last executing test programs: 36.42757411s ago: executing program 1 (id=766): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5b5d}, [@IFLA_AF_SPEC={0x24, 0x1a, 0x0, 0x1, [@AF_INET6={0x20, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @private2={0xfc, 0x2, '\x00', 0x1}}, @IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x2}]}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000009c0)={0x6, 0x0, 0x0, 0x0, 0xdf64, 0x0, 0x0, 0x41100, 0x5, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000580)={0x8, 0x3}, 0x8, 0x10, &(0x7f00000006c0)={0x5, 0xc, 0x7, 0x43e64c37}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x2c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x9}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}]}, 0x2c}}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x14, 0x0, 0x4, 0x70bd2c, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x50}, 0x20000800) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000100)={'macvlan1\x00', 0x0}) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 36.218047175s ago: executing program 1 (id=768): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r2, 0x0, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x2008c014) connect$inet6(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, 0x0, 0x0) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r7 = io_uring_setup(0x6b7, &(0x7f0000000000)={0x0, 0xd7f1, 0x800, 0x2, 0x8b9}) io_uring_register$IORING_REGISTER_PBUF_RING(r7, 0x16, &(0x7f0000000140)={&(0x7f0000001000)={[{0x0}]}, 0x1}, 0x1) 35.279852836s ago: executing program 1 (id=774): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = dup(r0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x60, 0x10, 0x401, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x1503}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x28, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0x4, @local}, {0xa, 0x4, @local}]}, @IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x60}, 0x1, 0x0, 0x0, 0x4001}, 0x0) 35.086852785s ago: executing program 1 (id=776): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) umount2(&(0x7f0000000040)='.\x00', 0x2) 34.978556976s ago: executing program 1 (id=778): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000500)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha512\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmsg$unix(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000200)=""/18, 0x12}], 0x1}, 0x0) 34.369920416s ago: executing program 1 (id=780): r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000000)={{0x84, @broadcast, 0x4e21, 0x3, 'fo\x00', 0x11, 0x3240, 0x3a}, {@loopback, 0x4e23, 0x4, 0xc3, 0x12d5c, 0x12d5c}}, 0x44) setsockopt$IP_VS_SO_SET_DELDEST(r0, 0x0, 0x488, &(0x7f0000000280)={{0x84, @empty, 0x4e20, 0x3, 'lblc\x00', 0x1d, 0x2, 0x2a}, {@loopback, 0x4e23, 0x10000, 0xc24, 0x9, 0xfffffffb}}, 0x44) 34.201463765s ago: executing program 32 (id=780): r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000000)={{0x84, @broadcast, 0x4e21, 0x3, 'fo\x00', 0x11, 0x3240, 0x3a}, {@loopback, 0x4e23, 0x4, 0xc3, 0x12d5c, 0x12d5c}}, 0x44) setsockopt$IP_VS_SO_SET_DELDEST(r0, 0x0, 0x488, &(0x7f0000000280)={{0x84, @empty, 0x4e20, 0x3, 'lblc\x00', 0x1d, 0x2, 0x2a}, {@loopback, 0x4e23, 0x10000, 0xc24, 0x9, 0xfffffffb}}, 0x44) 34.190802383s ago: executing program 4 (id=782): write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f00000000c0)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000200)=[{0x2b, 0x0, [0xfff, 0x4, 0xce94, 0x1, 0xfffffffa, 0x3, 0x1ff, 0x7, 0x3f, 0xfffffffe, 0x60bf, 0x5, 0x1, 0x6, 0x8, 0x200]}], r0, 0x1, 0x1, 0x48}}, 0x20) 34.09799121s ago: executing program 4 (id=783): r0 = syz_open_procfs(0x0, &(0x7f0000000440)='net/route\x00') preadv(r0, &(0x7f00000001c0), 0x0, 0x20, 0x0) r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi0\x00', 0x8080, 0x0) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, &(0x7f0000000540)={'pcm3724\x00', [0x109, 0x80008000, 0x86c, 0xc, 0x80000000, 0x0, 0x1, 0xf, 0x1000, 0x1, 0x1, 0x5, 0x6, 0x746, 0x100, 0x6, 0xffffffa7, 0x2000001, 0x0, 0x65c, 0x3ff, 0x10004, 0x800, 0xe2df, 0x9, 0x6, 0x4, 0x3, 0x7, 0x4, 0x5]}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) preadv(r3, &(0x7f0000001b00)=[{&(0x7f0000000000)=""/222, 0xde}], 0x1, 0x8, 0xeffffffc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x8000000000000}, 0x0, &(0x7f0000000100)={0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0) 32.369374349s ago: executing program 4 (id=787): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = dup(r0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x4c, 0x10, 0x401, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x1503}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}, @IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4001}, 0x0) 32.162317381s ago: executing program 4 (id=788): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) umount2(&(0x7f0000000040)='.\x00', 0x2) 31.358744371s ago: executing program 4 (id=790): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x40101) bpf$MAP_CREATE(0x0, 0x0, 0x50) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ptrace(0x10, 0x0) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$rds(0x15, 0x5, 0x0) bind$rds(r4, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r4, &(0x7f00000007c0)={&(0x7f0000000040)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f0000000400)=[@rdma_map={0x30, 0x114, 0x3, {{0x0}, 0x0, 0xd}}], 0x30, 0x8004}, 0x0) getpid() ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r0, &(0x7f00000000c0), 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000180)={'veth1_virt_wifi\x00', &(0x7f0000000100)=@ethtool_rxfh={0x47, 0x1, 0x8, 0x6, 0x6, "6e5bce", 0x9}}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_DELOBJ={0x1c, 0x14, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}]}], {0x14}}, 0x44}}, 0x0) 29.989702219s ago: executing program 4 (id=798): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="fc00000019000100000000000000000000000000000000000000000000000000fc01000000000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000b93760000000000000000000000000000000000000000000200000000000000010000000000000044000500ac141400000000000000000000000000000000003c00000000000000000000000000000000000000000000000000000001"], 0xfc}, 0x1, 0x0, 0x0, 0x24008040}, 0x20040000) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@updpolicy={0xb8, 0x19, 0x1, 0xfffffffc, 0x0, {{@in=@dev={0xac, 0x14, 0x14, 0x2c}, @in6=@local, 0x4e22, 0x0, 0x4e24, 0x0, 0xa, 0x0, 0x60}, {0x0, 0x1000000000000401, 0xfffffffffffffffe, 0x40000000, 0x0, 0x1a, 0x1, 0xfffffffffffffffe}, {0x7a, 0x5, 0x0, 0x7fff}, 0x8, 0x0, 0x1, 0x0, 0x3}}, 0xb8}}, 0x8044) sendto$inet6(r3, &(0x7f0000000240)="8a", 0x1, 0x51, &(0x7f0000000080)={0xa, 0x3, 0x1, @local, 0x9}, 0x1c) 29.752336359s ago: executing program 33 (id=798): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="fc00000019000100000000000000000000000000000000000000000000000000fc01000000000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000b93760000000000000000000000000000000000000000000200000000000000010000000000000044000500ac141400000000000000000000000000000000003c00000000000000000000000000000000000000000000000000000001"], 0xfc}, 0x1, 0x0, 0x0, 0x24008040}, 0x20040000) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@updpolicy={0xb8, 0x19, 0x1, 0xfffffffc, 0x0, {{@in=@dev={0xac, 0x14, 0x14, 0x2c}, @in6=@local, 0x4e22, 0x0, 0x4e24, 0x0, 0xa, 0x0, 0x60}, {0x0, 0x1000000000000401, 0xfffffffffffffffe, 0x40000000, 0x0, 0x1a, 0x1, 0xfffffffffffffffe}, {0x7a, 0x5, 0x0, 0x7fff}, 0x8, 0x0, 0x1, 0x0, 0x3}}, 0xb8}}, 0x8044) sendto$inet6(r3, &(0x7f0000000240)="8a", 0x1, 0x51, &(0x7f0000000080)={0xa, 0x3, 0x1, @local, 0x9}, 0x1c) 4.617852769s ago: executing program 3 (id=894): ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0xc1105511, &(0x7f0000000040)={0xc, 0x3, 0x40, 0x10000, 'syz0\x00', 0x400}) 4.616269752s ago: executing program 3 (id=895): openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x400100, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x1fffffffffffffed, 0x0, &(0x7f0000000100)='GPL\x00', 0x20000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = syz_io_uring_setup(0x497, &(0x7f0000002180)={0x0, 0x787b, 0x100, 0x4, 0x401b0}, &(0x7f00000000c0)=0x0, 0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r3, 0x16, &(0x7f0000000040)={&(0x7f0000001000)={[{0x0, 0x1f, 0x3}]}, 0x1, 0x1}, 0x1) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000d00)={0x8, {"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", 0x1000}}, 0x1006) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, 0x0, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x200, 0x1, {0x1}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, 0xffffffffffffffff, 0x0) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f00000000c0)={0x4000, 0x80600}) 4.417988714s ago: executing program 3 (id=896): sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x80800) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) sendmmsg$unix(r4, &(0x7f0000003dc0)=[{{&(0x7f0000000000)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x9802}}, {{&(0x7f0000000280)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}], 0x299, 0x0) 3.948604174s ago: executing program 2 (id=898): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x6, 0x3, 0x0, &(0x7f00000002c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = socket$inet6(0xa, 0x1, 0x84) setsockopt$inet6_int(r3, 0x29, 0x1a, &(0x7f0000000080)=0x2, 0x4) unshare(0x22020600) sendto$inet6(r3, &(0x7f00000002c0)='\x00', 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r3, 0x84, 0x6d, &(0x7f0000002280)=""/4090, &(0x7f0000000040)=0xffa) 2.642762886s ago: executing program 2 (id=901): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff02000000000000000000000000000100000000000000cc00000000000000000000000000000000860090780000000000000000000000000000ee3f000000002b036f8c006e64021d683910c3090b3188a7c747eb2278a273c1", @ANYRES64], 0xfdef) 2.535556809s ago: executing program 0 (id=902): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x1e1482, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000200)={0xc, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOAS$SET(r0, 0x3b88, &(0x7f00000002c0)={0xc, r1}) ioctl$IOMMU_VFIO_SET_IOMMU(r0, 0x3b66, 0x1) ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(r0, 0x3b72, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"]) 2.386134989s ago: executing program 0 (id=903): ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0xc1105511, &(0x7f0000000040)={0xc, 0x3, 0x40, 0x10000, 'syz0\x00', 0x400}) 2.385865487s ago: executing program 5 (id=781): socket$inet6(0xa, 0x2, 0x0) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r0 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, 0x0, &(0x7f0000000080)) socket$rxrpc(0x21, 0x2, 