last executing test programs: 2m1.783511036s ago: executing program 0 (id=29): r0 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x1, 0x0) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, 0x0, 0x8000) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8000}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) prctl$PR_SCHED_CORE(0x26, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="240000001800090000000000000000001c140000fe0000010000ddff070001"], 0x24}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_INTERFACE(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="7d47a0750d45096b00", @ANYRES16=0x0, @ANYBLOB="000528bd7000fedbdf250800000008000300", @ANYRES32=r3], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x1) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) getgroups(0x0, 0x0) r4 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, &(0x7f0000000240)='asymmetric\x00', &(0x7f0000000100)=@chain={'key_or_keyring:', r4}) setpriority(0x2, 0x0, 0x4) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f00000002c0)) mknodat(0xffffffffffffff9c, 0x0, 0x81c0, 0x0) r5 = fsopen(&(0x7f0000000240)='pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x15, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000004000000000000001154d1ff85100000010000009500000000000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000005000000850000002300000018010000646c6c2500000000002020200600000000000000bf0600000000000007010000f8ffffffb702000008000000b703000059e70000a50000000600000095"], &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0xa}, 0x94) fsmount(r5, 0x0, 0x1) fsconfig$FSCONFIG_CMD_RECONFIGURE(r5, 0x7, 0x0, 0x0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x1c0002, 0x0) write$proc_mixer(r0, 0x0, 0x0) 2m0.546414299s ago: executing program 1 (id=31): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70300000101000085000000c0000000b700000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000340)="c1dfb080cd21d308098ee68886dd", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2m0.077752489s ago: executing program 1 (id=34): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="6c000000020601000000000600000000000000000e0003006269746d61703a69700000000500040000ffed000900020073797a3200000000240007800c00028008000140ffffffff0c0001800800014080ffffff050014000200000005000500020000000500010006"], 0x6c}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d40)=ANY=[@ANYBLOB="280000000306010800000000000000000200000305000100070000000900020073797a32"], 0x28}, 0x1, 0x0, 0x0, 0x40004}, 0x40080d0) 1m59.957297882s ago: executing program 0 (id=36): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) syz_clone3(&(0x7f0000000680)={0x4800800, &(0x7f00000001c0), &(0x7f0000000340), &(0x7f0000000380), {0x34}, &(0x7f00000003c0)=""/226, 0xe2, &(0x7f00000004c0)=""/255, &(0x7f00000005c0)=[0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff], 0x4}, 0x58) syz_clone3(&(0x7f0000000940)={0x10000, &(0x7f0000000600), &(0x7f0000000700), &(0x7f0000000740), {0xb}, &(0x7f0000000780)=""/236, 0xec, &(0x7f0000000880)=""/99, &(0x7f0000000900)=[0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff], 0x4}, 0x58) getpid() r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x124c1, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xfffffffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000001d00070f000200000000000007000000", @ANYRES32=r3], 0x24}}, 0x0) syz_emit_ethernet(0x82, &(0x7f0000000280)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x74, 0x0, 0x0, 0xfd, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @dest_unreach={0x3, 0x5, 0x0, 0x0, 0x5, 0x1, {0x16, 0x4, 0x0, 0x9, 0x686, 0x67, 0xfff9, 0x7, 0x2f, 0x1000, @multicast1, @rand_addr=0x64010102, {[@lsrr={0x83, 0xf, 0xf7, [@multicast2, @multicast1, @dev={0xac, 0x14, 0x14, 0x35}]}, @timestamp={0x44, 0x4, 0xb3, 0x0, 0xd}, @lsrr={0x83, 0x2f, 0x71, [@empty, @local, @multicast2, @dev={0xac, 0x14, 0x14, 0x41}, @local, @dev={0xac, 0x14, 0x14, 0x32}, @multicast2, @dev={0xac, 0x14, 0x14, 0x15}, @rand_addr=0x64010100, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x39}]}]}}}}}}}, 0x0) gettid() prctl$PR_SET_VMA(0x23, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={0x0}, 0x18) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r4, 0x400452c9, &(0x7f0000000100)) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000b28000)=0x20003) pause() fcntl$setsig(0xffffffffffffffff, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{}], 0x2c, 0xffffffffffbffff8) 1m58.248595195s ago: executing program 0 (id=42): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) unshare(0x22020600) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f0000000040), 0x4) 1m57.133911342s ago: executing program 0 (id=46): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000600)=ANY=[@ANYBLOB="fc0000001600330600000000000000807f000001000000000000000000000000ff02000000000000000000000000000100000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac1414bb000000000000000000000000000004d2320000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000003000000000000000000000000000100000000000000000004009f130000000000000000000002000000020000000a00041800000000000000000c0015005c0735"], 0xfc}}, 0x0) 1m56.641267131s ago: executing program 0 (id=47): ioctl$TIOCL_GETMOUSEREPORTING(0xffffffffffffffff, 0x5412, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b2f, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() keyctl$get_persistent(0xe, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x3, 0x3, 0x0, &(0x7f0000000000)='GPL\x00'}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$bt_BT_SNDMTU(r3, 0x112, 0xc, &(0x7f0000000000)=0x5, &(0x7f00000000c0)=0x2) 1m55.321121072s ago: executing program 1 (id=48): sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, 0x0, 0x800) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount$bind(&(0x7f00000002c0)='.\x00', 0x0, 0x0, 0x101091, 0x0) userfaultfd(0x80801) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x14, 0x1, 0x8, 0x301, 0x0, 0x0, {0x3, 0x0, 0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x20008080}, 0xc000) 1m53.949884191s ago: executing program 1 (id=50): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000840)={0x34, 0x6, 0x6, 0x201, 0x0, 0x0, {0x5, 0x0, 0xa}, [@IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x20004090) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000380)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0) 1m53.257645396s ago: executing program 1 (id=52): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) socket$inet_tcp(0x2, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xf}, 0x1c) 1m53.002410683s ago: executing program 1 (id=53): r0 = socket$nl_audit(0x10, 0x3, 0x9) syz_io_uring_setup(0x58c8, &(0x7f0000000500)={0x0, 0x3261, 0x2, 0x2, 0x2b4}, &(0x7f0000000440), &(0x7f0000000580)) mmap$IORING_OFF_SQ_RING(&(0x7f0000465000/0x1000)=nil, 0x1000, 0x3, 0xe2b83ed22bcd0993, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xd, 0x0, 0x0) r1 = openat$userio(0xffffffffffffff9c, 0x0, 0x329902, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0}, 0x18) syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000b80)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x46d, 0xc71f, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x8, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x6}}}}}]}}]}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$dsp(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = socket$inet(0x2, 0x3, 0x4) sendmmsg$inet(r2, &(0x7f0000000d40)=[{{&(0x7f0000000cc0)={0x2, 0x4e21, @empty}, 0x10, &(0x7f0000000d00)=[{&(0x7f0000000f80)="a0", 0x1}], 0x1, 0x0, 0x10}}], 0x1, 0xe814) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) preadv(r1, 0x0, 0x0, 0x1, 0xfffffff0) bind$inet6(0xffffffffffffffff, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f00000000c0)="e1bc70f7f4f379e829751d569f0374e9d85b27c2ec279264ca0e14d1df462996da6218d274b16707c490c53cf373ebd78d539ecea553f6d82cfe0568ba0d1e48dba72adafbe5ad51465e3e795f2271735222fd09fc35ac1702e52408dcf9d4f22faa042db5b00d0975f3f88a1892675dc9b26a01ad602893a8e4f604535e199245d10fb229026ea2df1b97badab6d33a8754de0c22808247306bf55e5664cdb52a79a7ad146040937411eacd40d2c551c1572267e6693bf85f228dedea71cd5fa965cc5c8158ee4963eca0b686d6732ecb4d247f7f2d543865ca76b3faf2836886dbe162b370ed030842ea5a52b4d07730", 0xf1, 0x40000, &(0x7f0000000040)={0xa, 0x4e24, 0x6a, @private1, 0x7}, 0x1c) r4 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_SECURITY_KEYRING(r4, 0x110, 0x2, &(0x7f0000000000)='/dev/kvm\x00', 0x9) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x30, 0x0, 0x0, 0x4}]}, 