last executing test programs: 3m58.224988657s ago: executing program 0 (id=176): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000200)=0x1000000000005) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) gettid() timer_create(0x0, &(0x7f0000000140)={0x0, 0x41, 0x4}, &(0x7f0000bbdffc)) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="01000000050000000100000007"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000740), 0x20075, r4}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) 3m55.796593821s ago: executing program 0 (id=178): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0xffff}}]}}]}, 0x48}}, 0x20040084) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r6, {0xffff}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffe00, {0x0, 0x0, 0x0, r9, {0x8}, {0xffff}, {0xfff2, 0xffe1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x45, 0x1, {0xe, [0xc, 0x5, 0x0, 0xf, 0x10, 0x2, 0x4, 0x2, 0xf, 0x6, 0x6, 0x1, 0x8, 0x4, 0x10, 0x4], 0x3, [0xb, 0x5, 0x7fff, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x8000, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0x2, 0x5, 0x2, 0xfff5, 0x4, 0x8, 0x7, 0x9, 0x5, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x1, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r11) socket(0x2, 0x5, 0x0) ioctl$SIOCSIFHWADDR(r11, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) sendmmsg$inet(r0, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r10, @dev={0xac, 0x14, 0x14, 0x41}, @empty}}}], 0x20}}], 0x1, 0x0) 3m49.924976805s ago: executing program 0 (id=192): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@func_proto={0x0, 0x0, 0x0, 0xd, 0x2}, @union={0x0, 0x0, 0x0, 0x5, 0x0, 0x7ff}]}}, 0x0, 0x32, 0x0, 0x1, 0x7ff}, 0x28) 3m49.760647576s ago: executing program 0 (id=194): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)={0x28, 0x0, 0xb1d, 0x70bd2b, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_PHY={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x20008000}, 0x48850) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/unix\x00') socket$unix(0x1, 0x5, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, 0x0, 0x0) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), r2) syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfff}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000180)={0x1, &(0x7f0000000000)=[{0x6, 0x7, 0x0, 0x7fff8000}]}) close_range(r6, 0xffffffffffffffff, 0x0) 3m48.456497759s ago: executing program 0 (id=195): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[], 0x80}}, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa080045000060000000"], 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000020a010200000000000000000a0000060900010073797a310000000008000240000000018c000000020a010100000000000000000000000369000600e62807258a6d38caf4cb1d7a776a7a05e57912414e63207c5e61d47bb4016b21bd5593b033b0968722f2f0f4818a1a13fbb43e79d0ae674d071c0164df9d3701cc15211300766b6ebe326ada9e49cca5c2a07460e46e35eabfb48a4cd2cd83790d7e705b010000000900010073797a31000000001c000000090a030000000000000000000a00"], 0xf8}, 0x1, 0x0, 0x0, 0x2000c814}, 0x4000) socket$kcm(0x10, 0x2, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000913784fb6230c5a64e22e7a2fb459f9ea93efaf19b3f2a013c22fd93a5114a8bbfc55207893046413424a9a209cc98f8bb8c63f0fc9dcc4a368c32465583e91f10fe96952a9e544f2aa6c9605a6ef20dc3a9ee97a2fe8d8987f3cd8325dcf981d636db562548b4960632712968cbf690ae76429925506712f6e77b3400d092ce787c8bf638ea80cb4ac68b77c879b558898a1d55e31faad64c219da07e92cb", @ANYRES32=0x0, @ANYBLOB='\x00'/10, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/21], 0x48) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='clear_refs\x00') write$binfmt_format(r1, &(0x7f0000000300)='1\x00', 0x2) 3m45.201746476s ago: executing program 0 (id=200): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) memfd_create(0x0, 0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) setsockopt$sock_cred(r0, 0x1, 0x11, 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) landlock_create_ruleset(&(0x7f0000000140)={0xe97, 0x3, 0x3}, 0x18, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes-arm)\x00'}, 0x58) socket$inet_mptcp(0x2, 0x1, 0x106) socket$xdp(0x2c, 0x3, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0x8, 0x808, 0x80, 0x2, 0x3, 0x80, 0x100, 0x4d, 0x6, 0x5f, 0x9, 0x5, 0x98e, 0xffffff01, 0x6, 0x0, 0x0, 0x5, 0x4, 0x0, 0x50, 0x3c5b, 0x1, 0x8, 0xd, 0x2, 0x80, 0xffffffff, 0xe65e, 0x4, 0x7, 0x3, 0x8, 0x4c74, 0x80000000, 0x243, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0x1, 0x7, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x0, 0x5, 0x4, 0x40000008, 0x3ff, 0x80, 0x0, 0x7, 0x3, 0x8, 0x4, 0x1, 0x8], [0x8, 0x9, 0x8000012f, 0xf7, 0x5, 0xfffffff3, 0x129432e6, 0xc8, 0xf9, 0xe, 0xfffffffe, 0x6c7, 0x0, 0xfffffffc, 0x3, 0x0, 0x0, 0x7f, 0x27, 0xe, 0x312, 0x78, 0xea1, 0x4, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x9, 0x8, 0x9, 0x6, 0x4b, 0x8000, 0x1, 0xfe000000, 0x8, 0x2, 0x4, 0x9, 0x4, 0x1, 0x9, 0x3, 0x3, 0x0, 0xebf, 0x48c93693, 0x42, 0x3], [0x7, 0x408, 0x4, 0x9, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x9, 0x5, 0xb, 0x4, 0x4, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x3038, 0x3e7, 0xb, 0x5, 0x1, 0x6, 0x5, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x2080, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0x24ac5e56, 0x5, 0x1c, 0x120000, 0x3, 0x200a, 0x80a2ed, 0x4, 0x25], [0x9, 0xd9, 0x7, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x101, 0xa, 0x4, 0x7fff, 0xffff, 0xa620, 0x1, 0x5, 0x1, 0x2, 0x14c, 0x60a4, 0x6, 0x16, 0xffffffff, 0x80000004, 0x5, 0x4, 0xc8, 0x7ff, 0xfffff000, 0x10000, 0x3, 0x7e, 0x100, 0x101, 0x7, 0xaf, 0x8, 0x3, 0x227, 0x5, 0x8, 0x59, 0x30b1d693, 0xa1f, 0x89, 0xa673, 0x1, 0x6c1b, 0x0, 0x4, 0x1, 0xb1e, 0xd7, 0x200, 0xffff3443, 0xfff]}, 0x45c) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat$ocfs2_control(0xffffff9c, 0x0, 0x8000, 0x0) openat$cgroup_ro(r3, 0x0, 0x275a, 0x0) r4 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r4, &(0x7f0000000400)={0x18, 0x0, {0x2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 'lo\x00'}}, 0x1e) r5 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r5, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r5, 0x80047437, &(0x7f0000000080)) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$PPPIOCATTCHAN(r6, 0x40047438, &(0x7f0000000040)=0x2) ioctl$PPPIOCBRIDGECHAN(r6, 0x40047435, &(0x7f0000000200)=0x2) sendmmsg(r5, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0) unshare(0x6a040000) 3m29.382494794s ago: executing program 32 (id=200): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) memfd_create(0x0, 0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) setsockopt$sock_cred(r0, 0x1, 0x11, 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) landlock_create_ruleset(&(0x7f0000000140)={0xe97, 0x3, 0x3}, 0x18, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes-arm)\x00'}, 0x58) socket$inet_mptcp(0x2, 0x1, 0x106) socket$xdp(0x2c, 0x3, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0x8, 0x808, 0x80, 0x2, 0x3, 0x80, 0x100, 0x4d, 0x6, 0x5f, 0x9, 0x5, 0x98e, 0xffffff01, 0x6, 0x0, 0x0, 0x5, 0x4, 0x0, 0x50, 0x3c5b, 0x1, 0x8, 0xd, 0x2, 0x80, 0xffffffff, 0xe65e, 0x4, 0x7, 0x3, 0x8, 0x4c74, 0x80000000, 0x243, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0x1, 0x7, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x0, 0x5, 0x4, 0x40000008, 0x3ff, 0x80, 0x0, 0x7, 0x3, 0x8, 0x4, 0x1, 0x8], [0x8, 0x9, 0x8000012f, 0xf7, 0x5, 0xfffffff3, 0x129432e6, 0xc8, 0xf9, 0xe, 0xfffffffe, 0x6c7, 0x0, 0xfffffffc, 0x3, 0x0, 0x0, 0x7f, 0x27, 0xe, 0x312, 0x78, 0xea1, 0x4, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x9, 0x8, 0x9, 0x6, 0x4b, 0x8000, 0x1, 0xfe000000, 0x8, 0x2, 0x4, 0x9, 0x4, 0x1, 0x9, 0x3, 0x3, 0x0, 0xebf, 0x48c93693, 0x42, 0x3], [0x7, 0x408, 0x4, 0x9, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x9, 0x5, 0xb, 0x4, 0x4, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x3038, 0x3e7, 0xb, 0x5, 0x1, 0x6, 0x5, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x2080, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0x24ac5e56, 0x5, 0x1c, 0x120000, 0x3, 0x200a, 0x80a2ed, 0x4, 0x25], [0x9, 0xd9, 0x7, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x101, 0xa, 0x4, 0x7fff, 0xffff, 0xa620, 0x1, 0x5, 0x1, 0x2, 0x14c, 0x60a4, 0x6, 0x16, 0xffffffff, 0x80000004, 0x5, 0x4, 0xc8, 0x7ff, 0xfffff000, 0x10000, 0x3, 0x7e, 0x100, 0x101, 0x7, 0xaf, 0x8, 0x3, 0x227, 0x5, 0x8, 0x59, 0x30b1d693, 0xa1f, 0x89, 0xa673, 0x1, 0x6c1b, 0x0, 0x4, 0x1, 0xb1e, 0xd7, 0x200, 0xffff3443, 0xfff]}, 0x45c) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat$ocfs2_control(0xffffff9c, 0x0, 0x8000, 0x0) openat$cgroup_ro(r3, 0x0, 0x275a, 0x0) r4 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r4, &(0x7f0000000400)={0x18, 0x0, {0x2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 'lo\x00'}}, 0x1e) r5 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r5, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r5, 0x80047437, &(0x7f0000000080)) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$PPPIOCATTCHAN(r6, 0x40047438, &(0x7f0000000040)=0x2) ioctl$PPPIOCBRIDGECHAN(r6, 0x40047435, &(0x7f0000000200)=0x2) sendmmsg(r5, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0) unshare(0x6a040000) 2m24.637716851s ago: executing program 3 (id=297): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r4}, 0x10) socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000002c0)={'vxcan1\x00'}) socket$inet_tcp(0x2, 0x1, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r5, 0x560a, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x4, 0x4}) 2m21.52807694s ago: executing program 3 (id=303): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000200)=0x1000000000005) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="01000000050000000100000007"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000740), 0x20075, r3}, 0x38) 2m18.427381578s ago: executing program 3 (id=305): r0 = socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000000040)) 2m15.53540119s ago: executing program 3 (id=311): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) socket$inet(0x2, 0x1, 0x0) ptrace$ARCH_SHSTK_LOCK(0x1e, r0, 0x0, 0x5003) socket$packet(0x11, 0x3, 0x300) socket$inet_icmp_raw(0x2, 0x3, 0x1) recvmmsg(0xffffffffffffffff, &(0x7f0000001f80), 0x0, 0x40000002, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0xa1001) ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newtfilter={0x90, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r6, {0x0, 0x10}, {}, {0x8, 0x6}}, [@filter_kind_options=@f_flow={{0x9}, {0x58, 0x2, [@TCA_FLOW_ACT={0x54, 0x9, 0x0, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x4000000, 0x20000001, 0x4, 0x2}, 0x1, r6}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0xff, 0xf8}}]}, 0x90}, 0x1, 0x4000000}, 0x0) 2m14.125108556s ago: executing program 3 (id=315): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x2, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x7, 0x6361, 0x5, 0xffffffff, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x240080c1}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x80000, {0x0, 0x0, 0x0, r7, {0x0, 0x6}, {0x2, 0xb}, {0xffe0, 0xb}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2404c0f1}, 0x4000800) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 2m9.412369155s ago: executing program 3 (id=320): open_by_handle_at(0xffffffffffffffff, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) pidfd_send_signal(0xffffffffffffffff, 0x0, 0x0, 0x3) socket$netlink(0x10, 0x3, 0x4) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(0xffffffffffffffff, 0xc02064b9, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0xeeeeeeee}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r1, &(0x7f0000000340)="0a000300010000", 0x7) recvmmsg(r1, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0}, 0x5}], 0x40001af, 0x12122, 0x0) 1m53.637234888s ago: executing program 33 (id=320): open_by_handle_at(0xffffffffffffffff, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) pidfd_send_signal(0xffffffffffffffff, 0x0, 0x0, 0x3) socket$netlink(0x10, 0x3, 0x4) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(0xffffffffffffffff, 0xc02064b9, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0xeeeeeeee}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r1, &(0x7f0000000340)="0a000300010000", 0x7) recvmmsg(r1, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0}, 0x5}], 0x40001af, 0x12122, 0x0) 12.650368668s ago: executing program 5 (id=525): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)={0x28, 0x0, 0xb1d, 0x70bd2b, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_PHY={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x20008000}, 0x48850) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/unix\x00') socket$unix(0x1, 0x5, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, 0x0, 0x0) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), r2) syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8a}, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfff}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000180)={0x1, &(0x7f0000000000)=[{0x6, 0x7, 0x0, 0x7fff8000}]}) close_range(r6, 0xffffffffffffffff, 0x0) 10.39186699s ago: executing program 5 (id=534): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000200)=0x1000000000005) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="01000000050000000100000007"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000740), 0x20075, r4}, 0x38) 9.826401531s ago: executing program 1 (id=535): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000006c0)={0x0, &(0x7f00000000c0)}) set_robust_list(0x0, 0x0) 9.712787595s ago: executing program 