0xa) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r3 = syz_open_procfs(0x0, &(0x7f0000000240)='net/wireless\x00') preadv(r3, &(0x7f0000000000)=[{&(0x7f0000000400)=""/159, 0x9f}], 0x1, 0x105, 0x97e) 2.385670526s ago: executing program 2 (id=904): openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x400100, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x1fffffffffffffed, 0x0, &(0x7f0000000100)='GPL\x00', 0x20000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = syz_io_uring_setup(0x497, &(0x7f0000002180)={0x0, 0x787b, 0x100, 0x4, 0x401b0}, &(0x7f00000000c0)=0x0, &(0x7f0000000280)=0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r3, 0x16, 0x0, 0x1) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000d00)={0x8, {"7894e6e62ce0f10fcdce74f21ad5b47c923d4dec90cefd599912070f341d59a8802e33af9869738f25b2f72093dd0ffa688e8e417c6e0e09b99649818d7caca39e142ef69d9101397854c3f51bde013686a626b2120c03d98c0ad981069188fbbddb88bf41a6b29ed43d1244e6025e1e4a2f40577619ccee39385bfc86461023a7906e5c07d16415140f4ab26db004362c885ef2c9ee82d3dd7e2ac42ca05d81ccea87dc0ec4a8f222013d6d4d0b0c828f3d2e3151dce87bfb335c1ad67bb3323564022ab23a6ba54ca117ca592c8d4227922347ea6f7c9d3dbdbc8d235f2d03e688d5ca7718d60e911534f964bf20359a0057847e7d7fd2cc463784aab2b06ba95512cfc427da44aa73634b0797b9baab391aa176d259c047ee9d346e63903860ab3c571d064509a715c5c4c6edffce9e1701e8291c2d937e3ff18691fe9a665b1a3b717a40205f8efa239b37e6b33f5c8ac28e616f788d0294c8d39ff4a63aaca7d4c578a935dd84850432201081bc1b00c5797847eaff8cecf8af8a60f075b5ff1c3dc9e62f9a3cfc4333a7501dd8badfdc691a9d35d3fc2c0e8f1b21a2c619201004a0d82bace1738ba9ca93e6fbf8ebaa78b5423efb19d3337ad050a7a1a634737a0169921911b277ab235f8b186efd60c3eff58e974a856ba460c5fbd91c1b5c999a7f6b4474560e0c5698085e1ff96381999bf7338dddab4499c6ae315245ecc98d3ca2ebc11214a4115e9205e7d1705591be4029a5e92ae06c02ba39ac70cf1ba082ccee070bf2feafa55ac6e863adb6f89a7475c2dc073058b0f8a52151d8c3ced025463656942bfd257ace6c54bd57985a44cef1c20777db47d12bd34371ef6f537e455b7787e3a853713877fa9465937602ceef8b9439507ab802ea4eaf5ee2ecd710b1840d8b8c995b5904434198abd8f0e830857ed1af53f3bcede9d57afb1cd7ad27bf222a6d1c58286c40d22211a3b2b7b7bbf5923a528fa4d781aaec1f67e013392b17197d2f6ff2d0e68bea94ce57cc516daffdf2348333a8dc596894540aa2a79437d95465fc27627b0e26871d5248c39e1a3badb319d449a7d67145418e1a35cb4bf950a5483d6e80763ea676b89d1f1e2cea20c590c76ae9fb228ffd638ccabdb3830cf944e1cccfb7ba8b1d1f0aabc498155ddda8404ebe2e25cfcfa9058af7d66bef79e592a579d556404ea3f28d6ddb3fdead9123247e23827f729eee41540d0f0e94027d65eee4e7c1c913c634f9abf546388cd2e4b351b16bd97faae3b54f5b2750495619ec36d97a1080564fa30a9f8a2700b77340b5bbd9cc377ee35420b5b762935047af7837e973a9da42ef93c11f145704d041054bcc4680363cbbee16a2bc0eaaa49cfa23330a666dff32daa17a6ea425f1ed2354d0c36893c895a0564e100d3e1385467405ca2706cfb62453faf72b1648727faeffb3c934bc4e48e4ce93af11bff3208cb3843da7ed68451b4af747ef72e2fb78a73990c95097c9504aacddffc5caadeb171e95ad113561144907d361fd28695239f6619360b9d0eead653cc83ab13fc7c0c60237e3363b6f319daa38d792426393e2396404a112ed9e70b378f494d4b540bf9b44d76b347a12c8cdaeed350a85698eb71bd126f75b9aa0ff7435926a4a4ce04e4187eae5a80b1ff56aa7f1b005a9a057b6ace4cf08c404f66c0b31974d151e9a2840ebcbfbfd898e6694b89fe78a68b90551c9d33c14914dceff64a699c1cf1570c2d1f53e905abef9f954fbdd100b1b18f10dbd673bd6c7a9693286cf2dc0ab9919466750aa42ccfa27e9ff4190dd784ec6f2e19270521f98561a959152b16a80f0b1e183375d3886936ae03ff4949777d30481c24bbae918d5fdcc8f46ff05e2370095bc85cde086dc1e32423f21c13c42490fb679462f35dd0c4ef06f8c3f24327af47ea2c73a856f112385094fe138022e308c157adb19b94ed0e8d94b805883318b33b22f371d62f0b764b2a44b65018bef417357aa997ea4ef95a2899963e06a3c553943e14d3364b73919f5e6d8395d56d522f1b19ae37d48f1534d92e4248824adb555281aea2fb317bfb30cdc7d4efada900006f45578a061b19e2eeefffdbf1974a1633182501611724079f926122c1c8fd9b1d8e6302d76ed90616abcfcac478e3b8d3be91eee5f9c653f8fed3afc1eb33d9314aaa021e8b53ab7ba3e59b301a6c757efd95c6661d7d3e8a73cdec7833f4608dc238d8e144a5b0196a9aea6fb30efdfdb05f9529c52af93cd78d857e3cc920bf30b2292380c662890f3679c09aea55c77a75dbb4da338c0fb737a5fc31252d9fa798f9dd70947f6cfa0474a7a835c694dfbb5c678216915d1f04c81d5df8f2efde80fdbce8248525d9b639f394847b9a8c2e7f7288b031df91db059eabb750c1bfe732b78001c2cca0f74cd8873cc2a892d26e1dbd48db297853775c21d68ce1daebee4f4d65bf8e448b1c80da35eaff3295ffe0aef68baff15f7585aba741699c3ed9a62f2c18200e40cbb383b844459ca9636d61645470d4f8b04704b84a7986d816c037d368d807ab936faa842a427cc4987ab506f3f08841195c893f39656547ff62730ec43aa78311d57defe4002301f6b9e1f6573f3a46715e2d1f899480e8bc97f5dfe48ad14df280126998d32dc0a63231584b5ee82d5f90d5ccd3eb3923cee0dfe0eb9b1ac54fd97214ad86c6459cf916ba0bfc9d4210a95346d753f4bc7440d78274c4cd1850907a2bf150a1c1b511bf0438494a6aa1a197f787c96b410d866b4cb284f74122ffbb2f5fa7c2c22f935c7e1542ff83f01e3024ee6e3d7fd0fba2754e635c8116a27f15586300d6522979822c1f97038f33c644ef82e9818f4a09388cb9a69514c929e9bc149fd7a26b458d89abb5e3ae1de29ed1f28d613878a24a9296c967339b9c6749f92c720982cb78a120bcf7593c6fbae36f9a06caa384a7e5d3f05442b0a69f72518a76a916968aae56abda54dac318fd726335e95592f80d030ef51aea41d5e348267fcea65e49d8e36e711fedb3fb9ad37d3fdf2185dcc3ff44736d6a0d4b4bd1810f89ec6e0e6b6f58f74d73ddd2a27fcfaf36d1aec6c3769787a1d3b8514487a399e6497bd0bf4c4242868d599aeb2202cae535e8118d478fc43b4c8bfdcf024f36f5d7c9f75c69bc9d4d5414e8bef740bcaf9027dbdb0f47643b984406c9ce1999d7631243c26d6824ae74ab71f536e40e934a5dfea7f5c5d10713c831df6ba168f4080a4b082e94bc23c0807aab7c0bc29f327d185a2a9302cc255aa54764c4eb8ef5b17d640afa30b36572294914d51ac146f87af6f5abd97823724aba25f589e769aa1047e72365e9ee67e7f90e80542cc842aebabc97679dd893075e8a1bd6934ac9e768e20bcf4c2fa29c5f7a103d3ff689c721e08ef1d0ca61ee3e07a815aa943879dd5c406dcff6a946b0a12980620cfb224912e27accbb63b1e2d571c65918c806060dcd08d5cef341e5c5705021ec19605b809a44d2a8f6f27e18f2b8fd268e23706564df5501096fd8f8261e27d5c8b582673f0c76bf78b27f754cddb5b64a33c87841681d8eef2b5abe8a8deabee587189f75b8b518909cd2a6f89910425e8647f25077829f1b400b3abcaeff6f54ccc00f6fb7abeeefe0226e4e2b55fba0925b49be8310fc5a490384e4a5e7216b0fd0c09c00e3327ada8c59eb37443ac9148a9df92b0d4e6851cd93b784d3e0a236d9fe7c483f03d813fc98e632cf6255dc4a70a0458570776509ebfb545f35956c7e32493f6ad886ec858bfc29bffb7f2ae7eed7d83e3075554dd81e72c93f4c2e4dcdb0832e76861b983b17c2a6f887a988e4fd47459fd45134560b5b1bec10c50914f2d7f327a4e68a0c453f067035f243ca01aa22969481d5fb48d1da82f35222c4e8d249625c454159f7b00a85d43414eb5e7c8044922b323f2473af648d1dba5ffff34bd5e023a2fe4860d7568fa4d35ad20c461eb38bced561edcef853dbcdd7b69bb40e9cda525a71a286c956a1268cacad0bc0c79ed7632aedbb8dc78ba1a2adea2b650314072d1ebc08f9753d6d38e53a758ea4700160588e819239711a506f004ec57037cd6efcbb9cee3bba556eaaa008bf8e8390085b85653c7aa006dd836c7ad025bed9dec77a4a00b309776862fca4dd01dff16aa6bd70a876662093b85ffbb07b2f8b4361f5dc635f940571239a71865e8f1a289f449ae9a74266205c8b1fe8a732db502c9ea5e5c379b704d43ef795b40450aa498535803767d2c2cbd2749474d2997e00f37612fcc0ae7322b8c8e2a90cf66ada69bd05b82d5707562b37e40674f0a3f58d9c776a931b8768d5c23f17c5f9135e7a4ce0c6eb356d9fb4a53d112194c19e6f045d2bd44132a70b9ccd7e65d2787899785f7ee9185589136c847347142440e0a405c18ff3f31acb791a805dd281aaf97aee708dcce2f1aa53161b7716fa0978c0d02871637ad7e1af5a158b727a1dfc2ae1aafbb9c516469ee89fa0f1de23a17115ded5e9c560a468c5192943be74aeaba51083ca0379563f1fa78e29eca1eaf849cd00f419ceb59e640248c332c845e68e9a398281b962ae59aa5b18006b6ea6e0c5f1b30665e1fb975da11ed6a47bd44b4241bbf0443f178e8249805cc3f980a4bb2f46baab0a12e9e9b2aaa7e0ca22b2314a9e5ef6412f4efe31381e3d716244af3112444eabbb0c353acafc0f1179ad4c63b81e5f5bfd771591d24e5254fa72e30aa53717c24b49cee71cdd9368e207af5e992a04f06de912cfcfca38732f5c8393d466d209680ebfa5764897f04531138beff3f65691593e334c2ae2825ffa9353e8aeef37b90691ea5c78d7c86124abf6491a068bf03c3467e5e42ca4b58192d17856722207568777141ccbef3f3891708897af9c196be92056527a8da820d28dccaf4dfed4d38fb8fe826b238d31bad751631a0d8b1eabdfa7bffe65241238ff982d21b2222cdd3a536385d0ab2180ccdf4672d0b21156377fe640ee8c8744b9ba1efce91c295e83a4271a34a1f70adbc2ff0aa6ba9e1965061cadcd3d824636bbc1f977c78dde1859d752c86b099705616edf6e94523f108af79ab5073d26f3788c4d56f1b17b764c1bc387e531dab5dd71198c56b02c68552dc1098beec85dc1bbe2dde316e6093a9a33f578d789da9b2a9209ed6e73a0597bc62467afc42f0348c9b885b92f37569a953f6316d5c8b188539474da3836abeae7ec259cf8fd28f02593597e9206e05e8da4f4346aab36f179deb68a9dab9b550d6fe4f0c88563935328a699b9cbb2015be57c28beaf60be499114f04a96a2f7fb3bf3b5b31e422954c96790aa1e49c5bc1946df0df2b4be63c0aac1ddcf187714f6e67a076a823feaeba5db4a99e5f494ec939d1b0ecd23752c08c3b788704612127e7f080ef581b4990accd6dca7ce52844bc7bbc8c8752497c171d8e628c53609a920fb5a1bc740cb05e2035de72f636ef0498ed2f3cccb64d5740afbc30015442ca0511160787b2c763072c70035f7f3bbbd3966bcc80d021ce1482e27681b963a28189c2ee9d64d0622a94eac689d3fc1a4137c4d62a4c73fab4b0175a8ff8fa256118affd94aaeee33b155043f53d9e3d4eb82173df0938c6c3e51c118c1acf187c84f12090ad1dd663013e433455290f87ca88959f9f481e4dd05e6a483abe00f7c974e5ff602a7a6eaa71f8ac06c50afac0c2858b554f59bf88002766a619ae9b0864926d07b273238e1ebd456543f77ea800231dbf4479f0b90fc607", 0x1000}}, 0x1006) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x200, 0x1, {0x1}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, 0xffffffffffffffff, 0x0) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f00000000c0)={0x4000, 0x80600}) 2.164537337s ago: executing program 0 (id=905): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x204, 0x3ff, 0x7}}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f000001bfc0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r2, {0x7, 0xffe0}, {}, {0xa, 0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_CLASSID={0x8, 0x1, {0x0, 0x2}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x22044028}, 0x4c004) 2.159161626s ago: executing program 2 (id=906): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_KEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 2.066678624s ago: executing program 3 (id=907): r0 = memfd_create(&(0x7f0000000280)='[\v\xdbX\xae\x04\x00\x00\x00\xc2\x9aml\r\xcf\xaa\x13\x99\x85B\xc3\x06<\xc2\xa9\xc3\xdb\x88\xee\x85md\xc8\x85HX\xa9%\f\x8fe\xe0\x00\x00\xa8\xfdn\xbe \a\x0e\xa3\xb9\x1d\x9dO\xbdj\x00\x00\xfb\xff\x00c\xb2\xc9\ap\xd0\xa2\x82\x1e\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcb\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2\xa75\x9d\xcb\x1e\x80\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x00uNh\xc5(\xbc\xf3\xac{\x04D2\xf2\xcd\xc2{E\xae\x89\xddI\xc8\xc6\xe9\xef\x98\xf0\x8b\xac\x9bR\x10\x011\x9fi\x00\x00\x00\x00\x00\x00\x00\x00\x002?D\x86\x14\xa52<\x87n\xf4\x04R\x15\t\xb8\xbeT\xb8\xe7K)\x1fP\xb6\xce8\xcc\xabe\xcb\xd0\xf9\xc9\xfe_\v\xaa#\x8f\x8asu\xb2\xfe\xc4\xbe\x03\xd3\x93E\x1d\xaf}\x9b\xac\xc2\x9a\xe6W\x92sD\fn\x9e\xc2s\xc6_4\f\xc1\x8b\x9a\xa4_\xad\x9b\xb9 \v\x0f{>\xdf^.\xb8\x96\x1d\x99vY\xa8\xfa\xd7i\x94i^;\xaa\xe7XA\xd2\xc5\x02\x12I\xbe\xd0Ksq\x96 \xbf\xed\x1c\x91\xeeN\xda&\xddtG\xc2\xa8j\xae\xac)\xfdNu\x19\x91\xa7z\x1b\x0e\xab\xd2k\x16\x87#\xf6p#\x8d\xdd?