last executing test programs: 3m43.943136116s ago: executing program 3 (id=4): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r1 = socket(0x18, 0x0, 0x1) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x1e, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x7, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x10000000}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) r4 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x108c, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x0, 0xf}, {}, {0x7}}, [@filter_kind_options=@f_matchall={{0xd}, {0x1050, 0x2, [@TCA_MATCHALL_ACT={0x104c, 0x2, [@m_ct={0x1048, 0x15, 0x0, 0x0, {{0x7}, {0x20, 0x2, 0x0, 0x1, [@TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @private1={0xfc, 0x1, '\x00', 0x1}}, @TCA_CT_ZONE={0x6, 0x4, 0x2}]}, {0x1004, 0x6, "115e469ca1211aaaec2007112e5e538b1f7d471184cc5f4d66c0f7738766128fd47d138ff4bbcaadce7273aa09c7bf1b3c9983d6241b034483c55d65162d3a592f54ff3f7dfc00f7c65234180ccc74bcc3464244b6a2c8f71cb1dcff321abefc0e18df96072f9dd8497a7917f6dd2e96da7726e048f68f056fd2b089626587cb732edbf956f2c2ad83ae6d867fce15bd74dd124d268f0be050396717a066c09b50624d3d80c9c8290e1c942c5063f6fa65d421c0751fdda82f6fb805d8b784dc01fd1ff8a69425923503603178348dcba65f69458c76f6d644f0f5aa60963421479c766c520288b4461f32e0ae3fdea3c260140a51e6a07eab0e9446dd3b4347e4852d4c6efbdad89ce451d1566b145e9cd48ec6a414212fde708e0221785c491d879cd8e579cb4b02dec48afb46485c1d8a60dc55397323006f2acc53032f08e22558a007b673efede744c30f41121fd01307345739dec8292fec17cf9c1207b742dac4800a4feb0ac690dab6af9b903c76fc9fefd62a4b6e3e0364a54c5329760393a1d2445dff738f777c4b8cbfdca1cb2a21c86d0a7f0f529375aea33292b4b50e7c1c0e87b7ad350c34a504e5cf19b4c7a42e989abeb96cf091e2ac5798f94add85f7de2150ce1e0bd14f1db4971b5e935ecc8c0f545ad24f3228e0c290d6b5782bbd5876dc69bce1a037eb2f997797d32d0dff45dcbd1c85be2ee288f732348924a241fb9b15368fbb59eb6171b64faaa3fdfd6d0b78000c6f57fd73a3c4d48cc43bb7e1b4e16cdd3232e939d27281a1c766cebddf2241526224dc541bb1516c1990dc4e685629dec2adc986b0eb896db0c9953c26bbc46ed3ae772d237d16afa95672e4cbe831401a7523273184ff535e90e058b6ac02391841c93f6f0e5005f05ab984f9bde1e80d2b65688fc3f9dab7bcd689e1c5d0f48da986e5ef30a00aa71ec865d1d1436aa0412260f6d9f6fac41ee405a36889353e4f6400f4e7f94aced4cb71e3383384e66f10433210202a267b86e491227ea86e36d6e827c6f658e9518e3a9302c759cf003e9d366ee8029fbac838c716d1d48206f78780fbc4d454f6d52854f85248d62125dceecb54f4fe4380ea2b0bcd3c6872dec8626fd6475038238fa30fd93185a4e5c919022e19193a318e25a5d7163ec9670a806fe9edf4c9ee8304fe542100a10380177bc55cbdff315bfa76ea6fbbfdf0106a3518d6dbaca46dd80b0c96c53ec2d5caf70bdd54bd77a1c23c77346293d26c45b921d738d85c2b5b95718c355e89255dfa6e2c5b2acedc8469e8ae3c105a6e4ab51b9ae16e2fc576c8099404cfbba5b50238d562e1fd918f01be5b3a3c532a1739b3bb7bcf6ecf0f69f964eceeebf43d6ae39939a5ff16df213c972a33c33ab936a3c1fc6bd986572099faf3faf6b38af3f11820575c0d49e6963d087233d052eb7c651ead417fe6fc22067a86ecc7a134c36803ec9094e2c1e8e42a8379bed538a8d9ebdc65d0b84a169e8b862776e4c1023414dc4877ea765f0b5a6566759fcf7b5ad671b10ef8e287774d2af80081174216faf40fca4120841350e229fbb24b04eafefffbcd703006a6c9a75e62c7b9dfbcd3d919b0e6d8187cedc3b2669a9e83d0190c9e2c832e19aa664bcca4dfc65ae83e07953c4e9ce7d3b111b3a4d6ae6687bd38783633ae47aa5b05970b5ad322cc6477ab56803b37dd427bfcdf23ccb2e12bd4c5c87ac042d9d05d6485ae168c124b5b27247c11a311a5b52e5b038d70d4f3f329f8d4c10a49c3909b52fdb3105b7dd3f4bb4b271526a479e0e6e32bfd9937e9bd2ddf8d50367e2bd329aa48e6418303b2e5e870326156de87e0af9b7f923dce5d74cd1545ce533bc6abcef663cf5571c0f6f336f385d5626e4f3dda1aec86a316dc7ab2cf2e0c98029ce487d11b149eaa7825c9b60a7e45b179fc46ec970cd01d63c393695a3476bf17c6073f032d7ee926d83e6c6e19a870c1d19d0130f5f669bdbfbf0a9d20d28ccc68c9b79d0a4a9ac4d25a445773ce564c14c8b44fb12d8b993ba2bde874b591ca209c0a2487ee9372ad1d1d03a84c16014072a9fd7808e483628cd2fd1c0451c7d62faa079fa3768705f1f5a46ca2caa93ed0eec5eaa88783baed9dd86f2fda8b5571baccfec1d0ae62bc6f465a1effe607194ef2c9ad986b8354bc19f5601e96e91c005f7a347a4d2f9de88b73d255ea625d046111f2d3c14fe1d41e4f41d2c54b9234b9373ce53c9509ad6f01167580e172b7603a2ff818178d31e67fcc15f9422ef23b43e2b160c211efd8a13f69548861ecf0c8561e907548d030916a0d53aebfafef839d64ff24ab7794dead3494506fe12ae0934fa171efddf8f4401e5483d3d2150d3d6e53331eca650286482b9be4238e0ebb5992a65ad292826cced86457deaf44c1f7ccbabfb60dcb9eb044152486092382bc04a3b3c4e7aa07aeddba202f7dd792b9ca5c7a08bfc0ce6bec655affc3133ecff9b51e9b5bf03947a97099b82ccd7fe4d51fa1c04fea23d3b139bcf9770477f8035ca966cb4bf12959ba29e5b269740318a6bb32fe95f23f41639bfd2c3440fdf40e7176b9e8d7570401ef704fbd39174fd2f3f37ad37d9cd553bb6728ac6134bafd9f5370ff9d697334f1cd35332fea43402db3d66060b3f92440c82a25011090ee13486e047468149d6ea270f47a3c0700a7a9270e194bbcef2d52ecbee01131156a79cbcfa459038bb33e379ca18a42d86474b35b63905b2e9dbf58b92419e805034cd6fe05222db36dff382db8347e5c5c6550d833e5cb1e50eeea7f6124ba5f231aea838ab5764b5527b4870ca995421021dd8f1ac8807abb512474404f798a671829924c9ad4b51df70a0eae02a254fa760f2a47855c7124e86a5958191f78dc8934047bedf34d44e1816698e9a5217aad0f1761f36acb64275dba4ef865a578b84e03e6b916710da39ccfaac702e60316e35cb38195d4efb45af845bcd13c70cc62a9ae08f2470d8766ea7d0f97766de6ae8fff83718c82e497e2cb9a6e98fc47a9367ff69c1525a0425e9f4e402ed79ebb40595ecb72a1d0b362c73c8ce9d5c6f968e1df974e23e68928a41ca63bc2d97be145253b754214796694b9a1cf0a4bf47f715cd28a21d8033b6a85dcf9f5dbee166859aa8ea05ec88f4b48aac72d8cf7bbe587938bce407187e4614966d7b7f898b81e06e62d800847d7ae1a852009161eae6e4b534dd15e62e293829754cc1aafdb7836b8d9ac05c56741a8fc268df87bf81feab350d32c2b5124d3df2fea54d2b5bf0318d44d0403239d8c58e6615716c63fad8afbe1feef741855e0ae38781c6ed21f7070d0b6db9fa47d20825f071ca45cf12e8d1c82d9dc1bdb72fcc0b6867d5f42af41858cdde2806c40dd3831a0b9583d9b71344d0ce5e44129cafbdc9c75c159381352d5825b945cb2a5908693975e60bae2f18ded7a170f80dc509a7605b73252b64b93ea5d5e1a468f33d9184bb85a2d437847a850d8f9ce83e0ac55326b8113524bfd044cfb73ef4163df627e7cf71930105242cb53495270549b1006a176c1ddbbfe52991576b3e0a2869df2bca9ba24641ca9d119867ffad36479ae0a9de912a68a837bcb9985e42bcb1fd2082ca3b811d9befae69e056176652c61c43e3ba13b538e500c84f6fa196ede882c0b584088d511adb8e09d7ac3f172df46ba69db1f563f3feda3bcf8d7cbc5b742883c677adf65dd41f8789791894ea200ce1617f776daf2fc94b8fc31c5317371ac8690c3eb25c688a2e7eeec4f93932324a1c2cfef9b044b8abae118ffc3568b3267dbb0217f4a5d7b60c888ed3a142d334f6f3ce9d2a94b54804c3ff9487ff7ff40da1c3611faf4d4872c3dc3d89bbc44dc11da5a1342bf70f6162d162b4bcf81a6b495aa9d538c294a8efda339c14aee98e9e4731a7f583c1e1869bd7df09ef09aa866e4a26e4051398d5b84cbc32d32ecce9dcbb16273e990cbef53d6d68194bfc215e1f40858c58e61d24133797d97cc0180a02507a4adcb9259314bb4f54f0c7b13c337ef99725badf2b226fd8f1238d948d0acbfc83e00a690e29fe12b99073a3a8139d3c185f7891387a73dedfb61e96d4046a7863e1e05900d826d8cb41ee94323c7ffc5dbc3a251047af1778981d494c60ec253e18849450316d241ad1f83c1bf63b45a2b38f35a356d9575fca238928bc124c77efdbfd0a49296065bc06bf115c6ee84be514003c577a8c1a741c567f918926635b2bf5ede7c31d957b6115ee640f883e83bf1f2ca8ceda50794f889180532b03fcfdb15903b972104d08977d1ee318ed8186eb3e0c23522f0a6e63c5141018986e06d6774d0841d5a756416451c895c426c71784486415795e70ac01a2eef7b4807f24035c0af7097c7dd54c36c7850f61e202d6938ec2ab62cc77a655c4d664d52fe3490a4e3a749379df5f1a2c6454738d40a0a90a97e14acadc5bdfd046c47692354335ab06991b472c22c3a2d458ba0956bbc6e46abc756593dd273d483bbd5dc102f8ca6fcd0ca09aaa573c7a2f15b4c3ab8e25c8caa893ed900fe5157162310be1fedb01db2641d17f768031c3f158f481e4792651c72b8e2cc08c2823cba82053539e955483704b18cc0a1344d239e0ff2719f557a1a8601faeb8b823dca54f0b52018200de2441a086263ae100857c84fa568cb71740c734a7b39860e255768fb5fb93463cbc21c4d4b36d511b31d3040108cc9fa6c50be2a88dbfa53589a87a39055c2fe497cb45d6dbb19c6d604957af60a9e0880ac506e42c5b46f0f88ddab59d6dcc55e93ab1dd49c9ea0daae830053d1159417d569a75416b0d6132727e0e1123e3dd6c28eb9c555cafba83c6588acd74735923413e733dfdb111df9c7b6706495b843691d74c10c46df69c88f372d1bb935a912d957653b05a397ec2ed9990ef694e5c4c012d3c0d64f9f3698665ddaac7f9bd25d5e9eef413b45a59dca8bd3478406b6dba9cbcd9e45df0b867f26b073d61dcccbbf4e1382bd9669a225c5b34d74fddb4664af45b6bb3124895e4b9614c24574cfdc2d2ae1abcfd8fc5ae5acc48bdd66223938fff7d74f281de0a42160762832bc35dfb26c87d112fcad71e9e4800bcb37fe220cc336454b641491355c56f7d295ba901efae9a1eb95d112180f6f92f77e3ea0d19dcddec2689fe07cc783ab9ae4ed1e5e237e0d42225384702c8af82e1a8530b1581d478b6bad2239a7254896dcbda9419dd1ede97226381d6f0f13e6f8805f84d6f9314b63ffa39b1ac180bdcf79c2285a99de9d58331ad465f0d39f047c1eaa833e77a2f7bf831722a241aa82bd1740074073f469f217c76b60f15efe988be47ae1d1b0620c10379b9dde43894e7d4f897422f03b132622813ddfc7723f87f105de0ad1218482515dd7b3d7dc44b6075cdaccf044760f694979e05d6c38df4969f73b18f643ed4bc83744bf332afcba3cb259545d56c9f96a987bdabe7cd614009026e0046d4cc764fe060cc5228aa54a8e8a3601842cb1433f9b12dbf71d3e2e02406a3a3b39dd89847b0541f97826e0c22546bec85915df9246c7e83024f36fd69c3e8233e04d6a98dbb758a3602b04b1b7cf2ffb03e437f1a2fdf44a78c30774d683636831d626efbc63553a4514f3e5810ff6bdd67f6079552cdba31560c83547629eac0530697cc53c465992ce8197659e83d8d2c155f964d0644813e13caf7dd97c16ca5ffcfe950545317866f597db9867d370a5f0df07fbb84a5bc42ff33db127692fdf582a50"}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x7, 0xc}}]}, 0x108c}, 0x1, 0x0, 0x0, 0x10}, 0x0) r9 = fsmount(r4, 0x0, 0x0) fchdir(r9) r10 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) sendfile(r10, r10, 0x0, 0x1000000201005) setsockopt$IP_VS_SO_SET_DELDEST(r1, 0x0, 0x488, 0x0, 0x0) write(r0, &(0x7f00000001c0)="d9f8a7", 0x3) 3m37.420077997s ago: executing program 3 (id=9): r0 = socket$kcm(0x10, 0x2, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net/netstat\x00') openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYRESDEC, @ANYRESDEC], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='memory.events.local\x00', 0x0, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000000c0)) getrusage(0x0, &(0x7f0000000340)) mount(0x0, &(0x7f0000000240)='.\x00', &(0x7f000015bffc)='nfs\x00', 0x0, &(0x7f0000000000)) syslog(0x3, &(0x7f0000000700)=""/231, 0xe7) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f0000000400)={0x0, 'batadv0\x00', {0x5}}) socket$nl_route(0x10, 0x3, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r4, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_getaddrlabel={0x1c, 0x1a, 0x1, 0x0, 0x0, {0x2, 0x0, 0x20, 0x0, 0x0, 0x7f000001}}, 0x1c}}, 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x2204880, 0x0) 3m34.161861836s ago: executing program 3 (id=11): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$pppl2tp(0x18, 0x1, 0x1) ioctl$TIOCGSERIAL(0xffffffffffffffff, 0x541e, 0x0) r3 = openat$comedi(0xffffffffffffff9c, 0x0, 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, &(0x7f00000000c0)={'8255\x00', [0x4f27, 0x5, 0x22, 0x401, 0x1, 0x6dc4, 0xfff, 0x5c95239c, 0x5, 0x3ff, 0x806, 0x401, 0x1, 0x2, 0x9, 0xe1cb, 0x5, 0x4, 0x3, 0x395, 0x8000008b, 0xfffffffe, 0xa, 0xfffffff5, 0x1, 0x3, 0x0, 0x0, 0x4, 0x8000000, 0xdffffff9]}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, 0x0, 0x0) sendmsg$NFT_MSG_GETSETELEM(r4, &(0x7f0000000680)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000640)={0x0, 0x25b4}}, 0x884) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000800)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELCHAIN={0xbc, 0x5, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0x5}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x60, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x4c355ee5}, @NFTA_HOOK_DEV={0x14, 0x3, 'veth1_to_bond\x00'}, @NFTA_HOOK_DEV={0x14, 0x3, 'dvmrp0\x00'}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x250e2ae7}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_DEV={0x14, 0x3, 'batadv_slave_1\x00'}]}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xffffffffffffffff}, @NFTA_CHAIN_TYPE={0xb, 0x7, 'filter\x00'}, @NFTA_CHAIN_COUNTERS={0x10, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0xe17}]}, @NFTA_CHAIN_TYPE={0xb, 0x7, 'filter\x00'}]}, @NFT_MSG_DELRULE={0x40, 0x8, 0xa, 0xea044eb6b1dd4fab, 0x0, 0x0, {0x7, 0x0, 0x8}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x1}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x14, 0x16, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x2}}], {0x14}}, 0x138}, 0x1, 0x0, 0x0, 0x20008000}, 0x4000) r5 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r5, 0x4c0a, &(0x7f00000002c0)={r6, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x14, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac00", "f4bd000000801900", [0x8, 0xffffffff9673e35d]}}) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000500)={&(0x7f0000000200)="be12953de56f4d9e78c66185fd28c7f906ad3c8b464c49569055e52e0ec133ba41905d64c550193995c4c7eff75fb4", &(0x7f0000000240)=""/78, &(0x7f00000002c0)="aae75df04bb8c379f8dc12b9da1a53c87aea3bb745e336644873eb75242f590c66c5852671dd15e8f009f31ad9026508f4427498db752b8313fb915976cedff7a3991d0b2222864af20bb176f6de38ebca170f4d9605133ee8f256b898d49bd9f25f4a75ef77425fb116d5bea1cbabe6d0a5cb056b37291684a2dbdb76cd68b156309234a9f94e50de27d583d96c3d03e9ca181b4b6c94366ffb97d7ee6f835c64f1dfd265069b322bc0746eb15b60eb1a52d258aa0b76fb1e3584e858464e86c001a44372271cd42b841823bf9dc0", &(0x7f0000000440)="f6bdd8c860a8558ec02a9af56702a80461ee1b9960420f8885f6db6fd6be0e7e62ddd87f74b6530ab5deef3c24261555ce2f3dfe2ead3ec76b889c6a7ec2a04a2bfabd45e67bc78e2b1de7e4434bf16487a32b879de8412d85afcefd7cbaf68e494e4a255d367b83e559f04d7161ace15e84be62f2d435abb78c43006c9c99392d517b3f7ec0cacb5ca0f45da67331dbe521f80d7e6e61e85265659a014895188b210210966571e3f02fe3655ef2c0ecca08ec6ec0667578d95a03553424", 0x7f, r6}, 0x38) r7 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r7, &(0x7f0000000e80)=[{{&(0x7f0000000000)={0xa, 0x4e1f, 0x1, @local, 0x1}, 0x1c, &(0x7f0000001780)=[{&(0x7f0000000040)="a4", 0x1}], 0x1}}, {{&(0x7f0000000080)={0xa, 0x4e22, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x2}, 0x1c, &(0x7f00000007c0)=[{&(0x7f00000001c0)='\x00', 0x1}], 0x1}}], 0x2, 0x0) shutdown(r7, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x88}]}, &(0x7f0000000080)='syzkaller\x00'}, 0x80) syz_usb_connect(0x5, 0x2d, &(0x7f0000000540)=ANY=[@ANYBLOB="1201000215ff45408107000100010000000109021b0001010010040904170001a27469000905040310000004001b3e310278"], 0x0) 3m17.151887651s ago: executing program 32 (id=11): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$pppl2tp(0x18, 0x1, 0x1) ioctl$TIOCGSERIAL(0xffffffffffffffff, 0x541e, 0x0) r3 = openat$comedi(0xffffffffffffff9c, 0x0, 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, &(0x7f00000000c0)={'8255\x00', [0x4f27, 0x5, 0x22, 0x401, 0x1, 0x6dc4, 0xfff, 0x5c95239c, 0x5, 0x3ff, 0x806, 0x401, 0x1, 0x2, 0x9, 0xe1cb, 0x5, 0x4, 0x3, 0x395, 0x8000008b, 0xfffffffe, 0xa, 0xfffffff5, 0x1, 0x3, 0x0, 0x0, 0x4, 0x8000000, 0xdffffff9]}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, 0x0, 0x0) sendmsg$NFT_MSG_GETSETELEM(r4, &(0x7f0000000680)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000640)={0x0, 0x25b4}}, 0x884) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000800)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELCHAIN={0xbc, 0x5, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0x5}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x60, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x4c355ee5}, @NFTA_HOOK_DEV={0x14, 0x3, 'veth1_to_bond\x00'}, @NFTA_HOOK_DEV={0x14, 0x3, 'dvmrp0\x00'}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x250e2ae7}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_DEV={0x14, 0x3, 'batadv_slave_1\x00'}]}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xffffffffffffffff}, @NFTA_CHAIN_TYPE={0xb, 0x7, 'filter\x00'}, @NFTA_CHAIN_COUNTERS={0x10, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0xe17}]}, @NFTA_CHAIN_TYPE={0xb, 0x7, 'filter\x00'}]}, @NFT_MSG_DELRULE={0x40, 0x8, 0xa, 0xea044eb6b1dd4fab, 0x0, 0x0, {0x7, 0x0, 0x8}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x1}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x14, 0x16, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x2}}], {0x14}}, 0x138}, 0x1, 0x0, 0x0, 0x20008000}, 0x4000) r5 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r5, 0x4c0a, &(0x7f00000002c0)={r6, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x14, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac00", "f4bd000000801900", [0x8, 0xffffffff9673e35d]}}) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000500)={&(0x7f0000000200)="be12953de56f4d9e78c66185fd28c7f906ad3c8b464c49569055e52e0ec133ba41905d64c550193995c4c7eff75fb4", &(0x7f0000000240)=""/78, &(0x7f00000002c0)="aae75df04bb8c379f8dc12b9da1a53c87aea3bb745e336644873eb75242f590c66c5852671dd15e8f009f31ad9026508f4427498db752b8313fb915976cedff7a3991d0b2222864af20bb176f6de38ebca170f4d9605133ee8f256b898d49bd9f25f4a75ef77425fb116d5bea1cbabe6d0a5cb056b37291684a2dbdb76cd68b156309234a9f94e50de27d583d96c3d03e9ca181b4b6c94366ffb97d7ee6f835c64f1dfd265069b322bc0746eb15b60eb1a52d258aa0b76fb1e3584e858464e86c001a44372271cd42b841823bf9dc0", &(0x7f0000000440)="f6bdd8c860a8558ec02a9af56702a80461ee1b9960420f8885f6db6fd6be0e7e62ddd87f74b6530ab5deef3c24261555ce2f3dfe2ead3ec76b889c6a7ec2a04a2bfabd45e67bc78e2b1de7e4434bf16487a32b879de8412d85afcefd7cbaf68e494e4a255d367b83e559f04d7161ace15e84be62f2d435abb78c43006c9c99392d517b3f7ec0cacb5ca0f45da67331dbe521f80d7e6e61e85265659a014895188b210210966571e3f02fe3655ef2c0ecca08ec6ec0667578d95a03553424", 0x7f, r6}, 0x38) r7 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r7, &(0x7f0000000e80)=[{{&(0x7f0000000000)={0xa, 0x4e1f, 0x1, @local, 0x1}, 0x1c, &(0x7f0000001780)=[{&(0x7f0000000040)="a4", 0x1}], 0x1}}, {{&(0x7f0000000080)={0xa, 0x4e22, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x2}, 0x1c, &(0x7f00000007c0)=[{&(0x7f00000001c0)='\x00', 