last executing test programs: 5m22.254070538s ago: executing program 1 (id=38): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xd) dup(r0) r1 = syz_io_uring_setup(0xd1, 0x0, &(0x7f0000000080)=0x0, &(0x7f00000001c0)=0x0) socket$packet(0x11, 0x3, 0x300) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r4, 0x0, 0xd}, 0x18) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x4, 0x80}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000540)=0x4) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x107382, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r1, 0x47ba, 0x0, 0x0, 0x0, 0x0) 5m19.660471375s ago: executing program 1 (id=41): setsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000000)={0x4fc0, 0x80, 0x6, 0x0, 0x8, 0x80, 0x7}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) syz_open_dev$sg(&(0x7f00000060c0), 0xffffffff, 0x8002) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4007fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0, 0x0, 0x7}, 0x18) openat$sequencer(0xffffff9c, 0x0, 0x2002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000300)={0x0, 0x3f00, &(0x7f0000001200)={&(0x7f00000004c0)={0x38, 0x1403, 0x1, 0x70bd2d, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x0) 5m17.871529239s ago: executing program 1 (id=43): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) execveat$binfmt(0xffffffffffffffff, 0x0, &(0x7f0000000300), &(0x7f0000000480)={[&(0x7f0000000400)='!*#\xff#.]^[\x00']}, 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000380)='sched_switch\x00', r3}, 0x18) r4 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000800)={r4, r4, r4}, 0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={'sha384\x00'}}) add_key(0x0, &(0x7f00000004c0)={'syz', 0x2}, &(0x7f0000000500), 0x0, 0x0) keyctl$dh_compute(0x17, 0x0, 0x0, 0x0, 0x0) mremap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x3000, 0x7, &(0x7f0000ffd000/0x3000)=nil) r5 = syz_socket_connect_nvme_tcp() recvfrom$inet_nvme(r5, &(0x7f0000000100)=""/64, 0x40, 0x0, &(0x7f0000000500)=@pptp={0x18, 0x2, {0x2, @local}}, 0x80) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) getsockopt$X25_QBITINCL(0xffffffffffffffff, 0x106, 0x1, 0x0, &(0x7f0000003b00)) mmap$dsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000b, 0x8012, 0xffffffffffffffff, 0x0) 5m15.146729208s ago: executing program 1 (id=47): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) readlink(0x0, 0x0, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mount(&(0x7f0000000080)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000180)='efs\x00', 0x200000, 0x0) 5m8.685285377s ago: executing program 1 (id=52): lsm_set_self_attr(0x64, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x1c1) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000040)='westwood', 0x8) getsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x1a, 0x0, 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x14010, 0x0) r2 = socket(0x10, 0x3, 0x9) getpeername$packet(r2, 0x0, &(0x7f0000001080)) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x4c, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x4c}}, 0x2) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)={0x14, 0x9, 0x6, 0x801, 0x0, 0x0, {0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) 5m6.357749071s ago: executing program 1 (id=56): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x2d) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r4, 0x400455c8, 0x400000009) bind$bt_hci(r3, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) 4m50.763455137s ago: executing program 32 (id=56): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x2d) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r4, 0x400455c8, 0x400000009) bind$bt_hci(r3, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) 4m14.752018035s ago: executing program 0 (id=118): r0 = syz_open_dev$evdev(&(0x7f0000000b80), 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000140)={0x28, 0x0, 0x0, @my=0x1}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x1, 0x0, 0x100000000, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x6}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x8000000a}, 0x0, 0x0) 4m13.573701462s ago: executing program 0 (id=121): read$FUSE(0xffffffffffffffff, &(0x7f0000000080)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_open_procfs(r0, &(0x7f0000000000)='auxv\x00') r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x0, 0x3}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000002c0)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) sendmsg$tipc(r2, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r7 = dup3(r1, r2, 0x0) sendmsg$tipc(r1, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) setsockopt$TIPC_GROUP_LEAVE(r7, 0x10f, 0x88) r8 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x183341, 0x0) ioctl$FS_IOC_RESVSP(r8, 0x40305828, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) 4m9.074870659s ago: executing program 0 (id=125): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000008000000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000002000000000000000700000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b7000000000000eb9500"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x18) fremovexattr(0xffffffffffffffff, &(0x7f0000000000)=@random={'user.', '^$[\x00'}) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffc000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000480)=@abs={0x0, 0x0, 0x8004e24}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000940)={0x0, 0xfffffff0, &(0x7f0000000900)={&(0x7f0000000400)=ANY=[@ANYBLOB="54020000170001000000000000000000200100000000000000000000000000010000000000000000ac141400000000000000000000000000fc020000000000000003000000000000e000000200001000000000000000000000000000000000080a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="1242ffff040000000000000000000037660b6aff00000000000000000000000000000000000000000200002000000000", @ANYRES32, @ANYRES32, @ANYBLOB="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"], 0x254}}, 0x0) 4m7.126361659s ago: executing program 0 (id=127): bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r4}, 0x18) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r5, 0x400455c8, 0x400000009) 4m3.552579076s ago: executing program 0 (id=132): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bind$netrom(0xffffffffffffffff, &(0x7f0000000000)={{0x6, @rose, 0x1}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}, 0x48) connect$netrom(0xffffffffffffffff, &(0x7f0000000300)={{0x6, @rose, 0x1}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}, 0x48) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x84) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@version_9p2000}]}}) close_range(r0, 0xffffffffffffffff, 0x0) 3m54.880842751s ago: executing program 0 (id=141): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x40102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2f) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(0xffffffffffffffff, 0x8004587d, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x22e0, 0x86) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x589b}, 0x50) 3m39.185608177s ago: executing program 33 (id=141): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x40102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2f) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(0xffffffffffffffff, 0x8004587d, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x22e0, 0x86) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x589b}, 0x50) 19.404446724s ago: executing program 4 (id=360): syz_open_procfs(0x0, &(0x7f0000000100)='numa_maps\x00') socket$inet6(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() mlock(&(0x7f00001b5000/0x400000)=nil, 0x400000) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb9}, 0x94) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x4, 0x3f, 0x7fff0000}]}) socket(0x10, 0x3, 0x0) unshare(0x2a020480) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 17.37384814s ago: executing program 2 (id=363): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000faff0000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3, 0x0, 0x5}, 0x18) syz_open_dev$evdev(&(0x7f0000000040), 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r5 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0xb5}) 14.731085072s ago: executing program 3 (id=365): r0 = userfaultfd(0x1) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) write$dsp(0xffffffffffffffff, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0xb, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x183341, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000000}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) 13.092783687s ago: executing program 2 (id=366): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendmmsg$inet6(r0, &(0x7f0000019680)=[{{&(0x7f0000000100)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141414}}, 0x1c, 0x0}}], 0x1, 0x20004855) setsockopt$inet6_tcp_int(r0, 0x6, 0x4, &(0x7f0000000000)=0x7f, 0x4) setsockopt$sock_int(r0, 0x1, 0x9, &(0x7f0000000480)=0x7, 0x4) 12.993444746s ago: executing program 2 (id=367): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x7fff, 0x8, 0x100}) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000340)={0xda2, 0x8166, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000340)={0x8, 0x8169, 0x6}) r5 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000140)={0x6, 0x1000, 0x800}) close_range(r0, 0xffffffffffffffff, 0x0) 12.821243251s ago: executing program 3 (id=368): openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x40102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2f) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1, 0x0, 0x3}, 0x18) r2 = syz_io_uring_setup(0x23a, &(0x7f0000000480)={0x0, 0x80a101, 0x0, 0x0, 0x2cf}, &(0x7f0000000040)=0x0, &(0x7f0000000600)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000002280)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000100)=@l2tp={0x2, 0x0, @multicast1, 0x7}, 0x0, 0x0, 0x2}) io_uring_enter(r2, 0x47ba, 0x0, 0x0, 0x0, 0x0) 12.765221298s ago: executing program 4 (id=369): r0 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x10001, @ipv4={'\x00', '\xff\xff', @remote}, 0x1}, 0x1c) socket$inet_sctp(0x2, 0x1, 0x84) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/custom1\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, 0x0, &(0x7f0000000240)) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) fgetxattr(r1, 0x0, &(0x7f00000003c0)=""/67, 0x43) syz_io_uring_setup(0x8d2, &(0x7f0000000500)={0x0, 0xd80e, 0x3010, 0xfffffffc}, &(0x7f00000001c0)=0x0, &(0x7f0000000080)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r4 = syz_io_uring_setup(0x591, &(0x7f0000000240)={0x0, 0x33c, 0x4000, 0x6, 0x34f}, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) ptrace$getregset(0x4205, r5, 0x202, &(0x7f0000000240)={0x0}) r6 = shmget$private(0x0, 0x400000, 0x8, &(0x7f000000e000/0x400000)=nil) syz_emit_ethernet(0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB="fffeffffffffaaaaaa5448aa86dd6010104000140600fe80fe00000000c73970b000000000bbfe90e6000000000000000000009400aa00004e228b701d539cfdce89761f113e7218c78d2ebf9558d0cfa437cd7eb14ec3", @ANYRES32=0x41424344, @ANYRES32=r4, @ANYBLOB="5470000090780000"], 0x0) shmctl$SHM_LOCK(r6, 0xb) 11.562112825s ago: executing program 2 (id=370): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x40102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2f) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(0xffffffffffffffff, 0x8004587d, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x22e0, 