\x9fXV\x12\xa9\xc7v\x02\x98g:4\xb6\xcaY\xc2~k\xcb\xef]h/\xa2\xaf\xc4\xec\xdc\xd4H\xed\x94qNY\x85\x87&\xf1\xbb\f\x02\x0fo\xae\xf4\x19|\xc4\xfcL\xdb\x00\xedrK\x13\xb5J?s\x93\xe6\xda\xf0\xf3B\x8d\xb4\xd8>\x12\xb0\x8e\x8d\xdaQ\xa2\xd0\xbc\x92d\x9e^\xbc\xd5\x8aNf\xefa\v*\xb08\xfc\xd2\xa4\x11`\xae\x98\xcc\xe1\xea\xc2\x1dKR\x0e\x1cK\x86\v\xba\xdfz\xa8\xdf\xb6\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xef\xe9\xb3@\xe8\a0\x1e\xb8L\x83\xc4\xa8\xb2\xc1\xf8\xae\x1d\x198\x0f\xfa\t\x88+\xdc\xe1\x01@\xbd\x8ba\"|\x14\x1bF\x9b\xd3\xff7\a\x1c:U\xba\xf4\t\xdc\xef\xe3\x11\xdb^\xee\x8c0\xee\xde6:\x80t\xfb\xbc^K\xb4\x8c9\xb0\xec\x82\x127!\x0e\xa3\xc9\xe0\xea\xfa\x0f\xbb\x0e \xc3\xef\xb20xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$netlink(0x10, 0x3, 0x4) writev(r4, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80043f679a10ff3d425f9cc3f4ff7f4e32f61bcdf1e422000000000100804824cabecc4b381eaadc28f23457e792945f64009400050028925aaa000000c600000000000000feff2c707f8f00ff", 0x58}], 0x1) 1.699574777s ago: executing program 2 (id=911): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) keyctl$instantiate(0xc, 0x0, 0x0, 0x2a, 0x0) r3 = socket$kcm(0x10, 0x400000002, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4000) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newtfilter={0x34, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0x0, 0xf}, {}, {0x7, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x24000014}, 0x20084084) sendmsg$inet(r3, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000140)="600000002e000d190a762d7f089e", 0xfca2}, {&(0x7f0000000280)="68cabf2dfb58fc0a1d6b689866f05d490d010088a8ffff0200258f2e4409b8f9e6aaeb88bea123dc2c6726e89b1ae2f6e8bcb5ee52dcd7298d39093c510293bca0b646a3ce904f6e6b788b3204c233e60ddc", 0x52}], 0x2}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) connect$ax25(0xffffffffffffffff, &(0x7f00000001c0)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x5}, [@bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, @bcast, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast]}, 0x48) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000000700), 0x0) socket$igmp6(0xa, 0x3, 0x2) syz_usb_connect(0x2, 0x34, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000892e791000000000259c0102030109022200010000000009040000000e010000082402010102000008"], 0x0) 322.719909ms ago: executing program 0 (id=912): r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x4, @local, 0x6}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) 190.372513ms ago: executing program 6 (id=799): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) umount2(&(0x7f0000000040)='.\x00', 0x2) 110.118899ms ago: executing program 3 (id=913): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000080)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000140)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0x5b23, 0x0) 79.465115ms ago: executing program 6 (id=914): r0 = syz_open_dev$sndctrl(0x0, 0xa, 0x800) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r0, 0xc1105511, &(0x7f0000000040)={0xc, 0x3, 0x40, 0x10000, 'syz0\x00', 0x400}) 0s ago: executing program 0 (id=915): openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x400100, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x1fffffffffffffed, 0x0, &(0x7f0000000100)='GPL\x00', 0x20000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = syz_io_uring_setup(0x497, &(0x7f0000002180)={0x0, 0x787b, 0x100, 0x4, 0x401b0}, &(0x7f00000000c0)=0x0, &(0x7f0000000280)=0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r3, 0x16, 0x0, 0x1) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000d00)={0x8, {"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", 0x1000}}, 0x1006) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x200, 0x1, {0x1}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, 0xffffffffffffffff, 0x0) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f00000000c0)={0x4000, 0x80600}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.94' (ED25519) to the list of known hosts. [ 38.729149][ T6515] cgroup: Unknown subsys name 'net' [ 38.854590][ T6515] cgroup: Unknown subsys name 'cpuset' [ 38.858239][ T6515] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 39.047195][ T6515] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SS [ 40.547821][ T6528] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 40.550429][ T6528] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 40.568759][ T6533] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 40.571818][ T6533] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 40.574351][ T6533] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 40.577672][ T6533] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 40.585944][ T6537] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 40.586220][ T6537] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 40.586505][ T6537] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 40.587238][ T6531] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 40.588441][ T6531] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 40.590025][ T6531] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 40.591095][ T6531] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 40.591335][ T6531] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 40.592163][ T6531] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 40.593604][ T6531] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 40.593768][ T6531] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 40.594036][ T6531] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 40.594263][ T6531] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 40.596231][ T6531] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 40.598234][ T6537] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 40.621112][ T6540] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 40.623869][ T6528] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 40.632973][ T6540] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 40.633438][ T6540] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 40.928119][ T6527] chnl_net:caif_netlink_parms(): no params data found [ 41.019916][ T6527] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.022178][ T6527] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.024337][ T6527] bridge_slave_0: entered allmulticast mode [ 41.026988][ T6527] bridge_slave_0: entered promiscuous mode [ 41.030450][ T6535] chnl_net:caif_netlink_parms(): no params data found [ 41.034156][ T6527] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.036253][ T6527] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.038531][ T6527] bridge_slave_1: entered allmulticast mode [ 41.041141][ T6527] bridge_slave_1: entered promiscuous mode [ 41.047038][ T6526] chnl_net:caif_netlink_parms(): no params data found [ 41.079766][ T6536] chnl_net:caif_netlink_parms(): no params data found [ 41.113401][ T6527] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 41.138773][ T6527] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 41.180893][ T6526] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.181005][ T6526] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.181116][ T6526] bridge_slave_0: entered allmulticast mode [ 41.182788][ T6526] bridge_slave_0: entered promiscuous mode [ 41.207749][ T6526] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.210019][ T6526] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.211795][ T6526] bridge_slave_1: entered allmulticast mode [ 41.212727][ T6526] bridge_slave_1: entered promiscuous mode [ 41.219973][ T6535] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.220054][ T6535] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.220152][ T6535] bridge_slave_0: entered allmulticast mode [ 41.222223][ T6535] bridge_slave_0: entered promiscuous mode [ 41.223629][ T6535] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.223678][ T6535] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.223778][ T6535] bridge_slave_1: entered allmulticast mode [ 41.224664][ T6535] bridge_slave_1: entered promiscuous mode [ 41.237542][ T6527] team0: Port device team_slave_0 added [ 41.273379][ T6535] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 41.277394][ T6535] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 41.278835][ T6527] team0: Port device team_slave_1 added [ 41.308917][ T6526] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 41.336801][ T6527] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 41.338879][ T6527] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 41.343421][ T6527] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 41.353748][ T6526] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 41.356232][ T6525] chnl_net:caif_netlink_parms(): no params data found [ 41.360777][ T6535] team0: Port device team_slave_0 added [ 41.362581][ T6535] team0: Port device team_slave_1 added [ 41.363483][ T6527] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 41.363510][ T6527] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 41.363547][ T6527] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 41.378967][ T6536] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.379084][ T6536] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.379195][ T6536] bridge_slave_0: entered allmulticast mode [ 41.380105][ T6536] bridge_slave_0: entered promiscuous mode [ 41.405961][ T6536] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.406076][ T6536] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.406187][ T6536] bridge_slave_1: entered allmulticast mode [ 41.407036][ T6536] bridge_slave_1: entered promiscuous mode [ 41.415363][ T6535] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 41.415395][ T6535] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 41.415429][ T6535] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 41.445720][ T6526] team0: Port device team_slave_0 added [ 41.454099][ T6535] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 41.454155][ T6535] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 41.454208][ T6535] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 41.480598][ T6526] team0: Port device team_slave_1 added [ 41.503926][ T6527] hsr_slave_0: entered promiscuous mode [ 41.504575][ T6527] hsr_slave_1: entered promiscuous mode [ 41.529673][ T6536] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 41.531385][ T6536] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 41.542737][ T6535] hsr_slave_0: entered promiscuous mode [ 41.543270][ T6535] hsr_slave_1: entered promiscuous mode [ 41.543599][ T6535] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 41.543692][ T6535] Cannot create hsr debugfs directory [ 41.597919][ T6526] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 41.600031][ T6526] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 41.601888][ T6526] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 