last executing test programs: 1m52.31871913s ago: executing program 0 (id=200): r0 = socket$inet6(0x10, 0x3, 0x0) ioprio_set$pid(0x1, 0x0, 0x4007) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000300)='GPL\x00', 0x8000, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='itimer_state\x00', r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(r2, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x0, 0x60010102, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x28) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002000000da16c167d803f1f805000600200000000a00060000000000ff0000000000000000001ffeff0001000003f1dc7f7c6e7c0200010000000000004000020000000005000500000000000a"], 0x80}}, 0x0) sendmmsg(r3, &(0x7f0000000180), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f0000001fd8)=ANY=[@ANYRES32], &(0x7f0000000000)='syzkaller\x00', 0x8, 0xc3, &(0x7f000000cf3d)=""/195, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x1, @void, @value}, 0x94) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000280)) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000040)={0xa, &(0x7f00000005c0)=[{0x81, 0x42, 0x7f, 0x4}, {0x9, 0xf8, 0x21, 0x2}, {0x83, 0x17, 0xc, 0x3}, {0x8, 0x3, 0x7}, {0x2, 0xa9, 0x94, 0x11967891}, {0x4, 0x3, 0x58, 0x8000000}, {0x9, 0x1, 0x9, 0x9}, {0x42, 0x3, 0x9, 0x3}, {0x8, 0x2, 0x7, 0x8}, {0x6, 0x10, 0xb0, 0x4}]}, 0x10) sendto$inet6(r5, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r5, 0x84, 0x7c, &(0x7f0000000080)={0x0, 0x5d}, &(0x7f0000000240)=0x8) ioprio_get$pid(0x1, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) 1m51.278881615s ago: executing program 0 (id=202): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan1\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_io_uring_setup(0x117, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x3a6}, &(0x7f0000000000), &(0x7f0000000200)=0x0) r5 = inotify_init1(0x0) inotify_add_watch(r5, &(0x7f0000000200)='./bus\x00', 0x6000000b) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) syz_io_uring_submit(0x0, r4, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x1001, 0x1, 0x0}) io_uring_enter(0xffffffffffffffff, 0x47ba, 0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000400)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x24000040}, 0x4000) splice(r5, &(0x7f00000001c0)=0x1, r5, &(0x7f0000000280)=0x1, 0x99, 0x5) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080), 0x8) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000440)) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000001740)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000bc7ef9642d29ba564165605dca29708efdf9b15a5c10a126121b2751f642635bcd9a8bf7a928a5d054b0d2c54d519ea75c52f41ed6f2886973626b684c8bd9108c0b0b2ea7e556948f0367aff4fbcede3294f6e73d06ad16dc2d26725ff833b5f83b499918e6a6ec245b781d41aee9624c847e2f2312d6b9db45bad354fc1a3f20407ffe406483a0524937ee7559e4bf70136746b37fdfbbb152758d37ed8bcac41fb7243bdcd536249c7996e898b61927eaa5a8790054ba13d3ade593220f96027090a34aaf7ea92f41aab73e7a85eef87e956bb7c5c76a347264fd99359f4e57b0dcc2bcc188ea880a4b11a8bb81eb22b0ddfc689e3218cf310dcc61cab354149d9107d8a88b0aa5b5661555f00443aee5e714009e52cee5e88f008148ddbc0fa81bf938bed4a1ac778d5337cc0311d0772eeac3eab38426e8d1472ff514aa5379ed21551790cc10148410b4fc27582fd7106a8887a9a0b613dfe10aee77542d887208f5534f5dce4d43f258fc9ef975834e1917666e2aff1cebfc3ce2c1e8ff66bba1d9050000000000000078db7024bf321636bede8651e672ed4f01ba5da2c3f9042a8552bd3f2c9ad546ad0ea20b4d35fb0a15c6239f67c7747a40fe26a88adf727fd1b801b4e56fbffcad99ce68fe2af0d94fdc78d27268de435021dca51acaa7a9e0944bdf579c170db6405944b6791a7713ee54f650fdf71b57c3629fb185efce700620ef5744623be08ec935dd563e6ba0b461bda98b364acf3dcdafa9b0e68c21ea509212c2938aa09cc31aa4ee5bfb8e507181909f5854b13997af4888cd61c8aab5fdfd701a16d546e5a533cd9b985dcc582b67979551dcc750fc51f2c9b6814edeffc76a86ea9f58b7c66fa24540daf14c2163d064f8cf0b4878f81e6b8bc4dabc10dac82b39e033963a6d02434cb783a198829d1373790a85c0e01a362d89e80165d280283af3c2060000000000000034b12a73b0c53bfae5d2f6e55728052247adfe0966c6c5eca57918c4540c979a70a281ba00e408c9fe1b20fa208976dd6a56f9bd9a74d81447c9b265d8c23f0e983e0b1d2d62d1e57c9188e4882634476e62ab1b7415a58208eaaf166d14720092f79a6197fe8b4ea7d5485cc6b3630afed8d3403cfa4d7bf48efb371706e0e65901eea3743c98261cbb7a246cf62f99bbc918741d32539ec0754e7d7f08dd45aaf49623342eabf466e54d8da4346e73da54ba2e4b5e2ae2823864d4147b490e55c9509f75c8828500ac32cab11b0262e75fa9e39e3792d01e0b210fdfb686bfffdc677432f6332c1a27502b43997060acdf7784c79fed0325e06f6b64b6434ebf4730509bcf95b9a1d0ba7c469d55351cc1dce6c90f5872e7ad5eed5f850d9d1f928b4e0263b241e8fe03e5e66252c8a3bd320e8deee5b91c653b8f22f58cff36c2ba4d6774f14229939595d2beb998c9312212de00468fc488591aca07ab75fba4a318d3ee4581711927b77a7f14dbcd639892f8cb0000000000000080411736eb1ee86eec338197a56293c9cdb72e84155681553b896d58b62a96852320e74dc4c9b41d6f90d2353dc573a94a092a84209c12da57f8c78e161b0899eb1c8b694d26c5fbf7f65fefacdbf39151f335dddc3b179a13f6de93ffb338e94738c86e35e9fcc654e4d6618dc1201cbd16e1281df911e6c699da16fbbb7a2e5c77966c98d3e7edd58cabfe6bf1bb7f6329084e3e4a2a36da07bbac3ebc00472f55b7966f250109fcce0ad5d4526d20ef74d1a634d724"], &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r6, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x6d) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x0, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0xd, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000002ff0100000000000000000095"], &(0x7f0000000180)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r8, r7, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 1m49.962877599s ago: executing program 0 (id=205): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_ULP(r1, 0x6, 0x1f, 0xfffffffffffffffe, 0x4) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r5}, 0x10) ioctl$KVM_SET_CPUID2(r4, 0x4048aecb, &(0x7f0000000400)=ANY=[@ANYBLOB="050000000000000003"]) 1m49.203034791s ago: executing program 0 (id=207): mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) r0 = fanotify_init(0x8, 0x800) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x40) fanotify_mark(r0, 0x41, 0x8000038, r1, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000240)={0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x87, 0x0, 0x0, 0xc, 0x1, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x822, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3d, 0x4, 0x6, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x5, 0x0, 0x0, 0x8000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9, 0xfffffffffffffffe, 0x3d60, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x6, 0x4, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3fffffe]}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.self_freezing\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000280), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r2, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0xc0189436, &(0x7f0000000140)) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000280)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@allow_other}]}}) listxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000200)=""/126, 0x7e) 1m47.026659958s ago: executing program 0 (id=212): pipe(0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="1c0000005e007f029e3b470d649b72ab25399cd956c07dead6a93690", 0x1c}], 0x1}, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) fsopen(&(0x7f0000000280)='ceph\x00', 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/input/devices\x00', 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000080)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2], [0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x741a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xa1b, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x11) 1m46.054755082s ago: executing program 0 (id=217): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000740)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000001c0)={0x14, 0x2c, 0x1, 0x0, 0x0, "", [@nested={0x4}]}, 0x14}], 0x1, 0x0, 0x0, 0x20000000}, 0x28044) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r4, 0xc0a85320, &(0x7f0000000340)={{0x80}, 'port0\x00', 0x1b6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x2, 0x2}) openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) close_range(r5, 0xffffffffffffffff, 0x0) 1m44.320531424s ago: executing program 32 (id=217): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000740)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000001c0)={0x14, 0x2c, 0x1, 0x0, 0x0, "", [@nested={0x4}]}, 0x14}], 0x1, 0x0, 0x0, 0x20000000}, 0x28044) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r4, 0xc0a85320, &(0x7f0000000340)={{0x80}, 'port0\x00', 0x1b6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x2, 0x2}) openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) close_range(r5, 0xffffffffffffffff, 0x0) 1m27.649779988s ago: executing program 2 (id=249): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000000000000100000000000000000000e80000000000000000ff"]) r3 = syz_open_dev$vim2m(&(0x7f0000000140), 0x1000002000000f3, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f00000003c0)={0x1, @pix={0x800, 0x6494, 0x33424752, 0x3, 0x6, 0x5, 0x7, 0x0, 0x1, 0x2, 0x2, 0x6}}) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000002085000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000680), r8) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) utime(&(0x7f0000000080)='./file0\x00', 0x0) clock_gettime(0x0, &(0x7f00000002c0)={0x0, 0x0}) futex(&(0x7f0000000280)=0x1, 0xd, 0x0, &(0x7f0000000380)={r10, r11+60000000}, &(0x7f00000004c0)=0x7, 0x1) sendmsg$L2TP_CMD_TUNNEL_CREATE(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000300)={0x44, r9, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @private=0xa010100}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @remote}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x4000) 1m25.307428732s ago: executing program 2 (id=255): ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x9}}, './file0\x00'}) socket$inet_udp(0x2, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x3, r1, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) mremap(&(0x7f00007d6000/0x3000)=nil, 0x3000, 0x3000, 0x0, &(0x7f00007d5000/0x3000)=nil) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000500)="1400000035000b63d25a80da8c2594f90724fc60", 0x14}], 0x1}, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) pselect6(0x0, 0x0, 0x0, &(0x7f0000000200)={0x1fe}, 0x0, 0x0) r4 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f0000002c80)=0x142, 0x4) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0500000004000010002400000a000000ff3265a7", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/14], 0x48) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {}, {0xfff1, 0xffff}, {0xfff1, 0x1}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x8}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x8}]}, 0x40}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r5], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', r7, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) write$tun(r0, &(0x7f0000000080)={@void, @val={0x5, 0x1, 0x4, 0x9cd, 0xfffa, 0x1ff}, @mpls={[{0xffffb, 0x0, 0x1}, {0x6, 0x0, 0x1}, {0x3, 0x0, 0x1}, {0x1000}, {0x4}, {0x9, 0x0, 0x1}, {0xed, 0x0, 0x1}], @generic="6df2d897af526d383bd6f8108bc017c0f86c3e69dbe45dfd7b651b2294614309803eb5f6257b0d978573dad8749ad47e1a754356e99c885f8e125be9f6388d76793253c76eaa68fd3301fee479d72b6884844cbe5a663bfe030228bc7c8d500b5578eab054487e390d54d980685873e22590f8abe9"}}, 0x9b) 1m24.160643494s ago: executing program 2 (id=257): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[], 0x32600) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x100002, 0x0) socket$alg(0x26, 0x5, 0x0) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000500)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) mremap(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil) r1 = syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000080)) ioctl$PAGEMAP_SCAN(r1, 0xc0606610, &(0x7f0000000480)={0x60, 0x0, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x8, &(0x7f0000000240)=[{}, {0x8, 0x6, 0x3}], 0x2, 0x1, 0x0, 0x2, 0x0, 0x2}) 1m22.630733496s ago: executing program 4 (id=260): r0 = socket$inet(0x2, 0x2, 0x1) r1 = socket(0x1e, 0x1, 0x0) connect$tipc(r1, &(0x7f0000000040)=@id, 0x10) recvmmsg(r1, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000280)=""/89, 0x59}], 0x1, &(0x7f0000002d80)=""/4106, 0x100a}, 0x57}], 0x1, 0x101, 0x0) bind$inet(r0, &(0x7f00000004c0)={0x2, 0x4e21, @empty}, 0x10) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000200)={&(0x7f0000000500)={0x1f0, r4, 0x4, 0x70bd25, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_SCAN_SUPP_RATES={0x1dc, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x101, 0x2, "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"}, @NL80211_BAND_60GHZ={0x91, 0x2, "da810858f6b4a6404662a17fe72fba68834d95176b5769a22f57c196b6ea717ec016890702813deda8dd8fa9d1d3f992e948aa5f9ebfdf6d023c2a064e992999439c97c74a5e22b8230fb5d61f73f1fdfb6ccbd1971968458517bb2fa3439943ceb83a28309fc46669e17d26d0dca9bd4b92d2e041db876c5cd27bca4b1ba9570601ad06d3ca68e8086bd7e9bd"}, @NL80211_BAND_2GHZ={0x3e, 0x0, "d1865205a6fe0157e3974295cdb81de8cd02f4584339e65f698cc410305dadedd85635ed33b1ac76afb098f136a6c0b357af1a4503f34cd48c3f"}]}]}, 0x1f0}, 0x1, 0x0, 0x0, 0x2000c041}, 0x480) r5 = epoll_create1(0x0) poll(&(0x7f0000000280)=[{r5, 0x1a1}], 0x1, 0x10821) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r2, &(0x7f00000000c0)={0x20000000}) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000480)='net/icmp\x00') preadv(r6, &(0x7f0000000440)=[{&(0x7f0000000380)=""/192, 0xc0}], 0x1, 0x0, 0x6) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x111, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r6, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x2, 0xfffffdb5, @private1, 0x61}, {0xa, 0x4e21, 0x40, @empty, 0xac}, r7, 0x2}}, 0x48) r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r8, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) 1m21.589208027s ago: executing program 4 (id=261): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsopen(0x0, 0x0) ppoll(&(0x7f0000000180)=[{r2, 0x40}], 0x1, &(0x7f0000000440)={0x77359400}, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r3}, 0x18) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="bf000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) close(r4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) r5 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r5, 0x7a7, &(0x7f0000000080)=0xb0000) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x1, 0xb, 0x100005, 0x2, 0x0, 0xffffffffffffffff, 0x48, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0, @void, @value, @void, @value}, 0x50) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r5, 0x7ab, &(0x7f0000000300)={&(0x7f0000000bc0)={{@host, 0xec}, {@local, 0x4}, 0x400, "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"}, 0x418, 0x5}) 1m20.118900758s ago: executing program 4 (id=262): r0 = socket(0x2b, 0x80801, 0x1) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0xb001, 0x4, 0x3f0, 0x1f8, 0x1f8, 0x110, 0x308, 0x308, 0x308, 0x7fffffe, 0x0, {[{{@arp={@local, @local, 0xff, 0xffffff00, 0xa, 0x9, {@empty, {[0xff, 0xff, 0xff, 0xff, 0xff]}}, {@empty, {[0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}}, 0x1, 0x2, 0xf, 0x7, 0x7, 0xfff, 'gretap0\x00', 'vlan0\x00', {}, {}, 0x0, 0x28e}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@local, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x2, 0x1}}}, {{@uncond, 0xc0, 0xe8, 0x0, {0x0, 0x1e03}}, @unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x8de, 0x400}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @multicast1, @broadcast, 0x2, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) r1 = syz_open_procfs(0xffffffffffffffff, 0x0) lseek(r1, 0x2, 0x1) 1m20.090687988s ago: executing program 4 (id=263): socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) process_madvise(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r2 = memfd_create(&(0x7f0000000b40)='\x9d#\x00\xe6Z\x00\xafq%\xa5\x83\xa6\xb5\x00\x83y\xf3\xb2\xe6b \x00\x00\x00\x00\x00\x00\x01\x00\x00\xf7\xffg\xf5\x12oP\xfe\xe6\xd2SLR\xa1\x00\x00\x17\x1f$^\xe1\x00\x00\x00\x00\x00\x00\a\xff;\xeb\xf1\xd0\xce\xe5\x19\x12\b\x01\xd9\xae>/\x05\x00\x00\x00\x15\x00\x00\x00\xa1\xa2\xe0g\x98\xbf*\xdcc\x12.\xb7\xbe`\'\xcb\xb6\xaf\xdc\xa0D\x93.\xf25\x957\xec\xfb\xe6|\\\xe4h\xfc\x14\x05\x00\x00\x00\x00\x00\x00\x00\x91\x98\x15\xec\xdb\xaa\t9\x11\xb4h$&0\xdd\x19\x86\x90\xbe\xd7\xdc\n\xcbC\x15\xfcp\x11\xdai\f{a?\xd0\xe1{\x84\xb5\x82q\x19\xacS\x88|\x99\xfd\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xff\xff\xff\xff\xcd\xf0%\x97!\xba\xe3J\xc2t\x96\xf8\xb1\xd2\x168\xbf`$\xbf\xca\xea\xa3\x83\x8e-k\x12\xdf\xb9q\xb6Pr\xd4\xb5X\\\xdbD\n\x03G\x00\x04\x00\x00\xbc\xac\x18\xba\xce\xb3%QF\x03\b\x9dh\xcb)\xf4f\x12[\xf9\r\t\xef{h\xb0\xc0:\x8f|\x8f\x06\xf8T\x826`M\x11\x1c\xb0*8\v\x1e\xcf\x03\xd3\xe8,?P\xac\x86\x13b\xa8D\x0f\x93\xab\x1c\x11\x00\xc5\x8d\x82\x9c\xd6B[\xc9\x00\xf5]\x81\xf3\xfd\x06M\xbe\xf9\xba\x9em\xe9\"\x03\x933P\x9b\xcc\x9b\f\xa7\x8f\x91O\xc9\xb9\x14M\x8b\xd0\xc0\xb8L\xbd\x1c4\xb59\x988\tgC\xbc\xe0\xc5\xf4\xe0E%\xd9\xd8w\x00k\x042Y\xd9\xc5\xe59\xa95\xd1m\xd8hCuZYi\x10D\xb9\xe6\xff\x04K%yH\xe5\xf4\x8b\x03Ca8\x1e\xe9\\#\xf8O\fw\xd9\xf5cF\xcc\x1a2ex\xb4\x0fi$\x97\x81.\x02\x04m\xfbT2\xd4\"\x1e\xf0\x16\x0f\x97\xe6j}J\xca\xb8)f\xd5\xfd>\x9bU\xb0\x03Zt0\xc0b\xad\xef@o\xc1\xd6\x17T\f\xc30\xe2\x89\xf6L\x1b1\x9c\t\xa7\x80\x1b:\xbb\x04\xd7\xd1\x06\xa0\xe9\xbah\xb6\xb2\xea/{Q\xca\x14\x13\x9ajWt\xc9\xecd\xe7\xf6\t\x9dJ\xa4^m\xf3\xb5Y\f\x8f\r\xd5)>A\xe9\xf59\'G[\xf0`\xf3\'\xe4\xb2\x1d\xaf\n\xc0\xc1\x1d}DY\x95&\xe7\xf4U\xff\xcd&\a\x9f\x1bg\xe5|~\xc1\xc5n\x12%ur\xa1\x9e`\xc2\x01\b,\x18\xaf\xccD\xdeag\xc6\xf3\xd6\x94\x9d\xae\x8bl\xee\x7fu\xe5bu\x84\x04\xb3@\xa1\xf7\xc6\x13\xf9I?