last executing test programs: 2m22.455366022s ago: executing program 1 (id=116): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async, rerun: 64) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x2, 0x4, 0x8, 0x3ff, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) (rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000f80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058000000850000002600000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x50, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async, rerun: 32) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) (rerun: 32) preadv2(r1, &(0x7f0000000280)=[{&(0x7f0000000040)=""/11, 0xb}], 0x1, 0xffff, 0x4, 0x0) r2 = socket$key(0xf, 0x3, 0x2) (async) mq_open(&(0x7f00000005c0)='eth0\x00#\x13\xaeu\xe0\xfb\x050*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\x19\xf1\xcce\xab\x80M\xc9\xcf\xaeR\xb69k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3\xff\a\x00\x00\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\aY\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3Cs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\x96{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\x03\x00\x00\x00y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\x8e\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9\xb3\x83\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|c\xf3\x8b\xc2E\x00\x00\x00\x00\x00\x00', 0x42, 0x0, 0x0) (async) r3 = syz_open_dev$vim2m(&(0x7f0000000040), 0x0, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r3, 0xc02c564a, &(0x7f0000000280)={0x0, 0x3136564e, 0x1, @stepwise={0xfffffffb, 0x0, 0x400}}) (async) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r4, 0x40505331, &(0x7f0000000300)={0xf, 0x4000, 0x0, 0xfffffffd}) (async) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x3, 0x7f, 0x20000006, 0x4d, 0x6, 0x5f, 0x9, 0x580a, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x4, 0x0, 0x7, 0x3c5b, 0x1, 0x24, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x3, 0x8, 0x4c74, 0x80000000, 0x242, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0x1, 0x7, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x0, 0x5, 0x4, 0x8, 0x3ff, 0x80, 0x0, 0x6, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432e6, 0xc8, 0xf9, 0xe, 0x2bf, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x9, 0x8, 0x9, 0x6, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x4, 0x5, 0xd, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x5, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0xffff, 0xa620, 0x1, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x4, 0xc8, 0x1, 0xfffff000, 0x10000, 0x3, 0x7e, 0x100, 0x9602, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c) (async) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) (async) recvmmsg(r2, &(0x7f0000000440), 0x6f5, 0x2, &(0x7f0000000480)={0x77359400}) (async) setsockopt$sock_int(r2, 0x1, 0x4b, &(0x7f0000000040)=0xfd87, 0x4) (async) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000000)={{0x1, 0x1, 0x18, r2, {0x2e}}, './file0\x00'}) ioctl$vim2m_VIDIOC_S_FMT(r5, 0xc0d05605, &(0x7f00000001c0)={0x2, @pix_mp={0x10, 0x6, 0x4745504d, 0x3, 0x6, [{0xe1ef, 0x6}, {0x1}, {0x5, 0x4}, {0xfffffe00, 0x45}, {0x7, 0x8}, {0x6, 0xfffffffb}, {0xf01, 0x12}, {0x2}], 0x3, 0x28, 0x8, 0x1, 0x7}}) (async) sendmsg$key(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="0216000002"], 0x10}}, 0x0) 2m21.603096176s ago: executing program 1 (id=123): r0 = memfd_secret(0x80000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), r1) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002abd7000fedbdf250100000018000180140002006e657464657673696d30000000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x20040041}, 0x4048054) fcntl$setlease(r0, 0x400, 0x1) (async) fcntl$setlease(r0, 0x400, 0x1) fsetxattr$system_posix_acl(r0, &(0x7f00000000c0)='system.posix_acl_access\x00', 0x0, 0x0, 0x3) (async) fsetxattr$system_posix_acl(r0, &(0x7f00000000c0)='system.posix_acl_access\x00', 0x0, 0x0, 0x3) r3 = syz_usb_connect(0x3, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100006ceb85409c240290adde00000001090212000100000000690c00090400000024df6d005300000080000000003c0360846f0e29cd4da6fbef6421242b86a137002365d58d7d4ac1e7f0645579c46ae23e69c1ec1fd8105b5943f1"], 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r5) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r5, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r6, 0x0) syz_emit_ethernet(0x5e, &(0x7f0000000140)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "fffa87", 0x28, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0xc2, 0x0, 0x0, 0x0, {[@mptcp=@synack={0x1e, 0x10, 0x9, 0x2, 0x9, 0x576, 0x1}, @nop]}}}}}}}}, 0x0) (async) syz_emit_ethernet(0x5e, &(0x7f0000000140)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "fffa87", 0x28, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0xc2, 0x0, 0x0, 0x0, {[@mptcp=@synack={0x1e, 0x10, 0x9, 0x2, 0x9, 0x576, 0x1}, @nop]}}}}}}}}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000100)=@filter={'filter\x00', 0x4, 0x4, 0x450, 0xffffffff, 0x128, 0x128, 0x128, 0xfeffffff, 0xffffffff, 0x380, 0x380, 0x380, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@mcast2, @ipv4={'\x00', '\xff\xff', @broadcast}, [], [], 'veth0_to_bond\x00', 'veth0_to_bridge\x00', {}, {}, 0x3a}, 0x2f2, 0x100, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x0, 0x6, 0x2, 0x1}}, @common=@ipv6header={{0x28}, {0x88, 0x14, 0x1}}]}, @REJECT={0x28}}, {{@ipv6={@remote, @remote, [], [0x0, 0xffffff00], 'rose0\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xf}}}, {{@uncond, 0x0, 0x160, 0x188, 0x0, {}, [@common=@ipv6header={{0x28}, {0x0, 0x1}}, @common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @local, @private1={0xfc, 0x1, '\x00', 0x1}, @loopback, [0x0, 0x0, 0x0, 0xff]}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x8}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4b0) syz_usb_control_io$uac1(r3, 0x0, 0x0) (async) syz_usb_control_io$uac1(r3, 0x0, 0x0) 2m21.21582116s ago: executing program 4 (id=127): r0 = socket(0x15, 0x5, 0x0) getsockopt(r0, 0x200000000114, 0x2716, 0x0, &(0x7f0000000000)) socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="120100006325a640402000498b4d000000010902240001000000000904000002214c6a0009050702000000da000905890e"], 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, &(0x7f0000000300)={0x1c, &(0x7f00000001c0)={0x20, 0xf, 0x2f, "11c7355b1aa690e34bcf8f546fe76acc3c5f8401481327736f11ba5ded8c57792f4c22095c93fac4ce5024e2b8068e"}, 0x0, 0x0}) sendmsg$nl_route(r0, 0x0, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) r2 = socket(0x15, 0x80805, 0x0) sendmmsg$inet(r2, &(0x7f00000009c0)=[{{&(0x7f0000000600)={0x2, 0x4e21, @private=0xa010101}, 0x10, &(0x7f0000000900)=[{0x0}], 0x1}}], 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000000)={@local, @local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2c, 0x0, @remote, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000000080)={@loopback={0xfec0ffffffffffff, 0x3fc}, 0x0, r4}) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x40800) recvmsg(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$midi(&(0x7f0000000100), 0x3ff, 0x121041) 2m19.139731105s ago: executing program 3 (id=138): r0 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000380)={0x1, @pix_mp={0x8000000, 0x0, 0x32525942, 0x9, 0x0, [{0x0, 0x1000000}, {0x0, 0xffffffff}, {}, {}, {}, {0x0, 0x6}, {0x6}], 0x0, 0x8, 0x16, 0x1, 0x7}}) 2m19.060924013s ago: executing program 4 (id=139): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000340)={0x84, &(0x7f0000000040)=ANY=[@ANYBLOB="00000100000005"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000280)={0x14, &(0x7f0000000080)={0x20, 0x8, 0x2c, {0x2c, 0x23, "9eb792aa0cbcc97c8c64f38c8afa63f41b29aa66ad6eb4e8409fd5637943bcba20e764c7bf75bc2a92c7"}}, &(0x7f0000000240)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f00000004c0)={0x1c, &(0x7f00000002c0)={0x40, 0x11, 0x12, "ec8738166b4e38ffbd626f05fa7a10ba412f"}, &(0x7f0000000400)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000000480)={0x0, 0x8, 0x1, 0xe}}) (async, rerun: 32) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x1, 0xbf27, 0x500, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (rerun: 32) mmap(&(0x7f0000fa2000/0x3000)=nil, 0x3000, 0x100000d, 0x13, r1, 0x0) (async) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x10000, &(0x7f0000000100)={0xffffffffffffffff}, 0x111, 0x4}}, 0x20) (async, rerun: 32) fcntl$getown(r2, 0x9) (rerun: 32) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f00000000c0)={0xe, 0x18, 0xfa00, @id_tos={0x0, r3, 0x0, 0x3}}, 0x20) r4 = socket(0x2b, 0x80801, 0x1) connect$inet6(r4, &(0x7f00000001c0)={0xa, 0x4, 0x3ff, @empty, 0x1}, 0x1c) (async) recvmsg$qrtr(r4, &(0x7f0000000800)={0x0, 0x0, 0x0}, 0x38, 0x2000) mremap(&(0x7f0000fa4000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000fa2000/0x1000)=nil) (async) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) (async) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000f00)={0x44, &(0x7f0000000cc0)={0x20, 0x5, 0x2, "19dc"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 64) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000380)={0x1c, &(0x7f0000000180)=ANY=[@ANYBLOB="00e200000000000061c6e141a47c508d3425aa21ab9413b388dd93de938926014a5f80144a975c675f8834c135ed90a9f0a28ef6c018af5f6f5f3074fe333ec97f00f185e740b9099363b24716c3df94d7dc4c4a3e4b5529a666697af241a7678b4dcd4278bfca5cf46608d5fa7f2868f88a8b77a5a49a0cf4de1984eb10ed3bdd60e4dca86375d23bca47f89a898dd24da65d0d32f9d951f221ce3b34a551136d29c2"], 0x0, 0x0}) (rerun: 64) 2m18.99705437s ago: executing program 2 (id=140): r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e21, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_ttl={{0x14, 0x0, 0x2, 0x4}}], 0x18}}], 0x1, 0x0) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = dup(r1) io_setup(0x5, &(0x7f00000009c0)=0x0) io_submit(r3, 0x1, &(0x7f0000000500)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}]) madvise(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x13) ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000040)) read$FUSE(r2, &(0x7f0000000a00)={0x2020}, 0x2020) 2m18.843638899s ago: executing program 3 (id=141): r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f00000000c0)=ANY=[@ANYBLOB="e0000002ac1414aa"], 0x1c) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x64, 0x0, 0x0, 0x2, 0x0, @empty, @multicast2}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x32, 0x1, 0x1000000}}}}}, 0x0) 2m18.71732478s ago: executing program 3 (id=143): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="78000000100001002dbd7000fedbdf2500000000", @ANYRES32=r2, @ANYBLOB="60c000006a2d000034001280110001006272696467655f736c617665000000031c00058008000500790000000500110000000000050007"], 0x78}, 0x1, 0x0, 0x0, 0x4000004}, 0x40) 2m18.709829443s ago: executing program 0 (id=144): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0xa00c2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) socket$xdp(0x2c, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) syz_io_uring_setup(0x2c52, &(0x7f0000000140)={0x0, 0x8867, 0x10000, 0x2, 0x1f6, 0x0, r2}, 0x0, 0x0) syz_io_uring_setup(0x507d, &(0x7f0000000480)={0x0, 0x0, 0x10100, 0x0, 0xffffffff}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) syz_io_uring_submit(0x0, r5, &(0x7f0000000440)=@IORING_OP_STATX={0x15, 0x56, 0x0, r2, &(0x7f0000000300), &(0x7f0000000400)='./file0\x00', 0x80, 0x800}) r6 = syz_io_uring_setup(0x9e, &(0x7f0000000640)={0x0, 0x5865, 0x10, 0x2, 0x24d}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f00000002c0)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r6, 0x100847c0, 0x0, 0x1, 0x0, 0x0) (fail_nth: 35) r9 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0x42b02, 0x0) ioctl$SNDCTL_DSP_SETFMT(r9, 0xc0045005, &(0x7f0000000140)) r10 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000006800010025bd7000000000000a000000000000000600070003000000080005", @ANYRES32=r11, @ANYBLOB="0c000880"], 0x34}, 0x1, 0x0, 0x0, 0x44040}, 0x0) r12 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r12, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, &(0x7f00000000c0)="f0fe8c80000f01df3a0f799d319b660fb889000f00d00f1ef30f005ccd0f01d93e2e26652665660f50cf0f876f30", 0x2e}], 0x1, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="4400002e8668b6e3b1c70010000304fcfffeff3d00000000000000", @ANYRES32=0x0, @ANYBLOB="a5fdad8800000000240012800b00010067656e65766500001400028005000c00010000000800010003000000"], 0x44}, 0x1, 0x0, 0x0, 0x4004}, 0x4804) ioctl$KVM_RUN(r12, 0xae80, 0x0) 2m18.258067992s ago: executing program 0 (id=145): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) sendmsg$TIPC_CMD_RESET_LINK_STATS(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x30, r1, 0x135, 0x70bd2a, 0x25dfdbfc, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}}, 0x30}, 0x1, 0x0, 0x0, 0x44040}, 0x40040) 2m18.257758206s ago: executing program 1 (id=146): r0 = memfd_create(&(0x7f0000000040)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1\xcb\x11\xf5\x8c\xa5\xdb\xd4\x8db\x94\xfa\x9ew\x01m\x81\x00\x00\x00\x7f\xb0\x1f\xb8\xea\a\xfcD\x9d\xa7\xd8\xc2\x10\x9e\xe8\xc5\x1d\x91\xc1D,\x85HX\xa9%\f)e\xe0\x00\x00\x00\x00\xfb\xbf\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82~b\x9b;(\xb5\xe1jS\xd6\x915||\xa0\x8ez\x02\x00\x00\x00\x00\x00\x00\x00:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xd2q#\xc6.\xa2Zhz8Z\xd2}\xf5\xe4\x9f\x06\x9b\x01\xf9t\xbb\b\x00\x14\xdb\xd3\xcd\xfd\xbd\xd3\x00\xec\x0fy\x8c\xf1\x96\xbftxy!\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xa2\x8f9\x01\xce\xe4\xbf\x97\xe8C\x18?