41.603203][ T6526] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 41.603231][ T6526] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 41.603264][ T6526] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 41.629426][ T6536] team0: Port device team_slave_0 added [ 41.653934][ T6525] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.656198][ T6525] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.658424][ T6525] bridge_slave_0: entered allmulticast mode [ 41.661036][ T6525] bridge_slave_0: entered promiscuous mode [ 41.672711][ T6536] team0: Port device team_slave_1 added [ 41.677696][ T6526] hsr_slave_0: entered promiscuous mode [ 41.678304][ T6526] hsr_slave_1: entered promiscuous mode [ 41.678662][ T6526] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 41.678691][ T6526] Cannot create hsr debugfs directory [ 41.688481][ T6525] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.690623][ T6525] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.692801][ T6525] bridge_slave_1: entered allmulticast mode [ 41.695521][ T6525] bridge_slave_1: entered promiscuous mode [ 41.738671][ T6525] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 41.740320][ T6525] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 41.747435][ T6536] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 41.747487][ T6536] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 41.747524][ T6536] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 41.748707][ T6536] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 41.748734][ T6536] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 41.748768][ T6536] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 41.812893][ T6525] team0: Port device team_slave_0 added [ 41.838459][ T6525] team0: Port device team_slave_1 added [ 41.896743][ T6536] hsr_slave_0: entered promiscuous mode [ 41.897262][ T6536] hsr_slave_1: entered promiscuous mode [ 41.897572][ T6536] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 41.897601][ T6536] Cannot create hsr debugfs directory [ 41.915495][ T6525] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 41.917510][ T6525] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 41.922715][ T6525] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 41.924014][ T6525] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 41.924049][ T6525] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 41.924084][ T6525] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 42.073737][ T6527] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 42.081972][ T6525] hsr_slave_0: entered promiscuous mode [ 42.086772][ T6525] hsr_slave_1: entered promiscuous mode [ 42.087137][ T6525] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 42.087187][ T6525] Cannot create hsr debugfs directory [ 42.095773][ T6527] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 42.098911][ T6527] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 42.112140][ T6527] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 42.149703][ T6535] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 42.164618][ T6535] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 42.188176][ T6535] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 42.192522][ T6535] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 42.245998][ T6526] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 42.277182][ T6526] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 42.300138][ T6526] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 42.321935][ T6526] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 42.330577][ T6536] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 42.338622][ T6536] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 42.349250][ T6527] 8021q: adding VLAN 0 to HW filter on device bond0 [ 42.353870][ T6536] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 42.368301][ T6536] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 42.407881][ T6535] 8021q: adding VLAN 0 to HW filter on device bond0 [ 42.417929][ T6525] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 42.422830][ T6525] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 42.427195][ T6525] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 42.439632][ T6525] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 42.481421][ T6527] 8021q: adding VLAN 0 to HW filter on device team0 [ 42.490786][ T6535] 8021q: adding VLAN 0 to HW filter on device team0 [ 42.518307][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.518463][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 42.520039][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.520088][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 42.537376][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.537460][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 42.549881][ T6536] 8021q: adding VLAN 0 to HW filter on device bond0 [ 42.562184][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.562285][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 42.627459][ T6526] 8021q: adding VLAN 0 to HW filter on device bond0 [ 42.637123][ T6535] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 42.637211][ T6535] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 42.642971][ T6540] Bluetooth: hci0: command tx timeout [ 42.643139][ T6540] Bluetooth: hci3: command tx timeout [ 42.643235][ T6540] Bluetooth: hci1: command tx timeout [ 42.643471][ T6533] Bluetooth: hci2: command tx timeout [ 42.656221][ T6536] 8021q: adding VLAN 0 to HW filter on device team0 [ 42.681222][ T6526] 8021q: adding VLAN 0 to HW filter on device team0 [ 42.698274][ T335] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.698352][ T335] bridge0: port 1(bridge_slave_0) entered forwarding state [ 42.699284][ T335] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.699340][ T335] bridge0: port 1(bridge_slave_0) entered forwarding state [ 42.700236][ T335] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.700291][ T335] bridge0: port 2(bridge_slave_1) entered forwarding state [ 42.722666][ T6528] Bluetooth: hci4: command tx timeout [ 42.751015][ T335] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.751135][ T335] bridge0: port 2(bridge_slave_1) entered forwarding state [ 42.759976][ T6525] 8021q: adding VLAN 0 to HW filter on device bond0 [ 42.791182][ T6525] 8021q: adding VLAN 0 to HW filter on device team0 [ 42.845490][ T6527] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 42.849198][ T41] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.849278][ T41] bridge0: port 1(bridge_slave_0) entered forwarding state [ 42.849871][ T41] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.849913][ T41] bridge0: port 2(bridge_slave_1) entered forwarding state [ 42.893471][ T6535] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 42.991755][ T6526] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 43.007106][ T6527] veth0_vlan: entered promiscuous mode [ 43.029605][ T6527] veth1_vlan: entered promiscuous mode [ 43.066787][ T6535] veth0_vlan: entered promiscuous mode [ 43.070161][ T6536] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 43.095241][ T6526] veth0_vlan: entered promiscuous mode [ 43.100121][ T6535] veth1_vlan: entered promiscuous mode [ 43.114267][ T6527] veth0_macvtap: entered promiscuous mode [ 43.118556][ T6525] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 43.121036][ T6527] veth1_macvtap: entered promiscuous mode [ 43.138452][ T6526] veth1_vlan: entered promiscuous mode [ 43.151130][ T6535] veth0_macvtap: entered promiscuous mode [ 43.158451][ T6535] veth1_macvtap: entered promiscuous mode [ 43.193434][ T6535] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 43.197454][ T6526] veth0_macvtap: entered promiscuous mode [ 43.199394][ T6526] veth1_macvtap: entered promiscuous mode [ 43.229592][ T6535] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 43.234082][ T6536] veth0_vlan: entered promiscuous mode [ 43.238994][ T6527] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 43.244849][ T6527] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 43.248586][ T6527] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.250759][ T6527] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.250800][ T6527] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.250829][ T6527] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.259863][ T6535] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.259935][ T6535] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.259964][ T6535] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.259993][ T6535] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.296712][ T6526] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 43.297730][ T6536] veth1_vlan: entered promiscuous mode [ 43.324891][ T6526] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 43.327091][ T6526] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.327133][ T6526] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.327162][ T6526] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.327191][ T6526] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.371170][ T6536] veth0_macvtap: entered promiscuous mode [ 43.376843][ T6536] veth1_macvtap: entered promiscuous mode [ 43.420022][ T335] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 43.420119][ T335] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 43.424935][ T6525] veth0_vlan: entered promiscuous mode [ 43.441259][ T6525] veth1_vlan: entered promiscuous mode [ 43.446606][ T6536] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 43.451111][ T6536] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 43.455622][ T6536] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.458157][ T6536] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.459939][ T6536] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.459972][ T6536] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.511314][ T2152] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 43.511372][ T2152] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 43.516927][ T2152] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 43.516963][ T2152] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 43.553916][ T6525] veth0_macvtap: entered promiscuous mode [ 43.567981][ T335] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 43.570281][ T335] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 43.575874][ T6525] veth1_macvtap: entered promiscuous mode [ 43.593882][ T2152] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 43.593951][ T2152] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 43.619580][ T6535] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 43.644799][ T335] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 43.644863][ T335] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 43.677777][ T6525] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 