last executing test programs: 15m19.014394007s ago: executing program 1 (id=13): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x1, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200), 0x0, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) fsopen(&(0x7f0000000100)='ocfs2_dlmfs\x00', 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x100, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x94) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$FUSE(r2, &(0x7f00000034c0)={0x2020}, 0xcac) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000f40), r3) sendmsg$IPVS_CMD_NEW_SERVICE(r3, &(0x7f0000001100)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010067bd7000fbdbdf25010000005c00018014000300fe8000000000000000000000000000bb06000100"], 0x70}, 0x1, 0x0, 0x0, 0x20004084}, 0x20008800) syz_usb_connect(0x2, 0x24, &(0x7f0000000000)=ANY=[@ANYRES8], 0x0) 15m6.122394145s ago: executing program 1 (id=19): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$pppl2tp(0x18, 0x1, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000300)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r3, 0x84, 0x1, 0x0, 0x0) chroot(&(0x7f0000000a40)='./file0\x00') syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socket$unix(0x1, 0x5, 0x0) 15m3.993611476s ago: executing program 1 (id=23): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0xfffffffd) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = syz_clone(0x2080, 0x0, 0x0, 0x0, 0x0, 0x0) getpriority(0x1, r1) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYRES32=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r5 = syz_open_dev$media(&(0x7f0000000380), 0x0, 0x0) r6 = syz_open_dev$media(&(0x7f0000000380), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r6, 0xc0287c02, &(0x7f0000000100)={0x80000000, 0x0, &(0x7f0000000200)=[{}, {{}, {0x80000000}}]}) ioctl$MEDIA_IOC_ENUM_ENTITIES(r5, 0xc1007c01, &(0x7f0000000500)={r7}) write$FUSE_BMAP(0xffffffffffffffff, 0x0, 0x0) 14m56.696409683s ago: executing program 1 (id=31): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(0xffffffffffffffff, 0x3ba0, &(0x7f00000004c0)={0x48, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(0xffffffffffffffff, 0x3ba0, &(0x7f0000000540)={0x48, 0x7, r4, 0x0, 0x0, 0x0, 0x0, 0x1e4224, 0x1598cc}) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) open_by_handle_at(0xffffffffffffffff, 0x0, 0x1) mlock2(&(0x7f0000627000/0x3000)=nil, 0x3000, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r5, @ANYBLOB="0000000002000000b705000008000000850000005d00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x1002, &(0x7f0000000880)=""/4121, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x30, 0x0, 0x0, 0xfffffffffffffe65}, 0x23) syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(0xffffffffffffffff, 0x0, 0x0) 14m53.65734513s ago: executing program 1 (id=34): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000000)=@base={0x12, 0x6, 0x8, 0x2}, 0x48) r2 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r1, &(0x7f0000000140), &(0x7f0000000240)=@udp6=r2}, 0x20) r3 = syz_io_uring_setup(0x9e, &(0x7f0000000640)={0x0, 0xec25, 0x0, 0x0, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r3, 0x847ba, 0x0, 0xe, 0x0, 0x0) 14m51.656636112s ago: executing program 1 (id=35): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close(r0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) unshare(0x26020480) r4 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000140), 0x82084, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000040)=0x3) ioctl$TIOCSTI(r4, 0x5412, &(0x7f00000000c0)) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0x3) ioctl$TCSETSW2(r3, 0x80047456, &(0x7f0000000040)={0x3, 0xb, 0xfffffffe, 0x7fffffff, 0x0, "23f555d9adb42d4408020e90d1beaa82dc1ecf", 0xffffffff}) 14m39.254489784s ago: executing program 2 (id=43): ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f0000000440)={&(0x7f0000800000/0x800000)=nil, &(0x7f000051f000/0x4000)=nil, 0x800000, 0x1, 0xfe}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000005580)=""/102392, 0x18ff8) openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, 0x0, 0x0) r2 = socket$tipc(0x1e, 0x2, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x2}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f000077f000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0xfffffffffe) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x10, 0x0, &(0x7f00000005c0)=[@request_death={0x400c630e, 0x1}], 0x0, 0x0, 0x0}) dup3(r2, r1, 0x0) 14m34.283881585s ago: executing program 32 (id=35): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close(r0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) unshare(0x26020480) r4 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000140), 0x82084, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000040)=0x3) ioctl$TIOCSTI(r4, 0x5412, &(0x7f00000000c0)) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0x3) ioctl$TCSETSW2(r3, 0x80047456, &(0x7f0000000040)={0x3, 0xb, 0xfffffffe, 0x7fffffff, 0x0, "23f555d9adb42d4408020e90d1beaa82dc1ecf", 0xffffffff}) 14m34.098978324s ago: executing program 2 (id=47): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000580)='tracefs\x00', 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) keyctl$read(0xb, 0x0, 0x0, 0x0) socket$pppoe(0x18, 0x1, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) getdents64(r4, 0xfffffffffffffffe, 0x29) 14m31.604647139s ago: executing program 2 (id=50): socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff6000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = creat(&(0x7f0000000100)='./file0\x00', 0x100) r1 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a2, 0xc000, 0x8, 0xc1, 0x0, r0}) syz_open_dev$ndb(&(0x7f0000000200), 0x0, 0x1) syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) socket$nl_route(0x10, 0x3, 0x0) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x6, 0xf, &(0x7f0000000000)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1ab92b}, {0x85, 0x0, 0x0, 0x8}, {0x4}}, {{0x5, 0x0, 0x4, 0x9, 0x0, 0x1, 0x2000}}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x9}, {0x85, 0x0, 0x0, 0xa4}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pipe(&(0x7f0000000000)) io_uring_enter(r1, 0x2219, 0xcf74, 0x16, 0x0, 0x0) 14m28.906396299s ago: executing program 2 (id=54): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x75b08000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000340)=@abs={0x0, 0x0, 0x4e27}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) r4 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0x3) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) ioctl$F2FS_IOC_MOVE_RANGE(r5, 0xc020f509, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r5, 0xc0502100, &(0x7f0000000240)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r5, 0xc0502100, &(0x7f0000000400)) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r5, 0xc0182101, &(0x7f00000001c0)={r6}) 14m26.868172521s ago: executing program 2 (id=58): creat(&(0x7f0000000080)='./bus\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mincore(&(0x7f0000184000/0x2000)=nil, 0x2000, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be5216", 0xb}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0", 0x25}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085", 0xcb}], 0x3}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}, {&(0x7f0000000340)=""/96, 0x60}], 0x2}, 0x0) mount(&(0x7f0000000100), &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x8c, &(0x7f0000000300)='trans=rdma,') 14m23.540485771s ago: executing program 2 (id=60): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000140)=@abs={0x0, 0x0, 0x4e23}, 0x6e) r2 = socket$nl_route(0x10, 0x3, 0x0) openat$drirender128(0xffffffffffffff9c, &(0x7f00000001c0), 0x600000, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x18}}, 0x50) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0x1370, &(0x7f0000000380)={0x0, 0x49fa, 0x10, 0x0, 0x4e}, 0x0, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) bind$tipc(0xffffffffffffffff, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(0xffffffffffffffff, 0xc10c5541, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x9, 0x2, 0x180, 0x4, 0x10, 0xf1, 0x50, 0x7fffffffffffe, 0x5, 0x0, 0x9, 0x0, 0x6, 0x0, 0xbdb], 0xffff1001, 0x120182}) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(0xffffffffffffffff, 0xc040564a, &(0x7f0000000200)={0x0, 0x0, 0x300f}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 14m22.866572383s ago: executing program 4 (id=61): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_open_procfs(0xffffffffffffffff, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf0667000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_opts(r4, 0x29, 0x3b, &(0x7f0000000300)=ANY=[], 0x8) connect$inet6(r4, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) sendmmsg(r4, &(0x7f00000092c0), 0x4ff, 0x0) 14m21.1686505s ago: executing program 4 (id=63): r0 = socket$packet(0x11, 0x3, 0x300) bpf$MAP_CREATE(0x100000000000000, 0x0, 0x50) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendfile(r1, r0, &(0x7f00000001c0)=0x4, 0x5) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000004140), 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) readv(r3, &(0x7f0000001340)=[{&(0x7f0000000580)=""/148, 0x94}], 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$sysctl(0xffffffffffffff9c, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r4 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_int(r4, 0x6, 0xc, 0x0, &(0x7f0000000100)) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x120) pselect6(0x5, &(0x7f0000000240)={0x0, 0x0, 0x3, 0x8, 0x2, 0xb}, 0x0, &(0x7f0000000280)={0x3ff, 0x0, 0xf8, 0x400d, 0x0, 0x9, 0x466, 0x5}, 0x0, 0x0) ioctl$CEC_ADAP_G_LOG_ADDRS(0xffffffffffffffff, 0x805c6103, &(0x7f00000000c0)) 14m18.935536364s ago: executing program 4 (id=66): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000280), 0xffffffffffffffff) r2 = socket$l2tp(0x2, 0x2, 0x73) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="230900000000000000000100000005000700000000000800090000000000060002000100000008000a000000000008001700", @ANYRES32=r2], 0x3c}}, 0x0) close(r2) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0x7, 0x0, 0x0) 14m16.800226415s ago: executing program 4 (id=70): mmap$xdp(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x9, 0x50, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) capset(&(0x7f0000000380)={0x20080522}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x63, 0x11, 0xc}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6}, 0x94) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="34000000100001f8ffffff000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32, @ANYBLOB="08001b"], 0x34}}, 0x4004010) munlockall() r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x14, 0x34, 0x9, 0x0, 0x4000, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x4841}, 0x14040044) 14m12.188085556s ago: executing program 4 (id=73): pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) dup2(0xffffffffffffffff, 0xffffffffffffffff) write$FUSE_DIRENTPLUS(r2, &(0x7f0000002100)=ANY=[@ANYBLOB="b0000000000000001659ec0889419429aa5db97288b0f8a87ea8e66d9a8b"], 0xb0) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000140)=ANY=[], 0x10) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f0000000200)={0x30, 0x5, 0x0, {0x0, 0x1, 0x5, 0x7}}, 0x30) write$FUSE_DIRENTPLUS(r2, &(0x7f00000002c0)=ANY=[@ANYBLOB="b0000000000000", @ANYRES16=r1], 0xb0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',posixacl']) 14m8.606950341s ago: executing program 4 (id=78): socket(0x10, 0x803, 0x0) socket$igmp6(0xa, 0x3, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x14, 0x30, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) request_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000001fee)='R\x10suse\x00\x00\x00\x00\x00\x00\x00dn\x00\x00\x00', 0x0) r3 = syz_open_dev$usbfs(&(0x7f00000001c0), 0x6, 0x389001) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000180)) ioctl$USBDEVFS_CONTROL(r3, 0xc0105500, &(0x7f0000000500)={0x40, 0xf, 0x5, 0x1ff, 0x0, 0x5, 0x0}) bind$inet6(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x44, 0x44, 0x8, [@enum={0x3, 0x7, 0x0, 0x6, 0x4, [{0x5, 0x4}, {0x1, 0x9}, {0x9, 0x900}, {0x4, 0x2}, {0xb, 0x6481}, {0x4, 0xfffffff9}, {0xf, 0x8}]}]}, {0x0, [0x0, 0x0, 0x2e, 0x2e, 0x2e, 0x61]}}, 0x0, 0x64, 0x0, 0x1, 0x47}, 0x28) 14m8.174841203s ago: executing program 33 (id=60): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000140)=@abs={0x0, 0x0, 0x4e23}, 0x6e) r2 = socket$nl_route(0x10, 0x3, 0x0) openat$drirender128(0xffffffffffffff9c, &(0x7f00000001c0), 0x600000, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x18}}, 0x50) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0x1370, &(0x7f0000000380)={0x0, 0x49fa, 0x10, 0x0, 0x4e}, 0x0, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) bind$tipc(0xffffffffffffffff, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(0xffffffffffffffff, 0xc10c5541, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x9, 0x2, 0x180, 0x4, 0x10, 0xf1, 0x50, 0x7fffffffffffe, 0x5, 0x0, 0x9, 0x0, 0x6, 0x0, 0xbdb], 0xffff1001, 0x120182}) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(0xffffffffffffffff, 0xc040564a, &(0x7f0000000200)={0x0, 0x0, 0x300f}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 13m53.388608986s ago: executing program 34 (id=78): socket(0x10, 0x803, 0x0) socket$igmp6(0xa, 0x3, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x14, 0x30, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) request_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000001fee)='R\x10suse\x00\x00\x00\x00\x00\x00\x00dn\x00\x00\x00', 0x0) r3 = syz_open_dev$usbfs(&(0x7f00000001c0), 0x6, 0x389001) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000180)) ioctl$USBDEVFS_CONTROL(r3, 0xc0105500, &(0x7f0000000500)={0x40, 0xf, 0x5, 0x1ff, 0x0, 0x5, 0x0}) bind$inet6(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x44, 0x44, 0x8, [@enum={0x3, 0x7, 0x0, 0x6, 0x4, [{0x5, 0x4}, {0x1, 0x9}, {0x9, 0x900}, {0x4, 0x2}, {0xb, 0x6481}, {0x4, 0xfffffff9}, {0xf, 0x8}]}]}, {0x0, [0x0, 0x0, 0x2e, 0x2e, 0x2e, 0x61]}}, 0x0, 0x64, 0x0, 0x1, 0x47}, 0x28) 11m25.521495531s ago: executing program 3 (id=244): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0xc2d41, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000280), 0xffffffffffffffff) r3 = socket$l2tp(0x2, 0x2, 0x73) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="230900000000000000000100000005000700000000000800090000000000060002000100000008000a000000000008001700", @ANYRES32=r3], 0x3c}}, 0x0) ioctl$NBD_SET_FLAGS(0xffffffffffffffff, 0xab0a, 0x8) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000140)=0x15) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000300)) unshare(0x8000000) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0x7, 0x0, 0x0) shmget$private(0x0, 0xfffffffffeffffff, 0x4800, &(0x7f0000ffc000/0x3000)=nil) 11m24.435449371s ago: executing program 3 (id=245): socket$inet6_udp(0xa, 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e0000000400"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) ioctl$INCFS_IOC_PERMIT_FILL(r3, 0x40046721, &(0x7f00000001c0)={r0}) socket$inet6(0xa, 0x1, 0x7) unshare(0x4040600) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x18) bpf$ITER_CREATE(0x21, &(0x7f00000000c0)={r6}, 0x8) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40) 11m23.06012878s ago: executing program 3 (id=246): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) socket$inet_tcp(0x2, 0x1, 0x0) r0 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) select(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x0, 0xea60}) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0xa0}}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000014c0)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000702000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff6d6405000000000065040400010000000404000001000000b7050000400000006a0a80fe000000008500000053000000b7000000000000009500001000000000a80501363034fdb117168bd07ba00af739d1a1ee35fe163a255c33282044b32495ef8ab9adc67ccc945f105d802f5132143c0a9fc7a84452569957c1002ed7d4d8e17f791f4798c8eb483e9973320d046c3126c6afcfd84de03352c69b3edff5be26f8ffa5f8f2879021c2ea53ea79acd7fb38dd1abb75aa393cea26d465637d11f705000000473e7b7c4ae7dd5e4dee88518ddf12dddd4bfc6a4dd3b6beba51074229b0d4b504516c4c3e5d1aa044d8d00728141cd67bcd68f253288e655c6b34e02e90637ef2912ba7de26ff2357ef17f95a25780c3a057844f226ef4e912f01a201e694e3806e8c70e8b69524cd19f7525d8d66bb766f7f3f918c86a70252236800001897133af94a5a4cfc794d8b9d7c33632152c48eaf302f0b2e0c252b00000000000000006f1bbefbe08de65e3762e194ba4cae8b13535d7d11ee917bca4885bbf597a14ab2458efce78510d86272d88e0c8088f404f011289ebc5623faa1182632161e073af1d69a2e36bed435000025ecd201d2ffb0a7fa4f5d11060cdcf071defd0a8be3b69ce3e4f361aca75827426dde87fdf4617222674280f55e98107450c19b9d86329bd5b4697336112b0b8754ce3574046bf6114d1a88597850b77378fa8edfff8faf8b8ec039bab385cac0535373bb8fab90539b1a65ddff841eb671f3faf37ebdfccea0c002ad2b42047c9ec43193ccf617dbf8a12b4f189edbf9fb7c42b1f435ccd4d96822e6b70100912c92e3943e9c4f45d8bcd528fa8a3ea847f10e9b2506f3bb506f1d7fbde8010000000000a073d0de5538ab42e170b3baae34c35987b0dda497ac3f5e97e6e6aeea15c6d5ed24310100000003bb6030f84b63aaf8690db0221b1705c501f802ff59b4e683efa4b6e77e042072bd2ac37d413008ec9eb8166f6e28b49a77ed91befc65315896f88a8fb1dd679fb4c515f8b7a5b7aca6a251a89d47b728502f7e621cc0e3ba04000000c149ee6601728c750d304197c22da8650579475afd96187d881e93b42a5fdfd686d8900c44c67133dad58037fda65885a15a429edfe3027a5ebf95254744f10fd607bc3300b94932b8d944e0b083bbd86b19cb074577a25ff581d92af08a06f857310a2f14326b0b290205e91a682e00c8762cbc6b904c980eef6e6a1def886c95676dce6a8194479700a02b92bdc8d05eae1f24fdd7b80d1bb404c22f681594de2ebb9687219de8d73ac83823feb402a2415a9850d5f0183ec67be96dc0e4c2d7acf1dfe79d6771903b76e21190c22d641030e1ddacf006c3116e1803af20a5f2b5f7ba58aca5bcabbbab24414a3810788e5503e4be66d683daac5f0001000077339b4200000000108a3c87b19d5b9a00c75d84a92d6dcf00ba96edf35ede0e2b57c26e94801b498924166bde57d5f24258d9fd028096cc15a8b912b494d4bbe609031ea1ca65a548971d5d16296dd08e020000007a27310d5d01f8a8a0f5212d7f628f554afea715ccbc66cbb1016490f5d579308cb3188cf2fcaf67e0c16443d526ba4b968f07ae362c2133c168313e84beb871203880dd453c45d0a137d7f5a8b039dbfa62fb2b4214f8e69f967bf1fbd89e77fcca110000000800000000000000f8877994ebdc35f7efd41e3babd9b3782edd6776d5b6cb4ecd72c9de9b5503747d71440378cf2c2c7ea2dc5febb654a867f853713cf4c0bb322fbbe446d18dee4c821275ef18259cafc346c8b3b9fb0f3adcf6ea310a6b9a3f59e29a5909ea047fb61affb4bc8bbea1fb761b8933795b1a91358a7791aa843d07020e8bb6fc18458c49ac6313e7165b7d9f65e94a62b69f1011b94340cdb7303f01e5cdb5682ddf73d65c3de1d88dd7496d6345d5b9de0223988056a53e19a8b96b9640bc6c09d3c2ff894d626b57c776ed53f94d5e22ff148061b37f72bd92924cb1d0a725e19b264346b7cae0251a850de78316503f3c3d395c7e3f04fc8d52583327cd2341ce4b2d092815376299686f41353b2823814563011a2223b9dd00000000000000000000003a131374a3371cb3e2a9bb4d798b91cefa444501f40b7c9589e8c0bb6c82123d2b45ce905d0903b32ecf30e828c71a07a83f3275f3d661d1af0ffbd5d7f0"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r2, 0xfeffff, 0xe80, 0x3f000002, &(0x7f0000000700)="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", 0x0, 0xf0, 0x0, 0xf0, 0xffffff0c}, 0x40) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_AUTHENTICATE(0xffffffffffffffff, 0x0, 0x10) openat$tun(0xffffffffffffff9c, 0x0, 0x4001, 0x0) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SET_THP_DISABLE(0x29, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB], 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000000c0)={r3, &(0x7f0000000340), 0x0}, 0x20) 11m21.152218347s ago: executing program 3 (id=248): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB], 0x0}, 0x94) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x35, &(0x7f0000000000)=0x8000, 0x4) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x80200, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$usbfs(0x0, 0x76, 0x101301) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r3 = signalfd4(0xffffffffffffffff, &(0x7f0000000100)={[0x3ffffffe]}, 0x8, 0x80000) readv(r3, &(0x7f0000000640)=[{&(0x7f0000000180)=""/169, 0xfffffd51}], 0x1) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r1, r0, 0x25, 0x0, @void}, 0x10) rseq(&(0x7f0000000400), 0x20, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) openat$audio(0xffffff9c, 0x0, 0x402, 0x0) connect$unix(r4, 0x0, 0x0) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) sendmsg(r5, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) 11m19.65927808s ago: executing program 3 (id=249): syz_open_dev$vim2m(0x0, 0x1, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socket$inet_icmp_raw(0x2, 0x3, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32], 0x48) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={r3, r4, 0x4, 0x0, @void}, 0x10) 11m18.433507776s ago: executing program 3 (id=251): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'veth1_to_bond\x00'}) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) memfd_create(&(0x7f0000000180)='-&:\n\x03\x00\x00\x00\x00\x00\x00\x00V$&\xb8=\x94Z}~\xae\x87\x88\xea\xde\xd9=-\x01\x00\x00\x80=\x1d\x8bl\xd5\xc3DE\xbb0\x8e\xac\xf2r#TZ>\xfb\xdf\xc1\xd4\xd1\xee\x88\xebI\xab\xf6\xab}\x85\x18 \x8a\x8aG:\xacD-\x99JD/~\xd6\xb5m,\x8d\x1d\x1c\xe9\xe5<\xfcP)E\xc1\x8e\xeb\xd0^\x00\x00\x00\x00\x00\x00\x00\xc3\xaa\x9a\x9be\xed\xf2\xde\xccx\x1f\x0fne\xe8G\xe4Y\xc9\vR2fY\x8e\x9d\x97 \x00\x00\x00\xe6JV\x80\xdd\x96F\xc90}SH\xe8\xd4RV\xb6\xc9h\xfb\xf3#\xcb\x14a\xab\bn.\x7f\xb1\xe26~$\xa9\v\x9b|>\xf5G\xb5\xac/\xc3n\x16\xee\xdf\xd0a\xf7\x94\xc0rk\x88r\x94\xb6e\x98\xdf\xf36\x82\x8b\x9a\xb9\x10\xa0q\xd8n\x15\x02\xc2@\xa5\xbe\xab\x83\xf9-\x9f\x19\x05\x12*!>\xde\x18L#8\xa5\b^\x19\xeb\xba\xd7\xbdV\x02\xf2\xcf6w\x86\x01\x81\xe4E\v\xd4\xd9\xe7_\xc2\x80\xea\xf9A\xf0\xef\xde\xe3)\xa8\n\f\xb1\f\x159pV2\xf6FCw\xf3r:y\xb1\xee\xc4!\xbaW\xb8\xb1 \x8e\x98!\xd0LL\xec)N\xa1\xa0\x15\xea\xf8kZ\xca\x1eMU\xf6\xfb\xbd\xb2\xc3\a\xc9\xea\x1db\x9b\xd6\x94\x8em\x1b\xd3T\xef*\x1cI\x17:yu8\xb5\x04\xb4\x9e$\xf0\ruS\xee\t3\xeeUb\x10\xfeP\xb3GQ\xc3\xbfA1\atU\xc1\xd6a\x9f1\xe0\xf8.b\a\xe8v\xf7=\x8e\xf5\xfe\xd8Y\xf8\x99_\xe4%\xc54\x96\xf4\xe9\x80:\x8erg\xd8L\xd1\xe0\xc3\xf5\xfe\xa0Dm\xd8_\xf1\xca\x03\xdc\xad\x91\xa6\x18\t\x00'/450, 0x3) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETAF(r2, 0x5408, 0x0) write$binfmt_aout(r2, &(0x7f0000000180)=ANY=[], 0xff2e) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000dc0)={0x0, 0x2, 0xfffffff8}) r3 = syz_open_pts(r2, 0x101000) r4 = dup3(r3, r2, 0x0) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000000)=0x17) setsockopt$inet_group_source_req(r1, 0x0, 0x2f, 0x0, 0x0) openat$6lowpan_enable(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$snapshot(0xffffffffffffff9c, 0x0, 0x316abc13a380bf35, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 11m3.041224712s ago: executing program 35 (id=251): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'veth1_to_bond\x00'}) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) memfd_create(&(0x7f0000000180)='-&:\n\x03\x00\x00\x00\x00\x00\x00\x00V$&\xb8=\x94Z}~\xae\x87\x88\xea\xde\xd9=-\x01\x00\x00\x80=\x1d\x8bl\xd5\xc3DE\xbb0\x8e\xac\xf2r#TZ>\xfb\xdf\xc1\xd4\xd1\xee\x88\xebI\xab\xf6\xab}\x85\x18 \x8a\x8aG:\xacD-\x99JD/~\xd6\xb5m,\x8d\x1d\x1c\xe9\xe5<\xfcP)E\xc1\x8e\xeb\xd0^\x00\x00\x00\x00\x00\x00\x00\xc3\xaa\x9a\x9be\xed\xf2\xde\xccx\x1f\x0fne\xe8G\xe4Y\xc9\vR2fY\x8e\x9d\x97 \x00\x00\x00\xe6JV\x80\xdd\x96F\xc90}SH\xe8\xd4RV\xb6\xc9h\xfb\xf3#\xcb\x14a\xab\bn.\x7f\xb1\xe26~$\xa9\v\x9b|>\xf5G\xb5\xac/\xc3n\x16\xee\xdf\xd0a\xf7\x94\xc0rk\x88r\x94\xb6e\x98\xdf\xf36\x82\x8b\x9a\xb9\x10\xa0q\xd8n\x15\x02\xc2@\xa5\xbe\xab\x83\xf9-\x9f\x19\x05\x12*!>\xde\x18L#8\xa5\b^\x19\xeb\xba\xd7\xbdV\x02\xf2\xcf6w\x86\x01\x81\xe4E\v\xd4\xd9\xe7_\xc2\x80\xea\xf9A\xf0\xef\xde\xe3)\xa8\n\f\xb1\f\x159pV2\xf6FCw\xf3r:y\xb1\xee\xc4!\xbaW\xb8\xb1 \x8e\x98!