0x86) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x589b}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000200)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000800)={&(0x7f0000000780)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x4c, 0x4c, 0x7, [@func_proto, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x4}}, @var={0x5, 0x0, 0x0, 0x11}, @union={0x0, 0x1, 0x0, 0x5, 0x0, 0x0, [{0x0, 0x3}]}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x61]}}, &(0x7f0000000fc0)=""/140, 0x6b, 0x8c, 0x1}, 0x20) dup2(0xffffffffffffffff, 0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWRULE={0x70, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x44, 0x4, 0x0, 0x1, [{0x40, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x30, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_MATCH_INFO={0x18, 0x3, "c6a41d106c72fffffff500000000000002000000"}, @NFTA_MATCH_NAME={0xa, 0x1, 'owner\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x98}}, 0x4048010) ioctl$KDSETLED(r6, 0x4b32, 0xf1a) 8.970502358s ago: executing program 4 (id=371): bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000800000000101"], 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, 0x0, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x18) fremovexattr(0xffffffffffffffff, &(0x7f0000000000)=@random={'user.', '^$[\x00'}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffc000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000480)=@abs={0x0, 0x0, 0x8004e24}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000940)={0x0, 0xfffffff0, &(0x7f0000000900)={&(0x7f0000000400)=ANY=[@ANYBLOB="54020000170001000000000000000000200100000000000000000000000000010000000000000000ac141400000000000000000000000000fc020000000000000003000000000000e000000200001000000000000000000000000000000000080a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="1242ffff040000000000000000000037660b6aff00000000000000000000000000000000000000000200002000000000", @ANYRES32, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000e0270300000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000650d000000000000e1000000000000000007000000ff0f0000000000000000000008000b000000000008001600000000000c001500000000005d0000000401050000000000000000000000ffff00000000000000003300000002000000e00000020000000000000000000000000000000000000000000000000000000000000000ff010000000000000000000000000001000000003c0000000a000000fe8000000000000000000000000000aa0000000001000000000000000000000000000000ff010000000000000000000000000001000000002b0000000a000000fe8800000000000000000000000000010000000000000000000000000000000000000000ff020000000000000000000000000001000000003200000002000000fe8000000000000000000000000000000000000004"], 0x254}}, 0x0) 8.924153933s ago: executing program 3 (id=372): syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) syz_clone(0x10806600, 0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000faff0000000000000000180100002020702500000000002020207b1af8ff00000000bfa1000000000000070100"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, 0x0, 0x4048084) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) 8.89063286s ago: executing program 2 (id=373): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x40102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2f) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(0xffffffffffffffff, 0x8004587d, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x22e0, 0x86) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x589b}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000200)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) dup2(0xffffffffffffffff, 0xffffffffffffffff) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWRULE={0x70, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x44, 0x4, 0x0, 0x1, [{0x40, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x30, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_MATCH_INFO={0x18, 0x3, "c6a41d106c72fffffff500000000000002000000"}, @NFTA_MATCH_NAME={0xa, 0x1, 'owner\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x98}}, 0x4048010) ioctl$KDSETLED(0xffffffffffffffff, 0x4b32, 0xf1a) 7.370602961s ago: executing program 4 (id=374): socket$inet_sctp(0x2, 0x5, 0x84) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/power/resume', 0x149a82, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) write$cgroup_int(r0, &(0x7f0000000040)=0x1f00, 0x12) 4.749704224s ago: executing program 3 (id=375): prlimit64(0x0, 0xe, &(0x7f0000000040)={0xb, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) setpriority(0x2, 0x0, 0xffffffffffffffcd) 3.613202834s ago: executing program 3 (id=376): r0 = userfaultfd(0x1) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) write$dsp(0xffffffffffffffff, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0xb, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x183341, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000000}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) 2.58571981s ago: executing program 2 (id=377): syz_open_procfs(0x0, &(0x7f0000000100)='numa_maps\x00') socket$inet6(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() mlock(&(0x7f00001b5000/0x400000)=nil, 0x400000) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb9}, 0x94) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x4, 0x3f, 0x7fff0000}]}) socket(0x10, 0x3, 0x0) unshare(0x2a020480) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 1.224336295s ago: executing program 4 (id=378): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000002080)=ANY=[@ANYBLOB="0200000004000000060000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYRES32=r3, @ANYBLOB], &(0x7f00000020c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000002140), 0x103801, 0x0) timer_create(0x3, 0x0, &(0x7f0000002180)) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='timers\x00') pread64(r4, &(0x7f0000000340)=""/84, 0x54, 0x7) 95.127505ms ago: executing program 3 (id=379): r0 = socket(0x2000000015, 0x80005, 0x0) bind$inet6(r0, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0xa, 0x4e21, 0x1000, @empty, 0x7}, 0x1c) socket$inet6_udp(0xa, 0x2, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, &(0x7f0000000000)={0x4fc0, 0x80, 0x6, 0x0, 0x8, 0x80, 0x7}, 0xc) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4007fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2, 0x0, 0x7}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x4) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f0000000300)={0x0, 0x3f00, &(0x7f0000001200)={&(0x7f00000004c0)={0x38, 0x1403, 0x1, 0x70bd2d, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0xf, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8f, 0x0, 0x0, 0x0, 0xb}, {{}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x700}, {0x85, 0x0, 0x0, 0x86}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x2000000}}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x2a}}}, &(0x7f0000000080)='GPL\x00', 0x1, 0x1000, &(0x7f0000000cc0)=""/4096, 0x41100, 0x2}, 0x94) 0s ago: executing program 4 (id=380): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x40102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2f) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(0xffffffffffffffff, 0x8004587d, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x22e0, 0x86) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x589b}, 0x50) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.187' (ED25519) to the list of known hosts. [ 96.661853][ T5788] cgroup: Unknown subsys name 'net' [ 96.881775][ T5788] cgroup: Unknown subsys name 'cpuset' [ 96.936230][ T5788] cgroup: Unknown subsys name 'rlimit' [ 97.178489][ T49] cfg80211: failed to load regulatory.db Setting up swapspace version 1, size = 127995904 bytes [ 98.884950][ T5788] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 103.017433][ T5120] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 103.038923][ T5814] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 103.043068][ T5814] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 103.045297][ T5819] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 103.059082][ T5818] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 103.074678][ T5814] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 103.086903][ T5814] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 103.088749][ T5814] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 103.089973][ T5818] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 103.090458][ T5814] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 103.093483][ T5814] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 103.094097][ T5818] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 103.096028][ T5814] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 103.103445][ T5818] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 103.104293][ T5818] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 103.112805][ T5818] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 103.120776][ T5818] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 103.127412][ T5120] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 103.160908][ T5120] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 103.212167][ T5818] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 103.266519][ T5811] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 103.268956][ T5811] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 103.274643][ T5811] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 103.297808][ T5811] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 103.298714][ T5811] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 104.325768][ T5808] chnl_net:caif_netlink_parms(): no params data found [ 104.470104][ T5809] chnl_net:caif_netlink_parms(): no params data found [ 104.587102][ T5807] chnl_net:caif_netlink_parms(): no params data found [ 104.633322][ T5805] chnl_net:caif_netlink_parms(): no params data found [ 104.695489][ T5806] chnl_net:caif_netlink_parms(): no params data found [ 105.167242][ T5811] Bluetooth: hci0: command tx timeout [ 105.215870][ T5808] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.216606][ T5808] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.217395][ T5808] bridge_slave_0: entered allmulticast mode [ 105.219755][ T5808] bridge_slave_0: entered promiscuous mode [ 105.251720][ T5818] Bluetooth: hci1: command tx timeout [ 105.251982][ T5811] Bluetooth: hci2: command tx timeout [ 105.325855][ T5811] Bluetooth: hci3: command tx timeout [ 105.379981][ T5808] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.380156][ T5808] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.380323][ T5808] bridge_slave_1: entered allmulticast mode [ 105.382189][ T5808] bridge_slave_1: entered promiscuous mode [ 105.407463][ T5811] Bluetooth: hci4: command tx timeout [ 105.784348][ T5809] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.784525][ T5809] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.784674][ T5809] bridge_slave_0: entered allmulticast mode [ 105.791561][ T5809] bridge_slave_0: entered promiscuous mode [ 105.876801][ T5807] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.876934][ T5807] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.877128][ T5807] bridge_slave_0: entered allmulticast mode [ 105.879550][ T5807] bridge_slave_0: entered promiscuous mode [ 106.048935][ T5809] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.049025][ T5809] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.049174][ T5809] bridge_slave_1: entered allmulticast mode [ 106.051139][ T5809] bridge_slave_1: entered promiscuous mode [ 106.087122][ T5808] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 106.087448][ T5807] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.087676][ T5807] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.087865][ T5807] bridge_slave_1: entered allmulticast mode [ 106.090357][ T5807] bridge_slave_1: entered promiscuous mode [ 106.092807][ T5805] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.092927][ T5805] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.093271][ T5805] bridge_slave_0: entered allmulticast mode [ 106.095132][ T5805] bridge_slave_0: entered promiscuous mode [ 106.299480][ T5808] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 106.396814][ T5805] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.396922][ T5805] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.397055][ T5805] bridge_slave_1: entered allmulticast mode [ 106.398926][ T5805] bridge_slave_1: entered promiscuous mode [ 106.400658][ T5806] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.400787][ T5806] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.400913][ T5806] bridge_slave_0: entered allmulticast mode [ 106.402759][ T5806] bridge_slave_0: entered promiscuous mode [ 106.806684][ T5806] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.806815][ T5806] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.806969][ T5806] bridge_slave_1: entered allmulticast mode [ 106.809074][ T5806] bridge_slave_1: entered promiscuous mode [ 106.818014][ T5809] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 106.910786][ T5807] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 107.050290][ T5809] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 107.053751][ T5808] team0: Port device team_slave_0 added [ 107.061353][ T5807] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 107.074067][ T5805] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 107.247467][ T5811] Bluetooth: hci0: command tx timeout [ 107.251059][ T5808] team0: Port device team_slave_1 added [ 107.319071][ T5805] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 107.323038][ T5806] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 107.325614][ T5818] Bluetooth: hci1: command tx timeout [ 107.325711][ T5811] Bluetooth: hci2: command tx timeout [ 107.415559][ T5811] Bluetooth: hci3: command tx timeout [ 107.485607][ T5811] Bluetooth: hci4: command tx timeout [ 107.598997][ T5806] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 107.818756][ T5809] team0: Port device team_slave_0 added [ 107.889714][ T5807] team0: Port device team_slave_0 added [ 108.028689][ T5809] team0: Port device team_slave_1 added [ 108.030032][ T5808] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 108.030050][ T5808] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 108.030156][ T5808] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 108.035318][ T5807] team0: Port device team_slave_1 added [ 108.064976][ T5805] team0: Port device team_slave_0 added [ 108.227476][ T5808] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 108.227492][ T5808] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 108.227514][ T5808] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 108.329015][ T5805] team0: Port device team_slave_1 added [ 108.331440][ T5806] team0: Port device team_slave_0 added [ 108.548502][ T5806] team0: Port device team_slave_1 added [ 108.549252][ T5809] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 108.549263][ T5809] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 108.549282][ T5809] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 108.552706][ T5807] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 108.552719][ T5807] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 108.552738][ T5807] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 108.768713][ T5809] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 108.768733][ T5809] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 108.768761][ T5809] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 108.771846][ T5807] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 108.771864][ T5807] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 108.771892][ T5807] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 108.957708][ T5805] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 108.957730][ T5805] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 108.957749][ T5805] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 109.154346][ T5805] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 109.154369][ T5805] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 109.154389][ T5805] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 109.197245][ T5806] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 109.197319][ T5806] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 109.197406][ T5806] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 109.316196][ T5806] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 109.316215][ T5806] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 109.316251][ T5806] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 109.325666][ T5818] Bluetooth: hci0: command tx timeout [ 109.373131][ T5808] hsr_slave_0: entered promiscuous mode [ 109.379520][ T5808] hsr_slave_1: entered promiscuous mode [ 109.405920][ T5818] Bluetooth: hci1: command tx timeout [ 109.406018][ T5811] Bluetooth: hci2: command tx timeout [ 109.485622][ T5811] Bluetooth: hci3: command tx timeout [ 109.565698][ T5811] Bluetooth: hci4: command tx timeout [ 109.739497][ T5809] hsr_slave_0: entered promiscuous mode [ 109.740532][ T5809] hsr_slave_1: entered promiscuous mode [ 109.741705][ T5809] debugfs: 'hsr0' already exists in 'hsr' [ 109.741796][ T5809] Cannot create hsr debugfs directory [ 109.757424][ T5807] hsr_slave_0: entered promiscuous mode [ 109.761560][ T5807] hsr_slave_1: entered promiscuous mode [ 109.764161][ T5807] debugfs: 'hsr0' already exists in 'hsr' [ 109.764227][ T5807] Cannot create hsr debugfs directory [ 110.111454][ T5805] hsr_slave_0: entered promiscuous mode [ 110.112452][ T5805] hsr_slave_1: entered promiscuous mode [ 110.113165][ T5805] debugfs: 'hsr0' already exists in 'hsr' [ 110.113194][ T5805] Cannot create hsr debugfs directory [ 110.373182][ T5806] hsr_slave_0: entered promiscuous mode [ 110.374365][ T5806] hsr_slave_1: entered promiscuous mode [ 110.375062][ T5806] debugfs: 'hsr0' already exists in 'hsr' [ 110.375081][ T5806] Cannot create hsr debugfs directory [ 111.405891][ T5811] Bluetooth: hci0: command tx timeout [ 111.485684][ T5811] Bluetooth: hci2: command tx timeout [ 111.485720][ T5811] Bluetooth: hci1: command tx timeout [ 111.567745][ T5818] Bluetooth: hci3: command tx timeout [ 111.646651][ T5818] Bluetooth: hci4: command tx timeout [ 111.814441][ T5808] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 111.867984][ T5808] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 111.902088][ T5808] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 111.956376][ T5808] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 112.103937][ T5809] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 112.144687][ T5809] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 112.187982][ T5809] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 112.239043][ T5809] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 112.379058][ T5805] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 112.413181][ T5805] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 112.452387][ T5805] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 112.502256][ T5805] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 112.646171][ T5806] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 112.688337][ T5806] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 112.725132][ T5806] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 112.780706][ T5806] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 112.923808][ T5807] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 112.983871][ T5807] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 113.037826][ T5808] 8021q: adding VLAN 0 to HW filter on device bond0 [ 113.038158][ T5807] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 113.094063][ T5807] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 113.198670][ T5808] 8021q: adding VLAN 0 to HW filter on device team0 [ 113.227274][ T5809] 8021q: adding VLAN 0 to HW filter on device bond0 [ 113.254176][ T1355] bridge0: port 1(bridge_slave_0) entered blocking state [ 113.254975][ T1355] bridge0: port 1(bridge_slave_0) entered forwarding state [ 113.298670][ T1355] bridge0: port 2(bridge_slave_1) entered blocking state [ 113.298827][ T1355] bridge0: port 2(bridge_slave_1) entered forwarding state [ 113.359380][ T5809] 8021q: adding VLAN 0 to HW filter on device team0 [ 113.379722][ T5805] 8021q: adding VLAN 0 to HW filter on device bond0 [ 113.409682][ T68] bridge0: port 1(bridge_slave_0) entered blocking state [ 113.409856][ T68] bridge0: port 1(bridge_slave_0) entered forwarding state [ 113.458904][ T68] bridge0: port 2(bridge_slave_1) entered blocking state [ 113.459062][ T68] bridge0: port 2(bridge_slave_1) entered forwarding state [ 113.523472][ T5805] 8021q: adding VLAN 0 to HW filter on device team0 [ 113.565244][ T5806] 8021q: adding VLAN 0 to HW filter on device bond0 [ 113.577202][ T155] bridge0: port 1(bridge_slave_0) entered blocking state [ 113.577356][ T155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 113.632832][ T1355] bridge0: port 2(bridge_slave_1) entered blocking state [ 113.632985][ T1355] bridge0: port 2(bridge_slave_1) entered forwarding state [ 113.733306][ T5806] 8021q: adding VLAN 0 to HW filter on device team0 [ 113.800673][ T5807] 8021q: adding VLAN 0 to HW filter on device bond0 [ 113.811504][ T813] bridge0: port 1(bridge_slave_0) entered blocking state [ 113.812003][ T813] bridge0: port 1(bridge_slave_0) entered forwarding state [ 113.883368][ T1355] bridge0: port 2(bridge_slave_1) entered blocking state [ 113.883550][ T1355] bridge0: port 2(bridge_slave_1) entered forwarding state [ 113.971664][ T5807] 8021q: adding VLAN 0 to HW filter on device team0 [ 114.016411][ T155] bridge0: port 1(bridge_slave_0) entered blocking state [ 114.016564][ T155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 114.090808][ T68] bridge0: port 2(bridge_slave_1) entered blocking state [ 114.091051][ T68] bridge0: port 2(bridge_slave_1) entered forwarding state [ 114.164637][ T5808] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 114.549303][ T5809] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 114.846423][ T5805] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 114.959104][ T5809] veth0_vlan: entered promiscuous mode [ 115.013264][ T5806] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 115.018664][ T5809] veth1_vlan: entered promiscuous mode [ 115.117968][ T5807] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 115.122896][ T5805] veth0_vlan: entered promiscuous mode [ 115.199914][ T5805] veth1_vlan: entered promiscuous mode [ 115.225055][ T5808] veth0_vlan: entered promiscuous mode [ 115.251948][ T5809] veth0_macvtap: entered promiscuous mode [ 115.292046][ T5809] veth1_macvtap: entered promiscuous mode [ 115.302240][ T5808] veth1_vlan: entered promiscuous mode [ 115.303549][ T5806] veth0_vlan: entered promiscuous mode [ 115.370356][ T5806] veth1_vlan: entered promiscuous mode [ 115.399192][ T5809] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 115.418646][ T5805] veth0_macvtap: entered promiscuous mode [ 115.421429][ T5807] veth0_vlan: entered