0x1}], 0x1}}], 0x2, 0x0) shutdown(r7, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x88}]}, &(0x7f0000000080)='syzkaller\x00'}, 0x80) syz_usb_connect(0x5, 0x2d, &(0x7f0000000540)=ANY=[@ANYBLOB="1201000215ff45408107000100010000000109021b0001010010040904170001a27469000905040310000004001b3e310278"], 0x0) 1m47.425320918s ago: executing program 1 (id=126): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"/2944], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/rcu_expedited', 0x103801, 0x3) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000001c0)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000000)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000779000/0x1000)=nil, 0x400000, 0x3, 0x2}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) poll(&(0x7f0000000300)=[{r1, 0x10}, {r0, 0x3182}], 0x2, 0xfffffff7) r3 = socket$igmp(0x2, 0x3, 0x2) getsockopt$MRT(r3, 0x0, 0xd0, 0x0, &(0x7f0000000080)) r4 = creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x396) r5 = fanotify_init(0xf00, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) fanotify_mark(r5, 0x541, 0x1001, r4, 0x0) fanotify_mark(r5, 0x105, 0x40009975, r4, 0x0) getsockopt$sock_timeval(r4, 0x1, 0x43, &(0x7f0000000340), &(0x7f0000000380)=0x10) r6 = io_uring_setup(0x57fe, &(0x7f0000000100)={0x0, 0x1f83, 0x0, 0x4, 0x2dd}) io_uring_register$IORING_REGISTER_BUFFERS(r6, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000b80)=@migrate={0xa0, 0x21, 0x1, 0x0, 0xfffffffd, {{@in=@loopback, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0xfffc, 0x0, 0x4e20, 0x0, 0xa, 0xe0, 0x80}, 0x40000002, 0x1}, [@migrate={0x50, 0x11, [{@in6=@ipv4={'\x00', '\xff\xff', @loopback}, @in6=@ipv4={'\x00', '\xff\xff', @private=0xa010102}, @in6=@empty, @in=@private=0xa010100, 0x3c, 0x0, 0x0, 0x0, 0x8, 0xa}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x800}, 0x42000) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/bus/input/devices\x00', 0x0, 0x0) io_setup(0x8, 0x0) io_submit(0x0, 0x1, &(0x7f00000013c0)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x5, 0x0, r8, 0x0}]) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000000)={'syz_tun\x00', &(0x7f0000002fc0)=@ethtool_coalesce={0xe, 0x5, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x40000, 0x1, 0x0, 0x0, 0x47ae1eb}}) syz_emit_ethernet(0x56, &(0x7f0000000180)={@local, @empty, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "a24b9f", 0x20, 0x2b, 0x0, @remote, @local, {[@routing={0x3a, 0x0, 0x2, 0x1}], {0x4e22, 0x0, 0x18, 0x0, @wg=@data}}}}}}, 0x0) move_pages(0x0, 0x20a0, &(0x7f0000000040), &(0x7f0000001180), &(0x7f0000000000), 0x0) mprotect(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x1) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000003b00)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newtaction={0x48, 0x30, 0x727, 0xa00001, 0x0, {}, [{0x34, 0x1, [@m_gact={0x30, 0x1, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1}}}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4004}, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=r1, @ANYBLOB="00000000000000000000000000000000000000003119e1171bd3197ae8c8baa98bbb14f1542366e4c8f30fdbd6158ac858f0477915ba93f5a3d06ef850406f14ec3c375f5a96be3c231fb88d5accebb7fc0a4226ca51ca8576ec2821b713c46a3a516af8352186a3ce6c12b38f4678c036bfa006f0adc85c2d099d05c0a24aa59a3aa39493bc6d5e9bc17f71e5dad47011a8992b6ca320aee29036406e4840", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) 1m42.591955177s ago: executing program 4 (id=132): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x30, &(0x7f0000000300)={@flat=@binder={0x73622a85, 0x100, 0x1}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}, 0x40}], 0x0, 0x0, 0x0}) 1m42.250749209s ago: executing program 4 (id=133): socket$netlink(0x10, 0x3, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$inet6(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x38, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x10, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x10048047}, 0x4000050) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB='8\x00\x00\x00\n'], 0x38}, 0x1, 0x0, 0x0, 0x10048047}, 0x4000050) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) 1m40.115621928s ago: executing program 1 (id=135): syz_pidfd_open(0x0, 0x0) syz_emit_vhci(&(0x7f00000002c0)=ANY=[@ANYBLOB="040e07042d0c"], 0xa) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x74, 0x0, &(0x7f0000000700)="e30080670000ec67838717bd86dde148f0630962bb87dd050042904bcee14db4241544716b9ea4229e230d0000e29953e3bb017d9c1fd0c5acf5bb80efbb4400"/76, 0x0, 0xde0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xc}, 0x50) r0 = syz_open_dev$sg(&(0x7f0000000140), 0x6f5e, 0x0) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000040)=0x85) unshare(0x6020400) socketpair(0x1, 0x3, 0x400005, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) unshare(0xe060000) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/asound/timers\x00', 0x0, 0x0) read$FUSE(r2, &(0x7f0000006c40)={0x2020}, 0x2031) pread64(r2, &(0x7f00000000c0)=""/208, 0xd0, 0x100000001) read$FUSE(0xffffffffffffffff, &(0x7f0000002800)={0x2020}, 0x2020) openat$vicodec1(0xffffffffffffff9c, 0x0, 0x2, 0x0) madvise(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0xe) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000180)="62285c2d9b763570c0f8d9f4eebb3f04bf0cbc7c78c24630ed6118", 0x1b) ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x8) 1m38.343164084s ago: executing program 4 (id=137): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x404000c}, 0x40000) r0 = socket$igmp6(0xa, 0x3, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$dvb_frontend(&(0x7f0000000040), 0x0, 0x0) ioctl$FE_SET_PROPERTY(r2, 0x40086f52, &(0x7f0000000000)={0x3c, &(0x7f0000000100)}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_SIOCINQ(r5, 0x541b, &(0x7f0000000180)) r6 = socket$inet6(0xa, 0x6, 0x600e) setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x25, &(0x7f0000000000)=0x6d93, 0x4) sendmsg$sock(r6, &(0x7f0000000780)={&(0x7f0000000300)=@in6={0xa, 0x4e21, 0x41d, @ipv4={'\x00', '\xff\xff', @private=0xa010105}, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000000040)=[@mark={{0x10, 0x1, 0x24, 0x800}}, @mark={{0x10, 0x1, 0x51, 0x108}}], 0x20}, 0x80) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x5, &(0x7f0000000300)=ANY=[@ANYRES32=r0], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) openat$fb0(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r8, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) 1m35.677187161s ago: executing program 1 (id=140): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) socket$can_raw(0x1d, 0x3, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) write$sndseq(0xffffffffffffffff, &(0x7f0000000180)=[{0x0, 0x47, 0xd, 0x0, @tick, {0x40, 0xff}, {0x10, 0x9}, @note={0xa, 0x8, 0xb0, 0x9, 0x3}}, {0x0, 0x0, 0x0, 0x0, @tick=0x46f, {}, {0x80, 0x1}, @connect={{0x40, 0x7}, {0x80, 0xf6}}}], 0x38) write$sndseq(0xffffffffffffffff, &(0x7f00000005c0), 0x0) read$snapshot(0xffffffffffffffff, 0x0, 0xffffffbf) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r4, 0x0, 0x33, &(0x7f0000000000)=0x80020000, 0x4) listen(r4, 0x2) close_range(r3, 0xffffffffffffffff, 0x0) 1m31.6852886s ago: executing program 1 (id=141): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYRESDEC], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r2 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r3 = fcntl$dupfd(r2, 0x0, r2) write$sndseq(r3, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, @tick=0x46f, {}, {0x80, 0x1}, @connect={{0x40, 0x7}, {0x80, 0xf6}}}], 0x1c) read$snapshot(r3, 0x0, 0xffffffbf) 1m30.627817169s ago: executing program 1 (id=142): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r2 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f00000006c0)={0x40006, 0x4, 0x8}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x7fff, 0x8, 0x100}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f00000001c0)={0x7, 0x1, 0x7}) close_range(r0, 0xffffffffffffffff, 0x0) 1m30.153210556s ago: executing program 1 (id=143): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) socket$can_raw(0x1d, 0x3, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) fcntl$dupfd(r3, 0x0, r3) 1m29.44299475s ago: executing program 4 (id=145): r0 = socket$kcm(0x10, 0x2, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net/netstat\x00') openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYRESDEC, @ANYRESDEC], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='memory.events.local\x00', 0x0, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000000c0)) getrusage(0x0, &(0x7f0000000340)) mount(0x0, &(0x7f0000000240)='.\x00', &(0x7f000015bffc)='nfs\x00', 0x0, &(0x7f0000000000)) syslog(0x3, &(0x7f0000000700)=""/231, 0xe7) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f0000000400)={0x0, 'batadv0\x00', {0x5}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@ipv6_newrule={0x38, 0x20, 0x1, 0x70bd2d, 0x0, {0xa, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x1}, [@FRA_SRC={0x14, 0x2, @private2}, @FIB_RULE_POLICY=@FRA_L3MDEV={0x5, 0x19, 0x1}]}, 0x38}}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r4, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_getaddrlabel={0x1c, 0x1a, 0x1, 0x0, 0x0, {0x2, 0x0, 0x20, 0x0, 0x0, 0x7f000001}}, 0x1c}}, 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x2204880, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x20) 1m25.990244266s ago: executing program 4 (id=146): socket$netlink(0x10, 0x3, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$inet6(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x38, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x10, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x10048047}, 0x4000050) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB='8\x00\x00\x00\n'], 0x38}, 0x1, 0x0, 0x0, 0x10048047}, 0x4000050) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) 1m25.320986114s ago: executing program 4 (id=147): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000a40), 0x5d, 0x4000000) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_open_dev$sg(&(0x7f00000003c0), 0x4a38, 0x201) ioctl$SG_IO(r2, 0x2285, &(0x7f00000000c0)={0x53, 0xfffffffffffffffe, 0x6, 0xb4, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000340)="a6823ac6aeb3", 0x0, 0x2, 0x10023, 0xfffffffd, 0x0}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) syz_usb_connect(0x5, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, &(0x7f0000000080)) syz_usb_connect$cdc_ecm(0x6, 0x5a, &(0x7f00000001c0)=ANY=[], 0x0) iopl(0x3) ioperm(0x0, 0x8001, 0x9) iopl(0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) r6 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r5, @ANYBLOB="00000000000000001c001a800800028008000200080000003e120000080002001040e5"], 0x44}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000000c0)={'bridge0\x00'}) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x2000000, {0x0, 0x0, 0x0, r5, {}, {}, {0xfff3}}}, 0x24}}, 0x0) 1m14.362718017s ago: executing program 33 (id=143): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) socket$can_raw(0x1d, 0x3, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) fcntl$dupfd(r3, 0x0, r3) 1m8.796853514s ago: executing program 34 (id=147): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000a40), 0x5d, 0x4000000) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_open_dev$sg(&(0x7f00000003c0), 0x4a38, 0x201) ioctl$SG_IO(r2, 0x2285, &(0x7f00000000c0)={0x53, 0xfffffffffffffffe, 0x6, 0xb4, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000340)="a6823ac6aeb3", 0x0, 0x2, 0x10023, 0xfffffffd, 0x0}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) syz_usb_connect(0x5, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, &(0x7f0000000080)) syz_usb_connect$cdc_ecm(0x6, 0x5a, &(0x7f00000001c0)=ANY=[], 0x0) iopl(0x3) ioperm(0x0, 0x8001, 0x9) iopl(0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) r6 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r5, @ANYBLOB="00000000000000001c001a800800028008000200080000003e120000080002001040e5"], 0x44}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000000c0)={'bridge0\x00'}) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x2000000, {0x0, 0x0, 0x0, r5, {}, {}, {0xfff3}}}, 0x24}}, 0x0) 15.347113126s ago: executing program 0 (id=205): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = getpid() socket$igmp6(0xa, 0x3, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(r0, 0xe, &(0x7f0000000140)={0x8, 0x1}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) request_key(0x0, 0x0, 0x0, 0x0) r4 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r4, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback, 0x3}, 0x31) r5 = syz_init_net_socket$ax25(0x3, 0x3, 0x1) setsockopt$ax25_int(r5, 0x101, 0x8, &(0x7f0000000200)=0x371, 0x4) r6 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r6, &(0x7f0000000100)={0xa, 0x0, 0x0, @private1, 0x200000}, 0x1c) sendto$inet6(r6, &(0x7f00000001c0)='O', 0x1, 0x4000c01, &(0x7f0000000280)={0xa, 0x400, 0xfffffffe, @private2={0xfc, 0x2, '\x00', 0x1}, 0x3}, 0x1c) shutdown(r6, 0x1) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r6, 0x84, 0x7b, &(0x7f0000000000)={0x0, 0x4}, 0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r6, 0x84, 0x7c, &(0x7f00000000c0), &(0x7f0000000180)=0x8) sendmmsg$inet6(r4, &(0x7f0000002940), 0x40000000000017d, 0x811) openat$fb0(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) 11.03415437s ago: executing program 0 (id=209): socket$inet6_sctp(0xa, 0x1, 0x84) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) syz_open_dev$sndmidi(&(0x7f0000000180), 0x2, 0x141101) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) r0 = syz_io_uring_setup(0x239, &(0x7f00000002c0)={0x0, 0x400d7ed, 0x10100, 0x0, 0x2cc}, &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd, 0x0, 0x0, 0x0, {0x90c0}, 0x1}) io_uring_enter(r0, 0x2ded, 0x4000, 0x0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) r4 = openat$cgroup_type(r3, &(0x7f0000000140), 0x2, 0x0) write$cgroup_type(r4, &(0x7f0000000280), 0x9) r5 = openat$cgroup_procs(r3, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f0000000c40), 0x12) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_ro(r6, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r7, &(0x7f0000000200)=0x1, 0x12) 10.110665334s ago: executing program 0 (id=210): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000040)=ANY=[@ANYRES32], &(0x7f0000000300)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x7b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x38}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000400)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0) mount$9p_virtio(0x0, 0x0, 0x0, 0x20000cc, 0x0) r3 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) keyctl$unlink(0x9, 0x0, r3) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, 0x0, 0x20000000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="21afcce72c8edf7d00000000010000009500000000000000"], 0x0, 0x5, 0x0, 0x0, 0x40f00, 0x40, '\x00', r4, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xff}, 0x94) dup(0xffffffffffffffff) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42f82, 0x0) 7.479404693s ago: executing program 0 (id=211): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_usb_connect$cdc_ncm(0x2, 0x17d, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109026b010201f1ff0f0904000001020d0000052406000105240000000d240f0100010000d6be00000006241a00002003241305"], 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) r2 = socket$nl_generic(0x10, 0x3, 0x10) bind$vsock_stream(r2, &(0x7f0000000000)={0x10}, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), r2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000340)={'batadv_slave_0\x00', 0x0}) sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x4c, r3, 0x8, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_GW_SEL_CLASS={0x8}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r4}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x40}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0xc0}, 0x40) r5 = syz_open_procfs(0x0, 0x0) syz_emit_vhci(&(0x7f0000000780)=ANY=[@ANYBLOB="02c93010000c00050017050800"], 0x15) lseek(r5, 0x8001, 0x1) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000020000000900010073797a300000000048000000030a01010000000000000000020000000900010073797a30000000000900030073797a3200000000080007006e6174001400048008000140000000000800024000000000140000"], 0xa4}}, 0x0) r7 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r8 = dup3(r0, r7, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600707, 0x18) ioctl$PPPIOCSPASS(r5, 0x40107447, &(0x7f00000004c0)={0x7, &(0x7f0000000480)=[{0x216, 0xb5, 0x5}, {0x0, 0x3, 0x2, 0x9}, {0x6, 0x4, 0x3, 0x80000000}, {0x58, 0x7, 0x0, 0x9}, {0x3, 0x2, 0xc9, 0x796e}, {0x7, 0x3, 0x3}, {0x1, 0x7, 0x9, 0x7fffffff}]}) r9 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r9, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000200)=r10}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000280)={r11, &(0x7f0000000100), 0x0}, 0x20) mkdirat(r8, &(0x7f0000000100)='./file0\x00', 0x10) connect$unix(r8, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e) ioctl$IOCTL_VMCI_GET_CONTEXT_ID(r8, 0x7b3, &(0x7f0000000000)) 6.369483676s ago: executing program 2 (id=212): syz_pidfd_open(0x0, 0x0) syz_emit_vhci(&(0x7f00000002c0)=ANY=[@ANYBLOB="040e07042d0c"], 0xa) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x74, 