last executing test programs: 3m31.208884557s ago: executing program 3 (id=110): openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x40000000a0003, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) connect(0xffffffffffffffff, &(0x7f0000000000)=@nfc={0x27, 0x0, 0xffffffffffffffff, 0x3}, 0x80) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$usbmon(&(0x7f0000000040), 0x3, 0x20001) unshare(0x4000400) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, &(0x7f0000000240)={0x1f, 0x0, 0xffffffffffffffff}, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000380)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000340)=0x1, 0xffffffffffffffff, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r2, &(0x7f00000003c0)={0x7, 0x8, 0xfa00, {0xffffffffffffffff, 0x7}}, 0x10) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x80c02, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r3, 0x3ba0, &(0x7f0000000200)={0x48}) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0}, 0x10) ioctl$FBIO_WAITFORVSYNC(r4, 0x40044620, 0x0) r5 = socket(0x1e, 0x1, 0x0) connect$tipc(r5, 0x0, 0x0) r6 = socket$netlink(0x10, 0x3, 0x4) writev(r6, &(0x7f0000000300)=[{&(0x7f00000005c0)="580000001400192340834b80040d8c561e117436c379000000000000000058000b4824ca945f6400d40f6a0325010ebc000000000000008000f0fffeffd809005300fff5dd00000010000100070c0600000000", 0x53}], 0x1) 3m26.267259029s ago: executing program 3 (id=114): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000034709d405f0530c6acb60102030109021200fd0000000009"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000380)={0x2c, &(0x7f0000000400)={0x20, 0x1, 0x1, "af"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000280)={0x1c, &(0x7f0000000080)=ANY=[], 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000480)={0x44, &(0x7f00000006c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000900)={0x1c, &(0x7f0000000780)={0x20, 0xe}, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000300)={0x1c, &(0x7f00000001c0)={0x40, 0x18}, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, &(0x7f00000003c0)={0x34, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000005c0)={0x44, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000006c0)={0x44, &(0x7f0000000500)={0x40, 0x16}, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x20, 0x83, 0x2}, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000640)={0x44, &(0x7f0000000140)={0x20, 0xe, 0x1, '6'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 3m21.440844538s ago: executing program 3 (id=120): syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x7a22, 0xc000, 0x7, 0x337}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x0, 0xffff}}}, 0x24}}, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='9', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) socket$inet(0x2, 0x80001, 0x84) ioctl$VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, &(0x7f0000000000)={0xd, @vbi={0x0, 0x0, 0x0, 0x4745504d, [], [0xfffffffe]}}) 3m19.487519501s ago: executing program 3 (id=122): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x9}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_VFIO_IOAS$SET(r3, 0x3b88, &(0x7f0000000200)={0xc}) 3m17.804641233s ago: executing program 3 (id=124): openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x40000000a0003, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) connect(0xffffffffffffffff, &(0x7f0000000000)=@nfc={0x27, 0x0, 0xffffffffffffffff, 0x3}, 0x80) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$usbmon(&(0x7f0000000040), 0x3, 0x20001) unshare(0x4000400) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, &(0x7f0000000240)={0x1f, 0x0, 0xffffffffffffffff}, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000380)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000340)=0x1, 0xffffffffffffffff, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f00000003c0)={0x7, 0x8, 0xfa00, {0xffffffffffffffff, 0x7}}, 0x10) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x80c02, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r2, 0x3ba0, &(0x7f0000000200)={0x48}) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0}, 0x10) ioctl$FBIO_WAITFORVSYNC(r3, 0x40044620, 0x0) r4 = socket(0x1e, 0x1, 0x0) connect$tipc(r4, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x4) writev(r5, &(0x7f0000000300)=[{&(0x7f00000005c0)="580000001400192340834b80040d8c561e117436c379000000000000000058000b4824ca945f6400d40f6a0325010ebc000000000000008000f0fffeffd809005300fff5dd00000010000100070c0600000000", 0x53}], 0x1) 3m13.843197625s ago: executing program 3 (id=131): ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f0000724000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000290000/0x4000)=nil) munlockall() madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) openat$rfkill(0xffffffffffffff9c, 0x0, 0x801, 0x0) ioctl$IOMMU_TEST_OP_ADD_RESERVED(0xffffffffffffffff, 0x3ba0, 0x0) 2m56.616158321s ago: executing program 32 (id=131): ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f0000724000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000290000/0x4000)=nil) munlockall() madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) openat$rfkill(0xffffffffffffff9c, 0x0, 0x801, 0x0) ioctl$IOMMU_TEST_OP_ADD_RESERVED(0xffffffffffffffff, 0x3ba0, 0x0) 2m46.123456627s ago: executing program 2 (id=167): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb"], 0xcc}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 2m45.363475657s ago: executing program 1 (id=168): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x21c001, &(0x7f0000000140)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}}) 2m45.280591167s ago: executing program 2 (id=169): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)={0x50, 0x2, 0x6, 0x3, 0xe4340000, 0x0, {0x0, 0x0, 0x8}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x81}, 0x0) 2m44.933323958s ago: executing program 1 (id=170): ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, &(0x7f0000000180)=0x200) write$dsp(0xffffffffffffffff, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) write$dsp(0xffffffffffffffff, &(0x7f0000000200)="dce480febb0ccd0bcb66ade3495e87b440e5afdc984cc06eb1c91c85a7fec04b2f82e267c1edd1543b79d80c0f949073bdbaa464c040e61ea6e658101100101097a5821b6c0c79d177b96995281707ce6d20a6db", 0x54) write$dsp(0xffffffffffffffff, &(0x7f0000000080)="cd", 0x1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 2m44.792186631s ago: executing program 2 (id=171): openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x40000000a0003, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) connect(0xffffffffffffffff, &(0x7f0000000000)=@nfc={0x27, 0x0, 0xffffffffffffffff, 0x3}, 0x80) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$usbmon(&(0x7f0000000040), 0x3, 0x20001) unshare(0x4000400) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, &(0x7f0000000240)={0x1f, 0x0, 0xffffffffffffffff}, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000380)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000340)=0x1, 0xffffffffffffffff, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f00000003c0)={0x7, 0x8, 0xfa00, {0xffffffffffffffff, 0x7}}, 0x10) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x80c02, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r2, 0x3ba0, &(0x7f0000000200)={0x48}) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0}, 0x10) ioctl$FBIO_WAITFORVSYNC(r3, 0x40044620, 0x0) r4 = socket(0x1e, 0x1, 0x0) connect$tipc(r4, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x4) writev(r5, &(0x7f0000000300)=[{&(0x7f00000005c0)="580000001400192340834b80040d8c561e117436c379000000000000000058000b4824ca945f6400d40f6a0325010ebc000000000000008000f0fffeffd809005300fff5dd00000010000100070c0600000000", 0x53}], 0x1) 2m44.792017516s ago: executing program 1 (id=172): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi4\x00', 0x2, 0x0) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, 0x0, 0x80) ioctl$COMEDI_INSN(r0, 0x8028640c, &(0x7f0000000000)={0x8000001, 0x3ffffffffffffcb2, &(0x7f0000000080), 0x0, 0x3}) 2m44.410186944s ago: executing program 1 (id=173): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(0x0, r0) sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f0000002140)={0x0, 0x0, &(0x7f0000002100)={&(0x7f0000002080)={0x14, r1, 0x1, 0x70bd29, 0x25dfdbfd}, 0x14}, 0x1, 0x4000000000000000, 0x0, 0x882}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f0000002040), 0xffffffffffffffff) sendmsg$SEG6_CMD_SETHMAC(r2, &(0x7f0000002140)={0x0, 0x0, &(0x7f0000002100)={&(0x7f0000002080)={0x2c, r3, 0x1, 0x70bd26, 0x25dfdbfd, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x7}, @SEG6_ATTR_SECRETLEN={0x5}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x1}]}, 0x2c}, 0x1, 0x4000000000000000, 0x0, 0x882}, 0x0) 2m43.364736217s ago: executing program 2 (id=174): pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, 0x0, 0x0, r0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x2) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) symlinkat(&(0x7f0000000040)='./file1\x00', r2, &(0x7f00000000c0)='./file1\x00') setpgid(r3, r3) setpgid(0x0, r3) fchdir(r2) setxattr$trusted_overlay_nlink(&(0x7f0000000000)='./file1\x00', &(0x7f0000000080), 0x0, 0x0, 0x1) 2m43.290404833s ago: executing program 1 (id=175): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000106161154d00000000000109022400010000000009040400010300000009210000000122f80409058103"], 0x0) syz_usb_connect$hid(0x4, 0x0, 0x0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x1, [{0xb2, &(0x7f00000003c0)=@string={0xb2, 0x3, "9f4e5133f38f7fc9936f698ccbb5eae247e28c08903d0e4bcadf2077592f819a735f5d2fa32c2bd931cdefbf66e403ccfbb012c104b806240c44ffc7eee185d44e0988ca94a6f66505e6e3b3dd8ae330d6d3f0de59251e8a47fbce9253328514ec392c89a8f61fecf4536fd1ed73e03497e0a1f767fb5ffa89790abf9bc623aa44d7586cbe02d023d9bdd99b6ec6dd4ecbbf4db8751cb9d31a4449646f2054fc2ca72ef6e5eb4bf3afe5dd2897b6f7c3"}}]}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) 2m42.612011592s ago: executing program 2 (id=179): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000300), 0x802, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000040), 0x0, 0x0) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = shmget$private(0x0, 0x3000, 0x2, &(0x7f0000ffd000/0x3000)=nil) shmat(r5, &(0x7f0000ffc000/0x3000)=nil, 0x4000) remap_file_pages(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0xfd9, 0x4000000) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000340)) 2m39.147550824s ago: executing program 2 (id=181): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x2, 0xa, 0x2) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f0000000400)={0x0, 'batadv0\x00', {0x5}}) syz_usb_connect(0x3, 0x2d, &(0x7f0000000a00)=ANY=[@ANYBLOB="120100000c9768405e0483020b9901e402010902"], 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="2e00000011008108090f9becdb4cb92e0a4831371400000069bd6efb2502eaf60d000300020400bf050005001206", 0x2e}], 0x1}, 0x48000) 2m38.506659538s ago: executing program 1 (id=182): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2400, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000240)) 2m22.787702529s ago: executing program 33 (id=182): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2400, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000240)) 2m22.301375809s ago: executing program 34 (id=181): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x2, 0xa, 0x2) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f0000000400)={0x0, 'batadv0\x00', {0x5}}) syz_usb_connect(0x3, 0x2d, &(0x7f0000000a00)=ANY=[@ANYBLOB="120100000c9768405e0483020b9901e402010902"], 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="2e00000011008108090f9becdb4cb92e0a4831371400000069bd6efb2502eaf60d000300020400bf050005001206", 0x2e}], 0x1}, 0x48000) 2m11.292250726s ago: executing program 5 (id=222): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, 0x0, 0x275a, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000004000000", @ANYRES32, @ANYBLOB, @ANYRES32=0x0], 0x50) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x103}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r6, 0x0, &(0x7f0000cd2000/0x2000)=nil, 0x2000, 0x9}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r6, 0x0, 0xffffffffffffffff, 0x1}) r7 = syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[@ANYBLOB="7d17295392cc353febb870a2aeeb467679e9", @ANYRES16=r7, @ANYBLOB="01002abd7000fcdbdf25040000", @ANYRES64=r4, @ANYBLOB, @ANYRES64=0x0], 0x14}, 0x1, 0x0, 0x0, 0x24000000}, 0xc080) rmdir(&(0x7f0000000080)='./cgroup/../file0\x00') select(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x0, 0xea60}) syz_genetlink_get_family_id$devlink(0x0, r2) write$bt_hci(r1, 0x0, 0x0) 2m3.184374852s ago: executing program 5 (id=234): r0 = gettid() prlimit64(r0, 0x3, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) tkill(r0, 0x13) 2m1.908499591s ago: executing program 5 (id=237): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r1 = getpid() socket$inet6(0xa, 0x1, 0x0) r2 = syz_pidfd_open(r1, 0x0) mount$9p_fd(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x20000c4, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) 2m0.923944023s ago: executing program 5 (id=239): syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = openat$dsp(0xffffffffffffff9c, 0x0, 