0x10) socket$alg(0x26, 0x5, 0x0) r5 = socket$kcm(0x25, 0x1, 0x0) recvmsg(r5, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x10160) sendmsg$AUDIT_USER_TTY(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000004c0)={0x10, 0x464, 0x800, 0x70bd2d, 0x25dfdbff}, 0x10}, 0x1, 0x0, 0x0, 0x2004a840}, 0x8800) 1m51.999394479s ago: executing program 0 (id=59): bind$packet(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000280)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) execve(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000240)={[&(0x7f00000000c0)='=\x8d5\x10\xe4\x00\bj\xfb', &(0x7f0000000080)='=\x8d5\x10\xe4\x00\bj\xfb']}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wg2\x00'}) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newtaction={0x90, 0x30, 0x9e54f29ff072a93b, 0x0, 0x0, {}, [{0x7c, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}, @m_nat={0x2c, 0x2, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x90}}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x20) migrate_pages(r2, 0x8, &(0x7f0000000300)=0x8, &(0x7f0000000340)=0x5) write$proc_mixer(r5, &(0x7f0000000440)=[{'LINE', @val={' \'', 'Mic'}}, {'LINE3', @void}, {'BASS', @void}, {'LINE', @val={' \'', 'Synth Capture'}}, {'LINE3', @void}], 0x5b) preadv(r5, &(0x7f0000001b00)=[{&(0x7f00000009c0)=""/239, 0xef}], 0x1, 0x2, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = syz_open_dev$video(&(0x7f0000000040), 0x8000000000000003, 0x16b142) ioctl$VIDIOC_S_FMT(r7, 0xc0d05640, &(0x7f0000000340)={0x9, @vbi={0x7, 0x5, 0x24a2, 0x34363248, [0x7fffffff, 0x10001], [0xa, 0x3], 0x1}}) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x40}}, 0x4000800) syz_usb_connect(0x0, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_ADD_DEV(r3, 0xff08, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="1c0000001800ffffffff7bfbfcdbdf250a148000ff01fd07"], 0x1c}}, 0x0) sendmmsg$alg(r5, 0x0, 0x0, 0x0) sendmsg$nl_route(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="200000001100010027bd7000fddbdf2500000000", @ANYRES32, @ANYBLOB="8014000004848dd105210000"], 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x80) 1m37.791850437s ago: executing program 32 (id=53): r0 = socket$nl_audit(0x10, 0x3, 0x9) syz_io_uring_setup(0x58c8, &(0x7f0000000500)={0x0, 0x3261, 0x2, 0x2, 0x2b4}, &(0x7f0000000440), &(0x7f0000000580)) mmap$IORING_OFF_SQ_RING(&(0x7f0000465000/0x1000)=nil, 0x1000, 0x3, 0xe2b83ed22bcd0993, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xd, 0x0, 0x0) r1 = openat$userio(0xffffffffffffff9c, 0x0, 0x329902, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0}, 0x18) syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000b80)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x46d, 0xc71f, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x8, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x6}}}}}]}}]}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$dsp(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = socket$inet(0x2, 0x3, 0x4) sendmmsg$inet(r2, &(0x7f0000000d40)=[{{&(0x7f0000000cc0)={0x2, 0x4e21, @empty}, 0x10, &(0x7f0000000d00)=[{&(0x7f0000000f80)="a0", 0x1}], 0x1, 0x0, 0x10}}], 0x1, 0xe814) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) preadv(r1, 0x0, 0x0, 0x1, 0xfffffff0) bind$inet6(0xffffffffffffffff, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f00000000c0)="e1bc70f7f4f379e829751d569f0374e9d85b27c2ec279264ca0e14d1df462996da6218d274b16707c490c53cf373ebd78d539ecea553f6d82cfe0568ba0d1e48dba72adafbe5ad51465e3e795f2271735222fd09fc35ac1702e52408dcf9d4f22faa042db5b00d0975f3f88a1892675dc9b26a01ad602893a8e4f604535e199245d10fb229026ea2df1b97badab6d33a8754de0c22808247306bf55e5664cdb52a79a7ad146040937411eacd40d2c551c1572267e6693bf85f228dedea71cd5fa965cc5c8158ee4963eca0b686d6732ecb4d247f7f2d543865ca76b3faf2836886dbe162b370ed030842ea5a52b4d07730", 0xf1, 0x40000, &(0x7f0000000040)={0xa, 0x4e24, 0x6a, @private1, 0x7}, 0x1c) r4 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_SECURITY_KEYRING(r4, 0x110, 0x2, &(0x7f0000000000)='/dev/kvm\x00', 0x9) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x30, 0x0, 0x0, 0x4}]}, 0x10) socket$alg(0x26, 0x5, 0x0) r5 = socket$kcm(0x25, 0x1, 0x0) recvmsg(r5, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x10160) sendmsg$AUDIT_USER_TTY(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000004c0)={0x10, 0x464, 0x800, 0x70bd2d, 0x25dfdbff}, 0x10}, 0x1, 0x0, 0x0, 0x2004a840}, 0x8800) 1m36.825006831s ago: executing program 33 (id=59): bind$packet(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000280)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) execve(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000240)={[&(0x7f00000000c0)='=\x8d5\x10\xe4\x00\bj\xfb', &(0x7f0000000080)='=\x8d5\x10\xe4\x00\bj\xfb']}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wg2\x00'}) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newtaction={0x90, 0x30, 0x9e54f29ff072a93b, 0x0, 0x0, {}, [{0x7c, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}, @m_nat={0x2c, 0x2, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x90}}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x20) migrate_pages(r2, 0x8, &(0x7f0000000300)=0x8, &(0x7f0000000340)=0x5) write$proc_mixer(r5, &(0x7f0000000440)=[{'LINE', @val={' \'', 'Mic'}}, {'LINE3', @void}, {'BASS', @void}, {'LINE', @val={' \'', 'Synth Capture'}}, {'LINE3', @void}], 0x5b) preadv(r5, &(0x7f0000001b00)=[{&(0x7f00000009c0)=""/239, 0xef}], 0x1, 0x2, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = syz_open_dev$video(&(0x7f0000000040), 0x8000000000000003, 0x16b142) ioctl$VIDIOC_S_FMT(r7, 0xc0d05640, &(0x7f0000000340)={0x9, @vbi={0x7, 0x5, 0x24a2, 0x34363248, [0x7fffffff, 0x10001], [0xa, 0x3], 0x1}}) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x40}}, 0x4000800) syz_usb_connect(0x0, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_ADD_DEV(r3, 0xff08, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="1c0000001800ffffffff7bfbfcdbdf250a148000ff01fd07"], 0x1c}}, 0x0) sendmmsg$alg(r5, 0x0, 0x0, 0x0) sendmsg$nl_route(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="200000001100010027bd7000fddbdf2500000000", @ANYRES32, @ANYBLOB="8014000004848dd105210000"], 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x80) 15.491897255s ago: executing program 2 (id=208): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="1c0000001a009b", 0x7) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000066000000004b64ffec850000006d000000c500000005"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) lseek(r4, 0x851, 0x0) 13.733439364s ago: executing program 2 (id=210): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) sched_setscheduler(0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x208}, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r4, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[], 0x208}, 0x0) recvmmsg(r5, &(0x7f0000001dc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=""/188, 0xbc, 0xdf0e}}], 0x1800, 0x2002, 0x0) 12.380722053s ago: executing program 2 (id=214): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f0000000000)=ANY=[], 0x0, 0xffffffff, 0x0, 0x0, 0x41100, 0x54, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r3, 0x0, 0x8008000000010, &(0x7f00000003c0)="1700", 0x2) 11.182794817s ago: executing program 2 (id=215): socket$inet6(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x1000003, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x10, 0x8}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = inotify_init1(0x0) inotify_add_watch(r4, &(0x7f0000000400)='.