\xd0LL\xec)N\xa1\xa0\x15\xea\xf8kZ\xca\x1eMU\xf6\xfb\xbd\xb2\xc3\a\xc9\xea\x1db\x9b\xd6\x94\x8em\x1b\xd3T\xef*\x1cI\x17:yu8\xb5\x04\xb4\x9e$\xf0\ruS\xee\t3\xeeUb\x10\xfeP\xb3GQ\xc3\xbfA1\atU\xc1\xd6a\x9f1\xe0\xf8.b\a\xe8v\xf7=\x8e\xf5\xfe\xd8Y\xf8\x99_\xe4%\xc54\x96\xf4\xe9\x80:\x8erg\xd8L\xd1\xe0\xc3\xf5\xfe\xa0Dm\xd8_\xf1\xca\x03\xdc\xad\x91\xa6\x18\t\x00'/450, 0x3) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETAF(r2, 0x5408, 0x0) write$binfmt_aout(r2, &(0x7f0000000180)=ANY=[], 0xff2e) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000dc0)={0x0, 0x2, 0xfffffff8}) r3 = syz_open_pts(r2, 0x101000) r4 = dup3(r3, r2, 0x0) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000000)=0x17) setsockopt$inet_group_source_req(r1, 0x0, 0x2f, 0x0, 0x0) openat$6lowpan_enable(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$snapshot(0xffffffffffffff9c, 0x0, 0x316abc13a380bf35, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 7m9.919953787s ago: executing program 5 (id=398): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='projid_map\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) io_uring_setup(0x6503, &(0x7f0000001300)={0x0, 0x8d5f, 0x1046, 0x0, 0x264}) shmat(0x0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(0x0, &(0x7f0000ff9000/0x1000)=nil, 0x5000) r4 = syz_open_dev$sndctrl(&(0x7f0000000540), 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r4, 0xc0505510, &(0x7f0000000100)={0x3ff, 0x1, 0x1, 0x4, &(0x7f0000000280)=[{}]}) mremap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000fff000/0x1000)=nil) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = dup(r5) write$UHID_INPUT(r6, &(0x7f0000002080)={0xc, {"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", 0x1000}}, 0x1006) read$FUSE(r0, &(0x7f0000006280)={0x2020}, 0x2020) 7m5.749918994s ago: executing program 5 (id=401): r0 = socket(0x1, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r2, 0x0, 0xd}, 0x18) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000140), 0x0) r3 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r3, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x80) recvmmsg$unix(r3, &(0x7f0000003680)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) read$msr(0xffffffffffffffff, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r1, &(0x7f0000000180), &(0x7f00000000c0)=@tcp6=r0}, 0x20) recvmmsg(r0, &(0x7f0000000d40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000500)=""/65, 0x41}], 0x1}}], 0x2, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x5}, 0x0) 7m1.295888504s ago: executing program 5 (id=405): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_open_procfs(0xffffffffffffffff, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf0667000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_opts(r4, 0x29, 0x3b, &(0x7f0000000300)=ANY=[], 0x8) connect$inet6(r4, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) sendmmsg(r4, &(0x7f00000092c0), 0x4ff, 0x0) 6m59.885980768s ago: executing program 5 (id=407): r0 = syz_open_dev$media(&(0x7f00000006c0), 0x4007, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, 0x0) socket$inet_udp(0x2, 0x2, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x80001, 0x84) socket$inet(0x2, 0x80001, 0x84) close(0x4) socket$inet6(0xa, 0x3, 0x6) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) openat$ptmx(0xffffffffffffff9c, &(0x7f00000003c0), 0x20441, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f00000009c0), 0x80002, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) r3 = socket$phonet_pipe(0x23, 0x5, 0x2) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{}, 0x0, &(0x7f0000000200)=r3}, 0x20) ioctl$DRM_IOCTL_MODE_ATOMIC(r1, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r2], &(0x7f0000000180), &(0x7f0000000200), &(0x7f00000001c0)}) 6m59.44217702s ago: executing program 5 (id=409): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0xc2d41, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000280), 0xffffffffffffffff) r3 = socket$l2tp(0x2, 0x2, 0x73) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="230900000000000000000100000005000700000000000800090000000000060002000100000008000a000000000008001700", @ANYRES32=r3], 0x3c}}, 0x0) close(r3) ioctl$NBD_SET_FLAGS(0xffffffffffffffff, 0xab0a, 0x8) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000140)=0x15) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000300)) unshare(0x8000000) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0x7, 0x0, 0x0) shmget$private(0x0, 0xfffffffffeffffff, 0x4800, &(0x7f0000ffc000/0x3000)=nil) 6m58.044994123s ago: executing program 5 (id=413): openat$tun(0xffffffffffffff9c, 0x0, 0x60280, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x711301, 0x58) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x2, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x10}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r5 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0x6}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x4000) 6m42.533488168s ago: executing program 36 (id=413): openat$tun(0xffffffffffffff9c, 0x0, 0x60280, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x711301, 0x58) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x2, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x10}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r5 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0x6}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x4000) 2m54.242045956s ago: executing program 6 (id=672): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes192\x00'}, 0x58) socket$inet6_sctp(0xa, 0x1, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$EVIOCGREP(0xffffffffffffffff, 0x80084522, 0x0) lsm_set_self_attr(0x68, &(0x7f0000000240)=ANY=[], 0x20, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/wakeup_count', 0x101a02, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x40) setxattr$system_posix_acl(0x0, &(0x7f0000000080)='system.posix_acl_access\x00', 0x0, 0x0, 0x3) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) close_range(r4, 0xffffffffffffffff, 0x0) 2m52.030505537s ago: executing program 6 (id=674): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$tipc(0x1e, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) prctl$PR_SET_NAME(0xf, 0x0) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) timer_create(0x3, &(0x7f0000000040)={0x0, 0x8, 0x0, @tid=r0}, &(0x7f0000000180)) clock_gettime(0x0, &(0x7f00000001c0)) socket$inet6(0xa, 0x2, 0x3a) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b000000"], 0x48) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) syz_emit_ethernet(0x2e, &(0x7f0000000340)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x3, 0x0, 0x20, 0x0, 0x0, 0x0, 0x4, 0x0, @empty, @multicast1}, {0x0, 0x0, 0xc, 0x0, @gue={{0x1, 0x1, 0x1, 0x2, 0x100, @void}}}}}}}, 0x0) 2m48.817026333s ago: executing program 6 (id=677): r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000066000000004b64ffec850000006d000000c50000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) write$binfmt_aout(0xffffffffffffffff, 0x0, 0xfffffeb7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r5, &(0x7f0000f67fe4)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000040)=0x1) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) recvmmsg(r7, 0x0, 0x0, 0x0, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, 0x0) 2m46.694289125s ago: executing program 6 (id=682): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80280, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet6(0xa, 0x1, 0x8010000000000084) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891018, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) mount$bind(&(0x7f00000002c0)='./file0/file0\x00', &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x12f451, 0x0) mount$bind(&(0x7f00000000c0)='.\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x80700a, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) 2m41.212661373s ago: executing program 6 (id=690): r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_pressure(r0, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'sm3\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x80000) sendmsg$kcm(r5, &(0x7f0000001880)={0x0, 0x0, &(0x7f0000001600)=[{0x0}, {&(0x7f0000001680)="094fb143daa9baa36aaa2cca06886c", 0xf}], 0x2}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r6, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000300)={0x0, 0x2c}, 0x1, 0x0, 0x0, 0x8050}, 0x44008000) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_SET(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB='4\x00\x00', @ANYBLOB="de0515ad3a4e6501a171", @ANYRES8=r2], 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 2m33.163236654s ago: executing program 6 (id=704): prctl$PR_SET_MM(0x23, 0x4, &(0x7f0000ffc000/0x1000)=nil) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) listen(r0, 0x5) r5 = socket$inet_sctp(0x2, 0x1, 0x84) r6 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000001080)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r6, 0x84, 0x72, &(0x7f00000002c0)={r7, 0x7, 0x30}, &(0x7f00000000c0)=0xc) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r5, 0x84, 0x71, 0x0, &(0x7f0000000180)) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000000)=0x8, 0x4) 2m28.872611037s ago: executing program 37 (id=704): prctl$PR_SET_MM(0x23, 0x4, &(0x7f0000ffc000/0x1000)=nil) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) listen(r0, 0x5) r5 = socket$inet_sctp(0x2, 0x1, 0x84) r6 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000001080)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r6, 0x84, 0x72, &(0x7f00000002c0)={r7, 0x7, 0x30}, &(0x7f00000000c0)=0xc) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r5, 0x84, 0x71, 0x0, &(0x7f0000000180)) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000000)=0x8, 0x4) 53.645155718s ago: executing program 9 (id=874): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)}, {0x0}], 0x2) openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0xc2d41, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000280), 0xffffffffffffffff) r3 = socket$l2tp(0x2, 0x2, 0x73) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="230900000000000000000100000005000700000000000800090000000000060002000100000008000a000000000008001700", @ANYRES32=r3], 0x3c}}, 0x0) close(r3) ioctl$NBD_SET_FLAGS(0xffffffffffffffff, 0xab0a, 0x8) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000140)=0x15) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000300)) unshare(0x8000000) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0x7, 0x0, 0x0) shmget$private(0x0, 0xfffffffffeffffff, 0x4800, &(0x7f0000ffc000/0x3000)=nil) 52.282796609s ago: executing program 9 (id=876): sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000140)={0xa, 0x0, 0x0, @private0}, 0x1c) socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, 0x0, 0x0) r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000400)=@nameseq={0x1e, 0x1, 0x3, {0x42, 0x0, 0x2}}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xfffffffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ(r2, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x24040808) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x7f, &(0x7f0000000080)=""/4057, 0x0) clock_gettime(0x4, 0x0) 52.036879661s ago: executing program 8 (id=879): sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000140)={0xa, 0x0, 0x0, @private0}, 0x1c) socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, 0x0, 0x0) r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000400)=@nameseq={0x1e, 0x1, 0x3, {0x42, 0x0, 0x2}}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xfffffffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ(r2, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x24040808) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x7f, &(0x7f0000000080)=""/4057, 0x0) clock_gettime(0x4, 0x0) syz_emit_vhci(0x0, 0x9) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) 52.007916378s ago: executing program 9 (id=880): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x150) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000003c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x51, '\x00', 0x0, @fallback=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000f0000000000000c00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000200b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setrlimit(0xf, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x8, &(0x7f0000000400)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b703000000e00000850000001b000000b700000000fa0000"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000200)='kmem_cache_free\x00', r4}, 0x18) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) r6 = syz_open_dev$usbfs(&(0x7f0000000080), 0x74, 0x101301) ioctl$USBDEVFS_IOCTL(r6, 0xc0105512, &(0x7f0000000200)) 51.927365815s ago: executing program 8 (id=882): pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) dup2(0xffffffffffffffff, 0xffffffffffffffff) write$FUSE_DIRENTPLUS(r2, &(0x7f0000002100)=ANY=[@ANYBLOB="b0000000000000001659ec0889419429aa5db97288b0f8a87ea8e66d9a8b"], 0xb0) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000140)=ANY=[@ANYBLOB="10"], 0x10) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f0000000200)={0x30, 0x5, 0x0, {0x0, 0x1, 0x5, 0x7}}, 0x30) write$FUSE_DIRENTPLUS(r2, &(0x7f00000002c0)=ANY=[@ANYBLOB="b0000000000000", @ANYRES16=r1], 0xb0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfd', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',posixacl']) 51.534701855s ago: executing program 8 (id=884): socketpair$unix(0x1, 0x3, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x5, 0x8, 0x0, 0xb}, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) symlink(0x0, &(0x7f0000000000)='./file0\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f326635004000000f300f20e06635800000000f22e0f30fa6c8", 0x50}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004000}, 0x14) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r5, 0x4038ae7a, &(0x7f0000000100)={0x2, 0x40000105, 0x0, 0x0}) openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 49.323672486s ago: executing program 8 (id=887): socketpair$unix(0x1, 0x3, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x5, 0x8, 0x0, 0xb}, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) symlink(0x0, &(0x7f0000000000)='./file0\x00') preadv(r1, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f326635004000000f300f20e06635800000000f22e0f30fa6c8", 0x50}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r3, 0x4038ae7a, &(0x7f0000000100)={0x2, 0x40000105, 0x0, 0x0}) 48.802109566s ago: executing program 9 (id=888): openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x842, 0x0) socket$kcm(0x2, 0x3, 0x2) r0 = socket$inet(0x2, 0x6000000000000001, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[], 0x1c}}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, 0x0, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a78000000060a0b0400000000000000000200000038000480340001800b00010074617267657400002400028010000100434f4e4e5345434d41524b0005000300ef00000008000240000000000900010073797a30000000000900020073797a32000000001400058008000240000000"], 0xa0}}, 0x14b6deac033214c2) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000080)=0x3ad, 0x4) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @local}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$sock_int(r2, 0x1, 0x29, &(0x7f0000000000)=0x7b, 0x4) recvfrom$inet(r2, 0x0, 0x0, 0x2043, 0x0, 0x0) mmap(&(0x7f0000001000/0x200000)=nil, 0x200000, 0x1, 0x11, r0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = syz_io_uring_setup(0x1239, &(0x7f0000000380)={0x0, 0x3c3, 0x80, 0x3, 0x2b9}, &(0x7f0000000040)=0x0, &(0x7f0000000200)=0x0) syz_io_uring_submit(r6, r7, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000080)=@l2tp={0x2, 0x0, @local, 0x3}}) io_uring_enter(r5, 0x47bc, 0x0, 0x0, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000080)={@broadcast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0xfe, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote}, @time_exceeded={0x3, 0x1, 0x0, 0x3, 0x24, 0x0, {0x8, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x7, @local, @loopback=0xac1414aa, {[@cipso={0x86, 0x6, 0xffffffffffffffff}, @cipso={0x86, 0x6, 0x20}]}}}}}}}, 0x0) r8 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) ioctl$UDMABUF_CREATE_LIST(r8, 0x40087543, &(0x7f0000000080)=ANY=[@ANYBLOB="0000ac000001"]) 48.433252137s ago: executing program 8 (id=892): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0xc2d41, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000280), 0xffffffffffffffff) r3 = socket$l2tp(0x2, 0x2, 0x73) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="230900000000000000000100000005000700000000000800090000000000060002000100000008000a000000000008001700", @ANYRES32=r3], 0x3c}}, 0x0) close(r3) ioctl$NBD_SET_FLAGS(0xffffffffffffffff, 0xab0a, 0x8) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000140)=0x15) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000300)) unshare(0x8000000) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0x7, 0x0, 0x0) shmget$private(0x0, 0xfffffffffeffffff, 0x4800, &(0x7f0000ffc000/0x3000)=nil) 48.408172531s ago: executing program 9 (id=893): pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) dup2(0xffffffffffffffff, 0xffffffffffffffff) write$FUSE_DIRENTPLUS(r2, &(0x7f0000002100)=ANY=[@ANYBLOB="b0000000000000001659ec0889419429aa5db97288b0f8a87ea8e66d9a8b"], 0xb0) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000140)=ANY=[@ANYBLOB="10"], 0x10) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f0000000200)={0x30, 0x5, 0x0, {0x0, 0x1, 0x5, 0x7}}, 0x30) write$FUSE_DIRENTPLUS(r2, &(0x7f00000002c0)=ANY=[@ANYBLOB="b0000000000000", @ANYRES16=r1], 0xb0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfd', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',posixacl']) 48.239469472s ago: executing program 8 (id=895): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0x0, 0x0, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f0000002540)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) socket$netlink(0x10, 0x3, 0x10) socket(0x2b, 0x80801, 0x1) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[], 0x48}, 0x1, 0x2}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000000050005000200000c12000300686173683a6e65742c706f7274"], 0x4c}}, 0x2) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x54, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x9}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}]}, 0x54}}, 0x0) sendmsg$IPSET_CMD_ADD(r3, &(0x7f0000000280)={0x0, 0x224e, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000090601020000ffff00000000020000000900020073797a31000000000500010007000000280007800c00018008000140ffffffff0500070084000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) 48.212274818s ago: executing program 9 (id=897): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000066000000004b64ffec850000006d000000c50000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) dup(0xffffffffffffffff) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0xffffffffffffff2b, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) mkdir(0x0, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="5c00000026006bab9a3fe3d86e17aa31106b876c1d0000007ea60864160af36504001a0038001d004231a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb5b64f69853362ac3407173ec", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4080) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x3000008, 0x12, 0xffffffffffffffff, 0xabb35000) recvmsg$kcm(r4, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x40000100) r5 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r5, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r5, 0x40946400, &(0x7f00000000c0)={'ni_at_a2150\x00', [0x4f27, 0x3, 0x10000, 0x2f, 0x66, 0xcc7, 0xe, 0x0, 0xa, 0x100, 0x9, 0x1, 0x1db, 0x5, 0x0, 0x80000101, 0x5, 0x1a449, 0x3, 0x40020003, 0x208d, 0x2, 0xd27, 0xae, 0x7fff, 0x8, 0x3c, 0x1, 0x6, 0x0, 0x1000000]}) 43.575677193s ago: executing program 0 (id=900): r0 = open(&(0x7f0000000000)='./file0\x00', 0x148640, 0x78e22799f4a46faf) r1 = open(&(0x7f0000000080)='.\x00', 0x0, 0x122) mount$bind(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x803400, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'pimreg0\x00', 0x0}) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r5 = dup3(r4, r3, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x800, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r6, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x10a, 0x2}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) mmap$fb(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x13, r5, 0xd8000) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000440)="97713b46fbaa2b1044f2d408ffca802db4d770eb9874f493e0ef367e4bde497c403b450c72ff2417d079bb892435a1e107fa5c0ecd207d9e6f2a209bf148e6bc56955cb53347d1499097488fcad724a1"}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000600)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r3, 0x40046208, 0x0) sendmsg$can_j1939(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x1d, r2, 0x1, {0x0, 0xf0, 0x2}, 0xfd}, 0x18, &(0x7f0000000200)={&(0x7f00000001c0)="7dab368d695b64d78e6c6a8588869682636f", 0x12}, 0x1, 0x0, 0x0, 0x10}, 0x800) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) close(0xffffffffffffffff) umount2(&(0x7f0000000180)='./file0\x00', 0x1) unlinkat(r1, &(0x7f0000000100)='./file0\x00', 0x0) 42.629517701s ago: executing program 0 (id=902): socket$inet(0x2, 0x1, 0x100) socket$inet6_udplite(0xa, 0x2, 0x88) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES32], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, 0x0, &(0x7f0000000040)='c:::\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) tkill(0x0, 0xb) utimensat(0xffffffffffffff9c, &(0x7f00000003c0)='.\x00', 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f0000000040)='blkio.bfq.time_recursive\x00', 0x0, 0x0) preadv2(r5, &(0x7f0000000280)=[{&(0x7f00000008c0)=""/211, 0xd3}], 0x1, 0x0, 0x0, 0x0) 42.459769754s ago: executing program 7 (id=903): socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfec8d000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r4 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x42, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(r4) execve(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r5 = getpid() r6 = syz_pidfd_open(r5, 0x0) r7 = pidfd_getfd(r6, r6, 0x0) setns(r7, 0x66020000) socket$inet6_tcp(0xa, 0x1, 0x0) r8 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x0) fsetxattr$security_ima(r8, &(0x7f0000000040), &(0x7f00000002c0)=ANY=[@ANYBLOB="030011000000000000"], 0x9, 0x0) 40.665687059s ago: executing program 7 (id=904): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0xc2d41, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000280), 0xffffffffffffffff) r3 = socket$l2tp(0x2, 0x2, 0x73) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="230900000000000000000100000005000700000000000800090000000000060002000100000008000a000000000008001700", @ANYRES32=r3], 0x3c}}, 0x0) close(r3) ioctl$NBD_SET_FLAGS(0xffffffffffffffff, 0xab0a, 0x8) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000140)=0x15) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000300)) unshare(0x8000000) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0x7, 0x0, 0x0) shmget$private(0x0, 0xfffffffffeffffff, 0x4800, &(0x7f0000ffc000/0x3000)=nil) 39.160145339s ago: executing program 0 (id=905): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0xc2d41, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000280), 0xffffffffffffffff) r2 = socket$l2tp(0x2, 0x2, 0x73) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) close(r2) ioctl$NBD_SET_FLAGS(0xffffffffffffffff, 0xab0a, 0x8) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000140)=0x15) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000300)) unshare(0x8000000) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0x7, 0x0, 0x0) shmget$private(0x0, 0xfffffffffeffffff, 0x4800, &(0x7f0000ffc000/0x3000)=nil) 38.108219042s ago: executing program 7 (id=906): pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) dup2(0xffffffffffffffff, 0xffffffffffffffff) write$FUSE_DIRENTPLUS(r2, &(0x7f0000002100)=ANY=[@ANYBLOB="b0000000000000001659ec0889419429aa5db97288b0f8a87ea8e66d9a8b"], 0xb0) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000140)=ANY=[@ANYBLOB="10"], 0x10) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f0000000200)={0x30, 0x5, 0x0, {0x0, 0x1, 0x5, 0x7}}, 0x30) write$FUSE_DIRENTPLUS(r2, &(0x7f00000002c0)=ANY=[@ANYBLOB="b0000000000000", @ANYRES16=r1], 0xb0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfd', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',posixacl']) 37.800039369s ago: executing program 0 (id=907): syz_open_dev$vim2m(0x0, 0x1, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socket$inet_icmp_raw(0x2, 0x3, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32], 0x48) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) 37.324568581s ago: executing program 7 (id=908): r0 = dup(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000100)='affs\x00', 0x200000, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x13f, 0x4}}, 0x20) r4 = dup(0xffffffffffffffff) shutdown(r4, 0x1) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000840)={0x0, @in6={{0xa, 0x4e60, 0xfffffff2, @empty, 0x3}}, 0x1000000, 0x31, 0xffff1896, 0x3, 0x6, 0x0, 0x1b}, 0x9c) 35.627930578s ago: executing program 7 (id=909): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$snapshot(0xffffffffffffff9c, 0x0, 0xc2d41, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000280), 0xffffffffffffffff) r3 = socket$l2tp(0x2, 0x2, 0x73) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="230900000000000000000100000005000700000000000800090000000000060002000100000008000a000000000008001700", @ANYRES32=r3], 0x3c}}, 0x0) close(r3) ioctl$NBD_SET_FLAGS(0xffffffffffffffff, 0xab0a, 0x8) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000140)=0x15) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000300)) unshare(0x8000000) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0x7, 0x0, 0x0) shmget$private(0x0, 0xfffffffffeffffff, 0x4800, &(0x7f0000ffc000/0x3000)=nil) 35.620443674s ago: executing program 0 (id=910): socketpair$unix(0x1, 0x3, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x5, 0x8, 0x0, 0xb}, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f326635004000000f300f20e06635800000000f22e0f30fa6c8", 0x50}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004000}, 0x14) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r5, 0x4038ae7a, &(0x7f0000000100)={0x2, 0x40000105, 0x0, 0x0}) openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 20.777234766s ago: executing program 38 (id=897): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000066000000004b64ffec850000006d000000c50000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) dup(0xffffffffffffffff) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0xffffffffffffff2b, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) mkdir(0x0, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="5c00000026006bab9a3fe3d86e17aa31106b876c1d0000007ea60864160af36504001a0038001d004231a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb5b64f69853362ac3407173ec", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4080) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x3000008, 0x12, 0xffffffffffffffff, 0xabb35000) recvmsg$kcm(r4, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x40000100) r5 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r5, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r5, 0x40946400, &(0x7f00000000c0)={'ni_at_a2150\x00', [0x4f27, 0x3, 0x10000, 0x2f, 0x66, 0xcc7, 0xe, 0x0, 0xa, 0x100, 0x9, 0x1, 0x1db, 0x5, 0x0, 0x80000101, 0x5, 0x1a449, 0x3, 0x40020003, 0x208d, 0x2, 0xd27, 0xae, 0x7fff, 0x8, 0x3c, 0x1, 0x6, 0x0, 0x1000000]}) 20.635357533s ago: executing program 39 (id=895): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0x0, 0x0, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f0000002540)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) socket$netlink(0x10, 0x3, 0x10) socket(0x2b, 0x80801, 0x1) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[], 0x48}, 0x1, 0x2}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000000050005000200000c12000300686173683a6e65742c706f7274"], 0x4c}}, 0x2) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x54, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x9}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}]}, 0x54}}, 