last executing test programs: 31.679932233s ago: executing program 4 (id=502): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000d40)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x40, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x100, 0x0, 0x6361, 0x5, 0xfffffffd, 0x6}, [@TCA_NETEM_CORRUPT={0xc, 0x4, {0xfffffffd, 0x401}}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x8800) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 28.161888747s ago: executing program 4 (id=511): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0]) 26.966248383s ago: executing program 4 (id=515): syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x1c0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r1 = landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e}, 0x18, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r1, 0x1, &(0x7f0000000000)={0x2108, r0}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$vim2m(0x0, 0x7fffffff, 0x2) landlock_restrict_self(r1, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file2\x00', 0x81c0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) 21.60426911s ago: executing program 3 (id=528): openat$tun(0xffffffffffffff9c, 0x0, 0x48e02, 0x0) socket(0x10, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) pipe(&(0x7f0000000500)) symlinkat(&(0x7f0000000440)='./file0\x00', 0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00') 20.44070535s ago: executing program 3 (id=529): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x50) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000402609333340000000000109022400010000000009040000010301000009"], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r4 = add_key$fscrypt_v1(0x0, 0x0, &(0x7f0000000100)={0x0, "de442bfc7910e10ac69ac014b0fa7807b11d2c99ed1f40d47a6edb3367b5cc888e1fd5102ae2d3d05f251f8d49025ceab4152b6e6d87cd6088e97a9d06d29143"}, 0x48, 0xffffffffffffffff) keyctl$KEYCTL_PKEY_SIGN(0x1b, &(0x7f0000000040)={r4}, &(0x7f00000003c0)=ANY=[@ANYBLOB="656e633d6f61657020686173683d6372637431306469660000000000000000001c2b8e2bebb75300"/75], 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x65, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x44}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) lseek(0xffffffffffffffff, 0xfffffffffffffffe, 0x2) syz_usb_disconnect(r0) 16.073766234s ago: executing program 3 (id=535): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f000001b700)=""/102392, 0x18ff8) r1 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) fchdir(r2) r3 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) openat(0xffffffffffffff9c, 0x0, 0x1c1840, 0x0) ftruncate(r3, 0x2007ffb) sendfile(r3, r3, 0x0, 0x1000000201005) 14.77495162s ago: executing program 0 (id=538): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="070000000400"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, 0x0, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000980)='./file0\x00', 0x30) mount$cgroup(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x70, 0x103301) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6}, 0x94) close_range(r0, 0xffffffffffffffff, 0x0) 13.378300058s ago: executing program 0 (id=540): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x50) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000402609333340000000000109"], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r4 = add_key$fscrypt_v1(0x0, 0x0, &(0x7f0000000100)={0x0, "de442bfc7910e10ac69ac014b0fa7807b11d2c99ed1f40d47a6edb3367b5cc888e1fd5102ae2d3d05f251f8d49025ceab4152b6e6d87cd6088e97a9d06d29143"}, 0x48, 0xffffffffffffffff) keyctl$KEYCTL_PKEY_SIGN(0x1b, &(0x7f0000000040)={r4}, &(0x7f00000003c0)=ANY=[@ANYBLOB="656e633d6f61657020686173683d6372637431306469660000000000000000001c2b8e2bebb75300"/85], 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x65, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x44}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) lseek(0xffffffffffffffff, 0xfffffffffffffffe, 0x2) syz_usb_disconnect(r0) futex(0x0, 0x85, 0x8, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 12.980503036s ago: executing program 2 (id=542): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0]) 12.979017966s ago: executing program 3 (id=543): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_xfrm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x14, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x1000, 0x0, 0xa, 0x20}, {}, {0x1, 0x6, 0x0, 0xfffffffffffffffe}}}, 0xb8}, 0x1, 0x0, 0x0, 0x404c830}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r4 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r4, &(0x7f0000000080)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x5}, 0xa) 12.920372599s ago: executing program 4 (id=544): syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp6\x00') r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x46, '\x00', 0x0, 0x2}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbee2, 0x8031, r1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) close(0x3) 10.618348319s ago: executing program 1 (id=545): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="01000000040000000400000008"], 0x50) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000001680)) eventfd2(0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) write(r3, &(0x7f0000000000)="240000005800410f9c00f4f90085b3a85c91fddf080001000501009f0800028001000000", 0x24) 10.324455976s ago: executing program 3 (id=546): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x1e1201, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000180)=0x6f) write$dsp(r0, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) setpgid(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r1 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) 9.946456939s ago: executing program 2 (id=547): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x2d) bpf$MAP_CREATE(0x0, 0x0, 0x48) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@remote, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc, 0x7}, 0x70bd2a, 0x3504, 0xa, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/stat\x00', 0x0, 0x0) 8.821228875s ago: executing program 0 (id=548): setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) syz_emit_ethernet(0x5e, &(0x7f00000004c0)=ANY=[], 0x0) sched_setscheduler(0x0, 0x3, &(0x7f0000000080)=0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000580)=@allocspi={0xf8, 0x16, 0x1, 0x0, 0x0, {{{@in=@empty, @in6=@mcast1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x32}, @in=@broadcast, {}, {}, {0x0, 0x0, 0xfffffffe}, 0x70bd26, 0x0, 0x2}}}, 0xf8}, 0x1, 0x0, 0x0, 0x840}, 0x0) 8.807377151s ago: executing program 1 (id=549): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) pipe(0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002abd7000fcdbdf2501000000000000000b00000000060014"], 0x28}, 0x1, 0x0, 0x0, 0x890}, 0x800) 7.647916142s ago: executing program 0 (id=550): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x7fff}, 0x50) 7.614956604s ago: executing program 1 (id=551): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_open_dev$sndpcmp(&(0x7f0000000b00), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r3, 0xc2604111, &(0x7f0000000540)={0x0, [[0x223, 0x0, 0x0, 0x1], [0xfffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x32], [0x2]], '\x00', [{}, {}, {}, {0x0, 0x7}, {}, {}, {}, {}, {}, {0x3}]}) 6.313986248s ago: executing program 1 (id=552): ioctl$DRM_IOCTL_GET_CAP(0xffffffffffffffff, 0xc010640c, &(0x7f0000000040)={0x8}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r0, &(0x7f000001b700)=""/102392, 0x18ff8) r1 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) fchdir(r2) r3 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) openat(0xffffffffffffff9c, 0x0, 0x1c1840, 0x0) ftruncate(r3, 0x2007ffb) sendfile(r3, r3, 0x0, 0x1000000201005) 5.476045437s ago: executing program 2 (id=553): openat$tun(0xffffffffffffff9c, 0x0, 0x48e02, 0x0) socket(0x10, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000100)={0x0, 0x5, 0x20, 0x8, 0x1}, &(0x7f0000000280)=0x18) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) pipe(&(0x7f0000000500)) symlinkat(&(0x7f0000000440)='./file0\x00', 0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00') 5.380732389s ago: executing program 2 (id=554): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f000001b700)=""/102392, 0x18ff8) r1 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) fchdir(r2) r3 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) openat(0xffffffffffffff9c, 0x0, 0x1c1840, 0x0) ftruncate(r3, 0x2007ffb) sendfile(r3, r3, 0x0, 0x1000000201005) 5.328785122s ago: executing program 3 (id=555): syz_init_net_socket$rose(0xb, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) ioctl$SW_SYNC_IOC_INC(r3, 0x40045701, &(0x7f0000000040)=0xebfc) 4.261208739s ago: executing program 1 (id=556): unlinkat(0xffffffffffffffff, 0x0, 0x200) openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$packet(0x11, 0x3, 0x300) socket$netlink(0x10, 0x3, 0x4) openat$comedi(0xffffff9c, 0x0, 0x101001, 0x0) openat$iommufd(0xffffffffffffff9c, 0x0, 0x108002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000001a40)=""/102392, 0x18ff8) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x6, 0x0) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x6, 0x0) mq_unlink(&(0x7f0000000000)='eth0\x00') 4.260025446s ago: executing program 2 (id=557): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0]) 4.259348128s ago: executing program 4 (id=558): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000100)=0x1800, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000000)={0x2, 'veth1_to_bridge\x00', 0x200}, 0x18) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYRES32=r2], 0x6c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0xd, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) sendmsg$nl_route(r3, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800010009000000000000000a00"], 0x24}}, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000000)={0x14, 0x2d, 0x1, 0x70bd26, 0x25dfdbfc, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x4000804) 3.51271433s ago: executing program 1 (id=559): gettid() timer_settime(0x0, 0x0, 0x0, 0x0) userfaultfd(0x801) madvise(&(0x7f000044a000/0x1000)=nil, 0x1000, 0x4) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) semctl$GETPID(0x0, 0x4, 0xb, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a310000000038000000030a01040000000000000000010000010900030073797a32000000000c00024000000000000000010900010073797a300000000014000000110001"], 0xac}, 0x1, 0x0, 0x0, 0x8040}, 0x0) 1.849248716s ago: executing program 4 (id=560): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYRESDEC], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x8942, 0x0) r0 = syz_open_procfs(0x0, 0x0) socket$packet(0x11, 0x3, 0x300) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f00000000c0)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x18, 0x68, 0x309}, 0x18}}, 0x0) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000000), 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f0000001d00)=[{{&(0x7f00000003c0)=@caif=@util, 0x80, &(0x7f0000000280), 0x0, &(0x7f0000000780)=""/241, 0xf1}, 0x10001}, {{0x0, 0x0, &(0x7f0000001c80)=[{&(0x7f0000000600)=""/19, 0x13}, {&(0x7f0000000880)=""/166, 0xa6}, {0x0}, {&(0x7f0000000a80)=""/4096, 0x1000}, {&(0x7f0000000640)=""/62, 0x3e}, {&(0x7f0000001a80)=""/200, 0xc8}, {&(0x7f0000001f00)=""/200, 0xc8}], 0x7, &(0x7f0000001e00)=""/241, 0xf1}, 0x4}], 0x2, 0x10021, &(0x7f0000001d80)={0x77359400}) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018310000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b7000000000000009500000000000000"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x2d) r6 = timerfd_create(0x8, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) timerfd_settime(r6, 0x1, &(0x7f0000000300)={{0x77359400}}, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) 1.834753993s ago: executing program 0 (id=561): setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) syz_emit_ethernet(0x5e, &(0x7f00000004c0)=ANY=[], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000580)=@allocspi={0xf8, 0x16, 0x1, 0x0, 0x0, {{{@in=@empty, @in6=@mcast1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x32}, @in=@broadcast, {}, {}, {0x0, 0x0, 0xfffffffe}, 0x70bd26, 0x0, 0x2}}}, 0xf8}, 0x1, 0x0, 0x0, 0x840}, 0x0) 46.967378ms ago: executing program 2 (id=562): syz_emit_ethernet(0x0, 0x0, 0x0) syz_usb_connect(0x1, 0x2d, &(0x7f0000000340)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904010001faf40d0009058223"], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x20000000) ioctl$I2C_SMBUS(0xffffffffffffffff, 0x720, &(0x7f00000000c0)={0x1, 0x0, 0x6, &(0x7f0000000000)={0x18, "96ab8cb18a5722d2da3a03f39b5eaee25558f362e700"}}) syz_open_dev$char_usb(0xc, 0xb4, 0x800000000000) 0s ago: executing program 0 (id=563): unlinkat(0xffffffffffffffff, 0x0, 0x200) socket$netlink(0x10, 0x3, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000001a40)=""/102392, 0x18ff8) r1 = mq_open(&(0x7f0000001140)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\xe0\x9d\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xdf\x15\f]\x15\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb', 0x42, 0x0, 0x0) mq_timedsend(r1, 0x0, 0x0, 0x6, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.226' (ED25519) to the list of known hosts. [ 90.773823][ T5789] cgroup: Unknown subsys name 'net' [ 91.015045][ T5789] cgroup: Unknown subsys name 'cpuset' [ 91.069855][ T5789] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 92.054690][ T9] cfg80211: failed to load regulatory.db [ 93.030414][ T5789] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 97.402689][ T61] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 97.404831][ T61] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 97.405925][ T61] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 97.410418][ T61] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 97.419899][ T61] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 97.452085][ T61] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 97.455169][ T61] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 97.455878][ T61] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 97.473908][ T61] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 97.475419][ T5810] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 97.559924][ T5121] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 97.568267][ T5121] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 97.569693][ T5121] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 97.599205][ T5121] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 97.603422][ T5121] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 97.688050][ T5806] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 97.698138][ T5806] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 97.719876][ T5806] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 97.721501][ T5806] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 97.727516][ T5819] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 97.730629][ T5806] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 97.731833][ T5806] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 97.733266][ T5806] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 97.734177][ T5806] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 97.747298][ T5810] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 98.571031][ T5804] chnl_net:caif_netlink_parms(): no params data found [ 98.663450][ T5808] chnl_net:caif_netlink_parms(): no params data found [ 98.871497][ T5812] chnl_net:caif_netlink_parms(): no params data found [ 99.005499][ T5817] chnl_net:caif_netlink_parms(): no params data found [ 99.013607][ T5816] chnl_net:caif_netlink_parms(): no params data found [ 99.480988][ T5810] Bluetooth: hci0: command tx timeout [ 99.559179][ T5810] Bluetooth: hci1: command tx timeout [ 99.560428][ T5804] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.561520][ T5804] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.561943][ T5804] bridge_slave_0: entered allmulticast mode [ 99.564084][ T5804] bridge_slave_0: entered promiscuous mode [ 99.639312][ T5810] Bluetooth: hci2: command tx timeout [ 99.679945][ T5804] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.680059][ T5804] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.680243][ T5804] bridge_slave_1: entered allmulticast mode [ 99.682166][ T5804] bridge_slave_1: entered promiscuous mode [ 99.685304][ T5808] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.685427][ T5808] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.685778][ T5808] bridge_slave_0: entered allmulticast mode [ 99.687845][ T5808] bridge_slave_0: entered promiscuous mode [ 99.799240][ T5810] Bluetooth: hci3: command tx timeout [ 99.799269][ T5121] Bluetooth: hci4: command tx timeout [ 99.880129][ T5808] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.880300][ T5808] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.880438][ T5808] bridge_slave_1: entered allmulticast mode [ 99.882326][ T5808] bridge_slave_1: entered promiscuous mode [ 100.200520][ T5812] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.200698][ T5812] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.200836][ T5812] bridge_slave_0: entered allmulticast mode [ 100.202764][ T5812] bridge_slave_0: entered promiscuous mode [ 100.384844][ T5804] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 100.460885][ T5812] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.460996][ T5812] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.461207][ T5812] bridge_slave_1: entered allmulticast mode [ 100.463559][ T5812] bridge_slave_1: entered promiscuous mode [ 100.633222][ T5804] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 100.637527][ T5808] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 100.720203][ T5817] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.720350][ T5817] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.720491][ T5817] bridge_slave_0: entered allmulticast mode [ 100.722362][ T5817] bridge_slave_0: entered promiscuous mode [ 100.841087][ T5816] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.841197][ T5816] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.841356][ T5816] bridge_slave_0: entered allmulticast mode [ 100.843287][ T5816] bridge_slave_0: entered promiscuous mode [ 100.932889][ T5808] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 101.020233][ T5817] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.020379][ T5817] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.020574][ T5817] bridge_slave_1: entered allmulticast mode [ 101.023555][ T5817] bridge_slave_1: entered promiscuous mode [ 101.024538][ T5816] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.024625][ T5816] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.024959][ T5816] bridge_slave_1: entered allmulticast mode [ 101.026800][ T5816] bridge_slave_1: entered promiscuous mode [ 101.183303][ T5812] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 101.363880][ T5804] team0: Port device team_slave_0 added [ 101.432916][ T5812] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 101.559270][ T5810] Bluetooth: hci0: command tx timeout [ 101.589349][ T5804] team0: Port device team_slave_1 added [ 101.591384][ T5808] team0: Port device team_slave_0 added [ 101.639292][ T5810] Bluetooth: hci1: command tx timeout [ 101.683278][ T5817] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 101.686606][ T5816] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 101.719233][ T5810] Bluetooth: hci2: command tx timeout [ 101.751855][ T5808] team0: Port device team_slave_1 added [ 101.832581][ T5817] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 101.834967][ T5816] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 101.879359][ T5121] Bluetooth: hci4: command tx timeout [ 101.879510][ T5810] Bluetooth: hci3: command tx timeout [ 102.211762][ T5812] team0: Port device team_slave_0 added [ 102.363197][ T5804] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 102.363214][ T5804] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.363566][ T5804] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 102.492627][ T5812] team0: Port device team_slave_1 added [ 102.660886][ T5804] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 102.660904][ T5804] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.660931][ T5804] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 102.662097][ T5808] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 102.662113][ T5808] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.662132][ T5808] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 102.762008][ T5817] team0: Port device team_slave_0 added [ 102.764432][ T5816] team0: Port device team_slave_0 added [ 102.777967][ T5808] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 102.777983][ T5808] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.778010][ T5808] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 102.862140][ T5817] team0: Port device team_slave_1 added [ 102.864667][ T5816] team0: Port device team_slave_1 added [ 102.880425][ T5812] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 102.880441][ T5812] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.880468][ T5812] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 103.053328][ T5812] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 103.053342][ T5812] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 103.053361][ T5812] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 103.478931][ T5817] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 103.478949][ T5817] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 103.479255][ T5817] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 103.484302][ T5816] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 103.484318][ T5816] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 103.484349][ T5816] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 103.649162][ T5810] Bluetooth: hci0: command tx timeout [ 103.667780][ T5817] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 103.667793][ T5817] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 103.667813][ T5817] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 103.670179][ T5816] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 103.670195][ T5816] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 103.670229][ T5816] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 103.686880][ T5804] hsr_slave_0: entered promiscuous mode [ 103.688856][ T5804] hsr_slave_1: entered promiscuous mode [ 103.720056][ T5810] Bluetooth: hci1: command tx timeout [ 103.799391][ T5810] Bluetooth: hci2: command tx timeout [ 103.937667][ T5808] hsr_slave_0: entered promiscuous mode [ 103.938628][ T5808] hsr_slave_1: entered promiscuous mode [ 103.941053][ T5808] debugfs: 'hsr0' already exists in 'hsr' [ 103.941199][ T5808] Cannot create hsr debugfs directory [ 103.959107][ T5810] Bluetooth: hci3: command tx timeout [ 103.959139][ T5810] Bluetooth: hci4: command tx timeout [ 104.076236][ T5812] hsr_slave_0: entered promiscuous mode [ 104.077278][ T5812] hsr_slave_1: entered promiscuous mode [ 104.077936][ T5812] debugfs: 'hsr0' already exists in 'hsr' [ 104.077954][ T5812] Cannot create hsr debugfs directory [ 104.737759][ T5817] hsr_slave_0: entered promiscuous mode [ 104.738882][ T5817] hsr_slave_1: entered promiscuous mode [ 104.741129][ T5817] debugfs: 'hsr0' already exists in 'hsr' [ 104.741159][ T5817] Cannot create hsr debugfs directory [ 104.766253][ T5816] hsr_slave_0: entered promiscuous mode [ 104.767271][ T5816] hsr_slave_1: entered promiscuous mode [ 104.767977][ T5816] debugfs: 'hsr0' already exists in 'hsr' [ 104.767998][ T5816] Cannot create hsr debugfs directory [ 105.729092][ T5810] Bluetooth: hci0: command tx timeout [ 105.800631][ T5810] Bluetooth: hci1: command tx timeout [ 105.879174][ T5810] Bluetooth: hci2: command tx timeout [ 106.039515][ T5121] Bluetooth: hci3: command tx timeout [ 106.039562][ T5810] Bluetooth: hci4: command tx timeout [ 106.205935][ T5804] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 106.246836][ T5804] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 106.263439][ T5804] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 106.331277][ T5804] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 106.457628][ T5808] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 106.497542][ T5808] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 106.518560][ T5808] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 106.569291][ T5808] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 106.701382][ T5812] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 106.744357][ T5812] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 106.778873][ T5812] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 106.834653][ T5812] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 106.970276][ T5817] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 107.024198][ T5817] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 107.060096][ T5817] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 107.115849][ T5817] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 107.243542][ T5804] 8021q: adding VLAN 0 to HW filter on device bond0 [ 107.261135][ T5816] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 107.296776][ T5816] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 107.356911][ T5816] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 107.390654][ T5816] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 107.464099][ T5804] 8021q: adding VLAN 0 to HW filter on device team0 [ 107.503486][ T1294] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.503998][ T1294] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.511192][ T5808] 8021q: adding VLAN 0 to HW filter on device bond0 [ 107.552389][ T1294] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.552760][ T1294] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.615901][ T5808] 8021q: adding VLAN 0 to HW filter on device team0 [ 107.660642][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.660780][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.687704][ T5812] 8021q: adding VLAN 0 to HW filter on device bond0 [ 107.710769][ T68] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.710887][ T68] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.788166][ T5812] 8021q: adding VLAN 0 to HW filter on device team0 [ 107.807053][ T5817] 8021q: adding VLAN 0 to HW filter on device bond0 [ 107.847731][ T68] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.847930][ T68] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.898456][ T68] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.908695][ T68] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.955157][ T5817] 8021q: adding VLAN 0 to HW filter on device team0 [ 107.981394][ T5816] 8021q: adding VLAN 0 to HW filter on device bond0 [ 108.007797][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.008243][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 108.063029][ T4237] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.063292][ T4237] bridge0: port 2(bridge_slave_1) entered forwarding state [ 108.128105][ T5816] 8021q: adding VLAN 0 to HW filter on device team0 [ 108.177892][ T68] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.178956][ T68] bridge0: port 1(bridge_slave_0) entered forwarding state [ 108.228440][ T68] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.228615][ T68] bridge0: port 2(bridge_slave_1) entered forwarding state [ 108.329789][ T5804] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 108.612235][ T5808] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 108.896667][ T5808] veth0_vlan: entered promiscuous mode [ 108.966548][ T5808] veth1_vlan: entered promiscuous mode [ 109.002664][ T5812] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 109.145630][ T5817] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 109.177671][ T5808] veth0_macvtap: entered promiscuous mode [ 109.197503][ T5816] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 109.217489][ T5808] veth1_macvtap: entered promiscuous mode [ 109.262697][ T5804] veth0_vlan: entered promiscuous mode [ 109.266576][ T5812] veth0_vlan: entered promiscuous mode [ 109.306390][ T5804] veth1_vlan: entered promiscuous mode [ 109.313742][ T5808] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 109.318839][ T5812] veth1_vlan: entered promiscuous mode [ 109.392942][ T5808] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 109.456329][ T1294] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.475338][ T1294] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.480424][ T5817] veth0_vlan: entered promiscuous mode [ 109.482717][ T1294] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.496175][ T1294] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.568291][ T5816] veth0_vlan: entered promiscuous mode [ 109.582195][ T5817] veth1_vlan: entered promiscuous mode [ 109.638301][ T5804] veth0_macvtap: entered promiscuous mode [ 109.712857][ T5812] veth0_macvtap: entered promiscuous mode [ 109.718881][ T5816] veth1_vlan: entered promiscuous mode [ 109.733193][ T5804] veth1_macvtap: entered promiscuous mode [ 109.746815][ T5812] veth1_macvtap: entered promiscuous mode [ 109.823378][ T71] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.823397][ T71] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.855560][ T5804] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 109.886722][ T5812] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 109.893808][ T5817] veth0_macvtap: entered promiscuous mode [ 109.921348][ T5804] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 109.944455][ T5812] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 109.946894][ T5817] veth1_macvtap: entered promiscuous mode [ 109.962864][ T3543] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.962884][ T3543] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.991649][ T58] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.996560][ T58] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.998877][ T58] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.038714][ T5816] veth0_macvtap: entered promiscuous mode [ 110.046473][ T58] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.061369][ T58] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.067434][ T58] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.075982][ T5816] veth1_macvtap: entered promiscuous mode [ 110.085101][ T58] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.137367][ T58] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.194331][ T5817] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 110.345620][ T5817] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 110.430701][ T5816] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 110.479407][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 110.860756][ T3543] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.969053][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 111.018425][ T3543] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.051256][ T3543] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.074401][ T5816] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 111.074991][ T3543] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.153310][ T71] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.153330][ T71] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.215878][ T1277] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.249621][ T1277] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.301133][ T1277] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.332284][ T3543] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.334728][ T1277] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.334745][ T1277] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.556596][ T1294] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.556618][ T1294] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.701854][ T1294] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.701876][ T1294] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.809982][ T71] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.810004][ T71] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.868576][ T3543] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.868596][ T3543] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.956505][ T71] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.956524][ T71] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.136104][ T3543] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.136126][ T3543] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.354643][ C1] vkms_vblank_simulate: vblank timer overrun [ 112.433877][ C1] vkms_vblank_simulate: vblank timer overrun [ 113.156816][ C1] vkms_vblank_simulate: vblank timer overrun [ 113.288903][ C1] vkms_vblank_simulate: vblank timer overrun [ 113.467855][ T5935] netlink: 'syz.3.9': attribute type 13 has an invalid length. [ 113.801849][ C1] vkms_vblank_simulate: vblank timer overrun [ 114.639058][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 114.649052][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 114.659060][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 114.669037][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 114.679037][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 114.689031][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 114.699036][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 114.709031][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 114.718103][ C1] vkms_vblank_simulate: vblank timer overrun [ 115.863426][ C1] vkms_vblank_simulate: vblank timer overrun [ 115.929785][ T5955] vivid-003: ================= START STATUS ================= [ 115.931170][ T5955] vivid-003: Radio HW Seek Mode: Bounded [ 115.931325][ T5955] vivid-003: Radio Programmable HW Seek: false [ 115.931399][ T5955] vivid-003: RDS Rx I/O Mode: Block I/O [ 115.931500][ T5955] vivid-003: Generate RBDS Instead of RDS: false [ 115.931610][ T5955] vivid-003: RDS Reception: true [ 115.931728][ T5955] vivid-003: RDS Program Type: 0 inactive [ 115.931859][ T5955] vivid-003: RDS PS Name: inactive [ 115.931998][ T5955] vivid-003: RDS Radio Text: inactive [ 115.932138][ T5955] vivid-003: RDS Traffic Announcement: false inactive [ 115.932269][ T5955] vivid-003: RDS Traffic Program: false inactive [ 115.932401][ T5955] vivid-003: RDS Music: false inactive [ 115.932531][ T5955] vivid-003: ================== END STATUS ================== [ 116.860163][ T5935] bridge0: port 2(bridge_slave_1) entered disabled state [ 116.861576][ T5935] bridge0: port 1(bridge_slave_0) entered disabled state [ 117.001975][ T5964] process 'syz.1.14' launched './file1' with NULL argv: empty string added [ 119.420326][ T5982] tty tty3: ldisc open failed (-12), clearing slot 2 [ 120.029656][ T5935] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 120.048021][ T5935] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 120.146030][ T5988] syz.4.21 uses obsolete (PF_INET,SOCK_PACKET) [ 120.412731][ T5993] comedi comedi3: 8255: I/O port conflict (0x7,4) [ 120.413181][ T5993] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 120.414036][ T5993] comedi comedi3: 8255: I/O port conflict (0x16,4) [ 120.414370][ T5993] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 120.414753][ T5993] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 120.415116][ T5993] comedi comedi3: 8255: I/O port conflict (0x8,4) [ 120.415434][ T5993] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 120.415730][ T5993] comedi comedi3: 8255: I/O port conflict (0xa,4) [ 120.416208][ T5993] comedi comedi3: 8255: I/O port conflict (0xfd,4) [ 120.416566][ T5993] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 120.416890][ T5993] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 120.417193][ T5993] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 120.418713][ T5993] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 120.423532][ T5993] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 120.427130][ T5993] comedi comedi3: 8255: I/O port conflict (0x80009,4) [ 120.427400][ T5993] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffe,4) [ 120.427733][ T5993] comedi comedi3: 8255: I/O port conflict (0x7f,4) [ 120.428070][ T5993] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 120.428272][ T5993] comedi comedi3: 8255: I/O port conflict (0x40000003,4) [ 120.439510][ T5993] comedi comedi3: 8255: I/O port conflict (0x89,4) [ 120.449459][ T5993] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 120.449734][ T5993] comedi comedi3: 8255: I/O port conflict (0x20001e58,4) [ 120.449988][ T5993] comedi comedi3: 8255: I/O port conflict (0xb,4) [ 120.462030][ T5993] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 120.462081][ T5993] comedi comedi3: 8255: I/O port conflict (0x995d000,4) [ 123.019383][ T5995] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.500162][ T5995] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.501402][ T5995] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.505176][ T5995] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.573136][ T6019] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 124.243485][ T6024] netlink: 72 bytes leftover after parsing attributes in process `syz.0.32'. [ 124.606649][ T6030] Zero length message leads to an empty skb [ 129.747184][ T6079] fuse: Unknown parameter 'fd00000000000000000000' [ 129.785190][ T6079] netlink: 830 bytes leftover after parsing attributes in process `syz.3.50'. [ 137.319982][ T6153] netlink: 8 bytes leftover after parsing attributes in process `syz.3.76'. [ 137.546691][ T6147] syz.1.74 (6147) used greatest stack depth: 18512 bytes left [ 138.160532][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.160629][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 138.627546][ T6169] netlink: 104 bytes leftover after parsing attributes in process `syz.3.78'. [ 140.521305][ T6182] netlink: 40 bytes leftover after parsing attributes in process `syz.1.80'. [ 140.872854][ T6184] vivid-001: ================= START STATUS ================= [ 140.872882][ T6184] vivid-001: Radio HW Seek Mode: Bounded [ 140.872907][ T6184] vivid-001: Radio Programmable HW Seek: false [ 140.872921][ T6184] vivid-001: RDS Rx I/O Mode: Block I/O [ 140.872935][ T6184] vivid-001: Generate RBDS Instead of RDS: false [ 140.872948][ T6184] vivid-001: RDS Reception: true [ 140.872961][ T6184] vivid-001: RDS Program Type: 0 inactive [ 140.872977][ T6184] vivid-001: RDS PS Name: inactive [ 140.872993][ T6184] vivid-001: RDS Radio Text: inactive [ 140.873008][ T6184] vivid-001: RDS Traffic Announcement: false inactive [ 140.873025][ T6184] vivid-001: RDS Traffic Program: false inactive [ 140.873040][ T6184] vivid-001: RDS Music: false inactive [ 140.873057][ T6184] vivid-001: ================== END STATUS ================== [ 141.627029][ T6195] syz.3.89 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 143.660777][ T6221] netlink: 'syz.4.96': attribute type 2 has an invalid length. [ 150.034948][ T6272] warning: `syz.0.112' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 150.066318][ T6272] netlink: 'syz.0.112': attribute type 10 has an invalid length. [ 150.427326][ T6272] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 150.923585][ T5881] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 151.256783][ T5881] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 151.256813][ T5881] usb 2-1: config 179 has no interface number 0 [ 151.256890][ T5881] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 10 [ 151.256918][ T5881] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 64 [ 151.256946][ T5881] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 151.256973][ T5881] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 151.362960][ T5881] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 151.362982][ T5881] usb 2-1: New USB device strings: Mfr=0, Product=16, SerialNumber=0 [ 151.362997][ T5881] usb 2-1: Product: syz [ 151.464744][ T6275] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 154.065064][ C1] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 154.065125][ C1] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 154.066098][ T5881] usb 2-1: USB disconnect, device number 2 [ 157.884481][ T5916] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 158.246396][ T5916] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 158.246426][ T5916] usb 5-1: config 179 has no interface number 0 [ 158.246482][ T5916] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 10 [ 158.246511][ T5916] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 64 [ 158.246541][ T5916] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 158.246569][ T5916] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 158.247967][ T5916] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 158.247996][ T5916] usb 5-1: New USB device strings: Mfr=0, Product=16, SerialNumber=0 [ 158.248018][ T5916] usb 5-1: Product: syz [ 158.289487][ T6330] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 158.767421][ T44] input: Generic X-Box