^\xf3,\",aT\xfd\"\x01\x92\xb1\xbf\x8a\x15\x88\xfd\x8f\x88\x87\x82\x9c:L\xd2\xb8\xfa5\x066\x82\xf3_LUr\xfa\xd2\x99d \x97c9G\x99\xe3\xcc$\x96cu\x97\xe7\xc7a\tm\xe8F\xc7j\xf8\x98\x81\xe7\xf7\xab3F\xf4u\xdaav\xd21\v\x99HG\xdfx\x1cPl\t#\xc1\x8e\xddW', 0x6) fallocate(r2, 0x18, 0x89, 0x400001) fcntl$addseals(r2, 0x409, 0xc) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x3}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r3, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x4008000) setsockopt$RDS_CANCEL_SENT_TO(r3, 0x114, 0x1, &(0x7f0000000ec0)={0x2, 0x4e1e, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) r4 = io_uring_setup(0x4d66, &(0x7f0000000200)={0x0, 0xcb9c, 0x8, 0xffffffff, 0x238}) io_uring_register$IORING_REGISTER_MEM_REGION(r4, 0x22, &(0x7f00000001c0)={&(0x7f0000000180)={&(0x7f0000000100)="ff", 0x1, 0x0, 0x1}, 0x1}, 0x1) keyctl$KEYCTL_PKEY_SIGN(0x1b, &(0x7f0000002240), &(0x7f00000003c0)=ANY=[@ANYBLOB="656e633d72617720686173683d7368613738342d61726d363400000000000000000000000000000000000000000000000000000000000200"/77, @ANYRES8=r1], 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file0\x00'}) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002ac0)={0x1a, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000500000000000000f6ffff94000000000000005a4a1a0f6a4ccd273f35d12ef7a17b2379bbacecb9c32fefc822253ca5b663e4285d4fda60c4e2a50c4b2c765fa45eeed8a59ab4024ef12641988b1a273b83e715f3779075397ee93e41bbbe9f5d158b1ad27e6fa2704a804025abbaeecd51f12368264bc415c68ee0646b"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x2008, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) 1m19.924055109s ago: executing program 2 (id=264): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000000000000100000000000000000000e80000000000000000ff"]) r3 = syz_open_dev$vim2m(&(0x7f0000000140), 0x1000002000000f3, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f00000003c0)={0x1, @pix={0x800, 0x6494, 0x33424752, 0x3, 0x6, 0x5, 0x7, 0x0, 0x1, 0x2, 0x2, 0x6}}) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000002085000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000680), r8) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) utime(&(0x7f0000000080)='./file0\x00', 0x0) clock_gettime(0x0, &(0x7f00000002c0)={0x0, 0x0}) futex(&(0x7f0000000280)=0x1, 0xd, 0x0, &(0x7f0000000380)={r10, r11+60000000}, &(0x7f00000004c0)=0x7, 0x1) sendmsg$L2TP_CMD_TUNNEL_CREATE(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000300)={0x44, r9, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @private=0xa010100}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @remote}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x4000) 1m16.677079855s ago: executing program 2 (id=269): pipe(0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="1c0000005e007f029e3b470d649b72ab25399cd956c07dead6a93690", 0x1c}], 0x1}, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r4 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/input/devices\x00', 0x0, 0x0) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$uinput_user_dev(r6, &(0x7f0000000080)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2], [0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x741a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xa1b, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) ioctl$UI_SET_EVBIT(r6, 0x40045564, 0x11) ioctl$UI_DEV_CREATE(r6, 0x5501) preadv(r5, &(0x7f0000003780)=[{&(0x7f0000001300)=""/170, 0xaa}], 0x1, 0xffff, 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f00000001c0)='\x00', &(0x7f0000000240)='{}k%@\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) gettid() readv(r4, &(0x7f0000000600)=[{&(0x7f0000000080)=""/3, 0x3}, {&(0x7f0000000640)=""/229, 0xe5}], 0x2) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x7c}}, 0x10) 1m13.23250022s ago: executing program 2 (id=276): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x6) socket$inet6_udp(0xa, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000740)=0x2) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000001c0)={0x14, 0x2c, 0x1, 0x0, 0x0, "", [@nested={0x4}]}, 0x14}], 0x1, 0x0, 0x0, 0x20000000}, 0x28044) 1m12.8397891s ago: executing program 4 (id=279): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000000000000100000000000000000000e80000000000000000ff"]) r3 = syz_open_dev$vim2m(&(0x7f0000000140), 0x1000002000000f3, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f00000003c0)={0x1, @pix={0x800, 0x6494, 0x33424752, 0x3, 0x6, 0x5, 0x7, 0x0, 0x1, 0x2, 0x2, 0x6}}) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000002085000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000680), r8) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) utime(&(0x7f0000000080)='./file0\x00', 0x0) clock_gettime(0x0, &(0x7f00000002c0)={0x0, 0x0}) futex(&(0x7f0000000280)=0x1, 0xd, 0x0, &(0x7f0000000380)={r10, r11+60000000}, &(0x7f00000004c0)=0x7, 0x1) sendmsg$L2TP_CMD_TUNNEL_CREATE(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000300)={0x44, r9, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @private=0xa010100}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @remote}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x4000) 1m5.380159314s ago: executing program 5 (id=285): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='freezer.self_freezing\x00', 0x26e1, 0x0) close(r0) ioctl$SIOCSIFHWADDR(r0, 0x8b32, &(0x7f0000000000)={'virt_wifi0\x00', @random="040000000008"}) 1m4.999922238s ago: executing program 5 (id=286): pipe(0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="1c0000005e007f029e3b470d649b72ab25399cd956c07dead6a93690", 0x1c}], 0x1}, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r4 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/input/devices\x00', 0x0, 0x0) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$uinput_user_dev(r6, &(0x7f0000000080)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2], [0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x741a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xa1b, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) ioctl$UI_SET_EVBIT(r6, 0x40045564, 0x11) ioctl$UI_DEV_CREATE(r6, 0x5501) preadv(r5, &(0x7f0000003780)=[{&(0x7f0000001300)=""/170, 0xaa}], 0x1, 0xffff, 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f00000001c0)='\x00', &(0x7f0000000240)='{}k%@\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) gettid() readv(r4, &(0x7f0000000600)=[{&(0x7f0000000080)=""/3, 0x3}, {&(0x7f0000000640)=""/229, 0xe5}], 0x2) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x7c}}, 0x10) 1m4.369821102s ago: executing program 4 (id=287): socket$phonet_pipe(0x23, 0x5, 0x2) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x20082, 0x0) write$sequencer(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="81010000050004008104"], 0x11) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)=ANY=[@ANYRES16=r1], 0x114}], 0x1, 0x0, 0x0, 0x40000}, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x5, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000180)) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) ioctl$TIOCL_BLANKSCREEN(0xffffffffffffffff, 0x541c, 0x0) ioctl$TIOCL_UNBLANKSCREEN(0xffffffffffffffff, 0x541c, &(0x7f00000000c0)) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x12) openat$vimc2(0xffffffffffffff9c, 0x0, 0x2, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) move_mount(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0xffffffffffffffff, 0x0, 0x30) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000020000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000000006e638500000086000000850000000700000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r7}, 0x10) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) lsetxattr$system_posix_acl(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140)='system.posix_acl_access\x00', 0x0, 0x0, 0x0) 1m1.333377713s ago: executing program 5 (id=290): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1m0.929971692s ago: executing program 5 (id=291): r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1, 0x4}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000780)="f4000900062b8925fe80000000000000dc8b850f238466cc00007a000000ad6e911b51818462b400", 0x28}], 0x1}, 0x0) 1m0.617615929s ago: executing program 5 (id=292): r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030031000b12d25a80648c2594f90124fc601006034002200600053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 1m0.210577088s ago: executing program 5 (id=295): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) socket(0x1e, 0x2, 0x0) syz_emit_ethernet(0x9a, &(0x7f0000000600)=ANY=[@ANYRES32=0x41424344, @ANYRES32=0x41424344], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000300)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$radio(0x0, 0x2, 0x2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="e00000001500000029bd7000000000006469676573745f6e756c6c2d67656e65726963"], 0xe0}}, 0x0) sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f0000000120003"], 0xf0}}, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x510, 0x0, 0x138, 0x210, 0x0, 0x138, 0x478, 0x478, 0x478, 0x478, 0x478, 0x6, 0x0, {[{{@ip={@broadcast, @multicast1=0xe0007600, 0x0, 0x0, 'geneve1\x00', 'ip6gre0\x00'}, 0x0, 0x70, 0x98, 0x0, {0x0, 0x2000000}}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'batadv_slave_1\x00', 'veth1_virt_wifi\x00', {}, {}, 0x11}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan1\x00', 'nr0\x00'}, 0x0, 0xb0, 0xd8, 0x0, {}, [@common=@unspec=@connlimit={{0x40}}]}, @unspec=@CHECKSUM={0x28}}, {{@ip={@loopback, @multicast2, 0x0, 0x0, 'syzkaller0\x00', 'veth1_to_team\x00'}, 0x0, 0x70, 0x198}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x0, 'system_u:object_r:dbusd_etc_t:s0\x00'}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0xa0, 0xd0, 0x0, {}, [@common=@unspec=@mac={{0x30}, {@multicast}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x570) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) syz_open_dev$video4linux(0x0, 0x6, 0x440400) socket(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_WRITE_LE_HOST_SUPPORTED={{0x12}, 0xa}}}, 0x7) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x38, r1, 0x1, 0x70bd2c, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x148c}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}]]}, 0x38}}, 0x40000) 58.156229713s ago: executing program 33 (id=276): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x6) socket$inet6_udp(0xa, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000740)=0x2) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000001c0)={0x14, 0x2c, 0x1, 0x0, 0x0, "", [@nested={0x4}]}, 0x14}], 0x1, 0x0, 0x0, 0x20000000}, 0x28044) 49.019771703s ago: executing program 34 (id=287): socket$phonet_pipe(0x23, 0x5, 0x2) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x20082, 0x0) write$sequencer(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="81010000050004008104"], 0x11) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)=ANY=[@ANYRES16=r1], 0x114}], 0x1, 0x0, 0x0, 0x40000}, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x5, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000180)) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) ioctl$TIOCL_BLANKSCREEN(0xffffffffffffffff, 0x541c, 0x0) ioctl$TIOCL_UNBLANKSCREEN(0xffffffffffffffff, 0x541c, &(0x7f00000000c0)) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x12) openat$vimc2(0xffffffffffffff9c, 0x0, 0x2, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) move_mount(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0xffffffffffffffff, 0x0, 0x30) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000020000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000000006e638500000086000000850000000700000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r7}, 0x10) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) lsetxattr$system_posix_acl(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140)='system.posix_acl_access\x00', 0x0, 0x0, 0x0) 48.569330409s ago: executing program 6 (id=299): ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x9}}, './file0\x00'}) socket$inet_udp(0x2, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x3, r1, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) mremap(&(0x7f00007d6000/0x3000)=nil, 0x3000, 0x3000, 0x0, &(0x7f00007d5000/0x3000)=nil) socket$kcm(0x10, 0x2, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r3, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) pselect6(0x0, 0x0, 0x0, &(0x7f0000000200)={0x1fe}, 0x0, 0x0) r4 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f0000002c80)=0x142, 0x4) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0500000004000010002400000a000000ff3265a7", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/14], 0x48) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {}, {0xfff1, 0xffff}, {0xfff1, 0x1}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x8}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x8}]}, 0x40}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r5], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', r7, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) write$tun(r0, &(0x7f0000000080)={@void, @val={0x5, 0x1, 0x4, 0x9cd, 0xfffa, 0x1ff}, @mpls={[{0xffffb, 0x0, 0x1}, {0x6, 0x0, 0x1}, {0x3, 0x0, 0x1}, {0x1000}, {0x4}, {0x9, 0x0, 0x1}, {0xed, 0x0, 0x1}], @generic="6df2d897af526d383bd6f8108bc017c0f86c3e69dbe45dfd7b651b2294614309803eb5f6257b0d978573dad8749ad47e1a754356e99c885f8e125be9f6388d76793253c76eaa68fd3301fee479d72b6884844cbe5a663bfe030228bc7c8d500b5578eab054487e390d54d980685873e22590f8abe9"}}, 0x9b) 42.770719629s ago: executing program 35 (id=295): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) socket(0x1e, 0x2, 0x0) syz_emit_ethernet(0x9a, &(0x7f0000000600)=ANY=[@ANYRES32=0x41424344, @ANYRES32=0x41424344], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000300)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$radio(0x0, 0x2, 0x2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="e00000001500000029bd7000000000006469676573745f6e756c6c2d67656e65726963"], 0xe0}}, 0x0) sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f0000000120003"], 0xf0}}, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x510, 0x0, 0x138, 0x210, 0x0, 0x138, 0x478, 0x478, 0x478, 0x478, 0x478, 0x6, 0x0, {[{{@ip={@broadcast, @multicast1=0xe0007600, 0x0, 0x0, 'geneve1\x00', 'ip6gre0\x00'}, 0x0, 0x70, 0x98, 0x0, {0x0, 0x2000000}}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'batadv_slave_1\x00', 'veth1_virt_wifi\x00', {}, {}, 0x11}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan1\x00', 'nr0\x00'}, 0x0, 0xb0, 0xd8, 0x0, {}, [@common=@unspec=@connlimit={{0x40}}]}, @unspec=@CHECKSUM={0x28}}, {{@ip={@loopback, @multicast2, 0x0, 0x0, 'syzkaller0\x00', 'veth1_to_team\x00'}, 0x0, 0x70, 0x198}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x0, 'system_u:object_r:dbusd_etc_t:s0\x00'}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0xa0, 0xd0, 0x0, {}, [@common=@unspec=@mac={{0x30}, {@multicast}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x570) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) syz_open_dev$video4linux(0x0, 0x6, 0x440400) socket(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_WRITE_LE_HOST_SUPPORTED={{0x12}, 0xa}}}, 0x7) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x38, r1, 0x1, 0x70bd2c, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x148c}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}]]}, 0x38}}, 0x40000) 42.466003974s ago: executing program 1 (id=325): r0 = socket$kcm(0xa, 0x3, 0x106) setsockopt$sock_attach_bpf(r0, 0x29, 0x1a, 0x0, 0x4) 42.072526321s ago: executing program 1 (id=327): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x36, 0x0, &(0x7f0000000240)="b9ff060000000000000014f086dd022800000052089a337015644230b2ec8ba1e12b3800fbf5a0a2b4bde92441657196e0452a8d35ac", 0x0, 0xffffffff, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 41.664026985s ago: executing program 1 (id=329): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001a80)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000800000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000140)='contention_end\x00', r0}, 0x10) r1 = socket$kcm(0x10, 0x3, 0x10) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030031000b12d25a80648c2594f90124fc601006034002200600053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 41.136871863s ago: executing program 1 (id=331): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x2, 0x4, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 40.741696297s ago: executing program 1 (id=333): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, 0x0, 0x200400e1) setrlimit(0xf, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x0) socket$inet6(0xa, 0x80002, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r4 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCSCLOCKID(r4, 0x8008450a, 0xfffffffffffffffe) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000027c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000f000000850000005000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='sys_exit\x00', r5, 0x0, 0x800000000000000}, 0x18) r6 = socket$netlink(0x10, 0x3, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{0x0, 0xfffffea2}, {&(0x7f0000000580)="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", 0x13c}], 0x2}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8b18, &(0x7f0000000000)={'wlan0\x00'}) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001800)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a300000000048000000030a01020000000000000000010000000900030073797a320000000014000480080002400000000408000140000000000900010073797a300000000008000a400000000284000000060a010400000000000000000100000008000b40000000000900010073797a30"], 0x124}}, 0x0) 35.376050498s ago: executing program 1 (id=335): pipe(0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="1c0000005e007f029e3b470d649b72ab25399cd956c07dead6a93690", 0x1c}], 0x1}, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/input/devices\x00', 0x0, 0x0) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$uinput_user_dev(r4, &(0x7f0000000080)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2], [0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x741a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xa1b, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) ioctl$UI_SET_EVBIT(r4, 0x40045564, 0x11) 33.953155531s ago: executing program 3 (id=340): r0 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x10008, 0xfffffffffffffffc}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xe7015000) socket$inet_sctp(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000240)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r4, 0x29, 0x41, 0x0, 0x48) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) close(r5) openat(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/pids.max\x00', 0x2, 0x0) read$FUSE(r5, &(0x7f0000002d00)={0x2020}, 0x2020) io_uring_enter(0xffffffffffffffff, 0x47f5, 0x0, 0x0, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x11}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0) listen(r0, 0x3) r7 = socket(0x10, 0x3, 0x0) r8 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'veth1_to_bridge\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000c40)=@newqdisc={0x6c, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x40, 0x2, [@TCA_TBF_PBURST={0x8, 0x7, 0x1f77}, @TCA_TBF_PRATE64={0xc, 0x5, 0x14ec469775bc0058}, @TCA_TBF_PARMS={0x28, 0x1, {{0x0, 0x2, 0x0, 0x0, 0x0, 0x80000000}, {0x0, 0x2, 0x0, 0x0, 0x0, 0x3}, 0xffffffff, 0x4000000}}]}}]}, 0x6c}}, 0x0) fcntl$getown(r8, 0x9) 31.503814273s ago: executing program 36 (id=299): ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x9}}, './file0\x00'}) socket$inet_udp(0x2, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x3, r1, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) mremap(&(0x7f00007d6000/0x3000)=nil, 0x3000, 0x3000, 0x0, &(0x7f00007d5000/0x3000)=nil) socket$kcm(0x10, 0x2, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r3, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) pselect6(0x0, 0x0, 0x0, &(0x7f0000000200)={0x1fe}, 0x0, 0x0) r4 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f0000002c80)=0x142, 0x4) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0500000004000010002400000a000000ff3265a7", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/14], 0x48) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {}, {0xfff1, 0xffff}, {0xfff1, 0x1}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x8}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x8}]}, 0x40}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r5], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', r7, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) write$tun(r0, &(0x7f0000000080)={@void, @val={0x5, 0x1, 0x4, 0x9cd, 0xfffa, 0x1ff}, @mpls={[{0xffffb, 0x0, 0x1}, {0x6, 0x0, 0x1}, {0x3, 0x0, 0x1}, {0x1000}, {0x4}, {0x9, 0x0, 0x1}, {0xed, 0x0, 0x1}], @generic="6df2d897af526d383bd6f8108bc017c0f86c3e69dbe45dfd7b651b2294614309803eb5f6257b0d978573dad8749ad47e1a754356e99c885f8e125be9f6388d76793253c76eaa68fd3301fee479d72b6884844cbe5a663bfe030228bc7c8d500b5578eab054487e390d54d980685873e22590f8abe9"}}, 0x9b) 22.348443025s ago: executing program 3 (id=342): pipe(0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="1c0000005e007f029e3b470d649b72ab25399cd956c07dead6a93690", 0x1c}], 0x1}, 0x0) fsopen(&(0x7f0000000280)='ceph\x00', 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/input/devices\x00', 0x0, 0x0) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$uinput_user_dev(r4, &(0x7f0000000080)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2], [0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x741a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xa1b, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) ioctl$UI_SET_EVBIT(r4, 0x40045564, 0x11) 20.25401809s ago: executing program 37 (id=335): pipe(0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="1c0000005e007f029e3b470d649b72ab25399cd956c07dead6a93690", 0x1c}], 0x1}, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/input/devices\x00', 0x0, 0x0) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$uinput_user_dev(r4, &(0x7f0000000080)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2], [0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x741a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xa1b, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) ioctl$UI_SET_EVBIT(r4, 0x40045564, 0x11) 15.535655234s ago: executing program 3 (id=344): r0 = socket$kcm(0xa, 0x922000000003, 0x11) r1 = socket$kcm(0x11, 0x2, 0x0) r2 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r2, 0x107, 0x12, &(0x7f00000000c0)=r1, 0x8) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1, 0x4}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000780)="f4000900062b8925fe80000000000000dc8b850f238466cc00007a000000ad6e911b51818462b400", 0x28}], 0x1}, 0x0) 15.326167461s ago: executing program 3 (id=345): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) recvmsg$kcm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000a80)=""/4096, 0x1000}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030033000b35d25a806c8c6f94f90324fc60100005000a000200053582c137153e37000c0680050002000300", 0x33fe0}], 0x1}, 0x0) 15.159547014s ago: executing program 3 (id=346): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x36, 0x0, &(0x7f0000000240)="b9ff060000000000000014f086dd022800000052089a337015644230b2ec8ba1e12b3800fbf5a0a2b4bde92441657196e0452a8d35ac", 