last executing test programs: 3m17.111397977s ago: executing program 3 (id=4): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000002b80)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000300)="99b13137321d3a5fcf0e9741d0ad6080cd1665742669c6c14e0cd2e278798c00024c8afcbed42156cb26c1ccde413a1ca0ce79c97d2530cf78a9c3cd5d407b6068c8529729002b131c37ac80ab7e", 0x4e}, {&(0x7f0000001900)="0015ea625040ef6f7a102f60a3ff1a96be32501c298445a33ea182e2f6849a89af9ecef8e84bbdb8e9ba03ab7ae011d02be50e40fbe76170d6cbf1ccad73997fd95b92ce03b673b3e57c8432f5417b097360d0e637fad2c17dc1e265f7f04aeabce00a17c9965277b3dd648b515b5a1e45628ac3bec55c", 0x77}], 0x2}}], 0x1, 0x805) shutdown(r0, 0x1) sendmsg$sock(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)}, 0x8000) 3m16.524004005s ago: executing program 3 (id=10): r0 = socket(0x10, 0x80002, 0x0) r1 = io_uring_setup(0x5, &(0x7f0000000040)={0x0, 0x3c1d, 0xc000, 0x3, 0x38}) socket$rxrpc(0x21, 0x2, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x0) sendmsg$inet(r1, 0x0, 0x40088) openat$kvm(0xffffffffffffff9c, 0x0, 0x280282, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002700)=""/102392, 0x18ff8) r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r3, &(0x7f0000000180)={0x1a, 0x0, 0xf9, 0x8, 0x0, 0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfd9fd, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x10000}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd24, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {0xb, 0x9}, {}, {0xfff2, 0x7}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x20004804) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0) 2m58.550807066s ago: executing program 32 (id=10): r0 = socket(0x10, 0x80002, 0x0) r1 = io_uring_setup(0x5, &(0x7f0000000040)={0x0, 0x3c1d, 0xc000, 0x3, 0x38}) socket$rxrpc(0x21, 0x2, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x0) sendmsg$inet(r1, 0x0, 0x40088) openat$kvm(0xffffffffffffff9c, 0x0, 0x280282, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002700)=""/102392, 0x18ff8) r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r3, &(0x7f0000000180)={0x1a, 0x0, 0xf9, 0x8, 0x0, 0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfd9fd, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x10000}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd24, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {0xb, 0x9}, {}, {0xfff2, 0x7}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x20004804) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0) 2m53.498996093s ago: executing program 1 (id=34): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex_waitv(&(0x7f0000001080)=[{0x3, &(0x7f0000001040)=0x3, 0x82}], 0x1, 0x0, 0x0, 0x1) prctl$PR_MCE_KILL(0x4e, 0x1, 0x2) 2m51.888169428s ago: executing program 1 (id=36): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(0xffffffffffffffff, 0x0, 0x32, 0x0, 0x0) landlock_create_ruleset(0x0, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000013bc0)=[{{0x0, 0x0, &(0x7f0000001b00)=[{&(0x7f0000000700)="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", 0xd4e}], 0x1, 0x0, 0x0, 0x40000}}], 0x1, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) ioctl$TCSETS(r2, 0x5402, &(0x7f0000000000)={0xfffffffc, 0xb, 0x0, 0xfffffffc, 0x7f, "db8f2d2b3b7596160c6981acf8805944823a7f"}) write$binfmt_aout(r2, &(0x7f0000000400)=ANY=[], 0xff2e) r3 = openat$uhid(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$UHID_CREATE2(r3, 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x83, "00000000000000000000ffff00"}) ioctl$TCSETS(r2, 0x5402, &(0x7f0000000080)={0x0, 0xfffffffd, 0x0, 0x6, 0x1, "e315bc1cc24ff7b7cdb242e1ff0aa6905446b3"}) r4 = syz_open_pts(r2, 0x0) r5 = dup3(r4, r2, 0x0) read$FUSE(r5, &(0x7f0000003f80)={0x2020}, 0x2020) read$usbmon(r5, &(0x7f0000000340)=""/126, 0x7e) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) r6 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/mcfilter6\x00') preadv(r6, &(0x7f0000001ac0)=[{&(0x7f0000000580)=""/4096, 0x1000}], 0x1, 0x5f, 0xfffffffc) 2m44.507324753s ago: executing program 1 (id=49): bind$inet6(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x1000000288}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x804e20}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = fsopen(&(0x7f0000000100)='ocfs2_dlmfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) fchdir(r3) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000000}, 0xc081) openat$tun(0xffffffffffffff9c, 0x0, 0x48241, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) 2m43.330007363s ago: executing program 1 (id=50): socket$netlink(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000100000000000000040000850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) r1 = socket$inet(0x2, 0x80000, 0xfffffffd) bind$inet(r1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x10a) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() socket$nl_route(0x10, 0x3, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x1015a, 0x10002, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xb, 0x0, 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000340), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='dyn']) chdir(&(0x7f00000000c0)='./file0\x00') mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000000c0), 0x1204001, &(0x7f00000011c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}, 0x3a}], [], 0x2f}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) getdents64(r5, &(0x7f0000000380)=""/141, 0x8d) 2m41.622817275s ago: executing program 1 (id=52): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r3, 0x800448d3, &(0x7f00000004c0)) 2m40.518310071s ago: executing program 1 (id=55): openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r2, 0xc4c85512, &(0x7f0000000280)={{0x6, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x40000000000, 0xffffffffffffffff, 0xffffffefffffffff, 0x0, 0x4, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffeffbfffffff, 0x0, 0x0, 0x0, 0x3, 0x80000000, 0x3, 0x0, 0x0, 0x4, 0x0, 0x6, 0x0, 0x40, 0x0, 0x1, 0x100200000, 0xb, 0x6, 0x0, 0x0, 0x0, 0x9, 0x0, 0x10000, 0x1000, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x7, 0x10000, 0x7785, 0x0, 0x4, 0x4, 0x8, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x80000000000, 0x0, 0x4, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x1000000000, 0x0, 0x80000000000000, 0x0, 0xfffffffffffffffe, 0x9, 0x0, 0xfffffffffffffffe, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x4, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x100, 0x81, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x2, 0x100000000000, 0x0, 0x3, 0x2, 0x0, 0x7, 0xc0c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xffffffffffeffffc, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x80]}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt(r3, 0x1, 0x10000000000009, &(0x7f00000000c0)="f5c89e1e", 0x4) connect$inet6(r3, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000001c0)=ANY=[@ANYRES32=0x0, @ANYRES32, @ANYBLOB, @ANYRES32=r1, @ANYBLOB, @ANYRES64=0x0], 0x20) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_ifreq(r4, 0x89f0, &(0x7f0000000040)={'bond0\x00', @ifru_names='lo\x00'}) setsockopt$inet6_tcp_int(r3, 0x6, 0x4, &(0x7f0000000040)=0x2, 0x4) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_ro(r5, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0) preadv(r6, &(0x7f0000000240)=[{&(0x7f0000000180)=""/140, 0x8c}], 0x1, 0x1000, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r2, 0xc1105517, &(0x7f0000000200)={{0x4, 0x2, 0x75b, 0xb8a, 'syz1\x00', 0xfb10}, 0x1, 0x20, 0x9, 0x0, 0x1, 0x8, 'syz0\x00', &(0x7f0000000040)=['\x00'], 0x1}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) fcntl$setsig(r7, 0xa, 0x12) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000780)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) ioctl$RTC_EPOCH_SET(r8, 0x4008700e, 0x8) fcntl$setown(r7, 0x8, 0x0) 2m39.802482718s ago: executing program 33 (id=55): openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r2, 0xc4c85512, &(0x7f0000000280)={{0x6, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x40000000000, 0xffffffffffffffff, 0xffffffefffffffff, 0x0, 0x4, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffeffbfffffff, 0x0, 0x0, 0x0, 0x3, 0x80000000, 0x3, 0x0, 0x0, 0x4, 0x0, 0x6, 0x0, 0x40, 0x0, 0x1, 0x100200000, 0xb, 0x6, 0x0, 0x0, 0x0, 0x9, 0x0, 0x10000, 0x1000, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x7, 0x10000, 0x7785, 0x0, 0x4, 0x4, 0x8, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x80000000000, 0x0, 0x4, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x1000000000, 0x0, 0x80000000000000, 0x0, 0xfffffffffffffffe, 0x9, 0x0, 0xfffffffffffffffe, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x4, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x100, 0x81, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x2, 0x100000000000, 0x0, 0x3, 0x2, 0x0, 0x7, 0xc0c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xffffffffffeffffc, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x80]}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt(r3, 0x1, 0x10000000000009, &(0x7f00000000c0)="f5c89e1e", 0x4) connect$inet6(r3, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000001c0)=ANY=[@ANYRES32=0x0, @ANYRES32, @ANYBLOB, @ANYRES32=r1, @ANYBLOB, @ANYRES64=0x0], 0x20) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_ifreq(r4, 0x89f0, &(0x7f0000000040)={'bond0\x00', @ifru_names='lo\x00'}) setsockopt$inet6_tcp_int(r3, 0x6, 0x4, &(0x7f0000000040)=0x2, 0x4) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_ro(r5, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0) preadv(r6, &(0x7f0000000240)=[{&(0x7f0000000180)=""/140, 0x8c}], 0x1, 0x1000, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r2, 0xc1105517, &(0x7f0000000200)={{0x4, 0x2, 0x75b, 0xb8a, 'syz1\x00', 0xfb10}, 0x1, 0x20, 0x9, 0x0, 0x1, 0x8, 'syz0\x00', &(0x7f0000000040)=['\x00'], 0x1}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) fcntl$setsig(r7, 0xa, 0x12) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000780)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) ioctl$RTC_EPOCH_SET(r8, 0x4008700e, 0x8) fcntl$setown(r7, 0x8, 0x0) 2m8.887210415s ago: executing program 0 (id=99): socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000400)=@abs={0x0, 0x0, 0x2}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, &(0x7f0000000280)={0x60, 0x1, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, &(0x7f0000000040)=[{0x6, 0x0, 0xb183}], 0x1, 0x3, 0x79dc8089b2c841c4, 0x0, 0xa5, 0x5c}) io_submit(0x0, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x1e1a00, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r5, 0xc048aec8, &(0x7f0000000080)={0x1, 0x0, @pic={0x0, 0x81, 0x9, 0x5, 0x3c, 0xfd, 0x5, 0x9, 0x4, 0xfc, 0xff, 0xf9, 0x55, 0x9, 0xf7, 0x7}}) r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r6, 0x4048aecb, &(0x7f0000000080)) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'bridge_slave_1\x00', &(0x7f0000000240)=@ethtool_rxfh={0x46, 0x8, 0x4, 0x3629, 0x6, "59d366", 0x400, [0x1, 0x40]}}) 2m7.308908225s ago: executing program 0 (id=101): sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r3, 0x800448d3, &(0x7f00000004c0)) 2m5.230356198s ago: executing program 0 (id=105): openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x81, 0x0, 0x9, 0xfffffffffffffffd, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000200)={0x48}) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000140)={0xc}) add_key$keyring(&(0x7f0000000400), 0x0, 0x0, 0x0, 0xfffffffffffffffe) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB], 0xd8}, 0x1, 0x0, 0x0, 0x4044001}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000540)={0x14, 0x0, 0x2, 0x101, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) add_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000300)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), r4) syz_emit_ethernet(0x10b, &(0x7f0000000440)=ANY=[@ANYBLOB="aaaaaaaaaaaa0000000000050011fcfc505230d81a8ddebea88d38fe418bd61b7b40efc8079473e76b80f89c2fb79803a7091c617f8f0476cceee025aaadaa29fb8bcfbc0047e0876d5388f3e32aca152635384fa9f371f5c49784e0c00ed4684fcf096bef712253fa3e8273911dfcef6d389ad4e7af204c96cc1541305078b7cb86f29e7ab25d0182da772f17ad4178f2a23c115f1e6450865a9eb53604c795d1febf02bd35bb1369296594bd997e7ab532e1fed2ee31d50d0276627d24d4b7270e95ee3b787247c892dfab7b9b66cb881fc1"], 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x50, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x4004000}, 0x40080) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, 0x4, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) 2m1.678999065s ago: executing program 0 (id=110): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x10a) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x1015a, 0x10002, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000340), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='dyn']) chdir(&(0x7f00000000c0)='./file0\x00') mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000000c0), 0x1204001, &(0x7f00000011c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}, 0x3a}], [], 0x2f}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) getdents64(r2, &(0x7f0000000380)=""/141, 0x8d) 1m56.783536382s ago: executing program 0 (id=114): unshare(0x22020400) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={r0, r1, 0x26, 0x0, @void}, 0x10) 1m49.39015284s ago: executing program 0 (id=120): socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000400)=@abs={0x0, 0x0, 0x2}, 0x6e) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, &(0x7f0000000280)={0x60, 0x1, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, &(0x7f0000000040)=[{0x6, 0x0, 0xb183}], 0x1, 0x3, 0x79dc8089b2c841c4, 0x0, 0xa5, 0x5c}) io_submit(0x0, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x1e1a00, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r5, 0xc048aec8, &(0x7f0000000080)={0x1, 0x0, @pic={0x0, 0x81, 0x9, 0x5, 0x3c, 0xfd, 0x5, 0x9, 0x4, 0xfc, 0xff, 0xf9, 0x55, 0x9, 0xf7, 0x7}}) r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r6, 0x4048aecb, &(0x7f0000000080)) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'bridge_slave_1\x00', &(0x7f0000000240)=@ethtool_rxfh={0x46, 0x8, 0x4, 0x3629, 0x6, "59d366", 0x400, [0x1, 0x40]}}) 1m48.243783039s ago: executing program 34 (id=120): socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000400)=@abs={0x0, 0x0, 0x2}, 0x6e) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, &(0x7f0000000280)={0x60, 0x1, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, &(0x7f0000000040)=[{0x6, 0x0, 0xb183}], 0x1, 0x3, 0x79dc8089b2c841c4, 0x0, 0xa5, 0x5c}) io_submit(0x0, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x1e1a00, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r5, 0xc048aec8, &(0x7f0000000080)={0x1, 0x0, @pic={0x0, 0x81, 0x9, 0x5, 0x3c, 0xfd, 0x5, 0x9, 0x4, 0xfc, 0xff, 0xf9, 0x55, 0x9, 0xf7, 0x7}}) r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r6, 0x4048aecb, &(0x7f0000000080)) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'bridge_slave_1\x00', &(0x7f0000000240)=@ethtool_rxfh={0x46, 0x8, 0x4, 0x3629, 0x6, "59d366", 0x400, [0x1, 0x40]}}) 8.73147553s ago: executing program 4 (id=208): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x44080) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=@newqdisc={0x3c, 0x24, 0xd0f, 0x70bd26, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xfff2, 0xa}}, [@qdisc_kind_options=@q_codel={{0xa}, {0xc, 0x2, [@TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0xfffffffc}]}}]}, 0x3c}}, 0x800) r3 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_script(r3, &(0x7f00000000c0), 0x28) 8.173040252s ago: executing program 4 (id=209): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) gettid() sendmsg$unix(r0, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x800) epoll_create1(0x0) epoll_create1(0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x8) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) mount$overlay(0x0, 0x0, 0x0, 0x2814, 0x0) mknodat$loop(0xffffffffffffffff, &(0x7f0000001600)='./file1\x00', 0x40, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000080)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x300, 0x2, 0x1, 0x0, 0x6, 0x8}, 0x20) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x6d1cb49ada2c127b, 0x59032, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400010bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_procfs(0x0, &(0x7f0000000240)='fd/3\x00') r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00'}, 0x10) 5.276147388s ago: executing program 2 (id=212): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_setup(0x23a, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100, 0x0, 0x1}, &(0x7f0000000100), &(0x7f00000000c0)) sendmsg$NL80211_CMD_SET_QOS_MAP(0xffffffffffffffff, &(0x7f0000001680)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001640)={&(0x7f00000016c0)=ANY=[@ANYRES16=0x0, @ANYBLOB="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"], 0x130}, 0x1, 0x0, 0x0, 0x4000}, 0x8001) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x2, 0xd, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0xff, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @private1}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @empty}}, @sadb_x_policy={0x8, 0x12, 0x2, 0x2, 0x0, 0x0, 0x0, {0x6, 0x2b, 0x2, 0x3, 0x0, 0x2, 0x0, @in=@loopback, @in=@private=0xa010100}}, @sadb_lifetime={0x4, 0x4}]}, 0xc0}}, 0x0) unshare(0x22020600) pwrite64(r2, &(0x7f00000000c0)="d4", 0x1, 0x7fffffffffffffff) recvmmsg(r0, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000640)=""/4096, 0x1000}], 0x1}, 0x7fff}], 0x1, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmmsg$inet(r4, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="3c0000001000210400"/20, @ANYRES32=0x0, @ANYBLOB="00800000000000001c0012800b04010065727370616e00000c0002800800070000000000"], 0x3c}}, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000040)={'veth0_virt_wifi\x00', &(0x7f0000000000)=@ethtool_eee={0x44, 0x5, 0xff, 0x1440d037, 0x6, 0xaa7c, 0x2, 0x80000006, [0x3]}}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x3) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) r6 = syz_io_uring_setup(0x88d, &(0x7f00000005c0)={0x0, 0x1423, 0x0, 0x2, 0xbfdffffc}, &(0x7f0000000200)=0x0, &(0x7f0000000280)=0x0) getsockopt$CAN_RAW_LOOPBACK(r5, 0x65, 0x3, &(0x7f00000003c0), &(0x7f0000000400)=0x4) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r9 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r9}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) nanosleep(&(0x7f00000001c0)={0x0, 0x3938700}, &(0x7f0000000380)) syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x11, 0x0, @fd, 0x0, 0x0, 0x0, {0x40}}) io_uring_enter(r6, 0x75fa, 0xe475, 0x0, 0x0, 0x0) 3.837879071s ago: executing program 4 (id=213): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0xb49, 0x6, 0x8, 0x0, 0x3}, 0x0) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_IOVA_RANGES(r2, 0x3b84, 0x0) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r2, 0x3b82, &(0x7f0000000180)={0x18, r3, 0x0, 0x0, &(0x7f00000001c0)}) ioctl$IOMMU_IOAS_UNMAP$ALL(r2, 0x3b86, &(0x7f0000000280)={0x18, r3}) ioctl$IOMMU_IOAS_MAP(r2, 0x3b85, &(0x7f00000002c0)={0x28, 0x4, 0x0, 0x0, &(0x7f0000000300)='LLLLLLLLLLLLLLLLLLLLLLLLL', 0x19, 0x2}) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$SNDRV_PCM_IOCTL_CHANNEL_INFO(0xffffffffffffffff, 0x80184132, &(0x7f0000000040)) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xb007}, 0x4) close(r4) ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, 0x0) ioctl$IOMMU_OPTION$IOMMU_OPTION_RLIMIT_MODE(r2, 0x3b87, 0x0) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r2, 0x3ba0, &(0x7f00000006c0)={0x48, 0x1, r3, 0x0, 0x1000, 0x2000}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r2, 0x3ba0, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, &(0x7f00000007c0)={0x22, 0x7, r3, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x1000, 0x1004000}) 3.7096222s ago: executing program 2 (id=214): r0 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x400, 0x3, 0x190}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r0, 0x5a00, 0xbc03, 0x6, 0x0, 0x0) 3.13054833s ago: executing program 2 (id=215): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000200)={0x18, 0x0, &(0x7f00000002c0)=[@increfs, @clear_death={0x400c630f, 0x2}], 0x0, 0x0, 0x0}) 2.735608694s ago: executing program 2 (id=216): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x44080) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=@newqdisc={0x3c, 0x24, 0xd0f, 0x70bd26, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xfff2, 0xa}}, [@qdisc_kind_options=@q_codel={{0xa}, {0xc, 0x2, [@TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0xfffffffc}]}}]}, 0x3c}}, 0x800) r3 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_script(r3, &(0x7f00000000c0), 0x28) 2.400937624s ago: executing program 2 (id=217): io_setup(0x30, &(0x7f0000000600)=0x0) dup(0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x1e, r3, 0x0, 0x0, 0x1) sendmsg(r2, 0x0, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x60240) socket(0x10, 0x3, 0x6) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4810}, 0x0) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r6, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@newqdisc={0x90, 0x24, 0xf0b, 0x20, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x10}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x60, 0x2, {{0x2, [0x0, 0x0, 0x1, 0x0, 0x0, 0x4, 0x20], 0x0, [0x4, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3dc], [0x0, 0x4]}, [@TCA_MQPRIO_SHAPER={0x6}]}}}]}, 0x90}}, 0x20000000) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r4, 0x0) r7 = syz_open_dev$amidi(&(0x7f0000000140), 0x2, 0x181) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r7, 0x40045731, &(0x7f0000000500)) r8 = socket$netlink(0x10, 0x3, 0x4) epoll_create1(0xc247a82949ce9376) writev(r8, &(0x7f0000000100)=[{&(0x7f0000000900)="580000001400192360834b80043f679a10ff3d420000000001000000f61bcdf1194ad353e9cc853a804824cabece4b381effffffff0057e792945f80000000050028925aaa000000c600000004002e499391db0926f27805", 0x58}], 0x1) io_submit(r0, 0x1, &(0x7f0000000180)=[&(0x7f0000000140)={0x0, 0x0, 0x97, 0x7, 0x0, 0xffffffffffffffff, 0x0}]) ioctl$IOC_WATCH_QUEUE_SET_FILTER(0xffffffffffffffff, 0x5761, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000"]) 1.265640502s ago: executing program 4 (id=218): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) gettid() sendmsg$unix(r0, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x800) r1 = epoll_create1(0x0) r2 = epoll_create1(0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f00000003c0)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00', r4}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000100)={0xa000000d}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000400)={0xa}) 124.544843ms ago: executing program 4 (id=219): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(0x0, r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)={0x19c, r1, 0xe701ac47a3d23ecd, 0x70bd2c, 0x25dfdbff, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_DOMAIN={0x17e, 0x1, 'C\xec\xf8\xa0w\x15|\xd8\xbcs\xe1\xb93\x14\xcd\xcb\xb6\xb9\xbb\x84\xe5\xbc\xdb\x7f\x9a\xf2\xea\xcc\x91:v@\xe83-\x1d\xaagQl\x7f\tKt\fc\x1f\x17]\xd5\xd0\xf0\xa8\xeb\xd2g\x92\x04\x02\v\x00\x91d\xe6,\xd3@I\x17\xf3\xbeeI8bz\xdb\xb8s0\xad\xc6\xbf/*\xb6(o\x91t\x12\x93U6\xf4@n\xdc\xdc\x8a7y\x81FY\xbe\xbbc\xd2\xc3\x01\xa5\xe2V\x8c\xb3im~\xd2V\xdaG\xbdbF\xc8n\x86\xac\x9c\xfb\xda\xe2&\"\xb4:\x13\xe9\tc\x85\xb4\xcb\x17\xbfm\x846\xe7\x7fp\x9eCdb\xad;\xa2\xacs\xbf6\xe8\xe3Xg3&\xe2 \xd6\n\x9d=~<\x93/\xaf\x89\x06+\x96]\xb5+\xee\xff8^D*\xdb\xb8\xd8t\x80\xd4\x8fK=40\xe8R\x83p,J\xca\x85\xcb\xfa:\xdb\xda\x05\xed\xc8\xad\xa2\xfc0C\x9e3\x8e*\xae\x91\xa4\xc7)\xc0\x87\x9b\xee~\xdb\xac\x03\x90\xb1\x05\x81\xb1j\xfaO`\xa7\xa0\xeb\x83\x13 \xc8\x98\xdb\v \x95\x8eD\xc3\xc6:\xcc%\x88\xc7\xa5\xe5\xfc\xccl\x96F_\x92\xa2\xc3\xea@\"\xb1\x1b`o~B\xb4W\xd8\v\xabCBL\x81A\x92D\xd5{K\xf0\xd5\x91\n\x94\x9b\xd9\xdb2E\\\xb1\x90\xf1\xfc\xc1}\x96\xf4\xba3g\xc8\xf7j\xbc\xf1\x11\xe3\x05\xean9M\xeb&\xd2\xdf\xbe\xa1\xe8[\x91\xa5\x90uX\xd0IH!\xe3\x8a9k\x94\xc8\xde\xea\xc6^\x96\xceV\xb2\xcba\x8b\xbc\xe9'}]}, 0x19c}, 0x1, 0x0, 0x0, 0x2}, 0x4000840) 123.33111ms ago: executing program 2 (id=220): r0 = gettid() prlimit64(r0, 0x0, &(0x7f0000000000)={0x8001, 0x2}, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) socket$nl_netfilter(0x10, 0x3, 0xc) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) ioctl$FIOCLEX(0xffffffffffffffff, 0x5451) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000002000)=""/102400, 0x19000) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r4) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) read$hidraw(r5, &(0x7f0000002380)=""/93, 0xfdef) syz_pidfd_open(r0, 0x0) pselect6(0x40, &(0x7f0000000100), 0x0, &(0x7f0000000240)={0x1f}, 0x0, 0x0) write$binfmt_script(r6, 0x0, 0x0) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESOCT, @ANYRESDEC=0x0]) r8 = syz_open_dev$dri(&(0x7f00000003c0), 0x1, 0x80000) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r8, 0xc04064a0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000440)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r8, 0xc05064a7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0), 0x0, 0x0, 0x0, 0x0, 0x0, r9}) bind$can_j1939(r1, &(0x7f0000000100)={0x1d, r2, 0x0, {0x1, 0x0, 0x4}, 0x1}, 0x18) sendmsg$can_j1939(r1, &(0x7f0000001680)={&(0x7f0000001700)={0x1d, r2, 0x0, {0x1, 0x1, 0x3}, 0x1fe}, 0x18, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x24000005) 0s ago: executing program 4 (id=221): keyctl$dh_compute(0x17, 0x0, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000100), 0x2) r4 = memfd_create(&(0x7f0000000340)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\xdenJ\xeb\x87\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38\x14\xcb\xfa\xb3j\x92\f\xe0\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf0\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x2) ftruncate(r4, 0xffff) fcntl$addseals(r4, 0x409, 0x7) r5 = ioctl$UDMABUF_CREATE(r3, 0x40187542, &(0x7f0000000140)={r4, 0x1, 0x0, 0x4000}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000007, 0x11, r5, 0x0) read(0xffffffffffffffff, 0x0, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r1, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.31' (ED25519) to the list of known hosts. [ 84.428871][ T5822] cgroup: Unknown subsys name 'net' [ 84.670767][ T5822] cgroup: Unknown subsys name 'cpuset' [ 84.705262][ T5822] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 86.689490][ T992] cfg80211: failed to load regulatory.db [ 86.857788][ T5822] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 90.126473][ T5843] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 