1 (id=536): bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0xfffd, 0x0, 0x2}, {0x10000, 0x3, 0x1, 0x9, 0xfffffffffffffffc, 0x0, 0x5, 0xfffffffffffffff7}, {0x0, 0xc, 0xfffffffffffffffc, 0x8}, 0x0, 0x0, 0x1, 0x0, 0x1, 0x3}, {{@in6=@empty, 0x2, 0x6c}, 0x2, @in=@empty, 0x0, 0x5, 0x0, 0xb7}}, 0xe8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) modify_ldt$read(0x0, 0x0, 0x11) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r3, &(0x7f0000000480)={0x2, 0x4, @multicast2}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@mcast2, @in6=@private2, 0x0, 0x0, 0x4e21, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x6, 0x0, 0xad, 0x0, 0x0, 0x100000000000}, {}, 0x0, 0x0, 0x1, 0x0, 0x3}, {{@in6=@mcast2, 0x0, 0x33}, 0x0, @in=@loopback, 0x0, 0x0, 0x0, 0xb7, 0xfffffffe}}, 0xe8) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) 9.680216669s ago: executing program 2 (id=537): pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x1ffffffffee, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x5}, 0x0, &(0x7f00000002c0)={0x3fb, 0x8003, 0x400000000001, 0x9, 0x40000000000000, 0xf, 0x80000002, 0x2}, 0x0, 0x0) 7.830291731s ago: executing program 1 (id=539): setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) preadv2(0xffffffffffffffff, 0x0, 0x0, 0x33, 0x4, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001400)=ANY=[@ANYBLOB="3c00000010003b15000800"/20, @ANYRES32=0x0, @ANYBLOB="340e000000b401001400128009000100626f6e64000000000400028008000a00", @ANYRES32=r3], 0x3c}}, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)="2e00000011008b88040f80ee59acbc04130800480f0000005e2900421803001825800000000000000280000c0012", 0x2e}], 0x1}, 0x0) 7.688779298s ago: executing program 2 (id=540): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000340)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x3, &(0x7f00000001c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) syz_init_net_socket$ax25(0x3, 0x5, 0xc4) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000000000)='X', 0x1, 0x24008010, &(0x7f000005ffe4)={0xa, 0x0, 0x1, @local, 0x3}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000040)={0x0, 0xfc, 0xfe, 0x3, 0x0, 0x8, 0xb, 0x0, 0x0, 0xb0, 0xe, 0x0, 0x1, 0x2}, 0xe) shutdown(r2, 0x1) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r2, 0x84, 0x21, &(0x7f00000000c0)=0x7, 0x4) recvmmsg(r2, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}], 0x414, 0x0, 0x0) 6.95744329s ago: executing program 5 (id=541): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xd) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCMBIC(r2, 0x5415, 0x0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, 0x0, 0x0) r3 = syz_io_uring_setup(0xd1, &(0x7f0000000280)={0x0, 0x2970, 0x8, 0x22, 0x92}, &(0x7f0000000300)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000000)=0x8000103, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) io_uring_enter(r3, 0x47ba, 0x3000000, 0x0, 0x0, 0x0) 6.579019857s ago: executing program 4 (id=542): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)={0x28, 0x0, 0xb1d, 0x70bd2b, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_PHY={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x20008000}, 0x48850) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/unix\x00') socket$unix(0x1, 0x5, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, 0x0, 0x0) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), r2) syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8a}, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfff}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000180)={0x1, &(0x7f0000000000)=[{0x6, 0x7, 0x0, 0x7fff8000}]}) close_range(r6, 0xffffffffffffffff, 0x0) 6.23439752s ago: executing program 2 (id=543): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r4}, 0x10) socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000002c0)={'vxcan1\x00'}) socket$inet_tcp(0x2, 0x1, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r5, 0x560a, 0x0) 5.27274618s ago: executing program 2 (id=544): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000006c0)={0x0, &(0x7f00000000c0)}) set_robust_list(0x0, 0x0) 4.993014125s ago: executing program 2 (id=545): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r5 = syz_io_uring_setup(0xa0, &(0x7f0000000100)={0x0, 0x200089bd, 0x80, 0x1, 0x385}, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000300)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x40, 0x2007, @fd=r4, 0xc000000, &(0x7f00000000c0)=[{&(0x7f0000001600)=""/4096, 0x1000}], 0x1, 0x1e}) io_uring_enter(r5, 0x32dc, 0x0, 0xe, 0x0, 0x0) 4.992836726s ago: executing program 1 (id=546): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000200)=0x1000000000005) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) gettid() timer_create(0x0, &(0x7f0000000140)={0x0, 0x41, 0x4}, &(0x7f0000bbdffc)) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="01000000050000000100000007"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000740), 0x20075, r4}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) 4.939028722s ago: executing program 5 (id=547): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000340)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffc}, [@call={0x85, 0x0, 0x0, 0x7b}, @call={0x85, 0x0, 0x0, 0xa0}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 4.888749028s ago: executing program 4 (id=548): bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0xfffd, 0x0, 0x2}, {0x10000, 0x3, 0x1, 0x9, 0xfffffffffffffffc, 0x0, 0x5, 0xfffffffffffffff7}, {0x0, 0xc, 0xfffffffffffffffc, 0x8}, 0x0, 0x0, 0x1, 0x0, 0x1, 0x3}, {{@in6=@empty, 0x2, 0x6c}, 0x2, @in=@empty, 0x0, 0x5, 0x0, 0xb7}}, 0xe8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) modify_ldt$read(0x0, 0x0, 0x11) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r3, &(0x7f0000000480)={0x2, 0x4, @multicast2}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@mcast2, @in6=@private2, 0x0, 0x0, 0x4e21, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x6, 0x0, 0xad, 0x0, 0x0, 0x100000000000}, {}, 0x0, 0x0, 0x1, 0x0, 0x3}, {{@in6=@mcast2, 0x0, 0x33}, 0x0, @in=@loopback, 0x0, 0x0, 0x0, 0xb7, 0xfffffffe}}, 0xe8) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) 3.852096048s ago: executing program 2 (id=549): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000200)=0x1000000000005) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="01000000050000000100000007"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000740), 0x20075, r4}, 0x38) 3.740853982s ago: executing program 5 (id=550): prlimit64(0x0, 0xe, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x14, 0x44, 0x9, 0x0, 0x0, {0x2}}, 0x14}}, 0x24000044) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ioctl$HIDIOCGUSAGES(0xffffffffffffffff, 0xd01c4813, &(0x7f0000000240)={{0x3, 0xfffffefd, 0x5, 0xb7a4, 0x1, 0xffff}, 0x341, [0xc, 0x40, 0xcd6, 0x4, 0x6, 0x0, 0x3, 0x27, 0x9, 0x7a18fde9, 0x9, 0xf12, 0x4, 0x3, 0x378, 0x350bae1a, 0x4, 0x0, 0x1, 0xffff06bd, 0x0, 0xd4f, 0x7, 0xf2, 0x10, 0x5, 0x8, 0x6, 0x401, 0x80000000, 0x2401, 0x3ca5, 0x1, 0x0, 0xff, 0x4, 0x4, 0x3, 0x0, 0x0, 0x54, 0x80000000, 0x7fff, 0x7, 0x3, 0xa, 0x0, 0x10000, 0x401, 0x8, 0xffff, 0x91ba, 0x7, 0x9, 0x1, 0xb6, 0x20, 0xcb, 0x5, 0x7f, 0x5, 0x311, 0x66d1, 0xfffffffd, 0xa7d6, 0xb6eb, 0xc74, 0x77, 0x1, 0xff, 0x7, 0x3, 0x3fd, 0xedf4, 0x4, 0x1000, 0x6, 0xfffffffe, 0x8001, 0xc1, 0x1, 0x5, 0x1, 0x32, 0x98, 0x7f, 0x0, 0x401, 0x2, 0x2, 0x4680, 0x7, 0xe665, 0x3c6e, 0x3, 0x40, 0x80, 0x4b, 0x8000, 0x2, 0xb, 0x6, 0x4fa4, 0x80000002, 0x1, 0xb, 0x0, 0xfffffffa, 0x3, 0x9, 0x100, 0xfe, 0x4, 0x40, 0x9, 0x1b, 0x1ff, 0x7ff, 0x2, 0x80000000, 0xffff, 0x9, 0x0, 0x6, 0x2, 0x1, 0x3, 0xa0, 0xf, 0x1ff, 0x9, 0x7, 0x6, 0x400, 0x8, 0xff2, 0x6, 0x0, 0x6, 0x0, 0x9, 0x1, 0x8000, 0x664, 0x4, 0x9, 0x9, 0x2, 0x4, 0xfffffffd, 0x10, 0x0, 0x9, 0x10000, 0x1, 0x9, 0xf7a, 0xc6, 0x1, 0x4, 0x6, 0xffffffff, 0x6, 0x10001, 0x3042c26b, 0x68, 0x7, 0x1, 0x5, 0x3, 0x9a3f, 0x400000, 0x0, 0x80000067, 0xffff0000, 0x7, 0x10000000, 0x10001, 0x7, 0x3, 0x10, 0x10a, 0x2, 0x40, 0x1c, 0x80, 0xb5f8, 0x8bc, 0x3, 0x101, 0x5, 0x63, 0x4, 0x4, 0x10, 0x1000, 0x288c, 0x1ffe, 0x73ee, 0x1, 0x5, 0x9, 0x7fffffff, 0x73, 0x7, 0x8, 0x6, 0x400, 0x40, 0x0, 0x0, 0x0, 0x546c, 0x981, 0x5aa, 0x7fff, 0x7, 0x4, 0x8, 0x6688, 0x45e4, 0x5, 0x7, 0x1, 0x5, 0x3, 0x0, 0x1, 0x2, 0x2, 0x4, 0xce, 0xf, 0x0, 0x1, 0x667, 0x3, 0x0, 0x9, 0x9, 0x37c, 0x10001, 0x9, 0x1, 0x1, 0x2, 0x6, 0x4, 0x6, 0x1, 0x9, 0x6, 0xfffffffa, 0x2, 0x0, 0x9, 0x5, 0x2, 0x7, 0x3, 0xffffff1b, 0x9, 0x2, 0xd, 0x34ea, 0x10000, 0x0, 0x80000001, 0x8, 0x8000, 0x3a, 0x10, 0x8, 0x9, 0x5, 0x1, 0x6, 0x10001, 0x0, 0x4, 0x10000, 0x9, 0xffff, 0xe, 0x89, 0x2, 0x7, 0x1, 0x73, 0x3, 0x9, 0x2, 0x1, 0x9, 0x2, 0x7, 0x0, 0x2, 0x80000004, 0x29, 0x9, 0x0, 0x80000004, 0x4, 0x0, 0x1, 0x4, 0x5, 0x4, 0x0, 0xf, 0xa, 0x100, 0x4, 0x59b, 0x7, 0x9, 0x9, 0x3, 0x2, 0x4, 0xbf, 0x0, 0x8, 0x40, 0x800000d3, 0x7, 0x1, 0x89aa, 0x8, 0x7, 0xf0ce, 0x4, 0x1, 0x0, 0x2, 0xc6, 0x1000, 0x5, 0x937, 0xa, 0x6, 0x3, 0xffffffff, 0x8, 0x9, 0x0, 0xffffffff, 0xbe, 0x1, 0x7, 0x2, 0xffffffff, 0x0, 0x3d9, 0x0, 0xc, 0x9, 0x7, 0xfffffeff, 0x100, 0x2, 0x7fff, 0x101, 0x7, 0x6, 0x706, 0x2, 0x49, 0xe, 0xfffffff7, 0xfffff772, 0x8, 0x80000000, 0x6, 0x1, 0xa9c, 0x9, 0x7, 0x1, 0x2, 0x5, 0x1000, 0x6, 0x1ff, 0x9, 0x3, 0x3, 0x10001, 0xffff0000, 0xf, 0x4, 0xffffa5ba, 0xffffa9b4, 0xb, 0x4, 0x8000005, 0x3, 0x4b5f, 0x6, 0xa, 0xffffffff, 0x1, 0x80000000, 0xb, 0x0, 0xc8f, 0x1, 0x7, 0x8, 0x0, 0x10000, 0x57dc, 0x818a, 0x10, 0x8, 0x10, 0xfffffffc, 0xfffff001, 0xa, 0x5, 0x5, 0x4, 0xfff, 0x9, 0x10, 0xfffffffb, 0x4, 0xc2, 0x7f, 0x5, 0x2, 0x80000000, 0xd, 0x3, 0x1, 0x0, 0x5, 0xb8, 0x101, 0x401, 0x2, 0x7, 0xc, 0x6623258, 0xf2, 0x741, 0xae6, 0x9, 0xffffa0ae, 0x9, 0x6, 0x2, 0x8, 0x9, 0x1, 0x81, 0x9a, 0x9, 0xb, 0x800, 0x4, 0x3ff, 0x5, 0x7, 0x7, 0x8, 0xfe, 0x7f, 0x9, 0x4, 0x2, 0x20000000, 0x2, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x7, 0x8000001, 0x0, 0xfff, 0x105, 0x4, 0x0, 0x96c6, 0xc, 0x5, 0xfff, 0x100, 0xffff, 0x1, 0x401, 0xf0, 0x0, 0xfffff53d, 0x9, 0x2, 0x6, 0x0, 0x6, 0x4b15, 0x10000, 0x1, 0x9, 0x1, 0xd, 0x9, 0x4, 0x9, 0x1, 0x6, 0x0, 0x3, 0x10001, 0x1, 0x7, 0x1, 0x5, 0x8, 0xffffc487, 0x200, 0x10001, 0x37c, 0x7, 0x6, 0x6, 0x8, 0xfffffe00, 0x1, 0x1, 0x0, 0x10, 0x0, 0x3, 0x4, 0x80000000, 0xb46d, 0x3, 0x1000, 0x1eb4bce6, 0x10, 0x8, 0x1, 0x5, 0x1, 0x5, 0x9, 0x1000, 0x7, 0x62f2f805, 0xc, 0x3, 0xffffffff, 0x0, 0x7e, 0x6, 0x8, 0x40, 0x2, 0x2, 0xa, 0x5, 0x6, 0x80000000, 0x2, 0x8, 0x7, 0x7, 0x1, 0x5, 0x9, 0x6709, 0x80000001, 0x0, 0x3, 0x8, 0x6, 0x0, 0xa958, 0xff, 0x5, 0x6, 0x2, 0x4, 0x10000, 0x80000001, 0x5, 0x1c00, 0x9, 0x0, 0xb7, 0x3, 0xff, 0x9, 0xffff, 0x80, 0xfea5, 0x7fff, 0x7, 0x7, 0x7, 0x7487, 0x9, 0x8, 0x0, 0x5, 0xf, 0x5, 0xe, 0x6, 0x1000, 0x3, 0x7, 0x382d, 0x459, 0xcad, 0x9, 0x0, 0x2, 0x9, 0x5, 0xffff8000, 0xe0, 0xfffffffb, 0x85, 0xffffffff, 0x2, 0x7, 0xa05a, 0x0, 0x0, 0x101, 0x35, 0x8, 0x1, 0x1, 0x30, 0xffffff7e, 0x1, 0x2, 0x9, 0x3, 0x7, 0x8, 0x8, 0x4000, 0x1, 0x4, 0x15294b70, 0x3, 0x3, 0x2, 0x43, 0x3, 0x9, 0x5, 0x80000004, 0x9, 0x0, 0x5, 0x81, 0x1, 0x2, 0x3fd, 0x1df, 0x6, 0x6, 0xfffffffa, 0x1a, 0x9, 0x2, 0x9, 0x1, 0x9, 0x8, 0x2c1, 0x9e95, 0x2, 0xfffffedd, 0x30c8, 0x2, 0x389f, 0x7b, 0x0, 0x8, 0x9, 0x6, 0x9, 0x9, 0x8, 0x5, 0x8, 0x1ff, 0x7fff, 0x3, 0x8000002, 0x8, 0x2b, 0x200006, 0x80000004, 0x1, 0x10000002, 0xfb4, 0xbfa, 0x48, 0x405, 0x6, 0x4, 0x8001, 0x9, 0x8, 0xffffffff, 0x6ae574d2, 0x5, 0xfffffe00, 0x1000, 0x5, 0x92, 0x3, 0x7fffffff, 0xd7, 0x8001, 0x905, 0x3, 0x6, 0xfffffb31, 0xb, 0x4, 0x7, 0x8, 0x1, 0x6, 0x1, 0xff, 0x100, 0x8, 0x5, 0x6, 0x80000000, 0x0, 0x100a, 0x7fffffff, 0x7fff, 0x2, 0x1a, 0x2, 0x9af, 0x10001, 0x8, 0x4, 0x8, 0x6, 0x7742348d, 0x5, 0x5, 0x1f, 0x40, 0x0, 0x6, 0x8, 0x7, 0x7, 0x8, 0x17f, 0x6, 0x2, 0x5, 0x6, 0x1, 0xb, 0xe, 0x5, 0x1, 0xfe7, 0xfffffffc, 0xfffffffa, 0x7ff, 0x3e9, 0x0, 0x3, 0x2000, 0xd, 0x3, 0x4, 0x3, 0x81, 0x8, 0x14, 0x8, 0x9, 0x6, 0xffff, 0xf28c, 0x5, 0x6, 0x4, 0x7fffffff, 0xffff, 0x7fffffff, 0xc9, 0x2, 0x0, 0x924, 0x6, 0x100, 0x1, 0x5, 0xffff351b, 0x8, 0xfffffffb, 0x7, 0x9, 0x2, 0x5, 0x4, 0x1, 0x4, 0xff, 0xee, 0x2, 0x4, 0x8, 0x9f, 0x7, 0x3, 0x9, 0xc9, 0x10001, 0x1, 0x1, 0xfffffff7, 0x0, 0x5, 0x5, 0x6, 0x400, 0x51, 0x7, 0xefb, 0xb8, 0x8, 0x5, 0xfffffff7, 0x7, 0x7, 0x5, 0x6330, 0x0, 0x6, 0xea, 0x0, 0xfff, 0x809, 0x6, 0x0, 0x6, 0xffff, 0xfffffffa, 0x3, 0xa850, 0x1, 0x6, 0x7, 0x5, 0x2000007, 0x2ec, 0x9, 0x6, 0x401, 0x6, 0xfff, 0x0, 0xa7b, 0x62cc, 0xfffffff7, 0x7, 0x40, 0xa, 0x8, 0x3, 0xe, 0x1, 0x1, 0xc, 0x40, 0x3, 0x4, 0x5, 0x5, 0x7ff, 0x5, 0x8, 0x5, 0x3, 0x3, 0x2, 0x80000002, 0x54, 0x400, 0x101, 0x8, 0xa, 0xb, 0x7, 0x3, 0x72, 0x80, 0x1000, 0x7, 0x800, 0x6, 0xd19, 0x3, 0x93c, 0x6, 0x0, 0x0, 0xe, 0x5, 0x3, 0xfffffffa, 0xa01, 0xf3, 0x65, 0x8, 0xe, 0x3, 0x3ff, 0x5, 0x2, 0x6, 0xfffffff8, 0xffff, 0xfffffff9, 0x9, 0x5, 0x62, 0x8, 0x1, 0xfffffffb, 0x1af88, 0x2, 0x9, 0x7, 0x0, 0x7, 0x8, 0x10000, 0x40, 0x8, 0x7, 0x2b, 0x6, 0x10, 0x5, 0x200, 0x7fff, 0x6, 0x200, 0x8, 0x10, 0x4, 0x6, 0x633, 0xf05, 0x0, 0x101, 0x200, 0x7, 0x7ff, 0x0, 0x1, 0x1, 0x10000, 0x9, 0x40, 0x9, 0x0, 0x7f, 0x7, 0x6, 0xe, 0x3, 0x80000001, 0x0, 0x8, 0x8, 0x7, 0xdd, 0x6, 0x89, 0x0, 0x100, 0x1, 0x9, 0xe75, 0x400, 0x20001, 0x8, 0x200, 0xe9ab, 0xfffffff8, 0x8000, 0x7, 0x2, 0x2, 0x43, 0x3ff, 0x8, 0x7, 0x9, 0x1, 0x6, 0x7, 0xa, 0xf, 0xf39d, 0x71, 0xfff, 0x5, 0x8]}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) write$char_usb(r0, &(0x7f0000000040)="e2", 0x2250) 3.092410473s ago: executing program 4 (id=551): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000340)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x3, &(0x7f00000001c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) syz_init_net_socket$ax25(0x3, 0x5, 0xc4) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000000000)='X', 