\x1e\xa8\x14]\x98\xac', 0x3) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) (async) syz_clone(0x20800000, 0x0, 0x0, 0x0, 0x0, 0x0) (async) socket$packet(0x11, 0x2, 0x300) (async) r1 = syz_open_dev$sndctrl(&(0x7f0000000280), 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r1, 0xc0045540, &(0x7f0000000000)=0xfffffffd) 2m18.065291977s ago: executing program 0 (id=147): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_usb_connect(0x2, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120100001a77aa4094225b4210a20102030109022400010000000009040000029233500009050602ff030000000905ba3e79"], 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000240)=ANY=[@ANYBLOB="40010400000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, &(0x7f00000004c0)={0x2c, &(0x7f00000002c0)={0x20, 0x0, 0x1a, "0f565053facfc9659336111f4517f275598a7a77d30165c2f115"}, 0x0, 0x0, 0x0, 0x0}) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) r3 = syz_open_dev$vim2m(&(0x7f0000000040), 0x40003, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r3, 0xc0405602, &(0x7f0000000280)={0x13, 0x1, 0x3, "02860077abb9d375dcba568eb40700b80000000000f61045a82ed23d00", 0x34524742}) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x20, r2, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x48050}, 0x0) 2m18.047433094s ago: executing program 3 (id=148): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_MSG_GETCHAIN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="20000000040a01010000000000000ec00a"], 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x800) 2m17.915068874s ago: executing program 1 (id=149): r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000), 0x680000, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(0xffffffffffffffff, 0xc02064b9, &(0x7f00000000c0)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x0, 0xe0e0e0e0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000200)={&(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x4, 0xa, 0x9}) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r0, 0xc01064ab, &(0x7f0000000240)={0x5, r1, r2}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), r0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000380)={'erspan0\x00', &(0x7f0000000300)={'sit0\x00', 0x0, 0x1, 0x80, 0x8, 0x0, {{0x11, 0x4, 0x1, 0x3, 0x44, 0x67, 0x0, 0x1, 0x29, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@generic={0x86, 0x5, 'n\vg'}, @end, @timestamp={0x44, 0x10, 0x7f, 0x0, 0x7, [0x1, 0x4, 0x5]}, @rr={0x7, 0x17, 0x2f, [@dev={0xac, 0x14, 0x14, 0x2f}, @loopback, @private=0xa010101, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty]}]}}}}}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000440)={r0, 0x58, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$ETHTOOL_MSG_DEBUG_GET(r3, &(0x7f0000000500)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x408}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x28, r4, 0x800, 0x70bd2b, 0x25dfdbff, {}, [@HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4010}, 0x20000000) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000840)={r0, 0x58, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000000900)={{0x1, 0x1, 0x18, r0, {0x6}}, './file0\x00'}) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000009c0)={0x18, 0x28, &(0x7f0000000540)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x76c, 0x0, 0x0, 0x0, 0x1ff}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x5}, @btf_id={0x18, 0xb, 0x3, 0x0, 0x1}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8001}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @generic={0x7, 0x6, 0x1, 0x81, 0x2}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}}, @alu={0x4, 0x0, 0x6, 0x0, 0x0, 0xffffffffffffff42, 0x8}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000680)='syzkaller\x00', 0x8, 0xd0, &(0x7f00000006c0)=""/208, 0x40f00, 0x1, '\x00', r7, 0x0, r0, 0x8, &(0x7f0000000880)={0x2, 0x3}, 0x8, 0x10, &(0x7f00000008c0)={0x2, 0xf, 0x2, 0x4}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000940)=[r0, r8], &(0x7f0000000980)=[{0x4, 0x2, 0xd, 0xc}, {0x1, 0x401, 0x3, 0x1}, {0x7, 0x4, 0x7, 0xb}, {0x1, 0x4, 0xf, 0x1}], 0x10, 0x8, @void, @value}, 0x94) sendmsg$AUDIT_TRIM(r8, &(0x7f0000000b40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x10, 0x3f6, 0x209, 0x70bd27, 0x25dfdbff, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x4008010}, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000b80)={'ipvlan1\x00', 0x0}) ioctl$TIOCMSET(r0, 0x5418, &(0x7f0000000bc0)=0x93) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000c80)=@nat={'nat\x00', 0x1b, 0x5, 0x570, 0x380, 0x380, 0xffffffff, 0x0, 0x380, 0x4a0, 0x4a0, 0xffffffff, 0x4a0, 0x4a0, 0x5, &(0x7f0000000c00), {[{{@ipv6={@loopback, @empty, [0xff000000, 0xff, 0xff000000, 0xff000000], [0x0, 0x0, 0x0, 0xff], 'veth0_virt_wifi\x00', 'pim6reg\x00', {}, {}, 0x3b, 0x5, 0x4}, 0x0, 0x120, 0x160, 0x0, {}, [@common=@srh={{0x30}, {0x33, 0x5, 0x7f, 0x57, 0x9c, 0x100, 0x2c36}}, @common=@dst={{0x48}, {0xd, 0x1, 0x1, [0x1, 0x4, 0xb6bf, 0x8, 0xe34b, 0x650, 0x1, 0x40, 0x7, 0x3, 0x2, 0x2, 0x5, 0x0, 0x7e, 0x3], 0xc}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "61ac394660dfffdba364438a4c6601e10a719f2769b67ff8eeec0acd3119"}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x25}, @local, [0xffffff00, 0x0, 0x0, 0xffffffff], [0xffffff00, 0xff, 0xff000000, 0xff000000], 'bond_slave_0\x00', 'veth0_to_bond\x00', {0xb3e65b0b92f98c5d}, {0xff}, 0x2f, 0x3, 0x7, 0x1a}, 0x0, 0xa8, 0xe8}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x1, "193b1b7e0e5e10fd9b7af327532af5666a4632fd93140213f4599bc6f913"}}}, {{@ipv6={@remote, @mcast2, [0xffffffff, 0xff000000, 0xff, 0xff], [0xff000000, 0xff, 0x0, 0xffffff00], 'macvlan1\x00', 'ip6gretap0\x00', {}, {}, 0x87, 0x6, 0x4, 0x2}, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@dst={{0x48}, {0xfffffffb, 0x6, 0x1, [0x4f, 0x5, 0x7f, 0x0, 0x7fff, 0x5, 0x9, 0xfff, 0x8, 0x0, 0x1f, 0x80, 0x5, 0xf, 0x5, 0x6], 0xd}}]}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x9, @ipv6=@dev={0xfe, 0x80, '\x00', 0xc}, @ipv4=@remote, @icmp_id=0x65, @icmp_id=0x67}}}, {{@ipv6={@private2, @dev={0xfe, 0x80, '\x00', 0x25}, [0x0, 0xffffff00, 0xff, 0xffffffff], [0xffffffff, 0xff, 0xffffffff], 'dummy0\x00', 'dummy0\x00', {}, {0xff}, 0x87, 0x7, 0x4}, 0x0, 0xd8, 0x120, 0x0, {}, [@common=@srh={{0x30}, {0x87, 0x5, 0xe0, 0x10, 0x5, 0x10, 0x51}}]}, @unspec=@DNAT1={0x48, 'DNAT\x00', 0x1, {0x1, @ipv4=@empty, @ipv6=@local, @gre_key=0xc, @icmp_id=0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5d0) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r0, 0x8008f512, &(0x7f0000001280)) r11 = socket$unix(0x1, 0x5, 0x0) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f00000012c0)={0x3a, 0x2, 0x1, 0xf, 0x0, [@remote]}, 0x18) writev(r9, &(0x7f0000001600)=[{&(0x7f0000001300)="15284b121a5fd94d4b340225a6e76c7275d46544352641cf6d9f8d0a3d546347906faa7b2c2f65fc2220132dad13dccba3857ee3d2509a004131ab423b61726ab838ca597477a829da0c7fb23253eecb2023fa1557510934c5dd3588c114d157a2", 0x61}, {&(0x7f0000001380)="597dc31b91859f22", 0x8}, {&(0x7f00000013c0)}, {&(0x7f0000001400)="ee", 0x1}, {&(0x7f0000001440)="a40a145c74ec16ccd994904bf06c7f2521618f00a7fe281bd6b61d6ffb63bddb5100cf3f439b18b71bcfd9da0476d834efccb0cc6b44622296dc39ec47f970a4d919c87a275665a4ae60bfa7516da679a182909ee0f91d9c36dfc381cdb8fd450fdae3d1ac5c3e676a8abd1bfc928201d9e38a5b13a5a25dcf5d0aed9b1f214287436c1badd082ccde037ed7b67e6d527ede7fe5d0ed25c80ab95b8654016b067e4979eab08d806cd182891fc4375369180079ded82606b06066b5034b30337f2c5e54570498819cc97cb63db883ec4e8a973832ee9519006a07282f930c33cd37c83075ed7bdbf8482268aaabdb", 0xee}, {&(0x7f0000001540)="ca561f31e9c3c9761d4bcdcf8a333921d5d0ae351884eb364fb5a26ed4b2ec3242a05483e105e4be184bf58750abaa82ca0bc7a7a4147dcd89ddb17f41ffad8dec7ed237614346cf8f4a136e8059a41df2fd3f30c7c62b601c149473a0ebb7c9aee7e8f650124be6154f307298b9294cb1565d01b2804fda058cbdf7503dcbc0b55c18b636174462e1d05eb32d6581083eef7dedfb07b755afad5b26eaab93fe6cad3eebbc4c3f7716ecb7fa28d7a306e9e3667a2c43276236367d415f", 0xbd}], 0x6) r12 = accept4$packet(r0, &(0x7f0000001680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000016c0)=0x14, 0x80800) setsockopt$packet_int(r12, 0x107, 0xb, &(0x7f0000001700)=0x8, 0x4) madvise(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000001740)=0x4, 0x4) r13 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001780)='./cgroup.net/syz1\x00', 0x200002, 0x0) openat$cgroup_ro(r13, &(0x7f00000017c0)='cpuacct.usage_percpu\x00', 0x0, 0x0) ioctl$SOUND_MIXER_READ_STEREODEVS(r0, 0x80044dfb, &(0x7f0000001800)) r14 = socket$can_raw(0x1d, 0x3, 0x1) sendmsg$inet(r14, &(0x7f0000001a80)={&(0x7f0000001840)={0x2, 0x4e21, @broadcast}, 0x10, &(0x7f0000001980)=[{&(0x7f0000001880)="b35bf975149d7271be1cc7fd1dc0af779d614481e48d151d02f3928e90c1de0a5bd50c1debdf77603f9df1beda8adbb2fd5b29ce5606f8758820b42c8fcc90f49fb4ceee32143bbbd5d48b62544db90b5bc14f1e9e938e9bf454968e85adc7e7d4955060fa9f37bd3d24a1a278259788c35f98c97a0726b804353fa47f172a567b229bc94b2f454cee416749d1748c1f4ad3acc24d26f3fc3c55e0e28c69aecf8334aac407975f8b6e11292f8c70e916567b71ffd424bd068575adb4ea57946dadc11b0133caf4ddbb", 0xc9}], 0x1, &(0x7f00000019c0)=[@ip_ttl={{0x14, 0x0, 0x2, 0x3}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r10, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @rand_addr=0x64010100, @loopback}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x1}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x5}}], 0x88}, 0x0) syncfs(r11) 2m17.873497671s ago: executing program 2 (id=150): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), r1) sendmsg$ETHTOOL_MSG_WOL_SET(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)={0x200, r2, 0x300, 0x70bd26, 0x25dfdbfd, {}, [@ETHTOOL_A_WOL_MODES={0x1ec, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xd}, @ETHTOOL_A_BITSET_VALUE={0xb5, 0x4, "5455f2c6e17749226f93d1a4e108460f40da7386a663cfd5be63e7e9a8557a214f728eea6dffdf2aadd02c8d4d57a7d47a72a7cc8fd39460bfb701401a0f1ff921f95945550599e2f70c312b681423055aeeb3de979ef23927dba2fa0c9f0448afef586f08a86c5a05de8a9f8dcad26c5f51bfc65920b7345f487283f5c5cfd0295bd7f6641292dab934d89e233ebfa2fe728193ff9581656f39f9ebd42dd273c6f8a556a265a430eed12451478f55a81a"}, @ETHTOOL_A_BITSET_BITS={0x124, 0x3, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x12, 0x2, 'ecb(camellia)\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xb}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '/,\'\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '$[#)\x00'}]}, {0x4}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7f}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x81}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '-\x00'}]}, {0x74, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5d, 0x2, '\x00\x7f\xa6\x99h\x1e\x9b\xcf\x02\xef\x14\xd5\xc5#}>\r\xd4\x1b8\x1f\xc4\xd1?\x13\xa8-\x10\x00\xdf\x87\x8d\x98\xe2f5\x13\xe5\xfa0\xf4\x96\xd3\xcf\x12\x18\x83^\xb1\x80\x85\xa7\x11\xca\xa0\x1a\xb1\xae\x82\xe4W]\xa3\xbd\x85\x9a}p\x15>\xa5\xf8\xa2\xd4\xe2\xd0+\xe6\x8d\v#H\x00\x00\x00\x00\x00\x00\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, 'skcipher\x00'}]}]}]}]}, 0x200}, 0x1, 0x0, 0x0, 0x1}, 0x40900) 2m17.748662817s ago: executing program 3 (id=151): r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'macvtap0\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000011000500000000000000000007000000", @ANYRES32=r5, @ANYBLOB="000000000000000014001a80100004800c00", @ANYRES16=r4], 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x44048010) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@delqdisc={0x24, 0x25, 0x100, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0x4, 0x1}, {0x6, 0xc}, {0x4, 0x1}}}, 0x24}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="480000001c00110c0000001400000f0007000000", @ANYRES32=r2, @ANYBLOB="800202000a0002"], 0x48}}, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r0, 0xc0b45545, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r7 = dup(r6) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000080)={'ip6erspan0\x00', 0x400}) 2m17.748292457s ago: executing program 4 (id=152): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x63, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, 0x0, {0xe, 0x3}, {0x6}, {0x4, 0x8}}}, 0x24}}, 0x40004) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000900000000000010000003000000040004001c000180180010"], 0x34}}, 0x84) 2m17.55166616s ago: executing program 1 (id=153): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x34, 0x9, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x4}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e22}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000050) 2m17.551478022s ago: executing program 4 (id=154): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000105002, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) dup(r1) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, 0x0, 0x3, 0x0) mlock(&(0x7f000094f000/0x4000)=nil, 0x4000) syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0xfbc6, 0x200, 0x8000003}, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {0x230}}) io_uring_enter(0xffffffffffffffff, 0x200111b, 0x1300, 0x5, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r3, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r5 = accept(r2, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}}, 0x1) recvfrom(r4, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x4100, 0x0, 0x0) r6 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000001, 0x13, r6, 0xacaef000) 2m17.496707222s ago: executing program 3 (id=155): r0 = socket(0x40000000015, 0x5, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, 0x0, 0x0) getsockopt$IP_VS_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x481, 0x0, &(0x7f0000000100)) socket$inet6_mptcp(0xa, 0x1, 0x106) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0xbfa35000) socket$inet_tcp(0x2, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) bind$can_j1939(r4, &(0x7f0000000040)={0x1d, r5, 0x2}, 0x18) close(r4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) unshare(0x2010400) r8 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') socket$nl_route(0x10, 0x3, 0x0) pread64(r8, &(0x7f0000001240)=""/102400, 0x200000, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x3004c080) utimes(0x0, &(0x7f00000001c0)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0xfffffffc, @local, 0x10001}, 0x1c) r9 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r9, &(0x7f0000000880)=[{{&(0x7f0000000080)={0x2, 0x0, @rand_addr=0xac1414bb}, 0x10, &(0x7f0000000100)=[{&(0x7f00000000c0)='Q', 0x1}], 0x1}, 0x20000000}, {{&(0x7f0000000180)={0x2, 0x0, @remote}, 0x10, 0x0}}], 0x2, 0x2000c811) 2m17.446792021s ago: executing program 1 (id=156): connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) syz_emit_ethernet(0x52, &(0x7f0000000100)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0xc, 0x4, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x5, 0x0, @dev, @private=0xa010100, {[@timestamp_addr={0x44, 0x14, 0x5, 0x3, 0x0, [{@empty}, {@private=0xa010101}]}, @ssrr={0x89, 0x3, 0xce}, @generic={0x7, 0x2}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) io_setup(0x222, &(0x7f0000000180)=0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240), 0x4000000044402, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) io_submit(r0, 0x2, &(0x7f0000000080)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x6417, r1, &(0x7f0000000000)='{)[\x00\x00\x00\x00\x00\x00', 0x9, 0x6ed}, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x7, 0x8086, r1, 0x0, 0x0, 0x6}]) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mlock2(&(0x7f00002a2000/0x3000)=nil, 0x3000, 0x1) mremap(&(0x7f00004fd000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f000015a000/0x2000)=nil) mlock(&(0x7f00001b5000/0x400000)=nil, 0x400000) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x8000, 0x0, 0x0, 0x2) 2m16.683771672s ago: executing program 2 (id=157): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) sendmsg$TIPC_CMD_RESET_LINK_STATS(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x30, r1, 0x135, 0x70bd2a, 0x25dfdbfc, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}}, 0x30}, 0x1, 0x0, 0x0, 0x44040}, 0x40040) 2m3.97454611s ago: executing program 4 (id=158): shmget(0x3, 0x4000, 0x0, &(0x7f0000ffb000/0x4000)=nil) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000080)=0xc) getgid() lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)) newfstatat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x100) r0 = getpgid(0x0) syz_pidfd_open(r0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) poll(&(0x7f00000000c0)=[{r1}], 0x1, 0xfff) ioctl$EVIOCGABS20(r1, 0x40044591, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000240)={0x2020}, 0x2020) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8b0d, &(0x7f0000000000)={'wlan1\x00'}) 2m3.860225917s ago: executing program 0 (id=159): sendmsg$NFT_MSG_GETCHAIN(0xffffffffffffffff, &(0x7f000000c740)={0x0, 0x0, &(0x7f000000c700)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000040a00000000000000401422ddebf820150000000000000006"], 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x240000c0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6(0xa, 0x3, 0xff) r3 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r4 = dup3(r3, 0xffffffffffffffff, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x8991, &(0x7f00000002c0)={'ip6gre0\x00', 0x0}) ioctl$VHOST_VDPA_GET_STATUS(r4, 0x8001af71, &(0x7f0000000100)) syz_kvm_setup_cpu$x86(r1, r4, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000001c0)="6e440f015ec666b876000f00d80f00de410f198b0c00000066baf80cb8101dfc86ef66bafc0ced66baf80cb85631628bef66bafc0cb000eeb9800000c00f3235002000000f300f017d0bc4e3e549d495", 0x50}], 0x1, 0x0, &(0x7f0000000140)=[@cstype0={0x4, 0x7}], 0x1) r5 = memfd_create(&(0x7f00000000c0)='\xfd\x0fm3#/\x00n\xaa\xaa\xe4\x01U\x8b\xc2\f\x03\x19\x9c\x8e\xcb\x90\x00\x00\xaegQ\x0e\x94\\y\x0fU2@\'\x8a\x80\x00$\x12\xfc\xe4.)