0x0, 0xffffffff, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 15.081315928s ago: executing program 3 (id=347): r0 = socket$netlink(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b18, &(0x7f0000000000)={'wlan0\x00'}) 0s ago: executing program 38 (id=347): r0 = socket$netlink(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b18, &(0x7f0000000000)={'wlan0\x00'}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.37' (ED25519) to the list of known hosts. [ 56.970833][ T5806] cgroup: Unknown subsys name 'net' [ 57.100457][ T5806] cgroup: Unknown subsys name 'cpuset' [ 57.108428][ T5806] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 58.353453][ T5806] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 60.703718][ T5829] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 60.711402][ T5829] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 60.719969][ T5829] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 60.729104][ T5834] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 60.746943][ T5834] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 60.756848][ T5834] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 60.760903][ T5829] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 60.768531][ T5833] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 60.772988][ T5829] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 60.779453][ T5834] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 60.794128][ T5833] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 60.796812][ T5829] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 60.802137][ T5834] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 60.810555][ T5829] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 60.815644][ T5833] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 60.822756][ T5829] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 60.831756][ T5833] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 60.837376][ T5829] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 60.844247][ T5833] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 60.850519][ T5829] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 60.857310][ T5833] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 60.865950][ T5829] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 60.878985][ T5829] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 60.879299][ T5827] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 60.887163][ T5829] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 60.894598][ T5827] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 60.900462][ T5829] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 60.917427][ T5827] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 60.925324][ T5132] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 60.936383][ T5132] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 61.284178][ T5818] chnl_net:caif_netlink_parms(): no params data found [ 61.413130][ T5816] chnl_net:caif_netlink_parms(): no params data found [ 61.447231][ T5822] chnl_net:caif_netlink_parms(): no params data found [ 61.469610][ T5831] chnl_net:caif_netlink_parms(): no params data found [ 61.543687][ T5819] chnl_net:caif_netlink_parms(): no params data found [ 61.563978][ T5818] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.572848][ T5818] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.582150][ T5818] bridge_slave_0: entered allmulticast mode [ 61.589425][ T5818] bridge_slave_0: entered promiscuous mode [ 61.598183][ T5818] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.605318][ T5818] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.612543][ T5818] bridge_slave_1: entered allmulticast mode [ 61.619443][ T5818] bridge_slave_1: entered promiscuous mode [ 61.713886][ T5816] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.721855][ T5816] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.729498][ T5816] bridge_slave_0: entered allmulticast mode [ 61.736070][ T5816] bridge_slave_0: entered promiscuous mode [ 61.754789][ T5818] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.766090][ T5818] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.795716][ T5816] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.802986][ T5816] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.811048][ T5816] bridge_slave_1: entered allmulticast mode [ 61.817879][ T5816] bridge_slave_1: entered promiscuous mode [ 61.839307][ T5822] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.846420][ T5822] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.857043][ T5822] bridge_slave_0: entered allmulticast mode [ 61.863577][ T5822] bridge_slave_0: entered promiscuous mode [ 61.897892][ T5831] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.904988][ T5831] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.912344][ T5831] bridge_slave_0: entered allmulticast mode [ 61.918953][ T5831] bridge_slave_0: entered promiscuous mode [ 61.925948][ T5831] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.933323][ T5831] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.940563][ T5831] bridge_slave_1: entered allmulticast mode [ 61.947359][ T5831] bridge_slave_1: entered promiscuous mode [ 61.963752][ T5818] team0: Port device team_slave_0 added [ 61.970781][ T5822] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.977954][ T5822] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.985070][ T5822] bridge_slave_1: entered allmulticast mode [ 61.991777][ T5822] bridge_slave_1: entered promiscuous mode [ 62.015448][ T5816] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.038793][ T5818] team0: Port device team_slave_1 added [ 62.055763][ T5819] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.066005][ T5819] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.073332][ T5819] bridge_slave_0: entered allmulticast mode [ 62.080648][ T5819] bridge_slave_0: entered promiscuous mode [ 62.090446][ T5816] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.104103][ T5831] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.121312][ T5818] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.128470][ T5818] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.154942][ T5818] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.169304][ T5822] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.180819][ T5822] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.190547][ T5819] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.197922][ T5819] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.205071][ T5819] bridge_slave_1: entered allmulticast mode [ 62.211827][ T5819] bridge_slave_1: entered promiscuous mode [ 62.234031][ T5831] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.251977][ T5818] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.260850][ T5818] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.287379][ T5818] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.321860][ T5819] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.341931][ T5816] team0: Port device team_slave_0 added [ 62.358338][ T5831] team0: Port device team_slave_0 added [ 62.366190][ T5831] team0: Port device team_slave_1 added [ 62.390622][ T5819] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.402935][ T5816] team0: Port device team_slave_1 added [ 62.420304][ T5822] team0: Port device team_slave_0 added [ 62.452650][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.462544][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.488618][ T5831] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.515798][ T5822] team0: Port device team_slave_1 added [ 62.537983][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.544956][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.571168][ T5831] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.585525][ T5818] hsr_slave_0: entered promiscuous mode [ 62.592010][ T5818] hsr_slave_1: entered promiscuous mode [ 62.610397][ T5819] team0: Port device team_slave_0 added [ 62.616698][ T5816] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.623885][ T5816] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.649987][ T5816] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.661825][ T5816] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.668837][ T5816] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.694880][ T5816] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.720787][ T5819] team0: Port device team_slave_1 added [ 62.744181][ T5822] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.751390][ T5822] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.777403][ T5822] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.789888][ T5822] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.796918][ T5822] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.822954][ T5822] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.862287][ T5831] hsr_slave_0: entered promiscuous mode [ 62.869592][ T5831] hsr_slave_1: entered promiscuous mode [ 62.875490][ T5831] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 62.883448][ T5831] Cannot create hsr debugfs directory [ 62.900392][ T5819] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.907731][ T5819] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.934733][ T5819] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.934764][ T5821] Bluetooth: hci3: command tx timeout [ 62.952318][ T5819] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.959592][ T5819] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.985888][ T5819] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.997542][ T5821] Bluetooth: hci4: command tx timeout [ 63.003376][ T5821] Bluetooth: hci2: command tx timeout [ 63.008712][ T5132] Bluetooth: hci0: command tx timeout [ 63.009345][ T5830] Bluetooth: hci1: command tx timeout [ 63.067941][ T5816] hsr_slave_0: entered promiscuous mode [ 63.074069][ T5816] hsr_slave_1: entered promiscuous mode [ 63.080636][ T5816] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 63.089686][ T5816] Cannot create hsr debugfs directory [ 63.162263][ T5819] hsr_slave_0: entered promiscuous mode [ 63.168847][ T5819] hsr_slave_1: entered promiscuous mode [ 63.174874][ T5819] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 63.183087][ T5819] Cannot create hsr debugfs directory [ 63.198448][ T5822] hsr_slave_0: entered promiscuous mode [ 63.204563][ T5822] hsr_slave_1: entered promiscuous mode [ 63.210842][ T5822] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 63.218894][ T5822] Cannot create hsr debugfs directory [ 63.489543][ T5818] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 63.504291][ T5818] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 63.513881][ T5818] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 63.530999][ T5818] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 63.565178][ T5831] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 63.584499][ T5831] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 63.607801][ T5831] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 63.617879][ T5831] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 63.659213][ T5816] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 63.696981][ T5816] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 63.706576][ T5816] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 63.737396][ T5816] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 63.798243][ T5819] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 63.809211][ T5819] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 63.820861][ T5819] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 63.848221][ T5819] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 63.900366][ T5831] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.922814][ T5822] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 63.931954][ T5822] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 63.959263][ T5818] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.966123][ T5822] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 63.975893][ T5822] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 64.004447][ T5831] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.033185][ T5818] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.047164][ T1146] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.054465][ T1146] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.096683][ T2946] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.103792][ T2946] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.114566][ T2946] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.121663][ T2946] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.130927][ T2946] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.138027][ T2946] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.188566][ T5816] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.241376][ T5819] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.253594][ T5816] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.272113][ T5818] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 64.300465][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.307617][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.341272][ T1146] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.348434][ T1146] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.383918][ T5819] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.433740][ T2946] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.440920][ T2946] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.477356][ T2946] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.484496][ T2946] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.555216][ T5816] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 64.571782][ T5816] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 64.616232][ T5822] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.649842][ T5831] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.664440][ T5818] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.709727][ T5822] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.721617][ T5819] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 64.743223][ T5819] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 64.810952][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.818142][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.885755][ T1146] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.892917][ T1146] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.915431][ T5818] veth0_vlan: entered promiscuous mode [ 64.959756][ T5816] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.971376][ T5818] veth1_vlan: entered promiscuous mode [ 65.002622][ T5830] Bluetooth: hci3: command tx timeout [ 65.046088][ T5816] veth0_vlan: entered promiscuous mode [ 65.077578][ T5830] Bluetooth: hci1: command tx timeout [ 65.078454][ T5132] Bluetooth: hci2: command tx timeout [ 65.082999][ T5830] Bluetooth: hci0: command tx timeout [ 65.088941][ T5132] Bluetooth: hci4: command tx timeout [ 65.106002][ T5819] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.141188][ T5816] veth1_vlan: entered promiscuous mode [ 65.165710][ T5818] veth0_macvtap: entered promiscuous mode [ 65.184354][ T5818] veth1_macvtap: entered promiscuous mode [ 65.264526][ T5818] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.279585][ T5819] veth0_vlan: entered promiscuous mode [ 65.292920][ T5818] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.303687][ T5831] veth0_vlan: entered promiscuous mode [ 65.311328][ T5816] veth0_macvtap: entered promiscuous mode [ 65.323744][ T5819] veth1_vlan: entered promiscuous mode [ 65.338902][ T5816] veth1_macvtap: entered promiscuous mode [ 65.349200][ T5818] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.359506][ T5818] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.368493][ T5818] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.377496][ T5818] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.399627][ T5831] veth1_vlan: entered promiscuous mode [ 65.445953][ T5831] veth0_macvtap: entered promiscuous mode [ 65.469904][ T5819] veth0_macvtap: entered promiscuous mode [ 65.482112][ T5816] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.493316][ T5816] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.504988][ T5816] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.519057][ T5831] veth1_macvtap: entered promiscuous mode [ 65.532536][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.543340][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.554296][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.565363][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.578961][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.588838][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.599742][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.610587][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.625086][ T5819] veth1_macvtap: entered promiscuous mode [ 65.645070][ T5822] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.664199][ T5816] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.675434][ T5816] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.685710][ T5816] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.701928][ T5816] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.712785][ T5816] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.722919][ T5831] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.731875][ T5831] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.740733][ T5831] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.749848][ T5831] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.783929][ T5816] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.793101][ T5816] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.802497][ T5816] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.812205][ T5816] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.840481][ T5819] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.851197][ T5819] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.861664][ T5819] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.872409][ T5819] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.882337][ T5819] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.893021][ T5819] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.903835][ T5819] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.921179][ T3537] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.933501][ T3537] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.977714][ T5819] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.991303][ T5819] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.001609][ T5819] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.012378][ T5819] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.022511][ T5819] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.033705][ T5819] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.046028][ T5819] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.079586][ T5819] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.088720][ T5819] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.097550][ T5819] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.106242][ T5819] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.133009][ T3537] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.145918][ T5822] veth0_vlan: entered promiscuous mode [ 66.157667][ T3537] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.212240][ T5822] veth1_vlan: entered promiscuous mode [ 66.256041][ T3474] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.280498][ T3474] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.286413][ T5818] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 66.305215][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.314392][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.356712][ T3474] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.357569][ T5822] veth0_macvtap: entered promiscuous mode [ 66.371540][ T3474] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.388721][ T5822] veth1_macvtap: entered promiscuous mode [ 66.412121][ T5822] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.422636][ T5822] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.433086][ T5822] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.444965][ T5822] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.455059][ T5822] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.465772][ T5822] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.475902][ T5822] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.486612][ T5822] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.497632][ T5822] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.509672][ T5822] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.520369][ T5822] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.530355][ T5822] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.541260][ T5822] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.551260][ T5822] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.561719][ T5822] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.571563][ T5822] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.582059][ T5822] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.592894][ T5822] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.602827][ T5822] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.611605][ T5822] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.620418][ T5822] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.629263][ T5822] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.685410][ T72] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.693433][ T72] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.753327][ T1146] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.766079][ T1146] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.769103][ T2946] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.814764][ T2946] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.935847][ T3474] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.970270][ T3474] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.045170][ T5907] warning: `syz.3.6' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 67.078119][ T5821] Bluetooth: hci3: command tx timeout [ 67.103383][ T72] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.138080][ T72] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.161050][ T5821] Bluetooth: hci0: command tx timeout [ 67.166510][ T5821] Bluetooth: hci2: command tx timeout [ 67.172654][ T5821] Bluetooth: hci1: command tx timeout [ 67.179109][ T5821] Bluetooth: hci4: command tx timeout [ 67.383723][ T5919] netlink: 'syz.1.7': attribute type 3 has an invalid length. [ 67.427830][ T5919] netlink: 'syz.1.7': attribute type 4 has an invalid length. [ 67.435537][ T5919] netlink: 'syz.1.7': attribute type 7 has an invalid length. [ 67.608327][ T5919] netlink: 'syz.1.7': attribute type 8 has an invalid length. [ 67.615905][ T5919] netlink: 'syz.1.7': attribute type 7 has an invalid length. [ 67.626645][ T5919] netlink: 206668 bytes leftover after parsing attributes in process `syz.1.7'. [ 67.928707][ T5934] netlink: 'syz.1.14': attribute type 3 has an invalid length. [ 67.946596][ T5934] netlink: 'syz.1.14': attribute type 2 has an invalid length. [ 67.984600][ T5934] netlink: 'syz.1.14': attribute type 5 has an invalid length. [ 68.009761][ T5934] netlink: 'syz.1.14': attribute type 6 has an invalid length. [ 68.039318][ T5934] netlink: 198124 bytes leftover after parsing attributes in process `syz.1.14'. [ 68.181056][ T5941] netlink: 14568 bytes leftover after parsing attributes in process `syz.2.18'. [ 68.722081][ T5954] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 68.728860][ T5954] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 69.159171][ T5830] Bluetooth: hci3: command tx timeout [ 69.237087][ T5830] Bluetooth: hci4: command tx timeout [ 69.242552][ T5830] Bluetooth: hci0: command tx timeout [ 69.248457][ T5821] Bluetooth: hci1: command tx timeout [ 69.248522][ T5132] Bluetooth: hci2: command tx timeout [ 69.568246][ T5988] netlink: 'syz.4.39': attribute type 29 has an invalid length. [ 69.862521][ T5998] netlink: 14380 bytes leftover after parsing attributes in process `syz.2.40'. [ 70.099959][ T6013] netlink: 22 bytes leftover after parsing attributes in process `syz.1.50'. [ 70.256604][ T6010] netlink: 16255 bytes leftover after parsing attributes in process `syz.3.48'. [ 70.556553][ T6033] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 70.633030][ T6035] netlink: 60 bytes leftover after parsing attributes in process `syz.4.57'. [ 70.682782][ T6031] netlink: 60 bytes leftover after parsing attributes in process `syz.4.57'. [ 71.357481][ T6039] netlink: 60 bytes leftover after parsing attributes in process `syz.4.57'. [ 71.663579][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.670313][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.762014][ T6050] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 71.787278][ T8] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 73.038171][ T6053] netlink: 4 bytes leftover after parsing attributes in process `syz.1.62'. [ 73.344125][ T6053] bridge_slave_1: left allmulticast mode [ 73.352483][ T6053] bridge_slave_1: left promiscuous mode [ 73.358890][ T6053] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.389427][ T6053] bridge_slave_0: left allmulticast mode [ 73.396160][ T6053] bridge_slave_0: left promiscuous mode [ 73.402317][ T6053] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.490848][ T8] usb 4-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 73.523165][ T8] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 73.753812][ T5871] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 73.922282][ T8] usb 4-1: string descriptor 0 read error: -71 [ 73.928703][ T8] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 73.935495][ T5871] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 73.937876][ T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 73.943752][ T8] usb 4-1: can't set config #1, error -71 [ 74.006493][ T5871] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 74.043088][ T8] usb 4-1: USB disconnect, device number 2 [ 74.265880][ T5871] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 74.275163][ T5871] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 74.283800][ T5871] usb 3-1: Product: syz [ 74.288051][ T5871] usb 3-1: Manufacturer: syz [ 74.292665][ T5871] usb 3-1: SerialNumber: syz [ 74.940289][ T6078] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 74.992287][ T6078] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 75.081866][ T6061] ieee802154 phy0 wpan0: encryption failed: -22 [ 75.118985][ T5871] usb 3-1: 0:2 : does not exist [ 75.150210][ T5871] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 75.224124][ T5871] usb 3-1: USB disconnect, device number 2 [ 75.246836][ T5872] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 75.257010][ T6089] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 75.497056][ T25] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 75.504711][ T5872] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 75.515128][ T5872] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 75.528614][ T5872] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 75.537892][ T5872] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 75.547526][ T5872] usb 1-1: SerialNumber: syz [ 75.650495][ T5828] udevd[5828]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 75.666984][ T25] usb 2-1: Using ep0 maxpacket: 8 [ 75.682081][ T25] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 75.696138][ T25] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 75.725042][ T25] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 75.773397][ T5872] usb 1-1: 0:2 : does not exist [ 75.778679][ T25] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 75.814527][ T25] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 75.859969][ T5872] usb 1-1: USB disconnect, device number 2 [ 75.875412][ T25] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 75.903975][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 75.953027][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 75.962251][ T0] NOHZ tick-stop error: local softirq work is pending, handler #340!!! [ 75.976815][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 76.138164][ T5828] udevd[5828]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 76.165950][ T25] usb 2-1: usb_control_msg returned -32 [ 76.187030][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 76.200426][ T25] usbtmc 2-1:16.0: can't read capabilities [ 76.217067][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 77.079490][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 77.088406][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 77.096958][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 77.182256][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 77.284278][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 78.628732][ T5900] usb 2-1: USB disconnect, device number 2 [ 78.877006][ T8] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 79.239950][ T8] usb 1-1: device descriptor read/64, error -71 [ 79.354843][ T6155] netlink: 4 bytes leftover after parsing attributes in process `syz.1.78'. [ 79.611452][ T6159] Bluetooth: MGMT ver 1.23 [ 79.807701][ T8] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 80.060740][ T8] usb 1-1: device descriptor read/64, error -71 [ 80.223492][ T8] usb usb1-port1: attempt power cycle [ 80.607072][ T5858] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 80.640355][ T8] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 80.677367][ T8] usb 1-1: device descriptor read/8, error -71 [ 80.769038][ T5858] usb 3-1: config 0 has an invalid interface number: 11 but max is 0 [ 80.786834][ T5858] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 80.806839][ T5858] usb 3-1: config 0 has no interface number 0 [ 80.823229][ T5858] usb 3-1: config 0 interface 11 altsetting 253 endpoint 0x7 has invalid wMaxPacketSize 0 [ 80.846853][ T5858] usb 3-1: config 0 interface 11 altsetting 253 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 80.846941][ T5872] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 80.879920][ T5858] usb 3-1: config 0 interface 11 has no altsetting 0 [ 81.375233][ T5872] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 81.616622][ T8] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 81.624350][ T5858] usb 3-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 81.656920][ T5872] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 81.669161][ T5858] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 81.690548][ T5872] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 81.709461][ T5858] usb 3-1: config 0 descriptor?? [ 81.722369][ T5872] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 81.724424][ T8] usb 1-1: device descriptor read/8, error -71 [ 81.733202][ T5872] usb 2-1: Product: syz [ 81.741207][ T5872] usb 2-1: Manufacturer: syz [ 81.745832][ T5872] usb 2-1: SerialNumber: syz [ 81.784807][ T5858] keyspan 3-1:0.11: Keyspan 2 port adapter converter detected [ 81.794406][ T5858] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 87 [ 81.807310][ T5858] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 81 [ 81.815300][ T5858] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 82 [ 81.823158][ T5858] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 1 [ 81.830895][ T5858] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 2 [ 81.838659][ T5858] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 85 [ 81.846442][ T5858] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 5 [ 81.958382][ T5858] usb 3-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 82.649203][ T6177] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 82.658237][ T6177] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 82.668758][ T6177] ieee802154 phy0 wpan0: encryption failed: -22 [ 82.917707][ T5858] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 83 [ 82.925531][ T5858] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 84 [ 82.933407][ T5858] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 3 [ 82.941162][ T5858] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 4 [ 82.948928][ T5858] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 86 [ 82.956700][ T5858] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 6 [ 82.966078][ T8] usb usb1-port1: unable to enumerate USB device [ 82.977845][ T5872] usb 2-1: 0:2 : does not exist [ 83.009610][ T5872] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 83.041769][ T5871] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 83.151973][ T5872] usb 2-1: USB disconnect, device number 3 [ 83.208738][ T5871] usb 5-1: config 0 has no interfaces? [ 83.214554][ T5871] usb 5-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.32 [ 83.257477][ T5871] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 83.265640][ T5858] usb 3-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 83.591357][ T5871] usb 5-1: config 0 descriptor?? [ 83.630861][ T974] cfg80211: failed to load regulatory.db [ 83.690131][ T5858] usb 3-1: USB disconnect, device number 3 [ 83.888639][ T5828] udevd[5828]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 83.914270][ T5858] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 83.927949][ T5858] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 83.937999][ T5858] keyspan 3-1:0.11: device disconnected [ 84.044973][ T6225] netlink: 4 bytes leftover after parsing attributes in process `syz.3.93'. [ 84.054105][ T6225] bridge_slave_1: left allmulticast mode [ 84.059904][ T6225] bridge_slave_1: left promiscuous mode [ 84.066287][ T6225] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.169433][ T6225] bridge_slave_0: left allmulticast mode [ 84.175226][ T6225] bridge_slave_0: left promiscuous mode [ 84.182427][ T6225] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.096599][ T8] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 85.450886][ T8] usb 1-1: Using ep0 maxpacket: 8 [ 85.497715][ T8] usb 1-1: config 26 has an invalid descriptor of length 151, skipping remainder of the config [ 85.502313][ T6252] Zero length message leads to an empty skb [ 85.508479][ T8] usb 1-1: config 26 has 0 interfaces, different from the descriptor's value: 1 [ 85.523295][ T8] usb 1-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 85.532579][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 85.549650][ T5872] usb 5-1: USB disconnect, device number 2 [ 86.460065][ T8] usb 1-1: string descriptor 0 read error: -71 [ 86.521175][ T8] usb 1-1: USB disconnect, device number 7 [ 86.526842][ T47] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 86.999406][ T47] usb 4-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 87.010137][ T47] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 87.056184][ T47] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 87.068863][ T47] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 87.069463][ T8] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 87.087995][ T47] usb 4-1: Product: syz [ 87.102103][ T47] usb 4-1: Manufacturer: syz [ 87.111974][ T47] usb 4-1: SerialNumber: syz [ 87.278661][ T8] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 87.340975][ T8] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 87.357066][ T47] usb 4-1: 0:2 : does not exist [ 87.376268][ T47] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 87.388994][ T8] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 87.420340][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 87.454527][ T47] usb 4-1: USB disconnect, device number 3 [ 87.459993][ T8] usb 1-1: Product: syz [ 87.464607][ T8] usb 1-1: Manufacturer: syz [ 87.476597][ T8] usb 1-1: SerialNumber: syz [ 87.765811][ T6265] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 87.816132][ T6265] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 87.855066][ T6265] ieee802154 phy0 wpan0: encryption failed: -22 [ 87.906954][ T8] usb 1-1: 0:2 : does not exist [ 88.007642][ T6297] netlink: 4 bytes leftover after parsing attributes in process `syz.4.105'. [ 88.016789][ T6297] bridge_slave_1: left allmulticast mode [ 88.022512][ T6297] bridge_slave_1: left promiscuous mode [ 88.029001][ T6297] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.044237][ T5872] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 88.275106][ T5872] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 88.323193][ T6297] bridge_slave_0: left allmulticast mode [ 88.329112][ T6297] bridge_slave_0: left promiscuous mode [ 88.335472][ T6297] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.515034][ T8] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 88.532667][ T5872] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 88.545702][ T5872] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 88.563003][ T5872] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 88.571541][ T5872] usb 3-1: SerialNumber: syz [ 88.605652][ T8] usb 1-1: USB disconnect, device number 8 [ 89.027256][ T5824] udevd[5824]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 89.029422][ T5828] udevd[5828]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 89.049343][ T6316] netlink: 16 bytes leftover after parsing attributes in process `syz.0.109'. [ 89.183739][ T6316] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 89.196267][ T6316] xt_SECMARK: unable to map security context 'system_u:object_r:dbusd_etc_t:s0' [ 89.430835][ T5872] usb 3-1: 0:2 : does not exist [ 89.447030][ T5872] usb 3-1: USB disconnect, device number 4 [ 90.089145][ T5828] udevd[5828]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 90.251757][ T974] libceph: connect (1)[c::]:6789 error -101 [ 90.273554][ T974] libceph: mon0 (1)[c::]:6789 connect error [ 90.578765][ T5858] libceph: connect (1)[c::]:6789 error -101 [ 90.585044][ T5858] libceph: mon0 (1)[c::]:6789 connect error [ 91.147925][ T6325] ceph: No mds server is up or the cluster is laggy [ 91.355851][ T5858] libceph: connect (1)[c::]:6789 error -101 [ 91.382771][ T5858] libceph: mon0 (1)[c::]:6789 connect error [ 92.462931][ T6365] 9pnet_fd: Insufficient options for proto=fd [ 92.476901][ T5872] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 92.657446][ T47] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 92.677641][ T5872] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 92.751773][ T5872] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 92.894685][ T5872] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 92.917073][ T5872] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.925147][ T5872] usb 3-1: Product: syz [ 92.958294][ T5872] usb 3-1: Manufacturer: syz [ 92.962947][ T5872] usb 3-1: SerialNumber: syz [ 93.026950][ T25] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 93.272387][ T25] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 93.306300][ T25] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 93.350536][ T25] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 93.371662][ T25] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 93.386384][ T25] usb 1-1: SerialNumber: syz [ 93.408059][ T6392] binder: 6391:6392 ioctl c0306201 20000080 returned -14 [ 93.433315][ T6359] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 93.807044][ T47] usb 5-1: device descriptor read/64, error -71 [ 94.022394][ T6359] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 94.084563][ T6359] ieee802154 phy0 wpan0: encryption failed: -22 [ 94.146881][ T47] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 94.156111][ T5872] usb 3-1: 0:2 : does not exist [ 94.171399][ T5872] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 94.240070][ T5872] usb 3-1: USB disconnect, device number 5 [ 94.248065][ T25] usb 1-1: 0:2 : does not exist [ 94.262372][ T25] usb 1-1: USB disconnect, device number 9 [ 94.306596][ T6402] bond0: (slave bond_slave_0): Releasing backup interface [ 94.317004][ T47] usb 5-1: Using ep0 maxpacket: 32 [ 94.328537][ T47] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 94.340351][ T6402] bond0: (slave bond_slave_1): Releasing backup interface [ 94.353485][ T47] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 94.382694][ T47] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 94.407632][ T6402] team0: Port device team_slave_0 removed [ 94.424680][ T47] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.433238][ T6402] team0: Port device team_slave_1 removed [ 94.436136][ T47] usb 5-1: config 0 descriptor?? [ 94.448117][ T6402] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 94.453825][ T47] hub 5-1:0.0: USB hub found [ 94.461348][ T6094] udevd[6094]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 94.463263][ T6402] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 94.491402][ T6402] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 94.499357][ T6402] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 94.568029][ T5828] udevd[5828]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 94.678830][ T47] hub 5-1:0.0: 1 port detected [ 94.707986][ T25] libceph: connect (1)[c::]:6789 error -101 [ 94.714130][ T25] libceph: mon0 (1)[c::]:6789 connect error [ 