0x1, 0x24008010, &(0x7f000005ffe4)={0xa, 0x0, 0x1, @local, 0x3}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000040)={0x0, 0xfc, 0xfe, 0x3, 0x0, 0x8, 0xb, 0x0, 0x0, 0xb0, 0xe, 0x0, 0x1, 0x2}, 0xe) shutdown(r2, 0x1) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r2, 0x84, 0x21, &(0x7f00000000c0)=0x7, 0x4) recvmmsg(r2, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}], 0x414, 0x0, 0x0) 1.928426549s ago: executing program 1 (id=552): socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x50) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r0, 0x4) getpgrp(0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x15, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe8a, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27}, 0x48) 1.928308199s ago: executing program 5 (id=553): sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) r0 = syz_usb_connect(0x5, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100000cb768405e0483020b990102030109021b000100000000090400000101292000090509"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_open_dev$audion(&(0x7f00000011c0), 0x3, 0x8c4201) 1.873547126s ago: executing program 4 (id=554): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1}, 0x18) connect$can_j1939(r0, &(0x7f0000000140)={0x1d, r1, 0x7fffffff, {0x1, 0xff, 0xa8fe8ad4eea2351f}, 0x2}, 0x18) sendmmsg(r0, &(0x7f000000fb40)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000300)="8b3490b4fc5681464e931a06bcb1689dc0a3e3eb8be28eace17b55ede9921eebfb895898254d91305653f660ef11096ec7db16f5aa4d8f0f3fcc2f5b7670903df9df2165f24458d1dd93a9a9cfb0b9dd02291171593d7cf786b828001294ca94411ccbd008a4c2359a7ba2077b0ceddaaca48a0aa37867c7ab684c89", 0x7c}, {&(0x7f0000000380)="fb820358fc4eb402086d82134ebd68117d8882d5b15520516542b9d846b1994809faccba9839af80e90c2feca344bf60e34ece3164cfc2824e999e961f6461b891e192c4", 0x44}, {&(0x7f0000000500)="63236474e9d8d1cc57ba38a5b32f7c548af314ab6a0cc1524663a7a3c38333fa82fa9a3a2b619e4500f43cbcde7cdeda5333fdcc86cf8153acc406e5f6e5ef21e65d62d4df2542f5bc23839dc5ab1c37d47d2db58a6437a79975a7bd14790bd04b8c78b43dd41611ef8bc11a9cadba80fdef6aee0e2ac65acfc353d148a5c15b9196d3d041e850d8938a55c9d658fd1ea0c6361dde2d1f4639094fbec0637c980b50ffac71842b3150e485b13884e1af8ea3747762487e3989f6550fa1cc38b24ad4c6cc6ca320f8ed2a3b2e6e4fdab0ca1612e93163d175c89368f6a9828680b382d797b88267ef5eaff4c81b58582d943a9d", 0xf3}, {&(0x7f0000000600)="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", 0x547}], 0x4}}, {{0x0, 0x0, 0x0}}], 0x2, 0x4008080) 357.279385ms ago: executing program 1 (id=555): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xd) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCMBIC(r2, 0x5415, 0x0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, 0x0, 0x0) r3 = syz_io_uring_setup(0xd1, &(0x7f0000000280)={0x0, 0x2970, 0x8, 0x22, 0x92}, &(0x7f0000000300)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000000)=0x8000103, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) io_uring_enter(r3, 0x47ba, 0x3000000, 0x0, 0x0, 0x0) 205.044104ms ago: executing program 4 (id=556): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000800), r1) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010428bd7010ffdbdf25030000002c000700737973746d5f753a6f626a573e6563745f723a636865636b706f6c6963795f657865635f743a73300014000600000000"], 0x68}, 0x1, 0x0, 0x0, 0x200048d0}, 0x20040080) 0s ago: executing program 4 (id=557): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)={0x28, 0x0, 0xb1d, 0x70bd2b, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_PHY={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x20008000}, 0x48850) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/unix\x00') socket$unix(0x1, 0x5, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, 0x0, 0x0) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), r2) syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfff}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000180)={0x1, &(0x7f0000000000)=[{0x6, 0x7, 0x0, 0x7fff8000}]}) close_range(r6, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): no interfaces have a carrier [ 39.358090][ T5432] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.377424][ T5432] eql: remember to turn off Van-Jacobson compression on your slave devices Starting crond: OK Starting sshd: OK syzkaller Warning: Permanently added '10.128.0.32' (ED25519) to the list of known hosts. syzkaller login: [ 64.446501][ T5750] cgroup: Unknown subsys name 'net' [ 64.581229][ T5750] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 65.959815][ T5750] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 67.430844][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 67.447237][ T5773] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 67.455516][ T5773] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 67.463838][ T5767] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 67.472488][ T5773] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 67.480160][ T5767] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 67.480776][ T5773] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 67.497184][ T5767] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 67.503483][ T5773] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 67.504777][ T5767] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 67.520495][ T5767] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 67.520750][ T5772] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 67.528084][ T5767] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 67.542617][ T5772] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 67.543537][ T5767] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 67.553890][ T5772] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 67.565648][ T5772] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 67.566641][ T5083] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 67.573169][ T5772] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 67.593602][ T5772] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 67.605203][ T5769] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 67.619536][ T5775] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 67.626963][ T5769] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 67.635057][ T5769] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 68.086746][ T5763] chnl_net:caif_netlink_parms(): no params data found [ 68.099213][ T5761] chnl_net:caif_netlink_parms(): no params data found [ 68.139117][ T5762] chnl_net:caif_netlink_parms(): no params data found [ 68.227760][ T5760] chnl_net:caif_netlink_parms(): no params data found [ 68.302446][ T5761] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.310278][ T5761] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.318436][ T5761] bridge_slave_0: entered allmulticast mode [ 68.325879][ T5761] bridge_slave_0: entered promiscuous mode [ 68.338182][ T5763] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.345607][ T5763] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.352773][ T5763] bridge_slave_0: entered allmulticast mode [ 68.359724][ T5763] bridge_slave_0: entered promiscuous mode [ 68.383198][ T5761] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.390519][ T5761] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.397748][ T5761] bridge_slave_1: entered allmulticast mode [ 68.404572][ T5761] bridge_slave_1: entered promiscuous mode [ 68.425255][ T5763] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.432372][ T5763] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.439753][ T5763] bridge_slave_1: entered allmulticast mode [ 68.446707][ T5763] bridge_slave_1: entered promiscuous mode [ 68.487485][ T5762] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.494823][ T5762] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.501982][ T5762] bridge_slave_0: entered allmulticast mode [ 68.509233][ T5762] bridge_slave_0: entered promiscuous mode [ 68.541443][ T5762] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.549449][ T5762] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.557815][ T5762] bridge_slave_1: entered allmulticast mode [ 68.564741][ T5762] bridge_slave_1: entered promiscuous mode [ 68.583953][ T5763] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.607548][ T5761] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.620655][ T5761] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.643160][ T5763] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.683069][ T5762] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.697019][ T5762] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.718021][ T5760] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.725263][ T5760] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.733494][ T5760] bridge_slave_0: entered allmulticast mode [ 68.740465][ T5760] bridge_slave_0: entered promiscuous mode [ 68.786570][ T5763] team0: Port device team_slave_0 added [ 68.792907][ T5760] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.801467][ T5760] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.809256][ T5760] bridge_slave_1: entered allmulticast mode [ 68.817294][ T5760] bridge_slave_1: entered promiscuous mode [ 68.826855][ T5761] team0: Port device team_slave_0 added [ 68.852488][ T5762] team0: Port device team_slave_0 added [ 68.862793][ T5763] team0: Port device team_slave_1 added [ 68.870124][ T5761] team0: Port device team_slave_1 added [ 68.888439][ T5760] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.900868][ T5760] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.917957][ T5762] team0: Port device team_slave_1 added [ 68.998350][ T5761] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.005730][ T5761] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.033735][ T5761] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.059068][ T5762] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.066198][ T5762] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.092293][ T5762] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.104839][ T5762] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.111805][ T5762] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.139623][ T5762] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.152977][ T5763] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.160389][ T5763] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.186695][ T5763] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.198794][ T5761] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.207854][ T5761] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.234552][ T5761] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.248578][ T5760] team0: Port device team_slave_0 added [ 69.258747][ T5760] team0: Port device team_slave_1 added [ 69.270155][ T5763] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.277483][ T5763] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.303769][ T5763] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.343888][ T5760] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.350844][ T5760] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.377159][ T5760] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.419451][ T5760] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.426714][ T5760] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.453268][ T5760] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.501747][ T5763] hsr_slave_0: entered promiscuous mode [ 69.508716][ T5763] hsr_slave_1: entered promiscuous mode [ 69.542871][ T5761] hsr_slave_0: entered promiscuous mode [ 69.551249][ T5761] hsr_slave_1: entered promiscuous mode [ 69.558163][ T5761] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 69.567970][ T5761] Cannot create hsr debugfs directory [ 69.588567][ T5762] hsr_slave_0: entered promiscuous mode [ 69.595023][ T5762] hsr_slave_1: entered promiscuous mode [ 69.601820][ T5762] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 69.609997][ T5762] Cannot create hsr debugfs directory [ 69.616559][ T5769] Bluetooth: hci0: command tx timeout [ 69.623590][ T5769] Bluetooth: hci2: command tx timeout [ 69.638700][ T5760] hsr_slave_0: entered promiscuous mode [ 69.645059][ T5760] hsr_slave_1: entered promiscuous mode [ 69.651049][ T5760] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 69.658803][ T5760] Cannot create hsr debugfs directory [ 69.693706][ T5765] Bluetooth: hci3: command tx timeout [ 69.699420][ T5769] Bluetooth: hci1: command tx timeout [ 70.054955][ T5761] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 70.068090][ T5761] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 70.081597][ T5761] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 70.092934][ T5761] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 70.151602][ T5762] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 70.162820][ T5762] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 70.182233][ T5762] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 70.195852][ T5762] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 70.287141][ T5763] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 70.303816][ T5763] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 70.329340][ T5763] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 70.344637][ T5763] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 70.431268][ T5760] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 70.461059][ T5761] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.478923][ T5760] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 70.492996][ T5760] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 70.511157][ T5761] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.520564][ T5760] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 70.560222][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.567672][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.597970][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.605183][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.625504][ T5762] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.702891][ T5762] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.737611][ T254] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.744795][ T254] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.782151][ T5763] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.792073][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.799237][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.872841][ T5763] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.922772][ T254] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.929958][ T254] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.966016][ T5760] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.979418][ T1103] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.986593][ T1103] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.059492][ T5760] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.090964][ T1103] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.098139][ T1103] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.144427][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.151592][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.211155][ T5761] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.356262][ T5761] veth0_vlan: entered promiscuous mode [ 71.396666][ T5761] veth1_vlan: entered promiscuous mode [ 71.480524][ T5762] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.520900][ T5761] veth0_macvtap: entered promiscuous mode [ 71.545513][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.554884][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.567136][ T5761] veth1_macvtap: entered promiscuous mode [ 71.587238][ T5761] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.621572][ T5761] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.660989][ T5761] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.671105][ T5761] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.688000][ T5761] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.697577][ T5769] Bluetooth: hci2: command tx timeout [ 71.697633][ T5769] Bluetooth: hci0: command tx timeout [ 71.710961][ T5761] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.729517][ T5763] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.758258][ T5760] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.774204][ T5765] Bluetooth: hci1: command tx timeout [ 71.774935][ T5769] Bluetooth: hci3: command tx timeout [ 71.820980][ T5762] veth0_vlan: entered promiscuous mode [ 71.878647][ T5760] veth0_vlan: entered promiscuous mode [ 71.892330][ T5762] veth1_vlan: entered promiscuous mode [ 71.918186][ T5760] veth1_vlan: entered promiscuous mode [ 71.963058][ T1103] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.978610][ T1103] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.021679][ T5763] veth0_vlan: entered promiscuous mode [ 72.057870][ T5763] veth1_vlan: entered promiscuous mode [ 72.070181][ T1090] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.080062][ T1090] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.090339][ T5760] veth0_macvtap: entered promiscuous mode [ 72.106643][ T5762] veth0_macvtap: entered promiscuous mode [ 72.126851][ T5760] veth1_macvtap: entered promiscuous mode [ 72.146802][ T5762] veth1_macvtap: entered promiscuous mode [ 72.179933][ T5760] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.192618][ T5760] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.207499][ T5760] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.230246][ T5763] veth0_macvtap: entered promiscuous mode [ 72.250508][ T5760] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.268441][ T5760] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.280130][ T5760] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.311262][ T5763] veth1_macvtap: entered promiscuous mode [ 72.326424][ T5762] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.344062][ T5762] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.355728][ T5762] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.367307][ T5762] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.381757][ T5762] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.273042][ T5769] Bluetooth: hci0: command tx timeout [ 74.273062][ T5765] Bluetooth: hci2: command tx timeout [ 74.273094][ T5765] Bluetooth: hci1: command tx timeout [ 74.279378][ T51] Bluetooth: hci3: command tx timeout [ 74.360573][ T5762] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.403734][ T5762] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.415003][ T5762] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.426059][ T5762] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.438288][ T5762] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.458244][ T5760] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.470719][ T5760] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.480042][ T5760] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.489378][ T5760] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.535361][ T5762] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.544734][ T5762] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.554503][ T5762] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.563235][ T5762] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.623211][ T5763] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.635243][ T5763] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.645132][ T5763] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.656077][ T5763] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.666236][ T5763] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.676744][ T5763] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.688415][ T5763] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.715857][ T5763] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.731206][ T5763] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.744161][ T5763] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.754944][ T5763] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.765132][ T5763] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.775850][ T5763] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.787291][ T5763] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.835133][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.835513][ T5763] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.861910][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.864590][ T5763] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.878702][ T5763] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.887726][ T5763] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.012551][ T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.021573][ T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.027553][ T254] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.049464][ T254] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.103964][ T1090] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.121102][ T1090] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.197993][ T254] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.221161][ T254] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.315632][ T5858] syzkaller0: entered promiscuous mode [ 75.315928][ T1125] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.321213][ T5858] syzkaller0: entered allmulticast mode [ 75.337379][ T1125] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.450046][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 75.503685][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 75.512375][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 75.693695][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 75.719308][ T5862] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2'. [ 75.757190][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 76.399726][ T51] Bluetooth: hci0: command tx timeout [ 76.498663][ T5868] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 76.520389][ T51] Bluetooth: hci1: command tx timeout [ 76.523504][ T5769] Bluetooth: hci2: command tx timeout [ 76.527050][ T51] Bluetooth: hci3: command tx timeout [ 76.878956][ T5868] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 76.888810][ T5868] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 77.006947][ T5868] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 77.014599][ T5868] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 77.023726][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 77.950447][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 78.139121][ T5886] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 78.148011][ T5886] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 78.214581][ T5886] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 78.262465][ T5886] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 78.271229][ T5886] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 78.299365][ T5886] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 78.312400][ T5886] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 78.326756][ T5886] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 78.339620][ T5886] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 78.373412][ T5886] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 78.414595][ T5886] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 78.435644][ T5886] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 78.553835][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 78.586643][ T5897] netlink: 16 bytes leftover after parsing attributes in process `syz.2.12'. [ 78.738662][ T5900] Zero length message leads to an empty skb [ 78.781465][ T5899] lo speed is unknown, defaulting to 1000 [ 78.793627][ T5899] lo speed is unknown, defaulting to 1000 [ 78.881283][ T5899] lo speed is unknown, defaulting to 1000 [ 78.927093][ T5899] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 79.010798][ T5899] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 79.300623][ T5899] lo speed is unknown, defaulting to 1000 [ 79.345765][ T5899] lo speed is unknown, defaulting to 1000 [ 79.353155][ T5899] lo speed is unknown, defaulting to 1000 [ 79.391946][ T5899] lo speed is unknown, defaulting to 1000 [ 79.436681][ T5905] syzkaller0: entered promiscuous mode [ 79.452480][ T5905] syzkaller0: entered allmulticast mode [ 79.547729][ T51] Bluetooth: hci0: command 0x0c1a tx timeout [ 79.586508][ T5907] syzkaller0: entered promiscuous mode [ 79.600902][ T5907] syzkaller0: entered allmulticast mode [ 79.614170][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 79.943625][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 81.583141][ T51] Bluetooth: hci2: command 0x0c1a tx timeout [ 81.583162][ T5775] Bluetooth: hci1: command 0x0c1a tx timeout [ 81.583211][ T5775] Bluetooth: hci3: command 0x0c1a tx timeout [ 81.658674][ T5775] Bluetooth: hci0: command 0x0c1a tx timeout [ 81.797245][ T789] cfg80211: failed to load regulatory.db [ 83.171929][ T5921] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 83.184584][ T5921] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 83.214354][ T5921] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 83.236180][ T5921] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 83.523701][ T5950] syzkaller0: entered promiscuous mode [ 83.529222][ T5950] syzkaller0: entered allmulticast mode [ 83.669175][ T5954] syzkaller0: entered promiscuous mode [ 83.707305][ T5954] syzkaller0: entered allmulticast mode [ 83.872510][ T5960] netlink: 40 bytes leftover after parsing attributes in process `syz.3.29'. [ 83.935304][ T5775] Bluetooth: hci0: command 0x0c1a tx timeout [ 85.462008][ T5775] Bluetooth: hci1: command 0x0c1a tx timeout [ 85.468125][ T5769] Bluetooth: hci3: command 0x0c1a tx timeout [ 85.474161][ T51] Bluetooth: hci2: command 0x0c1a tx timeout [ 85.723688][ T5968] netlink: 16 bytes leftover after parsing attributes in process `syz.3.33'. [ 87.548422][ T5775] Bluetooth: hci1: command 0x0c1a tx timeout [ 87.555639][ T5769] Bluetooth: hci3: command 0x0c1a tx timeout [ 87.561661][ T5769] Bluetooth: hci2: command 0x0c1a tx timeout [ 89.123641][ T5977] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 89.134478][ T5977] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 89.140621][ T5977] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 89.149382][ T5977] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 90.531605][ T5765] Bluetooth: hci0: command 0x0c1a tx timeout [ 90.583247][ T5997] syzkaller0: entered promiscuous mode [ 90.588904][ T5997] syzkaller0: entered allmulticast mode [ 91.214067][ T5765] Bluetooth: hci3: command 0x0c1a tx timeout [ 91.220404][ T5769] Bluetooth: hci2: command 0x0c1a tx timeout [ 91.233512][ T5769] Bluetooth: hci1: command 0x0c1a tx timeout [ 91.827640][ T6019] netlink: 16 bytes leftover after parsing attributes in process `syz.1.44'. [ 92.645012][ T6027] sch_tbf: burst 21990 is lower than device lo mtu (65550) ! [ 93.349443][ T6033] process 'syz.2.49' launched './file0' with NULL argv: empty string added [ 93.379740][ T6031] lo speed is unknown, defaulting to 1000 [ 93.385619][ T6031] lo speed is unknown, defaulting to 1000 [ 93.392245][ T6031] lo speed is unknown, defaulting to 1000 [ 93.403637][ T6031] infiniband syz: RDMA CMA: cma_listen_on_dev, error -98 [ 93.456962][ T6031] lo speed is unknown, defaulting to 1000 [ 93.463648][ T6031] lo speed is unknown, defaulting to 1000 [ 93.470125][ T6031] lo speed is unknown, defaulting to 1000 [ 93.477439][ T6031] lo speed is unknown, defaulting to 1000 [ 93.579385][ T6036] syzkaller0: entered promiscuous mode [ 93.585054][ T6036] syzkaller0: entered allmulticast mode [ 95.060535][ T6047] syzkaller0: entered promiscuous mode [ 95.073567][ T6047] syzkaller0: entered allmulticast mode [ 95.215298][ T6050] tipc: Started in network mode [ 95.223155][ T6050] tipc: Node identity 82605c3594da, cluster identity 4711 [ 95.244479][ T6050] tipc: Enabled bearer , priority 0 [ 95.283075][ T6050] tipc: Resetting bearer [ 95.337164][ T6049] tipc: Disabling bearer [ 96.253832][ T6065] netlink: 16 bytes leftover after parsing attributes in process `syz.2.59'. [ 96.317672][ T6068] netlink: 40 bytes leftover after parsing attributes in process `syz.0.60'. [ 97.316908][ T6081] syzkaller0: entered promiscuous mode [ 97.322443][ T6081] syzkaller0: entered allmulticast mode [ 97.659787][ T28] audit: type=1326 audit(1768264123.457:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6084 comm="syz.3.68" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f91e8d865e7 code=0x7ffc0000 [ 97.682055][ C0] vkms_vblank_simulate: vblank timer overrun [ 97.743623][ T28] audit: type=1326 audit(1768264123.467:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6084 comm="syz.3.68" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f91e8d2b829 code=0x7ffc0000 [ 97.812875][ T28] audit: type=1326 audit(1768264123.467:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6084 comm="syz.3.68" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91e8d8f749 code=0x7ffc0000 [ 97.847377][ T28] audit: type=1326 audit(1768264123.467:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6084 comm="syz.3.68" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f91e8d865e7 code=0x7ffc0000 [ 97.881483][ T28] audit: type=1326 audit(1768264123.467:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6084 comm="syz.3.68" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f91e8d2b829 code=0x7ffc0000 [ 97.904029][ T28] audit: type=1326 audit(1768264123.467:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6084 comm="syz.3.68" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f91e8d865e7 code=0x7ffc0000 [ 97.932833][ T28] audit: type=1326 audit(1768264123.467:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6084 comm="syz.3.68" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f91e8d2b829 code=0x7ffc0000 [ 98.029395][ T28] audit: type=1326 audit(1768264123.467:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6084 comm="syz.3.68" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f91e8d865e7 code=0x7ffc0000 [ 98.106372][ T28] audit: type=1326 audit(1768264123.467:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6084 comm="syz.3.68" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f91e8d2b829 code=0x7ffc0000 [ 98.128638][ T28] audit: type=1326 audit(1768264123.467:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6084 comm="syz.3.68" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f91e8d865e7 code=0x7ffc0000 [ 99.268557][ T6105] netlink: 16 bytes leftover after parsing attributes in process `syz.0.75'. [ 99.977383][ T6111] syzkaller0: entered promiscuous mode [ 99.987073][ T6111] syzkaller0: entered allmulticast mode [ 100.659916][ T6128] siw: device registration error -23 [ 101.333894][ T6137] netlink: 16 bytes leftover after parsing attributes in process `syz.3.85'. [ 101.666012][ T6146] syzkaller0: entered promiscuous mode [ 101.677878][ T6146] syzkaller0: entered allmulticast mode [ 105.462421][ T6182] syzkaller0: entered promiscuous mode [ 105.493390][ T6182] syzkaller0: entered allmulticast mode [ 105.747116][ T6184] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 105.758049][ T6184] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 105.770037][ T6184] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 105.792752][ T6184] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 108.434380][ T6212] netlink: 40 bytes leftover after parsing attributes in process `syz.0.108'. [ 108.449088][ T6212] netlink: 40 bytes leftover after parsing attributes in process `syz.0.108'. [ 108.461511][ T6212] netlink: 40 bytes leftover after parsing attributes in process `syz.0.108'. [ 108.906467][ T6215] syzkaller0: entered promiscuous mode [ 108.916209][ T6215] syzkaller0: entered allmulticast mode [ 110.962543][ T6239] netlink: 40 bytes leftover after parsing attributes in process `syz.3.118'. [ 110.976534][ T6239] netlink: 40 bytes leftover after parsing attributes in process `syz.3.118'. [ 110.987302][ T6239] netlink: 40 bytes leftover after parsing attributes in process `syz.3.118'. [ 111.221184][ T6241] syzkaller0: entered promiscuous mode [ 111.233395][ T6241] syzkaller0: entered allmulticast mode [ 113.533071][ T6260] fuse: Unknown parameter '0x0000000000000004' [ 114.089896][ T6264] netlink: 40 bytes leftover after parsing attributes in process `syz.1.127'. [ 114.106728][ T6264] netlink: 40 bytes leftover after parsing attributes in process `syz.1.127'. [ 114.123801][ T6264] netlink: 40 bytes leftover after parsing attributes in process `syz.1.127'. [ 114.346590][ T6269] syzkaller0: entered promiscuous mode [ 114.414775][ T6269] syzkaller0: entered allmulticast mode [ 115.938087][ T6290] netlink: 16 bytes leftover after parsing attributes in process `syz.3.135'. [ 123.708576][ T6344] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 124.204343][ T5765] Bluetooth: hci0: unexpected event for opcode 0x0c6d [ 125.886565][ T6344] bridge0: port 2(bridge_slave_1) entered disabled state [ 125.895567][ T6344] bridge0: port 1(bridge_slave_0) entered disabled state [ 126.027687][ T6350] netlink: 40 bytes leftover after parsing attributes in process `syz.2.138'. [ 126.040124][ T6350] netlink: 40 bytes leftover after parsing attributes in process `syz.2.138'. [ 126.049603][ T6350] netlink: 40 bytes leftover after parsing attributes in process `syz.2.138'. [ 127.394998][ T6361] tipc: Started in network mode [ 127.423516][ T6361] tipc: Node identity cefd8c746f91, cluster identity 4711 [ 127.430916][ T6361] tipc: Enabled bearer , priority 0 [ 127.449258][ T6364] syzkaller0: entered promiscuous mode [ 127.471776][ T6364] syzkaller0: entered allmulticast mode [ 127.541244][ T6361] tipc: Resetting bearer [ 127.589793][ T6360] tipc: Resetting bearer [ 127.815804][ T6360] tipc: Disabling bearer [ 128.577753][ T5810] tipc: Node number set to 2708245620 [ 129.538855][ T6376] netlink: 56 bytes leftover after parsing attributes in process `syz.1.156'. [ 132.551085][ T6389] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 132.733344][ T5765] Bluetooth: hci1: unexpected event for opcode 0x0c6d [ 133.138377][ T6389] bridge0: port 2(bridge_slave_1) entered disabled state [ 133.139907][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.146290][ T6389] bridge0: port 1(bridge_slave_0) entered disabled state [ 133.160663][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.503928][ T6402] tipc: Enabled bearer , priority 0 [ 133.523893][ T6400] netlink: 16 bytes leftover after parsing attributes in process `syz.0.148'. [ 133.535141][ T6402] syzkaller0: entered promiscuous mode [ 133.540662][ T6402] syzkaller0: entered allmulticast mode [ 133.607317][ T6402] tipc: Resetting bearer [ 133.637150][ T6401] tipc: Resetting bearer [ 133.677938][ T6401] tipc: Disabling bearer [ 137.060376][ T6418] netlink: 40 bytes leftover after parsing attributes in process `syz.2.158'. [ 137.071872][ T6418] netlink: 40 bytes leftover after parsing attributes in process `syz.2.158'. [ 137.081283][ T6418] netlink: 40 bytes leftover after parsing attributes in process `syz.2.158'. [ 137.266884][ T6423] ======================================================= [ 137.266884][ T6423] WARNING: The mand mount option has been deprecated and [ 137.266884][ T6423] and is ignored by this kernel. Remove the mand [ 137.266884][ T6423] option from the mount to silence this warning. [ 137.266884][ T6423] ======================================================= [ 137.882926][ T6430] use of bytesused == 0 is deprecated and will be removed in the future, [ 137.891833][ T6430] use the actual size instead. [ 138.678994][ T6436] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 139.205795][ T5765] Bluetooth: hci2: unexpected event for opcode 0x0c6d [ 139.269295][ T6436] bridge0: port 2(bridge_slave_1) entered disabled state [ 139.277090][ T6436] bridge0: port 1(bridge_slave_0) entered disabled state [ 142.558481][ T6457] netlink: 40 bytes leftover after parsing attributes in process `syz.3.179'. [ 142.578726][ T6457] netlink: 40 bytes leftover after parsing attributes in process `syz.3.179'. [ 142.594514][ T6457] netlink: 40 bytes leftover after parsing attributes in process `syz.3.179'. [ 143.022050][ T6465] syz.1.168[6465]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 143.475750][ T6466] xt_TPROXY: Can be used only with -p tcp or -p udp [ 147.475501][ T6495] netlink: 40 bytes leftover after parsing attributes in process `syz.3.188'. [ 147.489195][ T6495] netlink: 40 bytes leftover after parsing attributes in process `syz.3.188'. [ 147.503501][ T6495] netlink: 40 bytes leftover after parsing attributes in process `syz.3.188'. [ 147.635512][ T6497] netlink: 16 bytes leftover after parsing attributes in process `syz.0.178'. [ 149.373904][ T789] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 149.704050][ T789] usb 3-1: Using ep0 maxpacket: 16 [ 152.625939][ T789] usb 3-1: device descriptor read/all, error -71 [ 153.673954][ T6537] lo speed is unknown, defaulting to 1000 [ 153.688670][ T6537] lo speed is unknown, defaulting to 1000 [ 162.815349][ T6567] sched: RT throttling activated [ 163.257162][ T5765] Bluetooth: hci2: SCO packet for unknown connection handle 201 [ 163.554991][ T6552] netlink: 40 bytes leftover after parsing attributes in process `syz.1.199'. [ 163.577301][ T6555] netlink: 40 bytes leftover after parsing attributes in process `syz.1.199'. [ 163.588732][ T6555] netlink: 40 bytes leftover after parsing attributes in process `syz.1.199'. [ 164.782207][ T6589] mmap: syz.1.214 (6589) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 165.356355][ T6586] vivid-000: kernel_thread() failed [ 169.204084][ T6621] netlink: 40 bytes leftover after parsing attributes in process `syz.2.220'. [ 169.217514][ T6621] netlink: 40 bytes leftover after parsing attributes in process `syz.2.220'. [ 169.228314][ T6621] netlink: 40 bytes leftover after parsing attributes in process `syz.2.220'. [ 169.659808][ T5775] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 169.671868][ T5775] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 169.815050][ T5775] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 169.829056][ T5775] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 169.846482][ T5775] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 169.863390][ T5775] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 170.969805][ T6633] xt_TPROXY: Can be used only with -p tcp or -p udp [ 171.409083][ T1103] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.466004][ T6624] lo speed is unknown, defaulting to 1000 [ 171.562160][ T1103] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.591689][ T6624] lo speed is unknown, defaulting to 1000 [ 171.656727][ T1103] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.856547][ T1103] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.935680][ T5775] Bluetooth: hci4: command tx timeout [ 173.210914][ T6624] chnl_net:caif_netlink_parms(): no params data found [ 174.034817][ T5775] Bluetooth: hci4: command tx timeout [ 176.136914][ T5775] Bluetooth: hci4: command tx timeout [ 177.653023][ T6624] bridge0: port 1(bridge_slave_0) entered blocking state [ 177.685899][ T6624] bridge0: port 1(bridge_slave_0) entered disabled state [ 177.721941][ T6624] bridge_slave_0: entered allmulticast mode [ 177.760185][ T6624] bridge_slave_0: entered promiscuous mode [ 177.783670][ T6675] netlink: 40 bytes leftover after parsing attributes in process `syz.3.229'. [ 177.798517][ T6674] netlink: 40 bytes leftover after parsing attributes in process `syz.3.229'. [ 177.821723][ T6686] ax25_connect(): syz.2.230 uses autobind, please contact jreuter@yaina.de [ 177.870720][ T6624] bridge0: port 2(bridge_slave_1) entered blocking state [ 177.900134][ T6624] bridge0: port 2(bridge_slave_1) entered disabled state [ 177.918357][ T6624] bridge_slave_1: entered allmulticast mode [ 177.937196][ T6624] bridge_slave_1: entered promiscuous mode [ 177.960221][ T6674] netlink: 40 bytes leftover after parsing attributes in process `syz.3.229'. [ 178.088530][ T6624] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 178.173977][ T5775] Bluetooth: hci4: command tx timeout [ 178.226861][ T6624] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 178.602909][ T6704] futex_wake_op: syz.2.233 tries to shift op by -1; fix this program [ 179.252589][ T6624] team0: Port device team_slave_0 added [ 179.324552][ T6624] team0: Port device team_slave_1 added [ 181.908040][ T6624] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 181.927580][ T6624] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 181.981394][ T6624] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 184.087694][ T6624] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 184.209580][ T6624] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 184.245090][ C0] vkms_vblank_simulate: vblank timer overrun [ 184.272240][ T6624] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 184.552977][ T6739] netlink: 40 bytes leftover after parsing attributes in process `syz.2.239'. [ 184.568900][ T6739] netlink: 40 bytes leftover after parsing attributes in process `syz.2.239'. [ 184.582193][ T6739] netlink: 40 bytes leftover after parsing attributes in process `syz.2.239'. [ 188.850087][ T6624] hsr_slave_0: entered promiscuous mode [ 188.894012][ T6624] hsr_slave_1: entered promiscuous mode [ 188.904674][ T6624] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 188.953374][ T6624] Cannot create hsr debugfs directory [ 189.037333][ T1103] hsr_slave_0: left promiscuous mode [ 189.059849][ T1103] hsr_slave_1: left promiscuous mode [ 189.085750][ T1103] bridge_slave_1: left allmulticast mode [ 189.103595][ T1103] bridge_slave_1: left promiscuous mode [ 189.114472][ T1103] bridge0: port 2(bridge_slave_1) entered disabled state [ 189.172675][ T1103] bridge_slave_0: left allmulticast mode [ 189.188447][ T1103] bridge_slave_0: left promiscuous mode [ 189.198897][ T1103] bridge0: port 1(bridge_slave_0) entered disabled state [ 189.240367][ T1103] veth1_macvtap: left promiscuous mode [ 189.252643][ T1103] veth0_macvtap: left promiscuous mode [ 189.260874][ T1103] veth1_vlan: left promiscuous mode [ 189.267975][ T1103] veth0_vlan: left promiscuous mode [ 189.676609][ T6770] ax25_connect(): syz.1.240 uses autobind, please contact jreuter@yaina.de [ 192.566653][ T1103] team0 (unregistering): Port device team_slave_1 removed [ 192.635791][ T1103] team0 (unregistering): Port device team_slave_0 removed [ 192.697699][ T1103] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 192.753859][ T1103] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 193.308325][ T1103] bond0 (unregistering): Released all slaves [ 193.438419][ T6758] tipc: Started in network mode [ 193.446898][ T6758] tipc: Node identity dec1325ed4d1, cluster identity 4711 [ 193.456623][ T6758] tipc: Enabled bearer , priority 0 [ 193.496597][ T6774] tipc: Resetting bearer [ 193.533782][ T6759] syzkaller0: entered promiscuous mode [ 193.541926][ T6759] syzkaller0: entered allmulticast mode [ 193.570195][ T6834] gre1: entered promiscuous mode [ 193.716890][ T6755] tipc: Resetting bearer [ 193.775239][ T6755] tipc: Disabling bearer [ 195.267837][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 195.279421][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.438943][ T5827] tipc: Node number set to 168833630 [ 195.604793][ T6865] input: syz1 as /devices/virtual/input/input9 [ 197.010784][ T6624] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 197.073004][ T6624] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 197.122580][ T6624] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 197.238071][ T6624] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 197.655775][ T6624] 8021q: adding VLAN 0 to HW filter on device bond0 [ 197.776682][ T6624] 8021q: adding VLAN 0 to HW filter on device team0 [ 197.888031][ T1146] bridge0: port 1(bridge_slave_0) entered blocking state [ 197.898269][ T1146] bridge0: port 1(bridge_slave_0) entered forwarding state [ 197.993932][ T1146] bridge0: port 2(bridge_slave_1) entered blocking state [ 198.007711][ T1146] bridge0: port 2(bridge_slave_1) entered forwarding state [ 198.430005][ T6903] netlink: 8 bytes leftover after parsing attributes in process `syz.2.248'. [ 198.595482][ T6906] futex_wake_op: syz.3.250 tries to shift op by -1; fix this program [ 199.402536][ T6624] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 199.649182][ T6923] netlink: 8 bytes leftover after parsing attributes in process `syz.1.258'. [ 201.343994][ T6931] ax25_connect(): syz.3.251 uses autobind, please contact jreuter@yaina.de [ 201.556739][ T27] hid-generic 0005:0002:550A.0001: item fetching failed at offset 0/1 [ 201.582679][ T27] hid-generic: probe of 0005:0002:550A.0001 failed with error -22 [ 204.931480][ T6624] veth0_vlan: entered promiscuous mode [ 204.961658][ T6624] veth1_vlan: entered promiscuous mode [ 205.077044][ T6624] veth0_macvtap: entered promiscuous mode [ 205.130415][ T6624] veth1_macvtap: entered promiscuous mode [ 205.206127][ T6624] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 205.235520][ T6624] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 205.249606][ T6624] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 205.263191][ T6624] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 205.291689][ T6624] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 205.341914][ T7019] tipc: Enabling of bearer rejected, failed to enable media [ 205.382048][ T6624] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 205.404999][ T6624] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 205.424118][ T6624] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 205.440481][ T6624] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 205.460099][ T6624] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 205.471467][ T7019] syzkaller0: entered promiscuous mode [ 205.490291][ T7019] syzkaller0: entered allmulticast mode [ 205.528404][ T6624] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.547860][ T6624] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.567016][ T6624] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.589964][ T6624] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.653489][ T27] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 205.873403][ T6854] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 205.876539][ T27] usb 4-1: Using ep0 maxpacket: 32 [ 205.907361][ T6854] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 205.927827][ T27] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 205.966164][ T27] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 206.000942][ T27] usb 4-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 206.009382][ T6854] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 206.029087][ T6854] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 206.055170][ T27] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 206.132595][ T27] usb 4-1: config 0 descriptor?? [ 210.369928][ T27] usbhid 4-1:0.0: can't add hid device: -71 [ 211.873542][ T27] usbhid: probe of 4-1:0.0 failed with error -71 [ 211.946396][ T27] usb 4-1: USB disconnect, device number 2 [ 212.044551][ T5827] hid-generic 0005:0002:550A.0002: item fetching failed at offset 0/1 [ 212.055723][ T5827] hid-generic: probe of 0005:0002:550A.0002 failed with error -22 [ 212.349630][ T7062] syzkaller0: entered promiscuous mode [ 212.374567][ T7062] syzkaller0: entered allmulticast mode [ 214.534869][ T7102] tipc: Enabled bearer , priority 0 [ 214.589094][ T7102] syzkaller0: entered promiscuous mode [ 214.595998][ T7102] syzkaller0: entered allmulticast mode [ 214.681491][ T7102] tipc: Resetting bearer [ 214.727271][ T7101] tipc: Resetting bearer [ 215.147777][ T7101] tipc: Disabling bearer [ 217.241571][ T28] kauditd_printk_skb: 19 callbacks suppressed [ 217.241587][ T28] audit: type=1326 audit(1768264243.047:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7111 comm="syz.1.276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f268798f749 code=0x7ffc0000 [ 217.343451][ T28] audit: type=1326 audit(1768264243.087:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7111 comm="syz.1.276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=273 compat=0 ip=0x7f268798f749 code=0x7ffc0000 [ 217.426894][ T28] audit: type=1326 audit(1768264243.087:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7111 comm="syz.1.276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f268798f749 code=0x7ffc0000 [ 217.489865][ T7115] syzkaller0: entered promiscuous mode [ 217.496429][ T7115] syzkaller0: entered allmulticast mode [ 217.579352][ T7122] netlink: 8 bytes leftover after parsing attributes in process `syz.2.279'. [ 222.997591][ T7149] tipc: Started in network mode [ 223.002524][ T7149] tipc: Node identity de2f20d28bc7, cluster identity 4711 [ 223.043630][ T7149] tipc: Enabled bearer , priority 0 [ 223.094408][ T7149] syzkaller0: entered promiscuous mode [ 223.100174][ T7149] syzkaller0: entered allmulticast mode [ 223.166484][ T7149] tipc: Resetting bearer [ 223.214884][ T7148] tipc: Resetting bearer [ 223.294320][ T7148] tipc: Disabling bearer [ 226.880353][ T28] audit: type=1326 audit(1768264252.687:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7243 comm="syz.3.286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91e8d8f749 code=0x7ffc0000 [ 228.658074][ T5827] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 228.668780][ T28] audit: type=1326 audit(1768264252.687:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7243 comm="syz.3.286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91e8d8f749 code=0x7ffc0000 [ 228.761542][ T28] audit: type=1326 audit(1768264254.357:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7243 comm="syz.3.286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=273 compat=0 ip=0x7f91e8d8f749 code=0x7ffc0000 [ 228.855852][ T5827] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 228.872721][ T5827] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 228.888340][ T5827] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 228.908926][ T5827] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 228.932630][ T28] audit: type=1326 audit(1768264254.357:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7243 comm="syz.3.286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91e8d8f749 code=0x7ffc0000 [ 228.975312][ T28] audit: type=1326 audit(1768264254.357:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7243 comm="syz.3.286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91e8d8f749 code=0x7ffc0000 [ 230.317357][ T5827] usb 5-1: config 0 descriptor?? [ 231.727432][ T5827] usb 5-1: can't set config #0, error -71 [ 231.851055][ T5827] usb 5-1: USB disconnect, device number 2 [ 235.066895][ T7306] syzkaller0: entered promiscuous mode [ 235.110076][ T7306] syzkaller0: entered allmulticast mode [ 235.376642][ T7314] tipc: Enabled bearer , priority 0 [ 235.386563][ T7314] syzkaller0: entered promiscuous mode [ 235.393436][ T7314] syzkaller0: entered allmulticast mode [ 236.157622][ T7318] tipc: Resetting bearer [ 236.264764][ T7312] tipc: Resetting bearer [ 238.124346][ T7312] tipc: Disabling bearer [ 239.451153][ T5827] tipc: Node number set to 1441276114 [ 242.344413][ T7358] syzkaller0: entered promiscuous mode [ 242.392827][ T7358] syzkaller0: entered allmulticast mode [ 247.082231][ T7381] sctp: failed to load transform for md5: -2 [ 247.089742][ T7384] tipc: Enabled bearer , priority 0 [ 247.143949][ T7392] syzkaller0: entered promiscuous mode [ 247.149473][ T7392] syzkaller0: entered allmulticast mode [ 247.338336][ T7384] tipc: Resetting bearer [ 247.392286][ T7382] tipc: Resetting bearer [ 248.276487][ T7382] tipc: Disabling bearer [ 250.289288][ T7431] syzkaller0: entered promiscuous mode [ 250.514398][ T7431] syzkaller0: entered allmulticast mode [ 255.875169][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.882747][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.421273][ T7482] sctp: failed to load transform for md5: -2 [ 257.616678][ T7493] netlink: 40 bytes leftover after parsing attributes in process `syz.4.330'. [ 257.668131][ T7498] netlink: 40 bytes leftover after parsing attributes in process `syz.4.330'. [ 257.719655][ T7498] netlink: 40 bytes leftover after parsing attributes in process `syz.4.330'. [ 260.060491][ T7513] syzkaller0: entered promiscuous mode [ 260.073484][ T7513] syzkaller0: entered allmulticast mode [ 260.356746][ T7519] netlink: 16 bytes leftover after parsing attributes in process `syz.1.337'. [ 260.769144][ T7527] tipc: Enabled bearer , priority 0 [ 260.805253][ T7527] syzkaller0: entered promiscuous mode [ 260.810780][ T7527] syzkaller0: entered allmulticast mode [ 260.973179][ T7531] tipc: Resetting bearer [ 261.037380][ T7525] tipc: Resetting bearer [ 261.152312][ T7525] tipc: Disabling bearer [ 264.464896][ T7566] syzkaller0: entered promiscuous mode [ 264.470431][ T7566] syzkaller0: entered allmulticast mode [ 265.423394][ T9] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 265.734613][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 265.793686][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 265.903412][ T9] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xEA, skipping [ 265.994867][ T9] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 266.090171][ T9] usb 2-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice=a4.8f [ 266.157266][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 266.195079][ T9] usb 2-1: Product: syz [ 266.203350][ T9] usb 2-1: Manufacturer: syz [ 266.211936][ T9] usb 2-1: SerialNumber: syz [ 266.241371][ T9] usb 2-1: config 0 descriptor?? [ 266.281697][ T7629] netlink: 16 bytes leftover after parsing attributes in process `syz.4.349'. [ 266.370861][ T5765] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 266.386407][ T5765] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 266.397007][ T5765] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 266.432297][ T5765] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 266.446980][ T5765] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 266.454938][ T5765] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 266.523777][ T789] usb 2-1: USB disconnect, device number 2 [ 266.660749][ T7634] lo speed is unknown, defaulting to 1000 [ 266.679854][ T7634] lo speed is unknown, defaulting to 1000 [ 266.839702][ T6821] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.979419][ T6821] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.079249][ T6821] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.197741][ T6821] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.238090][ T7634] chnl_net:caif_netlink_parms(): no params data found [ 267.364141][ T7634] bridge0: port 1(bridge_slave_0) entered blocking state [ 267.371569][ T7634] bridge0: port 1(bridge_slave_0) entered disabled state [ 267.382784][ T7634] bridge_slave_0: entered allmulticast mode [ 267.391969][ T7634] bridge_slave_0: entered promiscuous mode [ 267.551148][ T7634] bridge0: port 2(bridge_slave_1) entered blocking state [ 267.596097][ T7634] bridge0: port 2(bridge_slave_1) entered disabled state [ 267.605826][ T7634] bridge_slave_1: entered allmulticast mode [ 267.625398][ T7634] bridge_slave_1: entered promiscuous mode [ 268.180638][ T7634] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 269.122213][ T5765] Bluetooth: hci3: command tx timeout [ 269.156172][ T7634] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 269.664474][ T7661] sctp: failed to load transform for md5: -2 [ 270.112708][ T7670] syzkaller0: entered promiscuous mode [ 270.122724][ T7670] syzkaller0: entered allmulticast mode [ 270.231123][ T7634] team0: Port device team_slave_0 added [ 270.242084][ T7634] team0: Port device team_slave_1 added [ 270.955195][ T7634] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 270.991286][ T7634] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 271.074500][ T7634] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 271.127540][ T7634] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 271.135518][ T5765] Bluetooth: hci3: command tx timeout [ 271.227058][ T7634] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 271.337273][ T7634] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 271.370692][ T6821] tipc: Left network mode [ 272.481924][ T7634] hsr_slave_0: entered promiscuous mode [ 272.504946][ T7634] hsr_slave_1: entered promiscuous mode [ 272.511270][ T7634] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 272.533388][ T7634] Cannot create hsr debugfs directory [ 272.624478][ T7722] tipc: Enabled bearer , priority 0 [ 272.756485][ T7722] syzkaller0: entered promiscuous mode [ 272.762188][ T7722] syzkaller0: entered allmulticast mode [ 272.868959][ T7722] tipc: Resetting bearer [ 273.023057][ T7719] tipc: Resetting bearer [ 273.219192][ T5765] Bluetooth: hci3: command tx timeout [ 273.274535][ T7719] tipc: Disabling bearer [ 273.856276][ T7740] netlink: 16 bytes leftover after parsing attributes in process `syz.1.369'. [ 273.985526][ T7736] syzkaller0: entered promiscuous mode [ 273.991338][ T7736] syzkaller0: entered allmulticast mode [ 275.575783][ T5765] Bluetooth: hci3: command tx timeout [ 275.599545][ T27] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 276.572303][ T27] usb 3-1: config 0 has an invalid interface number: 183 but max is 0 [ 276.607606][ T27] usb 3-1: config 0 has no interface number 0 [ 276.638789][ T27] usb 3-1: config 0 interface 183 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 276.657402][ T27] usb 3-1: New USB device found, idVendor=067b, idProduct=331a, bcdDevice=9d.94 [ 276.671776][ T27] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 276.699638][ T27] usb 3-1: config 0 descriptor?? [ 276.707795][ T7754] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 276.735512][ T27] pl2303 3-1:0.183: required endpoints missing [ 276.779628][ T7634] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 276.799243][ T7634] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 276.843907][ T7634] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 276.897407][ T6821] hsr_slave_0: left promiscuous mode [ 276.913594][ T6821] hsr_slave_1: left promiscuous mode [ 276.922738][ T6821] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 276.941492][ T6821] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 276.958456][ T6821] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 276.974037][ T6821] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 276.993048][ T6821] bridge_slave_1: left allmulticast mode [ 277.009805][ T6821] bridge_slave_1: left promiscuous mode [ 277.025161][ T6821] bridge0: port 2(bridge_slave_1) entered disabled state [ 277.050614][ T6821] bridge_slave_0: left allmulticast mode [ 277.067902][ T6821] bridge_slave_0: left promiscuous mode [ 277.080441][ T6821] bridge0: port 1(bridge_slave_0) entered disabled state [ 277.145410][ T6821] veth1_macvtap: left promiscuous mode [ 277.151182][ T6821] veth0_macvtap: left promiscuous mode [ 277.160597][ T6821] veth1_vlan: left promiscuous mode [ 277.172028][ T6821] veth0_vlan: left promiscuous mode [ 277.627519][ T5765] Bluetooth: hci3: command tx timeout [ 278.013039][ T23] usb 3-1: USB disconnect, device number 4 [ 279.007410][ T6821] team0 (unregistering): Port device team_slave_1 removed [ 279.100065][ T6821] team0 (unregistering): Port device team_slave_0 removed [ 279.155950][ T6821] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 279.201551][ T6821] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 279.690863][ T6821] bond0 (unregistering): Released all slaves [ 279.781868][ T7634] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 279.847649][ T7792] tipc: Enabling of bearer rejected, failed to enable media [ 280.807388][ T7634] 8021q: adding VLAN 0 to HW filter on device bond0 [ 280.828064][ T7634] 8021q: adding VLAN 0 to HW filter on device team0 [ 280.907317][ T6848] bridge0: port 1(bridge_slave_0) entered blocking state [ 280.914670][ T6848] bridge0: port 1(bridge_slave_0) entered forwarding state [ 281.851568][ T7837] netlink: 40 bytes leftover after parsing attributes in process `syz.1.382'. [ 281.865811][ T7837] netlink: 40 bytes leftover after parsing attributes in process `syz.1.382'. [ 282.283240][ T6848] bridge0: port 2(bridge_slave_1) entered blocking state [ 282.290483][ T6848] bridge0: port 2(bridge_slave_1) entered forwarding state [ 282.339333][ T7832] netlink: 40 bytes leftover after parsing attributes in process `syz.1.382'. [ 284.557283][ T7871] netlink: 16 bytes leftover after parsing attributes in process `syz.2.388'. [ 285.870160][ T7634] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 287.862508][ T7897] netlink: 40 bytes leftover after parsing attributes in process `syz.1.394'. [ 287.893490][ T7897] netlink: 40 bytes leftover after parsing attributes in process `syz.1.394'. [ 287.932270][ T7897] netlink: 40 bytes leftover after parsing attributes in process `syz.1.394'. [ 291.503646][ T789] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 291.510127][ T7634] veth0_vlan: entered promiscuous mode [ 291.602981][ T7634] veth1_vlan: entered promiscuous mode [ 291.715551][ T789] usb 5-1: config 0 has an invalid interface number: 183 but max is 0 [ 291.736498][ T789] usb 5-1: config 0 has no interface number 0 [ 291.758744][ T789] usb 5-1: config 0 interface 183 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 291.778640][ T789] usb 5-1: New USB device found, idVendor=067b, idProduct=331a, bcdDevice=9d.94 [ 291.811721][ T789] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 291.846523][ T789] usb 5-1: config 0 descriptor?? [ 291.863104][ T7920] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 291.891187][ T789] pl2303 5-1:0.183: required endpoints missing [ 292.146524][ T789] usb 5-1: USB disconnect, device number 3 [ 292.161607][ T7634] veth0_macvtap: entered promiscuous mode [ 292.218984][ T7634] veth1_macvtap: entered promiscuous mode [ 292.310809][ T7634] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 292.462323][ T7634] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 292.481582][ T7634] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 293.095655][ T7634] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 293.276028][ T7634] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 293.502194][ T7634] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 293.515728][ T7634] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 293.526181][ T7634] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 293.537041][ T7634] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 293.548620][ T7634] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 293.561931][ T7634] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 293.571195][ T7634] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 293.580315][ T7634] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 293.589360][ T7634] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.195556][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 295.225748][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 295.302049][ T6821] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 295.326548][ T6821] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 297.311030][ T8031] xt_CT: You must specify a L4 protocol and not use inversions on it [ 297.321405][ T8029] tipc: Enabled bearer , priority 0 [ 297.562069][ T8029] tipc: Resetting bearer [ 297.593654][ T8032] syzkaller0: entered promiscuous mode [ 297.656336][ T8028] tipc: Resetting bearer [ 298.509147][ T8028] tipc: Disabling bearer [ 298.697481][ T5810] tipc: Node number set to 381312053 [ 300.169905][ T28] audit: type=1326 audit(1768264325.977:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8049 comm="syz.1.413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f268798f749 code=0x7ffc0000 [ 300.273627][ T28] audit: type=1326 audit(1768264325.977:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8049 comm="syz.1.413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f268798f749 code=0x7ffc0000 [ 300.295819][ C1] vkms_vblank_simulate: vblank timer overrun [ 300.321709][ T8054] netlink: 16 bytes leftover after parsing attributes in process `syz.2.412'. [ 300.348246][ T28] audit: type=1326 audit(1768264325.977:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8049 comm="syz.1.413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=273 compat=0 ip=0x7f268798f749 code=0x7ffc0000 [ 300.404517][ T28] audit: type=1326 audit(1768264325.977:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8049 comm="syz.1.413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f268798f749 code=0x7ffc0000 [ 304.383409][ T5832] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 304.494509][ T8148] tipc: Enabled bearer , priority 0 [ 304.522565][ T8148] syzkaller0: entered promiscuous mode [ 304.540677][ T8148] syzkaller0: entered allmulticast mode [ 304.601884][ T5832] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 304.627685][ T5832] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 304.632367][ T8148] tipc: Resetting bearer [ 304.643182][ T5832] usb 3-1: Product: syz [ 304.663383][ T5832] usb 3-1: Manufacturer: syz [ 304.671291][ T5832] usb 3-1: SerialNumber: syz [ 304.676349][ T8146] tipc: Resetting bearer [ 304.695713][ T5832] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 304.752433][ T8146] tipc: Disabling bearer [ 304.794845][ T789] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 304.958076][ T8154] syz.5.415 uses obsolete (PF_INET,SOCK_PACKET) [ 306.684078][ T789] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 306.691851][ T789] ath9k_htc: Failed to initialize the device [ 306.815874][ T789] usb 3-1: ath9k_htc: USB layer deinitialized [ 306.857758][ T23] usb 3-1: USB disconnect, device number 5 [ 308.285323][ T8167] netlink: 16 bytes leftover after parsing attributes in process `syz.2.424'. [ 308.473517][ T8170] netlink: 8 bytes leftover after parsing attributes in process `syz.5.425'. [ 313.015371][ T28] audit: type=1326 audit(1768264338.827:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8247 comm="syz.4.422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0032b8f749 code=0x7ffc0000 [ 313.112210][ T28] audit: type=1326 audit(1768264338.827:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8247 comm="syz.4.422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=273 compat=0 ip=0x7f0032b8f749 code=0x7ffc0000 [ 313.195547][ T28] audit: type=1326 audit(1768264338.827:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8247 comm="syz.4.422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0032b8f749 code=0x7ffc0000 [ 313.617152][ T8261] wg1: entered promiscuous mode [ 313.622137][ T8261] wg1: entered allmulticast mode [ 314.076794][ T8268] netlink: 40 bytes leftover after parsing attributes in process `syz.1.426'. [ 315.113995][ T8278] netlink: 16 bytes leftover after parsing attributes in process `syz.2.436'. [ 317.305236][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.311595][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.570777][ T28] audit: type=1326 audit(1768264344.377:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8314 comm="syz.5.442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83e1d8f749 code=0x7ffc0000 [ 318.732945][ T28] audit: type=1326 audit(1768264344.447:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8314 comm="syz.5.442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=273 compat=0 ip=0x7f83e1d8f749 code=0x7ffc0000 [ 318.790128][ T8317] netlink: 40 bytes leftover after parsing attributes in process `syz.1.443'. [ 318.945454][ T28] audit: type=1326 audit(1768264344.447:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8314 comm="syz.5.442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83e1d8f749 code=0x7ffc0000 [ 318.967904][ C0] vkms_vblank_simulate: vblank timer overrun [ 319.091065][ T28] audit: type=1326 audit(1768264344.447:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8314 