\x00', 0xa4000021) close(r4) 9.86135985s ago: executing program 4 (id=217): r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r0, 0x890b, &(0x7f0000000380)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x0, @bcast, @bpq0, 0x0, [@bcast, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) syz_genetlink_get_family_id$ieee802154(&(0x7f0000001bc0), 0xffffffffffffffff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x3, @empty, 0x1}, 0x1c) listen(r2, 0x1) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000280)={0x40000004}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0x20000814}, 0x4000810) connect$unix(0xffffffffffffffff, &(0x7f0000000340)=@abs={0x0, 0x0, 0x4e21}, 0x6e) recvfrom(r3, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x4100, 0x0, 0x0) 8.789694822s ago: executing program 4 (id=219): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100"/13], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000044000701565e700000000000017c00000c0004"], 0x20}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) r6 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) ioctl$KVM_SET_CPUID2(r7, 0x4008ae90, &(0x7f0000000000)=ANY=[@ANYBLOB=')']) 6.964264968s ago: executing program 4 (id=222): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) sched_setscheduler(0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x208}, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r4, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[], 0x208}, 0x0) recvmmsg(r5, &(0x7f0000001dc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=""/188, 0xbc, 0xdf0e}}], 0x1800, 0x2002, 0x0) 6.681385569s ago: executing program 2 (id=223): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f0000000000)=ANY=[], 0x0, 0xffffffff, 0x0, 0x0, 0x41100, 0x54, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r3, 0x0, 0x8008000000010, &(0x7f00000003c0)="1700", 0x2) 5.384620927s ago: executing program 4 (id=224): syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x2, 0x0, 0x0) r0 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x3, 0x3, @dev={0xfe, 0x80, '\x00', 0xd}, 0x9}, 0x1c) sendmmsg$unix(r0, &(0x7f0000007b80)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2404c054}}], 0x1, 0x2000c080) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x33, &(0x7f0000000100)=[{&(0x7f0000000000)=',', 0x584}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) 4.981632585s ago: executing program 4 (id=226): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ptrace$peekuser(0x3, r1, 0x4) unshare(0x8000000) semget$private(0x0, 0x4000, 0x555) semtimedop(0x0, &(0x7f0000000280)=[{0x0, 0x0, 0x1000}], 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) r4 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)) ioctl$SG_GET_VERSION_NUM(r4, 0x2284, &(0x7f0000000080)) socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_STATION(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4044081}, 0x20008000) 3.55747016s ago: executing program 3 (id=227): r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r0, 0x890b, &(0x7f0000000380)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x0, @bcast, @bpq0, 0x0, [@bcast, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) syz_genetlink_get_family_id$ieee802154(&(0x7f0000001bc0), 0xffffffffffffffff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x3, @empty, 0x1}, 0x1c) listen(r2, 0x1) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000280)={0x40000004}) r4 = accept(r1, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0x20000814}, 0x4000810) connect$unix(r4, &(0x7f0000000340)=@abs={0x0, 0x0, 0x4e21}, 0x6e) recvfrom(r3, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x4100, 0x0, 0x0) 3.227863536s ago: executing program 3 (id=228): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) 3.021158088s ago: executing program 3 (id=229): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x10000000000) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000004a40)={0x44, 0x0, &(0x7f0000002880)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0xf0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 2.784403036s ago: executing program 3 (id=230): syz_emit_ethernet(0xad, &(0x7f00000002c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6000000000770600fc010000000000000000000000000002fe8000000000000000000000000000aa00004001", @ANYBLOB="3c6fecf27a6d8997ec"], 0x0) 2.620578673s ago: executing program 3 (id=231): socket$inet6(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x1000003, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x10, 0x8}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = inotify_init1(0x0) inotify_add_watch(r4, &(0x7f0000000400)='.\x00', 0xa4000021) close(r4) 2.177634153s ago: executing program 2 (id=232): socket$nl_route(0x10, 0x3, 0x0) r0 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x0, 0xa0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x7, 0x1, 0x1, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x200, 0x0, 0xfc}}}}}]}}]}}, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f00000006c0)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)={0x20, 0x0, 0x1}}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_ep_read(r0, 0x1, 0x12, &(0x7f0000000080)=""/18) pwritev(r1, &(0x7f00000008c0)=[{&(0x7f0000000180)='\x00', 0x1}], 0x1, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x401, 0x20000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8003}, [@IFLA_LINK={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054) 1.94645866s ago: executing program 4 (id=233): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) r1 = getpid() sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) setresgid(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000240)={0x2, 0x0, @private=0xa010101}, 0x10) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = socket(0x1, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x89f7, &(0x7f00000010c0)={'bond0\x00', 0x0}) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r4) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x14, 0x34, 0x9, 0x0, 0x4000, {0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x4841}, 0x4000010) 0s ago: executing program 3 (id=234): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) dup(r0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000100)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2407000005000000000000000c240000e9fffff5ffffffff092403f3ff000005020524", @ANYRES8=r1, @ANYBLOB="05"], 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.239' (ED25519) to the list of known hosts. [ 80.637251][ T5826] cgroup: Unknown subsys name 'net' [ 80.897980][ T5826] cgroup: Unknown subsys name 'cpuset' [ 80.943901][ T5826] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 82.691147][ T5826] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 85.446265][ T5845] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 85.450398][ T5852] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 85.457285][ T5848] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 85.461073][ T5848] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 85.465016][ T5848] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 85.466428][ T5848] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 85.467338][ T5848] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 85.467974][ T5848] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 85.469393][ T5848] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 85.470550][ T5848] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 85.471290][ T5848] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 85.475147][ T5856] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 85.476479][ T5856] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 85.477785][ T5856] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 85.478752][ T5856] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 85.479179][ T5856] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 85.479332][ T5852] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 85.480735][ T5852] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 85.481187][ T5856] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 85.484124][ T5856] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 85.551816][ T5842] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 85.557794][ T5842] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 85.565845][ T5155] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 85.623736][ T59] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 85.644054][ T59] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 86.554600][ T5838] chnl_net:caif_netlink_parms(): no params data found [ 86.572552][ T5847] chnl_net:caif_netlink_parms(): no params data found [ 86.648346][ T5850] chnl_net:caif_netlink_parms(): no params data found [ 86.766864][ T5837] chnl_net:caif_netlink_parms(): no params data found [ 86.864773][ T5836] chnl_net:caif_netlink_parms(): no params data found [ 86.889581][ T979] cfg80211: failed to load regulatory.db [ 87.525032][ T5842] Bluetooth: hci2: command tx timeout [ 87.539960][ T5838] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.541265][ T5838] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.541844][ T5838] bridge_slave_0: entered allmulticast mode [ 87.543772][ T5838] bridge_slave_0: entered promiscuous mode [ 87.603825][ T5842] Bluetooth: hci0: command tx timeout [ 87.651077][ T5847] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.651269][ T5847] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.651470][ T5847] bridge_slave_0: entered allmulticast mode [ 87.658886][ T5847] bridge_slave_0: entered promiscuous mode [ 