][ T30] kauditd_printk_skb: 56 callbacks suppressed [ 250.355402][ T30] audit: type=1804 audit(1754067396.461:70): pid=7127 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.2.250" name="/newroot/42/file0" dev="tmpfs" ino=245 res=1 errno=0 [ 250.413926][ T7137] netdevsim netdevsim3: Direct firmware load for ./file0 failed with error -2 [ 250.423494][ T7137] netdevsim netdevsim3: Falling back to sysfs fallback for: ./file0 [ 251.212723][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 254.229240][ T5908] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 254.322933][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 254.390782][ T7134] [U] ^C [ 254.492720][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 254.804179][ T7153] comedi comedi4: bad chanlist[0]=0x00000008 chan=8 range length=2 [ 255.496063][ T5901] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 255.551462][ T30] audit: type=1326 audit(1754067401.641:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7148 comm="syz.2.256" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa96b98eb69 code=0x0 [ 255.815373][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.824670][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.142634][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 256.402643][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 256.772614][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 256.807646][ T5901] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 257.063294][ T7166] block device autoloading is deprecated and will be removed. [ 257.376050][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 257.532648][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 260.173307][ T2151] net_ratelimit: 2 callbacks suppressed [ 260.173325][ T2151] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 260.676071][ T5955] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 261.271325][ T5908] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 261.861287][ T7195] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 262.393208][ T2151] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 262.505711][ T5837] Bluetooth: hci3: ISO packet too small [ 263.503846][ T5901] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 263.698507][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 265.748152][ T2151] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 265.757344][ T5955] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 265.766526][ T5846] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 265.776471][ T5846] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 265.785081][ T5846] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 265.793470][ T5846] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 265.802283][ T5846] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 266.231615][ T7223] capability: warning: `syz.0.274' uses 32-bit capabilities (legacy support in use) [ 266.242266][ T7223] netlink: 16 bytes leftover after parsing attributes in process `syz.0.274'. [ 266.857690][ T7230] input input8: cannot allocate more than FF_MAX_EFFECTS effects [ 267.097666][ T5901] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 267.105926][ T5936] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 267.659644][ T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.786375][ T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.962760][ T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.021972][ T2151] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 268.029614][ T5846] Bluetooth: hci4: command tx timeout [ 268.597475][ T2151] usb 4-1: Using ep0 maxpacket: 8 [ 268.628781][ T5894] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 268.695574][ T2151] usb 4-1: device descriptor read/all, error -71 [ 268.856872][ T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.092556][ T5846] Bluetooth: hci4: command tx timeout [ 270.146382][ T5908] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 270.191156][ T5936] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 270.581515][ T7213] chnl_net:caif_netlink_parms(): no params data found [ 271.222077][ T5908] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 271.372025][ T30] audit: type=1326 audit(1754067417.481:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7271 comm="syz.3.282" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f01db18eb69 code=0x0 [ 271.710325][ T7280] netlink: 16 bytes leftover after parsing attributes in process `syz.0.283'. [ 272.198852][ T5846] Bluetooth: hci4: command tx timeout [ 272.291580][ T7282] netlink: 256 bytes leftover after parsing attributes in process `syz.3.282'. [ 272.333312][ T7282] netlink: 'syz.3.282': attribute type 4 has an invalid length. [ 272.642676][ T2151] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 272.784875][ T7213] bridge0: port 1(bridge_slave_0) entered blocking state [ 272.792184][ T7213] bridge0: port 1(bridge_slave_0) entered disabled state [ 272.812682][ T7213] bridge_slave_0: entered allmulticast mode [ 272.820594][ T7213] bridge_slave_0: entered promiscuous mode [ 272.873850][ T12] bridge_slave_1: left allmulticast mode [ 272.894254][ T12] bridge_slave_1: left promiscuous mode [ 272.912707][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 273.450030][ T7291] random: crng reseeded on system resumption [ 274.719027][ T5846] Bluetooth: hci4: command tx timeout [ 274.858391][ T12] bridge_slave_0: left allmulticast mode [ 274.882682][ T12] bridge_slave_0: left promiscuous mode [ 274.948004][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 278.078085][ T5846] Bluetooth: hci3: SCO packet for unknown connection handle 954 [ 278.188247][ T7310] input input9: cannot allocate more than FF_MAX_EFFECTS effects [ 278.383268][ T24] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 278.539580][ T24] usb 5-1: device descriptor read/64, error -71 [ 278.955495][ T24] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 279.995871][ T24] usb 5-1: device descriptor read/64, error -71 [ 280.267252][ T9] hid-generic 0000:0004:0034.0001: unknown main item tag 0x0 [ 280.291184][ T9] hid-generic 0000:0004:0034.0001: unknown main item tag 0x0 [ 280.338881][ T9] hid-generic 0000:0004:0034.0001: unknown main item tag 0x0 [ 280.495586][ T9] hid-generic 0000:0004:0034.0001: hidraw0: HID v0.0e Device [syz0] on syz1 [ 281.717569][ T7335] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 281.742181][ T7332] ALSA: mixer_oss: invalid OSS volume '' [ 281.957663][ T24] usb usb5-port1: attempt power cycle [ 282.515948][ T7340] netlink: 24 bytes leftover after parsing attributes in process `syz.4.295'. [ 282.747441][ T7347] netlink: 4 bytes leftover after parsing attributes in process `syz.4.295'. [ 282.801970][ T12]  (unregistering): (slave bond_slave_0): Releasing backup interface [ 282.838178][ T12]  (unregistering): (slave bond_slave_1): Releasing backup interface [ 282.880807][ T12]  (unregistering): (slave batadv0): Releasing backup interface [ 282.907822][ T12]  (unregistering): Released all slaves [ 282.931182][ T7213] bridge0: port 2(bridge_slave_1) entered blocking state [ 282.939156][ T7213] bridge0: port 2(bridge_slave_1) entered disabled state [ 282.948343][ T7213] bridge_slave_1: entered allmulticast mode [ 282.959652][ T7213] bridge_slave_1: entered promiscuous mode [ 283.394328][ T7327] syz_tun: entered allmulticast mode [ 285.553409][ T7328] syz_tun: left allmulticast mode [ 285.579606][ T7213] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 286.715453][ T7213] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 288.169648][ T7386] fuse: Bad value for 'fd' [ 288.882791][ T5901] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 289.113131][ T5901] usb 3-1: Using ep0 maxpacket: 32 [ 289.191585][ T5901] usb 3-1: New USB device found, idVendor=145f, idProduct=0212, bcdDevice= 0.00 [ 289.459762][ T7391] netlink: 'syz.0.302': attribute type 10 has an invalid length. [ 289.468010][ T7391] netlink: 156 bytes leftover after parsing attributes in process `syz.0.302'. [ 289.477657][ T5901] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 289.953190][ T5901] usb 3-1: config 0 descriptor?? [ 292.061977][ T5901] usbhid 3-1:0.0: can't add hid device: -71 [ 292.078889][ T5901] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 292.275078][ T7406] omfs: Invalid superblock (0) [ 292.379707][ T5901] usb 3-1: USB disconnect, device number 5 [ 