promiscuous mode [ 115.444738][ T5809] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 115.460759][ T5805] veth1_macvtap: entered promiscuous mode [ 115.494004][ T68] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.511418][ T68] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.515037][ T5807] veth1_vlan: entered promiscuous mode [ 115.532269][ T68] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.549500][ T68] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.550092][ T5808] veth0_macvtap: entered promiscuous mode [ 115.612321][ T5808] veth1_macvtap: entered promiscuous mode [ 115.626660][ T5805] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 115.717397][ T5805] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 115.804702][ T5806] veth0_macvtap: entered promiscuous mode [ 115.826502][ T813] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.833789][ T813] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.851319][ T813] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.867569][ T5806] veth1_macvtap: entered promiscuous mode [ 115.875173][ T5808] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 115.875926][ T813] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.974206][ T5808] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 116.051017][ T5807] veth0_macvtap: entered promiscuous mode [ 116.087033][ T813] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 116.087057][ T813] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 116.088096][ T1290] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.098130][ T1290] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.141693][ T5806] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 116.159833][ T1290] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.160596][ T5807] veth1_macvtap: entered promiscuous mode [ 116.227576][ T1290] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.314046][ T5806] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 116.404296][ T68] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 116.404317][ T68] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 116.432790][ T3557] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.453167][ T3557] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.518006][ T3557] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.580917][ T5807] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 116.582156][ T3557] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.623801][ T813] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 116.623822][ T813] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 116.644070][ T5807] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 116.795633][ T68] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 116.795655][ T68] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 116.875765][ T3557] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.975744][ T3557] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.981346][ T3557] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.824286][ T3557] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.848672][ T1290] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 117.848697][ T1290] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 118.215453][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 118.219374][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 118.225460][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 118.235421][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 118.238761][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 118.245382][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 118.255390][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 118.265428][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 118.275424][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 118.285405][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 120.428949][ T68] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 120.429048][ T68] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 121.069998][ T3609] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 121.070022][ T3609] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 121.169145][ T43] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 121.169169][ T43] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 122.260924][ T43] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 122.260946][ T43] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 124.428755][ T1290] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 124.428813][ T1290] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 125.603492][ T5949] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 125.604045][ T5949] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 125.609429][ T5949] vhci_hcd vhci_hcd.0: Device attached [ 126.053472][ T5954] vhci_hcd: connection closed [ 126.201861][ T71] vhci_hcd vhci_hcd.2: stop threads [ 126.202610][ T71] vhci_hcd vhci_hcd.2: release socket [ 126.203209][ T71] vhci_hcd vhci_hcd.2: disconnect device [ 132.612039][ T5984] efs: cannot read volume header [ 136.659664][ T5957] Bluetooth: hci5: Frame reassembly failed (-84) [ 139.032650][ T6009] faux_driver vkms: [drm] Unknown color mode 6; guessing buffer size. [ 140.179058][ T5811] Bluetooth: hci5: command 0xfc11 tx timeout [ 140.179488][ T5818] Bluetooth: hci5: Entering manufacturer mode failed (-110) [ 140.580308][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 140.580402][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 147.545723][ T6051] netlink: 12 bytes leftover after parsing attributes in process `syz.3.30'. [ 154.536066][ T806] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 154.965165][ T6096] lo speed is unknown, defaulting to 1000 [ 154.965401][ T6096] lo speed is unknown, defaulting to 1000 [ 154.969343][ T6096] lo speed is unknown, defaulting to 1000 [ 154.978099][ T6096] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 154.992799][ T6096] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 155.607093][ T6096] lo speed is unknown, defaulting to 1000 [ 155.610428][ T6096] lo speed is unknown, defaulting to 1000 [ 155.614354][ T6096] lo speed is unknown, defaulting to 1000 [ 155.617605][ T6096] lo speed is unknown, defaulting to 1000 [ 155.621141][ T6096] lo speed is unknown, defaulting to 1000 [ 156.148367][ T806] usb 1-1: device descriptor read/all, error -71 [ 157.222877][ T6110] netlink: 12 bytes leftover after parsing attributes in process `syz.2.42'. [ 162.877056][ T6125] efs: cannot read volume header [ 168.872888][ T6150] siw: device registration error -23 [ 170.869107][ T6162] netlink: 12 bytes leftover after parsing attributes in process `syz.4.55'. [ 171.007148][ T6164] netlink: 12 bytes leftover after parsing attributes in process `syz.3.58'. [ 174.513086][ T6180] ptrace attach of "./syz-executor exec"[5807] was attempted by ""[6180] [ 175.774576][ T6187] netlink: 12 bytes leftover after parsing attributes in process `syz.4.63'. [ 176.920613][ T6186] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 181.854409][ T6208] siw: device registration error -23 [ 183.545395][ T6220] netlink: 12 bytes leftover after parsing attributes in process `syz.4.72'. [ 184.482287][ T5811] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 184.524202][ T5811] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 184.526443][ T5811] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 184.534329][ T5811] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 184.538719][ T5811] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 186.521438][ T6221] lo speed is unknown, defaulting to 1000 [ 186.611141][ T5811] Bluetooth: hci5: command tx timeout [ 188.685712][ T5818] Bluetooth: hci5: command tx timeout [ 188.965938][ T5991] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 189.199736][ T5991] usb 1-1: device descriptor read/all, error -71 [ 193.348049][ T5120] Bluetooth: hci5: command tx timeout [ 193.348184][ T5818] Bluetooth: hci6: command 0xfc11 tx timeout [ 193.348493][ T5811] Bluetooth: hci6: Entering manufacturer mode failed (-110) [ 194.023908][ T6268] netlink: 12 bytes leftover after parsing attributes in process `syz.2.84'. [ 194.966943][ T6271] siw: device registration error -23 [ 195.950216][ T5811] Bluetooth: hci5: command tx timeout [ 202.320454][ T6221] chnl_net:caif_netlink_parms(): no params data found [ 202.635539][ T6317] netlink: 12 bytes leftover after parsing attributes in process `syz.4.96'. [ 203.094818][ T6318] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 203.956037][ T6324] siw: device registration error -23 [ 204.792115][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 204.792193][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 205.059140][ T37] audit: type=1326 audit(1767419809.748:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6321 comm="syz.2.99" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faac083f749 code=0x7ffc0000 [ 205.059202][ T37] audit: type=1326 audit(1767419809.758:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6321 comm="syz.2.99" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7faac083f34b code=0x7ffc0000 [ 205.059251][ T37] audit: type=1326 audit(1767419809.758:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6321 comm="syz.2.99" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7faac083f34b code=0x7ffc0000 [ 205.059304][ T37] audit: type=1326 audit(1767419809.758:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6321 comm="syz.2.99" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7faac083f34b code=0x7ffc0000 [ 205.059351][ T37] audit: type=1326 audit(1767419809.758:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6321 comm="syz.2.99" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7faac083f34b code=0x7ffc0000 [ 205.059397][ T37] audit: type=1326 audit(1767419809.758:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6321 comm="syz.2.99" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7faac083f34b code=0x7ffc0000 [ 205.059443][ T37] audit: type=1326 audit(1767419809.758:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6321 comm="syz.2.99" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7faac083f34b code=0x7ffc0000 [ 205.059490][ T37] audit: type=1326 audit(1767419809.758:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6321 comm="syz.2.99" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7faac083f34b code=0x7ffc0000 [ 205.059536][ T37] audit: type=1326 audit(1767419809.758:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6321 comm="syz.2.99" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7faac083f34b code=0x7ffc0000 [ 205.073575][ T13] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.305895][ T37] audit: type=1326 audit(1767419809.758:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6321 comm="syz.2.99" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7faac083f34b code=0x7ffc0000 [ 212.567791][ T6362] netlink: 12 bytes leftover after parsing attributes in process `syz.4.107'. [ 212.990030][ T13] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.437888][ T6373] ptrace attach of "./syz-executor exec"[5809] was attempted by ""[6373] [ 218.581410][ T37] kauditd_printk_skb: 19 callbacks suppressed [ 218.581430][ T37] audit: type=1326 audit(1767419823.278:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6383 comm="syz.4.113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a7e02f749 code=0x7ffc0000 [ 218.619035][ T37] audit: type=1326 audit(1767419823.318:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6383 