87.670953][ T5838] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.671084][ T5838] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.671625][ T5838] bridge_slave_1: entered allmulticast mode [ 87.674855][ T5838] bridge_slave_1: entered promiscuous mode [ 87.683505][ T5842] Bluetooth: hci1: command tx timeout [ 87.683600][ T5842] Bluetooth: hci3: command tx timeout [ 87.763508][ T5845] Bluetooth: hci4: command tx timeout [ 87.854882][ T5847] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.855040][ T5847] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.855264][ T5847] bridge_slave_1: entered allmulticast mode [ 87.858039][ T5847] bridge_slave_1: entered promiscuous mode [ 87.947645][ T5850] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.947784][ T5850] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.947953][ T5850] bridge_slave_0: entered allmulticast mode [ 87.951051][ T5850] bridge_slave_0: entered promiscuous mode [ 88.286089][ T5850] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.286283][ T5850] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.286468][ T5850] bridge_slave_1: entered allmulticast mode [ 88.289287][ T5850] bridge_slave_1: entered promiscuous mode [ 88.396562][ T5837] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.396719][ T5837] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.396896][ T5837] bridge_slave_0: entered allmulticast mode [ 88.399627][ T5837] bridge_slave_0: entered promiscuous mode [ 88.490059][ T5838] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.566336][ T5836] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.566475][ T5836] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.566654][ T5836] bridge_slave_0: entered allmulticast mode [ 88.569440][ T5836] bridge_slave_0: entered promiscuous mode [ 88.571948][ T5837] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.572100][ T5837] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.572592][ T5837] bridge_slave_1: entered allmulticast mode [ 88.578920][ T5837] bridge_slave_1: entered promiscuous mode [ 88.677780][ T5847] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.680302][ T5838] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.774793][ T5836] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.774952][ T5836] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.775120][ T5836] bridge_slave_1: entered allmulticast mode [ 88.777918][ T5836] bridge_slave_1: entered promiscuous mode [ 88.879225][ T5847] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.960270][ T5850] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.287252][ T5850] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.372627][ T5837] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.446918][ T5838] team0: Port device team_slave_0 added [ 89.529415][ T5836] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.532417][ T5837] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.542501][ T5847] team0: Port device team_slave_0 added [ 89.550393][ T5838] team0: Port device team_slave_1 added [ 89.603539][ T5845] Bluetooth: hci2: command tx timeout [ 89.622005][ T5836] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.686571][ T5847] team0: Port device team_slave_1 added [ 89.693492][ T5845] Bluetooth: hci0: command tx timeout [ 89.763495][ T5842] Bluetooth: hci1: command tx timeout [ 89.763602][ T5845] Bluetooth: hci3: command tx timeout [ 89.843432][ T5845] Bluetooth: hci4: command tx timeout [ 89.968310][ T5850] team0: Port device team_slave_0 added [ 90.281115][ T5850] team0: Port device team_slave_1 added [ 90.357697][ T5837] team0: Port device team_slave_0 added [ 90.435447][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.435458][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.435471][ T5838] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.528943][ T5836] team0: Port device team_slave_0 added [ 90.531028][ T5837] team0: Port device team_slave_1 added [ 90.531942][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.531952][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.531965][ T5847] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.533016][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.533028][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.533060][ T5838] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.638818][ T5836] team0: Port device team_slave_1 added [ 90.729500][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.729516][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.729540][ T5847] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.815260][ T5850] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.815276][ T5850] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.815300][ T5850] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.076402][ T5850] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.076418][ T5850] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.076441][ T5850] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.078182][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.078195][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.078218][ T5837] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.081993][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.082007][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.082019][ T5836] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.114719][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.114734][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.114757][ T5837] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.298806][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.298822][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.298839][ T5836] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.479946][ T5838] hsr_slave_0: entered promiscuous mode [ 91.481696][ T5838] hsr_slave_1: entered promiscuous mode [ 91.632888][ T5847] hsr_slave_0: entered promiscuous mode [ 91.639917][ T5847] hsr_slave_1: entered promiscuous mode [ 91.641768][ T5847] debugfs: 'hsr0' already exists in 'hsr' [ 91.641849][ T5847] Cannot create hsr debugfs directory [ 91.683478][ T5845] Bluetooth: hci2: command tx timeout [ 91.763720][ T5845] Bluetooth: hci0: command tx timeout [ 91.805959][ T5850] hsr_slave_0: entered promiscuous mode [ 91.807333][ T5850] hsr_slave_1: entered promiscuous mode [ 91.808244][ T5850] debugfs: 'hsr0' already exists in 'hsr' [ 91.808267][ T5850] Cannot create hsr debugfs directory [ 91.843322][ T5845] Bluetooth: hci3: command tx timeout [ 91.843351][ T5845] Bluetooth: hci1: command tx timeout [ 91.933389][ T5842] Bluetooth: hci4: command tx timeout [ 92.070709][ T5837] hsr_slave_0: entered promiscuous mode [ 92.071468][ T5837] hsr_slave_1: entered promiscuous mode [ 92.071956][ T5837] debugfs: 'hsr0' already exists in 'hsr' [ 92.071976][ T5837] Cannot create hsr debugfs directory [ 92.377403][ T5836] hsr_slave_0: entered promiscuous mode [ 92.378221][ T5836] hsr_slave_1: entered promiscuous mode [ 92.378721][ T5836] debugfs: 'hsr0' already exists in 'hsr' [ 92.378740][ T5836] Cannot create hsr debugfs directory [ 93.763457][ T5842] Bluetooth: hci2: command tx timeout [ 93.843328][ T5842] Bluetooth: hci0: command tx timeout [ 93.923374][ T5842] Bluetooth: hci1: command tx timeout [ 93.923404][ T5842] Bluetooth: hci3: command tx timeout [ 94.000371][ T5838] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 94.004657][ T5845] Bluetooth: hci4: command tx timeout [ 94.048138][ T5838] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 94.082490][ T5838] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 94.117740][ T5838] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 94.276315][ T5850] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 94.327927][ T5850] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 94.362932][ T5850] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 94.425530][ T5850] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 94.579532][ T5837] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 94.632352][ T5837] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 94.678546][ T5837] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 94.737679][ T5837] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 94.912612][ T5836] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 94.962767][ T5836] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 95.010309][ T5836] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 95.065447][ T5836] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 95.171993][ T5838] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.232775][ T5847] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 95.278639][ T5847] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 95.318891][ T5847] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 95.363021][ T5847] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 95.417112][ T5838] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.472749][ T1375] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.473911][ T1375] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.528745][ T87] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.528845][ T87] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.569006][ T5850] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.691859][ T5850] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.728813][ T5837] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.749279][ T1404] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.749493][ T1404] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.805204][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.805351][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.866956][ T5837] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.946248][ T5836] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.952084][ T1404] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.952297][ T1404] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.030139][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.030357][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.166175][ T5836] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.224773][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.224997][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.233130][ T5847] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.289216][ T87] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.289382][ T87] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.426736][ T5838] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.452165][ T5847] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.545330][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.547944][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.622328][ T1410] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.622508][ T1410] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.884782][ T5850] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.951110][ T5838] veth0_vlan: entered promiscuous mode [ 97.037106][ T5838] veth1_vlan: entered promiscuous mode [ 97.174717][ T5837] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.264333][ T5836] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.277141][ T5850] veth0_vlan: entered promiscuous mode [ 97.324466][ T5838] veth0_macvtap: entered promiscuous mode [ 97.343957][ T5850] veth1_vlan: entered promiscuous mode [ 97.350405][ T5838] veth1_macvtap: entered promiscuous mode [ 97.530956][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.586107][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.644172][ T5847] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.660240][ T5836] veth0_vlan: entered promiscuous mode [ 97.661203][ T5850] veth0_macvtap: entered promiscuous mode [ 97.672548][ T1375] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.698842][ T1375] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.711203][ T1375] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.730016][ T1375] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.730728][ T5850] veth1_macvtap: entered promiscuous mode [ 97.810369][ T5836] veth1_vlan: entered promiscuous mode [ 97.985326][ T5850] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.026449][ T5850] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.108997][ T43] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.111683][ T1286] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.111706][ T1286] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.155131][ T43] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.173450][ T43] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.183061][ T43] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.190758][ T5847] veth0_vlan: entered promiscuous mode [ 98.224914][ T5836] veth0_macvtap: entered promiscuous mode [ 98.275875][ T5837] veth0_vlan: entered promiscuous mode [ 98.307429][ T5836] veth1_macvtap: entered promiscuous mode [ 98.309957][ T43] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.309975][ T43] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.376606][ T5847] veth1_vlan: entered promiscuous mode [ 98.472310][ T5837] veth1_vlan: entered promiscuous mode [ 98.593898][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.623851][ T1410] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.629332][ T1410] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.666101][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.763357][ T43] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.782999][ T43] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.795323][ T43] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.799159][ T43] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.799177][ T43] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.855869][ T87] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.874297][ T5847] veth0_macvtap: entered promiscuous mode [ 98.957535][ T5837] veth0_macvtap: entered promiscuous mode [ 98.959785][ T5847] veth1_macvtap: entered promiscuous mode [ 99.041815][ T5837] veth1_macvtap: entered promiscuous mode [ 99.313141][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.450474][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.454528][ T1375] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.454548][ T1375] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.078176][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 100.305731][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 100.327714][ T57] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.348953][ T57] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.378229][ T57] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.421868][ T57] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.423364][ T57] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.441745][ T57] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.462396][ T57] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.476838][ T57] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.664917][ T43] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.664939][ T43] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.673322][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 101.443401][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 101.908718][ T1286] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.908744][ T1286] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.130579][ T87] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.130599][ T87] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.353220][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 103.353263][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 103.353304][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 103.353336][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 103.353369][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 103.353401][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 103.353434][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 103.353466][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 103.682849][ T1286] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.682869][ T1286] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.827838][ T87] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.827858][ T87] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.056991][ T5915] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 104.235889][ T5915] usb 4-1: device descriptor read/64, error -71 [ 104.584681][ T5915] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 104.727835][ T5915] usb 4-1: device descriptor read/64, error -71 [ 104.833773][ T5915] usb usb4-port1: attempt power cycle [ 105.139354][ T5842] Bluetooth: hci4: command 0x0405 tx timeout [ 105.294332][ T5915] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 105.314086][ T5915] usb 4-1: device descriptor read/8, error -71 [ 105.381947][ T6008] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5'. [ 105.746578][ T6014] netlink: 4 bytes leftover after parsing attributes in process `syz.0.15'. [ 107.662500][ T6025] overlayfs: missing 'lowerdir' [ 110.893280][ T5928] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 