last executing test programs: 8m44.705375666s ago: executing program 1 (id=44): r0 = socket$igmp6(0xa, 0x3, 0x2) bind(r0, &(0x7f00000000c0)=@sco, 0x80) syz_clone(0x140011, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x1) pivot_root(&(0x7f0000000140)='./cgroup\x00', 0x0) pipe2$watch_queue(&(0x7f0000000300), 0x80) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000000180)="1a", 0x1, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r4, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x2, 0x0, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0xffffffd}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x44080) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r4, {}, {0xffe0, 0xa}, {0x1, 0x10}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x47, 0x1, 0x3, 0x6}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x55}, 0x4000) sendto$inet6(r1, &(0x7f0000000040)="93", 0x34000, 0x0, 0x0, 0x44) 8m41.671596634s ago: executing program 1 (id=51): r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r0, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) recvmmsg(0xffffffffffffffff, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000580)=""/230, 0xe6}], 0x1}, 0x2000000}], 0x1, 0x101, 0x0) sendmsg$NL80211_CMD_NOTIFY_RADAR(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x2000005a}, 0xc000) 8m40.406404662s ago: executing program 1 (id=53): bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x49, 0x1}, 0x48) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) sched_setscheduler(0x0, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1e, 0x4, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x2d) openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x3}, &(0x7f0000001fee)='R\x10rust\xe3cusg\x91\xdeeH\xe5+\xf0', 0xffffffffffffffff) r6 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000180)={0x5}, 0x10) write(r6, &(0x7f0000000000)="1c0000001a005f0214f9f4070009", 0xe) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 8m38.516255754s ago: executing program 1 (id=57): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, 0x0) 8m37.26643824s ago: executing program 1 (id=60): r0 = openat$adsp1(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f0000000040), 0x4) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_256={{0x303}, "c8444943470da91b", "42f3ac0e0b8a32be8fe91c368e60693800", "e7198360", "f7a5c1777af05eaa"}, 0x38) write$binfmt_elf64(r4, 0x0, 0x78) close_range(r0, 0xffffffffffffffff, 0x0) 8m33.668565584s ago: executing program 1 (id=70): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000180)=0x7) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = syz_open_dev$I2C(&(0x7f0000000000), 0x0, 0x189802) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_io_uring_setup(0x498, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x0, 0x272}, &(0x7f0000000340)=0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r7, 0x0, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd=r3, 0x6, &(0x7f0000000580)=""/207, 0xcf, 0x2, 0x1}) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000002500)='\f', 0x1}], 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x11, 0x1, &(0x7f0000000240)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x1}], &(0x7f0000000280)='syzkaller\x00', 0xf3b, 0x8e, &(0x7f0000000380)=""/142, 0x41000, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000004c0)={0x4, 0x3}, 0x8, 0x10, &(0x7f0000000500)={0x3, 0x6, 0x8001, 0x81}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000680)=[r0, 0xffffffffffffffff], &(0x7f00000006c0)=[{0x0, 0x1, 0x3, 0x9}, {0x4, 0x1, 0xa, 0x8}], 0x10, 0x7f}, 0x94) io_uring_enter(r6, 0x627, 0x4c1, 0x43, 0x0, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x34, r9, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x4000080) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) r10 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r10, &(0x7f0000fe5000/0x18000)=nil, &(0x7f00000001c0)=[@text64={0x40, 0x0}], 0x1, 0x4e, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000000)="0f080fae04a200400f01c426660f3a15e6160fc76bdbf08666350f2170260fed9c000066b9230b00000f32", 0x2b}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r10, 0xae80, 0x0) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000000)={0x48, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x1}) 8m33.022385343s ago: executing program 32 (id=70): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000180)=0x7) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = syz_open_dev$I2C(&(0x7f0000000000), 0x0, 0x189802) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_io_uring_setup(0x498, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x0, 0x272}, &(0x7f0000000340)=0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r7, 0x0, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd=r3, 0x6, &(0x7f0000000580)=""/207, 0xcf, 0x2, 0x1}) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000002500)='\f', 0x1}], 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x11, 0x1, &(0x7f0000000240)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x1}], &(0x7f0000000280)='syzkaller\x00', 0xf3b, 0x8e, &(0x7f0000000380)=""/142, 0x41000, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000004c0)={0x4, 0x3}, 0x8, 0x10, &(0x7f0000000500)={0x3, 0x6, 0x8001, 0x81}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000680)=[r0, 0xffffffffffffffff], &(0x7f00000006c0)=[{0x0, 0x1, 0x3, 0x9}, {0x4, 0x1, 0xa, 0x8}], 0x10, 0x7f}, 0x94) io_uring_enter(r6, 0x627, 0x4c1, 0x43, 0x0, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x34, r9, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x4000080) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) r10 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r10, &(0x7f0000fe5000/0x18000)=nil, &(0x7f00000001c0)=[@text64={0x40, 0x0}], 0x1, 0x4e, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000000)="0f080fae04a200400f01c426660f3a15e6160fc76bdbf08666350f2170260fed9c000066b9230b00000f32", 0x2b}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r10, 0xae80, 0x0) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000000)={0x48, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x1}) 21.76017201s ago: executing program 2 (id=865): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x5, 0x4, 0xfff, 0x5}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000004000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000007300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000100)='GPL\x00', 0xd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={0x0, r1}, 0x18) 20.906603229s ago: executing program 2 (id=867): creat(&(0x7f0000000480)='./bus\x00', 0x141) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) openat$audio1(0xffffffffffffff9c, &(0x7f0000000200), 0x20000, 0x0) write$binfmt_script(r0, &(0x7f0000000180), 0xb) r1 = inotify_init1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x4000000) unshare(0x20000400) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) fdatasync(r1) r5 = socket$tipc(0x1e, 0x2, 0x0) getsockopt$sock_buf(r5, 0x1, 0x1a, &(0x7f0000000140)=""/62, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000100), 0x106, 0xa}}, 0x20) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000480)={0x50000015}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000d40)={0x44, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x44}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast1=0xe0004001}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x0) 14.827699621s ago: executing program 5 (id=880): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = fsmount(r0, 0x0, 0x0) fchdir(r3) r4 = open(&(0x7f0000000300)='./bus\x00', 0x82342, 0x1d6) ftruncate(r4, 0x2007ffb) sendfile(r4, r4, 0x0, 0x1000000201005) 13.488726052s ago: executing program 4 (id=881): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeea, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = open(&(0x7f0000000180)='./bus\x00', 0x283fe, 0x0) r5 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$FICLONE(r5, 0x40049409, r4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x20000000000001d2, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000001000000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x30, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffff52, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'wg1\x00'}) r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000500)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$FUSE(r6, &(0x7f00000034c0)={0x2020}, 0xcac) 13.247639112s ago: executing program 5 (id=882): bpf$PROG_LOAD(0x5, 0x0, 0x0) gettid() seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x4, 0x7, 0x50000}]}) syz_clone(0xb44040, 0x0, 0x0, 0x0, 0x0, 0x0) 11.818554032s ago: executing program 4 (id=885): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x23, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) r4 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r3, 0x29, 0x2a, &(0x7f0000000540)={0x5, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r4, 0x29, 0x30, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x110) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000040), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_256={{0x303}, "c8444943470da91b", "42f3ac0e0b8a32be8fe91c368e60693800", "e7198360", "f7a5c1777af05eaa"}, 0x38) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000440)={&(0x7f00000015c0)=ANY=[@ANYBLOB="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"], 0x250}, 0x1, 0x0, 0x0, 0x4000001}, 0x4000000) sendto$inet6(r3, 0x0, 0x0, 0x8040, 0x0, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000001c0), &(0x7f00000003c0)=0xc) write$binfmt_elf64(r3, 0x0, 0x78) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 9.515183161s ago: executing program 3 (id=886): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x100, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0xb, 0x800000000000000, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x6ad01, 0x0) writev(r4, &(0x7f0000000280)=[{&(0x7f0000000000)="04000000000203", 0x7}, {0x0}], 0x2) r5 = socket$inet(0xa, 0x801, 0x84) r6 = accept4(r5, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r6, 0x84, 0x22, 0x0, 0x0) sendto$inet6(r6, 0x0, 0x0, 0x4000050, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r6, 0x84, 0x7b, 0x0, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f00000004c0), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28011, r7, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) cachestat(r7, &(0x7f0000000040), 0x0, 0x0) r8 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_SET_FLAG(r8, 0x0, &(0x7f0000000140)='silent\x00', 0x0, 0x0) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB], 0x14}, 0x1, 0x0, 0x0, 0x8814}, 0x800) r9 = syz_open_dev$vim2m(&(0x7f0000000040), 0xec8, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r9, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix={0x9, 0xc, 0x32314142, 0x2, 0x6, 0x6, 0x4, 0xa6e, 0x0, 0x2, 0x1, 0x5}}) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0xa, 0x0, 0x0, @dev}, 0x1c) mkdir(&(0x7f0000000080)='./file0\x00', 0x13c) 9.499672017s ago: executing program 5 (id=887): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs={0x0, 0x0, 0xce20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) gettid() timer_settime(0x0, 0x0, 0x0, 0x0) r3 = openat$mixer(0xffffffffffffff9c, &(0x7f00000018c0), 0x0, 0x0) ioctl$mixer_OSS_GETVERSION(r3, 0x40086602, 0x0) 9.255553341s ago: executing program 4 (id=889): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) socket$netlink(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f0000000180), &(0x7f00000001c0)) socket$inet_smc(0x2b, 0x1, 0x0) io_uring_enter(r2, 0x2ded, 0xef92, 0x0, 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r5, 0x0, r3, 0x0, 0x2, 0x0) write$binfmt_elf64(r4, &(0x7f0000000000)=ANY=[], 0x18c6) 8.006026728s ago: executing program 5 (id=890): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000240), 0x80000, 0x0) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r1, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000040)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f00000007c0)={0x81, 0x2, r2}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000000)={0x28, 0x6, r2, 0x0, &(0x7f0000c00000/0x400000)=nil, 0x400000, 0x51e}) 7.688683841s ago: executing program 0 (id=891): bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[], 0x48) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000000)) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f00000001c0)) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8000}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$TCSETSW2(0xffffffffffffffff, 0x402c542c, 0x0) ioctl$SNDCTL_DSP_POST(r0, 0x5008, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha256)\x00'}, 0x58) socket$inet6(0xa, 0x80001, 0x0) syz_open_procfs(0x0, &(0x7f00000003c0)='net/mcfilter6\x00') setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) accept(0xffffffffffffffff, 0x0, 0x0) close(r0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) 6.931102719s ago: executing program 4 (id=892): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = fsmount(r0, 0x0, 0x0) fchdir(r3) r4 = open(&(0x7f0000000300)='./bus\x00', 0x82342, 0x1d6) ftruncate(r4, 0x2007ffb) sendfile(r4, r4, 0x0, 0x1000000201005) 6.346924123s ago: executing program 2 (id=893): socket$rxrpc(0x21, 0x2, 0x2) r0 = syz_open_dev$usbmon(&(0x7f0000000180), 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007d, 0x0) dup3(r0, r1, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) openat$nullb(0xffffffffffffff9c, &(0x7f0000000440), 0x180, 0x0) syz_io_uring_setup(0xd1, 0x0, &(0x7f0000000080)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000000)=0x3, 0x0, 0x4) syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) r3 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r3, &(0x7f0000002700)=""/102392, 0x18ff8) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[], 0x7c}}, 0x4000084) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) wait4(0x0, &(0x7f0000000140), 0x80000000, 0x0) 6.052203821s ago: executing program 0 (id=894): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)={0x14, 0x1f, 0x1, 0x0, 0x0, "", [@nested={0x4}]}, 0x14}], 0x1}, 0x0) 5.606336442s ago: executing program 0 (id=895): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x1}}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) write$FUSE_GETXATTR(r2, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_fscache}]}}) creat(&(0x7f00000002c0)='./file0\x00', 0x109) 5.007562789s ago: executing program 5 (id=896): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000040)='hfs\x00', 0x208000, 0x0) 4.749119231s ago: executing program 4 (id=897): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x18, 0xb, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, 0x0, 0x10) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f00000001c0), 0x185802, 0x0) sendfile(r3, r3, 0x0, 0x200000) 4.65234964s ago: executing program 2 (id=898): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x262200, 0x0) close(r0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r6}, 0x10) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_emit_ethernet(0x6a, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x10, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0xfffd, 0x4e20, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "6d4dfdeb8cf7bbfe143803bec2ce783e04cd32308cdd8dde", "c71cb8adfce542a4bc5a026c208fd0c45787e4aa384e3d26b21ea41cc128364c"}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000200000000"], 0x0}, 0x94) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[], 0x0, 0x34, 0x0, 0xa}, 