90.136983][ T5851] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 90.142860][ T5851] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 90.143792][ T5851] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 90.150260][ T5851] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 90.151256][ T5851] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 90.195767][ T5853] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 90.223946][ T5852] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 90.225036][ T5853] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 90.226178][ T5853] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 90.232689][ T5852] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 90.237031][ T5852] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 90.239294][ T5852] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 90.241220][ T5852] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 90.241678][ T5852] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 90.243098][ T5852] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 90.243541][ T5852] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 90.251206][ T5854] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 90.254651][ T5854] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 90.255997][ T5854] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 90.275694][ T5848] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 90.280162][ T5848] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 90.324846][ T5848] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 90.389151][ T5848] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 90.390150][ T5848] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 91.495332][ T5834] chnl_net:caif_netlink_parms(): no params data found [ 91.551542][ T5835] chnl_net:caif_netlink_parms(): no params data found [ 91.581694][ T5847] chnl_net:caif_netlink_parms(): no params data found [ 91.634143][ T5833] chnl_net:caif_netlink_parms(): no params data found [ 91.987607][ T5842] chnl_net:caif_netlink_parms(): no params data found [ 92.286329][ T5153] Bluetooth: hci1: command tx timeout [ 92.364720][ T5153] Bluetooth: hci2: command tx timeout [ 92.364787][ T5848] Bluetooth: hci3: command tx timeout [ 92.365015][ T5153] Bluetooth: hci4: command tx timeout [ 92.444564][ T5838] Bluetooth: hci0: command tx timeout [ 92.634156][ T5834] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.644120][ T5834] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.645339][ T5834] bridge_slave_0: entered allmulticast mode [ 92.648603][ T5834] bridge_slave_0: entered promiscuous mode [ 92.920885][ T5834] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.920987][ T5834] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.921192][ T5834] bridge_slave_1: entered allmulticast mode [ 92.923181][ T5834] bridge_slave_1: entered promiscuous mode [ 92.927455][ T5835] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.927624][ T5835] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.928007][ T5835] bridge_slave_0: entered allmulticast mode [ 92.931535][ T5835] bridge_slave_0: entered promiscuous mode [ 92.937669][ T5847] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.937845][ T5847] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.938179][ T5847] bridge_slave_0: entered allmulticast mode [ 92.941888][ T5847] bridge_slave_0: entered promiscuous mode [ 93.167335][ T5835] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.167489][ T5835] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.167699][ T5835] bridge_slave_1: entered allmulticast mode [ 93.170996][ T5835] bridge_slave_1: entered promiscuous mode [ 93.176494][ T5847] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.176662][ T5847] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.176906][ T5847] bridge_slave_1: entered allmulticast mode [ 93.180368][ T5847] bridge_slave_1: entered promiscuous mode [ 93.286350][ T5833] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.286499][ T5833] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.286697][ T5833] bridge_slave_0: entered allmulticast mode [ 93.289670][ T5833] bridge_slave_0: entered promiscuous mode [ 93.728155][ T5833] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.728398][ T5833] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.728646][ T5833] bridge_slave_1: entered allmulticast mode [ 93.731723][ T5833] bridge_slave_1: entered promiscuous mode [ 93.738998][ T5834] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.975518][ T5842] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.975668][ T5842] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.975877][ T5842] bridge_slave_0: entered allmulticast mode [ 93.978184][ T5842] bridge_slave_0: entered promiscuous mode [ 94.069097][ T5834] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 94.072691][ T5835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 94.079041][ T5847] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 94.080650][ T5842] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.080800][ T5842] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.081008][ T5842] bridge_slave_1: entered allmulticast mode [ 94.083632][ T5842] bridge_slave_1: entered promiscuous mode [ 94.250219][ T5835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 94.253146][ T5847] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 94.348031][ T5833] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 94.364535][ T5838] Bluetooth: hci1: command tx timeout [ 94.444616][ T5838] Bluetooth: hci3: command tx timeout [ 94.444655][ T5838] Bluetooth: hci4: command tx timeout [ 94.444681][ T5838] Bluetooth: hci2: command tx timeout [ 94.534437][ T5153] Bluetooth: hci0: command tx timeout [ 94.702750][ T5833] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 94.706160][ T5834] team0: Port device team_slave_0 added [ 94.869810][ T5842] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 94.940202][ T5834] team0: Port device team_slave_1 added [ 95.188803][ T5835] team0: Port device team_slave_0 added [ 95.191436][ T5847] team0: Port device team_slave_0 added [ 95.198368][ T5842] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 95.348351][ T5835] team0: Port device team_slave_1 added [ 95.350906][ T5847] team0: Port device team_slave_1 added [ 95.422158][ T5833] team0: Port device team_slave_0 added [ 95.709577][ T5833] team0: Port device team_slave_1 added [ 95.711611][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 95.711631][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.711658][ T5834] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 95.891293][ T5842] team0: Port device team_slave_0 added [ 95.959589][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 95.959608][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.959628][ T5834] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 95.960776][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 95.960790][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.960809][ T5835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 95.962060][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 95.962074][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.962102][ T5847] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 96.097646][ T5842] team0: Port device team_slave_1 added [ 96.191744][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 96.191766][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 96.191795][ T5835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 96.193103][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 96.193118][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 96.193137][ T5847] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 96.429747][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 96.429763][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 96.429783][ T5833] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 96.446068][ T5153] Bluetooth: hci1: command tx timeout [ 96.524696][ T5153] Bluetooth: hci2: command tx timeout [ 96.524734][ T5153] Bluetooth: hci4: command tx timeout [ 96.524746][ T5838] Bluetooth: hci3: command tx timeout [ 96.577957][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 96.577977][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 96.578006][ T5833] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 96.589278][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 96.589300][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 96.589331][ T5842] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 96.604401][ T5848] Bluetooth: hci0: command tx timeout [ 96.740649][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 96.740673][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 96.740703][ T5842] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 97.016731][ T5834] hsr_slave_0: entered promiscuous mode [ 97.018689][ T5834] hsr_slave_1: entered promiscuous mode [ 97.275719][ T5835] hsr_slave_0: entered promiscuous mode [ 97.277206][ T5835] hsr_slave_1: entered promiscuous mode [ 97.278304][ T5835] debugfs: 'hsr0' already exists in 'hsr' [ 97.278448][ T5835] Cannot create hsr debugfs directory [ 97.307175][ T5847] hsr_slave_0: entered promiscuous mode [ 97.308808][ T5847] hsr_slave_1: entered promiscuous mode [ 97.309763][ T5847] debugfs: 'hsr0' already exists in 'hsr' [ 97.309790][ T5847] Cannot create hsr debugfs directory [ 97.472053][ T5833] hsr_slave_0: entered promiscuous mode [ 97.473169][ T5833] hsr_slave_1: entered promiscuous mode [ 97.473858][ T5833] debugfs: 'hsr0' already exists in 'hsr' [ 97.473887][ T5833] Cannot create hsr debugfs directory [ 97.916471][ T5842] hsr_slave_0: entered promiscuous mode [ 97.917595][ T5842] hsr_slave_1: entered promiscuous mode [ 97.918283][ T5842] debugfs: 'hsr0' already exists in 'hsr' [ 97.918307][ T5842] Cannot create hsr debugfs directory [ 98.524520][ T5848] Bluetooth: hci1: command tx timeout [ 98.606760][ T5848] Bluetooth: hci3: command tx timeout [ 98.606799][ T5848] Bluetooth: hci2: command tx timeout [ 98.606825][ T5848] Bluetooth: hci4: command tx timeout [ 98.684467][ T5838] Bluetooth: hci0: command tx timeout [ 99.628412][ T5834] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 99.669160][ T5834] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 99.703475][ T5834] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 99.752490][ T5834] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 99.908950][ T5835] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 99.958721][ T5835] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 100.010998][ T5835] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 100.067785][ T5835] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 100.254029][ T5847] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 100.298967][ T5847] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 100.340458][ T5847] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 100.408249][ T5847] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 100.598218][ T5833] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 100.642868][ T5833] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 100.704598][ T5833] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 100.762411][ T5833] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 100.959743][ T5834] 8021q: adding VLAN 0 to HW filter on device bond0 [ 100.991625][ T5842] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 101.049063][ T5842] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 101.097184][ T5842] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 101.145784][ T5842] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 101.252956][ T5834] 8021q: adding VLAN 0 to HW filter on device team0 [ 101.325637][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.325814][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 101.397614][ T5835] 8021q: adding VLAN 0 to HW filter on device bond0 [ 101.435531][ T1183] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.435775][ T1183] bridge0: port 2(bridge_slave_1) entered forwarding state [ 101.559227][ T5835] 8021q: adding VLAN 0 to HW filter on device team0 [ 101.582190][ T5847] 8021q: adding VLAN 0 to HW filter on device bond0 [ 101.645882][ T1405] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.646066][ T1405] bridge0: port 1(bridge_slave_0) entered forwarding state [ 101.699452][ T1405] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.699701][ T1405] bridge0: port 2(bridge_slave_1) entered forwarding state [ 101.783376][ T5847] 8021q: adding VLAN 0 to HW filter on device team0 [ 101.828522][ T5833] 8021q: adding VLAN 0 to HW filter on device bond0 [ 101.856001][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.856170][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 101.930812][ T3527] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.930980][ T3527] bridge0: port 2(bridge_slave_1) entered forwarding state [ 102.059049][ T5833] 8021q: adding VLAN 0 to HW filter on device team0 [ 102.182714][ T5842] 8021q: adding VLAN 0 to HW filter on device bond0 [ 102.207723][ T3527] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.207888][ T3527] bridge0: port 1(bridge_slave_0) entered forwarding state [ 102.293642][ T3527] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.293834][ T3527] bridge0: port 2(bridge_slave_1) entered forwarding state [ 102.420379][ T5842] 8021q: adding VLAN 0 to HW filter on device team0 [ 102.488840][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.489684][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 102.561162][ T5834] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 102.578019][ T1183] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.578950][ T1183] bridge0: port 2(bridge_slave_1) entered forwarding state [ 102.983080][ T5835] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 103.080218][ T5834] veth0_vlan: entered promiscuous mode [ 103.210488][ T5834] veth1_vlan: entered promiscuous mode [ 103.309240][ T5847] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 103.478988][ T5835] veth0_vlan: entered promiscuous mode [ 103.531521][ T5833] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 103.553385][ T5834] veth0_macvtap: entered promiscuous mode [ 103.607180][ T5835] veth1_vlan: entered promiscuous mode [ 103.639741][ T5834] veth1_macvtap: entered promiscuous mode [ 103.710239][ T5842] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 103.797457][ T5847] veth0_vlan: entered promiscuous mode [ 103.870500][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 103.893271][ T5847] veth1_vlan: entered promiscuous mode [ 103.935902][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 104.048745][ T5835] veth0_macvtap: entered promiscuous mode [ 104.082058][ T3527] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.106613][ T3527] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.109156][ T5835] veth1_macvtap: entered promiscuous mode [ 104.151374][ T3527] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.151672][ T5833] veth0_vlan: entered promiscuous mode [ 104.158796][ T3527] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.298610][ T5833] veth1_vlan: entered promiscuous mode [ 104.396385][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 104.484001][ T5847] veth0_macvtap: entered promiscuous mode [ 104.502119][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 104.543818][ T5847] veth1_macvtap: entered promiscuous mode [ 104.583423][ T1405] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.628490][ T1405] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.657591][ T1405] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.683118][ T1405] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.715860][ T1199] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.715897][ T1199] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.852839][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 104.959521][ T5833] veth0_macvtap: entered promiscuous mode [ 105.006628][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 105.006867][ T5842] veth0_vlan: entered promiscuous mode [ 105.094138][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.094160][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.097076][ T5833] veth1_macvtap: entered promiscuous mode [ 105.165526][ T69] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.236787][ T69] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.261155][ T69] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.290028][ T5842] veth1_vlan: entered promiscuous mode [ 105.296786][ T69] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.357412][ T3578] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.357437][ T3578] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.461827][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 105.662526][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 105.672420][ T69] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.672445][ T69] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.791360][ T67] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.828568][ T67] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.897753][ T67] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.074051][ T67] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.186151][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.186183][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.324039][ T5842] veth0_macvtap: entered promiscuous mode [ 107.654924][ T5842] veth1_macvtap: entered promiscuous mode [ 107.879978][ T67] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.879997][ T67] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.864307][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 108.874422][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 109.252004][ T5976] netlink: 272 bytes leftover after parsing attributes in process `syz.1.7'. [ 109.356977][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 109.479696][ T69] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.479716][ T69] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.578490][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 109.806204][ T1175] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.808980][ T5979] netlink: 'syz.1.8': attribute type 2 has an invalid length. [ 109.860627][ T1175] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.861143][ T67] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.861160][ T67] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.872983][ T1175] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.879563][ T1175] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.777017][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 110.781993][ T5922] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 110.877513][ T5902] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 110.981385][ T5922] usb 2-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 110.981427][ T5922] usb 2-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 110.981456][ T5922] usb 2-1: config 0 interface 0 has no altsetting 0 [ 110.981494][ T5922] usb 2-1: New USB device found, idVendor=06cb, idProduct=73f6, bcdDevice= 0.00 [ 110.981519][ T5922] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.072556][ T1199] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.075404][ T1199] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.091921][ T5902] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 111.092077][ T5902] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 111.092113][ T5902] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 65535, setting to 64 [ 111.092146][ T5902] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 111.116914][ T5902] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 111.116958][ T5902] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 111.116984][ T5902] usb 1-1: Manufacturer: syz [ 111.284035][ T5922] usb 2-1: config 0 descriptor?? [ 111.505717][ T5902] usb 1-1: config 0 descriptor?? [ 111.924732][ T5922] itetech 0003:06CB:73F6.0001: hidraw0: USB HID v0.01 Device [HID 06cb:73f6] on usb-dummy_hcd.1-1/input0 [ 112.008694][ T5922] usb 2-1: USB disconnect, device number 2 [ 112.036395][ T5902] rc_core: IR keymap rc-hauppauge not found [ 112.036422][ T5902] Registered IR keymap rc-empty [ 112.044621][ T5902] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 112.075719][ T5902] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 112.155095][ T5902] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 112.216516][ T6004] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 112.278665][ T5902] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input5 [ 112.433659][ T5902] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 112.455197][ T5902] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 112.475900][ T5902] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 112.517355][ T5902] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 112.550340][ T5902] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 112.568287][ T5902] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 112.587756][ T5902] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 112.606672][ T5902] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 112.632686][ T5902] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 112.707961][ T5902] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 112.801874][ T6002] fido_id[6002]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 113.081272][ T5902] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 0 [ 113.081303][ T5902] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 113.201656][ T5902] usb 1-1: USB disconnect, device number 2 [ 113.244899][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.244921][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.519176][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 113.564370][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 113.564463][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 113.954345][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 113.955413][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 114.054273][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 114.054327][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 115.493888][ T6020] Zero length message leads to an empty skb [ 115.495007][ T6020] netlink: 'syz.4.5': attribute type 10 has an invalid length. [ 115.507249][ T6020] 8021q: adding VLAN 0 to HW filter on device team0 [ 115.510495][ T6020] bond0: (slave team0): Enslaving as an active interface with an up link [ 115.665141][ T38] audit: type=1326 audit(1756349728.084:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6019 comm="syz.4.5" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18c698ebe9 code=0x7ffc0000 [ 115.665219][ T38] audit: type=1326 audit(1756349728.094:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6019 comm="syz.4.5" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18c698ebe9 code=0x7ffc0000 [ 115.665271][ T38] audit: type=1326 audit(1756349728.094:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6019 comm="syz.4.5" exe="/root/syz-executor" sig=0 arch=c000003e syscall=244 compat=0 ip=0x7f18c698ebe9 code=0x7ffc0000 [ 115.665323][ T38] audit: type=1326 audit(1756349728.094:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6019 comm="syz.4.5" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18c698ebe9 code=0x7ffc0000 [ 115.665374][ T38] audit: type=1326 audit(1756349728.094:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6019 comm="syz.4.5" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18c698ebe9 code=0x7ffc0000 [ 116.463979][ T5943] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 116.795137][ T5943] usb 2-1: Using ep0 maxpacket: 16 [ 116.797697][ T5943] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 116.797732][ T5943] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 116.797773][ T5943] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 116.810760][ T5943] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 116.810796][ T5943] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.810818][ T5943] usb 2-1: Product: syz [ 116.810834][ T5943] usb 2-1: Manufacturer: syz [ 116.810851][ T5943] usb 2-1: SerialNumber: syz [ 118.297233][ T5943] usb 2-1: 2:1 : format type 0 is detected, processed as PCM [ 118.804091][ T5943] usb 2-1: 2:1: cannot set freq 9338507 to ep 0x82 [ 119.467551][ T5943] usb 2-1: USB disconnect, device number 3 [ 120.407206][ T6012] udevd[6012]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 120.548456][ T6058] netlink: 16 bytes leftover after parsing attributes in process `syz.2.23'. [ 131.274437][ T6064] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 131.294332][ T5848] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 131.297497][ T5848] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 131.300099][ T5848] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 131.301535][ T5848] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 131.302532][ T5848] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 132.162637][ T6064] usb 2-1: unable to read config index 0 descriptor/all [ 132.162680][ T6064] usb 2-1: can't read configurations, error -71 [ 133.407366][ T5838] Bluetooth: hci5: command tx timeout [ 134.714426][ T5838] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 134.714540][ T5838] Bluetooth: hci2: Injecting HCI hardware error event [ 134.718503][ T5838] Bluetooth: hci2: hardware error 0x00 [ 135.534461][ T5848] Bluetooth: hci5: command tx timeout [ 137.177315][ T5838] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 137.588427][ T5838] Bluetooth: hci5: command tx timeout [ 137.957738][ T1324] ieee802154 phy0 wpan0: encryption failed: -22 [ 137.957854][ T1324] ieee802154 phy1 wpan1: encryption failed: -22 [ 139.644546][ T5838] Bluetooth: hci5: command tx timeout [ 139.681314][ T1199] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.330289][ T1199] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.536310][ T6146] snd_aloop snd_aloop.0: control 2:1883:2954:syz1:64272 is already present [ 140.557804][ T6142] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 140.557834][ T6142] bond0: (slave lo): Error: Device can not be enslaved while up [ 141.851505][ T1199] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.772237][ T6166] o2cb: This node has not been configured. [ 142.772265][ T6166] o2cb: Cluster check failed. Fix errors before retrying. [ 142.772320][ T6166] (syz.1.49,6166,0):user_dlm_register:674 ERROR: status = -22 [ 142.772350][ T6166] (syz.1.49,6166,0):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "file1" [ 