pad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:179.65/input/input5 [ 158.898726][ T5916] usb 5-1: USB disconnect, device number 2 [ 158.898786][ C1] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 158.898831][ C1] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 160.231912][ C1] vkms_vblank_simulate: vblank timer overrun [ 160.831840][ C1] vkms_vblank_simulate: vblank timer overrun [ 161.494100][ C1] vkms_vblank_simulate: vblank timer overrun [ 162.098655][ C1] vkms_vblank_simulate: vblank timer overrun [ 162.310876][ T6363] syzkaller0: entered promiscuous mode [ 162.310904][ T6363] syzkaller0: entered allmulticast mode [ 163.840642][ C1] vkms_vblank_simulate: vblank timer overrun [ 163.864159][ T6379] comedi comedi0: No channels found! [ 164.542748][ C1] vkms_vblank_simulate: vblank timer overrun [ 164.602237][ T6389] syzkaller0: entered promiscuous mode [ 164.602270][ T6389] syzkaller0: entered allmulticast mode [ 168.836057][ T6425] comedi comedi0: No channels found! [ 170.422146][ T6433] syzkaller0: entered promiscuous mode [ 170.422173][ T6433] syzkaller0: entered allmulticast mode [ 172.180340][ T6463] comedi comedi0: No channels found! [ 172.793426][ T6457] tipc: Started in network mode [ 172.793460][ T6457] tipc: Node identity c6bb9b4c4a93, cluster identity 4711 [ 172.794123][ T6457] tipc: Enabled bearer , priority 0 [ 172.945274][ T6444] tipc: Disabling bearer [ 176.065591][ T6495] syzkaller0: entered promiscuous mode [ 176.065620][ T6495] syzkaller0: entered allmulticast mode [ 178.459097][ T6518] capability: warning: `syz.0.185' uses deprecated v2 capabilities in a way that may be insecure [ 179.685908][ T5121] Bluetooth: hci4: command 0x0405 tx timeout [ 179.860162][ T6523] netlink: 4 bytes leftover after parsing attributes in process `syz.2.187'. [ 181.548353][ T6538] netlink: 12 bytes leftover after parsing attributes in process `syz.2.192'. [ 181.574038][ T6539] fuse: Unknown parameter 'fd00000000000000000000' [ 183.849539][ T6540] syz.0.191 (6540) used greatest stack depth: 17872 bytes left [ 191.069305][ T9] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 191.248634][ T9] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 191.248680][ T9] usb 5-1: config 179 has no interface number 0 [ 191.248805][ T9] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 10 [ 191.248849][ T9] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 64 [ 191.248894][ T9] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 191.249075][ T9] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 191.251125][ T9] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 191.251154][ T9] usb 5-1: New USB device strings: Mfr=0, Product=16, SerialNumber=0 [ 191.251175][ T9] usb 5-1: Product: syz [ 191.318211][ T6598] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 191.668210][ T9] input: Generic X-Box pad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:179.65/input/input6 [ 191.813400][ T5916] usb 5-1: USB disconnect, device number 3 [ 191.813484][ C0] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 191.813546][ C0] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 193.259400][ T6614] comedi comedi0: No channels found! [ 194.492113][ T6628] Bluetooth: MGMT ver 1.23 [ 195.253184][ T5916] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 195.691797][ T5916] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 195.691826][ T5916] usb 1-1: config 179 has no interface number 0 [ 195.691885][ T5916] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 10 [ 195.691914][ T5916] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 64 [ 195.691943][ T5916] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 195.691970][ T5916] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 195.693273][ T5916] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 195.693300][ T5916] usb 1-1: New USB device strings: Mfr=0, Product=16, SerialNumber=0 [ 195.693320][ T5916] usb 1-1: Product: syz [ 196.119896][ T6643] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 197.545660][ T5881] input: Generic X-Box pad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:179.65/input/input7 [ 197.762302][ T5881] usb 1-1: USB disconnect, device number 2 [ 197.762377][ C1] xpad 1-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 197.762422][ C1] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 199.566643][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.566720][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 199.700812][ T6673] comedi comedi0: No channels found! [ 203.722410][ T6697] fuse: Unknown parameter 'fd00000000000000000000' [ 203.731225][ T6697] netlink: 830 bytes leftover after parsing attributes in process `syz.4.242'. [ 205.227822][ T6708] mmap: syz.4.248 (6708) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 207.716721][ T6741] netlink: 'syz.2.259': attribute type 13 has an invalid length. [ 207.716743][ T6741] netlink: 'syz.2.259': attribute type 27 has an invalid length. [ 211.568291][ C0] vkms_vblank_simulate: vblank timer overrun [ 211.896637][ C0] vkms_vblank_simulate: vblank timer overrun [ 212.060661][ T6770] syzkaller0: entered promiscuous mode [ 212.060687][ T6770] syzkaller0: entered allmulticast mode [ 212.605321][ C0] vkms_vblank_simulate: vblank timer overrun [ 212.795115][ C0] vkms_vblank_simulate: vblank timer overrun [ 213.093649][ C0] vkms_vblank_simulate: vblank timer overrun [ 213.195834][ T6781] vivid-001: ================= START STATUS ================= [ 213.195850][ T6781] vivid-001: Radio HW Seek Mode: Bounded [ 213.195867][ T6781] vivid-001: Radio Programmable HW Seek: false [ 213.195881][ T6781] vivid-001: RDS Rx I/O Mode: Block I/O [ 213.195896][ T6781] vivid-001: Generate RBDS Instead of RDS: false [ 213.195910][ T6781] vivid-001: RDS Reception: true [ 213.195923][ T6781] vivid-001: RDS Program Type: 0 inactive [ 213.195940][ T6781] vivid-001: RDS PS Name: inactive [ 213.195955][ T6781] vivid-001: RDS Radio Text: inactive [ 213.195972][ T6781] vivid-001: RDS Traffic Announcement: false inactive [ 213.195988][ T6781] vivid-001: RDS Traffic Program: false inactive [ 213.196005][ T6781] vivid-001: RDS Music: false inactive [ 213.196022][ T6781] vivid-001: ================== END STATUS ================== [ 213.432277][ C0] vkms_vblank_simulate: vblank timer overrun [ 213.917616][ C0] vkms_vblank_simulate: vblank timer overrun [ 214.619564][ C0] vkms_vblank_simulate: vblank timer overrun [ 214.822346][ C0] vkms_vblank_simulate: vblank timer overrun [ 216.370244][ T6807] fuse: Unknown parameter 'fd00000000000000000000' [ 216.372316][ T6807] netlink: 830 bytes leftover after parsing attributes in process `syz.1.280'. [ 218.194769][ T6829] syzkaller0: entered promiscuous mode [ 218.194798][ T6829] syzkaller0: entered allmulticast mode [ 218.351697][ T6835] comedi comedi0: No channels found! [ 222.123002][ T6863] Bluetooth: hci3: command 0x0406 tx timeout [ 222.123121][ T6863] Bluetooth: hci1: command 0x0406 tx timeout [ 222.123180][ T6863] Bluetooth: hci0: command 0x0406 tx timeout [ 222.123199][ T6863] Bluetooth: hci2: command 0x0406 tx timeout [ 226.582789][ T6936] comedi comedi0: No channels found! [ 230.931392][ T6978] syzkaller0: entered promiscuous mode [ 230.931419][ T6978] syzkaller0: entered allmulticast mode [ 238.039344][ T7040] fuse: Unknown parameter 'fd0x0000000000000008' [ 240.729648][ C0] vkms_vblank_simulate: vblank timer overrun [ 241.194846][ C0] vkms_vblank_simulate: vblank timer overrun [ 241.505237][ C0] vkms_vblank_simulate: vblank timer overrun [ 242.313412][ C0] vkms_vblank_simulate: vblank timer overrun [ 243.097543][ C0] vkms_vblank_simulate: vblank timer overrun [ 243.503643][ C0] vkms_vblank_simulate: vblank timer overrun [ 243.567826][ C0] vkms_vblank_simulate: vblank timer overrun [ 243.787320][ C0] vkms_vblank_simulate: vblank timer overrun [ 244.653677][ T7079] syzkaller0: entered promiscuous mode [ 244.653704][ T7079] syzkaller0: entered allmulticast mode [ 244.659395][ T7079] tipc: Started in network mode [ 244.659417][ T7079] tipc: Node identity 6649d1391ab, cluster identity 4711 [ 244.659879][ T7079] tipc: Enabled bearer , priority 0 [ 244.769396][ T7076] tipc: Resetting bearer [ 245.413521][ T7076] tipc: Disabling bearer [ 246.699085][ T5867] usb 4-1: new low-speed USB device number 2 