0x0) sendmsg$IPSET_CMD_ADD(r3, &(0x7f0000000280)={0x0, 0x224e, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000090601020000ffff00000000020000000900020073797a31000000000500010007000000280007800c00018008000140ffffffff0500070084000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) 20.592480717s ago: executing program 0 (id=913): mount(0x0, 0x0, 0x0, 0x8, 0x0) rt_sigprocmask(0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xa6}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) syz_emit_vhci(0x0, 0x0) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xffffffed]}, 0x0, 0x8) getpid() syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r5, &(0x7f0000000240)={0xa, 0x4e24, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x3}, 0x1c) connect$inet6(r5, &(0x7f0000000040)={0xa, 0x4e24, 0x400, @dev={0xfe, 0x80, '\x00', 0xc}, 0x8}, 0x1c) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) syz_emit_ethernet(0x2a, &(0x7f0000000180)={@random="9b43a409aa81", @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x1, 0x0, @multicast1, @multicast1}, @echo_reply={0xe0}}}}}, 0x0) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={0x58, r6, 0x1, 0x70bd26, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x34, 0x33, @deauth={{{0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, {0xaf8}, @device_b, @device_a, @random="fae6e00b5160", {0x7, 0x6a2}, @value=@ver_80211n={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0x37, @val={0x8c, 0x10, {0x443, "eff477b60520", @short="c4eba048f76d3006"}}}}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x8, 0xcd, [0x1, 0x0]}]}, 0x58}, 0x1, 0x0, 0x0, 0xc0}, 0x810) 20.384724567s ago: executing program 7 (id=914): prlimit64(0x0, 0xe, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x40001e0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket(0x40000000015, 0x5, 0x0) r3 = socket(0x10, 0x2, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r4, &(0x7f0000000340)={0xa, 0x3, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f0000000180)=@gcm_128={{0x304}, "a6341a1a379332f5", "42d33c81cf7b0400000000000000ed74", "62266bd8"}, 0x28) write$binfmt_script(r4, &(0x7f0000000500)={'#! ', './file0'}, 0xb) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x23, &(0x7f0000000280)={&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd87}, &(0x7f0000000240)=0x40) writev(r4, &(0x7f0000000100)=[{&(0x7f0000000a40)="fb", 0x1}], 0x1) close_range(r3, r4, 0x0) 280.943568ms ago: executing program 40 (id=913): mount(0x0, 0x0, 0x0, 0x8, 0x0) rt_sigprocmask(0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xa6}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) syz_emit_vhci(0x0, 0x0) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xffffffed]}, 0x0, 0x8) getpid() syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r5, &(0x7f0000000240)={0xa, 0x4e24, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x3}, 0x1c) connect$inet6(r5, &(0x7f0000000040)={0xa, 0x4e24, 0x400, @dev={0xfe, 0x80, '\x00', 0xc}, 0x8}, 0x1c) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) syz_emit_ethernet(0x2a, &(0x7f0000000180)={@random="9b43a409aa81", @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x1, 0x0, @multicast1, @multicast1}, @echo_reply={0xe0}}}}}, 0x0) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={0x58, r6, 0x1, 0x70bd26, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x34, 0x33, @deauth={{{0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, {0xaf8}, @device_b, @device_a, @random="fae6e00b5160", {0x7, 0x6a2}, @value=@ver_80211n={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0x37, @val={0x8c, 0x10, {0x443, "eff477b60520", @short="c4eba048f76d3006"}}}}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x8, 0xcd, [0x1, 0x0]}]}, 0x58}, 0x1, 0x0, 0x0, 0xc0}, 0x810) 0s ago: executing program 41 (id=914): prlimit64(0x0, 0xe, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x40001e0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket(0x40000000015, 0x5, 0x0) r3 = socket(0x10, 0x2, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r4, &(0x7f0000000340)={0xa, 0x3, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f0000000180)=@gcm_128={{0x304}, "a6341a1a379332f5", "42d33c81cf7b0400000000000000ed74", "62266bd8"}, 0x28) write$binfmt_script(r4, &(0x7f0000000500)={'#! ', './file0'}, 0xb) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x23, &(0x7f0000000280)={&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd87}, &(0x7f0000000240)=0x40) writev(r4, &(0x7f0000000100)=[{&(0x7f0000000a40)="fb", 0x1}], 0x1) close_range(r3, r4, 0x0) kernel console output (not intermixed with test programs): _adv: batadv0: Adding interface: batadv_slave_0 [ 380.672779][ T7228] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 380.672801][ T7228] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 380.676301][ T7177] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 380.676313][ T7177] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 380.676334][ T7177] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 380.688651][ T7060] hsr_slave_0: entered promiscuous mode [ 380.690039][ T7060] hsr_slave_1: entered promiscuous mode [ 380.693042][ T7174] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 380.693055][ T7174] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 380.693076][ T7174] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 380.694701][ T7228] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 380.694712][ T7228] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 380.694734][ T7228] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 380.789723][ T7177] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 380.789739][ T7177] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 380.789762][ T7177] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 381.870457][ T7174] hsr_slave_0: entered promiscuous mode [ 381.871826][ T7174] hsr_slave_1: entered promiscuous mode [ 381.872759][ T7174] debugfs: 'hsr0' already exists in 'hsr' [ 381.872781][ T7174] Cannot create hsr debugfs directory [ 381.978186][ T7228] hsr_slave_0: entered promiscuous mode [ 381.979515][ T7228] hsr_slave_1: entered promiscuous mode [ 381.980407][ T7228] debugfs: 'hsr0' already exists in 'hsr' [ 381.980428][ T7228] Cannot create hsr debugfs directory [ 382.290970][ T7177] hsr_slave_0: entered promiscuous mode [ 382.292359][ T7177] hsr_slave_1: entered promiscuous mode [ 382.293325][ T7177] debugfs: 'hsr0' already exists in 'hsr' [ 382.293348][ T7177] Cannot create hsr debugfs directory [ 383.584639][ T6017] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.983041][ T6017] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 384.393842][ T6017] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 384.743647][ T6017] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 385.077968][ T7060] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 385.137328][ T7060] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 385.185604][ T7060] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 385.369555][ T7060] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 386.054759][ T7060] 8021q: adding VLAN 0 to HW filter on device bond0 [ 386.077352][ T6017] bridge_slave_1: left allmulticast mode [ 386.077383][ T6017] bridge_slave_1: left promiscuous mode [ 386.077757][ T6017] bridge0: port 2(bridge_slave_1) entered disabled state [ 386.196947][ T6017] bridge_slave_0: left allmulticast mode [ 386.196985][ T6017] bridge_slave_0: left promiscuous mode [ 386.197267][ T6017] bridge0: port 1(bridge_slave_0) entered disabled state [ 386.293518][ T6017] bridge_slave_1: left allmulticast mode [ 386.293550][ T6017] bridge_slave_1: left promiscuous mode [ 386.293795][ T6017] bridge0: port 2(bridge_slave_1) entered disabled state [ 386.379897][ T6017] bridge_slave_0: left allmulticast mode [ 386.379931][ T6017] bridge_slave_0: left promiscuous mode [ 386.380185][ T6017] bridge0: port 1(bridge_slave_0) entered disabled state [ 386.482153][ T6017] bridge_slave_1: left allmulticast mode [ 386.482186][ T6017] bridge_slave_1: left promiscuous mode [ 386.482431][ T6017] bridge0: port 2(bridge_slave_1) entered disabled state [ 386.569421][ T6017] bridge_slave_0: left allmulticast mode [ 386.569454][ T6017] bridge_slave_0: left promiscuous mode [ 386.569716][ T6017] bridge0: port 1(bridge_slave_0) entered disabled state [ 386.673584][ T6017] bridge_slave_1: left allmulticast mode [ 386.673618][ T6017] bridge_slave_1: left promiscuous mode [ 386.673859][ T6017] bridge0: port 2(bridge_slave_1) entered disabled state [ 386.759385][ T6017] bridge_slave_0: left allmulticast mode [ 386.759418][ T6017] bridge_slave_0: left promiscuous mode [ 386.759671][ T6017] bridge0: port 1(bridge_slave_0) entered disabled state [ 386.855637][ T6017] bridge_slave_0: left allmulticast mode [ 386.855668][ T6017] bridge_slave_0: left promiscuous mode [ 386.855915][ T6017] bridge0: port 1(bridge_slave_0) entered disabled state [ 387.406408][ T6017] bond0 (unregistering): Released all slaves [ 387.596415][ T6017] bond0 (unregistering): Released all slaves [ 388.611519][ T6017] dvmrp17 (unregistering): left allmulticast mode [ 389.830250][ T6017] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 389.890869][ T6017] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 389.933335][ T6017] bond0 (unregistering): Released all slaves [ 390.199805][ T6017] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 390.311371][ T6017] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 390.383852][ T6017] bond0 (unregistering): Released all slaves [ 390.678845][ T6017] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 390.768646][ T6017] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 390.833750][ T6017] bond0 (unregistering): Released all slaves [ 391.090752][ T6017] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 391.168689][ T6017] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 391.234181][ T6017] bond0 (unregistering): Released all slaves [ 391.428570][ T6017] bond0 (unregistering): Released all slaves [ 391.992258][ T7174] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 392.121449][ T7174] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 392.229229][ T7174] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 392.309957][ T5845] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 392.316587][ T5845] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 392.344433][ T5845] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 392.362173][ T5845] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 392.375628][ T5845] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 392.540232][ T7174] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 393.560390][ T7228] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 393.671237][ T7228] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 394.069298][ T7228] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 394.211074][ T7228] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 394.419472][ T59] Bluetooth: hci1: command tx timeout [ 394.451226][ T7177] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 394.512902][ T7177] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 394.567895][ T7177] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 394.609664][ T7177] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 394.789609][ T6017] hsr_slave_0: left promiscuous mode [ 394.818584][ T6017] hsr_slave_1: left promiscuous mode [ 394.819495][ T6017] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 394.819513][ T6017] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 394.870444][ T6017] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 394.870476][ T6017] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 394.893416][ T6017] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 394.928863][ T6017] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 395.075274][ T6017] hsr_slave_0: left promiscuous mode [ 395.108035][ T6017] hsr_slave_1: left promiscuous mode [ 395.110523][ T6017] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 395.138928][ T6017] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 395.224950][ T6017] hsr_slave_0: left promiscuous mode [ 395.259591][ T6017] hsr_slave_1: left promiscuous mode [ 395.260546][ T6017] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 395.290188][ T6017] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 395.426006][ T6017] veth1_macvtap: left promiscuous mode [ 395.426129][ T6017] veth0_macvtap: left promiscuous mode [ 395.426434][ T6017] veth1_vlan: left promiscuous mode [ 395.426648][ T6017] veth0_vlan: left promiscuous mode [ 396.509992][ T59] Bluetooth: hci1: command tx timeout [ 398.308844][ T6017] team0 (unregistering): Port device team_slave_1 removed [ 398.560258][ T6017] team0 (unregistering): Port device team_slave_0 removed [ 398.588885][ T59] Bluetooth: hci1: command tx timeout [ 400.657900][ T59] Bluetooth: hci1: command tx timeout [ 401.306492][ T6017] team0 (unregistering): Port device team_slave_1 removed [ 401.468473][ T6017] team0 (unregistering): Port device team_slave_0 removed [ 402.848334][ T6017] team0 (unregistering): Port device team_slave_1 removed [ 402.998620][ T6017] team0 (unregistering): Port device team_slave_0 removed [ 403.986684][ T6017] team0 (unregistering): Port device team_slave_1 removed [ 404.130058][ T6017] team0 (unregistering): Port device team_slave_0 removed [ 405.533169][ T7352] chnl_net:caif_netlink_parms(): no params data found [ 405.982626][ T7174] 8021q: adding VLAN 0 to HW filter on device bond0 [ 406.256978][ T7352] bridge0: port 1(bridge_slave_0) entered blocking state [ 406.257187][ T7352] bridge0: port 1(bridge_slave_0) entered disabled state [ 406.257389][ T7352] bridge_slave_0: entered allmulticast mode [ 406.267181][ T7352] bridge_slave_0: entered promiscuous mode [ 406.285964][ T7352] bridge0: port 2(bridge_slave_1) entered blocking state [ 406.286102][ T7352] bridge0: port 2(bridge_slave_1) entered disabled state [ 406.286289][ T7352] bridge_slave_1: entered allmulticast mode [ 406.290496][ T7352] bridge_slave_1: entered promiscuous mode [ 406.562435][ T7352] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 406.584606][ T7352] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 406.599706][ T7174] 8021q: adding VLAN 0 to HW filter on device team0 [ 406.881701][ T7228] 8021q: adding VLAN 0 to HW filter on device bond0 [ 406.884345][ T7352] team0: Port device team_slave_0 added [ 406.971016][ T5996] bridge0: port 1(bridge_slave_0) entered blocking state [ 406.971161][ T5996] bridge0: port 1(bridge_slave_0) entered forwarding state [ 406.975847][ T7352] team0: Port device team_slave_1 added [ 407.147312][ T4504] bridge0: port 2(bridge_slave_1) entered blocking state [ 407.147480][ T4504] bridge0: port 2(bridge_slave_1) entered forwarding state [ 407.274885][ T7352] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 407.274901][ T7352] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 407.274923][ T7352] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 407.323997][ T7352] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 407.324013][ T7352] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 407.324036][ T7352] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 407.472796][ T7228] 8021q: adding VLAN 0 to HW filter on device team0 [ 407.788932][ T7352] hsr_slave_0: entered promiscuous mode [ 407.791618][ T7352] hsr_slave_1: entered promiscuous mode [ 407.792548][ T7352] debugfs: 'hsr0' already exists in 'hsr' [ 407.792571][ T7352] Cannot create hsr debugfs directory [ 407.824823][ T7177] 8021q: adding VLAN 0 to HW filter on device bond0 [ 407.882369][ T1155] bridge0: port 1(bridge_slave_0) entered blocking state [ 407.885504][ T1155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 408.151733][ T5996] bridge0: port 2(bridge_slave_1) entered blocking state [ 408.151921][ T5996] bridge0: port 2(bridge_slave_1) entered forwarding state [ 408.490438][ T7177] 8021q: adding VLAN 0 to HW filter on device team0 [ 408.595704][ T5996] bridge0: port 1(bridge_slave_0) entered blocking state [ 408.595938][ T5996] bridge0: port 1(bridge_slave_0) entered forwarding state [ 408.824967][ T5996] bridge0: port 2(bridge_slave_1) entered blocking state [ 408.825103][ T5996] bridge0: port 2(bridge_slave_1) entered forwarding state [ 409.747581][ T7174] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 410.278459][ T7228] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 410.776344][ T7177] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 411.557888][ T7352] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 411.684750][ T7352] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 411.792057][ T7352] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 411.853015][ T7352] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 412.023224][ T7174] veth0_vlan: entered promiscuous mode [ 412.146193][ T7174] veth1_vlan: entered promiscuous mode [ 412.223497][ T7228] veth0_vlan: entered promiscuous mode [ 412.285222][ T7177] veth0_vlan: entered promiscuous mode [ 412.319746][ T7228] veth1_vlan: entered promiscuous mode [ 412.439329][ T7177] veth1_vlan: entered promiscuous mode [ 412.469170][ T6017] bridge_slave_1: left allmulticast mode [ 412.469203][ T6017] bridge_slave_1: left promiscuous mode [ 412.469452][ T6017] bridge0: port 2(bridge_slave_1) entered disabled state [ 412.556754][ T6017] bridge_slave_0: left allmulticast mode [ 412.556779][ T6017] bridge_slave_0: left promiscuous mode [ 412.556965][ T6017] bridge0: port 1(bridge_slave_0) entered disabled state [ 414.138988][ T6017] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 414.238408][ T6017] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 414.306728][ T6017] bond0 (unregistering): Released all slaves [ 414.364626][ T7174] veth0_macvtap: entered promiscuous mode [ 414.461525][ T7174] veth1_macvtap: entered promiscuous mode [ 414.768044][ T6017] hsr_slave_0: left promiscuous mode [ 414.827898][ T6017] hsr_slave_1: left promiscuous mode [ 414.830162][ T6017] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 414.878882][ T6017] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 415.718720][ T6017] team0 (unregistering): Port device team_slave_1 removed [ 415.848737][ T6017] team0 (unregistering): Port device team_slave_0 removed [ 416.495128][ T7228] veth0_macvtap: entered promiscuous mode [ 416.566816][ T7177] veth0_macvtap: entered promiscuous mode [ 416.588173][ T7228] veth1_macvtap: entered promiscuous mode [ 416.609939][ T7177] veth1_macvtap: entered promiscuous mode [ 416.636395][ T7352] 8021q: adding VLAN 0 to HW filter on device bond0 [ 416.760404][ T7228] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 416.816088][ T7177] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 416.875055][ T7228] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 416.911703][ T7352] 8021q: adding VLAN 0 to HW filter on device team0 [ 416.931010][ T7177] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 416.982805][ T43] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 416.984980][ T6541] bridge0: port 1(bridge_slave_0) entered blocking state [ 416.985183][ T6541] bridge0: port 1(bridge_slave_0) entered forwarding state [ 416.987161][ T43] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 416.991807][ T43] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 417.004123][ T43] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 417.040419][ T43] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 417.083130][ T43] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 417.093703][ T43] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 417.103123][ T1155] bridge0: port 2(bridge_slave_1) entered blocking state [ 417.103410][ T1155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 417.213042][ T43] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 417.393145][ T5845] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 417.409657][ T5845] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 417.436762][ T5845] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 417.459391][ T5845] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 417.460119][ T5845] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 418.404757][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 418.404779][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 418.553590][ T4222] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 418.553610][ T4222] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 418.960041][ T4222] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 418.960061][ T4222] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 419.289929][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 419.289951][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 419.747101][ T59] Bluetooth: hci3: command tx timeout [ 422.363323][ T59] Bluetooth: hci3: command tx timeout [ 427.114829][ T59] Bluetooth: hci3: command tx timeout [ 427.834905][ T5845] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 427.865614][ T5845] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 427.868200][ T5845] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 427.890362][ T5845] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 427.892308][ T5845] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 427.903734][ T7560] netlink: zone id is out of range [ 427.905941][ T7560] netlink: zone id is out of range [ 428.036534][ T7560] netlink: set zone limit has 4 unknown bytes [ 428.149831][ T7560] netlink: del zone limit has 4 unknown bytes [ 429.147841][ T5845] Bluetooth: hci3: command tx timeout [ 430.107870][ T5845] Bluetooth: hci0: command tx timeout [ 430.562327][ T7499] chnl_net:caif_netlink_parms(): no params data found [ 432.187851][ T5845] Bluetooth: hci0: command tx timeout [ 432.792306][ T7352] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 432.927270][ T7595] sctp: [Deprecated]: wÞ£ÿ (pid 7595) Use of int in max_burst socket option deprecated. [ 432.927270][ T7595] Use struct sctp_assoc_value instead [ 433.622779][ T7609] netlink: 452 bytes leftover after parsing attributes in process `syz.7.284'. [ 434.257950][ T5845] Bluetooth: hci0: command tx timeout [ 435.100486][ T7499] bridge0: port 1(bridge_slave_0) entered blocking state [ 435.100623][ T7499] bridge0: port 1(bridge_slave_0) entered disabled state [ 435.100802][ T7499] bridge_slave_0: entered allmulticast mode [ 435.117821][ T7499] bridge_slave_0: entered promiscuous mode [ 435.257882][ T7499] bridge0: port 2(bridge_slave_1) entered blocking state [ 435.257970][ T7499] bridge0: port 2(bridge_slave_1) entered disabled state [ 435.258139][ T7499] bridge_slave_1: entered allmulticast mode [ 435.268309][ T7499] bridge_slave_1: entered promiscuous mode [ 435.817916][ T5849] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 436.550758][ T5845] Bluetooth: hci0: command tx timeout [ 436.607266][ T6017] bridge_slave_1: left allmulticast mode [ 436.607298][ T6017] bridge_slave_1: left promiscuous mode [ 436.610399][ T6017] bridge0: port 2(bridge_slave_1) entered disabled state [ 436.817741][ T5849] usb 1-1: Using ep0 maxpacket: 8 [ 436.827942][ T5849] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 436.827973][ T5849] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 436.827994][ T5849] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 436.828013][ T5849] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 436.828060][ T5849] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 436.828080][ T5849] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 436.931197][ T6017] bridge_slave_0: left allmulticast mode [ 436.931228][ T6017] bridge_slave_0: left promiscuous mode [ 436.931489][ T6017] bridge0: port 1(bridge_slave_0) entered disabled state [ 437.048421][ T5849] usb 1-1: GET_CAPABILITIES returned 0 [ 437.048467][ T5849] usbtmc 1-1:16.0: can't read capabilities [ 437.284074][ T5849] usb 1-1: USB disconnect, device number 6 [ 440.112654][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.112728][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.797061][ T7638] libceph: resolve '4' (ret=-3): failed [ 442.093983][ T6017] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 442.349847][ T6017] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 442.375202][ T6017] bond0 (unregistering): Released all slaves [ 443.465285][ T7634] lo speed is unknown, defaulting to 1000 [ 443.470944][ T7634] lo speed is unknown, defaulting to 1000 [ 443.475573][ T7634] lo speed is unknown, defaulting to 1000 [ 443.485255][ T7634] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 443.491462][ T7499] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 443.508291][ T7634] infiniband s: RDMA CMA: cma_listen_on_dev, error -98 [ 443.583389][ T7499] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 443.589919][ T7634] lo speed is unknown, defaulting to 1000 [ 443.594626][ T7634] lo speed is unknown, defaulting to 1000 [ 443.597342][ T7634] lo speed is unknown, defaulting to 1000 [ 443.600118][ T7634] lo speed is unknown, defaulting to 1000 [ 443.602773][ T7634] lo speed is unknown, defaulting to 1000 [ 443.605505][ T7634] lo speed is unknown, defaulting to 1000 [ 443.608195][ T7634] lo speed is unknown, defaulting to 1000 [ 444.039247][ T7499] team0: Port device team_slave_0 added [ 444.060376][ T7499] team0: Port device team_slave_1 added [ 444.247797][ T6017] hsr_slave_0: left promiscuous mode [ 444.289590][ T6017] hsr_slave_1: left promiscuous mode [ 444.290556][ T6017] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 444.319010][ T6017] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 444.427336][ T6017] veth1_macvtap: left promiscuous mode [ 444.427389][ T6017] veth0_macvtap: left promiscuous mode [ 444.427551][ T6017] veth1_vlan: left promiscuous mode [ 444.431945][ T6017] veth0_vlan: left promiscuous mode [ 446.628750][ T6017] team0 (unregistering): Port device team_slave_1 removed [ 446.859828][ T6017] team0 (unregistering): Port device team_slave_0 removed [ 449.396184][ T7499] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 449.396209][ T7499] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 449.396230][ T7499] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 449.459591][ T7499] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 449.459607][ T7499] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 449.459630][ T7499] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 449.825743][ T7499] hsr_slave_0: entered promiscuous mode [ 449.827054][ T7499] hsr_slave_1: entered promiscuous mode [ 449.858493][ T7352] veth0_vlan: entered promiscuous mode [ 449.861468][ T7559] chnl_net:caif_netlink_parms(): no params data found [ 450.301430][ T7352] veth1_vlan: entered promiscuous mode [ 450.734791][ T7559] bridge0: port 1(bridge_slave_0) entered blocking state [ 450.734940][ T7559] bridge0: port 1(bridge_slave_0) entered disabled state [ 450.735185][ T7559] bridge_slave_0: entered allmulticast mode [ 450.748475][ T7559] bridge_slave_0: entered promiscuous mode [ 450.782933][ T7559] bridge0: port 2(bridge_slave_1) entered blocking state [ 450.783072][ T7559] bridge0: port 2(bridge_slave_1) entered disabled state [ 450.783304][ T7559] bridge_slave_1: entered allmulticast mode [ 450.786767][ T7559] bridge_slave_1: entered promiscuous mode [ 451.526930][ T7559] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 451.723146][ T6017] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 451.830176][ T7559] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 452.373375][ T6017] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 452.634212][ T59] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 452.639374][ T59] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 452.641022][ T59] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 452.642187][ T59] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 452.642916][ T59] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 452.744352][ T7559] team0: Port device team_slave_0 added [ 453.034339][ T7559] team0: Port device team_slave_1 added [ 453.210433][ T6017] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 453.623488][ T6017] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 453.677926][ T7559] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 453.677941][ T7559] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 453.677964][ T7559] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 453.824126][ T7559] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 453.824138][ T7559] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 453.824152][ T7559] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 454.005019][ T7680] lo speed is unknown, defaulting to 1000 [ 454.286908][ T7559] hsr_slave_0: entered promiscuous mode [ 454.288922][ T7559] hsr_slave_1: entered promiscuous mode [ 454.289740][ T7559] debugfs: 'hsr0' already exists in 'hsr' [ 454.289763][ T7559] Cannot create hsr debugfs directory [ 454.741678][ T59] Bluetooth: hci4: command tx timeout [ 455.069974][ T6017] bridge_slave_1: left allmulticast mode [ 455.070006][ T6017] bridge_slave_1: left promiscuous mode [ 455.070251][ T6017] bridge0: port 2(bridge_slave_1) entered disabled state [ 455.140148][ T6017] bridge_slave_0: left allmulticast mode [ 455.140182][ T6017] bridge_slave_0: left promiscuous mode [ 455.140470][ T6017] bridge0: port 1(bridge_slave_0) entered disabled state [ 456.818104][ T59] Bluetooth: hci4: command tx timeout [ 457.001012][ T6017] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 457.059531][ T6017] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 457.082926][ T6017] bond0 (unregistering): Released all slaves [ 457.719985][ T7499] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 457.809297][ T7499] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 458.231841][ T7499] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 458.323354][ T7499] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 458.451151][ T7680] chnl_net:caif_netlink_parms(): no params data found [ 458.597974][ T6017] hsr_slave_0: left promiscuous mode [ 458.638178][ T6017] hsr_slave_1: left promiscuous mode [ 458.640476][ T6017] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 458.640505][ T6017] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 458.679017][ T6017] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 458.679047][ T6017] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 458.802680][ T6017] veth1_macvtap: left promiscuous mode [ 458.802807][ T6017] veth0_macvtap: left promiscuous mode [ 458.804729][ T6017] veth1_vlan: left promiscuous mode [ 458.804969][ T6017] veth0_vlan: left promiscuous mode [ 458.898027][ T59] Bluetooth: hci4: command tx timeout [ 460.978029][ T59] Bluetooth: hci4: command tx timeout [ 461.418882][ T6017] team0 (unregistering): Port device team_slave_1 removed [ 461.708587][ T6017] team0 (unregistering): Port device team_slave_0 removed [ 464.890632][ T7680] bridge0: port 1(bridge_slave_0) entered blocking state [ 464.890781][ T7680] bridge0: port 1(bridge_slave_0) entered disabled state [ 464.891022][ T7680] bridge_slave_0: entered allmulticast mode [ 464.893705][ T7680] bridge_slave_0: entered promiscuous mode [ 464.902110][ T7680] bridge0: port 2(bridge_slave_1) entered blocking state [ 464.902307][ T7680] bridge0: port 2(bridge_slave_1) entered disabled state [ 464.902532][ T7680] bridge_slave_1: entered allmulticast mode [ 464.908374][ T7680] bridge_slave_1: entered promiscuous mode [ 465.251261][ T7680] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 465.347274][ T7680] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 465.613048][ T7680] team0: Port device team_slave_0 added [ 465.630029][ T7680] team0: Port device team_slave_1 added [ 465.841417][ T7680] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 465.841431][ T7680] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 465.841444][ T7680] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 465.860277][ T7680] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 465.860293][ T7680] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 465.860315][ T7680] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 465.966417][ T7559] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 466.104995][ T7559] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 466.286450][ T7559] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 466.662717][ T7559] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 466.706422][ T7680] hsr_slave_0: entered promiscuous mode [ 466.707230][ T7680] hsr_slave_1: entered promiscuous mode [ 466.708772][ T7680] debugfs: 'hsr0' already exists in 'hsr' [ 466.708797][ T7680] Cannot create hsr debugfs directory [ 467.988645][ T7499] 8021q: adding VLAN 0 to HW filter on device bond0 [ 468.443711][ T7499] 8021q: adding VLAN 0 to HW filter on device team0 [ 468.599208][ T7636] bridge0: port 1(bridge_slave_0) entered blocking state [ 468.599363][ T7636] bridge0: port 1(bridge_slave_0) entered forwarding state [ 468.681795][ T5998] bridge0: port 2(bridge_slave_1) entered blocking state [ 468.688664][ T5998] bridge0: port 2(bridge_slave_1) entered forwarding state [ 468.835147][ T6017] bridge_slave_1: left allmulticast mode [ 468.835179][ T6017] bridge_slave_1: left promiscuous mode [ 468.835445][ T6017] bridge0: port 2(bridge_slave_1) entered disabled state [ 468.919764][ T6017] bridge_slave_0: left allmulticast mode [ 468.919796][ T6017] bridge_slave_0: left promiscuous mode [ 468.920089][ T6017] bridge0: port 1(bridge_slave_0) entered disabled state [ 470.748970][ T6017] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 470.808738][ T6017] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 470.833884][ T6017] bond0 (unregistering): Released all slaves [ 471.228079][ T6017] hsr_slave_0: left promiscuous mode [ 471.268187][ T6017] hsr_slave_1: left promiscuous mode [ 471.269242][ T6017] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 471.298756][ T6017] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 471.370778][ T6017] veth1_vlan: left promiscuous mode [ 471.370909][ T6017] veth0_vlan: left promiscuous mode [ 473.018908][ T6017] team0 (unregistering): Port device team_slave_1 removed [ 473.288735][ T6017] team0 (unregistering): Port device team_slave_0 removed [ 475.784940][ T7559] 8021q: adding VLAN 0 to HW filter on device bond0 [ 475.970857][ T7559] 8021q: adding VLAN 0 to HW filter on device team0 [ 476.008622][ T4504] bridge0: port 1(bridge_slave_0) entered blocking state [ 476.008778][ T4504] bridge0: port 1(bridge_slave_0) entered forwarding state [ 476.079096][ T5998] bridge0: port 2(bridge_slave_1) entered blocking state [ 476.079245][ T5998] bridge0: port 2(bridge_slave_1) entered forwarding state [ 476.860495][ T7680] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 476.934630][ T7680] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 476.975570][ T7680] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 477.081755][ T7499] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 477.089597][ T7680] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 477.620832][ T7559] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 477.875316][ T7680] 8021q: adding VLAN 0 to HW filter on device bond0 [ 477.947245][ T7680] 8021q: adding VLAN 0 to HW filter on device team0 [ 478.068279][ T5998] bridge0: port 1(bridge_slave_0) entered blocking state [ 478.068438][ T5998] bridge0: port 1(bridge_slave_0) entered forwarding state [ 478.128540][ T5998] bridge0: port 2(bridge_slave_1) entered blocking state [ 478.128698][ T5998] bridge0: port 2(bridge_slave_1) entered forwarding state [ 478.470657][ T5845] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 478.474324][ T5845] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 478.475522][ T5845] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 478.477118][ T5845] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 478.484115][ T5845] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 478.733233][ T7814] lo speed is unknown, defaulting to 1000 [ 479.829272][ T7559] veth0_vlan: entered promiscuous mode [ 479.845587][ T7680] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 480.367254][ T7559] veth1_vlan: entered promiscuous mode [ 480.577805][ T59] Bluetooth: hci1: command tx timeout [ 481.048282][ T7814] chnl_net:caif_netlink_parms(): no params data found [ 481.419172][ T5845] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 481.428077][ T5845] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 481.431424][ T5845] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 481.432897][ T5845] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 481.433579][ T5845] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 481.792862][ T5996] bridge_slave_1: left allmulticast mode [ 481.792893][ T5996] bridge_slave_1: left promiscuous mode [ 481.793152][ T5996] bridge0: port 2(bridge_slave_1) entered disabled state [ 481.919139][ T5996] bridge_slave_0: left allmulticast mode [ 481.919172][ T5996] bridge_slave_0: left promiscuous mode [ 481.919455][ T5996] bridge0: port 1(bridge_slave_0) entered disabled state [ 482.667896][ T59] Bluetooth: hci1: command tx timeout [ 483.542306][ T59] Bluetooth: hci3: command tx timeout [ 483.763419][ T5996] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 483.818582][ T5996] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 483.854341][ T5996] bond0 (unregistering): Released all slaves [ 484.335158][ T7680] veth0_vlan: entered promiscuous mode [ 484.441395][ T7814] bridge0: port 1(bridge_slave_0) entered blocking state [ 484.441581][ T7814] bridge0: port 1(bridge_slave_0) entered disabled state [ 484.441765][ T7814] bridge_slave_0: entered allmulticast mode [ 484.444289][ T7814] bridge_slave_0: entered promiscuous mode [ 484.657956][ T5996] hsr_slave_0: left promiscuous mode [ 484.697818][ T5996] hsr_slave_1: left promiscuous mode [ 484.698767][ T5996] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 484.737914][ T59] Bluetooth: hci1: command tx timeout [ 484.756274][ T5996] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 485.619400][ T59] Bluetooth: hci3: command tx timeout [ 486.058393][ T5996] team0 (unregistering): Port device team_slave_1 removed [ 486.288713][ T5996] team0 (unregistering): Port device team_slave_0 removed [ 486.817848][ T5845] Bluetooth: hci1: command tx timeout [ 487.697879][ T59] Bluetooth: hci3: command tx timeout [ 488.813480][ T7853] lo speed is unknown, defaulting to 1000 [ 488.814773][ T7814] bridge0: port 2(bridge_slave_1) entered blocking state [ 488.815043][ T7814] bridge0: port 2(bridge_slave_1) entered disabled state [ 488.815279][ T7814] bridge_slave_1: entered allmulticast mode [ 488.822148][ T7814] bridge_slave_1: entered promiscuous mode [ 489.042041][ T7680] veth1_vlan: entered promiscuous mode [ 489.055607][ T7814] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 489.079882][ T7814] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 489.326933][ T7814] team0: Port device team_slave_0 added [ 489.349114][ T7814] team0: Port device team_slave_1 added [ 489.538053][ T7814] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 489.538070][ T7814] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 489.538092][ T7814] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 489.545696][ T7814] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 489.545707][ T7814] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 489.545720][ T7814] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 489.786970][ T59] Bluetooth: hci3: command tx timeout [ 489.913873][ T7814] hsr_slave_0: entered promiscuous mode [ 489.914677][ T7814] hsr_slave_1: entered promiscuous mode [ 490.207251][ T7680] veth0_macvtap: entered promiscuous mode [ 490.401334][ T7680] veth1_macvtap: entered promiscuous mode [ 490.418469][ T7853] chnl_net:caif_netlink_parms(): no params data found [ 491.215078][ T7680] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 491.513925][ T7853] bridge0: port 1(bridge_slave_0) entered blocking state [ 491.514118][ T7853] bridge0: port 1(bridge_slave_0) entered disabled state [ 491.514333][ T7853] bridge_slave_0: entered allmulticast mode [ 491.516842][ T7853] bridge_slave_0: entered promiscuous mode [ 491.574208][ T7680] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 491.575398][ T7853] bridge0: port 2(bridge_slave_1) entered blocking state [ 491.575629][ T7853] bridge0: port 2(bridge_slave_1) entered disabled state [ 491.575851][ T7853] bridge_slave_1: entered allmulticast mode [ 491.591411][ T7853] bridge_slave_1: entered promiscuous mode [ 492.145007][ T7853] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 492.168882][ T7636] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 492.344344][ T7853] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 492.344449][ T7636] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 492.346336][ T7636] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 492.528907][ T7636] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 492.721755][ T7853] team0: Port device team_slave_0 added [ 492.770227][ T7853] team0: Port device team_slave_1 added [ 493.121040][ T7853] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 493.121056][ T7853] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 493.121079][ T7853] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 493.135052][ T7853] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 493.135068][ T7853] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 493.135091][ T7853] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 493.699740][ T7853] hsr_slave_0: entered promiscuous mode [ 493.701198][ T7853] hsr_slave_1: entered promiscuous mode [ 493.702152][ T7853] debugfs: 'hsr0' already exists in 'hsr' [ 493.702174][ T7853] Cannot create hsr debugfs directory [ 493.744834][ T5996] bridge_slave_1: left allmulticast mode [ 493.744868][ T5996] bridge_slave_1: left promiscuous mode [ 493.745117][ T5996] bridge0: port 2(bridge_slave_1) entered disabled state [ 493.829876][ T5996] bridge_slave_0: left allmulticast mode [ 493.829898][ T5996] bridge_slave_0: left promiscuous mode [ 493.830080][ T5996] bridge0: port 1(bridge_slave_0) entered disabled state [ 495.510480][ T5996] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 495.577326][ T5996] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 495.592750][ T5996] bond0 (unregistering): Released all slaves [ 495.671011][ T69] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 495.671033][ T69] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 496.177923][ T5996] hsr_slave_0: left promiscuous mode [ 496.201839][ T5996] hsr_slave_1: left promiscuous mode [ 496.202849][ T5996] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 496.238773][ T5996] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 496.308521][ T5996] veth1_vlan: left promiscuous mode [ 496.308770][ T5996] veth0_vlan: left promiscuous mode [ 497.999038][ T5996] team0 (unregistering): Port device team_slave_1 removed [ 498.268997][ T5996] team0 (unregistering): Port device team_slave_0 removed [ 498.505046][ T59] Bluetooth: hci7: command 0x0406 tx timeout [ 500.682453][ T7814] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 500.722782][ T7814] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 500.763082][ T4504] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 500.763103][ T4504] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 500.800948][ T7814] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 500.857036][ T7814] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 501.544832][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.544910][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.836442][ T7908] binder: 7900:7908 ioctl c0306201 0 returned -14 [ 502.012492][ T7909] netlink: 4 bytes leftover after parsing attributes in process `syz.0.301'. [ 503.516841][ T7921] random: crng reseeded on system resumption [ 507.406919][ T7937] fuse: Bad value for 'fd' [ 511.816256][ T7814] 8021q: adding VLAN 0 to HW filter on device bond0 [ 513.882518][ T7814] 8021q: adding VLAN 0 to HW filter on device team0 [ 513.896180][ T1018] bridge0: port 1(bridge_slave_0) entered blocking state [ 513.896405][ T1018] bridge0: port 1(bridge_slave_0) entered forwarding state [ 514.251296][ T1018] bridge0: port 2(bridge_slave_1) entered blocking state [ 514.257916][ T1018] bridge0: port 2(bridge_slave_1) entered forwarding state [ 521.029687][ T7853] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 521.196695][ T7853] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 521.348244][ T7853] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 522.494465][ T7853] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 523.847269][ T7814] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 524.068435][ T5845] Bluetooth: hci2: Malformed Event: 0x02 [ 526.010007][ T8013] uprobe: syz.7.315:8013 failed to unregister, leaking uprobe [ 526.308389][ T7853] 8021q: adding VLAN 0 to HW filter on device bond0 [ 526.911692][ T7853] 8021q: adding VLAN 0 to HW filter on device team0 [ 528.107499][ T4222] bridge0: port 1(bridge_slave_0) entered blocking state [ 528.109801][ T4222] bridge0: port 1(bridge_slave_0) entered forwarding state [ 528.153333][ T69] bridge0: port 2(bridge_slave_1) entered blocking state [ 528.153488][ T69] bridge0: port 2(bridge_slave_1) entered forwarding state [ 535.223622][ T7814] veth0_vlan: entered promiscuous mode [ 535.268690][ T7814] veth1_vlan: entered promiscuous mode [ 535.667140][ T7853] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 536.105259][ T7814] veth0_macvtap: entered promiscuous mode [ 536.327025][ T7814] veth1_macvtap: entered promiscuous mode [ 539.587810][ C1] vkms_vblank_simulate: vblank timer overrun [ 539.607945][ T7853] veth0_vlan: entered promiscuous mode [ 539.652291][ T7853] veth1_vlan: entered promiscuous mode [ 539.993696][ C1] vkms_vblank_simulate: vblank timer overrun [ 540.211860][ C1] vkms_vblank_simulate: vblank timer overrun [ 540.418248][ T8116] capability: warning: `syz.5.333' uses deprecated v2 capabilities in a way that may be insecure [ 540.669406][ T7853] veth0_macvtap: entered promiscuous mode [ 540.726123][ T7853] veth1_macvtap: entered promiscuous mode [ 542.287831][ C1] vkms_vblank_simulate: vblank timer overrun [ 542.399245][ T59] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 542.411247][ T59] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 542.428847][ T59] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 542.445143][ T59] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 542.445927][ T59] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 542.911733][ C1] vkms_vblank_simulate: vblank timer overrun [ 542.994151][ C1] vkms_vblank_simulate: vblank timer overrun [ 543.498360][ T8151] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 543.498420][ T8151] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 543.771997][ C1] vkms_vblank_simulate: vblank timer overrun [ 544.788147][ T59] Bluetooth: hci0: command tx timeout [ 545.382465][ T8133] lo speed is unknown, defaulting to 1000 [ 546.327668][ T5845] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 546.347952][ T5845] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 546.350396][ T5845] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 546.352179][ T5845] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 546.353013][ T5845] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 547.007098][ T5845] Bluetooth: hci0: command tx timeout [ 549.058117][ T5845] Bluetooth: hci0: command tx timeout [ 549.372028][ T5845] Bluetooth: hci1: command tx timeout [ 550.604514][ T8184] block nbd0: Attempted send on invalid socket [ 550.604536][ T8184] I/O error, dev nbd0, sector 128 op 0x0:(READ) flags 0x1800 phys_seg 1 prio class 1 [ 550.604584][ T8184] gfs2: error -5 reading superblock [ 551.138004][ T5845] Bluetooth: hci0: command tx timeout [ 551.438248][ T8196] overlayfs: overlapping lowerdir path [ 551.716327][ C1] vkms_vblank_simulate: vblank timer overrun [ 552.130941][ C1] vkms_vblank_simulate: vblank timer overrun [ 552.133929][ T5845] Bluetooth: hci1: command tx timeout [ 552.514409][ C1] vkms_vblank_simulate: vblank timer overrun [ 553.178215][ C1] vkms_vblank_simulate: vblank timer overrun [ 553.649952][ C1] vkms_vblank_simulate: vblank timer overrun [ 554.178352][ T5845] Bluetooth: hci1: command tx timeout [ 554.384920][ C1] vkms_vblank_simulate: vblank timer overrun [ 554.452174][ T8210] random: crng reseeded on system resumption [ 554.782630][ C1] vkms_vblank_simulate: vblank timer overrun [ 555.083192][ C1] vkms_vblank_simulate: vblank timer overrun [ 555.326999][ C1] vkms_vblank_simulate: vblank timer overrun [ 555.675345][ C1] vkms_vblank_simulate: vblank timer overrun [ 555.789677][ C1] vkms_vblank_simulate: vblank timer overrun [ 555.992734][ C1] vkms_vblank_simulate: vblank timer overrun [ 556.513801][ T5845] Bluetooth: hci1: command tx timeout [ 558.296429][ T8236] Invalid source name [ 558.296581][ T8236] UBIFS error (pid: 8236): cannot open "usrquota", error -22 [ 558.664744][ T8156] lo speed is unknown, defaulting to 1000 [ 558.812422][ T8239] random: crng reseeded on system resumption [ 562.222496][ T8263] random: crng reseeded on system resumption [ 562.984220][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.984298][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 564.286836][ T8271] veth1_to_bond: entered promiscuous mode [ 564.288042][ T8271] veth1_to_bond: left promiscuous mode [ 567.156590][ T8133] chnl_net:caif_netlink_parms(): no params data found [ 568.826757][ T8304] random: crng reseeded on system resumption [ 570.004807][ T8310] random: crng reseeded on system resumption [ 571.829903][ T8312] random: crng reseeded on system resumption [ 574.398770][ T8324] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(4) [ 574.398787][ T8324] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 574.571631][ T8324] vhci_hcd vhci_hcd.0: Device attached [ 574.997814][ T8330] vhci_hcd: connection closed [ 575.016053][ T1461] vhci_hcd: stop threads [ 575.017018][ T1461] vhci_hcd: release socket [ 575.057814][ T1461] vhci_hcd: disconnect device [ 575.080110][ T5901] vhci_hcd: vhci_device speed not set [ 575.472195][ T59] Bluetooth: hci4: command 0x0406 tx timeout [ 576.418673][ T8133] bridge0: port 1(bridge_slave_0) entered blocking state [ 576.418808][ T8133] bridge0: port 1(bridge_slave_0) entered disabled state [ 576.419089][ T8133] bridge_slave_0: entered allmulticast mode [ 576.421763][ T8133] bridge_slave_0: entered promiscuous mode [ 576.502025][ T8133] bridge0: port 2(bridge_slave_1) entered blocking state [ 576.502159][ T8133] bridge0: port 2(bridge_slave_1) entered disabled state [ 576.502418][ T8133] bridge_slave_1: entered allmulticast mode [ 576.503939][ T8133] bridge_slave_1: entered promiscuous mode [ 577.482540][ T8341] syz.0.379: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 577.482837][ T8341] CPU: 0 UID: 0 PID: 8341 Comm: syz.0.379 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 577.482852][ T8341] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 577.482862][ T8341] Call Trace: [ 577.482866][ T8341] [ 577.482871][ T8341] dump_stack_lvl+0x189/0x250 [ 577.482891][ T8341] ? __pfx_dump_stack_lvl+0x10/0x10 [ 577.482906][ T8341] ? __pfx__printk+0x10/0x10 [ 577.482917][ T8341] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 577.482929][ T8341] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 577.482941][ T8341] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 577.482953][ T8341] warn_alloc+0x22e/0x3b0 [ 577.482969][ T8341] ? stack_trace_save+0x9c/0xe0 [ 577.482983][ T8341] ? __pfx_warn_alloc+0x10/0x10 [ 577.482999][ T8341] ? __kasan_kmalloc+0x93/0xb0 [ 577.483010][ T8341] ? __kmalloc_cache_noprof+0x1a8/0x320 [ 577.483022][ T8341] ? xskq_create+0x56/0x170 [ 577.483032][ T8341] ? xsk_init_queue+0xb0/0x110 [ 577.483042][ T8341] ? xsk_setsockopt+0x4dc/0x8d0 [ 577.483050][ T8341] ? do_sock_setsockopt+0x17c/0x1b0 [ 577.483062][ T8341] ? __x64_sys_setsockopt+0x145/0x1b0 [ 577.483074][ T8341] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 577.483088][ T8341] __vmalloc_node_range_noprof+0x125/0x12f0 [ 577.483125][ T8341] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 577.483143][ T8341] ? __kasan_kmalloc+0x93/0xb0 [ 