0x42f82, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000180)=0x200) write$dsp(r0, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) write$dsp(r0, &(0x7f0000000200)="dce480febb0ccd0bcb66ade3495e87b440e5afdc984cc06eb1c91c85a7fec04b2f82e267c1edd1543b79d80c0f949073bdbaa464c040e61ea6e658101100101097a5821b6c0c79d177b96995281707ce6d20a6db", 0x54) write$dsp(r0, &(0x7f0000000080)="cd", 0x1) 2m0.594262887s ago: executing program 5 (id=240): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/bus/input/devices\x00', 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, 0x0, &(0x7f0000000040), 0x21c001, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 2m0.20204487s ago: executing program 5 (id=241): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a80000000060a010400000000000000000a0000010900010073797a310000000054000480500001800b00010074617267657400004000028008000240000000012c0003007339f2f10455afb9fdd672bad09dfb78c7699c74e891a0c70000000000000000000000000000000008000100544545000900020073797a320000000014000000110001"], 0xa8}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) 1m48.965809759s ago: executing program 0 (id=266): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) mmap(&(0x7f0000ff4000/0xc000)=nil, 0xc000, 0x1000003, 0x20031, 0xffffffffffffffff, 0xffffe000) close(0xffffffffffffffff) r0 = userfaultfd(0x80801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x100}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f00000001c0)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1}) madvise(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x15) ioctl$UFFDIO_CONTINUE(0xffffffffffffffff, 0xc020aa07, &(0x7f00000002c0)={{&(0x7f0000ffd000/0x2000)=nil, 0x2000}}) 1m48.22702338s ago: executing program 0 (id=268): ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) r0 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) ioctl$sock_proto_private(r0, 0x8b20, 0x0) r1 = io_uring_setup(0xfc6, &(0x7f00000002c0)={0x0, 0x6c02, 0x0, 0x0, 0x20000004}) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r2, 0xfffffffc) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)={0x30, r5, 0x1, 0x70bd2c, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}}, 0x40) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) close_range(r1, 0xffffffffffffffff, 0x0) 1m45.869771805s ago: executing program 0 (id=269): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r0 = fsopen(&(0x7f0000000100)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000180)='user\x00N\xac]\x86\x8a\xa3\x7f\x00', &(0x7f0000000140), 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000040)='user\x00N\xac]\x86\x8a\xa3\x7f\x00', &(0x7f0000000080), 0x0) 1m44.877912975s ago: executing program 0 (id=270): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42f82, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000180)=0x200) write$dsp(r0, 0x0, 0x0) write$dsp(r0, &(0x7f0000000200)="dce480febb0ccd0bcb66ade3495e87b440e5afdc984cc06eb1c91c85a7fec04b2f82e267c1edd1543b79d80c0f949073bdbaa464c040e61ea6e658101100101097a5821b6c0c79d177b96995281707ce6d20a6db", 0x54) write$dsp(r0, &(0x7f0000000080)="cd", 0x1) close_range(r0, r0, 0x0) 1m44.703719191s ago: executing program 35 (id=241): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a80000000060a010400000000000000000a0000010900010073797a310000000054000480500001800b00010074617267657400004000028008000240000000012c0003007339f2f10455afb9fdd672bad09dfb78c7699c74e891a0c70000000000000000000000000000000008000100544545000900020073797a320000000014000000110001"], 0xa8}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) 1m41.874845615s ago: executing program 0 (id=272): bind$alg(0xffffffffffffffff, &(0x7f0000000540)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) setsockopt$ALG_SET_AEAD_AUTHSIZE(0xffffffffffffffff, 0x117, 0x5, 0x0, 0xa) r0 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400), r0) 1m40.011621449s ago: executing program 0 (id=274): connect$unix(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) mkdir(0x0, 0x22) unshare(0x62040200) r0 = openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000100)=0xa0000) syz_usb_connect(0x0, 0x4a, &(0x7f0000000080)=ANY=[@ANYBLOB="120100005520f010402038b14201040000010902"], 0x0) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x1}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x60}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)=ANY=[@ANYBLOB="5c000000090601080000000000000000070000000900020073797a31000000000500010007000000340007801800018014000240fe8000000000000000000000000000bb060004400e1f00cd050007008800000006000540"], 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) 1m24.209092209s ago: executing program 36 (id=274): connect$unix(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) mkdir(0x0, 0x22) unshare(0x62040200) r0 = openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000100)=0xa0000) syz_usb_connect(0x0, 0x4a, &(0x7f0000000080)=ANY=[@ANYBLOB="120100005520f010402038b14201040000010902"], 0x0) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x1}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x60}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)=ANY=[@ANYBLOB="5c000000090601080000000000000000070000000900020073797a31000000000500010007000000340007801800018014000240fe8000000000000000000000000000bb060004400e1f00cd050007008800000006000540"], 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) 35.401751317s ago: executing program 7 (id=322): sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="14000000000000002900000000000014000000000000002900000034000000fdffffff00000000180000000000000029000000040000000400000000000000d80000000000000029000000360000005e170000000000000001000001"], 0x188}}], 0x1, 0x810) bind$alg(0xffffffffffffffff, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xd4}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000001400)="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", 0x2f4}], 0x1, &(0x7f0000000340)=ANY=[@ANYBLOB="10000000001d830007"], 0x10}, 0x40000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 33.300363868s ago: executing program 7 (id=323): ioctl$VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000000)={0x3, 0x5, 0x1, 0x0, 0x2}) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000040)={0x7, @win={{0xff, 0x2, 0x6, 0x9}, 0x7, 0x4, 0x0, 0x5, 0x0, 0x3}}) 33.300187618s ago: executing program 7 (id=324): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f78790000000004000280140000001100"], 0xcc}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 30.767449462s ago: executing program 7 (id=326): ioctl$XFS_IOC_SCRUB_METADATA(0xffffffffffffffff, 0xc040583c, &(0x7f0000000180)={0x23, 0xb9, 0x100000000, 0x2, 0xa60b}) creat(0x0, 0xecf86c37d53049cc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x88c4}, 0x880) r1 = fsopen(&(0x7f0000000200)='debugfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000240)='uid', &(0x7f00000008c0)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80=\x8a\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\x1f\x03\x00\x00\x00\x00\x00\x00\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9ak\x00\x00\x00\x00\x00\x00\x00\n\xa72\xa3\xef^\xe7\x8f', 0x0) socket(0x2, 0x80805, 0x0) socketpair(0x18, 0x5, 0x1, &(0x7f0000000100)) syz_usb_connect(0x2, 0x2d, &(0x7f0000000440)=ANY=[@ANYBLOB="120100024e9e094099041a1026440102030109"], 0x0) openat(0xffffffffffffff9c, 0x0, 0x40, 0x1) file_setattr(0xffffffffffffff9c, 0x0, &(0x7f00000000c0)={0x80000200, 0x4, 0x0, 0x0, 0x1}, 0x18, 0x100) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xdf}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000240), 0x40900, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) r3 = userfaultfd(0x80001) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000100)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) read(r3, &(0x7f0000000140)=""/116, 0x74) ioctl$UFFDIO_CONTINUE(r3, 0xc020aa08, &(0x7f00000000c0)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48c1}, 0x90) syz_io_uring_submit(0x0, 0x0, 0x0) 29.249324878s ago: executing program 4 (id=327): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42f82, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000180)=0x200) write$dsp(r0, &(0x7f00000001c0)="5cba", 0x2) write$dsp(r0, &(0x7f0000000200)="dce480febb0ccd0bcb66ade3495e87b440e5afdc984cc06eb1c91c85a7fec04b2f82e267c1edd1543b79d80c0f949073bdbaa464c040e61ea6e658101100101097a5821b6c0c79d177b96995281707ce6d20a6db", 0x54) write$dsp(r0, &(0x7f0000000080)="cd", 0x1) close_range(r0, r0, 0x0) 27.501543499s ago: executing program 4 (id=328): r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000740)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300042e010203010902120001000000000904"], 0x0) ioctl$EVIOCRMFF(r0, 0x550c, 0x0) 24.725229743s ago: executing program 7 (id=329): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi4\x00', 0x2, 0x0) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="ec000000", @ANYRES16, @ANYBLOB="01000000000000000000010000000800050001000000140002007767310000000000000000000000000024000300a0cb879a47f5bc644c0e693fa6d031c74a1553b6e901b9ff2f518c78042fb5420800050000000000900008808c000080"], 0xec}, 0x1, 0x0, 0x0, 0x4084}, 0x80) ioctl$COMEDI_INSN(r0, 0x8028640c, &(0x7f0000000000)={0x8000001, 0x3ffffffffffffcb2, &(0x7f0000000080), 0x0, 0x3}) 24.518546238s ago: executing program 7 (id=330): syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000300)={@in={{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x41}}}, 0x0, 0x0, 0x3e, 0x0, "bb02a3c364ca41d6357e544508474004000b42a20000000000000010208a0e2f964e0000c534a632cd6193fcf19b2df3eea18afaa4ff1f56c54dc46d8b6d2ccd00a0cf0a007bbe00"}, 0xd8) r0 = socket$kcm(0x23, 0x5, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$kcm(0x10, 0x2, 0x0) listen(r0, 0x800) accept4(r0, 0x0, 0x0, 0x80000) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000380)=ANY=[@ANYBLOB="1c0000f500000000000000862dfdff000000"], 0x78) 23.055245175s ago: executing program 4 (id=331): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r0 = fsopen(&(0x7f0000000100)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000180)='user\x00N\xac]\x86\x8a\xa3\x7f\x00', &(0x7f0000000140), 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000040)='user\x00N\xac]\x86\x8a\xa3\x7f\x00', &(0x7f0000000080), 0x0) 21.109484499s ago: executing program 4 (id=332): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000003c0), 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="a000000010c2b20400010700f9ffffff000000020000000c00021fbd095eb37063b9be4b7cfc5a86bdfdc647a8bba1006e6c"], 0x20}}, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/devices.allow\x00', 0x2, 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x4a, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x3f, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x4000000) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x10400) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r3, 0xc0a85320, 0x0) nanosleep(&(0x7f0000000140), 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000002c0)={0x62, 0x18, 0xfa00, {0xfffffffffffffffe, 0x0, 0x13f, 0x4}}, 0xc) 17.913886217s ago: executing program 4 (id=333): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000140)={0xbf48ce7, "1803c809800000000800000000000000000000000000d63175876b4c69a600", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f00000000c0)={0x1ff, "fa02c80a3a1e9d4b9abf000000008d674fe69b5b7638dd031dd7504fe5809639", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r2, 0xc0303e03, &(0x7f0000001280)={"6739669f274d13b691ebe45b00bd74dd3e4dd02acecdc67c816800", r1, 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000100)={0xc, "66bb8d04000000c0bd58cf8be5640000000000000800", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r3, 0xc0303e03, &(0x7f0000000180)={"0e337b42cc10d331ff0007000000000000001a00001e000000000000000400", r4}) 15.578037034s ago: executing program 4 (id=334): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x22) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, 0x0) tgkill(0x0, 0x0, 0x3f) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYRES8=r0], 0x50) unshare(0x62040200) syz_usb_connect(0x0, 0x4a, 0x0, 0x0) socket$inet6(0xa, 0x800000000000002, 0x0) openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) 7.705354821s ago: executing program 37 (id=330): syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000300)={@in={{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x41}}}, 0x0, 0x0, 0x3e, 0x0, "bb02a3c364ca41d6357e544508474004000b42a20000000000000010208a0e2f964e0000c534a632cd6193fcf19b2df3eea18afaa4ff1f56c54dc46d8b6d2ccd00a0cf0a007bbe00"}, 0xd8) r0 = socket$kcm(0x23, 0x5, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$kcm(0x10, 0x2, 0x0) listen(r0, 0x800) accept4(r0, 0x0, 0x0, 0x80000) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000380)=ANY=[@ANYBLOB="1c0000f500000000000000862dfdff000000"], 0x78) 0s ago: executing program 38 (id=334): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x22) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, 0x0) tgkill(0x0, 0x0, 0x3f) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYRES8=r0], 0x50) unshare(0x62040200) syz_usb_connect(0x0, 0x4a, 0x0, 0x0) socket$inet6(0xa, 0x800000000000002, 0x0) openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.27' (ED25519) to the list of known hosts. [ 82.464037][ T5784] cgroup: Unknown subsys name 'net' [ 82.736027][ T5784] cgroup: Unknown subsys name 'cpuset' [ 82.791102][ T5784] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 84.693157][ T5784] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 87.095254][ T10] cfg80211: failed to load regulatory.db [ 88.407369][ T5813] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 88.416004][ T5815] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 88.419803][ T5815] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 88.425796][ T5813] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 88.426494][ T5813] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 88.426929][ T5815] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 88.427064][ T5813] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 88.430088][ T5815] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 88.431232][ T5815] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 88.432021][ T5815] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 88.434233][ T5815] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 88.437080][ T5817] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 88.438196][ T5815] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 88.438456][ T5815] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 88.439580][ T5817] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 88.442936][ T5815] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 88.443652][ T5815] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 88.450900][ T5815] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 88.452694][ T5815] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 88.480451][ T5117] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 88.481102][ T5117] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 88.481684][ T5117] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 88.485244][ T5117] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 88.488293][ T5804] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 88.489713][ T5804] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 89.403846][ T5797] chnl_net:caif_netlink_parms(): no params data found [ 89.454502][ T5799] chnl_net:caif_netlink_parms(): no params data found [ 89.554022][ T5801] chnl_net:caif_netlink_parms(): no params data found [ 89.560088][ T5798] chnl_net:caif_netlink_parms(): no params data found [ 89.664003][ T5800] chnl_net:caif_netlink_parms(): no params data found [ 89.821796][ T5797] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.822840][ T5797] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.823008][ T5797] bridge_slave_0: entered allmulticast mode [ 89.824643][ T5797] bridge_slave_0: entered promiscuous mode [ 89.879790][ T5797] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.879924][ T5797] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.880319][ T5797] bridge_slave_1: entered allmulticast mode [ 89.883013][ T5797] bridge_slave_1: entered promiscuous mode [ 89.887022][ T5799] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.887158][ T5799] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.887314][ T5799] bridge_slave_0: entered allmulticast mode [ 89.890362][ T5799] bridge_slave_0: entered promiscuous mode [ 89.980422][ T5799] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.980538][ T5799] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.980647][ T5799] bridge_slave_1: entered allmulticast mode [ 89.982222][ T5799] bridge_slave_1: entered promiscuous mode [ 90.073695][ T5801] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.073804][ T5801] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.074123][ T5801] bridge_slave_0: entered allmulticast mode [ 90.075969][ T5801] bridge_slave_0: entered promiscuous mode [ 90.078911][ T5798] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.079043][ T5798] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.079240][ T5798] bridge_slave_0: entered allmulticast mode [ 90.082734][ T5798] bridge_slave_0: entered promiscuous mode [ 90.149690][ T5797] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.167946][ T5801] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.168078][ T5801] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.168966][ T5801] bridge_slave_1: entered allmulticast mode [ 90.172088][ T5801] bridge_slave_1: entered promiscuous mode [ 90.173574][ T5798] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.173692][ T5798] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.174197][ T5798] bridge_slave_1: entered allmulticast mode [ 90.177083][ T5798] bridge_slave_1: entered promiscuous mode [ 90.205024][ T5797] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.210711][ T5799] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.247433][ T5800] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.247668][ T5800] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.248020][ T5800] bridge_slave_0: entered allmulticast mode [ 90.249607][ T5800] bridge_slave_0: entered promiscuous mode [ 90.394889][ T5799] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.422863][ T5800] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.422996][ T5800] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.423160][ T5800] bridge_slave_1: entered allmulticast mode [ 90.425041][ T5800] bridge_slave_1: entered promiscuous mode [ 90.474113][ T5801] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.476869][ T5798] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.499759][ T5797] team0: Port device team_slave_0 added [ 90.526715][ T5801] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.529759][ T5798] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.531807][ T61] Bluetooth: hci4: command tx timeout [ 90.531827][ T5806] Bluetooth: hci2: command tx timeout [ 90.531972][ T61] Bluetooth: hci0: command tx timeout [ 90.583779][ T5797] team0: Port device team_slave_1 added [ 90.587976][ T5799] team0: Port device team_slave_0 added [ 90.610393][ T61] Bluetooth: hci3: command tx timeout [ 90.610665][ T5804] Bluetooth: hci1: command tx timeout [ 90.631737][ T5800] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.635564][ T5799] team0: Port device team_slave_1 added [ 90.688848][ T5800] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.738548][ T5801] team0: Port device team_slave_0 added [ 90.755061][ T5798] team0: Port device team_slave_0 added [ 90.771855][ T5797] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.771867][ T5797] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.771882][ T5797] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.775420][ T5801] team0: Port device team_slave_1 added [ 90.795420][ T5798] team0: Port device team_slave_1 added [ 90.812349][ T5799] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.812367][ T5799] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.812390][ T5799] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.813596][ T5797] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.813607][ T5797] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.813629][ T5797] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.862175][ T5800] team0: Port device team_slave_0 added [ 90.879445][ T5799] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.879463][ T5799] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.879486][ T5799] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.927321][ T5800] team0: Port device team_slave_1 added [ 90.945315][ T5801] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.945331][ T5801] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.945354][ T5801] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.970854][ T5798] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.970872][ T5798] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.970896][ T5798] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.974210][ T5801] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.974225][ T5801] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.974249][ T5801] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.999726][ T5798] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.999744][ T5798] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.999767][ T5798] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.097857][ T5800] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.097877][ T5800] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.097901][ T5800] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.110957][ T5797] hsr_slave_0: entered promiscuous mode [ 91.112422][ T5797] hsr_slave_1: entered promiscuous mode [ 91.117546][ T5800] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.117562][ T5800] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.117584][ T5800] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.185809][ T5799] hsr_slave_0: entered promiscuous mode [ 91.187090][ T5799] hsr_slave_1: entered promiscuous mode [ 91.188152][ T5799] debugfs: 'hsr0' already exists in 'hsr' [ 91.188250][ T5799] Cannot create hsr debugfs directory [ 91.286232][ T5801] hsr_slave_0: entered promiscuous mode [ 91.288281][ T5801] hsr_slave_1: entered promiscuous mode [ 91.289418][ T5801] debugfs: 'hsr0' already exists in 'hsr' [ 91.289442][ T5801] Cannot create hsr debugfs directory [ 91.332262][ T5798] hsr_slave_0: entered promiscuous mode [ 91.333083][ T5798] hsr_slave_1: entered promiscuous mode [ 91.333603][ T5798] debugfs: 'hsr0' already exists in 'hsr' [ 91.333617][ T5798] Cannot create hsr debugfs directory [ 92.005388][ T5800] hsr_slave_0: entered promiscuous mode [ 92.006262][ T5800] hsr_slave_1: entered promiscuous mode [ 92.006828][ T5800] debugfs: 'hsr0' already exists in 'hsr' [ 92.006844][ T5800] Cannot create hsr debugfs directory [ 92.610456][ T61] Bluetooth: hci4: command tx timeout [ 92.610556][ T5804] Bluetooth: hci2: command tx timeout [ 92.611058][ T5804] Bluetooth: hci0: command tx timeout [ 92.691023][ T5804] Bluetooth: hci1: command tx timeout [ 92.691047][ T61] Bluetooth: hci3: command tx timeout [ 92.697599][ T5797] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 92.727926][ T5797] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 92.759851][ T5797] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 92.818586][ T5797] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 92.931048][ T5799] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 92.959387][ T5799] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 92.997220][ T5799] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 93.052240][ T5799] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 93.183912][ T5801] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 93.221696][ T5801] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 93.257481][ T5801] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 93.309993][ T5801] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 93.442311][ T5800] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 93.495606][ T5800] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 93.535477][ T5800] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 93.589490][ T5800] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 93.664502][ T5797] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.723920][ T5798] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 93.767791][ T5798] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 93.801611][ T5798] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 93.842398][ T5798] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 93.884402][ T5797] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.923382][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.924076][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.973235][ T1414] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.973370][ T1414] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.007844][ T5799] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.088295][ T5799] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.127378][ T70] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.127511][ T70] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.147106][ T5801] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.179796][ T70] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.179928][ T70] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.248553][ T5801] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.285346][ T5800] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.316318][ T1384] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.316526][ T1384] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.376006][ T1414] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.376147][ T1414] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.438344][ T5800] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.445675][ T5798] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.509893][ T1414] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.511576][ T1414] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.553624][ T1414] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.555233][ T1414] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.583102][ T5798] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.648260][ T70] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.649662][ T70] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.690448][ T5804] Bluetooth: hci2: command tx timeout [ 94.690480][ T5804] Bluetooth: hci4: command tx timeout [ 94.690601][ T61] Bluetooth: hci0: command tx timeout [ 94.708503][ T70] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.708666][ T70] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.737711][ T5797] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.771296][ T5806] Bluetooth: hci1: command tx timeout [ 94.771393][ T61] Bluetooth: hci3: command tx timeout [ 94.996372][ T5799] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.107617][ T5797] veth0_vlan: entered promiscuous mode [ 95.181576][ T5797] veth1_vlan: entered promiscuous mode [ 95.438646][ T5797] veth0_macvtap: entered promiscuous mode [ 95.465056][ T5801] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.469014][ T5797] veth1_macvtap: entered promiscuous mode [ 95.629527][ T5797] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.669019][ T5797] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.703820][ T1384] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.719029][ T1384] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.734327][ T5800] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.736527][ T1384] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.763689][ T1384] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.848245][ T5798] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.849169][ T5801] veth0_vlan: entered promiscuous mode [ 96.030511][ T5801] veth1_vlan: entered promiscuous mode [ 96.102637][ T5799] veth0_vlan: entered promiscuous mode [ 96.115953][ T1414] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.115974][ T1414] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.197693][ T5799] veth1_vlan: entered promiscuous mode [ 96.199442][ T5800] veth0_vlan: entered promiscuous mode [ 96.229407][ T1414] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.229430][ T1414] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.280473][ T5800] veth1_vlan: entered promiscuous mode [ 96.298658][ T5801] veth0_macvtap: entered promiscuous mode [ 96.312766][ T5798] veth0_vlan: entered promiscuous mode [ 96.335363][ T5801] veth1_macvtap: entered promiscuous mode [ 96.359539][ T5798] veth1_vlan: entered promiscuous mode [ 96.409740][ T5799] veth0_macvtap: entered promiscuous mode [ 96.426388][ T5801] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.468928][ T5799] veth1_macvtap: entered promiscuous mode [ 96.476681][ T5801] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.526184][ T5800] veth0_macvtap: entered promiscuous mode [ 96.538957][ T93] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.550873][ T93] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.556784][ T93] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.573826][ T5800] veth1_macvtap: entered promiscuous mode [ 96.575904][ T93] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.619912][ T5799] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.673865][ T5798] veth0_macvtap: entered promiscuous mode [ 96.688527][ T5799] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.772025][ T61] Bluetooth: hci0: command tx timeout [ 96.772064][ T61] Bluetooth: hci4: command tx timeout [ 96.772087][ T61] Bluetooth: hci2: command tx timeout [ 96.813876][ T5798] veth1_macvtap: entered promiscuous mode [ 96.850434][ T5806] Bluetooth: hci3: command tx timeout [ 96.850470][ T5806] Bluetooth: hci1: command tx timeout [ 96.880881][ T5800] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.898264][ T93] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.919695][ T93] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.930080][ T93] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.000950][ T93] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.026580][ T5800] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.129712][ T1414] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.157456][ T1414] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.206025][ T5798] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.236574][ T1414] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.409847][ T1414] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.429087][ T1173] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.429111][ T1173] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.454369][ T5798] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.569032][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.621784][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.655435][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.669332][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.781613][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.781628][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.965862][ T1384] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.965884][ T1384] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.121021][ T1173] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.121046][ T1173] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.336831][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.336854][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.437992][ T5926] bridge0: port 3(syz_tun) entered blocking state [ 98.438381][ T5926] bridge0: port 3(syz_tun) entered disabled state [ 98.438814][ T5926] syz_tun: entered allmulticast mode [ 98.464630][ T5926] syz_tun: entered promiscuous mode [ 98.466958][ T5926] bridge0: port 3(syz_tun) entered blocking state [ 98.467478][ T5926] bridge0: port 3(syz_tun) entered forwarding state [ 98.505447][ T5927] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6'. [ 98.512983][ T70] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.513004][ T70] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.578527][ T5931] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 98.980860][ T5933] netlink: 'syz.0.6': attribute type 1 has an invalid length. [ 98.986892][ T1414] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.986914][ T1414] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.232956][ T5942] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input5 [ 99.516982][ T1384] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.517006][ T1384] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.641136][ T5948] Zero length message leads to an empty skb [ 100.920720][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 100.950177][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 100.950253][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 100.950314][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 100.950383][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 101.020155][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 101.140156][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 101.140212][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 102.398885][ T5985] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 102.450234][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 102.451175][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 107.428025][ T6005] netlink: 44 bytes leftover after parsing attributes in process `syz.1.30'. [ 109.401632][ T6045] syzkaller0: entered promiscuous mode [ 109.401651][ T6045] syzkaller0: entered allmulticast mode [ 109.458614][ T6049] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 111.247188][ T6059] netlink: 44 bytes leftover after parsing attributes in process `syz.4.43'. [ 112.291289][ T6083] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 112.291312][ T6083] IPv6: NLM_F_CREATE should be set when creating new route [ 113.653873][ T6100] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 115.144169][ T6116] syzkaller0: entered promiscuous mode [ 115.144197][ T6116] syzkaller0: entered allmulticast mode [ 116.701319][ T36] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 116.912535][ T36] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 116.912571][ T36] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 116.912609][ T36] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 116.912625][ T36] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.967924][ T36] usb 1-1: config 0 descriptor?? [ 117.506652][ T36] cp2112 0003:10C4:EA90.0001: unknown main item tag 0x0 [ 117.705370][ T36] cp2112 0003:10C4:EA90.0001: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.0-1/input0 [ 117.767960][ T36] cp2112 0003:10C4:EA90.0001: error requesting version [ 117.783390][ T36] cp2112 0003:10C4:EA90.0001: probe with driver cp2112 failed with error -32 [ 119.938977][ T6170] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 119.969334][ T809] usb 1-1: USB disconnect, device number 2 [ 120.420455][ T6178] netlink: 68 bytes leftover after parsing attributes in process `syz.0.67'. [ 121.920581][ T6237] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 123.813069][ T6270] netlink: 68 bytes leftover after parsing attributes in process `syz.2.82'. [ 124.316167][ T6280] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 124.330285][ T6280] IPv6: NLM_F_CREATE should be set when creating new route [ 124.330619][ T6280] netlink: 20 bytes leftover after parsing attributes in process `syz.4.87'. [ 126.437101][ T6336] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 127.940329][ T6361] netlink: 68 bytes leftover after parsing attributes in process `syz.0.102'. [ 128.940260][ T10] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 129.130051][ T10] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 129.130086][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.144800][ T10] usb 5-1: Product: syz [ 129.144821][ T10] usb 5-1: Manufacturer: syz [ 129.144832][ T10] usb 5-1: SerialNumber: syz [ 129.252868][ T10] usb 5-1: config 0 descriptor?? [ 129.503169][ T10] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 131.204645][ T10] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 131.230835][ T10] usb 5-1: USB disconnect, device number 2 [ 132.427014][ T6427] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 133.179477][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.179580][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 137.580260][ T10] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 137.742860][ T10] usb 4-1: config 0 has too many interfaces: 253, using maximum allowed: 32 [ 137.742882][ T10] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 253 [ 137.745193][ T10] usb 4-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 137.745211][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.745222][ T10] usb 4-1: Product: syz [ 137.745229][ T10] usb 4-1: Manufacturer: syz [ 137.745237][ T10] usb 4-1: SerialNumber: syz [ 137.850474][ T10] usb 4-1: config 0 descriptor?? [ 137.904015][ T6448] netlink: 68 bytes leftover after parsing attributes in process `syz.1.116'. [ 140.893762][ T810] usb 4-1: USB disconnect, device number 2 [ 140.900620][ T6494] Illegal XDP return value 64938040 on prog (id 6) dev syz_tun, expect packet loss! [ 141.399494][ T809] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 142.340167][ T809] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 142.340200][ T809] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.340220][ T809] usb 5-1: Product: syz [ 142.340233][ T809] usb 5-1: Manufacturer: syz [ 142.340246][ T809] usb 5-1: SerialNumber: syz [ 142.904167][ T6496] 8021q: adding VLAN 0 to HW filter on device bond0 [ 142.945866][ T6496] team0: Port device bond0 added [ 142.979307][ T6498] bridge0: port 3(team0) entered blocking state [ 142.979566][ T6498] bridge0: port 3(team0) entered disabled state [ 142.979774][ T6498] team0: entered allmulticast mode [ 142.979791][ T6498] team_slave_0: entered allmulticast mode [ 143.240914][ T809] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 143.279803][ T6498] team_slave_1: entered allmulticast mode [ 143.279836][ T6498] bond0: entered allmulticast mode [ 143.279850][ T6498] bond_slave_0: entered allmulticast mode [ 143.279869][ T6498] bond_slave_1: entered allmulticast mode [ 143.382326][ T6498] team0: entered promiscuous mode [ 143.382351][ T6498] team_slave_0: entered promiscuous mode [ 143.382577][ T6498] team_slave_1: entered promiscuous mode [ 143.382770][ T6498] bond0: entered promiscuous mode [ 143.382784][ T6498] bond_slave_0: entered promiscuous mode [ 143.382998][ T6498] bond_slave_1: entered promiscuous mode [ 143.385765][ T6498] bridge0: port 3(team0) entered blocking state [ 143.385901][ T6498] bridge0: port 3(team0) entered forwarding state [ 143.930854][ T5921] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 144.938474][ T810] usb 5-1: USB disconnect, device number 3 [ 145.166218][ T5921] usb 5-1: ath9k_htc: Unable to allocate URBs [ 145.223239][ T810] usb 5-1: ath9k_htc: USB layer deinitialized [ 145.283216][ T6523] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 145.310997][ T6524] 9p: Bad value for 'wfdno' [ 145.810449][ T809] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 145.963046][ T809] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 145.963079][ T809] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.044576][ T809] usb 2-1: config 0 descriptor?? [ 147.172126][ T6533] netlink: 60 bytes leftover after parsing attributes in process `syz.2.127'. [ 147.285569][ T809] cp210x 2-1:0.0: cp210x converter detected [ 148.970065][ T809] cp210x 2-1:0.0: failed to get vendor val 0x370b size 1: -71 [ 148.970087][ T809] cp210x 2-1:0.0: querying part number failed [ 149.362777][ T809] usb 2-1: cp210x converter now attached to ttyUSB0 [ 149.382012][ T809] usb 2-1: USB disconnect, device number 2 [ 149.391164][ T809] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 