comm="syz.4.113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f4a7e02f34b code=0x7ffc0000 [ 218.619096][ T37] audit: type=1326 audit(1767419823.318:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6383 comm="syz.4.113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f4a7e02f34b code=0x7ffc0000 [ 218.619143][ T37] audit: type=1326 audit(1767419823.318:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6383 comm="syz.4.113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f4a7e02f34b code=0x7ffc0000 [ 218.619190][ T37] audit: type=1326 audit(1767419823.318:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6383 comm="syz.4.113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f4a7e02f34b code=0x7ffc0000 [ 218.619236][ T37] audit: type=1326 audit(1767419823.318:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6383 comm="syz.4.113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f4a7e02f34b code=0x7ffc0000 [ 218.619281][ T37] audit: type=1326 audit(1767419823.318:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6383 comm="syz.4.113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f4a7e02f34b code=0x7ffc0000 [ 218.619327][ T37] audit: type=1326 audit(1767419823.318:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6383 comm="syz.4.113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f4a7e02f34b code=0x7ffc0000 [ 218.619378][ T37] audit: type=1326 audit(1767419823.318:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6383 comm="syz.4.113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f4a7e02f34b code=0x7ffc0000 [ 218.619429][ T37] audit: type=1326 audit(1767419823.318:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6383 comm="syz.4.113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f4a7e02f34b code=0x7ffc0000 [ 219.019073][ T13] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.426605][ T13] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.765950][ T6221] bridge0: port 1(bridge_slave_0) entered blocking state [ 222.775771][ T6221] bridge0: port 1(bridge_slave_0) entered disabled state [ 222.776030][ T6221] bridge_slave_0: entered allmulticast mode [ 222.805561][ T6221] bridge_slave_0: entered promiscuous mode [ 223.769827][ T6221] bridge0: port 2(bridge_slave_1) entered blocking state [ 223.770048][ T6221] bridge0: port 2(bridge_slave_1) entered disabled state [ 223.770307][ T6221] bridge_slave_1: entered allmulticast mode [ 223.773261][ T6221] bridge_slave_1: entered promiscuous mode [ 225.631376][ T6436] netlink: 12 bytes leftover after parsing attributes in process `syz.0.125'. [ 226.474408][ T6221] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 226.650336][ T6221] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 228.040256][ T6147] Bluetooth: hci0: Frame reassembly failed (-84) [ 228.207135][ T813] Bluetooth: hci0: Frame reassembly failed (-84) [ 228.209557][ T813] Bluetooth: hci0: Frame reassembly failed (-84) [ 228.275170][ T1290] Bluetooth: hci0: Frame reassembly failed (-84) [ 228.284880][ T1290] Bluetooth: hci0: Frame reassembly failed (-84) [ 228.306426][ T5814] Bluetooth: hci3: command 0x0406 tx timeout [ 228.315449][ T68] Bluetooth: hci0: Frame reassembly failed (-84) [ 228.315552][ T68] Bluetooth: hci0: Frame reassembly failed (-84) [ 228.315635][ T68] Bluetooth: hci0: Frame reassembly failed (-84) [ 228.315717][ T68] Bluetooth: hci0: Frame reassembly failed (-84) [ 228.555769][ T5814] Bluetooth: hci1: command 0x0406 tx timeout [ 228.555902][ T5814] Bluetooth: hci4: command 0x0406 tx timeout [ 228.556650][ T5814] Bluetooth: hci2: command 0x0406 tx timeout [ 228.809392][ T6221] team0: Port device team_slave_0 added [ 228.847692][ T6221] team0: Port device team_slave_1 added [ 228.894097][ T37] kauditd_printk_skb: 21 callbacks suppressed [ 228.894115][ T37] audit: type=1326 audit(1767419833.598:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6444 comm="syz.2.129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faac083f749 code=0x7ffc0000 [ 228.915735][ T37] audit: type=1326 audit(1767419833.618:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6444 comm="syz.2.129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7faac083f34b code=0x7ffc0000 [ 228.916750][ T37] audit: type=1326 audit(1767419833.628:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6444 comm="syz.2.129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7faac083f34b code=0x7ffc0000 [ 228.917568][ T37] audit: type=1326 audit(1767419833.628:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6444 comm="syz.2.129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7faac083f34b code=0x7ffc0000 [ 228.919993][ T37] audit: type=1326 audit(1767419833.628:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6444 comm="syz.2.129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7faac083f34b code=0x7ffc0000 [ 228.925931][ T37] audit: type=1326 audit(1767419833.628:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6444 comm="syz.2.129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7faac083f34b code=0x7ffc0000 [ 228.929180][ T37] audit: type=1326 audit(1767419833.638:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6444 comm="syz.2.129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7faac083f34b code=0x7ffc0000 [ 228.930195][ T37] audit: type=1326 audit(1767419833.638:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6444 comm="syz.2.129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7faac083f34b code=0x7ffc0000 [ 228.930965][ T37] audit: type=1326 audit(1767419833.638:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6444 comm="syz.2.129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7faac083f34b code=0x7ffc0000 [ 228.931776][ T37] audit: type=1326 audit(1767419833.638:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6444 comm="syz.2.129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7faac083f34b code=0x7ffc0000 [ 230.045903][ T5818] Bluetooth: hci0: command 0xfc11 tx timeout [ 230.075715][ T61] Bluetooth: hci0: Entering manufacturer mode failed (-110) [ 232.533254][ T6221] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 232.533268][ T6221] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 232.533288][ T6221] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 232.589067][ T6221] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 232.589081][ T6221] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 232.589101][ T6221] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 237.515779][ T6483] netlink: 12 bytes leftover after parsing attributes in process `syz.2.136'. [ 238.444503][ T6484] ptrace attach of "./syz-executor exec"[5808] was attempted by ""[6484] [ 238.898952][ T6221] hsr_slave_0: entered promiscuous mode [ 238.900369][ T6221] hsr_slave_1: entered promiscuous mode [ 238.901311][ T6221] debugfs: 'hsr0' already exists in 'hsr' [ 238.901336][ T6221] Cannot create hsr debugfs directory [ 239.218496][ T13] bridge_slave_1: left allmulticast mode [ 239.218610][ T13] bridge_slave_1: left promiscuous mode [ 239.220830][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 242.567011][ T13] bridge_slave_0: left allmulticast mode [ 242.567042][ T13] bridge_slave_0: left promiscuous mode [ 242.567304][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 245.972166][ T5818] Bluetooth: hci0: command 0xfc11 tx timeout [ 245.973442][ T61] Bluetooth: hci0: Entering manufacturer mode failed (-110) [ 246.575753][ T6523] netlink: 12 bytes leftover after parsing attributes in process `syz.3.148'. [ 250.436340][ T6527] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 252.691751][ T61] Bluetooth: hci0: Entering manufacturer mode failed (-110) [ 252.692129][ T5818] Bluetooth: hci0: command 0xfc11 tx timeout [ 252.920264][ T5818] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 252.924211][ T5818] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 252.934232][ T5818] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 252.937939][ T5818] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 252.939983][ T5818] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 256.517566][ T61] Bluetooth: hci6: command tx timeout [ 257.116533][ T5818] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 257.124406][ T5818] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 257.126444][ T5818] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 257.139400][ T5818] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 257.160441][ T5818] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 258.127088][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 258.189504][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 258.229947][ T13] bond0 (unregistering): Released all slaves [ 258.532058][ T5818] Bluetooth: hci6: command tx timeout [ 259.549057][ T5818] Bluetooth: hci0: command tx timeout [ 260.615576][ T5818] Bluetooth: hci6: command tx timeout [ 262.157267][ T5818] Bluetooth: hci0: command tx timeout [ 262.696767][ T5818] Bluetooth: hci6: command tx timeout [ 263.187535][ T6568] siw: device registration error -23 [ 263.981886][ T1281] Bluetooth: hci4: Frame reassembly failed (-84) [ 264.255438][ T61] Bluetooth: hci0: command tx timeout [ 265.690297][ T6576] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 265.690332][ T6576] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 265.711236][ T6576] vhci_hcd vhci_hcd.0: Device attached [ 265.952313][ T6576] use of bytesused == 0 is deprecated and will be removed in the future, [ 265.952330][ T6576] use the actual size instead. [ 265.965463][ T5818] Bluetooth: hci4: Entering manufacturer mode failed (-110) [ 266.045884][ T6169] usb 37-1: new low-speed USB device number 2 using vhci_hcd [ 266.134710][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 266.134785][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 266.285364][ T5818] Bluetooth: hci0: command tx timeout [ 266.598815][ T6582] vhci_hcd: connection reset by peer [ 266.625347][ T2262] vhci_hcd vhci_hcd.2: stop threads [ 266.625372][ T2262] vhci_hcd vhci_hcd.2: release socket [ 266.625640][ T2262] vhci_hcd vhci_hcd.2: disconnect device [ 267.284754][ T6531] lo speed is unknown, defaulting to 1000 [ 267.512701][ T6600] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 267.512949][ T6600] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 267.530907][ T6600] vhci_hcd vhci_hcd.0: Device attached [ 268.438479][ T6601] vhci_hcd: connection closed [ 268.443499][ T12] vhci_hcd vhci_hcd.2: stop threads [ 268.443565][ T12] vhci_hcd vhci_hcd.2: release socket [ 268.503208][ T12] vhci_hcd vhci_hcd.2: disconnect device [ 269.611188][ T6611] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 270.802853][ T6545] lo speed is unknown, defaulting to 1000 [ 271.495518][ T6169] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 272.103274][ T6624] siw: device registration error -23 [ 277.238537][ T6639] block device autoloading is deprecated and will be removed. [ 277.243867][ T6449] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 277.255404][ T13] hsr_slave_0: left promiscuous mode [ 277.415416][ T6449] usb 4-1: Using ep0 maxpacket: 16 [ 277.440969][ T6449] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 277.441004][ T6449] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 277.441046][ T6449] usb 4-1: New USB device found, idVendor=1b1c, idProduct=1d00, bcdDevice= 0.00 [ 277.441070][ T6449] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 277.530887][ T6449] usb 4-1: config 0 descriptor?? [ 277.571030][ T13] hsr_slave_1: left promiscuous mode [ 277.654998][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 