0x28) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r2, &(0x7f0000000c40)={0xf0006000}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000000)={@remote}, 0x20) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xd) 4.59286667s ago: executing program 3 (id=899): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000000)="ca02016eba2d52b5f2ac03cc9f38f9d9", 0x10) 4.591688308s ago: executing program 5 (id=900): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs={0x0, 0x0, 0xce20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) gettid() timer_settime(0x0, 0x0, 0x0, 0x0) r3 = openat$mixer(0xffffffffffffff9c, &(0x7f00000018c0), 0x0, 0x0) ioctl$mixer_OSS_GETVERSION(r3, 0x40086602, 0x0) 4.370910493s ago: executing program 0 (id=901): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xa, 0x4, 0xdd, 0xa}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa10000000000000701"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffa}, [@call={0x85, 0x0, 0x0, 0x7}]}, 0x0, 0x2}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1}, 0x48) 4.176107216s ago: executing program 3 (id=902): r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000007c0)={0xa, 0x2, 0x0, @empty, 0x80000001}, 0x1c) setsockopt$inet6_tcp_int(r1, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r1, &(0x7f0000000340)="fb", 0x1, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000100)={@in6={{0xa, 0x4e22, 0x0, @loopback, 0x1}}, 0x0, 0x0, 0x2, 0x0, "10baa70a93289349d889de25b87376f64276337642b890d33cb5b592266c5b98fb19402835fee1b3871b7ef6619db5b2a94edb6f73ea08b02aa3b47debd38b6d889a8c986b33eb49c3157f1f370dfd67"}, 0xd8) r2 = dup(r1) sendto$inet6(r2, &(0x7f0000000800), 0x0, 0x4041, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 2.747926072s ago: executing program 2 (id=903): prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000480)=0x107e) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$alg(0x26, 0x5, 0x0) ioctl$sock_SIOCGPGRP(r1, 0x8904, 0x0) stat(0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x4, 0x4, 0x12}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) recvmmsg(r2, &(0x7f0000006080)=[{{0x0, 0x0, 0x0}, 0xffffffff}, {{0x0, 0x0, 0x0}, 0x5}], 0x2, 0x40000000, 0x0) 2.550536553s ago: executing program 4 (id=904): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x200000010, 0x0, 0x0) recvfrom$unix(0xffffffffffffffff, 0x0, 0x0, 0x10102, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002f40)=ANY=[@ANYBLOB="ac0000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c0002800500010000000000080007400000000118000680140004002001000000000000000000"], 0xac}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="ac0000000001010400000000000000000a0000003c0001802c000180140003000000000000000000000000000000000014000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8000000000000000000000000000aa0c00028005000100000000000800074000000000180006801400040020"], 0xac}, 0x1, 0x0, 0x0, 0x4000}, 0x4000894) r4 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=@newqdisc={0x2c, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@TCA_RATE={0x6, 0x5, {0x1, 0x9}}]}, 0x2c}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) r8 = syz_open_dev$dri(0x0, 0x1, 0x0) r9 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x8502, 0x0) write$sndseq(r9, &(0x7f0000001380)=[{0x6, 0x0, 0x0, 0x0, @tick, {0x5}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @result}, {0x10, 0x0, 0x0, 0x0, @time={0x4, 0x7}, {}, {0x0, 0x80}, @control}, {0x0, 0x0, 0x0, 0x0, @tick=0x8, {}, {}, @time}], 0x70) ioctl$DRM_IOCTL_MODE_ATOMIC(r8, 0xc03864bc, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3, 0x9) setsockopt$packet_tx_ring(r7, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x808000, 0x4, 0x20300, 0xfc, 0x2000000}, 0x1c) socket$kcm(0x10, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x931766f6319eed40) socket$kcm(0x10, 0x2, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='fdinfo\x00') prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) 2.416859452s ago: executing program 3 (id=905): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)={0x14, 0x1f, 0x1, 0x0, 0x0, "", [@nested={0x4}]}, 0x14}], 0x1}, 0x0) 1.465191755s ago: executing program 3 (id=906): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) r0 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141121) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) shutdown(r2, 0x1) recvmmsg(r2, &(0x7f0000001d00)=[{{0x0, 0x0, &(0x7f0000001640)=[{&(0x7f0000001d40)=""/4078, 0xfee}, {&(0x7f0000000340)=""/141, 0x8d}, {&(0x7f0000002d40)=""/4116, 0x1005}, {&(0x7f0000000400)=""/6, 0x6}, {&(0x7f0000000440)=""/231, 0xe7}], 0x5}}], 0x3ffffbd, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000005, 0x8031, 0xffffffffffffffff, 0x0) 1.458461449s ago: executing program 2 (id=907): r0 = open(&(0x7f0000000000)='./file0\x00', 0x80140, 0x0) fcntl$setlease(r0, 0x400, 0x1) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x800, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x3) socket$l2tp6(0xa, 0x2, 0x73) clock_adjtime(0x0, &(0x7f0000000100)={0x362, 0xf, 0x0, 0x8000000000000001, 0x48f, 0x5, 0xb, 0x424, 0x2, 0xffffffffffffffff, 0xf423f, 0xfffffffffffffff9, 0x8, 0x3, 0x8001000000081, 0x5, 0x2, 0x3, 0x2, 0x9220000000000000, 0x3, 0x1, 0x80000001, 0x0, 0x7, 0x7}) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x1}, 0x2) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) process_mrelease(0xffffffffffffffff, 0x0) mmap(&(0x7f00002c6000/0x1000)=nil, 0x1000, 0x1000002, 0x13, 0xffffffffffffffff, 0x20000) socket$netlink(0x10, 0x3, 0x0) remap_file_pages(&(0x7f0000799000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x40000) syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r4 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r4, &(0x7f0000000280), 0x10) setsockopt$CAN_RAW_ERR_FILTER(r4, 0x65, 0x2, &(0x7f0000000080)=0x8, 0x4) syz_open_dev$video(0x0, 0x8, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x14) close_range(r0, 0xffffffffffffffff, 0x0) 1.357115285s ago: executing program 0 (id=908): socket$rxrpc(0x21, 0x2, 0x2) r0 = syz_open_dev$usbmon(&(0x7f0000000180), 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007d, 0x0) dup3(r0, r1, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) openat$nullb(0xffffffffffffff9c, &(0x7f0000000440), 0x180, 0x0) syz_io_uring_setup(0xd1, 0x0, &(0x7f0000000080)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000000)=0x3, 0x0, 0x4) r3 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) r4 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r4, &(0x7f0000002700)=""/102392, 0x18ff8) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[], 0x7c}}, 0x4000084) fsconfig$FSCONFIG_SET_BINARY(r3, 0x6, 0x0, 0x0, 0x0) fsmount(r3, 0x0, 0x0) wait4(0x0, &(0x7f0000000140), 0x80000000, 0x0) 104.807573ms ago: executing program 3 (id=909): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = fsmount(r0, 0x0, 0x0) fchdir(r4) r5 = open(&(0x7f0000000300)='./bus\x00', 0x82342, 0x1d6) ftruncate(r5, 0x2007ffb) sendfile(r5, r5, 0x0, 0x1000000201005) 0s ago: executing program 0 (id=910): r0 = openat$cachefiles(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xf, 0x3, &(0x7f0000000500)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_device, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000300), 0x60000, 0x0) getsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000500)={@mcast1, 0x0}, &(0x7f0000000540)=0x14) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000100)={0x47, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x1e, 0x3, &(0x7f0000000400)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}}, &(0x7f00000004c0)='syzkaller\x00', 0x10000, 0x0, 0x0, 0x41000, 0x0, '\x00', r5, @sk_lookup=0x24, r0, 0x8, &(0x7f0000000580)={0x7, 0x4}, 0x8, 0x10, &(0x7f00000005c0)={0x1, 0x10, 0x3, 0x1000}, 0x10, r6, 0xffffffffffffffff, 0x6, &(0x7f0000000680), &(0x7f00000006c0)=[{0x1, 0x1, 0xb}, {0x1, 0x5, 0xe, 0xa}, {0x4, 0x2, 0x4, 0x3}, {0x1, 0x1, 0x0, 0x2}, {0x5, 0x3, 0xe, 0x2}, {0x5, 0x3, 0x4, 0x5}]}, 0x94) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0xb, &(0x7f0000000040)=@framed={{0x18, 0x7}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r7}}, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x94) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000140)={0x13, 0x65, 0xffff, 0x4, 0x6, '9P2000'}, 0x13) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000180)={r1, 0xffffffffffffffff, 0x6, 0x0, @val=@tracing}, 0x40) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) ioctl$SG_BLKTRACESETUP(r0, 0xc0481273, 0x0) close_range(r8, 0xffffffffffffffff, 0x0) syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) kernel console output (not intermixed with test programs): [ 87.239791][ T10] cfg80211: failed to load regulatory.db Warning: Permanently added '10.128.10.14' (ED25519) to the list of known hosts. [ 91.983907][ T5828] cgroup: Unknown subsys name 'net' [ 92.232485][ T5828] cgroup: Unknown subsys name 'cpuset' [ 92.286564][ T5828] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 94.289394][ T5828] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 98.528507][ T5843] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 98.556282][ T5843] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 98.563221][ T5843] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 98.587477][ T59] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 98.590824][ T59] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 98.591835][ T59] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 98.594691][ T59] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 98.610868][ T59] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 98.616272][ T59] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 98.666249][ T5157] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 98.737640][ T5843] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 98.739919][ T5843] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 98.740691][ T5843] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 98.742219][ T5843] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 98.743164][ T5843] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 98.868402][ T5157] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 98.872388][ T5157] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 98.873235][ T5157] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 98.874753][ T5157] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 98.887793][ T5854] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 98.923184][ T59] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 98.959788][ T59] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 98.966784][ T59] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 98.977911][ T59] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 98.978668][ T59] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 99.920468][ T5844] chnl_net:caif_netlink_parms(): no params data found [ 99.943914][ T5840] chnl_net:caif_netlink_parms(): no params data found [ 100.017459][ T5848] chnl_net:caif_netlink_parms(): no params data found [ 100.154502][ T5851] chnl_net:caif_netlink_parms(): no params data found [ 100.678168][ T5843] Bluetooth: hci1: command tx timeout [ 100.678173][ T59] Bluetooth: hci0: command tx timeout [ 100.757637][ T5850] chnl_net:caif_netlink_parms(): no params data found [ 100.836625][ T59] Bluetooth: hci2: command tx timeout [ 100.915862][ T59] Bluetooth: hci4: command tx timeout [ 100.960808][ T5844] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.960978][ T5844] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.961318][ T5844] bridge_slave_0: entered allmulticast mode [ 100.963288][ T5844] bridge_slave_0: entered promiscuous mode [ 100.996179][ T59] Bluetooth: hci3: command tx timeout [ 101.070219][ T5840] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.070471][ T5840] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.070681][ T5840] bridge_slave_0: entered allmulticast mode [ 101.073368][ T5840] bridge_slave_0: entered promiscuous mode [ 101.106150][ T5844] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.106348][ T5844] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.106564][ T5844] bridge_slave_1: entered allmulticast mode [ 101.113574][ T5844] bridge_slave_1: entered promiscuous mode [ 101.297714][ T5840] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.297888][ T5840] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.298135][ T5840] bridge_slave_1: entered allmulticast mode [ 101.301591][ T5840] bridge_slave_1: entered promiscuous mode [ 101.449878][ T5848] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.450020][ T5848] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.450142][ T5848] bridge_slave_0: entered allmulticast mode [ 101.451940][ T5848] bridge_slave_0: entered promiscuous mode [ 101.699920][ T5848] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.700101][ T5848] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.700299][ T5848] bridge_slave_1: entered allmulticast mode [ 101.702309][ T5848] bridge_slave_1: entered promiscuous mode [ 101.703531][ T5851] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.703646][ T5851] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.703763][ T5851] bridge_slave_0: entered allmulticast mode [ 101.705443][ T5851] bridge_slave_0: entered promiscuous mode [ 101.811980][ T5844] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 101.888389][ T5851] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.888532][ T5851] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.888717][ T5851] bridge_slave_1: entered allmulticast mode [ 101.892083][ T5851] bridge_slave_1: entered promiscuous mode [ 101.911333][ T5840] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 101.939383][ T5844] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 102.091668][ T5840] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 102.359356][ T5848] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 102.673237][ T5848] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 102.680891][ T5851] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 102.755993][ T5843] Bluetooth: hci0: command tx timeout [ 102.756115][ T59] Bluetooth: hci1: command tx timeout [ 102.760515][ T5850] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.760748][ T5850] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.760948][ T5850] bridge_slave_0: entered allmulticast mode [ 102.763246][ T5850] bridge_slave_0: entered promiscuous mode [ 102.808895][ T5844] team0: Port device team_slave_0 added [ 102.892372][ T5851] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 102.894758][ T5840] team0: Port device team_slave_0 added [ 102.895300][ T5850] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.895474][ T5850] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.906931][ T5850] bridge_slave_1: entered allmulticast mode [ 102.909834][ T5850] bridge_slave_1: entered promiscuous mode [ 102.914353][ T5844] team0: Port device team_slave_1 added [ 102.916101][ T59] Bluetooth: hci2: command tx timeout [ 102.995951][ T59] Bluetooth: hci4: command tx timeout [ 103.075959][ T59] Bluetooth: hci3: command tx timeout [ 103.250128][ T5840] team0: Port device team_slave_1 added [ 103.263857][ T5848] team0: Port device team_slave_0 added [ 103.629190][ T5848] team0: Port device team_slave_1 added [ 103.808408][ T5851] team0: Port device team_slave_0 added [ 103.812603][ T5850] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 103.813982][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 103.813994][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 103.814009][ T5844] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 104.019292][ T5851] team0: Port device team_slave_1 added [ 104.025088][ T5850] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 104.041946][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 104.041962][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 104.041990][ T5844] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 104.043941][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 104.043954][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 104.043980][ T5840] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 104.314442][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 104.314454][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 104.314469][ T5840] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 104.315532][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 104.315543][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 104.315557][ T5848] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 104.514520][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 104.514535][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 104.514551][ T5848] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 104.516398][ T5851] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 104.516412][ T5851] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 104.516434][ T5851] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 104.519456][ T5850] team0: Port device team_slave_0 added [ 104.681492][ T5851] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 104.681510][ T5851] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 104.681538][ T5851] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 104.684453][ T5850] team0: Port device team_slave_1 added [ 104.836334][ T5843] Bluetooth: hci0: command tx timeout [ 104.836448][ T59] Bluetooth: hci1: command tx timeout [ 104.997018][ T59] Bluetooth: hci2: command tx timeout [ 105.030312][ T5844] hsr_slave_0: entered promiscuous mode [ 105.032769][ T5844] hsr_slave_1: entered promiscuous mode [ 105.076971][ T59] Bluetooth: hci4: command tx timeout [ 105.155903][ T59] Bluetooth: hci3: command tx timeout [ 105.372627][ T5850] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 105.372645][ T5850] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 105.372672][ T5850] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 105.385925][ T5840] hsr_slave_0: entered promiscuous mode [ 105.387321][ T5840] hsr_slave_1: entered promiscuous mode [ 105.388324][ T5840] debugfs: 'hsr0' already exists in 'hsr' [ 105.388424][ T5840] Cannot create hsr debugfs directory [ 105.513461][ T5848] hsr_slave_0: entered promiscuous mode [ 105.514640][ T5848] hsr_slave_1: entered promiscuous mode [ 105.515226][ T5848] debugfs: 'hsr0' already exists in 'hsr' [ 105.515250][ T5848] Cannot create hsr debugfs directory [ 105.600779][ T5850] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 105.600797][ T5850] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 105.600824][ T5850] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 105.862586][ T5851] hsr_slave_0: entered promiscuous mode [ 105.863465][ T5851] hsr_slave_1: entered promiscuous mode [ 105.864029][ T5851] debugfs: 'hsr0' already exists in 'hsr' [ 105.864048][ T5851] Cannot create hsr debugfs directory [ 106.573698][ T5850] hsr_slave_0: entered promiscuous mode [ 106.574838][ T5850] hsr_slave_1: entered promiscuous mode [ 106.575430][ T5850] debugfs: 'hsr0' already exists in 'hsr' [ 106.575449][ T5850] Cannot create hsr debugfs directory [ 106.915993][ T5843] Bluetooth: hci0: command tx timeout [ 106.916048][ T59] Bluetooth: hci1: command tx timeout [ 107.086123][ T59] Bluetooth: hci2: command tx timeout [ 107.157382][ T59] Bluetooth: hci4: command tx timeout [ 107.235880][ T59] Bluetooth: hci3: command tx timeout [ 107.940874][ T5844] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 108.005935][ T5844] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 108.056217][ T5844] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 108.094756][ T5844] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 108.224335][ T5840] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 108.268956][ T5840] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 108.315115][ T5840] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 108.365342][ T5840] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 108.542079][ T5848] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 108.592824][ T5848] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 108.634651][ T5848] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 108.698071][ T5848] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 108.923897][ T5851] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 108.985055][ T5851] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 109.033875][ T5851] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 109.089054][ T5851] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 109.320607][ T5850] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 109.359395][ T5844] 8021q: adding VLAN 0 to HW filter on device bond0 [ 109.368572][ T5850] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 109.418245][ T5850] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 109.469876][ T5850] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 109.589580][ T5844] 8021q: adding VLAN 0 to HW filter on device team0 [ 109.622357][ T5840] 8021q: adding VLAN 0 to HW filter on device bond0 [ 109.666916][ T1469] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.667530][ T1469] bridge0: port 1(bridge_slave_0) entered forwarding state [ 109.723521][ T1469] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.724312][ T1469] bridge0: port 2(bridge_slave_1) entered forwarding state [ 109.796593][ T5840] 8021q: adding VLAN 0 to HW filter on device team0 [ 109.867847][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.868089][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 109.907591][ T5848] 8021q: adding VLAN 0 to HW filter on device bond0 [ 109.963207][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.963462][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 110.091586][ T5848] 8021q: adding VLAN 0 to HW filter on device team0 [ 110.139116][ T5851] 8021q: adding VLAN 0 to HW filter on device bond0 [ 110.194632][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.194926][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 110.261339][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.262088][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 110.352064][ T5851] 8021q: adding VLAN 0 to HW filter on device team0 [ 110.383275][ T5850] 8021q: adding VLAN 0 to HW filter on device bond0 [ 110.403261][ T1469] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.404719][ T1469] bridge0: port 1(bridge_slave_0) entered forwarding state [ 110.471948][ T1469] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.472186][ T1469] bridge0: port 2(bridge_slave_1) entered forwarding state [ 110.638713][ T5850] 8021q: adding VLAN 0 to HW filter on device team0 [ 110.725048][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.725195][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 110.788771][ T985] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.788944][ T985] bridge0: port 2(bridge_slave_1) entered forwarding state [ 110.951879][ T5844] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 111.244244][ T5840] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 111.641409][ T5840] veth0_vlan: entered promiscuous mode [ 111.754008][ T5840] veth1_vlan: entered promiscuous mode [ 111.777301][ T5848] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 111.933863][ T5851] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 112.066712][ T5840] veth0_macvtap: entered promiscuous mode [ 112.130546][ T5840] veth1_macvtap: entered promiscuous mode [ 112.164445][ T5850] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 112.203579][ T5848] veth0_vlan: entered promiscuous mode [ 112.251441][ T5844] veth0_vlan: entered promiscuous mode [ 112.293074][ T5848] veth1_vlan: entered promiscuous mode [ 112.304657][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 112.319501][ T5851] veth0_vlan: entered promiscuous mode [ 112.332586][ T5844] veth1_vlan: entered promiscuous mode [ 112.359851][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 112.406009][ T5851] veth1_vlan: entered promiscuous mode [ 112.413705][ T43] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.451373][ T43] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.465046][ T43] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.481820][ T43] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.583125][ T5850] veth0_vlan: entered promiscuous mode [ 112.671782][ T5848] veth0_macvtap: entered promiscuous mode [ 112.780661][ T5850] veth1_vlan: entered promiscuous mode [ 112.793386][ T5848] veth1_macvtap: entered promiscuous mode [ 112.813574][ T5844] veth0_macvtap: entered promiscuous mode [ 112.908719][ T5844] veth1_macvtap: entered promiscuous mode [ 112.914282][ T5851] veth0_macvtap: entered promiscuous mode [ 112.932745][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.932769][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.975294][ T5851] veth1_macvtap: entered promiscuous mode [ 113.020977][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 113.123209][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 113.127545][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 113.141626][ T985] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.141650][ T985] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.234898][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 113.271576][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 113.294856][ T5850] veth0_macvtap: entered promiscuous mode [ 113.303770][ T3629] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.315702][ T3629] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.321208][ T3629] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.333423][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 113.355228][ T3629] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.374940][ T5850] veth1_macvtap: entered promiscuous mode [ 113.402250][ T3629] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.417340][ T3629] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.424260][ T3629] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.436528][ T3629] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.492386][ T43] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.527017][ T983] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.549997][ T983] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.713774][ T983] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.039410][ T5850] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 115.286504][ T5850] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 115.429841][ T983] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 115.429864][ T983] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 115.452217][ T983] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.502759][ T983] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.518686][ T983] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.572753][ T983] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.647574][ T983] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 115.647598][ T983] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 115.761777][ T3629] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 115.761800][ T3629] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 116.068227][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 116.068251][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 116.357724][ T1436] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 116.358478][ T1436] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 116.546431][ T983] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 116.546456][ T983] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 116.705836][ T1469] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 116.705859][ T1469] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 117.001963][ T3495] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 117.001985][ T3495] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 117.531045][ C1] vkms_vblank_simulate: vblank timer overrun [ 117.735687][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 117.945657][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 117.964593][ C1] vkms_vblank_simulate: vblank timer overrun [ 119.065630][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 119.070264][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 119.265615][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 119.365617][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 119.365689][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 119.365824][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 119.365881][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 119.365957][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 129.346035][ T6025] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 133.518723][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.518837][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 136.832873][ T6079] Zero length message leads to an empty skb [ 137.874822][ T6083] warning: `syz.3.28' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 140.048323][ C0] vkms_vblank_simulate: vblank timer overrun [ 140.860203][ C0] vkms_vblank_simulate: vblank timer overrun [ 141.856264][ C0] vkms_vblank_simulate: vblank timer overrun [ 142.543681][ C0] vkms_vblank_simulate: vblank timer overrun [ 142.782681][ C0] vkms_vblank_simulate: vblank timer overrun [ 142.941783][ C0] vkms_vblank_simulate: vblank timer overrun [ 143.123625][ T6109] netlink: 96 bytes leftover after parsing attributes in process `syz.4.37'. [ 143.346920][ C0] vkms_vblank_simulate: vblank timer overrun [ 143.542287][ C0] vkms_vblank_simulate: vblank timer overrun [ 143.819740][ C0] vkms_vblank_simulate: vblank timer overrun [ 144.738331][ T3530] Bluetooth: hci5: Frame reassembly failed (-84) [ 145.391801][ C0] vkms_vblank_simulate: vblank timer overrun [ 145.547061][ C0] vkms_vblank_simulate: vblank timer overrun [ 146.025525][ C0] vkms_vblank_simulate: vblank timer overrun [ 146.755887][ T5843] Bluetooth: hci5: command 0x1003 tx timeout [ 146.965621][ T59] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 147.341962][ T6136] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 147.368601][ C0] vkms_vblank_simulate: vblank timer overrun [ 147.858687][ C0] vkms_vblank_simulate: vblank timer overrun [ 148.744420][ C0] vkms_vblank_simulate: vblank timer overrun [ 149.037879][ C0] vkms_vblank_simulate: vblank timer overrun [ 152.411821][ T6174] sctp: [Deprecated]: syz.3.54 (pid 6174) Use of struct sctp_assoc_value in delayed_ack socket option. [ 152.411821][ T6174] Use struct sctp_sack_info instead [ 152.444634][ T6174] sctp: [Deprecated]: syz.3.54 (pid 6174) Use of int in maxseg socket option. [ 152.444634][ T6174] Use struct sctp_assoc_value instead [ 157.196579][ T6227] sctp: [Deprecated]: syz.0.69 (pid 6227) Use of struct sctp_assoc_value in delayed_ack socket option. [ 157.196579][ T6227] Use struct sctp_sack_info instead [ 157.201620][ T6227] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 157.474009][ T6227] sctp: [Deprecated]: syz.0.69 (pid 6227) Use of int in maxseg socket option. [ 157.474009][ T6227] Use struct sctp_assoc_value instead [ 158.996234][ T67] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.186674][ T67] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.497159][ T5843] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 162.522820][ T5843] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 162.527863][ T5843] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 162.530195][ T5843] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 162.533712][ T5843] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 163.168065][ T67] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.722646][ T67] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.595444][ T59] Bluetooth: hci3: command tx timeout [ 166.673649][ T59] Bluetooth: hci3: command tx timeout [ 168.288452][ T67] bridge_slave_1: left allmulticast mode [ 168.288947][ T67] bridge_slave_1: left promiscuous mode [ 168.291895][ T67] bridge0: port 2(bridge_slave_1) entered disabled state [ 168.536992][ T67] bridge_slave_0: left allmulticast mode [ 168.537042][ T67] bridge_slave_0: left promiscuous mode [ 168.537577][ T67] bridge0: port 1(bridge_slave_0) entered disabled state [ 168.753470][ T59] Bluetooth: hci3: command tx timeout [ 170.832864][ T59] Bluetooth: hci3: command tx timeout [ 171.906063][ T67] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 172.064964][ T67] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 172.228290][ T67] bond0 (unregistering): Released all slaves [ 173.835538][ T6261] chnl_net:caif_netlink_parms(): no params data found [ 176.766399][ T6350] sctp: [Deprecated]: syz.3.101 (pid 6350) Use of struct sctp_assoc_value in delayed_ack socket option. [ 176.766399][ T6350] Use struct sctp_sack_info instead [ 178.528661][ T6351] sctp: [Deprecated]: syz.3.101 (pid 6351) Use of int in maxseg socket option. [ 178.528661][ T6351] Use struct sctp_assoc_value instead [ 179.906551][ T67] hsr_slave_0: left promiscuous mode [ 179.972553][ T67] hsr_slave_1: left promiscuous mode [ 179.974408][ T67] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 179.974500][ T67] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 180.056468][ T67] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 180.056577][ T67] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 181.338649][ T67] veth1_macvtap: left promiscuous mode [ 181.338948][ T67] veth0_macvtap: left promiscuous mode [ 181.340625][ T67] veth1_vlan: left promiscuous mode [ 181.341061][ T67] veth0_vlan: left promiscuous mode [ 185.131643][ T6413] netlink: 8 bytes leftover after parsing attributes in process `syz.3.115'. [ 187.746755][ T67] team0 (unregistering): Port device team_slave_1 removed [ 187.919601][ T67] team0 (unregistering): Port device team_slave_0 removed [ 190.075050][ T6261] bridge0: port 1(bridge_slave_0) entered blocking state [ 190.075175][ T6261] bridge0: port 1(bridge_slave_0) entered disabled state [ 190.075349][ T6261] bridge_slave_0: entered allmulticast mode [ 190.077100][ T6261] bridge_slave_0: entered promiscuous mode [ 190.426895][ T6261] bridge0: port 2(bridge_slave_1) entered blocking state [ 190.427085][ T6261] bridge0: port 2(bridge_slave_1) entered disabled state [ 190.427332][ T6261] bridge_slave_1: entered allmulticast mode [ 190.430609][ T6261] bridge_slave_1: entered promiscuous mode [ 192.886958][ C1] vkms_vblank_simulate: vblank timer overrun [ 193.449618][ T6261] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 193.529673][ T6261] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 194.493609][ T6261] team0: Port device team_slave_0 added [ 194.500122][ T6261] team0: Port device team_slave_1 added [ 194.846783][ C1] vkms_vblank_simulate: vblank timer overrun [ 194.849367][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.849447][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.062001][ C1] vkms_vblank_simulate: vblank timer overrun [ 195.220034][ C1] vkms_vblank_simulate: vblank timer overrun [ 195.499177][ C1] vkms_vblank_simulate: vblank timer overrun [ 195.651584][ C1] vkms_vblank_simulate: vblank timer overrun [ 195.777697][ C1] vkms_vblank_simulate: vblank timer overrun [ 196.178665][ T6261] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 196.178678][ T6261] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 196.178693][ T6261] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 196.227322][ T6261] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 196.227336][ T6261] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 196.227351][ T6261] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 197.129974][ C1] vkms_vblank_simulate: vblank timer overrun [ 197.322003][ C1] vkms_vblank_simulate: vblank timer overrun [ 197.447324][ C1] vkms_vblank_simulate: vblank timer overrun [ 197.751435][ T6479] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 197.885606][ T6261] hsr_slave_0: entered promiscuous mode [ 197.887116][ T6261] hsr_slave_1: entered promiscuous mode [ 197.888137][ T6261] debugfs: 'hsr0' already exists in 'hsr' [ 197.888162][ T6261] Cannot create hsr debugfs directory [ 198.056355][ T6476] sctp: [Deprecated]: syz.3.130 (pid 6476) Use of struct sctp_assoc_value in delayed_ack socket option. [ 198.056355][ T6476] Use struct sctp_sack_info instead [ 202.275813][ C0] vkms_vblank_simulate: vblank timer overrun [ 202.627946][ C0] vkms_vblank_simulate: vblank timer overrun [ 203.594800][ T6261] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 203.647062][ T6261] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 203.793955][ T6261] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 203.909368][ T6261] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 204.214663][ T6536] netlink: 20 bytes leftover after parsing attributes in process `syz.4.140'. [ 205.097053][ T6261] 8021q: adding VLAN 0 to HW filter on device bond0 [ 205.283688][ T6261] 8021q: adding VLAN 0 to HW filter on device team0 [ 205.655686][ T3555] bridge0: port 1(bridge_slave_0) entered blocking state [ 205.655889][ T3555] bridge0: port 1(bridge_slave_0) entered forwarding state [ 206.627542][ T3555] bridge0: port 2(bridge_slave_1) entered blocking state [ 206.627711][ T3555] bridge0: port 2(bridge_slave_1) entered forwarding state [ 207.553577][ C0] vkms_vblank_simulate: vblank timer overrun [ 209.128426][ C0] vkms_vblank_simulate: vblank timer overrun [ 209.766772][ C0] vkms_vblank_simulate: vblank timer overrun [ 210.760076][ T6261] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 214.134379][ C0] vkms_vblank_simulate: vblank timer overrun [ 214.271167][ C0] vkms_vblank_simulate: vblank timer overrun [ 214.388458][ C0] vkms_vblank_simulate: vblank timer overrun [ 214.637775][ C0] vkms_vblank_simulate: vblank timer overrun [ 214.796037][ C0] vkms_vblank_simulate: vblank timer overrun [ 215.518954][ T6261] veth0_vlan: entered promiscuous mode [ 215.580654][ T6261] veth1_vlan: entered promiscuous mode [ 215.727540][ T6261] veth0_macvtap: entered promiscuous mode [ 215.779729][ T6261] veth1_macvtap: entered promiscuous mode [ 215.916572][ T6261] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 216.029237][ T6261] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 216.135690][ T1469] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.137406][ T1469] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.139432][ T1469] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.177161][ T1469] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.335816][ C0] vkms_vblank_simulate: vblank timer overrun [ 218.394607][ C0] vkms_vblank_simulate: vblank timer overrun [ 218.543751][ C0] vkms_vblank_simulate: vblank timer overrun [ 222.716292][ T5847] Bluetooth: hci2: command 0x0406 tx timeout [ 222.716599][ T5847] Bluetooth: hci4: command 0x0406 tx timeout [ 222.719656][ T5845] Bluetooth: hci1: command 0x0406 tx timeout [ 223.226236][ C1] vkms_vblank_simulate: vblank timer overrun [ 223.370283][ C1] vkms_vblank_simulate: vblank timer overrun [ 223.972938][ C1] vkms_vblank_simulate: vblank timer overrun [ 224.686873][ T59] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 224.705925][ T59] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 224.870231][ C1] vkms_vblank_simulate: vblank timer overrun [ 224.890034][ T59] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 224.906354][ T59] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 224.907722][ T59] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 225.640421][ C1] vkms_vblank_simulate: vblank timer overrun [ 225.796570][ C1] vkms_vblank_simulate: vblank timer overrun [ 226.369654][ C1] vkms_vblank_simulate: vblank timer overrun [ 226.685954][ T6693] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 226.701750][ C1] vkms_vblank_simulate: vblank timer overrun [ 227.221837][ T59] Bluetooth: hci5: command tx timeout [ 227.244112][ C1] vkms_vblank_simulate: vblank timer overrun [ 227.812667][ C1] vkms_vblank_simulate: vblank timer overrun [ 229.238537][ T59] Bluetooth: hci5: command tx timeout [ 229.453286][ T6714] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 231.163355][ C0] vkms_vblank_simulate: vblank timer overrun [ 231.259421][ C0] vkms_vblank_simulate: vblank timer overrun [ 232.162320][ C0] vkms_vblank_simulate: vblank timer overrun [ 232.163831][ T59] Bluetooth: hci5: command tx timeout [ 232.195645][ C0] vkms_vblank_simulate: vblank timer overrun [ 232.516945][ T6722] ceph: No mds server is up or the cluster is laggy [ 232.550071][ C0] vkms_vblank_simulate: vblank timer overrun [ 232.601646][ T6154] libceph: connect (1)[c::]:6789 error -101 [ 232.668123][ T6154] libceph: mon0 (1)[c::]:6789 connect error [ 234.204570][ T6740] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 234.306583][ C0] vkms_vblank_simulate: vblank timer overrun [ 234.419347][ T5843] Bluetooth: hci5: command tx timeout [ 235.160812][ C0] vkms_vblank_simulate: vblank timer overrun [ 235.662363][ C0] vkms_vblank_simulate: vblank timer overrun [ 236.325996][ T3495] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.528008][ C0] vkms_vblank_simulate: vblank timer overrun [ 238.010170][ T3495] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.678757][ T3495] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.162491][ T3495] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.207445][ T6679] chnl_net:caif_netlink_parms(): no params data found [ 253.538819][ T3495] bridge_slave_1: left allmulticast mode [ 253.538856][ T3495] bridge_slave_1: left promiscuous mode [ 253.539155][ T3495] bridge0: port 2(bridge_slave_1) entered disabled state [ 254.358430][ T3495] bridge_slave_0: left allmulticast mode [ 254.358469][ T3495] bridge_slave_0: left promiscuous mode [ 254.360403][ T3495] bridge0: port 1(bridge_slave_0) entered disabled state [ 256.794330][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.794421][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.827486][ T1321] aoe: packet could not be sent on ipvlan1. consider increasing tx_queue_len [ 258.828539][ T10] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 259.080561][ T10] usb 4-1: config index 0 descriptor too short (expected 7768, got 18) [ 259.080593][ T10] usb 4-1: config 0 has an invalid interface number: 97 but max is 0 [ 259.080614][ T10] usb 4-1: config 0 has no interface number 0 [ 259.080674][ T10] usb 4-1: New USB device found, idVendor=0483, idProduct=3747, bcdDevice=52.4d [ 259.080697][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 259.170514][ T10] usb 4-1: config 0 descriptor?? [ 259.195069][ T10] ftdi_sio 4-1:0.97: FTDI USB Serial Device converter detected [ 259.237967][ T10] ftdi_sio ttyUSB0: unknown device type: 0x524d [ 260.337571][ T5170] usb 4-1: USB disconnect, device number 2 [ 260.380405][ T5170] ftdi_sio 4-1:0.97: device disconnected [ 261.078550][ T3495] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 261.120295][ T3495] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 261.143521][ T3495] bond0 (unregistering): Released all slaves [ 262.888272][ T6901] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 262.955781][ T6896] mmap: syz.2.219 (6896) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 263.195451][ T6901] netlink: 'syz.3.221': attribute type 12 has an invalid length. [ 263.195478][ T6901] netlink: 'syz.3.221': attribute type 29 has an invalid length. [ 263.195491][ T6901] netlink: 148 bytes leftover after parsing attributes in process `syz.3.221'. [ 263.195520][ T6901] netlink: 'syz.3.221': attribute type 1 has an invalid length. [ 263.195532][ T6901] netlink: 'syz.3.221': attribute type 2 has an invalid length. [ 263.195544][ T6901] netlink: 39 bytes leftover after parsing attributes in process `syz.3.221'. [ 264.027884][ T6679] bridge0: port 1(bridge_slave_0) entered blocking state [ 264.028062][ T6679] bridge0: port 1(bridge_slave_0) entered disabled state [ 264.030059][ T6679] bridge_slave_0: entered allmulticast mode [ 264.033841][ T6679] bridge_slave_0: entered promiscuous mode [ 264.087844][ T6679] bridge0: port 2(bridge_slave_1) entered blocking state [ 264.088014][ T6679] bridge0: port 2(bridge_slave_1) entered disabled state [ 264.088241][ T6679] bridge_slave_1: entered allmulticast mode [ 264.092662][ T6679] bridge_slave_1: entered promiscuous mode [ 265.610210][ T3495] hsr_slave_0: left promiscuous mode [ 265.622867][ T6154] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 265.767594][ T3495] hsr_slave_1: left promiscuous mode [ 265.768752][ T3495] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 265.768785][ T3495] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 265.827229][ T6154] usb 4-1: config index 0 descriptor too short (expected 7768, got 18) [ 265.827271][ T6154] usb 4-1: config 0 has an invalid interface number: 97 but max is 0 [ 265.827394][ T6154] usb 4-1: config 0 has no interface number 0 [ 265.827447][ T6154] usb 4-1: New USB device found, idVendor=0483, idProduct=3747, bcdDevice=52.4d [ 265.827471][ T6154] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 265.913016][ T3495] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 265.913053][ T3495] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 265.959111][ T6154] usb 4-1: config 0 descriptor?? [ 266.757112][ T6937] blktrace: Concurrent blktraces are not allowed on loop8 [ 267.197823][ T6154] ftdi_sio 4-1:0.97: FTDI USB Serial Device converter detected [ 267.200850][ T6154] ftdi_sio ttyUSB0: unknown device type: 0x524d [ 267.399830][ T3495] veth1_macvtap: left promiscuous mode [ 267.400041][ T3495] veth0_macvtap: left promiscuous mode [ 267.400363][ T3495] veth1_vlan: left promiscuous mode [ 267.400609][ T3495] veth0_vlan: left promiscuous mode [ 267.481742][ T5896] usb 4-1: USB disconnect, device number 3 [ 267.537819][ T5896] ftdi_sio 4-1:0.97: device disconnected [ 271.689417][ T3495] team0 (unregistering): Port device team_slave_1 removed [ 271.909229][ T3495] team0 (unregistering): Port device team_slave_0 removed [ 274.382985][ T6679] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 274.493692][ T6679] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 274.616886][ T37] audit: type=1326 audit(2000000155.468:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6965 comm="syz.2.235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4df167ebe9 code=0x7ffc0000 [ 274.616960][ T37] audit: type=1326 audit(2000000155.468:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6965 comm="syz.2.235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4df167ebe9 code=0x7ffc0000 [ 274.617004][ T37] audit: type=1326 audit(2000000155.478:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6965 comm="syz.2.235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=20 compat=0 ip=0x7f4df167ebe9 code=0x7ffc0000 [ 274.617048][ T37] audit: type=1326 audit(2000000155.478:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6965 comm="syz.2.235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4df167ebe9 