142.773940][ T6166] o2cb: This node has not been configured. [ 142.773955][ T6166] o2cb: Cluster check failed. Fix errors before retrying. [ 142.773988][ T6166] (syz.1.49,6166,0):user_dlm_register:674 ERROR: status = -22 [ 142.774015][ T6166] (syz.1.49,6166,0):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "file0" [ 143.459726][ T1199] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.689420][ T6064] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 145.013028][ T6085] chnl_net:caif_netlink_parms(): no params data found [ 145.183998][ T6064] usb 1-1: Using ep0 maxpacket: 32 [ 145.203710][ T6064] usb 1-1: config 2 has no interfaces? [ 145.220899][ T6064] usb 1-1: New USB device found, idVendor=19d2, idProduct=0031, bcdDevice=42.3d [ 145.220932][ T6064] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.220952][ T6064] usb 1-1: Product: syz [ 145.220966][ T6064] usb 1-1: Manufacturer: syz [ 145.220981][ T6064] usb 1-1: SerialNumber: syz [ 146.537114][ T5840] usb 1-1: USB disconnect, device number 3 [ 146.752049][ T6085] bridge0: port 1(bridge_slave_0) entered blocking state [ 146.752297][ T6085] bridge0: port 1(bridge_slave_0) entered disabled state [ 146.752526][ T6085] bridge_slave_0: entered allmulticast mode [ 146.785902][ T6085] bridge_slave_0: entered promiscuous mode [ 146.805919][ T6085] bridge0: port 2(bridge_slave_1) entered blocking state [ 146.816005][ T6085] bridge0: port 2(bridge_slave_1) entered disabled state [ 146.816360][ T6085] bridge_slave_1: entered allmulticast mode [ 146.855058][ T6085] bridge_slave_1: entered promiscuous mode [ 147.323809][ T6085] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 147.360236][ T6085] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 147.625321][ T1199] bridge_slave_1: left allmulticast mode [ 147.628614][ T1199] bridge_slave_1: left promiscuous mode [ 147.633009][ T1199] bridge0: port 2(bridge_slave_1) entered disabled state [ 147.941900][ T1199] bridge_slave_0: left allmulticast mode [ 147.941949][ T1199] bridge_slave_0: left promiscuous mode [ 147.942263][ T1199] bridge0: port 1(bridge_slave_0) entered disabled state [ 148.000586][ T6201] o2cb: This node has not been configured. [ 148.000606][ T6201] o2cb: Cluster check failed. Fix errors before retrying. [ 148.000635][ T6201] (syz.2.59,6201,1):user_dlm_register:674 ERROR: status = -22 [ 148.000661][ T6201] (syz.2.59,6201,1):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "file1" [ 148.001860][ T6201] o2cb: This node has not been configured. [ 148.001872][ T6201] o2cb: Cluster check failed. Fix errors before retrying. [ 148.001899][ T6201] (syz.2.59,6201,1):user_dlm_register:674 ERROR: status = -22 [ 148.001927][ T6201] (syz.2.59,6201,1):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "file0" [ 150.286239][ T5848] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 150.324762][ T5848] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 150.334518][ T5848] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 150.363936][ T5848] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 150.372820][ T5848] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 150.801711][ T6217] block nbd2: Attempted send on invalid socket [ 150.801804][ T6217] I/O error, dev nbd2, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 150.802478][ T6217] block nbd2: Attempted send on invalid socket [ 150.802496][ T6217] I/O error, dev nbd2, sector 256 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 150.802615][ T6217] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 150.803142][ T6217] block nbd2: Attempted send on invalid socket [ 150.803158][ T6217] I/O error, dev nbd2, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 150.803258][ T6217] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 150.915614][ T6217] block nbd2: Attempted send on invalid socket [ 150.915646][ T6217] I/O error, dev nbd2, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 150.925244][ T6217] block nbd2: Attempted send on invalid socket [ 150.925276][ T6217] I/O error, dev nbd2, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 150.925413][ T6217] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 150.925813][ T6217] block nbd2: Attempted send on invalid socket [ 150.925832][ T6217] I/O error, dev nbd2, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 150.925942][ T6217] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 150.926904][ T6217] block nbd2: Attempted send on invalid socket [ 150.926922][ T6217] I/O error, dev nbd2, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 150.927272][ T6217] block nbd2: Attempted send on invalid socket [ 150.927290][ T6217] I/O error, dev nbd2, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 150.927398][ T6217] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 150.927718][ T6217] block nbd2: Attempted send on invalid socket [ 150.927735][ T6217] I/O error, dev nbd2, sector 2048 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 150.927852][ T6217] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 150.928578][ T6217] block nbd2: Attempted send on invalid socket [ 150.928597][ T6217] I/O error, dev nbd2, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 150.928996][ T6217] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 150.929263][ T6217] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 150.929291][ T6217] UDF-fs: warning (device nbd2): udf_fill_super: No partition found (1) [ 152.444611][ T5848] Bluetooth: hci2: command tx timeout [ 153.024549][ T5922] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 153.179587][ T5922] usb 5-1: Using ep0 maxpacket: 32 [ 153.193516][ T5922] usb 5-1: config 2 has no interfaces? [ 153.209786][ T5922] usb 5-1: New USB device found, idVendor=19d2, idProduct=0031, bcdDevice=42.3d [ 153.209820][ T5922] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.209841][ T5922] usb 5-1: Product: syz [ 153.209855][ T5922] usb 5-1: Manufacturer: syz [ 153.209872][ T5922] usb 5-1: SerialNumber: syz [ 153.470894][ T6230] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 153.471560][ T6230] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 154.525063][ T5848] Bluetooth: hci2: command tx timeout [ 156.385541][ T6230] syz.4.66 (6230) used greatest stack depth: 15496 bytes left [ 156.551695][ T6053] usb 5-1: USB disconnect, device number 2 [ 156.771296][ T5848] Bluetooth: hci2: command tx timeout [ 157.816662][ T1199] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 158.145503][ T1199] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 158.845413][ T5848] Bluetooth: hci2: command tx timeout [ 159.113910][ T1199] bond0 (unregistering): Released all slaves [ 159.417257][ T5902] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 159.564447][ T5902] usb 1-1: Using ep0 maxpacket: 8 [ 159.571495][ T5902] usb 1-1: config 0 interface 0 has no altsetting 0 [ 159.593170][ T5902] usb 1-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 159.593205][ T5902] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.593227][ T5902] usb 1-1: Product: syz [ 159.593241][ T5902] usb 1-1: Manufacturer: syz [ 159.593257][ T5902] usb 1-1: SerialNumber: syz [ 159.656433][ T5902] usb 1-1: config 0 descriptor?? [ 159.663027][ T5902] snd_usb_toneport 1-1:0.0: Line 6 TonePort UX2 found [ 159.822285][ T6085] team0: Port device team_slave_0 added [ 159.880331][ T6085] team0: Port device team_slave_1 added [ 159.943787][ T5902] snd_usb_toneport 1-1:0.0: Line 6 TonePort UX2 now disconnected [ 159.955943][ T5902] snd_usb_toneport 1-1:0.0: probe with driver snd_usb_toneport failed with error -22 [ 160.118332][ T6053] usb 1-1: USB disconnect, device number 4 [ 161.111388][ T5929] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 161.175872][ T5929] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 161.275537][ T6085] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 161.275559][ T6085] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 161.275590][ T6085] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 161.315724][ T6085] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 161.315750][ T6085] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 161.315783][ T6085] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 162.147995][ T6270] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 162.149330][ T6270] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 162.356698][ T1199] hsr_slave_0: left promiscuous mode [ 162.357548][ T6270] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 162.414492][ T1199] hsr_slave_1: left promiscuous mode [ 162.415806][ T1199] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 162.415912][ T1199] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 162.704621][ T6270] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 162.704798][ T6270] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 162.707870][ T1199] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 162.707911][ T1199] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 163.408576][ T5848] Bluetooth: hci1: command 0x0c1a tx timeout [ 163.904358][ T6270] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 163.941620][ T1199] veth1_macvtap: left promiscuous mode [ 163.941941][ T1199] veth0_macvtap: left promiscuous mode [ 163.942297][ T1199] veth1_vlan: left promiscuous mode [ 163.976489][ T1199] veth0_vlan: left promiscuous mode [ 164.048849][ T6270] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 164.048986][ T6270] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 164.137629][ T6270] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 164.245184][ T6270] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 164.246216][ T6270] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 164.339644][ T6270] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 164.420752][ T6270] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 164.420877][ T6270] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 164.500661][ T6270] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 164.794292][ T5848] Bluetooth: hci0: command 0x0c1a tx timeout [ 165.510203][ T5848] Bluetooth: hci1: command 0x0c1a tx timeout [ 166.164838][ T5848] Bluetooth: hci3: command 0x0c1a tx timeout [ 166.284358][ T5848] Bluetooth: hci5: command 0x0c1a tx timeout [ 166.445070][ T5848] Bluetooth: hci2: command 0x0c1a tx timeout [ 166.844808][ T5848] Bluetooth: hci0: command 0x0c1a tx timeout [ 167.574656][ T5848] Bluetooth: hci1: command 0x0c1a tx timeout [ 168.204465][ T5848] Bluetooth: hci3: command 0x0c1a tx timeout [ 168.374425][ T5848] Bluetooth: hci5: command 0x0c1a tx timeout [ 168.450624][ T5848] Bluetooth: hci1: unexpected event for opcode 0x0c24 [ 168.547391][ T5848] Bluetooth: hci2: command 0x0c1a tx timeout [ 168.789921][ C0] vkms_vblank_simulate: vblank timer overrun [ 168.906487][ C0] vkms_vblank_simulate: vblank timer overrun [ 168.924494][ T5848] Bluetooth: hci0: command 0x0c1a tx timeout [ 169.975409][ T1199] team0 (unregistering): Port device team_slave_1 removed [ 170.289266][ T5848] Bluetooth: hci3: command 0x0c1a tx timeout [ 170.410726][ T1199] team0 (unregistering): Port device team_slave_0 removed [ 170.457763][ T5848] Bluetooth: hci5: command 0x0c1a tx timeout [ 170.594512][ T5902] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 170.604516][ T5848] Bluetooth: hci2: command 0x0c1a tx timeout [ 170.742294][ T6321] Driver unsupported XDP return value 0 on prog (id 10) dev N/A, expect packet loss! [ 170.794413][ T5902] usb 3-1: Using ep0 maxpacket: 8 [ 170.824384][ T5902] usb 3-1: New USB device found, idVendor=0c45, idProduct=614a, bcdDevice=c4.6d [ 170.824420][ T5902] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 170.824440][ T5902] usb 3-1: Product: syz [ 170.824455][ T5902] usb 3-1: Manufacturer: syz [ 170.824470][ T5902] usb 3-1: SerialNumber: syz [ 170.829881][ T5902] usb 3-1: config 0 descriptor?? [ 170.873406][ T5902] gspca_main: sonixj-2.14.0 probing 0c45:614a [ 171.983655][ T5902] gspca_sonixj: reg_r err -71 [ 171.983797][ T5902] sonixj 3-1:0.0: probe with driver sonixj failed with error -71 [ 171.992948][ T5902] usb 3-1: USB disconnect, device number 2 [ 172.545428][ T5848] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 172.545691][ T5848] Bluetooth: hci1: Injecting HCI hardware error event [ 172.547374][ T5848] Bluetooth: hci1: hardware error 0x00 [ 174.604406][ T5848] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 177.787998][ T6085] hsr_slave_0: entered promiscuous mode [ 177.815120][ T6085] hsr_slave_1: entered promiscuous mode [ 177.818076][ T6085] debugfs: 'hsr0' already exists in 'hsr' [ 177.818111][ T6085] Cannot create hsr debugfs directory [ 179.831390][ T6209] chnl_net:caif_netlink_parms(): no params data found [ 179.914448][ T5840] usb 5-1: new low-speed USB device number 3 using dummy_hcd [ 179.914755][ T6053] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 180.071203][ T5840] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 180.071234][ T5840] usb 5-1: config 0 has no interface number 0 [ 180.071287][ T5840] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 180.071316][ T5840] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 180.071361][ T5840] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 180.071386][ T5840] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.146079][ T5840] usb 5-1: config 0 descriptor?? [ 180.146388][ T6053] usb 3-1: Using ep0 maxpacket: 8 [ 180.146992][ T6359] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 180.190532][ T6053] usb 3-1: New USB device found, idVendor=0c45, idProduct=614a, bcdDevice=c4.6d [ 180.190569][ T6053] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 180.190601][ T6053] usb 3-1: Product: syz [ 180.190616][ T6053] usb 3-1: Manufacturer: syz [ 180.190631][ T6053] usb 3-1: SerialNumber: syz [ 180.203478][ T6053] usb 3-1: config 0 descriptor?? [ 180.250151][ T6053] gspca_main: sonixj-2.14.0 probing 0c45:614a [ 180.567964][ T6085] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 180.599866][ T5840] iowarrior 5-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 180.693099][ T5840] usb 5-1: USB disconnect, device number 3 [ 181.063299][ T6085] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 181.155300][ T6053] gspca_sonixj: reg_r err -71 [ 181.155395][ T6053] sonixj 3-1:0.0: probe with driver sonixj failed with error -71 [ 181.162116][ T6053] usb 3-1: USB disconnect, device number 3 [ 181.171697][ T6085] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 181.716102][ T13] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.922728][ T6085] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 182.590737][ T6209] bridge0: port 1(bridge_slave_0) entered blocking state [ 182.590980][ T6209] bridge0: port 1(bridge_slave_0) entered disabled state [ 182.591274][ T6209] bridge_slave_0: entered allmulticast mode [ 182.593945][ T6209] bridge_slave_0: entered promiscuous mode [ 182.952332][ T13] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.102010][ T6209] bridge0: port 2(bridge_slave_1) entered blocking state [ 183.102143][ T6209] bridge0: port 2(bridge_slave_1) entered disabled state [ 183.102394][ T6209] bridge_slave_1: entered allmulticast mode [ 183.109943][ T6209] bridge_slave_1: entered promiscuous mode [ 183.934083][ T13] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.545993][ T6209] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 184.965831][ T13] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.130192][ T6209] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 185.705844][ T6209] team0: Port device team_slave_0 added [ 185.781179][ T6209] team0: Port device team_slave_1 added [ 186.619077][ T6209] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 186.619098][ T6209] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 186.619128][ T6209] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 187.975509][ T6209] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 187.975527][ T6209] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 187.975552][ T6209] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 190.596414][ T5838] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 190.616099][ T5838] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 190.617841][ T5838] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 190.619204][ T5838] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 190.620108][ T5838] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 191.817993][ T13] bridge_slave_1: left allmulticast mode [ 191.818031][ T13] bridge_slave_1: left promiscuous mode [ 191.818342][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 191.946339][ T13] bridge_slave_0: left allmulticast mode [ 191.946377][ T13] bridge_slave_0: left promiscuous mode [ 191.946707][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 192.686249][ T5838] Bluetooth: hci4: command tx timeout [ 193.652311][ T38] audit: type=1326 audit(1756349807.203:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6424 comm="syz.4.118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18c698ebe9 code=0x7ffc0000 [ 193.652374][ T38] audit: type=1326 audit(1756349807.203:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6424 comm="syz.4.118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=451 compat=0 ip=0x7f18c698ebe9 code=0x7ffc0000 [ 193.662560][ T38] audit: type=1326 audit(1756349807.203:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6424 comm="syz.4.118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18c698ebe9 code=0x7ffc0000 [ 193.672727][ T38] audit: type=1326 audit(1756349807.203:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6424 comm="syz.4.118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18c698ebe9 code=0x7ffc0000 [ 193.676463][ T38] audit: type=1326 audit(1756349807.203:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6424 comm="syz.4.118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f18c698ebe9 code=0x7ffc0000 [ 193.683322][ T38] audit: type=1326 audit(1756349807.203:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6424 comm="syz.4.118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18c698ebe9 code=0x7ffc0000 [ 193.693512][ T38] audit: type=1326 audit(1756349807.203:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6424 comm="syz.4.118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7f18c698ebe9 code=0x7ffc0000 [ 193.693613][ T38] audit: type=1326 audit(1756349807.203:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6424 comm="syz.4.118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18c698ebe9 code=0x7ffc0000 [ 193.694358][ T38] audit: type=1326 audit(1756349807.203:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6424 comm="syz.4.118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f18c698ebe9 code=0x7ffc0000 [ 193.694411][ T38] audit: type=1326 audit(1756349807.203:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6424 comm="syz.4.118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18c698ebe9 code=0x7ffc0000 [ 194.767765][ T5838] Bluetooth: hci4: command tx timeout [ 196.332830][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 196.445857][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 196.485901][ T13] bond0 (unregistering): Released all slaves [ 196.845982][ T5838] Bluetooth: hci4: command tx timeout [ 197.266747][ T6209] hsr_slave_0: entered promiscuous mode [ 197.275139][ T6209] hsr_slave_1: entered promiscuous mode [ 197.276249][ T6209] debugfs: 'hsr0' already exists in 'hsr' [ 197.276277][ T6209] Cannot create hsr debugfs directory [ 198.926425][ T5838] Bluetooth: hci4: command tx timeout [ 199.148349][ T6442] mmap: syz.4.121 (6442) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 199.336215][ T1324] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.336319][ T1324] ieee802154 phy1 wpan1: encryption failed: -22 [ 200.415700][ T5848] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 200.421709][ T5848] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 200.454437][ T5848] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 200.460436][ T5848] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 200.462826][ T5848] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 201.524545][ T6404] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 201.597224][ T13] hsr_slave_0: left promiscuous mode [ 201.624028][ T13] hsr_slave_1: left promiscuous mode [ 201.625489][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 201.625527][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 201.677490][ T6404] usb 5-1: Using ep0 maxpacket: 16 [ 201.680249][ T6404] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 201.680279][ T6404] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 201.680305][ T6404] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1023 [ 201.687211][ T6404] usb 5-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 201.687252][ T6404] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 201.687276][ T6404] usb 5-1: Product: syz [ 201.687294][ T6404] usb 5-1: Manufacturer: syz [ 201.687312][ T6404] usb 5-1: SerialNumber: syz [ 201.729116][ T6404] usb 5-1: config 0 descriptor?? [ 201.731003][ T6458] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 201.767329][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 201.767369][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 201.967980][ T13] veth1_macvtap: left promiscuous mode [ 201.968120][ T13] veth0_macvtap: left promiscuous mode [ 201.968332][ T13] veth1_vlan: left promiscuous mode [ 201.974589][ T13] veth0_vlan: left promiscuous mode [ 202.534866][ T5848] Bluetooth: hci0: command tx timeout [ 204.604536][ T5848] Bluetooth: hci0: command tx timeout [ 206.155328][ T13] team0 (unregistering): Port device team_slave_1 removed [ 206.505179][ T13] team0 (unregistering): Port device team_slave_0 removed [ 206.684662][ T5848] Bluetooth: hci0: command tx timeout [ 207.770370][ T5838] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 207.785659][ T5838] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 207.790906][ T5838] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 207.792277][ T5838] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 207.793602][ T5838] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 208.764695][ T5848] Bluetooth: hci0: command tx timeout [ 209.362906][ T6458] bridge0: port 3(macsec0) entered blocking state [ 209.363067][ T6458] bridge0: port 3(macsec0) entered disabled state [ 209.363579][ T6458] macsec0: entered allmulticast mode [ 209.363598][ T6458] veth1_macvtap: entered allmulticast mode [ 209.378836][ T6404] mcba_usb 5-1:0.0 can0: failed tx_urb -90 [ 209.378906][ T6404] mcba_usb 5-1:0.0 can0: Failed to send cmd (169) [ 209.379050][ T6404] mcba_usb 5-1:0.0 can0: failed tx_urb -90 [ 209.379100][ T6404] mcba_usb 5-1:0.0 can0: Failed to send cmd (169) [ 209.379120][ T6404] mcba_usb 5-1:0.0: Microchip CAN BUS Analyzer connected [ 209.406504][ T6458] macsec0: entered promiscuous mode [ 209.413182][ T6458] bridge0: port 3(macsec0) entered blocking state [ 209.413418][ T6458] bridge0: port 3(macsec0) entered forwarding state [ 209.595977][ T6404] usb 5-1: USB disconnect, device number 4 [ 209.599580][ T6404] mcba_usb 5-1:0.0 can0: device disconnected [ 209.958436][ T5848] Bluetooth: hci5: command tx timeout [ 211.164809][ T6053] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 211.314551][ T6053] usb 3-1: Using ep0 maxpacket: 32 [ 211.317349][ T6053] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 211.317381][ T6053] usb 3-1: config 0 has no interface number 0 [ 211.317442][ T6053] usb 3-1: config 0 interface 184 has no altsetting 0 [ 211.321255][ T6053] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 211.321287][ T6053] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 211.321309][ T6053] usb 3-1: Product: syz [ 211.321324][ T6053] usb 3-1: Manufacturer: syz [ 211.321339][ T6053] usb 3-1: SerialNumber: syz [ 211.410504][ T6053] usb 3-1: config 0 descriptor?? [ 211.428730][ T6053] smsc75xx v1.0.0 [ 212.129186][ T5848] Bluetooth: hci5: command tx timeout [ 212.471418][ T6491] syzkaller0: entered promiscuous mode [ 212.471454][ T6491] syzkaller0: entered allmulticast mode [ 212.636992][ T6410] chnl_net:caif_netlink_parms(): no params data found [ 212.674543][ T6053] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000044: -71 [ 212.674577][ T6053] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_DATA [ 212.679918][ T6053] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 212.680068][ T6053] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 212.680090][ T6053] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 212.680114][ T6053] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 212.680764][ T6053] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -71 [ 212.759807][ T6053] usb 3-1: USB disconnect, device number 4 [ 214.341101][ T5848] Bluetooth: hci5: command tx timeout [ 216.304438][ T6053] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 216.454423][ T6053] usb 5-1: Using ep0 maxpacket: 16 [ 216.457305][ T6053] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 216.457337][ T6053] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 216.457362][ T6053] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1023 [ 216.460498][ T6053] usb 5-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 216.460527][ T6053] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 216.460548][ T6053] usb 5-1: Product: syz [ 216.460562][ T6053] usb 5-1: Manufacturer: syz [ 216.460577][ T6053] usb 5-1: SerialNumber: syz [ 216.467538][ T6053] usb 5-1: config 0 descriptor?? [ 216.474141][ T6516] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 216.560665][ T6450] chnl_net:caif_netlink_parms(): no params data found [ 216.604569][ T5848] Bluetooth: hci5: command tx timeout [ 216.783761][ T6410] bridge0: port 1(bridge_slave_0) entered blocking state [ 216.783860][ T6410] bridge0: port 1(bridge_slave_0) entered disabled state [ 216.786795][ T6410] bridge_slave_0: entered allmulticast mode [ 216.803638][ T6410] bridge_slave_0: entered promiscuous mode [ 216.849442][ T6053] mcba_usb 5-1:0.0 can0: failed tx_urb -90 [ 216.849481][ T6053] mcba_usb 5-1:0.0 can0: Failed to send cmd (169) [ 216.849559][ T6053] mcba_usb 5-1:0.0 can0: failed tx_urb -90 [ 216.849589][ T6053] mcba_usb 5-1:0.0 can0: Failed to send cmd (169) [ 216.849601][ T6053] mcba_usb 5-1:0.0: Microchip CAN BUS Analyzer connected [ 216.939270][ T992] usb 5-1: USB disconnect, device number 5 [ 216.943072][ T992] mcba_usb 5-1:0.0 can0: device disconnected [ 217.242194][ T6410] bridge0: port 2(bridge_slave_1) entered blocking state [ 217.242358][ T6410] bridge0: port 2(bridge_slave_1) entered disabled state [ 217.242651][ T6410] bridge_slave_1: entered allmulticast mode [ 