277.667064][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 277.809768][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 277.809801][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 278.113438][ T13] veth1_macvtap: left promiscuous mode [ 278.113731][ T13] veth0_macvtap: left promiscuous mode [ 278.127646][ T13] veth1_vlan: left promiscuous mode [ 278.128289][ T13] veth0_vlan: left promiscuous mode [ 279.661307][ T6650] netlink: 12 bytes leftover after parsing attributes in process `syz.4.172'. [ 280.763551][ T6449] usbhid 4-1:0.0: can't add hid device: -71 [ 280.763690][ T6449] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 280.811263][ T6449] usb 4-1: USB disconnect, device number 2 [ 284.035636][ T6671] siw: device registration error -23 [ 284.350133][ T3510] Bluetooth: hci4: Frame reassembly failed (-84) [ 285.885643][ T5818] Bluetooth: hci4: Entering manufacturer mode failed (-110) [ 286.806074][ T6685] netlink: 12 bytes leftover after parsing attributes in process `syz.4.181'. [ 289.269575][ T5822] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 289.436444][ T5822] usb 5-1: Using ep0 maxpacket: 16 [ 289.439405][ T5822] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 289.439440][ T5822] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 289.439481][ T5822] usb 5-1: New USB device found, idVendor=1b1c, idProduct=1d00, bcdDevice= 0.00 [ 289.439506][ T5822] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 289.537395][ T5822] usb 5-1: config 0 descriptor?? [ 290.086941][ T6694] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 290.087162][ T6694] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 290.087908][ T6694] vhci_hcd vhci_hcd.0: Device attached [ 291.148005][ T6696] vhci_hcd: connection closed [ 291.523728][ T3510] vhci_hcd vhci_hcd.2: stop threads [ 291.523749][ T3510] vhci_hcd vhci_hcd.2: release socket [ 291.523778][ T3510] vhci_hcd vhci_hcd.2: disconnect device [ 294.618823][ T5822] usbhid 5-1:0.0: can't add hid device: -32 [ 294.618959][ T5822] usbhid 5-1:0.0: probe with driver usbhid failed with error -32 [ 294.771914][ T5822] usb 5-1: USB disconnect, device number 2 [ 296.158434][ T13] team0 (unregistering): Port device team_slave_1 removed [ 296.804423][ T6712] ======================================================= [ 296.804423][ T6712] WARNING: The mand mount option has been deprecated and [ 296.804423][ T6712] and is ignored by this kernel. Remove the mand [ 296.804423][ T6712] option from the mount to silence this warning. [ 296.804423][ T6712] ======================================================= [ 296.817318][ T6712] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 298.258257][ T6730] netlink: 12 bytes leftover after parsing attributes in process `syz.2.191'. [ 299.276249][ T13] team0 (unregistering): Port device team_slave_0 removed [ 306.569034][ T6771] siw: device registration error -23 [ 307.734599][ T61] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 307.746823][ T61] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 307.747986][ T61] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 307.749454][ T61] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 307.750277][ T61] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 309.891839][ T5818] Bluetooth: hci4: command tx timeout [ 312.388368][ T5818] Bluetooth: hci4: command tx timeout [ 314.456734][ T5818] Bluetooth: hci4: command tx timeout [ 315.488058][ T61] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 315.497645][ T61] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 315.522097][ T61] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 315.569327][ T61] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 315.570380][ T61] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 316.138035][ T6833] efs: cannot read volume header [ 316.541715][ T61] Bluetooth: hci4: command tx timeout [ 317.955481][ T61] Bluetooth: hci5: command tx timeout [ 320.408877][ T61] Bluetooth: hci5: command tx timeout [ 323.219688][ T61] Bluetooth: hci5: command tx timeout [ 323.875982][ T6875] netlink: 12 bytes leftover after parsing attributes in process `syz.3.227'. [ 326.159623][ T61] Bluetooth: hci5: command tx timeout [ 326.892566][ T6001] lo speed is unknown, defaulting to 1000 [ 326.893235][ T6001] syz0: Port: 1 Link DOWN [ 327.586971][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 327.587047][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 329.428395][ T6917] netlink: 12 bytes leftover after parsing attributes in process `syz.2.236'. [ 333.134317][ T6773] chnl_net:caif_netlink_parms(): no params data found [ 333.569364][ T6828] chnl_net:caif_netlink_parms(): no params data found [ 336.521780][ T6773] bridge0: port 1(bridge_slave_0) entered blocking state [ 336.552329][ T6773] bridge0: port 1(bridge_slave_0) entered disabled state [ 336.587462][ T6773] bridge_slave_0: entered allmulticast mode [ 336.656082][ T6015] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 336.815568][ T6015] usb 3-1: Using ep0 maxpacket: 8 [ 336.842091][ T6015] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 336.842122][ T6015] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 336.842147][ T6015] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 336.842170][ T6015] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 336.842213][ T6015] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 336.842235][ T6015] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 337.075555][ T6773] bridge_slave_0: entered promiscuous mode [ 337.130272][ T6773] bridge0: port 2(bridge_slave_1) entered blocking state [ 337.130680][ T6773] bridge0: port 2(bridge_slave_1) entered disabled state [ 337.130954][ T6773] bridge_slave_1: entered allmulticast mode [ 337.133823][ T6773] bridge_slave_1: entered promiscuous mode [ 337.266481][ T6015] usb 3-1: usb_control_msg returned -32 [ 337.266539][ T6015] usbtmc 3-1:16.0: can't read capabilities [ 339.338630][ T6015] usb 3-1: USB disconnect, device number 2 [ 339.523856][ T6773] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 339.724176][ T6981] siw: device registration error -23 [ 339.739185][ T6773] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 339.740843][ T6828] bridge0: port 1(bridge_slave_0) entered blocking state [ 339.740992][ T6828] bridge0: port 1(bridge_slave_0) entered disabled state [ 339.741201][ T6828] bridge_slave_0: entered allmulticast mode [ 339.777403][ T6828] bridge_slave_0: entered promiscuous mode [ 339.928200][ T6828] bridge0: port 2(bridge_slave_1) entered blocking state [ 339.928337][ T6828] bridge0: port 2(bridge_slave_1) entered disabled state [ 339.928561][ T6828] bridge_slave_1: entered allmulticast mode [ 339.931320][ T6828] bridge_slave_1: entered promiscuous mode [ 340.284631][ T6773] team0: Port device team_slave_0 added [ 341.205693][ T6987] netlink: 12 bytes leftover after parsing attributes in process `syz.3.246'. [ 342.010500][ T6989] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 342.312107][ T6773] team0: Port device team_slave_1 added [ 346.644303][ T6828] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 348.471704][ T7007] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 348.471846][ T7007] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 348.475145][ T7007] vhci_hcd vhci_hcd.0: Device attached [ 348.847529][ T10] usb 37-1: new low-speed USB device number 3 using vhci_hcd [ 349.437337][ T7008] vhci_hcd: connection reset by peer [ 349.489941][ T3528] vhci_hcd vhci_hcd.2: stop threads [ 349.490050][ T3528] vhci_hcd vhci_hcd.2: release socket [ 349.490314][ T3528] vhci_hcd vhci_hcd.2: disconnect device [ 350.022612][ T6828] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 350.428424][ T5813] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 352.005387][ T5813] usb 4-1: Using ep0 maxpacket: 8 [ 352.010588][ T5813] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 352.010619][ T5813] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 352.010645][ T5813] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 352.010670][ T5813] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 352.010713][ T5813] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 352.010736][ T5813] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 352.091903][ T6773] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 352.091923][ T6773] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 352.091951][ T6773] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 352.533239][ T5813] usb 4-1: usb_control_msg returned -32 [ 352.533290][ T5813] usbtmc 4-1:16.0: can't read capabilities [ 354.856159][ T6773] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 354.856179][ T6773] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 354.856208][ T6773] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 354.947427][ T5813] usb 4-1: USB disconnect, device number 3 [ 355.139761][ T6828] team0: Port device team_slave_0 added [ 355.142102][ T7032] siw: device registration error -23 [ 355.142759][ T7031] netlink: 12 bytes leftover after parsing attributes in process `syz.3.260'. [ 355.389161][ T6828] team0: Port device team_slave_1 added [ 355.660354][ T10] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 361.282804][ T6460] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 363.046485][ T7067] overlayfs: overlapping lowerdir path [ 364.698901][ T7078] netlink: 12 bytes leftover after parsing attributes in process `syz.3.271'. [ 365.457707][ T6773] hsr_slave_0: entered promiscuous mode [ 365.459315][ T6773] hsr_slave_1: entered promiscuous mode [ 365.481670][ T6773] debugfs: 'hsr0' already exists in 'hsr' [ 365.481702][ T6773] Cannot create hsr debugfs directory [ 365.484147][ T6828] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 365.484163][ T6828] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 365.484191][ T6828] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 365.572815][ T7080] siw: device registration error -23 [ 366.068794][ T6828] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 366.068813][ T6828] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 366.068841][ T6828] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 373.643851][ T6828] hsr_slave_0: entered promiscuous mode [ 373.679019][ T6828] hsr_slave_1: entered promiscuous mode [ 373.679920][ T6828] debugfs: 'hsr0' already exists in 'hsr' [ 373.679939][ T6828] Cannot create hsr debugfs directory [ 373.857256][ T7121] overlayfs: overlapping lowerdir path [ 376.055388][ T61] Bluetooth: hci6: command 0x0406 tx timeout [ 376.231094][ T61] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 376.234898][ T61] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 376.258879][ T61] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 376.277423][ T61] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 376.278874][ T61] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 376.415408][ T5992] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 376.577240][ T5992] usb 3-1: Using ep0 maxpacket: 16 [ 378.055344][ T5992] usb 3-1: device descriptor read/all, error -71 [ 378.232009][ T31] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 378.277060][ T5818] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 378.313932][ T5818] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 380.136505][ T5120] Bluetooth: hci7: command tx timeout [ 380.142527][ T5818] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 380.190748][ T5818] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 380.192072][ T5818] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 