code=0x7ffc0000 [ 274.617093][ T37] audit: type=1326 audit(2000000155.478:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6965 comm="syz.2.235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4df167ebe9 code=0x7ffc0000 [ 275.261253][ T5170] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 275.261580][ C0] raw-gadget.0 gadget.0: ignoring, device is not running [ 275.477007][ T5170] usb 1-1: device descriptor read/64, error -32 [ 275.818548][ T5170] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 275.880378][ T6679] team0: Port device team_slave_0 added [ 275.903029][ T6679] team0: Port device team_slave_1 added [ 275.972451][ T5170] usb 1-1: config index 0 descriptor too short (expected 7768, got 18) [ 275.972482][ T5170] usb 1-1: config 0 has an invalid interface number: 97 but max is 0 [ 275.972501][ T5170] usb 1-1: config 0 has no interface number 0 [ 275.972554][ T5170] usb 1-1: New USB device found, idVendor=0483, idProduct=3747, bcdDevice=52.4d [ 275.972576][ T5170] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 276.044974][ T5170] usb 1-1: config 0 descriptor?? [ 276.078948][ T5170] ftdi_sio 1-1:0.97: FTDI USB Serial Device converter detected [ 276.083622][ T5170] ftdi_sio ttyUSB0: unknown device type: 0x524d [ 276.600231][ T5923] usb 1-1: USB disconnect, device number 3 [ 276.604134][ T5923] ftdi_sio 1-1:0.97: device disconnected [ 276.810410][ T6679] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 276.810428][ T6679] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 276.810462][ T6679] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 276.866649][ T6679] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 276.870780][ T6679] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 276.870819][ T6679] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 278.279258][ T6679] hsr_slave_0: entered promiscuous mode [ 278.293556][ T6679] hsr_slave_1: entered promiscuous mode [ 278.294796][ T6679] debugfs: 'hsr0' already exists in 'hsr' [ 278.294823][ T6679] Cannot create hsr debugfs directory [ 281.646123][ T7022] blktrace: Concurrent blktraces are not allowed on loop0 [ 283.134524][ T7035] netlink: 4 bytes leftover after parsing attributes in process `syz.4.248'. [ 285.115482][ T5854] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 285.125018][ T5854] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 285.126454][ T5854] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 285.128194][ T5854] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 285.129087][ T5854] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 285.416404][ T6947] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 285.589553][ T6947] usb 4-1: config index 0 descriptor too short (expected 7768, got 18) [ 285.589585][ T6947] usb 4-1: config 0 has an invalid interface number: 97 but max is 0 [ 285.589605][ T6947] usb 4-1: config 0 has no interface number 0 [ 285.589659][ T6947] usb 4-1: New USB device found, idVendor=0483, idProduct=3747, bcdDevice=52.4d [ 285.589682][ T6947] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 285.652644][ T6947] usb 4-1: config 0 descriptor?? [ 285.673139][ T6947] ftdi_sio 4-1:0.97: FTDI USB Serial Device converter detected [ 285.675408][ T6947] ftdi_sio ttyUSB0: unknown device type: 0x524d [ 286.125026][ T5923] usb 4-1: USB disconnect, device number 4 [ 286.276999][ T5923] ftdi_sio 4-1:0.97: device disconnected [ 286.721683][ T57] bridge_slave_1: left allmulticast mode [ 286.721709][ T57] bridge_slave_1: left promiscuous mode [ 286.724382][ T57] bridge0: port 2(bridge_slave_1) entered disabled state [ 287.133776][ T57] bridge_slave_0: left allmulticast mode [ 287.133817][ T57] bridge_slave_0: left promiscuous mode [ 287.139032][ T57] bridge0: port 1(bridge_slave_0) entered disabled state [ 287.276484][ T5854] Bluetooth: hci3: command tx timeout [ 288.697018][ T57] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 288.779102][ T57] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 288.911396][ T57] bond0 (unregistering): Released all slaves [ 289.366097][ T5854] Bluetooth: hci3: command tx timeout [ 289.931657][ T7086] blktrace: Concurrent blktraces are not allowed on loop8 [ 290.407126][ T57] hsr_slave_0: left promiscuous mode [ 290.456933][ T57] hsr_slave_1: left promiscuous mode [ 290.458184][ T57] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 290.507556][ T57] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 291.257554][ T57] team0 (unregistering): Port device team_slave_1 removed [ 291.271198][ T59] Bluetooth: hci2: unexpected event for opcode 0x2002 [ 291.386254][ T59] Bluetooth: hci3: command tx timeout [ 291.519627][ T57] team0 (unregistering): Port device team_slave_0 removed [ 292.567313][ T7110] program syz.4.264 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 292.567599][ T7110] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 293.517990][ T59] Bluetooth: hci2: command 0x0406 tx timeout [ 293.518042][ T59] Bluetooth: hci3: command tx timeout [ 293.681862][ T7048] chnl_net:caif_netlink_parms(): no params data found [ 295.632701][ T7137] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 296.275017][ T7048] bridge0: port 1(bridge_slave_0) entered blocking state [ 296.275225][ T7048] bridge0: port 1(bridge_slave_0) entered disabled state [ 296.275464][ T7048] bridge_slave_0: entered allmulticast mode [ 296.282387][ T7048] bridge_slave_0: entered promiscuous mode [ 296.421779][ T7048] bridge0: port 2(bridge_slave_1) entered blocking state [ 296.421947][ T7048] bridge0: port 2(bridge_slave_1) entered disabled state [ 296.422280][ T7048] bridge_slave_1: entered allmulticast mode [ 296.474984][ T7048] bridge_slave_1: entered promiscuous mode [ 297.223557][ T7158] blktrace: Concurrent blktraces are not allowed on loop6 [ 298.249079][ T7168] program syz.0.276 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 298.249506][ T7168] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 298.500317][ T7048] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 298.510438][ T7048] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 301.946073][ T7194] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 302.559155][ T7048] team0: Port device team_slave_0 added [ 302.788291][ T7048] team0: Port device team_slave_1 added [ 303.208684][ T7208] blktrace: Concurrent blktraces are not allowed on loop0 [ 304.425795][ T7210] wireguard0: entered promiscuous mode [ 304.425832][ T7210] wireguard0: entered allmulticast mode [ 304.433950][ T7048] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 304.433962][ T7048] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 304.433977][ T7048] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 304.476020][ T7048] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 304.476037][ T7048] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 304.476060][ T7048] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 306.298125][ T7048] hsr_slave_0: entered promiscuous mode [ 306.300777][ T7048] hsr_slave_1: entered promiscuous mode [ 306.301587][ T7048] debugfs: 'hsr0' already exists in 'hsr' [ 306.301604][ T7048] Cannot create hsr debugfs directory [ 306.618253][ T7231] program syz.0.290 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 306.618480][ T7231] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 309.465117][ T5170] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 310.092651][ T5170] usb 3-1: config index 0 descriptor too short (expected 7768, got 18) [ 310.092684][ T5170] usb 3-1: config 0 has an invalid interface number: 97 but max is 0 [ 310.092705][ T5170] usb 3-1: config 0 has no interface number 0 [ 310.092758][ T5170] usb 3-1: New USB device found, idVendor=0483, idProduct=3747, bcdDevice=52.4d [ 310.092782][ T5170] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 310.177408][ T5170] usb 3-1: config 0 descriptor?? [ 310.200692][ T5170] ftdi_sio 3-1:0.97: FTDI USB Serial Device converter detected [ 310.202976][ T5170] ftdi_sio ttyUSB0: unknown device type: 0x524d [ 312.770313][ T5931] usb 3-1: USB disconnect, device number 2 [ 312.773280][ T5931] ftdi_sio 3-1:0.97: device disconnected [ 317.682889][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.682943][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.698796][ T1321] aoe: packet could not be sent on ipvlan1. consider increasing tx_queue_len [ 320.462691][ T7048] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 320.600825][ T7048] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 320.614448][ T5931] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 321.070163][ T5931] usb 4-1: config index 0 descriptor too short (expected 7768, got 18) [ 321.070255][ T5931] usb 4-1: config 0 has an invalid interface number: 97 but max is 0 [ 321.070303][ T5931] usb 4-1: config 0 has no interface number 0 [ 321.070718][ T5931] usb 4-1: New USB device found, idVendor=0483, idProduct=3747, bcdDevice=52.4d [ 321.070772][ T5931] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 321.361690][ T5931] usb 4-1: config 0 descriptor?? [ 321.382825][ T5931] ftdi_sio 4-1:0.97: FTDI USB Serial Device converter detected [ 321.399666][ T5931] ftdi_sio ttyUSB0: unknown device type: 0x524d [ 321.465334][ T7048] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 321.952394][ T7048] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 323.815428][ T7048] 8021q: adding VLAN 0 to HW filter on device bond0 [ 323.990308][ T7048] 8021q: adding VLAN 0 to HW filter on device team0 [ 324.086604][ T983] bridge0: port 1(bridge_slave_0) entered blocking state [ 324.086784][ T983] bridge0: port 1(bridge_slave_0) entered forwarding state [ 324.168926][ T3495] bridge0: port 2(bridge_slave_1) entered blocking state [ 324.174356][ T3495] bridge0: port 2(bridge_slave_1) entered forwarding state [ 327.860458][ T7048] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 330.275968][ T5931] usb 4-1: USB disconnect, device number 5 [ 330.338064][ T5931] ftdi_sio 4-1:0.97: device disconnected [ 332.329696][ T7048] veth0_vlan: entered promiscuous mode [ 332.407569][ T7048] veth1_vlan: entered promiscuous mode [ 332.822962][ T7048] veth0_macvtap: entered promiscuous mode [ 334.113044][ T7048] veth1_macvtap: entered promiscuous mode [ 335.495186][ T7048] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 335.821892][ T7048] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 336.593811][ T6947] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 336.899417][ T67] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.904977][ T67] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.905507][ T67] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.905812][ T67] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 337.388357][ T6947] usb 3-1: config index 0 descriptor too short (expected 7768, got 18) [ 337.388377][ T6947] usb 3-1: config 0 has an invalid interface number: 97 but max is 0 [ 337.388388][ T6947] usb 3-1: config 0 has no interface number 0 [ 337.388428][ T6947] usb 3-1: New USB device found, idVendor=0483, idProduct=3747, bcdDevice=52.4d [ 337.388440][ T6947] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 337.392245][ T6947] usb 3-1: config 0 descriptor?? [ 337.397158][ T6947] ftdi_sio 3-1:0.97: FTDI USB Serial Device converter detected [ 337.399493][ T6947] ftdi_sio ttyUSB0: unknown device type: 0x524d [ 339.674827][ T1469] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 339.674849][ T1469] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 339.971377][ T3530] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 339.971409][ T3530] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 345.944010][ T5854] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 345.967068][ T5854] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 345.974874][ T5854] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 345.985261][ T5854] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 345.991254][ T5854] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 347.022922][ T5916] usb 3-1: USB disconnect, device number 3 [ 347.025693][ T5916] ftdi_sio 3-1:0.97: device disconnected [ 348.104478][ T5854] Bluetooth: hci5: command tx timeout [ 350.182779][ T5854] Bluetooth: hci5: command tx timeout [ 352.266760][ T5854] Bluetooth: hci5: command tx timeout [ 354.059964][ T1436] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.342597][ T5854] Bluetooth: hci5: command tx timeout [ 354.408820][ T7535] chnl_net:caif_netlink_parms(): no params data found [ 355.353671][ T1436] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 356.298067][ T1436] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 359.970258][ T1436] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 362.023602][ T7535] bridge0: port 1(bridge_slave_0) entered blocking state [ 362.035239][ T7535] bridge0: port 1(bridge_slave_0) entered disabled state [ 362.035499][ T7535] bridge_slave_0: entered allmulticast mode [ 362.092436][ T7535] bridge_slave_0: entered promiscuous mode [ 362.143000][ T7535] bridge0: port 2(bridge_slave_1) entered blocking state [ 362.143108][ T7535] bridge0: port 2(bridge_slave_1) entered disabled state [ 362.143305][ T7535] bridge_slave_1: entered allmulticast mode [ 362.145085][ T7535] bridge_slave_1: entered promiscuous mode [ 363.536582][ T7535] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 364.664771][ T7535] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 366.246479][ T7535] team0: Port device team_slave_0 added [ 366.383985][ T7535] team0: Port device team_slave_1 added [ 366.537708][ T1436] bridge_slave_1: left allmulticast mode [ 366.537742][ T1436] bridge_slave_1: left promiscuous mode [ 366.537990][ T1436] bridge0: port 2(bridge_slave_1) entered disabled state [ 366.680379][ T1436] bridge_slave_0: left allmulticast mode [ 366.680414][ T1436] bridge_slave_0: left promiscuous mode [ 366.680718][ T1436] bridge0: port 1(bridge_slave_0) entered disabled state [ 371.133399][ T7711] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.392'. [ 372.352384][ T1436] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 372.500309][ T1436] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 372.564014][ T1436] bond0 (unregistering): Released all slaves [ 372.938984][ T7535] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 372.939004][ T7535] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 372.939029][ T7535] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 372.950168][ T7535] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 372.950183][ T7535] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 372.950206][ T7535] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 373.916166][ T7727] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 379.203983][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.204082][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.209161][ T1321] aoe: packet could not be sent on ipvlan1. consider increasing tx_queue_len [ 380.936070][ T7535] hsr_slave_0: entered promiscuous mode [ 380.981288][ T7535] hsr_slave_1: entered promiscuous mode [ 380.981875][ T7535] debugfs: 'hsr0' already exists in 'hsr' [ 380.981892][ T7535] Cannot create hsr debugfs directory [ 384.800979][ T5931] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 384.965452][ T5931] usb 1-1: config index 0 descriptor too short (expected 7768, got 18) [ 384.965493][ T5931] usb 1-1: config 0 has an invalid interface number: 97 but max is 0 [ 384.965521][ T5931] usb 1-1: config 0 has no interface number 0 [ 384.965574][ T5931] usb 1-1: New USB device found, idVendor=0483, idProduct=3747, bcdDevice=52.4d [ 384.965597][ T5931] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 