149.391727][ T809] cp210x 2-1:0.0: device disconnected [ 152.558395][ T6554] syz.0.130 (6554): drop_caches: 2 [ 153.440274][ T810] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 153.680440][ T810] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 153.680473][ T810] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.680492][ T810] usb 1-1: Product: syz [ 153.680505][ T810] usb 1-1: Manufacturer: syz [ 153.680518][ T810] usb 1-1: SerialNumber: syz [ 153.777077][ T810] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 154.114326][ T10] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 160.622630][ T810] usb 1-1: USB disconnect, device number 3 [ 161.660385][ T10] usb 1-1: Service connection timeout for: 256 [ 161.660413][ T10] ath9k_htc 1-1:1.0: ath9k_htc: Unable to initialize HTC services [ 161.661933][ T10] ath9k_htc: Failed to initialize the device [ 161.710339][ T810] usb 1-1: ath9k_htc: USB layer deinitialized [ 161.813203][ T6612] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 162.383307][ T6619] netlink: 60 bytes leftover after parsing attributes in process `syz.1.143'. [ 165.894087][ T6621] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 169.091494][ T6684] ======================================================= [ 169.091494][ T6684] WARNING: The mand mount option has been deprecated and [ 169.091494][ T6684] and is ignored by this kernel. Remove the mand [ 169.091494][ T6684] option from the mount to silence this warning. [ 169.091494][ T6684] ======================================================= [ 169.091668][ T6684] 9p: Bad value for 'wfdno' [ 169.435196][ T6682] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 169.595884][ T5806] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 169.614308][ T5806] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 169.615680][ T5806] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 169.617365][ T5806] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 169.619590][ T5806] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 170.530709][ T6694] 9p: Bad value for 'rfdno' [ 171.810394][ T5806] Bluetooth: hci5: command tx timeout [ 171.974206][ T6702] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 173.155236][ T6582] bridge0: port 3(syz_tun) entered disabled state [ 173.522976][ T6582] syz_tun (unregistering): left allmulticast mode [ 173.522998][ T6582] syz_tun (unregistering): left promiscuous mode [ 173.524265][ T6582] bridge0: port 3(syz_tun) entered disabled state [ 174.232498][ T5806] Bluetooth: hci5: command tx timeout [ 174.417475][ T5861] IPVS: starting estimator thread 0... [ 174.573386][ T6726] IPVS: using max 13 ests per chain, 31200 per kthread [ 176.300343][ T5806] Bluetooth: hci5: command tx timeout [ 176.523974][ T6687] chnl_net:caif_netlink_parms(): no params data found [ 177.092989][ T6743] netlink: 12 bytes leftover after parsing attributes in process `syz.2.167'. [ 177.333359][ T6747] 9p: Bad value for 'rfdno' [ 178.370542][ T5806] Bluetooth: hci5: command tx timeout [ 178.427801][ T6759] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 178.447015][ T6687] bridge0: port 1(bridge_slave_0) entered blocking state [ 178.447146][ T6687] bridge0: port 1(bridge_slave_0) entered disabled state [ 178.447319][ T6687] bridge_slave_0: entered allmulticast mode [ 178.473595][ T6687] bridge_slave_0: entered promiscuous mode [ 178.479487][ T6687] bridge0: port 2(bridge_slave_1) entered blocking state [ 178.479773][ T6687] bridge0: port 2(bridge_slave_1) entered disabled state [ 178.480023][ T6687] bridge_slave_1: entered allmulticast mode [ 178.517584][ T6687] bridge_slave_1: entered promiscuous mode [ 178.605487][ T6687] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 178.619901][ T6687] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 179.303746][ T6687] team0: Port device team_slave_0 added [ 179.308004][ T6687] team0: Port device team_slave_1 added [ 179.862043][ T5967] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 181.361743][ T5967] usb 2-1: Using ep0 maxpacket: 16 [ 181.364837][ T5967] usb 2-1: config 0 has an invalid interface number: 4 but max is 0 [ 181.364865][ T5967] usb 2-1: config 0 has no interface number 0 [ 181.364973][ T5967] usb 2-1: config 0 interface 4 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 181.365211][ T5967] usb 2-1: config 0 interface 4 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 181.365258][ T5967] usb 2-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 181.365280][ T5967] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 181.891024][ T6810] mmap: syz.2.179 (6810) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 183.074200][ T5967] usb 2-1: config 0 descriptor?? [ 183.576276][ T5967] usb 2-1: can't set config #0, error -71 [ 183.980206][ T5967] usb 2-1: USB disconnect, device number 3 [ 184.078592][ T6687] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 184.078605][ T6687] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 184.078620][ T6687] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 184.200676][ T6687] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 184.200697][ T6687] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 184.200725][ T6687] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 184.220674][ T10] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 184.617118][ T6818] syz.2.181 uses obsolete (PF_INET,SOCK_PACKET) [ 184.690780][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 184.693422][ T10] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 184.693454][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 184.968984][ T10] usb 1-1: config 0 descriptor?? [ 185.160268][ T5966] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 185.193170][ T10] dvb-usb: found a 'Elgato EyeTV DTT' in warm state. [ 185.303998][ T10] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 185.336328][ T10] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT) [ 185.336424][ T10] usb 1-1: media controller created [ 185.392346][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 185.445029][ T5966] usb 3-1: config 0 has no interfaces? [ 185.458703][ T5966] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 185.458735][ T5966] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 185.458755][ T5966] usb 3-1: Product: syz [ 185.458770][ T5966] usb 3-1: Manufacturer: syz [ 185.458784][ T5966] usb 3-1: SerialNumber: syz [ 185.502490][ T5966] usb 3-1: config 0 descriptor?? [ 185.689892][ T6826] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 185.781403][ T6687] hsr_slave_0: entered promiscuous mode [ 185.815831][ T6687] hsr_slave_1: entered promiscuous mode [ 185.837387][ T6687] debugfs: 'hsr0' already exists in 'hsr' [ 185.837420][ T6687] Cannot create hsr debugfs directory [ 185.839667][ T6815] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 185.839698][ T6815] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 185.882055][ T6815] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 185.882086][ T6815] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 186.137749][ T10] DVB: Unable to find symbol dib7000p_attach() [ 186.137767][ T10] dvb-usb: no frontend was attached by 'Elgato EyeTV DTT' [ 186.554243][ T10] rc_core: IR keymap rc-dib0700-rc5 not found [ 186.554266][ T10] Registered IR keymap rc-empty [ 186.554912][ T10] dvb-usb: could not initialize remote control. [ 186.554925][ T10] dvb-usb: Elgato EyeTV DTT successfully initialized and connected. [ 186.646490][ T10] usb 1-1: USB disconnect, device number 4 [ 186.765174][ T10] dvb-usb: Elgato EyeTV DTT successfully deinitialized and disconnected. [ 190.674242][ T6842] netlink: 16 bytes leftover after parsing attributes in process `syz.4.187'. [ 190.792659][ T6842] 8021q: adding VLAN 0 to HW filter on device bond0 [ 190.795916][ T6842] team0: Port device bond0 added [ 190.835895][ T6843] bridge0: port 3(team0) entered blocking state [ 190.836012][ T6843] bridge0: port 3(team0) entered disabled state [ 190.836515][ T6843] team0: entered allmulticast mode [ 190.836532][ T6843] team_slave_0: entered allmulticast mode [ 190.836553][ T6843] team_slave_1: entered allmulticast mode [ 190.836571][ T6843] bond0: entered allmulticast mode [ 190.836585][ T6843] bond_slave_0: entered allmulticast mode [ 190.836603][ T6843] bond_slave_1: entered allmulticast mode [ 190.866497][ T6843] team0: entered promiscuous mode [ 190.866517][ T6843] team_slave_0: entered promiscuous mode [ 190.866704][ T6843] team_slave_1: entered promiscuous mode [ 190.866877][ T6843] bond0: entered promiscuous mode [ 190.866889][ T6843] bond_slave_0: entered promiscuous mode [ 190.875804][ T6843] bond_slave_1: entered promiscuous mode [ 190.877069][ T6843] bridge0: port 3(team0) entered blocking state [ 190.877192][ T6843] bridge0: port 3(team0) entered forwarding state [ 191.938623][ T6687] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 192.859369][ T6687] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 192.992552][ T6687] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 193.115670][ T6687] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 193.539465][ T6861] random: crng reseeded on system resumption [ 193.633607][ T6862] 9p: Bad value for 'rfdno' [ 193.711224][ T5966] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 194.130422][ T5966] usb 1-1: Using ep0 maxpacket: 16 [ 194.136647][ T5966] usb 1-1: config 0 has an invalid interface number: 4 but max is 0 [ 194.136675][ T5966] usb 1-1: config 0 has no interface number 0 [ 194.136704][ T5966] usb 1-1: config 0 interface 4 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 194.136719][ T5966] usb 1-1: config 0 interface 4 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 194.136742][ T5966] usb 1-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 194.136756][ T5966] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 194.483702][ T5966] usb 1-1: config 0 descriptor?? [ 194.661932][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.662244][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.376615][ T5966] hid (null): invalid report_count 12842934 [ 195.414020][ T6687] 8021q: adding VLAN 0 to HW filter on device bond0 [ 195.501464][ T6687] 8021q: adding VLAN 0 to HW filter on device team0 [ 195.533892][ T1384] bridge0: port 1(bridge_slave_0) entered blocking state [ 195.534910][ T1384] bridge0: port 1(bridge_slave_0) entered forwarding state [ 195.579837][ T5966] usb 1-1: USB disconnect, device number 5 [ 195.613806][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 195.613969][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 195.844570][ T5889] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 195.990438][ T5889] usb 5-1: Using ep0 maxpacket: 32 [ 195.992862][ T5889] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 195.992892][ T5889] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 196.043598][ T5889] usb 5-1: config 0 descriptor?? [ 196.378933][ T5889] dvb-usb: found a 'Elgato EyeTV DTT' in warm state. [ 196.435420][ T5889] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 196.452515][ T5889] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT) [ 196.452599][ T5889] usb 5-1: media controller created [ 196.527548][ T5889] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 196.821785][ T5889] DVB: Unable to find symbol dib7000p_attach() [ 196.821803][ T5889] dvb-usb: no frontend was attached by 'Elgato EyeTV DTT' [ 196.937895][ T6687] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 197.001034][ T5889] rc_core: IR keymap rc-dib0700-rc5 not found [ 197.001057][ T5889] Registered IR keymap rc-empty [ 197.001392][ T5889] dvb-usb: could not initialize remote control. [ 197.001402][ T5889] dvb-usb: Elgato EyeTV DTT successfully initialized and connected. [ 197.111754][ T5889] usb 5-1: USB disconnect, device number 4 [ 197.215053][ T5889] dvb-usb: Elgato EyeTV DTT successfully deinitialized and disconnected. [ 199.134886][ T6687] veth0_vlan: entered promiscuous mode [ 199.650770][ T6687] veth1_vlan: entered promiscuous mode [ 199.687987][ T6897] tipc: Started in network mode [ 199.688020][ T6897] tipc: Node identity ac14140f, cluster identity 4711 [ 199.689176][ T6897] tipc: New replicast peer: 255.255.255.255 [ 199.700444][ T6897] tipc: Enabled bearer , priority 10 [ 200.513489][ T6687] veth0_macvtap: entered promiscuous mode [ 200.561407][ T6687] veth1_macvtap: entered promiscuous mode [ 200.731123][ T6687] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 200.818713][ T5861] tipc: Node number set to 2886997007 [ 200.849148][ T6687] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 200.878264][ T1384] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.878517][ T1384] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.878572][ T1384] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.878609][ T1384] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.998148][ T61] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 201.057947][ T61] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 201.072762][ T61] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 201.100386][ T61] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 201.115442][ T61] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 201.389800][ T61] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 201.408282][ T61] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 