577.483157][ T8341] vmalloc_user_noprof+0xad/0xf0 [ 577.483172][ T8341] ? xskq_create+0xbf/0x170 [ 577.483184][ T8341] xskq_create+0xbf/0x170 [ 577.483196][ T8341] xsk_init_queue+0xb0/0x110 [ 577.483209][ T8341] xsk_setsockopt+0x4dc/0x8d0 [ 577.483221][ T8341] ? __pfx_xsk_setsockopt+0x10/0x10 [ 577.483239][ T8341] ? __fget_files+0x2a/0x420 [ 577.483251][ T8341] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 577.483260][ T8341] ? __pfx_xsk_setsockopt+0x10/0x10 [ 577.483272][ T8341] do_sock_setsockopt+0x17c/0x1b0 [ 577.483287][ T8341] __x64_sys_setsockopt+0x145/0x1b0 [ 577.483302][ T8341] do_syscall_64+0xfa/0x3b0 [ 577.483313][ T8341] ? lockdep_hardirqs_on+0x9c/0x150 [ 577.483325][ T8341] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 577.483334][ T8341] ? clear_bhb_loop+0x60/0xb0 [ 577.483345][ T8341] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 577.483358][ T8341] RIP: 0033:0x7ffaf7edebe9 [ 577.483371][ T8341] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 577.483379][ T8341] RSP: 002b:00007ffaf613e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 577.483390][ T8341] RAX: ffffffffffffffda RBX: 00007ffaf8105fa0 RCX: 00007ffaf7edebe9 [ 577.483397][ T8341] RDX: 0000000000000006 RSI: 000000000000011b RDI: 000000000000000b [ 577.483403][ T8341] RBP: 00007ffaf7f61e19 R08: 0000000000000004 R09: 0000000000000000 [ 577.483409][ T8341] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 577.483415][ T8341] R13: 00007ffaf8106038 R14: 00007ffaf8105fa0 R15: 00007fffb622df28 [ 577.483432][ T8341] [ 577.483439][ T8341] Mem-Info: [ 577.483448][ T8341] active_anon:276 inactive_anon:6947 isolated_anon:0 [ 577.483448][ T8341] active_file:15606 inactive_file:37358 isolated_file:0 [ 577.483448][ T8341] unevictable:768 dirty:159 writeback:0 [ 577.483448][ T8341] slab_reclaimable:12212 slab_unreclaimable:104742 [ 577.483448][ T8341] mapped:30494 shmem:1377 pagetables:1489 [ 577.483448][ T8341] sec_pagetables:0 bounce:0 [ 577.483448][ T8341] kernel_misc_reclaimable:0 [ 577.483448][ T8341] free:1317972 free_pcp:2980 free_cma:0 [ 577.483475][ T8341] Node 0 active_anon:1104kB inactive_anon:27788kB active_file:62224kB inactive_file:149432kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:121976kB dirty:636kB writeback:0kB shmem:3972kB kernel_stack:14192kB pagetables:5804kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 577.483499][ T8341] Node 1 active_anon:0kB inactive_anon:0kB active_file:200kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB kernel_stack:48kB pagetables:152kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 577.483520][ T8341] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 577.483551][ T8341] lowmem_reserve[]: 0 2512 2513 2513 2513 [ 577.483569][ T8341] Node 0 DMA32 free:1350248kB boost:0kB min:3940kB low:6484kB high:9028kB reserved_highatomic:0KB free_highatomic:0KB active_anon:1100kB inactive_anon:27748kB active_file:61204kB inactive_file:149364kB unevictable:1536kB writepending:636kB present:3129332kB managed:2572332kB mlocked:0kB bounce:0kB free_pcp:11920kB local_pcp:8220kB free_cma:0kB [ 577.483600][ T8341] lowmem_reserve[]: 0 0 1 1 1 [ 577.483615][ T8341] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:4kB inactive_anon:40kB active_file:1020kB inactive_file:68kB unevictable:0kB writepending:0kB present:1048580kB managed:1132kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 577.483642][ T8341] lowmem_reserve[]: 0 0 0 0 0 [ 577.483657][ T8341] Node 1 Normal free:3906280kB boost:0kB min:6364kB low:10472kB high:14580kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:200kB inactive_file:0kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 577.483684][ T8341] lowmem_reserve[]: 0 0 0 0 0 [ 577.483699][ T8341] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 577.484135][ T8341] Node 0 DMA32: 380*4kB (UME) 425*8kB (UME) 461*16kB (UM) 247*32kB (UM) 118*64kB (ME) 212*128kB (UME) 200*256kB (UME) 98*512kB (UM) 40*1024kB (UME) 7*2048kB (UME) 278*4096kB (M) = 1350248kB [ 577.484214][ T8341] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 577.484261][ T8341] Node 1 Normal: 208*4kB (UE) 53*8kB (UM) 52*16kB (UME) 218*32kB (UME) 98*64kB (UME) 24*128kB (UM) 13*256kB (UME) 9*512kB (UM) 3*1024kB (UME) 1*2048kB (E) 946*4096kB (M) = 3906280kB [ 577.484340][ T8341] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 577.484349][ T8341] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 577.484357][ T8341] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 577.484364][ T8341] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 577.484372][ T8341] 54337 total pagecache pages [ 577.484381][ T8341] 0 pages in swap cache [ 577.484385][ T8341] Free swap = 124996kB [ 577.484388][ T8341] Total swap = 124996kB [ 577.484392][ T8341] 2097051 pages RAM [ 577.484395][ T8341] 0 pages HighMem/MovableOnly [ 577.484399][ T8341] 422070 pages reserved [ 577.484403][ T8341] 0 pages cma reserved [ 577.490113][ T69] bridge_slave_1: left allmulticast mode [ 577.490149][ T69] bridge_slave_1: left promiscuous mode [ 577.491810][ T69] bridge0: port 2(bridge_slave_1) entered disabled state [ 578.384023][ T69] bridge_slave_0: left allmulticast mode [ 578.384057][ T69] bridge_slave_0: left promiscuous mode [ 578.384426][ T69] bridge0: port 1(bridge_slave_0) entered disabled state [ 578.978041][ T8358] Bluetooth: MGMT ver 1.23 [ 581.307385][ T8368] random: crng reseeded on system resumption [ 591.161431][ T8393] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 593.141676][ T8408] random: crng reseeded on system resumption [ 600.750818][ T8441] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 601.530272][ T69] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 601.605610][ T69] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 601.621647][ T69] bond0 (unregistering): Released all slaves [ 601.853537][ T8156] chnl_net:caif_netlink_parms(): no params data found [ 603.377779][ T69] hsr_slave_0: left promiscuous mode [ 603.461292][ T69] hsr_slave_1: left promiscuous mode [ 603.462272][ T69] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 603.626260][ T69] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 604.044420][ T69] veth1_macvtap: left promiscuous mode [ 604.044545][ T69] veth0_macvtap: left promiscuous mode [ 604.046203][ T69] veth1_vlan: left promiscuous mode [ 604.046418][ T69] veth0_vlan: left promiscuous mode [ 604.135026][ C0] vkms_vblank_simulate: vblank timer overrun [ 604.210643][ T8472] affs: No valid root block on device nullb0 [ 604.298217][ T8473] random: crng reseeded on system resumption [ 604.760386][ C0] vkms_vblank_simulate: vblank timer overrun [ 604.989428][ T59] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 605.000806][ T59] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 605.009886][ T59] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 605.020388][ T59] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 605.022445][ T59] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 605.402876][ C0] vkms_vblank_simulate: vblank timer overrun [ 607.334568][ T5845] Bluetooth: hci0: command tx timeout [ 607.352557][ C0] vkms_vblank_simulate: vblank timer overrun [ 608.423043][ C0] vkms_vblank_simulate: vblank timer overrun [ 608.842793][ T8505] ntfs3(nullb0): Primary boot signature is not NTFS. [ 608.870004][ T8505] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 609.399317][ T59] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 609.473654][ T59] Bluetooth: hci0: command tx timeout [ 609.525040][ T59] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 610.319729][ T59] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 610.326812][ T59] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 610.345370][ T59] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 612.092501][ T59] Bluetooth: hci0: command tx timeout [ 612.527693][ T59] Bluetooth: hci1: command tx timeout [ 613.908537][ T8534] affs: No valid root block on device nullb0 [ 614.097849][ T59] Bluetooth: hci0: command tx timeout [ 614.388327][ T69] team0 (unregistering): Port device team_slave_1 removed [ 614.420587][ T8529] netlink: 'syz.0.420': attribute type 21 has an invalid length. [ 614.577840][ T59] Bluetooth: hci1: command tx timeout [ 614.758559][ T69] team0 (unregistering): Port device team_slave_0 removed [ 615.014950][ T37] audit: type=1326 audit(1756126256.377:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8535 comm="syz.7.422" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f37dc8febe9 code=0x0 [ 617.143980][ T59] Bluetooth: hci1: command tx timeout [ 619.221537][ T5845] Bluetooth: hci1: command tx timeout [ 621.487248][ T8503] lo speed is unknown, defaulting to 1000 [ 621.526838][ T8476] lo speed is unknown, defaulting to 1000 [ 622.161154][ T8580] affs: No valid root block on device nullb0 [ 622.806930][ T8572] binder: 8571:8572 ioctl c0306201 200000000280 returned -14 [ 623.139551][ T59] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 623.192169][ T59] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 623.196093][ T59] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 623.197348][ T59] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 623.239721][ T59] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 624.483569][ T8592] netlink: 5128 bytes leftover after parsing attributes in process `syz.0.432'. [ 624.484571][ T8592] netlink: 5128 bytes leftover after parsing attributes in process `syz.0.432'. [ 624.484609][ T8592] netlink: 640 bytes leftover after parsing attributes in process `syz.0.432'. [ 624.622162][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.623160][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 625.297888][ T59] Bluetooth: hci3: command tx timeout [ 625.693442][ T8583] lo speed is unknown, defaulting to 1000 [ 626.827924][ T8609] nbd: must specify an index to disconnect [ 627.377844][ T59] Bluetooth: hci3: command tx timeout [ 627.919704][ T8476] chnl_net:caif_netlink_parms(): no params data found [ 629.457752][ T59] Bluetooth: hci3: command tx timeout [ 630.597644][ C1] vxcan1: j1939_tp_rxtimer: 0xffff88805eda7000: rx timeout, send abort [ 630.680560][ T8640] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 630.783067][ C1] vxcan1: j1939_tp_rxtimer: 0xffff888036345800: rx timeout, send abort [ 631.099929][ C1] vxcan1: j1939_tp_rxtimer: 0xffff88805eda7000: abort rx timeout. Force session deactivation [ 631.283212][ C1] vxcan1: j1939_tp_rxtimer: 0xffff888036345800: abort rx timeout. Force session deactivation [ 631.604024][ T59] Bluetooth: hci3: command tx timeout [ 633.949804][ T8503] chnl_net:caif_netlink_parms(): no params data found [ 634.442670][ T8670] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 636.348922][ T8682] siw: device registration error -23 [ 637.646596][ T69] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 637.806406][ T8678] libceph: resolve '4' (ret=-3): failed [ 642.907578][ T8723] random: crng reseeded on system resumption [ 643.946213][ T69] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 643.998913][ T8583] chnl_net:caif_netlink_parms(): no params data found [ 644.028396][ T8476] bridge0: port 1(bridge_slave_0) entered blocking state [ 644.028542][ T8476] bridge0: port 1(bridge_slave_0) entered disabled state [ 644.028775][ T8476] bridge_slave_0: entered allmulticast mode [ 644.031518][ T8476] bridge_slave_0: entered promiscuous mode [ 644.082186][ T8476] bridge0: port 2(bridge_slave_1) entered blocking state [ 644.082337][ T8476] bridge0: port 2(bridge_slave_1) entered disabled state [ 644.082550][ T8476] bridge_slave_1: entered allmulticast mode [ 644.088881][ T8476] bridge_slave_1: entered promiscuous mode [ 644.567135][ T69] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 644.734239][ T8476] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 644.849631][ T8476] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 645.015182][ T69] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 645.081165][ T8503] bridge0: port 1(bridge_slave_0) entered blocking state [ 645.081277][ T8503] bridge0: port 1(bridge_slave_0) entered disabled state [ 645.081445][ T8503] bridge_slave_0: entered allmulticast mode [ 645.083019][ T8503] bridge_slave_0: entered promiscuous mode [ 645.219185][ T8503] bridge0: port 2(bridge_slave_1) entered blocking state [ 645.219296][ T8503] bridge0: port 2(bridge_slave_1) entered disabled state [ 645.219441][ T8503] bridge_slave_1: entered allmulticast mode [ 645.220925][ T8503] bridge_slave_1: entered promiscuous mode [ 645.561589][ T8476] team0: Port device team_slave_0 added [ 645.649441][ T8583] bridge0: port 1(bridge_slave_0) entered blocking state [ 645.649645][ T8583] bridge0: port 1(bridge_slave_0) entered disabled state [ 645.651013][ T8583] bridge_slave_0: entered allmulticast mode [ 645.653985][ T8583] bridge_slave_0: entered promiscuous mode [ 645.683648][ T8476] team0: Port device team_slave_1 added [ 645.700315][ T8503] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 645.703024][ T8583] bridge0: port 2(bridge_slave_1) entered blocking state [ 645.703167][ T8583] bridge0: port 2(bridge_slave_1) entered disabled state [ 645.703386][ T8583] bridge_slave_1: entered allmulticast mode [ 645.717942][ T8583] bridge_slave_1: entered promiscuous mode [ 645.813290][ T8503] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 646.181678][ T8476] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 646.181696][ T8476] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 646.181720][ T8476] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 646.395790][ T8583] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 646.401463][ T8476] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 646.401477][ T8476] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 646.401501][ T8476] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 646.404093][ T8503] team0: Port device team_slave_0 added [ 646.423782][ T8583] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 646.440204][ T8503] team0: Port device team_slave_1 added [ 646.938981][ T8583] team0: Port device team_slave_0 added [ 646.945034][ T8503] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 646.945046][ T8503] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 646.945060][ T8503] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 647.091226][ T8583] team0: Port device team_slave_1 added [ 647.092190][ T8503] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 647.092201][ T8503] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 647.092215][ T8503] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 647.154815][ T8476] hsr_slave_0: entered promiscuous mode [ 647.156141][ T8476] hsr_slave_1: entered promiscuous mode [ 647.659806][ T8583] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 647.659825][ T8583] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 647.659849][ T8583] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 647.845418][ T8583] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 647.845436][ T8583] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 647.845461][ T8583] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 648.541642][ T8503] hsr_slave_0: entered promiscuous mode [ 648.542987][ T8503] hsr_slave_1: entered promiscuous mode [ 648.545621][ T8503] debugfs: 'hsr0' already exists in 'hsr' [ 648.545647][ T8503] Cannot create hsr debugfs directory [ 649.102401][ T8583] hsr_slave_0: entered promiscuous mode [ 649.103689][ T8583] hsr_slave_1: entered promiscuous mode [ 649.104530][ T8583] debugfs: 'hsr0' already exists in 'hsr' [ 649.104552][ T8583] Cannot create hsr debugfs directory [ 650.673881][ T69] bridge_slave_1: left allmulticast mode [ 650.673913][ T69] bridge_slave_1: left promiscuous mode [ 650.674223][ T69] bridge0: port 2(bridge_slave_1) entered disabled state [ 650.759535][ T69] bridge_slave_0: left allmulticast mode [ 650.759570][ T69] bridge_slave_0: left promiscuous mode [ 650.759837][ T69] bridge0: port 1(bridge_slave_0) entered disabled state [ 650.841280][ T69] bridge_slave_1: left allmulticast mode [ 650.841314][ T69] bridge_slave_1: left promiscuous mode [ 650.841572][ T69] bridge0: port 2(bridge_slave_1) entered disabled state [ 650.909594][ T69] bridge_slave_0: left allmulticast mode [ 650.909628][ T69] bridge_slave_0: left promiscuous mode [ 650.909940][ T69] bridge0: port 1(bridge_slave_0) entered disabled state [ 650.992249][ T69] bridge_slave_1: left allmulticast mode [ 650.992284][ T69] bridge_slave_1: left promiscuous mode [ 650.992527][ T69] bridge0: port 2(bridge_slave_1) entered disabled state [ 651.060302][ T69] bridge_slave_0: left allmulticast mode [ 651.060335][ T69] bridge_slave_0: left promiscuous mode [ 651.060585][ T69] bridge0: port 1(bridge_slave_0) entered disabled state [ 653.329219][ T69] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 653.388610][ T69] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 653.412509][ T69] bond0 (unregistering): Released all slaves [ 653.608292][ T69] bond0 (unregistering): Released all slaves [ 653.829460][ T69] bond0 (unregistering): Released all slaves [ 655.538831][ T69] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 655.601329][ T69] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 655.666412][ T69] bond0 (unregistering): Released all slaves [ 658.148373][ T69] hsr_slave_0: left promiscuous mode [ 658.204878][ T69] hsr_slave_1: left promiscuous mode [ 658.205867][ T69] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 658.205894][ T69] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 658.259474][ T69] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 658.259506][ T69] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 658.438007][ T69] hsr_slave_0: left promiscuous mode [ 658.459465][ T69] hsr_slave_1: left promiscuous mode [ 658.461469][ T69] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 658.508752][ T69] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 658.619926][ T69] veth1_macvtap: left promiscuous mode [ 658.620054][ T69] veth0_macvtap: left promiscuous mode [ 658.620354][ T69] veth1_vlan: left promiscuous mode [ 658.620563][ T69] veth0_vlan: left promiscuous mode [ 658.758129][ T69] veth1_macvtap: left promiscuous mode [ 658.758253][ T69] veth0_macvtap: left promiscuous mode [ 658.758558][ T69] veth1_vlan: left promiscuous mode [ 658.761121][ T69] veth0_vlan: left promiscuous mode [ 661.523624][ T69] team0 (unregistering): Port device team_slave_1 removed [ 661.832070][ T69] team0 (unregistering): Port device team_slave_0 removed [ 663.517179][ T59] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 663.525928][ T59] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 663.536139][ T59] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 663.574470][ T59] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 663.575349][ T59] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 664.277381][ T59] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 664.297034][ T59] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 664.302063][ T59] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 664.303776][ T59] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 664.305443][ T59] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 665.698038][ T5845] Bluetooth: hci4: command tx timeout [ 666.346789][ T5845] Bluetooth: hci5: command tx timeout [ 667.418746][ T69] team0 (unregistering): Port device team_slave_1 removed [ 667.699180][ T69] team0 (unregistering): Port device team_slave_0 removed [ 667.778197][ T5845] Bluetooth: hci4: command tx timeout [ 668.429675][ T5845] Bluetooth: hci5: command tx timeout [ 669.867978][ T5845] Bluetooth: hci4: command tx timeout [ 670.510895][ T5845] Bluetooth: hci5: command tx timeout [ 670.681974][ T8767] lo speed is unknown, defaulting to 1000 [ 670.818924][ T8772] lo speed is unknown, defaulting to 1000 [ 671.207238][ T8583] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 671.325232][ T8583] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 671.758180][ T8583] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 671.876839][ T8583] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 671.942991][ T5845] Bluetooth: hci4: command tx timeout [ 672.610929][ T5845] Bluetooth: hci5: command tx timeout [ 673.194464][ T8772] chnl_net:caif_netlink_parms(): no params data found [ 673.278763][ T8767] chnl_net:caif_netlink_parms(): no params data found [ 674.652212][ T8772] bridge0: port 1(bridge_slave_0) entered blocking state [ 674.652354][ T8772] bridge0: port 1(bridge_slave_0) entered disabled state [ 674.652597][ T8772] bridge_slave_0: entered allmulticast mode [ 674.656964][ T8772] bridge_slave_0: entered promiscuous mode [ 674.667892][ T8767] bridge0: port 1(bridge_slave_0) entered blocking state [ 674.668056][ T8767] bridge0: port 1(bridge_slave_0) entered disabled state [ 674.668328][ T8767] bridge_slave_0: entered allmulticast mode [ 674.671079][ T8767] bridge_slave_0: entered promiscuous mode [ 674.728415][ T8583] 8021q: adding VLAN 0 to HW filter on device bond0 [ 674.736803][ T8772] bridge0: port 2(bridge_slave_1) entered blocking state [ 674.736949][ T8772] bridge0: port 2(bridge_slave_1) entered disabled state [ 674.737145][ T8772] bridge_slave_1: entered allmulticast mode [ 674.740672][ T8772] bridge_slave_1: entered promiscuous mode [ 674.757964][ T8767] bridge0: port 2(bridge_slave_1) entered blocking state [ 674.758106][ T8767] bridge0: port 2(bridge_slave_1) entered disabled state [ 674.758352][ T8767] bridge_slave_1: entered allmulticast mode [ 674.760959][ T8767] bridge_slave_1: entered promiscuous mode [ 675.262754][ T8772] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 675.321136][ T8767] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 675.362322][ T8772] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 675.367449][ T8767] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 675.944398][ T8772] team0: Port device team_slave_0 added [ 675.959166][ T8767] team0: Port device team_slave_0 added [ 675.968938][ T8583] 8021q: adding VLAN 0 to HW filter on device team0 [ 675.973344][ T8772] team0: Port device team_slave_1 added [ 675.990949][ T8767] team0: Port device team_slave_1 added [ 676.696303][ T8772] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 676.696317][ T8772] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 676.696331][ T8772] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 676.700152][ T6321] bridge0: port 1(bridge_slave_0) entered blocking state [ 676.700381][ T6321] bridge0: port 1(bridge_slave_0) entered forwarding state [ 676.719706][ T8767] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 676.719724][ T8767] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 676.719749][ T8767] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 676.756913][ T8772] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 676.756929][ T8772] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 676.756953][ T8772] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 676.778686][ T8767] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 676.778701][ T8767] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 676.778726][ T8767] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 676.842154][ T6321] bridge0: port 2(bridge_slave_1) entered blocking state [ 676.842317][ T6321] bridge0: port 2(bridge_slave_1) entered forwarding state [ 677.370703][ T8772] hsr_slave_0: entered promiscuous mode [ 677.372179][ T8772] hsr_slave_1: entered promiscuous mode [ 677.373123][ T8772] debugfs: 'hsr0' already exists in 'hsr' [ 677.373146][ T8772] Cannot create hsr debugfs directory [ 677.387363][ T8767] hsr_slave_0: entered promiscuous mode [ 677.389363][ T8767] hsr_slave_1: entered promiscuous mode [ 677.391624][ T8767] debugfs: 'hsr0' already exists in 'hsr' [ 677.391647][ T8767] Cannot create hsr debugfs directory [ 679.772631][ T8583] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 680.363043][ T69] bridge_slave_1: left allmulticast mode [ 680.363076][ T69] bridge_slave_1: left promiscuous mode [ 680.365559][ T69] bridge0: port 2(bridge_slave_1) entered disabled state [ 680.459533][ T69] bridge_slave_0: left allmulticast mode [ 680.459566][ T69] bridge_slave_0: left promiscuous mode [ 680.459860][ T69] bridge0: port 1(bridge_slave_0) entered disabled state [ 680.532657][ T69] bridge_slave_1: left allmulticast mode [ 680.532691][ T69] bridge_slave_1: left promiscuous mode [ 680.532959][ T69] bridge0: port 2(bridge_slave_1) entered disabled state [ 680.624353][ T69] bridge_slave_0: left allmulticast mode [ 680.624376][ T69] bridge_slave_0: left promiscuous mode [ 680.624541][ T69] bridge0: port 1(bridge_slave_0) entered disabled state [ 681.055980][ T69] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 681.188494][ T69] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 681.208218][ T59] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 681.236189][ T59] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 681.254382][ T59] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 681.273613][ T69] bond0 (unregistering): Released all slaves [ 681.291233][ T59] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 681.293289][ T59] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 681.588796][ T69] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 681.696744][ T69] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 681.751775][ T69] bond0 (unregistering): Released all slaves [ 681.994292][ T8892] lo speed is unknown, defaulting to 1000 [ 682.488122][ T69] hsr_slave_0: left promiscuous mode [ 682.528028][ T69] hsr_slave_1: left promiscuous mode [ 682.530443][ T69] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 682.618678][ T69] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 682.778059][ T69] hsr_slave_0: left promiscuous mode [ 682.828386][ T69] hsr_slave_1: left promiscuous mode [ 682.830363][ T69] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 682.868806][ T69] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 683.318236][ T5845] Bluetooth: hci0: command tx timeout [ 683.658694][ T69] team0 (unregistering): Port device team_slave_1 removed [ 683.840154][ T69] team0 (unregistering): Port device team_slave_0 removed [ 685.171739][ T69] team0 (unregistering): Port device team_slave_1 removed [ 685.328811][ T69] team0 (unregistering): Port device team_slave_0 removed [ 685.388179][ T5845] Bluetooth: hci0: command tx timeout [ 685.868616][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.868688][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.762368][ T8892] chnl_net:caif_netlink_parms(): no params data found [ 687.416735][ T8892] bridge0: port 1(bridge_slave_0) entered blocking state [ 687.416940][ T8892] bridge0: port 1(bridge_slave_0) entered disabled state [ 687.417152][ T8892] bridge_slave_0: entered allmulticast mode [ 687.424738][ T8892] bridge_slave_0: entered promiscuous mode [ 687.441536][ T8892] bridge0: port 2(bridge_slave_1) entered blocking state [ 687.441713][ T8892] bridge0: port 2(bridge_slave_1) entered disabled state [ 687.441951][ T8892] bridge_slave_1: entered allmulticast mode [ 687.457480][ T8892] bridge_slave_1: entered promiscuous mode [ 687.457849][ T5845] Bluetooth: hci0: command tx timeout [ 687.787261][ T8892] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 687.794332][ T8772] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 687.855819][ T8892] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 687.856097][ T8772] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 688.009402][ T8772] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 688.131784][ T8772] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 688.178323][ T8892] team0: Port device team_slave_0 added [ 688.252260][ T8892] team0: Port device team_slave_1 added [ 688.615094][ T8892] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 688.615110][ T8892] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 688.615127][ T8892] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 688.686725][ T8892] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 688.686741][ T8892] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 688.686765][ T8892] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 688.802871][ T8767] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 688.917526][ T8767] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 689.127236][ T8767] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 689.180824][ T8892] hsr_slave_0: entered promiscuous mode [ 689.182171][ T8892] hsr_slave_1: entered promiscuous mode [ 689.189157][ T8767] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 689.538146][ T5845] Bluetooth: hci0: command tx timeout [ 690.675686][ T8772] 8021q: adding VLAN 0 to HW filter on device bond0 [ 690.875619][ T8772] 8021q: adding VLAN 0 to HW filter on device team0 [ 690.897042][ T6017] bridge0: port 1(bridge_slave_0) entered blocking state [ 690.897890][ T6017] bridge0: port 1(bridge_slave_0) entered forwarding state [ 690.997692][ T6321] bridge0: port 2(bridge_slave_1) entered blocking state [ 690.997847][ T6321] bridge0: port 2(bridge_slave_1) entered forwarding state [ 690.999421][ T69] bridge_slave_1: left allmulticast mode [ 690.999449][ T69] bridge_slave_1: left promiscuous mode [ 690.999675][ T69] bridge0: port 2(bridge_slave_1) entered disabled state [ 691.089583][ T69] bridge_slave_0: left allmulticast mode [ 691.089616][ T69] bridge_slave_0: left promiscuous mode [ 691.089882][ T69] bridge0: port 1(bridge_slave_0) entered disabled state [ 693.027931][ T69] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 693.109606][ T69] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 693.136224][ T69] bond0 (unregistering): Released all slaves [ 693.577885][ T69] hsr_slave_0: left promiscuous mode [ 693.605251][ T69] hsr_slave_1: left promiscuous mode [ 693.606513][ T69] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 693.649969][ T69] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 694.739346][ T69] team0 (unregistering): Port device team_slave_1 removed [ 694.981776][ T69] team0 (unregistering): Port device team_slave_0 removed [ 697.828935][ T8767] 8021q: adding VLAN 0 to HW filter on device bond0 [ 698.033312][ T8767] 8021q: adding VLAN 0 to HW filter on device team0 [ 698.092079][ T6321] bridge0: port 1(bridge_slave_0) entered blocking state [ 698.092240][ T6321] bridge0: port 1(bridge_slave_0) entered forwarding state [ 698.135480][ T1018] bridge0: port 2(bridge_slave_1) entered blocking state [ 698.135742][ T1018] bridge0: port 2(bridge_slave_1) entered forwarding state [ 698.566279][ T8772] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 699.119822][ T8892] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 699.227940][ T8892] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 699.278373][ T8892] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 699.333252][ T8892] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 699.521097][ T8767] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 699.746120][ T8772] veth0_vlan: entered promiscuous mode [ 699.834067][ T8772] veth1_vlan: entered promiscuous mode [ 700.072949][ T8772] veth0_macvtap: entered promiscuous mode [ 700.103103][ T8772] veth1_macvtap: entered promiscuous mode [ 700.161541][ T8892] 8021q: adding VLAN 0 to HW filter on device bond0 [ 700.200305][ T8772] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 700.261074][ T8772] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 700.302632][ T8892] 8021q: adding VLAN 0 to HW filter on device team0 [ 700.302967][ T69] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 700.332791][ T69] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 700.356790][ T13] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 700.362255][ T13] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 700.399120][ T6017] bridge0: port 1(bridge_slave_0) entered blocking state [ 700.399346][ T6017] bridge0: port 1(bridge_slave_0) entered forwarding state [ 700.495855][ T8767] veth0_vlan: entered promiscuous mode [ 700.504853][ T8767] veth1_vlan: entered promiscuous mode [ 700.515763][ T4504] bridge0: port 2(bridge_slave_1) entered blocking state [ 700.515914][ T4504] bridge0: port 2(bridge_slave_1) entered forwarding state [ 701.039669][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 701.039689][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 701.095207][ T8767] veth0_macvtap: entered promiscuous mode [ 701.221772][ T8767] veth1_macvtap: entered promiscuous mode [ 701.311966][ T69] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 701.311987][ T69] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 701.395574][ T8767] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 701.450776][ T8767] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 701.550526][ T7636] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 701.569673][ T7636] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 701.576276][ T7636] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 701.636908][ T7636] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 707.569759][ T8987] afs: Unknown parameter 'dynkaller' [ 707.895515][ T8892] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 708.615540][ T9002] siw: device registration error -23 [ 708.890444][ T9004] Bluetooth: MGMT ver 1.23 [ 711.501926][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 711.501946][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 711.900901][ T5998] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 711.900923][ T5998] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 713.481195][ T9025] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 714.999676][ T8892] veth0_vlan: entered promiscuous mode [ 715.032844][ T8892] veth1_vlan: entered promiscuous mode [ 716.975073][ T8892] veth0_macvtap: entered promiscuous mode [ 717.928122][ T8892] veth1_macvtap: entered promiscuous mode [ 720.782993][ T8892] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 720.807118][ T8892] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 720.904531][ T6017] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 721.030524][ T6017] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 721.048830][ T6017] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 721.052721][ T6017] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 729.308688][ T9105] netlink: 16402 bytes leftover after parsing attributes in process `syz.8.477'. [ 730.849854][ T59] Bluetooth: hci4: command tx timeout [ 731.255553][ T9099] netlink: 16402 bytes leftover after parsing attributes in process `syz.8.477'. [ 731.493043][ T6017] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 731.493063][ T6017] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 736.579423][ T5998] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 736.579444][ T5998] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 737.392904][ T9160] binder: 9157:9160 ioctl c0306201 200000000280 returned -14 [ 739.333583][ C1] vkms_vblank_simulate: vblank timer overrun [ 739.510411][ C1] vkms_vblank_simulate: vblank timer overrun [ 739.649424][ C1] vkms_vblank_simulate: vblank timer overrun [ 739.810222][ C1] vkms_vblank_simulate: vblank timer overrun [ 740.217557][ C1] vkms_vblank_simulate: vblank timer overrun [ 740.552826][ C1] vkms_vblank_simulate: vblank timer overrun [ 741.585434][ C1] vkms_vblank_simulate: vblank timer overrun [ 742.365451][ T9192] netlink: del zone limit has 4 unknown bytes [ 742.389513][ C1] vkms_vblank_simulate: vblank timer overrun [ 743.212233][ C1] vkms_vblank_simulate: vblank timer overrun [ 743.342086][ C1] vkms_vblank_simulate: vblank timer overrun [ 744.698487][ C1] vkms_vblank_simulate: vblank timer overrun [ 744.728580][ C1] vkms_vblank_simulate: vblank timer overrun [ 744.769630][ C1] vkms_vblank_simulate: vblank timer overrun [ 744.899795][ C1] vkms_vblank_simulate: vblank timer overrun [ 745.516997][ C1] vkms_vblank_simulate: vblank timer overrun [ 745.841291][ C1] vkms_vblank_simulate: vblank timer overrun [ 746.047431][ C1] vkms_vblank_simulate: vblank timer overrun [ 746.576842][ C1] vkms_vblank_simulate: vblank timer overrun [ 748.085679][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 748.085755][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 748.296217][ T9212] overlayfs: missing 'lowerdir' [ 750.789814][ T9235] block nbd6: Attempted send on invalid socket [ 750.789945][ T9235] I/O error, dev nbd6, sector 128 op 0x0:(READ) flags 0x1800 phys_seg 1 prio class 2 [ 750.790287][ T9235] gfs2: error -5 reading superblock [ 760.750862][ T9291] block nbd7: Attempted send on invalid socket [ 760.750878][ T9291] I/O error, dev nbd7, sector 128 op 0x0:(READ) flags 0x1800 phys_seg 1 prio class 1 [ 760.750904][ T9291] gfs2: error -5 reading superblock [ 760.783896][ T9301] loop8: detected capacity change from 0 to 7 [ 760.812485][ T9301] Dev loop8: unable to read RDB block 7 [ 760.812539][ T9301] loop8: unable to read partition table [ 760.812894][ T9301] loop8: partition table beyond EOD, truncated [ 760.812913][ T9301] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 765.649776][ T9333] random: crng reseeded on system resumption [ 765.992085][ T9334] NILFS (nullb0): couldn't find nilfs on the device [ 768.080427][ C1] vkms_vblank_simulate: vblank timer overrun [ 768.364872][ C1] vkms_vblank_simulate: vblank timer overrun [ 768.985797][ C1] vkms_vblank_simulate: vblank timer overrun [ 769.556410][ C1] vkms_vblank_simulate: vblank timer overrun [ 770.085900][ C1] vkms_vblank_simulate: vblank timer overrun [ 770.135220][ T9369] random: crng reseeded on system resumption [ 770.177929][ C1] vkms_vblank_simulate: vblank timer overrun [ 770.428128][ C1] vkms_vblank_simulate: vblank timer overrun [ 770.788229][ C1] vkms_vblank_simulate: vblank timer overrun [ 771.364643][ C1] vkms_vblank_simulate: vblank timer overrun [ 772.244667][ T9386] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 774.058080][ T9404] random: crng reseeded on system resumption [ 774.851493][ T9411] Invalid logical block size (16384) [ 775.982690][ T9412] usb usb1: usbfs: interface 0 claimed by hub while 'syz.0.544' sets config #1 [ 776.148901][ T37] audit: type=1326 audit(1756126417.507:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9420 comm="syz.9.546" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5af894ebe9 code=0x0 [ 779.393175][ C0] vkms_vblank_simulate: vblank timer overrun [ 779.762720][ C0] vkms_vblank_simulate: vblank timer overrun [ 780.265153][ C0] vkms_vblank_simulate: vblank timer overrun [ 780.339980][ C0] vkms_vblank_simulate: vblank timer overrun [ 780.860002][ C0] vkms_vblank_simulate: vblank timer overrun [ 780.901163][ C0] vkms_vblank_simulate: vblank timer overrun [ 780.966613][ C0] vkms_vblank_simulate: vblank timer overrun [ 781.463566][ C0] vkms_vblank_simulate: vblank timer overrun [ 781.598761][ C0] vkms_vblank_simulate: vblank timer overrun [ 781.700282][ T9457] tipc: Started in network mode [ 781.700446][ T9457] tipc: Node identity ac14140f, cluster identity 4711 [ 781.740277][ T9457] tipc: New replicast peer: 255.255.255.255 [ 781.830014][ T9457] tipc: Enabled bearer , priority 10 [ 781.833477][ C0] vkms_vblank_simulate: vblank timer overrun [ 782.143022][ C0] vkms_vblank_simulate: vblank timer overrun [ 782.423371][ C0] vkms_vblank_simulate: vblank timer overrun [ 783.150292][ C0] vkms_vblank_simulate: vblank timer overrun [ 783.231931][ C0] vkms_vblank_simulate: vblank timer overrun [ 783.254984][ C0] vkms_vblank_simulate: vblank timer overrun [ 783.365344][ C0] vkms_vblank_simulate: vblank timer overrun [ 783.715999][ C0] vkms_vblank_simulate: vblank timer overrun [ 783.737538][ T5943] tipc: Node number set to 2886997007 [ 784.826480][ T9472] uprobe: syz.0.556:9472 failed to unregister, leaking uprobe [ 786.442182][ T9493] netlink: 277 bytes leftover after parsing attributes in process `syz.0.560'. [ 786.582997][ T9495] netlink: zone id is out of range [ 786.601963][ T9495] netlink: zone id is out of range [ 786.609587][ T9496] netlink: 16 bytes leftover after parsing attributes in process `syz.0.560'. [ 786.709031][ T9497] netlink: del zone limit has 4 unknown bytes [ 787.539512][ T9495] netlink: set zone limit has 4 unknown bytes [ 787.699455][ C1] vkms_vblank_simulate: vblank timer overrun [ 788.132509][ T7945] hid (null): unknown global tag 0xc [ 788.132529][ T7945] hid (null): unknown global tag 0x39 [ 788.132541][ T7945] hid (null): global environment stack underflow [ 788.132553][ T7945] hid (null): global environment stack underflow [ 788.132563][ T7945] hid (null): unknown global tag 0xc [ 788.132583][ T7945] hid (null): unknown global tag 0xc [ 788.132594][ T7945] hid (null): report_id 460376604 is invalid [ 788.132638][ T7945] hid (null): unknown global tag 0xe [ 788.132660][ T7945] hid (null): unknown global tag 0xd [ 788.132671][ T7945] hid (null): unknown global tag 0x94 [ 788.132723][ T7945] hid (null): invalid report_size 27761 [ 788.132768][ T7945] hid (null): global environment stack underflow [ 788.132809][ T7945] hid (null): unknown global tag 0xd [ 788.132821][ T7945] hid (null): report_id 0 is invalid [ 788.132863][ T7945] hid (null): report_id 234515128 is invalid [ 788.132971][ T7945] hid (null): global environment stack underflow [ 788.132982][ T7945] hid (null): unknown global tag 0xc [ 788.133004][ T7945] hid (null): invalid report_count 34647 [ 788.133037][ T7945] hid (null): unknown global tag 0xc [ 788.133048][ T7945] hid (null): unknown global tag 0xc [ 788.133071][ T7945] hid (null): unknown global tag 0xc7 [ 788.133102][ T7945] hid (null): global environment stack underflow [ 788.133113][ T7945] hid (null): global environment stack underflow [ 788.133145][ T7945] hid (null): invalid report_count 43587 [ 788.134326][ T7945] hid (null): unknown global tag 0xe [ 788.134349][ T7945] hid (null): report_id 6475 is invalid [ 788.134394][ T7945] hid (null): unknown global tag 0x30 [ 788.134405][ T7945] hid (null): unknown global tag 0xe [ 788.134427][ T7945] hid (null): unknown global tag 0xd [ 788.135602][ T7945] hid (null): unknown global tag 0xc [ 788.135628][ T7945] hid (null): report_id 62626 is invalid [ 788.135641][ T7945] hid (null): unknown global tag 0xd [ 788.135685][ T7945] hid (null): unknown global tag 0x14 [ 788.135714][ T7945] hid (null): unknown global tag 0xe [ 788.135726][ T7945] hid (null): unknown global tag 0xd [ 788.136603][ T7945] hid (null): unknown global tag 0xc [ 788.137069][ T7945] hid (null): unknown global tag 0xd [ 788.137125][ T7945] hid (null): unknown global tag 0xa1 [ 788.137169][ T7945] hid (null): unknown global tag 0xc [ 788.137212][ T7945] hid (null): unknown global tag 0xc [ 788.137224][ T7945] hid (null): unknown global tag 0x5d [ 789.195265][ C1] vkms_vblank_simulate: vblank timer overrun [ 789.404683][ C1] vkms_vblank_simulate: vblank timer overrun [ 789.415665][ T9510] affs: No valid root block on device nullb0 [ 789.541689][ T9511] netlink: 212376 bytes leftover after parsing attributes in process `syz.7.562'. [ 789.682824][ T7945] hid-generic 002B:CDBD:FFFFEEA1.0001: unknown main item tag 0x7 [ 789.682909][ T7945] hid-generic 002B:CDBD:FFFFEEA1.0001: reserved main item tag 0xd [ 789.682929][ T7945] hid-generic 002B:CDBD:FFFFEEA1.0001: unknown main item tag 0x4 [ 789.682944][ T7945] hid-generic 002B:CDBD:FFFFEEA1.0001: unknown main item tag 0x6 [ 789.682958][ T7945] hid-generic 002B:CDBD:FFFFEEA1.0001: unknown main item tag 0x1 [ 789.682972][ T7945] hid-generic 002B:CDBD:FFFFEEA1.0001: reserved main item tag 0xe [ 789.682987][ T7945] hid-generic 002B:CDBD:FFFFEEA1.0001: unexpected long global item [ 789.683442][ T7945] hid-generic 002B:CDBD:FFFFEEA1.0001: probe with driver hid-generic failed with error -22 [ 790.072702][ C1] vkms_vblank_simulate: vblank timer overrun [ 790.577126][ C1] vkms_vblank_simulate: vblank timer overrun [ 790.904494][ C1] vkms_vblank_simulate: vblank timer overrun [ 791.036802][ T9508] Bluetooth: hci5: command 0x0406 tx timeout [ 791.036836][ T9508] Bluetooth: hci4: command 0x0406 tx timeout [ 791.440777][ C1] vkms_vblank_simulate: vblank timer overrun [ 792.037954][ T5914] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 792.408179][ C1] vkms_vblank_simulate: vblank timer overrun [ 792.610112][ C1] vkms_vblank_simulate: vblank timer overrun [ 792.658022][ T5914] usb 1-1: Using ep0 maxpacket: 32 [ 792.661017][ T5914] usb 1-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 792.661042][ T5914] usb 1-1: config 4 has 0 interfaces, different from the descriptor's value: 1 [ 792.661077][ T5914] usb 1-1: New USB device found, idVendor=016d, idProduct=c314, bcdDevice= 0.00 [ 792.661104][ T5914] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 793.712302][ T5914] usb 1-1: can't set config #4, error -71 [ 793.755570][ T5914] usb 1-1: USB disconnect, device number 7 [ 793.785759][ T9539] uprobe: syz.9.570:9539 failed to unregister, leaking uprobe [ 794.863432][ T9555] lo speed is unknown, defaulting to 1000 [ 798.834886][ T9591] trusted_key: syz.9.582 sent an empty control message without MSG_MORE. [ 800.035359][ T9587] bpq0: left allmulticast mode [ 800.687836][ T9608] random: crng reseeded on system resumption [ 806.115775][ T5845] Bluetooth: hci0: command 0x0406 tx timeout [ 807.405722][ T9641] netlink: 60 bytes leftover after parsing attributes in process `syz.8.597'. [ 809.019460][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 809.019508][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 812.036089][ C0] vkms_vblank_simulate: vblank timer overrun [ 812.345914][ C0] vkms_vblank_simulate: vblank timer overrun [ 812.485556][ C0] vkms_vblank_simulate: vblank timer overrun [ 812.598096][ C0] vkms_vblank_simulate: vblank timer overrun [ 812.715018][ C0] vkms_vblank_simulate: vblank timer overrun [ 812.922581][ C0] vkms_vblank_simulate: vblank timer overrun [ 813.390624][ C0] vkms_vblank_simulate: vblank timer overrun [ 813.919342][ C0] vkms_vblank_simulate: vblank timer overrun [ 814.126331][ C0] vkms_vblank_simulate: vblank timer overrun [ 815.900641][ C0] vkms_vblank_simulate: vblank timer overrun [ 816.145050][ C0] vkms_vblank_simulate: vblank timer overrun [ 821.699664][ T9731] kvm: kvm [9719]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x1000067f1 [ 821.927312][ T9731] kvm: kvm [9719]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc1) = 0x1000027f1 [ 821.927571][ T9731] kvm: kvm [9719]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc2) = 0x4000 [ 822.551085][ T9754] netlink: 8 bytes leftover after parsing attributes in process `syz.6.621'. [ 822.635333][ T59] Bluetooth: hci4: unexpected event for opcode 0x1001 [ 826.730045][ T9783] 9pnet_fd: Insufficient options for proto=fd [ 827.880881][ T9800] netlink: 'syz.7.628': attribute type 21 has an invalid length. [ 827.880904][ T9800] netlink: 128 bytes leftover after parsing attributes in process `syz.7.628'. [ 827.881021][ T9800] netlink: 'syz.7.628': attribute type 5 has an invalid length. [ 827.881033][ T9800] netlink: 3 bytes leftover after parsing attributes in process `syz.7.628'. [ 830.126557][ T9822] netlink: 32 bytes leftover after parsing attributes in process `syz.8.633'. [ 836.342387][ T5921] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 836.361228][ T9873] affs: No valid root block on device nullb0 [ 836.557236][ T5921] usb 10-1: Using ep0 maxpacket: 8 [ 836.584512][ T5921] usb 10-1: config 0 has no interfaces? [ 836.588940][ T5921] usb 10-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 836.588967][ T5921] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 836.588985][ T5921] usb 10-1: Product: syz [ 836.588998][ T5921] usb 10-1: Manufacturer: syz [ 836.589011][ T5921] usb 10-1: SerialNumber: syz [ 836.660345][ T5921] usb 10-1: config 0 descriptor?? [ 836.997976][ T5921] usb 10-1: USB disconnect, device number 2 [ 837.245388][ T9887] fuse: Bad value for 'fd' [ 838.276044][ T9886] random: crng reseeded on system resumption [ 839.570878][ T9899] random: crng reseeded on system resumption [ 840.910790][ T9922] IPVS: Error joining to the multicast group [ 844.218285][ T37] audit: type=1326 audit(1756126485.567:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9942 comm="syz.8.661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03d094ebe9 code=0x7ffc0000 [ 844.218340][ T37] audit: type=1326 audit(1756126485.567:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9942 comm="syz.8.661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03d094ebe9 code=0x7ffc0000 [ 844.218384][ T37] audit: type=1326 audit(1756126485.567:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9942 comm="syz.8.661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=20 compat=0 ip=0x7f03d094ebe9 code=0x7ffc0000 [ 844.218425][ T37] audit: type=1326 audit(1756126485.567:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9942 comm="syz.8.661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03d094ebe9 code=0x7ffc0000 [ 845.202364][ T37] audit: type=1326 audit(1756126485.607:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9942 comm="syz.8.661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03d094ebe9 code=0x7ffc0000 [ 845.206135][ T37] audit: type=1326 audit(1756126486.567:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9942 comm="syz.8.661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=427 compat=0 ip=0x7f03d094ebe9 code=0x7ffc0000 [ 845.206431][ T37] audit: type=1326 audit(1756126486.567:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9942 comm="syz.8.661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03d094ebe9 code=0x7ffc0000 [ 845.206473][ T37] audit: type=1326 audit(1756126486.567:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9942 comm="syz.8.661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03d094ebe9 code=0x7ffc0000 [ 845.255976][ T37] audit: type=1326 audit(1756126486.617:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9942 comm="syz.8.661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f03d094ebe9 code=0x7ffc0000 [ 845.256026][ T37] audit: type=1326 audit(1756126486.617:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9942 comm="syz.8.661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03d094ebe9 code=0x7ffc0000 [ 845.313479][ T9946] overlayfs: missing 'lowerdir' [ 845.425570][ T9953] random: crng reseeded on system resumption [ 845.708992][ T9960] 9pnet_fd: Insufficient options for proto=fd [ 847.120282][ T9973] warning: `syz.8.669' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 848.920131][ T9991] overlay: ./file0 is not a directory [ 853.364235][T10013] affs: No valid root block on device nullb0 [ 856.412089][T10030] 9pnet_fd: Insufficient options for proto=fd [ 856.672533][T10036] random: crng reseeded on system resumption [ 859.270871][T10043] netlink: 4 bytes leftover after parsing attributes in process `syz.9.684'. [ 859.415034][T10039] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 863.669341][T10076] sctp: failed to load transform for md5: -2 [ 865.252008][T10088] 9pnet_fd: Insufficient options for proto=fd [ 866.132151][T10102] random: crng reseeded on system resumption [ 870.882860][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.882937][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 873.573723][ T5914] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 873.750033][T10128] 9pnet_fd: Insufficient options for proto=fd [ 873.937890][ T5914] usb 1-1: device not accepting address 8, error -71 [ 875.686494][T10146] random: crng reseeded on system resumption [ 877.510475][T10131] ip6gretap1: entered allmulticast mode [ 881.718788][ T5845] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 881.854299][ T5845] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 881.866296][ T5845] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 881.875650][ T5845] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 881.889309][ T5845] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 881.952700][ T4222] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 883.990325][ T59] Bluetooth: hci1: command tx timeout [ 884.067050][T10158] lo speed is unknown, defaulting to 1000 [ 884.323056][T10173] tipc: Failed to remove unknown binding: 66,1,1/2886997007:1459755308/1459755310 [ 884.323084][T10173] tipc: Failed to remove unknown binding: 66,1,1/2886997007:1459755308/1459755310 [ 884.368318][T10185] 9pnet_fd: Insufficient options for proto=fd [ 884.851134][T10189] random: crng reseeded