last executing test programs: 12.529013214s ago: executing program 4 (id=610): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x24, 0x24, 0x800, 0x70bd25, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0x5}, {0xffff, 0xf}}}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x38011, r0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r2 = openat$userio(0xffffffffffffff9c, 0x0, 0x2002, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r2, &(0x7f0000000040)={0x1, 0x6}, 0x2) write$USERIO_CMD_REGISTER(r2, &(0x7f0000000100), 0x2) write$USERIO_CMD_SEND_INTERRUPT(r2, &(0x7f00000000c0)={0x2, 0xfa}, 0x2) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) r3 = syz_open_procfs$pagemap(0x0, &(0x7f0000000240)) ioctl$PAGEMAP_SCAN(r3, 0xc0606610, &(0x7f00000004c0)={0x60, 0x0, &(0x7f000023d000/0x4000)=nil, &(0x7f0000769000/0x3000)=nil, 0x0, 0x0, 0x0, 0x3c3, 0x0, 0x0, 0x42, 0x2e}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r4 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) mkdirat(r4, &(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='fsi_master_acf_copro_response\x00', r5}, 0xffffffffffffffe4) open(&(0x7f0000000300)='.\x00', 0x0, 0x0) 10.678028773s ago: executing program 4 (id=622): syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x92, 0xdf, 0x55, 0x10, 0x5ac, 0x9226, 0xb289, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0xe9}}]}}]}}, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'vxcan1\x00'}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) socket$nl_audit(0x10, 0x3, 0x9) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, 0x0, 0x0) add_key(0x0, 0x0, &(0x7f0000000000)="100c0681000000", 0x7, 0xfffffffffffffffc) ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, &(0x7f00000000c0)={"3c24139ed44aec57f2e2ad238a7b448ed886923c31d4b8affbf514fd00"}) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$usbfs(0x0, 0x76, 0x101301) open(0x0, 0x40000, 0x122) r2 = getpid() syz_init_net_socket$netrom(0x6, 0x5, 0x0) r3 = syz_pidfd_open(r2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000000)='rxrpc_local\x00', r4}, 0x10) socket$kcm(0x21, 0x2, 0x2) r5 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001a00)=ANY=[], 0x10b8}, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) syz_open_dev$vbi(&(0x7f0000000080), 0x3, 0x2) socket(0x2b, 0x80801, 0x1) 6.117437751s ago: executing program 4 (id=650): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x5, 0x8, 0x8}, 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={r1, 0x34}, 0x10) 5.900881007s ago: executing program 4 (id=655): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r1}, 0x10) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x66, 0x8}, @initr0={0x18, 0x0, 0x0, 0x0, 0x300}, @exit, @alu={0x6, 0x0, 0x3, 0xa, 0x0, 0x2}, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x78) 5.729635499s ago: executing program 4 (id=660): syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x92, 0xdf, 0x55, 0x10, 0x5ac, 0x9226, 0xb289, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0xe9}}]}}]}}, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'vxcan1\x00'}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) socket$nl_audit(0x10, 0x3, 0x9) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4c, 0x9, 0x6, 0x0, 0x3}, 0x0) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, &(0x7f00000000c0)={"3c24139ed44aec57f2e2ad238a7b448ed886923c31d4b8affbf514fd00"}) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$usbfs(0x0, 0x76, 0x101301) open(0x0, 0x40000, 0x122) r2 = getpid() syz_init_net_socket$netrom(0x6, 0x5, 0x0) r3 = syz_pidfd_open(r2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000000)='rxrpc_local\x00', r4}, 0x10) socket$kcm(0x21, 0x2, 0x2) r5 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001a00)=ANY=[], 0x10b8}, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) syz_open_dev$vbi(&(0x7f0000000080), 0x3, 0x2) socket(0x2b, 0x80801, 0x1) 5.105594271s ago: executing program 3 (id=665): r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0xa, 0x9, 0x8, 0x2}, 0x48) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x3, 0x6, &(0x7f0000000180)=@framed={{0x18, 0x2}, [@map_fd={0x18, 0x3, 0x1, 0x0, r0}, @call={0x85, 0x0, 0x0, 0xc0}]}, &(0x7f0000001680)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000001c0)="9e36d449b388dd965f7ade1a86dd", 0x0, 0x10727, 0xe8030000, 0x0, 0x0, 0x0, 0x0}, 0x50) 4.510865858s ago: executing program 3 (id=668): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x12, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @cgroup_sock_addr=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$packet(0x11, 0x2, 0x300) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) r3 = socket(0x11, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(r3, &(0x7f0000000180)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x14) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4) sendmsg$netlink(r3, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000440)=ANY=[@ANYBLOB="020114000129184ad4a08058195c60140000002f0600ac141414e0ecff02808a8972bd0b72e41082b1a3d2061fd7fdfe4b88942a31f48597e36e039b1c599db6e46691e233da4d163f53ab1b3f65c3042e749c2d4c8303a0f7fbda34fb"], 0xdd12}], 0x1, 0x0, 0x0, 0x4008084}, 0x10) 4.264870498s ago: executing program 3 (id=672): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000002100)=@newtaction={0x490, 0x30, 0x12f, 0x0, 0x0, {}, [{0x47c, 0x1, [@m_police={0x478, 0x1, 0x0, 0x0, {{0xb}, {0x44c, 0x2, 0x0, 0x1, [[], [@TCA_POLICE_RATE={0x404, 0x2, [0x7, 0x6, 0xffffffff, 0x7f, 0x401, 0x2, 0x0, 0x2, 0x80000000, 0x4, 0x5, 0x8, 0x0, 0x7fff, 0x75ba, 0x7fffffff, 0x25, 0xffffffff, 0x7ff, 0x2, 0x9, 0x2, 0x0, 0x1000, 0x1, 0x3, 0x6, 0x0, 0xfa, 0x4, 0x0, 0xf, 0x80100001, 0x7, 0xfffffffb, 0x1, 0x20, 0x5, 0x8, 0x1, 0x2f2, 0x7fff, 0x0, 0x81, 0x206, 0x1ff, 0x7, 0x3, 0x5, 0x3, 0x9, 0x1000, 0x401, 0x1, 0x6, 0x7, 0x2, 0x4, 0x7f, 0x5, 0xfffffffb, 0x1, 0x4, 0x5, 0x8, 0x2000009, 0x9, 0x10, 0x9, 0x7, 0xffffff00, 0x97, 0x0, 0x4, 0x8, 0x8, 0x1, 0x958, 0x1fe, 0x3, 0x6, 0x7, 0x80, 0x5, 0xe53, 0x0, 0xfffffffe, 0x4, 0x8, 0x9, 0x7fff, 0x30, 0x8, 0xfffffff7, 0x4, 0x9, 0x1, 0x4, 0x7, 0x9, 0x5, 0x7, 0x6, 0x0, 0x5, 0x2, 0x7, 0x3, 0xcdd, 0x2, 0xd67, 0x7, 0x4, 0x25, 0x9dc5, 0x7, 0xfffffff7, 0x2, 0x400, 0x8, 0x0, 0x200, 0x5, 0x9, 0xa, 0xa, 0x9, 0x5, 0xdb5, 0x101, 0x4, 0x74e4, 0x7fff, 0x7, 0x7ff, 0x1, 0xd70, 0x1, 0x8, 0xa, 0x7, 0x1, 0x82, 0x52e, 0x7, 0x1, 0x5, 0x26, 0x1, 0x1b2a, 0x81, 0x9, 0x1c, 0x767, 0x7, 0x9, 0x10, 0xc2a, 0xff, 0x7, 0x6, 0x7, 0x3, 0xfffffff4, 0x8, 0x3, 0xfff, 0x8, 0x2, 0x5, 0x6, 0x3, 0xd7c3, 0x2, 0x10000, 0x7fff, 0x5, 0x5, 0x0, 0xfffffff7, 0x4, 0x2, 0x0, 0x6ee1847d, 0x10001, 0x0, 0x1, 0xf0, 0x7, 0x2, 0x7, 0x4, 0x6, 0x4, 0x7, 0x2, 0x0, 0x1, 0x4, 0x3, 0xfff, 0x80000001, 0x7, 0x676, 0x3, 0x9, 0x2, 0x4, 0x7fff, 0x4a5, 0x23, 0x4, 0x9, 0x8, 0x0, 0x8000, 0xa, 0x9, 0xca000000, 0x2, 0xfffffffa, 0x3, 0x7, 0x9, 0x7, 0x65fe, 0x9, 0x6, 0x4, 0x80000000, 0x5, 0x801, 0xb848, 0x6, 0x6, 0x800, 0x7, 0x1, 0xb, 0x80, 0x2, 0x3, 0x6, 0x9, 0x4, 0x4, 0xc, 0x80000001, 0x5, 0x5, 0x10000002, 0xb, 0x7, 0x5, 0x2, 0x4]}], [@TCA_POLICE_AVRATE={0x8, 0x4, 0x9}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x3, 0x1, 0x7, 0x4, 0x1, {0x7, 0x0, 0x3, 0x7, 0x7, 0x80000001}, {0x4, 0x2, 0x2, 0xa, 0x1ff, 0x1c0000}, 0x9, 0xbc, 0xdf72c67}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x490}}, 0x0) 4.142924962s ago: executing program 2 (id=674): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0xd68210}], 0x1, 0x0, 0x1f00000000000000, 0x200000}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) 4.142067427s ago: executing program 3 (id=675): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, 0x0) readv(r2, &(0x7f0000000000)=[{&(0x7f0000001300)=""/244, 0x940}], 0x1) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) 2.76514016s ago: executing program 0 (id=677): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b0000000500000000040000cd00000001"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x5, 0x9, 0x8e, 0xe7c9, 0x1}, 0x50) bpf$MAP_DELETE_BATCH(0x18, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0xe30a, r1}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x626f}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00', r2}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8924, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"}) 2.191067067s ago: executing program 0 (id=679): r0 = openat$tun(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETTXFILTER(r0, 0x401054d5, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffffff, 0x1, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xf8}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='rss_stat\x00', r2}, 0x10) syz_clone(0x42000000, 0x0, 0x0, 0x0, 0x0, 0x0) 2.016855152s ago: executing program 2 (id=681): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f00000006c0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000002c0)="68377863ac6ea61666eaa696435a75f1626fe3a3acedcaf71527ff51d446daac757559d2d6fc2b90952355ec6c61d718c91784312b1b4771888a0811895b02ffb658934b0bbd6466c9cc04cc7252f1f1deea5a8b9c6797c8f1263db526cf88899f7ecab544662eb34743cefb660a78cb9468d2900b3cda4cca9d89ab6d341d145acf249276dda272407bc98d9e5431316d468b9e4750f2316589dc4de3157592d27fd723a512c85b08035842b75ec422346f9696f4bb3226b0ca75d135ebd8cae46fb83b71c103e1fdcb1934fd1d28b4916abe2c44e26ea72be426c27052e816212096000155788943b846746ccb492175fc9e01", 0xf4}, {&(0x7f00000003c0)="5453b4b759f9d4f4f33bda880b70a0dadde06223919f4585429ef69078a4956f646ea03bfd4c090a003c01f32b1a175baf38c1eb4572c8b372a4cf9128062e58ff575546876a2804144c3aea98c4a3533396f87e860de8c66bceb0e6b387ec853b7e91c57587d38436637e702ae18eeccefdcd7a3cdd7bfc327b5d619b57d56afe1628b65e294aaf5ee0e3f52746a5aff58bb7c6d253a58bf745584d1bc19fe5e42b5534eab9e9d2587b413e81f68b60f56130f82b327f5fe900e3e107bc6b783d1d23a056426d6502133386b51e657046c1c43a2a2c4a7611ee6592a5ee08700d24d832163b3def", 0xe8}, {&(0x7f0000000a80)="d48c8225ddfdf23dd0fe077a7c2ce378dd62cafeeb4ba1493766d09fd561d69a5bf8109ffcd3e43d8c16b9c3fa92d4439c5af1fa4775d01dcf0748a24ab51b52fbe75200000000000000000000000000000000daf2eea77d37fde052788fed8f7db246f0be4929a5afc2222845e9008620c4535c6c2c96868c32b827ae4357bbccf7f99a1daa6d2e9ceca5ed14f752105d6499a3ea31ed4559fa7e44", 0x9c}, {&(0x7f0000000740)="f52ec22aafecc37a6d9995f1afb5c1727f223f9b84451a110b1dfbf19cc7ed183ba93f6d55645001887fc999262b9c938e22ef5ec46b4b1b535060dcca5cff1f0e5a1d9b32cef2b6e0a61af7968dc1759c4d901867d7d6e9f2521f6a1578e1cc2fbf58837a2633c0b8299192718c", 0x6e}], 0x4}}, {{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000180)="6a422a90b49aff66e6d57061f85cd63d581d6e27741be92c4a9081cd661ab03e82ca5e1169e5bf91b0dd79cde0d1789dffbea8280cf8c7439d10e62b2b84f99180da2c85fec394", 0x47}, {&(0x7f0000001980)="f2fe84e07da72d5be0eee26e6693cc950e7080ba2901a53b969dc13369b90492865a9fb8d25a00b9c2d8e52e23e3267d15c4aeea5918add6f28e302868e1d4500b073ac1a7c72c4e805ff1fce9c5e0273d0ea144b6999eb15d1fed8ddba6250af47fde6e4225f438528b6660d8b67812", 0x70}], 0x2}}], 0x2, 0xc0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 1.888794989s ago: executing program 1 (id=682): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f742f5f627269646765001400010077673200000000000000000000000000140001"], 0xa8}}, 0x0) 1.793689041s ago: executing program 1 (id=683): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r0}, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x8100, 0x0) close(r1) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x110e22fff6) sendmsg$unix(0xffffffffffffffff, &(0x7f0000001e80)={&(0x7f0000000180)=@abs={0x1, 0x5c, 0x1}, 0x6e, 0x0}, 0x20000) ioctl$TUNGETVNETLE(r1, 0x40047451, &(0x7f0000000180)) 1.761905865s ago: executing program 2 (id=684): fcntl$notify(0xffffffffffffffff, 0x402, 