201.429094][ T61] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 201.442923][ T61] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 201.444140][ T61] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 203.170428][ T5806] Bluetooth: hci4: command tx timeout [ 203.490361][ T5806] Bluetooth: hci6: command tx timeout [ 204.440446][ T5805] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 204.522871][ T6225] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 204.522893][ T6225] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 204.600313][ T5805] usb 1-1: Using ep0 maxpacket: 32 [ 204.605812][ T5805] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 204.605843][ T5805] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 204.653004][ T5805] usb 1-1: config 0 descriptor?? [ 204.866190][ T5805] dvb-usb: found a 'Elgato EyeTV DTT' in warm state. [ 204.887454][ T5805] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 204.911302][ T5805] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT) [ 204.911368][ T5805] usb 1-1: media controller created [ 204.998264][ T5805] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 205.129133][ T5805] DVB: Unable to find symbol dib7000p_attach() [ 205.129151][ T5805] dvb-usb: no frontend was attached by 'Elgato EyeTV DTT' [ 205.259153][ T5806] Bluetooth: hci4: command tx timeout [ 205.270272][ T5805] rc_core: IR keymap rc-dib0700-rc5 not found [ 205.270294][ T5805] Registered IR keymap rc-empty [ 205.270637][ T5805] dvb-usb: could not initialize remote control. [ 205.270646][ T5805] dvb-usb: Elgato EyeTV DTT successfully initialized and connected. [ 205.321907][ T5805] usb 1-1: USB disconnect, device number 6 [ 205.570325][ T5806] Bluetooth: hci6: command tx timeout [ 205.624062][ T5805] dvb-usb: Elgato EyeTV DTT successfully deinitialized and disconnected. [ 205.701786][ T6225] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 205.701809][ T6225] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 206.769315][ T6907] chnl_net:caif_netlink_parms(): no params data found [ 207.048759][ T6903] chnl_net:caif_netlink_parms(): no params data found [ 207.352682][ T5806] Bluetooth: hci4: command tx timeout [ 207.658017][ T5806] Bluetooth: hci6: command tx timeout [ 208.789829][ T6907] bridge0: port 1(bridge_slave_0) entered blocking state [ 208.790033][ T6907] bridge0: port 1(bridge_slave_0) entered disabled state [ 208.840478][ T6907] bridge_slave_0: entered allmulticast mode [ 208.882939][ T6907] bridge_slave_0: entered promiscuous mode [ 208.927079][ T6907] bridge0: port 2(bridge_slave_1) entered blocking state [ 208.927222][ T6907] bridge0: port 2(bridge_slave_1) entered disabled state [ 208.927859][ T6907] bridge_slave_1: entered allmulticast mode [ 208.955410][ T6907] bridge_slave_1: entered promiscuous mode [ 209.410176][ T5806] Bluetooth: hci4: command tx timeout [ 209.590037][ T6903] bridge0: port 1(bridge_slave_0) entered blocking state [ 209.590365][ T6903] bridge0: port 1(bridge_slave_0) entered disabled state [ 209.590627][ T6903] bridge_slave_0: entered allmulticast mode [ 209.593962][ T6903] bridge_slave_0: entered promiscuous mode [ 209.620244][ T810] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 209.643090][ T6907] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 209.643516][ T6903] bridge0: port 2(bridge_slave_1) entered blocking state [ 209.643766][ T6903] bridge0: port 2(bridge_slave_1) entered disabled state [ 209.643989][ T6903] bridge_slave_1: entered allmulticast mode [ 209.661461][ T6903] bridge_slave_1: entered promiscuous mode [ 209.689541][ T6907] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 209.730843][ T5806] Bluetooth: hci6: command tx timeout [ 209.782512][ T810] usb 1-1: Using ep0 maxpacket: 32 [ 209.785203][ T810] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 209.785235][ T810] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 209.819914][ T810] usb 1-1: config 0 descriptor?? [ 210.047316][ T6903] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 210.072233][ T810] dvb-usb: found a 'Elgato EyeTV DTT' in warm state. [ 210.076888][ T6907] team0: Port device team_slave_0 added [ 210.096634][ T6903] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 210.098163][ T810] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 210.134010][ T6907] team0: Port device team_slave_1 added [ 210.157299][ T810] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT) [ 210.157368][ T810] usb 1-1: media controller created [ 210.289155][ T810] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 210.777231][ T810] DVB: Unable to find symbol dib7000p_attach() [ 210.777249][ T810] dvb-usb: no frontend was attached by 'Elgato EyeTV DTT' [ 211.041732][ T810] rc_core: IR keymap rc-dib0700-rc5 not found [ 211.041755][ T810] Registered IR keymap rc-empty [ 211.042104][ T810] dvb-usb: could not initialize remote control. [ 211.042114][ T810] dvb-usb: Elgato EyeTV DTT successfully initialized and connected. [ 211.100700][ T810] usb 1-1: USB disconnect, device number 7 [ 211.302495][ T810] dvb-usb: Elgato EyeTV DTT successfully deinitialized and disconnected. [ 212.339409][ T5117] Bluetooth: hci0: command 0x0406 tx timeout [ 212.339658][ T5117] Bluetooth: hci1: command 0x0406 tx timeout [ 212.339684][ T5117] Bluetooth: hci2: command 0x0406 tx timeout [ 213.095829][ T6907] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 213.095842][ T6907] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 213.095856][ T6907] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 213.098535][ T6903] team0: Port device team_slave_0 added [ 213.099402][ T6907] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 213.099414][ T6907] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 213.099441][ T6907] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 213.234671][ T6903] team0: Port device team_slave_1 added [ 213.481323][ T6903] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 213.481341][ T6903] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 213.481370][ T6903] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 213.483982][ T6903] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 213.483997][ T6903] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 213.484023][ T6903] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 213.960761][ T6907] hsr_slave_0: entered promiscuous mode [ 213.962350][ T6907] hsr_slave_1: entered promiscuous mode [ 213.964332][ T6907] debugfs: 'hsr0' already exists in 'hsr' [ 213.964358][ T6907] Cannot create hsr debugfs directory [ 214.126097][ T6903] hsr_slave_0: entered promiscuous mode [ 214.153345][ T6903] hsr_slave_1: entered promiscuous mode [ 214.169667][ T6903] debugfs: 'hsr0' already exists in 'hsr' [ 214.169701][ T6903] Cannot create hsr debugfs directory [ 219.706690][ T37] audit: type=1326 audit(1773574937.034:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7003 comm="syz.5.234" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9ed0e7c799 code=0x0 [ 221.943095][ T6907] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 222.378515][ T6907] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 224.454961][ T6907] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 226.320390][ T5967] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 226.510292][ T5967] usb 1-1: Using ep0 maxpacket: 16 [ 226.516401][ T5967] usb 1-1: config 0 has no interfaces? [ 226.518020][ T5967] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 226.518050][ T5967] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 226.518071][ T5967] usb 1-1: Manufacturer: syz [ 226.601106][ T5967] usb 1-1: config 0 descriptor?? [ 227.275921][ T6907] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 228.162641][ T6903] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 228.244860][ T6903] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 228.382575][ T6903] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 228.470685][ T6903] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 228.950517][ T810] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 229.009843][ T5889] usb 1-1: USB disconnect, device number 8 [ 229.110416][ T810] usb 5-1: Using ep0 maxpacket: 8 [ 229.160398][ T810] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 229.160434][ T810] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 229.160455][ T810] usb 5-1: Product: syz [ 229.160470][ T810] usb 5-1: Manufacturer: syz [ 229.160485][ T810] usb 5-1: SerialNumber: syz [ 229.247440][ T810] usb 5-1: config 0 descriptor?? [ 229.515454][ T810] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 229.766341][ T810] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 229.828183][ T810] usb 5-1: USB disconnect, device number 5 [ 230.556439][ T6907] 8021q: adding VLAN 0 to HW filter on device bond0 [ 230.675770][ T6907] 8021q: adding VLAN 0 to HW filter on device team0 [ 230.711178][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 230.711335][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 230.993180][ T6903] 8021q: adding VLAN 0 to HW filter on device bond0 [ 231.066377][ T1396] bridge0: port 2(bridge_slave_1) entered blocking state [ 231.082552][ T1396] bridge0: port 2(bridge_slave_1) entered forwarding state [ 231.245395][ T6903] 8021q: adding VLAN 0 to HW filter on device team0 [ 231.454228][ T6491] bridge0: port 1(bridge_slave_0) entered blocking state [ 231.454397][ T6491] bridge0: port 1(bridge_slave_0) entered forwarding state [ 231.519325][ T6491] bridge0: port 2(bridge_slave_1) entered blocking state [ 231.536668][ T6491] bridge0: port 2(bridge_slave_1) entered forwarding state [ 232.180299][ T5967] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 232.361466][ T5967] usb 1-1: Using ep0 maxpacket: 16 [ 232.412562][ T5967] usb 1-1: config 0 has no interfaces? [ 232.445152][ T5967] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 232.445186][ T5967] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 232.445206][ T5967] usb 1-1: Manufacturer: syz [ 232.494878][ T5967] usb 1-1: config 0 descriptor?? [ 233.002795][ T5805] usb 1-1: USB disconnect, device number 9 [ 233.113530][ T6907] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 233.933673][ T6903] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 237.181770][ T5966] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 237.689664][ T5966] usb 5-1: Using ep0 maxpacket: 16 [ 237.753258][ T5966] usb 5-1: config 0 has an invalid interface number: 4 but max is 0 [ 237.753291][ T5966] usb 5-1: config 0 has no interface number 0 [ 237.753341][ T5966] usb 5-1: config 0 interface 4 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 237.753368][ T5966] usb 5-1: config 0 interface 4 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 237.753408][ T5966] usb 5-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 237.753432][ T5966] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 237.792443][ T5966] usb 5-1: config 0 descriptor?? [ 239.493753][ T5966] usbhid 5-1:0.4: can't add hid device: -71 [ 239.493910][ T5966] usbhid 5-1:0.4: probe with driver usbhid failed with error -71 [ 239.842148][ T5966] usb 5-1: USB disconnect, device number 6 [ 239.849078][ T6907] veth0_vlan: entered promiscuous mode [ 240.238754][ T6907] veth1_vlan: entered promiscuous mode [ 242.052629][ T6907] veth0_macvtap: entered promiscuous mode [ 242.303825][ T5806] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 242.340692][ T5806] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 242.343052][ T5806] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 242.368453][ T5806] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 242.369843][ T5806] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 242.441030][ T6907] veth1_macvtap: entered promiscuous mode [ 242.778448][ T5806] Bluetooth: hci3: command 0x0406 tx timeout [ 243.092027][ T6907] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 244.610539][ T5889] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 244.776145][ T5804] Bluetooth: hci7: command tx timeout [ 244.792697][ T6907] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 245.040209][ T5889] usb 1-1: Using ep0 maxpacket: 16 [ 245.043187][ T5889] usb 1-1: config 0 has no interfaces? [ 245.044730][ T5889] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 245.044777][ T5889] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 245.044804][ T5889] usb 1-1: Manufacturer: syz [ 245.051480][ T5889] usb 1-1: config 0 descriptor?? [ 245.223943][ T6903] veth0_vlan: entered promiscuous mode [ 245.845649][ T70] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.027859][ T70] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.908910][ T70] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.971128][ T6903] veth1_vlan: entered promiscuous mode [ 247.117052][ T5806] Bluetooth: hci7: command tx timeout [ 247.224570][ T6223] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.170453][ T5806] Bluetooth: hci7: command tx timeout [ 251.272112][ T5806] Bluetooth: hci7: command tx timeout [ 253.198936][ T70] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 253.198961][ T70] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 254.494197][ T6903] veth0_macvtap: entered promiscuous mode [ 256.066161][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.066242][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.574440][ T6903] veth1_macvtap: entered