\x9b\xf2@\xf0\xe0\xdb\x1f\xe6\xb4gc\x13\xda\xf9\xcd7el\xb7\xe6\b\x00\x00\x00\x00\xef\xff\x00vob/~\xc2\x00\b\x00\x00\x00\x00\x00\x00 \xff\xf1\xdem\x9c;%\xb5\"\xe4\xf1x2\x8a\x19p\x04\\\xaa-\x93\xd1\xc4 )\xbfK\xf7E\xf3\x05\xa0\xd0\xe6%\x97\x15\xf0\xab\x86\x90k\x10\xcer\x14\xe0a\xaf\xab\xfe\xd9V\x19\xa5d\x16\x8e]:3\xff\t\xe6\xf7\xb3\xbf\xa3\b[?\xb5\x14t\xd3\x8e\xc0\xe8\xefd\x88\xddz\xa25)\x17\xef\xfb4\xff\xdb\t\x8e\xeb\x1d\\\xf9\x14\xc7\v\xa8\x89\xdb A\xbaBAj\xfe\x18\xc3-+\xd6\xb0K\xee\x1b+\xc7lA\x84\xa6\xfe\x8bU<&\x1a\xe7m\x86\xb7\xa1A\xf9\x02S;C\x99\a.$K\x833\x82\x7f\x1b\'nj\x06\b\xb7\xe8] \x87A[y\xdc\x14\f\xcet\x00\x1f\x0f\xef\xca\xcfz\x7f\an0\xebB\xb8}&\xdd\xc9\xa7\x1dp\t\x9a\xceb \x81\xaaq{H\x88\xdf\xf8\x80\\\x1c8\xfe\xc4\xe3\xb0\x90\xcb\x8b1r\x94\x9f\x00\xce\xc8\xc3\x84\xa0\xc9\b\x00\x81Ks\xba\xbbC6\xd6\x13\xb5\xe086EzD\x18\xd5\x16\x88E\xc6\xf0A9\xf1u\xb3\x85\x02\x12\\Sp\xf4\x9a\xe8\x96^\xe6\xa8K\x12\b}\xff\xcb{\xc6\xf6\xb4\x8b\xb6\xa8Y\xf2\x91\xeeR\v#\xb5)\xb0\x99\x9b-p\xe3\x17\x04\xb0\xdc\x0fk\x11\xe1\x9a\a\x16\xb7\x9b\x88\xfa\x1e`\x84$\xfc\xd7\xf5^X\xd8[}\x032\xd0\x84\xdby\x94Vp\xa5\xcd(\xab\xb6\x95sR\xab\xfc\x8c\'\x9c\x16Q\xad\xbc\xb04%\xb7\xe5\x14\xb1`\x87#X\\W`;\'_4\xc5\xc9\x921<\xd9\xad\x9f\x12@!\xfaI\x88\xab\xef\x86\xe9\a>\xdd7\xb7\x8e\x9c0-o\xc9\xec_|\x02\xc8Ru\x95\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x00\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\xbcs\x1fS\r\x12O\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7r\x02\x00\x00\x00\x8aeh;F[\xe2\x1c\xe26 \x19k&.\x7f\x1d~\xdaI\xd4\x99\a+\xdf]\xbc\xa6\xc3\x0f\x99W\x9c-t\v\xc7J\xfd\x91\x853\xd1j;\x19W\x96V\x8az+\xf9\x82#\xfaC\xa3YN:\xe8\xda\xbc\xb2h\x8f\xe0\xc6d\x96\xccy\xb3\xc2\x98\x1c\xca\xde\"\xaeW\x89\x83\xc2sB\xe7\b\x9b9~}\xc2\xb3\x1d\xcc?\xd1\x89\xef\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00J[\xc4\x04\xc1\xa6\x10\xc2\x9d\x11\t|\xc0\t\xd9(\x80\xe6s\xaa\x88\x8a\xd6\xa2\x01\x10W]Z\x8d\xf7\xd1P\xf9d\x01|\xa3\x03hSq\x95\x8f\xe1J\xd3#/fcCz\xff\x80\xe2M\xa3-r\xf6\x1a\xd74\xdc\xe1\xe4\xc3\x9dU t}\x02\x9a{C|S\xf4\x98\x05\xb9\x15}\xfa\"\xdc\xc2r\xf9\a\xadnD\xb6\x06\xd3\'\x10\x9f|\x17\xd6\x89O\f\x98@\x85\xa5m\x9d\\&\x17o\x11Z=l\xfb\x93\x8exZ', 0x6) fcntl$addseals(r5, 0x409, 0xa) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x0, 0x11, r5, 0x0) connect$inet6(r4, &(0x7f0000000180)={0xa, 0xffbf, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}, 0x1c) r6 = dup2(r2, r2) sendmmsg$unix(r6, &(0x7f0000008380), 0x400000000000174, 0x4008890) 2m2.77704121s ago: executing program 2 (id=160): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000002fc0)=@newtaction={0x290, 0x30, 0x100, 0x70bd2b, 0x25dfdbff, {}, [{0x27c, 0x1, [@m_skbedit={0x124, 0x19, 0x0, 0x0, {{0xc}, {0x34, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0x10, 0xa}}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0xd}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x1}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x1, 0x1, 0x2, 0x6, 0x101}}]}, {0xc5, 0x6, "de616dd9ce3b892bb6fafca061bed3e644dcf9151f4527045657b89def02bb9cad6c62f8293cff1e7df3eb0803889f2fd92b151ed17ab9007c47463bf4e7afe47ab1d24292b0103cbbc15977a51c0ae02a16535a666c86a6321ae76cba859e771aa7d0ff9fa043e50e56e0f68419fd47894ab8f8d473fc2af5fc18fb9399fdbb44bce22ac4c64feea69875f61ef4f46591d0547ce0f025b0a5f6dc470fd9635a05e318fa41b23e07582b3128621edbf17703923cea8b079f042f9924f50ce06116"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_xt={0x124, 0x11, 0x0, 0x0, {{0x7}, {0xf4, 0x2, 0x0, 0x1, [@TCA_IPT_INDEX={0x8, 0x3, 0x81b8}, @TCA_IPT_INDEX={0x8, 0x3, 0x5}, @TCA_IPT_TARG={0x6d, 0x6, {0x18, 'mangle\x00', 0x5, 0x6d5, "ab0275204abae93fead4d689778f27ae4cf50f2c1605c8bc53bc1513b545f339676e5579cda4d31cb6b71ee31e57f7ddc108ec0cc2c53c8fae7cab8def179974adcdc8"}}, @TCA_IPT_INDEX={0x8, 0x3, 0x10}, @TCA_IPT_TARG={0x2a, 0x6, {0xde1, 'security\x00', 0xfd, 0x6}}, @TCA_IPT_INDEX={0x8, 0x3, 0x901c}, @TCA_IPT_INDEX={0x8, 0x3, 0x7}, @TCA_IPT_TARG={0x2a, 0x6, {0x4, 'mangle\x00', 0x3}}]}, {0x9, 0x6, "51eb4b8bb0"}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}, @m_sample={0x30, 0x10, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}]}, 0x290}}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x334}, {&(0x7f00000007c0)=""/154, 0x2c}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x400000000000000, &(0x7f0000003700)={0x77359400}) 2m1.805707977s ago: executing program 32 (id=156): connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) syz_emit_ethernet(0x52, &(0x7f0000000100)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0xc, 0x4, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x5, 0x0, @dev, @private=0xa010100, {[@timestamp_addr={0x44, 0x14, 0x5, 0x3, 0x0, [{@empty}, {@private=0xa010101}]}, @ssrr={0x89, 0x3, 0xce}, @generic={0x7, 0x2}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) io_setup(0x222, &(0x7f0000000180)=0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240), 0x4000000044402, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) io_submit(r0, 0x2, &(0x7f0000000080)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x6417, r1, &(0x7f0000000000)='{)[\x00\x00\x00\x00\x00\x00', 0x9, 0x6ed}, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x7, 0x8086, r1, 0x0, 0x0, 0x6}]) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mlock2(&(0x7f00002a2000/0x3000)=nil, 0x3000, 0x1) mremap(&(0x7f00004fd000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f000015a000/0x2000)=nil) mlock(&(0x7f00001b5000/0x400000)=nil, 0x400000) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x8000, 0x0, 0x0, 0x2) 2m1.412205284s ago: executing program 33 (id=155): r0 = socket(0x40000000015, 0x5, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, 0x0, 0x0) getsockopt$IP_VS_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x481, 0x0, &(0x7f0000000100)) socket$inet6_mptcp(0xa, 0x1, 0x106) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0xbfa35000) socket$inet_tcp(0x2, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) bind$can_j1939(r4, &(0x7f0000000040)={0x1d, r5, 0x2}, 0x18) close(r4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) unshare(0x2010400) r8 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') socket$nl_route(0x10, 0x3, 0x0) pread64(r8, &(0x7f0000001240)=""/102400, 0x200000, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x3004c080) utimes(0x0, &(0x7f00000001c0)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0xfffffffc, @local, 0x10001}, 0x1c) r9 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r9, &(0x7f0000000880)=[{{&(0x7f0000000080)={0x2, 0x0, @rand_addr=0xac1414bb}, 0x10, &(0x7f0000000100)=[{&(0x7f00000000c0)='Q', 0x1}], 0x1}, 0x20000000}, {{&(0x7f0000000180)={0x2, 0x0, @remote}, 0x10, 0x0}}], 0x2, 0x2000c811) 2m1.363615349s ago: executing program 2 (id=163): bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001fd8)=ANY=[@ANYBLOB="850000005800000084000000000000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 1m59.393491283s ago: executing program 0 (id=164): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="39000000140081ae00002c00050001560161", 0x12}], 0x1, 0x0, 0x0, 0xc00e}, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f00000000c0)={{0x8, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0xffffffffffffffdf, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000, 0x0, 0x0, 0x56a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xd, 0x0, 0xfffffffffffffffb, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x36d4, 0x0, 0x8, 0x0, 0x0, 0x0, 0x5, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x3, 0x0, 0x0, 0x2, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400000000, 0x0, 0x4, 0xa6]}) 1m59.039712896s ago: executing program 2 (id=165): socket$netlink(0x10, 0x3, 0x0) (async) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000000)={0x2c, 0x2c, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @uid}, @nested={0xa, 0x2, 0x0, 0x1, [@generic="976b64086860"]}, @typed={0x6, 0x148, 0x0, 0x0, @str='(\x00'}]}, 0x2c}], 0x1}, 0x0) 1m53.322275466s ago: executing program 0 (id=166): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x8, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="7b0a00ff0000010271106a000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 1m52.243088835s ago: executing program 4 (id=167): mbind(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x4000, &(0x7f0000000040)=0xf6, 0x8001, 0x4) (fail_nth: 75) 1m40.041671149s ago: executing program 34 (id=165): socket$netlink(0x10, 0x3, 0x0) (async) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000000)={0x2c, 0x2c, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @uid}, @nested={0xa, 0x2, 0x0, 0x1, [@generic="976b64086860"]}, @typed={0x6, 0x148, 0x0, 0x0, @str='(\x00'}]}, 0x2c}], 0x1}, 0x0) 1m34.310549836s ago: executing program 35 (id=166): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x8, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="7b0a00ff0000010271106a000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 1m34.163082439s ago: executing program 36 (id=167): mbind(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x4000, &(0x7f0000000040)=0xf6, 0x8001, 0x4) (fail_nth: 75) 53.355755232s ago: executing program 7 (id=171): r0 = socket(0x10, 0x80002, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20305}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ICV_LEN={0x5, 0x3, 0xf}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x44}}, 0x8000) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x700000000000000) 52.352400902s ago: executing program 7 (id=172): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd05005600080054003c0060ec970001983a00fc000018c6ba35000000000000000700ff02000000000000000000000000000100"], 0xfdef) 51.498793333s ago: executing program 9 (id=173): syz_emit_ethernet(0xc6, &(0x7f0000000000)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x15}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "000210", 0x90, 0x3a, 0xff, @remote, @mcast2, {[], @time_exceed={0x3, 0x1, 0x0, 0x30, '\x00', {0xd, 0x6, '])k', 0x800, 0x2b, 0xff, @mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [@routing={0x0, 0xa, 0x2, 0x7, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast2, @private1, @mcast2, @private0]}, @hopopts={0x8}]}}}}}}}, 0x0) r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000100), 0x200901, 0x0) socket$l2tp6(0xa, 0x2, 0x73) sendmsg$NFNL_MSG_CTHELPER_GET(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x1, 0x9, 0x201, 0x0, 0x0, {0x3, 0x0, 0x7}, [@NFCTH_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x885) 51.253567302s ago: executing program 9 (id=174): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000300)="d8000000180081054e81f782db4cb904021d080406037c09e8fe55a10a0015400200142603600e122f00160006000500a8000600200006400700027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4e", 0x8b}], 0x1, 0x0, 0x0, 0x4a0f0000}, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000380)=ANY=[@ANYBLOB="a20000fffffff500"]) 50.985305754s ago: executing program 7 (id=175): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007a1ff00", @ANYRES32=r1, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYBLOB="35874207"], 0x44}}, 0x0) 50.781006923s ago: executing program 9 (id=176): openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000001ac0)={r0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x8, "339f200bbe82b3980000000000006da600000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e8332369e18dd66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "24431a1e77a68e174ff10000000000000010e200", [0x0, 0x2]}}) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r1) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = userfaultfd(0x80001) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x300000, 0x1800, 0x0, 0x3}, 0x20) ioctl$UFFDIO_COPY(r3, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000, 0x2}) r5 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f000029b000/0x3000)=nil, 0x3000, 0x5, 0x100010, r5, 0x100000000) r6 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000100), 0x280000, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x400ad00, &(0x7f0000000080)={0xa, 0x4e21, 0x0, @dev}, 0x1c) setsockopt$XDP_UMEM_FILL_RING(r6, 0x11b, 0x5, &(0x7f0000000140)=0x101, 0x4) ioctl$BTRFS_IOC_SUBVOL_CREATE(r0, 0x5000940e, &(0x7f0000000380)={{r0}, "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"}) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0xa) 46.933502148s ago: executing program 7 (id=177): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) r1 = socket$inet_udplite(0x2, 0x2, 0x88) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) syz_io_uring_setup(0xf00, &(0x7f0000000180)={0x0, 0xd96d, 0x101, 0x0, 0x4000, 0x0, 0x0}, 0x0, 0x0) setuid(r2) write$binfmt_elf32(r0, &(0x7f00000014c0)=ANY=[], 0x46b) sendmmsg$inet(r0, &(0x7f0000000f40)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000006c0)="ed", 0x1}, {&(0x7f0000000200)="b5", 0x1}, {&(0x7f0000000340)='.', 0x1}, {&(0x7f0000000140)='U', 0x1}, {&(0x7f0000000000)="f3", 0x1}], 0x5, 0x0, 0x0, 0x47b}}, {{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000580)="f1", 0x1}, {&(0x7f0000000c80)='a', 0x1}, {&(0x7f0000000b40)='M', 0x1}, {&(0x7f0000000d80)='o', 0x1}, {&(0x7f0000000e80)='\b', 0x1}], 0x5}, 0x70040000}, {{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000380)="bb", 0x1}, {&(0x7f00000007c0)="a1", 0x1}, {&(0x7f0000000800)='s', 0x1}, {&(0x7f00000009c0)='\\', 0x1}], 0x4}}, {{0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f0000000440)="88", 0x1}, {&(0x7f0000000840)="e5", 0x1}, {&(0x7f0000000100)="c7d752491ac61dff0481895e262db2b03fe64babe5602096de77aa7eff43d89929", 0x21}], 0x3}}], 0x4, 0x4048841) 46.641245152s ago: executing program 7 (id=178): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000400)={{0x12, 0x1, 0x0, 0xe4, 0xc5, 0xad, 0x10, 0x61d, 0xc020, 0x9c15, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x10, 0x2d, 0xb0}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000000)=ANY=[@ANYRES64], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="02c910"], 0x17) ioprio_set$uid(0x3, 0x0, 0xff00000000000000) r1 = syz_clone(0x2000400, 0x0, 0xfffffebf, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f00000005c0)=r1, 0x12) r4 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0) fcntl$setlease(r4, 0x400, 0xfffffffffffffffb) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) getpid() mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r6 = openat$cgroup_devices(r5, &(0x7f0000000240)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r6, &(0x7f0000000100)={'b', ' *:* ', 'w\x00'}, 0x8) r7 = openat$cgroup_ro(r4, &(0x7f0000000080)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) write$cgroup_int(r7, &(0x7f0000000040)=0x1, 0x12) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) unshare(0x22000680) r8 = socket$inet6_udplite(0xa, 0x2, 0x88) r9 = fanotify_init(0x200, 0x0) r10 = memfd_create(&(0x7f0000000180)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xac\xbe\xe1}knh#\xcf)\x0f\xc8\xc0\"\x9cc\x10d\xee\xa9\x8b\x06\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\xcf~\xb90a\xa9\xb2\x04\x1d\xa1\xce\x8b\x19\xea\xef\xe3\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) r11 = dup(r10) fanotify_mark(r9, 