0x0, &(0x7f0000000700)="e30080670000ec67838717bd86dde148f0630962bb87dd050042904bcee14db4241544716b9ea4229e230d0000e29953e3bb017d9c1fd0c5acf5bb80efbb4400"/76, 0x0, 0xde0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xc}, 0x50) r0 = syz_open_dev$sg(&(0x7f0000000140), 0x6f5e, 0x0) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000040)=0x85) unshare(0x6020400) socketpair(0x1, 0x3, 0x400005, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) unshare(0xe060000) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/asound/timers\x00', 0x0, 0x0) read$FUSE(r2, &(0x7f0000006c40)={0x2020}, 0x2031) pread64(r2, &(0x7f00000000c0)=""/208, 0xd0, 0x100000001) read$FUSE(0xffffffffffffffff, &(0x7f0000002800)={0x2020}, 0x2020) openat$vicodec1(0xffffffffffffff9c, 0x0, 0x2, 0x0) madvise(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0xe) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000500)={0xffffffffffffffff, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0xffffffffffffffe1, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000180)="62285c2d9b763570c0f8d9f4eebb", 0xe) ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x8) 6.153008801s ago: executing program 2 (id=213): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r3, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000004c0), &(0x7f0000000500)=[0x2]}}, 0x40) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000100), 0x0, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r6, &(0x7f0000000280)={0x2, 0x4e21, @multicast1}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000040)='dctcp', 0x5) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) connect$inet(r6, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r6, &(0x7f0000000000), 0xffffffffffffff94, 0x12, 0x0, 0x12) recvfrom$inet(r6, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) ioctl$FBIOGETCMAP(0xffffffffffffffff, 0x4604, 0x0) 4.849543053s ago: executing program 0 (id=214): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) shutdown(0xffffffffffffffff, 0x1) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000040)='c:::\x00', 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000440)='\x00'/16, 0x10) r4 = accept4(r3, 0x0, 0x0, 0x80000) r5 = accept4(r4, 0x0, 0x0, 0x80800) sendmmsg$inet6(r5, &(0x7f0000003b80)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7000300}}, {{0x0, 0x0, 0x0}, 0xff03}], 0x2, 0x8000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 4.400099438s ago: executing program 2 (id=215): sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8) r0 = ioctl$UDMABUF_CREATE_LIST(0xffffffffffffffff, 0x40087543, &(0x7f0000000040)) syz_open_dev$dri(0x0, 0x4, 0x2c8000) ioctl$XFS_IOC_FD_TO_HANDLE(r0, 0xc038586a, 0x0) io_uring_setup(0x70c3, &(0x7f0000000400)={0x0, 0x2c45, 0x400, 0x3, 0x3b4}) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x2002, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r3 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r3, 0x0, 0x0) r4 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r4, &(0x7f0000000100)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r4, 0x80047437, &(0x7f0000000080)) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$PPPIOCATTCHAN(r5, 0x40047438, &(0x7f0000000040)=0x2) ioctl$PPPIOCBRIDGECHAN(r5, 0x40047435, &(0x7f0000000200)=0x1) sendmmsg(r4, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0) 4.049516564s ago: executing program 2 (id=216): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3.23601297s ago: executing program 0 (id=217): ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000340)={0x0, 0x8000000002, 0x0, [0x802f, 0xffffffff, 0x9, 0x1, 0x6], [0x1000000000000002, 0x10000002, 0x1, 0x2, 0x7ffd, 0xffffffffffff99b9, 0x5, 0x8000000000000001, 0x9, 0xffff, 0x9, 0x1, 0xfc5, 0xfffffffffffffff4, 0x8e3f, 0xfffffffffffffffa, 0x100, 0xd, 0xd9, 0x90, 0xf0, 0x800000000002a9, 0x19, 0x0, 0x3, 0x0, 0xa, 0x20000000003, 0xa53, 0x2, 0x6, 0x7, 0x0, 0xfffffffffffffffa, 0x80, 0x3, 0x80, 0x931, 0x101, 0x3, 0x8004, 0x19a0, 0x101, 0x1, 0xb, 0x8, 0x1, 0x2, 0x1, 0x400083, 0x538a, 0x8001, 0xda, 0x4, 0x0, 0x803, 0x8000005, 0xb, 0x3, 0x77, 0x4, 0x800, 0x7, 0x7, 0x3, 0xffffffffffffffff, 0x4, 0x8000, 0x12f, 0x8, 0x6, 0xfffffffffffffffc, 0x82c, 0x7ff, 0x3, 0x2, 0x2, 0x4, 0x3, 0x5, 0x100000001, 0x800, 0x1, 0xe773, 0x2, 0x8, 0x10000000, 0x6, 0xe, 0x9, 0x100000001, 0x400004, 0x800000008, 0x7, 0x9, 0x10000, 0x6, 0x1, 0x16d, 0x2, 0x8, 0xffffffffffff43b3, 0x8, 0x5eb, 0x12, 0x0, 0x0, 0x3, 0x4, 0x7, 0x3ff, 0x0, 0x8, 0x5, 0x0, 0x2, 0x40, 0x80000001, 0x7, 0x101, 0x1]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001400)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x120) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x8c, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x2, @empty, 0x7}], 0x1c) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r3, 0x4b72, &(0x7f0000000080)={0x4, 0x1, 0x17, 0x1, 0x100, &(0x7f0000000440)="387ed7626d850509a2d6c1aa38f15cd0c234cb226db671261fff7ce9c555f18dafae3530db6dd493f2a3cc88731b9ae21b3e3b4523ae2594f47d8f62b480c4160b1f90ac9c41fae6ab12ac4c113fef588684ef494c89092883b902a41cd75387ef6f7bc7d461d5e665f398ff95596dc94ec97003c7e6f3c82fbd8de6e11aa4031a61c51caf7a65a2b613bda33f3eaeae635d7cd81761e74c38a7695800a15516eb337056e02335f9a750ecb3421143c5c4ded0f06affc524dcf3418272619b6a952db5bc96141b26c54d13c7a5416287a3b6f7aadf50bc549974b6401a19cdb130282b955582efa94242065a4c8d695a2cdd9ada350defd58c775b92d348305774d3a256c7520b285d8ddbf5e20d604413ed2ddf9bcbf881caf811852806175d638909f6234fbcd7a88a2a0aea45d19148f0e7dada7d6d0d77881387fdeaa0284a3e90b88dfff412bff40c31c6415c54ae3335e54a49d315851feffe30d999c36def9122c0d2c1e558dc6586958a283762386ecf369274e43003a0fdff59ea515eb44504901ef0d00baa91c10a8e44a7e58b4f8c6a1c6b9b5ad389977467f306f9bcde071b30769795eed2f1580414d168f557cd90040c4bd2a3d6bc5092548feaef72c5d42cece59181fcb5bad8c24bd9f8f78dd85b82831325501e80d899e9252f99d3a266639438ac5252d9bccff4dd9f45657f8224fc78eb1168fe0527fac33466aadf48f16994d29a47778566e0f3945b2b046c6eecc7fa18914beb66ac9e519bd333b30d3ce2f50dddeea3447aebbe3bed781e39d5a0fb0cdc60e196f2261305feb596b68986af3eee7b199fefb5f79ffb2d1050e46982af1c14a88dd9000400002f56a8404755c73e74bb90e64bab9647c70ed5afca1c3d87907d01000100df6f40a80ace2bb8a2aad3b0c66915927db4233181943d88c0c76d5969e2043db5bd77fd600000013139929cefec965c0c761785a4d23332ba1f0875e3146afef5b20cc306d3ecee65944fe9829ed0c3f6bb2fd81bc31152538db50f47dc38ba908a0d808687e478a609fe0daa02d4e9c618b99266e7f2e98597e2813e1dba9c3c16e9fab3bda6ed33cb1c75513e2264b69d472dd0e1aa1ab704782b41bde141f99c4894ded98eff9aa53d22eb77c9d93169c04ab2490bf28106f770e07eb7a9e87dde71929f918b98c413923167f493760278df0cc34be9e8f86f948d9a62e63ad6ca9d2195ff9c6320c85bddc42915e4f3a5db642447bc2195a3d64e04c9ecd1c313c08e29a814bd8fed1ab6d2846c73345962895d289ac718aacac2e0e32b75ce814731c542091f218dd1e68a15f8226577bf9481ae0555db64a717eb23a811356d00"}) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = socket(0x21, 0x2, 0x10000000000002) connect$rxrpc(r4, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x8000, @multicast2}}, 0x24) sendmmsg(r4, &(0x7f0000007840)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="100000001001000001"], 0x10, 0xe000}, 0x5}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0c00000019000000060000000c0000000801000003000000771e4147994bd7364839c067ae90a7e57eee2869f2e7bcd42936848ea7910e1f1f702631dfe63d5b6c384c4715765224326b9ce4633f4a8705143d886e0a8cd45339c3edfcaea95048b85a6022a36c7e2711f2fca101d34752b66535ab0b10b8"], 0x18}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000073c0)}}], 0x4, 0x0) 1.934955768s ago: executing program 2 (id=218): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000040)=ANY=[@ANYRES32], &(0x7f0000000300)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x7b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x38}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000400)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0) mount$9p_virtio(0x0, 0x0, 0x0, 0x20000cc, 0x0) r3 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) keyctl$unlink(0x9, 0x0, r3) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, 0x0, 0x20000000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="21afcce72c8edf7d00000000010000009500000000000000"], 0x0, 0x5, 0x0, 0x0, 0x40f00, 0x40, '\x00', r4, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xff}, 0x94) dup(0xffffffffffffffff) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42f82, 0x0) 0s ago: executing program 2 (id=219): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mount(0x0, 0x0, 0x0, 0x44021, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1, 0x100007, 0x4, 0x25, 0x1, 0xffffffffffffffff, 0x400000}, 0x50) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x1b, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x2, r2}, 0x38) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.81' (ED25519) to the list of known hosts. [ 89.250418][ T5779] cgroup: Unknown subsys name 'net' [ 89.491687][ T5779] cgroup: Unknown subsys name 'cpuset' [ 89.546716][ T5779] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 91.483332][ T5779] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 92.055893][ T823] cfg80211: failed to load regulatory.db [ 93.988776][ T5802] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 93.999779][ T5805] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 94.002052][ T5805] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 94.002698][ T5805] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 94.005081][ T5805] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 94.037259][ T5805] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 94.045190][ T5807] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 94.053384][ T5805] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 94.054639][ T5805] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 94.064529][ T5808] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 94.066207][ T5809] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 94.066712][ T5809] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 94.068461][ T5809] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 94.068606][ T5809] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 94.070514][ T5808] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 94.076665][ T5808] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 94.084488][ T5809] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 94.084588][ T5808] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 94.086439][ T5809] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 94.091252][ T5809] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 94.096648][ T5809] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 94.096713][ T5802] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 94.100596][ T5809] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 94.102363][ T5809] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 94.116284][ T60] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 95.059595][ T5792] chnl_net:caif_netlink_parms(): no params data found [ 95.205439][ T5794] chnl_net:caif_netlink_parms(): no params data found [ 95.254821][ T5791] chnl_net:caif_netlink_parms(): no params data found [ 95.314270][ T5793] chnl_net:caif_netlink_parms(): no params data found [ 95.328578][ T5795] chnl_net:caif_netlink_parms(): no params data found [ 95.561389][ T5792] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.561487][ T5792] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.561629][ T5792] bridge_slave_0: entered allmulticast mode [ 95.563872][ T5792] bridge_slave_0: entered promiscuous mode [ 95.634346][ T5792] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.634433][ T5792] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.634568][ T5792] bridge_slave_1: entered allmulticast mode [ 95.640626][ T5792] bridge_slave_1: entered promiscuous mode [ 95.727530][ T5794] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.727730][ T5794] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.727866][ T5794] bridge_slave_0: entered allmulticast mode [ 95.729687][ T5794] bridge_slave_0: entered promiscuous mode [ 95.812700][ T5794] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.812788][ T5794] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.812920][ T5794] bridge_slave_1: entered allmulticast mode [ 95.814709][ T5794] bridge_slave_1: entered promiscuous mode [ 95.836938][ T5791] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.837274][ T5791] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.837909][ T5791] bridge_slave_0: entered allmulticast mode [ 95.845355][ T5791] bridge_slave_0: entered promiscuous mode [ 95.901934][ T5792] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 95.923490][ T5791] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.923600][ T5791] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.923727][ T5791] bridge_slave_1: entered allmulticast mode [ 95.925570][ T5791] bridge_slave_1: entered promiscuous mode [ 95.955428][ T5793] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.955547][ T5793] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.955677][ T5793] bridge_slave_0: entered allmulticast mode [ 95.963367][ T5793] bridge_slave_0: entered promiscuous mode [ 95.996869][ T5795] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.996966][ T5795] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.997137][ T5795] bridge_slave_0: entered allmulticast mode [ 95.999142][ T5795] bridge_slave_0: entered promiscuous mode [ 96.033097][ T5792] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 96.068913][ T5793] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.069039][ T5793] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.069389][ T5793] bridge_slave_1: entered allmulticast mode [ 96.071263][ T5793] bridge_slave_1: entered promiscuous mode [ 96.074099][ T5795] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.074203][ T5795] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.074546][ T5795] bridge_slave_1: entered allmulticast mode [ 96.122921][ T5795] bridge_slave_1: entered promiscuous mode [ 96.145466][ T5794] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 96.208334][ T5797] Bluetooth: hci3: command tx timeout [ 96.208339][ T5110] Bluetooth: hci2: command tx timeout [ 96.208489][ T5797] Bluetooth: hci1: command tx timeout [ 96.208499][ T5110] Bluetooth: hci0: command tx timeout [ 96.214848][ T5794] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 96.250377][ T5791] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 96.287650][ T60] Bluetooth: hci4: command tx timeout [ 96.307067][ T5792] team0: Port device team_slave_0 added [ 96.334345][ T5791] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 96.347058][ T5793] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 96.349921][ T5795] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 96.352359][ T5792] team0: Port device team_slave_1 added [ 96.402206][ T5793] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 96.404774][ T5795] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 96.435612][ T5794] team0: Port device team_slave_0 added [ 96.500143][ T5794] team0: Port device team_slave_1 added [ 96.502137][ T5791] team0: Port device team_slave_0 added [ 96.543613][ T5792] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 96.543627][ T5792] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 96.543646][ T5792] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 96.594866][ T5791] team0: Port device team_slave_1 added [ 96.602303][ T5793] team0: Port device team_slave_0 added [ 96.604635][ T5795] team0: Port device team_slave_0 added [ 96.605745][ T5792] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 96.605756][ T5792] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 96.605775][ T5792] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 96.681116][ T5793] team0: Port device team_slave_1 added [ 96.683083][ T5795] team0: Port device team_slave_1 added [ 96.704648][ T5794] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 96.704669][ T5794] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 96.704692][ T5794] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 96.785457][ T5794] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 96.785476][ T5794] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 96.785504][ T5794] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 96.793885][ T5791] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 96.793936][ T5791] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 96.793982][ T5791] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 96.893834][ T5791] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 96.893853][ T5791] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 96.893881][ T5791] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 96.895517][ T5793] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 96.895528][ T5793] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 96.895547][ T5793] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 96.959598][ T5795] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 96.959645][ T5795] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 96.959714][ T5795] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 97.030571][ T5793] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 97.030584][ T5793] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 97.030604][ T5793] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 97.084229][ T5795] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 