292.437838][ T7213] team0: Port device team_slave_0 added [ 292.981730][ T12] hsr_slave_0: left promiscuous mode [ 293.032024][ T12] hsr_slave_1: left promiscuous mode [ 293.044767][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 293.157944][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 293.254712][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 293.388161][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 293.794285][ T12] veth1_macvtap: left promiscuous mode [ 293.829852][ T12] veth0_macvtap: left promiscuous mode [ 293.875755][ T12] veth1_vlan: left promiscuous mode [ 293.925741][ T12] veth0_vlan: left promiscuous mode [ 294.722016][ T7422] 9pnet_virtio: no channels available for device syz [ 295.812096][ T7423] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 298.148879][ T7444] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 300.568332][ T7464] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 301.251275][ T7469] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 301.277904][ C0] vkms_vblank_simulate: vblank timer overrun [ 301.286650][ T7469] CIFS: Unable to determine destination address [ 303.357571][ T7473] nvme_fabrics: missing parameter 'transport=%s' [ 303.386430][ T7473] nvme_fabrics: missing parameter 'nqn=%s' [ 303.803356][ T7482] ./file0: Can't open blockdev [ 305.042760][ T7491] netlink: 'syz.4.320': attribute type 10 has an invalid length. [ 305.325268][ T7493] netlink: 8 bytes leftover after parsing attributes in process `syz.4.320'. [ 305.650443][ T12] team0 (unregistering): Port device team_slave_1 removed [ 305.714367][ T12] team0 (unregistering): Port device team_slave_0 removed [ 306.364262][ T7213] team0: Port device team_slave_1 added [ 306.404324][ T7491] 8021q: adding VLAN 0 to HW filter on device team0 [ 306.457431][ T7491] bond0: (slave team0): Enslaving as an active interface with an up link [ 308.150069][ T7213] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 308.313019][ T7213] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 308.339766][ T7213] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 308.779096][ T7213] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 308.871203][ T7213] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 309.051147][ T7213] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 310.552835][ T7551] xt_CT: No such helper "netbios-ns" [ 311.446530][ T7213] hsr_slave_0: entered promiscuous mode [ 311.538853][ T7213] hsr_slave_1: entered promiscuous mode [ 311.546983][ T7213] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 311.559278][ T7213] Cannot create hsr debugfs directory [ 313.549678][ T5837] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 313.565495][ T5837] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 313.574662][ T5837] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 313.583773][ T5837] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 313.592906][ T5837] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 314.289135][ T12] IPVS: stop unused estimator thread 0... [ 315.071416][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 315.671733][ T5846] Bluetooth: hci2: command tx timeout [ 316.420568][ T7623] overlayfs: failed to resolve './file1': -2 [ 317.131761][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.222246][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.232266][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.702441][ T5846] Bluetooth: hci2: command tx timeout [ 317.720590][ T7622] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 317.728970][ T7622] batadv_slave_0: entered promiscuous mode [ 317.846878][ T7633] openvswitch: netlink: Tunnel attr 6 has unexpected len 1 expected 0 [ 318.385968][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 318.793507][ T7643] x_tables: ip_tables: osf match: only valid for protocol 6 [ 319.216625][ T7643] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 319.464730][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.912805][ T5846] Bluetooth: hci2: command tx timeout [ 320.391339][ T9] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 320.571389][ T5837] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 320.581443][ T5837] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 320.589714][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 320.596124][ T5837] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 320.652738][ T5837] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 320.661313][ T30] audit: type=1326 audit(1754067466.731:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7639 comm="syz.4.344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d9a58eb69 code=0x7ffc0000 [ 320.743931][ T5837] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 320.828425][ T9] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice=67.fe [ 320.842013][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 320.858858][ T9] usb 3-1: Product: syz [ 320.868881][ T9] usb 3-1: Manufacturer: syz [ 320.877169][ T9] usb 3-1: SerialNumber: syz [ 321.427707][ T30] audit: type=1326 audit(1754067466.731:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7639 comm="syz.4.344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=119 compat=0 ip=0x7f8d9a58eb69 code=0x7ffc0000 [ 321.498582][ T9] usb 3-1: config 0 descriptor?? [ 321.632574][ T30] audit: type=1326 audit(1754067466.731:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7639 comm="syz.4.344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d9a58eb69 code=0x7ffc0000 [ 321.722425][ T30] audit: type=1326 audit(1754067466.741:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7639 comm="syz.4.344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d9a58eb69 code=0x7ffc0000 [ 321.752622][ T7587] chnl_net:caif_netlink_parms(): no params data found [ 322.046953][ T5837] Bluetooth: hci2: command tx timeout [ 322.047077][ T30] audit: type=1326 audit(1754067466.741:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7639 comm="syz.4.344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f8d9a58eb69 code=0x7ffc0000 [ 322.513444][ T7672] input: syz0 as /devices/virtual/input/input10 [ 322.892717][ T5837] Bluetooth: hci5: command tx timeout [ 323.034450][ T9] snd-usb-6fire 3-1:0.0: unable to receive device firmware state. [ 323.042308][ T9] snd-usb-6fire 3-1:0.0: probe with driver snd-usb-6fire failed with error -110 [ 324.063615][ T30] audit: type=1326 audit(1754067466.741:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7639 comm="syz.4.344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d9a58eb69 code=0x7ffc0000 [ 324.093104][ T30] audit: type=1326 audit(1754067466.741:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7639 comm="syz.4.344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f8d9a58d4d0 code=0x7ffc0000 [ 324.115095][ T30] audit: type=1326 audit(1754067466.741:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7639 comm="syz.4.344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d9a58eb69 code=0x7ffc0000 [ 324.142443][ T30] audit: type=1326 audit(1754067466.741:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7639 comm="syz.4.344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f8d9a58eb69 code=0x7ffc0000 [ 324.189712][ T30] audit: type=1326 audit(1754067466.741:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7639 comm="syz.4.344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d9a58eb69 code=0x7ffc0000 [ 324.213836][ T5901] usb 3-1: USB disconnect, device number 6 [ 324.651853][ T12] bridge_slave_1: left allmulticast mode [ 324.665804][ T12] bridge_slave_1: left promiscuous mode [ 324.972464][ T5837] Bluetooth: hci5: command tx timeout [ 325.488419][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 325.611647][ T7688] overlayfs: failed to resolve './file1': -2 [ 326.065116][ T12] bridge_slave_0: left allmulticast mode [ 326.119820][ T12] bridge_slave_0: left promiscuous mode [ 326.197879][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 327.053184][ T5837] Bluetooth: hci5: command tx timeout [ 328.196527][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 328.196556][ T30] audit: type=1800 audit(1754067474.301:92): pid=7701 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.4.353" name="/" dev="9p" ino=2 res=0 errno=0 [ 329.172536][ T5837] Bluetooth: hci5: command tx timeout [ 329.278111][ T7701] syz.4.353 (7701) used greatest stack depth: 19080 bytes