0x1) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003700000008000300", @ANYRES32=r1, @ANYBLOB="08002600901500000800570080"], 0x2c}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000003c0)={'wlan0\x00'}) socket$nl_generic(0x10, 0x3, 0x10) 1.67701328s ago: executing program 0 (id=685): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x7}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x7, 0x6a, 0xa, 0xff00}, [@call={0xc}, @exit, @map_fd, @jmp]}, &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r0, &(0x7f0000000780)=[{{&(0x7f0000000480)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x1c, &(0x7f0000000500)=[{&(0x7f00000034c0)="1f", 0x1}], 0x1}}], 0x1, 0x3404c8d4) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000380)=ANY=[], 0x1000f) 1.676784534s ago: executing program 2 (id=686): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000200180000000000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r4, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r5, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r4, 0x3ba0, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r4, 0x3ba0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x843) socket$nl_netfilter(0x10, 0x3, 0xc) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 1.641360934s ago: executing program 4 (id=687): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f00000002c0)="9e", 0x1, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback, 0xe}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000300)={0x0, 0x7, 0x30}, 0xc) sendto$inet6(r0, &(0x7f0000000480)="aa", 0x1, 0x20000000, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000140)={0x0, 0x1, 0x20}, 0xc) writev(r0, &(0x7f00000003c0)=[{0x0}], 0x1) 676.785941ms ago: executing program 2 (id=688): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x1) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000040)=ANY=[@ANYBLOB='-4'], 0xc) 605.254206ms ago: executing program 3 (id=689): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000acd000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000080)={0x0, &(0x7f0000000280)=ANY=[], 0x73}) r4 = openat$kvm(0x0, &(0x7f0000000140), 0x2, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x3) mmap$KVM_VCPU(&(0x7f0000004000/0x2000)=nil, 0x930, 0x2800002, 0x11, r6, 0x0) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x2000003, 0x11, r6, 0x0) ioctl$KVM_SET_NESTED_STATE(0xffffffffffffffff, 0x4080aebf, &(0x7f0000002600)={{0x2, 0x0, 0x80, {0x81b054d3c075bb7c, 0xffff1000, 0x3}}, "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", "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"}) ioctl$KVM_GET_CPUID2(r3, 0xc008ae91, &(0x7f00000001c0)) 585.458279ms ago: executing program 0 (id=690): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x801, 0x0) ioctl$KVM_GET_EMULATED_CPUID(r0, 0xc008ae09, &(0x7f0000000480)) 541.111067ms ago: executing program 1 (id=691): mkdir(&(0x7f0000000100)='./control\x00', 0x184) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000002300)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 526.03899ms ago: executing program 2 (id=692): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f00000003c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) 356.369647ms ago: executing program 0 (id=693): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f742f5f627269646765001400010077673200000000000000000000000000140001"], 0xa8}}, 0x0) 257.51467ms ago: executing program 1 (id=694): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x801, 0x0) ioctl$KVM_GET_EMULATED_CPUID(r0, 0xc008ae09, &(0x7f0000000480)) 176.752148ms ago: executing program 1 (id=695): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x801, 0x0) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000000000000000008003"]) ioctl$KVM_GET_EMULATED_CPUID(r0, 0xc008ae09, &(0x7f0000000000)) 175.722915ms ago: executing program 0 (id=696): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000000)=@x86={0x5, 0x5, 0x17, 0x0, 0x3, 0xf9, 0x2, 0x79, 0xff, 0x5, 0x8, 0xfe, 0x0, 0x8, 0x2, 0x8, 0x72, 0x5, 0xfa, '\x00', 0x3}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r4 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r3, 0xae04) mmap$KVM_VCPU(&(0x7f0000000000/0x4000)=nil, r4, 0x2000003, 0x11, r2, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000600)={0x0, 0x0, @pic={0x2a, 0xc4, 0x7, 0x6, 0xfb, 0x0, 0xf, 0x4, 0x3, 0x0, 0x2, 0x58, 0x90, 0x5, 0x9, 0x7f}}) 360.221µs ago: executing program 1 (id=697): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500001000000085000000a5000000180100002020640500000000002020207b1af8ff00"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r1}, 0x18) socketpair$unix(0x1, 0x5, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = dup(0xffffffffffffffff) getsockname$packet(r3, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000001540)=0x14) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newtaction={0x98, 0x30, 0x301, 0x70bd2c, 0x0, {0x0, 0x0, 0x1300}, [{0x84, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x4, 0x0, 0x0, 0xffffffe4}, 0x1, r4}}]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0x30, 0x2, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x98}}, 0x0) 0s ago: executing program 3 (id=698): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x100006, 0x220104, 0xe2a4, 0x1}, 0x48) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000000680)='+}[@\x00[$oB\xfa=\xee\xc4F\xba\xed\x97') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={0x0}, 0x18) r2 = socket$inet6(0xa, 0x3, 0x1) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x560, 0x0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x490, 0xffffffff, 0xffffffff, 0x490, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'vxcan1\x00', {0x8}}}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xfd}}, [], [0x0, 0xffffffff], 'pim6reg\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x3a0, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_virt_wifi\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x5}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'bridge_slave_0\x00', {0x53}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x5c0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r5, {0xfff1, 0xe}, {0x0, 0xfff6}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240), &(0x7f0000001940), 0x2000cc0, r1}, 0x38) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x1b, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240), 0x0, 0x2, r1}, 0x38) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00', r6}, 0x10) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000001c00)={0x11, 0x4, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4}, [@generic={0x40, 0x7, 0x0, 0x5}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r7}, 0x10) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) bind$inet6(r7, &(0x7f0000000000)={0xa, 0x4e22, 0x6a8, @mcast2, 0x1}, 0x1c) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000280)={'macvlan1\x00', &(0x7f0000000240)=@ethtool_sset_info={0x2c, 0x0, 0x101}}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.228' (ED25519) to the list of known hosts. [ 73.097905][ T5829] cgroup: Unknown subsys name 'net' [ 73.247957][ T5829] cgroup: Unknown subsys name 'cpuset' [ 73.256732][ T5829] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 74.693231][ T5829] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 77.287881][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 77.295990][ T51] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 77.303543][ T51] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 77.311072][ T51] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 77.318587][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 77.327089][ T51] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 77.334724][ T51] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 77.342054][ T51] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 77.349512][ T5855] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 77.350580][ T51] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 77.358533][ T5855] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 77.364455][ T51] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 77.371220][ T5855] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 77.386148][ T51] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 77.393972][ T5855] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 77.401051][ T5854] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 77.408216][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 77.415870][ T5855] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 77.424223][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 77.434629][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 77.446991][ T5157] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 77.452018][ T5856] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 77.491518][ T5157] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 77.500011][ T5844] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 77.508407][ T5157] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 78.112274][ T5842] chnl_net:caif_netlink_parms(): no params data found [ 78.216402][ T5843] chnl_net:caif_netlink_parms(): no params data found [ 78.297423][ T5839] chnl_net:caif_netlink_parms(): no params data found [ 78.319631][ T5845] chnl_net:caif_netlink_parms(): no params data found [ 78.382752][ T5851] chnl_net:caif_netlink_parms(): no params data found [ 78.406579][ T5843] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.414118][ T5843] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.421461][ T5843] bridge_slave_0: entered allmulticast mode [ 78.429244][ T5843] bridge_slave_0: entered promiscuous mode [ 78.479713][ T5843] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.486941][ T5843] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.494589][ T5843] bridge_slave_1: entered allmulticast mode [ 78.501557][ T5843] bridge_slave_1: entered promiscuous mode [ 78.525386][ T5842] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.532515][ T5842] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.539891][ T5842] bridge_slave_0: entered allmulticast mode [ 78.547099][ T5842] bridge_slave_0: entered promiscuous mode [ 78.555620][ T5842] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.562782][ T5842] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.570413][ T5842] bridge_slave_1: entered allmulticast mode [ 78.578727][ T5842] bridge_slave_1: entered promiscuous mode [ 78.654793][ T5843] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.699677][ T5843] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.739619][ T5842] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.752073][ T5842] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.778758][ T5839] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.786967][ T5839] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.794633][ T5839] bridge_slave_0: entered allmulticast mode [ 78.801610][ T5839] bridge_slave_0: entered promiscuous mode [ 78.855253][ T5839] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.862447][ T5839] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.869985][ T5839] bridge_slave_1: entered allmulticast mode [ 78.878131][ T5839] bridge_slave_1: entered promiscuous mode [ 78.884955][ T5845] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.892066][ T5845] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.900481][ T5845] bridge_slave_0: entered allmulticast mode [ 78.907777][ T5845] bridge_slave_0: entered promiscuous mode [ 78.916780][ T5845] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.923947][ T5845] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.931114][ T5845] bridge_slave_1: