last executing test programs: 1m40.033090985s ago: executing program 1 (id=153): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x20f42, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) openat$mice(0xffffffffffffff9c, 0x0, 0x41) socket(0x2, 0x80805, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xffffffffffffffb3}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x400000bd2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) socket$inet_udp(0x2, 0x2, 0x0) rt_sigprocmask(0x0, 0x0, 0x0, 0x0) mount$cgroup(0x0, &(0x7f0000000340)='./cgroup\x00', &(0x7f00000001c0), 0x3000443, &(0x7f0000000000)={[{@subsystem='hugetlb'}, {}]}) 1m39.03621101s ago: executing program 1 (id=156): socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x3, 0x300) syz_open_dev$admmidi(&(0x7f0000000000), 0x2, 0x1a9882) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r2 = syz_io_uring_setup(0x117, &(0x7f0000000100)={0x0, 0x0, 0x80, 0x2000000, 0x3a6}, &(0x7f00000001c0)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffc00, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000010000000100000009"], 0x18}, 0x0, 0x40000, 0x1}) io_uring_enter(r2, 0x47f6, 0x80ffff, 0x0, 0x0, 0x0) 1m34.585791007s ago: executing program 1 (id=167): pipe(&(0x7f0000000380)) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r0 = eventfd2(0x9, 0x80801) write$eventfd(r0, &(0x7f0000000140)=0xfffffffffffffff8, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xa) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setreuid(0xee00, 0x0) mkdir(&(0x7f0000000000)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='mounts\x00') read$FUSE(r4, &(0x7f0000000980)={0x2020}, 0x2020) 1m33.429890387s ago: executing program 1 (id=169): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r0, 0x0, 0xd}, 0x18) prlimit64(0x0, 0xe, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) socket(0x40000000015, 0x5, 0x0) r1 = syz_open_dev$sndmidi(0x0, 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) syz_open_dev$cec(&(0x7f00000000c0), 0xffffffffffffffff, 0x8802) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x8}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff, 0x2}, 0x0, 0x0) 1m30.375879268s ago: executing program 1 (id=175): socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x1}, 0x2) openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) 1m26.52730156s ago: executing program 1 (id=183): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="4c000000020681010000000000000000000000000500050002000000050001000700000005000400030000000900020073797a310000000011000300686173683a6e65742c6e6574"], 0x4c}, 0x1, 0x0, 0x0, 0x4040000}, 0x800) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)={0x50, 0x9, 0x6, 0x201, 0x0, 0x0, {0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x28, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @remote}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @rand_addr=0x64010101}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0xd24f4d5778621d46}, 0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) 1m11.106410589s ago: executing program 32 (id=183): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="4c000000020681010000000000000000000000000500050002000000050001000700000005000400030000000900020073797a310000000011000300686173683a6e65742c6e6574"], 0x4c}, 0x1, 0x0, 0x0, 0x4040000}, 0x800) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)={0x50, 0x9, 0x6, 0x201, 0x0, 0x0, {0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x28, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @remote}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @rand_addr=0x64010101}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0xd24f4d5778621d46}, 0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) 39.315951315s ago: executing program 0 (id=301): socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$kcm(0xa, 0x922000000003, 0x11) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000180)=ANY=[], 0x0}, 0x94) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) lseek(0xffffffffffffffff, 0x1800000, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r4) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x200}, 0x1c) listen(r5, 0x0) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r7 = accept(r5, 0x0, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0xd0}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)=ANY=[@ANYRES8=r2], 0x6c}, 0x1, 0x0, 0x0, 0x800}, 0x4000000) sendmsg$TEAM_CMD_OPTIONS_SET(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0x2400c840}, 0x0) connect$unix(r7, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r3, 0x40505331, &(0x7f0000000100)={{}, {0xe}, 0xbf00, 0xbf}) syz_io_uring_submit(0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080), 0x0) socket$nl_route(0x10, 0x3, 0x0) 36.692665807s ago: executing program 0 (id=304): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r0, 0x4038ae7a, &(0x7f0000000000)={0x2, 0x40000083, 0x0, 0x0, 0x1}) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sendmsg$nl_crypto(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xfffffffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f0000000100)={0x1b, "5660359c3245d1c42317afad7d48ed51000000000000000100", 0xffffffffffffffff}) r5 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x141100, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r5, 0xc0285700, &(0x7f0000000140)={0x1000, "340b7832ceefd131b8e6498c25f58fad9987ffe93bbabd18cf501922de974a27", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r4, 0xc0303e03, &(0x7f00000000c0)={"3c24139ed44aec57f2e2ad238a7b448ed886923c31d4b8affbf514fd00", r6, 0xffffffffffffffff}) ppoll(&(0x7f0000000000)=[{r7}], 0x1, 0x0, 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[], 0xb8}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x4e24, @multicast2=0xe0000001}, 0x10, 0x0}, 0x20002880) r8 = socket(0x1e, 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a44, 0x1700) syz_open_dev$sg(0x0, 0x6, 0x22400) connect$tipc(r8, &(0x7f0000000040)=@id, 0x10) shutdown(r8, 0x2) 35.032395029s ago: executing program 0 (id=308): pipe(&(0x7f0000000380)) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r0 = eventfd2(0x9, 0x80801) write$eventfd(r0, &(0x7f0000000140)=0xfffffffffffffff8, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xa) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) setreuid(0xee00, 0x0) mkdir(&(0x7f0000000000)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='mounts\x00') read$FUSE(r2, &(0x7f0000000980)={0x2020}, 0x2020) 34.540700733s ago: executing program 0 (id=310): socket$packet(0x11, 0x3, 0x300) openat$nullb(0xffffff9c, &(0x7f0000000040), 0x800, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$netlink(0x10, 0x3, 0x8000000004) socket$inet6_tcp(0xa, 0x1, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$kcm(0x2d, 0x2, 0x0) socket(0x10, 0x3, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000013c0)=ANY=[@ANYBLOB="64000000100003040000", @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000000000008000500", @ANYRES32=r0], 0x64}}, 0x0) 32.734736389s ago: executing program 4 (id=316): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="9c0100001b0001000000000000000000fc00"/32, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c8000800c40008"], 0x19c}}, 0x44000) 32.266224803s ago: executing program 0 (id=318): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r3, &(0x7f0000000040), 0xc) r4 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) write$binfmt_aout(r4, &(0x7f00000001c0)=ANY=[@ANYBLOB="03010000b5"], 0xc8) writev(r3, &(0x7f0000000180)=[{&(0x7f0000002680)="1e", 0xfdef}], 0x1) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000300)=0x9, 0x4) 32.176296259s ago: executing program 3 (id=319): pipe(&(0x7f0000000380)) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r0 = eventfd2(0x9, 0x80801) write$eventfd(r0, &(0x7f0000000140)=0xfffffffffffffff8, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xa) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) setreuid(0xee00, 0x0) mkdir(&(0x7f0000000000)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='mounts\x00') read$FUSE(r2, &(0x7f0000000980)={0x2020}, 0x2020) 32.060200844s ago: executing program 4 (id=320): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x4, 0x0, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x2}, 0x94) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) syz_emit_ethernet(0x52, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb08004c000078ac1414000a0101004414050300000000000000000a010101000000008903ce0702000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344], 0x0) r0 = add_key$user(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000280)="d25a9850a9d77f1068", 0x9, 0xfffffffffffffffe) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4800000010000504"], 0x48}, 0x1, 0x0, 0x0, 0x4000011}, 0x0) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r0}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 30.920296831s ago: executing program 3 (id=321): recvmmsg(0xffffffffffffffff, &(0x7f0000006e40), 0x0, 0x2, 0x0) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$FIOCLEX(r1, 0x5451) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, 0x0) unshare(0x22020600) r2 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x4) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={0xffffffffffffffff, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) socket$kcm(0x10, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0x105042, 0x189) r4 = socket(0x1, 0x803, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x1c, 0x15, 0x301, 0x0, 0x0, {0xc}, [@typed={0x8, 0x1, 0x0, 0x0, @fd=r4}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc001}, 0x4000000) sendmsg$NLBL_UNLABEL_C_STATICADD(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x0) r6 = openat$cgroup_ro(r3, &(0x7f00000000c0)='cgroup.controllers\x00', 0x5000000, 0x0) readv(r6, &(0x7f00000012c0)=[{&(0x7f0000000100)=""/4096, 0x1000}], 0x1) r7 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000001440), 0x0, 0x0) ioctl$IMDELTIMER(r7, 0x80044941, 0x0) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x40, @empty}}, 0xfffffffd, 0x0, 0x3f4, 0xfffffffe, 0x0, 0x0, 0x40}, 0x9c) 30.692554326s ago: executing program 2 (id=322): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) clock_settime(0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bind$rxrpc(0xffffffffffffffff, 0x0, 0x0) mount$9p_rdma(0x0, 0x0, 0x0, 0x3b8c039, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000700)=""/200, 0xc8, 0x0, 0x0) 30.466008589s ago: executing program 0 (id=323): r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x1}, 