217.246411][ T6410] bridge_slave_1: entered promiscuous mode [ 217.794538][ T5943] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 217.919876][ T6473] chnl_net:caif_netlink_parms(): no params data found [ 217.960701][ T5943] usb 5-1: config 4 has an invalid interface number: 142 but max is 1 [ 217.960734][ T5943] usb 5-1: config 4 has an invalid interface number: 156 but max is 1 [ 217.960755][ T5943] usb 5-1: config 4 has no interface number 0 [ 217.960772][ T5943] usb 5-1: config 4 has no interface number 1 [ 217.960822][ T5943] usb 5-1: config 4 interface 142 has no altsetting 0 [ 217.960842][ T5943] usb 5-1: config 4 interface 156 has no altsetting 0 [ 217.981818][ T6410] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 217.984566][ T5943] usb 5-1: New USB device found, idVendor=046d, idProduct=08b3, bcdDevice=1b.f1 [ 217.984604][ T5943] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 217.984626][ T5943] usb 5-1: Product: syz [ 217.984641][ T5943] usb 5-1: Manufacturer: syz [ 217.984656][ T5943] usb 5-1: SerialNumber: syz [ 218.367926][ T5943] usb 5-1: USB disconnect, device number 6 [ 218.406239][ T6410] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 221.541301][ T6410] team0: Port device team_slave_0 added [ 221.545851][ T6450] bridge0: port 1(bridge_slave_0) entered blocking state [ 221.545975][ T6450] bridge0: port 1(bridge_slave_0) entered disabled state [ 221.546197][ T6450] bridge_slave_0: entered allmulticast mode [ 221.548271][ T6450] bridge_slave_0: entered promiscuous mode [ 221.661493][ T6450] bridge0: port 2(bridge_slave_1) entered blocking state [ 221.661599][ T6450] bridge0: port 2(bridge_slave_1) entered disabled state [ 221.661828][ T6450] bridge_slave_1: entered allmulticast mode [ 221.663943][ T6450] bridge_slave_1: entered promiscuous mode [ 221.717370][ T6410] team0: Port device team_slave_1 added [ 224.508223][ T6450] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 224.515133][ T6410] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 224.515154][ T6410] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 224.515184][ T6410] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 224.534980][ T6473] bridge0: port 1(bridge_slave_0) entered blocking state [ 224.535139][ T6473] bridge0: port 1(bridge_slave_0) entered disabled state [ 224.535442][ T6473] bridge_slave_0: entered allmulticast mode [ 224.543991][ T6473] bridge_slave_0: entered promiscuous mode [ 224.580172][ T6450] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 224.666074][ T6410] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 224.666092][ T6410] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 224.666121][ T6410] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 224.669914][ T6473] bridge0: port 2(bridge_slave_1) entered blocking state [ 224.670168][ T6473] bridge0: port 2(bridge_slave_1) entered disabled state [ 224.670555][ T6473] bridge_slave_1: entered allmulticast mode [ 224.673986][ T6473] bridge_slave_1: entered promiscuous mode [ 225.983197][ T6450] team0: Port device team_slave_0 added [ 226.306336][ T6473] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 226.336243][ T6450] team0: Port device team_slave_1 added [ 226.540458][ T6473] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 227.460355][ T6410] hsr_slave_0: entered promiscuous mode [ 227.470425][ T6410] hsr_slave_1: entered promiscuous mode [ 227.473089][ T6410] debugfs: 'hsr0' already exists in 'hsr' [ 227.473121][ T6410] Cannot create hsr debugfs directory [ 228.531193][ T6450] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 228.531213][ T6450] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 228.531241][ T6450] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 228.567318][ T6473] team0: Port device team_slave_0 added [ 228.703099][ T6473] team0: Port device team_slave_1 added [ 228.710374][ T6450] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 228.710393][ T6450] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 228.710424][ T6450] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 232.039388][ T6582] netdevsim netdevsim4 netdevsim2: entered promiscuous mode [ 232.049253][ T6582] vlan2: entered promiscuous mode [ 233.631575][ T6473] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 233.631597][ T6473] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 233.631628][ T6473] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 234.151545][ T13] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.295755][ T6473] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 234.295775][ T6473] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 234.295802][ T6473] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 235.212877][ T13] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.326960][ T6450] hsr_slave_0: entered promiscuous mode [ 235.335235][ T6450] hsr_slave_1: entered promiscuous mode [ 235.357356][ T6450] debugfs: 'hsr0' already exists in 'hsr' [ 235.357390][ T6450] Cannot create hsr debugfs directory [ 237.109540][ T13] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.358774][ T6607] binder: 6606:6607 unknown command 0 [ 237.358806][ T6607] binder: 6606:6607 ioctl c0306201 200000000080 returned -22 [ 238.354770][ T6611] netdevsim netdevsim2 netdevsim2: entered promiscuous mode [ 238.354964][ T6611] vlan2: entered promiscuous mode [ 239.451675][ T6473] hsr_slave_0: entered promiscuous mode [ 239.492375][ T6473] hsr_slave_1: entered promiscuous mode [ 239.508337][ T6473] debugfs: 'hsr0' already exists in 'hsr' [ 239.510858][ T6473] Cannot create hsr debugfs directory [ 240.550682][ T6615] ISOFS: Unable to identify CD-ROM format. [ 241.369897][ T13] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.494616][ T31] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 243.644484][ T31] usb 5-1: Using ep0 maxpacket: 32 [ 243.647384][ T31] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 243.647420][ T31] usb 5-1: config 0 has no interface number 0 [ 243.647476][ T31] usb 5-1: config 0 interface 184 has no altsetting 0 [ 243.650749][ T31] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 243.650782][ T31] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 243.650805][ T31] usb 5-1: Product: syz [ 243.650821][ T31] usb 5-1: Manufacturer: syz [ 243.650837][ T31] usb 5-1: SerialNumber: syz [ 243.727114][ T31] usb 5-1: config 0 descriptor?? [ 243.742570][ T31] smsc75xx v1.0.0 [ 244.367114][ T31] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 244.367150][ T31] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 244.776491][ T31] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 244.776527][ T31] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 244.776550][ T31] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 244.776571][ T31] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 244.776916][ T31] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -71 [ 244.868411][ T31] usb 5-1: USB disconnect, device number 7 [ 245.548857][ T6633] netlink: 'syz.4.173': attribute type 5 has an invalid length. [ 245.548882][ T6633] netlink: 20 bytes leftover after parsing attributes in process `syz.4.173'. [ 245.809486][ T13] bridge_slave_1: left allmulticast mode [ 245.809527][ T13] bridge_slave_1: left promiscuous mode [ 245.812358][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 246.096848][ T13] bridge_slave_0: left allmulticast mode [ 246.096887][ T13] bridge_slave_0: left promiscuous mode [ 246.097182][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 246.269538][ T13] bridge_slave_1: left allmulticast mode [ 246.269580][ T13] bridge_slave_1: left promiscuous mode [ 246.269896][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 246.386260][ T13] bridge_slave_0: left allmulticast mode [ 246.386304][ T13] bridge_slave_0: left promiscuous mode [ 246.386614][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 246.529516][ T13] bridge_slave_1: left allmulticast mode [ 246.529557][ T13] bridge_slave_1: left promiscuous mode [ 246.529924][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 246.626046][ T13] bridge_slave_0: left allmulticast mode [ 246.626105][ T13] bridge_slave_0: left promiscuous mode [ 246.626404][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 247.925595][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 248.081673][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 248.563642][ T6650] netlink: 5128 bytes leftover after parsing attributes in process `syz.2.177'. [ 248.564322][ T6650] netlink: 5128 bytes leftover after parsing attributes in process `syz.2.177'. [ 248.564344][ T6650] netlink: 584 bytes leftover after parsing attributes in process `syz.2.177'. [ 249.278266][ T13] bond0 (unregistering): Released all slaves [ 253.528217][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 253.705387][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 253.792371][ T5848] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 253.812421][ T5848] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 253.813817][ T5848] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 253.835720][ T13] bond0 (unregistering): Released all slaves [ 253.838525][ T5848] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 253.839532][ T5848] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 255.964384][ T5848] Bluetooth: hci2: command tx timeout [ 256.715589][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 256.785742][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 256.812883][ T13] bond0 (unregistering): Released all slaves [ 257.963586][ C1] vkms_vblank_simulate: vblank timer overrun [ 258.023256][ C1] vkms_vblank_simulate: vblank timer overrun [ 258.323452][ C1] vkms_vblank_simulate: vblank timer overrun [ 258.360686][ T5848] Bluetooth: hci2: command tx timeout [ 258.363807][ C1] vkms_vblank_simulate: vblank timer overrun [ 258.784209][ C1] vkms_vblank_simulate: vblank timer overrun [ 258.897805][ C1] vkms_vblank_simulate: vblank timer overrun [ 259.163697][ C1] vkms_vblank_simulate: vblank timer overrun [ 259.799240][ C1] vkms_vblank_simulate: vblank timer overrun [ 259.807889][ T5838] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 259.825291][ T5838] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 259.827450][ T5838] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 259.833887][ T5838] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 259.840976][ T5838] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 260.367464][ T5848] Bluetooth: hci2: command tx timeout [ 260.772272][ T1324] ieee802154 phy0 wpan0: encryption failed: -22 [ 260.772360][ T1324] ieee802154 phy1 wpan1: encryption failed: -22 [ 261.795903][ T6657] chnl_net:caif_netlink_parms(): no params data found [ 261.884493][ T5848] Bluetooth: hci4: command tx timeout [ 261.947766][ T6473] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 262.066553][ T6473] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 262.370431][ C1] vkms_vblank_simulate: vblank timer overrun [ 262.449263][ T5848] Bluetooth: hci2: command tx timeout [ 262.652061][ C1] vkms_vblank_simulate: vblank timer overrun [ 263.249325][ C1] vkms_vblank_simulate: vblank timer overrun [ 263.476952][ T13] hsr_slave_0: left promiscuous mode [ 263.505892][ T13] hsr_slave_1: left promiscuous mode [ 263.506751][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 263.557615][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 263.705260][ T13] hsr_slave_0: left promiscuous mode [ 263.754611][ T13] hsr_slave_1: left promiscuous mode [ 263.755497][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 263.830976][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 263.964697][ T5848] Bluetooth: hci4: command tx timeout [ 264.074511][ T13] hsr_slave_0: left promiscuous mode [ 264.121479][ T13] hsr_slave_1: left promiscuous mode [ 264.122664][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 264.122699][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 264.194537][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 264.196480][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 264.981341][ T13] veth1_macvtap: left promiscuous mode [ 264.981704][ T13] veth0_macvtap: left promiscuous mode [ 264.997431][ T13] veth1_vlan: left promiscuous mode [ 264.999148][ T13] veth0_vlan: left promiscuous mode [ 266.044394][ T5848] Bluetooth: hci4: command tx timeout [ 266.888746][ T13] team0 (unregistering): Port device team_slave_1 removed [ 267.158055][ T13] team0 (unregistering): Port device team_slave_0 removed [ 268.124391][ T5848] Bluetooth: hci4: command tx timeout [ 270.183099][ T5838] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 270.224853][ T5838] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 270.263294][ T5838] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 270.274372][ T5838] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 270.275956][ T5838] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 271.465351][ T13] team0 (unregistering): Port device team_slave_1 removed [ 271.618911][ T13] team0 (unregistering): Port device team_slave_0 removed [ 272.372568][ T5838] Bluetooth: hci0: command tx timeout [ 274.457109][ T5838] Bluetooth: hci0: command tx timeout [ 274.886430][ T13] team0 (unregistering): Port device team_slave_1 removed [ 275.145437][ T13] team0 (unregistering): Port device team_slave_0 removed [ 276.524572][ T5838] Bluetooth: hci0: command tx timeout [ 278.076858][ T6473] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 278.604354][ T5838] Bluetooth: hci0: command tx timeout [ 279.294708][ T6657] bridge0: port 1(bridge_slave_0) entered blocking state [ 279.294892][ T6657] bridge0: port 1(bridge_slave_0) entered disabled state [ 279.295130][ T6657] bridge_slave_0: entered allmulticast mode [ 279.307355][ T6657] bridge_slave_0: entered promiscuous mode [ 279.422566][ T6657] bridge0: port 2(bridge_slave_1) entered blocking state [ 279.422747][ T6657] bridge0: port 2(bridge_slave_1) entered disabled state [ 279.423010][ T6657] bridge_slave_1: entered allmulticast mode [ 279.437016][ T6657] bridge_slave_1: entered promiscuous mode [ 279.610892][ T6731] netlink: 4 bytes leftover after parsing attributes in process `syz.2.193'. [ 280.193664][ T6657] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 280.315937][ T6657] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 280.517100][ T6740] syz.2.194 uses obsolete (PF_INET,SOCK_PACKET) [ 280.769741][ T6742] omfs: Invalid superblock (0) [ 280.992301][ T6657] team0: Port device team_slave_0 added [ 281.136928][ T6657] team0: Port device team_slave_1 added [ 282.120348][ T6657] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 282.120363][ T6657] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 282.120383][ T6657] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 282.495772][ T6657] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 282.495806][ T6657] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 282.495836][ T6657] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 283.286783][ T6657] hsr_slave_0: entered promiscuous mode [ 283.288318][ T6657] hsr_slave_1: entered promiscuous mode [ 283.289395][ T6657] debugfs: 'hsr0' already exists in 'hsr' [ 283.289421][ T6657] Cannot create hsr debugfs directory [ 283.290063][ T6679] chnl_net:caif_netlink_parms(): no params data found [ 284.448988][ T5840] IPVS: starting estimator thread 0... [ 284.682062][ T6762] IPVS: using max 6 ests per chain, 14400 per kthread [ 293.271237][ T6764] batman_adv: batadv0: Adding interface: dummy0 [ 293.271253][ T6764] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 293.271278][ T6764] batman_adv: batadv0: Interface activated: dummy0 [ 293.423596][ T6759] batadv0: mtu less than device minimum [ 293.431861][ T6759] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 293.438181][ T6759] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 293.447418][ T6759] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 293.453486][ T6759] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 293.462037][ T6759] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 293.468039][ T6759] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 293.474312][ T6759] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 293.480375][ T6759] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 293.486463][ T6759] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 293.848348][ T6714] chnl_net:caif_netlink_parms(): no params data found [ 295.242349][ T6679] bridge0: port 1(bridge_slave_0) entered blocking state [ 295.242551][ T6679] bridge0: port 1(bridge_slave_0) entered disabled state [ 295.242834][ T6679] bridge_slave_0: entered allmulticast mode [ 295.274884][ T6679] bridge_slave_0: entered promiscuous mode [ 295.343310][ T6679] bridge0: port 2(bridge_slave_1) entered blocking state [ 295.343676][ T6679] bridge0: port 2(bridge_slave_1) entered disabled state [ 295.343888][ T6679] bridge_slave_1: entered allmulticast mode [ 295.368185][ T6679] bridge_slave_1: entered promiscuous mode [ 295.678911][ T6790] netlink: 24 bytes leftover after parsing attributes in process `syz.4.204'. [ 296.647940][ T6679] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 296.906446][ T6714] bridge0: port 1(bridge_slave_0) entered blocking state [ 296.906550][ T6714] bridge0: port 1(bridge_slave_0) entered disabled state [ 296.906764][ T6714] bridge_slave_0: entered allmulticast mode [ 296.908801][ T6714] bridge_slave_0: entered promiscuous mode [ 296.946841][ T6679] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 297.212160][ T6714] bridge0: port 2(bridge_slave_1) entered blocking state [ 297.212475][ T6714] bridge0: port 2(bridge_slave_1) entered disabled state [ 297.212732][ T6714] bridge_slave_1: entered allmulticast mode [ 297.239228][ T6714] bridge_slave_1: entered promiscuous mode [ 298.394036][ T6679] team0: Port device team_slave_0 added [ 298.458250][ T6714] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 298.592141][ T6679] team0: Port device team_slave_1 added [ 299.260780][ T6714] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 300.015668][ T6679] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 300.015693][ T6679] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 300.015723][ T6679] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 300.173658][ T6679] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 300.173675][ T6679] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 300.173696][ T6679] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 300.177988][ T6714] team0: Port device team_slave_0 added [ 300.546728][ T6714] team0: Port device team_slave_1 added [ 301.725533][ T6714] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 301.725554][ T6714] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 301.725584][ T6714] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 301.933296][ T6657] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 301.973067][ T6714] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 301.973082][ T6714] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 301.973103][ T6714] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 302.031784][ T6819] netlink: 24 bytes leftover after parsing attributes in process `syz.2.212'. [ 302.279656][ T6657] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 302.398268][ T6811] syz.4.209 (6811): drop_caches: 2 [ 302.519482][ T6679] hsr_slave_0: entered promiscuous mode [ 302.522839][ T6679] hsr_slave_1: entered promiscuous mode [ 302.547641][ T6679] debugfs: 'hsr0' already exists in 'hsr' [ 302.547676][ T6679] Cannot create hsr debugfs directory [ 302.548200][ T6657] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 302.607258][ T6821] cgroup: fork rejected by pids controller in /syz2 [ 302.741477][ T6657] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 303.947403][ T6714] hsr_slave_0: entered promiscuous mode [ 303.955542][ T6714] hsr_slave_1: entered promiscuous mode [ 303.956996][ T6714] debugfs: 'hsr0' already exists in 'hsr' [ 303.957032][ T6714] Cannot create hsr debugfs directory [ 306.942113][ T6657] 8021q: adding VLAN 0 to HW filter on device bond0 [ 306.976692][ T6912] ------------[ cut here ]------------ [ 306.976721][ T6912] WARNING: CPU: 1 PID: 6912 at fs/exec.c:119 path_noexec+0x1af/0x200 [ 306.976813][ T6912] Modules linked in: [ 306.976861][ T6912] CPU: 1 UID: 0 PID: 6912 Comm: syz.4.221 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 306.976890][ T6912] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 306.976910][ T6912] RIP: 0010:path_noexec+0x1af/0x200 [ 306.976939][ T6912] Code: 02 31 ff 48 89 de e8 50 cf 92 ff d1 eb eb 07 e8 e7 c9 92 ff b3 01 89 d8 5b 41 5e 41 5f 5d c3 cc cc cc cc cc e8 d2 c9 92 ff 90 <0f> 0b 90 e9 48 ff ff ff 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c a6 [ 306.976959][ T6912] RSP: 0018:ffffc9000484fbf8 EFLAGS: 00010287 [ 306.976980][ T6912] RAX: ffffffff822b927e RBX: ffff888030e1aec0 RCX: 0000000000080000 [ 306.976998][ T6912] RDX: ffffc9000d87b000 RSI: 00000000000000a5 RDI: 00000000000000a6 [ 306.977013][ T6912] RBP: 0000000000080000 R08: 0000000000000000 R09: 0000000000000000 [ 306.977027][ T6912] R10: 0000000000000100 R11: 0000000000000003 R12: 0000000000000011 [ 306.977041][ T6912] R13: 1ffff92000909f90 R14: 0000000000000000 R15: dffffc0000000000 [ 306.977057][ T6912] FS: 00007f18c4bf66c0(0000) GS:ffff8881269c2000(0000) knlGS:0000000000000000 [ 306.977078][ T6912] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 306.977095][ T6912] CR2: 000000110c361a67 CR3: 0000000027842000 CR4: 00000000003526f0 [ 306.977116][ T6912] Call Trace: [ 306.977133][ T6912] [ 306.977148][ T6912] do_mmap+0xa20/0x10c0 [ 306.977194][ T6912] ? __pfx_do_mmap+0x10/0x10 [ 306.977223][ T6912] ? rwbase_write_lock+0x56f/0x750 [ 306.977278][ T6912] vm_mmap_pgoff+0x2a9/0x4d0 [ 306.977321][ T6912] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 306.977361][ T6912] ? __fget_files+0x2a/0x420 [ 306.977392][ T6912] ? __fget_files+0x3a6/0x420 [ 306.977424][ T6912] ? __fget_files+0x2a/0x420 [ 306.977464][ T6912] ksys_mmap_pgoff+0x4e9/0x720 [ 306.977499][ T6912] ? __x64_sys_mmap+0x7f/0x140 [ 306.977535][ T6912] do_syscall_64+0xfa/0x3b0 [ 306.977569][ T6912] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 306.977593][ T6912] ? asm_common_interrupt+0x26/0x40 [ 306.977615][ T6912] ? clear_bhb_loop+0x60/0xb0 [ 306.977643][ T6912] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 306.977666][ T6912] RIP: 0033:0x7f18c698ebe9 [ 306.977694][ T6912] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 306.977712][ T6912] RSP: 002b:00007f18c4bf6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 306.977736][ T6912] RAX: ffffffffffffffda RBX: 00007f18c6bb5fa0 RCX: 00007f18c698ebe9 [ 306.977754][ T6912] RDX: 0000000003000007 RSI: 0000000000003000 RDI: 0000200000000000 [ 306.977770][ T6912] RBP: 00007f18c6a11e19 R08: 0000000000000008 R09: 0000000000000000 [ 306.977786][ T6912] R10: 0000000000000011 R11: 0000000000000246 R12: 0000000000000000 [ 306.977800][ T6912] R13: 00007f18c6bb6038 R14: 00007f18c6bb5fa0 R15: 00007ffd21ec33c8 [ 306.977839][ T6912] [ 306.977850][ T6912] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 306.977868][ T6912] CPU: 1 UID: 0 PID: 6912 Comm: syz.4.221 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 306.977894][ T6912] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 306.977908][ T6912] Call Trace: [ 306.977918][ T6912] [ 306.977927][ T6912] dump_stack_lvl+0x99/0x250 [ 306.977966][ T6912] ? __asan_memcpy+0x40/0x70 [ 306.977993][ T6912] ? __pfx_dump_stack_lvl+0x10/0x10 [ 306.978029][ T6912] ? __pfx__printk+0x10/0x10 [ 306.978071][ T6912] vpanic+0x281/0x750 [ 306.978105][ T6912] ? __pfx__printk+0x10/0x10 [ 306.978139][ T6912] ? __pfx_vpanic+0x10/0x10 [ 306.978175][ T6912] ? is_bpf_text_address+0x292/0x2b0 [ 306.978222][ T6912] panic+0xb9/0xc0 [ 306.978258][ T6912] ? __pfx_panic+0x10/0x10 [ 306.978313][ T6912] __warn+0x31b/0x4b0 [ 306.978347][ T6912] ? path_noexec+0x1af/0x200 [ 306.978375][ T6912] ? path_noexec+0x1af/0x200 [ 306.978401][ T6912] report_bug+0x2be/0x4f0 [ 306.978430][ T6912] ? path_noexec+0x1af/0x200 [ 306.978455][ T6912] ? path_noexec+0x1af/0x200 [ 306.978480][ T6912] ? path_noexec+0x1b1/0x200 [ 306.978505][ T6912] handle_bug+0x84/0x160 [ 306.978541][ T6912] exc_invalid_op+0x1a/0x50 [ 306.978576][ T6912] asm_exc_invalid_op+0x1a/0x20 [ 306.978599][ T6912] RIP: 0010:path_noexec+0x1af/0x200 [ 306.978624][ T6912] Code: 02 31 ff 48 89 de e8 50 cf 92 ff d1 eb eb 07 e8 e7 c9 92 ff b3 01 89 d8 5b 41 5e 41 5f 5d c3 cc cc cc cc cc e8 d2 c9 92 ff 90 <0f> 0b 90 e9 48 ff ff ff 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c a6 [ 306.978644][ T6912] RSP: 0018:ffffc9000484fbf8 EFLAGS: 00010287 [ 306.978664][ T6912] RAX: ffffffff822b927e RBX: ffff888030e1aec0 RCX: 0000000000080000 [ 306.978682][ T6912] RDX: ffffc9000d87b000 RSI: 00000000000000a5 RDI: 00000000000000a6 [ 306.978698][ T6912] RBP: 0000000000080000 R08: 0000000000000000 R09: 0000000000000000 [ 306.978713][ T6912] R10: 0000000000000100 R11: 0000000000000003 R12: 0000000000000011 [ 306.978727][ T6912] R13: 1ffff92000909f90 R14: 0000000000000000 R15: dffffc0000000000 [ 306.978755][ T6912] ? path_noexec+0x1ae/0x200 [ 306.978788][ T6912] ? path_noexec+0x1ae/0x200 [ 306.978815][ T6912] do_mmap+0xa20/0x10c0 [ 306.978858][ T6912] ? __pfx_do_mmap+0x10/0x10 [ 306.978889][ T6912] ? rwbase_write_lock+0x56f/0x750 [ 306.978939][ T6912] vm_mmap_pgoff+0x2a9/0x4d0 [ 306.978982][ T6912] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 306.979023][ T6912] ? __fget_files+0x2a/0x420 [ 306.979055][ T6912] ? __fget_files+0x3a6/0x420 [ 306.979088][ T6912] ? __fget_files+0x2a/0x420 [ 306.979135][ T6912] ksys_mmap_pgoff+0x4e9/0x720 [ 306.979170][ T6912] ? __x64_sys_mmap+0x7f/0x140 [ 306.979207][ T6912] do_syscall_64+0xfa/0x3b0 [ 306.979241][ T6912] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 306.979264][ T6912] ? asm_common_interrupt+0x26/0x40 [ 306.979287][ T6912] ? clear_bhb_loop+0x60/0xb0 [ 306.979316][ T6912] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 306.979337][ T6912] RIP: 0033:0x7f18c698ebe9 [ 306.979356][ T6912] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 306.979374][ T6912] RSP: 002b:00007f18c4bf6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 306.979398][ T6912] RAX: ffffffffffffffda RBX: 00007f18c6bb5fa0 RCX: 00007f18c698ebe9 [ 306.979415][ T6912] RDX: 0000000003000007 RSI: 0000000000003000 RDI: 0000200000000000 [ 306.979430][ T6912] RBP: 00007f18c6a11e19 R08: 0000000000000008 R09: 0000000000000000 [ 306.979446][ T6912] R10: 0000000000000011 R11: 0000000000000246 R12: 0000000000000000 [ 306.979459][ T6912] R13: 00007f18c6bb6038 R14: 00007f18c6bb5fa0 R15: 00007ffd21ec33c8 [ 306.979497][ T6912] [ 306.979864][ T6912] Kernel Offset: disabled