0x1, 0x48001059, r11, 0x0) write$sndseq(0xffffffffffffffff, &(0x7f0000000200)=[{0x9, 0x4, 0x6, 0x1, @tick=0x8, {0xff, 0x1}, {0x3, 0x3}, @result={0x60b, 0x5}}], 0x1c) execveat(r11, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) setsockopt$inet6_opts(r8, 0x29, 0x40, &(0x7f0000000140)=@dstopts, 0x8) openat$cgroup_ro(r11, 0x0, 0x275a, 0x0) 46.300591865s ago: executing program 9 (id=179): r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x2f0, 0x0, 0x111, 0x4b4, 0x130, 0xd4feffff, 0x270, 0x20a, 0x278, 0x270, 0x278, 0x3, 0x0, {[{{@ipv6={@private2, @remote, [], [0x0, 0x0, 0x0, 0xffffff00], 'dvmrp0\x00', 'team_slave_0\x00', {}, {}, 0x6}, 0x0, 0x108, 0x130, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[0x4e20, 0x4e23], [0x4e20, 0x4e22], 0x3, 0x8, 0x80, 0x7}}, @common=@inet=@tcp={{0x30}}]}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x8ba4, 0x0, 0x80000001, '\x00', {0x10000}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x350) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_user\x00', 0x275a, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r1, 0x0, 0xfffffffffffffffb}, 0x18) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x98, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x70, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x38, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_OP={0x8}, @NFTA_BITWISE_MASK={0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x10c}}, 0x40) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1d, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d9600010000000000000000000000000000000000000300", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd0007008019000000000000000000000000af1e4ccfb7b3cad800", [0x0, 0x2000000000001]}}) 45.575374767s ago: executing program 9 (id=180): openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x103200, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000002c0)={0xc}) socket$rxrpc(0x21, 0x2, 0xa) getpid() socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) fsopen(&(0x7f0000000100)='mqueue\x00', 0x0) socket$tipc(0x1e, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001a0001000000ff7f0000000080000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\b\x00', @ANYRES32=r1], 0x24}}, 0x0) r2 = syz_io_uring_setup(0x186, &(0x7f0000000080)={0x0, 0xffffffff, 0x13100, 0x1, 0x282}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r2, 0x2def, 0x0, 0x0, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r7, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000040)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010026bd6000000000002d9300000c000180080001"], 0x20}, 0x1, 0x0, 0x0, 0xd4}, 0x24008000) r9 = socket(0x400000000010, 0x3, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newtclass={0x54, 0x28, 0x100, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r11, {0xd, 0xffe0}, {0x10, 0x10}, {0xd, 0x8}}, [@tclass_kind_options=@c_sfb={0x8}, @TCA_RATE={0x6, 0x5, {0xf9, 0x5}}, @TCA_RATE={0x6, 0x5, {0x4f, 0x6}}, @tclass_kind_options=@c_sfb={0x8}, @TCA_RATE={0x6, 0x5, {0xeb, 0xbd}}, @TCA_RATE={0x6, 0x5, {0x8, 0x5}}]}, 0x54}}, 0x20044890) sendmsg$nl_route_sched(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001500)=@newtfilter={0x48, 0x2c, 0xd27, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r11, {0x0, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_INDEV={0x14, 0x2, 'ip6tnl0\x00'}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x800) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000040)={0xc}) 43.581105555s ago: executing program 9 (id=181): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = syz_open_dev$radio(&(0x7f00000000c0), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r2, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f903, 0x0, '\x00', @string=0x0}}) openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0}, 0x18) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x9}, 0x1c) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x270, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="0203"], 0x10}}, 0x0) io_submit(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r3, 0xc0285629, &(0x7f0000000080)={0x3, @win={{0x2}, 0x9, 0x0, &(0x7f0000000040), 0x0, 0x0}}) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r4, &(0x7f0000000800)=[{&(0x7f0000000700)="ebfa0e81ceb3dc4c43c215dc4dade38ff8c84ace9d15af003afa41ae5fbebe5b175c12cf29c48c2d4b61ce76443645c1dc73113beeb9b5a73cd0415b0437839aa6c68111a4582c3a6a3bb8f9e0c37b9b3f376c", 0x53}], 0x1) r5 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000000)={r5, r5, r5}, 0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={'poly1305-simd\x00'}}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x640c7400, 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000200), 0x80) socket$nl_generic(0x10, 0x3, 0x10) 43.465706897s ago: executing program 7 (id=182): socket$kcm(0x2b, 0x1, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x18b801, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000080), 0x76, 0x109301) ioctl$USBDEVFS_BULK(r1, 0xc0185502, &(0x7f0000000180)={{{0x1, 0x1}}, 0x3, 0x6, &(0x7f0000000240)="af45f5"}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = socket$inet(0xa, 0x801, 0x84) listen(r4, 0x8) r5 = accept4(r4, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x84, &(0x7f0000000540)={0x0, @in={{0x2, 0x4e1f, @empty}}, 0xfffd}, 0x90) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) io_submit(0x0, 0x0, 0x0) ioctl$USBDEVFS_GET_CAPABILITIES(0xffffffffffffffff, 0x8004551a, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001100)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x29, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000040)={r6, 0xffffffffffffffff, 0x14, 0x0, @void}, 0x1d) r7 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x20002) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r7, 0x40605346, &(0x7f00000001c0)={0x2, 0x2, {0x0, 0x2, 0x5, 0x2, 0x7ff}, 0x8}) close_range(r0, 0xffffffffffffffff, 0x0) openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r8 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r8, 0x0, 0x60, &(0x7f0000000240)={'filter\x00', 0xb001, 0x4, 0x3a8, 0x0, 0x1d0, 0xd0010000, 0x2c0, 0x2c0, 0x2c0, 0x7fffffe, 0x0, {[{{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0x1d0}}, {{@uncond, 0xc0, 0xe8, 0x0, {0x0, 0x1e03}}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x46e, 0xfffc}}}, {{@uncond, 0xc0, 0xf0}, @unspec=@CONNMARK={0x30}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x3f8) r9 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) recvmsg$kcm(r9, &(0x7f0000002800)={0x0, 0x0, 0x0}, 0x4001a060) 26.017890018s ago: executing program 37 (id=182): socket$kcm(0x2b, 0x1, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x18b801, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000080), 0x76, 0x109301) ioctl$USBDEVFS_BULK(r1, 0xc0185502, &(0x7f0000000180)={{{0x1, 0x1}}, 0x3, 0x6, &(0x7f0000000240)="af45f5"}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = socket$inet(0xa, 0x801, 0x84) listen(r4, 0x8) r5 = accept4(r4, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x84, &(0x7f0000000540)={0x0, @in={{0x2, 0x4e1f, @empty}}, 0xfffd}, 0x90) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) io_submit(0x0, 0x0, 0x0) ioctl$USBDEVFS_GET_CAPABILITIES(0xffffffffffffffff, 0x8004551a, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001100)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ff5070000000000000200000000000c00095000000000000002ba728041598d6fbd30cb599e83d24a3aa81d36b26fb0b71d0e6adfefcf1d8f7faf75e0f226bd99eea7960717142fa9ea4318123741c4a0e168c1886d0d4d94f2f4e345c652fbc16ee988e6e0dc8cedf3ce99fbfbf9b0a4def23d410f6296b32a334388107200759cda9036b4e369a9e152ddcc7f05a5f3c4744aeaccd3641110bec4e9027a0c8055bbfc3a96d2e8910c2c3b35967deabe802f5ab3e89bd6c662ed4048d3b3e22278d00031e5388ee5c867ddd58211d6ececb0cd2b6d357b85a0218ce740068725837074e098ee207d2f73902fbcfcf49822775985bf32d715f5888b24efa000000000000ffffffdf000000000000000000000089a7b9b00000000000000000000000000000b27cf3d1848a54d7132be1ffb0adf9deab29ea3323aa9fdfb52faf449c3bfd09000000b91ab219efdebb7b3de8f67581cf796a1d4223b9ff7ffcad3f6c962b9f292324b7ab7f91a31cf41ab11f12fb1e0a494034127de7c6592df1a6c64d8f20a67745409e011f1264d43e153b3d34899f40159e800ea2474b544035a30b23bcee46762c2093bcc9eae5dff5adbdee3e980026c96f80ee1a74e04bde740750fa4d9aaa705989b8e673e3296e52d337c56abf1128744bab6677fcb78e313841ec309baed0495f06d058a75fa4c81e5c9f42d9383e41d277b10392a912ffaf6f658f3fadd16286744f839c3f128f8f92d0992239eafce5c1b3f97a297c9e49a0c3510ef74080e6d1e0c8a868a353409e34d3e82279637598f37ad380a447483cac394c7bbdcd0e3b1c39b6e00916de48a4e70f03cc4146a77af02c1d4cef5379da860aed8477dfa8ceefb405005c6977c78cdbf37704ec73755539280b064bda154910fe050038ec9e47de89298b7bf4d769ccc18eede00e8ca5457870eb30d211e23ccc8e06cd58b61799257ab55ff413c86ba9affb12ec757c7234c270246c87a901160e6c07bc6cf8809c3a0d46ff7f008000000000ad1e1f493354b2822b98371d000000167d78e65b90eba0768e825972ea3b774a1467c89fa0f82e8440105051e5510a33dcda5e143fbfff161c12ca389cbe4c51b3fa00675cd1b66c5fd9c26a54d43fa050645bd9109b7e7131421c0f39113be7664e08bdd7115c61afcb718cf3c4680b2f6c7a84a4e3344b155cc20f49e298727340e97cdefb40e56e9cfad973347d0de7ba4754ff231a1b033d8f931ba3442b2c7c503f3d0e7ab0e958adb862822e40009995ae166deb9856291a43a6f7eb2e32cefbf46306f2ef79b8d4c2ff030000000000000007b82e6044f643068cd47ae636a5dbe9864a117d27326850a7c3b570863f532c218b10af13d7be94987005088a83880ccab9c99220002af8c5e53d52c83ac3fa7c3a3ee6c08384865b66d2b4dcb5dd9cba16b64ebbbf8702ae12c77e6e34991a225c120a3c950942fe0bc9f2a1a7506d35e5b439edeb7088aeda890cf8a4a6f31ba6d9b8cb098f935bdcbb29fd0f1a342c9eed00000000ab6648a9dea0b6c91996d65da6c24a702a86c814459f3cdaaf99000000000000000000bfb32c826563c518d0ad23bc83ba3f3757210a057eff7615c868bd7d74233da1a3b56d4e04a7ec4792b1c4cffddbbdcfdd23ab5268f1b3d08ebb8ce498cbaaf5aaab812201d1aba3d70471fcd9b466569f3ef72f39d87fcccab514fc02b70be8629c9b73ce7bc4be7f8be71cb7b2d0a4acff8f6abe7dbad64dfa44966945d93c33b038ce0d890f851811e387723a25dda119f64b35e71c5400000000000000000000000000000034c751ebdf3f20a95b817ea3df3d6c0002a41783058e56c70afe8016b3dd9dc7785b36e609f173cc6b893ecd138289709839747837d6a6283b3452c57a5d44cacd363589845637071320921d22c1663964eddec902fc7cc33158bc306d8c3bdae8108a23d2dc96a5cdb518f58832ec0906aaec43659c79c8ad37b0f961f3beaa3e02f7762c5dd633d13b5e487e996597b2ab42c898b7dd8390e13b395aacce4683e55bcfe8c17615257364365fd48bd77da79e52ce9adfe6dca9c42c4d719347f39ef006c2df747ee6adb7cd04faf05c36de72354c64ebaf28a3de18607ebc4b70f50f71dae565749568a23319232dc213342fb472e98c9a412199ce7976bee5eaf40e60cb3fbe8b92dae5008e92d17d05ce74ffffe74ae71d5b8bd43a4e0bf0390335aa489689f5e3a4ac5adca96caab658b43cd499d95d3876c220d147ad1d0e626621d88f1370982f663793cac52ea0d14e595ff1f56427a0a813bb3b84d31d021eeea8faeff25bb66f5940d08a5509a66fc43962bcb2f7415bc38e355e80ec935aa6fe2d74bd475d89449fb46320fee40faff2fd005549fe6a042bd95decfde5e166971935f4cfd9c9e5bfd2d803644f4e5b7e6dc1a7a35df7134e2fad79269bf24bea4eb0213068e3054d9e4a8d1a9eb032cb390e2016d0ce10549728cb4732dc5adab16fa19ac70780b29e079be27c95d3dd2bd91a584c46d84d430fc6ea31ce0ba62fa27be9f6bc435203da7c3a5d68bf4dd4f81cbfaa1c87a15b9272853c9837db930952dca667194b71815a9eb49b495360dcdf31e0e560857d0541a916d6b5469ac1b36babc5a91e1d58925f20d9d5f8a0da3c30711b0d101cabceffbe072be69613ea0003c6e9bb5cd2413c8ddc17cfa319cf7aaeed0ffb07a08f8fb439f709dfe0732fe42192819870bdd87d5f612ade03540a28be446095269d9ea5a60bba1f2462f9921f2a731dbcf1d03964ea1e4f79514914d37877f57617b60fa2b58aa694fcb023024653c4b73efb12a57ffc6f8943262b77be933051e12bd4d768a422ea652d45b04a9c43b5c97fc3edea7002d51a0a74889334ee"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x29, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000040)={r6, 0xffffffffffffffff, 0x14, 0x0, @void}, 0x1d) r7 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x20002) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r7, 0x40605346, &(0x7f00000001c0)={0x2, 0x2, {0x0, 0x2, 0x5, 0x2, 0x7ff}, 0x8}) close_range(r0, 0xffffffffffffffff, 0x0) openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r8 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r8, 0x0, 0x60, &(0x7f0000000240)={'filter\x00', 0xb001, 0x4, 0x3a8, 0x0, 0x1d0, 0xd0010000, 0x2c0, 0x2c0, 0x2c0, 0x7fffffe, 0x0, {[{{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0x1d0}}, {{@uncond, 0xc0, 0xe8, 0x0, {0x0, 0x1e03}}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x46e, 0xfffc}}}, {{@uncond, 0xc0, 0xf0}, @unspec=@CONNMARK={0x30}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x3f8) r9 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) recvmsg$kcm(r9, &(0x7f0000002800)={0x0, 0x0, 0x0}, 0x4001a060) 0s ago: executing program 38 (id=181): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = syz_open_dev$radio(&(0x7f00000000c0), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r2, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f903, 0x0, '\x00', @string=0x0}}) openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0}, 0x18) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x9}, 0x1c) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x270, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="0203"], 0x10}}, 0x0) io_submit(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r3, 0xc0285629, &(0x7f0000000080)={0x3, @win={{0x2}, 0x9, 0x0, &(0x7f0000000040), 0x0, 0x0}}) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r4, &(0x7f0000000800)=[{&(0x7f0000000700)="ebfa0e81ceb3dc4c43c215dc4dade38ff8c84ace9d15af003afa41ae5fbebe5b175c12cf29c48c2d4b61ce76443645c1dc73113beeb9b5a73cd0415b0437839aa6c68111a4582c3a6a3bb8f9e0c37b9b3f376c", 0x53}], 0x1) r5 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000000)={r5, r5, r5}, 0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={'poly1305-simd\x00'}}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x640c7400, 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000200), 0x80) socket$nl_generic(0x10, 0x3, 0x10) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.131' (ED25519) to the list of known hosts. [ 91.706542][ T5827] cgroup: Unknown subsys name 'net' [ 91.829818][ T5827] cgroup: Unknown subsys name 'cpuset' [ 91.840174][ T5827] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 93.784293][ T5827] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 96.852161][ T5151] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 96.886240][ T5848] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 96.895718][ T5848] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 96.909060][ T5849] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 96.918157][ T5849] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 96.929972][ T5849] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 96.938889][ T5849] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 96.950144][ T5849] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 96.959161][ T5849] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 96.968796][ T5849] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 96.978260][ T5849] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 96.989958][ T5849] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 96.990993][ T5852] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 97.001408][ T5849] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 97.011477][ T5852] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 97.016371][ T5849] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 97.024817][ T5852] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 97.032431][ T5849] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 97.042896][ T5852] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 