0x2) openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r5, 0xc008ae88, &(0x7f0000000300)=ANY=[@ANYBLOB="020000000000000082000040"]) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = socket$netlink(0x10, 0x3, 0x14) sendfile(r6, 0xffffffffffffffff, 0x0, 0x17) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) lremovexattr(&(0x7f0000000180)='./file0\x00', 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) write$FUSE_STATX(0xffffffffffffffff, &(0x7f0000000540)={0x130, 0x0, 0x0, {0x3, 0x6, 0x0, '\x00', {0x2000, 0x5, 0x7, 0xc07, 0x0, 0x0, 0xc000, '\x00', 0x1, 0x3ff, 0x0, 0x3, {0x0, 0x1}, {0x4, 0x800}, {0x961, 0x6a5ad1fb}, {0xfffffffffffffffe}, 0x80000000, 0xdc, 0x7e, 0xa}}}, 0x130) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x1, [{0x2, 0x1}]}, @void, @void, @void, @void, @void, @void}, 0x2f) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) 29.371967019s ago: executing program 2 (id=324): syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @inquiry_info={{0x2, 0xf}, {0x1, [{@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x9, 0x98, 0x2, "afa355", 0x1ff}]}}}, 0x12) writev(0xffffffffffffffff, 0x0, 0x0) 29.189251863s ago: executing program 3 (id=325): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x27}, 0x62) listen(r0, 0x3) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) socket$inet_smc(0x2b, 0x1, 0x0) socket(0x23, 0x5, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x80, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x8, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 29.122691376s ago: executing program 2 (id=326): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r5 = fanotify_init(0xf00, 0x0) fanotify_mark(r5, 0x105, 0x40009975, r4, 0x0) mknod(&(0x7f00000001c0)='./file0\x00', 0x400, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000040)={'vxcan1\x00'}) socket$packet(0x11, 0x2, 0x300) socket(0x10, 0x3, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) chdir(&(0x7f0000000140)='./file1\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) 29.117710709s ago: executing program 4 (id=327): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x20f42, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x41) socket(0x2, 0x80805, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xffffffffffffffb3}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) socket$inet_udp(0x2, 0x2, 0x0) rt_sigprocmask(0x0, 0x0, 0x0, 0x0) mount$cgroup(0x0, &(0x7f0000000340)='./cgroup\x00', &(0x7f00000001c0), 0x3000443, &(0x7f0000000000)={[{@subsystem='hugetlb'}, {}]}) 27.713123312s ago: executing program 2 (id=328): fsopen(&(0x7f0000000000)='pipefs\x00', 0x0) r0 = socket$inet(0xa, 0x801, 0x84) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r2 = dup(r1) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000001a300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r7, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) setsockopt$MRT6_INIT(r2, 0x29, 0xc8, 0x0, 0x0) connect$inet(r0, 0x0, 0x0) listen(r0, 0x8) rmdir(0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newqdisc={0x24, 0x24, 0xf0b, 0x3, 0x25dfdc00, {0x60, 0x0, 0x0, 0x0, {0xfff3, 0x6a9f0eede9332711}, {0xfff3, 0xffff}, {0xffe0, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x44045}, 0x10) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x4000000) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x1a}, @hci_ev_le_ext_adv_report={{}, {0x1, [{0x13, 0x1, @none, 0xa, 0xc, 0x30, 0x7, 0x2, 0x8, 0x5, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}]}}}}, 0x1d) 27.567949539s ago: executing program 3 (id=329): socket$packet(0x11, 0x3, 0x300) openat$nullb(0xffffff9c, &(0x7f0000000040), 0x800, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$netlink(0x10, 0x3, 0x8000000004) socket$inet6_tcp(0xa, 0x1, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$kcm(0x2d, 0x2, 0x0) socket(0x10, 0x3, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400000000000000", @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000000000008000500", @ANYRES32=r0], 0x64}}, 0x0) 27.441663891s ago: executing program 4 (id=330): pipe(&(0x7f0000000380)) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r0 = eventfd2(0x9, 0x80801) write$eventfd(r0, &(0x7f0000000140)=0xfffffffffffffff8, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xa) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) setreuid(0xee00, 0x0) mkdir(&(0x7f0000000000)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='mounts\x00') read$FUSE(r1, &(0x7f0000000980)={0x2020}, 0x2020) 26.494840501s ago: executing program 2 (id=331): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000100)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x7, 0x2, 0x0, 0x0, 0x0, {[@sack_perm={0x4, 0x2}, @sack_perm={0x4, 0x2}, @exp_fastopen={0xfe, 0x4}]}}}}}}}, 0x0) 26.164201126s ago: executing program 3 (id=332): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r3, &(0x7f0000000040), 0xc) r4 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) write$binfmt_aout(r4, &(0x7f00000001c0)=ANY=[@ANYBLOB="03010000b5"], 0xc8) writev(r3, &(0x7f0000000180)=[{&(0x7f0000002680)="1e", 0xfdef}], 0x1) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000300)=0x9, 0x4) 26.022238405s ago: executing program 4 (id=333): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xe8}, 0x1, 0x0, 0x0, 0x10}, 0x0) 25.736193209s ago: executing program 2 (id=334): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000280)=':', 0x1, 0x24000045, &(0x7f00000001c0)={0xa, 0x2, 0x2, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000140)='hybla\x00', 0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) shutdown(r0, 0x1) 20.616030591s ago: executing program 3 (id=335): recvmmsg(0xffffffffffffffff, &(0x7f0000006e40), 0x0, 0x2, 0x0) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$FIOCLEX(r1, 0x5451) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, 0x0) unshare(0x22020600) r2 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x4) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={0xffffffffffffffff, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) socket$kcm(0x10, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0x105042, 0x189) r4 = socket(0x1, 0x803, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x1c, 0x15, 0x301, 0x0, 0x0, {0xc}, [@typed={0x8, 0x1, 0x0, 0x0, @fd=r4}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc001}, 0x4000000) sendmsg$NLBL_UNLABEL_C_STATICADD(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x0) r6 = openat$cgroup_ro(r3, &(0x7f00000000c0)='cgroup.controllers\x00', 0x5000000, 0x0) readv(r6, &(0x7f00000012c0)=[{&(0x7f0000000100)=""/4096, 0x1000}], 0x1) r7 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000001440), 0x0, 0x0) ioctl$IMDELTIMER(r7, 0x80044941, 0x0) 15.9693367s ago: executing program 4 (id=336): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000580)={0x24, 0x0, 0x0, &(0x7f0000000500)={0x0, 0x22, 0x1, {[@global=@item_012={0x0, 0x1, 0x8}]}}, 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000000880)={0x2c, 0x0, 0x0, &(0x7f0000000d80)={0x0, 0xf, 0x5d, {0x5, 0xf, 0x5d, 0x2, [@wireless={0xb, 0x10, 0x1, 0x4, 0x60, 0xff, 0x0, 0x1, 0x6}, @generic={0x4d, 0x10, 0x1, "02447d08334bea7b1d94d35f8620b1a756e793ca3a663e4917f621b68f2e0b08b094da0a25f2d4c19ef1c368e16c11bd31d59bbe0dfcc0fb33291a7f013e709db7e6fea962557c49564b"}]}}, 0x0, 0x0}, 0x0) syz_usb_ep_write(r0, 0x81, 0xffffff75, &(0x7f00000002c0)="b9425b44651dd23241963599000000110000004a16941ff5f4b4f1f0add7fcf2b877fceafffffffffff1ffdf4cd9f5d3969890522c77157d88010000003a5bd5531d459dffff03000000000091ff000000e8f5b3371da3635b8b4fa637135800001f65e4b436aa9e50bc0f19b7d3372ff9ebcede1fb5e9428f54d5d1f0cc752cf246a5d2da34a5aa97dc14a469c3dd3e26b41c356484e46fd66e3f2c7807e8773eed7b94fa099ab84feadec2ea95f65bba452eae5b0900f98a979a88c517a2dc360a00237723e2f467af706ea17226296b3a10a351cb47aba2c6b836c90679b4dd859ddc9e4800448aab0000000000000d75f34bb50d8d7084") 0s ago: executing program 33 (id=323): r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x1}, 0x2) openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r5, 0xc008ae88, &(0x7f0000000300)=ANY=[@ANYBLOB="020000000000000082000040"]) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = socket$netlink(0x10, 0x3, 0x14) sendfile(r6, 0xffffffffffffffff, 0x0, 0x17) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) lremovexattr(&(0x7f0000000180)='./file0\x00', 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) write$FUSE_STATX(0xffffffffffffffff, &(0x7f0000000540)={0x130, 0x0, 0x0, {0x3, 0x6, 0x0, '\x00', {0x2000, 0x5, 0x7, 0xc07, 0x0, 0x0, 0xc000, '\x00', 0x1, 0x3ff, 0x0, 0x3, {0x0, 0x1}, {0x4, 0x800}, {0x961, 0x6a5ad1fb}, {0xfffffffffffffffe}, 0x80000000, 0xdc, 0x7e, 0xa}}}, 0x130) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x1, [{0x2, 0x1}]}, @void, @void, @void, @void, @void, @void}, 0x2f) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.97' (ED25519) to the list of known hosts. [ 84.254045][ T5823] cgroup: Unknown subsys name 'net' [ 84.470763][ T5823] cgroup: Unknown subsys name 'cpuset' [ 84.480528][ T5823] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 86.098373][ T5823] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 88.779237][ T5851] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 88.787199][ T5851] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 88.795260][ T5851] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 88.803703][ T5851] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 88.811732][ T5851] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 88.819246][ T5851] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 88.827097][ T5851] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 88.834408][ T5851] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 88.842490][ T5851] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 88.852294][ T5851] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 88.855572][ T5855] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 88.859599][ T5851] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 88.874769][ T5851] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 88.875626][ T5853] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 88.883808][ T5851] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 88.897201][ T5855] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 88.904837][ T51] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 88.912453][ T5855] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 88.913456][ T5856] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 88.930816][ T5855] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 88.931882][ T5853] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 88.946847][ T5853] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 88.947384][ T51] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 88.956747][ T5853] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 88.970441][ T5853] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 89.523568][ T5838] chnl_net:caif_netlink_parms(): no params data found [ 89.729094][ T5834] chnl_net:caif_netlink_parms(): no params data found [ 89.802600][ T5837] chnl_net:caif_netlink_parms(): no params data found [ 89.885971][ T5836] chnl_net:caif_netlink_parms(): no params data found [ 89.897715][ T5838] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.905493][ T5838] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.912905][ T5838] bridge_slave_0: entered allmulticast mode [ 89.921487][ T5838] bridge_slave_0: entered promiscuous mode [ 89.966030][ T5835] chnl_net:caif_netlink_parms(): no params data found [ 89.984112][ T5838] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.991897][ T5838] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.000355][ T5838] bridge_slave_1: entered allmulticast mode [ 90.008558][ T5838] bridge_slave_1: entered promiscuous mode [ 90.117564][ T5838] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.182043][ T5838] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.207330][ T5834] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.214481][ T5834] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.222158][ T5834] bridge_slave_0: entered allmulticast mode [ 90.229727][ T5834] bridge_slave_0: entered promiscuous mode [ 90.281844][ T5834] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.289154][ T5834] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.296582][ T5834] bridge_slave_1: entered allmulticast mode [ 90.303739][ T5834] bridge_slave_1: entered promiscuous mode [ 90.346549][ T5838] team0: Port device team_slave_0 added [ 90.381351][ T5837] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.388694][ T5837] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.396864][ T5837] bridge_slave_0: entered allmulticast mode [ 90.404119][ T5837] bridge_slave_0: entered promiscuous mode [ 90.412615][ T5837] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.420224][ T5837] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.428030][ T5837] bridge_slave_1: entered allmulticast mode [ 90.438010][ T5837] bridge_slave_1: entered promiscuous mode [ 90.461365][ T5838] team0: Port device team_slave_1 added [ 90.467618][ T5835] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.476853][ T5835] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.484099][ T5835] bridge_slave_0: entered allmulticast mode [ 90.491495][ T5835] bridge_slave_0: entered promiscuous mode [ 90.570577][ T5835] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.581494][ T5835] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.591348][ T5835] bridge_slave_1: entered allmulticast mode [ 90.599548][ T5835] bridge_slave_1: entered promiscuous mode [ 90.610473][ T5834] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.622843][ T5837] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.637415][ T5837] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.646771][ T5836] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.653907][ T5836] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.661218][ T5836] bridge_slave_0: entered allmulticast mode [ 90.668559][ T5836] bridge_slave_0: entered promiscuous mode [ 90.719927][ T5834] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.753377][ T5836] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.760809][ T5836] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.768605][ T5836] bridge_slave_1: entered allmulticast mode [ 90.777026][ T5836] bridge_slave_1: entered promiscuous mode [ 90.802482][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.809547][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.835846][ T5838] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.851568][ T5835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.864389][ T5835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.889782][ T5837] team0: Port device team_slave_0 added [ 90.899242][ T5837] team0: Port device team_slave_1 added [ 90.931370][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.939902][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.966151][ T5838] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.976815][ T5841] Bluetooth: hci4: command tx timeout [ 91.024685][ T5841] Bluetooth: hci3: command tx timeout [ 91.026738][ T5836] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.030466][ T5841] Bluetooth: hci1: command tx timeout [ 91.045929][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.052902][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.079371][ T5837] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.104706][ T5853] Bluetooth: hci0: command tx timeout [ 91.110559][ T5841] Bluetooth: hci2: command tx timeout [ 91.124224][ T5834] team0: Port device team_slave_0 added [ 91.132980][ T5836] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.142805][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.150108][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.178874][ T5837] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.202229][ T5835] team0: Port device team_slave_0 added [ 91.210203][ T5834] team0: Port device team_slave_1 added [ 91.266116][ T5836] team0: Port device team_slave_0 added [ 91.277716][ T5836] team0: Port device team_slave_1 added [ 91.286138][ T5835] team0: Port device team_slave_1 added [ 91.307850][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.315068][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.341625][ T5834] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.417969][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.425751][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.452289][ T5834] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.492414][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.499774][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.527061][ T5836] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.557749][ T5837] hsr_slave_0: entered promiscuous mode [ 91.564270][ T5837] hsr_slave_1: entered promiscuous mode [ 91.602194][ T5838] hsr_slave_0: entered promiscuous mode [ 91.609050][ T5838] hsr_slave_1: entered promiscuous mode [ 91.615515][ T5838] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 91.623216][ T5838] Cannot create hsr debugfs directory [ 91.639612][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.646685][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.672943][ T5836] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.705145][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.712120][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.738301][ T5835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.750617][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.757768][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.783762][ T5835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.871233][ T5836] hsr_slave_0: entered promiscuous mode [ 91.878017][ T5836] hsr_slave_1: entered promiscuous mode [ 91.884137][ T5836] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 91.892513][ T5836] Cannot create hsr debugfs directory [ 91.927366][ T10] cfg80211: failed to load regulatory.db [ 92.003412][ T5834] hsr_slave_0: entered promiscuous mode [ 92.016065][ T5834] hsr_slave_1: entered promiscuous mode [ 92.022404][ T5834] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 92.030316][ T5834] Cannot create hsr debugfs directory [ 92.079730][ T5835] hsr_slave_0: entered promiscuous mode [ 92.086455][ T5835] hsr_slave_1: entered promiscuous mode [ 92.092696][ T5835] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 92.100362][ T5835] Cannot create hsr debugfs directory [ 92.574766][ T5837] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 92.598528][ T5837] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 92.610159][ T5837] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 92.629762][ T5837] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 92.712069][ T5834] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 92.731473][ T5834] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 92.760660][ T5834] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 92.782371][ T5834] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 92.839193][ T5836] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 92.871288][ T5836] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 92.881891][ T5836] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 92.897271][ T5836] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 93.006375][ T5838] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 93.025660][ T5841] Bluetooth: hci4: command tx timeout [ 93.033717][ T5838] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 93.071362][ T5838] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 93.102021][ T5838] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 93.110356][ T5841] Bluetooth: hci1: command tx timeout [ 93.111159][ T5853] Bluetooth: hci3: command tx timeout [ 93.159543][ T5837] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.184755][ T5853] Bluetooth: hci2: command tx timeout [ 93.185053][ T5841] Bluetooth: hci0: command tx timeout [ 93.202574][ T5835] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 93.226555][ T5835] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 93.252917][ T5835] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 93.264078][ T5835] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 93.320089][ T5837] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.341836][ T5834] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.384974][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.392349][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.406749][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.413980][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.443295][ T5834] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.476144][ T5836] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.494222][ T3502] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.501402][ T3502] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.566956][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.574194][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.599690][ T5836] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.627879][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.635075][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.653650][ T200] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.660919][ T200] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.761875][ T5838] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.891904][ T5835] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.912609][ T5838] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.983307][ T3502] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.990626][ T3502] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.030590][ T3502] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.037850][ T3502] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.097671][ T5835] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.140579][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.147879][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.218661][ T3502] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.225990][ T3502] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.360151][ T5834] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.397990][ T5837] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.420534][ T5836] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.610646][ T5834] veth0_vlan: entered promiscuous mode [ 94.649924][ T5837] veth0_vlan: entered promiscuous mode [ 94.667274][ T5836] veth0_vlan: entered promiscuous mode [ 94.687205][ T5834] veth1_vlan: entered promiscuous mode [ 94.728467][ T5836] veth1_vlan: entered promiscuous mode [ 94.749211][ T5837] veth1_vlan: entered promiscuous mode [ 94.860102][ T5836] veth0_macvtap: entered promiscuous mode [ 94.882571][ T5836] veth1_macvtap: entered promiscuous mode [ 94.908110][ T5834] veth0_macvtap: entered promiscuous mode [ 94.941514][ T5837] veth0_macvtap: entered promiscuous mode [ 94.961168][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.975563][ T5834] veth1_macvtap: entered promiscuous mode [ 94.996973][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.013864][ T5837] veth1_macvtap: entered promiscuous mode [ 95.043409][ T5836] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.053096][ T5836] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.063038][ T5836] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.072407][ T5836] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.086973][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.099927][ T5835] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.107456][ T5841] Bluetooth: hci4: command tx timeout [ 95.118048][ T5838] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.140063][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.156145][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.185740][ T5841] Bluetooth: hci3: command tx timeout [ 95.191221][ T5841] Bluetooth: hci1: command tx timeout [ 95.199320][ T5834] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.210654][ T5834] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.220059][ T5834] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.228898][ T5834] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.265858][ T5841] Bluetooth: hci2: command tx timeout [ 95.271343][ T5841] Bluetooth: hci0: command tx timeout [ 95.296556][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.327936][ T5837] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.353736][ T5837] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.365591][ T5837] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.374354][ T5837] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.482749][ T3981] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.497900][ T3981] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.583149][ T5838] veth0_vlan: entered promiscuous mode [ 95.606390][ T200] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.610265][ T5838] veth1_vlan: entered promiscuous mode [ 95.614264][ T200] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.677995][ T3981] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.686723][ T3981] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.821868][ T5836] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 95.841440][ T3958] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.852371][ T5835] veth0_vlan: entered promiscuous mode [ 95.864852][ T3958] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.924352][ T5838] veth0_macvtap: entered promiscuous mode [ 95.959880][ T5838] veth1_macvtap: entered promiscuous mode [ 95.984612][ T0] NOHZ tick-stop error: local softirq work is pending, handler #182!!! [ 96.064243][ T3981] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.081923][ T3981] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.085165][ T5835] veth1_vlan: entered promiscuous mode [ 96.095242][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 96.176572][ T5956] ======================================================= [ 96.176572][ T5956] WARNING: The mand mount option has been deprecated and [ 96.176572][ T5956] and is ignored by this kernel. Remove the mand [ 96.176572][ T5956] option from the mount to silence this warning. [ 96.176572][ T5956] ======================================================= [ 96.206873][ T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.223747][ T5956] cgroup: subsys name conflicts with all [ 96.291860][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 96.302344][ T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.638825][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.668987][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.714321][ T5838] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.738805][ T5838] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.754421][ T5958] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 96.767578][ T5838] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.776386][ T5838] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.794905][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 96.803890][ T0] NOHZ tick-stop error: local softirq work is pending, handler #300!!! [ 96.979176][ T5959] netlink: 'syz.0.1': attribute type 9 has an invalid length. [ 97.008623][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 97.213455][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 97.235310][ T5841] Bluetooth: hci4: command tx timeout [ 97.315845][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 97.316825][ T5841] Bluetooth: hci1: command tx timeout [ 97.337773][ T5853] Bluetooth: hci3: command tx timeout [ 97.346586][ T5853] Bluetooth: hci0: command tx timeout [ 97.346624][ T5841] Bluetooth: hci2: command tx timeout [ 97.523666][ T5835] veth0_macvtap: entered promiscuous mode [ 97.630366][ T5835] veth1_macvtap: entered promiscuous mode [ 97.785232][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 97.795104][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 97.924438][ T3981] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.099274][ T3981] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.588964][ T5975] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 98.612011][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.700561][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.736337][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.744215][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.774439][ T5835] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.784441][ T5835] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.800467][ T5835] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.813537][ T5835] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.993027][ T5982] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 99.264290][ T5982] netlink: 28 bytes leftover after parsing attributes in process `syz.2.12'. [ 99.268497][ T78] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.124908][ T78] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.286332][ T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.330778][ T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.326854][ T978] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 101.407609][ T5999] cgroup: subsys name conflicts with all [ 101.515903][ T978] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 101.621516][ T978] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 101.658895][ T6000] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 101.789594][ T6005] netlink: 220 bytes leftover after parsing attributes in process `syz.3.16'. [ 101.844762][ T978] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 101.948810][ T978] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 102.035184][ T978] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 102.044326][ T978] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 102.109630][ T978] usb 2-1: Manufacturer: syz [ 102.344719][ T978] usb 2-1: config 0 descriptor?? [ 103.282830][ T978] appleir 0003:05AC:8243.0001: unknown main item tag 0x0 [ 103.359659][ T978] appleir 0003:05AC:8243.0001: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0 [ 104.503035][ T5911] usb 2-1: USB disconnect, device number 2 [ 104.779875][ T6034] fido_id[6034]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 104.816998][ T6044] netlink: 220 bytes leftover after parsing attributes in process `syz.0.29'. [ 105.275757][ T978] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 105.284693][ T5911] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 105.463096][ T5911] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 105.474620][ T978] usb 5-1: Using ep0 maxpacket: 16 [ 105.483628][ T5911] usb 1-1: config 0 has no interface number 0 [ 105.550552][ T5911] usb 1-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 105.606437][ T5911] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.659941][ T5911] usb 1-1: Product: syz [ 105.690880][ T5911] usb 1-1: Manufacturer: syz [ 105.723669][ T5911] usb 1-1: SerialNumber: syz [ 106.037532][ T978] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 106.075585][ T978] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 106.092475][ T978] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 106.109112][ T978] usb 5-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 106.118252][ T978] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.181916][ T978] usb 5-1: config 0 descriptor?? [ 106.242760][ T978] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input5 [ 106.367678][ T5192] pxrc 5-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 106.455968][ T5192] pxrc 5-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 106.511970][ T978] usb 5-1: USB disconnect, device number 2 [ 106.523626][ T5911] usb 1-1: config 0 descriptor?? [ 106.770351][ T5911] usb 1-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 106.933613][ T5911] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 106.965271][ T5911] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 107.687197][ T5911] usb 1-1: media controller created [ 107.724975][ T5911] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 108.093679][ T5911] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 108.186004][ T5911] usb 1-1: USB disconnect, device number 2 [ 108.565983][ T24] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 109.144683][ T24] usb 4-1: Using ep0 maxpacket: 8 [ 109.162724][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 109.181885][ T24] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 109.203319][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.262981][ T24] usb 4-1: config 0 descriptor?? [ 109.369765][ T6090] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 109.512273][ T24] iowarrior 4-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 110.032236][ T978] usb 4-1: USB disconnect, device number 2 [ 111.982240][ T6122] JFS: discard option not supported on device [ 111.992543][ T6122] Mount JFS Failure: -22 [ 111.996975][ T6122] jfs_mount failed w/return code = -22 [ 117.124791][ T6174] bridge0: port 3(syz_tun) entered blocking state [ 117.131944][ T6174] bridge0: port 3(syz_tun) entered disabled state [ 117.138813][ T6174] syz_tun: entered allmulticast mode [ 117.145689][ T6174] syz_tun: entered promiscuous mode [ 117.152280][ T6174] bridge0: port 3(syz_tun) entered blocking state [ 117.158947][ T6174] bridge0: port 3(syz_tun) entered forwarding state [ 121.107297][ T6216] syz.4.84 (6216) used greatest stack depth: 19672 bytes left [ 122.568308][ T1069] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 122.829579][ T1069] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 122.875084][ T6234] binder: 6233:6234 ioctl c0306201 0 returned -14 [ 122.884588][ T1069] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 122.944719][ T1069] usb 3-1: New USB device found, idVendor=04f3, idProduct=0754, bcdDevice= 0.00 [ 122.984715][ T1069] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.029626][ T1069] usb 3-1: config 0 descriptor?? [ 127.814093][ T1069] usbhid 3-1:0.0: can't add hid device: -71 [ 127.820341][ T1069] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 127.929078][ T1069] usb 3-1: USB disconnect, device number 2 [ 128.547541][ T6266] 8021q: VLANs not supported on ipvlan1 [ 128.566134][ T6266] comedi comedi0: Minor 1 could not be opened [ 132.154791][ T24] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 132.380787][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 132.687062][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 132.713400][ T24] usb 3-1: New USB device found, idVendor=04f3, idProduct=0754, bcdDevice= 0.00 [ 132.774673][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.855316][ T24] usb 3-1: config 0 descriptor?? [ 132.879803][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.894645][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.233303][ T6306] Zero length message leads to an empty skb [ 133.475486][ T24] usbhid 3-1:0.0: can't add hid device: -71 [ 133.488409][ T24] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 133.540355][ T24] usb 3-1: USB disconnect, device number 3 [ 133.980999][ T6308] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 134.178264][ T6312] 8021q: VLANs not supported on ipvlan1 [ 134.195355][ T6312] comedi comedi0: Minor 1 could not be opened [ 135.169533][ T6320] cgroup: subsys name conflicts with all [ 137.933858][ T5924] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 138.118606][ T5924] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 138.135538][ T5924] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 138.158224][ T5924] usb 3-1: New USB device found, idVendor=04f3, idProduct=0754, bcdDevice= 0.00 [ 138.180201][ T5924] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.205739][ T5924] usb 3-1: config 0 descriptor?? [ 138.584334][ T6357] cgroup: subsys name conflicts with all [ 138.856971][ T5924] usbhid 3-1:0.0: can't add hid device: -71 [ 138.864048][ T5924] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 139.537618][ T5924] usb 3-1: USB disconnect, device number 4 [ 143.267964][ T6384] sctp: failed to load transform for md5: -2 [ 144.487128][ T6396] (unnamed net_device) (uninitialized): down delay (7) is not a multiple of miimon (3), value rounded to 6 ms [ 144.737262][ T6408] cgroup: subsys name conflicts with all [ 144.764736][ T5924] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 145.145612][ T6396] 8021q: adding VLAN 0 to HW filter on device bond1 [ 145.289541][ T5924] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 145.442057][ T5924] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 145.454825][ T5924] usb 4-1: New USB device found, idVendor=04f3, idProduct=0754, bcdDevice= 0.00 [ 145.464001][ T5924] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.482825][ T5924] usb 4-1: config 0 descriptor?? [ 146.121600][ T5924] usbhid 4-1:0.0: can't add hid device: -71 [ 146.149505][ T5924] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 146.186227][ T5924] usb 4-1: USB disconnect, device number 3 [ 146.983036][ T6427] sctp: failed to load transform for md5: -2 [ 147.899026][ T6442] capability: warning: `syz.1.152' uses 32-bit capabilities (legacy support in use) [ 148.552788][ T6448] cgroup: subsys name conflicts with all [ 150.834704][ T6470] sctp: failed to load transform for md5: -2 [ 151.151094][ T6452] bridge0: port 3(syz_tun) entered blocking state [ 151.195809][ T6452] bridge0: port 3(syz_tun) entered disabled state [ 151.202480][ T6452] syz_tun: entered allmulticast mode [ 151.249104][ T6452] syz_tun: entered promiscuous mode [ 151.258199][ T6452] bridge0: port 3(syz_tun) entered blocking state [ 151.264745][ T6452] bridge0: port 3(syz_tun) entered forwarding state [ 151.579355][ T6491] overlayfs: failed to resolve './file1/file0': -2 [ 151.604619][ T5911] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 151.686824][ T6487] syz.3.160 uses obsolete (PF_INET,SOCK_PACKET) [ 151.799802][ T5911] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 151.831329][ T5911] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 151.930155][ T5911] usb 3-1: New USB device found, idVendor=04f3, idProduct=0754, bcdDevice= 0.00 [ 152.122413][ T5911] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.136336][ T5911] usb 3-1: config 0 descriptor?? [ 152.775574][ T6504] netlink: 'syz.0.164': attribute type 4 has an invalid length. [ 152.991477][ T6506] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 153.687636][ T5502] veth0_macvtap: left promiscuous mode [ 153.693356][ T5911] usbhid 3-1:0.0: can't add hid device: -71 [ 153.725119][ T5911] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 153.895277][ T5911] usb 3-1: USB disconnect, device number 5 [ 153.998373][ T6516] No control pipe specified [ 155.428624][ T6519] sctp: failed to load transform for md5: -2 [ 156.830452][ T6529] sctp: failed to load transform for md5: -2 [ 158.904612][ T5939] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 159.197321][ T6568] No control pipe specified [ 159.758304][ T5939] usb 4-1: Using ep0 maxpacket: 32 [ 159.958106][ T5939] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 159.985718][ T5939] usb 4-1: config 0 has no interface number 0 [ 160.013671][ T5939] usb 4-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 160.234658][ T5939] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.914546][ T5939] usb 4-1: Product: syz [ 160.918787][ T5939] usb 4-1: Manufacturer: syz [ 160.923404][ T5939] usb 4-1: SerialNumber: syz [ 161.093055][ T5939] usb 4-1: config 0 descriptor?? [ 161.129213][ T5939] usb 4-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 161.171675][ T5939] usb 4-1: selecting invalid altsetting 1 [ 161.192423][ T5939] usb 4-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 161.225152][ T6576] netlink: 20 bytes leftover after parsing attributes in process `syz.0.181'. [ 161.247401][ T5939] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 161.283816][ T5939] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 161.303894][ T5939] usb 4-1: media controller created [ 161.525102][ T5939] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 161.629173][ T5939] usb 4-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 161.804568][ T5939] zl10353_read_register: readreg error (reg=127, ret==-71) [ 162.394034][ T6583] sctp: failed to load transform for md5: -2 [ 162.586197][ T5939] usb 4-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 162.765062][ T5939] usb 4-1: USB disconnect, device number 4 [ 166.345103][ T1069] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 166.406956][ T5911] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 166.824612][ T1069] usb 3-1: Using ep0 maxpacket: 8 [ 166.831654][ T1069] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 166.843547][ T1069] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 167.271736][ T6630] sctp: failed to load transform for md5: -2 [ 167.474810][ T5911] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 167.494572][ T1069] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 167.573822][ T5911] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 167.601828][ T1069] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 167.663720][ T5911] usb 4-1: New USB device found, idVendor=04f3, idProduct=0754, bcdDevice= 0.00 [ 167.773246][ T1069] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 167.813679][ T5911] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.885568][ T1069] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.161141][ T5911] usb 4-1: config 0 descriptor?? [ 168.371978][ T1069] usb 3-1: GET_CAPABILITIES returned 0 [ 168.390570][ T1069] usbtmc 3-1:16.0: can't read capabilities [ 168.638358][ T1069] usb 3-1: USB disconnect, device number 6 [ 168.797450][ T5911] usbhid 4-1:0.0: can't add hid device: -71 [ 168.804111][ T5911] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 168.837175][ T5911] usb 4-1: USB disconnect, device number 5 [ 172.047982][ T6669] sctp: failed to load transform for md5: -2 [ 174.296315][ T6700] 8021q: VLANs not supported on ipvlan1 [ 174.307864][ T6700] comedi comedi0: Minor 1 could not be opened [ 175.948998][ T6718] sctp: failed to load transform for md5: -2 [ 177.395847][ T6736] macvlan0: entered allmulticast mode [ 177.492985][ T6736] veth1_vlan: entered allmulticast mode [ 177.934397][ T6736] veth1_vlan: left allmulticast mode [ 178.052315][ T6736] macvlan0 (unregistering): left allmulticast mode [ 179.057383][ T5853] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 179.067354][ T5853] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 179.075875][ T5853] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 179.084509][ T5853] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 179.100788][ T5853] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 179.764991][ T9] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 179.971004][ T6765] 8021q: VLANs not supported on ipvlan1 [ 180.065297][ T6766] comedi comedi0: Minor 1 could not be opened [ 180.384614][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 180.893194][ T9] usb 1-1: config index 0 descriptor too short (expected 29220, got 36) [ 180.910290][ T9] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 180.919104][ T9] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 180.940210][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 180.954577][ T9] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 180.964347][ T9] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 181.202370][ T5841] Bluetooth: hci5: command tx timeout [ 181.224550][ T9] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 181.233626][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 181.249081][ T9] usb 1-1: config 0 descriptor?? [ 181.479846][ T9] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 3 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 181.695782][ T5911] usb 1-1: USB disconnect, device number 3 [ 181.721603][ T6783] netlink: 20 bytes leftover after parsing attributes in process `syz.3.233'. [ 181.794988][ T6783] netlink: 88 bytes leftover after parsing attributes in process `syz.3.233'. [ 181.806543][ T5911] usblp0: removed [ 181.880492][ T6783] netlink: 48 bytes leftover after parsing attributes in process `syz.3.233'. [ 182.009442][ T6752] chnl_net:caif_netlink_parms(): no params data found [ 182.990228][ T6752] bridge0: port 1(bridge_slave_0) entered blocking state [ 183.034759][ T6752] bridge0: port 1(bridge_slave_0) entered disabled state [ 183.055844][ T6752] bridge_slave_0: entered allmulticast mode [ 183.069349][ T6752] bridge_slave_0: entered promiscuous mode [ 183.089925][ T6752] bridge0: port 2(bridge_slave_1) entered blocking state [ 183.139644][ T6752] bridge0: port 2(bridge_slave_1) entered disabled state [ 183.186722][ T6752] bridge_slave_1: entered allmulticast mode [ 183.224553][ T6752] bridge_slave_1: entered promiscuous mode [ 183.264572][ T5841] Bluetooth: hci5: command tx timeout [ 184.671632][ T6817] netlink: 20 bytes leftover after parsing attributes in process `syz.3.240'. [ 184.728029][ T6752] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 184.917554][ T6752] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 185.404672][ T5841] Bluetooth: hci5: command tx timeout [ 185.851790][ T6752] team0: Port device team_slave_0 added [ 186.183645][ T6752] team0: Port device team_slave_1 added [ 186.933941][ T6752] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 186.951422][ T6752] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 187.424627][ T5853] Bluetooth: hci5: command tx timeout [ 187.784220][ T6588] Set syz1 is full, maxelem 65536 reached [ 187.869272][ T6752] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 188.033226][ T6752] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 188.116414][ T6752] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 188.174238][ T6855] netlink: 'syz.3.249': attribute type 4 has an invalid length. [ 188.243921][ T6752] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 188.637556][ T6752] hsr_slave_0: entered promiscuous mode [ 188.703032][ T6752] hsr_slave_1: entered promiscuous mode [ 188.764028][ T6752] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 188.828939][ T6752] Cannot create hsr debugfs directory [ 189.460259][ T6875] warning: `syz.3.255' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 190.567845][ T78] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.622450][ T6891] netlink: 8 bytes leftover after parsing attributes in process `syz.3.259'. [ 190.643293][ T6891] netlink: 4 bytes leftover after parsing attributes in process `syz.3.259'. [ 190.858708][ T78] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.308746][ T78] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.651925][ T78] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.816519][ T6752] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 192.039348][ T6752] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 192.895831][ T6752] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 192.961117][ T6752] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 194.239559][ T6925] netlink: 28 bytes leftover after parsing attributes in process `syz.0.268'. [ 194.292337][ T78] bridge_slave_1: left allmulticast mode [ 194.303647][ T78] bridge_slave_1: left promiscuous mode [ 194.313528][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.313603][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.345229][ T78] bridge0: port 2(bridge_slave_1) entered disabled state [ 194.399900][ T78] bridge_slave_0: left allmulticast mode [ 194.407161][ T78] bridge_slave_0: left promiscuous mode [ 194.423638][ T78] bridge0: port 1(bridge_slave_0) entered disabled state [ 198.905474][ T78] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 198.989912][ T78] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 199.086557][ T78] bond0 (unregistering): Released all slaves [ 199.415832][ T6968] capability: warning: `syz.0.281' uses deprecated v2 capabilities in a way that may be insecure [ 199.706051][ T6968] mmap: syz.0.281 (6968) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 200.575468][ T6752] 8021q: adding VLAN 0 to HW filter on device bond0 [ 201.508109][ T6981] sctp: failed to load transform for md5: -2 [ 202.367388][ T6752] 8021q: adding VLAN 0 to HW filter on device team0 [ 203.077627][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 203.084857][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 203.246575][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 203.253739][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 206.016317][ T7022] binder: 7017:7022 ioctl c0046209 0 returned -22 [ 207.079122][ T78] hsr_slave_0: left promiscuous mode [ 207.172141][ T78] hsr_slave_1: left promiscuous mode [ 207.692804][ T7033] sctp: failed to load transform for md5: -2 [ 207.802283][ T78] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 207.854679][ T78] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 207.922265][ T78] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 207.942154][ T78] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 208.313242][ T78] veth1_macvtap: left promiscuous mode [ 208.492730][ T78] veth0_macvtap: left promiscuous mode [ 208.499106][ T78] veth1_vlan: left promiscuous mode [ 208.504828][ T78] veth0_vlan: left promiscuous mode [ 211.760590][ T5157] Bluetooth: hci2: command 0x0406 tx timeout [ 211.774433][ T51] Bluetooth: hci4: command 0x0406 tx timeout [ 211.780736][ T51] Bluetooth: hci0: command 0x0406 tx timeout [ 211.794084][ T5157] Bluetooth: hci1: command 0x0406 tx timeout [ 212.359971][ T7073] sctp: failed to load transform for md5: -2 [ 213.631313][ T7090] netlink: 68 bytes leftover after parsing attributes in process `syz.0.310'. [ 213.821737][ T78] team0 (unregistering): Port device team_slave_1 removed [ 214.226625][ T78] team0 (unregistering): Port device team_slave_0 removed [ 215.334910][ T7080] 8021q: adding VLAN 0 to HW filter on device bond0 [ 215.698529][ T7080] bond0: (slave rose0): Enslaving as an active interface with an up link [ 215.785406][ T7107] sctp: failed to load transform for md5: -2 [ 215.840770][ T7112] netlink: 220 bytes leftover after parsing attributes in process `syz.4.316'. [ 219.252372][ T6752] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 220.025159][ T7156] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 220.072125][ T7157] cgroup: subsys name conflicts with all [ 221.491871][ T7169] sctp: failed to load transform for md5: -2 [ 221.671245][ T7167] netlink: 68 bytes leftover after parsing attributes in process `syz.3.329'. [ 229.120237][ C1] sched: DL replenish lagged too much [ 258.262448][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 258.277094][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 308.019771][ T5855] Bluetooth: hci5: command 0x0406 tx timeout [ 318.353745][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 318.370003][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 424.514409][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 424.521434][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P24/1:b..l P6752/1:b..l P5196/1:b..l [ 424.531957][ C1] rcu: (detected by 1, t=10502 jiffies, g=18713, q=182761 ncpus=2) [ 424.539975][ C1] task:klogd state:R running task stack:21672 pid:5196 tgid:5196 ppid:1 task_flags:0x400100 flags:0x00004002 [ 424.554490][ C1] Call Trace: [ 424.557818][ C1] [ 424.560781][ C1] __schedule+0x16a2/0x4cb0 [ 424.565361][ C1] ? __switch_to+0xd74/0x1600 [ 424.570096][ C1] ? preempt_schedule_notrace+0xd1/0x110 [ 424.575786][ C1] ? __pfx___schedule+0x10/0x10 [ 424.580714][ C1] preempt_schedule_notrace+0xd1/0x110 [ 424.586473][ C1] ? __pfx_preempt_schedule_notrace+0x10/0x10 [ 424.592687][ C1] ? unwind_next_frame+0xa5/0x2390 [ 424.597830][ C1] ? arch_stack_walk+0xe4/0x150 [ 424.602721][ C1] preempt_schedule_notrace_thunk+0x16/0x30 [ 424.608663][ C1] ? unwind_next_frame+0xa5/0x2390 [ 424.613910][ C1] rcu_is_watching+0x7f/0xb0 [ 424.618538][ C1] ? arch_stack_walk+0xe4/0x150 [ 424.623518][ C1] ? unwind_next_frame+0xa5/0x2390 [ 424.628652][ C1] unwind_next_frame+0xd4/0x2390 [ 424.633719][ C1] ? unwind_next_frame+0xa5/0x2390 [ 424.638860][ C1] ? __unwind_start+0xf8/0x760 [ 424.643748][ C1] __unwind_start+0x5b9/0x760 [ 424.648470][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 424.654760][ C1] arch_stack_walk+0xe4/0x150 [ 424.659492][ C1] ? arch_stack_walk+0xe4/0x150 [ 424.664398][ C1] stack_trace_save+0x9c/0xe0 [ 424.669105][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 424.674510][ C1] save_stack+0xf7/0x1f0 [ 424.678799][ C1] ? __pfx_save_stack+0x10/0x10 [ 424.683707][ C1] ? page_ext_put+0x97/0xc0 [ 424.688263][ C1] __reset_page_owner+0x71/0x1f0 [ 424.693247][ C1] __free_frozen_pages+0xc65/0xe60 [ 424.698413][ C1] __put_partials+0x161/0x1c0 [ 424.703127][ C1] put_cpu_partial+0x17c/0x250 [ 424.707917][ C1] ? put_cpu_partial+0x6d/0x250 [ 424.712798][ C1] __slab_free+0x2f7/0x400 [ 