385.490899][ T5931] usb 1-1: config 0 descriptor?? [ 385.599586][ T1436] hsr_slave_0: left promiscuous mode [ 385.688610][ T5931] ftdi_sio 1-1:0.97: FTDI USB Serial Device converter detected [ 385.748806][ T5931] ftdi_sio ttyUSB0: unknown device type: 0x524d [ 385.919924][ T1436] hsr_slave_1: left promiscuous mode [ 385.928481][ T1436] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 385.928503][ T1436] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 385.973405][ T1436] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 385.973443][ T1436] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 387.423115][ T1436] veth1_macvtap: left promiscuous mode [ 387.423269][ T1436] veth0_macvtap: left promiscuous mode [ 387.423614][ T1436] veth1_vlan: left promiscuous mode [ 387.423859][ T1436] veth0_vlan: left promiscuous mode [ 387.670732][ T5958] usb 1-1: USB disconnect, device number 4 [ 387.675225][ T5958] ftdi_sio 1-1:0.97: device disconnected [ 396.196800][ T5923] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 396.344132][ T5923] usb 3-1: config index 0 descriptor too short (expected 7768, got 18) [ 396.344164][ T5923] usb 3-1: config 0 has an invalid interface number: 97 but max is 0 [ 396.344184][ T5923] usb 3-1: config 0 has no interface number 0 [ 396.344238][ T5923] usb 3-1: New USB device found, idVendor=0483, idProduct=3747, bcdDevice=52.4d [ 396.344261][ T5923] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 396.414234][ T5923] usb 3-1: config 0 descriptor?? [ 396.480620][ T5923] ftdi_sio 3-1:0.97: FTDI USB Serial Device converter detected [ 396.482948][ T5923] ftdi_sio ttyUSB0: unknown device type: 0x524d [ 396.931076][ T1436] team0 (unregistering): Port device team_slave_1 removed [ 397.795190][ T1436] team0 (unregistering): Port device team_slave_0 removed [ 398.351066][ T982] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 398.520382][ T982] usb 4-1: Using ep0 maxpacket: 16 [ 398.526416][ T982] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 398.526444][ T982] usb 4-1: config 0 has no interface number 0 [ 398.529446][ T982] usb 4-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 398.529476][ T982] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 398.529496][ T982] usb 4-1: Product: syz [ 398.529509][ T982] usb 4-1: Manufacturer: syz [ 398.529524][ T982] usb 4-1: SerialNumber: syz [ 398.616038][ T982] usb 4-1: config 0 descriptor?? [ 398.698231][ T982] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 400.525851][ T982] gspca_spca1528: reg_r err -71 [ 400.525970][ T982] spca1528 4-1:0.1: probe with driver spca1528 failed with error -71 [ 400.540713][ T982] usb 4-1: USB disconnect, device number 6 [ 402.152010][ T5923] usb 3-1: USB disconnect, device number 4 [ 402.158136][ T5923] ftdi_sio 3-1:0.97: device disconnected [ 403.585480][ T7892] netlink: 148 bytes leftover after parsing attributes in process `syz.4.437'. [ 404.361707][ T7902] loop5: detected capacity change from 0 to 14535 [ 404.739772][ T7903] loop5: detected capacity change from 14535 to 31335 [ 406.894366][ T7902] Dev loop5: unable to read RDB block 8 [ 406.894667][ T7902] loop5: unable to read partition table [ 406.894956][ T7902] loop_reread_partitions: partition scan of loop5 (被xڬdƤݡ [ 406.894956][ T7902] ) failed (rc=-5) [ 408.272814][ T7898] syz.4.437 (7898): drop_caches: 2 [ 408.909806][ T59] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 408.914990][ T59] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 408.939956][ T59] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 408.980116][ T59] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 409.022276][ T59] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 411.698695][ T59] Bluetooth: hci3: command tx timeout [ 413.629428][ T6947] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 413.779329][ T59] Bluetooth: hci3: command tx timeout [ 413.865877][ T6947] usb 4-1: config index 0 descriptor too short (expected 7768, got 18) [ 413.865909][ T6947] usb 4-1: config 0 has an invalid interface number: 97 but max is 0 [ 413.865929][ T6947] usb 4-1: config 0 has no interface number 0 [ 413.865991][ T6947] usb 4-1: New USB device found, idVendor=0483, idProduct=3747, bcdDevice=52.4d [ 413.866015][ T6947] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 413.954934][ T6947] usb 4-1: config 0 descriptor?? [ 413.979256][ T6947] ftdi_sio 4-1:0.97: FTDI USB Serial Device converter detected [ 413.981439][ T6947] ftdi_sio ttyUSB0: unknown device type: 0x524d [ 415.700209][ T5924] usb 4-1: USB disconnect, device number 7 [ 415.729485][ T5924] ftdi_sio 4-1:0.97: device disconnected [ 415.859198][ T59] Bluetooth: hci3: command tx timeout [ 417.396413][ T7918] chnl_net:caif_netlink_parms(): no params data found [ 417.781877][ T1436] bridge_slave_1: left allmulticast mode [ 417.781944][ T1436] bridge_slave_1: left promiscuous mode [ 417.782187][ T1436] bridge0: port 2(bridge_slave_1) entered disabled state [ 417.873987][ T1436] bridge_slave_0: left allmulticast mode [ 417.874037][ T1436] bridge_slave_0: left promiscuous mode [ 417.874281][ T1436] bridge0: port 1(bridge_slave_0) entered disabled state [ 417.941101][ T59] Bluetooth: hci3: command tx timeout [ 418.428132][ T7985] afs: Unknown parameter 'dy' [ 420.523521][ T1436] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 420.963487][ T1436] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 421.899994][ T5931] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 421.962970][ T1436] bond0 (unregistering): Released all slaves [ 422.134019][ T5931] usb 1-1: config index 0 descriptor too short (expected 7768, got 18) [ 422.134052][ T5931] usb 1-1: config 0 has an invalid interface number: 97 but max is 0 [ 422.134072][ T5931] usb 1-1: config 0 has no interface number 0 [ 422.134128][ T5931] usb 1-1: New USB device found, idVendor=0483, idProduct=3747, bcdDevice=52.4d [ 422.134151][ T5931] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 422.205631][ T5931] usb 1-1: config 0 descriptor?? [ 422.244726][ T5931] ftdi_sio 1-1:0.97: FTDI USB Serial Device converter detected [ 422.311956][ T5931] ftdi_sio ttyUSB0: unknown device type: 0x524d [ 422.920498][ T1436] hsr_slave_0: left promiscuous mode [ 422.959776][ T1436] hsr_slave_1: left promiscuous mode [ 422.960633][ T1436] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 423.010119][ T1436] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 428.053619][ T1436] team0 (unregistering): Port device team_slave_1 removed [ 428.864237][ T5931] usb 1-1: USB disconnect, device number 5 [ 428.891994][ T5931] ftdi_sio 1-1:0.97: device disconnected [ 428.926730][ T1436] team0 (unregistering): Port device team_slave_0 removed [ 430.384250][ T8077] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 432.170929][ T7918] bridge0: port 1(bridge_slave_0) entered blocking state [ 432.171103][ T7918] bridge0: port 1(bridge_slave_0) entered disabled state [ 432.171360][ T7918] bridge_slave_0: entered allmulticast mode [ 432.198354][ T7918] bridge_slave_0: entered promiscuous mode [ 432.215633][ T7918] bridge0: port 2(bridge_slave_1) entered blocking state [ 432.215812][ T7918] bridge0: port 2(bridge_slave_1) entered disabled state [ 432.216072][ T7918] bridge_slave_1: entered allmulticast mode [ 432.223986][ T7918] bridge_slave_1: entered promiscuous mode [ 432.658083][ T5931] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 432.847604][ T5931] usb 3-1: Using ep0 maxpacket: 16 [ 433.000543][ T7918] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 433.102047][ T7918] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 434.222460][ T6947] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 434.403154][ T6947] usb 5-1: config index 0 descriptor too short (expected 7768, got 18) [ 434.403186][ T6947] usb 5-1: config 0 has an invalid interface number: 97 but max is 0 [ 434.403205][ T6947] usb 5-1: config 0 has no interface number 0 [ 434.403257][ T6947] usb 5-1: New USB device found, idVendor=0483, idProduct=3747, bcdDevice=52.4d [ 434.403282][ T6947] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 434.837457][ T6947] usb 5-1: config 0 descriptor?? [ 434.862520][ T6947] ftdi_sio 5-1:0.97: FTDI USB Serial Device converter detected [ 434.923956][ T6947] ftdi_sio ttyUSB0: unknown device type: 0x524d [ 436.370647][ T5958] usb 5-1: USB disconnect, device number 2 [ 436.373615][ T5958] ftdi_sio 5-1:0.97: device disconnected [ 437.252007][ T8115] netlink: 8 bytes leftover after parsing attributes in process `syz.4.489'. [ 437.256086][ T7918] team0: Port device team_slave_0 added [ 437.711143][ C1] vkms_vblank_simulate: vblank timer overrun [ 437.860888][ T5931] usb 3-1: unable to get BOS descriptor or descriptor too short [ 437.870521][ T5931] usb 3-1: unable to read config index 0 descriptor/start: -32 [ 437.870546][ T5931] usb 3-1: chopping to 0 config(s) [ 437.870571][ T5931] usb 3-1: can't read configurations, error -32 [ 438.019264][ T7918] team0: Port device team_slave_1 added [ 438.054486][ T5931] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 438.178167][ T5931] usb 3-1: device descriptor read/64, error -32 [ 438.288144][ T5931] usb usb3-port1: attempt power cycle [ 438.640385][ T5931] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 438.662983][ T5931] usb 3-1: device descriptor read/8, error -32 [ 438.876361][ C1] vkms_vblank_simulate: vblank timer overrun [ 438.897936][ T5931] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 438.923647][ T5931] usb 3-1: device descriptor read/8, error -32 [ 439.027615][ C1] vkms_vblank_simulate: vblank timer overrun [ 439.626547][ C1] vkms_vblank_simulate: vblank timer overrun [ 439.847847][ T5931] usb usb3-port1: unable to enumerate USB device [ 440.059809][ T7918] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 440.059827][ T7918] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 440.059854][ T7918] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 440.148868][ T7918] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 440.148886][ T7918] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 440.148911][ T7918] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 440.415014][ C1] vkms_vblank_simulate: vblank timer overrun [ 442.500893][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 442.501021][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 442.506848][ T1321] aoe: packet could not be sent on ipvlan1. consider increasing tx_queue_len [ 443.838651][ C1] vkms_vblank_simulate: vblank timer overrun [ 444.340256][ C1] vkms_vblank_simulate: vblank timer overrun [ 444.547781][ C1] vkms_vblank_simulate: vblank timer overrun [ 445.965790][ T7918] hsr_slave_0: entered promiscuous mode [ 446.015861][ T7918] hsr_slave_1: entered promiscuous mode [ 446.037894][ T7918] debugfs: 'hsr0' already exists in 'hsr' [ 446.037925][ T7918] Cannot create hsr debugfs directory [ 451.219642][ C1] vkms_vblank_simulate: vblank timer overrun [ 451.304105][ C1] vkms_vblank_simulate: vblank timer overrun [ 451.405753][ C1] vkms_vblank_simulate: vblank timer overrun [ 451.774670][ T8197] binder: 8196:8197 ioctl c0306201 0 returned -14 [ 451.952009][ T982] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 452.468310][ T982] usb 5-1: Using ep0 maxpacket: 8 [ 452.585204][ T982] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 452.585237][ T982] usb 5-1: config 0 has no interface number 0 [ 452.585293][ T982] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 452.585317][ T982] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 452.585342][ T982] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 452.585370][ T982] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 452.585516][ T982] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 452.585538][ T982] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 452.679739][ T982] usb 5-1: config 0 descriptor?? [ 452.795003][ T982] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 453.007573][ T982] usb 5-1: USB disconnect, device number 3 [ 453.041535][ T982] ldusb 5-1:0.55: LD USB Device #0 now disconnected [ 453.454602][ C1] vkms_vblank_simulate: vblank timer overrun [ 453.696370][ C1] vkms_vblank_simulate: vblank timer overrun [ 454.233307][ C1] vkms_vblank_simulate: vblank timer overrun [ 454.440702][ C1] vkms_vblank_simulate: vblank timer overrun [ 454.910691][ C1] vkms_vblank_simulate: vblank timer overrun [ 455.653640][ C1] vkms_vblank_simulate: vblank timer overrun [ 457.785403][ T8240] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 458.299430][ T8247] blktrace: Concurrent blktraces are not allowed on loop4 [ 461.373460][ T7918] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 461.633277][ T7918] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 461.797757][ T7918] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 462.697358][ T7918] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 465.282990][ T8289] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 465.992312][ T8300] blktrace: Concurrent blktraces are not allowed on loop4 [ 469.307695][ T5854] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 469.312612][ T5854] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 469.321688][ T5854] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 469.480287][ T5854] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 469.544367][ T5854] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 470.418984][ T8332] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 470.993034][ T8339] blktrace: Concurrent blktraces are not allowed on loop4 [ 471.788739][ T5854] Bluetooth: hci3: command tx timeout [ 474.002323][ C0] vkms_vblank_simulate: vblank timer overrun [ 474.005818][ T5854] Bluetooth: hci3: command tx timeout [ 474.901852][ T8366] netlink: 8 bytes leftover after parsing attributes in process `syz.3.544'. [ 476.015585][ T5854] Bluetooth: hci3: command tx timeout [ 476.182113][ T8383] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 476.402050][ C0] vkms_vblank_simulate: vblank timer overrun [ 477.567081][ C0] vkms_vblank_simulate: vblank timer overrun [ 477.732210][ T8393] blktrace: Concurrent blktraces are not allowed on loop8 [ 477.752830][ C0] vkms_vblank_simulate: vblank timer overrun [ 478.084902][ C0] vkms_vblank_simulate: vblank timer overrun [ 478.115980][ T5854] Bluetooth: hci3: command tx timeout [ 484.506972][ T8317] chnl_net:caif_netlink_parms(): no params data found [ 489.458076][ T8505] usb usb8: usbfs: process 8505 (syz.4.571) did not claim interface 0 before use [ 492.714940][ T8317] bridge0: port 1(bridge_slave_0) entered blocking state [ 492.715091][ T8317] bridge0: port 1(bridge_slave_0) entered disabled state [ 492.715350][ T8317] bridge_slave_0: entered allmulticast mode [ 492.741348][ T8317] bridge_slave_0: entered promiscuous mode [ 492.813180][ T8317] bridge0: port 2(bridge_slave_1) entered blocking state [ 492.813417][ T8317] bridge0: port 2(bridge_slave_1) entered disabled state [ 492.813685][ T8317] bridge_slave_1: entered allmulticast mode [ 492.839241][ T8317] bridge_slave_1: entered promiscuous mode [ 494.117883][ T1436] bridge_slave_1: left allmulticast mode [ 494.117918][ T1436] bridge_slave_1: left promiscuous mode [ 494.118220][ T1436] bridge0: port 2(bridge_slave_1) entered disabled state [ 494.326741][ T1436] bridge_slave_0: left allmulticast mode [ 494.326777][ T1436] bridge_slave_0: left promiscuous mode [ 494.327083][ T1436] bridge0: port 1(bridge_slave_0) entered disabled state [ 494.503300][ T37] audit: type=1800 audit(2000000375.341:7): pid=8529 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.3.574" name="memory.events" dev="tmpfs" ino=841 res=0 errno=0 [ 498.200765][ T1436] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 499.280429][ T1436] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 499.425638][ T1436] bond0 (unregistering): Released all slaves [ 499.799945][ T8576] netlink: 32 bytes leftover after parsing attributes in process `syz.0.587'. [ 499.800125][ T8578] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 500.022691][ T8317] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 500.327842][ T8595] fuse: Bad value for 'fd' [ 500.919837][ T1436] hsr_slave_0: left promiscuous mode [ 501.968862][ T1436] hsr_slave_1: left promiscuous mode [ 501.969930][ T1436] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 502.263630][ T1436] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 502.282425][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 502.282512][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.302001][ T1321] aoe: packet could not be sent on ipvlan1. consider increasing tx_queue_len [ 502.465953][ T8619] capability: warning: `syz.4.602' uses 32-bit capabilities (legacy support in use) [ 505.356543][ T1436] team0 (unregistering): Port device team_slave_1 removed [ 505.580508][ T1436] team0 (unregistering): Port device team_slave_0 removed [ 508.567662][ T8317] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 509.264962][ T8664] block device autoloading is deprecated and will be removed. [ 512.387571][ T8317] team0: Port device team_slave_0 added [ 512.505909][ T8317] team0: Port device team_slave_1 added [ 513.197316][ T8694] vivid-002: disconnect [ 513.205687][ T8694] vivid-002: reconnect [ 515.592573][ T8317] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 515.592591][ T8317] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 515.592619][ T8317] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 515.650670][ T8317] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 515.650688][ T8317] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 515.650734][ T8317] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 516.421015][ T8725] netlink: 44 bytes leftover after parsing attributes in process `syz.0.634'. [ 517.390500][ T8317] hsr_slave_0: entered promiscuous mode [ 517.410202][ T8317] hsr_slave_1: entered promiscuous mode [ 517.411356][ T8317] debugfs: 'hsr0' already exists in 'hsr' [ 517.411382][ T8317] Cannot create hsr debugfs directory [ 520.737578][ T8766] blktrace: Concurrent blktraces are not allowed on sg0 [ 523.063430][ T8779] netlink: 20 bytes leftover after parsing attributes in process `syz.3.645'. [ 524.954036][ T8787] blktrace: Concurrent blktraces are not allowed on loop4 [ 526.609943][ T8809] blktrace: Concurrent blktraces are not allowed on sg0 [ 527.511857][ T59] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 527.601182][ T59] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 527.603397][ T59] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 527.605159][ T59] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 527.606214][ T59] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 528.788043][ T8829] netlink: 20 bytes leftover after parsing attributes in process `syz.4.656'. [ 529.410692][ T8831] ======================================================= [ 529.410692][ T8831] WARNING: The mand mount option has been deprecated and [ 529.410692][ T8831] and is ignored by this kernel. Remove the mand [ 529.410692][ T8831] option from the mount to silence this warning. [ 529.410692][ T8831] ======================================================= [ 529.874208][ T59] Bluetooth: hci5: command tx timeout [ 530.363801][ T7758] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 530.673907][ T7758] usb 3-1: unable to get BOS descriptor or descriptor too short [ 530.675289][ T7758] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 530.675329][ T7758] usb 3-1: can't read configurations, error -71 [ 530.774631][ T8845] blktrace: Concurrent blktraces are not allowed on loop6 [ 531.038818][ T1436] bridge_slave_1: left allmulticast mode [ 531.038843][ T1436] bridge_slave_1: left promiscuous mode [ 531.039015][ T1436] bridge0: port 2(bridge_slave_1) entered disabled state [ 531.105057][ T1436] bridge_slave_0: left allmulticast mode [ 531.105082][ T1436] bridge_slave_0: left promiscuous mode [ 531.105272][ T1436] bridge0: port 1(bridge_slave_0) entered disabled state [ 531.895236][ T5896] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 531.932523][ T59] Bluetooth: hci5: command tx timeout [ 532.342241][ T8861] blktrace: Concurrent blktraces are not allowed on sg0 [ 533.183095][ T5896] usb 4-1: Using ep0 maxpacket: 8 [ 533.186462][ T5896] usb 4-1: config 0 has an invalid interface number: 55 but max is 0 [ 533.186491][ T5896] usb 4-1: config 0 has no interface number 0 [ 533.186545][ T5896] usb 4-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 533.186566][ T5896] usb 4-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 533.186588][ T5896] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 533.186611][ T5896] usb 4-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 533.186654][ T5896] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 533.186677][ T5896] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 533.285087][ T5896] usb 4-1: config 0 descriptor?? [ 533.448174][ T5896] ldusb 4-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 533.514319][ T1436] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 533.671589][ T5896] usb 4-1: USB disconnect, device number 8 [ 533.694292][ T5896] ldusb 4-1:0.55: LD USB Device #0 now disconnected [ 533.790657][ T1436] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 534.026414][ T59] Bluetooth: hci5: command tx timeout [ 535.156570][ T1436] bond0 (unregistering): Released all slaves [ 536.164139][ T59] Bluetooth: hci5: command tx timeout [ 536.847513][ T8882] blktrace: Concurrent blktraces are not allowed on loop0 [ 537.143712][ T1436] hsr_slave_0: left promiscuous mode [ 537.182202][ T1436] hsr_slave_1: left promiscuous mode [ 537.182838][ T1436] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 537.243069][ T1436] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 538.460122][ T8896] blktrace: Concurrent blktraces are not allowed on sg0 [ 539.975301][ T5896] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 541.034921][ T5896] usb 4-1: Using ep0 maxpacket: 8 [ 541.037695][ T5896] usb 4-1: config 0 has an invalid interface number: 55 but max is 0 [ 541.037722][ T5896] usb 4-1: config 0 has no interface number 0 [ 541.037797][ T5896] usb 4-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 541.037821][ T5896] usb 4-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 541.037846][ T5896] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 541.037872][ T5896] usb 4-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 541.037916][ T5896] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 541.037940][ T5896] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 541.076759][ T5896] usb 4-1: config 0 descriptor?? [ 541.182252][ T5896] ldusb 4-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 541.242925][ T1436] team0 (unregistering): Port device team_slave_1 removed [ 541.346514][ T5896] usb 4-1: USB disconnect, device number 9 [ 541.367131][ T5896] ldusb 4-1:0.55: LD USB Device #0 now disconnected [ 541.494338][ T1436] team0 (unregistering): Port device team_slave_0 removed [ 543.375864][ T8919] blktrace: Concurrent blktraces are not allowed on loop6 [ 546.498407][ T8916] syz.2.682 (8916): drop_caches: 2 [ 546.571441][ T8935] blktrace: Concurrent blktraces are not allowed on sg0 [ 547.466584][ T8892] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 548.897193][ T8813] chnl_net:caif_netlink_parms(): no params data found [ 551.192445][ T8960] blktrace: Concurrent blktraces are not allowed on loop0 [ 551.845647][ T8967] fuse: Bad value for 'fd' [ 553.107345][ T8813] bridge0: port 1(bridge_slave_0) entered blocking state [ 553.107549][ T8813] bridge0: port 1(bridge_slave_0) entered disabled state [ 553.107816][ T8813] bridge_slave_0: entered allmulticast mode [ 553.134450][ T8813] bridge_slave_0: entered promiscuous mode [ 553.185822][ T8813] bridge0: port 2(bridge_slave_1) entered blocking state [ 553.196436][ T8813] bridge0: port 2(bridge_slave_1) entered disabled state [ 553.196701][ T8813] bridge_slave_1: entered allmulticast mode [ 553.237236][ T8813] bridge_slave_1: entered promiscuous mode [ 553.984282][ T8813] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 554.010913][ T8813] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 554.355256][ T8813] team0: Port device team_slave_0 added [ 554.361794][ T8989] blktrace: Concurrent blktraces are not allowed on sg0 [ 554.396826][ T8813] team0: Port device team_slave_1 added [ 555.302099][ T8994] fuse: Bad value for 'fd' [ 555.948258][ T8999] blktrace: Concurrent blktraces are not allowed on loop8 [ 556.833335][ T8813] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 556.833352][ T8813] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 556.833379][ T8813] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 556.836165][ T8813] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 556.836178][ T8813] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 556.836204][ T8813] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 559.158655][ T8813] hsr_slave_0: entered promiscuous mode [ 559.325361][ T8813] hsr_slave_1: entered promiscuous mode [ 559.326308][ T8813] debugfs: 'hsr0' already exists in 'hsr' [ 559.326333][ T8813] Cannot create hsr debugfs directory [ 562.297462][ T8813] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 562.438373][ T8813] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 562.494280][ T8813] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 562.554666][ T8813] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 562.667023][ T9028] fuse: Bad value for 'fd' [ 563.118309][ T8813] 8021q: adding VLAN 0 to HW filter on device bond0 [ 563.918380][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.918453][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.924739][ T1321] aoe: packet could not be sent on ipvlan1. consider increasing tx_queue_len [ 564.086160][ T8813] 8021q: adding VLAN 0 to HW filter on device team0 [ 564.165490][ T1430] bridge0: port 1(bridge_slave_0) entered blocking state [ 564.170738][ T1430] bridge0: port 1(bridge_slave_0) entered forwarding state [ 564.179737][ T3555] bridge0: port 2(bridge_slave_1) entered blocking state [ 564.179977][ T3555] bridge0: port 2(bridge_slave_1) entered forwarding state [ 568.452350][ T8813] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 570.166113][ T8813] veth0_vlan: entered promiscuous mode [ 570.222326][ T8813] veth1_vlan: entered promiscuous mode [ 570.677233][ T8813] veth0_macvtap: entered promiscuous mode [ 570.708324][ T8813] veth1_macvtap: entered promiscuous mode [ 570.803738][ T8813] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 570.911736][ T8813] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 570.966644][ T1430] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 570.966903][ T1430] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 570.966958][ T1430] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 570.966995][ T1430] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 571.351889][ T9092] blktrace: Concurrent blktraces are not allowed on sg0 [ 576.472577][ T1469] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 576.472599][ T1469] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 576.906325][ T1436] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 576.906349][ T1436] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 578.189302][ C1] vkms_vblank_simulate: vblank timer overrun [ 578.190832][ T6947] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 578.393187][ T6947] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 578.393454][ T6947] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 578.393484][ T6947] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 578.393506][ T6947] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 578.398622][ T6947] usb 1-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 578.398653][ T6947] usb 1-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 578.398674][ T6947] usb 1-1: Manufacturer: syz [ 578.522412][ T6947] usb 1-1: config 0 descriptor?? [ 579.002216][ T6947] appleir 0003:05AC:8243.0001: unknown main item tag 0x0 [ 579.165969][ T9129] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 580.210444][ T6947] appleir 0003:05AC:8243.0001: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.0-1/input0 [ 582.244750][ C1] vkms_vblank_simulate: vblank timer overrun [ 585.094633][ T6014] usb 1-1: USB disconnect, device number 6 [ 588.673486][ T9168] blktrace: Concurrent blktraces are not allowed on sg0 [ 592.346427][ T9182] netlink: 'syz.5.757': attribute type 10 has an invalid length. [ 593.605232][ T9182] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 593.679099][ T6014] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 593.838992][ T6014] usb 5-1: Using ep0 maxpacket: 8 [ 593.857302][ T6014] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 593.857332][ T6014] usb 5-1: config 0 has no interface number 0 [ 593.857388][ T6014] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 593.857412][ T6014] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 593.857437][ T6014] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 593.857472][ T6014] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 593.857518][ T6014] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 593.857541][ T6014] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 593.946581][ T6014] usb 5-1: config 0 descriptor?? [ 593.991902][ T6014] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 594.351949][ T982] usb 5-1: USB disconnect, device number 4 [ 595.109436][ T982] ldusb 5-1:0.55: LD USB Device #0 now disconnected [ 595.506877][ C0] vkms_vblank_simulate: vblank timer overrun [ 595.708980][ C0] vkms_vblank_simulate: vblank timer overrun [ 596.529927][ C0] vkms_vblank_simulate: vblank timer overrun [ 596.755977][ C0] vkms_vblank_simulate: vblank timer overrun [ 596.956542][ C0] vkms_vblank_simulate: vblank timer overrun [ 597.419441][ C0] vkms_vblank_simulate: vblank timer overrun [ 600.442073][ T9241] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 602.172677][ C0] vkms_vblank_simulate: vblank timer overrun [ 602.308609][ T5931] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 602.498552][ T5931] usb 3-1: Using ep0 maxpacket: 8 [ 602.502353][ T5931] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 602.502383][ T5931] usb 3-1: config 0 has no interface number 0 [ 602.502446][ T5931] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 602.502472][ T5931] usb 3-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 602.502496][ T5931] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 602.502523][ T5931] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 602.502569][ T5931] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 602.502590][ T5931] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 602.601397][ T5931] usb 3-1: config 0 descriptor?? [ 602.764585][ T5931] ldusb 3-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 603.420764][ C0] vkms_vblank_simulate: vblank timer overrun [ 603.704264][ T5931] usb 3-1: USB disconnect, device number 11 [ 603.737701][ T5931] ldusb 3-1:0.55: LD USB Device #0 now disconnected [ 604.224979][ C0] vkms_vblank_simulate: vblank timer overrun [ 604.749591][ C0] vkms_vblank_simulate: vblank timer overrun [ 605.139884][ C0] vkms_vblank_simulate: vblank timer overrun [ 605.298028][ C0] vkms_vblank_simulate: vblank timer overrun [ 605.735727][ C0] vkms_vblank_simulate: vblank timer overrun [ 606.171544][ C0] vkms_vblank_simulate: vblank timer overrun [ 607.413831][ C0] vkms_vblank_simulate: vblank timer overrun [ 607.471779][ C0] vkms_vblank_simulate: vblank timer overrun [ 607.599286][ C0] vkms_vblank_simulate: vblank timer overrun [ 607.989201][ C0] vkms_vblank_simulate: vblank timer overrun [ 608.161861][ C0] vkms_vblank_simulate: vblank timer overrun [ 609.419523][ C0] vkms_vblank_simulate: vblank timer overrun [ 609.939424][ C0] vkms_vblank_simulate: vblank timer overrun [ 610.042937][ C0] vkms_vblank_simulate: vblank timer overrun [ 611.348016][ T5931] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 611.498093][ T5931] usb 5-1: Using ep0 maxpacket: 8 [ 611.500689][ T5931] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 611.500718][ T5931] usb 5-1: config 0 has no interface number 0 [ 611.500768][ T5931] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 611.500790][ T5931] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 611.500813][ T5931] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 611.500836][ T5931] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 611.500879][ T5931] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 611.500901][ T5931] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 611.605628][ T5931] usb 5-1: config 0 descriptor?? [ 611.620092][ T5931] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 611.859801][ T5931] usb 5-1: USB disconnect, device number 5 [ 611.902064][ T5931] ldusb 5-1:0.55: LD USB Device #0 now disconnected [ 615.195746][ C0] vkms_vblank_simulate: vblank timer overrun [ 616.328709][ T9357] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 616.448265][ C0] vkms_vblank_simulate: vblank timer overrun [ 617.390941][ C0] vkms_vblank_simulate: vblank timer overrun [ 618.066651][ C0] vkms_vblank_simulate: vblank timer overrun [ 618.293105][ C0] vkms_vblank_simulate: vblank timer overrun [ 619.323382][ T37] audit: type=1326 audit(2000000500.218:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9375 comm="syz.0.813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f868471ebe9 code=0x50000 [ 619.364322][ T37] audit: type=1326 audit(2000000500.228:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9375 comm="syz.0.813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f868471ebe9 code=0x50000 [ 619.364385][ T37] audit: type=1326 audit(2000000500.228:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9375 comm="syz.0.813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f868471ebe9 code=0x50000 [ 619.364432][ T37] audit: type=1326 audit(2000000500.258:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9375 comm="syz.0.813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f868471ebe9 code=0x50000 [ 619.364477][ T37] audit: type=1326 audit(2000000500.258:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9375 comm="syz.0.813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f868471ebe9 code=0x50000 [ 619.365465][ T37] audit: type=1326 audit(2000000500.258:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9375 comm="syz.0.813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f868471ebe9 code=0x50000 [ 619.366592][ T37] audit: type=1326 audit(2000000500.258:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9375 comm="syz.0.813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f868471ebe9 code=0x50000 [ 619.439741][ T37] audit: type=1326 audit(2000000500.258:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9375 comm="syz.0.813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f868471ebe9 code=0x50000 [ 619.439793][ T37] audit: type=1326 audit(2000000500.258:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9375 comm="syz.0.813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f868471ebe9 code=0x50000 [ 619.439833][ T37] audit: type=1326 audit(2000000500.258:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9375 comm="syz.0.813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f868471ebe9 code=0x50000 [ 623.333998][ T9397] syz.0.819 (9397) used greatest stack depth: 18232 bytes left [ 624.978439][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.978529][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.984524][ T1321] aoe: packet could not be sent on ipvlan1. consider increasing tx_queue_len [ 625.921835][ T9435] Bluetooth: MGMT ver 1.23 [ 625.933385][ T9435] netlink: 755 bytes leftover after parsing attributes in process `syz.3.829'. [ 627.104092][ T9433] ptm ptm0: ldisc open failed (-12), clearing slot 0 [ 629.832491][ T9454] netlink: 8 bytes leftover after parsing attributes in process `syz.4.834'. [ 629.832560][ T9454] netlink: 3 bytes leftover after parsing attributes in process `syz.4.834'. [ 630.057066][ T9454] batadv1: entered allmulticast mode [ 643.211344][ T9510] capability: warning: `syz.5.850' uses deprecated v2 capabilities in a way that may be insecure [ 643.213463][ T9510] netlink: 168 bytes leftover after parsing attributes in process `syz.5.850'. [ 643.336702][ T9518] netlink: 16 bytes leftover after parsing attributes in process `syz.3.853'. [ 643.336736][ T9518] netlink: 16 bytes leftover after parsing attributes in process `syz.3.853'. [ 643.371846][ T9522] netlink: 'syz.0.851': attribute type 10 has an invalid length. [ 644.604582][ T9513] veth0_vlan: left promiscuous mode [ 644.702733][ T9513] veth0_vlan: entered promiscuous mode [ 647.321872][ T9522] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 648.042142][ T9547] netlink: 755 bytes leftover after parsing attributes in process `syz.5.859'. [ 648.051488][ T9547] netlink: 8 bytes leftover after parsing attributes in process `syz.5.859'. [ 652.313619][ T9577] netlink: 64 bytes leftover after parsing attributes in process `syz.3.869'. [ 652.418891][ C0] vkms_vblank_simulate: vblank timer overrun [ 652.502641][ C0] vkms_vblank_simulate: vblank timer overrun [ 652.577982][ T9564] Bluetooth: hci5: command 0x0406 tx timeout [ 653.413389][ C0] vkms_vblank_simulate: vblank timer overrun [ 653.504780][ C0] vkms_vblank_simulate: vblank timer overrun [ 653.555985][ C0] vkms_vblank_simulate: vblank timer overrun [ 653.625658][ C0] vkms_vblank_simulate: vblank timer overrun [ 653.755707][ C0] vkms_vblank_simulate: vblank timer overrun [ 653.808402][ C0] vkms_vblank_simulate: vblank timer overrun [ 653.855502][ C0] vkms_vblank_simulate: vblank timer overrun [ 653.889465][ C0] vkms_vblank_simulate: vblank timer overrun [ 654.012800][ C0] vkms_vblank_simulate: vblank timer overrun [ 654.504876][ C0] vkms_vblank_simulate: vblank timer overrun [ 655.445952][ C0] vkms_vblank_simulate: vblank timer overrun [ 655.523698][ C0] vkms_vblank_simulate: vblank timer overrun [ 655.702131][ C0] vkms_vblank_simulate: vblank timer overrun [ 658.705494][ T37] kauditd_printk_skb: 181 callbacks suppressed [ 658.705515][ T37] audit: type=1326 audit(2000000539.600:199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9627 comm="syz.5.882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12809febe9 code=0x50000 [ 658.705567][ T37] audit: type=1326 audit(2000000539.600:200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9627 comm="syz.5.882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12809febe9 code=0x50000 [ 658.705614][ T37] audit: type=1326 audit(2000000539.600:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9627 comm="syz.5.882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12809febe9 code=0x50000 [ 658.705660][ T37] audit: type=1326 audit(2000000539.600:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9627 comm="syz.5.882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12809febe9 code=0x50000 [ 658.705706][ T37] audit: type=1326 audit(2000000539.610:203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9627 comm="syz.5.882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12809febe9 code=0x50000 [ 658.711683][ T37] audit: type=1326 audit(2000000539.610:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9627 comm="syz.5.882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12809febe9 code=0x50000 [ 658.711740][ T37] audit: type=1326 audit(2000000539.610:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9627 comm="syz.5.882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12809febe9 code=0x50000 [ 658.711786][ T37] audit: type=1326 audit(2000000539.610:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9627 comm="syz.5.882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12809febe9 code=0x50000 [ 658.711833][ T37] audit: type=1326 audit(2000000539.610:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9627 comm="syz.5.882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12809febe9 code=0x50000 [ 658.711878][ T37] audit: type=1326 audit(2000000539.610:208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9627 comm="syz.5.882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12809febe9 code=0x50000 [ 663.718409][ T9662] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 669.148149][ T37] kauditd_printk_skb: 41 callbacks suppressed [ 669.148169][ T37] audit: type=1326 audit(2000000550.050:250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9703 comm="syz.4.904" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff4ee6febe9 code=0x0 [ 671.045655][ C0] ------------[ cut here ]------------ [ 671.045674][ C0] WARNING: CPU: 0 PID: 16 at ./include/linux/seqlock.h:221 est_timer+0x6dc/0x9f0 [ 671.045717][ C0] Modules linked in: [ 671.045739][ C0] CPU: 0 UID: 0 PID: 16 Comm: ktimers/0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 671.045764][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 671.045777][ C0] RIP: 0010:est_timer+0x6dc/0x9f0 [ 671.045801][ C0] Code: ff c7 42 80 3c 23 00 74 08 4c 89 f7 e8 8d 22 41 f9 4d 89 3e 42 80 3c 23 00 0f 85 54 ff ff ff e9 57 ff ff ff e8 75 e7 e1 f8 90 <0f> 0b 90 e9 63 fd ff ff 44 89 e1 80 e1 07 38 c1 0f 8c 65 fa ff ff [ 671.045818][ C0] RSP: 0018:ffffc900001577a0 EFLAGS: 00010246 [ 671.045837][ C0] RAX: ffffffff88dc779b RBX: 0000000000000001 RCX: ffff88801c2a5940 [ 671.045862][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000100 [ 671.045876][ C0] RBP: ffffc900001578b0 R08: 0000000000000000 R09: 0000000000000100 [ 671.045917][ C0] R10: dffffc0000000000 R11: fffff5200002af0a R12: 0000000000000009 [ 671.045932][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: ffff88804bdba268 [ 671.045946][ C0] FS: 0000000000000000(0000) GS:ffff8881268c1000(0000) knlGS:0000000000000000 [ 671.045964][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 671.045979][ C0] CR2: 00007f75cbaee4c0 CR3: 0000000021b0a000 CR4: 00000000003526f0 [ 671.045999][ C0] Call Trace: [ 671.046008][ C0] [ 671.046037][ C0] ? __pfx_est_timer+0x10/0x10 [ 671.046078][ C0] call_timer_fn+0x17b/0x5f0 [ 671.046108][ C0] ? __pfx_est_timer+0x10/0x10 [ 671.046131][ C0] ? call_timer_fn+0xbe/0x5f0 [ 671.046159][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 671.046200][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 671.046229][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 671.046255][ C0] ? __pfx_est_timer+0x10/0x10 [ 671.046281][ C0] __run_timer_base+0x648/0x970 [ 671.046330][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 671.046379][ C0] run_timer_softirq+0xb7/0x180 [ 671.046407][ C0] handle_softirqs+0x22f/0x710 [ 671.046449][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 671.046490][ C0] run_ktimerd+0xcf/0x190 [ 671.046520][ C0] ? __pfx_run_ktimerd+0x10/0x10 [ 671.046547][ C0] ? schedule+0x91/0x360 [ 671.046583][ C0] ? smpboot_thread_fn+0x4d/0xa60 [ 671.046607][ C0] smpboot_thread_fn+0x53f/0xa60 [ 671.046636][ C0] ? smpboot_thread_fn+0x4d/0xa60 [ 671.046675][ C0] kthread+0x70e/0x8a0 [ 671.046712][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 671.046738][ C0] ? __pfx_kthread+0x10/0x10 [ 671.046777][ C0] ? __pfx_kthread+0x10/0x10 [ 671.046811][ C0] ret_from_fork+0x3f9/0x770 [ 671.046844][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 671.046889][ C0] ? __switch_to_asm+0x39/0x70 [ 671.046909][ C0] ? __switch_to_asm+0x33/0x70 [ 671.046927][ C0] ? __pfx_kthread+0x10/0x10 [ 671.046961][ C0] ret_from_fork_asm+0x1a/0x30 [ 671.047004][ C0] [ 671.047015][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 671.047030][ C0] CPU: 0 UID: 0 PID: 16 Comm: ktimers/0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 671.047053][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 671.047064][ C0] Call Trace: [ 671.047073][ C0] [ 671.047082][ C0] dump_stack_lvl+0x99/0x250 [ 671.047112][ C0] ? __asan_memcpy+0x40/0x70 [ 671.047137][ C0] ? __pfx_dump_stack_lvl+0x10/0x10 [ 671.047168][ C0] ? __pfx__printk+0x10/0x10 [ 671.047209][ C0] vpanic+0x281/0x750 [ 671.047239][ C0] ? __pfx__printk+0x10/0x10 [ 671.047260][ C0] ? __pfx_vpanic+0x10/0x10 [ 671.047290][ C0] ? is_bpf_text_address+0x26/0x2b0 [ 671.047335][ C0] panic+0xb9/0xc0 [ 671.047365][ C0] ? __pfx_panic+0x10/0x10 [ 671.047416][ C0] __warn+0x31b/0x4b0 [ 671.047444][ C0] ? est_timer+0x6dc/0x9f0 [ 671.047471][ C0] ? est_timer+0x6dc/0x9f0 [ 671.047495][ C0] report_bug+0x2be/0x4f0 [ 671.047520][ C0] ? est_timer+0x6dc/0x9f0 [ 671.047543][ C0] ? est_timer+0x6dc/0x9f0 [ 671.047565][ C0] ? est_timer+0x6de/0x9f0 [ 671.047588][ C0] handle_bug+0x84/0x160 [ 671.047626][ C0] exc_invalid_op+0x1a/0x50 [ 671.047658][ C0] asm_exc_invalid_op+0x1a/0x20 [ 671.047679][ C0] RIP: 0010:est_timer+0x6dc/0x9f0 [ 671.047701][ C0] Code: ff c7 42 80 3c 23 00 74 08 4c 89 f7 e8 8d 22 41 f9 4d 89 3e 42 80 3c 23 00 0f 85 54 ff ff ff e9 57 ff ff ff e8 75 e7 e1 f8 90 <0f> 0b 90 e9 63 fd ff ff 44 89 e1 80 e1 07 38 c1 0f 8c 65 fa ff ff [ 671.047718][ C0] RSP: 0018:ffffc900001577a0 EFLAGS: 00010246 [ 671.047736][ C0] RAX: ffffffff88dc779b RBX: 0000000000000001 RCX: ffff88801c2a5940 [ 671.047752][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000100 [ 671.047765][ C0] RBP: ffffc900001578b0 R08: 0000000000000000 R09: 0000000000000100 [ 671.047779][ C0] R10: dffffc0000000000 R11: fffff5200002af0a R12: 0000000000000009 [ 671.047793][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: ffff88804bdba268 [ 671.047819][ C0] ? est_timer+0x6db/0x9f0 [ 671.047880][ C0] ? __pfx_est_timer+0x10/0x10 [ 671.047918][ C0] call_timer_fn+0x17b/0x5f0 [ 671.047946][ C0] ? __pfx_est_timer+0x10/0x10 [ 671.047969][ C0] ? call_timer_fn+0xbe/0x5f0 [ 671.047995][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 671.048036][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 671.048064][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 671.048089][ C0] ? __pfx_est_timer+0x10/0x10 [ 671.048116][ C0] __run_timer_base+0x648/0x970 [ 671.048164][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 671.048212][ C0] run_timer_softirq+0xb7/0x180 [ 671.048241][ C0] handle_softirqs+0x22f/0x710 [ 671.048281][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 671.048322][ C0] run_ktimerd+0xcf/0x190 [ 671.048351][ C0] ? __pfx_run_ktimerd+0x10/0x10 [ 671.048378][ C0] ? schedule+0x91/0x360 [ 671.048414][ C0] ? smpboot_thread_fn+0x4d/0xa60 [ 671.048440][ C0] smpboot_thread_fn+0x53f/0xa60 [ 671.048469][ C0] ? smpboot_thread_fn+0x4d/0xa60 [ 671.048507][ C0] kthread+0x70e/0x8a0 [ 671.048544][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 671.048571][ C0] ? __pfx_kthread+0x10/0x10 [ 671.048608][ C0] ? __pfx_kthread+0x10/0x10 [ 671.048641][ C0] ret_from_fork+0x3f9/0x770 [ 671.048673][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 671.048710][ C0] ? __switch_to_asm+0x39/0x70 [ 671.048729][ C0] ? __switch_to_asm+0x33/0x70 [ 671.048748][ C0] ? __pfx_kthread+0x10/0x10 [ 671.048781][ C0] ret_from_fork_asm+0x1a/0x30 [ 671.048824][ C0] [ 671.049305][ C0] Kernel Offset: disabled