entered allmulticast mode [ 78.939281][ T5845] bridge_slave_1: entered promiscuous mode [ 78.975364][ T5843] team0: Port device team_slave_0 added [ 79.010754][ T5842] team0: Port device team_slave_0 added [ 79.017136][ T5851] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.026721][ T5851] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.034098][ T5851] bridge_slave_0: entered allmulticast mode [ 79.041656][ T5851] bridge_slave_0: entered promiscuous mode [ 79.050513][ T5851] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.057692][ T5851] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.064954][ T5851] bridge_slave_1: entered allmulticast mode [ 79.072201][ T5851] bridge_slave_1: entered promiscuous mode [ 79.080807][ T5843] team0: Port device team_slave_1 added [ 79.116957][ T5842] team0: Port device team_slave_1 added [ 79.125895][ T5845] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.173009][ T5839] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.196602][ T5845] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.234691][ T5851] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.245800][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.252769][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.279881][ T5843] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.293769][ T5839] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.326771][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.333748][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.359848][ T5842] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.386140][ T5851] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.409110][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.416401][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.442408][ T5843] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.455652][ T5844] Bluetooth: hci1: command tx timeout [ 79.469134][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.476312][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.502634][ T5842] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.522843][ T5845] team0: Port device team_slave_0 added [ 79.534430][ T5849] Bluetooth: hci3: command tx timeout [ 79.540051][ T5849] Bluetooth: hci4: command tx timeout [ 79.545631][ T5853] Bluetooth: hci2: command tx timeout [ 79.546775][ T5844] Bluetooth: hci0: command tx timeout [ 79.568653][ T5839] team0: Port device team_slave_0 added [ 79.577610][ T5839] team0: Port device team_slave_1 added [ 79.599835][ T5845] team0: Port device team_slave_1 added [ 79.622325][ T5851] team0: Port device team_slave_0 added [ 79.630636][ T5851] team0: Port device team_slave_1 added [ 79.719191][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.726595][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.752612][ T5839] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.769778][ T5842] hsr_slave_0: entered promiscuous mode [ 79.776652][ T5842] hsr_slave_1: entered promiscuous mode [ 79.783766][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.791426][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.818212][ T5845] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.843214][ T5851] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.850315][ T5851] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.876538][ T5851] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.888165][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.895946][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.922155][ T5839] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.941093][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.948220][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.974242][ T5845] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.996278][ T5843] hsr_slave_0: entered promiscuous mode [ 80.002478][ T5843] hsr_slave_1: entered promiscuous mode [ 80.009300][ T5843] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 80.017110][ T5843] Cannot create hsr debugfs directory [ 80.023300][ T5851] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.030695][ T5851] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.056721][ T5851] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.183234][ T5851] hsr_slave_0: entered promiscuous mode [ 80.190154][ T5851] hsr_slave_1: entered promiscuous mode [ 80.196939][ T5851] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 80.204961][ T5851] Cannot create hsr debugfs directory [ 80.233483][ T5845] hsr_slave_0: entered promiscuous mode [ 80.239958][ T5845] hsr_slave_1: entered promiscuous mode [ 80.246760][ T5845] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 80.254696][ T5845] Cannot create hsr debugfs directory [ 80.265075][ T5839] hsr_slave_0: entered promiscuous mode [ 80.271294][ T5839] hsr_slave_1: entered promiscuous mode [ 80.277540][ T5839] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 80.285153][ T5839] Cannot create hsr debugfs directory [ 80.830539][ T5851] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 80.849299][ T5851] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 80.868537][ T5851] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 80.887250][ T5851] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 80.932628][ T5839] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 80.951529][ T5839] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 80.976407][ T5839] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 80.993102][ T5839] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 81.042294][ T5842] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 81.059412][ T5842] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 81.071147][ T5842] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 81.099280][ T5842] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 81.185188][ T5843] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 81.198048][ T5843] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 81.218977][ T5843] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 81.230514][ T5843] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 81.289218][ T5851] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.339790][ T5851] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.378616][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.385886][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.407015][ T5845] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 81.438622][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.446013][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.455116][ T5845] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 81.467695][ T5845] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 81.490306][ T5845] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 81.506924][ T5839] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.535856][ T5844] Bluetooth: hci1: command tx timeout [ 81.592983][ T5839] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.613238][ T5842] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.614582][ T5844] Bluetooth: hci0: command tx timeout [ 81.624055][ T5849] Bluetooth: hci3: command tx timeout [ 81.625650][ T5844] Bluetooth: hci4: command tx timeout [ 81.630612][ T5849] Bluetooth: hci2: command tx timeout [ 81.651907][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.659064][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.702615][ T5843] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.719051][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.726258][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.837154][ T5842] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.850878][ T5843] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.878755][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.885952][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.902667][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.909805][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.933195][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.940319][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.950164][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.957322][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.008186][ T5845] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.067355][ T5842] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 82.078307][ T5842] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 82.128759][ T5851] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.158508][ T5845] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.199524][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.206845][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.268371][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.275598][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.413449][ T5851] veth0_vlan: entered promiscuous mode [ 82.479127][ T5851] veth1_vlan: entered promiscuous mode [ 82.511609][ T5839] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.612192][ T5851] veth0_macvtap: entered promiscuous mode [ 82.661339][ T5851] veth1_macvtap: entered promiscuous mode [ 82.743390][ T5839] veth0_vlan: entered promiscuous mode [ 82.772176][ T5843] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.781705][ T5839] veth1_vlan: entered promiscuous mode [ 82.797444][ T5842] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.810231][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.842477][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.855730][ T5851] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.866487][ T5851] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.877849][ T5851] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.886842][ T5851] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.972532][ T5839] veth0_macvtap: entered promiscuous mode [ 83.029579][ T5845] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.041570][ T5839] veth1_macvtap: entered promiscuous mode [ 83.052456][ T5842] veth0_vlan: entered promiscuous mode [ 83.098661][ T5843] veth0_vlan: entered promiscuous mode [ 83.131969][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.154621][ T5842] veth1_vlan: entered promiscuous mode [ 83.177202][ T2991] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.196778][ T2991] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.213561][ T5843] veth1_vlan: entered promiscuous mode [ 83.237986][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.293637][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.306562][ T5839] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.315355][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.329158][ T5839] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.339433][ T5839] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.348428][ T5839] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.439822][ T5842] veth0_macvtap: entered promiscuous mode [ 83.453189][ T5843] veth0_macvtap: entered promiscuous mode [ 83.493048][ T5843] veth1_macvtap: entered promiscuous mode [ 83.510685][ T5851] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 83.541261][ T5842] veth1_macvtap: entered promiscuous mode [ 83.590036][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.617882][ T5849] Bluetooth: hci1: command tx timeout [ 83.651214][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.695002][ T5849] Bluetooth: hci2: command tx timeout [ 83.700460][ T5849] Bluetooth: hci4: command tx timeout [ 83.708068][ T5853] Bluetooth: hci3: command tx timeout [ 83.710044][ T5844] Bluetooth: hci0: command tx timeout [ 83.719473][ T5843] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.730680][ T5843] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.739473][ T5843] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.757228][ T5843] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.776135][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.799353][ T3006] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.819262][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.826896][ T3006] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.871899][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.884377][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.916080][ T5845] veth0_vlan: entered promiscuous mode [ 83.944926][ T5842] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.953768][ T5842] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.963694][ T5842] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.972849][ T5970] xt_hashlimit: size too large, truncated to 1048576 [ 83.977530][ T5842] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.998454][ T5845] veth1_vlan: entered promiscuous mode [ 84.035539][ T5971] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7'. [ 84.249571][ T2991] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.288500][ T2991] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.316378][ T5845] veth0_macvtap: entered promiscuous mode [ 84.370821][ T3006] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.371123][ T5845] veth1_macvtap: entered promiscuous mode [ 84.389699][ T3006] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.520427][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.587258][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.600351][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.617239][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.675258][ T5845] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.713877][ T5845] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.733414][ T5845] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.747383][ T5845] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.779302][ T5984] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4'. [ 84.823621][ T5984] unsupported nlmsg_type 40 [ 84.870220][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.897163][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.319981][ T3525] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.351080][ T3525] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.694509][ T5844] Bluetooth: hci1: command tx timeout [ 85.774205][ T5844] Bluetooth: hci4: command tx timeout [ 85.780122][ T5157] Bluetooth: hci3: command tx timeout [ 85.785757][ T5157] Bluetooth: hci0: command tx timeout [ 85.791638][ T5844] Bluetooth: hci2: command tx timeout [ 85.918602][ T3006] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.928816][ T3006] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.022714][ T30] audit: type=1326 audit(1752774344.741:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6023 comm="syz.2.24" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fabfaf8e929 code=0x7ffc0000 [ 86.932391][ T30] audit: type=1326 audit(1752774344.781:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6023 comm="syz.2.24" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fabfaf8e929 code=0x7ffc0000 [ 87.073964][ T30] audit: type=1326 audit(1752774344.901:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6023 comm="syz.2.24" exe="/root/syz-executor" sig=0 arch=c000003e syscall=283 compat=0 ip=0x7fabfaf8e929 code=0x7ffc0000 [ 87.198686][ T30] audit: type=1326 audit(1752774344.901:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6023 comm="syz.2.24" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fabfaf8e929 code=0x7ffc0000 [ 87.365358][ T30] audit: type=1326 audit(1752774344.901:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6023 comm="syz.2.24" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fabfaf8e929 code=0x7ffc0000 [ 87.531308][ T30] audit: type=1326 audit(1752774344.941:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6023 comm="syz.2.24" exe="/root/syz-executor" sig=0 arch=c000003e syscall=286 compat=0 ip=0x7fabfaf8e929 code=0x7ffc0000 [ 87.617118][ T6038] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.28'. [ 87.663386][ T6037] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 87.706111][ T6038] netlink: 5 bytes leftover after parsing attributes in process `syz.1.28'. [ 87.734591][ T30] audit: type=1326 audit(1752774344.941:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6023 comm="syz.2.24" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fabfaf8e929 code=0x7ffc0000 [ 87.856818][ T30] audit: type=1326 audit(1752774344.941:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6023 comm="syz.2.24" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fabfaf8e929 code=0x7ffc0000 [ 87.926633][ T30] audit: type=1326 audit(1752774344.991:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6023 comm="syz.2.24" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7fabfaf8e929 code=0x7ffc0000 [ 88.020700][ T30] audit: type=1326 audit(1752774345.641:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6023 comm="syz.2.24" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fabfaf8e929 code=0x7ffc0000 [ 88.590347][ T6057] xt_hashlimit: size too large, truncated to 1048576 [ 88.880506][ T6060] netlink: 4 bytes leftover after parsing attributes in process `syz.1.34'. [ 89.194215][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 89.202721][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 89.685893][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 89.695128][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 89.772547][ T6079] Zero length message leads to an empty skb [ 89.927981][ T6082] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.41'. [ 89.939220][ T6082] netlink: 5 bytes leftover after parsing attributes in process `syz.3.41'. [ 90.179372][ T6083] syzkaller0: entered promiscuous mode [ 90.203947][ T6083] syzkaller0: entered allmulticast mode [ 90.346202][ T6099] netlink: 16 bytes leftover after parsing attributes in process `syz.3.48'. [ 91.231763][ T6121] xt_CT: You must specify a L4 protocol and not use inversions on it [ 91.630200][ T1206] cfg80211: failed to load regulatory.db [ 93.170333][ T6154] syz.3.71 uses obsolete (PF_INET,SOCK_PACKET) [ 93.381972][ T6156] netlink: 'syz.4.72': attribute type 1 has an invalid length. [ 93.716982][ T6163] bond1: entered allmulticast mode [ 94.825302][ T6198] netlink: 24 bytes leftover after parsing attributes in process `syz.4.92'. [ 94.850970][ T6198] netlink: 24 bytes leftover after parsing attributes in process `syz.4.92'. [ 94.907137][ T6202] random: crng reseeded on system resumption [ 95.076992][ T6207] netlink: 132 bytes leftover after parsing attributes in process `syz.0.97'. [ 95.489680][ T30] kauditd_printk_skb: 54 callbacks suppressed [ 95.489696][ T30] audit: type=1326 audit(1752774867.223:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6222 comm="syz.2.102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fabfaf8e929 code=0x7ffc0000 [ 95.524134][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 95.573749][ T30] audit: type=1326 audit(1752774867.223:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6222 comm="syz.2.102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fabfaf8e929 code=0x7ffc0000 [ 95.682695][ T30] audit: type=1326 audit(1752774867.223:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6222 comm="syz.2.102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fabfaf8e929 code=0x7ffc0000 [ 95.709840][ T0] NOHZ tick-stop error: local softirq work is pending, handler #248!!! [ 95.721285][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 95.746438][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 95.818686][ T30] audit: type=1326 audit(1752774867.223:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6222 comm="syz.2.102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fabfaf8e929 code=0x7ffc0000 [ 95.889793][ T30] audit: type=1326 audit(1752774867.223:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6222 comm="syz.2.102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fabfaf8e929 code=0x7ffc0000 [ 95.923077][ T30] audit: type=1326 audit(1752774867.223:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6222 comm="syz.2.102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fabfaf8e929 code=0x7ffc0000 [ 95.951559][ T30] audit: type=1326 audit(1752774867.223:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6222 comm="syz.2.102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fabfaf8e929 code=0x7ffc0000 [ 95.989499][ T30] audit: type=1326 audit(1752774867.233:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6222 comm="syz.2.102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=247 compat=0 ip=0x7fabfaf8e929 code=0x7ffc0000 [ 96.036687][ T6241] netlink: 24 bytes leftover after parsing attributes in process `syz.4.110'. [ 96.081112][ T6241] netlink: 24 bytes leftover after parsing attributes in process `syz.4.110'. [ 96.183921][ T30] audit: type=1326 audit(1752774867.233:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6222 comm="syz.2.102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fabfaf8e929 code=0x7ffc0000 [ 96.207719][ T30] audit: type=1326 audit(1752774867.233:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6222 comm="syz.2.102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fabfaf8e929 code=0x7ffc0000 [ 96.600589][ T6257] warning: `syz.0.117' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 96.952096][ T6267] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 97.000946][ T6270] netlink: 'syz.0.123': attribute type 7 has an invalid length. [ 97.020819][ T6267] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 97.613646][ T6290] netlink: 'syz.2.130': attribute type 7 has an invalid length. [ 97.690274][ T6296] netlink: 56 bytes leftover after parsing attributes in process `syz.4.133'. [ 97.700863][ T6296] netlink: 56 bytes leftover after parsing attributes in process `syz.4.133'. [ 97.717233][ T6295] netlink: 132 bytes leftover after parsing attributes in process `syz.3.132'. [ 97.764788][ T6296] netlink: 56 bytes leftover after parsing attributes in process `syz.4.133'. [ 97.982541][ T6309] netlink: 'syz.4.139': attribute type 1 has an invalid length. [ 98.029100][ T6309] netlink: 52 bytes leftover after parsing attributes in process `syz.4.139'. [ 98.692334][ T6334] netlink: 60 bytes leftover after parsing attributes in process `syz.2.149'. [ 98.723429][ T6334] netlink: 60 bytes leftover after parsing attributes in process `syz.2.149'. [ 98.864263][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 99.070011][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 99.675864][ T6342] netlink: 'syz.1.152': attribute type 1 has an invalid length. [ 99.961565][ T6342] 8021q: adding VLAN 0 to HW filter on device bond1 [ 99.987123][ T6357] bridge0: entered promiscuous mode [ 99.995668][ T6357] macsec1: entered promiscuous mode [ 100.002830][ T6357] bridge0: port 3(macsec1) entered blocking state [ 100.015879][ T6357] bridge0: port 3(macsec1) entered disabled state [ 100.026737][ T6357] macsec1: entered allmulticast mode [ 100.032541][ T6357] bridge0: entered allmulticast mode [ 100.588283][ T6357] macsec1: left allmulticast mode [ 100.593351][ T6357] bridge0: left allmulticast mode [ 100.631533][ T6357] bridge0: left promiscuous mode [ 101.027128][ T5849] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:201' [ 101.036948][ T5849] CPU: 1 UID: 0 PID: 5849 Comm: kworker/u9:4 Not tainted 6.16.0-rc6-syzkaller-00037-ge2291551827f #0 PREEMPT(full) [ 101.036982][ T5849] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 101.036994][ T5849] Workqueue: hci4 hci_rx_work [ 101.037026][ T5849] Call Trace: [ 101.037037][ T5849] [ 101.037046][ T5849] dump_stack_lvl+0x189/0x250 [ 101.037070][ T5849] ? kernfs_path_from_node+0x2c/0x260 [ 101.037095][ T5849] ? __pfx_dump_stack_lvl+0x10/0x10 [ 101.037116][ T5849] ? __pfx__printk+0x10/0x10 [ 101.037142][ T5849] ? kernfs_path_from_node+0x2c/0x260 [ 101.037164][ T5849] ? kernfs_path_from_node+0x2c/0x260 [ 101.037188][ T5849] ? kernfs_path_from_node+0x22c/0x260 [ 101.037208][ T5849] ? kernfs_path_from_node+0x2c/0x260 [ 101.037233][ T5849] sysfs_create_dir_ns+0x259/0x280 [ 101.037259][ T5849] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 101.037283][ T5849] ? do_raw_spin_unlock+0x122/0x240 [ 101.037313][ T5849] kobject_add_internal+0x59f/0xb40 [ 101.037344][ T5849] kobject_add+0x155/0x220 [ 101.037371][ T5849] ? __pfx_kobject_add+0x10/0x10 [ 101.037394][ T5849] ? _raw_spin_unlock+0x28/0x50 [ 101.037426][ T5849] ? get_device_parent+0x366/0x3a0 [ 101.037457][ T5849] device_add+0x408/0xb50 [ 101.037488][ T5849] hci_conn_add_sysfs+0xd5/0x1e0 [ 101.037521][ T5849] le_conn_complete_evt+0xc3a/0x1220 [ 101.037558][ T5849] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 101.037582][ T5849] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 101.037599][ T5849] ? __asan_memcpy+0x40/0x70 [ 101.037627][ T5849] ? __pfx___mutex_lock+0x10/0x10 [ 101.037648][ T5849] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 101.037665][ T5849] ? skb_pull_data+0xfb/0x200 [ 101.037687][ T5849] hci_le_conn_complete_evt+0x187/0x450 [ 101.037717][ T5849] hci_event_packet+0x78c/0x1200 [ 101.037758][ T5849] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 101.037803][ T5849] ? __pfx_hci_event_packet+0x10/0x10 [ 101.037825][ T5849] ? kcov_remote_start+0x4d3/0x7f0 [ 101.037854][ T5849] ? lockdep_hardirqs_on+0x90/0x150 [ 101.037877][ T5849] ? hci_send_to_monitor+0xe2/0x570 [ 101.037908][ T5849] hci_rx_work+0x46a/0xe80 [ 101.037938][ T5849] ? process_scheduled_works+0x9ef/0x17b0 [ 101.037970][ T5849] process_scheduled_works+0xade/0x17b0 [ 101.038026][ T5849] ? __pfx_process_scheduled_works+0x10/0x10 [ 101.038068][ T5849] worker_thread+0x8a0/0xda0 [ 101.038119][ T5849] kthread+0x711/0x8a0 [ 101.038149][ T5849] ? __pfx_worker_thread+0x10/0x10 [ 101.038170][ T5849] ? __pfx_kthread+0x10/0x10 [ 101.038199][ T5849] ? _raw_spin_unlock_irq+0x23/0x50 [ 101.038227][ T5849] ? lockdep_hardirqs_on+0x9c/0x150 [ 101.038244][ T5849] ? __pfx_kthread+0x10/0x10 [ 101.038271][ T5849] ret_from_fork+0x3fc/0x770 [ 101.038294][ T5849] ? __pfx_ret_from_fork+0x10/0x10 [ 101.038321][ T5849] ? __switch_to_asm+0x39/0x70 [ 101.038344][ T5849] ? __switch_to_asm+0x33/0x70 [ 101.038367][ T5849] ? __pfx_kthread+0x10/0x10 [ 101.038394][ T5849] ret_from_fork_asm+0x1a/0x30 [ 101.038436][ T5849] [ 101.038466][ T5849] kobject: kobject_add_internal failed for hci4:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 101.346904][ T5849] Bluetooth: hci4: failed to register connection device [ 101.821049][ T6392] netlink: 'syz.1.172': attribute type 1 has an invalid length. [ 101.890155][ T6396] __nla_validate_parse: 4 callbacks suppressed [ 101.890170][ T6396] netlink: 52 bytes leftover after parsing attributes in process `syz.1.172'. [ 101.931725][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 101.931740][ T30] audit: type=1326 audit(1752774873.663:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6398 comm="syz.0.175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6f498e929 code=0x7ffc0000 [ 101.962575][ T30] audit: type=1326 audit(1752774873.693:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6398 comm="syz.0.175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=283 compat=0 ip=0x7fd6f498e929 code=0x7ffc0000 [ 101.970720][ T6392] 8021q: adding VLAN 0 to HW filter on device bond2 [ 101.990084][ T30] audit: type=1326 audit(1752774873.693:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6398 comm="syz.0.175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6f498e929 code=0x7ffc0000 [ 102.014440][ T30] audit: type=1326 audit(1752774873.693:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6398 comm="syz.0.175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6f498e929 code=0x7ffc0000 [ 102.076515][ T30] audit: type=1326 audit(1752774873.693:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6398 comm="syz.0.175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=286 compat=0 ip=0x7fd6f498e929 code=0x7ffc0000 [ 102.112904][ T30] audit: type=1326 audit(1752774873.693:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6398 comm="syz.0.175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6f498e929 code=0x7ffc0000 [ 102.184472][ T30] audit: type=1326 audit(1752774873.693:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6398 comm="syz.0.175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6f498e929 code=0x7ffc0000 [ 102.218417][ T30] audit: type=1326 audit(1752774873.693:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6398 comm="syz.0.175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7fd6f498e929 code=0x7ffc0000 [ 102.240863][ T30] audit: type=1326 audit(1752774873.693:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6398 comm="syz.0.175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6f498e929 code=0x7ffc0000 [ 102.309221][ T30] audit: type=1326 audit(1752774873.693:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6398 comm="syz.0.175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6f498e929 code=0x7ffc0000 [ 102.637006][ T6413] netlink: 16162 bytes leftover after parsing attributes in process `syz.1.176'. [ 102.781238][ T6408] random: crng reseeded on system resumption [ 103.957364][ T6423] capability: warning: `syz.4.183' uses 32-bit capabilities (legacy support in use) [ 104.246416][ T6432] netlink: 'syz.0.186': attribute type 1 has an invalid length. [ 104.313778][ T6432] 8021q: adding VLAN 0 to HW filter on device bond1 [ 104.331305][ T6432] netlink: 52 bytes leftover after parsing attributes in process `syz.0.186'. [ 104.644203][ T5909] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 104.823881][ T5909] usb 5-1: Using ep0 maxpacket: 8 [ 104.837630][ T5909] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x2 has invalid wMaxPacketSize 0 [ 104.862416][ T5909] usb 5-1: config 0 interface 0 has no altsetting 0 [ 104.875945][ T5909] usb 5-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 104.887405][ T5909] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.934114][ T5909] usb 5-1: Product: syz [ 104.944219][ T5909] usb 5-1: Manufacturer: syz [ 104.949341][ T5909] usb 5-1: SerialNumber: syz [ 104.973209][ T5909] usb 5-1: config 0 descriptor?? [ 104.987493][ T5909] snd_usb_toneport 5-1:0.0: Line 6 TonePort UX2 found [ 105.207388][ T5909] snd_usb_toneport 5-1:0.0: cannot get proper max packet size [ 105.231271][ T5909] snd_usb_toneport 5-1:0.0: Line 6 TonePort UX2 now disconnected [ 105.588033][ T6461] vlan1: entered promiscuous mode [ 105.594613][ T6461] vlan1: entered allmulticast mode [ 105.599794][ T6461] veth0_vlan: entered allmulticast mode [ 105.910720][ T5909] snd_usb_toneport 5-1:0.0: probe with driver snd_usb_toneport failed with error -22 [ 105.927776][ T5909] usb 5-1: USB disconnect, device number 2 [ 106.067842][ T6461] syz.0.196 (6461) used greatest stack depth: 16496 bytes left [ 106.631817][ T6491] capability: warning: `syz.2.209' uses deprecated v2 capabilities in a way that may be insecure [ 107.233594][ T30] kauditd_printk_skb: 52 callbacks suppressed [ 107.233607][ T30] audit: type=1326 audit(1752774878.953:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6494 comm="syz.0.211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6f498e929 code=0x7ffc0000 [ 107.576975][ T30] audit: type=1326 audit(1752774878.963:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6494 comm="syz.0.211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6f498e929 code=0x7ffc0000 [ 108.192936][ T30] audit: type=1326 audit(1752774878.963:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6494 comm="syz.0.211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=283 compat=0 ip=0x7fd6f498e929 code=0x7ffc0000 [ 108.214707][ T30] audit: type=1326 audit(1752774878.963:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6494 comm="syz.0.211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6f498e929 code=0x7ffc0000 [ 108.343894][ T30] audit: type=1326 audit(1752774878.963:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6494 comm="syz.0.211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6f498e929 code=0x7ffc0000 [ 108.395057][ T30] audit: type=1326 audit(1752774878.963:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6494 comm="syz.0.211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=286 compat=0 ip=0x7fd6f498e929 code=0x7ffc0000 [ 108.436694][ T30] audit: type=1326 audit(1752774878.963:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6494 comm="syz.0.211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6f498e929 code=0x7ffc0000 [ 108.645602][ T30] audit: type=1326 audit(1752774878.963:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6494 comm="syz.0.211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6f498e929 code=0x7ffc0000 [ 108.715415][ T30] audit: type=1326 audit(1752774878.963:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6494 comm="syz.0.211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7fd6f498e929 code=0x7ffc0000 [ 108.772628][ T30] audit: type=1326 audit(1752774878.963:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6494 comm="syz.0.211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6f498e929 code=0x7ffc0000 [ 109.944400][ T5961] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 110.809753][ T6535] syz.1.225 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 110.810975][ T5961] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 110.946535][ T5961] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 111.034545][ T5961] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 111.098769][ T5961] usb 3-1: New USB device found, idVendor=0755, idProduct=2626, bcdDevice= 0.00 [ 111.110854][ T5961] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.290666][ T5961] usb 3-1: config 0 descriptor?? [ 111.314705][ T6514] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 111.624138][ T1215] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 111.833486][ T6554] netlink: 16162 bytes leftover after parsing attributes in process `syz.4.229'. [ 111.845376][ T1215] usb 1-1: Using ep0 maxpacket: 16 [ 111.877576][ T1215] usb 1-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice=29.82 [ 111.893540][ T1215] usb 1-1: New USB device strings: Mfr=83, Product=5, SerialNumber=10 [ 111.904665][ T1215] usb 1-1: Product: syz [ 111.973964][ T1215] usb 1-1: Manufacturer: syz [ 112.002814][ T1215] usb 1-1: SerialNumber: syz [ 112.140876][ T1215] usb 1-1: config 0 descriptor?? [ 112.275864][ T5961] aureal 0003:0755:2626.0001: unknown main item tag 0x6 [ 112.280684][ T1215] usb 1-1: selecting invalid altsetting 1 [ 112.292358][ T5961] aureal 0003:0755:2626.0001: report_id 29495 is invalid [ 112.362177][ T1215] snd-usb-audio 1-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 112.435449][ T1215] usb 1-1: USB disconnect, device number 2 [ 112.457156][ T5961] aureal 0003:0755:2626.0001: item 0 2 1 8 parsing failed [ 112.465083][ T5961] aureal 0003:0755:2626.0001: probe with driver aureal failed with error -22 [ 112.493736][ T5893] udevd[5893]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 112.536122][ T6545] delete_channel: no stack [ 112.544107][ T5961] usb 3-1: USB disconnect, device number 2 [ 115.482863][ T6581] loop6: detected capacity change from 0 to 63 [ 115.502598][ T6584] 9pnet_fd: Insufficient options for proto=fd [ 115.559272][ T5893] Buffer I/O error on dev loop6, logical block 0, async page read [ 115.633663][ T6589] Buffer I/O error on dev loop6, logical block 0, async page read [ 115.704853][ T6589] Buffer I/O error on dev loop6, logical block 0, async page read [ 115.830917][ T5893] Buffer I/O error on dev loop6, logical block 0, async page read [ 115.843178][ T6589] Buffer I/O error on dev loop6, logical block 0, async page read [ 115.905844][ T6596] netlink: 16162 bytes leftover after parsing attributes in process `syz.1.242'. [ 115.929762][ T5893] Buffer I/O error on dev loop6, logical block 0, async page read [ 116.044090][ T5961] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 116.405787][ T6589] Buffer I/O error on dev loop6, logical block 0, async page read [ 116.427017][ T5893] Buffer I/O error on dev loop6, logical block 0, async page read [ 116.488479][ T5893] Buffer I/O error on dev loop6, logical block 0, async page read [ 117.801278][ T6622] 9pnet_fd: Insufficient options for proto=fd [ 118.202550][ T6634] netlink: 16162 bytes leftover after parsing attributes in process `syz.0.254'. [ 119.146114][ T6630] delete_channel: no stack [ 119.193673][ T6654] IPv6: Can't replace route, no match found [ 119.383932][ T9] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 119.563937][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 119.599876][ T9] usb 1-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 120.032594][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.071212][ T9] usb 1-1: Product: syz [ 120.084019][ T9] usb 1-1: Manufacturer: syz [ 120.215962][ T9] usb 1-1: SerialNumber: syz [ 120.223718][ T9] usb 1-1: config 0 descriptor?? [ 120.232614][ T9] appledisplay 1-1:0.0: Could not find int-in endpoint [ 120.250103][ T9] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 120.333704][ T6672] netlink: 16162 bytes leftover after parsing attributes in process `syz.4.271'. [ 122.209168][ T1215] usb 1-1: USB disconnect, device number 4 [ 122.357584][ T6699] netlink: 'syz.2.284': attribute type 10 has an invalid length. [ 122.404741][ T6699] hsr_slave_0: entered allmulticast mode [ 122.422945][ T6699] team0: Device hsr_slave_0 is up. Set it down before adding it as a team port [ 122.849733][ T6713] netlink: 16162 bytes leftover after parsing attributes in process `syz.4.286'. [ 122.946846][ T6714] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 123.836013][ T6719] mmap: syz.1.292 (6719) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 123.889262][ T5207] udevd[5207]: worker [5893] terminated by signal 33 (Unknown signal 33) [ 123.915186][ T5207] udevd[5207]: worker [5893] failed while handling '/devices/virtual/block/loop2' [ 124.110905][ T6736] tipc: Enabling of bearer rejected, failed to enable media [ 124.133951][ T1206] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 124.693006][ T6720] delete_channel: no stack [ 124.734488][ T6749] block device autoloading is deprecated and will be removed. [ 125.194084][ T6754] sp0: Synchronizing with TNC [ 125.631443][ T6750] [U] è [ 127.386354][ T6769] tipc: Enabling of bearer rejected, failed to enable media [ 129.274979][ T6798] netlink: 12 bytes leftover after parsing attributes in process `syz.1.318'. [ 129.285751][ T6798] netlink: 12 bytes leftover after parsing attributes in process `syz.1.318'. [ 129.795188][ T6783] delete_channel: no stack [ 131.820186][ T30] kauditd_printk_skb: 20 callbacks suppressed [ 131.820226][ T30] audit: type=1800 audit(1752774903.353:169): pid=6828 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.0.329" name="bus" dev="overlay" ino=344 res=0 errno=0 [ 132.396291][ T1206] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 133.004116][ C1] raw-gadget.0 gadget.4: ignoring, device is not running [ 133.036835][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.043311][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.455434][ T1206] usb 5-1: device descriptor read/64, error -32 [ 134.215490][ T1206] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 134.376792][ T6843] xt_hashlimit: size too large, truncated to 1048576 [ 134.423933][ T1206] usb 5-1: Using ep0 maxpacket: 16 [ 134.438492][ T1206] usb 5-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 134.448245][ T1206] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.473106][ T1206] usb 5-1: Product: syz [ 134.477841][ T6847] netlink: 4 bytes leftover after parsing attributes in process `syz.3.335'. [ 134.494731][ T1206] usb 5-1: Manufacturer: syz [ 134.526301][ T1206] usb 5-1: SerialNumber: syz [ 134.547225][ T1206] usb 5-1: config 0 descriptor?? [ 134.585618][ T1206] appledisplay 5-1:0.0: Could not find int-in endpoint [ 134.626344][ T1206] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 135.252533][ T6874] bridge0: entered promiscuous mode [ 135.258256][ T6874] macsec1: entered promiscuous mode [ 135.271191][ T6874] bridge0: port 3(macsec1) entered blocking state [ 135.283605][ T6874] bridge0: port 3(macsec1) entered disabled state [ 135.300131][ T6874] macsec1: entered allmulticast mode [ 135.312889][ T6874] bridge0: entered allmulticast mode [ 135.334849][ T6874] macsec1: left allmulticast mode [ 135.346480][ T6874] bridge0: left allmulticast mode [ 135.399955][ T6874] bridge0: left promiscuous mode [ 136.085886][ T6888] netlink: 20 bytes leftover after parsing attributes in process `syz.3.348'. [ 138.981489][ T6891] syz.1.350 (6891): drop_caches: 2 [ 139.004339][ T6891] syz.1.350 (6891): drop_caches: 2 [ 140.053689][ T1206] usb 5-1: USB disconnect, device number 4 [ 142.459986][ T6945] netlink: 28 bytes leftover after parsing attributes in process `syz.3.370'. [ 142.512175][ T6950] netlink: 'syz.3.370': attribute type 10 has an invalid length. [ 142.527687][ T6950] syz_tun: entered promiscuous mode [ 142.550550][ T6950] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 142.744965][ T1215] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 142.963996][ T1215] usb 2-1: Using ep0 maxpacket: 32 [ 142.978374][ T1215] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 143.054915][ T1215] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 17958, setting to 1024 [ 143.202420][ T1215] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 143.263900][ T9] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 143.495455][ T1215] usb 2-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.26 [ 143.635473][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 143.641950][ T1215] usb 2-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 143.650636][ T1215] usb 2-1: Product: syz [ 143.655504][ T1215] usb 2-1: Manufacturer: syz [ 143.660364][ T1215] usb 2-1: SerialNumber: syz [ 143.668065][ T9] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 143.680121][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.689503][ T6949] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 143.696728][ T9] usb 4-1: Product: syz [ 143.700943][ T9] usb 4-1: Manufacturer: syz [ 143.705848][ T9] usb 4-1: SerialNumber: syz [ 143.746831][ T9] usb 4-1: config 0 descriptor?? [ 143.755009][ T1215] input: appletouch as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/input/input6 [ 143.887411][ T6972] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 143.984152][ T9] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 144.003028][ T1215] usb 2-1: USB disconnect, device number 2 [ 144.008945][ C0] appletouch 2-1:1.0: atp_complete: usb_submit_urb failed with result -19 [ 144.106882][ T1215] appletouch 2-1:1.0: input: appletouch disconnected [ 145.414024][ T43] IPVS: starting estimator thread 0... [ 145.473386][ T9] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 145.505920][ T9] usb 4-1: USB disconnect, device number 2 [ 145.534008][ T6997] IPVS: using max 30 ests per chain, 72000 per kthread [ 146.237931][ T9] IPVS: starting estimator thread 0... [ 146.257989][ T7006] serio: Serial port ptm0 [ 146.344905][ T7024] IPVS: using max 29 ests per chain, 69600 per kthread [ 147.717231][ T9] IPVS: starting estimator thread 0... [ 147.848118][ T7055] IPVS: using max 32 ests per chain, 76800 per kthread [ 150.674067][ T5960] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 150.844031][ T5960] usb 5-1: Using ep0 maxpacket: 32 [ 150.915293][ T5960] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 151.010479][ T5960] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 151.227486][ T5960] usb 5-1: config 0 descriptor?? [ 151.564144][ T5960] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 151.587593][ T5960] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 151.664385][ T7128] netlink: 8 bytes leftover after parsing attributes in process `syz.3.440'. [ 151.676783][ T5960] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 151.704684][ T5960] usb 5-1: media controller created [ 151.764888][ T7107] az6027: more than 2 i2c messages at a time is not handled yet. TODO. [ 151.828807][ T5960] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 151.919494][ T5960] az6027: usb out operation failed. (-71) [ 151.928513][ T5960] az6027: usb out operation failed. (-71) [ 151.937553][ T5960] stb0899_attach: Driver disabled by Kconfig [ 151.957057][ T5960] az6027: no front-end attached [ 151.957057][ T5960] [ 151.968391][ T5960] az6027: usb out operation failed. (-71) [ 151.985390][ T5960] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 152.004303][ T5960] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input8 [ 152.036633][ T5960] dvb-usb: schedule remote query interval to 400 msecs. [ 152.044433][ T5960] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 152.088097][ T5960] usb 5-1: USB disconnect, device number 5 [ 152.146610][ T7143] 9pnet_fd: Insufficient options for proto=fd [ 152.219285][ T5960] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 152.645865][ T67] wlan1: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID [ 152.685979][ T7156] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 152.799934][ T3559] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 152.814003][ T3559] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 153.398547][ T7175] 9pnet_fd: Insufficient options for proto=fd [ 153.561898][ T7184] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 153.562570][ T7183] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 153.591015][ T7183] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 153.597887][ T7183] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 153.604648][ T7183] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 153.611383][ T7183] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 153.618149][ T7183] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 153.624907][ T7183] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 153.631640][ T7183] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 153.638442][ T7183] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 153.645215][ T7183] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 153.780467][ T7185] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 153.792701][ T7185] xt_SECMARK: unable to map security context 'system_u:object_r:dbusd_etc_t:s0' [ 154.411008][ T7205] 9pnet_fd: Insufficient options for proto=fd [ 155.170114][ T7239] netlink: 12 bytes leftover after parsing attributes in process `syz.2.491'. [ 155.234271][ T5960] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 155.266772][ T7241] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 156.023859][ T5960] usb 5-1: Using ep0 maxpacket: 8 [ 156.092173][ T7249] 9pnet_fd: Insufficient options for proto=fd [ 156.159779][ T5960] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 156.169048][ T5960] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.177260][ T5960] usb 5-1: Product: syz [ 156.181511][ T5960] usb 5-1: Manufacturer: syz [ 156.190034][ T5960] usb 5-1: SerialNumber: syz [ 156.211035][ T5960] usb 5-1: config 0 descriptor?? [ 156.228346][ T7251] comedi comedi1: pcl812: I/O port conflict (0x10000,16) [ 156.332368][ T30] audit: type=1326 audit(1752774928.063:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7252 comm="syz.1.496" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3bbff8e929 code=0x7ffc0000 [ 156.391932][ T30] audit: type=1326 audit(1752774928.063:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7252 comm="syz.1.496" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3bbff8e929 code=0x7ffc0000 [ 156.445559][ T5960] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 156.463984][ T30] audit: type=1326 audit(1752774928.063:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7252 comm="syz.1.496" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3bbff8e929 code=0x7ffc0000 [ 156.508201][ T30] audit: type=1326 audit(1752774928.063:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7252 comm="syz.1.496" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3bbff8e929 code=0x7ffc0000 [ 156.531046][ T30] audit: type=1326 audit(1752774928.063:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7252 comm="syz.1.496" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3bbff8e929 code=0x7ffc0000 [ 156.641366][ T30] audit: type=1326 audit(1752774928.093:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7252 comm="syz.1.496" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3bbff8e929 code=0x7ffc0000 [ 156.671400][ T7269] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 156.696397][ T30] audit: type=1326 audit(1752774928.093:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7252 comm="syz.1.496" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3bbff8e929 code=0x7ffc0000 [ 156.718336][ T30] audit: type=1326 audit(1752774928.093:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7252 comm="syz.1.496" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3bbff8e929 code=0x7ffc0000 [ 157.362526][ T7278] netlink: 4 bytes leftover after parsing attributes in process `syz.1.506'. [ 157.423566][ T7281] 9pnet_fd: Insufficient options for proto=fd [ 158.626615][ T5960] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 158.684763][ T5960] usb 5-1: USB disconnect, device number 6 [ 158.877796][ T30] audit: type=1326 audit(1752774930.613:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7295 comm="syz.2.512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fabfaf8e929 code=0x7ffc0000 [ 158.925807][ T30] audit: type=1326 audit(1752774930.613:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7295 comm="syz.2.512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fabfaf8e929 code=0x7ffc0000 [ 159.002300][ T7304] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 161.135491][ T5849] Bluetooth: hci4: ACL packet too small [ 161.795094][ T7351] net_ratelimit: 2103 callbacks suppressed [ 161.795114][ T7351] sctp: failed to load transform for md5: -2 [ 163.001453][ T7375] loop6: detected capacity change from 0 to 63 [ 163.016829][ T6892] Buffer I/O error on dev loop6, logical block 0, async page read [ 163.043604][ T6892] Buffer I/O error on dev loop6, logical block 0, async page read [ 163.060336][ T6892] Buffer I/O error on dev loop6, logical block 0, async page read [ 163.072309][ T7376] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 163.074992][ T6892] Buffer I/O error on dev loop6, logical block 0, async page read [ 163.101691][ T6892] Buffer I/O error on dev loop6, logical block 0, async page read [ 164.671499][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 164.671516][ T30] audit: type=1326 audit(1752774936.403:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7402 comm="syz.4.550" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7e238e929 code=0x7ffc0000 [ 164.732289][ T30] audit: type=1326 audit(1752774936.403:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7402 comm="syz.4.550" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7e238e929 code=0x7ffc0000 [ 164.807686][ T30] audit: type=1326 audit(1752774936.413:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7402 comm="syz.4.550" exe="/root/syz-executor" sig=0 arch=c000003e syscall=283 compat=0 ip=0x7fe7e238e929 code=0x7ffc0000 [ 164.996712][ T30] audit: type=1326 audit(1752774936.413:193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7402 comm="syz.4.550" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7e238e929 code=0x7ffc0000 [ 165.575850][ T30] audit: type=1326 audit(1752774936.413:194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7402 comm="syz.4.550" exe="/root/syz-executor" sig=0 arch=c000003e syscall=286 compat=0 ip=0x7fe7e238e929 code=0x7ffc0000 [ 165.966339][ T30] audit: type=1326 audit(1752774936.413:195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7402 comm="syz.4.550" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7e238e929 code=0x7ffc0000 [ 166.040933][ T30] audit: type=1326 audit(1752774936.413:196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7402 comm="syz.4.550" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7fe7e238e929 code=0x7ffc0000 [ 166.136749][ T30] audit: type=1326 audit(1752774936.413:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7402 comm="syz.4.550" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7e238e929 code=0x7ffc0000 [ 166.274022][ T30] audit: type=1326 audit(1752774936.433:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7402 comm="syz.4.550" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe7e238e929 code=0x7ffc0000 [ 166.296269][ T30] audit: type=1326 audit(1752774936.433:199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7402 comm="syz.4.550" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7e238e929 code=0x7ffc0000 [ 166.413252][ T7434] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input11 [ 167.143899][ T7447] trusted_key: encrypted_key: insufficient parameters specified [ 168.304032][ T9] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 170.394582][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 170.423950][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 170.449685][ T9] usb 4-1: New USB device found, idVendor=10c4, idProduct=8acf, bcdDevice= 0.00 [ 170.479051][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.660814][ T9] usb 4-1: config 0 descriptor?? [ 171.411232][ T5909] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 171.553927][ T5909] usb 5-1: device descriptor read/64, error -71 [ 171.641279][ T30] kauditd_printk_skb: 23 callbacks suppressed [ 171.641297][ T30] audit: type=1326 audit(1752774943.373:223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7494 comm="syz.4.583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7e238e929 code=0x7ffc0000 [ 171.826900][ T9] usbhid 4-1:0.0: can't add hid device: -71 [ 171.839008][ T9] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 171.855129][ T9] usb 4-1: USB disconnect, device number 3 [ 171.857420][ T30] audit: type=1326 audit(1752774943.373:224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7494 comm="syz.4.583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7e238e929 code=0x7ffc0000 [ 171.885091][ T1215] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 171.920595][ T30] audit: type=1326 audit(1752774943.383:225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7494 comm="syz.4.583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=283 compat=0 ip=0x7fe7e238e929 code=0x7ffc0000 [ 171.946672][ T30] audit: type=1326 audit(1752774943.383:226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7494 comm="syz.4.583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7e238e929 code=0x7ffc0000 [ 171.973559][ T30] audit: type=1326 audit(1752774943.383:227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7494 comm="syz.4.583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7e238e929 code=0x7ffc0000 [ 171.996635][ T30] audit: type=1326 audit(1752774943.383:228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7494 comm="syz.4.583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=286 compat=0 ip=0x7fe7e238e929 code=0x7ffc0000 [ 172.043548][ T30] audit: type=1326 audit(1752774943.383:229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7494 comm="syz.4.583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7e238e929 code=0x7ffc0000 [ 172.074136][ T1215] usb 1-1: Using ep0 maxpacket: 16 [ 172.087999][ T1215] usb 1-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 172.103958][ T1215] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 172.117563][ T1215] usb 1-1: Product: syz [ 172.121736][ T1215] usb 1-1: Manufacturer: syz [ 172.154029][ T1215] usb 1-1: SerialNumber: syz [ 172.162376][ T30] audit: type=1326 audit(1752774943.383:230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7494 comm="syz.4.583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7e238e929 code=0x7ffc0000 [ 172.207422][ T1215] usb 1-1: config 0 descriptor?? [ 172.253424][ T30] audit: type=1326 audit(1752774943.383:231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7494 comm="syz.4.583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7fe7e238e929 code=0x7ffc0000 [ 172.262286][ T1215] appledisplay 1-1:0.0: Could not find int-in endpoint [ 172.283275][ T1215] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 172.320184][ T30] audit: type=1326 audit(1752774943.383:232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7494 comm="syz.4.583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7e238e929 code=0x7ffc0000 [ 175.224166][ T7529] netlink: 76 bytes leftover after parsing attributes in process `syz.4.593'. [ 177.872189][ T7558] bridge1: entered promiscuous mode [ 177.877509][ T7558] bridge1: entered allmulticast mode [ 177.889898][ T7558] team0: Port device bridge1 added [ 179.864990][ T7579] netlink: 'syz.1.607': attribute type 1 has an invalid length. [ 179.872727][ T7579] netlink: 'syz.1.607': attribute type 4 has an invalid length. [ 179.880609][ T7579] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.607'. [ 180.736807][ T5901] usb 1-1: USB disconnect, device number 6 [ 182.524169][ T5960] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 183.082268][ T5960] usb 1-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 183.091507][ T5960] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 183.112650][ T5960] usb 1-1: config 0 descriptor?? [ 183.173892][ T7626] netlink: 'syz.2.621': attribute type 1 has an invalid length. [ 183.181689][ T7626] netlink: 'syz.2.621': attribute type 4 has an invalid length. [ 183.189451][ T7626] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.621'. [ 183.678402][ T5960] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 183.714106][ T43] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 183.793872][ T5909] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 183.924108][ T43] usb 5-1: Using ep0 maxpacket: 16 [ 183.977022][ T43] usb 5-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 184.051173][ T5909] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 184.063348][ T5909] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 184.082336][ T5909] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 184.222371][ T43] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 184.236765][ T5909] usb 2-1: New USB device found, idVendor=0755, idProduct=2626, bcdDevice= 0.00 [ 184.240659][ T43] usb 5-1: Product: syz [ 184.256246][ T43] usb 5-1: Manufacturer: syz [ 184.260867][ T43] usb 5-1: SerialNumber: syz [ 184.306942][ T43] usb 5-1: config 0 descriptor?? [ 184.312000][ T5909] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 184.337048][ T43] appledisplay 5-1:0.0: Could not find int-in endpoint [ 184.348746][ T43] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 184.357080][ T5909] usb 2-1: config 0 descriptor?? [ 184.364190][ T7625] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 184.790091][ T5909] usbhid 2-1:0.0: can't add hid device: -71 [ 184.805191][ T5909] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 184.826912][ T5909] usb 2-1: USB disconnect, device number 3 [ 185.529574][ T5960] usb 1-1: USB disconnect, device number 7 [ 185.656421][ T3559] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 185.707685][ T3559] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 186.019022][ T7672] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 186.284228][ T5849] Bluetooth: hci0: unexpected cc 0x203e length: 2 > 1 [ 186.780923][ T5960] usb 5-1: USB disconnect, device number 9 [ 187.256004][ T7712] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 187.664051][ T9] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 188.027689][ T7723] bridge0: entered promiscuous mode [ 188.076851][ T7723] macsec1: entered promiscuous mode [ 188.174816][ T7723] bridge0: port 3(macsec1) entered blocking state [ 188.257117][ T7723] bridge0: port 3(macsec1) entered disabled state [ 188.322167][ T7723] macsec1: entered allmulticast mode [ 188.336164][ T7723] bridge0: entered allmulticast mode [ 188.373744][ T7723] macsec1: left allmulticast mode [ 188.379508][ T7723] bridge0: left allmulticast mode [ 188.405095][ T7723] bridge0: left promiscuous mode [ 188.454004][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 188.488078][ T9] usb 5-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 188.509464][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.521412][ T7733] pim6reg1: entered promiscuous mode [ 188.526989][ T7733] pim6reg1: entered allmulticast mode [ 188.535630][ T9] usb 5-1: Product: syz [ 188.539861][ T9] usb 5-1: Manufacturer: syz [ 188.544570][ T9] usb 5-1: SerialNumber: syz [ 188.557819][ T9] usb 5-1: config 0 descriptor?? [ 188.570936][ T9] appledisplay 5-1:0.0: Could not find int-in endpoint [ 188.587753][ T9] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 191.272761][ T1206] usb 5-1: USB disconnect, device number 10 [ 192.402670][ T7796] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 192.954522][ T7814] ------------[ cut here ]------------ [ 192.960731][ T7814] WARNING: CPU: 0 PID: 7814 at ./include/linux/memcontrol.h:371 folio_memcg+0x1a8/0x310 [ 192.971342][ T7814] Modules linked in: [ 192.976965][ T7814] CPU: 0 UID: 0 PID: 7814 Comm: syz.0.696 Not tainted 6.16.0-rc6-syzkaller-00037-ge2291551827f #0 PREEMPT(full) [ 192.989079][ T7814] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 192.999567][ T7814] RIP: 0010:folio_memcg+0x1a8/0x310 [ 193.005006][ T7814] Code: 80 3c 28 00 74 08 4c 89 f7 e8 74 ca 1b 00 4d 8b 36 4c 89 f0 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 99 e3 bb ff 90 <0f> 0b 90 eb c5 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c fe fe ff ff [ 193.025632][ T7814] RSP: 0018:ffffc9001c2df250 EFLAGS: 00010283 [ 193.033007][ T7814] RAX: ffffffff82044487 RBX: 0000000000000000 RCX: 0000000000080000 [ 193.041925][ T7814] RDX: ffffc90004a52000 RSI: 0000000000007979 RDI: 000000000000797a [ 193.050858][ T7814] RBP: 0000000000000000 R08: ffffea00015baac7 R09: 1ffffd40002b7558 [ 193.059423][ T7814] R10: dffffc0000000000 R11: fffff940002b7559 R12: ffffea00015baaf0 [ 193.068044][ T7814] R13: dffffc0000000000 R14: ffff88801fb7a100 R15: 0000000000000002 [ 193.077294][ T7814] FS: 00007fd6f578e6c0(0000) GS:ffff888125c5a000(0000) knlGS:0000000000000000 [ 193.087363][ T7814] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 193.094495][ T7814] CR2: 0000000000000000 CR3: 000000002f726000 CR4: 00000000003526f0 [ 193.103178][ T7814] Call Trace: [ 193.107169][ T7814] [ 193.110239][ T7814] workingset_activation+0x5f/0x4a0 [ 193.115980][ T7814] ? folio_mark_accessed+0x381/0x4a0 [ 193.121317][ T7814] folio_mark_accessed+0x3b5/0x4a0 [ 193.126522][ T7814] kvm_release_page_dirty+0xa2/0xf0 [ 193.131783][ T7814] kvm_tdp_page_fault+0x2dd/0x370 [ 193.136928][ T7814] kvm_mmu_do_page_fault+0x2c5/0x640 [ 193.142275][ T7814] ? vmx_vcpu_run+0xd8b/0x25d0 [ 193.147115][ T7814] ? __pfx_kvm_mmu_do_page_fault+0x10/0x10 [ 193.152984][ T7814] ? vmx_handle_exit_irqoff+0x29e/0xad0 [ 193.158656][ T7814] ? __pfx_current_save_fsgs+0x10/0x10 [ 193.164222][ T7814] kvm_mmu_page_fault+0x22f/0xb70 [ 193.169309][ T7814] ? __pfx_handle_ept_violation+0x10/0x10 [ 193.175869][ T7814] vmx_handle_exit+0x1090/0x18a0 [ 193.181549][ T7814] ? vcpu_run+0x361c/0x6f70 [ 193.186155][ T7814] vcpu_run+0x432e/0x6f70 [ 193.190567][ T7814] ? vcpu_run+0x361c/0x6f70 [ 193.195201][ T7814] ? __pfx_vcpu_run+0x10/0x10 [ 193.200145][ T7814] ? kvm_arch_vcpu_ioctl_run+0x1f3/0x1940 [ 193.206114][ T7814] ? rcu_is_watching+0x15/0xb0 [ 193.210934][ T7814] kvm_arch_vcpu_ioctl_run+0xfc9/0x1940 [ 193.216614][ T7814] ? kvm_arch_vcpu_ioctl_run+0x1f3/0x1940 [ 193.222389][ T7814] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 193.228483][ T7814] ? __lock_acquire+0xab9/0xd20 [ 193.233417][ T7814] kvm_vcpu_ioctl+0x95c/0xe90 [ 193.238197][ T7814] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 193.243449][ T7814] ? __lock_acquire+0xab9/0xd20 [ 193.248380][ T7814] ? __asan_memset+0x22/0x50 [ 193.253024][ T7814] ? smack_file_ioctl+0x302/0x340 [ 193.258144][ T7814] ? __pfx_smack_file_ioctl+0x10/0x10 [ 193.263612][ T7814] ? __fget_files+0x2a/0x420 [ 193.268320][ T7814] ? __fget_files+0x3a0/0x420 [ 193.273044][ T7814] ? __fget_files+0x2a/0x420 [ 193.278561][ T7814] ? bpf_lsm_file_ioctl+0x9/0x20 [ 193.284178][ T7814] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 193.289419][ T7814] __se_sys_ioctl+0xfc/0x170 [ 193.291447][ T7825] xt_hashlimit: size too large, truncated to 1048576 [ 193.294074][ T7814] do_syscall_64+0xfa/0x3b0 [ 193.294114][ T7814] ? lockdep_hardirqs_on+0x9c/0x150 [ 193.294135][ T7814] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 193.294157][ T7814] ? clear_bhb_loop+0x60/0xb0 [ 193.294181][ T7814] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 193.294201][ T7814] RIP: 0033:0x7fd6f498e929 [ 193.294236][ T7814] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 193.294253][ T7814] RSP: 002b:00007fd6f578e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 193.294277][ T7814] RAX: ffffffffffffffda RBX: 00007fd6f4bb5fa0 RCX: 00007fd6f498e929 [ 193.294293][ T7814] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 193.294306][ T7814] RBP: 00007fd6f4a10ca1 R08: 0000000000000000 R09: 0000000000000000 [ 193.294320][ T7814] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 193.294332][ T7814] R13: 0000000000000000 R14: 00007fd6f4bb5fa0 R15: 00007ffe001d7ae8 [ 193.294364][ T7814] [ 193.405462][ T7814] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 193.412769][ T7814] CPU: 0 UID: 0 PID: 7814 Comm: syz.0.696 Not tainted 6.16.0-rc6-syzkaller-00037-ge2291551827f #0 PREEMPT(full) [ 193.424669][ T7814] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 193.434738][ T7814] Call Trace: [ 193.438043][ T7814] [ 193.440984][ T7814] dump_stack_lvl+0x99/0x250 [ 193.445593][ T7814] ? __asan_memcpy+0x40/0x70 [ 193.450191][ T7814] ? __pfx_dump_stack_lvl+0x10/0x10 [ 193.455395][ T7814] ? __pfx__printk+0x10/0x10 [ 193.460003][ T7814] panic+0x2db/0x790 [ 193.463909][ T7814] ? __pfx_panic+0x10/0x10 [ 193.468349][ T7814] __warn+0x31b/0x4b0 [ 193.472332][ T7814] ? folio_memcg+0x1a8/0x310 [ 193.476925][ T7814] ? folio_memcg+0x1a8/0x310 [ 193.481515][ T7814] report_bug+0x2be/0x4f0 [ 193.485844][ T7814] ? folio_memcg+0x1a8/0x310 [ 193.490452][ T7814] ? folio_memcg+0x1a8/0x310 [ 193.495049][ T7814] ? folio_memcg+0x1aa/0x310 [ 193.499651][ T7814] handle_bug+0x84/0x160 [ 193.503896][ T7814] exc_invalid_op+0x1a/0x50 [ 193.508410][ T7814] asm_exc_invalid_op+0x1a/0x20 [ 193.513264][ T7814] RIP: 0010:folio_memcg+0x1a8/0x310 [ 193.518469][ T7814] Code: 80 3c 28 00 74 08 4c 89 f7 e8 74 ca 1b 00 4d 8b 36 4c 89 f0 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 99 e3 bb ff 90 <0f> 0b 90 eb c5 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c fe fe ff ff [ 193.538088][ T7814] RSP: 0018:ffffc9001c2df250 EFLAGS: 00010283 [ 193.544167][ T7814] RAX: ffffffff82044487 RBX: 0000000000000000 RCX: 0000000000080000 [ 193.552140][ T7814] RDX: ffffc90004a52000 RSI: 0000000000007979 RDI: 000000000000797a [ 193.560126][ T7814] RBP: 0000000000000000 R08: ffffea00015baac7 R09: 1ffffd40002b7558 [ 193.568112][ T7814] R10: dffffc0000000000 R11: fffff940002b7559 R12: ffffea00015baaf0 [ 193.576090][ T7814] R13: dffffc0000000000 R14: ffff88801fb7a100 R15: 0000000000000002 [ 193.584069][ T7814] ? folio_memcg+0x1a7/0x310 [ 193.588686][ T7814] workingset_activation+0x5f/0x4a0 [ 193.593906][ T7814] ? folio_mark_accessed+0x381/0x4a0 [ 193.599211][ T7814] folio_mark_accessed+0x3b5/0x4a0 [ 193.604333][ T7814] kvm_release_page_dirty+0xa2/0xf0 [ 193.609541][ T7814] kvm_tdp_page_fault+0x2dd/0x370 [ 193.614578][ T7814] kvm_mmu_do_page_fault+0x2c5/0x640 [ 193.619876][ T7814] ? vmx_vcpu_run+0xd8b/0x25d0 [ 193.624645][ T7814] ? __pfx_kvm_mmu_do_page_fault+0x10/0x10 [ 193.630465][ T7814] ? vmx_handle_exit_irqoff+0x29e/0xad0 [ 193.636013][ T7814] ? __pfx_current_save_fsgs+0x10/0x10 [ 193.641483][ T7814] kvm_mmu_page_fault+0x22f/0xb70 [ 193.646515][ T7814] ? __pfx_handle_ept_violation+0x10/0x10 [ 193.652235][ T7814] vmx_handle_exit+0x1090/0x18a0 [ 193.657180][ T7814] ? vcpu_run+0x361c/0x6f70 [ 193.661697][ T7814] vcpu_run+0x432e/0x6f70 [ 193.666043][ T7814] ? vcpu_run+0x361c/0x6f70 [ 193.670587][ T7814] ? __pfx_vcpu_run+0x10/0x10 [ 193.675270][ T7814] ? kvm_arch_vcpu_ioctl_run+0x1f3/0x1940 [ 193.681029][ T7814] ? rcu_is_watching+0x15/0xb0 [ 193.685812][ T7814] kvm_arch_vcpu_ioctl_run+0xfc9/0x1940 [ 193.691383][ T7814] ? kvm_arch_vcpu_ioctl_run+0x1f3/0x1940 [ 193.697115][ T7814] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 193.703120][ T7814] ? __lock_acquire+0xab9/0xd20 [ 193.708012][ T7814] kvm_vcpu_ioctl+0x95c/0xe90 [ 193.712710][ T7814] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 193.717919][ T7814] ? __lock_acquire+0xab9/0xd20 [ 193.722797][ T7814] ? __asan_memset+0x22/0x50 [ 193.727410][ T7814] ? smack_file_ioctl+0x302/0x340 [ 193.732450][ T7814] ? __pfx_smack_file_ioctl+0x10/0x10 [ 193.737866][ T7814] ? __fget_files+0x2a/0x420 [ 193.742470][ T7814] ? __fget_files+0x3a0/0x420 [ 193.747169][ T7814] ? __fget_files+0x2a/0x420 [ 193.751791][ T7814] ? bpf_lsm_file_ioctl+0x9/0x20 [ 193.756729][ T7814] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 193.761934][ T7814] __se_sys_ioctl+0xfc/0x170 [ 193.766534][ T7814] do_syscall_64+0xfa/0x3b0 [ 193.771042][ T7814] ? lockdep_hardirqs_on+0x9c/0x150 [ 193.776428][ T7814] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 193.782510][ T7814] ? clear_bhb_loop+0x60/0xb0 [ 193.787207][ T7814] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 193.793138][ T7814] RIP: 0033:0x7fd6f498e929 [ 193.797565][ T7814] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 193.817185][ T7814] RSP: 002b:00007fd6f578e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 193.825607][ T7814] RAX: ffffffffffffffda RBX: 00007fd6f4bb5fa0 RCX: 00007fd6f498e929 [ 193.833584][ T7814] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 193.841556][ T7814] RBP: 00007fd6f4a10ca1 R08: 0000000000000000 R09: 0000000000000000 [ 193.849529][ T7814] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 193.857501][ T7814] R13: 0000000000000000 R14: 00007fd6f4bb5fa0 R15: 00007ffe001d7ae8 [ 193.865488][ T7814] [ 193.868757][ T7814] Kernel Offset: disabled [ 193.873093][ T7814] Rebooting in 86400 seconds..