97.066331][ T56] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 97.078357][ T5848] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 97.112861][ T5854] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 97.144367][ T5849] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 97.145691][ T5854] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 97.162866][ T5854] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 97.184829][ T1223] cfg80211: failed to load regulatory.db [ 98.010182][ T5856] chnl_net:caif_netlink_parms(): no params data found [ 98.102173][ T5860] chnl_net:caif_netlink_parms(): no params data found [ 98.166749][ T5855] chnl_net:caif_netlink_parms(): no params data found [ 98.181172][ T5859] chnl_net:caif_netlink_parms(): no params data found [ 98.193652][ T5858] chnl_net:caif_netlink_parms(): no params data found [ 98.390278][ T5856] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.398811][ T5856] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.407331][ T5856] bridge_slave_0: entered allmulticast mode [ 98.415497][ T5856] bridge_slave_0: entered promiscuous mode [ 98.461215][ T5856] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.469308][ T5856] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.477164][ T5856] bridge_slave_1: entered allmulticast mode [ 98.485428][ T5856] bridge_slave_1: entered promiscuous mode [ 98.610538][ T5855] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.618750][ T5855] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.627123][ T5855] bridge_slave_0: entered allmulticast mode [ 98.635416][ T5855] bridge_slave_0: entered promiscuous mode [ 98.716642][ T5860] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.724691][ T5860] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.733165][ T5860] bridge_slave_0: entered allmulticast mode [ 98.741598][ T5860] bridge_slave_0: entered promiscuous mode [ 98.751372][ T5855] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.759553][ T5855] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.767000][ T5855] bridge_slave_1: entered allmulticast mode [ 98.775222][ T5855] bridge_slave_1: entered promiscuous mode [ 98.800814][ T5856] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 98.811231][ T5859] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.818606][ T5859] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.828342][ T5859] bridge_slave_0: entered allmulticast mode [ 98.837547][ T5859] bridge_slave_0: entered promiscuous mode [ 98.846151][ T5860] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.853600][ T5860] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.861583][ T5860] bridge_slave_1: entered allmulticast mode [ 98.869750][ T5860] bridge_slave_1: entered promiscuous mode [ 98.906623][ T5858] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.914273][ T5858] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.922546][ T5858] bridge_slave_0: entered allmulticast mode [ 98.931154][ T5858] bridge_slave_0: entered promiscuous mode [ 98.941133][ T5856] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 98.950568][ T5859] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.958417][ T5859] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.966453][ T5859] bridge_slave_1: entered allmulticast mode [ 98.973806][ T5859] bridge_slave_1: entered promiscuous mode [ 99.029860][ T5858] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.041044][ T5858] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.049171][ T5858] bridge_slave_1: entered allmulticast mode [ 99.057884][ T5858] bridge_slave_1: entered promiscuous mode [ 99.095985][ T5151] Bluetooth: hci0: command tx timeout [ 99.106110][ T5860] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 99.119571][ T5860] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 99.133053][ T5855] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 99.175175][ T5151] Bluetooth: hci4: command tx timeout [ 99.177773][ T5859] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 99.181090][ T5151] Bluetooth: hci3: command tx timeout [ 99.200879][ T5859] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 99.227404][ T5855] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 99.257089][ T5854] Bluetooth: hci2: command tx timeout [ 99.263597][ T5151] Bluetooth: hci1: command tx timeout [ 99.277260][ T5856] team0: Port device team_slave_0 added [ 99.328031][ T5858] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 99.341344][ T5858] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 99.353031][ T5856] team0: Port device team_slave_1 added [ 99.377338][ T5860] team0: Port device team_slave_0 added [ 99.391280][ T5855] team0: Port device team_slave_0 added [ 99.429875][ T5859] team0: Port device team_slave_0 added [ 99.438995][ T5860] team0: Port device team_slave_1 added [ 99.462687][ T5855] team0: Port device team_slave_1 added [ 99.490520][ T5858] team0: Port device team_slave_0 added [ 99.517024][ T5859] team0: Port device team_slave_1 added [ 99.524313][ T5856] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 99.531838][ T5856] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 99.558590][ T5856] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 99.602676][ T5858] team0: Port device team_slave_1 added [ 99.625263][ T5856] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 99.632705][ T5856] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 99.659741][ T5856] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 99.672159][ T5860] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 99.679937][ T5860] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 99.706693][ T5860] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 99.782814][ T5860] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 99.790273][ T5860] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 99.819867][ T5860] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 99.832687][ T5855] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 99.840133][ T5855] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 99.868299][ T5855] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 99.880599][ T5858] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 99.888055][ T5858] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 99.916234][ T5858] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 99.928591][ T5859] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 99.936844][ T5859] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 99.965540][ T5859] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 99.980840][ T5859] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 99.988925][ T5859] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 100.018566][ T5859] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 100.048403][ T5855] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 100.056757][ T5855] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 100.086198][ T5855] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 100.107262][ T5858] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 100.115392][ T5858] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 100.149655][ T5858] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 100.330676][ T5858] hsr_slave_0: entered promiscuous mode [ 100.338457][ T5858] hsr_slave_1: entered promiscuous mode [ 100.395947][ T5856] hsr_slave_0: entered promiscuous mode [ 100.402767][ T5856] hsr_slave_1: entered promiscuous mode [ 100.414193][ T5856] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 100.428614][ T5856] Cannot create hsr debugfs directory [ 100.440081][ T5860] hsr_slave_0: entered promiscuous mode [ 100.448058][ T5860] hsr_slave_1: entered promiscuous mode [ 100.454662][ T5860] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 100.463505][ T5860] Cannot create hsr debugfs directory [ 100.475693][ T5855] hsr_slave_0: entered promiscuous mode [ 100.482781][ T5855] hsr_slave_1: entered promiscuous mode [ 100.489877][ T5855] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 100.498497][ T5855] Cannot create hsr debugfs directory [ 100.541928][ T5859] hsr_slave_0: entered promiscuous mode [ 100.551640][ T5859] hsr_slave_1: entered promiscuous mode [ 100.559108][ T5859] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 100.567356][ T5859] Cannot create hsr debugfs directory [ 101.176332][ T5151] Bluetooth: hci0: command tx timeout [ 101.207550][ T5855] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 101.223344][ T5855] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 101.238787][ T5855] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 101.255662][ T5854] Bluetooth: hci4: command tx timeout [ 101.261559][ T5151] Bluetooth: hci3: command tx timeout [ 101.276777][ T5855] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 101.340873][ T5151] Bluetooth: hci1: command tx timeout [ 101.346936][ T5854] Bluetooth: hci2: command tx timeout [ 101.352906][ T5858] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 101.368143][ T5858] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 101.384516][ T5858] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 101.396894][ T5858] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 101.539524][ T5856] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 101.554685][ T5856] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 101.599044][ T5856] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 101.627295][ T5856] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 101.710038][ T5855] 8021q: adding VLAN 0 to HW filter on device bond0 [ 101.723148][ T5859] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 101.734226][ T5859] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 101.753519][ T5859] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 101.780800][ T5859] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 101.833044][ T5855] 8021q: adding VLAN 0 to HW filter on device team0 [ 101.900636][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.908298][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 101.934249][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.941487][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 101.954516][ T5858] 8021q: adding VLAN 0 to HW filter on device bond0 [ 101.967966][ T5860] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 102.007823][ T5860] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 102.022158][ T5860] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 102.044065][ T5858] 8021q: adding VLAN 0 to HW filter on device team0 [ 102.062696][ T5860] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 102.097119][ T137] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.105362][ T137] bridge0: port 1(bridge_slave_0) entered forwarding state [ 102.180192][ T137] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.188767][ T137] bridge0: port 2(bridge_slave_1) entered forwarding state [ 102.281059][ T5856] 8021q: adding VLAN 0 to HW filter on device bond0 [ 102.358439][ T5856] 8021q: adding VLAN 0 to HW filter on device team0 [ 102.401922][ T5855] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 102.423912][ T34] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.431706][ T34] bridge0: port 1(bridge_slave_0) entered forwarding state [ 102.504711][ T5859] 8021q: adding VLAN 0 to HW filter on device bond0 [ 102.526884][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.534578][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 102.572937][ T5858] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 102.620893][ T5855] veth0_vlan: entered promiscuous mode [ 102.653634][ T5859] 8021q: adding VLAN 0 to HW filter on device team0 [ 102.681129][ T5860] 8021q: adding VLAN 0 to HW filter on device bond0 [ 102.704206][ T5855] veth1_vlan: entered promiscuous mode [ 102.720564][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.728356][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 102.780284][ T34] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.787859][ T34] bridge0: port 2(bridge_slave_1) entered forwarding state [ 102.820918][ T5860] 8021q: adding VLAN 0 to HW filter on device team0 [ 102.871344][ T137] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.878665][ T137] bridge0: port 1(bridge_slave_0) entered forwarding state [ 102.892953][ T137] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.900329][ T137] bridge0: port 2(bridge_slave_1) entered forwarding state [ 102.922281][ T5855] veth0_macvtap: entered promiscuous mode [ 102.960204][ T5855] veth1_macvtap: entered promiscuous mode [ 103.000305][ T5858] veth0_vlan: entered promiscuous mode [ 103.040500][ T5858] veth1_vlan: entered promiscuous mode [ 103.054467][ T5855] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 103.079514][ T5856] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 103.094253][ T5855] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 103.144035][ T5855] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.157864][ T5855] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.167160][ T5855] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.177393][ T5855] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.255932][ T5151] Bluetooth: hci0: command tx timeout [ 103.311472][ T5859] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 103.335791][ T5151] Bluetooth: hci3: command tx timeout [ 103.341551][ T5854] Bluetooth: hci4: command tx timeout [ 103.342727][ T5856] veth0_vlan: entered promiscuous mode [ 103.405983][ T5858] veth0_macvtap: entered promiscuous mode [ 103.416208][ T5854] Bluetooth: hci1: command tx timeout [ 103.421776][ T5854] Bluetooth: hci2: command tx timeout [ 103.460888][ T5858] veth1_macvtap: entered promiscuous mode [ 103.503979][ T5856] veth1_vlan: entered promiscuous mode [ 103.511645][ T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.525312][ T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.582932][ T5860] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 103.624117][ T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.634761][ T5859] veth0_vlan: entered promiscuous mode [ 103.643233][ T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.671728][ T5858] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 103.686587][ T5858] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.699547][ T5858] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 103.740248][ T5858] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 103.753339][ T5858] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.768099][ T5858] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 103.809037][ T5859] veth1_vlan: entered promiscuous mode [ 103.843772][ T5858] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.857120][ T5858] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.874640][ T5855] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 103.875134][ T5858] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.902202][ T5858] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.960212][ T5856] veth0_macvtap: entered promiscuous mode [ 104.014301][ T5856] veth1_macvtap: entered promiscuous mode [ 104.090195][ T5859] veth0_macvtap: entered promiscuous mode [ 104.111935][ T5860] veth0_vlan: entered promiscuous mode [ 104.134374][ T5859] veth1_macvtap: entered promiscuous mode [ 104.173845][ T5856] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 104.185264][ T5856] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.196838][ T5856] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 104.208031][ T5856] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.221202][ T5856] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 104.248609][ T5856] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 104.262159][ T5856] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.272779][ T5856] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 104.285756][ T5856] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.299794][ T5856] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 104.321131][ T5860] veth1_vlan: entered promiscuous mode [ 104.343281][ T5859] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 104.356242][ T5859] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.373165][ T5859] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 104.391610][ T5859] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.404061][ T5859] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 104.418892][ T5859] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.433067][ T5859] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 104.451564][ T1158] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.459437][ T5859] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 104.479700][ T5859] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.490649][ T1158] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.491599][ T5859] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 104.500624][ T5902] mmap: syz.4.6 (5902) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 104.518667][ T5859] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.542508][ T5859] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 104.554114][ T5859] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.571758][ T5859] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 104.584034][ T5856] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.600174][ T5856] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.611138][ T5856] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.626897][ T5856] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.650949][ T5859] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.661007][ T5859] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.671148][ T5859] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.683723][ T5859] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.744589][ T5860] veth0_macvtap: entered promiscuous mode [ 104.811599][ T5860] veth1_macvtap: entered promiscuous mode [ 104.875946][ T1158] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.884292][ T1158] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.884462][ T5860] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 104.913361][ T5860] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.923564][ T5860] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 104.934427][ T5860] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.944803][ T5860] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 104.955848][ T5860] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.966997][ T5860] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 104.977876][ T5860] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.989970][ T5860] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 105.039145][ T5860] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 105.051387][ T5860] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.061701][ T5860] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 105.073671][ T5860] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.084667][ T5860] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 105.097261][ T5860] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.108421][ T5860] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 105.121125][ T5860] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.134451][ T5860] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 105.177936][ T5860] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.205228][ T5860] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.214011][ T5860] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.236855][ T5860] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.334381][ T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.345265][ T5854] Bluetooth: hci0: command tx timeout [ 105.359464][ T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.416038][ T5854] Bluetooth: hci4: command tx timeout [ 105.416099][ T5151] Bluetooth: hci3: command tx timeout [ 105.472997][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.483697][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.496728][ T5151] Bluetooth: hci2: command tx timeout [ 105.500077][ T5854] Bluetooth: hci1: command tx timeout [ 105.531064][ T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.540744][ T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.635753][ T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.643820][ T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.757834][ T34] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.794579][ T34] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.960436][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.000568][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.061537][ T5921] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 106.179949][ T5921] syz.4.9 uses obsolete (PF_INET,SOCK_PACKET) [ 106.318045][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 106.382190][ T5925] 8021q: VLANs not supported on nlmon0 [ 106.420604][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 106.625571][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 106.915626][ T5935] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 107.119369][ T5940] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4'. [ 107.669078][ T5951] netlink: 12 bytes leftover after parsing attributes in process `syz.1.13'. [ 107.729418][ T5951] netlink: 20 bytes leftover after parsing attributes in process `syz.1.13'. [ 107.751019][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 108.136957][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 108.384305][ T5955] CUSE: unknown device info "ì?\NáE‰ÉfÑŠ‹óKJ éH+ßãÛ¤2Lh¸ùË ©^änLþ1Õ`†CcÝòn§õ†" [ 108.439594][ T5955] CUSE: unknown device info "€¨×0º©®(À3Õ¶ië®â>f¡Çè_Ù®" [ 108.559464][ T5955] CUSE: unknown device info "°ð<Ö_e¤FÀÆ" [ 108.591664][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 108.680205][ T5955] CUSE: DEVNAME unspecified [ 108.725368][ T1223] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 108.847727][ T5960] usb usb8: usbfs: process 5960 (syz.1.16) did not claim interface 0 before use [ 108.978518][ T1223] usb 4-1: Using ep0 maxpacket: 8 [ 109.019041][ T1223] usb 4-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 109.235837][ T1223] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.284787][ T1223] usb 4-1: Product: syz [ 109.295023][ T1223] usb 4-1: Manufacturer: syz [ 109.309412][ T1223] usb 4-1: SerialNumber: syz [ 109.368979][ T1223] usb 4-1: config 0 descriptor?? [ 109.389963][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 109.410494][ T1223] gspca_main: sq905-2.14.0 probing 2770:9120 [ 109.581419][ T5966] usb usb8: usbfs: process 5966 (syz.2.18) did not claim interface 0 before use [ 109.614803][ T5957] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 109.627040][ T5957] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 109.645738][ T0] NOHZ tick-stop error: local softirq work is pending, handler #302!!! [ 109.899118][ T1223] gspca_sq905: sq905_command: usb_control_msg failed (-71) [ 109.922992][ T5975] netlink: 'syz.4.20': attribute type 23 has an invalid length. [ 109.963859][ T5975] netlink: 4 bytes leftover after parsing attributes in process `syz.4.20'. [ 110.066737][ T5979] netlink: 'syz.4.20': attribute type 2 has an invalid length. [ 110.135187][ T49] usb 1-1: new low-speed USB device number 2 using dummy_hcd [ 110.264100][ T5973] xt_NFQUEUE: number of queues (65532) out of range (got 66665) [ 110.311718][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 110.332082][ T1223] sq905 4-1:0.0: probe with driver sq905 failed with error -71 [ 110.467504][ T0] NOHZ tick-stop error: local softirq work is pending, handler #01!!! [ 110.542308][ T5976] xt_NFQUEUE: number of queues (65532) out of range (got 66665) [ 110.800165][ T1223] usb 4-1: USB disconnect, device number 2 [ 110.835067][ T49] usb 1-1: Invalid ep0 maxpacket: 16 [ 111.045865][ T49] usb 1-1: new low-speed USB device number 3 using dummy_hcd [ 111.236108][ T49] usb 1-1: Invalid ep0 maxpacket: 16 [ 111.266317][ T49] usb usb1-port1: attempt power cycle [ 111.752432][ T5992] x_tables: duplicate underflow at hook 2 [ 111.888231][ T37] af_packet: tpacket_rcv: packet too big, clamped from 38 to 4294967286. macoff=82 [ 111.965062][ T49] usb 1-1: new low-speed USB device number 4 using dummy_hcd [ 112.003469][ T49] usb 1-1: Invalid ep0 maxpacket: 16 [ 112.145127][ T49] usb 1-1: new low-speed USB device number 5 using dummy_hcd [ 112.225778][ T49] usb 1-1: Invalid ep0 maxpacket: 16 [ 112.239332][ T49] usb usb1-port1: unable to enumerate USB device [ 112.312959][ T5995] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 113.107832][ T6018] netlink: 'syz.0.26': attribute type 10 has an invalid length. [ 113.419839][ T6018] team0: Device ipvlan1 failed to register rx_handler [ 114.207883][ T6035] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 115.699238][ T30] audit: type=1326 audit(1744177243.182:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6043 comm="syz.1.33" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8634f8d169 code=0x0 [ 116.591542][ T6057] x_tables: duplicate underflow at hook 2 [ 116.933087][ T6065] netlink: 1 bytes leftover after parsing attributes in process `syz.4.39'. [ 116.965067][ T6065] netlink: 4 bytes leftover after parsing attributes in process `syz.4.39'. [ 117.004986][ T6065] netlink: 4 bytes leftover after parsing attributes in process `syz.4.39'. [ 117.080238][ T6065] netlink: 4 bytes leftover after parsing attributes in process `syz.4.39'. [ 118.566269][ T30] audit: type=1326 audit(1744177246.032:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6102 comm="syz.3.50" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1edb8d169 code=0x7ffc0000 [ 118.658526][ T30] audit: type=1326 audit(1744177246.032:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6102 comm="syz.3.50" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1edb8d169 code=0x7ffc0000 [ 118.681479][ C1] vkms_vblank_simulate: vblank timer overrun [ 118.745200][ T1223] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 118.842392][ T30] audit: type=1326 audit(1744177246.052:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6102 comm="syz.3.50" exe="/root/syz-executor" sig=0 arch=c000003e syscall=113 compat=0 ip=0x7ff1edb8d169 code=0x7ffc0000 [ 118.865034][ C1] vkms_vblank_simulate: vblank timer overrun [ 118.941838][ T30] audit: type=1326 audit(1744177246.052:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6102 comm="syz.3.50" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1edb8d169 code=0x7ffc0000 [ 118.965489][ T30] audit: type=1326 audit(1744177246.052:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6102 comm="syz.3.50" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1edb8d169 code=0x7ffc0000 [ 118.989717][ T30] audit: type=1326 audit(1744177246.052:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6102 comm="syz.3.50" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff1edb8d169 code=0x7ffc0000 [ 119.012530][ T1223] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 119.025547][ T5838] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 119.026436][ T1223] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 119.044143][ T1223] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 119.055196][ T30] audit: type=1326 audit(1744177246.052:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6102 comm="syz.3.50" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1edb8d169 code=0x7ffc0000 [ 119.078711][ T1223] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.111458][ T6101] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 119.112184][ T30] audit: type=1326 audit(1744177246.062:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6102 comm="syz.3.50" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff1edb8d169 code=0x7ffc0000 [ 119.148507][ T1223] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 119.190019][ T30] audit: type=1326 audit(1744177246.062:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6102 comm="syz.3.50" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1edb8d169 code=0x7ffc0000 [ 119.245094][ T5838] usb 4-1: device descriptor read/64, error -71 [ 119.377153][ T6101] FAULT_INJECTION: forcing a failure. [ 119.377153][ T6101] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 119.434799][ T6101] CPU: 1 UID: 0 PID: 6101 Comm: syz.4.49 Not tainted 6.15.0-rc1-syzkaller-00025-gbec7dcbc242c #0 PREEMPT(full) [ 119.434831][ T6101] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 119.434848][ T6101] Call Trace: [ 119.434857][ T6101] [ 119.434866][ T6101] dump_stack_lvl+0x241/0x360 [ 119.434918][ T6101] ? __pfx_dump_stack_lvl+0x10/0x10 [ 119.434948][ T6101] ? __pfx__printk+0x10/0x10 [ 119.434989][ T6101] should_fail_ex+0x424/0x570 [ 119.435018][ T6101] _copy_to_user+0x31/0xb0 [ 119.435051][ T6101] simple_read_from_buffer+0xc4/0x170 [ 119.435088][ T6101] proc_fail_nth_read+0x1ef/0x260 [ 119.435114][ T6101] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 119.435139][ T6101] ? rw_verify_area+0x246/0x630 [ 119.435162][ T6101] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 119.435185][ T6101] vfs_read+0x21f/0xb90 [ 119.435223][ T6101] ? __pfx___mutex_lock+0x10/0x10 [ 119.435250][ T6101] ? __pfx_vfs_read+0x10/0x10 [ 119.435277][ T6101] ? __fget_files+0x2a/0x420 [ 119.435298][ T6101] ? __fget_files+0x39d/0x420 [ 119.435315][ T6101] ? __fget_files+0x2a/0x420 [ 119.435344][ T6101] ksys_read+0x19d/0x2d0 [ 119.435370][ T6101] ? __pfx_ksys_read+0x10/0x10 [ 119.435407][ T6101] ? do_syscall_64+0xb6/0x230 [ 119.435437][ T6101] do_syscall_64+0xf3/0x230 [ 119.435471][ T6101] ? clear_bhb_loop+0x45/0xa0 [ 119.435501][ T6101] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.435522][ T6101] RIP: 0033:0x7f34e958bb7c [ 119.435547][ T6101] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 119.435565][ T6101] RSP: 002b:00007f34ea337030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 119.435588][ T6101] RAX: ffffffffffffffda RBX: 00007f34e97a5fa0 RCX: 00007f34e958bb7c [ 119.435603][ T6101] RDX: 000000000000000f RSI: 00007f34ea3370a0 RDI: 0000000000000006 [ 119.435616][ T6101] RBP: 00007f34ea337090 R08: 0000000000000000 R09: 00236964696d2f76 [ 119.435630][ T6101] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 119.435642][ T6101] R13: 0000000000000000 R14: 00007f34e97a5fa0 R15: 00007f34e98cfa28 [ 119.435675][ T6101] [ 119.649758][ C1] vkms_vblank_simulate: vblank timer overrun [ 119.725028][ T5838] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 119.738024][ T6113] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 119.761811][ T5896] usb 5-1: USB disconnect, device number 2 [ 119.917092][ T5838] usb 4-1: device descriptor read/64, error -71 [ 120.091233][ T5838] usb usb4-port1: attempt power cycle [ 120.200340][ T6125] netlink: 8 bytes leftover after parsing attributes in process `syz.0.55'. [ 120.206860][ T6123] : entered promiscuous mode [ 120.215113][ T6125] netlink: 12 bytes leftover after parsing attributes in process `syz.0.55'. [ 120.349127][ T6121] netlink: 4 bytes leftover after