using dummy_hcd [ 247.399632][ T5867] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 247.399661][ T5867] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 247.399682][ T5867] usb 4-1: config 0 has no interface number 0 [ 247.399732][ T5867] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 247.399756][ T5867] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 247.404045][ T5867] usb 4-1: config 0 descriptor?? [ 247.407455][ T5867] iowarrior 4-1:0.1: no interrupt-in endpoint found [ 248.407963][ T5881] usb 4-1: USB disconnect, device number 2 [ 248.822881][ T7117] vivid-002: ================= START STATUS ================= [ 248.822903][ T7117] vivid-002: Radio HW Seek Mode: Bounded [ 248.822927][ T7117] vivid-002: Radio Programmable HW Seek: false [ 248.822947][ T7117] vivid-002: RDS Rx I/O Mode: Block I/O [ 248.822967][ T7117] vivid-002: Generate RBDS Instead of RDS: false [ 248.822987][ T7117] vivid-002: RDS Reception: true [ 248.823005][ T7117] vivid-002: RDS Program Type: 0 inactive [ 248.823029][ T7117] vivid-002: RDS PS Name: inactive [ 248.823052][ T7117] vivid-002: RDS Radio Text: inactive [ 248.823074][ T7117] vivid-002: RDS Traffic Announcement: false inactive [ 248.823099][ T7117] vivid-002: RDS Traffic Program: false inactive [ 248.823122][ T7117] vivid-002: RDS Music: false inactive [ 248.823146][ T7117] vivid-002: ================== END STATUS ================== [ 252.121933][ T7153] netlink: 112 bytes leftover after parsing attributes in process `syz.1.388'. [ 252.979190][ T9] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 253.292313][ T9] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 253.292339][ T9] usb 2-1: config 179 has no interface number 0 [ 253.292376][ T9] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 10 [ 253.292398][ T9] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 64 [ 253.292418][ T9] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 253.292437][ T9] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 253.295715][ T9] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 253.295741][ T9] usb 2-1: New USB device strings: Mfr=0, Product=16, SerialNumber=0 [ 253.295755][ T9] usb 2-1: Product: syz [ 254.015491][ T7166] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 254.494363][ T5916] usb 2-1: USB disconnect, device number 3 [ 254.494363][ C0] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 254.494517][ C0] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 255.724281][ T7197] netlink: 112 bytes leftover after parsing attributes in process `syz.1.401'. [ 260.629099][ T5867] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 260.781553][ T5867] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 260.781623][ T5867] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 260.781746][ T5867] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 260.781767][ T5867] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 260.804545][ T5867] usb 5-1: config 0 descriptor?? [ 260.850534][ T5867] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 261.006982][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 261.007035][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 261.477453][ T5916] usb 5-1: USB disconnect, device number 4 [ 262.403820][ T7281] syzkaller0: entered promiscuous mode [ 262.403847][ T7281] syzkaller0: entered allmulticast mode [ 262.431178][ T7281] tipc: Started in network mode [ 262.431219][ T7281] tipc: Node identity 0e24e2ffb003, cluster identity 4711 [ 262.431981][ T7281] tipc: Enabled bearer , priority 0 [ 263.309877][ T7280] tipc: Resetting bearer [ 263.490406][ T5888] tipc: Node number set to 3190285055 [ 263.672284][ T7280] tipc: Disabling bearer [ 263.897373][ T7299] tipc: Started in network mode [ 263.897397][ T7299] tipc: Node identity 62b77d8ecace, cluster identity 4711 [ 263.897546][ T7299] tipc: Enabled bearer , priority 0 [ 264.052681][ T7301] syzkaller0: entered promiscuous mode [ 264.052702][ T7301] syzkaller0: entered allmulticast mode [ 264.089319][ T7294] tipc: Resetting bearer [ 264.630816][ T7294] tipc: Disabling bearer [ 267.853425][ T7348] tipc: Enabled bearer , priority 0 [ 267.868228][ T7348] tipc: Resetting bearer [ 268.009759][ T7347] tipc: Disabling bearer [ 268.449751][ T7350] tipc: Started in network mode [ 268.449774][ T7350] tipc: Node identity 9a3c2d9dd1fb, cluster identity 4711 [ 268.450218][ T7350] tipc: Enabled bearer , priority 0 [ 269.093163][ T7349] tipc: Disabling bearer [ 269.461247][ T31] tipc: Node number set to 1271344541 [ 270.209399][ T7379] tipc: Enabled bearer , priority 0 [ 270.210776][ T7379] syzkaller0: entered promiscuous mode [ 270.210801][ T7379] syzkaller0: entered allmulticast mode [ 270.590432][ T7378] tipc: Resetting bearer [ 270.826793][ T7398] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 270.826939][ T7378] tipc: Disabling bearer [ 271.505795][ C1] vkms_vblank_simulate: vblank timer overrun [ 271.534497][ C1] vkms_vblank_simulate: vblank timer overrun [ 271.582793][ C1] vkms_vblank_simulate: vblank timer overrun [ 271.819663][ C1] vkms_vblank_simulate: vblank timer overrun [ 272.617683][ C1] vkms_vblank_simulate: vblank timer overrun [ 273.190836][ T7413] tipc: Enabled bearer , priority 0 [ 273.203142][ T7413] syzkaller0: entered promiscuous mode [ 273.203172][ T7413] syzkaller0: entered allmulticast mode [ 273.320651][ T1229] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 273.439228][ T7411] tipc: Resetting bearer [ 273.471016][ T1229] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 273.471041][ T1229] usb 4-1: config 179 has no interface number 0 [ 273.471075][ T1229] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 10 [ 273.471094][ T1229] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 64 [ 273.471113][ T1229] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 273.471132][ T1229] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 273.471148][ T1229] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 273.472416][ T1229] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 273.472436][ T1229] usb 4-1: New USB device strings: Mfr=0, Product=16, SerialNumber=0 [ 273.472450][ T1229] usb 4-1: Product: syz [ 274.003815][ T7412] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 274.250599][ T7411] tipc: Disabling bearer [ 274.301884][ T9] tipc: Node number set to 2096746809 [ 274.381920][ T1229] xpad 4-1:179.65: probe with driver xpad failed with error -5 [ 274.646540][ C1] vkms_vblank_simulate: vblank timer overrun [ 274.726893][ T9] usb 4-1: USB disconnect, device number 3 [ 274.827599][ T7422] syzkaller0: entered promiscuous mode [ 274.827629][ T7422] syzkaller0: entered allmulticast mode [ 274.850825][ T7424] tipc: Enabled bearer , priority 0 [ 275.109680][ C1] vkms_vblank_simulate: vblank timer overrun [ 275.183046][ T7416] tipc: Resetting bearer [ 275.417492][ C1] vkms_vblank_simulate: vblank timer overrun [ 275.904684][ C1] vkms_vblank_simulate: vblank timer overrun [ 276.120655][ C1] vkms_vblank_simulate: vblank timer overrun [ 277.367745][ T7416] tipc: Disabling bearer [ 279.169382][ T7463] tipc: Enabled bearer , priority 0 [ 279.170444][ T7463] syzkaller0: entered promiscuous mode [ 279.170461][ T7463] syzkaller0: entered allmulticast mode [ 279.310253][ T7462] tipc: Resetting bearer [ 279.395567][ T7462] tipc: Disabling bearer [ 285.370852][ T7497] tipc: Enabled bearer , priority 0 [ 285.373746][ T7497] syzkaller0: entered promiscuous mode [ 285.373772][ T7497] syzkaller0: entered allmulticast mode [ 285.722049][ T7496] tipc: Resetting bearer [ 286.459859][ T7496] tipc: Disabling bearer [ 288.174519][ C1] vkms_vblank_simulate: vblank timer overrun [ 288.792083][ C1] vkms_vblank_simulate: vblank timer overrun [ 289.802582][ T7560] vivid-000: ================= START STATUS ================= [ 289.802598][ T7560] vivid-000: Radio HW Seek Mode: Bounded [ 289.802615][ T7560] vivid-000: Radio Programmable HW Seek: false [ 289.802628][ T7560] vivid-000: RDS Rx I/O Mode: Block I/O [ 289.802642][ T7560] vivid-000: Generate RBDS Instead of RDS: false [ 289.802656][ T7560] vivid-000: RDS Reception: true [ 289.802668][ T7560] vivid-000: RDS Program Type: 0 inactive [ 289.802685][ T7560] vivid-000: RDS PS Name: inactive [ 289.802701][ T7560] vivid-000: RDS Radio