380.273633][ T31] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz0] on syz0 [ 380.806092][ T7153] fido_id[7153]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 382.320143][ T5818] Bluetooth: hci0: command 0x0406 tx timeout [ 382.320481][ T5818] Bluetooth: hci4: command tx timeout [ 382.332822][ T61] Bluetooth: hci7: command tx timeout [ 383.034584][ T7126] chnl_net:caif_netlink_parms(): no params data found [ 383.365490][ T31] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 383.535475][ T31] usb 5-1: Using ep0 maxpacket: 32 [ 383.552199][ T31] usb 5-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 383.552802][ T31] usb 5-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 383.552876][ T31] usb 5-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 383.552905][ T31] usb 5-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 383.630288][ T31] usb 5-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 383.630369][ T31] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 383.630435][ T31] usb 5-1: Product: syz [ 383.630507][ T31] usb 5-1: Manufacturer: syz [ 383.653422][ T31] usb 5-1: SerialNumber: syz [ 384.455797][ T61] Bluetooth: hci7: command tx timeout [ 384.457018][ T5120] Bluetooth: hci4: command tx timeout [ 384.981740][ C1] imon 5-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 385.107306][ T31] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:155.0/input/input5 [ 385.177145][ T31] imon 5-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 385.177167][ T31] (id 0x00) [ 385.275338][ T31] rc_core: IR keymap rc-imon-pad not found [ 385.275362][ T31] Registered IR keymap rc-empty [ 385.275473][ T31] imon 5-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 385.275491][ T31] imon 5-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 386.525539][ T61] Bluetooth: hci4: command tx timeout [ 386.866119][ T31] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:155.0/rc/rc0 [ 386.870547][ T31] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:155.0/rc/rc0/input6 [ 386.920834][ T31] imon 5-1:155.0: iMON device (15c2:ffdc, intf0) on usb<5:3> initialized [ 387.165332][ T61] Bluetooth: hci7: command tx timeout [ 387.427289][ T7200] overlayfs: overlapping lowerdir path [ 388.620345][ T806] usb 5-1: USB disconnect, device number 3 [ 388.632281][ T61] Bluetooth: hci4: command tx timeout [ 388.666680][ T7204] siw: device registration error -23 [ 389.036137][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 389.036211][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 394.123930][ T7126] bridge0: port 1(bridge_slave_0) entered blocking state [ 394.124088][ T7126] bridge0: port 1(bridge_slave_0) entered disabled state [ 394.124297][ T7126] bridge_slave_0: entered allmulticast mode [ 394.184916][ T7126] bridge_slave_0: entered promiscuous mode [ 394.296028][ T7229] ptrace attach of "./syz-executor exec"[5805] was attempted by ""[7229] [ 395.210396][ T7126] bridge0: port 2(bridge_slave_1) entered blocking state [ 395.210543][ T7126] bridge0: port 2(bridge_slave_1) entered disabled state [ 395.211324][ T7126] bridge_slave_1: entered allmulticast mode [ 395.256837][ T7126] bridge_slave_1: entered promiscuous mode [ 395.956056][ T7126] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 396.014165][ T7126] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 396.014922][ T7146] chnl_net:caif_netlink_parms(): no params data found [ 401.352511][ T7262] siw: device registration error -23 [ 401.459073][ T7126] team0: Port device team_slave_0 added [ 401.547691][ T7126] team0: Port device team_slave_1 added [ 406.255442][ T7126] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 406.255461][ T7126] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 406.255489][ T7126] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 406.371688][ T7292] overlayfs: overlapping lowerdir path [ 409.012900][ T7126] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 409.012915][ T7126] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 409.012934][ T7126] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 409.357816][ T7146] bridge0: port 1(bridge_slave_0) entered blocking state [ 409.358017][ T7146] bridge0: port 1(bridge_slave_0) entered disabled state [ 409.358296][ T7146] bridge_slave_0: entered allmulticast mode [ 409.399944][ T7146] bridge_slave_0: entered promiscuous mode [ 410.506140][ T7146] bridge0: port 2(bridge_slave_1) entered blocking state [ 410.506296][ T7146] bridge0: port 2(bridge_slave_1) entered disabled state [ 410.506556][ T7146] bridge_slave_1: entered allmulticast mode [ 410.518959][ T7146] bridge_slave_1: entered promiscuous mode [ 410.765939][ T7308] siw: device registration error -23 [ 419.769142][ T7146] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 420.028193][ T7126] hsr_slave_0: entered promiscuous mode [ 420.043472][ T7126] hsr_slave_1: entered promiscuous mode [ 420.064723][ T7126] debugfs: 'hsr0' already exists in 'hsr' [ 420.064756][ T7126] Cannot create hsr debugfs directory [ 420.152363][ T7146] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 422.705789][ T7355] siw: device registration error -23 [ 422.959932][ T7146] team0: Port device team_slave_0 added [ 422.997205][ T7146] team0: Port device team_slave_1 added [ 424.884886][ T7146] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 424.884906][ T7146] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 424.884934][ T7146] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 425.023474][ T7146] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 425.023492][ T7146] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 425.023521][ T7146] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 427.297780][ T7146] hsr_slave_0: entered promiscuous mode [ 427.299551][ T7146] hsr_slave_1: entered promiscuous mode [ 427.300917][ T7146] debugfs: 'hsr0' already exists in 'hsr' [ 427.300946][ T7146] Cannot create hsr debugfs directory [ 429.892100][ T7400] netlink: 12 bytes leftover after parsing attributes in process `syz.2.331'. [ 430.036328][ T7406] siw: device registration error -23 [ 430.328409][ T5120] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 430.340242][ T5120] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 430.355013][ T5120] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 430.377030][ T5120] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 430.379858][ T5120] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 431.977043][ T7432] overlayfs: overlapping lowerdir path [ 432.482084][ T5120] Bluetooth: hci5: command tx timeout [ 434.551374][ T5120] Bluetooth: hci5: command tx timeout [ 434.744570][ T7440] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 434.744640][ T7440] block device autoloading is deprecated and will be removed. [ 434.911049][ T7146] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 435.437186][ T7146] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 435.554362][ T7146] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 435.681970][ T7146] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 436.938863][ T7408] chnl_net:caif_netlink_parms(): no params data found [ 437.100097][ T5120] Bluetooth: hci5: command tx timeout [ 438.548889][ T7466] netlink: 12 bytes leftover after parsing attributes in process `syz.4.341'. [ 438.590378][ T7146] kthread_run failed with err -4 [ 439.822838][ T5120] Bluetooth: hci5: command tx timeout [ 442.948660][ T5817] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 444.127915][ T5817] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 444.176380][ T5817] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 444.221908][ T5817] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 444.223174][ T5817] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 446.398812][ T7524] netlink: 12 bytes leftover after parsing attributes in process `syz.2.351'. [ 446.680401][ T5120] Bluetooth: hci7: command tx timeout [ 446.906349][ T7530] siw: device registration error -23 [ 449.393812][ T5120] Bluetooth: hci7: command tx timeout [ 451.018493][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 451.018571][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 451.321652][ T7408] bridge0: port 1(bridge_slave_0) entered blocking state [ 451.321870][ T7408] bridge0: port 1(bridge_slave_0) entered disabled state [ 451.322256][ T7408] bridge_slave_0: entered allmulticast mode [ 451.338287][ T7408] bridge_slave_0: entered promiscuous mode [ 451.358257][ T7408] bridge0: port 2(bridge_slave_1) entered blocking state [ 451.360474][ T7408] bridge0: port 2(bridge_slave_1) entered disabled state [ 451.360692][ T7408] bridge_slave_1: entered allmulticast mode [ 451.406334][ T5120] Bluetooth: hci7: command tx timeout [ 451.438496][ T7408] bridge_slave_1: entered promiscuous mode [ 451.802038][ T7545] overlayfs: overlapping lowerdir path [ 452.979503][ T7408] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 453.015709][ T7408] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 453.485925][ T5120] Bluetooth: hci7: command tx timeout [ 454.330595][ T7408] team0: Port device team_slave_0 added [ 454.397098][ T7408] team0: Port device team_slave_1 added [ 455.794458][ T7562] netlink: 12 bytes leftover after parsing attributes in process `syz.2.361'. [ 456.588224][ T7408] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 456.588244][ T7408] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 456.588273][ T7408] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 456.592849][ T7408] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 456.592868][ T7408] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 456.592897][ T7408] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 458.999671][ T7408] hsr_slave_0: entered promiscuous mode [ 459.011682][ T7408] hsr_slave_1: entered promiscuous mode [ 459.039359][ T7408] debugfs: 'hsr0' already exists in 'hsr' [ 459.039389][ T7408] Cannot create hsr debugfs directory [ 464.818665][ T7489] chnl_net:caif_netlink_parms(): no params data found [ 465.346993][ T7619] netlink: 12 bytes leftover after parsing attributes in process `syz.4.371'. [ 472.549649][ T7489] bridge0: port 1(bridge_slave_0) entered blocking state [ 472.549816][ T7489] bridge0: port 1(bridge_slave_0) entered disabled state [ 472.550114][ T7489] bridge_slave_0: entered allmulticast mode [ 472.555079][ T7489] bridge_slave_0: entered promiscuous mode [ 472.806660][ T7489] bridge0: port 2(bridge_slave_1) entered blocking state [ 473.612425][ T7489] bridge0: port 2(bridge_slave_1) entered disabled state [ 473.613102][ T7489] bridge_slave_1: entered allmulticast mode [ 473.672711][ T7489] bridge_slave_1: entered promiscuous mode [ 473.742128][ T38] INFO: task kworker/u8:5:71 blocked for more than 143 seconds. [ 473.742159][ T38] Not tainted syzkaller #0 [ 473.742171][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 473.742181][ T38] task:kworker/u8:5 state:D stack:22240 pid:71 tgid:71 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 473.742249][ T38] Workqueue: ib-unreg-wq ib_unregister_work [ 473.742308][ T38] Call Trace: [ 473.742320][ T38] [ 473.742335][ T38] __schedule+0x145f/0x5070 [ 473.742380][ T38] ? __lock_acquire+0x6b6/0x2cf0 [ 473.742428][ T38] ? check_noncircular+0xda/0x150 [ 473.742470][ T38] ? __pfx___schedule+0x10/0x10 [ 473.742515][ T38] ? schedule+0x91/0x360 [ 473.742552][ T38] schedule+0x165/0x360 [ 473.742588][ T38] schedule_timeout+0x9a/0x270 [ 473.742623][ T38] ? __pfx_schedule_timeout+0x10/0x10 [ 473.742659][ T38] ? do_raw_spin_lock+0x121/0x290 [ 473.742696][ T38] ? _raw_spin_unlock_irq+0x23/0x50 [ 473.742717][ T38] ? wait_for_completion+0x267/0x5d0 [ 473.742740][ T38] wait_for_completion+0x2bf/0x5d0 [ 473.742774][ T38] ? __pfx_wait_for_completion+0x10/0x10 [ 473.742805][ T38] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 473.742828][ T38] ? lockdep_hardirqs_on+0x7b/0x110 [ 473.742850][ T38] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 473.742876][ T38] disable_device+0x1c6/0x320 [ 473.742898][ T38] ? __pfx_disable_device+0x10/0x10 [ 473.742918][ T38] ? lockdep_hardirqs_on+0x7b/0x110 [ 473.742940][ T38] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 473.742963][ T38] ? mutex_lock_nested+0x154/0x1d0 [ 473.742991][ T38] ? __ib_unregister_device+0x284/0x3f0 [ 473.743028][ T38] __ib_unregister_device+0x2cb/0x3f0 [ 473.743063][ T38] ? preempt_schedule_thunk+0x16/0x30 [ 473.743094][ T38] ib_unregister_work+0x19/0x30 [ 473.743124][ T38] ? process_scheduled_works+0x9ef/0x1770 [ 473.743148][ T38] process_scheduled_works+0xad1/0x1770 [ 473.743204][ T38] ? __pfx_process_scheduled_works+0x10/0x10 [ 473.743229][ T38] ? do_raw_spin_lock+0x121/0x290 [ 473.743272][ T38] worker_thread+0x8a0/0xda0 [ 473.743327][ T38] kthread+0x711/0x8a0 [ 473.743360][ T38] ? __pfx_worker_thread+0x10/0x10 [ 473.743399][ T38] ? __pfx_kthread+0x10/0x10 [ 473.743428][ T38] ? rt_spin_unlock+0x150/0x200 [ 473.743465][ T38] ? rt_spin_unlock+0x161/0x200 [ 473.743492][ T38] ? __pfx_kthread+0x10/0x10 [ 473.743526][ T38] ret_from_fork+0x510/0xa50 [ 473.743555][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 473.743578][ T38] ? __switch_to+0xc9e/0x1480 [ 473.743619][ T38] ? __pfx_kthread+0x10/0x10 [ 473.743652][ T38] ret_from_fork_asm+0x1a/0x30 [ 473.743701][ T38] [ 473.743865][ T38] INFO: task syz-executor:6531 blocked for more than 143 seconds. [ 473.743883][ T38] Not tainted syzkaller #0 [ 473.743893][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 473.743903][ T38] task:syz-executor state:D stack:25312 pid:6531 tgid:6531 ppid:1 task_flags:0x400140 flags:0x00080002 [ 473.743967][ T38] Call Trace: [ 473.743974][ T38] [ 473.743987][ T38] __schedule+0x145f/0x5070 [ 473.744043][ T38] ? __pfx_sched_clock_cpu+0x10/0x10 [ 473.744087][ T38] ? __pfx___schedule+0x10/0x10 [ 473.744140][ T38] rt_mutex_schedule+0x77/0xf0 [ 473.744176][ T38] rt_mutex_slowlock_block+0x5ba/0x6d0 [ 473.744219][ T38] ? rt_mutex_slowlock_block+0x351/0x6d0 [ 473.744254][ T38] rt_mutex_slowlock+0x2a8/0x6b0 [ 473.744287][ T38] ? rt_mutex_slowlock+0x1c9/0x6b0 [ 473.744319][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 473.744362][ T38] ? rdma_dev_change_netns+0x39/0x300 [ 473.744421][ T38] ? rdma_dev_change_netns+0x39/0x300 [ 473.744453][ T38] mutex_lock_nested+0x16a/0x1d0 [ 473.744488][ T38] rdma_dev_change_netns+0x39/0x300 [ 473.744527][ T38] rdma_dev_exit_net+0x203/0x340 [ 473.744549][ T38] ? __pfx_netdev_run_todo+0x10/0x10 [ 473.744585][ T38] ? __pfx_rdma_dev_exit_net+0x10/0x10 [ 473.744613][ T38] ? rtnl_is_locked+0x9/0x20 [ 473.744647][ T38] ops_undo_list+0x49a/0x990 [ 473.744681][ T38] ? __pfx_ops_undo_list+0x10/0x10 [ 473.744704][ T38] ? ops_init+0x469/0x5c0 [ 473.744738][ T38] setup_net+0x2e8/0x330 [ 473.744763][ T38] ? __pfx_setup_net+0x10/0x10 [ 473.744785][ T38] ? mutex_rt_init_lockdep+0x66/0x80 [ 473.744809][ T38] ? preinit_net+0x4a0/0x7a0 [ 473.744834][ T38] copy_net_ns+0x3e3/0x570 [ 473.744862][ T38] create_new_namespaces+0x3e7/0x6a0 [ 473.744892][ T38] ? security_capable+0x7e/0x2e0 [ 473.744922][ T38] unshare_nsproxy_namespaces+0x11c/0x170 [ 473.744950][ T38] ksys_unshare+0x4c8/0x8c0 [ 473.744987][ T38] ? __pfx_ksys_unshare+0x10/0x10 [ 473.745031][ T38] __x64_sys_unshare+0x38/0x50 [ 473.745061][ T38] do_syscall_64+0xec/0xf80 [ 473.745081][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 473.745101][ T38] ? trace_irq_disable+0x37/0x100 [ 473.745124][ T38] ? clear_bhb_loop+0x60/0xb0 [ 473.745150][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 473.745335][ T38] RIP: 0033:0x7f7a734e0f47 [ 473.745366][ T38] RSP: 002b:00007fff11da1e88 EFLAGS: 00000202 ORIG_RAX: 0000000000000110 [ 473.745389][ T38] RAX: ffffffffffffffda RBX: 00007f7a73735f40 RCX: 00007f7a734e0f47 [ 473.745404][ T38] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 473.745418][ T38] RBP: 00007f7a737367b8 R08: 0000000000000000 R09: 0000000000000000 [ 473.745431][ T38] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000008 [ 473.745444][ T38] R13: 0000000000000003 R14: 00007fff11da2158 R15: 0000000000000000 [ 473.745477][ T38] [ 473.745520][ T38] [ 473.745520][ T38] Showing all locks held in the system: [ 473.745531][ T38] 4 locks held by kworker/u8:1/13: [ 473.745543][ T38] #0: ffff888019ad4938 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770 [ 473.745600][ T38] #1: ffffc90000127bc0 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770 [ 473.745701][ T38] #2: ffffffff8e898820 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf7/0x7b0 [ 473.745752][ T38] #3: ffffffff8d5b43b0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 473.746047][ T38] 1 lock held by khungtaskd/38: [ 473.746060][ T38] #0: ffffffff8d5ae940 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 473.746127][ T38] 5 locks held by kworker/u8:3/58: [ 473.746142][ T38] 3 locks held by kworker/u8:5/71: [ 473.746154][ T38] #0: ffff88801dae6138 ((wq_completion)ib-unreg-wq){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770 [ 473.746306][ T38] #1: ffffc9000156fbc0 ((work_completion)(&device->unregistration_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770 [ 473.746495][ T38] #2: ffff8880320cc750 (&device->unregistration_lock){+.+.}-{4:4}, at: __ib_unregister_device+0x284/0x3f0 [ 473.746564][ T38] 7 locks held by kworker/u8:7/155: [ 473.746578][ T38] 3 locks held by kworker/0:2/825: [ 473.746596][ T38] 4 locks held by kworker/u8:11/1281: [ 473.746631][ T38] 1 lock held by udevd/5171: [ 473.746643][ T38] 2 locks held by getty/5556: [ 473.746654][ T38] #0: ffff88814e0ed0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 473.746713][ T38] #1: ffffc90003e8b2e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x44f/0x1460 [ 473.746766][ T38] 9 locks held by syz-executor/5807: [ 473.746779][ T38] 5 locks held by syz-executor/5808: [ 473.746792][ T38] 2 locks held by kworker/0:4/5822: [ 473.746811][ T38] 3 locks held by kworker/0:12/6276: [ 473.746823][ T38] #0: ffff88813ff55138 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770 [ 473.746877][ T38] #1: ffffc9000cb8fbc0 (deferred_process_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770 [ 473.746932][ T38] #2: ffffffff8e8a5938 (rtnl_mutex){+.+.}-{4:4}, at: switchdev_deferred_process_work+0xe/0x20 [ 473.746986][ T38] 2 locks held by syz-executor/6531: [ 473.746999][ T38] #0: ffffffff8e898820 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x3cc/0x570 [ 473.747050][ T38] #1: ffff8880320cc750 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x39/0x300 [ 473.747115][ T38] 2 locks held by syz-executor/6545: [ 473.747127][ T38] #0: ffffffff8e898820 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x3cc/0x570 [ 473.747178][ T38] #1: ffff8880320cc750 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x39/0x300 [ 473.747343][ T38] 8 locks held by syz-executor/7408: [ 473.747357][ T38] 2 locks held by syz-executor/7489: [ 473.747371][ T38] 1 lock held by syz.2.377/7641: [ 473.747385][ T38] [ 473.747390][ T38] ============================================= [ 473.747390][ T38] [ 473.747399][ T38] NMI backtrace for cpu 0 [ 473.747433][ T38] CPU: 0 UID: 0 PID: 38 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 473.747456][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 473.747468][ T38] Call Trace: [ 473.747477][ T38] [ 473.747486][ T38] dump_stack_lvl+0xe8/0x150 [ 473.747519][ T38] nmi_cpu_backtrace+0x274/0x2d0 [ 473.747548][ T38] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 473.747575][ T38] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 473.747606][ T38] sys_info+0x135/0x170 [ 473.747636][ T38] watchdog+0xf95/0xfe0 [ 473.747671][ T38] ? watchdog+0x20a/0xfe0 [ 473.747693][ T38] kthread+0x711/0x8a0 [ 473.747717][ T38] ? __pfx_watchdog+0x10/0x10 [ 473.747734][ T38] ? __pfx_kthread+0x10/0x10 [ 473.747754][ T38] ? rt_spin_unlock+0x150/0x200 [ 473.747778][ T38] ? rt_spin_unlock+0x161/0x200 [ 473.747798][ T38] ? __pfx_kthread+0x10/0x10 [ 473.747820][ T38] ret_from_fork+0x510/0xa50 [ 473.747839][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 473.747854][ T38] ? __switch_to+0xc9e/0x1480 [ 473.747881][ T38] ? __pfx_kthread+0x10/0x10 [ 473.747903][ T38] ret_from_fork_asm+0x1a/0x30 [ 473.747938][ T38] [ 473.747944][ T38] Sending NMI from CPU 0 to CPUs 1: [ 473.748001][ C1] NMI backtrace for cpu 1 [ 473.748016][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 473.748037][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 473.748048][ C1] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 473.748069][ C1] Code: c3 c2 03 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 43 c7 16 00 f3 0f 1e fa fb f4 98 c2 03 00 cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 473.748084][ C1] RSP: 0018:ffffc900001d7e20 EFLAGS: 000002c6 [ 473.748100][ C1] RAX: 000000000054e045 RBX: ffffffff8195d78e RCX: 0000000080000001 [ 473.748114][ C1] RDX: 0000000000000001 RSI: ffffffff8ce0bd9f RDI: ffffffff8b3f57e0 [ 473.748127][ C1] RBP: ffffc900001d7f10 R08: ffff8880b8933c5b R09: 1ffff1101712678b [ 473.748141][ C1] R10: dffffc0000000000 R11: ffffed101712678c R12: ffffffff8edb3570 [ 473.748155][ C1] R13: 1ffff11003757b58 R14: 0000000000000001 R15: 0000000000000001 [ 473.748167][ C1] FS: 0000000000000000(0000) GS:ffff888126def000(0000) knlGS:0000000000000000 [ 473.748182][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 473.748195][ C1] CR2: 0000200000404030 CR3: 000000000d3a8000 CR4: 00000000003526f0 [ 473.748211][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 473.748222][ C1] DR3: 000000000000000e DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 473.748236][ C1] Call Trace: [ 473.748242][ C1] [ 473.748249][ C1] default_idle+0x13/0x20 [ 473.748270][ C1] default_idle_call+0x73/0xb0 [ 473.748292][ C1] do_idle+0x1be/0x4d0 [ 473.748308][ C1] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 473.748331][ C1] ? __pfx_do_idle+0x10/0x10 [ 473.748353][ C1] cpu_startup_entry+0x44/0x60 [ 473.748377][ C1] start_secondary+0x101/0x110 [ 473.748396][ C1] common_startup_64+0x13e/0x147 [ 473.748431][ C1] [ 473.749093][ T38] Kernel panic - not syncing: hung_task: blocked tasks [ 473.749108][ T38] CPU: 0 UID: 0 PID: 38 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 473.749125][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 473.749134][ T38] Call Trace: [ 473.749140][ T38] [ 473.749146][ T38] vpanic+0x1e0/0x670 [ 473.749172][ T38] panic+0xb9/0xc0 [ 473.749198][ T38] ? __pfx_panic+0x10/0x10 [ 473.749221][ T38] ? preempt_schedule_thunk+0x16/0x30 [ 473.749242][ T38] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 473.749267][ T38] watchdog+0xfdf/0xfe0 [ 473.749288][ T38] ? watchdog+0x20a/0xfe0 [ 473.749310][ T38] kthread+0x711/0x8a0 [ 473.749334][ T38] ? __pfx_watchdog+0x10/0x10 [ 473.749351][ T38] ? __pfx_kthread+0x10/0x10 [ 473.749372][ T38] ? rt_spin_unlock+0x150/0x200 [ 473.749396][ T38] ? rt_spin_unlock+0x161/0x200 [ 473.749415][ T38] ? __pfx_kthread+0x10/0x10 [ 473.749438][ T38] ret_from_fork+0x510/0xa50 [ 473.749457][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 473.749473][ T38] ? __switch_to+0xc9e/0x1480 [ 473.749499][ T38] ? __pfx_kthread+0x10/0x10 [ 473.749522][ T38] ret_from_fork_asm+0x1a/0x30 [ 473.749558][ T38] [ 473.750176][ T38] Kernel Offset: disabled