last executing test programs: 15.323012431s ago: executing program 4 (id=298): r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000040), 0x21041, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xe) writev(r0, &(0x7f0000000780)=[{&(0x7f0000000300)="eb276faada8e53259b3d97161ca2ad1faffbe7db40c44ceb157825d824a5a9f7b299c77b2bc8191dd07bbcdd78b0dd6ba1f24016c11f2986515917f57aa2c95943a8b044f245d9530c74864df8977f73f77054c5e89276fa4b7cf2c3343789a55ed83610bc9a6de0c1cd5b2fcb4ac51f0f35c94429c1578deca746666b75353e742ba95f7d84728dac160e30a5f25844620959c45d703868e8a936e76f4f26edbf75adbfd388771c14d04972c5f71179facad75da4326f059b63008d0fdc5230bc6f1ea04f9c87effb84effe8ddb5fbaaae98d2c354751bfbb5656878a68a1c851d4fb96fba5e18455a4cba2ed3c45c390fb189e", 0xf4}, {&(0x7f0000000400)="11ae52a6321e6c1c32cd3b788d5e21af8a8c7d823d4e295d270751d35e70c866ca812dde779a391f210954e717e7781d8a167feac15505277b871137b498525fbe8407be46823611907257e21a995c1b2b55cda77602a9c5734d798df6bf42b439df2168c09415642ca3205f5900fd7ffdcb6e32703903cbfbba937747eec7dcf25b9e861651e51b881628a7b2c166acee8f323b3140e64a4d52fef1c6b539f9471cf831d2f15e49f169adee755be1cf585220baf099ab76c2a005f4302e8cc0237905340211a81d44f9ac618ea8", 0xce}, {&(0x7f0000000500)="a5416ebba37f3bfb96940810b1523c5952ca01b7c59c40f3dc3f07fe838182bf6906bfa84342e1d28e9331c9fc6c4618e7407c983ea279c31a11551fc4be91bcbe6f373f2005b04cfa6eb7708e11b188e68b9d2017116583511bab3e5ed5bc5c0281df95a56fadd4afb3ec053ad1e7a613a6e2fc5a9fbac78861009a7f4ac462dee465c6a8ff4b753a109d2806cbd698197f99ddbff59eb19bbc2468851367507776388462413513278b", 0xaa}, {&(0x7f0000000240)="4de89476f0465616e2fb7e94810fa20f08e4ad6e177bff", 0x17}, {&(0x7f0000000880)="ecfe48a728b5d4093f8ef60243e30b8f8c06bba3462a6970d24162be72d608d1dc1bd444e4ef282350d59bd615b1ca9b6d82f0d534004dd7c72c79c2f18b4f008c4652eca8d930d8bdaf263ff4869524e0e87061fba7a91de0a2fd3504646ebcea6b69a0ed2ef8692fa1483b53045173885ae930b3428f501b738ef26ffa5233c42c20bffd461b72356cbc190f070c1500ac0cd6892bfb77cb0f6cde48e186b09478b259096afd4637ffa8aa49e8aa1c553c4bde49d0389f624ac3a0004b154d5c72b484168433c43218b1b39efb49b65662169bbde7071c1da5026e1b9430ebdde97d56eed2be82633f68", 0xeb}, {&(0x7f0000000980)="183bd7fe1460b29b5b3d5e8390cc35a7f46fc669b42c5dfe35d7bfc3145d71d8c4ed1642ccf01d2a5f997d8d0783f90326c0c96c282364da40cd9d7562c21773d487cfa78906b51df3f41e0b68121e0478a78dc82177eb85e66860de542175b3f1fcef1b788d1de8c07b2610ae1806a9c08e6bfde1a133ed06f30f4a50ebab5f463d143c8b249087da6e2ccfa63c6b81901296015f1e33c4eaac951420ef8018f8abde696d8e7ba0c5566dcb01c429c05a496f53760d8d4ec73b6aa74f74dccc620870fe7e72024cacdf19c593d9744654f1353d7dc8768872b1627d5c18c0c40aa60a", 0xe3}, {&(0x7f0000001640)="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", 0x3a9}], 0x7) 15.018971375s ago: executing program 4 (id=301): r0 = socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x54, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x208}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GRE_IFLAGS={0x6, 0x2, 0x30}, @IFLA_GRE_REMOTE={0x14, 0x7, @mcast1}]}}}]}, 0x54}}, 0x0) 14.098767876s ago: executing program 2 (id=305): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = syz_io_uring_setup(0x1237, &(0x7f0000000380)={0x0, 0x80fd, 0x80, 0x3, 0x2b9}, &(0x7f0000000040)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r2, 0x80, &(0x7f0000000080)=@l2tp={0x2, 0x0, @local, 0x3}}) io_uring_enter(r3, 0x47bc, 0x0, 0x0, 0x0, 0x0) dup2(0xffffffffffffffff, r2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) 10.885975363s ago: executing program 4 (id=311): r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000040), 0x21041, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xe) writev(r0, &(0x7f0000000780)=[{&(0x7f0000000300)="eb276faada8e53259b3d97161ca2ad1faffbe7db40c44ceb157825d824a5a9f7b299c77b2bc8191dd07bbcdd78b0dd6ba1f24016c11f2986515917f57aa2c95943a8b044f245d9530c74864df8977f73f77054c5e89276fa4b7cf2c3343789a55ed83610bc9a6de0c1cd5b2fcb4ac51f0f35c94429c1578deca746666b75353e742ba95f7d84728dac160e30a5f25844620959c45d703868e8a936e76f4f26edbf75adbfd388771c14d04972c5f71179facad75da4326f059b63008d0fdc5230bc6f1ea04f9c87effb84effe8ddb5fbaaae98d2c354751bfbb5656878a68a1c851d4fb96fba5e18455a4cba2ed3c45c390fb189e", 0xf4}, {&(0x7f0000000400)="11ae52a6321e6c1c32cd3b788d5e21af8a8c7d823d4e295d270751d35e70c866ca812dde779a391f210954e717e7781d8a167feac15505277b871137b498525fbe8407be46823611907257e21a995c1b2b55cda77602a9c5734d798df6bf42b439df2168c09415642ca3205f5900fd7ffdcb6e32703903cbfbba937747eec7dcf25b9e861651e51b881628a7b2c166acee8f323b3140e64a4d52fef1c6b539f9471cf831d2f15e49f169adee755be1cf585220baf099ab76c2a005f4302e8cc0237905340211a81d44f9ac618ea8", 0xce}, {&(0x7f0000000500)="a5416ebba37f3bfb96940810b1523c5952ca01b7c59c40f3dc3f07fe838182bf6906bfa84342e1d28e9331c9fc6c4618e7407c983ea279c31a11551fc4be91bcbe6f373f2005b04cfa6eb7708e11b188e68b9d2017116583511bab3e5ed5bc5c0281df95a56fadd4afb3ec053ad1e7a613a6e2fc5a9fbac78861009a7f4ac462dee465c6a8ff4b753a109d2806cbd698197f99ddbff59eb19bbc2468851367507776388462413513278b", 0xaa}, {&(0x7f0000000240)="4de89476f0465616e2fb7e94810fa20f08e4ad6e177bff", 0x17}, {&(0x7f0000000880)="ecfe48a728b5d4093f8ef60243e30b8f8c06bba3462a6970d24162be72d608d1dc1bd444e4ef282350d59bd615b1ca9b6d82f0d534004dd7c72c79c2f18b4f008c4652eca8d930d8bdaf263ff4869524e0e87061fba7a91de0a2fd3504646ebcea6b69a0ed2ef8692fa1483b53045173885ae930b3428f501b738ef26ffa5233c42c20bffd461b72356cbc190f070c1500ac0cd6892bfb77cb0f6cde48e186b09478b259096afd4637ffa8aa49e8aa1c553c4bde49d0389f624ac3a0004b154d5c72b484168433c43218b1b39efb49b65662169bbde7071c1da5026e1b9430ebdde97d56eed2be82633f68", 0xeb}, {&(0x7f0000000980)="183bd7fe1460b29b5b3d5e8390cc35a7f46fc669b42c5dfe35d7bfc3145d71d8c4ed1642ccf01d2a5f997d8d0783f90326c0c96c282364da40cd9d7562c21773d487cfa78906b51df3f41e0b68121e0478a78dc82177eb85e66860de542175b3f1fcef1b788d1de8c07b2610ae1806a9c08e6bfde1a133ed06f30f4a50ebab5f463d143c8b249087da6e2ccfa63c6b81901296015f1e33c4eaac951420ef8018f8abde696d8e7ba0c5566dcb01c429c05a496f53760d8d4ec73b6aa74f74dccc620870fe7e72024cacdf19c593d9744654f1353d7dc8768872b1627d5c18c0c40aa60a", 0xe3}, {&(0x7f0000001640)="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", 0x3a9}], 0x7) 10.622141851s ago: executing program 2 (id=314): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f00000008c0)=ANY=[@ANYBLOB="9feb01001800000000000000200000002000000007000000050000000000001010000000000000000100000d000000000400000001000000000000005f"], 0x0, 0x3f, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) 10.562883018s ago: executing program 4 (id=315): sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r3}, 0x18) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = dup(r4) ioctl$TIOCL_SETSEL(r5, 0x541c, &(0x7f0000001900)={0x2, {0x2, 0xa00, 0x0, 0x101, 0x100}}) 10.149723515s ago: executing program 2 (id=316): fgetxattr(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r3}, 0x0, &(0x7f00000002c0)}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, &(0x7f0000000040)}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) socket(0x80000000000000a, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_socket_connect_nvme_tcp() socket(0x10, 0x3, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 9.444600114s ago: executing program 3 (id=318): pipe(&(0x7f0000000400)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0xfffffffffffffde8, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) pipe2$9p(&(0x7f0000000180), 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) pipe(&(0x7f00000002c0)) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r2}, 0x10) r3 = creat(&(0x7f0000000080)='./file0\x00', 0x2a) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000001200)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2405000005000000000000000c240000e9fffff5ffffffff092403f3", @ANYRES8=r3, @ANYRES64=r0], 0x0) 8.528707487s ago: executing program 2 (id=319): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/cgroup.procs\x00', 0x900) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x39, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r3, 0x13) 7.353437018s ago: executing program 2 (id=321): socket$packet(0x11, 0x3, 0x300) openat(0xffffffffffffff9c, 0x0, 0x80040, 0x61) getpgid(0x0) r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x33) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$pppl2tp(0x18, 0x1, 0x1) socket$netlink(0x10, 0x3, 0xc) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x3, 0x10010, r4, 0x837d8000) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x2b8, 0x0, 0xc8, 0x8, 0x1c0, 0x5803, 0x408, 0x2e8, 0x2e8, 0x408, 0x2e8, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @empty, [], [], 'vlan0\x00', 'geneve1\x00'}, 0x0, 0xa8, 0xd8, 0x0, {0x0, 0x2000000000000}}, @common=@unspec=@CONNMARK={0x30}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x318) sendmmsg(0xffffffffffffffff, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000180)=0x8, 0x4) sendmsg$nl_generic(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000001b00)={0x20, 0x2d, 0x1, 0x70bd26, 0x25dfdbfc, {0x4}, [@nested={0xc, 0x16, 0x0, 0x1, [@typed={0x8, 0xbf, 0x0, 0x0, @u32=0x7fffffff}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) epoll_pwait(0xffffffffffffffff, 0x0, 0x0, 0x10001, 0x0, 0x0) 6.566863697s ago: executing program 1 (id=322): ioctl$F2FS_IOC_RESIZE_FS(0xffffffffffffffff, 0x4008f510, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b40)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) add_key(&(0x7f0000000140)='encrypted\x00', 0x0, &(0x7f0000000100), 0x0, 0xfffffffffffffffe) add_key$user(0x0, &(0x7f0000000440), 0x0, 0x0, 0xfffffffffffffffd) gettid() futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, 0x0, 0x0) 6.440601073s ago: executing program 3 (id=323): landlock_restrict_self(0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) r2 = landlock_create_ruleset(&(0x7f0000000080)={0x8601, 0x2}, 0x18, 0x0) landlock_restrict_self(r2, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = syz_io_uring_setup(0x1237, &(0x7f0000000380)={0x0, 0x80fd, 0x80, 0x3, 0x2b9}, &(0x7f0000000040)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000080)=@l2tp={0x2, 0x0, @local, 0x3}}) io_uring_enter(r4, 0x47bc, 0x0, 0x0, 0x0, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) dup2(r7, r3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) 5.668709059s ago: executing program 1 (id=324): syz_emit_ethernet(0x52, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb08004c000078ac1414000a0101004414050300000000000000000a010101000000008903ce0702000000000000000000", @ANYBLOB="5c00000090"], 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0), 0x12) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz0\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000180)={0x1, 0x14, 0x4, 0xfffd, 0x0, 0x40, 0x0}) r1 = add_key$user(&(0x7f00000001c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000080)="bc5d", 0x2, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r1, r2, r1}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 5.635108407s ago: executing program 0 (id=325): r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000040), 0x21041, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xe) writev(r0, &(0x7f0000000780)=[{&(0x7f0000000300)="eb276faada8e53259b3d97161ca2ad1faffbe7db40c44ceb157825d824a5a9f7b299c77b2bc8191dd07bbcdd78b0dd6ba1f24016c11f2986515917f57aa2c95943a8b044f245d9530c74864df8977f73f77054c5e89276fa4b7cf2c3343789a55ed83610bc9a6de0c1cd5b2fcb4ac51f0f35c94429c1578deca746666b75353e742ba95f7d84728dac160e30a5f25844620959c45d703868e8a936e76f4f26edbf75adbfd388771c14d04972c5f71179facad75da4326f059b63008d0fdc5230bc6f1ea04f9c87effb84effe8ddb5fbaaae98d2c354751bfbb5656878a68a1c851d4fb96fba5e18455a4cba2ed3c45c390fb189e", 0xf4}, {&(0x7f0000000400)="11ae52a6321e6c1c32cd3b788d5e21af8a8c7d823d4e295d270751d35e70c866ca812dde779a391f210954e717e7781d8a167feac15505277b871137b498525fbe8407be46823611907257e21a995c1b2b55cda77602a9c5734d798df6bf42b439df2168c09415642ca3205f5900fd7ffdcb6e32703903cbfbba937747eec7dcf25b9e861651e51b881628a7b2c166acee8f323b3140e64a4d52fef1c6b539f9471cf831d2f15e49f169adee755be1cf585220baf099ab76c2a005f4302e8cc0237905340211a81d44f9ac618ea8", 0xce}, {&(0x7f0000000500)="a5416ebba37f3bfb96940810b1523c5952ca01b7c59c40f3dc3f07fe838182bf6906bfa84342e1d28e9331c9fc6c4618e7407c983ea279c31a11551fc4be91bcbe6f373f2005b04cfa6eb7708e11b188e68b9d2017116583511bab3e5ed5bc5c0281df95a56fadd4afb3ec053ad1e7a613a6e2fc5a9fbac78861009a7f4ac462dee465c6a8ff4b753a109d2806cbd698197f99ddbff59eb19bbc2468851367507776388462413513278b", 0xaa}, {&(0x7f0000000240)="4de89476f0465616e2fb7e94810fa20f08e4ad6e177bff", 0x17}, {&(0x7f0000000880)="ecfe48a728b5d4093f8ef60243e30b8f8c06bba3462a6970d24162be72d608d1dc1bd444e4ef282350d59bd615b1ca9b6d82f0d534004dd7c72c79c2f18b4f008c4652eca8d930d8bdaf263ff4869524e0e87061fba7a91de0a2fd3504646ebcea6b69a0ed2ef8692fa1483b53045173885ae930b3428f501b738ef26ffa5233c42c20bffd461b72356cbc190f070c1500ac0cd6892bfb77cb0f6cde48e186b09478b259096afd4637ffa8aa49e8aa1c553c4bde49d0389f624ac3a0004b154d5c72b484168433c43218b1b39efb49b65662169bbde7071c1da5026e1b9430ebdde97d56eed2be82633f68", 0xeb}, {&(0x7f0000000980)="183bd7fe1460b29b5b3d5e8390cc35a7f46fc669b42c5dfe35d7bfc3145d71d8c4ed1642ccf01d2a5f997d8d0783f90326c0c96c282364da40cd9d7562c21773d487cfa78906b51df3f41e0b68121e0478a78dc82177eb85e66860de542175b3f1fcef1b788d1de8c07b2610ae1806a9c08e6bfde1a133ed06f30f4a50ebab5f463d143c8b249087da6e2ccfa63c6b81901296015f1e33c4eaac951420ef8018f8abde696d8e7ba0c5566dcb01c429c05a496f53760d8d4ec73b6aa74f74dccc620870fe7e72024cacdf19c593d9744654f1353d7dc8768872b1627d5c18c0c40aa60a", 