424.717241][ C1] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 424.723138][ C1] ? __phys_addr+0xd3/0x180 [ 424.727667][ C1] qlist_free_all+0x97/0x140 [ 424.732291][ C1] kasan_quarantine_reduce+0x148/0x160 [ 424.737785][ C1] __kasan_kmalloc+0x22/0xb0 [ 424.742421][ C1] __kmalloc_node_track_caller_noprof+0x271/0x4e0 [ 424.748880][ C1] ? __alloc_skb+0x142/0x2d0 [ 424.753507][ C1] ? __alloc_skb+0x142/0x2d0 [ 424.758135][ C1] kmalloc_reserve+0x136/0x290 [ 424.762947][ C1] __alloc_skb+0x142/0x2d0 [ 424.767393][ C1] alloc_skb_with_frags+0xca/0x890 [ 424.772522][ C1] sock_alloc_send_pskb+0x857/0x990 [ 424.777741][ C1] ? __x64_sys_syslog+0x7c/0x90 [ 424.782627][ C1] ? do_syscall_64+0xfa/0x3b0 [ 424.787352][ C1] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 424.793120][ C1] ? smack_socket_getpeersec_dgram+0x320/0x430 [ 424.799322][ C1] unix_dgram_sendmsg+0x4f6/0x1870 [ 424.804475][ C1] ? kasan_quarantine_put+0xdd/0x220 [ 424.809803][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 424.815048][ C1] ? __pfx_smack_socket_sendmsg+0x10/0x10 [ 424.820788][ C1] ? kfree+0x18e/0x440 [ 424.824918][ C1] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 424.830522][ C1] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 424.835847][ C1] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 424.841425][ C1] __sock_sendmsg+0x219/0x270 [ 424.846136][ C1] __sys_sendto+0x3bd/0x520 [ 424.850699][ C1] ? __pfx___sys_sendto+0x10/0x10 [ 424.855770][ C1] ? __rseq_handle_notify_resume+0x37e/0x11f0 [ 424.861986][ C1] ? __pfx___rseq_handle_notify_resume+0x10/0x10 [ 424.868372][ C1] __x64_sys_sendto+0xde/0x100 [ 424.873170][ C1] do_syscall_64+0xfa/0x3b0 [ 424.877692][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 424.883785][ C1] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 424.889530][ C1] ? clear_bhb_loop+0x60/0xb0 [ 424.894239][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 424.900152][ C1] RIP: 0033:0x7fb3a1b60407 [ 424.904603][ C1] RSP: 002b:00007fff00e9a860 EFLAGS: 00000202 ORIG_RAX: 000000000000002c [ 424.913043][ C1] RAX: ffffffffffffffda RBX: 00007fb3a1a10c80 RCX: 00007fb3a1b60407 [ 424.921046][ C1] RDX: 000000000000005c RSI: 00007fff00e9a9a0 RDI: 0000000000000003 [ 424.929043][ C1] RBP: 00007fff00e9add0 R08: 0000000000000000 R09: 0000000000000000 [ 424.937029][ C1] R10: 0000000000004000 R11: 0000000000000202 R12: 00007fff00e9ade8 [ 424.945030][ C1] R13: 00007fff00e9a9a0 R14: 0000000000000041 R15: 00007fff00e9a9a0 [ 424.953050][ C1] [ 424.956101][ C1] task:syz-executor state:R running task stack:21544 pid:6752 tgid:6752 ppid:6732 task_flags:0x400140 flags:0x00004002 [ 424.969644][ C1] Call Trace: [ 424.972949][ C1] [ 424.975922][ C1] __schedule+0x16a2/0x4cb0 [ 424.980483][ C1] ? preempt_schedule_irq+0xb5/0x150 [ 424.985829][ C1] ? __pfx___schedule+0x10/0x10 [ 424.990726][ C1] ? notifier_call_chain+0x1b6/0x3e0 [ 424.996043][ C1] ? blocking_notifier_call_chain+0x6a/0x90 [ 425.003147][ C1] ? preempt_schedule_irq+0xaa/0x150 [ 425.008476][ C1] preempt_schedule_irq+0xb5/0x150 [ 425.013623][ C1] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 425.019383][ C1] ? rcu_irq_exit_check_preempt+0xdf/0x210 [ 425.025218][ C1] irqentry_exit+0x6f/0x90 [ 425.029663][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 425.035659][ C1] RIP: 0010:lock_acquire+0x175/0x360 [ 425.040992][ C1] Code: 00 00 00 00 9c 8f 44 24 30 f7 44 24 30 00 02 00 00 0f 85 cd 00 00 00 f7 44 24 08 00 02 00 00 74 01 fb 65 48 8b 05 ab e1 fe 10 <48> 3b 44 24 58 0f 85 f2 00 00 00 48 83 c4 60 5b 41 5c 41 5d 41 5e [ 425.060639][ C1] RSP: 0018:ffffc9001cc0ebe8 EFLAGS: 00000206 [ 425.066755][ C1] RAX: d179fd8a59b8fe00 RBX: 0000000000000000 RCX: d179fd8a59b8fe00 [ 425.074780][ C1] RDX: 0000000000000000 RSI: ffffffff8db71883 RDI: ffffffff8be1ca40 [ 425.082785][ C1] RBP: ffffffff822c910a R08: 0000000000000000 R09: ffffffff822c910a [ 425.090876][ C1] R10: dffffc0000000000 R11: ffffed100d323ebe R12: 0000000000000002 [ 425.098980][ C1] R13: ffffffff8e13f160 R14: 0000000000000000 R15: 0000000000000246 [ 425.107000][ C1] ? __page_table_check_zero+0xba/0x530 [ 425.112611][ C1] ? __page_table_check_zero+0xba/0x530 [ 425.118247][ C1] ? __page_table_check_zero+0xba/0x530 [ 425.123845][ C1] __page_table_check_zero+0xd7/0x530 [ 425.129260][ C1] ? __page_table_check_zero+0xba/0x530 [ 425.134842][ C1] ? __reset_page_owner+0x148/0x1f0 [ 425.140088][ C1] __free_frozen_pages+0xc78/0xe60 [ 425.145273][ C1] __put_partials+0x161/0x1c0 [ 425.150000][ C1] put_cpu_partial+0x17c/0x250 [ 425.154806][ C1] ? put_cpu_partial+0x6d/0x250 [ 425.159702][ C1] __slab_free+0x2f7/0x400 [ 425.164156][ C1] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 425.170100][ C1] ? __phys_addr+0xd3/0x180 [ 425.174656][ C1] qlist_free_all+0x97/0x140 [ 425.179283][ C1] kasan_quarantine_reduce+0x148/0x160 [ 425.184772][ C1] __kasan_slab_alloc+0x22/0x80 [ 425.189670][ C1] __kmalloc_cache_noprof+0x1be/0x3d0 [ 425.195100][ C1] ? ref_tracker_alloc+0x133/0x460 [ 425.200313][ C1] ref_tracker_alloc+0x133/0x460 [ 425.205306][ C1] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 425.210817][ C1] ? dev_get_by_index+0x22/0x2e0 [ 425.215823][ C1] ? dev_get_by_index+0x22/0x2e0 [ 425.220816][ C1] ? dev_get_by_index+0x22/0x2e0 [ 425.225834][ C1] fib_create_info+0x22f1/0x3210 [ 425.230833][ C1] fib_table_insert+0xc6/0x1b50 [ 425.235733][ C1] ? l3mdev_fib_table+0x18/0x160 [ 425.240745][ C1] fib_magic+0x2c4/0x390 [ 425.245049][ C1] ? __pfx_fib_magic+0x10/0x10 [ 425.249911][ C1] ? addr_event+0x83/0x470 [ 425.254382][ C1] fib_add_ifaddr+0x144/0x5f0 [ 425.259111][ C1] fib_inetaddr_event+0x12e/0x190 [ 425.264185][ C1] notifier_call_chain+0x1b6/0x3e0 [ 425.269344][ C1] blocking_notifier_call_chain+0x6a/0x90 [ 425.275111][ C1] __inet_insert_ifa+0xa13/0xbf0 [ 425.280123][ C1] ? __pfx___inet_insert_ifa+0x10/0x10 [ 425.285627][ C1] inet_rtm_newaddr+0xf3a/0x18b0 [ 425.290620][ C1] ? __pfx_inet_rtm_newaddr+0x10/0x10 [ 425.296150][ C1] ? __pfx_inet_rtm_newaddr+0x10/0x10 [ 425.301644][ C1] rtnetlink_rcv_msg+0x7cc/0xb70 [ 425.307148][ C1] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 425.312300][ C1] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 425.317800][ C1] ? __pfx_rcu_preempt_deferred_qs_irqrestore+0x10/0x10 [ 425.324794][ C1] netlink_rcv_skb+0x205/0x470 [ 425.329583][ C1] ? rcu_is_watching+0x15/0xb0 [ 425.334354][ C1] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 425.339844][ C1] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 425.345191][ C1] ? netlink_deliver_tap+0x2e/0x1b0 [ 425.350433][ C1] netlink_unicast+0x758/0x8d0 [ 425.355246][ C1] netlink_sendmsg+0x805/0xb30 [ 425.360054][ C1] ? __pfx_netlink_sendmsg+0x10/0x10 [ 425.365376][ C1] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 425.370702][ C1] ? __pfx_netlink_sendmsg+0x10/0x10 [ 425.376024][ C1] __sock_sendmsg+0x219/0x270 [ 425.380747][ C1] __sys_sendto+0x3bd/0x520 [ 425.385292][ C1] ? __pfx___sys_sendto+0x10/0x10 [ 425.390353][ C1] ? fput_close_sync+0x119/0x200 [ 425.395331][ C1] ? rcu_is_watching+0x15/0xb0 [ 425.400134][ C1] __x64_sys_sendto+0xde/0x100 [ 425.404942][ C1] do_syscall_64+0xfa/0x3b0 [ 425.409477][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 425.415574][ C1] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 425.421244][ C1] ? clear_bhb_loop+0x60/0xb0 [ 425.426055][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 425.431984][ C1] RIP: 0033:0x7fda253907bc [ 425.436450][ C1] RSP: 002b:00007fff79c4cda0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 425.444911][ C1] RAX: ffffffffffffffda RBX: 00007fda260e4620 RCX: 00007fda253907bc [ 425.452922][ C1] RDX: 0000000000000028 RSI: 00007fda260e4670 RDI: 0000000000000003 [ 425.460923][ C1] RBP: 0000000000000000 R08: 00007fff79c4cdf4 R09: 000000000000000c [ 425.468931][ C1] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 425.476927][ C1] R13: 0000000000000000 R14: 00007fda260e4670 R15: 0000000000000000 [ 425.484940][ C1] [ 425.488000][ C1] task:kworker/1:0 state:R running task stack:23816 pid:24 tgid:24 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 425.501638][ C1] Workqueue: events_power_efficient gc_worker [ 425.507767][ C1] Call Trace: [ 425.511079][ C1] [ 425.514039][ C1] __schedule+0x16a2/0x4cb0 [ 425.518606][ C1] ? preempt_schedule_irq+0xb5/0x150 [ 425.523930][ C1] ? __lock_acquire+0xab9/0xd20 [ 425.528820][ C1] ? __pfx___schedule+0x10/0x10 [ 425.533683][ C1] ? __virt_addr_valid+0x1c8/0x5c0 [ 425.538844][ C1] ? preempt_schedule_irq+0xaa/0x150 [ 425.544197][ C1] preempt_schedule_irq+0xb5/0x150 [ 425.549353][ C1] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 425.555153][ C1] ? rcu_irq_exit_check_preempt+0xdf/0x210 [ 425.561009][ C1] irqentry_exit+0x6f/0x90 [ 425.565467][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 425.571494][ C1] RIP: 0010:seqcount_lockdep_reader_access+0x17e/0x1c0 [ 425.578372][ C1] Code: f8 4d 85 e4 75 16 e8 21 c1 27 f8 eb 15 e8 1a c1 27 f8 e8 c5 94 cf 01 4d 85 e4 74 ea e8 0b c1 27 f8 fb 48 c7 04 24 0e 36 e0 45 <4b> c7 04 3e 00 00 00 00 66 43 c7 44 3e 09 00 00 43 c6 44 3e 0b 00 [ 425.598017][ C1] RSP: 0018:ffffc900001e7860 EFLAGS: 00000293 [ 425.604121][ C1] RAX: ffffffff89986445 RBX: 0000000000000000 RCX: ffff88801da90000 [ 425.612140][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 425.620153][ C1] RBP: ffffc900001e7910 R08: ffffffff8fa0c5f7 R09: 1ffffffff1f418be [ 425.628179][ C1] R10: dffffc0000000000 R11: fffffbfff1f418bf R12: 0000000000000200 [ 425.636191][ C1] R13: ffff88801d2dde18 R14: 1ffff9200003cf0c R15: dffffc0000000000 [ 425.644229][ C1] ? seqcount_lockdep_reader_access+0x175/0x1c0 [ 425.650531][ C1] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 425.657194][ C1] gc_worker+0x308/0x1380 [ 425.661584][ C1] ? gc_worker+0x264/0x1380 [ 425.666145][ C1] ? __pfx_gc_worker+0x10/0x10 [ 425.670958][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 425.676179][ C1] ? process_scheduled_works+0x9ef/0x17b0 [ 425.681937][ C1] ? process_scheduled_works+0x9ef/0x17b0 [ 425.687701][ C1] process_scheduled_works+0xade/0x17b0 [ 425.693315][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 425.699352][ C1] worker_thread+0x8a0/0xda0 [ 425.704003][ C1] kthread+0x711/0x8a0 [ 425.708108][ C1] ? __pfx_worker_thread+0x10/0x10 [ 425.713272][ C1] ? __pfx_kthread+0x10/0x10 [ 425.717905][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 425.723169][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 425.728398][ C1] ? __pfx_kthread+0x10/0x10 [ 425.732992][ C1] ret_from_fork+0x3f9/0x770 [ 425.737604][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 425.742775][ C1] ? __switch_to_asm+0x39/0x70 [ 425.747575][ C1] ? __switch_to_asm+0x33/0x70 [ 