left [ 329.650302][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 329.780909][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 329.868302][ T12] bond0 (unregistering): Released all slaves [ 331.348219][ T12] bond1 (unregistering): Released all slaves [ 332.210332][ T7733] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 332.222215][ T7733] xt_SECMARK: unable to map security context 'system_u:object_r:dbusd_etc_t:s0' [ 332.770772][ T12] : left promiscuous mode [ 332.851697][ T7740] input input11: cannot allocate more than FF_MAX_EFFECTS effects [ 332.948159][ T7734] sp0: Synchronizing with TNC [ 332.965436][ T7728] [U] è [ 333.163278][ T7743] overlayfs: failed to resolve './file1': -2 [ 333.607662][ T7587] bridge0: port 1(bridge_slave_0) entered blocking state [ 333.617047][ T7587] bridge0: port 1(bridge_slave_0) entered disabled state [ 333.627551][ T7587] bridge_slave_0: entered allmulticast mode [ 333.638138][ T7587] bridge_slave_0: entered promiscuous mode [ 333.646904][ T7587] bridge0: port 2(bridge_slave_1) entered blocking state [ 333.704940][ T7587] bridge0: port 2(bridge_slave_1) entered disabled state [ 333.712649][ T7587] bridge_slave_1: entered allmulticast mode [ 333.721964][ T7587] bridge_slave_1: entered promiscuous mode [ 333.779974][ T12] tipc: Disabling bearer [ 333.926372][ T12] tipc: Left network mode [ 334.052538][ T7753] netlink: 20 bytes leftover after parsing attributes in process `syz.3.362'. [ 335.030885][ T7587] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 335.101286][ T7587] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 335.102694][ T7761] netlink: 4 bytes leftover after parsing attributes in process `syz.4.364'. [ 335.380120][ T7751] vlan2: entered promiscuous mode [ 335.385331][ T7751] bridge0: entered promiscuous mode [ 335.390664][ T7751] vlan2: entered allmulticast mode [ 335.395822][ T7751] bridge0: entered allmulticast mode [ 335.418263][ T7658] chnl_net:caif_netlink_parms(): no params data found [ 335.499067][ T7753] bridge_slave_0: left allmulticast mode [ 335.513539][ T7753] bridge_slave_0: left promiscuous mode [ 335.552122][ T7753] bridge0: port 1(bridge_slave_0) entered disabled state [ 335.991757][ T7753] bridge_slave_1: left allmulticast mode [ 336.004858][ T7753] bridge_slave_1: left promiscuous mode [ 336.011141][ T7753] bridge0: port 2(bridge_slave_1) entered disabled state [ 336.096506][ T7753] bond0: (slave bond_slave_0): Releasing backup interface [ 336.251402][ T7753] bond0: (slave bond_slave_1): Releasing backup interface [ 336.743588][ T7778] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 336.937094][ T7753] team0: Port device team_slave_0 removed [ 336.988935][ T7753] team0: Port device team_slave_1 removed [ 337.092619][ T7753] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 337.127023][ T7753] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 337.150274][ T7753] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 337.159704][ T7753] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 337.943774][ T7792] ALSA: mixer_oss: invalid OSS volume 'LI' [ 339.937235][ T7587] team0: Port device team_slave_0 added [ 340.089395][ T7587] team0: Port device team_slave_1 added [ 340.332926][ T5936] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 340.552499][ T5936] usb 5-1: Using ep0 maxpacket: 32 [ 340.580134][ T5936] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 340.767620][ T5936] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 341.047038][ T5936] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 341.056490][ T5936] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 341.066308][ T5936] usb 5-1: Product: syz [ 341.072716][ T5936] usb 5-1: Manufacturer: syz [ 341.080740][ T5936] usb 5-1: SerialNumber: syz [ 341.092290][ T5936] usb 5-1: config 0 descriptor?? [ 341.177414][ T7813] netlink: 'syz.2.373': attribute type 1 has an invalid length. [ 341.249104][ T7814] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 341.980148][ T7805] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 342.116573][ T7798] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 342.125321][ T7798] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 342.158699][ T30] audit: type=1326 audit(1754067488.261:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7796 comm="syz.4.370" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8d9a58eb69 code=0x0 [ 342.179799][ C0] vkms_vblank_simulate: vblank timer overrun [ 342.210783][ T12] hsr_slave_0: left promiscuous mode [ 342.220207][ T12] hsr_slave_1: left promiscuous mode [ 342.229521][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 342.242297][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 342.995389][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 343.004434][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 343.041117][ T12] veth1_macvtap: left promiscuous mode [ 343.046863][ T12] veth0_macvtap: left promiscuous mode [ 343.053159][ T12] veth1_vlan: left promiscuous mode [ 343.059292][ T12] veth0_vlan: left promiscuous mode [ 343.284690][ T7822] input input12: cannot allocate more than FF_MAX_EFFECTS effects [ 343.639950][ T12] team0 (unregistering): Port device team_slave_1 removed [ 343.690532][ T12] team0 (unregistering): Port device team_slave_0 removed [ 343.893175][ T5901] usb 5-1: USB disconnect, device number 11 [ 344.674398][ T7830] netlink: 8 bytes leftover after parsing attributes in process `syz.4.376'. [ 344.683383][ T7830] netlink: 8 bytes leftover after parsing attributes in process `syz.4.376'. [ 345.353459][ T7587] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 345.364523][ T7587] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 345.390853][ T7587] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 345.529736][ T7587] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 345.573621][ T7587] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 345.603716][ T7838] qrtr: Invalid version 47 [ 345.806375][ T7587] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 346.447176][ T7845] fuse: Bad value for 'fd' [ 346.527869][ T5939] Process accounting resumed [ 346.914400][ T7658] bridge0: port 1(bridge_slave_0) entered blocking state [ 346.921660][ T7658] bridge0: port 1(bridge_slave_0) entered disabled state [ 346.963715][ T7658] bridge_slave_0: entered allmulticast mode [ 346.971624][ T7658] bridge_slave_0: entered promiscuous mode [ 347.102577][ T7852] CIFS mount error: No usable UNC path provided in device string! [ 347.102577][ T7852] [ 347.113404][ T7852] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 347.130042][ T7658] bridge0: port 2(bridge_slave_1) entered blocking state [ 347.876420][ T7658] bridge0: port 2(bridge_slave_1) entered disabled state [ 347.936814][ T7658] bridge_slave_1: entered allmulticast mode [ 347.954323][ T7658] bridge_slave_1: entered promiscuous mode [ 349.830579][ T7658] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 349.901952][ T7658] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 351.606347][ T7587] hsr_slave_0: entered promiscuous mode [ 351.613568][ T7587] hsr_slave_1: entered promiscuous mode [ 351.620512][ T7587] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 351.628629][ T7587] Cannot create hsr debugfs directory [ 353.768535][ T7898] netlink: 'syz.2.389': attribute type 1 has an invalid length. [ 353.849811][ T7899] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 354.201601][ T7658] team0: Port device team_slave_0 added [ 354.396953][ T7658] team0: Port device team_slave_1 added [ 354.600057][ T7890] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 355.236238][ T7658] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 355.253795][ T7658] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 355.288720][ T7658] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 355.439937][ T7658] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 355.453402][ T7658] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 355.484281][ T7658] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 355.972716][ T5901] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 356.265764][ T5901] usb 5-1: Using ep0 maxpacket: 8 [ 356.278976][ T5901] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 356.666316][ T7928] netlink: 'syz.3.395': attribute type 6 has an invalid length. [ 356.671599][ T5901] usb 5-1: New USB device found, idVendor=0e8d, idProduct=2000, bcdDevice=21.c6 [ 356.757117][ T7928] netlink: 24 bytes leftover after parsing attributes in process `syz.3.395'. [ 356.838554][ T5901] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 356.839914][ T7658] hsr_slave_0: entered promiscuous mode [ 356.934240][ T7658] hsr_slave_1: entered promiscuous mode [ 357.023719][ T7928] syz.3.395 (7928): attempted to duplicate a private mapping with mremap. This is not supported. [ 357.029817][ T7658] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 357.087645][ T30] audit: type=1326 audit(1754067503.151:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7924 comm="syz.3.395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01db18eb69 code=0x7ffc0000 [ 357.170315][ T5901] usb 5-1: config 0 descriptor?? [ 357.194347][ T7658] Cannot create hsr debugfs directory [ 357.202722][ T30] audit: type=1326 audit(1754067503.151:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7924 comm="syz.3.395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01db18eb69 code=0x7ffc0000 [ 357.277228][ T30] audit: type=1326 audit(1754067503.151:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7924 comm="syz.3.395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=162 compat=0 ip=0x7f01db18eb69 code=0x7ffc0000 [ 357.452657][ T30] audit: type=1326 audit(1754067503.561:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7924 comm="syz.3.395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01db18eb69 code=0x7ffc0000 [ 357.583634][ T30] audit: type=1326 audit(1754067503.561:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7924 comm="syz.3.395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01db18eb69 code=0x7ffc0000 [ 358.587111][ T7938] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 358.612674][ T7938] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 358.715591][ T7935] : entered promiscuous mode [ 358.965344][ T5936] usb 5-1: USB disconnect, device number 12 [ 359.731744][ T7953] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 361.554780][ T7587] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 361.896485][ T7970] netlink: 'syz.3.402': attribute type 4 has an invalid length. [ 361.967239][ T12] bridge_slave_1: left allmulticast mode [ 361.982425][ T12] bridge_slave_1: left promiscuous mode [ 361.989642][ T7956] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 362.001174][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 362.083571][ T12] bridge_slave_0: left allmulticast mode [ 362.089279][ T12] bridge_slave_0: left promiscuous mode [ 362.172126][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 363.810570][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 364.276786][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 364.326041][ T12] bond0 (unregistering): Released all slaves [ 364.350821][ T7587] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 364.368732][ T7587] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 364.419877][ T7587] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 364.744898][ T12] hsr_slave_0: left promiscuous mode [ 364.777400][ T12] hsr_slave_1: left promiscuous mode [ 364.798025][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 364.828822][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 366.491527][ T12] team0 (unregistering): Port device team_slave_1 removed [ 366.626069][ T12] team0 (unregistering): Port device team_slave_0 removed [ 367.277520][ T12] Oops: general protection fault, probably for non-canonical address 0xdffffc001fffe000: 0000 [#1] SMP KASAN PTI [ 367.289459][ T12] KASAN: probably user-memory-access in range [0x00000000ffff0000-0x00000000ffff0007] [ 367.299021][ T12] CPU: 1 UID: 0 PID: 12 Comm: kworker/u8:0 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 367.309001][ T12] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 367.319258][ T12] Workqueue: netns cleanup_net [ 367.324130][ T12] RIP: 0010:mld_clear_delrec+0x34a/0x5d0 [ 367.329938][ T12] Code: ff ff ff e8 08 4c 41 01 89 c5 31 ff 89 c6 e8 0d ea 9a f7 85 ed 74 40 e8 c4 e5 9a f7 eb 05 e8 bd e5 9a f7 4c 89 f8 48 c1 e8 03 <42> 80 3c 28 00 74 08 4c 89 ff e8 e7 cc fa f7 4d 8b 27 49 8d 7f 30 [ 367.349551][ T12] RSP: 0018:ffffc90000117330 