97.084247][ T5795] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 97.084276][ T5795] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 97.673616][ T5792] hsr_slave_0: entered promiscuous mode [ 97.674782][ T5792] hsr_slave_1: entered promiscuous mode [ 97.751607][ T5794] hsr_slave_0: entered promiscuous mode [ 97.752570][ T5794] hsr_slave_1: entered promiscuous mode [ 97.753363][ T5794] debugfs: 'hsr0' already exists in 'hsr' [ 97.753454][ T5794] Cannot create hsr debugfs directory [ 97.842095][ T5791] hsr_slave_0: entered promiscuous mode [ 97.843064][ T5791] hsr_slave_1: entered promiscuous mode [ 97.843757][ T5791] debugfs: 'hsr0' already exists in 'hsr' [ 97.843775][ T5791] Cannot create hsr debugfs directory [ 97.907509][ T5793] hsr_slave_0: entered promiscuous mode [ 97.908468][ T5793] hsr_slave_1: entered promiscuous mode [ 97.909141][ T5793] debugfs: 'hsr0' already exists in 'hsr' [ 97.909159][ T5793] Cannot create hsr debugfs directory [ 97.947289][ T5795] hsr_slave_0: entered promiscuous mode [ 97.948273][ T5795] hsr_slave_1: entered promiscuous mode [ 97.948943][ T5795] debugfs: 'hsr0' already exists in 'hsr' [ 97.948961][ T5795] Cannot create hsr debugfs directory [ 98.286225][ T60] Bluetooth: hci0: command tx timeout [ 98.286257][ T5110] Bluetooth: hci2: command tx timeout [ 98.286269][ T60] Bluetooth: hci1: command tx timeout [ 98.286283][ T5110] Bluetooth: hci3: command tx timeout [ 98.366215][ T5797] Bluetooth: hci4: command tx timeout [ 98.990404][ T5792] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 99.035714][ T5792] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 99.071824][ T5792] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 99.126194][ T5792] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 99.231944][ T5794] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 99.273848][ T5794] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 99.291975][ T5794] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 99.348966][ T5794] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 99.486618][ T5791] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 99.533582][ T5791] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 99.563966][ T5791] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 99.610657][ T5791] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 99.752310][ T5793] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 99.784359][ T5793] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 99.812567][ T5793] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 99.861110][ T5793] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 99.984816][ T5792] 8021q: adding VLAN 0 to HW filter on device bond0 [ 100.009709][ T5795] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 100.049506][ T5795] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 100.095240][ T5795] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 100.131766][ T5795] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 100.189408][ T5792] 8021q: adding VLAN 0 to HW filter on device team0 [ 100.237374][ T1119] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.237547][ T1119] bridge0: port 1(bridge_slave_0) entered forwarding state [ 100.270870][ T5794] 8021q: adding VLAN 0 to HW filter on device bond0 [ 100.310840][ T1294] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.310956][ T1294] bridge0: port 2(bridge_slave_1) entered forwarding state [ 100.366306][ T60] Bluetooth: hci2: command tx timeout [ 100.366340][ T60] Bluetooth: hci3: command tx timeout [ 100.366363][ T60] Bluetooth: hci0: command tx timeout [ 100.366562][ T5797] Bluetooth: hci1: command tx timeout [ 100.408836][ T5794] 8021q: adding VLAN 0 to HW filter on device team0 [ 100.446618][ T5797] Bluetooth: hci4: command tx timeout [ 100.470231][ T1119] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.470381][ T1119] bridge0: port 1(bridge_slave_0) entered forwarding state [ 100.494043][ T5791] 8021q: adding VLAN 0 to HW filter on device bond0 [ 100.522315][ T67] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.522542][ T67] bridge0: port 2(bridge_slave_1) entered forwarding state [ 100.612668][ T5791] 8021q: adding VLAN 0 to HW filter on device team0 [ 100.654336][ T1119] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.655251][ T1119] bridge0: port 1(bridge_slave_0) entered forwarding state [ 100.675058][ T5793] 8021q: adding VLAN 0 to HW filter on device bond0 [ 100.714889][ T67] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.715107][ T67] bridge0: port 2(bridge_slave_1) entered forwarding state [ 100.813367][ T5793] 8021q: adding VLAN 0 to HW filter on device team0 [ 100.838918][ T5795] 8021q: adding VLAN 0 to HW filter on device bond0 [ 100.889394][ T67] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.892254][ T67] bridge0: port 1(bridge_slave_0) entered forwarding state [ 100.940753][ T67] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.940990][ T67] bridge0: port 2(bridge_slave_1) entered forwarding state [ 101.030619][ T5795] 8021q: adding VLAN 0 to HW filter on device team0 [ 101.090339][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.090432][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 101.150932][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.158009][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 101.232738][ T5792] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 101.360933][ T5794] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 101.522773][ T5792] veth0_vlan: entered promiscuous mode [ 101.607597][ T5792] veth1_vlan: entered promiscuous mode [ 101.645312][ T5791] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 101.712109][ T5794] veth0_vlan: entered promiscuous mode [ 101.762404][ T5794] veth1_vlan: entered promiscuous mode [ 101.835096][ T5792] veth0_macvtap: entered promiscuous mode [ 101.860788][ T5792] veth1_macvtap: entered promiscuous mode [ 101.893412][ T5793] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 101.932016][ T5791] veth0_vlan: entered promiscuous mode [ 101.945474][ T5795] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 101.960102][ T5794] veth0_macvtap: entered promiscuous mode [ 101.972935][ T5792] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 102.009740][ T5794] veth1_macvtap: entered promiscuous mode [ 102.013037][ T5791] veth1_vlan: entered promiscuous mode [ 102.031417][ T5792] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 102.089304][ T69] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.104442][ T69] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.121616][ T69] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.141145][ T69] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.159768][ T5794] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 102.231111][ T5794] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 102.324980][ T1294] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.339854][ T1294] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.341551][ T5793] veth0_vlan: entered promiscuous mode [ 102.377199][ T1294] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.379177][ T5791] veth0_macvtap: entered promiscuous mode [ 102.401020][ T1294] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.442253][ T5791] veth1_macvtap: entered promiscuous mode [ 102.446121][ T5797] Bluetooth: hci1: command tx timeout [ 102.446153][ T5797] Bluetooth: hci0: command tx timeout [ 102.446176][ T5797] Bluetooth: hci3: command tx timeout [ 102.446197][ T5797] Bluetooth: hci2: command tx timeout [ 102.483237][ T5793] veth1_vlan: entered promiscuous mode [ 102.526227][ T5110] Bluetooth: hci4: command tx timeout [ 102.646232][ T1294] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.646260][ T1294] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.744437][ T5791] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 102.793551][ T5791] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 102.837668][ T67] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.837689][ T67] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.881235][ T67] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.921073][ T67] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.950213][ T67] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.971007][ T67] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.974310][ T67] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.974331][ T67] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.975120][ T5793] veth0_macvtap: entered promiscuous mode [ 103.094607][ T5793] veth1_macvtap: entered promiscuous mode [ 103.145282][ T5795] veth0_vlan: entered promiscuous mode [ 103.223717][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.223739][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.346040][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 103.356031][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 103.366009][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 103.376009][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 103.386015][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 103.396005][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 103.406003][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 103.416010][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 103.426007][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 103.564391][ T5795] veth1_vlan: entered promiscuous mode [ 103.601178][ T5793] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 103.655771][ T5793] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 103.663480][ T69] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.663501][ T69] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.706555][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 103.885244][ T1347] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.003544][ T1347] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.045660][ T1347] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.067354][ T1347] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.155162][ T5912] ieee802154 phy0 wpan0: encryption failed: -22 [ 104.200801][ T69] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.200824][ T69] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.327008][ T5795] veth0_macvtap: entered promiscuous mode [ 104.416344][ T36] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 104.472223][ T5795] veth1_macvtap: entered promiscuous mode [ 104.657340][ T36] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 104.657360][ T36] usb 1-1: config 0 has no interfaces? [ 104.664021][ T36] usb 1-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 104.664050][ T36] usb 1-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 104.664072][ T36] usb 1-1: Product: syz [ 104.664082][ T36] usb 1-1: SerialNumber: syz [ 104.740421][ T36] usb 1-1: config 0 descriptor?? [ 104.854766][ T1175] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.854789][ T1175] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.908094][ T5795] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 105.426030][ T5920] ODEBUG: Out of memory. ODEBUG disabled [ 105.722447][ T5795] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 105.723368][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.723388][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.897588][ T1119] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.898452][ T1119] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.898652][ T1119] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.898983][ T1119] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.147846][ T36] usb 1-1: USB disconnect, device number 2 [ 106.706429][ T1294] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.706452][ T1294] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.056897][ T1347] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.056921][ T1347] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.208077][ T5935] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6'. [ 107.208096][ T5935] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6'. [ 107.284635][ T5937] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6'. [ 108.306163][ T5881] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 108.406876][ T5940] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 108.503399][ T5881] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 108.503434][ T5881] usb 2-1: config 0 has no interfaces? [ 108.508576][ T5881] usb 2-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 108.508670][ T5881] usb 2-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 108.508724][ T5881] usb 2-1: Product: syz [ 108.508766][ T5881] usb 2-1: SerialNumber: syz [ 108.588772][ T5881] usb 2-1: config 0 descriptor?? [ 109.646492][ T10] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 109.715534][ T808] usb 2-1: USB disconnect, device number 2 [ 109.815463][ T10] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 109.815495][ T10] usb 5-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 109.815515][ T10] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 109.815656][ T10] usb 5-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 109.815683][ T10] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 109.815711][ T10] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 109.887830][ T10] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 109.887858][ T10] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 109.887873][ T10] usb 5-1: Product: syz [ 109.887883][ T10] usb 5-1: Manufacturer: syz [ 109.925087][ T5944] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 110.193809][ T10] cdc_wdm 5-1:1.0: skipping garbage [ 110.193825][ T10] cdc_wdm 5-1:1.0: skipping garbage [ 110.212444][ T5944] capability: warning: `syz.4.5' uses deprecated v2 capabilities in a way that may be insecure [ 111.178793][ T5951] 9pnet_virtio: no channels available for device syz [ 111.209930][ T10] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 111.209967][ T10] cdc_wdm 5-1:1.0: Unknown control protocol [ 112.913296][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 112.913385][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 112.913675][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 112.913697][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 112.913927][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 112.913948][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 112.914178][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 112.914198][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 112.914548][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 112.914572][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 112.914818][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 112.914839][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 112.915069][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 112.915090][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 112.915325][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 112.915346][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 112.915576][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 112.915597][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 112.915827][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 112.915850][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 112.948566][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - usb_submit_urb failed with result -1 [ 113.176169][ T5800] usb 5-1: USB disconnect, device number 2 [ 114.345134][ T5962] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 114.348854][ T5962] netlink: 12 bytes leftover after parsing attributes in process `syz.0.13'. [ 114.357744][ T5962] loop2: detected capacity change from 0 to 7 [ 114.378640][ T5962] Dev loop2: unable to read RDB block 7 [ 114.378686][ T5962] loop2: AHDI p1 p2 p3 [ 114.378715][ T5962] loop2: partition table partially beyond EOD, truncated [ 114.379778][ T5962] loop2: p1 start 1601398130 is beyond EOD, truncated [ 114.379803][ T5962] loop2: p2 start 1702059890 is beyond EOD, truncated [ 114.946331][ T5881] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 115.168438][ T5881] usb 4-1: config 1 has an invalid interface number: 23 but max is 0 [ 115.168468][ T5881] usb 4-1: config 1 has no interface number 0 [ 115.168515][ T5881] usb 4-1: config 1 interface 23 altsetting 0 endpoint 0x4 has an invalid bInterval 0, changing to 7 [ 115.168558][ T5881] usb 4-1: New USB device found, idVendor=0781, idProduct=0100, bcdDevice= 1.00 [ 115.168583][ T5881] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.975442][ T9] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 117.596043][ T5881] usb-storage 4-1:1.23: USB Mass Storage device detected [ 117.788864][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 117.788893][ T9] usb 2-1: config 0 has no interfaces? [ 117.790705][ T9] usb 2-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 117.790732][ T9] usb 2-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 117.790751][ T9] usb 2-1: Product: syz [ 117.790765][ T9] usb 2-1: SerialNumber: syz [ 119.797316][ T9] usb 2-1: config 0 descriptor?? [ 119.808506][ T5881] usb-storage 4-1:1.23: Quirks match for vid 0781 pid 0100: 1 [ 124.370582][ T6007] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 124.383080][ T6007] netlink: 12 bytes leftover after parsing attributes in process `syz.0.22'. [ 124.814413][ T9] usb 