425.752372][ C1] ? __pfx_kthread+0x10/0x10 [ 425.757016][ C1] ret_from_fork_asm+0x1a/0x30 [ 425.761886][ C1] [ 425.764953][ C1] rcu: rcu_preempt kthread starved for 9413 jiffies! g18713 f0x2 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 425.776096][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 425.786145][ C1] rcu: RCU grace-period kthread stack dump: [ 425.792056][ C1] task:rcu_preempt state:R running task stack:26632 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00004000 [ 425.805601][ C1] Call Trace: [ 425.808910][ C1] [ 425.811877][ C1] __schedule+0x16a2/0x4cb0 [ 425.816455][ C1] ? schedule+0x165/0x360 [ 425.820841][ C1] ? __pfx___schedule+0x10/0x10 [ 425.825767][ C1] ? schedule+0x91/0x360 [ 425.830057][ C1] schedule+0x165/0x360 [ 425.834274][ C1] schedule_timeout+0x12b/0x270 [ 425.839189][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 425.844600][ C1] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 425.850532][ C1] ? __pfx_process_timeout+0x10/0x10 [ 425.855867][ C1] ? prepare_to_swait_event+0x341/0x380 [ 425.861463][ C1] rcu_gp_fqs_loop+0x301/0x1540 [ 425.866358][ C1] ? __pfx_rcu_watching_snap_recheck+0x10/0x10 [ 425.872515][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 425.877834][ C1] ? _raw_spin_unlock_irq+0x2e/0x50 [ 425.883082][ C1] rcu_gp_kthread+0x99/0x390 [ 425.887702][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 425.892931][ C1] ? __kthread_parkme+0x7b/0x200 [ 425.897921][ C1] ? __kthread_parkme+0x1a1/0x200 [ 425.902985][ C1] kthread+0x711/0x8a0 [ 425.907102][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 425.912330][ C1] ? __pfx_kthread+0x10/0x10 [ 425.916989][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 425.922232][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 425.927462][ C1] ? __pfx_kthread+0x10/0x10 [ 425.932063][ C1] ret_from_fork+0x3f9/0x770 [ 425.936674][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 425.941828][ C1] ? __switch_to_asm+0x39/0x70 [ 425.946725][ C1] ? __switch_to_asm+0x33/0x70 [ 425.951524][ C1] ? __pfx_kthread+0x10/0x10 [ 425.956144][ C1] ret_from_fork_asm+0x1a/0x30 [ 425.960970][ C1] [ 425.964023][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 425.970391][ C1] Sending NMI from CPU 1 to CPUs 0: [ 425.975631][ C0] NMI backtrace for cpu 0 [ 425.975662][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted 6.16.0-rc5-syzkaller-00053-g8c2e52ebbe88 #0 PREEMPT(full) [ 425.975682][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 425.975692][ C0] RIP: 0010:__lock_acquire+0x50c/0xd20 [ 425.975712][ C0] Code: 49 83 c7 28 41 89 c4 48 39 cb 0f 8d d6 00 00 00 48 83 fb 31 0f 83 92 00 00 00 41 8b 07 25 ff 1f 00 00 48 0f a3 05 74 8d 06 12 <73> 10 48 69 c0 c8 00 00 00 48 8d 88 f0 c2 45 93 eb 40 83 3d bb 1c [ 425.975726][ C0] RSP: 0018:ffffc90000006c50 EFLAGS: 00000003 [ 425.975742][ C0] RAX: 0000000000000007 RBX: 0000000000000001 RCX: 0000000000000002 [ 425.975752][ C0] RDX: 0000000000000003 RSI: 0000000000000003 RDI: ffffffff8de95280 [ 425.975763][ C0] RBP: 0000000000000000 R08: 0000000000000000 R09: ffffffff81ab6d9d [ 425.975778][ C0] R10: ffffc90000006e58 R11: fffff52000000dcd R12: 0000000000000003 [ 425.975789][ C0] R13: 0000000000000001 R14: ffffffff8de95dc0 R15: ffffffff8de95db8 [ 425.975801][ C0] FS: 0000000000000000(0000) GS:ffff888125c4f000(0000) knlGS:0000000000000000 [ 425.975814][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 425.975826][ C0] CR2: 00007ffe4d98cff8 CR3: 0000000031e50000 CR4: 00000000003526f0 [ 425.975840][ C0] Call Trace: [ 425.975847][ C0] [ 425.975857][ C0] ? is_module_text_address+0x1d/0x1e0 [ 425.975881][ C0] lock_acquire+0x120/0x360 [ 425.975896][ C0] ? is_module_text_address+0x1d/0x1e0 [ 425.975922][ C0] ? unwind_next_frame+0xa5/0x2390 [ 425.975939][ C0] ? unwind_next_frame+0x19ae/0x2390 [ 425.975956][ C0] ? is_module_text_address+0x1d/0x1e0 [ 425.975979][ C0] ? x86_64_start_reservations+0x24/0x30 [ 425.976003][ C0] is_module_text_address+0x39/0x1e0 [ 425.976025][ C0] ? is_module_text_address+0x1d/0x1e0 [ 425.976047][ C0] ? x86_64_start_reservations+0x24/0x30 [ 425.976071][ C0] kernel_text_address+0x94/0xe0 [ 425.976106][ C0] ? x86_64_start_reservations+0x24/0x30 [ 425.976129][ C0] __kernel_text_address+0xd/0x40 [ 425.976153][ C0] unwind_get_return_address+0x4d/0x90 [ 425.976171][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 425.976193][ C0] arch_stack_walk+0xfc/0x150 [ 425.976215][ C0] ? x86_64_start_reservations+0x24/0x30 [ 425.976256][ C0] stack_trace_save+0x9c/0xe0 [ 425.976277][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 425.976297][ C0] ? kasan_save_free_info+0x46/0x50 [ 425.976316][ C0] ? consume_skb+0x9e/0xf0 [ 425.976334][ C0] ? nft_synproxy_eval_v4+0x376/0x560 [ 425.976358][ C0] ? nft_synproxy_do_eval+0x345/0x570 [ 425.976382][ C0] ? __lock_acquire+0xab9/0xd20 [ 425.976397][ C0] kasan_save_track+0x3e/0x80 [ 425.976419][ C0] ? kasan_save_track+0x3e/0x80 [ 425.976439][ C0] ? kasan_save_free_info+0x46/0x50 [ 425.976455][ C0] ? __kasan_slab_free+0x62/0x70 [ 425.976476][ C0] ? kmem_cache_free+0x18f/0x400 [ 425.976500][ C0] ? nft_synproxy_eval_v4+0x376/0x560 [ 425.976521][ C0] ? nft_synproxy_do_eval+0x345/0x570 [ 425.976543][ C0] ? nft_do_chain+0x409/0x1920 [ 425.976564][ C0] ? nft_do_chain_inet+0x25d/0x340 [ 425.976586][ C0] ? nf_hook_slow+0xc5/0x220 [ 425.976603][ C0] ? NF_HOOK+0x206/0x3a0 [ 425.976620][ C0] ? NF_HOOK+0x30c/0x3a0 [ 425.976635][ C0] ? __netif_receive_skb+0x143/0x380 [ 425.976661][ C0] ? process_backlog+0x60e/0x14f0 [ 425.976677][ C0] ? __napi_poll+0xc4/0x480 [ 425.976690][ C0] ? net_rx_action+0x707/0xe30 [ 425.976705][ C0] ? handle_softirqs+0x283/0x870 [ 425.976722][ C0] ? __irq_exit_rcu+0xca/0x1f0 [ 425.976737][ C0] ? irq_exit_rcu+0x9/0x30 [ 425.976752][ C0] ? sysvec_apic_timer_interrupt+0xa6/0xc0 [ 425.976776][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 425.976794][ C0] ? pv_native_safe_halt+0x13/0x20 [ 425.976816][ C0] ? default_idle+0x13/0x20 [ 425.976831][ C0] ? default_idle_call+0x74/0xb0 [ 425.976847][ C0] ? do_idle+0x1e8/0x510 [ 425.976864][ C0] ? cpu_startup_entry+0x44/0x60 [ 425.976881][ C0] ? rest_init+0x2de/0x300 [ 425.976898][ C0] ? start_kernel+0x47d/0x500 [ 425.976928][ C0] ? nft_synproxy_eval_v4+0x376/0x560 [ 425.976951][ C0] kasan_save_free_info+0x46/0x50 [ 425.976968][ C0] __kasan_slab_free+0x62/0x70 [ 425.976991][ C0] kmem_cache_free+0x18f/0x400 [ 425.977017][ C0] nft_synproxy_eval_v4+0x376/0x560 [ 425.977044][ C0] ? __pfx_nft_synproxy_eval_v4+0x10/0x10 [ 425.977068][ C0] ? nf_ip_checksum+0x13c/0x510 [ 425.977098][ C0] nft_synproxy_do_eval+0x345/0x570 [ 425.977121][ C0] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 425.977145][ C0] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 425.977176][ C0] nft_do_chain+0x409/0x1920 [ 425.977199][ C0] ? nf_nat_inet_fn+0x924/0xba0 [ 425.977226][ C0] ? __pfx_nft_do_chain+0x10/0x10 [ 425.977262][ C0] ? __pfx_nf_nat_inet_fn+0x10/0x10 [ 425.977288][ C0] nft_do_chain_inet+0x25d/0x340 [ 425.977309][ C0] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 425.977332][ C0] ? ipt_do_table+0x2a3/0x1630 [ 425.977353][ C0] ? nf_nat_ipv4_local_in+0x223/0x720 [ 425.977381][ C0] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 425.977404][ C0] nf_hook_slow+0xc5/0x220 [ 425.977424][ C0] NF_HOOK+0x206/0x3a0 [ 425.977443][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 425.977461][ C0] ? NF_HOOK+0x9a/0x3a0 [ 425.977478][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 425.977511][ C0] ? ip_rcv_finish_core+0xda3/0x1c00 [ 425.977532][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 425.977551][ C0] ? skb_dst+0x4f/0xd0 [ 425.977569][ C0] ? ip_local_deliver+0x12a/0x1b0 [ 425.977588][ C0] NF_HOOK+0x30c/0x3a0 [ 425.977606][ C0] ? __pfx_ip_rcv_finish+0x10/0x10 [ 425.977624][ C0] ? NF_HOOK+0x9a/0x3a0 [ 425.977641][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 425.977657][ C0] ? ip_rcv_core+0x7f7/0xd00 [ 425.977675][ C0] ? __pfx_ip_rcv_finish+0x10/0x10 [ 425.977698][ C0] ? __pfx_ip_rcv+0x10/0x10 [ 425.977714][ C0] __netif_receive_skb+0x143/0x380 [ 425.977742][ C0] ? process_backlog+0x2d5/0x14f0 [ 425.977759][ C0] process_backlog+0x60e/0x14f0 [ 425.977783][ C0] ? __pfx_process_backlog+0x10/0x10 [ 425.977800][ C0] ? do_raw_spin_lock+0x121/0x290 [ 425.977825][ C0] __napi_poll+0xc4/0x480 [ 425.977838][ C0] ? net_rx_action+0x46d/0xe30 [ 425.977856][ C0] net_rx_action+0x707/0xe30 [ 425.977881][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 425.977914][ C0] handle_softirqs+0x283/0x870 [ 425.977933][ C0] ? __irq_exit_rcu+0xca/0x1f0 [ 425.977952][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 425.977971][ C0] ? irqtime_account_irq+0xb6/0x1c0 [ 425.977996][ C0] __irq_exit_rcu+0xca/0x1f0 [ 425.978012][ C0] ? __pfx___irq_exit_rcu+0x10/0x10 [ 425.978034][ C0] irq_exit_rcu+0x9/0x30 [ 425.978049][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 425.978073][ C0] [ 425.978078][ C0] [ 425.978085][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 425.978109][ C0] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 425.978133][ C0] Code: cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 93 3d 20 00 f3 0f 1e fa fb f4 88 dd 02 00 cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 425.978146][ C0] RSP: 0018:ffffffff8de07d80 EFLAGS: 000002c6 [ 425.978160][ C0] RAX: 520cda3f62b5bc00 RBX: ffffffff81975b68 RCX: 520cda3f62b5bc00 [ 425.978172][ C0] RDX: 0000000000000001 RSI: ffffffff8d984d62 RDI: ffffffff8be1ca40 [ 425.978183][ C0] RBP: ffffffff8de07ea8 R08: ffff8880b8632f5b R09: 1ffff110170c65eb [ 425.978196][ C0] R10: dffffc0000000000 R11: ffffed10170c65ec R12: ffffffff8fa0c5f0 [ 425.978208][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 1ffffffff1bd2a50 [ 425.978220][ C0] ? do_idle+0x1e8/0x510 [ 425.978242][ C0] default_idle+0x13/0x20 [ 425.978258][ C0] default_idle_call+0x74/0xb0 [ 425.978274][ C0] do_idle+0x1e8/0x510 [ 425.978295][ C0] ? __pfx_do_idle+0x10/0x10 [ 425.978319][ C0] cpu_startup_entry+0x44/0x60 [ 425.978337][ C0] rest_init+0x2de/0x300 [ 425.978361][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 425.978385][ C0] start_kernel+0x47d/0x500 [ 425.978402][ C0] x86_64_start_reservations+0x24/0x30 [ 425.978425][ C0] x86_64_start_kernel+0x143/0x1c0 [ 425.978447][ C0] common_startup_64+0x13e/0x147 [ 425.978477][ C0] [ 430.816373][ T31] INFO: task kworker/u8:11:6473 blocked for more than 162 seconds. [ 430.845318][ T31] Not tainted 6.16.0-rc5-syzkaller-00053-g8c2e52ebbe88 #0 [ 430.853028][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 433.202379][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 433.218641][ T1301] ieee802154 phy1 wpan1: encryption failed: -22