0xe3}, {&(0x7f0000001640)="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", 0x3a9}], 0x7) 5.370903675s ago: executing program 0 (id=326): r0 = add_key$user(&(0x7f0000000980), &(0x7f00000009c0)={'syz', 0x0}, &(0x7f0000000a00)="761750bf784169e6e177b377115840b1f7c933ff549ab639369b22e0a46a6871e5d7fde330a445bbf2e44df2573bf2015b864b6f223c", 0x36, 0xfffffffffffffffb) r1 = add_key$user(&(0x7f0000000a80), &(0x7f0000000ac0)={'syz', 0x2}, &(0x7f0000000b00)="19a0c300eb505e19a18c959cdcb478839494cef68dbc", 0x16, 0xfffffffffffffffc) r2 = add_key$user(&(0x7f0000000b40), &(0x7f0000000b80)={'syz', 0x0}, &(0x7f0000000bc0)="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", 0xfa, 0xfffffffffffffff8) keyctl$dh_compute(0x17, &(0x7f0000000cc0)={r0, r1, r2}, &(0x7f0000000d00)=""/93, 0x5d, 0x0) keyctl$set_timeout(0xf, r0, 0x401) 5.179417386s ago: executing program 0 (id=327): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000900)={'bridge0\x00', @remote}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) eventfd(0x9) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r3}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x89a1, &(0x7f0000000900)={'bridge0\x00', @broadcast}) 4.95027104s ago: executing program 1 (id=328): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x4) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x20088814}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x7400, &(0x7f00000001c0)={&(0x7f0000000200)=@delchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2}}, 0x24}}, 0x0) 4.753375718s ago: executing program 3 (id=329): fsopen(0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) ioctl$TUNSETLINK(r1, 0x4020940d, 0x200000000000) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) r5 = syz_open_dev$loop(&(0x7f0000000100), 0x8, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.empty_time\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r5, 0x4c0a, &(0x7f00000002c0)={r6, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x2000000000001]}}) ioctl$LOOP_SET_STATUS(r5, 0x4c02, &(0x7f0000000000)={0x0, {}, 0x0, {}, 0x9, 0x5, 0x17, 0x8, "038b0ced01d119456adc3b7aa5fda49436ef7fc25f433b0666324210780fd75009efb2033b1d6397f69e31a3b8a6f59f3ad6a6cfc3e99f3ca0cc8e0cda21bfcc", "1adad85867f7c226807b0f528c3e616ddbcdbbb3dc002b7ee11f8d8752ac335b", [0x5]}) ioctl$LOOP_CHANGE_FD(r5, 0x4c06, r6) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r4, 0x84, 0x10, 0x0, 0x0) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYRES16, @ANYRES32=r1, @ANYRESHEX=r7], 0x6c}, 0x1, 0x0, 0x0, 0x801}, 0x40000) r8 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYRESHEX=r6, @ANYRES32=0x1, @ANYRESOCT, @ANYRES32=0x0, @ANYRES32=r8, @ANYBLOB="0000000001000000000000000000"], 0x48) syz_emit_ethernet(0x2a, &(0x7f0000000c40)=ANY=[@ANYBLOB="0180c200000050a245d5cde086dd4500001c000000000002907800000000ffffffff1cff49dc958bb45948a35779ee2fb5981200907800000000"], 0x0) 4.709363475s ago: executing program 4 (id=330): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=ANY=[@ANYBLOB="50000000100003040000000000000000f2000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e000000001800028006000100010000000c000200540a00001800000008000500", @ANYRES32=r2], 0x50}, 0x1, 0xba01}, 0x0) r3 = socket(0x10, 0x3, 0x0) write(r3, &(0x7f0000000000)="2400000011005f0414f9f407000904008100", 0x12) 4.70505566s ago: executing program 0 (id=331): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/cgroup.procs\x00', 0x900) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x39, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r3, 0x13) 4.688547887s ago: executing program 1 (id=332): openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet(0x2, 0x802, 0x1) connect$inet(r3, &(0x7f0000002780)={0x2, 0x4e22, @remote}, 0x10) socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x100}, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c0000002000090002000000ffdbdf250400000008000800", @ANYRES32=r6], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') r8 = socket$inet6(0xa, 0x2, 0x3a) r9 = dup(r8) bind$unix(r9, &(0x7f00000001c0)=@abs={0xa, 0x2}, 0x6e) syz_emit_ethernet(0x3e, 0x0, 0x0) pread64(r7, &(0x7f0000002180)=""/4101, 0x1005, 0x1) ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, 0x0) 3.056778413s ago: executing program 1 (id=333): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) r4 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r4, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x3}, 0x20) connect$l2tp6(r4, &(0x7f0000000f40)={0xa, 0x0, 0x0, @empty}, 0x20) sendmmsg$inet6(r4, &(0x7f0000000ac0)=[{{0x0, 0x0, 0x0}}], 0x1, 0xff00) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) fsmount(0xffffffffffffffff, 0x0, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, 0x0) 2.890834579s ago: executing program 4 (id=334): syz_io_uring_setup(0x83, &(0x7f0000000580)={0x0, 0xe7b7, 0x13500, 0x0, 0x352}, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r2 = dup(r1) open(&(0x7f0000000100)='./file0\x00', 0x440, 0x0) write$FUSE_BMAP(r2, &(0x7f0000000000)={0x18, 0x0, 0x0, {0x3b9}}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) write$FUSE_GETXATTR(r2, &(0x7f00000000c0)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000005c0)=ANY=[@ANYBLOB="b900"], 0xb8) mount$9p_fd(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000080), 0x1010412, &(0x7f0000000780)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',cache=fscache']) r3 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x22) writev(r3, &(0x7f0000000000)=[{&(0x7f00000006c0)='\t', 0x2003f}], 0x1) chmod(&(0x7f0000000040)='./file0\x00', 0x100) 2.588383207s ago: executing program 3 (id=335): ioctl$F2FS_IOC_RESIZE_FS(0xffffffffffffffff, 0x4008f510, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b40)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) add_key(&(0x7f0000000140)='encrypted\x00', 0x0, &(0x7f0000000100), 0x0, 0xfffffffffffffffe) add_key$user(0x0, &(0x7f0000000440), 0x0, 0x0, 0xfffffffffffffffd) gettid() futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, 0x0, 0x0) 1.63077917s ago: executing program 1 (id=336): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r1 = getpid() futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xc5fffffd) sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) unshare(0x68040200) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x25, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2000000, @void, @value}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) ioctl$SG_GET_VERSION_NUM(0xffffffffffffffff, 0x2284, &(0x7f0000000080)) ftruncate(0xffffffffffffffff, 0x2007ffc) ioctl$sock_SIOCBRADDBR(r2, 0x89a0, &(0x7f0000000000)='ip6erspan0\x00') bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000005c0)={{r0}, 0x0, 0x0}, 0x20) 1.416835714s ago: executing program 2 (id=337): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000040)={0xc}) syz_usb_connect(0x5, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100000cb768405e0483020b9901e4020109021b000100000000090400fb015c291d00090509"], 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x10000}, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000140)={0x0, r1}, 0x8) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1, @void, @value}, 0x94) futex(&(0x7f000000cffc), 0x7, 0xfffffffd, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x3, 0x801, 0x0, &(0x7f0000000040), 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) gettid() sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet6(0xa, 0x3, 0x38) r6 = syz_open_dev$sndpcmp(&(0x7f0000000140), 0x3, 0x800) clock_adjtime(0x0, &(0x7f0000001ac0)={0xfffffffffffffff6, 0x8, 0x8, 0x7, 0x1, 0xb9, 0x6, 0x67a6, 0x2, 0x9, 0xbe9, 0x800, 0x8, 0x7, 0x2, 0x5, 0x7, 0x6, 0x2, 0x0, 0x6, 0x1, 0xc2, 0x200000000000040, 0x5, 0x8}) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS_OLD(r6, 0xc1004111, &(0x7f00000004c0)={0x2, [0x0, 0x5, 0x10], [{0x2, 0x0, 0x0, 0x0, 0x1, 0x1}, {0x40, 0x100, 0x0, 0x1}, {0x5, 0x80000001, 0x0, 0x0, 0x0, 0x1}, {0x4, 0x80000000, 0x1, 0x0, 0x1, 0x1}, {0x6, 0x10000, 0x1, 0x1, 0x0, 0x1}, {0x2, 0x5, 0x1, 0x0, 0x1}, {0x6, 0x9, 0x1, 0x0, 0x1}, {0x7ff, 0x62, 0x0, 0x0, 0x1, 0x1}, {0x7, 0x1000, 0x0, 0x0, 0x0, 0x1}, {0x7, 0x3, 0x0, 0x1, 0x1, 0x1}, {0x3, 0x9, 0x1, 0x0, 0x1, 0x1}, {0x6, 0x7, 0x1, 0x1, 0x1}], 0x4}) 1.259330974s ago: executing program 3 (id=338): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000192c0)={0x11, 0xb, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020f56c3c00000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000700)='GPL\x00', 0x6, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000040)='sys_enter\x00', r0, 0x0, 0x7fffffff}, 0x18) r1 = mq_open(&(0x7f0000000180)='\r\x00elinu\xef\xe3elinux\x00\x96\xf6\x92\n#*\xac\x05\xce\xf8D\\\x9a\xe6[]L+\xf6\v\xe8\xf2\xd3\b\x15\n\xb8F!Q9o\x1f#\xbdt\r\xfb\"\x18%\xfdM\xaf_t\xd2\xdcJ\x10\a\xbab\x1a\xdf\xb1\xbdU\xd7Lo\xe7\xac\x81\x10k\xce-\xf5@\xbb\x9d;\xe8\xf6\xffQ\x04\xaai\x92k\x1b;\xddM\xa2\xe1-\x0e\xd8\xde\x00\xff\x18\xdd\bL\xfb\xa2.\xb6{\xb5\x85#\x88\xdc\xf0\x0f\x05\xf1\xc4 \xdeV\x80q\xf7\x04\xf5\x85T\x1f\xc2S]*\xc9lw\xd3J\xc5\xe8\x02\xcb\xbbAHxr\xac\xb77F\xdf\x1c\xcb\xd4\xce\x88L\xf1\xf9[\x98\xd4+pTx\x95\xb5\x1b]x\x1a\x95\xe1c6\xe7`83\xb7n#\xe0\xc1_\xec\xba\xde\a\x8b\xc5\x86woo\xbc\x1c\xa3r\x82\xf3enq-\x90/\xed\xff\xad+\x03\x10\t\xda\xfd\xa2\xd0\xef4\n%\xf1\xd8', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000040)={0x0, 0x1, 0x4}) mq_getsetattr(r1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) chdir(&(0x7f0000000540)='./cgroup\x00') setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) lsetxattr$security_capability(&(0x7f0000000140)='./file0\x00', &(0x7f0000000240), &(0x7f00000001c0)=@v3={0x3000000, [], 0xee01}, 0x18, 0x0) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)=ANY=[], 0x0, 0x0) 1.106774532s ago: executing program 0 (id=339): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x804e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010007000000000000000000000a20000000000a030000000000000000000100000009"], 0xec}, 0x1, 0x0, 0x0, 0x4004}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=@ipv6_newaddr={0x5c, 0x14, 0x1, 0x0, 0x0, {}, [@IFA_RT_PRIORITY={0x8}, @IFA_ADDRESS={0x10, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}}, @IFA_LOCAL={0x14, 0x2, @remote}, @IFA_CACHEINFO={0x14}]}, 0x5c}}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$TOKEN_CREATE(0x24, &(0x7f0000000280)={0x0, r1}, 0x8) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000340)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CALIPSO_C_REMOVE(r6, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x51}, 0x4000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x8, &(0x7f00000001c0)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r5}}]}, &(0x7f0000000300)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 1.049925182s ago: executing program 3 (id=340): landlock_restrict_self(0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) r2 = landlock_create_ruleset(&(0x7f0000000080)={0x8601, 0x2}, 0x18, 0x0) landlock_restrict_self(r2, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = syz_io_uring_setup(0x1237, &(0x7f0000000380)={0x0, 0x80fd, 0x80, 0x3, 0x2b9}, &(0x7f0000000040)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000080)=@l2tp={0x2, 0x0, @local, 0x3}}) io_uring_enter(r4, 0x47bc, 0x0, 0x0, 0x0, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) dup2(r7, r3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) 0s ago: executing program 0 (id=341): sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r3}, 0x18) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = dup(r4) ioctl$TIOCL_SETSEL(r5, 0x541c, &(0x7f0000001900)={0x2, {0x2, 0xa00, 0x0, 0x101, 0x100}}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.153' (ED25519) to the list of known hosts. [ 83.783486][ T5823] cgroup: Unknown subsys name 'net' [ 83.957522][ T5823] cgroup: Unknown subsys name 'cpuset' [ 83.966500][ T5823] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 85.600652][ T5823] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 90.193424][ T5843] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 90.201750][ T5843] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 90.210397][ T5843] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 90.215966][ T5846] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 90.217946][ T5843] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 90.226306][ T5846] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 90.232179][ T5843] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 90.240021][ T5846] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 90.254345][ T5846] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 90.254499][ T5850] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 90.264203][ T5846] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 90.276725][ T5846] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 90.321188][ T5843] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 90.321859][ T51] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 90.338510][ T5843] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 