94.723619][ T25] libceph: connect (1)[c::]:6789 error -101 [ 94.738347][ T25] libceph: mon0 (1)[c::]:6789 connect error [ 95.015697][ T5871] libceph: connect (1)[c::]:6789 error -101 [ 95.262259][ T5871] libceph: mon0 (1)[c::]:6789 connect error [ 95.520571][ T6406] ceph: No mds server is up or the cluster is laggy [ 95.606939][ T59] hub 5-1:0.0: activate --> -90 [ 96.490479][ T974] usb 5-1: USB disconnect, device number 4 [ 96.957133][ T6446] binder: 6444:6446 ioctl c0306201 20000080 returned -14 [ 97.094060][ T6446] binder_alloc: 6444: binder_alloc_buf, no vma [ 99.487637][ T8] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 99.696980][ T8] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 99.716908][ T8] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 100.125245][ T8] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 100.134744][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.142894][ T8] usb 2-1: Product: syz [ 100.147487][ T8] usb 2-1: Manufacturer: syz [ 100.578537][ T6497] netlink: 4 bytes leftover after parsing attributes in process `syz.2.146'. [ 100.588132][ T6497] bridge_slave_1: left allmulticast mode [ 100.593963][ T6497] bridge_slave_1: left promiscuous mode [ 100.602051][ T6497] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.107313][ T8] usb 2-1: SerialNumber: syz [ 101.316685][ T6497] bridge_slave_0: left allmulticast mode [ 101.322576][ T6497] bridge_slave_0: left promiscuous mode [ 101.328436][ T6497] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.467837][ T5872] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 101.519877][ T8] usb 2-1: can't set config #1, error -71 [ 101.537178][ T8] usb 2-1: USB disconnect, device number 4 [ 101.854925][ T5872] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 101.866110][ T5872] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 101.888641][ T5872] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 101.898250][ T5872] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 101.907346][ T5872] usb 1-1: SerialNumber: syz [ 102.178429][ T5872] usb 1-1: 0:2 : does not exist [ 102.384408][ T5872] usb 1-1: USB disconnect, device number 10 [ 102.694894][ T6523] binder: 6522:6523 ioctl c0306201 20000080 returned -14 [ 102.703217][ T5871] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 103.435442][ T5828] udevd[5828]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 103.701625][ T5871] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 103.962700][ T5871] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 104.055074][ T5871] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 104.106927][ T5871] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 104.135890][ T5871] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 104.697178][ T6549] netlink: 16 bytes leftover after parsing attributes in process `syz.4.158'. [ 104.731491][ T6549] xt_SECMARK: unable to map security context 'system_u:object_r:dbusd_etc_t:s0' [ 104.794224][ T5871] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 104.818263][ T5871] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 104.853339][ T5871] usb 4-1: Product: syz [ 104.874339][ T5871] usb 4-1: Manufacturer: syz [ 104.906427][ T5871] cdc_wdm 4-1:1.0: skipping garbage [ 104.935445][ T5871] cdc_wdm 4-1:1.0: skipping garbage [ 104.973122][ T5871] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 105.010774][ T5871] cdc_wdm 4-1:1.0: Unknown control protocol [ 105.208211][ T5871] usb 4-1: USB disconnect, device number 5 [ 106.466875][ T5872] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 106.760102][ T5872] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 106.836033][ T5872] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 106.908693][ T5872] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 106.924017][ T5872] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.957924][ T5872] usb 3-1: Product: syz [ 106.962237][ T5872] usb 3-1: Manufacturer: syz [ 107.035531][ T5872] usb 3-1: SerialNumber: syz [ 107.332617][ T6571] A link change request failed with some changes committed already. Interface veth0 may have been left with an inconsistent configuration, please check. [ 107.374983][ T6553] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 107.392120][ T6553] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 107.431355][ T6553] ieee802154 phy0 wpan0: encryption failed: -22 [ 107.499212][ T5872] usb 3-1: 0:2 : does not exist [ 107.508652][ T5872] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 107.586931][ T5872] usb 3-1: USB disconnect, device number 6 [ 107.717145][ T6584] syz.1.162 uses obsolete (PF_INET,SOCK_PACKET) [ 107.829711][ T6587] binder: 6586:6587 ioctl c0306201 20000080 returned -14 [ 107.849268][ T5828] udevd[5828]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 108.460886][ T6605] input: syz1 as /devices/virtual/input/input8 [ 109.479661][ T5872] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 109.644206][ T5872] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 109.842754][ T5872] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 110.006692][ T5872] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 110.498410][ T5872] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 110.506524][ T5872] usb 1-1: SerialNumber: syz [ 111.387084][ T6605] Set syz1 is full, maxelem 65536 reached [ 112.147477][ T5872] usb 1-1: 0:2 : does not exist [ 112.193264][ T5872] usb 1-1: USB disconnect, device number 11 [ 113.644837][ T6645] xt_SECMARK: unable to map security context 'system_u:object_r:dbusd_etc_t:s0' [ 113.716430][ T5828] udevd[5828]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 114.030891][ T59] usb 1-1: new full-speed USB device number 12 using dummy_hcd [ 114.210377][ T59] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 114.283871][ T59] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 114.320166][ T59] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 114.335056][ T59] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.391436][ T59] usb 1-1: Product: syz [ 114.395691][ T59] usb 1-1: Manufacturer: syz [ 114.585083][ T59] usb 1-1: SerialNumber: syz [ 114.876361][ T6656] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 114.901322][ T6656] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 114.948295][ T6656] ieee802154 phy0 wpan0: encryption failed: -22 [ 115.250834][ T59] usb 1-1: 0:2 : does not exist [ 115.264489][ T59] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 115.296910][ T59] usb 1-1: USB disconnect, device number 12 [ 117.447936][ T5828] udevd[5828]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 118.446853][ T8] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 118.637091][ T8] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 118.665887][ T8] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 118.728866][ T8] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 118.773477][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 118.816982][ T8] usb 3-1: SerialNumber: syz [ 119.055942][ T8] usb 3-1: 0:2 : does not exist [ 119.130423][ T8] usb 3-1: USB disconnect, device number 7 [ 120.272931][ T5828] udevd[5828]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 120.611890][ T6749] input: syz0 as /devices/virtual/input/input10 [ 120.618429][ T6749] input: failed to attach handler leds to device input10, error: -6 [ 121.487284][ T6751] workqueue: Failed to create a rescuer kthread for wq "ceph-completion": -EINTR [ 122.185225][ T6771] netlink: 9 bytes leftover after parsing attributes in process `syz.0.198'. [ 122.686830][ T59] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 123.165337][ T59] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 123.175908][ T59] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 123.187225][ T59] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 123.196519][ T59] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.205015][ T59] usb 2-1: Product: syz [ 123.210811][ T59] usb 2-1: Manufacturer: syz [ 123.216598][ T59] usb 2-1: SerialNumber: syz [ 123.470135][ T6767] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 123.482777][ T6767] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 123.487584][ T25] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 123.559687][ T6767] ieee802154 phy0 wpan0: encryption failed: -22 [ 123.578947][ T59] usb 2-1: 0:2 : does not exist [ 123.598359][ T59] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 123.640185][ T59] usb 2-1: USB disconnect, device number 5 [ 123.708136][ T5830] Bluetooth: hci1: unknown advertising packet type: 0xaa [ 123.708210][ T5830] Bluetooth: hci1: unknown advertising packet type: 0x81 [ 123.716294][ T5830] Bluetooth: hci1: Dropping invalid advertising data [ 123.731258][ T5830] Bluetooth: hci1: Malformed LE Event: 0x02 [ 123.868252][ T25] usb 5-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 123.880024][ T25] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 124.030148][ T25] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 124.039582][ T25] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.047854][ T25] usb 5-1: Product: syz [ 124.052182][ T25] usb 5-1: Manufacturer: syz [ 124.057006][ T25] usb 5-1: SerialNumber: syz [ 124.532934][ T25] usb 5-1: 0:2 : does not exist [ 124.571417][ T5828] udevd[5828]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 124.621549][ T25] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 124.654164][ T25] usb 5-1: USB disconnect, device number 5 [ 125.055928][ T6821] xt_SECMARK: unable to map security context 'system_u:object_r:dbusd_etc_t:s0' [ 125.117085][ T5872] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 125.234331][ T6094] udevd[6094]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 125.486062][ T5872] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 125.566488][ T5872] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 125.614986][ T5872] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 125.664986][ T5872] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 125.697584][ T5872] usb 2-1: SerialNumber: syz [ 125.734881][ T29] audit: type=1804 audit(1737280989.699:2): pid=6826 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.0.207" name="/newroot/33/bus/file1" dev="overlay" ino=199 res=1 errno=0 [ 126.492864][ T5872] usb 2-1: 0:2 : does not exist [ 126.525425][ T5872] usb 2-1: USB disconnect, device number 6 [ 126.717953][ T5828] udevd[5828]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 128.543913][ T5872] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 128.877705][ T5872] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 128.953579][ T72] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.974518][ T5872] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 129.090231][ T5872] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 129.153669][ T5872] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.493671][ T5872] usb 5-1: Product: syz [ 129.498061][ T5872] usb 5-1: Manufacturer: syz [ 129.502708][ T5872] usb 5-1: SerialNumber: syz [ 130.427903][ T6859] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 130.443130][ T6859] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 130.580215][ T6859] ieee802154 phy0 wpan0: encryption failed: -22 [ 130.623807][ T5872] usb 5-1: 0:2 : does not exist [ 130.666014][ T5872] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 130.753341][ T5872] usb 5-1: USB disconnect, device number 6 [ 130.837886][ T5132] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 130.849083][ T72] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.914016][ T5132] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 130.915343][ T6874] netlink: 4 bytes leftover after parsing attributes in process `syz.1.219'. [ 130.997089][ T5132] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 131.006229][ T5132] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 131.026256][ T5132] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 131.041394][ T5132] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 131.050646][ T5828] udevd[5828]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 131.441850][ T72] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.590552][ T72] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.869923][ T6892] chnl_net:caif_netlink_parms(): no params data found [ 131.912993][ T6916] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 131.963933][ T6913] xt_TCPMSS: Only works on TCP SYN packets [ 131.991026][ T72] bridge_slave_1: left allmulticast mode [ 132.037014][ T72] bridge_slave_1: left promiscuous mode [ 132.044941][ T72] bridge0: port 2(bridge_slave_1) entered disabled state [ 132.067167][ T974] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 132.138947][ T72] bridge_slave_0: left allmulticast mode [ 132.144637][ T72] bridge_slave_0: left promiscuous mode [ 132.162458][ T72] bridge0: port 1(bridge_slave_0) entered disabled state [ 132.269122][ T974] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 132.283330][ T974] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 132.308748][ T974] usb 2-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 132.370191][ T8] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 132.808719][ T8] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 132.868123][ T8] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 132.886805][ T974] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.907841][ T8] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 132.920743][ T974] usb 2-1: config 0 descriptor?? [ 132.939289][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 132.967791][ T8] usb 4-1: SerialNumber: syz [ 133.099080][ T5132] Bluetooth: hci3: command tx timeout [ 133.106046][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.112521][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.210970][ T8] usb 4-1: 0:2 : does not exist [ 133.243563][ T8] usb 4-1: USB disconnect, device number 6 [ 133.374705][ T72] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 133.408262][ T72] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 133.422525][ T72] bond0 (unregistering): Released all slaves [ 133.492925][ T5828] udevd[5828]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 135.805336][ T8] usb 2-1: USB disconnect, device number 7 [ 135.818533][ T5132] Bluetooth: hci3: command tx timeout [ 136.252874][ T6892] bridge0: port 1(bridge_slave_0) entered blocking state [ 136.260850][ T6892] bridge0: port 1(bridge_slave_0) entered disabled state [ 136.270655][ T6892] bridge_slave_0: entered allmulticast mode [ 136.284774][ T6892] bridge_slave_0: entered promiscuous mode [ 136.944274][ T6892] bridge0: port 2(bridge_slave_1) entered blocking state [ 136.972362][ T6892] bridge0: port 2(bridge_slave_1) entered disabled state [ 136.980318][ T6892] bridge_slave_1: entered allmulticast mode [ 136.988706][ T6892] bridge_slave_1: entered promiscuous mode [ 137.124467][ T6973] xt_SECMARK: unable to map security context 'system_u:object_r:dbusd_etc_t:s0' [ 137.753434][ T6892] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 137.765168][ T6892] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 137.794867][ T6978] netlink: 16 bytes leftover after parsing attributes in process `syz.2.231'. [ 137.876912][ T5132] Bluetooth: hci3: command tx timeout [ 138.423906][ T6983] binder: 6980:6983 ioctl c0306201 20000080 returned -14 [ 139.956423][ T72] hsr_slave_0: left promiscuous mode [ 139.966932][ T5132] Bluetooth: hci3: command tx timeout [ 139.992823][ T72] hsr_slave_1: left promiscuous mode [ 140.014714][ T72] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 140.040344][ T72] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 140.070435][ T72] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 140.092195][ T72] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 140.168156][ T72] veth1_macvtap: left promiscuous mode [ 140.174804][ T72] veth0_macvtap: left promiscuous mode [ 140.180975][ T72] veth1_vlan: left promiscuous mode [ 140.188159][ T72] veth0_vlan: left promiscuous mode [ 140.644402][ T7012] netlink: 4 bytes leftover after parsing attributes in process `syz.3.232'. [ 141.845811][ T72] team0 (unregistering): Port device team_slave_1 removed [ 141.915010][ T72] team0 (unregistering): Port device team_slave_0 removed [ 142.243046][ T6892] team0: Port device team_slave_0 added [ 142.376519][ T6892] team0: Port device team_slave_1 added [ 142.483873][ T7027] FAULT_INJECTION: forcing a failure. [ 142.483873][ T7027] name failslab, interval 1, probability 0, space 0, times 1 [ 142.496825][ T7027] CPU: 0 UID: 0 PID: 7027 Comm: syz.4.238 Not tainted 6.13.0-rc7-syzkaller-00191-gfda5e3f28400 #0 [ 142.507447][ T7027] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 142.517526][ T7027] Call Trace: [ 142.520820][ T7027] [ 142.523764][ T7027] dump_stack_lvl+0x241/0x360 [ 142.528479][ T7027] ? __pfx_dump_stack_lvl+0x10/0x10 [ 142.533699][ T7027] ? __pfx__printk+0x10/0x10 [ 142.538314][ T7027] ? fs_reclaim_acquire+0x93/0x130 [ 142.543447][ T7027] ? __pfx___might_resched+0x10/0x10 [ 142.548758][ T7027] should_fail_ex+0x3b0/0x4e0 [ 142.553457][ T7027] should_failslab+0xac/0x100 [ 142.558160][ T7027] __kmalloc_noprof+0xdd/0x4c0 [ 142.562945][ T7027] ? kstrtouint_from_user+0x128/0x190 [ 142.568332][ T7027] ? tomoyo_realpath_from_path+0xcf/0x5e0 [ 142.574074][ T7027] tomoyo_realpath_from_path+0xcf/0x5e0 [ 142.579647][ T7027] tomoyo_path_number_perm+0x236/0x860 [ 142.585119][ T7027] ? __lock_acquire+0x1397/0x2100 [ 142.590161][ T7027] ? tomoyo_path_number_perm+0x206/0x860 [ 142.595815][ T7027] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 142.601847][ T7027] ? __fget_files+0x2a/0x410 [ 142.606456][ T7027] ? __fget_files+0x2a/0x410 [ 142.611064][ T7027] security_file_ioctl+0xc6/0x2a0 [ 142.616112][ T7027] __se_sys_ioctl+0x46/0x170 [ 142.620728][ T7027] do_syscall_64+0xf3/0x230 [ 142.625247][ T7027] ? clear_bhb_loop+0x35/0x90 [ 142.629945][ T7027] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.635869][ T7027] RIP: 0033:0x7f46a8b85d29 [ 142.640318][ T7027] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 142.659946][ T7027] RSP: 002b:00007f46a69d5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 142.668394][ T7027] RAX: ffffffffffffffda RBX: 00007f46a8d76080 RCX: 00007f46a8b85d29 [ 142.676386][ T7027] RDX: 00000000200000c0 RSI: 0000000000005423 RDI: 0000000000000006 [ 142.684371][ T7027] RBP: 00007f46a69d5090 R08: 0000000000000000 R09: 0000000000000000 [ 142.692366][ T7027] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 142.700362][ T7027] R13: 0000000000000000 R14: 00007f46a8d76080 R15: 00007fff85a9fe88 [ 142.708376][ T7027] [ 142.713049][ T7027] ERROR: Out of memory at tomoyo_realpath_from_path. [ 143.484658][ T7027] sp0: Synchronizing with TNC [ 143.529800][ T6892] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 143.544403][ T6892] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 143.580197][ T6892] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 144.162345][ T6892] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 144.251225][ T6892] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 144.504068][ T6892] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 144.747082][ T7047] netlink: 16 bytes leftover after parsing attributes in process `syz.1.245'. [ 146.156474][ T7055] netlink: 16 bytes leftover after parsing attributes in process `syz.1.247'. [ 146.168803][ T7055] xt_SECMARK: unable to map security context 'system_u:object_r:dbusd_etc_t:s0' [ 146.247960][ T6892] hsr_slave_0: entered promiscuous mode [ 146.326025][ T6892] hsr_slave_1: entered promiscuous mode [ 146.336603][ T6892] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 146.352928][ T6892] Cannot create hsr debugfs directory [ 147.475486][ T6892] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 147.505691][ T6892] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 147.836688][ T7077] FAULT_INJECTION: forcing a failure. [ 147.836688][ T7077] name failslab, interval 1, probability 0, space 0, times 0 [ 147.849493][ T7077] CPU: 0 UID: 0 PID: 7077 Comm: syz.4.252 Not tainted 6.13.0-rc7-syzkaller-00191-gfda5e3f28400 #0 [ 147.860106][ T7077] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 147.870173][ T7077] Call Trace: [ 147.873465][ T7077] [ 147.876406][ T7077] dump_stack_lvl+0x241/0x360 [ 147.881108][ T7077] ? __pfx_dump_stack_lvl+0x10/0x10 [ 147.886324][ T7077] ? __pfx__printk+0x10/0x10 [ 147.890932][ T7077] ? kmem_cache_alloc_node_noprof+0x4f/0x380 [ 147.896925][ T7077] ? __pfx___might_resched+0x10/0x10 [ 147.902236][ T7077] should_fail_ex+0x3b0/0x4e0 [ 147.906936][ T7077] should_failslab+0xac/0x100 [ 147.911636][ T7077] kmem_cache_alloc_node_noprof+0x77/0x380 [ 147.917453][ T7077] ? __alloc_skb+0x1c3/0x440 [ 147.922059][ T7077] __alloc_skb+0x1c3/0x440 [ 147.926492][ T7077] ? __pfx___alloc_skb+0x10/0x10 [ 147.931447][ T7077] ? __rcu_read_unlock+0xa1/0x110 [ 147.936483][ T7077] ? netlink_autobind+0xd6/0x2f0 [ 147.941437][ T7077] ? netlink_autobind+0x2b0/0x2f0 [ 147.946478][ T7077] netlink_sendmsg+0x638/0xcb0 [ 147.951272][ T7077] ? __pfx_netlink_sendmsg+0x10/0x10 [ 147.956580][ T7077] ? __pfx_netlink_sendmsg+0x10/0x10 [ 147.961880][ T7077] __sock_sendmsg+0x221/0x270 [ 147.966579][ T7077] ____sys_sendmsg+0x52a/0x7e0 [ 147.971375][ T7077] ? __pfx_____sys_sendmsg+0x10/0x10 [ 147.976679][ T7077] ? __fget_files+0x2a/0x410 [ 147.981286][ T7077] ? __fget_files+0x2a/0x410 [ 147.985893][ T7077] __sys_sendmsg+0x269/0x350 [ 147.990497][ T7077] ? __pfx_lock_release+0x10/0x10 [ 147.995547][ T7077] ? __pfx___sys_sendmsg+0x10/0x10 [ 148.000689][ T7077] ? __pfx_vfs_write+0x10/0x10 [ 148.005491][ T7077] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 148.011844][ T7077] ? do_syscall_64+0x100/0x230 [ 148.016625][ T7077] ? do_syscall_64+0xb6/0x230 [ 148.021315][ T7077] do_syscall_64+0xf3/0x230 [ 148.025828][ T7077] ? clear_bhb_loop+0x35/0x90 [ 148.030527][ T7077] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 148.036435][ T7077] RIP: 0033:0x7f46a8b85d29 [ 148.040862][ T7077] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 148.060483][ T7077] RSP: 002b:00007f46a69b4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 148.068924][ T7077] RAX: ffffffffffffffda RBX: 00007f46a8d76160 RCX: 00007f46a8b85d29 [ 148.076911][ T7077] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 000000000000000b [ 148.084890][ T7077] RBP: 00007f46a69b4090 R08: 0000000000000000 R09: 0000000000000000 [ 148.092872][ T7077] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 148.100853][ T7077] R13: 0000000000000000 R14: 00007f46a8d76160 R15: 00007fff85a9fe88 [ 148.108854][ T7077] [ 149.029608][ T6892] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 149.073945][ T6892] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 149.136578][ T7080] netlink: 4 bytes leftover after parsing attributes in process `syz.3.250'. [ 149.179732][ T6892] 8021q: adding VLAN 0 to HW filter on device bond0 [ 149.201221][ T6892] 8021q: adding VLAN 0 to HW filter on device team0 [ 149.229127][ T72] bridge0: port 1(bridge_slave_0) entered blocking state [ 149.236319][ T72] bridge0: port 1(bridge_slave_0) entered forwarding state [ 149.295780][ T72] bridge0: port 2(bridge_slave_1) entered blocking state [ 149.302954][ T72] bridge0: port 2(bridge_slave_1) entered forwarding state [ 149.356954][ T47] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 149.530209][ T47] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 149.541011][ T47] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 149.550184][ T47] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.580896][ T47] usb 5-1: config 0 descriptor?? [ 149.600413][ T47] pwc: Askey VC010 type 2 USB webcam detected. [ 150.214961][ T47] pwc: recv_control_msg error -32 req 02 val 2b00 [ 150.260771][ T47] pwc: recv_control_msg error -32 req 02 val 2700 [ 150.312028][ T47] pwc: recv_control_msg error -32 req 02 val 2c00 [ 150.690392][ T47] pwc: recv_control_msg error -32 req 04 val 1000 [ 150.698970][ T47] pwc: recv_control_msg error -32 req 04 val 1300 [ 150.709636][ T47] pwc: recv_control_msg error -32 req 04 val 1400 [ 150.718406][ T47] pwc: recv_control_msg error -32 req 02 val 2000 [ 150.725688][ T47] pwc: recv_control_msg error -32 req 02 val 2100 [ 150.859736][ T7109] netlink: 16 bytes leftover after parsing attributes in process `syz.3.256'. [ 150.939921][ T47] pwc: recv_control_msg error -32 req 04 val 1500 [ 150.975177][ T6892] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 151.155360][ T47] pwc: recv_control_msg error -32 req 02 val 2400 [ 151.208329][ T47] pwc: recv_control_msg error -32 req 02 val 2600 [ 151.232593][ T47] pwc: recv_control_msg error -32 req 02 val 2900 [ 151.255114][ T47] pwc: recv_control_msg error -32 req 02 val 2800 [ 151.473290][ T47] pwc: recv_control_msg error -71 req 04 val 1200 [ 151.509312][ T47] pwc: Registered as video103. [ 151.534290][ T47] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input14 [ 151.613536][ T47] usb 5-1: USB disconnect, device number 7 [ 151.654715][ T6892] veth0_vlan: entered promiscuous mode [ 151.704875][ T6892] veth1_vlan: entered promiscuous mode [ 151.835975][ T6892] veth0_macvtap: entered promiscuous mode [ 151.894212][ T6892] veth1_macvtap: entered promiscuous mode [ 151.980508][ T6892] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 152.038527][ T6892] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.072818][ T6892] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 152.103375][ T6892] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.156522][ T6892] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 152.206787][ T6892] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.250676][ T6892] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 152.272004][ T6892] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 152.303086][ T6892] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.313439][ T6892] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 152.326195][ T6892] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.336507][ T6892] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 152.350390][ T6892] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.372040][ T6892] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 152.434952][ T6892] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.491938][ T6892] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.525163][ T6892] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.551334][ T6892] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.801877][ T3537] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 152.824487][ T3537] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 152.907093][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 152.935851][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 153.622290][ T7166] trusted_key: encrypted_key: key user:syz not found [ 160.850100][ T7220] input: syz0 as /devices/virtual/input/input15 [ 160.864226][ T7220] input: failed to attach handler leds to device input15, error: -6 [ 162.336901][ T974] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 162.521488][ T974] usb 6-1: Using ep0 maxpacket: 32 [ 162.567323][ T974] usb 6-1: config 0 has an invalid interface number: 35 but max is 0 [ 162.615408][ T974] usb 6-1: config 0 has no interface number 0 [ 162.683893][ T974] usb 6-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.8f [ 162.723806][ T974] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.771609][ T974] usb 6-1: Product: syz [ 162.806457][ T974] usb 6-1: Manufacturer: syz [ 162.835821][ T974] usb 6-1: SerialNumber: syz [ 163.232275][ T974] usb 6-1: config 0 descriptor?? [ 163.574012][ T974] radio-si470x 6-1:0.35: this is not a si470x device. [ 163.669619][ T974] radio-raremono 6-1:0.35: this is not Thanko's Raremono. [ 165.369359][ T974] usb 6-1: USB disconnect, device number 2 [ 168.122175][ T7292] bond_slave_1: invalid flags given to default FDB implementation [ 172.683407][ T7319] input: syz0 as /devices/virtual/input/input16 [ 172.689914][ T7319] input: failed to attach handler leds to device input16, error: -6 [ 172.901421][ T974] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 173.073753][ T974] usb 2-1: Using ep0 maxpacket: 16 [ 173.110294][ T974] usb 2-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 173.142779][ T974] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 173.183234][ T974] usb 2-1: Product: syz [ 173.200045][ T974] usb 2-1: Manufacturer: syz [ 173.225225][ T974] usb 2-1: SerialNumber: syz [ 173.248188][ T974] usb 2-1: config 0 descriptor?? [ 173.283332][ T974] visor 2-1:0.0: Sony Clie 3.5 converter detected [ 173.536117][ T974] usb 2-1: clie_3_5_startup: get config number bad return length: 0 [ 173.590580][ T974] visor 2-1:0.0: probe with driver visor failed with error -5 [ 173.942638][ T974] usb 2-1: USB disconnect, device number 8 [ 174.317547][ T7356] validate_nla: 3 callbacks suppressed [ 174.317566][ T7356] netlink: 'syz.5.292': attribute type 3 has an invalid length. [ 174.371851][ T7356] netlink: 201372 bytes leftover after parsing attributes in process `syz.5.292'. [ 174.842758][ T7368] xt_SECMARK: unable to map security context 'system_u:object_r:dbusd_etc_t:s0' [ 177.862084][ T5830] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 177.871835][ T5830] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 177.881017][ T5830] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 177.891916][ T5830] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 177.901565][ T5830] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 177.909620][ T5830] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 177.920171][ T7399] input: syz0 as /devices/virtual/input/input17 [ 177.926504][ T7399] input: failed to attach handler leds to device input17, error: -6 [ 178.047449][ T9] libceph: connect (1)[c::]:6789 error -101 [ 178.057754][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 178.320266][ T7401] chnl_net:caif_netlink_parms(): no params data found [ 178.327874][ T9] libceph: connect (1)[c::]:6789 error -101 [ 178.337341][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 178.594979][ T7401] bridge0: port 1(bridge_slave_0) entered blocking state [ 178.620355][ T7401] bridge0: port 1(bridge_slave_0) entered disabled state [ 178.654131][ T7401] bridge_slave_0: entered allmulticast mode [ 178.679746][ T7401] bridge_slave_0: entered promiscuous mode [ 178.758607][ T7401] bridge0: port 2(bridge_slave_1) entered blocking state [ 178.770494][ T7401] bridge0: port 2(bridge_slave_1) entered disabled state [ 178.794969][ T7401] bridge_slave_1: entered allmulticast mode [ 178.804332][ T7401] bridge_slave_1: entered promiscuous mode [ 178.879847][ T9] libceph: connect (1)[c::]:6789 error -101 [ 178.886329][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 178.930139][ T7401] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 178.953446][ T7401] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 179.022790][ T7401] team0: Port device team_slave_0 added [ 179.063317][ T7401] team0: Port device team_slave_1 added [ 179.141160][ T7401] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 179.156686][ T7401] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 179.193781][ T7401] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 179.242849][ T7401] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 179.257945][ T7401] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 179.292717][ T7401] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 179.462553][ T7401] hsr_slave_0: entered promiscuous mode [ 179.475687][ T7401] hsr_slave_1: entered promiscuous mode [ 179.489199][ T7401] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 179.502766][ T7401] Cannot create hsr debugfs directory [ 179.748137][ T7399] ceph: No mds server is up or the cluster is laggy [ 180.036979][ T5830] Bluetooth: hci5: command tx timeout [ 180.270438][ T7401] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 180.386876][ T7401] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 180.396218][ T7427] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.304'. [ 180.455850][ T7401] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 180.497949][ T7429] netlink: 'syz.1.305': attribute type 3 has an invalid length. [ 180.505651][ T7429] netlink: 201372 bytes leftover after parsing attributes in process `syz.1.305'. [ 180.519441][ T7401] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 180.938264][ T7401] 8021q: adding VLAN 0 to HW filter on device bond0 [ 181.013740][ T7401] 8021q: adding VLAN 0 to HW filter on device team0 [ 181.155378][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 181.162576][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 181.228362][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 181.235555][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 182.117178][ T5830] Bluetooth: hci5: command tx timeout [ 182.199867][ T7401] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 183.423243][ T7451] input: syz0 as /devices/virtual/input/input18 [ 183.429871][ T7451] input: failed to attach handler leds to device input18, error: -6 [ 183.491860][ T7401] veth0_vlan: entered promiscuous mode [ 183.517258][ T9] libceph: connect (1)[c::]:6789 error -101 [ 183.553859][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 183.567937][ T7401] veth1_vlan: entered promiscuous mode [ 183.684731][ T7401] veth0_macvtap: entered promiscuous mode [ 183.723310][ T7401] veth1_macvtap: entered promiscuous mode [ 183.811099][ T7401] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 183.847260][ T8] libceph: connect (1)[c::]:6789 error -101 [ 183.854776][ T7451] ceph: No mds server is up or the cluster is laggy [ 183.869230][ T7401] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.897104][ T8] libceph: mon0 (1)[c::]:6789 connect error [ 183.906873][ T7401] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 183.935329][ T7401] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.962143][ T7401] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 183.982809][ T7401] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 184.004538][ T7401] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 184.015851][ T7401] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 184.038527][ T7401] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 184.197007][ T5830] Bluetooth: hci5: command tx timeout [ 184.245365][ T7401] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 184.357480][ T7401] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 184.402568][ T7401] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 184.465301][ T7401] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 184.526163][ T7401] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 184.597363][ T7401] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 184.657555][ T7401] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 184.701729][ T7401] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 184.738021][ T7471] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.315'. [ 184.758850][ T7401] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 184.856694][ T7401] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.935225][ T7401] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.996192][ T7401] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.038726][ T7401] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.062697][ T7475] netlink: 'syz.1.316': attribute type 3 has an invalid length. [ 185.107965][ T7475] netlink: 201372 bytes leftover after parsing attributes in process `syz.1.316'. [ 185.338505][ T72] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 185.391643][ T72] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 185.590376][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 185.642330][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 186.277198][ T5829] Bluetooth: hci5: command tx timeout [ 186.439147][ T5132] Bluetooth: hci0: command 0x0406 tx timeout [ 186.446420][ T55] Bluetooth: hci1: command 0x0406 tx timeout [ 186.452678][ T5830] Bluetooth: hci2: command 0x0406 tx timeout [ 186.459519][ T5829] Bluetooth: hci4: command 0x0406 tx timeout [ 189.516748][ C1] sched: DL replenish lagged too much [ 192.826713][ T5132] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 192.856080][ T5132] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 192.867871][ T5132] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 192.878805][ T5132] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 192.886435][ T5132] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 192.894608][ T5132] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 193.364969][ T7526] netlink: 'syz.1.329': attribute type 3 has an invalid length. [ 193.406215][ T7526] netlink: 201372 bytes leftover after parsing attributes in process `syz.1.329'. [ 193.872047][ T7514] chnl_net:caif_netlink_parms(): no params data found [ 193.970826][ T5821] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 193.980288][ T5821] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 193.988535][ T5821] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 193.996460][ T5821] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 194.005534][ T5821] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 194.027200][ T5821] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 194.537368][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.543713][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.535549][ T5132] Bluetooth: hci6: command tx timeout [ 196.028614][ T7553] netlink: 92 bytes leftover after parsing attributes in process `syz.1.333'. [ 199.094905][ T5132] Bluetooth: hci7: command tx timeout [ 199.101398][ T5132] Bluetooth: hci6: command tx timeout [ 199.267913][ T7514] bridge0: port 1(bridge_slave_0) entered blocking state [ 199.275069][ T7514] bridge0: port 1(bridge_slave_0) entered disabled state [ 199.376406][ T7514] bridge_slave_0: entered allmulticast mode [ 199.408119][ T7514] bridge_slave_0: entered promiscuous mode [ 199.540225][ T7514] bridge0: port 2(bridge_slave_1) entered blocking state [ 199.571582][ T7514] bridge0: port 2(bridge_slave_1) entered disabled state [ 199.607066][ T7514] bridge_slave_1: entered allmulticast mode [ 199.634731][ T7514] bridge_slave_1: entered promiscuous mode [ 199.969617][ T7514] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 200.029406][ T7514] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 200.296543][ T7514] team0: Port device team_slave_0 added [ 200.339219][ T7514] team0: Port device team_slave_1 added [ 200.542352][ T7575] netlink: 'syz.3.339': attribute type 3 has an invalid length. [ 200.553198][ T7514] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 200.588903][ T7514] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 200.623612][ T7575] netlink: 201372 bytes leftover after parsing attributes in process `syz.3.339'. [ 200.736817][ T7514] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 200.889768][ T7514] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 200.936409][ T7514] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 201.246832][ T7514] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 201.275045][ T5821] Bluetooth: hci6: command tx timeout [ 202.232398][ T5821] Bluetooth: hci7: command tx timeout [ 204.278017][ T5132] Bluetooth: hci7: command tx timeout [ 206.231612][ T5821] Bluetooth: hci6: command tx timeout [ 210.246996][ T5132] Bluetooth: hci7: command tx timeout [ 212.587891][ T7514] hsr_slave_0: entered promiscuous mode [ 212.647257][ T7514] hsr_slave_1: entered promiscuous mode [ 212.726927][ T7514] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 212.734555][ T7514] Cannot create hsr debugfs directory [ 212.780864][ T7540] chnl_net:caif_netlink_parms(): no params data found [ 213.538037][ T5132] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 213.549042][ T5132] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 213.557143][ T5132] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 213.564989][ T5132] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 213.576998][ T5132] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 213.584981][ T5132] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 213.960042][ T7540] bridge0: port 1(bridge_slave_0) entered blocking state [ 213.989124][ T7540] bridge0: port 1(bridge_slave_0) entered disabled state [ 213.996391][ T7540] bridge_slave_0: entered allmulticast mode [ 214.038082][ T7540] bridge_slave_0: entered promiscuous mode [ 214.100406][ T7540] bridge0: port 2(bridge_slave_1) entered blocking state [ 214.126996][ T7540] bridge0: port 2(bridge_slave_1) entered disabled state [ 214.147033][ T7540] bridge_slave_1: entered allmulticast mode [ 214.164626][ T7540] bridge_slave_1: entered promiscuous mode [ 214.360139][ T7540] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 215.016081][ T5821] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 215.025075][ T5821] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 215.044237][ T5821] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 215.053715][ T5821] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 215.062210][ T5821] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 215.069747][ T5821] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 215.716985][ T5821] Bluetooth: hci8: command tx timeout [ 217.162055][ T5821] Bluetooth: hci5: command tx timeout [ 217.801628][ T5821] Bluetooth: hci8: command tx timeout [ 219.237020][ T5821] Bluetooth: hci5: command tx timeout [ 219.877043][ T5821] Bluetooth: hci8: command tx timeout [ 221.316998][ T5821] Bluetooth: hci5: command tx timeout [ 221.956976][ T5821] Bluetooth: hci8: command tx timeout [ 223.396987][ T5821] Bluetooth: hci5: command tx timeout [ 236.465383][ T5132] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 236.474344][ T5132] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 236.485461][ T5132] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 236.493362][ T5132] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 236.505267][ T5132] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 236.514217][ T5132] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 238.597029][ T5821] Bluetooth: hci0: command tx timeout [ 240.706921][ T5821] Bluetooth: hci0: command tx timeout [ 242.756961][ T5132] Bluetooth: hci0: command tx timeout [ 245.506033][ T5132] Bluetooth: hci0: command tx timeout [ 246.009752][ T7540] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 247.078390][ T5821] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 247.088828][ T5821] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 247.099374][ T5821] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 247.107557][ T5821] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 247.115938][ T5821] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 247.129262][ T5821] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 249.157110][ T5821] Bluetooth: hci3: command tx timeout [ 251.236910][ T5821] Bluetooth: hci3: command tx timeout [ 253.326804][ T5821] Bluetooth: hci3: command tx timeout [ 253.403329][ T5132] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 253.412892][ T5132] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 253.421074][ T5132] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 253.429157][ T5132] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 253.441639][ T5132] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 253.457945][ T5132] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 255.397044][ T5132] Bluetooth: hci3: command tx timeout [ 255.556937][ T5132] Bluetooth: hci9: command tx timeout [ 255.962110][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.976845][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.637077][ T5132] Bluetooth: hci9: command tx timeout [ 259.716970][ T5132] Bluetooth: hci9: command tx timeout [ 261.797168][ T5132] Bluetooth: hci9: command tx timeout [ 272.317781][ T5821] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 272.327781][ T5821] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 272.335964][ T5821] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 272.344542][ T5821] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 272.352201][ T5821] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 272.360501][ T5821] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 274.436964][ T5821] Bluetooth: hci10: command tx timeout [ 275.524864][ T5132] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 275.547619][ T5132] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 275.556932][ T5132] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 275.564967][ T5132] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 275.578130][ T5132] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3 [ 275.585537][ T5132] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 276.517209][ T5821] Bluetooth: hci10: command tx timeout [ 277.637119][ T5821] Bluetooth: hci11: command tx timeout [ 278.596934][ T5821] Bluetooth: hci10: command tx timeout [ 279.717003][ T5821] Bluetooth: hci11: command tx timeout [ 280.677085][ T5821] Bluetooth: hci10: command tx timeout [ 281.807085][ T5821] Bluetooth: hci11: command tx timeout [ 283.877094][ T5821] Bluetooth: hci11: command tx timeout [ 296.155830][ T5132] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 296.164716][ T5132] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 296.173195][ T5132] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 296.183819][ T5132] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 296.197354][ T5132] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 296.205992][ T5132] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 298.277299][ T5132] Bluetooth: hci1: command tx timeout [ 300.356963][ T5132] Bluetooth: hci1: command tx timeout [ 302.436918][ T5132] Bluetooth: hci1: command tx timeout [ 304.519084][ T5132] Bluetooth: hci1: command tx timeout [ 311.835642][ T5821] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 311.846369][ T5821] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 311.854252][ T5821] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 311.862189][ T5821] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 311.875559][ T5821] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 311.887783][ T5821] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 313.957290][ T5821] Bluetooth: hci0: command tx timeout [ 314.542554][ T5132] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 314.552710][ T5132] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 314.562753][ T5132] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 314.571218][ T5132] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 314.578840][ T5132] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 314.586126][ T5132] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 316.047054][ T5132] Bluetooth: hci0: command tx timeout [ 317.219703][ T5132] Bluetooth: hci2: command tx timeout [ 317.409587][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.425468][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.117187][ T5132] Bluetooth: hci0: command tx timeout [ 319.241196][ T5132] Bluetooth: hci2: command tx timeout [ 320.206783][ T5132] Bluetooth: hci0: command tx timeout [ 321.318337][ T5132] Bluetooth: hci2: command tx timeout [ 323.397397][ T5132] Bluetooth: hci2: command tx timeout [ 333.649016][ T5821] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 333.658226][ T5821] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 333.666439][ T5821] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 333.676979][ T5821] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 333.685007][ T5821] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 333.698188][ T5821] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 333.982225][ T7719] chnl_net:caif_netlink_parms(): no params data found [ 334.147034][ T7719] bridge0: port 1(bridge_slave_0) entered blocking state [ 334.154233][ T7719] bridge0: port 1(bridge_slave_0) entered disabled state [ 334.173319][ T7719] bridge_slave_0: entered allmulticast mode [ 334.187365][ T7719] bridge_slave_0: entered promiscuous mode [ 334.195238][ T7719] bridge0: port 2(bridge_slave_1) entered blocking state [ 334.213347][ T7719] bridge0: port 2(bridge_slave_1) entered disabled state [ 334.225483][ T7719] bridge_slave_1: entered allmulticast mode [ 334.238147][ T7719] bridge_slave_1: entered promiscuous mode [ 334.303645][ T7719] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 334.330237][ T7719] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 334.402638][ T7719] team0: Port device team_slave_0 added [ 334.420268][ T7719] team0: Port device team_slave_1 added [ 334.502518][ T7719] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 334.516427][ T7719] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 334.554828][ T7719] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 334.572357][ T7719] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 334.594789][ T7719] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 334.628191][ T7719] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 334.724305][ T7719] hsr_slave_0: entered promiscuous mode [ 334.745209][ T7719] hsr_slave_1: entered promiscuous mode [ 334.758871][ T7719] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 334.766472][ T7719] Cannot create hsr debugfs directory [ 335.094266][ T7719] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 335.123173][ T7719] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 335.146016][ T7719] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 335.169268][ T7719] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 335.221557][ T7719] bridge0: port 2(bridge_slave_1) entered blocking state [ 335.228709][ T7719] bridge0: port 2(bridge_slave_1) entered forwarding state [ 335.236127][ T7719] bridge0: port 1(bridge_slave_0) entered blocking state [ 335.243304][ T7719] bridge0: port 1(bridge_slave_0) entered forwarding state [ 335.362764][ T7719] 8021q: adding VLAN 0 to HW filter on device bond0 [ 335.438130][ T7719] 8021q: adding VLAN 0 to HW filter on device team0 [ 335.797363][ T5821] Bluetooth: hci3: command tx timeout [ 336.009774][ T7719] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 336.198349][ T5132] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 336.210235][ T5132] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 336.218472][ T5132] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 336.228137][ T5132] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 336.237575][ T5132] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 336.246519][ T5132] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 337.880484][ T5821] Bluetooth: hci3: command tx timeout [ 338.277022][ T5821] Bluetooth: hci4: command tx timeout [ 339.957125][ T5821] Bluetooth: hci3: command tx timeout [ 340.356921][ T5821] Bluetooth: hci4: command tx timeout [ 342.037044][ T5821] Bluetooth: hci3: command tx timeout [ 342.445786][ T5821] Bluetooth: hci4: command tx timeout [ 344.526375][ T5821] Bluetooth: hci4: command tx timeout [ 358.138064][ T5132] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 358.149640][ T5132] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 358.158468][ T5132] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 358.166326][ T5132] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 358.175021][ T5132] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 358.185925][ T5132] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 360.277269][ T5821] Bluetooth: hci5: command tx timeout [ 362.357010][ T5821] Bluetooth: hci5: command tx timeout [ 364.437030][ T5821] Bluetooth: hci5: command tx timeout [ 366.522274][ T5821] Bluetooth: hci5: command tx timeout [ 369.258226][ T5132] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 369.268848][ T5132] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 369.276895][ T5132] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 369.284959][ T5132] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 369.292654][ T5132] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 369.303116][ T5132] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 371.396976][ T5132] Bluetooth: hci6: command tx timeout [ 373.477157][ T5132] Bluetooth: hci6: command tx timeout [ 375.557056][ T5132] Bluetooth: hci6: command tx timeout [ 375.838884][ T5821] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 375.848215][ T5821] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 375.855933][ T5821] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 375.866164][ T5821] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 375.876916][ T5821] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 375.884890][ T5821] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 377.637040][ T5821] Bluetooth: hci6: command tx timeout [ 377.957031][ T5821] Bluetooth: hci7: command tx timeout [ 378.841317][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.847818][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 380.037077][ T5821] Bluetooth: hci7: command tx timeout [ 382.117257][ T5821] Bluetooth: hci7: command tx timeout [ 384.207058][ T5821] Bluetooth: hci7: command tx timeout [ 394.933880][ T55] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 394.942813][ T55] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 394.951692][ T55] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 394.961867][ T55] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 394.969864][ T55] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 394.977635][ T55] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 396.287201][ T55] Bluetooth: hci10: command 0x0406 tx timeout [ 396.581353][ T5132] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 396.590822][ T5132] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 396.602542][ T5132] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 396.612079][ T5132] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 396.620173][ T5132] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 396.628067][ T5132] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 397.007117][ T55] Bluetooth: hci8: command tx timeout [ 398.677087][ T55] Bluetooth: hci9: command tx timeout [ 399.081348][ T55] Bluetooth: hci8: command tx timeout [ 400.756982][ T55] Bluetooth: hci9: command tx timeout [ 401.157257][ T5821] Bluetooth: hci8: command tx timeout [ 401.402855][ T5821] Bluetooth: hci11: command 0x0406 tx timeout [ 402.837020][ T5132] Bluetooth: hci9: command tx timeout [ 403.236992][ T5132] Bluetooth: hci8: command tx timeout [ 404.917026][ T5132] Bluetooth: hci9: command tx timeout [ 418.946198][ T5821] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 418.958138][ T5821] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 418.966529][ T5821] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 418.975055][ T5821] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 418.995924][ T5821] Bluetooth: hci12: unexpected cc 0x0c25 length: 249 > 3 [ 419.005254][ T5821] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 421.077083][ T5132] Bluetooth: hci12: command tx timeout [ 421.886895][ T5132] Bluetooth: hci1: command 0x0406 tx timeout [ 423.157169][ T5821] Bluetooth: hci12: command tx timeout [ 425.237069][ T5821] Bluetooth: hci12: command tx timeout [ 427.317163][ T5821] Bluetooth: hci12: command tx timeout [ 430.083177][ T5132] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 430.096939][ T5132] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 430.114376][ T5132] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 430.122620][ T5132] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 430.131298][ T5132] Bluetooth: hci13: unexpected cc 0x0c25 length: 249 > 3 [ 430.142188][ T5132] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 432.197182][ T5132] Bluetooth: hci13: command tx timeout [ 434.278010][ T5132] Bluetooth: hci13: command tx timeout [ 436.356964][ T5132] Bluetooth: hci13: command tx timeout [ 437.251872][ T5132] Bluetooth: hci2: command 0x0406 tx timeout [ 437.258312][ T5830] Bluetooth: hci0: command 0x0406 tx timeout [ 437.368567][ T5830] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 437.379042][ T5830] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 437.387402][ T5830] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 437.395779][ T5830] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 437.405155][ T5830] Bluetooth: hci14: unexpected cc 0x0c25 length: 249 > 3 [ 437.418388][ T5830] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 438.437005][ T5830] Bluetooth: hci13: command tx timeout [ 439.476993][ T5830] Bluetooth: hci14: command tx timeout [ 440.292879][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.299276][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.556995][ T5830] Bluetooth: hci14: command tx timeout [ 443.636978][ T5830] Bluetooth: hci14: command tx timeout [ 445.719683][ T55] Bluetooth: hci14: command tx timeout [ 446.677166][ T30] INFO: task syz-executor:7514 blocked for more than 143 seconds. [ 446.685323][ T30] Not tainted 6.13.0-rc7-syzkaller-00191-gfda5e3f28400 #0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 446.736795][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 446.772624][ T30] task:syz-executor state:D stack:21280 pid:7514 tgid:7514 ppid:1 flags:0x00004006 [ 446.856873][ T30] Call Trace: [ 446.860212][ T30] [ 446.863178][ T30] __schedule+0x17fb/0x4be0 [ 446.957091][ T30] ? __pfx___schedule+0x10/0x10 [ 446.962032][ T30] ? __pfx_lock_release+0x10/0x10 [ 446.996822][ T30] ? _raw_spin_unlock_irqrestore+0x8f/0x140 [ 447.002792][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 447.032092][ T30] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 447.046676][ T30] ? schedule+0x90/0x320 [ 447.055357][ T30] schedule+0x14b/0x320 [ 447.066785][ T30] schedule_preempt_disabled+0x13/0x30 [ 447.072306][ T30] __mutex_lock+0x7e7/0xee0 [ 447.088201][ T30] ? __mutex_lock+0x5ef/0xee0 [ 447.092935][ T30] ? tun_chr_close+0x3b/0x1b0 [ 447.107096][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 447.112196][ T30] ? __pfx_call_rcu+0x10/0x10 [ 447.133752][ T30] tun_chr_close+0x3b/0x1b0 [ 447.141971][ T30] ? __pfx_tun_chr_close+0x10/0x10 [ 447.153291][ T30] __fput+0x23c/0xa50 [ 447.163493][ T30] task_work_run+0x24f/0x310 [ 447.174014][ T30] ? __pfx_task_work_run+0x10/0x10 [ 447.183906][ T30] ? do_exit+0xa25/0x28e0 [ 447.195872][ T30] ? do_exit+0xa25/0x28e0 [ 447.200696][ T30] do_exit+0xa2a/0x28e0 [ 447.204896][ T30] ? __pfx_do_exit+0x10/0x10 [ 447.221044][ T30] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 447.226477][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 447.243136][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 447.258399][ T30] ? _raw_spin_lock_irq+0xdf/0x120 [ 447.263567][ T30] do_group_exit+0x207/0x2c0 [ 447.276778][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 447.282026][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 447.298125][ T30] get_signal+0x16b2/0x1750 [ 447.302687][ T30] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 447.316778][ T30] ? __pfx_get_signal+0x10/0x10 [ 447.321669][ T30] ? do_sys_openat2+0x17a/0x1d0 [ 447.326551][ T30] arch_do_signal_or_restart+0x96/0x860 [ 447.346424][ T30] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 447.360489][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 447.366530][ T30] ? syscall_exit_to_user_mode+0xa3/0x340 [ 447.379571][ T30] syscall_exit_to_user_mode+0xce/0x340 [ 447.385168][ T30] do_syscall_64+0x100/0x230 [ 447.400067][ T30] ? clear_bhb_loop+0x35/0x90 [ 447.404789][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 447.417151][ T30] RIP: 0033:0x7f3b3b5847df [ 447.421602][ T30] RSP: 002b:00007ffcc7332f40 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 447.441397][ T30] RAX: 0000000000000003 RBX: 0000000000000005 RCX: 00007f3b3b5847df [ 447.456426][ T30] RDX: 0000000000000003 RSI: 00007ffcc7332f90 RDI: 0000000000000005 [ 447.471960][ T30] RBP: 00007f3b3b602d39 R08: 0000000000000000 R09: 00007ffcc7332d97 [ 447.490559][ T30] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 447.506615][ T30] R13: 00007ffcc7332f90 R14: 00007f3b3c2a4620 R15: 0000000000000003 [ 447.516792][ T30] [ 447.521350][ T30] INFO: task syz-executor:7540 blocked for more than 144 seconds. [ 447.536773][ T30] Not tainted 6.13.0-rc7-syzkaller-00191-gfda5e3f28400 #0 [ 447.544426][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 447.574171][ T30] task:syz-executor state:D stack:20592 pid:7540 tgid:7540 ppid:1 flags:0x00004006 [ 447.591381][ T30] Call Trace: [ 447.594695][ T30] [ 447.606779][ T30] __schedule+0x17fb/0x4be0 [ 447.611355][ T30] ? __pfx___schedule+0x10/0x10 [ 447.616235][ T30] ? __pfx_lock_release+0x10/0x10 [ 447.631858][ T30] ? _raw_spin_unlock_irqrestore+0x8f/0x140 [ 447.644288][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 447.654917][ T30] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 447.665297][ T30] ? schedule+0x90/0x320 [ 447.676870][ T30] schedule+0x14b/0x320 [ 447.681067][ T30] schedule_preempt_disabled+0x13/0x30 [ 447.686564][ T30] __mutex_lock+0x7e7/0xee0 [ 447.705206][ T30] ? __mutex_lock+0x5ef/0xee0 [ 447.716794][ T30] ? tun_chr_close+0x3b/0x1b0 [ 447.721547][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 447.726620][ T30] ? __pfx_call_rcu+0x10/0x10 [ 447.742200][ T30] tun_chr_close+0x3b/0x1b0 [ 447.754462][ T30] ? __pfx_tun_chr_close+0x10/0x10 [ 447.764535][ T30] __fput+0x23c/0xa50 [ 447.775276][ T30] task_work_run+0x24f/0x310 [ 447.786137][ T30] ? __pfx_task_work_run+0x10/0x10 [ 447.797041][ T30] ? do_exit+0xa25/0x28e0 [ 447.801419][ T30] ? do_exit+0xa25/0x28e0 [ 447.805774][ T30] do_exit+0xa2a/0x28e0 [ 447.824042][ T30] ? __pfx_do_exit+0x10/0x10 [ 447.835461][ T30] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 447.846709][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 447.854192][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 