111.079064][ T5928] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 111.079098][ T5928] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 111.079135][ T5928] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 111.079156][ T5928] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.609258][ T6045] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 111.745578][ T5928] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 112.314712][ T6061] netlink: 'syz.0.29': attribute type 1 has an invalid length. [ 112.992132][ T5928] usb 3-1: USB disconnect, device number 2 [ 113.070630][ T6065] overlayfs: missing 'lowerdir' [ 114.524675][ T6081] Zero length message leads to an empty skb [ 115.939457][ T6106] overlayfs: missing 'lowerdir' [ 116.469824][ T6112] overlayfs: missing 'lowerdir' [ 116.592605][ T6112] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 116.846016][ T6116] netlink: 4 bytes leftover after parsing attributes in process `syz.0.46'. [ 120.774786][ T6149] overlayfs: missing 'workdir' [ 121.606444][ T5915] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 122.411751][ T6162] syz.4.57 (6162) used greatest stack depth: 17832 bytes left [ 122.568713][ T5915] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 122.568764][ T5915] usb 2-1: New USB device found, idVendor=046d, idProduct=c71f, bcdDevice= 0.00 [ 122.568786][ T5915] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.765532][ T5915] usb 2-1: config 0 descriptor?? [ 123.230523][ T6174] netlink: 'syz.3.61': attribute type 29 has an invalid length. [ 123.240861][ T6174] netlink: 'syz.3.61': attribute type 29 has an invalid length. [ 135.135255][ T1324] ieee802154 phy0 wpan0: encryption failed: -22 [ 135.135353][ T1324] ieee802154 phy1 wpan1: encryption failed: -22 [ 135.222870][ T5915] usbhid 2-1:0.0: can't add hid device: -32 [ 135.222950][ T5915] usbhid 2-1:0.0: probe with driver usbhid failed with error -32 [ 135.574557][ T5993] usb 2-1: USB disconnect, device number 2 [ 136.440673][ T6190] overlayfs: missing 'workdir' [ 136.843391][ T5993] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 137.002095][ T5993] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 137.002139][ T5993] usb 4-1: New USB device found, idVendor=046d, idProduct=c71f, bcdDevice= 0.00 [ 137.002162][ T5993] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.552185][ T5993] usb 4-1: config 0 descriptor?? [ 138.202981][ T5845] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 138.232838][ T5845] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 138.248386][ T5845] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 138.310982][ T5845] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 138.544892][ C1] vkms_vblank_simulate: vblank timer overrun [ 138.624252][ T5845] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 140.608806][ T5842] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 140.623874][ T5842] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 140.625651][ T5842] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 140.630744][ T5842] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 140.661707][ T5842] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 140.726625][ T5842] Bluetooth: hci5: command tx timeout [ 141.429489][ T5993] usbhid 4-1:0.0: can't add hid device: -71 [ 141.429573][ T5993] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 141.460824][ T5993] usb 4-1: USB disconnect, device number 6 [ 142.805357][ T5845] Bluetooth: hci5: command tx timeout [ 142.806862][ T5845] Bluetooth: hci3: command tx timeout [ 143.338422][ T6229] overlayfs: missing 'workdir' [ 143.717880][ T67] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.500185][ T67] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.915120][ T6242] sd 0:0:1:0: device reset [ 144.918023][ C0] vkms_vblank_simulate: vblank timer overrun [ 144.929843][ T5842] Bluetooth: hci5: command tx timeout [ 144.929879][ T5842] Bluetooth: hci3: command tx timeout [ 145.367499][ C0] vkms_vblank_simulate: vblank timer overrun [ 145.566277][ C0] vkms_vblank_simulate: vblank timer overrun [ 145.980532][ T67] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.108516][ T5915] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 146.255453][ T5915] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 146.255495][ T5915] usb 5-1: New USB device found, idVendor=046d, idProduct=c71f, bcdDevice= 0.00 [ 146.255516][ T5915] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.303974][ T5915] usb 5-1: config 0 descriptor?? [ 146.336551][ T67] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.967002][ T5845] Bluetooth: hci3: command tx timeout [ 146.967025][ T5842] Bluetooth: hci5: command tx timeout [ 148.262213][ C0] vkms_vblank_simulate: vblank timer overrun [ 148.769517][ T5915] usbhid 5-1:0.0: can't add hid device: -71 [ 148.769643][ T5915] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 148.834961][ T5915] usb 5-1: USB disconnect, device number 2 [ 149.258218][ T5845] Bluetooth: hci3: command tx timeout [ 149.471730][ T6202] chnl_net:caif_netlink_parms(): no params data found [ 149.607822][ T67] bridge_slave_1: left allmulticast mode [ 149.608309][ T67] bridge_slave_1: left promiscuous mode [ 149.623232][ T67] bridge0: port 2(bridge_slave_1) entered disabled state [ 149.752883][ T67] bridge_slave_0: left allmulticast mode [ 149.752918][ T67] bridge_slave_0: left promiscuous mode [ 149.768117][ T67] bridge0: port 1(bridge_slave_0) entered disabled state [ 151.587112][ T6288] sd 0:0:1:0: device reset [ 156.273904][ T67] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 156.409267][ T6329] NILFS (loop4): device size too small [ 156.985170][ T67] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 157.028274][ T67] bond0 (unregistering): Released all slaves [ 157.054983][ T6329] warning: `syz.4.106' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 157.945133][ T6339] sd 0:0:1:0: device reset [ 159.657891][ T6212] chnl_net:caif_netlink_parms(): no params data found [ 162.579240][ T6373] syz.3.118 (6373) used greatest stack depth: 15704 bytes left [ 163.479478][ T6202] bridge0: port 1(bridge_slave_0) entered blocking state [ 163.479561][ T6202] bridge0: port 1(bridge_slave_0) entered disabled state [ 163.479732][ T6202] bridge_slave_0: entered allmulticast mode [ 163.523915][ T6202] bridge_slave_0: entered promiscuous mode [ 163.685422][ T6202] bridge0: port 2(bridge_slave_1) entered blocking state [ 163.685581][ T6202] bridge0: port 2(bridge_slave_1) entered disabled state [ 163.685834][ T6202] bridge_slave_1: entered allmulticast mode [ 163.717372][ T6202] bridge_slave_1: entered promiscuous mode [ 164.654077][ T67] hsr_slave_0: left promiscuous mode [ 164.759678][ T67] hsr_slave_1: left promiscuous mode [ 164.760816][ T67] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 164.760900][ T67] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 164.825333][ T67] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 164.825364][ T67] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 165.106031][ T67] veth1_macvtap: left promiscuous mode [ 165.106286][ T67] veth0_macvtap: left promiscuous mode [ 165.106606][ T67] veth1_vlan: left promiscuous mode [ 165.106937][ T67] veth0_vlan: left promiscuous mode [ 166.563790][ T6406] sd 0:0:1:0: device reset [ 168.502606][ C1] vkms_vblank_simulate: vblank timer overrun [ 171.103900][ T67] team0 (unregistering): Port device team_slave_1 removed [ 171.482818][ T6436] netlink: 28 bytes leftover after parsing attributes in process `syz.3.137'. [ 171.482854][ T6436] netlink: 44 bytes leftover after parsing attributes in process `syz.3.137'. [ 171.537981][ T67] team0 (unregistering): Port device team_slave_0 removed [ 176.194189][ T6419] bridge0: port 2(bridge_slave_1) entered disabled state [ 176.195629][ T6419] bridge0: port 1(bridge_slave_0) entered disabled state [ 176.970203][ T6457] NILFS (loop4): device size too small [ 176.984604][ C0] vkms_vblank_simulate: vblank timer overrun [ 177.621777][ C0] vkms_vblank_simulate: vblank timer overrun [ 177.847708][ T6419] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 177.880064][ T6419] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 179.068256][ T6202] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 179.082585][ T6212] bridge0: port 1(bridge_slave_0) entered blocking state [ 179.082728][ T6212] bridge0: port 1(bridge_slave_0) entered disabled state [ 179.082963][ T6212] bridge_slave_0: entered allmulticast mode [ 179.123649][ T6212] bridge_slave_0: entered promiscuous mode [ 179.160985][ T1164] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.197964][ T6202] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 179.201772][ T6212] bridge0: port 2(bridge_slave_1) entered blocking state [ 179.201914][ T6212] bridge0: port 2(bridge_slave_1) entered disabled state [ 179.202118][ T6212] bridge_slave_1: entered allmulticast mode [ 179.218125][ T6212] bridge_slave_1: entered promiscuous mode [ 179.230550][ T1164] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.325628][ T6467] netlink: 52 bytes leftover after parsing attributes in process `syz.3.146'. [ 179.566451][ T1164] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.576823][ T6467] bridge0: port 2(bridge_slave_1) entered disabled state [ 179.578792][ T6467] bridge0: port 1(bridge_slave_0) entered disabled state [ 180.044163][ T1164] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.774621][ C0] vkms_vblank_simulate: vblank timer overrun [ 180.803343][ C0] vkms_vblank_simulate: vblank timer overrun [ 180.847829][ T6202] team0: Port device team_slave_0 added [ 180.905407][ T6212] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 180.926811][ T6202] team0: Port device team_slave_1 added [ 181.124719][ T6481] use of bytesused == 0 is deprecated and will be removed in the future, [ 181.124735][ T6481] use the actual size instead. [ 181.424715][ T6488] netlink: 28 bytes leftover after parsing attributes in process `syz.3.154'. [ 181.424752][ T6488] netlink: 44 bytes leftover after parsing attributes in process `syz.3.154'. [ 181.457862][ T6212] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 181.553570][ T5839] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 181.984870][ T5839] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 181.984917][ T5839] usb 3-1: New USB device found, idVendor=046d, idProduct=c71f, bcdDevice= 0.00 [ 181.984940][ T5839] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.829647][ T5839] usb 3-1: config 0 descriptor?? [ 183.822133][ T6498] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 184.471273][ T5839] usbhid 3-1:0.0: can't add hid device: -71 [ 184.471404][ T5839] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 184.508206][ T5839] usb 3-1: USB disconnect, device number 3 [ 184.600615][ T6202] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 184.600630][ T6202] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 184.600654][ T6202] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 184.634158][ T6212] team0: Port device team_slave_0 added [ 184.897954][ T6202] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 184.897969][ T6202] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 184.897992][ T6202] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 185.535348][ T6212] team0: Port device team_slave_1 added [ 186.033567][ T6212] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 186.033582][ T6212] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 186.033599][ T6212] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 186.238594][ T6212] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 186.238610][ T6212] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 186.238633][ T6212] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 186.550945][ T6202] hsr_slave_0: entered promiscuous mode [ 186.552176][ T6202] hsr_slave_1: entered promiscuous mode [ 186.553045][ T6202] debugfs: 'hsr0' already exists in 'hsr' [ 186.553069][ T6202] Cannot create hsr debugfs directory [ 186.685141][ T6531] netlink: 28 bytes leftover after parsing attributes in process `syz.4.163'. [ 186.685176][ T6531] netlink: 44 bytes leftover after parsing attributes in process `syz.4.163'. [ 187.606177][ T6540] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 189.140872][ T6548] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 189.359385][ T5915] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 189.549240][ T5915] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 189.549287][ T5915] usb 4-1: New USB device found, idVendor=046d, idProduct=c71f, bcdDevice= 0.00 [ 189.549306][ T5915] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 190.548155][ T5915] usb 4-1: config 0 descriptor?? [ 192.221290][ T5915] usbhid 4-1:0.0: can't add hid device: -71 [ 192.221435][ T5915] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 192.353525][ T5915] usb 4-1: USB disconnect, device number 7 [ 192.377332][ T6212] hsr_slave_0: entered promiscuous mode [ 192.431083][ T6212] hsr_slave_1: entered promiscuous mode [ 192.431974][ T6212] debugfs: 'hsr0' already exists in 'hsr' [ 192.431997][ T6212] Cannot create hsr debugfs directory [ 194.418398][ T1324] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.418574][ T1324] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.678637][ T67] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.896294][ T6592] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 198.647535][ T67] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.734178][ T6602] veth1: default FDB implementation only supports local addresses [ 198.758386][ T9] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 198.939458][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 198.939505][ T9] usb 4-1: New USB device found, idVendor=046d, idProduct=c71f, bcdDevice= 0.00 [ 198.939528][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 198.955545][ T9] usb 4-1: config 0 descriptor?? [ 201.036920][ T67] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.251156][ T5842] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 201.277844][ T5842] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 201.281040][ T5842] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 201.304512][ T5842] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 201.305626][ T5842] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 202.402279][ T9] usbhid 4-1:0.0: can't add hid device: -71 [ 202.402409][ T9] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 202.409742][ T9] usb 4-1: USB disconnect, device number 8 [ 202.603639][ T67] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.611182][ T5845] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 202.659826][ T5845] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 202.662392][ T5845] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 202.682028][ T5845] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 202.685113][ T5845] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 203.455048][ T5842] Bluetooth: hci0: command tx timeout [ 204.723368][ T5842] Bluetooth: hci3: command tx timeout [ 205.523699][ T5842] Bluetooth: hci0: command tx timeout [ 207.283358][ T5842] Bluetooth: hci3: command tx timeout [ 207.547186][ T67] bridge_slave_1: left allmulticast mode [ 207.547226][ T67] bridge_slave_1: left promiscuous mode [ 207.547463][ T67] bridge0: port 2(bridge_slave_1) entered disabled state [ 207.633177][ T5845] Bluetooth: hci0: command tx timeout [ 207.765042][ T67] bridge_slave_0: left allmulticast mode [ 207.765074][ T67] bridge_slave_0: left promiscuous mode [ 207.765327][ T67] bridge0: port 1(bridge_slave_0) entered disabled state [ 207.811131][ T6675] binder: BINDER_SET_CONTEXT_MGR already set [ 207.811147][ T6675] binder: 6674:6675 ioctl 4018620d 200000004a80 returned -16 [ 207.883265][ T9] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 208.037815][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 208.037859][ T9] usb 3-1: New USB device found, idVendor=046d, idProduct=c71f, bcdDevice= 0.00 [ 208.037881][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 208.088667][ T9] usb 3-1: config 0 descriptor?? [ 209.373650][ T5845] Bluetooth: hci3: command tx timeout [ 210.038363][ T59] Bluetooth: hci0: command tx timeout [ 211.443975][ T5155] Bluetooth: hci3: command tx timeout [ 211.651158][ T9] usbhid 3-1:0.0: can't add hid device: -71 [ 211.651332][ T9] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 211.689719][ T9] usb 3-1: USB disconnect, device number 4 [ 212.083326][ T5845] Bluetooth: hci2: command 0x0406 tx timeout [ 212.083427][ T5155] Bluetooth: hci1: command 0x0406 tx timeout [ 212.083581][ T5845] Bluetooth: hci4: command 0x0405 tx timeout [ 215.467671][ T67] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 215.588318][ T67] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 215.644639][ T67] bond0 (unregistering): Released all slaves [ 217.093271][ T5839] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 217.245722][ T5839] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 217.245775][ T5839] usb 5-1: New USB device found, idVendor=046d, idProduct=c71f, bcdDevice= 0.00 [ 217.245798][ T5839] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 217.287854][ T5839] usb 5-1: config 0 descriptor?? [ 219.911198][ T5839] usbhid 5-1:0.0: can't add hid device: -71 [ 219.911323][ T5839] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 219.964902][ T5839] usb 5-1: USB disconnect, device number 3 [ 221.492289][ T6748] sd 0:0:1:0: device reset [ 221.502687][ T6616] chnl_net:caif_netlink_parms(): no params data found [ 223.063749][ T6759] NILFS (loop4): device size too small [ 223.943344][ T67] hsr_slave_0: left promiscuous mode [ 224.066678][ T67] hsr_slave_1: left promiscuous mode [ 224.069081][ T67] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 224.069111][ T67] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 224.165990][ T67] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 224.166021][ T67] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 224.329698][ T67] veth1_macvtap: left promiscuous mode [ 224.329968][ T67] veth0_macvtap: left promiscuous mode [ 224.330270][ T67] veth1_vlan: left promiscuous mode [ 224.330484][ T67] veth0_vlan: left promiscuous mode [ 229.586900][ T6796] NILFS (loop3): device size too small [ 230.070550][ T6798] sd 0:0:1:0: device reset [ 231.766628][ T31] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 232.688954][ T6817] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 232.847522][ T31] usb 3-1: Using ep0 maxpacket: 8 [ 232.864696][ T31] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 232.864725][ T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 232.864744][ T31] usb 3-1: Product: syz [ 232.864757][ T31] usb 3-1: Manufacturer: syz [ 232.864770][ T31] usb 3-1: SerialNumber: syz [ 233.190787][ T31] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 5 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 233.508488][ T67] team0 (unregistering): Port device team_slave_1 removed [ 233.743083][ T67] team0 (unregistering): Port device team_slave_0 removed [ 233.943890][ T31] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 234.104627][ T31] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 234.104652][ T31] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 234.108022][ T31] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 234.108049][ T31] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 234.108068][ T31] usb 4-1: SerialNumber: syz [ 234.372700][ T31] usb 4-1: 0:2 : does not exist [ 234.519651][ T31] usb 4-1: USB disconnect, device number 9 [ 234.690373][ T6812] BUG: sleeping function called from invalid context at kernel/locking/spinlock_rt.c:48 [ 234.690394][ T6812] in_atomic(): 0, irqs_disabled(): 1, non_block: 0, pid: 6812, name: syz.2.232 [ 234.690408][ T6812] preempt_count: 0, expected: 0 [ 234.690423][ T6812] RCU nest depth: 0, expected: 0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 234.690445][ T6812] 1 lock held by syz.2.232/6812: [ 234.690454][ T6812] #0: ffff88814636c058 (&dum_hcd->dum->lock){+.+.}-{3:3}, at: dummy_dequeue+0x164/0x480 [ 234.690523][ T6812] irq event stamp: 4008 [ 234.690529][ T6812] hardirqs last enabled at (4007): [] _raw_spin_unlock_irq+0x23/0x50 [ 234.690559][ T6812] hardirqs last disabled at (4008): [] dummy_dequeue+0x151/0x480 [ 234.690582][ T6812] softirqs last enabled at (0): [] copy_process+0x979/0x3ae0 [ 234.690608][ T6812] softirqs last disabled at (0): [<0000000000000000>] 0x0 [ 234.690647][ T6812] CPU: 1 UID: 0 PID: 6812 Comm: syz.2.232 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 234.690667][ T6812] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 234.690683][ T6812] Call Trace: [ 234.690692][ T6812] [ 234.690700][ T6812] dump_stack_lvl+0x189/0x250 [ 234.690733][ T6812] ? __pfx_dump_stack_lvl+0x10/0x10 [ 234.690763][ T6812] ? print_lock_name+0xde/0x100 [ 234.690785][ T6812] __might_resched+0x44b/0x5d0 [ 234.690809][ T6812] ? __pfx___might_resched+0x10/0x10 [ 234.690826][ T6812] ? dummy_dequeue+0x164/0x480 [ 234.690857][ T6812] rt_spin_lock+0xc7/0x2c0 [ 234.690880][ T6812] ? __pfx_rt_spin_lock+0x10/0x10 [ 234.690898][ T6812] ? lockdep_hardirqs_on+0x9c/0x150 [ 234.690925][ T6812] ? rcu_is_watching+0x15/0xb0 [ 234.690952][ T6812] dummy_dequeue+0x164/0x480 [ 234.690977][ T6812] ? __pfx_dummy_dequeue+0x10/0x10 [ 234.690997][ T6812] ? __pfx_schedule_timeout+0x10/0x10 [ 234.691019][ T6812] ? __pfx___wait_for_common+0x10/0x10 [ 234.691049][ T6812] usb_ep_dequeue+0x66/0x250 [ 234.691070][ T6812] raw_process_ep_io+0x5a3/0xaf0 [ 234.691100][ T6812] ? __pfx_raw_process_ep_io+0x10/0x10 [ 234.691130][ T6812] ? rcu_is_watching+0x15/0xb0 [ 234.691154][ T6812] ? __kmalloc_noprof+0x20f/0x430 [ 234.691177][ T6812] ? raw_ioctl+0x1fd4/0x3ba0 [ 234.691202][ T6812] raw_ioctl+0x25c6/0x3ba0 [ 234.691225][ T6812] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 234.691247][ T6812] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 234.691269][ T6812] ? do_vfs_ioctl+0xbeb/0x1440 [ 234.691289][ T6812] ? __pfx_raw_ioctl+0x10/0x10 [ 234.691309][ T6812] ? __pfx_smack_log+0x10/0x10 [ 234.691333][ T6812] ? smk_access+0x14c/0x4e0 [ 234.691361][ T6812] ? smk_tskacc+0x2fc/0x370 [ 234.691388][ T6812] ? smack_file_ioctl+0x2ac/0x340 [ 234.691406][ T6812] ? __pfx_smack_file_ioctl+0x10/0x10 [ 234.691441][ T6812] ? __fget_files+0x2a/0x420 [ 234.691463][ T6812] ? __fget_files+0x3a6/0x420 [ 234.691485][ T6812] ? __fget_files+0x2a/0x420 [ 234.691510][ T6812] ? bpf_lsm_file_ioctl+0x9/0x20 [ 234.691529][ T6812] ? __pfx_raw_ioctl+0x10/0x10 [ 234.691551][ T6812] __se_sys_ioctl+0xff/0x170 [ 234.691571][ T6812] do_syscall_64+0xfa/0x3b0 [ 234.691586][ T6812] ? lockdep_hardirqs_on+0x9c/0x150 [ 234.691611][ T6812] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 234.691630][ T6812] ? clear_bhb_loop+0x60/0xb0 [ 234.691651][ T6812] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 234.691669][ T6812] RIP: 0033:0x7f22a06de7ab [ 234.691685][ T6812] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 234.691701][ T6812] RSP: 002b:00007f229e944f70 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 234.691720][ T6812] RAX: ffffffffffffffda RBX: 0000000000000009 RCX: 00007f22a06de7ab [ 234.691734][ T6812] RDX: 00007f229e944ff0 RSI: 00000000c0085508 RDI: 0000000000000004 [ 234.691746][ T6812] RBP: 0000000000000004 R08: 00007f22a0a50320 R09: 0000000000000000 [ 234.691758][ T6812] R10: 0000000000000004 R11: 0000000000000246 R12: 0000200000000080 [ 234.691768][ T6812] R13: 0000000000000012 R14: 00007f22a0925fa0 R15: 00007ffca0b0fe18 [ 234.691796][ T6812] [ 235.198076][ T6177] udevd[6177]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 235.242569][ T6006] usb 3-1: USB disconnect, device number 5 [ 235.267704][ T6006] usblp0: removed [ 236.527009][ T6616] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wg0": -EINTR [ 241.204862][ T67] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.467747][ T67] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.807624][ T67] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.137766][ T67] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.760882][ T67] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.065499][ T67] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.342556][ T67] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.697804][ T67] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.195690][ T67] bridge_slave_1: left allmulticast mode [ 244.195723][ T67] bridge_slave_1: left promiscuous mode [ 244.198314][ T67] bridge0: port 2(bridge_slave_1) entered disabled state [ 244.264874][ T67] bridge_slave_0: left allmulticast mode [ 244.264904][ T67] bridge_slave_0: left promiscuous mode [ 244.266693][ T67] bridge0: port 1(bridge_slave_0) entered disabled state [ 244.357589][ T67] bridge_slave_1: left allmulticast mode [ 244.357621][ T67] bridge_slave_1: left promiscuous mode [ 244.357928][ T67] bridge0: port 2(bridge_slave_1) entered disabled state [ 244.454158][ T67] bridge_slave_0: left allmulticast mode [ 244.454179][ T67] bridge_slave_0: left promiscuous mode [ 244.454340][ T67] bridge0: port 1(bridge_slave_0) entered disabled state [ 244.538147][ T67] bridge_slave_1: left allmulticast mode [ 244.538180][ T67] bridge_slave_1: left promiscuous mode [ 244.538425][ T67] bridge0: port 2(bridge_slave_1) entered disabled state [ 244.594893][ T67] bridge_slave_0: left allmulticast mode [ 244.594925][ T67] bridge_slave_0: left promiscuous mode [ 244.595172][ T67] bridge0: port 1(bridge_slave_0) entered disabled state [ 244.666376][ T67] bridge_slave_1: left allmulticast mode [ 244.666400][ T67] bridge_slave_1: left promiscuous mode [ 244.666564][ T67] bridge0: port 2(bridge_slave_1) entered disabled state