on system resumption [ 885.755454][ C0] vkms_vblank_simulate: vblank timer overrun [ 885.836006][ C0] vkms_vblank_simulate: vblank timer overrun [ 885.844067][ T4222] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 886.018190][ T59] Bluetooth: hci1: command tx timeout [ 886.081172][ C0] vkms_vblank_simulate: vblank timer overrun [ 886.528117][ C0] vkms_vblank_simulate: vblank timer overrun [ 886.964248][ C0] vkms_vblank_simulate: vblank timer overrun [ 887.126232][ C0] vkms_vblank_simulate: vblank timer overrun [ 887.272952][ C0] vkms_vblank_simulate: vblank timer overrun [ 888.194827][ T59] Bluetooth: hci1: command tx timeout [ 888.260931][ C0] vkms_vblank_simulate: vblank timer overrun [ 888.557532][ C0] vkms_vblank_simulate: vblank timer overrun [ 889.765705][ C0] vkms_vblank_simulate: vblank timer overrun [ 889.933256][ C0] vkms_vblank_simulate: vblank timer overrun [ 890.258384][ T59] Bluetooth: hci1: command tx timeout [ 891.523363][T10230] 9pnet_fd: Insufficient options for proto=fd [ 892.019495][T10235] befs: (nullb0): invalid magic header [ 892.386034][ T4222] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 892.681111][T10245] random: crng reseeded on system resumption [ 893.354891][T10251] serio: Serial port ptm0 [ 899.814527][T10269] random: crng reseeded on system resumption [ 899.881776][ T4222] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 900.361497][T10275] netlink: 68 bytes leftover after parsing attributes in process `syz.9.745'. [ 901.312488][T10158] chnl_net:caif_netlink_parms(): no params data found [ 901.494076][T10289] random: crng reseeded on system resumption [ 902.525073][T10292] netlink: 36 bytes leftover after parsing attributes in process `syz.8.746'. [ 904.906854][T10309] random: crng reseeded on system resumption [ 905.314721][T10314] random: crng reseeded on system resumption [ 905.323826][T10297] netlink: 4 bytes leftover after parsing attributes in process `syz.0.749'. [ 905.365750][T10298] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 905.549992][T10158] bridge0: port 1(bridge_slave_0) entered blocking state [ 905.550268][T10158] bridge0: port 1(bridge_slave_0) entered disabled state [ 905.550496][T10158] bridge_slave_0: entered allmulticast mode [ 905.584205][T10158] bridge_slave_0: entered promiscuous mode [ 905.804657][T10158] bridge0: port 2(bridge_slave_1) entered blocking state [ 905.804808][T10158] bridge0: port 2(bridge_slave_1) entered disabled state [ 905.805062][T10158] bridge_slave_1: entered allmulticast mode [ 905.846424][T10317] random: crng reseeded on system resumption [ 906.046370][T10158] bridge_slave_1: entered promiscuous mode [ 909.837142][T10342] random: crng reseeded on system resumption [ 911.192090][ T59] Bluetooth: hci2: unexpected Set CIG Parameters response data [ 911.194057][ T59] Bluetooth: hci2: unexpected event for opcode 0x2062 [ 911.626507][T10158] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 911.781155][ T4222] bridge_slave_1: left allmulticast mode [ 911.783175][ T4222] bridge_slave_1: left promiscuous mode [ 911.789409][ T4222] bridge0: port 2(bridge_slave_1) entered disabled state [ 912.279474][ T4222] bridge_slave_0: left allmulticast mode [ 912.279505][ T4222] bridge_slave_0: left promiscuous mode [ 912.280778][ T4222] bridge0: port 1(bridge_slave_0) entered disabled state [ 912.314852][T10366] netlink: 4 bytes leftover after parsing attributes in process `syz.7.766'. [ 912.338903][T10363] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 913.745837][T10377] tipc: Failed to remove unknown binding: 66,1,1/0:1364368189/1364368191 [ 913.745867][T10377] tipc: Failed to remove unknown binding: 66,1,1/0:1364368189/1364368191 [ 915.645669][ T5845] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 915.645803][ T5845] Bluetooth: hci2: Injecting HCI hardware error event [ 915.652880][ T5845] Bluetooth: hci2: hardware error 0x00 [ 919.024076][ T5845] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 924.113553][T10451] overlayfs: failed to clone upperpath [ 924.904204][T10457] netlink: 'syz.0.789': attribute type 1 has an invalid length. [ 929.820179][ T5849] IPVS: starting estimator thread 0... [ 930.088383][T10490] IPVS: using max 9 ests per chain, 21600 per kthread [ 932.209700][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 932.209784][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 937.173318][ T37] kauditd_printk_skb: 13 callbacks suppressed [ 937.173335][ T37] audit: type=1326 audit(1756126578.537:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10537 comm="syz.8.815" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f03d094ebe9 code=0x0 [ 937.652409][ T5845] Bluetooth: hci7: unexpected event for opcode 0x200f [ 939.381786][T10566] futex_wake_op: syz.0.818 tries to shift op by 36; fix this program [ 939.980825][ T8136] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 940.038597][T10567] Invalid source name [ 940.038643][T10567] UBIFS error (pid: 10567): cannot open "/dev/sg0", error -22 [ 941.201953][T10565] netlink: 'syz.8.819': attribute type 3 has an invalid length. [ 941.614809][ T8136] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 941.650375][ T8136] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 941.658964][ T8136] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 941.660251][ T8136] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 942.702233][T10574] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 944.032396][ T8136] Bluetooth: hci3: command tx timeout [ 944.802822][T10604] netlink: 16 bytes leftover after parsing attributes in process `syz.0.829'. [ 946.119480][ T5845] Bluetooth: hci3: command tx timeout [ 948.565234][ T5845] Bluetooth: hci3: command tx timeout [ 948.672242][T10625] netlink: 277 bytes leftover after parsing attributes in process `syz.8.834'. [ 948.719076][T10625] netlink: 16 bytes leftover after parsing attributes in process `syz.8.834'. [ 948.798590][ T4222] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 949.035077][ T4222] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 950.922231][T10643] overlayfs: failed to clone upperpath [ 950.946718][ T5845] Bluetooth: hci3: command tx timeout [ 951.988087][ T4222] bond0 (unregistering): Released all slaves [ 954.942555][T10158] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 955.058799][T10659] netlink: 4 bytes leftover after parsing attributes in process `syz.7.841'. [ 955.735385][T10562] lo speed is unknown, defaulting to 1000 [ 957.579702][T10562] chnl_net:caif_netlink_parms(): no params data found [ 958.270835][T10683] netlink: 20 bytes leftover after parsing attributes in process `syz.8.851'. [ 965.494520][T10724] virtio-fs: tag not found [ 969.376866][T10752] netlink: 8 bytes leftover after parsing attributes in process `syz.7.872'. [ 971.491213][T10783] 9pnet_fd: Insufficient options for proto=fd [ 974.268032][T10562] bridge0: port 1(bridge_slave_0) entered blocking state [ 974.268318][T10562] bridge0: port 1(bridge_slave_0) entered disabled state [ 974.268577][T10562] bridge_slave_0: entered allmulticast mode [ 974.341592][T10562] bridge_slave_0: entered promiscuous mode [ 974.359001][T10562] bridge0: port 2(bridge_slave_1) entered blocking state [ 974.359164][T10562] bridge0: port 2(bridge_slave_1) entered disabled state [ 974.359414][T10562] bridge_slave_1: entered allmulticast mode [ 974.412375][T10562] bridge_slave_1: entered promiscuous mode [ 974.762057][T10812] 9pnet_fd: Insufficient options for proto=fd [ 979.469748][ T4222] hsr_slave_0: left promiscuous mode [ 979.498017][ T4222] hsr_slave_1: left promiscuous mode [ 979.498968][ T4222] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 979.499007][ T4222] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 979.878918][ T4222] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 979.878948][ T4222] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 983.891438][ T4222] veth1_macvtap: left promiscuous mode [ 983.891515][ T4222] veth0_macvtap: left promiscuous mode [ 983.891677][ T4222] veth1_vlan: left promiscuous mode [ 983.891791][ T4222] veth0_vlan: left promiscuous mode [ 985.630846][T10857] 9pnet_fd: Insufficient options for proto=fd [ 1027.900251][ T5845] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1027.923180][ T5845] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1027.925233][ T5845] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1027.938347][ T5845] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1027.953294][ T5845] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1028.145433][ T8136] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1028.177538][ T8136] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1028.186610][ T8136] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1028.199378][ T8136] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1028.206431][ T8136] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1028.445786][ T8136] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1028.470437][ T8136] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1028.472042][ T8136] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1028.475995][ T8136] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1028.526620][ T8136] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1028.679790][ T5845] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 1028.701002][ T5845] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 1028.703200][ T5845] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 1028.704653][ T5845] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 1028.731358][ T5845] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 1028.800355][ T8136] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 1028.823929][ T8136] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 1028.826261][ T8136] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 1028.840382][ T8136] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 1028.854697][ T8136] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 1030.017842][ T5845] Bluetooth: hci1: command tx timeout [ 1030.258228][ T5845] Bluetooth: hci4: command tx timeout [ 1030.578049][ T5845] Bluetooth: hci6: command tx timeout [ 1030.817899][ T5845] Bluetooth: hci8: command tx timeout [ 1030.898484][ T5845] Bluetooth: hci9: command tx timeout [ 1032.097980][ T5845] Bluetooth: hci1: command tx timeout [ 1032.338119][ T5845] Bluetooth: hci4: command tx timeout [ 1032.657934][ T5845] Bluetooth: hci6: command tx timeout [ 1032.898061][ T5845] Bluetooth: hci8: command tx timeout [ 1032.978471][ T5845] Bluetooth: hci9: command tx timeout [ 1034.177822][ T5845] Bluetooth: hci1: command tx timeout [ 1034.417886][ T5845] Bluetooth: hci4: command tx timeout [ 1034.737817][ T5845] Bluetooth: hci6: command tx timeout [ 1034.977943][ T5845] Bluetooth: hci8: command tx timeout [ 1035.058267][ T5845] Bluetooth: hci9: command tx timeout [ 1036.257839][ T5845] Bluetooth: hci1: command tx timeout [ 1036.497872][ T5845] Bluetooth: hci4: command tx timeout [ 1036.818267][ T5845] Bluetooth: hci6: command tx timeout [ 1037.057861][ T5845] Bluetooth: hci8: command tx timeout [ 1037.138479][ T5845] Bluetooth: hci9: command tx timeout [ 1063.609437][ T8136] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 1063.617124][ T8136] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 1063.620491][ T8136] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 1063.623433][ T8136] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 1063.624954][ T8136] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 1063.845931][ T59] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 1063.868600][ T59] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 1063.870642][ T59] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 1063.871965][ T59] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 1063.873228][ T59] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 1064.850327][T10906] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 1064.878086][T10906] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 1064.883904][T10906] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 1064.885244][T10906] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 1064.886592][T10906] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 1066.818057][T10906] Bluetooth: hci3: command 0x0406 tx timeout [ 1084.659990][ T9508] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 1084.683456][ T9508] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 1084.684946][ T9508] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 1084.686225][ T9508] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 1084.687066][ T9508] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 1084.865905][T10916] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 1084.890263][T10916] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 1084.891841][T10916] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 1084.894197][T10916] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 1084.895210][T10916] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 1123.402476][T10913] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 1123.426692][T10913] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 1123.438035][T10913] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 1123.440697][T10913] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 1123.442099][T10913] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 1124.491284][T10919] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 1124.512306][T10919] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 1124.517985][T10919] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 1124.535161][T10919] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 1124.536139][T10919] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 1125.910545][T10927] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1 [ 1125.930779][T10927] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9 [ 1125.960552][T10927] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9 [ 1125.962305][T10927] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4 [ 1125.963307][T10927] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2 [ 1128.738026][ T38] INFO: task kworker/u8:4:69 blocked for more than 143 seconds. [ 1128.738051][ T38] Not tainted syzkaller #0 [ 1128.738060][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1128.738068][ T38] task:kworker/u8:4 state:D stack:20264 pid:69 tgid:69 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 1128.738118][ T38] Workqueue: events_unbound linkwatch_event [ 1128.738147][ T38] Call Trace: [ 1128.738154][ T38] [ 1128.738166][ T38] __schedule+0x16f3/0x4c20 [ 1128.738227][ T38] ? __pfx___schedule+0x10/0x10 [ 1128.738268][ T38] ? _raw_spin_unlock_irq+0x23/0x50 [ 1128.738291][ T38] rt_mutex_schedule+0x77/0xf0 [ 1128.738309][ T38] rt_mutex_slowlock_block+0x5ba/0x6d0 [ 1128.738328][ T38] ? task_blocks_on_rt_mutex+0xf12/0x1380 [ 1128.738373][ T38] rt_mutex_slowlock+0x2b1/0x6e0 [ 1128.738393][ T38] ? rt_mutex_slowlock+0x1c9/0x6e0 [ 1128.738412][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 1128.738442][ T38] ? linkwatch_event+0xe/0x60 [ 1128.738471][ T38] ? process_scheduled_works+0x9ef/0x17b0 [ 1128.738497][ T38] ? linkwatch_event+0xe/0x60 [ 1128.738517][ T38] mutex_lock_nested+0x16a/0x1d0 [ 1128.738533][ T38] ? _raw_spin_unlock_irq+0x23/0x50 [ 1128.738553][ T38] ? process_scheduled_works+0x9ef/0x17b0 [ 1128.738576][ T38] linkwatch_event+0xe/0x60 [ 1128.738597][ T38] process_scheduled_works+0xade/0x17b0 [ 1128.738650][ T38] ? __pfx_process_scheduled_works+0x10/0x10 [ 1128.738690][ T38] worker_thread+0x8a0/0xda0 [ 1128.738739][ T38] kthread+0x711/0x8a0 [ 1128.738767][ T38] ? __pfx_worker_thread+0x10/0x10 [ 1128.738787][ T38] ? __pfx_kthread+0x10/0x10 [ 1128.738816][ T38] ? __pfx_kthread+0x10/0x10 [ 1128.738838][ T38] ret_from_fork+0x3fc/0x770 [ 1128.738863][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 1128.738891][ T38] ? __switch_to_asm+0x39/0x70 [ 1128.738907][ T38] ? __switch_to_asm+0x33/0x70 [ 1128.738922][ T38] ? __pfx_kthread+0x10/0x10 [ 1128.738946][ T38] ret_from_fork_asm+0x1a/0x30 [ 1128.738981][ T38] [ 1128.739089][ T38] INFO: task kworker/0:7:6011 blocked for more than 143 seconds. [ 1128.739102][ T38] Not tainted syzkaller #0 [ 1128.739111][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1128.739119][ T38] task:kworker/0:7 state:D stack:20808 pid:6011 tgid:6011 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 1128.739165][ T38] Workqueue: events switchdev_deferred_process_work [ 1128.739196][ T38] Call Trace: [ 1128.739201][ T38] [ 1128.739213][ T38] __schedule+0x16f3/0x4c20 [ 1128.739261][ T38] ? __pfx___schedule+0x10/0x10 [ 1128.739300][ T38] ? _raw_spin_unlock_irq+0x23/0x50 [ 1128.739324][ T38] rt_mutex_schedule+0x77/0xf0 [ 1128.739341][ T38] rt_mutex_slowlock_block+0x5ba/0x6d0 [ 1128.739359][ T38] ? task_blocks_on_rt_mutex+0xf12/0x1380 [ 1128.739403][ T38] rt_mutex_slowlock+0x2b1/0x6e0 [ 1128.739423][ T38] ? rt_mutex_slowlock+0x1c9/0x6e0 [ 1128.739442][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 1128.739472][ T38] ? switchdev_deferred_process_work+0xe/0x20 [ 1128.739502][ T38] ? process_scheduled_works+0x9ef/0x17b0 [ 1128.739527][ T38] ? switchdev_deferred_process_work+0xe/0x20 [ 1128.739548][ T38] mutex_lock_nested+0x16a/0x1d0 [ 1128.739563][ T38] ? _raw_spin_unlock_irq+0x23/0x50 [ 1128.739584][ T38] ? process_scheduled_works+0x9ef/0x17b0 [ 1128.739606][ T38] switchdev_deferred_process_work+0xe/0x20 [ 1128.739627][ T38] process_scheduled_works+0xade/0x17b0 [ 1128.739679][ T38] ? __pfx_process_scheduled_works+0x10/0x10 [ 1128.739720][ T38] worker_thread+0x8a0/0xda0 [ 1128.739744][ T38] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1128.739774][ T38] ? __kthread_parkme+0x7b/0x200 [ 1128.739806][ T38] kthread+0x711/0x8a0 [ 1128.739833][ T38] ? __pfx_worker_thread+0x10/0x10 [ 1128.739853][ T38] ? __pfx_kthread+0x10/0x10 [ 1128.739882][ T38] ? __pfx_kthread+0x10/0x10 [ 1128.739906][ T38] ret_from_fork+0x3fc/0x770 [ 1128.739931][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 1128.739957][ T38] ? __switch_to_asm+0x39/0x70 [ 1128.739973][ T38] ? __switch_to_asm+0x33/0x70 [ 1128.739988][ T38] ? __pfx_kthread+0x10/0x10 [ 1128.740012][ T38] ret_from_fork_asm+0x1a/0x30 [ 1128.740046][ T38] [ 1128.740095][ T38] INFO: task syz-executor:10562 blocked for more than 143 seconds. [ 1128.740108][ T38] Not tainted syzkaller #0 [ 1128.740116][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1128.740125][ T38] task:syz-executor state:D stack:21816 pid:10562 tgid:10562 ppid:1 task_flags:0x400140 flags:0x00004004 [ 1128.740169][ T38] Call Trace: [ 1128.740175][ T38] [ 1128.740192][ T38] __schedule+0x16f3/0x4c20 [ 1128.740239][ T38] ? __pfx___schedule+0x10/0x10 [ 1128.740278][ T38] ? _raw_spin_unlock_irq+0x23/0x50 [ 1128.740302][ T38] rt_mutex_schedule+0x77/0xf0 [ 1128.740319][ T38] rt_mutex_slowlock_block+0x5ba/0x6d0 [ 1128.740337][ T38] ? task_blocks_on_rt_mutex+0x78c/0x1380 [ 1128.740380][ T38] rt_mutex_slowlock+0x2b1/0x6e0 [ 1128.740400][ T38] ? rt_mutex_slowlock+0x1c9/0x6e0 [ 1128.740420][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 1128.740449][ T38] ? lockdep_hardirqs_on+0x9c/0x150 [ 1128.740449][ T38] ? lockdep_hardirqs_on+0x9c/0x150 [ 1128.740473][ T38] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1128.740495][ T38] ? bpf_lsm_capable+0x9/0x20 [ 1128.740516][ T38] ? security_capable+0x7e/0x2e0 [ 1128.740544][ T38] ? rtnl_newlink+0x8db/0x1c70 [ 1128.740561][ T38] mutex_lock_nested+0x16a/0x1d0 [ 1128.740578][ T38] ? rtnl_newlink+0x8db/0x1c70 [ 1128.740601][ T38] rtnl_newlink+0x8db/0x1c70 [ 1128.740629][ T38] ? __lock_acquire+0xab9/0xd20 [ 1128.740654][ T38] ? __pfx_rtnl_newlink+0x10/0x10 [ 1128.740683][ T38] ? __lock_acquire+0xab9/0xd20 [ 1128.740774][ T38] ? __lock_acquire+0xab9/0xd20 [ 1128.740822][ T38] ? __pfx_rtnl_newlink+0x10/0x10 [ 1128.740841][ T38] rtnetlink_rcv_msg+0x7cc/0xb70 [ 1128.740860][ T38] ? __lock_acquire+0xab9/0xd20 [ 1128.740883][ T38] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 1128.740902][ T38] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1128.740939][ T38] netlink_rcv_skb+0x205/0x470 [ 1128.740958][ T38] ? __lock_acquire+0xab9/0xd20 [ 1128.740979][ T38] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1128.741001][ T38] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1128.741034][ T38] ? netlink_deliver_tap+0x2e/0x1b0 [ 1128.741062][ T38] netlink_unicast+0x843/0xa10 [ 1128.741090][ T38] ? __pfx_netlink_unicast+0x10/0x10 [ 1128.741112][ T38] ? netlink_sendmsg+0x642/0xb30 [ 1128.741130][ T38] ? skb_put+0x11b/0x210 [ 1128.741156][ T38] netlink_sendmsg+0x805/0xb30 [ 1128.741193][ T38] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1128.741223][ T38] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1128.741240][ T38] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1128.741262][ T38] __sock_sendmsg+0x219/0x270 [ 1128.741285][ T38] __sys_sendto+0x3c7/0x520 [ 1128.741310][ T38] ? __pfx___sys_sendto+0x10/0x10 [ 1128.741345][ T38] ? blkcg_maybe_throttle_current+0x1a8/0xbc0 [ 1128.741390][ T38] ? rcu_is_watching+0x15/0xb0 [ 1128.741419][ T38] __x64_sys_sendto+0xde/0x100 [ 1128.741445][ T38] do_syscall_64+0xfa/0x3b0 [ 1128.741465][ T38] ? lockdep_hardirqs_on+0x9c/0x150 [ 1128.741485][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1128.741503][ T38] ? clear_bhb_loop+0x60/0xb0 [ 1128.741525][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1128.741543][ T38] RIP: 0033:0x7f9150170a7c [ 1128.741558][ T38] RSP: 002b:00007fff09cbf9e0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 1128.741577][ T38] RAX: ffffffffffffffda RBX: 00007f9150ec4620 RCX: 00007f9150170a7c [ 1128.741590][ T38] RDX: 0000000000000068 RSI: 00007f9150ec4670 RDI: 0000000000000003 [ 1128.741602][ T38] RBP: 0000000000000000 R08: 00007fff09cbfa34 R09: 000000000000000c [ 1128.741614][ T38] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 1128.741624][ T38] R13: 0000000000000000 R14: 00007f9150ec4670 R15: 0000000000000000 [ 1128.741653][ T38] [ 1128.741662][ T38] INFO: task syz.9.897:10828 blocked for more than 143 seconds. [ 1128.741673][ T38] Not tainted syzkaller #0 [ 1128.741682][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1128.741690][ T38] task:syz.9.897 state:D stack:24888 pid:10828 tgid:10818 ppid:8892 task_flags:0x400040 flags:0x00004004 [ 1128.741737][ T38] Call Trace: [ 1128.741743][ T38] [ 1128.741754][ T38] __schedule+0x16f3/0x4c20 [ 1128.741802][ T38] ? __pfx___schedule+0x10/0x10 [ 1128.741848][ T38] rt_mutex_schedule+0x77/0xf0 [ 1128.741865][ T38] rt_mutex_slowlock_block+0x5ba/0x6d0 [ 1128.741897][ T38] ? rt_mutex_slowlock_block+0x351/0x6d0 [ 1128.741919][ T38] rt_mutex_slowlock+0x2b1/0x6e0 [ 1128.741938][ T38] ? rt_mutex_slowlock+0x1c9/0x6e0 [ 1128.741956][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 1128.741985][ T38] ? rtnl_dumpit+0x92/0x200 [ 1128.742006][ T38] ? rcu_is_watching+0x15/0xb0 [ 1128.742030][ T38] ? trace_kmalloc+0x1f/0xd0 [ 1128.742049][ T38] ? __kmalloc_node_track_caller_noprof+0x213/0x450 [ 1128.742077][ T38] ? rtnl_dumpit+0x92/0x200 [ 1128.742094][ T38] mutex_lock_nested+0x16a/0x1d0 [ 1128.742110][ T38] ? __build_skb_around+0x257/0x3e0 [ 1128.742132][ T38] ? __pfx_tc_dump_qdisc+0x10/0x10 [ 1128.742156][ T38] rtnl_dumpit+0x92/0x200 [ 1128.742181][ T38] netlink_dump+0x6e4/0xe90 [ 1128.742220][ T38] ? __pfx_netlink_dump+0x10/0x10 [ 1128.742237][ T38] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 1128.742258][ T38] ? lockdep_hardirqs_on+0x9c/0x150 [ 1128.742306][ T38] __netlink_dump_start+0x5cb/0x7e0 [ 1128.742335][ T38] rtnetlink_rcv_msg+0x9eb/0xb70 [ 1128.742357][ T38] ? __pfx_tc_dump_qdisc+0x10/0x10 [ 1128.742380][ T38] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 1128.742399][ T38] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1128.742418][ T38] ? __pfx_rtnl_dumpit+0x10/0x10 [ 1128.742437][ T38] ? __pfx_tc_dump_qdisc+0x10/0x10 [ 1128.742463][ T38] ? __pfx_rcu_preempt_deferred_qs_irqrestore+0x10/0x10 [ 1128.742495][ T38] netlink_rcv_skb+0x205/0x470 [ 1128.742513][ T38] ? rcu_is_watching+0x15/0xb0 [ 1128.742536][ T38] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1128.742558][ T38] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1128.742591][ T38] ? netlink_deliver_tap+0x2e/0x1b0 [ 1128.742620][ T38] netlink_unicast+0x843/0xa10 [ 1128.742647][ T38] ? __pfx_netlink_unicast+0x10/0x10 [ 1128.742668][ T38] ? netlink_sendmsg+0x642/0xb30 [ 1128.742686][ T38] ? skb_put+0x11b/0x210 [ 1128.742711][ T38] netlink_sendmsg+0x805/0xb30 [ 1128.742730][ T38] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 1128.742758][ T38] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1128.742787][ T38] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1128.742804][ T38] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1128.742825][ T38] __sock_sendmsg+0x219/0x270 [ 1128.742847][ T38] ____sys_sendmsg+0x508/0x820 [ 1128.742876][ T38] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1128.742909][ T38] ? import_iovec+0x74/0xa0 [ 1128.742933][ T38] ___sys_sendmsg+0x21f/0x2a0 [ 1128.742957][ T38] ? __pfx____sys_sendmsg+0x10/0x10 [ 1128.742978][ T38] ? irqentry_exit+0x74/0x90 [ 1128.743003][ T38] ? rcu_is_watching+0x15/0xb0 [ 1128.743057][ T38] ? __fget_files+0x2a/0x420 [ 1128.743079][ T38] ? __fget_files+0x3a6/0x420 [ 1128.743113][ T38] __x64_sys_sendmsg+0x1a1/0x260 [ 1128.743140][ T38] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1128.743175][ T38] ? rcu_is_watching+0x15/0xb0 [ 1128.743210][ T38] ? do_syscall_64+0xbe/0x3b0 [ 1128.743236][ T38] do_syscall_64+0xfa/0x3b0 [ 1128.743258][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1128.743274][ T38] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 1128.743291][ T38] ? clear_bhb_loop+0x60/0xb0 [ 1128.743312][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1128.743329][ T38] RIP: 0033:0x7f5af894ebe9 [ 1128.743344][ T38] RSP: 002b:00007f5af6b74038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1128.743362][ T38] RAX: ffffffffffffffda RBX: 00007f5af8b76180 RCX: 00007f5af894ebe9 [ 1128.743375][ T38] RDX: 0000000000004080 RSI: 0000200000000080 RDI: 0000000000000008 [ 1128.743387][ T38] RBP: 00007f5af89d1e19 R08: 0000000000000000 R09: 0000000000000000 [ 1128.743399][ T38] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1128.743411][ T38] R13: 00007f5af8b76218 R14: 00007f5af8b76180 R15: 00007ffc23448408 [ 1128.743442][ T38] [ 1128.743477][ T38] [ 1128.743477][ T38] Showing all locks held in the system: [ 1128.743487][ T38] 3 locks held by kworker/u8:0/12: [ 1128.743498][ T38] #0: ffff88814d275938 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1128.743544][ T38] #1: ffffc90000117bc0 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1128.743589][ T38] #2: ffffffff8ecd1e78 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_verify_work+0x19/0x30 [ 1128.743634][ T38] 2 locks held by rcuc/1/28: [ 1128.743644][ T38] #0: ffffffff8d84a760 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 1128.743688][ T38] #1: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 1128.743732][ T38] 2 locks held by ktimers/1/29: [ 1128.743742][ T38] 2 locks held by ksoftirqd/1/30: [ 1128.743752][ T38] #0: ffffffff8d84a760 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 1128.743794][ T38] #1: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 1128.743838][ T38] 1 lock held by khungtaskd/38: [ 1128.743846][ T38] #0: ffffffff8d9a8b80 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 1128.743888][ T38] 4 locks held by kworker/1:1/49: [ 1128.743897][ T38] #0: ffff88805c33c538 ((wq_completion)wg-crypt-wg0#3){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1128.743943][ T38] #1: ffffc90000bb7bc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1128.743999][ T38] #2: ffffffff8d84a760 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 1128.744041][ T38] #3: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 1128.744085][ T38] 5 locks held by kworker/u9:0/59: [ 1128.744095][ T38] #0: ffff88805befe138 ((wq_completion)hci3){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1128.744139][ T38] #1: ffffc9000125fbc0 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1128.744183][ T38] #2: ffff88802ef00e80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1d4/0x3a0 [ 1128.744236][ T38] #3: ffff88802ef000a8 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0x242/0xe30 [ 1128.744279][ T38] #4: ffffffff8ee39778 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_failed+0x165/0x310 [ 1128.744324][ T38] 3 locks held by kworker/u8:4/69: [ 1128.744334][ T38] #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1128.744378][ T38] #1: ffffc9000153fbc0 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1128.744421][ T38] #2: ffffffff8ecd1e78 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 1128.744470][ T38] 2 locks held by kworker/1:2/991: [ 1128.744481][ T38] #0: ffff888019898538 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1128.744522][ T38] #1: ffffc90004aefbc0 (free_ipc_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1128.744581][ T38] 4 locks held by kworker/u8:9/4222: [ 1128.744591][ T38] #0: ffff88801a6f4138 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1128.744634][ T38] #1: ffffc9000ecdfbc0 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1128.744676][ T38] #2: ffffffff8ecc4f80 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf7/0x800 [ 1128.744719][ T38] #3: ffffffff8ecd1e78 (rtnl_mutex){+.