447.871985][ T30] ? _raw_spin_lock_irq+0xdf/0x120 [ 447.883493][ T30] do_group_exit+0x207/0x2c0 [ 447.893947][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 447.903911][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 447.914859][ T30] get_signal+0x16b2/0x1750 [ 447.926787][ T30] ? __pfx___sys_sendto+0x10/0x10 [ 447.931866][ T30] ? __pfx_get_signal+0x10/0x10 [ 447.952627][ T30] arch_do_signal_or_restart+0x96/0x860 [ 447.964052][ T30] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 447.976379][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 447.986786][ T30] ? syscall_exit_to_user_mode+0xa3/0x340 [ 447.992556][ T30] syscall_exit_to_user_mode+0xce/0x340 [ 448.009621][ T30] do_syscall_64+0x100/0x230 [ 448.014259][ T30] ? clear_bhb_loop+0x35/0x90 [ 448.026778][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 448.032717][ T30] RIP: 0033:0x7fc9b6d87bbc [ 448.049883][ T30] RSP: 002b:00007fff747431b0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 448.067010][ T30] RAX: 0000000000000068 RBX: 00007fc9b7aa4620 RCX: 00007fc9b6d87bbc [ 448.087788][ T30] RDX: 0000000000000068 RSI: 00007fc9b7aa4670 RDI: 0000000000000003 [ 448.095808][ T30] RBP: 0000000000000000 R08: 00007fff74743204 R09: 000000000000000c [ 448.115084][ T30] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 448.125882][ T30] R13: 0000000000000000 R14: 00007fc9b7aa4670 R15: 0000000000000000 [ 448.142887][ T30] [ 448.146005][ T30] INFO: task syz-executor:7663 blocked for more than 144 seconds. [ 448.159824][ T30] Not tainted 6.13.0-rc7-syzkaller-00191-gfda5e3f28400 #0 [ 448.177716][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 448.186417][ T30] task:syz-executor state:D stack:25952 pid:7663 tgid:7663 ppid:1 flags:0x00000004 [ 448.210141][ T30] Call Trace: [ 448.213632][ T30] [ 448.216586][ T30] __schedule+0x17fb/0x4be0 [ 448.230808][ T30] ? __pfx___schedule+0x10/0x10 [ 448.235705][ T30] ? __pfx_lock_release+0x10/0x10 [ 448.247473][ T30] ? _raw_spin_unlock_irqrestore+0x8f/0x140 [ 448.253410][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 448.266819][ T30] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 448.273201][ T30] ? schedule+0x90/0x320 [ 448.296875][ T30] schedule+0x14b/0x320 [ 448.301085][ T30] schedule_preempt_disabled+0x13/0x30 [ 448.306571][ T30] __mutex_lock+0x7e7/0xee0 [ 448.323260][ T30] ? __mutex_lock+0x5ef/0xee0 [ 448.333888][ T30] ? inet_rtm_newaddr+0x47e/0x1bd0 [ 448.344734][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 448.354464][ T30] ? __lock_acquire+0x1397/0x2100 [ 448.366776][ T30] ? __nla_parse+0x40/0x60 [ 448.371234][ T30] inet_rtm_newaddr+0x47e/0x1bd0 [ 448.376217][ T30] ? rcu_read_unlock+0x87/0xa0 [ 448.395477][ T30] ? __pfx_inet_rtm_newaddr+0x10/0x10 [ 448.406473][ T30] ? __pfx_inet_rtm_newaddr+0x10/0x10 [ 448.418801][ T30] rtnetlink_rcv_msg+0x791/0xcf0 [ 448.423778][ T30] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 448.436793][ T30] ? __lock_acquire+0x1397/0x2100 [ 448.441856][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 448.458145][ T30] netlink_rcv_skb+0x1e3/0x430 [ 448.462949][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 448.477758][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 448.483105][ T30] ? netlink_deliver_tap+0x2e/0x1b0 [ 448.498084][ T30] netlink_unicast+0x7f6/0x990 [ 448.502898][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 448.516784][ T30] ? __virt_addr_valid+0x45f/0x530 [ 448.521941][ T30] ? __phys_addr_symbol+0x2f/0x70 [ 448.537830][ T30] ? __check_object_size+0x47a/0x730 [ 448.543172][ T30] netlink_sendmsg+0x8e4/0xcb0 [ 448.556788][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 448.562118][ T30] ? __might_fault+0xaa/0x120 [ 448.577481][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 448.582825][ T30] __sock_sendmsg+0x221/0x270 [ 448.599470][ T30] __sys_sendto+0x363/0x4c0 [ 448.604034][ T30] ? __pfx___sys_sendto+0x10/0x10 [ 448.619553][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 448.625582][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 448.643859][ T30] ? exc_page_fault+0x590/0x8b0 [ 448.652953][ T30] __x64_sys_sendto+0xde/0x100 [ 448.665853][ T30] do_syscall_64+0xf3/0x230 [ 448.670723][ T30] ? clear_bhb_loop+0x35/0x90 [ 448.675443][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 448.693449][ T30] RIP: 0033:0x7f04d4787bbc [ 448.700270][ T30] RSP: 002b:00007ffc4e34ca00 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 448.722131][ T30] RAX: ffffffffffffffda RBX: 00007f04d54a4620 RCX: 00007f04d4787bbc [ 448.736786][ T30] RDX: 0000000000000028 RSI: 00007f04d54a4670 RDI: 0000000000000003 [ 448.744806][ T30] RBP: 0000000000000000 R08: 00007ffc4e34ca54 R09: 000000000000000c [ 448.765983][ T30] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 448.777320][ T30] R13: 0000000000000000 R14: 00007f04d54a4670 R15: 0000000000000000 [ 448.785346][ T30] [ 448.796814][ T30] [ 448.796814][ T30] Showing all locks held in the system: [ 448.814378][ T30] 4 locks held by kworker/u8:0/11: [ 448.824951][ T30] #0: ffff88801baeb148 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1840 [ 448.845071][ T30] #1: ffffc90000107d00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1840 [ 448.876808][ T30] #2: ffffffff8fc970d0 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0x16a/0xd50 [ 448.886295][ T30] #3: ffffffff8fca3588 (rtnl_mutex){+.+.}-{4:4}, at: wg_netns_pre_exit+0x1f/0x1e0 [ 448.910221][ T30] 2 locks held by ksoftirqd/1/24: [ 448.915295][ T30] 1 lock held by khungtaskd/30: [ 448.927092][ T30] #0: ffffffff8e937ae0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x55/0x2a0 [ 448.948225][ T30] 3 locks held by kworker/1:2/59: [ 448.955748][ T30] 3 locks held by kworker/u8:4/72: [ 448.966903][ T30] #0: ffff88814d752948 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1840 [ 448.991365][ T30] #1: ffffc90001587d00 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1840 [ 449.014205][ T30] #2: ffffffff8fca3588 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_verify_work+0x19/0x30 [ 449.029373][ T30] 1 lock held by dhcpcd/5488: [ 449.034082][ T30] #0: ffffffff8fca3588 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_deladdr+0x1a1/0x7b0 [ 449.057317][ T30] 2 locks held by getty/5576: [ 449.062028][ T30] #0: ffff88814d8190a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 449.083366][ T30] #1: ffffc900033132f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x6a6/0x1e00 [ 449.102241][ T30] 3 locks held by kworker/0:7/5900: [ 449.114739][ T30] #0: ffff88801ac80948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1840 [ 449.139513][ T30] #1: ffffc900043c7d00 (deferred_process_work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1840 [ 449.156772][ T30] #2: ffffffff8fca3588 (rtnl_mutex){+.+.}-{4:4}, at: switchdev_deferred_process_work+0xe/0x20 [ 449.181748][ T30] 3 locks held by kworker/u8:10/7022: [ 449.191906][ T30] #0: ffff88801ac89148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1840 [ 449.215218][ T30] #1: ffffc9000d027d00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1840 [ 449.231679][ T30] #2: ffffffff8fca3588 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 449.251626][ T30] 2 locks held by syz.4.287/7315: [ 449.256676][ T30] 1 lock held by syz.5.295/7366: [ 449.266771][ T30] #0: ffffffff8fca3588 (rtnl_mutex){+.+.}-{4:4}, at: netdev_run_todo+0x7b2/0x1000 [ 449.276150][ T30] 1 lock held by syz-executor/7514: [ 449.295004][ T30] #0: ffffffff8fca3588 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3b/0x1b0 [ 449.307336][ T30] 1 lock held by syz-executor/7540: [ 449.312564][ T30] #0: ffffffff8fca3588 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3b/0x1b0 [ 449.337153][ T30] 1 lock held by syz.1.335/7559: [ 449.342127][ T30] #0: ffffffff8fca3588 (rtnl_mutex){+.+.}-{4:4}, at: netdev_run_todo+0x7b2/0x1000 [ 449.366837][ T30] 1 lock held by syz.3.347/7629: [ 449.373183][ T30] #0: ffffffff8fca3588 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3b/0x1b0 [ 449.391489][ T30] 2 locks held by syz-executor/7648: [ 449.406084][ T30] #0: ffffffff8fc970d0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x328/0x570 [ 449.422799][ T30] #1: ffffffff8fca3588 (rtnl_mutex){+.+.}-{4:4}, at: register_nexthop_notifier+0x84/0x290 [ 449.439683][ T30] 2 locks held by syz-executor/7652: [ 449.445000][ T30] #0: ffffffff8fc970d0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x328/0x570 [ 449.462980][ T30] #1: ffffffff8fca3588 (rtnl_mutex){+.+.}-{4:4}, at: register_nexthop_notifier+0x84/0x290 [ 449.476771][ T30] 1 lock held by syz-executor/7663: [ 449.481994][ T30] #0: ffffffff8fca3588 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x47e/0x1bd0 [ 449.511241][ T30] 1 lock held by syz-executor/7671: [ 449.516474][ T30] #0: ffffffff8fca3588 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x47e/0x1bd0 [ 449.535469][ T30] 1 lock held by syz-executor/7674: [ 449.546643][ T30] #0: ffffffff8fca3588 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x47e/0x1bd0 [ 449.566980][ T30] 1 lock held by syz-executor/7719: [ 449.572339][ T30] #0: ffffffff8fca3588 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x47e/0x1bd0 [ 449.589630][ T30] 2 locks held by syz-executor/7736: [ 449.594948][ T30] #0: ffffffff901a5de8 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x22/0x250 [ 449.615152][ T30] #1: ffffffff8fca3588 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0xce2/0x2210 [ 449.630767][ T30] 1 lock held by syz-executor/7740: [ 449.635998][ T30] #0: ffffffff8fca3588 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x47e/0x1bd0 [ 449.655470][ T30] 1 lock held by syz-executor/7745: [ 449.665272][ T30] #0: ffffffff8fca3588 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x47e/0x1bd0 [ 449.683012][ T30] 1 lock held by syz-executor/7750: [ 449.693777][ T30] #0: ffffffff8fca3588 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x47e/0x1bd0 [ 449.711066][ T30] 1 lock held by syz-executor/7755: [ 449.723921][ T30] #0: ffffffff8fca3588 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x47e/0x1bd0 [ 449.738386][ T30] 1 lock held by syz-executor/7761: [ 449.743612][ T30] #0: ffffffff8fca3588 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x47e/0x1bd0 [ 449.770403][ T30] 1 lock held by syz-executor/7765: [ 449.775639][ T30] #0: ffffffff8fca3588 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x47e/0x1bd0 [ 449.795643][ T30] 1 lock held by syz-executor/7771: [ 449.805291][ T30] #0: ffffffff8fca3588 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x47e/0x1bd0 [ 449.824145][ T30] 1 lock held by syz-executor/7777: [ 449.833235][ T30] #0: ffffffff8fca3588 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x47e/0x1bd0 [ 449.847060][ T30] [ 449.849407][ T30] ============================================= [ 449.849407][ T30] [ 449.870787][ T30] NMI backtrace for cpu 0 [ 449.875149][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.13.0-rc7-syzkaller-00191-gfda5e3f28400 #0 [ 449.885665][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 449.895737][ T30] Call Trace: [ 449.899033][ T30] [ 449.901978][ T30] dump_stack_lvl+0x241/0x360 [ 449.906685][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 449.911905][ T30] ? __pfx__printk+0x10/0x10 [ 449.916532][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 449.921498][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 449.926980][ T30] ? _printk+0xd5/0x120 [ 449.931160][ T30] ? __pfx__printk+0x10/0x10 [ 449.935769][ T30] ? __wake_up_klogd+0xcc/0x110 [ 449.940643][ T30] ? __pfx__printk+0x10/0x10 [ 449.945251][ T30] ? __rcu_read_unlock+0xa1/0x110 [ 449.950299][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 449.956301][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 449.962301][ T30] watchdog+0xff6/0x1040 [ 449.966565][ T30] ? watchdog+0x1ea/0x1040 [ 449.971007][ T30] ? __pfx_watchdog+0x10/0x10 [ 449.975699][ T30] kthread+0x2f0/0x390 [ 449.979784][ T30] ? __pfx_watchdog+0x10/0x10 [ 449.984476][ T30] ? __pfx_kthread+0x10/0x10 [ 449.989085][ T30] ret_from_fork+0x4b/0x80 [ 449.993518][ T30] ? __pfx_kthread+0x10/0x10 [ 449.998131][ T30] ret_from_fork_asm+0x1a/0x30 [ 450.002935][ T30] [ 450.006670][ T30] Sending NMI from CPU 0 to CPUs 1: [ 450.012161][ C1] NMI backtrace for cpu 1 [ 450.012173][ C1] CPU: 1 UID: 0 PID: 24 Comm: ksoftirqd/1 Not tainted 6.13.0-rc7-syzkaller-00191-gfda5e3f28400 #0 [ 450.012192][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 450.012201][ C1] RIP: 0010:__sanitizer_cov_trace_pc+0x28/0x70 [ 450.012222][ C1] Code: 90 90 f3 0f 1e fa 48 8b 04 24 65 48 8b 0c 25 80 d4 03 00 65 8b 15 50 62 64 7e 81 e2 00 01 ff 00 74 11 81 fa 00 01 00 00 75 35 <83> b9 1c 16 00 00 00 74 2c 8b 91 f8 15 00 00 83 fa 02 75 21 48 8b [ 450.012236][ C1] RSP: 0018:ffffc900001e6898 EFLAGS: 00000246 [ 450.012251][ C1] RAX: ffffffff8a3a1343 RBX: 00000000ac1414aa RCX: ffff88801d2d0000 [ 450.012264][ C1] RDX: 0000000000000100 RSI: 0000000000000002 RDI: 0000000000000040 [ 450.012274][ C1] RBP: ffffc900001e6a10 R08: ffffffff8a3a1334 R09: 1ffffffff284ef10 [ 450.012287][ C1] R10: dffffc0000000000 R11: fffffbfff284ef11 R12: 1ffff110040d1c34 [ 450.012299][ C1] R13: 0000000000000002 R14: 0000000000000002 R15: ffff88802068e1a5 [ 450.012310][ C1] FS: 0000000000000000(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 450.012323][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 450.012335][ C1] CR2: 0000000020032000 CR3: 000000000e736000 CR4: 00000000003526f0 [ 450.012349][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 450.012359][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 450.012369][ C1] Call Trace: [ 450.012374][ C1] [ 450.012381][ C1] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 450.012400][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 450.012418][ C1] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 450.012436][ C1] ? nmi_handle+0x2a/0x5a0 [ 450.012460][ C1] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 450.012482][ C1] ? nmi_handle+0x14f/0x5a0 [ 450.012498][ C1] ? nmi_handle+0x2a/0x5a0 [ 450.012515][ C1] ? __sanitizer_cov_trace_pc+0x28/0x70 [ 450.012530][ C1] ? default_do_nmi+0x63/0x160 [ 450.012549][ C1] ? exc_nmi+0x123/0x1f0 [ 450.012566][ C1] ? end_repeat_nmi+0xf/0x53 [ 450.012583][ C1] ? fib_table_lookup+0x224/0x1870 [ 450.012603][ C1] ? fib_table_lookup+0x233/0x1870 [ 450.012624][ C1] ? __sanitizer_cov_trace_pc+0x28/0x70 [ 450.012640][ C1] ? __sanitizer_cov_trace_pc+0x28/0x70 [ 450.012656][ C1] ? __sanitizer_cov_trace_pc+0x28/0x70 [ 450.012678][ C1] [ 450.012683][ C1] [ 450.012689][ C1] fib_table_lookup+0x233/0x1870 [ 450.012713][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 450.012733][ C1] ? __pfx_fib_table_lookup+0x10/0x10 [ 450.012754][ C1] ? l3mdev_fib_table+0x18/0x160 [ 450.012771][ C1] __inet_dev_addr_type+0x2d8/0x4f0 [ 450.012786][ C1] ? __inet_dev_addr_type+0x152/0x4f0 [ 450.012802][ C1] ? __pfx___inet_dev_addr_type+0x10/0x10 [ 450.012815][ C1] ? NF_HOOK+0x29e/0x450 [ 450.012836][ C1] ? smpboot_thread_fn+0x544/0xa30 [ 450.012858][ C1] ? kthread+0x2f0/0x390 [ 450.012874][ C1] ? ret_from_fork+0x4b/0x80 [ 450.012893][ C1] ? l3mdev_fib_table+0x14b/0x160 [ 450.012910][ C1] ip_route_me_harder+0x42a/0x1360 [ 450.012938][ C1] ? __pfx_ip_route_me_harder+0x10/0x10 [ 450.012962][ C1] ? __kmalloc_node_track_caller_noprof+0x2a8/0x4c0 [ 450.012989][ C1] synproxy_send_tcp+0x356/0x6c0 [ 450.013016][ C1] synproxy_send_client_synack+0x8a4/0xe20 [ 450.013045][ C1] ? __pfx_synproxy_send_client_synack+0x10/0x10 [ 450.013071][ C1] ? synproxy_pernet+0x45/0x270 [ 450.013089][ C1] nft_synproxy_eval_v4+0x3ca/0x610 [ 450.013108][ C1] ? __pfx_nft_synproxy_eval_v4+0x10/0x10 [ 450.013126][ C1] ? nf_ip_checksum+0x13a/0x500 [ 450.013145][ C1] nft_synproxy_do_eval+0x362/0xa60 [ 450.013164][ C1] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 450.013181][ C1] ? __queue_work+0x199/0xf50 [ 450.013198][ C1] ? __pfx_validate_chain+0x10/0x10 [ 450.013217][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 450.013238][ C1] nft_do_chain+0x4ad/0x1da0 [ 450.013261][ C1] ? __pfx_nft_do_chain+0x10/0x10 [ 450.013277][ C1] ? __local_bh_enable_ip+0x168/0x200 [ 450.013310][ C1] ? __pfx_nf_nat_inet_fn+0x10/0x10 [ 450.013330][ C1] nft_do_chain_inet+0x418/0x6b0 [ 450.013348][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 450.013364][ C1] ? ipt_do_table+0x312/0x1860 [ 450.013388][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 450.013404][ C1] nf_hook_slow+0xc3/0x220 [ 450.013426][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 450.013446][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 450.013466][ C1] NF_HOOK+0x29e/0x450 [ 450.013487][ C1] ? NF_HOOK+0x9a/0x450 [ 450.013505][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 450.013526][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 450.013549][ C1] ? ip_rcv_finish+0x406/0x560 [ 450.013569][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 450.013589][ C1] NF_HOOK+0x3a4/0x450 [ 450.013607][ C1] ? __lock_acquire+0x1397/0x2100 [ 450.013624][ C1] ? NF_HOOK+0x9a/0x450 [ 450.013643][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 450.013661][ C1] ? ip_rcv_core+0x801/0xd10 [ 450.013686][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 450.013709][ C1] ? __pfx_ip_rcv+0x10/0x10 [ 450.013728][ C1] __netif_receive_skb+0x2bf/0x650 [ 450.013750][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 450.013766][ C1] ? __pfx___netif_receive_skb+0x10/0x10 [ 450.013785][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 450.013801][ C1] ? __pfx_lock_release+0x10/0x10 [ 450.013818][ C1] ? _raw_spin_lock_irq+0xdf/0x120 [ 450.013842][ C1] process_backlog+0x662/0x15b0 [ 450.013865][ C1] ? process_backlog+0x33b/0x15b0 [ 450.013890][ C1] ? __pfx_process_backlog+0x10/0x10 [ 450.013910][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 450.013928][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 450.013946][ C1] __napi_poll+0xcb/0x490 [ 450.013967][ C1] net_rx_action+0x89b/0x1240 [ 450.013997][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 450.014018][ C1] ? __pfx_tmigr_handle_remote+0x10/0x10 [ 450.014051][ C1] handle_softirqs+0x2d4/0x9b0 [ 450.014076][ C1] ? run_ksoftirqd+0xca/0x130 [ 450.014092][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 450.014112][ C1] ? preempt_schedule+0xe1/0xf0 [ 450.014135][ C1] run_ksoftirqd+0xca/0x130 [ 450.014149][ C1] ? __pfx_run_ksoftirqd+0x10/0x10 [ 450.014163][ C1] ? __pfx_run_ksoftirqd+0x10/0x10 [ 450.014179][ C1] ? __pfx_ksoftirqd_should_run+0x10/0x10 [ 450.014194][ C1] ? smpboot_thread_fn+0x2d3/0xa30 [ 450.014215][ C1] ? smpboot_thread_fn+0x4fb/0xa30 [ 450.014236][ C1] ? smpboot_thread_fn+0x656/0xa30 [ 450.014258][ C1] ? __pfx_run_ksoftirqd+0x10/0x10 [ 450.014272][ C1] smpboot_thread_fn+0x544/0xa30 [ 450.014294][ C1] ? smpboot_thread_fn+0x4e/0xa30 [ 450.014319][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 450.014342][ C1] kthread+0x2f0/0x390 [ 450.014358][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 450.014379][ C1] ? __pfx_kthread+0x10/0x10 [ 450.014396][ C1] ret_from_fork+0x4b/0x80 [ 450.014410][ C1] ? __pfx_kthread+0x10/0x10 [ 450.014427][ C1] ret_from_fork_asm+0x1a/0x30 [ 450.014455][ C1] [ 450.714461][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 450.721354][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.13.0-rc7-syzkaller-00191-gfda5e3f28400 #0 [ 450.731875][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 450.742300][ T30] Call Trace: [ 450.745593][ T30] [ 450.748542][ T30] dump_stack_lvl+0x241/0x360 [ 450.753247][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 450.758472][ T30] ? __pfx__printk+0x10/0x10 [ 450.763079][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 450.769085][ T30] ? vscnprintf+0x5d/0x90 [ 450.773435][ T30] panic+0x349/0x880 [ 450.777350][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 450.783522][ T30] ? __pfx_panic+0x10/0x10 [ 450.787957][ T30] ? tick_nohz_tick_stopped+0x82/0xb0 [ 450.793352][ T30] ? __irq_work_queue_local+0x137/0x410 [ 450.798914][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 450.804298][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 450.810466][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 450.816639][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 450.822812][ T30] watchdog+0x1035/0x1040 [ 450.827162][ T30] ? watchdog+0x1ea/0x1040 [ 450.831618][ T30] ? __pfx_watchdog+0x10/0x10 [ 450.836310][ T30] kthread+0x2f0/0x390 [ 450.840392][ T30] ? __pfx_watchdog+0x10/0x10 [ 450.845083][ T30] ? __pfx_kthread+0x10/0x10 [ 450.849688][ T30] ret_from_fork+0x4b/0x80 [ 450.854120][ T30] ? __pfx_kthread+0x10/0x10 [ 450.858724][ T30] ret_from_fork_asm+0x1a/0x30 [ 450.863519][ T30] [ 450.866812][ T30] Kernel Offset: disabled [ 450.871129][ T30] Rebooting in 86400 seconds..