Text: inactive [ 289.802717][ T7560] vivid-000: RDS Traffic Announcement: false inactive [ 289.802733][ T7560] vivid-000: RDS Traffic Program: false inactive [ 289.802749][ T7560] vivid-000: RDS Music: false inactive [ 289.802765][ T7560] vivid-000: ================== END STATUS ================== [ 294.121852][ T7580] tipc: Enabled bearer , priority 0 [ 294.122858][ T7580] syzkaller0: entered promiscuous mode [ 294.122883][ T7580] syzkaller0: entered allmulticast mode [ 294.138762][ T7580] tipc: Resetting bearer [ 294.256398][ T7579] tipc: Resetting bearer [ 294.335304][ T7589] ======================================================= [ 294.335304][ T7589] WARNING: The mand mount option has been deprecated and [ 294.335304][ T7589] and is ignored by this kernel. Remove the mand [ 294.335304][ T7589] option from the mount to silence this warning. [ 294.335304][ T7589] ======================================================= [ 294.563537][ C1] vkms_vblank_simulate: vblank timer overrun [ 295.539799][ C1] vkms_vblank_simulate: vblank timer overrun [ 295.563833][ T5948] tipc: Node number set to 2826534286 [ 296.070220][ T7579] tipc: Disabling bearer [ 296.325933][ C1] vkms_vblank_simulate: vblank timer overrun [ 297.130954][ C1] vkms_vblank_simulate: vblank timer overrun [ 297.615882][ C1] vkms_vblank_simulate: vblank timer overrun [ 297.648758][ T7616] fuse: Bad value for 'fd' [ 297.649204][ C1] vkms_vblank_simulate: vblank timer overrun [ 298.148728][ C1] vkms_vblank_simulate: vblank timer overrun [ 301.056025][ T7634] comedi comedi0: No channels found! [ 302.749344][ T7645] syzkaller0: entered promiscuous mode [ 302.749365][ T7645] syzkaller0: entered allmulticast mode [ 305.429178][ T9] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 305.614907][ T7674] fuse: Bad value for 'fd' [ 306.600814][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 306.600854][ T9] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 306.600884][ T9] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 306.600900][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 306.662284][ T9] usb 4-1: config 0 descriptor?? [ 306.679538][ T9] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 308.314018][ T31] usb 4-1: USB disconnect, device number 4 [ 311.093473][ T7692] hub 2-0:1.0: USB hub found [ 311.096398][ T7692] hub 2-0:1.0: 1 port detected [ 313.619094][ T7715] netlink: 104 bytes leftover after parsing attributes in process `syz.3.543'. [ 314.709245][ T7718] fuse: Bad value for 'fd' [ 315.602377][ T9] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 316.279217][ T5121] Bluetooth: hci4: command 0x0405 tx timeout [ 322.417783][ T7769] fuse: Unknown parameter '0x0000000000000008' [ 325.614383][ [ 325.614383][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 325.614467][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 325.778210][ T5121] ================================================================== [ 325.778227][ T5121] BUG: KASAN: vmalloc-out-of-bounds in __list_del_entry_valid_or_report+0xb5/0x190 [ 325.778279][ T5121] Read of size 8 at addr ffffc9000da99008 by task kworker/u9:1/5121 [ 325.778297][ T5121] [ 325.778321][ T5121] CPU: 1 UID: 0 PID: 5121 Comm: kworker/u9:1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 325.778346][ T5121] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 325.778359][ T5121] Workqueue: hci2 hci_rx_work [ 325.778403][ T5121] Call Trace: [ 325.778415][ T5121] [ 325.778425][ T5121] dump_stack_lvl+0x189/0x250 [ 325.778461][ T5121] ? __pfx_dump_stack_lvl+0x10/0x10 [ 325.778487][ T5121] ? __pfx__printk+0x10/0x10 [ 325.778513][ T5121] ? _raw_spin_lock_irqsave+0xb3/0xf0 [ 325.778542][ T5121] ? __virt_addr_valid+0xdc/0x5c0 [ 325.778574][ T5121] ? __virt_addr_valid+0xdc/0x5c0 [ 325.778607][ T5121] print_report+0xca/0x240 [ 325.778637][ T5121] ? __list_del_entry_valid_or_report+0xb5/0x190 [ 325.778670][ T5121] kasan_report+0x118/0x150 [ 325.778702][ T5121] ? __list_del_entry_valid_or_report+0xb5/0x190 [ 325.778739][ T5121] __list_del_entry_valid_or_report+0xb5/0x190 [ 325.778774][ T5121] kcov_remote_start+0x2b0/0x6f0 [ 325.778806][ T5121] hci_rx_work+0x130/0xe80 [ 325.778844][ T5121] ? process_scheduled_works+0x9ef/0x17b0 [ 325.778876][ T5121] process_scheduled_works+0xade/0x17b0 [ 325.778914][ T5121] ? __pfx_process_scheduled_works+0x10/0x10 [ 325.778950][ T5121] worker_thread+0x8a0/0xda0 [ 325.778978][ T5121] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 325.779010][ T5121] ? __kthread_parkme+0x7b/0x200 [ 325.779043][ T5121] kthread+0x711/0x8a0 [ 325.779099][ T5121] ? __pfx_worker_thread+0x10/0x10 [ 325.779126][ T5121] ? __pfx_kthread+0x10/0x10 [ 325.779156][ T5121] ? rt_spin_unlock+0x150/0x200 [ 325.779178][ T5121] ? rt_spin_unlock+0x161/0x200 [ 325.779196][ T5121] ? __pfx_kthread+0x10/0x10 [ 325.779228][ T5121] ret_from_fork+0x4b9/0x870 [ 325.779255][ T5121] ? __pfx_ret_from_fork+0x10/0x10 [ 325.779284][ T5121] ? __switch_to_asm+0x39/0x70 [ 325.779312][ T5121] ? __switch_to_asm+0x33/0x70 [ 325.779340][ T5121] ? __pfx_kthread+0x10/0x10 [ 325.779372][ T5121] ret_from_fork_asm+0x1a/0x30 [ 325.779411][ T5121] [ 325.779419][ T5121] [ 325.779424][ T5121] The buggy address belongs to a vmalloc virtual mapping [ 325.779450][ T5121] Memory state around the buggy address: [ 325.779462][ T5121] ffffc9000da98f00: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 325.779477][ T5121] ffffc9000da98f80: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 325.779491][ T5121] >ffffc9000da99000: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 325.779507][ T5121] ^ [ 325.779518][ T5121] ffffc9000da99080: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 325.779532][ T5121] ffffc9000da99100: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 325.779543][ T5121] ================================================================== [ 325.781134][ T5121] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 325.781153][ T5121] CPU: 1 UID: 0 PID: 5121 Comm: kworker/u9:1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 325.781178][ T5121] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 325.781192][ T5121] Workqueue: hci2 hci_rx_work [ 325.781226][ T5121] Call Trace: [ 325.781234][ T5121] [ 325.781243][ T5121] dump_stack_lvl+0x99/0x250 [ 325.781270][ T5121] ? __asan_memcpy+0x40/0x70 [ 325.781294][ T5121] ? __pfx_dump_stack_lvl+0x10/0x10 [ 325.781320][ T5121] ? __pfx__printk+0x10/0x10 [ 325.781353][ T5121] vpanic+0x237/0x6d0 [ 325.781373][ T5121] ? __pfx_vpanic+0x10/0x10 [ 325.781392][ T5121] ? preempt_schedule+0xae/0xc0 [ 325.781415][ T5121] ? __pfx_preempt_schedule+0x10/0x10 [ 325.781450][ T5121] panic+0xb9/0xc0 [ 325.781470][ T5121] ? __pfx_panic+0x10/0x10 [ 325.781492][ T5121] ? _raw_spin_unlock_irqrestore+0xfd/0x110 [ 325.781523][ T5121] ? __list_del_entry_valid_or_report+0xb5/0x190 [ 325.781556][ T5121] check_panic_on_warn+0x89/0xb0 [ 325.781590][ T5121] ? __list_del_entry_valid_or_report+0xb5/0x190 [ 325.781623][ T5121] end_report+0x78/0x160 [ 325.781652][ T5121] kasan_report+0x129/0x150 [ 325.781683][ T5121] ? __list_del_entry_valid_or_report+0xb5/0x190 [ 325.781722][ T5121] __list_del_entry_valid_or_report+0xb5/0x190 [ 325.781756][ T5121] kcov_remote_start+0x2b0/0x6f0 [ 325.781788][ T5121] hci_rx_work+0x130/0xe80 [ 325.781826][ T5121] ? process_scheduled_works+0x9ef/0x17b0 [ 325.781853][ T5121] process_scheduled_works+0xade/0x17b0 [ 325.781896][ T5121] ? __pfx_process_scheduled_works+0x10/0x10 [ 325.781932][ T5121] worker_thread+0x8a0/0xda0 [ 325.781961][ T5121] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 325.781992][ T5121] ? __kthread_parkme+0x7b/0x200 [ 325.782026][ T5121] kthread+0x711/0x8a0 [ 325.782059][ T5121] ? __pfx_worker_thread+0x10/0x10 [ 325.782086][ T5121] ? __pfx_kthread+0x10/0x10 [ 325.782115][ T5121] ? rt_spin_unlock+0x150/0x200 [ 325.782137][ T5121] ? rt_spin_unlock+0x161/0x200 [ 325.782155][ T5121] ? __pfx_kthread+0x10/0x10 [ 325.782188][ T5121] ret_from_fork+0x4b9/0x870 [ 325.782215][ T5121] ? __pfx_ret_from_fork+0x10/0x10 [ 325.782244][ T5121] ? __switch_to_asm+0x39/0x70 [ 325.782273][ T5121] ? __switch_to_asm+0x33/0x70 [ 325.782300][ T5121] ? __pfx_kthread+0x10/0x10 [ 325.782332][ T5121] ret_from_fork_asm+0x1a/0x30 [ 325.782372][ T5121] [ 325.782723][ T5121] Kernel Offset: disabled