+.}-{4:4}, at: default_device_exit_batch+0xdc/0x890 [ 1128.744762][ T38] 2 locks held by getty/5597: [ 1128.744772][ T38] #0: ffff88823bf3a8a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1128.744819][ T38] #1: ffffc90003e832e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x444/0x1410 [ 1128.744861][ T38] 4 locks held by kworker/u9:4/5845: [ 1128.744870][ T38] #0: ffff8880309be138 ((wq_completion)hci10#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1128.744917][ T38] #1: ffffc90004b2fbc0 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1128.745049][ T38] #2: ffff888065f7c0a8 (&hdev->lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x9b/0x8e0 [ 1128.745092][ T38] #3: ffffffff8ee39778 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x516/0x8e0 [ 1128.745134][ T38] 4 locks held by kworker/1:3/5901: [ 1128.745145][ T38] #0: ffff88805f37f938 ((wq_completion)wg-crypt-wg1#6){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1128.745193][ T38] #1: ffffc90004effbc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1128.745280][ T38] #2: ffffffff8d84a760 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 1128.745325][ T38] #3: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 1128.745371][ T38] 4 locks held by kworker/1:4/5914: [ 1128.745382][ T38] #0: ffff88805c416d38 ((wq_completion)wg-kex-wg2#6){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1128.745429][ T38] #1: ffffc90004fdfbc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1128.745486][ T38] #2: ffffffff8d84a760 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 1128.745530][ T38] #3: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 1128.745576][ T38] 4 locks held by kworker/1:5/5921: [ 1128.745587][ T38] #0: ffff888036dd0938 ((wq_completion)wg-crypt-wg0#5){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1128.745636][ T38] #1: ffffc9000506fbc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1128.745692][ T38] #2: ffffffff8d84a760 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 1128.745734][ T38] #3: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 1128.745777][ T38] 3 locks held by kworker/0:7/6011: [ 1128.745788][ T38] #0: ffff888019898538 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1128.745830][ T38] #1: ffffc900053bfbc0 (deferred_process_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1128.745873][ T38] #2: ffffffff8ecd1e78 (rtnl_mutex){+.+.}-{4:4}, at: switchdev_deferred_process_work+0xe/0x20 [ 1128.745921][ T38] 4 locks held by kworker/1:6/6087: [ 1128.745931][ T38] #0: ffff88804d405138 ((wq_completion)wg-crypt-wg2#4){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1128.745980][ T38] #1: ffffc900055ffbc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1128.746037][ T38] #2: ffffffff8d84a760 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 1128.746080][ T38] #3: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 1128.746123][ T38] 2 locks held by kworker/u8:17/6321: [ 1128.746135][ T38] 4 locks held by kworker/1:7/6422: [ 1128.746145][ T38] #0: ffff888036b3ad38 ((wq_completion)wg-crypt-wg0#4){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1128.746194][ T38] #1: ffffc9000543fbc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1128.746258][ T38] #2: ffffffff8d84a760 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 1128.746302][ T38] #3: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 1128.746350][ T38] 4 locks held by kworker/1:0/7945: [ 1128.746360][ T38] #0: ffff88805c414938 ((wq_completion)wg-crypt-wg1#3){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1128.746409][ T38] #1: ffffc9000430fbc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1128.746470][ T38] #2: ffffffff8d84a760 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 1128.746515][ T38] #3: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 1128.746561][ T38] 4 locks held by kworker/u9:1/8136: [ 1128.746572][ T38] #0: ffff888036292138 ((wq_completion)hci11#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1128.746623][ T38] #1: ffffc9000489fbc0 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1128.746667][ T38] #2: ffff88805da2c0a8 (&hdev->lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x9b/0x8e0 [ 1128.746708][ T38] #3: ffffffff8ee39778 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x516/0x8e0 [ 1128.746758][ T38] 4 locks held by kworker/1:8/9774: [ 1128.746768][ T38] #0: ffff88805c33c138 ((wq_completion)wg-kex-wg0#6){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1128.746815][ T38] #1: ffffc90006307bc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1128.746872][ T38] #2: ffffffff8d84a760 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 1128.746913][ T38] #3: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 1128.746957][ T38] 4 locks held by kworker/1:9/9775: [ 1128.746967][ T38] #0: ffff88804d405138 ((wq_completion)wg-crypt-wg2#4){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1128.747013][ T38] #1: ffffc9000afffbc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1128.747070][ T38] #2: ffffffff8d84a760 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 1128.747111][ T38] #3: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 1128.747157][ T38] 2 locks held by syz-executor/10562: [ 1128.747166][ T38] #0: ffffffff8e43a940 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 1128.747213][ T38] #1: ffffffff8ecd1e78 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8db/0x1c70 [ 1128.747256][ T38] 4 locks held by syz.7.824/10583: [ 1128.747266][ T38] #0: ffff8880580a8e80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x510 [ 1128.747306][ T38] #1: ffff8880580a80a8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x66a/0x1330 [ 1128.747346][ T38] #2: ffffffff8ee39778 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x230 [ 1128.747390][ T38] #3: ffff88805bbefb58 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x70/0x680 [ 1128.747439][ T38] 8 locks held by syz.8.895/10826: [ 1128.747449][ T38] 2 locks held by syz.9.897/10828: [ 1128.747459][ T38] #0: ffff888143b6c908 (nlk_cb_mutex-ROUTE){+.+.}-{4:4}, at: __netlink_dump_start+0xfe/0x7e0 [ 1128.747501][ T38] #1: ffffffff8ecd1e78 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_dumpit+0x92/0x200 [ 1128.747542][ T38] 4 locks held by kworker/1:10/10875: [ 1128.747552][ T38] #0: ffff888036dd0938 ((wq_completion)wg-crypt-wg0#5){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1129.287954][ T38] #1: ffffc9000d04fbc0 ((work_completion)(&peer->transmit_packet_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1129.288020][ T38] #2: ffffffff8d84a760 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 1129.288064][ T38] #3: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 1129.288109][ T38] 4 locks held by kworker/1:11/10876: [ 1129.288120][ T38] #0: ffff88805f735938 ((wq_completion)wg-crypt-wg1#5){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1129.288169][ T38] #1: ffffc9000cf8fbc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1129.288225][ T38] #2: ffffffff8d84a760 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 1129.288267][ T38] #3: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 1129.288311][ T38] 4 locks held by kworker/1:12/10883: [ 1129.288321][ T38] #0: ffff88805c417138 ((wq_completion)wg-crypt-wg2#3){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1129.288369][ T38] #1: ffffc900059d7bc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1129.288426][ T38] #2: ffffffff8d84a760 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 1129.288466][ T38] #3: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 1129.288510][ T38] 1 lock held by syz-executor/10884: [ 1129.288520][ T38] #0: ffffffff8ecd1e78 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 1129.288568][ T38] 1 lock held by syz-executor/10886: [ 1129.288578][ T38] #0: ffffffff8ecd1e78 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 1129.288624][ T38] 1 lock held by syz-executor/10888: [ 1129.288635][ T38] #0: ffffffff8ecd1e78 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 1129.288680][ T38] 1 lock held by syz-executor/10890: [ 1129.288690][ T38] #0: ffffffff8ecd1e78 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 1129.288736][ T38] 1 lock held by syz-executor/10892: [ 1129.288746][ T38] #0: ffffffff8ecd1e78 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 1129.288792][ T38] 4 locks held by kworker/1:13/10894: [ 1129.288802][ T38] #0: ffff88805da28d38 ((wq_completion)wg-crypt-wg2#5){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1129.288851][ T38] #1: ffffc9000ec27bc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1129.288907][ T38] #2: ffffffff8d84a760 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 1129.288960][ T38] #3: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 1129.289004][ T38] 4 locks held by kworker/1:14/10895: [ 1129.289014][ T38] #0: ffff88804d405138 ((wq_completion)wg-crypt-wg2#4){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1129.289062][ T38] #1: ffffc90004b3fbc0 ((work_completion)(&peer->transmit_packet_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1129.289107][ T38] #2: ffffffff8d84a760 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 1129.289149][ T38] #3: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 1129.289193][ T38] 1 lock held by syz-executor/10898: [ 1129.289203][ T38] #0: ffffffff8ecd1e78 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 1129.289247][ T38] 1 lock held by syz-executor/10901: [ 1129.289257][ T38] #0: ffffffff8ecd1e78 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 1129.289303][ T38] 4 locks held by kworker/1:15/10903: [ 1129.289313][ T38] #0: ffff88805c417138 ((wq_completion)wg-crypt-wg2#3){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1129.289360][ T38] #1: ffffc9000d96fbc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1129.289416][ T38] #2: ffffffff8d84a760 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 1129.289459][ T38] #3: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 1129.289502][ T38] 4 locks held by kworker/u9:3/10904: [ 1129.289512][ T38] #0: ffff888036d94938 ((wq_completion)hci12#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1129.289560][ T38] #1: ffffc9000d95fbc0 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1129.289604][ T38] #2: ffff88802421c0a8 (&hdev->lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x9b/0x8e0 [ 1129.289645][ T38] #3: ffffffff8ee39778 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x516/0x8e0 [ 1129.289686][ T38] 1 lock held by syz-executor/10905: [ 1129.289696][ T38] #0: ffffffff8ecd1e78 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 1129.289742][ T38] 4 locks held by kworker/u9:5/10906: [ 1129.289752][ T38] #0: ffff888020f9e138 ((wq_completion)hci13#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1129.289800][ T38] #1: ffffc9000d92fbc0 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1129.289843][ T38] #2: ffff888084bfc0a8 (&hdev->lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x9b/0x8e0 [ 1129.289883][ T38] #3: ffffffff8ee39778 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x516/0x8e0 [ 1129.289926][ T38] 1 lock held by syz-executor/10911: [ 1129.289942][ T38] #0: ffffffff8ecd1e78 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 1129.289988][ T38] 4 locks held by kworker/u9:6/10913: [ 1129.289998][ T38] #0: ffff88804c00c138 ((wq_completion)hci15#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1129.290044][ T38] #1: ffffc9000d7dfbc0 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1129.290088][ T38] #2: ffff888036ef40a8 (&hdev->lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x9b/0x8e0 [ 1129.290127][ T38] #3: ffffffff8ee39778 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x516/0x8e0 [ 1129.290168][ T38] 1 lock held by syz-executor/10914: [ 1129.290178][ T38] #0: ffffffff8ecd1e78 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 1129.290224][ T38] 4 locks held by kworker/u9:7/10916: [ 1129.290234][ T38] #0: ffff888037533138 ((wq_completion)hci14#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1129.290282][ T38] #1: ffffc9000d7bfbc0 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1129.290325][ T38] #2: ffff888084c040a8 (&hdev->lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x9b/0x8e0 [ 1129.290366][ T38] #3: ffffffff8ee39778 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x516/0x8e0 [ 1129.290407][ T38] 1 lock held by syz-executor/10918: [ 1129.290417][ T38] #0: ffffffff8ecd1e78 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 1129.290463][ T38] 4 locks held by kworker/u9:8/10919: [ 1129.290473][ T38] #0: ffff888052ce7138 ((wq_completion)hci16#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1129.290519][ T38] #1: ffffc9000d7afbc0 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1129.290562][ T38] #2: ffff8880242c00a8 (&hdev->lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x9b/0x8e0 [ 1129.290601][ T38] #3: ffffffff8ee39778 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x516/0x8e0 [ 1129.290639][ T38] 1 lock held by syz-executor/10922: [ 1129.290649][ T38] #0: ffffffff8ecd1e78 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 1129.290696][ T38] 1 lock held by syz-executor/10926: [ 1129.290706][ T38] #0: ffffffff8ecd1e78 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 1129.290752][ T38] 4 locks held by kworker/u9:10/10927: [ 1129.290762][ T38] #0: ffff888054c16138 ((wq_completion)hci17#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1129.290810][ T38] #1: ffffc9000d25fbc0 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1129.290851][ T38] #2: ffff8880363f40a8 (&hdev->lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x9b/0x8e0 [ 1129.290891][ T38] #3: ffffffff8ee39778 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x516/0x8e0 [ 1129.290940][ T38] [ 1129.290945][ T38] ============================================= [ 1129.290945][ T38] [ 1129.290966][ T38] NMI backtrace for cpu 0 [ 1129.290981][ T38] CPU: 0 UID: 0 PID: 38 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1129.291031][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1129.291055][ T38] Call Trace: [ 1129.291065][ T38] [ 1129.291083][ T38] dump_stack_lvl+0x189/0x250 [ 1129.291148][ T38] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1129.291196][ T38] ? __pfx__printk+0x10/0x10 [ 1129.291230][ T38] nmi_cpu_backtrace+0x39e/0x3d0 [ 1129.291252][ T38] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 1129.291273][ T38] ? __pfx__printk+0x10/0x10 [ 1129.291296][ T38] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1129.291319][ T38] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 1129.291340][ T38] watchdog+0xf93/0xfe0 [ 1129.291366][ T38] ? watchdog+0x1de/0xfe0 [ 1129.291392][ T38] kthread+0x711/0x8a0 [ 1129.291418][ T38] ? __pfx_watchdog+0x10/0x10 [ 1129.291437][ T38] ? __pfx_kthread+0x10/0x10 [ 1129.291464][ T38] ? __pfx_kthread+0x10/0x10 [ 1129.291488][ T38] ret_from_fork+0x3fc/0x770 [ 1129.291512][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 1129.291539][ T38] ? __switch_to_asm+0x39/0x70 [ 1129.291554][ T38] ? __switch_to_asm+0x33/0x70 [ 1129.291569][ T38] ? __pfx_kthread+0x10/0x10 [ 1129.291592][ T38] ret_from_fork_asm+0x1a/0x30 [ 1129.291624][ T38] [ 1129.291631][ T38] Sending NMI from CPU 0 to CPUs 1: [ 1129.291655][ C1] NMI backtrace for cpu 1 [ 1129.291669][ C1] CPU: 1 UID: 0 PID: 10826 Comm: syz.8.895 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1129.291688][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1129.291697][ C1] RIP: 0010:do_raw_spin_lock+0x112/0x290 [ 1129.291718][ C1] Code: 00 00 41 8b 45 00 65 8b 0d 9f 33 59 10 39 c8 0f 84 f3 00 00 00 c7 44 24 40 00 00 00 00 48 89 df be 04 00 00 00 e8 1e e9 80 00 <48> 8d 7c 24 40 be 04 00 00 00 e8 0f e9 80 00 8b 44 24 40 b9 01 00 [ 1129.291733][ C1] RSP: 0018:ffffc9000d00e580 EFLAGS: 00000056 [ 1129.291747][ C1] RAX: 00000000ffffff01 RBX: ffff8880b8923d38 RCX: ffffffff819cacb2 [ 1129.291760][ C1] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff8880b8923d38 [ 1129.291770][ C1] RBP: ffffc9000d00e630 R08: ffff8880b8923d3b R09: 1ffff110171247a7 [ 1129.291783][ C1] R10: dffffc0000000000 R11: ffffed10171247a8 R12: ffff8880b8923d48 [ 1129.291795][ C1] R13: ffff8880b8923d40 R14: 1ffff110171247a9 R15: 1ffff110171247a8 [ 1129.291808][ C1] FS: 00007f03ceb746c0(0000) GS:ffff8881269c2000(0000) knlGS:0000000000000000 [ 1129.291823][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1129.291834][ C1] CR2: fffffffffffffffd CR3: 000000003ffee000 CR4: 00000000003526f0 [ 1129.291850][ C1] Call Trace: [ 1129.291856][ C1] [ 1129.291864][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1129.291887][ C1] _raw_spin_lock_irqsave+0xb3/0xf0 [ 1129.291907][ C1] ? __pfx__raw_spin_lock_irqsave+0x10/0x10 [ 1129.291926][ C1] ? __lock_acquire+0xab9/0xd20 [ 1129.291950][ C1] rt_spin_lock+0x144/0x2c0 [ 1129.291965][ C1] ? __local_bh_disable_ip+0xa1/0x400 [ 1129.291984][ C1] ? __pfx_rt_spin_lock+0x10/0x10 [ 1129.292001][ C1] ? __local_bh_disable_ip+0xa1/0x400 [ 1129.292020][ C1] ? __local_bh_disable_ip+0xa1/0x400 [ 1129.292038][ C1] __local_bh_disable_ip+0x264/0x400 [ 1129.292058][ C1] ? hash_ipport4_add+0x79/0x2110 [ 1129.292077][ C1] ? __pfx___local_bh_disable_ip+0x10/0x10 [ 1129.292101][ C1] ? hash_ipport4_add+0x79/0x2110 [ 1129.292121][ C1] hash_ipport4_add+0x7ca/0x2110 [ 1129.292143][ C1] ? hash_ipport4_add+0x79/0x2110 [ 1129.292170][ C1] hash_ipport4_uadt+0xa16/0xd60 [ 1129.292199][ C1] ? __pfx_hash_ipport4_add+0x10/0x10 [ 1129.292218][ C1] ? __pfx_hash_ipport4_uadt+0x10/0x10 [ 1129.292237][ C1] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 1129.292259][ C1] ? rt_write_unlock+0x64/0xc0 [ 1129.292275][ C1] ? call_ad+0x102/0x9c0 [ 1129.292292][ C1] call_ad+0x2cb/0x9c0 [ 1129.292311][ C1] ? __pfx_call_ad+0x10/0x10 [ 1129.292333][ C1] ? __nla_parse+0x40/0x60 [ 1129.292356][ C1] ip_set_ad+0x797/0x940 [ 1129.292376][ C1] ? __pfx_ip_set_ad+0x10/0x10 [ 1129.292410][ C1] nfnetlink_rcv_msg+0xb69/0x1150 [ 1129.292426][ C1] ? rcu_is_watching+0x15/0xb0 [ 1129.292448][ C1] ? nfnetlink_rcv_msg+0x212/0x1150 [ 1129.292473][ C1] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 1129.292502][ C1] ? rcu_is_watching+0x15/0xb0 [ 1129.292524][ C1] ? trace_irq_disable+0x37/0x110 [ 1129.292550][ C1] netlink_rcv_skb+0x205/0x470 [ 1129.292568][ C1] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 1129.292585][ C1] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1129.292608][ C1] ? bpf_lsm_capable+0x9/0x20 [ 1129.292628][ C1] ? security_capable+0x7e/0x2e0 [ 1129.292653][ C1] nfnetlink_rcv+0x26a/0x2530 [ 1129.292669][ C1] ? __dev_queue_xmit+0x1d3d/0x3b70 [ 1129.292699][ C1] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 1129.292718][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 1129.292738][ C1] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 1129.292758][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1129.292777][ C1] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 1129.292796][ C1] ? rcu_preempt_deferred_qs_irqrestore+0x89c/0xce0 [ 1129.292816][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 1129.292841][ C1] ? __pfx_rcu_preempt_deferred_qs_irqrestore+0x10/0x10 [ 1129.292883][ C1] ? rcu_is_watching+0x15/0xb0 [ 1129.292906][ C1] ? rcu_read_unlock_special+0x35b/0x470 [ 1129.292926][ C1] ? __pfx_rcu_read_unlock_special+0x10/0x10 [ 1129.292944][ C1] ? netlink_deliver_tap+0x2e/0x1b0 [ 1129.292965][ C1] ? netlink_deliver_tap+0x2e/0x1b0 [ 1129.292986][ C1] netlink_unicast+0x843/0xa10 [ 1129.293006][ C1] ? __pfx_netlink_unicast+0x10/0x10 [ 1129.293023][ C1] ? netlink_sendmsg+0x642/0xb30 [ 1129.293040][ C1] ? skb_put+0x11b/0x210 [ 1129.293061][ C1] netlink_sendmsg+0x805/0xb30 [ 1129.293079][ C1] ? __perf_event_task_sched_in+0xec/0x17e0 [ 1129.293101][ C1] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1129.293124][ C1] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1129.293139][ C1] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1129.293157][ C1] __sock_sendmsg+0x219/0x270 [ 1129.293175][ C1] ____sys_sendmsg+0x508/0x820 [ 1129.293203][ C1] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1129.293228][ C1] ? import_iovec+0x74/0xa0 [ 1129.293247][ C1] ___sys_sendmsg+0x21f/0x2a0 [ 1129.293268][ C1] ? __pfx____sys_sendmsg+0x10/0x10 [ 1129.293306][ C1] ? __fget_files+0x2a/0x420 [ 1129.293327][ C1] ? __fget_files+0x3a6/0x420 [ 1129.293353][ C1] __x64_sys_sendmsg+0x1a1/0x260 [ 1129.293375][ C1] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1129.293407][ C1] do_syscall_64+0xfa/0x3b0 [ 1129.293427][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1129.293443][ C1] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 1129.293459][ C1] ? clear_bhb_loop+0x60/0xb0 [ 1129.293476][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1129.293492][ C1] RIP: 0033:0x7f03d094ebe9 [ 1129.293507][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1129.293520][ C1] RSP: 002b:00007f03ceb74038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1129.293537][ C1] RAX: ffffffffffffffda RBX: 00007f03d0b76180 RCX: 00007f03d094ebe9 [ 1129.293549][ C1] RDX: 0000000000000080 RSI: 0000200000000280 RDI: 0000000000000007 [ 1129.293559][ C1] RBP: 00007f03d09d1e19 R08: 0000000000000000 R09: 0000000000000000 [ 1129.293570][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1129.293579][ C1] R13: 00007f03d0b76218 R14: 00007f03d0b76180 R15: 00007ffe2236b778 [ 1129.293599][ C1] [ 1129.293659][ T38] Kernel panic - not syncing: hung_task: blocked tasks [ 1129.293672][ T38] CPU: 0 UID: 0 PID: 38 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1129.293692][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1129.293701][ T38] Call Trace: [ 1129.293708][ T38] [ 1129.293716][ T38] dump_stack_lvl+0x99/0x250 [ 1129.293739][ T38] ? __asan_memcpy+0x40/0x70 [ 1129.293758][ T38] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1129.293779][ T38] ? __pfx__printk+0x10/0x10 [ 1129.293810][ T38] vpanic+0x281/0x750 [ 1129.293836][ T38] ? __pfx_vpanic+0x10/0x10 [ 1129.293855][ T38] ? __x2apic_send_IPI_mask+0x1e4/0x260 [ 1129.293874][ T38] ? lockdep_hardirqs_on+0x9c/0x150 [ 1129.293904][ T38] panic+0xb9/0xc0 [ 1129.293926][ T38] ? __pfx_panic+0x10/0x10 [ 1129.293957][ T38] ? irq_work_queue+0xc3/0x140 [ 1129.293981][ T38] ? nmi_trigger_cpumask_backtrace+0x234/0x300 [ 1129.294001][ T38] watchdog+0xfd2/0xfe0 [ 1129.294027][ T38] ? watchdog+0x1de/0xfe0 [ 1129.294053][ T38] kthread+0x711/0x8a0 [ 1129.294078][ T38] ? __pfx_watchdog+0x10/0x10 [ 1129.294097][ T38] ? __pfx_kthread+0x10/0x10 [ 1129.294125][ T38] ? __pfx_kthread+0x10/0x10 [ 1129.294149][ T38] ret_from_fork+0x3fc/0x770 [ 1129.294172][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 1129.294199][ T38] ? __switch_to_asm+0x39/0x70 [ 1129.294214][ T38] ? __switch_to_asm+0x33/0x70 [ 1129.294228][ T38] ? __pfx_kthread+0x10/0x10 [ 1129.294252][ T38] ret_from_fork_asm+0x1a/0x30 [ 1129.294284][ T38] [ 1129.294559][ T38] Kernel Offset: disabled