promiscuous mode [ 256.702142][ T1474] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 256.702167][ T1474] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 256.715083][ T7143] chnl_net:caif_netlink_parms(): no params data found [ 258.142526][ T6903] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 258.532689][ T6903] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 259.926153][ T7143] bridge0: port 1(bridge_slave_0) entered blocking state [ 259.926307][ T7143] bridge0: port 1(bridge_slave_0) entered disabled state [ 259.926596][ T7143] bridge_slave_0: entered allmulticast mode [ 259.995828][ T7143] bridge_slave_0: entered promiscuous mode [ 260.148563][ T1396] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.187449][ T70] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.252006][ T7143] bridge0: port 2(bridge_slave_1) entered blocking state [ 260.252167][ T7143] bridge0: port 2(bridge_slave_1) entered disabled state [ 260.252465][ T7143] bridge_slave_1: entered allmulticast mode [ 260.331139][ T7143] bridge_slave_1: entered promiscuous mode [ 260.372207][ T6225] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.400843][ T7186] Can't find ip_set type hash:n [ 260.551365][ T6223] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.812798][ T5804] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 261.833318][ T5804] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 261.849599][ T5804] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 261.864166][ T5804] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 261.865057][ T5804] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 262.748030][ T7143] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 262.962341][ T7143] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 264.056089][ T5804] Bluetooth: hci8: command tx timeout [ 264.564989][ T7143] team0: Port device team_slave_0 added [ 264.579207][ T5806] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 264.731893][ T5806] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 264.747733][ T5806] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 264.763794][ T7143] team0: Port device team_slave_1 added [ 264.764111][ T5806] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 264.780524][ T5806] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 265.290353][ T7143] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 265.290374][ T7143] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 265.290402][ T7143] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 265.348072][ T7143] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 265.348089][ T7143] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 265.348112][ T7143] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 266.130859][ T5804] Bluetooth: hci8: command tx timeout [ 267.012025][ T5804] Bluetooth: hci9: command tx timeout [ 267.616173][ T7143] hsr_slave_0: entered promiscuous mode [ 267.636028][ T7143] hsr_slave_1: entered promiscuous mode [ 267.655070][ T7143] debugfs: 'hsr0' already exists in 'hsr' [ 267.655102][ T7143] Cannot create hsr debugfs directory [ 267.926573][ T7211] Can't find ip_set type hash:n [ 268.211901][ T5804] Bluetooth: hci8: command tx timeout [ 269.090697][ T5804] Bluetooth: hci9: command tx timeout [ 270.346877][ T5804] Bluetooth: hci8: command tx timeout [ 271.170388][ T5804] Bluetooth: hci9: command tx timeout [ 273.484487][ T5804] Bluetooth: hci9: command tx timeout [ 275.860397][ T5967] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 276.460136][ T5967] usb 5-1: Using ep0 maxpacket: 16 [ 276.486643][ T5967] usb 5-1: config 0 has an invalid interface number: 4 but max is 0 [ 276.486674][ T5967] usb 5-1: config 0 has no interface number 0 [ 276.486723][ T5967] usb 5-1: config 0 interface 4 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 276.486749][ T5967] usb 5-1: config 0 interface 4 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 276.486793][ T5967] usb 5-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 276.486815][ T5967] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 276.643481][ T5967] usb 5-1: config 0 descriptor?? [ 277.852837][ T7235] netlink: 244 bytes leftover after parsing attributes in process `syz.7.300'. [ 279.240538][ T5967] usbhid 5-1:0.4: can't add hid device: -71 [ 279.240685][ T5967] usbhid 5-1:0.4: probe with driver usbhid failed with error -71 [ 279.410278][ T5967] usb 5-1: USB disconnect, device number 7 [ 280.882424][ T7242] netlink: 12 bytes leftover after parsing attributes in process `syz.4.303'. [ 289.386989][ T7295] capability: warning: `syz.7.309' uses deprecated v2 capabilities in a way that may be insecure [ 290.899554][ T7300] random: crng reseeded on system resumption [ 292.590643][ T7189] chnl_net:caif_netlink_parms(): no params data found [ 294.200204][ T5806] Bluetooth: hci5: command 0x0406 tx timeout [ 294.620689][ T7198] chnl_net:caif_netlink_parms(): no params data found [ 294.680735][ T7307] netlink: 12 bytes leftover after parsing attributes in process `syz.4.313'. [ 302.871151][ T7189] bridge0: port 1(bridge_slave_0) entered blocking state [ 302.871298][ T7189] bridge0: port 1(bridge_slave_0) entered disabled state [ 302.871606][ T7189] bridge_slave_0: entered allmulticast mode [ 302.879186][ T7189] bridge_slave_0: entered promiscuous mode [ 305.299667][ T5806] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 305.317092][ T5806] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 305.327827][ T5806] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 305.348340][ T7189] bridge0: port 2(bridge_slave_1) entered blocking state [ 305.348333][ T5806] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 305.348783][ T7189] bridge0: port 2(bridge_slave_1) entered disabled state [ 305.349244][ T7189] bridge_slave_1: entered allmulticast mode [ 305.350421][ T5806] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 305.488463][ T7189] bridge_slave_1: entered promiscuous mode [ 305.857913][ T7340] bridge1: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 306.367452][ T7198] bridge0: port 1(bridge_slave_0) entered blocking state [ 306.367597][ T7198] bridge0: port 1(bridge_slave_0) entered disabled state [ 306.367892][ T7198] bridge_slave_0: entered allmulticast mode [ 306.404623][ T7198] bridge_slave_0: entered promiscuous mode [ 306.643219][ T7198] bridge0: port 2(bridge_slave_1) entered blocking state [ 306.643363][ T7198] bridge0: port 2(bridge_slave_1) entered disabled state [ 306.643597][ T7198] bridge_slave_1: entered allmulticast mode [ 306.646682][ T7198] bridge_slave_1: entered promiscuous mode [ 306.714869][ T7189] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 306.803839][ T7189] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 307.530495][ T5806] Bluetooth: hci4: command tx timeout [ 308.335664][ T7198] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 308.445431][ T7189] team0: Port device team_slave_0 added [ 308.481327][ T7198] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 308.612344][ T7189] team0: Port device team_slave_1 added [ 309.599865][ T5806] Bluetooth: hci4: command tx timeout [ 311.703893][ T7198] team0: Port device team_slave_0 added [ 312.139667][ T5804] Bluetooth: hci4: command tx timeout [ 313.557317][ T5889] usb 8-1: new full-speed USB device number 2 using dummy_hcd [ 314.269321][ T5804] Bluetooth: hci4: command tx timeout [ 317.656429][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.656517][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.701376][ T7189] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 317.701395][ T7189] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 317.701424][ T7189] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 317.726452][ T5889] usb 8-1: unable to read config index 0 descriptor/start: -71 [ 317.726496][ T5889] usb 8-1: can't read configurations, error -71 [ 318.120463][ T5805] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 318.136278][ T7198] team0: Port device team_slave_1 added [ 318.152748][ T7189] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 318.152766][ T7189] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 318.152794][ T7189] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 318.540389][ T5805] usb 5-1: Using ep0 maxpacket: 8 [ 318.907695][ T5805] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 318.907731][ T5805] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 318.907752][ T5805] usb 5-1: Product: syz [ 318.907766][ T5805] usb 5-1: Manufacturer: syz [ 319.132211][ T5805] usb 5-1: config 0 descriptor?? [ 319.150677][ T5805] usb 5-1: can't set config #0, error -71 [ 319.365824][ T5805] usb 5-1: USB disconnect, device number 8 [ 323.608758][ T7389] random: crng reseeded on system resumption [ 324.628044][ T61] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 324.662859][ T61] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 324.664318][ T61] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 324.665838][ T61] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 324.666619][ T61] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 324.890390][ T5806] Bluetooth: hci6: command 0x0406 tx timeout [ 326.185197][ T7198] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 326.185217][ T7198] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 326.185246][ T7198] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 327.147363][ T5804] Bluetooth: hci7: command tx timeout [ 327.357164][ T61] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 327.380589][ T61] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 327.385629][ T61] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 327.387230][ T61] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 327.388445][ T61] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 329.170782][ T61] Bluetooth: hci7: command tx timeout [ 329.494156][ T61] Bluetooth: hci10: command tx timeout [ 331.260194][ T61] Bluetooth: hci7: command tx timeout [ 331.630257][ T61] Bluetooth: hci10: command tx timeout [ 333.340260][ T61] Bluetooth: hci7: command tx timeout [ 334.159358][ T61] Bluetooth: hci10: command tx timeout [ 336.318980][ T61] Bluetooth: hci10: command tx timeout [ 337.558594][ T5804] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 337.604107][ T5804] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 337.607536][ T5804] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 337.608840][ T5804] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 337.633399][ T5804] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 339.730697][ T5804] Bluetooth: hci8: command tx timeout [ 341.810187][ T5804] Bluetooth: hci8: command tx timeout [ 343.890143][ T5804] Bluetooth: hci8: command tx timeout [ 345.970407][ T5804] Bluetooth: hci8: command tx timeout [ 347.131993][ T61] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 347.171448][ T61] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 347.193104][ T61] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 347.231395][ T61] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 347.234761][ T61] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 348.228771][ T38] INFO: task syz.2.181:6815 blocked for mor[ 348.228771][ T38] INFO: task syz.2.181:6815 blocked for more than 143 seconds. [ 348.228800][ T38] Tainted: G L syzkaller #0 [ 348.228811][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 348.228821][ T38] task:syz.2.181 state:D stack:20032 pid:6815 tgid:6814 ppid:5798 task_flags:0x400140 flags:0x00080002 [ 348.228879][ T38] Call Trace: [ 348.228886][ T38] [ 348.228898][ T38] __schedule+0x1553/0x5240 [ 348.228956][ T38] ? __lock_acquire+0x6b5/0x2cf0 [ 348.228981][ T38] ? __pfx___schedule+0x10/0x10 [ 348.229028][ T38] rt_mutex_schedule+0x76/0xf0 [ 348.229054][ T38] rt_mutex_slowlock_block+0x508/0x680 [ 348.229101][ T38] rt_mutex_slowlock+0x2dc/0x7b0 [ 348.229130][ T38] ? rt_mutex_slowlock+0x1fd/0x7b0 [ 348.229156][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 348.229203][ T38] ? rcu_barrier+0x4c/0x580 [ 348.229236][ T38] ? rcu_barrier+0x4c/0x580 [ 348.229259][ T38] mutex_lock_nested+0x168/0x1d0 [ 348.229283][ T38] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 348.229314][ T38] rcu_barrier+0x4c/0x580 [ 348.229351][ T38] netdev_run_todo+0x2e0/0xde0 [ 348.229381][ T38] ? __pfx_netdev_run_todo+0x10/0x10 [ 348.229401][ T38] ? unregister_netdevice_queue+0x19b/0x360 [ 348.229428][ T38] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 348.229453][ T38] ? batadv_meshif_destroy_netlink+0x3a3/0x4a0 [ 348.229476][ T38] ? mutex_lock_nested+0x168/0x1d0 [ 348.229506][ T38] rtnl_dellink+0x6a7/0x820 [ 348.229542][ T38] ? __pfx_rtnl_dellink+0x10/0x10 [ 348.229583][ T38] ? __lock_acquire+0x6b5/0x2cf0 [ 348.229702][ T38] ? __pfx_rtnl_dellink+0x10/0x10 [ 348.229729][ T38] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 348.229761][ T38] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 348.229788][ T38] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 348.229813][ T38] ? ref_tracker_free+0x673/0x820 [ 348.229838][ T38] ? __copy_skb_header+0xa3/0x4a0 [ 348.229862][ T38] ? __pfx_ref_tracker_free+0x10/0x10 [ 348.229887][ T38] ? __skb_clone+0x63/0x7a0 [ 348.229918][ T38] netlink_rcv_skb+0x232/0x4b0 [ 348.229948][ T38] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 348.229978][ T38] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 348.236818][ T38] ? netlink_deliver_tap+0x2e/0x1b0 [ 348.236860][ T38] netlink_unicast+0x831/0x9f0 [ 348.236896][ T38] ? __pfx_netlink_unicast+0x10/0x10 [ 348.236923][ T38] ? netlink_sendmsg+0x650/0xb40 [ 348.236949][ T38] ? skb_put+0x11b/0x210 [ 348.236984][ T38] netlink_sendmsg+0x813/0xb40 [ 348.237023][ T38] ? __pfx_netlink_sendmsg+0x10/0x10 [ 348.237061][ T38] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 348.237095][ T38] ____sys_sendmsg+0x94c/0x9c0 [ 348.237124][ T38] ? __pfx_____sys_sendmsg+0x10/0x10 [ 348.237156][ T38] ? import_iovec+0x73/0xa0 [ 348.237191][ T38] ___sys_sendmsg+0x2a5/0x360 [ 348.237219][ T38] ? __pfx____sys_sendmsg+0x10/0x10 [ 348.237249][ T38] ? futex_wait+0x29a/0x380 [ 348.237304][ T38] ? __fget_files+0x2a/0x420 [ 348.237330][ T38] ? __fget_files+0x3a6/0x420 [ 348.237367][ T38] __x64_sys_sendmsg+0x1c3/0x2a0 [ 348.237392][ T38] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 348.237425][ T38] ? rcu_is_watching+0x15/0xb0 [ 348.237463][ T38] do_syscall_64+0x14d/0xf80 [ 348.237493][ T38] ? trace_irq_disable+0x3b/0x150 [ 348.237518][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 348.237540][ T38] ? clear_bhb_loop+0x40/0x90 [ 348.237566][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 348.237588][ T38] RIP: 0033:0x7fae23f2c799 [ 348.237615][ T38] RSP: 002b:00007fae22186028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 348.237637][ T38] RAX: ffffffffffffffda RBX: 00007fae241a5fa0 RCX: 00007fae23f2c799 [ 348.237653][ T38] RDX: 0000000000048000 RSI: 00002000000002c0 RDI: 0000000000000007 [ 348.237666][ T38] RBP: 00007fae23fc2c99 R08: 0000000000000000 R09: 0000000000000000 [ 348.237680][ T38] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 348.237692][ T38] R13: 00007fae241a6038 R14: 00007fae241a5fa0 R15: 00007ffd243ebda8 [ 348.237724][ T38] [ 348.237765][ T38] [ 348.237765][ T38] Showing all locks held in the system: [ 348.237773][ T38] 2 locks held by kworker/u8:0/12: [ 348.237785][ T38] #0: ffff88801f77d938 ((wq_completion)iou_exit){+.