comm="syz.5.442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83e1d8f749 code=0x7ffc0000 [ 319.215955][ T8322] netlink: 16 bytes leftover after parsing attributes in process `syz.5.446'. [ 323.164537][ T28] audit: type=1326 audit(1768264348.977:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8367 comm="syz.4.454" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0032b8f749 code=0x7ffc0000 [ 323.235742][ T28] audit: type=1326 audit(1768264348.977:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8367 comm="syz.4.454" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0032b8f749 code=0x7ffc0000 [ 324.383469][ T8375] netlink: 40 bytes leftover after parsing attributes in process `syz.5.456'. [ 328.246562][ T8414] netlink: 16 bytes leftover after parsing attributes in process `syz.1.455'. [ 331.201911][ T8491] netlink: 40 bytes leftover after parsing attributes in process `syz.5.466'. [ 331.244711][ T8491] netlink: 40 bytes leftover after parsing attributes in process `syz.5.466'. [ 331.264108][ T8491] netlink: 40 bytes leftover after parsing attributes in process `syz.5.466'. [ 332.450083][ T8500] binder: 8499:8500 ioctl c018620b 0 returned -14 [ 332.696288][ T8502] netlink: 6716 bytes leftover after parsing attributes in process `syz.1.467'. [ 333.801769][ T8518] netlink: 16 bytes leftover after parsing attributes in process `syz.5.473'. [ 336.040309][ T8535] capability: warning: `syz.5.475' uses 32-bit capabilities (legacy support in use) [ 337.874560][ T8548] netlink: 40 bytes leftover after parsing attributes in process `syz.2.477'. [ 338.119981][ T8554] netlink: 40 bytes leftover after parsing attributes in process `syz.2.477'. [ 338.154177][ T8554] netlink: 40 bytes leftover after parsing attributes in process `syz.2.477'. [ 338.441384][ T8561] binder: 8560:8561 ioctl c018620b 0 returned -14 [ 338.970120][ T8562] netlink: 6716 bytes leftover after parsing attributes in process `syz.5.481'. [ 339.791922][ T8574] netlink: 16 bytes leftover after parsing attributes in process `syz.5.483'. [ 341.162698][ T8586] wg1: entered promiscuous mode [ 341.167884][ T8586] wg1: entered allmulticast mode [ 341.640642][ T7949] udevd[7949]: failed to send result of seq 12619 to main daemon: Connection refused [ 345.002827][ T5775] Bluetooth: hci4: command 0x0406 tx timeout [ 350.422776][ T8684] random: crng reseeded on system resumption [ 362.434791][ T8789] netlink: 16 bytes leftover after parsing attributes in process `syz.4.518'. [ 367.382060][ T8842] netlink: 16 bytes leftover after parsing attributes in process `syz.2.530'. [ 371.080037][ T8868] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 371.291610][ T8868] 8021q: adding VLAN 0 to HW filter on device bond1 [ 371.312046][ T8868] bond0: (slave bond1): Enslaving as an active interface with an up link [ 371.452238][ T8873] netlink: 14 bytes leftover after parsing attributes in process `syz.1.539'. [ 372.375992][ T8873] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 372.400520][ T8873] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 372.424524][ T8873] bond0 (unregistering): (slave bond1): Releasing backup interface [ 372.439456][ T8873] bond0 (unregistering): Released all slaves [ 376.050724][ T8920] vxcan1: tx drop: invalid da for name 0x000000007fffffff [ 377.523404][ T23] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 377.718599][ T8926] netlink: 40 bytes leftover after parsing attributes in process `syz.4.556'. [ 377.741763][ T23] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 377.768277][ T23] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 377.795855][ T23] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 377.816426][ T23] usb 6-1: Product: syz [ 377.820724][ T23] usb 6-1: Manufacturer: syz [ 377.833455][ T23] usb 6-1: SerialNumber: syz [ 377.842479][ T23] usb 6-1: config 0 descriptor?? [ 378.290080][ T8918] [ 378.292457][ T8918] ============================================ [ 378.298610][ T8918] WARNING: possible recursive locking detected [ 378.304754][ T8918] syzkaller #0 Not tainted [ 378.309145][ T8918] -------------------------------------------- [ 378.315281][ T8918] syz.5.553/8918 is trying to acquire lock: [ 378.321252][ T8918] ffff8880310ccb30 (&chip->mutex){+.+.}-{3:3}, at: snd_usb_endpoint_close+0x3c/0x4c0 [ 378.330734][ T8918] [ 378.330734][ T8918] but task is already holding lock: SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 378.338082][ T8918] ffff8880310ccb30 (&chip->mutex){+.+.}-{3:3}, at: snd_usb_endpoint_set_params+0x6d/0x2b50 [ 378.348085][ T8918] [ 378.348085][ T8918] other info that might help us debug this: [ 378.356146][ T8918] Possible unsafe locking scenario: [ 378.356146][ T8918] [ 378.363671][ T8918] CPU0 [ 378.366931][ T8918] ---- [ 378.370193][ T8918] lock(&chip->mutex); [ 378.374333][ T8918] lock(&chip->mutex); [ 378.378479][ T8918] [ 378.378479][ T8918] *** DEADLOCK *** [ 378.378479][ T8918] [ 378.386625][ T8918] May be due to missing lock nesting notation [ 378.386625][ T8918] [ 378.394936][ T8918] 3 locks held by syz.5.553/8918: [ 378.399944][ T8918] #0: ffff88806a8d74e0 (&runtime->oss.params_lock){+.+.}-{3:3}, at: snd_pcm_oss_sync+0x2a7/0xc20 [ 378.410554][ T8918] #1: ffff88806a8d7238 (&runtime->buffer_mutex){+.+.}-{3:3}, at: snd_pcm_hw_params+0x15a/0x1c50 [ 378.421078][ T8918] #2: ffff8880310ccb30 (&chip->mutex){+.+.}-{3:3}, at: snd_usb_endpoint_set_params+0x6d/0x2b50 [ 378.431534][ T8918] [ 378.431534][ T8918] stack backtrace: [ 378.437430][ T8918] CPU: 1 PID: 8918 Comm: syz.5.553 Not tainted syzkaller #0 [ 378.444700][ T8918] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 378.454777][ T8918] Call Trace: [ 378.458057][ T8918] [ 378.460974][ T8918] dump_stack_lvl+0x16c/0x230 [ 378.465656][ T8918] ? show_regs_print_info+0x20/0x20 [ 378.470856][ T8918] ? print_deadlock_bug+0x435/0x5d0 [ 378.476049][ T8918] __lock_acquire+0x5d40/0x7c80 [ 378.480893][ T8918] ? verify_lock_unused+0x140/0x140 [ 378.486084][ T8918] lock_acquire+0x197/0x410 [ 378.490572][ T8918] ? snd_usb_endpoint_close+0x3c/0x4c0 [ 378.496023][ T8918] ? trace_contention_end+0x39/0xe0 [ 378.501215][ T8918] ? __might_sleep+0xe0/0xe0 [ 378.505794][ T8918] ? read_lock_is_recursive+0x20/0x20 [ 378.511169][ T8918] ? wait_clear_urbs+0x184/0x390 [ 378.516097][ T8918] ? snd_usb_endpoint_sync_pending_stop+0x30/0x30 [ 378.522503][ T8918] __mutex_lock+0x129/0xcc0 [ 378.527007][ T8918] ? snd_usb_endpoint_close+0x3c/0x4c0 [ 378.532544][ T8918] ? usb_free_coherent+0x5d/0x90 [ 378.537469][ T8918] ? release_urbs+0x3fe/0x4a0 [ 378.542226][ T8918] ? snd_usb_endpoint_close+0x3c/0x4c0 [ 378.547671][ T8918] ? mutex_lock_nested+0x20/0x20 [ 378.552592][ T8918] ? snd_usb_endpoint_set_params+0x407/0x2b50 [ 378.558662][ T8918] snd_usb_endpoint_close+0x3c/0x4c0 [ 378.563944][ T8918] snd_usb_hw_params+0x1357/0x19c0 [ 378.569044][ T8918] ? snd_usb_pcm_close+0x300/0x300 [ 378.574139][ T8918] ? snd_pcm_lib_malloc_pages+0x2f0/0x690 [ 378.579848][ T8918] snd_pcm_hw_params+0x835/0x1c50 [ 378.584875][ T8918] ? snd_pcm_hw_param_first+0x6a0/0xb30 [ 378.590439][ T8918] ? snd_pcm_forward+0x6d0/0x6d0 [ 378.595367][ T8918] snd_pcm_oss_change_params_locked+0x2144/0x3d30 [ 378.601776][ T8918] ? snd_pcm_oss_read2+0x3d0/0x3d0 [ 378.606872][ T8918] ? ima_file_free+0x154/0x450 [ 378.611621][ T8918] ? mutex_lock_nested+0x20/0x20 [ 378.616543][ T8918] ? __fsnotify_parent+0x6cc/0x7c0 [ 378.621645][ T8918] snd_pcm_oss_sync+0x363/0xc20 [ 378.626484][ T8918] snd_pcm_oss_release+0x102/0x240 [ 378.631587][ T8918] ? snd_pcm_oss_open+0x1b40/0x1b40 [ 378.636780][ T8918] __fput+0x234/0x970 [ 378.640756][ T8918] task_work_run+0x1ce/0x250 [ 378.645332][ T8918] ? task_work_cancel+0x240/0x240 [ 378.650344][ T8918] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 378.656317][ T8918] ? exit_to_user_mode_loop+0x3b/0x110 [ 378.661781][ T8918] exit_to_user_mode_loop+0xe6/0x110 [ 378.667055][ T8918] exit_to_user_mode_prepare+0xf6/0x180 [ 378.672582][ T8918] syscall_exit_to_user_mode+0x1a/0x50 [ 378.678032][ T8918] do_syscall_64+0x61/0xb0 [ 378.682428][ T8918] ? clear_bhb_loop+0x40/0x90 [ 378.687093][ T8918] ? clear_bhb_loop+0x40/0x90 [ 378.691760][ T8918] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 378.697639][ T8918] RIP: 0033:0x7f83e1d8df90 [ 378.702049][ T8918] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 69 95 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 bc 95 02 00 8b 44 [ 378.721663][ T8918] RSP: 002b:00007f83e2cafb70 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 378.730076][ T8918] RAX: ffffffffffffffea RBX: 00000000008c4201 RCX: 00007f83e1d8df90 [ 378.738573][ T8918] RDX: 00000000008c4201 RSI: 00007f83e2cafc10 RDI: 00000000ffffff9c [ 378.746803][ T8918] RBP: 00007f83e2cafc10 R08: 0000000000000000 R09: 00236f696475612f [ 378.754765][ T8918] R10: 0000000000000000 R11: 0000000000000293 R12: cccccccccccccccd [ 378.762729][ T8918] R13: 00007f83e1fe6038 R14: 00007f83e1fe5fa0 R15: 00007fff24a8c0d8 [ 378.770690][ T8918] [ 378.833855][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.840194][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.706559][ T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 379.778970][ T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 379.837551][ T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 379.916906][ T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 380.065303][ T12] tipc: Left network mode [ 380.656106][ T12] hsr_slave_0: left promiscuous mode [ 380.661803][ T12] hsr_slave_1: left promiscuous mode [ 380.667575][ T12] bridge_slave_1: left allmulticast mode [ 380.673209][ T12] bridge_slave_1: left promiscuous mode [ 380.680753][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 380.691489][ T12] bridge_slave_0: left allmulticast mode [ 380.697266][ T12] bridge_slave_0: left promiscuous mode [ 380.702923][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 380.713195][ T12] veth1_macvtap: left promiscuous mode [ 380.718764][ T12] veth0_macvtap: left promiscuous mode [ 380.724722][ T12] veth1_vlan: left promiscuous mode [ 380.729953][ T12] veth0_vlan: left promiscuous mode [ 380.881480][ T12] bond1 (unregistering): Released all slaves [ 380.996475][ T12] team0 (unregistering): Port device team_slave_1 removed [ 381.030707][ T12] team0 (unregistering): Port device team_slave_0 removed [ 381.171832][ T789] lo speed is unknown, defaulting to 1000 [ 381.468081][ T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 381.518957][ T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 381.569373][ T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 381.608204][ T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 381.667164][ T12] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 381.707291][ T12] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 381.748201][ T12] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 381.808918][ T12] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 381.867190][ T12] tipc: Left network mode [ 381.872546][ T12] tipc: Left network mode [ 382.645928][ T12] hsr_slave_0: left promiscuous mode [ 382.651932][ T12] hsr_slave_1: left promiscuous mode [ 382.658939][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 382.666465][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 382.675328][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 382.682733][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 382.690729][ T12] bridge_slave_1: left allmulticast mode [ 382.696522][ T12] bridge_slave_1: left promiscuous mode [ 382.702183][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 382.711020][ T12] bridge_slave_0: left allmulticast mode [ 382.716776][ T12] bridge_slave_0: left promiscuous mode [ 382.722415][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 382.732423][ T12] hsr_slave_0: left promiscuous mode [ 382.738398][ T12] hsr_slave_1: left promiscuous mode [ 382.745549][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 382.753226][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 382.760918][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 382.768493][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 382.776063][ T12] bridge_slave_1: left allmulticast mode [ 382.781694][ T12] bridge_slave_1: left promiscuous mode [ 382.787595][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 382.796002][ T12] bridge_slave_0: left allmulticast mode [ 382.801640][ T12] bridge_slave_0: left promiscuous mode [ 382.807582][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 382.818177][ T12] veth1_macvtap: left promiscuous mode [ 382.823814][ T12] veth0_macvtap: left promiscuous mode [ 382.829350][ T12] veth1_vlan: left promiscuous mode [ 382.835485][ T12] veth0_vlan: left promiscuous mode [ 382.841395][ T12] veth1_macvtap: left promiscuous mode [ 382.846928][ T12] veth0_macvtap: left promiscuous mode [ 382.852453][ T12] veth1_vlan: left promiscuous mode [ 382.857721][ T12] veth0_vlan: left promiscuous mode [ 383.075525][ T12] team0 (unregistering): Port device team_slave_1 removed [ 383.099418][ T12] team0 (unregistering): Port device team_slave_0 removed [ 383.123070][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 383.149205][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 383.201625][ T12] bond0 (unregistering): Released all slaves [ 383.348033][ T12] team0 (unregistering): Port device team_slave_1 removed [ 383.371747][ T12] team0 (unregistering): Port device team_slave_0 removed [ 383.394678][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 383.421014][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 383.494752][ T12] bond0 (unregistering): Released all slaves [ 383.552364][ T5752] lo speed is unknown, defaulting to 1000