2-1: can't set config #0, error -71 [ 124.826794][ T9] usb 2-1: USB disconnect, device number 3 [ 125.438577][ T5160] Dev loop2: unable to read RDB block 7 [ 125.438614][ T5160] loop2: AHDI p1 p2 p3 [ 125.438648][ T5160] loop2: partition table partially beyond EOD, truncated [ 125.438930][ T5160] loop2: p1 start 1601398130 is beyond EOD, truncated [ 125.438951][ T5160] loop2: p2 start 1702059890 is beyond EOD, truncated [ 125.748105][ T37] audit: type=1326 audit(1771708188.246:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6002 comm="syz.2.21" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d2a8dc629 code=0x7ffc0000 [ 125.751780][ T37] audit: type=1326 audit(1771708188.266:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6002 comm="syz.2.21" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0d2a8dc629 code=0x7ffc0000 [ 125.751833][ T37] audit: type=1326 audit(1771708188.266:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6002 comm="syz.2.21" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d2a8dc629 code=0x7ffc0000 [ 125.751877][ T37] audit: type=1326 audit(1771708188.266:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6002 comm="syz.2.21" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d2a8dc629 code=0x7ffc0000 [ 125.765357][ T37] audit: type=1326 audit(1771708188.276:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6002 comm="syz.2.21" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0d2a8dc629 code=0x7ffc0000 [ 125.765410][ T37] audit: type=1326 audit(1771708188.276:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6002 comm="syz.2.21" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d2a8dc629 code=0x7ffc0000 [ 125.765454][ T37] audit: type=1326 audit(1771708188.276:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6002 comm="syz.2.21" exe="/root/syz-executor" sig=0 arch=c000003e syscall=246 compat=0 ip=0x7f0d2a8dc629 code=0x7ffc0000 [ 125.765498][ T37] audit: type=1326 audit(1771708188.276:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6002 comm="syz.2.21" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d2a8dc629 code=0x7ffc0000 [ 125.765542][ T37] audit: type=1326 audit(1771708188.276:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6002 comm="syz.2.21" exe="/root/syz-executor" sig=0 arch=c000003e syscall=249 compat=0 ip=0x7f0d2a8dc629 code=0x7ffc0000 [ 125.765585][ T37] audit: type=1326 audit(1771708188.276:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6002 comm="syz.2.21" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d2a8dc629 code=0x7ffc0000 [ 127.328558][ T5160] Dev loop2: unable to read RDB block 7 [ 127.328595][ T5160] loop2: AHDI p1 p2 p3 [ 127.328623][ T5160] loop2: partition table partially beyond EOD, truncated [ 127.328849][ T5160] loop2: p1 start 1601398130 is beyond EOD, truncated [ 127.328869][ T5160] loop2: p2 start 1702059890 is beyond EOD, truncated [ 127.496677][ T5881] usb 4-1: USB disconnect, device number 2 [ 127.600218][ T6022] faux_driver vkms: [drm] Unknown color mode 11; guessing buffer size. [ 132.998269][ T6047] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 133.353657][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.354125][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.846068][ T5800] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 133.944939][ T5797] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 133.959689][ T5797] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 133.963657][ T5797] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 133.964810][ T5797] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 133.965787][ T5797] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 134.079810][ T5800] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 134.079839][ T5800] usb 1-1: config 0 has no interfaces? [ 134.096128][ T5867] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 134.103982][ T5800] usb 1-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 134.104012][ T5800] usb 1-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 134.104184][ T5800] usb 1-1: Product: syz [ 134.104200][ T5800] usb 1-1: SerialNumber: syz [ 134.111117][ T5800] usb 1-1: config 0 descriptor?? [ 134.268276][ T5867] usb 5-1: config 1 has an invalid interface number: 23 but max is 0 [ 134.268308][ T5867] usb 5-1: config 1 has no interface number 0 [ 134.268355][ T5867] usb 5-1: config 1 interface 23 altsetting 0 endpoint 0x4 has an invalid bInterval 0, changing to 7 [ 134.268406][ T5867] usb 5-1: New USB device found, idVendor=0781, idProduct=0100, bcdDevice= 1.00 [ 134.268431][ T5867] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.039244][ T5867] usb-storage 5-1:1.23: USB Mass Storage device detected [ 135.159878][ T5867] usb-storage 5-1:1.23: Quirks match for vid 0781 pid 0100: 1 [ 135.206208][ T808] usb 1-1: USB disconnect, device number 4 [ 136.126320][ T5797] Bluetooth: hci5: command tx timeout [ 136.526040][ T6064] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 136.527601][ T6064] netlink: 12 bytes leftover after parsing attributes in process `syz.0.33'. [ 136.530325][ T6064] loop2: detected capacity change from 0 to 7 [ 137.039468][ T5995] usb 5-1: USB disconnect, device number 3 [ 137.084429][ T6064] Dev loop2: unable to read RDB block 7 [ 137.084463][ T6064] loop2: AHDI p1 p2 p3 [ 137.084493][ T6064] loop2: partition table partially beyond EOD, truncated [ 137.084740][ T6064] loop2: p1 start 1601398130 is beyond EOD, truncated [ 137.084760][ T6064] loop2: p2 start 1702059890 is beyond EOD, truncated [ 137.135815][ T6056] delete_channel: no stack [ 137.181467][ T5160] Dev loop2: unable to read RDB block 7 [ 137.181493][ T5160] loop2: AHDI p1 p2 p3 [ 137.181511][ T5160] loop2: partition table partially beyond EOD, truncated [ 137.181692][ T5160] loop2: p1 start 1601398130 is beyond EOD, truncated [ 137.181706][ T5160] loop2: p2 start 1702059890 is beyond EOD, truncated [ 137.234589][ T6069] fuse: Unknown parameter '0x0000000000000003' [ 137.306882][ T5860] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 137.380133][ T5160] Dev loop2: unable to read RDB block 7 [ 137.380159][ T5160] loop2: AHDI p1 p2 p3 [ 137.380177][ T5160] loop2: partition table partially beyond EOD, truncated [ 137.380519][ T5160] loop2: p1 start 1601398130 is beyond EOD, truncated [ 137.380534][ T5160] loop2: p2 start 1702059890 is beyond EOD, truncated [ 137.756982][ T5860] usb 1-1: config 1 has an invalid interface number: 23 but max is 0 [ 137.757012][ T5860] usb 1-1: config 1 has no interface number 0 [ 137.757061][ T5860] usb 1-1: config 1 interface 23 altsetting 0 endpoint 0x4 has an invalid bInterval 0, changing to 7 [ 137.757105][ T5860] usb 1-1: New USB device found, idVendor=0781, idProduct=0100, bcdDevice= 1.00 [ 137.757129][ T5860] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.452958][ T6075] 9pnet_virtio: no channels available for device syz [ 138.506935][ T5797] Bluetooth: hci5: command tx timeout [ 138.800807][ T5860] usb-storage 1-1:1.23: USB Mass Storage device detected [ 138.818384][ T5860] usb-storage 1-1:1.23: Quirks match for vid 0781 pid 0100: 1 [ 139.178705][ T808] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 139.339714][ T808] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 139.339748][ T808] usb 5-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 139.339770][ T808] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 139.339821][ T808] usb 5-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 139.339848][ T808] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 139.339876][ T808] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 139.342194][ T808] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 139.342224][ T808] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 139.342245][ T808] usb 5-1: Product: syz [ 139.342260][ T808] usb 5-1: Manufacturer: syz [ 139.359708][ T6073] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 139.367240][ T808] cdc_wdm 5-1:1.0: skipping garbage [ 139.367262][ T808] cdc_wdm 5-1:1.0: skipping garbage [ 139.384098][ T808] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 139.384122][ T808] cdc_wdm 5-1:1.0: Unknown control protocol [ 140.894338][ T5797] Bluetooth: hci5: command tx timeout [ 143.230968][ T5797] Bluetooth: hci5: command tx timeout [ 143.942829][ C0] wdm_int_callback: 117 callbacks suppressed [ 143.942857][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 143.942876][ C0] wdm_int_callback: 117 callbacks suppressed [ 143.942892][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 143.947010][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 143.947036][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 143.947818][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 143.947848][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 143.948092][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 143.948113][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 143.948347][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 143.948368][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 143.950287][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 143.950345][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 143.950790][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 143.950843][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 143.951342][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 143.951395][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 143.951767][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 143.951820][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 143.952218][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 143.952269][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 145.195712][ T5922] usb 5-1: USB disconnect, device number 4 [ 145.290252][ T5860] usb 1-1: USB disconnect, device number 5 [ 145.936472][ T6109] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 146.025538][ T6104] IPv6: Can't replace route, no match found [ 146.028664][ T6104] mmap: syz.4.44 (6104) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 146.611759][ T808] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 146.716124][ T5860] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 146.761237][ T49] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.770475][ T808] usb 2-1: config 1 has an invalid interface number: 23 but max is 0 [ 146.770581][ T808] usb 2-1: config 1 has no interface number 0 [ 146.770702][ T808] usb 2-1: config 1 interface 23 altsetting 0 endpoint 0x4 has an invalid bInterval 0, changing to 7 [ 146.770813][ T808] usb 2-1: New USB device found, idVendor=0781, idProduct=0100, bcdDevice= 1.00 [ 146.770877][ T808] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.851993][ T808] usb-storage 2-1:1.23: USB Mass Storage device detected [ 146.860151][ T808] usb-storage 2-1:1.23: Quirks match for vid 0781 pid 0100: 1 [ 146.936143][ T5995] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 146.944820][ T5860] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 146.944847][ T5860] usb 1-1: config 0 has no interfaces? [ 147.088273][ T5860] usb 1-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 147.088306][ T5860] usb 1-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 147.088327][ T5860] usb 1-1: Product: syz [ 147.088342][ T5860] usb 1-1: SerialNumber: syz [ 147.090510][ T5995] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 147.090538][ T5995] usb 5-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 147.090558][ T5995] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 147.090608][ T5995] usb 5-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 147.090634][ T5995] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 147.090661][ T5995] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 147.094837][ T5995] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 147.094866][ T5995] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 147.094887][ T5995] usb 5-1: Product: syz [ 147.094901][ T5995] usb 5-1: Manufacturer: syz [ 147.100734][ T5860] usb 1-1: config 0 descriptor?? [ 147.269840][ T6113] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 147.272683][ T5995] cdc_wdm 5-1:1.0: skipping garbage [ 147.272702][ T5995] cdc_wdm 5-1:1.0: skipping garbage [ 147.304065][ T5995] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 147.304089][ T5995] cdc_wdm 5-1:1.0: Unknown control protocol [ 148.133860][ T5860] usb 5-1: USB disconnect, device number 5 [ 148.134068][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 148.273484][ T49] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.406211][ T31] usb 2-1: USB disconnect, device number 4 [ 148.552098][ T5867] usb 1-1: USB disconnect, device number 6 [ 148.940214][ T49] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.033615][ T6050] chnl_net:caif_netlink_parms(): no params data found [ 149.642768][ T6133] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 149.649357][ T6133] netlink: 12 bytes leftover after parsing attributes in process `syz.0.48'. [ 149.691064][ T6133] loop2: detected capacity change from 0 to 7 [ 149.968579][ T6133] Dev loop2: unable to read RDB block 7 [ 149.968761][ T6133] loop2: AHDI p1 p2 p3 [ 149.969069][ T6133] loop2: partition table partially beyond EOD, truncated [ 149.986028][ T6133] loop2: p1 start 1601398130 is beyond EOD, truncated [ 149.986108][ T6133] loop2: p2 start 1702059890 is beyond EOD, truncated [ 150.458916][ T49] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.827675][ T6050] bridge0: port 1(bridge_slave_0) entered blocking state [ 150.829267][ T6050] bridge0: port 1(bridge_slave_0) entered disabled state [ 150.829484][ T6050] bridge_slave_0: entered allmulticast mode [ 150.832258][ T6050] bridge_slave_0: entered promiscuous mode [ 150.836713][ T6050] bridge0: port 2(bridge_slave_1) entered blocking state [ 150.837054][ T6050] bridge0: port 2(bridge_slave_1) entered disabled state [ 150.837269][ T6050] bridge_slave_1: entered allmulticast mode [ 150.840081][ T6050] bridge_slave_1: entered promiscuous mode [ 150.989703][ T6050] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 150.994014][ T6050] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 153.014791][ T6050] team0: Port device team_slave_0 added [ 153.018424][ T6050] team0: Port device team_slave_1 added [ 154.751583][ T6155] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 154.753899][ T6155] netlink: 12 bytes leftover after parsing attributes in process `syz.4.52'. [ 154.756894][ T6155] loop2: detected capacity change from 0 to 7 [ 154.844638][ T6160] IPv6: Can't replace route, no match found [ 154.983055][ T6155] Dev loop2: unable to read RDB block 7 [ 154.983091][ T6155] loop2: AHDI p1 p2 p3 [ 154.983120][ T6155] loop2: partition table partially beyond EOD, truncated [ 154.993587][ T6155] loop2: p1 start 1601398130 is beyond EOD, truncated [ 154.993614][ T6155] loop2: p2 start 1702059890 is beyond EOD, truncated [ 155.287474][ T5160] Dev loop2: unable to read RDB block 7 [ 155.287507][ T5160] loop2: AHDI p1 p2 p3 [ 155.287535][ T5160] loop2: partition table partially beyond EOD, truncated [ 155.287811][ T5160] loop2: p1 start 1601398130 is beyond EOD, truncated [ 155.287831][ T5160] loop2: p2 start 1702059890 is beyond EOD, truncated [ 155.341499][ T5995] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 155.489211][ T5995] usb 5-1: config 1 has an invalid interface number: 23 but max is 0 [ 155.489241][ T5995] usb 5-1: config 1 has no interface number 0 [ 155.489286][ T5995] usb 5-1: config 1 interface 23 altsetting 0 endpoint 0x4 has an invalid bInterval 0, changing to 7 [ 155.489329][ T5995] usb 5-1: New USB device found, idVendor=0781, idProduct=0100, bcdDevice= 1.00 [ 155.489354][ T5995] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.569402][ T5995] usb-storage 5-1:1.23: USB Mass Storage device detected [ 155.616643][ T5995] usb-storage 5-1:1.23: Quirks match for vid 0781 pid 0100: 1 [ 156.206968][ T5800] usb 1-1: new full-speed USB device number 7 using dummy_hcd [ 156.947188][ T5860] usb 5-1: USB disconnect, device number 6 [ 157.175676][ T6050] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 157.175695][ T6050] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 157.175724][ T6050] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 157.192848][ T5800] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 157.192955][ T5800] usb 1-1: config 0 has no interfaces? [ 157.284139][ T6174] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 157.293745][ T6174] netlink: 12 bytes leftover after parsing attributes in process `syz.1.55'. [ 157.321567][ T6174] loop2: detected capacity change from 0 to 7 [ 157.462399][ T6174] Dev loop2: unable to read RDB block 7 [ 157.462550][ T6174] loop2: AHDI p1 p2 p3 [ 157.462745][ T6174] loop2: partition table partially beyond EOD, truncated [ 157.466045][ T6174] loop2: p1 start 1601398130 is beyond EOD, truncated [ 157.466125][ T6174] loop2: p2 start 1702059890 is beyond EOD, truncated [ 157.995663][ T6050] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 157.995680][ T6050] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 157.995702][ T6050] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 158.011663][ T5800] usb 1-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 158.011744][ T5800] usb 1-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 158.011798][ T5800] usb 1-1: Product: syz [ 158.011840][ T5800] usb 1-1: SerialNumber: syz [ 158.074567][ T5800] usb 1-1: config 0 descriptor?? [ 158.148326][ T5867] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 158.300961][ T5867] usb 2-1: config 1 has an invalid interface number: 23 but max is 0 [ 158.300993][ T5867] usb 2-1: config 1 has no interface number 0 [ 158.301053][ T5867] usb 2-1: config 1 interface 23 altsetting 0 endpoint 0x4 has an invalid bInterval 0, changing to 7 [ 158.301097][ T5867] usb 2-1: New USB device found, idVendor=0781, idProduct=0100, bcdDevice= 1.00 [ 158.301122][ T5867] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 158.479904][ T6180] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 158.486912][ T6180] netlink: 12 bytes leftover after parsing attributes in process `syz.4.59'. [ 159.546449][ T5160] Dev loop2: unable to read RDB block 7 [ 159.546483][ T5160] loop2: AHDI p1 p2 p3 [ 159.546511][ T5160] loop2: partition table partially beyond EOD, truncated [ 159.546790][ T5160] loop2: p1 start 1601398130 is beyond EOD, truncated [ 159.546828][ T5160] loop2: p2 start 1702059890 is beyond EOD, truncated [ 159.681676][ T808] usb 1-1: USB disconnect, device number 7 [ 159.771780][ T5867] usb-storage 2-1:1.23: USB Mass Storage device detected [ 159.856339][ T5867] usb-storage 2-1:1.23: Quirks match for vid 0781 pid 0100: 1 [ 162.799495][ T6050] hsr_slave_0: entered promiscuous mode [ 163.458861][ T6203] IPv6: Can't replace route, no match found [ 163.499865][ T6050] hsr_slave_1: entered promiscuous mode [ 163.514795][ T6050] debugfs: 'hsr0' already exists in 'hsr' [ 163.514827][ T6050] Cannot create hsr debugfs directory [ 164.675867][ T6192] 9pnet_virtio: no channels available for device syz [ 164.699477][ T5867] usb 2-1: USB disconnect, device number 5 [ 165.026744][ T49] bridge_slave_1: left allmulticast mode [ 165.026917][ T49] bridge_slave_1: left promiscuous mode [ 165.028144][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 165.366358][ T49] bridge_slave_0: left allmulticast mode [ 165.382325][ T49] bridge_slave_0: left promiscuous mode [ 165.423221][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 167.957123][ T6217] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 169.090492][ T5800] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 169.206909][ T6237] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 169.215113][ T6237] netlink: 12 bytes leftover after parsing attributes in process `syz.0.68'. [ 169.237074][ T6237] loop2: detected capacity change from 0 to 7 [ 169.341437][ T6237] Dev loop2: unable to read RDB block 7 [ 169.341605][ T6237] loop2: AHDI p1 p2 p3 [ 169.342964][ T6237] loop2: partition table partially beyond EOD, truncated [ 169.346318][ T6237] loop2: p1 start 1601398130 is beyond EOD, truncated [ 169.346398][ T6237] loop2: p2 start 1702059890 is beyond EOD, truncated [ 170.066087][ T31] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 170.222422][ T31] usb 1-1: config 1 has an invalid interface number: 23 but max is 0 [ 170.222454][ T31] usb 1-1: config 1 has no interface number 0 [ 170.222499][ T31] usb 1-1: config 1 interface 23 altsetting 0 endpoint 0x4 has an invalid bInterval 0, changing to 7 [ 170.222541][ T31] usb 1-1: New USB device found, idVendor=0781, idProduct=0100, bcdDevice= 1.00 [ 170.222565][ T31] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.236049][ T5800] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 170.236079][ T5800] usb 2-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 170.236100][ T5800] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 170.236150][ T5800] usb 2-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 170.236176][ T5800] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 170.236203][ T5800] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 170.249544][ T5800] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 170.249576][ T5800] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 170.249597][ T5800] usb 2-1: Product: syz [ 170.249612][ T5800] usb 2-1: Manufacturer: syz [ 170.329260][ T6243] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 170.339201][ T6243] netlink: 12 bytes leftover after parsing attributes in process `syz.2.69'. [ 170.819226][ T6227] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 170.899803][ T31] usb-storage 1-1:1.23: USB Mass Storage device detected [ 170.918972][ T31] usb-storage 1-1:1.23: Quirks match for vid 0781 pid 0100: 1 [ 171.065481][ T5800] cdc_wdm 2-1:1.0: skipping garbage [ 171.065504][ T5800] cdc_wdm 2-1:1.0: skipping garbage [ 171.132278][ T5800] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 171.132303][ T5800] cdc_wdm 2-1:1.0: Unknown control protocol [ 172.197933][ T31] usb 1-1: USB disconnect, device number 8 [ 172.271426][ T5800] usb 2-1: USB disconnect, device number 6 [ 174.334330][ T6270] IPv6: Can't replace route, no match found [ 176.851185][ T6279] IPv6: Can't replace route, no match found [ 178.337660][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 178.428258][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 178.475756][ T49] bond0 (unregistering): Released all slaves [ 178.486254][ T5800] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 178.656634][ T5800] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 178.656664][ T5800] usb 2-1: config 0 has no interfaces? [ 178.659688][ T5800] usb 2-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 178.659710][ T5800] usb 2-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 178.659724][ T5800] usb 2-1: Product: syz [ 178.659735][ T5800] usb 2-1: SerialNumber: syz [ 178.787334][ T5800] usb 2-1: config 0 descriptor?? [ 179.310203][ T6050] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 179.795735][ T36] usb 2-1: USB disconnect, device number 7 [ 180.156848][ T6281] delete_channel: no stack [ 180.573417][ T6301] netlink: 12 bytes leftover after parsing attributes in process `syz.2.81'. [ 180.576182][ T6301] loop2: detected capacity change from 0 to 7 [ 180.578498][ T6300] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 181.264018][ T6301] Dev loop2: unable to read RDB block 7 [ 181.264065][ T6301] loop2: AHDI p1 p2 p3 [ 181.264094][ T6301] loop2: partition table partially beyond EOD, truncated [ 181.264384][ T6301] loop2: p1 start 1601398130 is beyond EOD, truncated [ 181.264408][ T6301] loop2: p2 start 1702059890 is beyond EOD, truncated [ 186.697565][ T6326] IPv6: Can't replace route, no match found [ 187.499050][ T6050] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 187.546597][ T6050] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 187.746622][ T6050] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 190.828420][ T6363] SQUASHFS error: Failed to read block 0x0: -5 [ 190.956443][ T6364] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 190.986607][ T6364] netlink: 12 bytes leftover after parsing attributes in process `syz.4.92'. [ 192.586049][ T49] hsr_slave_0: left promiscuous mode [ 192.637822][ T49] hsr_slave_1: left promiscuous mode [ 192.639128][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 192.639218][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 192.656193][ T10] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 192.707637][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 192.707666][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 192.809302][ T10] usb 5-1: config 1 has an invalid interface number: 23 but max is 0 [ 192.809329][ T10] usb 5-1: config 1 has no interface number 0 [ 192.809367][ T10] usb 5-1: config 1 interface 23 altsetting 0 endpoint 0x4 has an invalid bInterval 0, changing to 7 [ 192.809405][ T10] usb 5-1: New USB device found, idVendor=0781, idProduct=0100, bcdDevice= 1.00 [ 192.809427][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 192.836082][ T5800] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 193.008876][ T5800] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 193.008904][ T5800] usb 3-1: config 0 has no interfaces? [ 193.039431][ T5800] usb 3-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 193.039463][ T5800] usb 3-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 193.039483][ T5800] usb 3-1: Product: syz [ 193.039497][ T5800] usb 3-1: SerialNumber: syz [ 193.119635][ T5800] usb 3-1: config 0 descriptor?? [ 193.548413][ T10] usb-storage 5-1:1.23: USB Mass Storage device detected [ 193.689879][ T10] usb-storage 5-1:1.23: Quirks match for vid 0781 pid 0100: 1 [ 193.692540][ T49] veth1_macvtap: left promiscuous mode [ 193.692689][ T49] veth0_macvtap: left promiscuous mode [ 193.692866][ T49] veth1_vlan: left promiscuous mode [ 193.693041][ T49] veth0_vlan: left promiscuous mode [ 194.396305][ T10] usb 5-1: USB disconnect, device number 7 [ 194.556028][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.556101][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 196.350755][ T5110] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 196.366228][ T5110] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 196.373121][ T5110] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 196.387701][ T5110] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 196.406203][ T5110] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 196.559592][ T36] usb 3-1: USB disconnect, device number 3 [ 196.620760][ T6394] binder: 6391:6394 ioctl 4004f50d 0 returned -22 [ 199.001164][ T6406] 9pnet_virtio: no channels available for device syz [ 200.987526][ T5797] Bluetooth: hci2: command tx timeout [ 203.245962][ T5797] Bluetooth: hci2: command tx timeout [ 205.039396][ T49] team0 (unregistering): Port device team_slave_1 removed [ 205.135105][ T49] team0 (unregistering): Port device team_slave_0 removed [ 205.148396][ T6428] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 205.157485][ T6428] netlink: 12 bytes leftover after parsing attributes in process `syz.0.105'. [ 205.181241][ T6428] loop2: detected capacity change from 0 to 7 [ 205.380053][ T5797] Bluetooth: hci2: command tx timeout [ 206.216499][ T6428] Dev loop2: unable to read RDB block 7 [ 206.216538][ T6428] loop2: AHDI p1 p2 p3 [ 206.216569][ T6428] loop2: partition table partially beyond EOD, truncated [ 206.217491][ T6428] loop2: p1 start 1601398130 is beyond EOD, truncated [ 206.217515][ T6428] loop2: p2 start 1702059890 is beyond EOD, truncated [ 206.706127][ T36] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 206.743154][ T6441] program syz.2.106 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 206.873127][ T36] usb 1-1: config 1 has an invalid interface number: 23 but max is 0 [ 206.873158][ T36] usb 1-1: config 1 has no interface number 0 [ 206.873204][ T36] usb 1-1: config 1 interface 23 altsetting 0 endpoint 0x4 has an invalid bInterval 0, changing to 7 [ 206.873246][ T36] usb 1-1: New USB device found, idVendor=0781, idProduct=0100, bcdDevice= 1.00 [ 206.873269][ T36] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 207.023453][ T36] usb-storage 1-1:1.23: USB Mass Storage device detected [ 207.035391][ T5867] usb 5-1: new full-speed USB device number 8 using dummy_hcd [ 207.128784][ T36] usb-storage 1-1:1.23: Quirks match for vid 0781 pid 0100: 1 [ 207.200221][ T5867] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 207.200251][ T5867] usb 5-1: config 0 has no interfaces? [ 207.225038][ T5867] usb 5-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 207.225141][ T5867] usb 5-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 207.225214][ T5867] usb 5-1: Product: syz [ 207.225250][ T5867] usb 5-1: SerialNumber: syz [ 207.259148][ T5160] Dev loop2: unable to read RDB block 7 [ 207.259180][ T5160] loop2: AHDI p1 p2 p3 [ 207.259221][ T5160] loop2: partition table partially beyond EOD, truncated [ 207.259489][ T5160] loop2: p1 start 1601398130 is beyond EOD, truncated [ 207.259509][ T5160] loop2: p2 start 1702059890 is beyond EOD, truncated [ 207.297999][ T5867] usb 5-1: config 0 descriptor?? [ 207.406852][ T5797] Bluetooth: hci2: command tx timeout [ 208.370487][ T10] usb 1-1: USB disconnect, device number 9 [ 208.605375][ T6464] binder: BINDER_SET_CONTEXT_MGR already set [ 208.605387][ T6464] binder: 6462:6464 ioctl 4018620d 200000004a80 returned -16 [ 208.710004][ T5800] usb 5-1: USB disconnect, device number 8 [ 210.058103][ T6471] 9pnet_virtio: no channels available for device syz [ 212.067503][ T6477] loop5: detected capacity change from 0 to 7 [ 213.548694][ T6477] loop5: [CUMANA/ADFS] p1 [ADFS] p1 [ 213.548738][ T6477] loop5: partition table partially beyond EOD, truncated [ 213.549113][ T6477] loop5: p1 size 2989602745 extends beyond EOD, truncated [ 214.592929][ T6486] loop5: detected capacity change from 0 to 7 [ 215.301929][ T6486] loop5: [CUMANA/ADFS] p1 [ADFS] p1 [ 215.301971][ T6486] loop5: partition table partially beyond EOD, truncated [ 215.303021][ T6486] loop5: p1 size 2989602745 extends beyond EOD, truncated [ 215.361887][ T6447] udevd[6447]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 216.152764][ T6501] IPv6: Can't replace route, no match found [ 217.467646][ T6389] chnl_net:caif_netlink_parms(): no params data found [ 217.551454][ T6447] udevd[6447]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 217.886076][ T5804] Bluetooth: hci0: command 0x0406 tx timeout [ 217.886113][ T5804] Bluetooth: hci4: command 0x0406 tx timeout [ 217.886169][ T5809] Bluetooth: hci1: command 0x0406 tx timeout [ 217.950177][ T6389] bridge0: port 1(bridge_slave_0) entered blocking state [ 217.950389][ T6389] bridge0: port 1(bridge_slave_0) entered disabled state [ 217.950581][ T6389] bridge_slave_0: entered allmulticast mode [ 217.953364][ T6389] bridge_slave_0: entered promiscuous mode [ 217.988548][ T6389] bridge0: port 2(bridge_slave_1) entered blocking state [ 217.989493][ T6389] bridge0: port 2(bridge_slave_1) entered disabled state [ 217.989732][ T6389] bridge_slave_1: entered allmulticast mode [ 218.022873][ T6389] bridge_slave_1: entered promiscuous mode [ 218.271778][ T5797] Bluetooth: hci1: unexpected event for opcode 0x0c2d [ 218.307942][ T6514] program syz.1.118 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 218.347943][ T6515] binder: BINDER_SET_CONTEXT_MGR already set [ 218.347961][ T6515] binder: 6513:6515 ioctl 4018620d 200000004a80 returned -16 [ 218.353317][ T6389] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 218.693110][ T6389] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 219.366440][ T5797] Bluetooth: hci3: command 0x0406 tx timeout [ 220.121834][ T6548] IPv6: Can't replace route, no match found [ 222.133535][ T6549] 9pnet_virtio: no channels available for device syz [ 223.750998][ T6389] team0: Port device team_slave_0 added [ 223.766108][ T6389] team0: Port device team_slave_1 added [ 223.836580][ T6389] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 223.836600][ T6389] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 223.836629][ T6389] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 223.842708][ T6389] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 223.842726][ T6389] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 223.842756][ T6389] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 224.053803][ T6389] hsr_slave_0: entered promiscuous mode [ 224.055385][ T6389] hsr_slave_1: entered promiscuous mode [ 224.741960][ T6565] Bluetooth: MGMT ver 1.23 [ 228.057559][ T6576] SQUASHFS error: Failed to read block 0x0: -5 [ 228.775505][ T5808] Bluetooth: hci1: unexpected event for opcode 0x0c2d [ 229.727172][ T6583] program syz.1.135 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 237.656438][ T808] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 237.806249][ T808] usb 1-1: Using ep0 maxpacket: 16 [ 237.872682][ T808] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 237.872744][ T808] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 237.872775][ T808] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 237.872798][ T808] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 237.872822][ T808] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 237.875531][ T808] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 237.875561][ T808] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 237.875583][ T808] usb 1-1: Manufacturer: syz [ 238.026077][ T808] usb 1-1: config 0 descriptor?? [ 239.133027][ T6638] 9pnet_virtio: no channels available for device syz [ 241.469037][ T49] bridge_slave_1: left allmulticast mode [ 241.469068][ T49] bridge_slave_1: left promiscuous mode [ 241.469395][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 241.697424][ T49] bridge_slave_0: left allmulticast mode [ 241.697454][ T49] bridge_slave_0: left promiscuous mode [ 241.697722][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 242.180299][ T6653] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 243.002304][ T6657] program syz.0.149 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 243.018881][ T6658] netlink: 4 bytes leftover after parsing attributes in process `syz.4.147'. [ 243.046208][ T5808] Bluetooth: hci4: unexpected event for opcode 0x0c2d [ 243.228424][ T808] rc_core: IR keymap rc-hauppauge not found [ 243.228448][ T808] Registered IR keymap rc-empty [ 243.229123][ T808] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 243.246305][ T808] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 243.295001][ T808] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 243.329526][ T808] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input5 [ 244.486310][ T808] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 244.506845][ T808] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 