43.700277][ T6525] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 43.705092][ T6525] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.707650][ T6525] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.710552][ T6525] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.713392][ T6525] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.765069][ T5766] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 43.765132][ T5766] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 43.825247][ T843] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 43.825317][ T843] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 43.869116][ T335] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 43.869192][ T335] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 44.545099][ T117] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 44.545165][ T117] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 44.726568][ T6528] Bluetooth: hci2: command tx timeout [ 44.726644][ T6528] Bluetooth: hci1: command tx timeout [ 44.726699][ T6528] Bluetooth: hci3: command tx timeout [ 44.726738][ T6528] Bluetooth: hci0: command tx timeout [ 44.876275][ T6533] Bluetooth: hci4: command tx timeout [ 44.933828][ T6655] block device autoloading is deprecated and will be removed. [ 44.935694][ T6655] syz.2.3: attempt to access beyond end of device [ 44.935694][ T6655] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 46.887873][ T6533] Bluetooth: hci0: command tx timeout [ 46.887958][ T6533] Bluetooth: hci3: command tx timeout [ 46.888015][ T6533] Bluetooth: hci1: command tx timeout [ 46.888056][ T6533] Bluetooth: hci2: command tx timeout [ 46.896845][ T6533] Bluetooth: hci4: command tx timeout [ 47.118713][ T6686] warning: `syz.4.12' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 47.703946][ T6670] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 47.730883][ T6670] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 47.752105][ T6528] Bluetooth: hci3: Dropping invalid advertising data [ 47.752935][ T6528] Bluetooth: hci3: Malformed LE Event: 0x02 [ 48.273055][ T6638] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 48.491174][ T6638] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 48.498502][ T6638] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 48.507122][ T6638] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 48.514985][ T6638] usb 1-1: New USB device found, idVendor=1e7d, idProduct=3232, bcdDevice= 0.00 [ 48.519469][ T6638] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 48.600255][ T6638] usb 1-1: config 0 descriptor?? [ 48.963153][ T6533] Bluetooth: hci2: command tx timeout [ 48.963234][ T6533] Bluetooth: hci1: command tx timeout [ 48.963291][ T6533] Bluetooth: hci3: command tx timeout [ 48.963331][ T6533] Bluetooth: hci0: command tx timeout [ 48.963763][ T6528] Bluetooth: hci4: command tx timeout [ 49.246823][ T6713] tmpfs: Bad value for 'mpol' [ 50.736870][ T6638] ryos 0003:1E7D:3232.0001: hidraw0: USB HID v0.00 Device [HID 1e7d:3232] on usb-dummy_hcd.0-1/input0 [ 51.115483][ T6738] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 51.280180][ T6529] usb 1-1: USB disconnect, device number 2 [ 51.532119][ T6730] fido_id[6730]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 51.891582][ T6529] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 52.660636][ T6529] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 52.660705][ T6529] usb 1-1: config 179 has an invalid descriptor of length 0, skipping remainder of the config [ 52.660755][ T6529] usb 1-1: config 179 has no interface number 0 [ 52.660790][ T6529] usb 1-1: config 179 interface 65 altsetting 12 has 0 endpoint descriptors, different from the interface descriptor's value: 23 [ 52.660824][ T6529] usb 1-1: config 179 interface 65 has no altsetting 0 [ 52.660860][ T6529] usb 1-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 52.660891][ T6529] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 53.572977][ T6266] usb 1-1: USB disconnect, device number 3 [ 53.624699][ T6770] netlink: 4 bytes leftover after parsing attributes in process `syz.4.30'. [ 53.632494][ T6771] netlink: 4 bytes leftover after parsing attributes in process `syz.3.31'. [ 53.637111][ T6770] netlink: 12 bytes leftover after parsing attributes in process `syz.4.30'. [ 55.928231][ T6800] netlink: 8 bytes leftover after parsing attributes in process `syz.0.38'. [ 55.928361][ T6800] netlink: 8 bytes leftover after parsing attributes in process `syz.0.38'. [ 55.928396][ T6800] netlink: 8 bytes leftover after parsing attributes in process `syz.0.38'. [ 55.931276][ T6804] trusted_key: syz.1.36 sent an empty control message without MSG_MORE. [ 55.942231][ T6799] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 55.981751][ T6799] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 55.995643][ T6800] netlink: 8 bytes leftover after parsing attributes in process `syz.0.38'. [ 55.995713][ T6800] netlink: 8 bytes leftover after parsing attributes in process `syz.0.38'. [ 56.814896][ T6822] ip6erspan0: entered promiscuous mode [ 57.055279][ T6819] tipc: Started in network mode [ 57.055381][ T6819] tipc: Node identity 03000000000000004879ffffffffffff, cluster identity 4711 [ 58.022375][ T6540] Bluetooth: hci1: command tx timeout [ 59.567860][ T6859] netlink: 12 bytes leftover after parsing attributes in process `syz.2.49'. [ 59.654666][ T6862] loop0: detected capacity change from 0 to 4096 [ 59.737769][ T6868] netlink: 44 bytes leftover after parsing attributes in process `syz.3.55'. [ 60.030389][ T11] cfg80211: failed to load regulatory.db [ 61.737583][ T6895] netlink: 'syz.4.57': attribute type 1 has an invalid length. [ 61.737653][ T6895] netlink: 224 bytes leftover after parsing attributes in process `syz.4.57'. [ 63.489142][ T6967] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 64.484362][ T2405] ieee802154 phy1 wpan1: encryption failed: -22 [ 64.967422][ T6989] loop0: detected capacity change from 0 to 4096 [ 68.352394][ T7040] netlink: 'syz.1.77': attribute type 10 has an invalid length. [ 68.352580][ T7040] netlink: 40 bytes leftover after parsing attributes in process `syz.1.77'. [ 68.990514][ T7048] loop3: detected capacity change from 0 to 4096 [ 69.648605][ T7058] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 69.649533][ T7058] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 69.928890][ T7040] dummy0: entered promiscuous mode [ 69.929891][ T7040] bridge0: port 3(dummy0) entered blocking state [ 69.929998][ T7040] bridge0: port 3(dummy0) entered disabled state [ 69.930126][ T7040] dummy0: entered allmulticast mode [ 69.931464][ T7040] bridge0: port 3(dummy0) entered blocking state [ 69.931961][ T7040] bridge0: port 3(dummy0) entered forwarding state [ 71.744226][ T7123] netlink: 8 bytes leftover after parsing attributes in process `syz.2.88'. [ 75.620318][ T7178] syz.3.102 uses obsolete (PF_INET,SOCK_PACKET) [ 75.872674][ T7192] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 75.872985][ T7192] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 76.433915][ T7200] netlink: 'syz.0.106': attribute type 10 has an invalid length. [ 76.434223][ T7200] netlink: 40 bytes leftover after parsing attributes in process `syz.0.106'. [ 77.250399][ T7200] dummy0: entered promiscuous mode [ 77.250976][ T7200] bridge0: port 3(dummy0) entered blocking state [ 77.251061][ T7200] bridge0: port 3(dummy0) entered disabled state [ 77.251178][ T7200] dummy0: entered allmulticast mode [ 77.255591][ T7200] bridge0: port 3(dummy0) entered blocking state [ 77.255673][ T7200] bridge0: port 3(dummy0) entered forwarding state [ 78.069796][ T7217] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 78.400256][ T7225] atomic_op 0000000068ca5c86 conn xmit_atomic 0000000000000000 [ 82.114016][ T7282] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 82.114315][ T7282] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 82.118450][ T7283] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 82.154855][ T6540] Bluetooth: hci1: Malformed LE Event: 0x0b [ 82.241603][ T6529] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 82.391878][ T6529] usb 1-1: Using ep0 maxpacket: 8 [ 82.429979][ T6529] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 82.434027][ T6529] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 82.437952][ T6529] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 82.912580][ T6529] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 82.912646][ T6529] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 82.912689][ T6529] usb 1-1: Product: syz [ 82.912716][ T6529] usb 1-1: Manufacturer: syz [ 82.912742][ T6529] usb 1-1: SerialNumber: syz [ 82.936451][ T6529] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -22 [ 82.940058][ T6529] usbtest 1-1:1.0: Linux user mode ISO test driver [ 82.942502][ T6529] usbtest 1-1:1.0: high-speed {control iso-in} tests (+alt) [ 83.852839][ T11] usb 1-1: USB disconnect, device number 4 [ 84.996632][ T7319] tmpfs: Bad value for 'mpol' [ 87.811440][ T7367] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 87.813453][ T7367] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 89.664857][ T31] audit: type=1326 audit(89.640:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7400 comm="syz.0.157" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffb795cc28 code=0x0 [ 90.629742][ T7420] loop1: detected capacity change from 0 to 512 [ 91.560356][ T7420] EXT4-fs warning (device loop1): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 91.561923][ T7420] EXT4-fs (loop1): mount failed [ 91.701690][ T7443] Zero length message leads to an empty skb [ 93.644884][ T31] audit: type=1326 audit(93.320:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7459 comm="syz.3.176" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffa9d5cc28 code=0x0 [ 95.340411][ T7494] loop1: detected capacity change from 0 to 512 [ 95.429926][ T7494] EXT4-fs warning (device loop1): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 95.431945][ T7494] EXT4-fs (loop1): mount failed [ 98.884503][ T7536] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 98.930737][ T7536] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 99.122119][ T7544] netlink: 168 bytes leftover after parsing attributes in process `syz.3.196'. [ 99.283172][ T7552] loop4: detected capacity change from 0 to 512 [ 99.307206][ T7552] EXT4-fs warning (device loop4): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 99.307914][ T7552] EXT4-fs (loop4): mount failed [ 102.159618][ T7606] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 102.246311][ T7609] loop1: detected capacity change from 0 to 512 [ 102.425027][ T7617] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 102.428050][ T7617] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 102.443643][ T7609] EXT4-fs warning (device