90.346434][ T5843] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 90.354968][ T5154] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 90.362435][ T5154] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 90.370251][ T5846] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 90.379620][ T5154] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 90.380817][ T5846] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 90.387649][ T5154] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 90.400946][ T5846] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 90.421886][ T5846] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 90.434124][ T5846] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 91.116319][ T5833] chnl_net:caif_netlink_parms(): no params data found [ 91.176043][ T5835] chnl_net:caif_netlink_parms(): no params data found [ 91.210834][ T5834] chnl_net:caif_netlink_parms(): no params data found [ 91.401794][ T5839] chnl_net:caif_netlink_parms(): no params data found [ 91.486182][ T5848] chnl_net:caif_netlink_parms(): no params data found [ 91.618950][ T5833] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.629184][ T5833] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.637520][ T5833] bridge_slave_0: entered allmulticast mode [ 91.647033][ T5833] bridge_slave_0: entered promiscuous mode [ 91.655138][ T5834] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.662289][ T5834] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.669722][ T5834] bridge_slave_0: entered allmulticast mode [ 91.676876][ T5834] bridge_slave_0: entered promiscuous mode [ 91.685181][ T5834] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.692924][ T5834] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.700280][ T5834] bridge_slave_1: entered allmulticast mode [ 91.707578][ T5834] bridge_slave_1: entered promiscuous mode [ 91.735039][ T5835] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.742241][ T5835] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.750494][ T5835] bridge_slave_0: entered allmulticast mode [ 91.758913][ T5835] bridge_slave_0: entered promiscuous mode [ 91.786413][ T5833] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.793568][ T5833] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.801318][ T5833] bridge_slave_1: entered allmulticast mode [ 91.809426][ T5833] bridge_slave_1: entered promiscuous mode [ 91.836327][ T5835] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.843506][ T5835] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.850831][ T5835] bridge_slave_1: entered allmulticast mode [ 91.858009][ T5835] bridge_slave_1: entered promiscuous mode [ 91.975531][ T5834] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.988683][ T5834] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.000153][ T5839] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.007598][ T5839] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.015344][ T5839] bridge_slave_0: entered allmulticast mode [ 92.022480][ T5839] bridge_slave_0: entered promiscuous mode [ 92.032856][ T5835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.057933][ T5833] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.071541][ T5833] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.094639][ T5839] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.101880][ T5839] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.109834][ T5839] bridge_slave_1: entered allmulticast mode [ 92.117211][ T5839] bridge_slave_1: entered promiscuous mode [ 92.139052][ T5835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.177495][ T980] cfg80211: failed to load regulatory.db [ 92.234665][ T5848] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.241820][ T5848] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.249157][ T5848] bridge_slave_0: entered allmulticast mode [ 92.256412][ T5848] bridge_slave_0: entered promiscuous mode [ 92.265439][ T5848] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.272590][ T5848] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.279899][ T5848] bridge_slave_1: entered allmulticast mode [ 92.287594][ T5848] bridge_slave_1: entered promiscuous mode [ 92.299484][ T5833] team0: Port device team_slave_0 added [ 92.308943][ T5833] team0: Port device team_slave_1 added [ 92.322518][ T5834] team0: Port device team_slave_0 added [ 92.332499][ T5834] team0: Port device team_slave_1 added [ 92.342966][ T5839] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.343165][ T5846] Bluetooth: hci1: command tx timeout [ 92.414677][ T51] Bluetooth: hci0: command tx timeout [ 92.420468][ T5846] Bluetooth: hci2: command tx timeout [ 92.448347][ T5839] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.474914][ T5835] team0: Port device team_slave_0 added [ 92.483536][ T5848] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.494129][ T5846] Bluetooth: hci4: command tx timeout [ 92.494280][ T51] Bluetooth: hci3: command tx timeout [ 92.515922][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.522893][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.549096][ T5834] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.562889][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.569950][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.596190][ T5834] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.624743][ T5835] team0: Port device team_slave_1 added [ 92.632981][ T5848] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.655475][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.662449][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.688688][ T5833] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.711808][ T5839] team0: Port device team_slave_0 added [ 92.743310][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.750582][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.777206][ T5833] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.790992][ T5839] team0: Port device team_slave_1 added [ 92.826086][ T5848] team0: Port device team_slave_0 added [ 92.833107][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.840204][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.866751][ T5835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.912209][ T5848] team0: Port device team_slave_1 added [ 92.931396][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.939084][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.965589][ T5835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.017766][ T5834] hsr_slave_0: entered promiscuous mode [ 93.024932][ T5834] hsr_slave_1: entered promiscuous mode [ 93.033021][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.041776][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.068064][ T5839] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.094578][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.101542][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.127501][ T5848] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.140258][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.147730][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.174077][ T5848] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.204348][ T5833] hsr_slave_0: entered promiscuous mode [ 93.211308][ T5833] hsr_slave_1: entered promiscuous mode [ 93.217535][ T5833] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 93.225500][ T5833] Cannot create hsr debugfs directory [ 93.241938][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.248978][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.274931][ T5839] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.459158][ T5835] hsr_slave_0: entered promiscuous mode [ 93.465846][ T5835] hsr_slave_1: entered promiscuous mode [ 93.472006][ T5835] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 93.479654][ T5835] Cannot create hsr debugfs directory [ 93.490444][ T5839] hsr_slave_0: entered promiscuous mode [ 93.497396][ T5839] hsr_slave_1: entered promiscuous mode [ 93.503459][ T5839] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 93.511077][ T5839] Cannot create hsr debugfs directory [ 93.528183][ T5848] hsr_slave_0: entered promiscuous mode [ 93.535846][ T5848] hsr_slave_1: entered promiscuous mode [ 93.541994][ T5848] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 93.549647][ T5848] Cannot create hsr debugfs directory [ 94.093862][ T5834] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 94.108434][ T5834] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 94.121751][ T5834] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 94.141339][ T5834] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 94.213433][ T5833] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 94.226997][ T5833] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 94.253541][ T5833] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 94.266706][ T5833] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 94.350875][ T5848] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 94.370724][ T5848] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 94.400837][ T5848] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 94.412617][ T5848] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 94.414868][ T51] Bluetooth: hci1: command tx timeout [ 94.497057][ T51] Bluetooth: hci2: command tx timeout [ 94.497066][ T5846] Bluetooth: hci0: command tx timeout [ 94.498905][ T5835] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 94.542750][ T5834] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.555130][ T5835] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 94.568208][ T5835] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 94.573998][ T51] Bluetooth: hci3: command tx timeout [ 94.575458][ T5846] Bluetooth: hci4: command tx timeout [ 94.596329][ T5835] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 94.702190][ T5834] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.720318][ T5839] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 94.737046][ T5839] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 94.752530][ T5839] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 94.770695][ T1095] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.778186][ T1095] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.791416][ T5839] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 94.827694][ T1116] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.834883][ T1116] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.912018][ T5833] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.969068][ T5833] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.985131][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.992513][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.040159][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.047430][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.169130][ T5848] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.252195][ T5835] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.355232][ T5848] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.377305][ T5839] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.388622][ T5835] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.420730][ T68] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.427936][ T68] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.440278][ T68] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.447527][ T68] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.483349][ T68] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.490560][ T68] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.528361][ T5839] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.546104][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.553484][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.585129][ T5834] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.605987][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.613192][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.649935][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.657137][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.999736][ T5833] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.227742][ T5833] veth0_vlan: entered promiscuous mode [ 96.328246][ T5833] veth1_vlan: entered promiscuous mode [ 96.449315][ T5848] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.495028][ T5846] Bluetooth: hci1: command tx timeout [ 96.574867][ T5846] Bluetooth: hci0: command tx timeout [ 96.580338][ T5846] Bluetooth: hci2: command tx timeout [ 96.641751][ T5839] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.655575][ T5846] Bluetooth: hci4: command tx timeout [ 96.655586][ T51] Bluetooth: hci3: command tx timeout [ 96.678865][ T5833] veth0_macvtap: entered promiscuous mode [ 96.707517][ T5834] veth0_vlan: entered promiscuous mode [ 96.730039][ T5833] veth1_macvtap: entered promiscuous mode [ 96.756019][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.782780][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.797220][ T5835] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.817174][ T5833] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.826337][ T5833] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.835142][ T5833] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.843902][ T5833] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.855766][ T5839] veth0_vlan: entered promiscuous mode [ 96.877986][ T5834] veth1_vlan: entered promiscuous mode [ 96.911295][ T5848] veth0_vlan: entered promiscuous mode [ 96.944304][ T5848] veth1_vlan: entered promiscuous mode [ 96.955125][ T5839] veth1_vlan: entered promiscuous mode [ 97.083556][ T5835] veth0_vlan: entered promiscuous mode [ 97.112745][ T5834] veth0_macvtap: entered promiscuous mode [ 97.123523][ T3475] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.131615][ T5835] veth1_vlan: entered promiscuous mode [ 97.151369][ T3475] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.179597][ T5834] veth1_macvtap: entered promiscuous mode [ 97.203078][ T5839] veth0_macvtap: entered promiscuous mode [ 97.217151][ T5848] veth0_macvtap: entered promiscuous mode [ 97.242968][ T5839] veth1_macvtap: entered promiscuous mode [ 97.255758][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.275130][ T5848] veth1_macvtap: entered promiscuous mode [ 97.281662][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.303225][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.330020][ T5835] veth0_macvtap: entered promiscuous mode [ 97.354565][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.388653][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.403595][ T5833] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 97.420741][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.431347][ T5835] veth1_macvtap: entered promiscuous mode [ 97.453059][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.468719][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.538721][ T5839] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.551666][ T5839] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.563587][ T5839] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.578021][ T5839] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.601364][ T5834] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.610330][ T5834] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.625676][ T5834] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.635799][ T5834] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.654665][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.667798][ T5848] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.677487][ T5848] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.686967][ T5848] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.697253][ T5848] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.720823][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.768123][ T5835] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.780022][ T5835] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.789272][ T5835] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.798474][ T5835] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.973548][ T1155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.995946][ T1155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.008744][ T3475] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.017637][ T3475] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.081741][ T3475] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.110814][ T3475] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.151420][ T1155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.162850][ T1155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.235289][ T3475] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.250397][ T3475] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.310926][ T3475] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.319535][ T3475] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.396230][ T1116] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.422229][ T1116] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.511702][ T3475] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.544461][ T3475] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.574567][ T5846] Bluetooth: hci1: command tx timeout [ 98.654408][ T5846] Bluetooth: hci2: command tx timeout [ 98.660344][ T5846] Bluetooth: hci0: command tx timeout [ 98.715216][ T5961] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 98.735652][ T5846] Bluetooth: hci4: command tx timeout [ 98.735663][ T51] Bluetooth: hci3: command tx timeout [ 98.817491][ T5961] wireguard0: entered promiscuous mode [ 98.860231][ T5961] wireguard0: entered allmulticast mode [ 99.224769][ T5972] loop4: detected capacity change from 0 to 512 [ 99.762508][ T5980] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9'. [ 100.358297][ T5980] syz.2.9 (5980) used greatest stack depth: 15960 bytes left [ 100.476280][ T5972] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 100.661102][ T5972] ext4 filesystem being mounted at /2/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 102.163260][ T5991] Zero length message leads to an empty skb [ 102.827924][ T24] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 103.086431][ T24] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 103.088142][ T24] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 103.089158][ T24] usb 4-1: New USB device found, idVendor=abcd, idProduct=00ee, bcdDevice= 0.00 [ 103.089659][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.176055][ T24] usb 4-1: config 0 descriptor?? [ 103.277720][ T5844] hid-generic 0008:0007:0005.0001: item fetching failed at offset 0/1 [ 103.278630][ T5844] hid-generic 0008:0007:0005.0001: probe with driver hid-generic failed with error -22 [ 103.279012][ T24] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 103.279106][ T24] usb 4-1: MIDIStreaming interface descriptor not found [ 103.483686][ T5834] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.489153][ T5992] tty tty23: ldisc open failed (-12), clearing slot 22 [ 103.675903][ T24] usb 4-1: USB disconnect, device number 2 [ 103.982340][ T6006] loop0: detected capacity change from 0 to 128 [ 105.124994][ T5851] udevd[5851]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 105.555854][ T6029] 9pnet_fd: Insufficient options for proto=fd [ 105.675294][ T6030] hub 9-0:1.0: USB hub found [ 105.704719][ T6030] hub 9-0:1.0: 1 port detected [ 105.747376][ T6033] netlink: 28 bytes leftover after parsing attributes in process `syz.2.23'. [ 105.774556][ T6033] netlink: 28 bytes leftover after parsing attributes in process `syz.2.23'. [ 105.817452][ T6033] team0: entered promiscuous mode [ 105.830218][ T6033] team_slave_0: entered promiscuous mode [ 105.848828][ T6033] team_slave_1: entered promiscuous mode [ 105.880425][ T6033] team0: left promiscuous mode [ 105.897137][ T6033] team_slave_0: left promiscuous mode [ 105.919756][ T6033] team_slave_1: left promiscuous mode [ 106.248560][ T6016] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 106.256105][ T6016] IPv6: NLM_F_CREATE should be set when creating new route [ 106.393817][ T5836] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 107.247430][ T6043] ip6erspan0: entered allmulticast mode [ 107.526493][ T5836] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 108.203236][ T6050] loop0: detected capacity change from 0 to 1024 [ 108.257814][ T6050] ======================================================= [ 108.257814][ T6050] WARNING: The mand mount option has been deprecated and [ 108.257814][ T6050] and is ignored by this kernel. Remove the mand [ 108.257814][ T6050] option from the mount to silence this warning. [ 108.257814][ T6050] ======================================================= [ 108.338100][ T5836] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 108.376916][ T5836] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 108.402785][ T5836] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 108.412796][ T5836] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.434164][ T6050] EXT4-fs: Ignoring removed nobh option [ 108.489641][ T5836] usb 4-1: config 0 descriptor?? [ 108.555607][ T6050] EXT4-fs (loop0): can't mount with data_err=abort, fs mounted w/o journal [ 108.558279][ T6054] IPv6: sit1: Disabled Multicast RS [ 108.571192][ T6054] sit1: entered allmulticast mode [ 108.672127][ T6059] loop2: detected capacity change from 0 to 128 [ 108.935013][ T6061] netlink: 28 bytes leftover after parsing attributes in process `syz.0.32'. [ 108.955986][ T6061] netlink: 28 bytes leftover after parsing attributes in process `syz.0.32'. [ 108.974977][ T6065] netlink: 4 bytes leftover after parsing attributes in process `syz.4.34'. [ 109.036101][ T5836] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x3 [ 109.048894][ T6065] batadv0: entered promiscuous mode [ 109.059090][ T6065] batadv0: entered allmulticast mode [ 109.105812][ T5836] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 109.358278][ T5836] usb 4-1: USB disconnect, device number 3 [ 109.448718][ T6076] loop2: detected capacity change from 0 to 512 [ 109.617747][ T6078] loop0: detected capacity change from 0 to 2048 [ 109.745157][ T6078] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 110.482492][ T6076] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 110.498277][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 111.275806][ T6076] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 111.354268][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 111.364388][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 111.377051][ T0] NOHZ tick-stop error: local softirq work is pending, handler #208!!! [ 111.386308][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 111.462420][ T6082] program syz.1.37 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 111.472493][ T6082] netlink: 'syz.1.37': attribute type 10 has an invalid length. [ 111.488484][ T6082] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 111.499461][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 111.499632][ T6082] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 111.664662][ T6076] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec019, mo2=0002] [ 111.819296][ T6076] System zones: 1-12 [ 111.853864][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 111.862834][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 112.264179][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 112.481725][ T6082] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 112.539877][ T6076] EXT4-fs (loop2): 1 truncate cleaned up [ 112.557081][ T5835] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.601941][ T6076] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 112.644787][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!! [ 112.838992][ T5848] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.121357][ T6101] vivid-002: disconnect [ 113.127761][ T6101] vivid-002: reconnect [ 113.139953][ T6101] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 113.782022][ T6118] netlink: 28 bytes leftover after parsing attributes in process `syz.0.47'. [ 113.837222][ T6118] netlink: 28 bytes leftover after parsing attributes in process `syz.0.47'. [ 114.433009][ T6132] netlink: 28 bytes leftover after parsing attributes in process `syz.0.52'. [ 114.483698][ T6132] netlink: 28 bytes leftover after parsing attributes in process `syz.0.52'. [ 114.523517][ T6132] team0: entered promiscuous mode [ 114.539217][ T6132] team_slave_0: entered promiscuous mode [ 114.554586][ T6132] team_slave_1: entered promiscuous mode [ 114.616834][ T6132] team0: left promiscuous mode [ 114.663374][ T6132] team_slave_0: left promiscuous mode [ 114.705867][ T6132] team_slave_1: left promiscuous mode [ 114.952081][ T6141] veth0_vlan: entered allmulticast mode [ 115.003661][ T6141] loop2: detected capacity change from 0 to 512 [ 115.016327][ T6141] EXT4-fs: Ignoring removed i_version option [ 115.022809][ T6141] ext4: Unknown parameter 'seclabel' [ 115.194058][ T5947] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 115.864701][ T5947] usb 2-1: Using ep0 maxpacket: 8 [ 115.889468][ T5947] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 115.922109][ T5947] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.951275][ T5947] usb 2-1: Product: syz [ 115.956460][ T5947] usb 2-1: Manufacturer: syz [ 115.971394][ T5947] usb 2-1: SerialNumber: syz [ 115.995924][ T5947] usb 2-1: config 0 descriptor?? [ 116.226241][ T5947] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 116.368583][ T6152] loop2: detected capacity change from 0 to 1024 [ 118.243197][ T6152] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 119.214845][ T5947] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 119.274661][ T6157] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 119.289364][ T5836] usb 2-1: USB disconnect, device number 2 [ 119.443163][ T5848] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.538177][ T6161] netem: change failed [ 119.948965][ T6168] loop4: detected capacity change from 0 to 512 [ 120.089141][ T6173] mmap: syz.1.67 (6173) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 120.119370][ T6168] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 120.156637][ T6173] ªªªªªª: renamed from tunl0 (while UP) [ 120.191089][ T6168] ext4 filesystem being mounted at /12/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 121.506174][ T5834] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.602139][ T6189] loop0: detected capacity change from 0 to 128 [ 121.635421][ T6189] EXT4-fs: Ignoring removed nobh option [ 121.825991][ T6192] netlink: 4 bytes leftover after parsing attributes in process `syz.1.74'. [ 121.841275][ T6189] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 121.856911][ T6189] ext4 filesystem being mounted at /15/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 121.981233][ T6197] loop4: detected capacity change from 0 to 512 [ 124.816350][ T6197] EXT4-fs warning (device loop4): ext4_multi_mount_protect:398: Unable to create kmmpd thread for loop4. [ 125.201449][ T5835] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 125.518561][ T6210] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 126.053957][ T980] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 126.071548][ T5947] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 126.283861][ T5947] usb 3-1: Using ep0 maxpacket: 16 [ 126.300290][ T5947] usb 3-1: unable to get BOS descriptor or descriptor too short [ 126.333077][ T5947] usb 3-1: config 1 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 126.369051][ T980] usb 5-1: config 0 has an invalid interface number: 29 but max is 0 [ 126.383152][ T980] usb 5-1: config 0 has no interface number 0 [ 126.406074][ T980] usb 5-1: config 0 interface 29 has no altsetting 0 [ 126.453639][ T980] usb 5-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=39.ac [ 126.463198][ T5947] usb 3-1: config 1 interface 0 has no altsetting 0 [ 126.501527][ T5947] usb 3-1: New USB device found, idVendor=0eef, idProduct=720c, bcdDevice= 0.40 [ 126.513665][ T6225] loop3: detected capacity change from 0 to 128 [ 126.520103][ T5947] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.549129][ T5947] usb 3-1: Product: syz [ 126.560641][ T5947] usb 3-1: Manufacturer: syz [ 126.612506][ T980] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.613527][ T6225] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 126.633100][ T5947] usb 3-1: SerialNumber: syz [ 126.652642][ T980] usb 5-1: Product: syz [ 126.682103][ T980] usb 5-1: Manufacturer: syz [ 126.752763][ T980] usb 5-1: SerialNumber: syz [ 126.758659][ T6225] ext4 filesystem being mounted at /12/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 126.766786][ T980] usb 5-1: config 0 descriptor?? [ 126.963684][ T5947] usbhid 3-1:1.0: can't add hid device: -22 [ 126.984807][ T5947] usbhid 3-1:1.0: probe with driver usbhid failed with error -22 [ 127.183532][ T5947] usb 3-1: USB disconnect, device number 2 [ 127.836392][ T5833] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 128.763891][ T980] peak_usb 5-1:0.29 can0: unable to request usb[type=0 value=1] err=-71 [ 128.796074][ T980] peak_usb 5-1:0.29: unable to read PCAN-USB X6 firmware info (err -71) [ 129.006348][ T980] peak_usb 5-1:0.29: probe with driver peak_usb failed with error -71 [ 129.054633][ T980] usb 5-1: USB disconnect, device number 2 [ 129.123219][ T6247] loop2: detected capacity change from 0 to 128 [ 129.197685][ T6247] EXT4-fs: Ignoring removed nobh option [ 129.235195][ T6247] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 129.282399][ T6247] ext4 filesystem being mounted at /24/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 129.361106][ T6253] loop0: detected capacity change from 0 to 16 [ 129.401415][ T6253] erofs (device loop0): mounted with root inode @ nid 36. [ 130.057145][ T5848] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 130.614327][ T6268] loop3: detected capacity change from 0 to 512 [ 130.691907][ T6268] EXT4-fs (loop3): failed to initialize system zone (-117) [ 130.702265][ T6268] EXT4-fs (loop3): mount failed [ 130.937951][ T6274] loop0: detected capacity change from 0 to 16 [ 130.960411][ T6274] erofs (device loop0): mounted with root inode @ nid 36. [ 132.280638][ T6278] vivid-003: disconnect [ 132.286634][ T6278] vivid-003: reconnect [ 132.297280][ T6278] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 133.485009][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.491596][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.661868][ T6286] futex_wake_op: syz.0.98 tries to shift op by -1; fix this program [ 133.887945][ T6288] netlink: 28 bytes leftover after parsing attributes in process `syz.4.99'. [ 133.914084][ T6288] netlink: 28 bytes leftover after parsing attributes in process `syz.4.99'. [ 134.431130][ T30] audit: type=1326 audit(1750100981.750:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6285 comm="syz.0.98" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf2bb8e929 code=0x7ffc0000 [ 134.471066][ T30] audit: type=1326 audit(1750100981.750:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6285 comm="syz.0.98" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fbf2bb8e929 code=0x7ffc0000 [ 134.494375][ T30] audit: type=1326 audit(1750100981.750:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6285 comm="syz.0.98" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf2bb8e929 code=0x7ffc0000 [ 134.521979][ T30] audit: type=1326 audit(1750100981.750:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6285 comm="syz.0.98" exe="/root/syz-executor" sig=0 arch=c000003e syscall=77 compat=0 ip=0x7fbf2bb8e929 code=0x7ffc0000 [ 134.544005][ T30] audit: type=1326 audit(1750100981.750:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6285 comm="syz.0.98" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf2bb8e929 code=0x7ffc0000 [ 134.566028][ T30] audit: type=1326 audit(1750100981.750:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6285 comm="syz.0.98" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fbf2bb8e929 code=0x7ffc0000 [ 134.633567][ T30] audit: type=1326 audit(1750100981.750:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6285 comm="syz.0.98" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf2bb8e929 code=0x7ffc0000 [ 134.771931][ T30] audit: type=1326 audit(1750100981.760:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6285 comm="syz.0.98" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbf2bb8e929 code=0x7ffc0000 [ 135.013843][ T30] audit: type=1326 audit(1750100981.760:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6285 comm="syz.0.98" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf2bb8e929 code=0x7ffc0000 [ 135.042092][ T30] audit: type=1326 audit(1750100981.760:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6285 comm="syz.0.98" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf2bb8e929 code=0x7ffc0000 [ 135.825203][ T6102] Bluetooth: hci5: Frame reassembly failed (-84) [ 135.857383][ T6293] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 137.183852][ T44] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 137.292895][ T6324] loop3: detected capacity change from 0 to 16 [ 137.435759][ T6324] erofs (device loop3): mounted with root inode @ nid 36. [ 137.484557][ T6324] erofs: Unknown parameter 'uid' [ 137.687280][ T44] usb 3-1: Using ep0 maxpacket: 8 [ 137.994825][ T44] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 138.011069][ T5846] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 138.050083][ T44] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 138.138991][ T44] usb 3-1: New USB device found, idVendor=046d, idProduct=c626, bcdDevice= 0.00 [ 138.201466][ T44] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.262802][ T44] usb 3-1: config 0 descriptor?? [ 138.308042][ C0] vcan0: j1939_tp_rxtimer: 0xffff88803469b400: rx timeout, send abort [ 138.817175][ C0] vcan0: j1939_tp_rxtimer: 0xffff88803469b400: abort rx timeout. Force session deactivation [ 139.187229][ T44] logitech 0003:046D:C626.0003: collection stack underflow [ 139.198605][ T44] logitech 0003:046D:C626.0003: item 0 4 0 12 parsing failed [ 139.216540][ T44] logitech 0003:046D:C626.0003: parse failed [ 139.231353][ T44] logitech 0003:046D:C626.0003: probe with driver logitech failed with error -22 [ 139.299997][ T6336] loop1: detected capacity change from 0 to 256 [ 140.217258][ T44] usb 3-1: USB disconnect, device number 3 [ 143.015187][ T6347] netlink: 'syz.2.116': attribute type 2 has an invalid length. [ 145.440346][ C0] vcan0: j1939_tp_rxtimer: 0xffff88806ef09400: rx timeout, send abort [ 145.801757][ T6382] netlink: 44 bytes leftover after parsing attributes in process `syz.2.127'. [ 145.948743][ C0] vcan0: j1939_tp_rxtimer: 0xffff88806ef09400: abort rx timeout. Force session deactivation [ 149.089242][ T6407] loop0: detected capacity change from 0 to 512 [ 149.348970][ T6407] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 149.828303][ T6407] EXT4-fs error (device loop0): ext4_iget_extra_inode:5035: inode #17: comm syz.0.136: corrupted in-inode xattr: invalid ea_ino [ 149.928116][ T6407] EXT4-fs error (device loop0): ext4_orphan_get:1398: comm syz.0.136: couldn't read orphan inode 17 (err -117) [ 149.952021][ T6407] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 151.896802][ T6403] loop3: detected capacity change from 0 to 40427 [ 152.121858][ T6403] F2FS-fs (loop3): Unable to read 1th superblock [ 152.135577][ T6403] F2FS-fs (loop3): Unable to read 2th superblock [ 152.574493][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880564f5400: rx timeout, send abort [ 153.082714][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880564f5400: abort rx timeout. Force session deactivation [ 153.805933][ T6445] loop2: detected capacity change from 0 to 128 [ 154.013935][ T6411] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 155.252819][ T6459] loop4: detected capacity change from 0 to 256 [ 155.299755][ T6460] loop3: detected capacity change from 0 to 512 [ 155.310354][ T6459] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 155.331548][ T6459] exFAT-fs (loop4): Medium has reported failures. Some data may be lost. [ 155.362527][ T6459] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 155.447101][ T6460] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 155.605004][ T6460] ext4 filesystem being mounted at /24/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 156.640141][ T6468] loop4: detected capacity change from 0 to 512 [ 156.759782][ T6470] futex_wake_op: syz.2.151 tries to shift op by -1; fix this program [ 156.767066][ T6468] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 156.804109][ T6468] ext4 filesystem being mounted at /28/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 157.083914][ T24] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 157.126440][ T5835] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 157.295180][ T24] usb 4-1: unable to get BOS descriptor or descriptor too short [ 157.314269][ T24] usb 4-1: config 1 interface 1 has no altsetting 0 [ 157.344901][ T24] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 157.364543][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.371858][ T6476] loop0: detected capacity change from 0 to 256 [ 157.372587][ T24] usb 4-1: Product: syz [ 157.372606][ T24] usb 4-1: Manufacturer: syz [ 157.396576][ T24] usb 4-1: SerialNumber: syz [ 157.449189][ T6476] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 157.621274][ T5834] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 157.662650][ T24] usb 4-1: found format II with max.bitrate = 2418, frame size=7 [ 157.670788][ T24] usb 4-1: 2:1: All rates were zero [ 157.785233][ T24] usb 4-1: USB disconnect, device number 4 [ 157.819577][ T30] audit: type=1326 audit(1750101005.190:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6469 comm="syz.2.151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f591378e929 code=0x7ffc0000 [ 158.080667][ T30] audit: type=1326 audit(1750101005.190:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6469 comm="syz.2.151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f591378e929 code=0x7ffc0000 [ 158.107047][ T30] audit: type=1326 audit(1750101005.190:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6469 comm="syz.2.151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f591378e929 code=0x7ffc0000 [ 158.133263][ T30] audit: type=1326 audit(1750101005.190:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6469 comm="syz.2.151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=77 compat=0 ip=0x7f591378e929 code=0x7ffc0000 [ 158.987160][ T30] audit: type=1326 audit(1750101005.190:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6469 comm="syz.2.151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f591378e929 code=0x7ffc0000 [ 159.096145][ T30] audit: type=1326 audit(1750101005.190:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6469 comm="syz.2.151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f591378e929 code=0x7ffc0000 [ 159.116654][ T5853] udevd[5853]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 159.482473][ T5833] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 160.511382][ T6499] loop4: detected capacity change from 0 to 128 [ 160.559420][ T6486] netlink: 'syz.0.155': attribute type 2 has an invalid length. [ 161.336620][ T6514] netlink: 24 bytes leftover after parsing attributes in process `syz.1.160'. [ 161.619297][ C1] vcan0: j1939_tp_rxtimer: 0xffff88806f0c6000: rx timeout, send abort [ 162.127677][ C1] vcan0: j1939_tp_rxtimer: 0xffff88806f0c6000: abort rx timeout. Force session deactivation [ 163.113862][ T5923] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 163.280647][ T6534] capability: warning: `syz.2.166' uses 32-bit capabilities (legacy support in