EFLAGS: 00010206 [ 367.355706][ T12] RAX: 000000001fffe000 RBX: ffff88805695e538 RCX: ffff88801cecda00 [ 367.363672][ T12] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 367.371684][ T12] RBP: 0000000000000001 R08: ffffffff8fa0b3f7 R09: 1ffffffff1f4167e [ 367.379728][ T12] R10: dffffc0000000000 R11: fffffbfff1f4167f R12: ffff888055fa8028 [ 367.387711][ T12] R13: dffffc0000000000 R14: ffff888055fa8000 R15: 00000000ffff0000 [ 367.395776][ T12] FS: 0000000000000000(0000) GS:ffff888125d57000(0000) knlGS:0000000000000000 [ 367.404699][ T12] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 367.411276][ T12] CR2: 0000001b3051fffc CR3: 0000000073ada000 CR4: 00000000003526f0 [ 367.419244][ T12] Call Trace: [ 367.422523][ T12] [ 367.425450][ T12] ? ipv6_mc_down+0x36c/0x480 [ 367.430138][ T12] ipv6_mc_destroy_dev+0x45/0x5a0 [ 367.435168][ T12] ? addrconf_ifdown+0x1396/0x1880 [ 367.440288][ T12] addrconf_ifdown+0x139e/0x1880 [ 367.445273][ T12] ? tls_dev_event+0x717/0xec0 [ 367.450028][ T12] ? __pfx_addrconf_ifdown+0x10/0x10 [ 367.455400][ T12] addrconf_notify+0x1bc/0x1010 [ 367.460252][ T12] notifier_call_chain+0x1b3/0x3e0 [ 367.465461][ T12] unregister_netdevice_many_notify+0x15d8/0x2320 [ 367.471910][ T12] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 367.478688][ T12] ? unregister_netdevice_queue+0x1b3/0x380 [ 367.484645][ T12] ? batadv_meshif_destroy_netlink+0x1dd/0x270 [ 367.490804][ T12] default_device_exit_batch+0x819/0x890 [ 367.496461][ T12] ? __pfx___might_resched+0x10/0x10 [ 367.501761][ T12] ? __pfx_default_device_exit_batch+0x10/0x10 [ 367.507945][ T12] ? __pfx_rdma_dev_exit_net+0x10/0x10 [ 367.513407][ T12] ? net_generic+0x1e/0x240 [ 367.517912][ T12] ? __pfx_default_device_exit_batch+0x10/0x10 [ 367.524068][ T12] ops_undo_list+0x522/0x990 [ 367.528662][ T12] ? __pfx_ops_undo_list+0x10/0x10 [ 367.533804][ T12] cleanup_net+0x4c5/0x800 [ 367.538239][ T12] ? __pfx_cleanup_net+0x10/0x10 [ 367.543208][ T12] ? _raw_spin_unlock_irq+0x23/0x50 [ 367.548398][ T12] ? process_scheduled_works+0x9ef/0x17b0 [ 367.554236][ T12] ? process_scheduled_works+0x9ef/0x17b0 [ 367.559953][ T12] process_scheduled_works+0xade/0x17b0 [ 367.565518][ T12] ? __pfx_process_scheduled_works+0x10/0x10 [ 367.571535][ T12] worker_thread+0x8a0/0xda0 [ 367.576130][ T12] kthread+0x70e/0x8a0 [ 367.580373][ T12] ? __pfx_worker_thread+0x10/0x10 [ 367.585477][ T12] ? __pfx_kthread+0x10/0x10 [ 367.590066][ T12] ? _raw_spin_unlock_irq+0x23/0x50 [ 367.595258][ T12] ? lockdep_hardirqs_on+0x9c/0x150 [ 367.600451][ T12] ? __pfx_kthread+0x10/0x10 [ 367.605040][ T12] ret_from_fork+0x3fc/0x770 [ 367.609718][ T12] ? __pfx_ret_from_fork+0x10/0x10 [ 367.614823][ T12] ? __switch_to_asm+0x39/0x70 [ 367.619586][ T12] ? __switch_to_asm+0x33/0x70 [ 367.624348][ T12] ? __pfx_kthread+0x10/0x10 [ 367.628937][ T12] ret_from_fork_asm+0x1a/0x30 [ 367.633713][ T12] [ 367.636740][ T12] Modules linked in: [ 367.641570][ T12] ---[ end trace 0000000000000000 ]--- [ 367.657802][ T12] RIP: 0010:mld_clear_delrec+0x34a/0x5d0 [ 367.665217][ T12] Code: ff ff ff e8 08 4c 41 01 89 c5 31 ff 89 c6 e8 0d ea 9a f7 85 ed 74 40 e8 c4 e5 9a f7 eb 05 e8 bd e5 9a f7 4c 89 f8 48 c1 e8 03 <42> 80 3c 28 00 74 08 4c 89 ff e8 e7 cc fa f7 4d 8b 27 49 8d 7f 30 [ 367.687635][ T12] RSP: 0018:ffffc90000117330 EFLAGS: 00010206 [ 367.693938][ T12] RAX: 000000001fffe000 RBX: ffff88805695e538 RCX: ffff88801cecda00 [ 367.701974][ T12] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 367.710035][ T12] RBP: 0000000000000001 R08: ffffffff8fa0b3f7 R09: 1ffffffff1f4167e [ 367.718352][ T12] R10: dffffc0000000000 R11: fffffbfff1f4167f R12: ffff888055fa8028 [ 367.726578][ T12] R13: dffffc0000000000 R14: ffff888055fa8000 R15: 00000000ffff0000 [ 367.735091][ T12] FS: 0000000000000000(0000) GS:ffff888125c57000(0000) knlGS:0000000000000000 [ 367.745468][ T12] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 367.752289][ T12] CR2: 000000110c335591 CR3: 00000000762ce000 CR4: 00000000003526f0 [ 367.760751][ T8041] input input13: cannot allocate more than FF_MAX_EFFECTS effects [ 367.769166][ T12] Kernel panic - not syncing: Fatal exception [ 367.775674][ T12] Kernel Offset: disabled [ 367.779998][ T12] Rebooting in 86400 seconds..