+.}-{0:0}, at: process_scheduled_works+0xa52/0x18c0 [ 348.237840][ T38] #1: ffffc90000117c40 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_scheduled_works+0xa8d/0x18c0 [ 348.237891][ T38] 5 locks held by rcuc/0/20: [ 348.237903][ T38] 4 locks held by rcuc/1/28: [ 348.237913][ T38] 4 locks held by ksoftirqd/1/30: [ 348.237925][ T38] 3 locks held by kworker/1:1/36: [ 348.237934][ T38] #0: ffff888019c03938 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0xa52/0x18c0 [ 348.237985][ T38] #1: ffffc90000ad7c40 ((fqdir_free_work).work){+.+.}-{0:0}, at: process_scheduled_works+0xa8d/0x18c0 [ 348.238037][ T38] #2: ffffffff8ddd1b30 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580 [ 348.238088][ T38] 1 lock held by khungtaskd/38: [ 348.238099][ T38] #0: ffffffff8ddcb8c0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 348.238147][ T38] 2 locks held by kworker/u8:2/43: [ 348.238157][ T38] #0: ffff88801f77d938 ((wq_completion)iou_exit){+.+.}-{0:0}, at: process_scheduled_works+0xa52/0x18c0 [ 348.238208][ T38] #1: ffffc90000b47c40 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_scheduled_works+0xa8d/0x18c0 [ 348.239674][ T38] 3 locks held by kworker/u8:9/1173: [ 348.239686][ T38] #0: ffff888031e9b138 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0xa52/0x18c0 [ 348.239735][ T38] #1: ffffc90005bafc40 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa8d/0x18c0 [ 348.239782][ T38] #2: ffffffff8f15a878 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_dad_work+0x124/0x1680 [ 348.239833][ T38] 4 locks held by kworker/u8:14/1450: [ 348.239843][ T38] #0: ffff88801aee1138 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0xa52/0x18c0 [ 348.239890][ T38] #1: ffffc9000647fc40 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0xa8d/0x18c0 [ 348.239936][ T38] #2: ffffffff8f14c0c0 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf4/0x800 [ 348.239984][ T38] #3: ffffffff8ddd1b30 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580 [ 348.240268][ T38] 2 locks held by kworker/u8:16/3510: [ 348.240278][ T38] #0: ffff88801f77d938 ((wq_completion)iou_exit){+.+.}-{0:0}, at: process_scheduled_works+0xa52/0x18c0 [ 348.240326][ T38] #1: ffffc9000ecc7c40 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_scheduled_works+0xa8d/0x18c0 [ 348.240375][ T38] 2 locks held by getty/5553: [ 348.240385][ T38] #0: ffff8880372900a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 348.240431][ T38] #1: ffffc90003e7e2e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x462/0x13c0 [ 348.240474][ T38] 6 locks held by kworker/0:3/5802: [ 348.240494][ T38] 2 locks held by kworker/u8:17/6220: [ 348.240504][ T38] #0: ffff88801f77d938 ((wq_completion)iou_exit){+.+.}-{0:0}, at: process_scheduled_works+0xa52/0x18c0 [ 348.240550][ T38] #1: ffffc90005eefc40 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_scheduled_works+0xa8d/0x18c0 [ 348.240606][ T38] 2 locks held by kworker/u8:22/6229: [ 348.240616][ T38] #0: ffff88801f77d938 ((wq_completion)iou_exit){+.+.}-{0:0}, at: process_scheduled_works+0xa52/0x18c0 [ 348.240664][ T38] #1: ffffc90005f5fc40 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_scheduled_works+0xa8d/0x18c0 [ 348.240712][ T38] 2 locks held by kworker/u8:24/6321: [ 348.240722][ T38] #0: ffff88801f77d938 ((wq_completion)iou_exit){+.+.}-{0:0}, at: process_scheduled_works+0xa52/0x18c0 [ 348.240769][ T38] #1: ffffc900060efc40 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_scheduled_works+0xa8d/0x18c0 [ 348.240818][ T38] 2 locks held by kworker/u8:30/6806: [ 348.240828][ T38] #0: ffff88801f77d938 ((wq_completion)iou_exit){+.+.}-{0:0}, at: process_scheduled_works+0xa52/0x18c0 [ 348.240875][ T38] #1: ffffc90005cb7c40 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_scheduled_works+0xa8d/0x18c0 [ 348.240924][ T38] 1 lock held by syz.2.181/6815: [ 348.240934][ T38] #0: ffffffff8ddd1b30 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580 [ 348.240979][ T38] 1 lock held by syz.1.182/6816: [ 348.240989][ T38] #0: ffffffff8ddd1b30 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580 [ 348.241035][ T38] 1 lock held by syz-executor/6903: [ 348.241045][ T38] #0: ffffffff8ddd1b30 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580 [ 348.241091][ T38] 1 lock held by syz.5.241/7027: [ 348.241100][ T38] #0: ffffffff8ddd1b30 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580 [ 348.241147][ T38] 1 lock held by syz-executor/7143: [ 348.241157][ T38] #0: ffffffff8ddd1b30 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580 [ 348.241202][ T38] 2 locks held by syz.0.274/7146: [ 348.241212][ T38] #0: ffffffff8f14c0c0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x4f7/0x730 [ 348.241259][ T38] #1: ffffffff8ddd1b30 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580 [ 348.241304][ T38] 1 lock held by syz-executor/7189: [ 348.241314][ T38] #0: ffffffff8ddd1b30 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580 [ 348.241359][ T38] 1 lock held by syz-executor/7198: [ 348.241368][ T38] #0: ffffffff8ddd1b30 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580 [ 348.241414][ T38] 2 locks held by syz-executor/7338: [ 348.241424][ T38] #0: ffffffff8f6c1968 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 348.241477][ T38] #1: ffffffff8f15a878 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8a1/0x1be0 [ 348.241524][ T38] 1 lock held by syz.7.330/7376: [ 348.241534][ T38] #0: ffffffff8ddd1b30 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580 [ 348.241579][ T38] 2 locks held by syz-executor/7390: [ 348.241589][ T38] #0: ffffffff8f14c0c0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x4f7/0x730 [ 348.241641][ T38] #1: ffffffff8f15a878 (rtnl_mutex){+.+.}-{4:4}, at: register_netdev+0x18/0x60 [ 348.241683][ T38] 2 locks held by syz-executor/7396: [ 348.241693][ T38] 2 locks held by syz.4.334/7402: [ 348.241702][ T38] #0: ffffffff8f14c0c0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x4f7/0x730 [ 348.241746][ T38] #1: ffffffff8ddd1b30 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580 [ 348.241790][ T38] 2 locks held by syz-executor/7406: [ 348.241800][ T38] #0: ffffffff8f14c0c0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x4f7/0x730 [ 348.241844][ T38] #1: ffffffff8f15a878 (rtnl_mutex){+.+.}-{4:4}, at: register_netdev+0x18/0x60 [ 348.241885][ T38] 2 locks held by syz-executor/7410: [ 348.241895][ T38] #0: ffffffff8f14c0c0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x4f7/0x730 [ 348.241939][ T38] #1: ffffffff8f15a878 (rtnl_mutex){+.+.}-{4:4}, at: register_nexthop_notifier+0x88/0x290 [ 348.241986][ T38] [ 348.241991][ T38] ============================================= [ 348.241991][ T38] [ 348.241999][ T38] NMI backtrace for cpu 1 [ 348.242014][ T38] CPU: 1 UID: 0 PID: 38 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 348.242038][ T38] Tainted: [L]=SOFTLOCKUP [ 348.242044][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 348.242053][ T38] Call Trace: [ 348.242060][ T38] [ 348.242068][ T38] dump_stack_lvl+0xe8/0x150 [ 348.242095][ T38] nmi_cpu_backtrace+0x274/0x2d0 [ 348.242117][ T38] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 348.242143][ T38] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 348.242167][ T38] sys_info+0x135/0x170 [ 348.242185][ T38] watchdog+0xfd9/0x1030 [ 348.242212][ T38] ? watchdog+0x21a/0x1030 [ 348.242240][ T38] kthread+0x388/0x470 [ 348.242259][ T38] ? __pfx_watchdog+0x10/0x10 [ 348.242278][ T38] ? __pfx_kthread+0x10/0x10 [ 348.242298][ T38] ret_from_fork+0x51e/0xb90 [ 348.242325][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 348.242347][ T38] ? __switch_to+0xc7d/0x1450 [ 348.242371][ T38] ? __pfx_kthread+0x10/0x10 [ 348.242391][ T38] ret_from_fork_asm+0x1a/0x30 [ 348.242423][ T38] [ 348.242430][ T38] Sending NMI from CPU 1 to CPUs 0: [ 348.242454][ C0] NMI backtrace for cpu 0 [ 348.242471][ C0] CPU: 0 UID: 0 PID: 17 Comm: pr/legacy Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 348.242494][ C0] Tainted: [L]=SOFTLOCKUP [ 348.242499][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 348.242508][ C0] RIP: 0010:io_serial_in+0x77/0xc0 [ 348.242535][ C0] Code: e8 0e a4 94 fc 44 89 f9 d3 e3 49 83 ee 80 4c 89 f0 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 8f b4 fa fc 41 03 1e 89 da ec <0f> b6 c0 5b 41 5c 41 5e 41 5f c3 cc cc cc cc cc 44 89 f9 80 e1 07 [ 348.242549][ C0] RSP: 0018:ffffc900001679d0 EFLAGS: 00000202 [ 348.242564][ C0] RAX: 1ffffffff332a600 RBX: 00000000000003fd RCX: 0000000000000000 [ 348.242576][ C0] RDX: 00000000000003fd RSI: 0000000000000000 RDI: 0000000000000000 [ 348.242586][ C0] RBP: ffffffff99953750 R08: 0000000000000000 R09: 0000000000000000 [ 348.242597][ C0] R10: dffffc0000000000 R11: ffffffff852fc1b0 R12: dffffc0000000000 [ 348.242608][ C0] R13: 0000000000000000 R14: ffffffff999534c0 R15: 0000000000000000 [ 348.242619][ C0] FS: 0000000000000000(0000) GS:ffff88812633c000(0000) knlGS:0000000000000000 [ 348.242633][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 348.242644][ C0] CR2: 0000562cec578528 CR3: 00000000394b0000 CR4: 00000000003526f0 [ 348.242661][ C0] Call Trace: [ 348.242667][ C0] [ 348.242675][ C0] wait_for_lsr+0x1aa/0x2f0 [ 348.242695][ C0] serial8250_console_write+0x120d/0x1b90 [ 348.242724][ C0] ? __pfx_serial8250_console_write+0x10/0x10 [ 348.242750][ C0] ? console_flush_one_record+0x48f/0xb90 [ 348.242776][ C0] console_flush_one_record+0x68b/0xb90 [ 348.242802][ C0] ? console_flush_one_record+0xfa/0xb90 [ 348.242827][ C0] ? __pfx_console_flush_one_record+0x10/0x10 [ 348.242851][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 348.242878][ C0] legacy_kthread_func+0x1b6/0x250 [ 348.242902][ C0] ? __pfx_legacy_kthread_func+0x10/0x10 [ 348.242925][ C0] ? __pfx_autoremove_wake_function+0x10/0x10 [ 348.242949][ C0] ? __kthread_parkme+0x7a/0x1f0 [ 348.242976][ C0] kthread+0x388/0x470 [ 348.242992][ C0] ? __pfx_legacy_kthread_func+0x10/0x10 [ 348.243014][ C0] ? __pfx_kthread+0x10/0x10 [ 348.243031][ C0] ret_from_fork+0x51e/0xb90 [ 348.243053][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 348.243073][ C0] ? __switch_to+0xc7d/0x1450 [ 348.243093][ C0] ? __pfx_kthread+0x10/0x10 [ 348.243109][ C0] ret_from_fork_asm+0x1a/0x30 [ 348.243132][ C0] [ 348.243453][ T38] Kernel panic - not syncing: hung_task: blocked tasks [ 348.243468][ T38] CPU: 1 UID: 0 PID: 38 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 348.243490][ T38] Tainted: [L]=SOFTLOCKUP [ 348.243496][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 348.243506][ T38] Call Trace: [ 348.243513][ T38] [ 348.243520][ T38] vpanic+0x56c/0xa60 [ 348.243548][ T38] ? __pfx_vpanic+0x10/0x10 [ 348.243583][ T38] panic+0xc5/0xd0 [ 348.243664][ T38] ? __pfx_panic+0x10/0x10 [ 348.243687][ T38] ? printk_trigger_flush+0x117/0x180 [ 348.243712][ T38] ? lockdep_hardirqs_on+0x7a/0x110 [ 348.243744][ T38] ? nmi_trigger_cpumask_backtrace+0x234/0x300 [ 348.243768][ T38] watchdog+0x1023/0x1030 [ 348.243795][ T38] ? watchdog+0x21a/0x1030 [ 348.243859][ T38] kthread+0x388/0x470 [ 348.243877][ T38] ? __pfx_watchdog+0x10/0x10 [ 348.243896][ T38] ? __pfx_kthread+0x10/0x10 [ 348.243916][ T38] ret_from_fork+0x51e/0xb90 [ 348.243942][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 348.243972][ T38] ? __switch_to+0xc7d/0x1450 [ 348.243997][ T38] ? __pfx_kthread+0x10/0x10 [ 348.244017][ T38] ret_from_fork_asm+0x1a/0x30 [ 348.244048][ T38] [ 348.244651][ T38] Kernel Offset: disabled