loop1): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 102.447346][ T7609] EXT4-fs (loop1): mount failed [ 102.517112][ T7621] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 102.521152][ T7621] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 103.281680][ T6603] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 103.505596][ T6603] usb 1-1: New USB device found, idVendor=249c, idProduct=9002, bcdDevice=de.ad [ 103.505667][ T6603] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.510903][ T6603] usb 1-1: config 0 descriptor?? [ 104.501685][ T6603] snd-usb-hiface 1-1:0.0: probe with driver snd-usb-hiface failed with error -22 [ 105.528847][ T6603] usb 1-1: USB disconnect, device number 5 [ 106.778249][ T7687] loop4: detected capacity change from 0 to 512 [ 106.955002][ T7692] bridge0: entered promiscuous mode [ 106.955417][ T7692] macvlan2: entered promiscuous mode [ 107.380754][ T7687] EXT4-fs warning (device loop4): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 107.390089][ T7687] EXT4-fs (loop4): mount failed [ 111.242772][ T7745] loop0: detected capacity change from 0 to 512 [ 111.268953][ T7748] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 111.303616][ T7748] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 111.456231][ T7745] EXT4-fs warning (device loop0): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 111.464220][ T7745] EXT4-fs (loop0): mount failed [ 114.188969][ T7784] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 115.280742][ T7795] loop1: detected capacity change from 0 to 512 [ 115.314930][ T7795] EXT4-fs warning (device loop1): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 115.335966][ T7795] EXT4-fs (loop1): mount failed [ 117.339353][ T7834] NILFS (nullb0): couldn't find nilfs on the device [ 119.176768][ T7852] NILFS (nullb0): couldn't find nilfs on the device [ 120.319894][ T7866] netlink: 12 bytes leftover after parsing attributes in process `syz.1.291'. [ 120.557456][ T7875] fuseblk: Bad value for 'fd' [ 120.581671][ T7876] netlink: 8 bytes leftover after parsing attributes in process `syz.3.294'. [ 121.477771][ T6540] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 121.481618][ T6540] Bluetooth: hci4: Injecting HCI hardware error event [ 121.486072][ T6540] Bluetooth: hci4: hardware error 0x00 [ 122.824006][ T7906] netlink: 12 bytes leftover after parsing attributes in process `syz.1.304'. [ 122.981923][ T7913] netlink: 8 bytes leftover after parsing attributes in process `syz.4.306'. [ 123.010799][ T7916] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 123.023103][ T7916] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 123.052777][ T7917] fuseblk: Bad value for 'fd' [ 124.255049][ T6540] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 124.407932][ T7942] netlink: 12 bytes leftover after parsing attributes in process `syz.1.318'. [ 124.507823][ T7947] netlink: 8 bytes leftover after parsing attributes in process `syz.1.321'. [ 125.371900][ T7959] fuseblk: Bad value for 'fd' [ 125.945018][ T2405] ieee802154 phy1 wpan1: encryption failed: -22 [ 126.620561][ T7979] netlink: 4 bytes leftover after parsing attributes in process `syz.3.331'. [ 126.629746][ T7979] netlink: 12 bytes leftover after parsing attributes in process `syz.3.331'. [ 128.807338][ T8012] netlink: 4 bytes leftover after parsing attributes in process `syz.2.344'. [ 128.810963][ T8012] netlink: 12 bytes leftover after parsing attributes in process `syz.2.344'. [ 129.676507][ T9] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 129.862007][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 130.363976][ T9] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 130.364036][ T9] usb 1-1: config 0 has no interface number 0 [ 130.364075][ T9] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 130.364118][ T9] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 130.364149][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.382687][ T9] usb 1-1: config 0 descriptor?? [ 130.389282][ T9] iowarrior 1-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 131.342186][ T8047] netlink: 4 bytes leftover after parsing attributes in process `syz.1.355'. [ 131.342991][ T8047] netlink: 12 bytes leftover after parsing attributes in process `syz.1.355'. [ 133.109223][ T6590] usb 1-1: USB disconnect, device number 6 [ 134.169956][ T8089] tipc: Cannot configure node identity twice [ 134.219334][ T8091] netlink: 4 bytes leftover after parsing attributes in process `syz.4.369'. [ 134.537391][ T8091] netlink: 12 bytes leftover after parsing attributes in process `syz.4.369'. [ 137.344099][ T8115] bridge0: port 2(bridge_slave_1) entered disabled state [ 137.344702][ T8115] bridge0: port 1(bridge_slave_0) entered disabled state [ 137.369876][ T8129] netlink: 4 bytes leftover after parsing attributes in process `syz.4.382'. [ 137.438282][ T8130] netlink: 12 bytes leftover after parsing attributes in process `syz.4.382'. [ 137.905714][ T8115] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 137.910633][ T8115] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 138.874908][ T8115] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.874976][ T8115] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.875030][ T8115] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.875060][ T8115] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.299641][ T8156] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 139.302639][ T8156] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 140.943506][ T8179] block nbd0: server does not support multiple connections per device. [ 140.947471][ T8179] block nbd0: shutting down sockets [ 141.543247][ T8195] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 141.543549][ T8195] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 143.914259][ T8229] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 143.914587][ T8229] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 146.733233][ T8302] ip6erspan0: entered promiscuous mode [ 149.956009][ T8351] ip6erspan0: entered promiscuous mode [ 150.841462][ T8362] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 150.845954][ T8362] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 150.984072][ T6540] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 150.984213][ T6540] Bluetooth: hci3: Injecting HCI hardware error event [ 150.985311][ T6540] Bluetooth: hci3: hardware error 0x00 [ 151.504387][ T8404] ip6erspan0: entered promiscuous mode [ 151.679556][ T8412] rdma_op 000000003121dbc5 conn xmit_rdma 0000000000000000 [ 152.097887][ T8428] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 152.100927][ T8428] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 153.201784][ T6540] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 153.770934][ T8474] netlink: 4 bytes leftover after parsing attributes in process `syz.2.487'. [ 155.953885][ T8506] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 155.956672][ T8506] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 163.930884][ T6541] Bluetooth: hci0: command 0x0406 tx timeout [ 163.931372][ T6541] Bluetooth: hci2: command 0x0406 tx timeout [ 163.940870][ T6531] Bluetooth: hci1: command 0x0406 tx timeout [ 165.153454][ T8661] loop0: detected capacity change from 0 to 512 [ 165.224521][ T8661] EXT4-fs warning (device loop0): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 165.232950][ T8661] EXT4-fs (loop0): mount failed [ 167.885464][ T8701] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 169.712058][ T8750] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 169.712366][ T8750] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 171.043925][ T8793] loop2: detected capacity change from 0 to 7 [ 171.057641][ T8793] Dev loop2: unable to read RDB block 7 [ 171.060028][ T8793] loop2: AHDI p1 p2 p3 [ 171.061278][ T8793] loop2: partition table partially beyond EOD, truncated [ 171.063653][ T8793] loop2: p1 start 1601398130 is beyond EOD, truncated [ 171.065702][ T8793] loop2: p2 start 1702059890 is beyond EOD, truncated [ 171.292385][ C0] Unknown status report in ack skb [ 172.440370][ T8833] netlink: 4 bytes leftover after parsing attributes in process `syz.1.578'. [ 172.722509][ T6540] Bluetooth: hci0: unexpected event for opcode 0x1003 [ 173.975652][ T8879] netlink: 68 bytes leftover after parsing attributes in process `syz.2.587'. [ 175.524176][ T6540] Bluetooth: hci1: unexpected event for opcode 0x1003 [ 175.731554][ T8914] syzkaller0: entered promiscuous mode [ 175.733338][ T8914] syzkaller0: entered allmulticast mode [ 175.737947][ T8914] tipc: Enabled bearer , priority 0 [ 175.744470][ T8910] tipc: Resetting bearer [ 175.815245][ T8910] tipc: Disabling bearer [ 176.070021][ T8929] netlink: 4 bytes leftover after parsing attributes in process `syz.4.601'. [ 176.609388][ T8946] netlink: 4 bytes leftover after parsing attributes in process `syz.2.605'. [ 176.801688][ T6540] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 176.801818][ T6540] Bluetooth: hci0: Injecting HCI hardware error event [ 176.803486][ T6528] Bluetooth: hci0: hardware error 0x00 [ 176.913632][ T8955] Bluetooth: MGMT ver 1.23 [ 176.928409][ T6540] Bluetooth: hci0: unexpected event for opcode 0x1003 [ 177.448368][ T8981] netlink: 4 bytes leftover after parsing attributes in process `syz.4.616'. [ 177.688207][ T8995] netlink: 4 bytes leftover after parsing attributes in process `syz.1.617'. [ 177.802551][ T6540] Bluetooth: hci2: unexpected event for opcode 0x1003 [ 179.101833][ T6528] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 179.473078][ T9041] netlink: 4 bytes leftover after parsing attributes in process `syz.2.628'. [ 179.603042][ T9047] netlink: 4 bytes leftover after parsing attributes in process `syz.0.629'. [ 179.624986][ T6528] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 179.627625][ T6528] Bluetooth: hci1: Injecting HCI hardware error event [ 179.630658][ T6528] Bluetooth: hci1: hardware error 0x00 [ 179.681673][ T9042] bridge0: entered allmulticast mode [ 179.682088][ T9047] dummy0: left allmulticast mode [ 179.682252][ T9047] bridge0: port 3(dummy0) entered disabled state [ 179.709282][ T9047] bridge_slave_1: left allmulticast mode [ 179.711228][ T9047] bridge_slave_1: left promiscuous mode [ 179.715405][ T9047] bridge0: port 2(bridge_slave_1) entered disabled state [ 179.743104][ T9047] bridge_slave_0: left allmulticast mode [ 179.743180][ T9047] bridge_slave_0: left promiscuous mode [ 179.743292][ T9047] bridge0: port 1(bridge_slave_0) entered disabled state [ 179.849641][ T9047] bridge0 (unregistering): left allmulticast mode [ 179.870423][ T9051] netlink: 4 bytes leftover after parsing attributes in process `syz.1.632'. [ 180.091651][ T6533] Bluetooth: hci2: command 0x0406 tx timeout [ 182.429530][ T6528] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 182.431873][ T6528] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 182.434946][ T6528] Bluetooth: hci2: Injecting HCI hardware error event [ 182.438003][ T6528] Bluetooth: hci2: hardware error 0x00 [ 182.916788][ T9110] netlink: 4 bytes leftover after parsing attributes in process `syz.1.643'. [ 183.128350][ T9115] xt_hashlimit: max too large, truncated to 1048576 [ 184.885593][ T6528] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 185.266325][ T9167] netlink: 44 bytes leftover after parsing attributes in process `syz.2.654'. [ 185.299143][ T9167] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 185.302379][ T9167] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 185.758622][ T9169] netlink: 4 bytes leftover after parsing attributes in process `syz.1.655'. [ 185.936000][ T9176] netlink: 172 bytes leftover after parsing attributes in process `syz.3.657'. [ 185.936103][ T9176] netlink: 244 bytes leftover after parsing attributes in process `syz.3.657'. [ 186.686861][ C1] wlan0: beacon TX faster than countdown (channel/color switch) completion [ 186.827600][ T9188] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 186.830556][ T9188] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 187.507671][ T2405] ieee802154 phy1 wpan1: encryption failed: -22 [ 189.024107][ T31] audit: type=1326 audit(2000000068.320:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9203 comm="syz.3.662" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffa9d5cc28 code=0x0 [ 189.560044][ T9223] netlink: 4 bytes leftover after parsing attributes in process `syz.2.666'. [ 189.666180][ T9219] netlink: 'syz.3.667': attribute type 10 has an invalid length. [ 189.666257][ T9219] netlink: 40 bytes leftover after parsing attributes in process `syz.3.667'. [ 189.666393][ T9219] dummy0: entered promiscuous mode [ 189.668563][ T9219] bridge0: port 3(dummy0) entered blocking state [ 189.668668][ T9219] bridge0: port 3(dummy0) entered disabled state [ 189.668784][ T9219] dummy0: entered allmulticast mode [ 190.147355][ T9233] netlink: 'syz.4.668': attribute type 21 has an invalid length. [ 191.269363][ T9257] ptrace attach of "./syz-executor exec"[9258] was attempted by "./syz-executor exec"[9257] [ 191.974130][ T9265] ubi31: attaching mtd0 [ 191.975244][ T9265] ubi31: scanning is finished [ 191.975308][ T9265] ubi31: empty MTD device detected [ 192.816276][ T9265] ubi31 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt31d", error -4 [ 193.747079][ T9286] netlink: 44 bytes leftover after parsing attributes in process `syz.4.680'. [ 199.825017][ T9394] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 199.827937][ T9394] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 202.102667][ T9433] netlink: 32 bytes leftover after parsing attributes in process `syz.3.706'. [ 203.542635][ T9483] netlink: 168 bytes leftover after parsing attributes in process `syz.2.718'. [ 205.329399][ T9523] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 205.329718][ T9523] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 205.564067][ T9537] netlink: 'syz.1.731': attribute type 72 has an invalid length. [ 205.564141][ T9537] netlink: 56 bytes leftover after parsing attributes in process `syz.1.731'. [ 205.845473][ T9545] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 205.848372][ T9545] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 207.185273][ T9591] netlink: 56 bytes leftover after parsing attributes in process `syz.1.743'. [ 210.330662][ T9643] netlink: 56 bytes leftover after parsing attributes in process `syz.2.754'. [ 210.841702][ T9660] netlink: 44 bytes leftover after parsing attributes in process `syz.1.755'. [ 210.887902][ T9660] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 210.890062][ T9660] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 211.712855][ T9672] syz_tun: entered promiscuous mode [ 211.718738][ T9672] batadv_slave_0: entered promiscuous mode [ 211.720964][ T9672] hsr1: entered allmulticast mode [ 211.725634][ T9672] syz_tun: entered allmulticast mode [ 211.725698][ T9672] batadv_slave_0: entered allmulticast mode [ 214.409683][ T9753] netlink: 4 bytes leftover after parsing attributes in process `syz.2.772'. [ 214.833570][ T9765] macvlan3: entered promiscuous mode [ 216.025181][ T6533] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 216.029114][ T6533] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 216.033939][ T6928] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.038409][ T6533] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 216.041165][ T6533] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 216.056709][ T6533] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 217.763882][ T9819] bridge0: entered promiscuous mode [ 217.763984][ T9819] macvlan2: entered promiscuous mode [ 217.863741][ T6928] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.162523][ T6533] Bluetooth: hci3: command tx timeout [ 218.710093][ T6928] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.804697][ T6928] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.045630][ T31] audit: type=1326 audit(2000000099.710:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9858 comm="syz.2.796" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffa775cc28 code=0x0 [ 220.095876][ T9802] chnl_net:caif_netlink_parms(): no params data found [ 220.241684][ T6528] Bluetooth: hci3: command tx timeout [ 220.292611][ T9802] bridge0: port 1(bridge_slave_0) entered blocking state [ 220.294973][ T9802] bridge0: port 1(bridge_slave_0) entered disabled state [ 220.297611][ T9802] bridge_slave_0: entered allmulticast mode [ 220.307318][ T9802] bridge_slave_0: entered promiscuous mode [ 220.318064][ T9802] bridge0: port 2(bridge_slave_1) entered blocking state [ 220.320456][ T9802] bridge0: port 2(bridge_slave_1) entered disabled state [ 220.329506][ T9802] bridge_slave_1: entered allmulticast mode [ 220.332869][ T9802] bridge_slave_1: entered promiscuous mode [ 220.354239][ T6928] dummy0: left allmulticast mode [ 220.355510][ T6928] bridge0: port 3(dummy0) entered disabled state [ 220.375077][ T6928] bridge_slave_1: left allmulticast mode [ 220.375206][ T6928] bridge_slave_1: left promiscuous mode [ 220.375388][ T6928] bridge0: port 2(bridge_slave_1) entered disabled state [ 220.392025][ T6928] bridge_slave_0: left allmulticast mode [ 220.392098][ T6928] bridge_slave_0: left promiscuous mode [ 220.392218][ T6928] bridge0: port 1(bridge_slave_0) entered disabled state [ 220.513381][ T6533] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 220.515688][ T6533] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 220.518104][ T6533] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 220.523484][ T6533] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 220.524024][ T6533] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 222.351659][ T6533] Bluetooth: hci3: command tx timeout [ 222.562522][ T6533] Bluetooth: hci1: command tx timeout [ 223.536127][ T6928] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 223.585283][ T6928] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 223.633662][ T6928] bond0 (unregistering): Released all slaves [ 223.653614][ T9802] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 223.658921][ T9802] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 223.661943][ T9905] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.802'. [ 223.885897][ T9802] team0: Port device team_slave_0 added [ 223.916972][ T9802] team0: Port device team_slave_1 added [ 224.451965][ T6533] Bluetooth: hci3: command tx timeout [ 224.643597][ T6533] Bluetooth: hci1: command tx timeout [ 224.837094][ T9802] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 224.837158][ T9802] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 224.837205][ T9802] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 224.888230][ T9956] netlink: 'syz.3.813': attribute type 10 has an invalid length. [ 224.888296][ T9956] netlink: 40 bytes leftover after parsing attributes in process `syz.3.813'. [ 224.904928][ T9802] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 224.907094][ T9802] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 224.915400][ T9802] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 225.211291][ T9802] hsr_slave_0: entered promiscuous mode [ 225.219589][ T9802] hsr_slave_1: entered promiscuous mode [ 225.222307][ T9802] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 225.227248][ T9802] Cannot create hsr debugfs directory [ 225.302824][ T6928] hsr_slave_0: left promiscuous mode [ 225.305186][ T6928] hsr_slave_1: left promiscuous mode [ 225.305714][ T6928] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 225.305790][ T6928] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 225.307796][ T6928] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 225.307839][ T6928] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 225.327934][ T6928] veth1_macvtap: left promiscuous mode [ 225.328115][ T6928] veth0_macvtap: left promiscuous mode [ 225.328212][ T6928] veth1_vlan: left promiscuous mode [ 225.328961][ T6928] veth0_vlan: left promiscuous mode [ 226.722868][ T6533] Bluetooth: hci1: command tx timeout [ 228.489028][ T6928] team0 (unregistering): Port device team_slave_1 removed [ 228.685603][ T6928] team0 (unregistering): Port device team_slave_0 removed [ 228.801697][ T6533] Bluetooth: hci1: command tx timeout [ 229.612905][ T9998] netlink: 'syz.3.823': attribute type 10 has an invalid length. [ 229.612973][ T9998] netlink: 40 bytes leftover after parsing attributes in process `syz.3.823'. [ 230.994595][ T9972] netlink: 60 bytes leftover after parsing attributes in process `syz.2.816'. [ 231.060304][ T9893] chnl_net:caif_netlink_parms(): no params data found [ 232.228412][T10031] netlink: 60 bytes leftover after parsing attributes in process `syz.2.833'. [ 232.347343][T10044] netlink: 'syz.2.834': attribute type 10 has an invalid length. [ 232.347408][T10044] netlink: 40 bytes leftover after parsing attributes in process `syz.2.834'. [ 232.370491][T10044] dummy0: entered promiscuous mode [ 232.370955][T10044] bridge0: port 3(dummy0) entered blocking state [ 232.371003][T10044] bridge0: port 3(dummy0) entered disabled state [ 232.371104][T10044] dummy0: entered allmulticast mode [ 232.373238][T10044] bridge0: port 3(dummy0) entered blocking state [ 232.373297][T10044] bridge0: port 3(dummy0) entered forwarding state [ 232.474521][ T9893] bridge0: port 1(bridge_slave_0) entered blocking state [ 232.474638][ T9893] bridge0: port 1(bridge_slave_0) entered disabled state [ 232.474786][ T9893] bridge_slave_0: entered allmulticast mode [ 232.475757][ T9893] bridge_slave_0: entered promiscuous mode [ 232.501087][ T9802] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 232.514962][ T9802] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 232.520961][ T9893] bridge0: port 2(bridge_slave_1) entered blocking state [ 232.521304][ T9893] bridge0: port 2(bridge_slave_1) entered disabled state [ 232.524958][ T9893] bridge_slave_1: entered allmulticast mode [ 232.530207][ T9893] bridge_slave_1: entered promiscuous mode [ 232.546210][ T9802] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 232.605592][ T9802] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 232.617909][ T9893] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 232.634723][ T9893] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 232.684997][ T9893] team0: Port device team_slave_0 added [ 232.797905][ T9893] team0: Port device team_slave_1 added [ 233.768273][ T6928] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.820241][ T9893] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 233.828610][ T9893] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 233.828722][ T9893] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 233.842450][ T9893] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 233.842517][ T9893] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 233.842601][ T9893] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 233.969686][ T6928] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.994042][ T9893] hsr_slave_0: entered promiscuous mode [ 234.003428][ T9893] hsr_slave_1: entered promiscuous mode [ 234.006410][ T9893] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 234.009604][ T9893] Cannot create hsr debugfs directory [ 234.153486][ T6928] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.181434][ T9802] 8021q: adding VLAN 0 to HW filter on device bond0 [ 234.263499][ T6928] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.330212][ T9802] 8021q: adding VLAN 0 to HW filter on device team0 [ 234.364865][ T6647] bridge0: port 1(bridge_slave_0) entered blocking state [ 234.364952][ T6647] bridge0: port 1(bridge_slave_0) entered forwarding state [ 234.372378][ T843] bridge0: port 2(bridge_slave_1) entered blocking state [ 234.372462][ T843] bridge0: port 2(bridge_slave_1) entered forwarding state [ 234.524676][T10134] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 234.613397][ T6928] bridge_slave_1: left allmulticast mode [ 234.613464][ T6928] bridge_slave_1: left promiscuous mode [ 234.613888][ T6928] bridge0: port 2(bridge_slave_1) entered disabled state [ 234.617921][ T6928] bridge_slave_0: left allmulticast mode [ 234.617969][ T6928] bridge_slave_0: left promiscuous mode [ 234.618095][ T6928] bridge0: port 1(bridge_slave_0) entered disabled state [ 236.474465][T10166] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 236.474800][T10166] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 238.541569][ T6928] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 238.607060][ T6928] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 238.663456][ T6928] bond0 (unregistering): Released all slaves [ 238.677336][ T6928] bond1 (unregistering): Released all slaves [ 238.835516][ T9893] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 238.858032][ T9893] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 238.866718][ T9893] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 238.882982][ T9893] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 239.816495][ T9802] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 239.880157][ T9893] 8021q: adding VLAN 0 to HW filter on device bond0 [ 239.889773][ T9893] 8021q: adding VLAN 0 to HW filter on device team0 [ 239.907543][ T9893] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 239.910768][ T9893] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 239.920977][ T7114] bridge0: port 1(bridge_slave_0) entered blocking state [ 239.921064][ T7114] bridge0: port 1(bridge_slave_0) entered forwarding state [ 239.959287][ T7114] bridge0: port 2(bridge_slave_1) entered blocking state [ 239.959376][ T7114] bridge0: port 2(bridge_slave_1) entered forwarding state [ 240.214725][ T9893] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 240.298882][ T6928] hsr_slave_0: left promiscuous mode [ 240.301033][ T6928] hsr_slave_1: left promiscuous mode [ 240.303493][ T6928] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 240.307067][ T6928] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 240.310105][ T6928] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 240.321911][ T6928] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 240.348303][ T6928] veth1_macvtap: left promiscuous mode [ 240.350054][ T6928] veth0_macvtap: left promiscuous mode [ 240.352919][ T6928] veth1_vlan: left promiscuous mode [ 240.354833][ T6928] veth0_vlan: left promiscuous mode [ 241.849665][T10276] netlink: 12 bytes leftover after parsing attributes in process `syz.3.882'. [ 243.058115][ T6928] team0 (unregistering): Port device team_slave_1 removed [ 243.226569][ T6928] team0 (unregistering): Port device team_slave_0 removed [ 246.199379][ T9802] veth0_vlan: entered promiscuous mode [ 246.208922][ T9802] veth1_vlan: entered promiscuous mode [ 246.279912][ T9802] veth0_macvtap: entered promiscuous mode [ 246.306049][ T9802] veth1_macvtap: entered promiscuous mode [ 246.340023][ T9802] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 246.354013][ T9802] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 246.376257][ T9802] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.380470][ T9802] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.395957][ T9802] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.396042][ T9802] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.605395][ T6949] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 246.609891][ T6949] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 246.639561][ T6949] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 246.642209][ T6949] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 247.352926][ T9893] veth0_vlan: entered promiscuous mode [ 247.377533][ T9893] veth1_vlan: entered promiscuous mode [ 247.614047][ T9893] veth0_macvtap: entered promiscuous mode [ 247.617271][ T9893] veth1_macvtap: entered promiscuous mode [ 247.834026][ T9893] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 247.835986][ T9893] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 247.837512][ T9893] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.837552][ T9893] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.837594][ T9893] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.837626][ T9893] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.936002][T10372] process 'syz.3.907' launched '/dev/fd/3' with NULL argv: empty string added [ 248.180721][ T7120] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 248.188019][ T7120] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 248.292560][ T7120] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 248.292634][ T7120] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 249.131087][T10398] netlink: 44 bytes leftover after parsing attributes in process `syz.2.911'. [ 249.139520][T10398] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 249.139849][T10398] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 249.187927][ T2405] ieee802154 phy1 wpan1: encryption failed: -22 [ 250.130026][T10422] Unable to handle kernel paging request at virtual address dfff80001fffe000 [ 250.130205][T10422] KASAN: probably user-memory-access in range [0x00000000ffff0000-0x00000000ffff0007] [ 250.130249][T10422] Mem abort info: [ 250.130270][T10422] ESR = 0x0000000096000005 [ 250.130293][T10422] EC = 0x25: DABT (current EL), IL = 32 bits [ 250.130317][T10422] SET = 0, FnV = 0 [ 250.130339][T10422] EA = 0, S1PTW = 0 [ 250.130361][T10422] FSC = 0x05: level 1 translation fault [ 250.130384][T10422] Data abort info: [ 250.130404][T10422] ISV = 0, ISS = 0x00000005, ISS2 = 0x00000000 [ 250.130427][T10422] CM = 0, WnR = 0, TnD = 0, TagAccess = 0 [ 250.130451][T10422] GCS = 0, Overlay = 0, DirtyBit = 0, Xs = 0 [ 250.130476][T10422] [dfff80001fffe000] address between user and kernel address ranges [ 250.130680][T10422] Internal error: Oops: 0000000096000005 [#1] SMP [ 250.153235][T10422] Modules linked in: [ 250.154292][T10422] CPU: 1 UID: 0 PID: 10422 Comm: dhcpcd-run-hook Not tainted 6.16.0-rc7-syzkaller-g29e0a1d9558f #0 PREEMPT [ 250.157477][T10422] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 250.160217][T10422] pstate: 20400005 (nzCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 250.162352][T10422] pc : percpu_ref_get_many+0x80/0x1f4 [ 250.163867][T10422] lr : percpu_ref_get_many+0x3c/0x1f4 [ 250.165325][T10422] sp : ffff80009d7d75e0 [ 250.166452][T10422] x29: ffff80009d7d75f0 x28: 1fffe000337d9190 x27: dfff800000000000 [ 250.168634][T10422] x26: ffff00019bec8c80 x25: ffff00019bec8c40 x24: 0000000000000001 [ 250.170878][T10422] x23: 1fffe000337d918e x22: 0000000000000078 x21: dfff800000000000 [ 250.173041][T10422] x20: 00000000ffff0000 x19: 0000000000000001 x18: 1fffe000337d6476 [ 250.175278][T10422] x17: ffff80008f67e000 x16: ffff80008af01c88 x15: 0000000000000001 [ 250.177498][T10422] x14: 1fffe0001ab472d5 x13: 0000000000000000 x12: 0000000000000000 [ 250.179686][T10422] x11: 00000000a7559940 x10: 0000000000000003 x9 : ffff80008f5de938 [ 250.181879][T10422] x8 : 000000001fffe000 x7 : ffff800080cb2484 x6 : 0000000000000000 [ 250.184041][T10422] x5 : 0000000000000000 x4 : 0000000000000000 x3 : 0000000000000002 [ 250.186236][T10422] x2 : 0000000000000008 x1 : ffff80008b548ee0 x0 : 0000000000000001 [ 250.188522][T10422] Call trace: [ 250.189424][T10422] percpu_ref_get_many+0x80/0x1f4 (P) [ 250.190918][T10422] refill_obj_stock+0x1d0/0x574 [ 250.192250][T10422] __memcg_slab_free_hook+0xd8/0x208 [ 250.193698][T10422] kmem_cache_free+0x270/0x550 [ 250.194987][T10422] unlink_anon_vmas+0x48c/0x520 [ 250.196284][T10422] free_pgtables+0x424/0x6a0 [ 250.197540][T10422] exit_mmap+0x350/0xabc [ 250.198719][T10422] __mmput+0xec/0x3dc [ 250.199818][T10422] mmput+0x70/0xac [ 250.200917][T10422] exit_mm+0x13c/0x200 [ 250.202026][T10422] do_exit+0x4bc/0x19fc [ 250.203160][T10422] do_group_exit+0x194/0x22c [ 250.204417][T10422] pid_child_should_wake+0x0/0x1dc [ 250.205898][T10422] invoke_syscall+0x98/0x2b8 [ 250.207158][T10422] el0_svc_common+0x130/0x23c [ 250.208424][T10422] do_el0_svc+0x48/0x58 [ 250.209536][T10422] el0_svc+0x58/0x180 [ 250.210649][T10422] el0t_64_sync_handler+0x84/0x12c [ 250.212072][T10422] el0t_64_sync+0x198/0x19c [ 250.213282][T10422] Code: 97e1cb8f d343fe88 d2d00015 f2fbfff5 (38756908) [ 250.215223][T10422] ---[ end trace 0000000000000000 ]--- [ 250.578857][T10422] Kernel panic - not syncing: Oops: Fatal exception [ 250.580707][T10422] SMP: stopping secondary CPUs [ 250.582046][T10422] Kernel Offset: disabled [ 250.583229][T10422] CPU features: 0x10000,00040e00,040008a1,04017203 [ 250.585021][T10422] Memory Limit: none [ 250.962279][T10422] Rebooting in 86400 seconds..