use) [ 163.750422][ T5923] usb 5-1: config 0 has no interfaces? [ 163.795599][ T5923] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 163.807360][ T5923] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.081910][ T5923] usb 5-1: Product: syz [ 164.927589][ T5923] usb 5-1: Manufacturer: syz [ 164.932252][ T5923] usb 5-1: SerialNumber: syz [ 164.940151][ T5923] usb 5-1: config 0 descriptor?? [ 165.208049][ T6545] loop2: detected capacity change from 0 to 256 [ 165.311435][ T6545] FAT-fs (loop2): Directory bread(block 64) failed [ 165.362408][ T6530] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 165.373077][ T6530] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 165.386412][ T6530] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 165.396842][ T6530] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 165.431459][ T6545] FAT-fs (loop2): Directory bread(block 65) failed [ 165.575275][ T6545] FAT-fs (loop2): Directory bread(block 66) failed [ 165.637811][ T6545] FAT-fs (loop2): Directory bread(block 67) failed [ 165.720340][ T6545] FAT-fs (loop2): Directory bread(block 68) failed [ 165.740866][ T6545] FAT-fs (loop2): Directory bread(block 69) failed [ 165.766628][ T6545] FAT-fs (loop2): Directory bread(block 70) failed [ 165.854459][ T6545] FAT-fs (loop2): Directory bread(block 71) failed [ 165.874197][ T6545] FAT-fs (loop2): Directory bread(block 72) failed [ 165.880746][ T6545] FAT-fs (loop2): Directory bread(block 73) failed [ 168.217701][ T6546] loop0: detected capacity change from 0 to 512 [ 168.416369][ T6546] EXT4-fs error (device loop0): ext4_orphan_get:1419: comm syz.0.169: bad orphan inode 15 [ 169.219756][ T6546] ext4_test_bit(bit=14, block=5) = 0 [ 169.248358][ T6546] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 169.386855][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880584cd000: rx timeout, send abort [ 169.400822][ T6568] futex_wake_op: syz.2.176 tries to shift op by -1; fix this program [ 169.574394][ T5947] usb 5-1: USB disconnect, device number 3 [ 169.841389][ T5835] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.895188][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880584cd000: abort rx timeout. Force session deactivation [ 170.039335][ T6576] loop4: detected capacity change from 0 to 512 [ 170.353792][ T6585] syz.3.178 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 170.379963][ T6585] 9pnet_fd: Insufficient options for proto=fd [ 170.595818][ T6576] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 170.922537][ T6576] ext4 filesystem being mounted at /35/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 170.941313][ T30] audit: type=1326 audit(1750101018.310:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6567 comm="syz.2.176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f591378e929 code=0x7ffc0000 [ 171.057770][ T30] audit: type=1326 audit(1750101018.310:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6567 comm="syz.2.176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f591378e929 code=0x7ffc0000 [ 171.235983][ T6588] vivid-003: disconnect [ 171.268079][ T6588] vivid-003: reconnect [ 171.599957][ T6589] bridge0: port 2(bridge_slave_1) entered disabled state [ 171.607976][ T6589] bridge0: port 1(bridge_slave_0) entered disabled state [ 171.637947][ T5834] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.725436][ T6589] bridge0: entered allmulticast mode [ 171.734574][ T6593] bridge_slave_1: left allmulticast mode [ 171.734642][ T6593] bridge_slave_1: left promiscuous mode [ 171.735900][ T6593] bridge0: port 2(bridge_slave_1) entered disabled state [ 171.816113][ T6593] bridge_slave_0: left allmulticast mode [ 171.828519][ T6593] bridge_slave_0: left promiscuous mode [ 171.839053][ T6593] bridge0: port 1(bridge_slave_0) entered disabled state [ 172.254043][ T6605] netlink: 44 bytes leftover after parsing attributes in process `syz.3.182'. [ 174.844033][ T5923] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 176.035548][ T5923] usb 4-1: config 0 has no interfaces? [ 176.085128][ T5923] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 176.132318][ T5923] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 176.142794][ T5923] usb 4-1: Product: syz [ 176.168842][ T5923] usb 4-1: Manufacturer: syz [ 176.193501][ T5923] usb 4-1: SerialNumber: syz [ 176.208497][ T5923] usb 4-1: config 0 descriptor?? [ 176.358308][ T5923] usb 4-1: can't set config #0, error -71 [ 176.384969][ T5923] usb 4-1: USB disconnect, device number 5 [ 177.476307][ C0] vcan0: j1939_tp_rxtimer: 0xffff888056d2c000: rx timeout, send abort [ 177.984669][ C0] vcan0: j1939_tp_rxtimer: 0xffff888056d2c000: abort rx timeout. Force session deactivation [ 180.875300][ T6665] vivid-003: disconnect [ 180.889921][ T6665] vivid-003: reconnect [ 180.907180][ T6665] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 181.021455][ T6668] netlink: 4 bytes leftover after parsing attributes in process `syz.0.205'. [ 182.251174][ T6668] team_slave_0: entered promiscuous mode [ 182.257198][ T6668] team_slave_1: entered promiscuous mode [ 182.322891][ T6668] macvtap1: entered promiscuous mode [ 182.353961][ T6668] team0: entered promiscuous mode [ 182.379416][ T6668] macvtap1: entered allmulticast mode [ 182.426695][ T5844] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 182.610705][ T6668] team0: entered allmulticast mode [ 182.697342][ T5844] usb 5-1: config 0 has no interfaces? [ 182.711346][ T6668] team_slave_0: entered allmulticast mode [ 182.946221][ T6668] team_slave_1: entered allmulticast mode [ 183.734286][ T5844] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 183.751790][ T5844] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 183.760342][ T5844] usb 5-1: Product: syz [ 183.807647][ T6668] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 183.833135][ T5844] usb 5-1: Manufacturer: syz [ 184.993754][ T5844] usb 5-1: SerialNumber: syz [ 185.820003][ T6696] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 185.880762][ T5844] usb 5-1: config 0 descriptor?? [ 186.076852][ T6675] team0: left allmulticast mode [ 186.085826][ T6675] team_slave_0: left allmulticast mode [ 186.176250][ T6675] team_slave_1: left allmulticast mode [ 186.196097][ T6675] team0: left promiscuous mode [ 186.234717][ T6675] team_slave_0: left promiscuous mode [ 186.240428][ T6675] team_slave_1: left promiscuous mode [ 186.395675][ T6700] loop3: detected capacity change from 0 to 1024 [ 188.352467][ T6700] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 189.287560][ T5833] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 189.505564][ T6716] fuse: Bad value for 'fd' [ 190.982827][ T5844] usb 5-1: can't set config #0, error -110 [ 191.201806][ T24] usb 5-1: USB disconnect, device number 4 [ 191.486768][ T6737] trusted_key: encrypted_key: insufficient parameters specified [ 191.620822][ T6745] program syz.3.219 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 191.632569][ T6745] netlink: 'syz.3.219': attribute type 10 has an invalid length. [ 191.667982][ T6745] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 191.756196][ T6745] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 191.770069][ T6745] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 193.203873][ T9] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 193.395917][ T9] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 193.406887][ T9] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 193.443271][ T9] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 193.459107][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 193.522676][ T6759] syz.4.224: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 193.553793][ T9] usb 3-1: SerialNumber: syz [ 193.616969][ T6759] CPU: 0 UID: 0 PID: 6759 Comm: syz.4.224 Not tainted 6.16.0-rc2-next-20250616-syzkaller #0 PREEMPT(full) [ 193.617002][ T6759] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 193.617014][ T6759] Call Trace: [ 193.617022][ T6759] [ 193.617031][ T6759] dump_stack_lvl+0x189/0x250 [ 193.617077][ T6759] ? __pfx_dump_stack_lvl+0x10/0x10 [ 193.617107][ T6759] ? __pfx__printk+0x10/0x10 [ 193.617121][ T6759] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 193.617135][ T6759] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 193.617158][ T6759] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 193.617173][ T6759] warn_alloc+0x214/0x310 [ 193.617188][ T6759] ? stack_depot_save_flags+0x429/0x900 [ 193.617209][ T6759] ? __pfx_warn_alloc+0x10/0x10 [ 193.617225][ T6759] ? kasan_save_track+0x4f/0x80 [ 193.617243][ T6759] ? xskq_create+0x56/0x170 [ 193.617258][ T6759] ? xsk_init_queue+0xb0/0x110 [ 193.617278][ T6759] ? xsk_setsockopt+0x43f/0x710 [ 193.617298][ T6759] ? do_sock_setsockopt+0x257/0x3e0 [ 193.617316][ T6759] ? __x64_sys_setsockopt+0x18b/0x220 [ 193.617334][ T6759] ? do_syscall_64+0xfa/0x3b0 [ 193.617351][ T6759] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 193.617369][ T6759] __vmalloc_node_range_noprof+0x125/0x12f0 [ 193.617403][ T6759] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 193.617420][ T6759] ? __kasan_kmalloc+0x93/0xb0 [ 193.617433][ T6759] vmalloc_user_noprof+0xad/0xf0 [ 193.617446][ T6759] ? xskq_create+0xbf/0x170 [ 193.617462][ T6759] xskq_create+0xbf/0x170 [ 193.617479][ T6759] xsk_init_queue+0xb0/0x110 [ 193.617496][ T6759] xsk_setsockopt+0x43f/0x710 [ 193.617512][ T6759] ? __pfx_xsk_setsockopt+0x10/0x10 [ 193.617525][ T6759] ? __lock_acquire+0xab9/0xd20 [ 193.617543][ T6759] ? aa_sock_opt_perm+0xff/0x1b0 [ 193.617562][ T6759] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 193.617578][ T6759] ? __pfx_xsk_setsockopt+0x10/0x10 [ 193.617593][ T6759] do_sock_setsockopt+0x257/0x3e0 [ 193.617608][ T6759] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 193.617632][ T6759] ? __fget_files+0x2a/0x420 [ 193.617651][ T6759] __x64_sys_setsockopt+0x18b/0x220 [ 193.617668][ T6759] do_syscall_64+0xfa/0x3b0 [ 193.617683][ T6759] ? lockdep_hardirqs_on+0x9c/0x150 [ 193.617698][ T6759] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 193.617709][ T6759] ? clear_bhb_loop+0x60/0xb0 [ 193.617724][ T6759] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 193.617735][ T6759] RIP: 0033:0x7f9b1a38e929 [ 193.617748][ T6759] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 193.617759][ T6759] RSP: 002b:00007f9b1b1cf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 193.617773][ T6759] RAX: ffffffffffffffda RBX: 00007f9b1a5b6080 RCX: 00007f9b1a38e929 [ 193.617782][ T6759] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000008 [ 193.617789][ T6759] RBP: 00007f9b1a410b39 R08: 0000000000000004 R09: 0000000000000000 [ 193.617796][ T6759] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 193.617803][ T6759] R13: 0000000000000000 R14: 00007f9b1a5b6080 R15: 00007ffd43522858 [ 193.617823][ T6759] [ 193.944680][ T6759] Mem-Info: [ 193.950955][ T6759] active_anon:9570 inactive_anon:0 isolated_anon:22 [ 193.950955][ T6759] active_file:750 inactive_file:49108 isolated_file:21 [ 193.950955][ T6759] unevictable:768 dirty:161 writeback:0 [ 193.950955][ T6759] slab_reclaimable:10254 slab_unreclaimable:97459 [ 193.950955][ T6759] mapped:34118 shmem:4231 pagetables:1253 [ 193.950955][ T6759] sec_pagetables:0 bounce:0 [ 193.950955][ T6759] kernel_misc_reclaimable:0 [ 193.950955][ T6759] free:1317278 free_pcp:16381 free_cma:0 [ 193.999425][ T6759] Node 0 active_anon:38280kB inactive_anon:0kB active_file:3000kB inactive_file:196232kB unevictable:1536kB isolated(anon):88kB isolated(file):84kB mapped:136472kB dirty:640kB writeback:0kB shmem:15388kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12572kB pagetables:4976kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 194.047684][ T6759] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:136kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 194.116437][ T6759] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 194.124128][ T9] usb 3-1: 0:2 : does not exist [ 194.169863][ T9] usb 3-1: USB disconnect, device number 4 [ 194.338894][ T6759] lowmem_reserve[]: 0 2500 2502 2502 2502 [ 194.363105][ T6759] Node 0 DMA32 free:1345636kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:50472kB inactive_anon:0kB active_file:2996kB inactive_file:194492kB unevictable:1536kB writepending:640kB present:3129332kB managed:2560796kB mlocked:0kB bounce:0kB free_pcp:41916kB local_pcp:20740kB free_cma:0kB [ 195.194248][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 195.200649][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.341384][ T6759] lowmem_reserve[]: 0 0 1 1 1 [ 195.392394][ T6759] Node 0 Normal free:16kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1828kB unevictable:0kB writepending:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 196.099831][ T6759] lowmem_reserve[]: 0 0 0 0 0 [ 196.409010][ T6759] Node 1 Normal free:3900228kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:68kB inactive_anon:0kB active_file:44kB inactive_file:200kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:19184kB local_pcp:12140kB free_cma:0kB [ 196.457557][ T30] audit: type=1326 audit(1750101043.760:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6765 comm="syz.0.225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf2bb8e929 code=0x7ffc0000 [ 196.848623][ T6759] lowmem_reserve[]: 0 0 0 0 0 [ 196.853368][ T6759] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 196.866148][ T6759] Node 0 DMA32: 242*4kB (UME) 803*8kB (UME) 279*16kB (UME) 394*32kB (UM) 122*64kB (UME) 62*128kB (UME) 25*256kB (UM) 14*512kB (UM) 4*1024kB (UM) 2*2048kB (ME) 317*4096kB (UM) = 1360400kB [ 196.884737][ T6759] Node 0 Normal: 0*4kB 0*8kB 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 16kB [ 196.898125][ T5853] udevd[5853]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 196.903831][ T6759] Node 1 Normal: 171*4kB (UME) 39*8kB (UME) 28*16kB (UME) 101*32kB (UME) 30*64kB (UE) 11*128kB (UE) 4*256kB (UME) 2*512kB (M) 3*1024kB (UME) 2*2048kB (UE) 948*4096kB (M) = 3900228kB [ 196.933795][ T6759] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 196.943352][ T6759] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 196.964911][ T30] audit: type=1326 audit(1750101043.760:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6765 comm="syz.0.225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf2bb8e929 code=0x7ffc0000 [ 197.018727][ T6759] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 197.062819][ T6759] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 197.090798][ T30] audit: type=1326 audit(1750101043.770:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6765 comm="syz.0.225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=261 compat=0 ip=0x7fbf2bb8e929 code=0x7ffc0000 [ 197.221063][ T6759] 54106 total pagecache pages [ 197.252625][ T6759] 0 pages in swap cache [ 197.443926][ T9] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 197.533828][ T30] audit: type=1326 audit(1750101043.770:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6765 comm="syz.0.225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf2bb8e929 code=0x7ffc0000 [ 198.459266][ T6759] Free swap = 124996kB [ 198.488864][ T6759] Total swap = 124996kB [ 198.540332][ T6759] 2097051 pages RAM [ 198.554654][ T30] audit: type=1326 audit(1750101043.770:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6765 comm="syz.0.225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7fbf2bb8e929 code=0x7ffc0000 [ 198.577201][ T30] audit: type=1326 audit(1750101043.780:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6765 comm="syz.0.225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf2bb8e929 code=0x7ffc0000 [ 198.603310][ T30] audit: type=1326 audit(1750101043.940:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6765 comm="syz.0.225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf2bb8e929 code=0x7ffc0000 [ 198.642423][ T6759] 0 pages HighMem/MovableOnly [ 198.673912][ T6759] 424746 pages reserved [ 198.678149][ T6759] 0 pages cma reserved [ 199.001763][ T30] audit: type=1326 audit(1750101043.950:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6765 comm="syz.0.225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=325 compat=0 ip=0x7fbf2bb8e929 code=0x7ffc0000 [ 199.030932][ T30] audit: type=1326 audit(1750101043.950:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6765 comm="syz.0.225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf2bb8e929 code=0x7ffc0000 [ 199.242731][ T30] audit: type=1326 audit(1750101043.950:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6765 comm="syz.0.225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf2bb8e929 code=0x7ffc0000 [ 199.294528][ T9] usb 3-1: config 0 has no interfaces? [ 199.343068][ T9] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 199.351584][ T6795] netlink: 12 bytes leftover after parsing attributes in process `syz.1.234'. [ 199.424125][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 199.431732][ T6795] vlan2: entered promiscuous mode [ 199.432168][ T9] usb 3-1: Product: syz [ 199.446621][ T6795] bridge0: entered promiscuous mode [ 199.555617][ T9] usb 3-1: Manufacturer: syz [ 199.578553][ T9] usb 3-1: SerialNumber: syz [ 199.625331][ T9] usb 3-1: config 0 descriptor?? [ 199.963280][ T6802] netlink: 260 bytes leftover after parsing attributes in process `syz.4.235'. [ 200.649813][ T6805] loop3: detected capacity change from 0 to 256 [ 200.741423][ T6805] FAT-fs (loop3): Directory bread(block 64) failed [ 200.777494][ T6805] FAT-fs (loop3): Directory bread(block 65) failed [ 200.815432][ T6805] FAT-fs (loop3): Directory bread(block 66) failed [ 200.822026][ T6805] FAT-fs (loop3): Directory bread(block 67) failed [ 200.871827][ T6805] FAT-fs (loop3): Directory bread(block 68) failed [ 200.914109][ T6805] FAT-fs (loop3): Directory bread(block 69) failed [ 200.944238][ T6805] FAT-fs (loop3): Directory bread(block 70) failed [ 201.018157][ T6805] FAT-fs (loop3): Directory bread(block 71) failed [ 201.048844][ T6805] FAT-fs (loop3): Directory bread(block 72) failed [ 201.136127][ T6805] FAT-fs (loop3): Directory bread(block 73) failed [ 201.929712][ T30] audit: type=1326 audit(1750101048.590:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6807 comm="syz.4.238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b1a38e929 code=0x7ffc0000 [ 201.952506][ T30] audit: type=1326 audit(1750101048.590:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6807 comm="syz.4.238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b1a38e929 code=0x7ffc0000 [ 201.983805][ T30] audit: type=1326 audit(1750101048.600:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6807 comm="syz.4.238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=261 compat=0 ip=0x7f9b1a38e929 code=0x7ffc0000 [ 202.501344][ T30] audit: type=1326 audit(1750101048.600:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6807 comm="syz.4.238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b1a38e929 code=0x7ffc0000 [ 202.523461][ C0] vkms_vblank_simulate: vblank timer overrun [ 202.622219][ T30] audit: type=1326 audit(1750101048.600:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6807 comm="syz.4.238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b1a38e929 code=0x7ffc0000 [ 202.751089][ T30] audit: type=1326 audit(1750101048.600:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6807 comm="syz.4.238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f9b1a38e929 code=0x7ffc0000 [ 202.773112][ C0] vkms_vblank_simulate: vblank timer overrun [ 202.961844][ T5836] usb 3-1: USB disconnect, device number 5 [ 202.978114][ T30] audit: type=1326 audit(1750101048.600:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6807 comm="syz.4.238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b1a38e929 code=0x7ffc0000 [ 203.005088][ T30] audit: type=1326 audit(1750101048.600:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6807 comm="syz.4.238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b1a38e929 code=0x7ffc0000 [ 203.038263][ T30] audit: type=1326 audit(1750101048.600:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6807 comm="syz.4.238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=325 compat=0 ip=0x7f9b1a38e929 code=0x7ffc0000 [ 203.194083][ T30] audit: type=1326 audit(1750101048.600:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6807 comm="syz.4.238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b1a38e929 code=0x7ffc0000 [ 203.548564][ T6836] program syz.2.244 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 203.565753][ T6836] netlink: 'syz.2.244': attribute type 10 has an invalid length. [ 203.816724][ T6836] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 203.835111][ T6836] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 203.848999][ T6836] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 204.373424][ T6844] netlink: 8 bytes leftover after parsing attributes in process `syz.1.246'. [ 206.794322][ T6855] xt_nfacct: accounting object `syz1' does not exists [ 207.210709][ T6864] netlink: 4 bytes leftover after parsing attributes in process `syz.2.254'. [ 208.207301][ T6873] futex_wake_op: syz.4.257 tries to shift op by -1; fix this program [ 210.827671][ T6894] process 'syz.0.262' launched '/dev/fd/8' with NULL argv: empty string added [ 211.912696][ T6898] xt_nfacct: accounting object `syz1' does not exists [ 213.788765][ T6914] dvmrp8: entered allmulticast mode [ 214.490938][ T5844] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 214.756986][ T5844] usb 2-1: config 0 has an invalid interface number: 29 but max is 0 [ 214.797299][ T5844] usb 2-1: config 0 has no interface number 0 [ 214.803442][ T5844] usb 2-1: config 0 interface 29 has no altsetting 0 [ 214.855460][ T5844] usb 2-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=39.ac [ 214.873841][ T5844] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 214.926501][ T5844] usb 2-1: Product: syz [ 214.930689][ T5844] usb 2-1: Manufacturer: syz [ 214.983977][ T5844] usb 2-1: SerialNumber: syz [ 215.010065][ T5844] usb 2-1: config 0 descriptor?? [ 216.100917][ T6928] futex_wake_op: syz.4.274 tries to shift op by -1; fix this program [ 217.232892][ T5850] Bluetooth: hci1: command 0x0406 tx timeout [ 217.239365][ T5850] Bluetooth: hci3: command 0x0406 tx timeout [ 217.245537][ T5843] Bluetooth: hci0: command 0x0406 tx timeout [ 217.251607][ T5843] Bluetooth: hci4: command 0x0406 tx timeout [ 217.258395][ T5850] Bluetooth: hci2: command 0x0406 tx timeout [ 219.525782][ T6946] futex_wake_op: syz.2.279 tries to shift op by -1; fix this program [ 220.925947][ T6956] vivid-003: disconnect [ 221.458644][ T5844] peak_usb 2-1:0.29 can0: unable to request usb[type=0 value=1] err=-71 [ 221.582873][ T5844] peak_usb 2-1:0.29: unable to read PCAN-USB X6 firmware info (err -71) [ 221.733424][ T6950] vivid-003: reconnect [ 221.740241][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 221.740258][ T30] audit: type=1326 audit(1750101069.110:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6950 comm="syz.4.281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b1a38e929 code=0x7fc00000 [ 221.857299][ T5844] peak_usb 2-1:0.29: probe with driver peak_usb failed with error -71 [ 221.874052][ T5844] usb 2-1: USB disconnect, device number 3 [ 224.784855][ T6984] futex_wake_op: syz.1.291 tries to shift op by -1; fix this program [ 225.317842][ T5936] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 225.485368][ T5936] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 225.569597][ T5936] usb 5-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 225.696587][ T5936] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 225.784243][ T5936] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 225.967137][ T5936] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 226.004963][ T5936] usb 5-1: invalid MIDI out EP 0 [ 226.201990][ T6025] udevd[6025]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 226.660346][ T7005] sd 0:0:1:0: device reset [ 226.712200][ T30] audit: type=1326 audit(1750101074.030:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6983 comm="syz.1.291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe37498e929 code=0x7ffc0000 [ 227.102615][ T30] audit: type=1326 audit(1750101074.030:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6983 comm="syz.1.291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe37498e929 code=0x7ffc0000 [ 227.146223][ T5936] snd-usb-audio 5-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 227.306731][ T30] audit: type=1326 audit(1750101074.030:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6983 comm="syz.1.291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe37498d290 code=0x7ffc0000 [ 227.338588][ T5936] usb 5-1: USB disconnect, device number 5 [ 227.369226][ T30] audit: type=1326 audit(1750101074.030:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6983 comm="syz.1.291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe37498e929 code=0x7ffc0000 [ 227.543898][ T30] audit: type=1326 audit(1750101074.030:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6983 comm="syz.1.291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe37498e929 code=0x7ffc0000 [ 227.646807][ T30] audit: type=1326 audit(1750101074.030:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6983 comm="syz.1.291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe37498e929 code=0x7ffc0000 [ 227.739697][ T30] audit: type=1326 audit(1750101074.040:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6983 comm="syz.1.291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe37498e929 code=0x7ffc0000 [ 227.861649][ T30] audit: type=1326 audit(1750101074.040:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6983 comm="syz.1.291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe37498e929 code=0x7ffc0000 [ 227.960532][ T7021] loop3: detected capacity change from 0 to 128 [ 227.977497][ T30] audit: type=1326 audit(1750101074.040:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6983 comm="syz.1.291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=77 compat=0 ip=0x7fe37498e929 code=0x7ffc0000 [ 228.006014][ T30] audit: type=1326 audit(1750101074.040:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6983 comm="syz.1.291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe37498e929 code=0x7ffc0000 [ 228.028562][ T30] audit: type=1326 audit(1750101074.040:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6983 comm="syz.1.291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe37498e929 code=0x7ffc0000 [ 228.205834][ T7025] ip6erspan0: entered allmulticast mode [ 228.224102][ C1] Unknown status report in ack skb [ 228.501536][ T7030] futex_wake_op: syz.0.304 tries to shift op by -1; fix this program [ 228.803325][ T7021] DRBG: could not allocate digest TFM handle: hmac(sha512) [ 229.756669][ T7053] xt_CONNSECMARK: invalid mode: 0 [ 229.876663][ T7053] loop1: detected capacity change from 0 to 1024 [ 232.596101][ T7075] netlink: 24 bytes leftover after parsing attributes in process `syz.3.313'. [ 234.079702][ T5844] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 234.281086][ T5844] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 234.328902][ T5844] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 234.362608][ T5844] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 234.403151][ T5844] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 234.430340][ T5844] usb 4-1: SerialNumber: syz [ 234.738790][ T5844] usb 4-1: 0:2 : does not exist [ 235.089160][ T7097] overlayfs: missing 'lowerdir' [ 235.970325][ T7101] netlink: 'syz.2.321': attribute type 11 has an invalid length. [ 236.129404][ T5844] usb 4-1: USB disconnect, device number 6 [ 237.823658][ T7123] netlink: 4 bytes leftover after parsing attributes in process `syz.1.328'. [ 241.333431][ T7150] futex_wake_op: syz.1.336 tries to shift op by -1; fix this program [ 241.733959][ T24] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 241.981339][ T24] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 242.131785][ T24] usb 3-1: config 0 interface 0 has no altsetting 0 [ 242.355869][ T24] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 242.517697][ T24] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 242.664258][ T24] usb 3-1: Product: syz [ 242.670846][ T24] usb 3-1: Manufacturer: syz [ 242.677754][ T24] usb 3-1: SerialNumber: syz [ 242.691767][ T24] usb 3-1: config 0 descriptor?? [ 242.729512][ T24] usb 3-1: selecting invalid altsetting 0 [ 243.746032][ C0] ------------[ cut here ]------------ [ 243.751553][ C0] WARNING: net/mac80211/tx.c:5024 at __ieee80211_beacon_get+0x125d/0x1630, CPU#0: syz.2.337/7167 [ 243.762118][ C0] Modules linked in: [ 243.766170][ C0] CPU: 0 UID: 0 PID: 7167 Comm: syz.2.337 Not tainted 6.16.0-rc2-next-20250616-syzkaller #0 PREEMPT(full) [ 243.777570][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 243.787640][ C0] RIP: 0010:__ieee80211_beacon_get+0x125d/0x1630 [ 243.793987][ C0] Code: e7 e8 27 f2 2f f7 45 31 f6 4c 8b bc 24 a0 00 00 00 e9 78 fe ff ff e8 92 bf d6 f6 90 0f 0b 90 e9 e0 f7 ff ff e8 84 bf d6 f6 90 <0f> 0b 90 e9 38 fb ff ff e8 76 bf d6 f6 48 c7 c7 a0 5c 79 8f 4c 89 [ 243.813624][ C0] RSP: 0018:ffffc900000079f8 EFLAGS: 00010246 [ 243.819730][ C0] RAX: ffffffff8ae9aaac RBX: ffffffff8ae99886 RCX: ffff888025249e00 [ 243.827733][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 243.835716][ C0] RBP: 0000000000000000 R08: ffff888025249e00 R09: 0000000000000003 [ 243.843796][ C0] R10: 0000000000000007 R11: 0000000000000100 R12: ffff88806f6d6500 [ 243.851804][ C0] R13: dffffc0000000000 R14: ffff88806f6d69d0 R15: ffff88806f012824 [ 243.859806][ C0] FS: 00007f59146bd6c0(0000) GS:ffff888125c40000(0000) knlGS:0000000000000000 [ 243.868802][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 243.875433][ C0] CR2: 00007f59146bcf98 CR3: 0000000033e62000 CR4: 00000000003526f0 [ 243.883413][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 243.891412][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 243.899402][ C0] Call Trace: [ 243.902699][ C0] [ 243.905577][ C0] ? __ieee80211_beacon_get+0x36/0x1630 [ 243.911147][ C0] ieee80211_beacon_get_tim+0xb4/0x2b0 [ 243.916632][ C0] ? __pfx_ieee80211_beacon_get_tim+0x10/0x10 [ 243.922703][ C0] mac80211_hwsim_beacon_tx+0x3ce/0x860 [ 243.928265][ C0] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 243.935497][ C0] __iterate_interfaces+0x2a8/0x590 [ 243.940720][ C0] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 243.946818][ C0] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 243.954102][ C0] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 243.960173][ C0] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 243.967232][ C0] mac80211_hwsim_beacon+0xbb/0x1c0 [ 243.972443][ C0] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 243.978281][ C0] __hrtimer_run_queues+0x529/0xc60 [ 243.983492][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 243.989241][ C0] ? read_tsc+0x9/0x20 [ 243.993337][ C0] ? __pfx___local_bh_disable_ip+0x10/0x10 [ 243.999182][ C0] hrtimer_run_softirq+0x187/0x2b0 [ 244.004309][ C0] handle_softirqs+0x283/0x870 [ 244.009091][ C0] ? __irq_exit_rcu+0xca/0x1f0 [ 244.013883][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 244.019173][ C0] __irq_exit_rcu+0xca/0x1f0 [ 244.023792][ C0] ? __pfx___irq_exit_rcu+0x10/0x10 [ 244.029016][ C0] irq_exit_rcu+0x9/0x30 [ 244.033268][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 244.038936][ C0] [ 244.041863][ C0] [ 244.044817][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 244.050809][ C0] RIP: 0010:lock_acquire+0x175/0x360 [ 244.056115][ C0] Code: 00 00 00 00 9c 8f 44 24 30 f7 44 24 30 00 02 00 00 0f 85 cd 00 00 00 f7 44 24 08 00 02 00 00 74 01 fb 65 48 8b 05 1b cb ff 10 <48> 3b 44 24 58 0f 85 f2 00 00 00 48 83 c4 60 5b 41 5c 41 5d 41 5e [ 244.075752][ C0] RSP: 0018:ffffc900036f7948 EFLAGS: 00000206 [ 244.081827][ C0] RAX: 8946362573a43700 RBX: 0000000000000000 RCX: 8946362573a43700 [ 244.089816][ C0] RDX: 0000000000000000 RSI: ffffffff8db79231 RDI: ffffffff8be2ec60 [ 244.097808][ C0] RBP: ffffffff820cccc0 R08: 0000000000000000 R09: ffffffff820cccc0 [ 244.105796][ C0] R10: ffffc900036f7aa0 R11: fffff520006def5b R12: 0000000000000001 [ 244.113779][ C0] R13: ffff888027e54260 R14: 0000000000000001 R15: 0000000000000246 [ 244.121761][ C0] ? __might_fault+0xb0/0x130 [ 244.126474][ C0] ? __might_fault+0xb0/0x130 [ 244.131167][ C0] ? __might_fault+0xb0/0x130 [ 244.135880][ C0] __might_fault+0xcc/0x130 [ 244.140394][ C0] ? __might_fault+0xb0/0x130 [ 244.145096][ C0] _copy_from_user+0x28/0xb0 [ 244.149688][ C0] ___sys_recvmsg+0x12e/0x510 [ 244.154396][ C0] ? __pfx____sys_recvmsg+0x10/0x10 [ 244.159618][ C0] ? __might_fault+0xb0/0x130 [ 244.164327][ C0] do_recvmmsg+0x307/0x770 [ 244.168751][ C0] ? __pfx_do_recvmmsg+0x10/0x10 [ 244.173718][ C0] ? file_init_path+0x3b/0x590 [ 244.178548][ C0] ? __pfx_do_futex+0x10/0x10 [ 244.183230][ C0] __x64_sys_recvmmsg+0x190/0x240 [ 244.188274][ C0] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 244.193847][ C0] ? do_syscall_64+0xbe/0x3b0 [ 244.198573][ C0] do_syscall_64+0xfa/0x3b0 [ 244.203075][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 244.208287][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 244.214380][ C0] ? clear_bhb_loop+0x60/0xb0 [ 244.219080][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 244.224990][ C0] RIP: 0033:0x7f591378e929 [ 244.229404][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 244.249027][ C0] RSP: 002b:00007f59146bd038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 244.257498][ C0] RAX: ffffffffffffffda RBX: 00007f59139b6080 RCX: 00007f591378e929 [ 244.265509][ C0] RDX: 0000000000010106 RSI: 00002000000000c0 RDI: 0000000000000006 [ 244.273655][ C0] RBP: 00007f5913810b39 R08: 0000000000000000 R09: 0000000000000000 [ 244.281664][ C0] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 244.289657][ C0] R13: 0000000000000000 R14: 00007f59139b6080 R15: 00007ffc34012a38 [ 244.297654][ C0] [ 244.300674][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 244.307960][ C0] CPU: 0 UID: 0 PID: 7167 Comm: syz.2.337 Not tainted 6.16.0-rc2-next-20250616-syzkaller #0 PREEMPT(full) [ 244.319328][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 244.329383][ C0] Call Trace: [ 244.332659][ C0] [ 244.335502][ C0] dump_stack_lvl+0x99/0x250 [ 244.340096][ C0] ? __asan_memcpy+0x40/0x70 [ 244.344685][ C0] ? __pfx_dump_stack_lvl+0x10/0x10 [ 244.349882][ C0] ? __pfx__printk+0x10/0x10 [ 244.354492][ C0] panic+0x2db/0x790 [ 244.358391][ C0] ? __pfx_panic+0x10/0x10 [ 244.362839][ C0] __warn+0x334/0x4c0 [ 244.366822][ C0] ? __ieee80211_beacon_get+0x125d/0x1630 [ 244.372560][ C0] ? __ieee80211_beacon_get+0x125d/0x1630 [ 244.378286][ C0] report_bug+0x2be/0x4f0 [ 244.382617][ C0] ? __ieee80211_beacon_get+0x125d/0x1630 [ 244.388331][ C0] ? __ieee80211_beacon_get+0x125d/0x1630 [ 244.394053][ C0] ? __ieee80211_beacon_get+0x125f/0x1630 [ 244.399769][ C0] handle_bug+0x84/0x160 [ 244.404011][ C0] exc_invalid_op+0x1a/0x50 [ 244.408530][ C0] asm_exc_invalid_op+0x1a/0x20 [ 244.413373][ C0] RIP: 0010:__ieee80211_beacon_get+0x125d/0x1630 [ 244.419695][ C0] Code: e7 e8 27 f2 2f f7 45 31 f6 4c 8b bc 24 a0 00 00 00 e9 78 fe ff ff e8 92 bf d6 f6 90 0f 0b 90 e9 e0 f7 ff ff e8 84 bf d6 f6 90 <0f> 0b 90 e9 38 fb ff ff e8 76 bf d6 f6 48 c7 c7 a0 5c 79 8f 4c 89 [ 244.439312][ C0] RSP: 0018:ffffc900000079f8 EFLAGS: 00010246 [ 244.445389][ C0] RAX: ffffffff8ae9aaac RBX: ffffffff8ae99886 RCX: ffff888025249e00 [ 244.453369][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 244.461333][ C0] RBP: 0000000000000000 R08: ffff888025249e00 R09: 0000000000000003 [ 244.469325][ C0] R10: 0000000000000007 R11: 0000000000000100 R12: ffff88806f6d6500 [ 244.477319][ C0] R13: dffffc0000000000 R14: ffff88806f6d69d0 R15: ffff88806f012824 [ 244.485292][ C0] ? __ieee80211_beacon_get+0x36/0x1630 [ 244.490841][ C0] ? __ieee80211_beacon_get+0x125c/0x1630 [ 244.496566][ C0] ? __ieee80211_beacon_get+0x125c/0x1630 [ 244.502282][ C0] ? __ieee80211_beacon_get+0x36/0x1630 [ 244.507828][ C0] ieee80211_beacon_get_tim+0xb4/0x2b0 [ 244.513284][ C0] ? __pfx_ieee80211_beacon_get_tim+0x10/0x10 [ 244.519379][ C0] mac80211_hwsim_beacon_tx+0x3ce/0x860 [ 244.524929][ C0] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 244.532120][ C0] __iterate_interfaces+0x2a8/0x590 [ 244.537311][ C0] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 244.543464][ C0] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 244.550661][ C0] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 244.556723][ C0] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 244.563753][ C0] mac80211_hwsim_beacon+0xbb/0x1c0 [ 244.568980][ C0] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 244.574791][ C0] __hrtimer_run_queues+0x529/0xc60 [ 244.579999][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 244.585721][ C0] ? read_tsc+0x9/0x20 [ 244.589796][ C0] ? __pfx___local_bh_disable_ip+0x10/0x10 [ 244.595608][ C0] hrtimer_run_softirq+0x187/0x2b0 [ 244.600720][ C0] handle_softirqs+0x283/0x870 [ 244.605483][ C0] ? __irq_exit_rcu+0xca/0x1f0 [ 244.610251][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 244.615542][ C0] __irq_exit_rcu+0xca/0x1f0 [ 244.620131][ C0] ? __pfx___irq_exit_rcu+0x10/0x10 [ 244.625332][ C0] irq_exit_rcu+0x9/0x30 [ 244.629580][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 244.635233][ C0] [ 244.638187][ C0] [ 244.641115][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 244.647089][ C0] RIP: 0010:lock_acquire+0x175/0x360 [ 244.652381][ C0] Code: 00 00 00 00 9c 8f 44 24 30 f7 44 24 30 00 02 00 00 0f 85 cd 00 00 00 f7 44 24 08 00 02 00 00 74 01 fb 65 48 8b 05 1b cb ff 10 <48> 3b 44 24 58 0f 85 f2 00 00 00 48 83 c4 60 5b 41 5c 41 5d 41 5e [ 244.672000][ C0] RSP: 0018:ffffc900036f7948 EFLAGS: 00000206 [ 244.678080][ C0] RAX: 8946362573a43700 RBX: 0000000000000000 RCX: 8946362573a43700 [ 244.686066][ C0] RDX: 0000000000000000 RSI: ffffffff8db79231 RDI: ffffffff8be2ec60 [ 244.694048][ C0] RBP: ffffffff820cccc0 R08: 0000000000000000 R09: ffffffff820cccc0 [ 244.702023][ C0] R10: ffffc900036f7aa0 R11: fffff520006def5b R12: 0000000000000001 [ 244.709987][ C0] R13: ffff888027e54260 R14: 0000000000000001 R15: 0000000000000246 [ 244.717954][ C0] ? __might_fault+0xb0/0x130 [ 244.722651][ C0] ? __might_fault+0xb0/0x130 [ 244.727358][ C0] ? __might_fault+0xb0/0x130 [ 244.732028][ C0] __might_fault+0xcc/0x130 [ 244.736613][ C0] ? __might_fault+0xb0/0x130 [ 244.741285][ C0] _copy_from_user+0x28/0xb0 [ 244.745870][ C0] ___sys_recvmsg+0x12e/0x510 [ 244.750575][ C0] ? __pfx____sys_recvmsg+0x10/0x10 [ 244.755808][ C0] ? __might_fault+0xb0/0x130 [ 244.760511][ C0] do_recvmmsg+0x307/0x770 [ 244.764944][ C0] ? __pfx_do_recvmmsg+0x10/0x10 [ 244.769875][ C0] ? file_init_path+0x3b/0x590 [ 244.774645][ C0] ? __pfx_do_futex+0x10/0x10 [ 244.779342][ C0] __x64_sys_recvmmsg+0x190/0x240 [ 244.784373][ C0] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 244.789917][ C0] ? do_syscall_64+0xbe/0x3b0 [ 244.794593][ C0] do_syscall_64+0xfa/0x3b0 [ 244.799101][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 244.804296][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 244.810368][ C0] ? clear_bhb_loop+0x60/0xb0 [ 244.815059][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 244.820962][ C0] RIP: 0033:0x7f591378e929 [ 244.825388][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 244.844988][ C0] RSP: 002b:00007f59146bd038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 244.853398][ C0] RAX: ffffffffffffffda RBX: 00007f59139b6080 RCX: 00007f591378e929 [ 244.861366][ C0] RDX: 0000000000010106 RSI: 00002000000000c0 RDI: 0000000000000006 [ 244.869333][ C0] RBP: 00007f5913810b39 R08: 0000000000000000 R09: 0000000000000000 [ 244.877302][ C0] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 244.885267][ C0] R13: 0000000000000000 R14: 00007f59139b6080 R15: 00007ffc34012a38 [ 244.893253][ C0] [ 244.896635][ C0] Kernel Offset: disabled [ 244.900978][ C0] Rebooting in 86400 seconds..