244.526072][ T808] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 244.556078][ T808] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 244.576884][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 244.586263][ T808] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 244.606211][ T808] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 244.626081][ T808] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 244.656348][ T808] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 244.676120][ T808] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 244.690861][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 244.703127][ T808] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 244.719857][ T808] mceusb 1-1:0.0: Registered with mce emulator interface version 1 [ 244.719884][ T808] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 244.751522][ T6669] binder: 6667:6669 ioctl 4004f50d 0 returned -22 [ 244.810576][ T808] usb 1-1: USB disconnect, device number 10 [ 244.968283][ T49] bond0 (unregistering): Released all slaves [ 246.190647][ T6658] bridge_slave_1: left allmulticast mode [ 246.190678][ T6658] bridge_slave_1: left promiscuous mode [ 248.230314][ T37] kauditd_printk_skb: 20 callbacks suppressed [ 248.230337][ T37] audit: type=1326 audit(1771708308.696:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6675 comm="syz.0.153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f145c97c629 code=0x7ffc0000 [ 248.230388][ T37] audit: type=1326 audit(1771708308.696:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6675 comm="syz.0.153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f145c97c629 code=0x7ffc0000 [ 248.230431][ T37] audit: type=1326 audit(1771708308.696:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6675 comm="syz.0.153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f145c97c629 code=0x7ffc0000 [ 248.230475][ T37] audit: type=1326 audit(1771708308.696:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6675 comm="syz.0.153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f145c97c629 code=0x7ffc0000 [ 248.230520][ T37] audit: type=1326 audit(1771708308.696:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6675 comm="syz.0.153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f145c97c629 code=0x7ffc0000 [ 248.230571][ T37] audit: type=1326 audit(1771708308.696:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6675 comm="syz.0.153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=246 compat=0 ip=0x7f145c97c629 code=0x7ffc0000 [ 248.230616][ T37] audit: type=1326 audit(1771708308.696:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6675 comm="syz.0.153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f145c97c629 code=0x7ffc0000 [ 248.230660][ T37] audit: type=1326 audit(1771708308.696:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6675 comm="syz.0.153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=249 compat=0 ip=0x7f145c97c629 code=0x7ffc0000 [ 248.230702][ T37] audit: type=1326 audit(1771708308.696:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6675 comm="syz.0.153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f145c97c629 code=0x7ffc0000 [ 248.230746][ T37] audit: type=1326 audit(1771708308.696:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6675 comm="syz.0.153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f145c97c629 code=0x7ffc0000 [ 249.489146][ T6658] bridge0: port 2(bridge_slave_1) entered disabled state [ 251.280655][ T6658] bridge_slave_0: left allmulticast mode [ 251.280689][ T6658] bridge_slave_0: left promiscuous mode [ 251.280964][ T6658] bridge0: port 1(bridge_slave_0) entered disabled state [ 251.720875][ T6699] loop2: detected capacity change from 0 to 7 [ 251.742126][ T6699] Dev loop2: unable to read RDB block 7 [ 251.742286][ T6699] loop2: AHDI p1 p2 p3 [ 251.742510][ T6699] loop2: partition table partially beyond EOD, truncated [ 251.746492][ T6699] loop2: p1 start 1601398130 is beyond EOD, truncated [ 251.746570][ T6699] loop2: p2 start 1702059890 is beyond EOD, truncated [ 252.766048][ T808] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 252.926224][ T808] usb 1-1: Using ep0 maxpacket: 16 [ 252.928484][ T808] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 252.928540][ T808] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 252.928569][ T808] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 252.928591][ T808] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 252.928614][ T808] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 252.930083][ T808] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 252.930109][ T808] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 252.930130][ T808] usb 1-1: Manufacturer: syz [ 252.935602][ T808] usb 1-1: config 0 descriptor?? [ 253.296227][ T6708] netlink: 4 bytes leftover after parsing attributes in process `syz.2.160'. [ 253.993219][ T5797] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 254.013975][ T5797] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 254.016607][ T5797] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 254.030934][ T5797] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 254.040821][ T5797] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 254.253262][ T5808] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 254.269005][ T5808] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 254.272704][ T5808] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 254.310333][ T5808] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 254.313786][ T5808] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 254.786811][ T808] rc_core: IR keymap rc-hauppauge not found [ 254.786835][ T808] Registered IR keymap rc-empty [ 254.786997][ T808] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 254.816170][ T808] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 254.961254][ T6719] IPv6: Can't replace route, no match found [ 255.736780][ T808] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 255.739241][ T808] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input6 [ 255.846764][ T808] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 255.883677][ T808] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 255.896128][ T808] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 255.916111][ T808] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 255.917651][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.917719][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.939247][ T808] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 255.964764][ T808] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 255.977107][ T808] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 256.006183][ T808] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 256.036215][ T6708] bridge_slave_1: left allmulticast mode [ 256.036245][ T6708] bridge_slave_1: left promiscuous mode [ 256.041401][ T808] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 256.056232][ T808] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 256.206244][ T5797] Bluetooth: hci5: command tx timeout [ 256.279027][ T808] mceusb 1-1:0.0: Registered with mce emulator interface version 1 [ 256.279052][ T808] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 256.306245][ T6708] bridge0: port 2(bridge_slave_1) entered disabled state [ 256.321173][ T808] usb 1-1: USB disconnect, device number 11 [ 256.420813][ T6724] 9pnet_virtio: no channels available for device syz [ 258.178173][ T5797] Bluetooth: hci6: command tx timeout [ 258.737004][ T5797] Bluetooth: hci5: command tx timeout [ 258.867822][ T6708] bridge_slave_0: left allmulticast mode [ 258.867854][ T6708] bridge_slave_0: left promiscuous mode [ 258.868119][ T6708] bridge0: port 1(bridge_slave_0) entered disabled state [ 262.350154][ T5797] Bluetooth: hci6: command tx timeout [ 262.350198][ T5797] Bluetooth: hci5: command tx timeout [ 262.876985][ T5797] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 262.893723][ T5797] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 262.894154][ T5797] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 262.898353][ T5797] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 262.900781][ T5797] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 265.006201][ T5808] Bluetooth: hci7: command tx timeout [ 265.228869][ T5808] Bluetooth: hci5: command tx timeout [ 265.228909][ T5808] Bluetooth: hci6: command tx timeout [ 266.373413][ T49] hsr_slave_0: left promiscuous mode [ 266.429303][ T49] hsr_slave_1: left promiscuous mode [ 266.432748][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 266.517982][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 267.176724][ T5797] Bluetooth: hci7: command tx timeout [ 267.307977][ T5797] Bluetooth: hci6: command tx timeout [ 267.557094][ T6747] loop2: detected capacity change from 0 to 7 [ 268.324214][ T6747] Dev loop2: unable to read RDB block 7 [ 268.324251][ T6747] loop2: AHDI p1 p2 p3 [ 268.324281][ T6747] loop2: partition table partially beyond EOD, truncated [ 268.324542][ T6747] loop2: p1 start 1601398130 is beyond EOD, truncated [ 268.324562][ T6747] loop2: p2 start 1702059890 is beyond EOD, truncated [ 269.246164][ T5797] Bluetooth: hci7: command tx timeout [ 270.056051][ T5922] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 270.359255][ T49] team0 (unregistering): Port device team_slave_1 removed [ 270.380273][ T5922] usb 1-1: Using ep0 maxpacket: 16 [ 270.382636][ T5922] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 270.382690][ T5922] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 270.382732][ T5922] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 270.382755][ T5922] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 270.382778][ T5922] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 270.384273][ T5922] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 270.384300][ T5922] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 270.384320][ T5922] usb 1-1: Manufacturer: syz [ 270.499635][ T5922] usb 1-1: config 0 descriptor?? [ 270.597238][ T49] team0 (unregistering): Port device team_slave_0 removed [ 271.086050][ T5922] rc_core: IR keymap rc-hauppauge not found [ 271.086073][ T5922] Registered IR keymap rc-empty [ 271.087918][ T5922] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 271.150916][ T5922] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 271.210955][ T5922] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 271.238008][ T5922] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input7 [ 271.430752][ T5797] Bluetooth: hci7: command tx timeout [ 271.452428][ T5922] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 271.466445][ T5922] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 271.506134][ T5922] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 271.526105][ T5922] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 271.546767][ T5922] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 271.566108][ T5922] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 271.587053][ T5922] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 271.606146][ T5922] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 271.626124][ T5922] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 271.658319][ T5922] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 271.738058][ T5922] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 271.738086][ T5922] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 272.809776][ T5922] usb 1-1: USB disconnect, device number 12 [ 274.074312][ T6768] SQUASHFS error: Failed to read block 0x0: -5 [ 276.617010][ T6774] 9pnet_virtio: no channels available for device syz [ 279.207795][ T6779] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 279.214819][ T6779] netlink: 12 bytes leftover after parsing attributes in process `syz.0.174'. [ 279.237157][ T6779] loop2: detected capacity change from 0 to 7 [ 279.262444][ T6779] Dev loop2: unable to read RDB block 7 [ 279.262605][ T6779] loop2: AHDI p1 p2 p3 [ 279.262876][ T6779] loop2: partition table partially beyond EOD, truncated [ 279.264922][ T6779] loop2: p1 start 1601398130 is beyond EOD, truncated [ 279.264993][ T6779] loop2: p2 start 1702059890 is beyond EOD, truncated [ 280.316301][ T5160] Dev loop2: unable to read RDB block 7 [ 280.316341][ T5160] loop2: AHDI p1 p2 p3 [ 280.316370][ T5160] loop2: partition table partially beyond EOD, truncated [ 280.316639][ T5160] loop2: p1 start 1601398130 is beyond EOD, truncated [ 280.316660][ T5160] loop2: p2 start 1702059890 is beyond EOD, truncated [ 280.376002][ T5800] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 280.528265][ T5800] usb 1-1: config 1 has an invalid interface number: 23 but max is 0 [ 280.528295][ T5800] usb 1-1: config 1 has no interface number 0 [ 280.528342][ T5800] usb 1-1: config 1 interface 23 altsetting 0 endpoint 0x4 has an invalid bInterval 0, changing to 7 [ 280.528385][ T5800] usb 1-1: New USB device found, idVendor=0781, idProduct=0100, bcdDevice= 1.00 [ 280.528410][ T5800] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 280.690500][ T5800] usb-storage 1-1:1.23: USB Mass Storage device detected [ 280.728656][ T5800] usb-storage 1-1:1.23: Quirks match for vid 0781 pid 0100: 1 [ 280.895172][ T6788] 9pnet_virtio: no channels available for device syz [ 282.101708][ T5867] usb 1-1: USB disconnect, device number 13 [ 283.298034][ T6796] syz_tun: entered allmulticast mode [ 283.386594][ T6792] syz_tun: left allmulticast mode [ 284.656033][ T5867] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 284.806060][ T5867] usb 1-1: Using ep0 maxpacket: 16 [ 284.808611][ T5867] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 284.808667][ T5867] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 284.808697][ T5867] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 284.808719][ T5867] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 284.808744][ T5867] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 284.810380][ T5867] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 284.810408][ T5867] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 284.810429][ T5867] usb 1-1: Manufacturer: syz [ 284.929505][ T5867] usb 1-1: config 0 descriptor?? [ 285.487037][ T5867] rc_core: IR keymap rc-hauppauge not found [ 285.487059][ T5867] Registered IR keymap rc-empty [ 285.487218][ T5867] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 285.506126][ T5867] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 285.527989][ T5867] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 285.531495][ T5867] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input8 [ 285.673987][ T5867] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 285.686159][ T5867] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 285.706085][ T5867] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 285.726695][ T5867] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 285.746127][ T5867] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 285.767633][ T5867] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 285.786074][ T5867] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 285.806087][ T5867] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 285.826454][ T5867] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 285.846094][ T5867] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 285.869439][ T5867] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 285.869465][ T5867] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 285.909291][ T5867] usb 1-1: USB disconnect, device number 14 [ 286.747888][ T6841] binder: 6835:6841 ioctl 4004f50d 0 returned -22 [ 288.826657][ T6709] chnl_net:caif_netlink_parms(): no params data found [ 289.845580][ T6710] chnl_net:caif_netlink_parms(): no params data found [ 291.133152][ T6852] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 291.133220][ T6852] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 291.433800][ T6732] chnl_net:caif_netlink_parms(): no params data found [ 293.056040][ T5867] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 293.276005][ T5867] usb 1-1: Using ep0 maxpacket: 16 [ 293.279649][ T5867] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 293.279705][ T5867] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 293.279735][ T5867] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 293.279757][ T5867] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 293.279783][ T5867] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 293.281513][ T5867] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 293.281542][ T5867] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 293.281563][ T5867] usb 1-1: Manufacturer: syz [ 293.392076][ T5867] usb 1-1: config 0 descriptor?? [ 293.404687][ T6709] bridge0: port 1(bridge_slave_0) entered blocking state [ 293.404887][ T6709] bridge0: port 1(bridge_slave_0) entered disabled state [ 293.405109][ T6709] bridge_slave_0: entered allmulticast mode [ 293.440651][ T6709] bridge_slave_0: entered promiscuous mode [ 293.600934][ T6709] bridge0: port 2(bridge_slave_1) entered blocking state [ 293.601059][ T6709] bridge0: port 2(bridge_slave_1) entered disabled state [ 293.601337][ T6709] bridge_slave_1: entered allmulticast mode [ 293.649849][ T6709] bridge_slave_1: entered promiscuous mode [ 293.956040][ T5867] rc_core: IR keymap rc-hauppauge not found [ 293.956074][ T5867] Registered IR keymap rc-empty [ 293.956231][ T5867] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 293.978120][ T5867] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 293.996530][ T6710] bridge0: port 1(bridge_slave_0) entered blocking state [ 293.996659][ T6710] bridge0: port 1(bridge_slave_0) entered disabled state [ 293.996900][ T6710] bridge_slave_0: entered allmulticast mode [ 294.029312][ T5867] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 294.031941][ T5867] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input9 [ 294.059490][ T6710] bridge_slave_0: entered promiscuous mode [ 294.089437][ T5867] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 294.106113][ T5867] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 294.126235][ T5867] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 294.146209][ T5867] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 294.166099][ T5867] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 294.186138][ T5867] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 294.206150][ T5867] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 294.229469][ T5867] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 294.246083][ T5867] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 294.267128][ T5867] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 294.292563][ T5867] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 294.292582][ T5867] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 294.324414][ T5867] usb 1-1: USB disconnect, device number 15 [ 294.829976][ T6710] bridge0: port 2(bridge_slave_1) entered blocking state [ 294.839587][ T6710] bridge0: port 2(bridge_slave_1) entered disabled state [ 294.847331][ T6710] bridge_slave_1: entered allmulticast mode [ 294.899028][ T6710] bridge_slave_1: entered promiscuous mode [ 296.235993][ T5881] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 296.403273][ T5881] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 296.403304][ T5881] usb 3-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 296.403324][ T5881] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 296.403371][ T5881] usb 3-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 296.403396][ T5881] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 296.403422][ T5881] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 296.474996][ T5881] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 296.475029][ T5881] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 296.475051][ T5881] usb 3-1: Product: syz [ 296.475067][ T5881] usb 3-1: Manufacturer: syz [ 296.571151][ T6912] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 296.574605][ T5881] cdc_wdm 3-1:1.0: skipping garbage [ 296.574623][ T5881] cdc_wdm 3-1:1.0: skipping garbage [ 296.587821][ T5881] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 296.587884][ T5881] cdc_wdm 3-1:1.0: Unknown control protocol [ 297.649704][ C0] wdm_int_callback: 1595 callbacks suppressed [ 297.649733][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 297.649837][ C0] wdm_int_callback: 1595 callbacks suppressed [ 297.649877][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 297.650149][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 297.650171][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 297.650419][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 297.650440][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 297.650678][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 297.650699][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 297.650927][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 297.650948][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 297.651173][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 297.651195][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 297.651423][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 297.651443][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 297.651665][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 297.651685][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 297.654194][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 297.654238][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 297.654478][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 297.654499][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 297.956866][ T6709] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 297.959145][ T6732] bridge0: port 1(bridge_slave_0) entered blocking state [ 297.959963][ T6732] bridge0: port 1(bridge_slave_0) entered disabled state [ 297.961250][ T6732] bridge_slave_0: entered allmulticast mode [ 298.022408][ T6732] bridge_slave_0: entered promiscuous mode [ 298.092462][ T5995] usb 3-1: USB disconnect, device number 4 [ 298.092543][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 298.186401][ T6709] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 298.186621][ T6732] bridge0: port 2(bridge_slave_1) entered blocking state [ 298.187002][ T6732] bridge0: port 2(bridge_slave_1) entered disabled state [ 298.187183][ T6732] bridge_slave_1: entered allmulticast mode [ 298.190038][ T6732] bridge_slave_1: entered promiscuous mode [ 302.609764][ T6940] IPv6: Can't replace route, no match found [ 304.041133][ T49] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 305.178743][ T6710] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 305.368650][ T6710] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 308.821951][ T49] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.098578][ T6709] team0: Port device team_slave_0 added [ 310.059685][ T6732] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 310.177316][ T6709] team0: Port device team_slave_1 added [ 310.182292][ T6732] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 310.218786][ T6710] team0: Port device team_slave_0 added [ 310.272782][ T6972] program syz.0.202 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 310.546096][ T5797] Bluetooth: hci4: unexpected event for opcode 0x0c2d [ 311.873016][ T49] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.026920][ T6710] team0: Port device team_slave_1 added [ 312.412723][ T49] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.478073][ T6709] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 312.478087][ T6709] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 312.478107][ T6709] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 312.552227][ T6732] team0: Port device team_slave_0 added [ 312.555325][ T6709] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 312.555338][ T6709] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 312.555358][ T6709] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 312.611450][ T6710] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 312.611469][ T6710] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 312.611497][ T6710] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 312.707139][ T6732] team0: Port device team_slave_1 added [ 312.773189][ T6710] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 312.773203][ T6710] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 312.773223][ T6710] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 312.932169][ T6732] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 312.932186][ T6732] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 312.932209][ T6732] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 313.019347][ T6732] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 313.019386][ T6732] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 313.019415][ T6732] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 313.339098][ T6709] hsr_slave_0: entered promiscuous mode [ 313.348495][ T6709] hsr_slave_1: entered promiscuous mode [ 313.360903][ T6709] debugfs: 'hsr0' already exists in 'hsr' [ 313.360930][ T6709] Cannot create hsr debugfs directory [ 314.941497][ T6710] hsr_slave_0: entered promiscuous mode [ 314.961561][ T6710] hsr_slave_1: entered promiscuous mode [ 314.972726][ T6710] debugfs: 'hsr0' already exists in 'hsr' [ 314.972757][ T6710] Cannot create hsr debugfs directory [ 315.059650][ T5808] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 315.062246][ T5808] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 315.081893][ T5808] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 315.082990][ T5808] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 315.084034][ T5808] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 315.299083][ T6732] hsr_slave_0: entered promiscuous mode [ 315.304138][ T6732] hsr_slave_1: entered promiscuous mode [ 315.310439][ T6732] debugfs: 'hsr0' already exists in 'hsr' [ 315.310525][ T6732] Cannot create hsr debugfs directory [ 315.361998][ T5808] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 315.385367][ T5808] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 315.400724][ T5808] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 315.404808][ T5808] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 315.405578][ T5808] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 317.166345][ T5808] Bluetooth: hci1: command tx timeout [ 317.287318][ T49] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 318.246992][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 318.247111][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.551234][ T5808] Bluetooth: hci2: command tx timeout [ 319.477069][ T5808] Bluetooth: hci1: command tx timeout [ 319.896047][ T5797] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 319.906085][ T36] usb 1-1: new full-speed USB device number 16 using dummy_hcd [ 319.908589][ T5797] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 319.926783][ T5797] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 319.930836][ T5797] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 319.933504][ T5797] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 320.128442][ T36] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 320.128471][ T36] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 320.128541][ T36] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 320.130949][ T36] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 320.130977][ T36] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 320.130998][ T36] usb 1-1: Product: syz [ 320.131013][ T36] usb 1-1: Manufacturer: syz [ 320.131028][ T36] usb 1-1: SerialNumber: syz [ 320.381238][ T49] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.606334][ T5808] Bluetooth: hci2: command tx timeout [ 320.749141][ T5808] Bluetooth: hci0: unexpected event for opcode 0x0c2d [ 320.752095][ T7037] program syz.2.212 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 320.781070][ T36] cdc_ncm 1-1:1.0: skipping garbage [ 320.781096][ T36] cdc_ncm 1-1:1.0: CDC Union missing and no IAD found [ 320.781142][ T36] cdc_ncm 1-1:1.0: bind() failure [ 320.848720][ T36] usb 1-1: USB disconnect, device number 16 [ 320.932469][ T49] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 322.002106][ T5808] Bluetooth: hci1: command tx timeout [ 322.536044][ T5808] Bluetooth: hci3: command tx timeout [ 322.686802][ T5808] Bluetooth: hci2: command tx timeout [ 324.247532][ T7059] 9pnet_virtio: no channels available for device syz [ 324.755348][ T5808] Bluetooth: hci1: command tx timeout [ 327.575132][ C0] ------------[ cut here ]------------ [ 327.575148][ C0] 1 [ 327.575162][ C0] WARNING: kernel/time/timer.c:716 at stub_timer+0xa/0x20, CPU#0: ktimers/0/16 [ 327.575210][ C0] Modules linked in: [ 327.575248][ C0] CPU: 0 UID: 0 PID: 16 Comm: ktimers/0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 327.575273][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 327.575290][ C0] RIP: 0010:stub_timer+0xa/0x20 [ 327.575312][ C0] Code: 0f 94 c0 5b 41 5e c3 cc cc cc cc cc 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa e8 b7 bd 13 00 90 <0f> 0b 90 e9 be 2c 75 09 cc 66 66 66 66 2e 0f 1f 84 00 00 00 00 00 [ 327.575331][ C0] RSP: 0018:ffffc90000157a38 EFLAGS: 00010246 [ 327.575350][ C0] RAX: ffffffff81b09659 RBX: 0000000080000000 RCX: ffff88801caa8000 [ 327.575367][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000100 [ 327.575379][ C0] RBP: ffffc90000157b30 R08: 0000000000000000 R09: 0000000000000100 [ 327.575393][ C0] R10: dffffc0000000000 R11: ffffffff81b09650 R12: 0000000000000000 [ 327.575408][ C0] R13: 0000000100000980 R14: 1ffff9200002af4c R15: ffff88804c8e1f38 [ 327.575425][ C0] FS: 0000000000000000(0000) GS:ffff888126342000(0000) knlGS:0000000000000000 [ 327.575443][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 327.575459][ C0] CR2: 0000200000c12030 CR3: 00000000354b8000 CR4: 00000000003526f0 [ 327.575478][ C0] Call Trace: [ 327.575492][ C0] [ 327.575501][ C0] call_timer_fn+0x192/0x640 [ 327.575526][ C0] ? __pfx_stub_timer+0x10/0x10 [ 327.575547][ C0] ? call_timer_fn+0xd4/0x640 [ 327.575569][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 327.575590][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 327.575634][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 327.575665][ C0] ? __pfx_stub_timer+0x10/0x10 [ 327.575688][ C0] __run_timer_base+0x6a3/0x9f0 [ 327.575745][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 327.575773][ C0] ? rt_spin_lock+0x1e0/0x400 [ 327.575813][ C0] run_timer_softirq+0xb7/0x170 [ 327.575887][ C0] handle_softirqs+0x1de/0x6f0 [ 327.575928][ T5808] Bluetooth: hci3: command tx timeout [ 327.575931][ C0] ? smpboot_thread_fn+0x4d/0xa50 [ 327.575957][ T5808] Bluetooth: hci2: command tx timeout [ 327.575969][ C0] run_ktimerd+0x69/0x100 [ 327.576005][ C0] smpboot_thread_fn+0x541/0xa50 [ 327.576038][ C0] ? smpboot_thread_fn+0x4d/0xa50 [ 327.576075][ C0] kthread+0x388/0x470 [ 327.576095][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 327.576120][ C0] ? __pfx_kthread+0x10/0x10 [ 327.576148][ C0] ret_from_fork+0x51e/0xb90 [ 327.576176][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 327.576199][ C0] ? __switch_to+0xc7d/0x1450 [ 327.576225][ C0] ? __pfx_kthread+0x10/0x10 [ 327.576244][ C0] ret_from_fork_asm+0x1a/0x30 [ 327.576277][ C0] [ 327.576296][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 327.576309][ C0] CPU: 0 UID: 0 PID: 16 Comm: ktimers/0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 327.576329][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 327.576340][ C0] Call Trace: [ 327.576347][ C0] [ 327.576355][ C0] vpanic+0x56c/0xa60 [ 327.576385][ C0] ? __pfx__printk+0x10/0x10 [ 327.576407][ C0] ? __pfx_vpanic+0x10/0x10 [ 327.576432][ C0] ? is_bpf_text_address+0x292/0x2b0 [ 327.576456][ C0] ? is_bpf_text_address+0x26/0x2b0 [ 327.576486][ C0] panic+0xc5/0xd0 [ 327.576518][ C0] ? __pfx_panic+0x10/0x10 [ 327.576562][ C0] ? ret_from_fork_asm+0x1a/0x30 [ 327.576590][ C0] __warn+0x315/0x4f0 [ 327.576620][ C0] ? stub_timer+0xa/0x20 [ 327.576643][ C0] ? stub_timer+0xa/0x20 [ 327.576664][ C0] __report_bug+0x29a/0x540 [ 327.576700][ C0] ? stub_timer+0xa/0x20 [ 327.576721][ C0] ? __pfx___report_bug+0x10/0x10 [ 327.576747][ C0] ? add_lock_to_list+0xc7/0x100 [ 327.576775][ C0] ? lockdep_unlock+0x5d/0xd0 [ 327.576806][ C0] ? __lock_acquire+0x146e/0x2cf0 [ 327.576839][ C0] ? stub_timer+0xa/0x20 [ 327.576858][ C0] report_bug+0x16a/0x220 [ 327.576887][ C0] ? stub_timer+0xa/0x20 [ 327.576904][ C0] ? stub_timer+0xc/0x20 [ 327.576923][ C0] handle_bug+0x98/0x200 [ 327.576955][ C0] exc_invalid_op+0x1a/0x50 [ 327.576987][ C0] asm_exc_invalid_op+0x1a/0x20 [ 327.577009][ C0] RIP: 0010:stub_timer+0xa/0x20 [ 327.577031][ C0] Code: 0f 94 c0 5b 41 5e c3 cc cc cc cc cc 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa e8 b7 bd 13 00 90 <0f> 0b 90 e9 be 2c 75 09 cc 66 66 66 66 2e 0f 1f 84 00 00 00 00 00 [ 327.577050][ C0] RSP: 0018:ffffc90000157a38 EFLAGS: 00010246 [ 327.577071][ C0] RAX: ffffffff81b09659 RBX: 0000000080000000 RCX: ffff88801caa8000 [ 327.577088][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000100 [ 327.577101][ C0] RBP: ffffc90000157b30 R08: 0000000000000000 R09: 0000000000000100 [ 327.577116][ C0] R10: dffffc0000000000 R11: ffffffff81b09650 R12: 0000000000000000 [ 327.577139][ C0] R13: 0000000100000980 R14: 1ffff9200002af4c R15: ffff88804c8e1f38 [ 327.577161][ C0] ? __pfx_stub_timer+0x10/0x10 [ 327.577183][ C0] ? stub_timer+0x9/0x20 [ 327.577209][ C0] ? stub_timer+0x9/0x20 [ 327.577226][ C0] call_timer_fn+0x192/0x640 [ 327.577248][ C0] ? __pfx_stub_timer+0x10/0x10 [ 327.577266][ C0] ? call_timer_fn+0xd4/0x640 [ 327.577286][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 327.577304][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 327.577346][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 327.577374][ C0] ? __pfx_stub_timer+0x10/0x10 [ 327.577397][ C0] __run_timer_base+0x6a3/0x9f0 [ 327.577449][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 327.577480][ C0] ? rt_spin_lock+0x1e0/0x400 [ 327.577522][ C0] run_timer_softirq+0xb7/0x170 [ 327.577565][ C0] handle_softirqs+0x1de/0x6f0 [ 327.577606][ C0] ? smpboot_thread_fn+0x4d/0xa50 [ 327.577639][ C0] run_ktimerd+0x69/0x100 [ 327.577671][ C0] smpboot_thread_fn+0x541/0xa50 [ 327.577707][ C0] ? smpboot_thread_fn+0x4d/0xa50 [ 327.577750][ C0] kthread+0x388/0x470 [ 327.577775][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 327.577807][ C0] ? __pfx_kthread+0x10/0x10 [ 327.577832][ C0] ret_from_fork+0x51e/0xb90 [ 327.577866][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 327.577897][ C0] ? __switch_to+0xc7d/0x1450 [ 327.577928][ C0] ? __pfx_kthread+0x10/0x10 [ 327.577954][ C0] ret_from_fork_asm+0x1a/0x30 [ 327.577995][ C0] [ 327.578170][ C0] Kernel Offset: disabled