parsing attributes in process `syz.2.54'. [ 120.403432][ T6121] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 120.445196][ T5838] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 120.489150][ T5838] usb 4-1: device descriptor read/8, error -71 [ 120.598934][ T6121] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 120.807023][ T5838] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 120.881546][ T5838] usb 4-1: device descriptor read/8, error -71 [ 120.995812][ T5838] usb usb4-port1: unable to enumerate USB device [ 121.658489][ T6150] kvm: vcpu 2: requested 128 ns lapic timer period limited to 200000 ns [ 121.700769][ T6150] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 121.780794][ T5838] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 121.955668][ T5838] usb 3-1: device descriptor read/64, error -71 [ 122.195466][ T5838] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 122.308406][ T6162] netlink: 'syz.0.69': attribute type 4 has an invalid length. [ 122.376797][ T5838] usb 3-1: device descriptor read/64, error -71 [ 122.526801][ T5838] usb usb3-port1: attempt power cycle [ 122.771326][ T30] kauditd_printk_skb: 14 callbacks suppressed [ 122.771348][ T30] audit: type=1326 audit(1744177250.262:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6171 comm="syz.4.72" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34e958d169 code=0x7ffc0000 [ 122.897900][ T30] audit: type=1326 audit(1744177250.292:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6171 comm="syz.4.72" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34e958d169 code=0x7ffc0000 [ 122.947485][ T5838] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 122.965257][ T6177] program syz.1.73 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 123.025685][ T5838] usb 3-1: device descriptor read/8, error -71 [ 123.185548][ T24] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 123.375051][ T5838] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 123.475039][ T1223] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 123.531139][ T24] usb 4-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 123.575846][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.615049][ T24] usb 4-1: Product: syz [ 123.631501][ T24] usb 4-1: Manufacturer: syz [ 123.654193][ T24] usb 4-1: SerialNumber: syz [ 123.709103][ T24] usb 4-1: config 0 descriptor?? [ 123.729157][ T1223] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 123.760439][ T1223] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 123.804644][ T1223] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 123.852073][ T1223] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.906295][ T1223] usb 2-1: config 0 descriptor?? [ 123.973776][ T5838] usb 3-1: device descriptor read/8, error -71 [ 124.090064][ T5838] usb usb3-port1: unable to enumerate USB device [ 124.190389][ T24] airspy 4-1:0.0: usb_control_msg() failed -71 request 0a [ 124.219066][ T24] airspy 4-1:0.0: Could not detect board [ 124.235191][ T24] airspy 4-1:0.0: probe with driver airspy failed with error -71 [ 124.304641][ T24] usb 4-1: USB disconnect, device number 7 [ 124.356941][ T6183] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 124.370884][ T6183] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 124.406311][ T1223] cp2112 0003:10C4:EA90.0001: unknown main item tag 0x0 [ 124.427891][ T1223] cp2112 0003:10C4:EA90.0001: unknown main item tag 0x0 [ 124.465171][ T5838] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 124.471505][ T1223] cp2112 0003:10C4:EA90.0001: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.1-1/input0 [ 124.639493][ T5838] usb 1-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 124.651063][ T1223] cp2112 0003:10C4:EA90.0001: error requesting version [ 124.656595][ T1223] cp2112 0003:10C4:EA90.0001: probe with driver cp2112 failed with error -71 [ 124.683179][ T5838] usb 1-1: config 0 interface 0 has no altsetting 0 [ 124.703310][ T5838] usb 1-1: New USB device found, idVendor=044e, idProduct=1215, bcdDevice= 0.00 [ 124.713953][ T1223] usb 2-1: USB disconnect, device number 2 [ 124.735078][ T5838] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.776699][ T5838] usb 1-1: config 0 descriptor?? [ 125.272009][ T5838] hid-alps 0003:044E:1215.0002: collection stack underflow [ 125.297787][ T5838] hid-alps 0003:044E:1215.0002: item 0 2 0 12 parsing failed [ 125.318255][ T5838] hid-alps 0003:044E:1215.0002: parse failed [ 125.334685][ T5838] hid-alps 0003:044E:1215.0002: probe with driver hid-alps failed with error -22 [ 125.349416][ T6196] netlink: 104 bytes leftover after parsing attributes in process `syz.4.82'. [ 125.451005][ T5838] usb 1-1: USB disconnect, device number 6 [ 125.899091][ T1223] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 126.105150][ T1223] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 126.126914][ T1223] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 126.155717][ T1223] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 126.174973][ T1223] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 126.194364][ T1223] usb 2-1: SerialNumber: syz [ 126.275338][ T5838] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 126.432258][ T1223] usb 2-1: 0:2 : does not exist [ 126.477448][ T5838] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 126.509538][ T1223] usb 2-1: USB disconnect, device number 3 [ 126.515556][ T5838] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 126.515602][ T5838] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 126.515627][ T5838] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 126.515673][ T5838] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 126.641495][ T5838] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.673989][ T5838] usb 4-1: config 0 descriptor?? [ 126.789816][ T5891] udevd[5891]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 127.161333][ T5838] plantronics 0003:047F:FFFF.0003: No inputs registered, leaving [ 127.239947][ T5838] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 127.675249][ T5838] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 127.859402][ T5838] usb 5-1: Using ep0 maxpacket: 8 [ 127.878678][ T5838] usb 5-1: config 1 interface 0 altsetting 252 bulk endpoint 0x1 has invalid maxpacket 8 [ 127.918913][ T5838] usb 5-1: config 1 interface 0 altsetting 252 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 127.974638][ T5838] usb 5-1: config 1 interface 0 has no altsetting 0 [ 128.000009][ T5838] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 128.030784][ T5838] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.049424][ T5838] usb 5-1: Product: Ф [ 128.053853][ T5838] usb 5-1: Manufacturer: 袃ᄔ옰濘ã‰á¾´å—¤ç°ê˜„枴甾ቜ鄜俀걡ã»é’¿ëŸ²îŽ¬â¹”䤹î˜ê´²é•¥ïœ•è»¿ë¯¯ç½¬èŸ äœ›å«—₯鷜摇勘Ħ纎˞４躳冤抗䵓颕ïã™Ó‚â›ä£’äˆéˆ¥ç’殯䨕罗䅔裻ㄤ葇ʞ缘猙æ±ç¯²é¦¡æ‚·ëƒ›í¡æ›´ßœà¿¯é… ïª’ã¬æ²é¹’̰퉋誷㧵㒚㑷é¼é¢…᧸ɉꋗꈪ∷扵⧪ [ 128.215162][ T5838] usb 5-1: SerialNumber: á—㎶Ω옎綎 [ 128.244592][ T6244] xt_CT: No such helper "snmp_trap" [ 128.277189][ T6240] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 128.285539][ T6240] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 128.328157][ T6265] Zero length message leads to an empty skb [ 128.388518][ T6267] netlink: 14 bytes leftover after parsing attributes in process `syz.2.103'. [ 128.523102][ T6215] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 128.536555][ T6215] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 128.606941][ T5895] usb 4-1: reset high-speed USB device number 8 using dummy_hcd [ 128.737658][ T6240] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 128.758519][ T6240] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 129.001368][ T6240] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 129.025315][ T1223] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 129.033684][ T6240] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 129.046782][ T5838] usb 5-1: USB disconnect, device number 3 [ 129.193870][ T6289] netlink: 8 bytes leftover after parsing attributes in process `syz.1.112'. [ 129.232567][ T1223] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 129.262960][ T1223] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 129.288920][ T1223] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 129.315181][ T1223] usb 3-1: New USB device found, idVendor=17ef, idProduct=60b5, bcdDevice= 0.00 [ 129.363105][ T1223] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.399925][ T1223] usb 3-1: config 0 descriptor?? [ 129.429300][ T5893] usb 4-1: USB disconnect, device number 8 [ 129.745484][ T1223] usb 3-1: USB disconnect, device number 6 [ 130.423099][ T6321] netlink: 'syz.2.120': attribute type 3 has an invalid length. [ 130.726509][ T5895] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 130.900338][ T5895] usb 2-1: config 0 has an invalid descriptor of length 105, skipping remainder of the config [ 130.925666][ T5895] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 130.942518][ T5895] usb 2-1: New USB device found, idVendor=249c, idProduct=9002, bcdDevice=de.ad [ 130.952293][ T5895] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.972586][ T5895] usb 2-1: config 0 descriptor?? [ 130.994107][ T6338] ipip0: entered promiscuous mode [ 131.178165][ T5832] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 131.204082][ T6324] xt_cluster: node mask cannot exceed total number of nodes [ 131.369152][ T5832] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 131.387247][ T5832] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 131.411362][ T6344] FAULT_INJECTION: forcing a failure. [ 131.411362][ T6344] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 131.428013][ T5832] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 131.440069][ T5832] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 131.447566][ T6344] CPU: 0 UID: 0 PID: 6344 Comm: syz.2.131 Not tainted 6.15.0-rc1-syzkaller-00025-gbec7dcbc242c #0 PREEMPT(full) [ 131.447603][ T6344] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 131.447618][ T6344] Call Trace: [ 131.447627][ T6344] [ 131.447636][ T6344] dump_stack_lvl+0x241/0x360 [ 131.447713][ T6344] ? __pfx_dump_stack_lvl+0x10/0x10 [ 131.447747][ T6344] ? __pfx__printk+0x10/0x10 [ 131.447793][ T6344] should_fail_ex+0x424/0x570 [ 131.447824][ T6344] _copy_to_user+0x31/0xb0 [ 131.447861][ T6344] snd_pcm_oss_read2+0x3aa/0x490 [ 131.447894][ T6344] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 131.447930][ T6344] ? __pfx_snd_pcm_oss_read2+0x10/0x10 [ 131.447961][ T6344] ? __pfx_snd_pcm_post_prepare+0x10/0x10 [ 131.448003][ T6344] snd_pcm_oss_read+0x608/0x8a0 [ 131.448044][ T6344] ? __pfx_snd_pcm_oss_read+0x10/0x10 [ 131.448076][ T6344] vfs_read+0x21f/0xb90 [ 131.448114][ T6344] ? __pfx_vfs_read+0x10/0x10 [ 131.448153][ T6344] ? __fget_files+0x2a/0x420 [ 131.448174][ T6344] ? __fget_files+0x2a/0x420 [ 131.448198][ T6344] ? __fget_files+0x39d/0x420 [ 131.448216][ T6344] ? __fget_files+0x2a/0x420 [ 131.448249][ T6344] ksys_read+0x19d/0x2d0 [ 131.448278][ T6344] ? __pfx_ksys_read+0x10/0x10 [ 131.448312][ T6344] ? do_syscall_64+0xb6/0x230 [ 131.448345][ T6344] do_syscall_64+0xf3/0x230 [ 131.448374][ T6344] ? clear_bhb_loop+0x45/0xa0 [ 131.448402][ T6344] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.448426][ T6344] RIP: 0033:0x7f715758d169 [ 131.448451][ T6344] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 131.448469][ T6344] RSP: 002b:00007f715844d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 131.448502][ T6344] RAX: ffffffffffffffda RBX: 00007f71577a5fa0 RCX: 00007f715758d169 [ 131.448524][ T6344] RDX: 0000000000002020 RSI: 00002000000063c0 RDI: 0000000000000003 [ 131.448539][ T6344] RBP: 00007f715844d090 R08: 0000000000000000 R09: 0000000000000000 [ 131.448553][ T6344] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 131.448567][ T6344] R13: 0000000000000000 R14: 00007f71577a5fa0 R15: 00007f71578cfa28 [ 131.448601][ T6344] [ 131.789496][ T5832] usb 5-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 131.798931][ T5832] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.821106][ T5832] usb 5-1: config 0 descriptor?? [ 131.845163][ T5942] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 132.015225][ T5942] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 132.042227][ T5942] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 132.052921][ T5832] hdpvr 5-1:0.0: firmware version 0xc7 dated 5[¦ãKÏToçjÌ<_„H'soº]íŒWy/L" \“úÄÎP$⸠[ 132.085224][ T5832] hdpvr 5-1:0.0: untested firmware, the driver might not work. [ 132.103695][ T5942] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 132.112910][ T5942] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.131933][ T5942] usb 1-1: Product: syz [ 132.155077][ T5942] usb 1-1: Manufacturer: syz [ 132.159752][ T5942] usb 1-1: SerialNumber: syz [ 132.263534][ T6336] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 132.291776][ T6336] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 132.330390][ T5832] hdpvr 5-1:0.0: device init failed [ 132.346322][ T5832] hdpvr 5-1:0.0: probe with driver hdpvr failed with error -12 [ 132.400763][ T5832] usb 5-1: USB disconnect, device number 4 [ 132.581278][ T6356] fuse: Bad value for 'fd' [ 132.995303][ T5942] usb 1-1: Audio class v2/v3 interfaces need an interface association [ 133.104375][ T5942] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 133.205961][ T5942] usb 1-1: USB disconnect, device number 7 [ 133.305882][ T5895] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 133.395406][ T6372] FAULT_INJECTION: forcing a failure. [ 133.395406][ T6372] name failslab, interval 1, probability 0, space 0, times 0 [ 133.409936][ T6374] netlink: 36 bytes leftover after parsing attributes in process `syz.3.143'. [ 133.411054][ T6372] CPU: 1 UID: 0 PID: 6372 Comm: syz.0.144 Not tainted 6.15.0-rc1-syzkaller-00025-gbec7dcbc242c #0 PREEMPT(full) [ 133.411085][ T6372] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 133.411100][ T6372] Call Trace: [ 133.411110][ T6372] [ 133.411120][ T6372] dump_stack_lvl+0x241/0x360 [ 133.411163][ T6372] ? __pfx_dump_stack_lvl+0x10/0x10 [ 133.411197][ T6372] ? __pfx__printk+0x10/0x10 [ 133.411229][ T6372] ? tun_chr_read_iter+0x1f0/0x260 [ 133.411264][ T6372] ? __pfx_tun_chr_read_iter+0x10/0x10 [ 133.411300][ T6372] ? __io_read+0x893/0x15a0 [ 133.411329][ T6372] should_fail_ex+0x424/0x570 [ 133.411359][ T6372] should_failslab+0xac/0x100 [ 133.411394][ T6372] __kmalloc_noprof+0xdf/0x4d0 [ 133.411426][ T6372] ? io_cache_alloc_new+0x44/0x100 [ 133.411466][ T6372] io_cache_alloc_new+0x44/0x100 [ 133.411505][ T6372] io_arm_poll_handler+0x55f/0xc80 [ 133.411547][ T6372] ? __pfx_io_arm_poll_handler+0x10/0x10 [ 133.411588][ T6372] ? __pfx_io_prep_rwv+0x10/0x10 [ 133.411611][ T6372] ? __pfx_io_issue_sqe+0x10/0x10 [ 133.411639][ T6372] io_queue_async+0xa4/0x4e0 [ 133.411670][ T6372] io_submit_sqes+0xdfc/0x1ce0 [ 133.411732][ T6372] __se_sys_io_uring_enter+0x2cd/0x3560 [ 133.411767][ T6372] ? rcu_read_lock_any_held+0xbb/0x160 [ 133.411801][ T6372] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 133.411836][ T6372] ? vfs_write+0xb29/0xd10 [ 133.411873][ T6372] ? ksys_write+0x24e/0x2d0 [ 133.411905][ T6372] ? __pfx___se_sys_io_uring_enter+0x10/0x10 [ 133.411939][ T6372] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 133.411974][ T6372] ? __fget_files+0x2a/0x420 [ 133.412000][ T6372] ? __fget_files+0x2a/0x420 [ 133.412027][ T6372] ? fput+0x9b/0xd0 [ 133.412048][ T6372] ? ksys_write+0x275/0x2d0 [ 133.412086][ T6372] ? __x64_sys_io_uring_enter+0x21/0xf0 [ 133.412115][ T6372] do_syscall_64+0xf3/0x230 [ 133.412144][ T6372] ? clear_bhb_loop+0x45/0xa0 [ 133.412171][ T6372] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 133.412194][ T6372] RIP: 0033:0x7f166a98d169 [ 133.412215][ T6372] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 133.412232][ T6372] RSP: 002b:00007f166b78b038 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 133.412257][ T6372] RAX: ffffffffffffffda RBX: 00007f166aba5fa0 RCX: 00007f166a98d169 [ 133.412273][ T6372] RDX: 0000000000000000 RSI: 00000000100847c0 RDI: 0000000000000007 [ 133.412288][ T6372] RBP: 00007f166b78b090 R08: 0000000000000000 R09: 0000000000000000 [ 133.412302][ T6372] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000002 [ 133.412315][ T6372] R13: 0000000000000000 R14: 00007f166aba5fa0 R15: 00007f166accfa28 [ 133.412350][ T6372] [ 133.475494][ T5891] udevd[5891]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 133.521229][ T5895] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 133.584768][ T5832] usb 2-1: USB disconnect, device number 4 [ 133.597182][ T5895] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.854342][ T5895] usb 5-1: config 0 descriptor?? [ 133.874345][ T6374] netlink: 'syz.3.143': attribute type 5 has an invalid length. [ 133.878821][ T5895] cp210x 5-1:0.0: cp210x converter detected [ 133.891770][ T6380] process 'syz.1.146' launched '/dev/fd/3' with NULL argv: empty string added [ 134.073186][ T6387] netlink: 12 bytes leftover after parsing attributes in process `syz.3.148'. [ 134.081001][ T5895] cp210x 5-1:0.0: failed to get vendor val 0x370b size 1: -121 [ 134.105911][ T5895] cp210x 5-1:0.0: querying part number failed [ 134.143376][ T5895] usb 5-1: cp210x converter now attached to ttyUSB0 [ 134.221652][ T5895] usb 5-1: USB disconnect, device number 5 [ 134.241270][ T5895] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 134.304107][ T5895] cp210x 5-1:0.0: device disconnected [ 134.361877][ T6399] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 134.370195][ T5893] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 134.397013][ T6398] netlink: 32 bytes leftover after parsing attributes in process `syz.3.151'. [ 134.548280][ T5893] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 134.586365][ T5893] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 134.756154][ T5893] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 121, setting to 64 [ 135.544071][ T5893] usb 1-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 135.559715][ T5893] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.865639][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 146.873301][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 147.823116][ T5893] usb 1-1: Product: syz [ 147.837177][ T5893] usb 1-1: Manufacturer: syz [ 147.912712][ T5893] usb 1-1: SerialNumber: syz [ 147.936422][ T0] sched: DL replenish lagged too much [ 147.984852][ T5893] usb 1-1: config 0 descriptor?? [ 148.012049][ T5893] usb 1-1: can't set config #0, error -71 [ 148.345087][ T5893] usb 1-1: USB disconnect, device number 8 [ 150.883569][ T6418] warning: `syz.4.158' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 182.293624][ T5151] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 182.332230][ T5151] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 182.350784][ T5151] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 182.475233][ T5151] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 182.504684][ T5151] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 182.801980][ T5854] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 182.811930][ T5854] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 182.821783][ T5854] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 182.831349][ T5854] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 182.841808][ T5854] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 183.325769][ T5151] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 183.356495][ T5151] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 183.373097][ T5151] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 183.395395][ T5151] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 183.404753][ T5151] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 186.247219][ T5151] Bluetooth: hci1: command tx timeout [ 186.252982][ T5854] Bluetooth: hci2: command tx timeout [ 186.258673][ T5840] Bluetooth: hci3: command tx timeout [ 187.867700][ T5840] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 187.891455][ T5840] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 187.900539][ T5840] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 187.909564][ T5840] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 187.919924][ T5840] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 187.940397][ T5849] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 188.015436][ T5840] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 188.027868][ T5840] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 188.038630][ T5840] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 188.048377][ T5840] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 188.295421][ T5151] Bluetooth: hci1: command tx timeout [ 188.301485][ T5151] Bluetooth: hci3: command tx timeout [ 188.314088][ T5840] Bluetooth: hci2: command tx timeout [ 188.629276][ T137] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.775840][ T5855] syz-executor (5855) used greatest stack depth: 18968 bytes left [ 189.097099][ T137] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.317988][ T137] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.421415][ T137] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.135105][ T5840] Bluetooth: hci0: command tx timeout [ 190.215273][ T5840] Bluetooth: hci4: command tx timeout [ 190.337371][ T6452] chnl_net:caif_netlink_parms(): no params data found [ 190.358151][ T6444] chnl_net:caif_netlink_parms(): no params data found [ 190.375222][ T5840] Bluetooth: hci2: command tx timeout [ 190.381066][ T5840] Bluetooth: hci3: command tx timeout [ 190.392283][ T5151] Bluetooth: hci1: command tx timeout [ 190.685206][ T137] bridge_slave_1: left allmulticast mode [ 190.693831][ T137] bridge_slave_1: left promiscuous mode [ 190.714333][ T137] bridge0: port 2(bridge_slave_1) entered disabled state [ 190.743561][ T137] bridge_slave_0: left allmulticast mode [ 190.753301][ T137] bridge_slave_0: left promiscuous mode [ 190.768641][ T137] bridge0: port 1(bridge_slave_0) entered disabled state [ 191.521070][ T137] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 191.546824][ T137] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 191.564279][ T137] bond0 (unregistering): Released all slaves [ 192.100330][ T6451] chnl_net:caif_netlink_parms(): no params data found [ 192.215260][ T5840] Bluetooth: hci0: command tx timeout [ 192.295218][ T5840] Bluetooth: hci4: command tx timeout [ 192.462815][ T5840] Bluetooth: hci3: command tx timeout [ 192.469594][ T5151] Bluetooth: hci1: command tx timeout [ 192.475304][ T5854] Bluetooth: hci2: command tx timeout [ 192.487435][ T6446] chnl_net:caif_netlink_parms(): no params data found [ 192.967445][ T6444] bridge0: port 1(bridge_slave_0) entered blocking state [ 192.974709][ T6444] bridge0: port 1(bridge_slave_0) entered disabled state [ 193.002717][ T6444] bridge_slave_0: entered allmulticast mode [ 193.053555][ T6444] bridge_slave_0: entered promiscuous mode [ 193.486475][ T6444] bridge0: port 2(bridge_slave_1) entered blocking state [ 193.494065][ T6444] bridge0: port 2(bridge_slave_1) entered disabled state [ 193.529306][ T6444] bridge_slave_1: entered allmulticast mode [ 193.540958][ T6444] bridge_slave_1: entered promiscuous mode [ 193.626143][ T6452] bridge0: port 1(bridge_slave_0) entered blocking state [ 193.633376][ T6452] bridge0: port 1(bridge_slave_0) entered disabled state [ 193.649244][ T6452] bridge_slave_0: entered allmulticast mode [ 193.661441][ T6452] bridge_slave_0: entered promiscuous mode [ 193.890165][ T6448] chnl_net:caif_netlink_parms(): no params data found [ 193.912720][ T6452] bridge0: port 2(bridge_slave_1) entered blocking state [ 193.929811][ T6452] bridge0: port 2(bridge_slave_1) entered disabled state [ 193.941925][ T6452] bridge_slave_1: entered allmulticast mode [ 193.957770][ T6452] bridge_slave_1: entered promiscuous mode [ 194.052813][ T137] hsr_slave_0: left promiscuous mode [ 194.069514][ T137] hsr_slave_1: left promiscuous mode [ 194.082067][ T137] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 194.092843][ T137] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 194.123108][ T137] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 194.134030][ T137] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 194.174019][ T137] veth1_macvtap: left promiscuous mode [ 194.189691][ T137] veth0_macvtap: left promiscuous mode [ 194.198658][ T137] veth1_vlan: left promiscuous mode [ 194.209373][ T137] veth0_vlan: left promiscuous mode [ 194.295195][ T5151] Bluetooth: hci0: command tx timeout [ 194.378741][ T5151] Bluetooth: hci4: command tx timeout [ 195.541399][ T137] team0 (unregistering): Port device team_slave_1 removed [ 195.651649][ T137] team0 (unregistering): Port device team_slave_0 removed [ 196.377274][ T5151] Bluetooth: hci0: command tx timeout [ 196.455138][ T5151] Bluetooth: hci4: command tx timeout [ 196.990501][ T6444] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 197.263334][ T6444] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 197.458540][ T6452] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 197.483656][ T6452] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 197.503261][ T6451] bridge0: port 1(bridge_slave_0) entered blocking state [ 197.512967][ T6451] bridge0: port 1(bridge_slave_0) entered disabled state [ 197.533854][ T6451] bridge_slave_0: entered allmulticast mode [ 197.551645][ T6451] bridge_slave_0: entered promiscuous mode [ 197.819300][ T6451] bridge0: port 2(bridge_slave_1) entered blocking state [ 197.841636][ T6451] bridge0: port 2(bridge_slave_1) entered disabled state [ 197.886212][ T6451] bridge_slave_1: entered allmulticast mode [ 197.917239][ T6451] bridge_slave_1: entered promiscuous mode [ 198.160521][ T6444] team0: Port device team_slave_0 added [ 198.212372][ T6452] team0: Port device team_slave_0 added [ 198.427068][ T6446] bridge0: port 1(bridge_slave_0) entered blocking state [ 198.434370][ T6446] bridge0: port 1(bridge_slave_0) entered disabled state [ 198.455385][ T6446] bridge_slave_0: entered allmulticast mode [ 198.463371][ T6446] bridge_slave_0: entered promiscuous mode [ 198.513273][ T6444] team0: Port device team_slave_1 added [ 198.603883][ T6452] team0: Port device team_slave_1 added [ 198.663054][ T6451] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 198.708351][ T6451] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 198.745623][ T6446] bridge0: port 2(bridge_slave_1) entered blocking state [ 198.759941][ T6446] bridge0: port 2(bridge_slave_1) entered disabled state [ 198.786432][ T6446] bridge_slave_1: entered allmulticast mode [ 198.813101][ T6446] bridge_slave_1: entered promiscuous mode [ 199.186523][ T6452] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 199.193541][ T6452] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 199.276660][ T6452] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 199.533129][ T6448] bridge0: port 1(bridge_slave_0) entered blocking state [ 199.544704][ T6448] bridge0: port 1(bridge_slave_0) entered disabled state [ 199.561493][ T6448] bridge_slave_0: entered allmulticast mode [ 199.585158][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.591530][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 199.606019][ T6448] bridge_slave_0: entered promiscuous mode [ 199.624471][ T6448] bridge0: port 2(bridge_slave_1) entered blocking state [ 199.640751][ T6448] bridge0: port 2(bridge_slave_1) entered disabled state [ 199.650927][ T6448] bridge_slave_1: entered allmulticast mode [ 199.664682][ T6448] bridge_slave_1: entered promiscuous mode [ 199.675928][ T6452] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 199.682931][ T6452] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 199.728964][ T6452] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 199.798413][ T6451] team0: Port device team_slave_0 added [ 199.876084][ T6451] team0: Port device team_slave_1 added [ 199.888846][ T6446] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 199.922633][ T6444] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 199.941691][ T6444] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 199.989011][ T6444] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 200.178741][ T6446] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 200.201915][ T6444] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 200.214276][ T6444] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 200.251575][ T6444] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 200.354725][ T6448] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 200.461185][ T6451] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 200.474844][ T6451] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 200.512076][ T6451] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 200.778103][ T6448] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 200.801919][ T6451] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 200.833392][ T6451] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 200.922853][ T6451] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 200.997329][ T6446] team0: Port device team_slave_0 added [ 201.027091][ T6446] team0: Port device team_slave_1 added [ 201.141961][ T6452] hsr_slave_0: entered promiscuous mode [ 201.186501][ T6452] hsr_slave_1: entered promiscuous mode [ 201.617513][ T6444] hsr_slave_0: entered promiscuous mode [ 201.624390][ T6444] hsr_slave_1: entered promiscuous mode [ 201.681061][ T6444] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 201.702063][ T6444] Cannot create hsr debugfs directory [ 201.753029][ T6448] team0: Port device team_slave_0 added [ 201.801486][ T6448] team0: Port device team_slave_1 added [ 201.824151][ T6446] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 201.862744][ T6446] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 201.956872][ T6446] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 202.011671][ T6446] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 202.035236][ T6446] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 202.135797][ T6446] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 202.632103][ T6451] hsr_slave_0: entered promiscuous mode [ 202.649575][ T6451] hsr_slave_1: entered promiscuous mode [ 202.661382][ T6451] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 202.673429][ T6451] Cannot create hsr debugfs directory [ 202.761350][ T6448] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 202.772485][ T6448] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 202.811699][ T6448] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 203.022331][ T6448] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 203.040646][ T6448] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 203.078565][ T6448] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 203.153061][ T6446] hsr_slave_0: entered promiscuous mode [ 203.168179][ T6446] hsr_slave_1: entered promiscuous mode [ 203.174770][ T6446] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 203.198653][ T6446] Cannot create hsr debugfs directory [ 203.782104][ T6448] hsr_slave_0: entered promiscuous mode [ 203.812930][ T6448] hsr_slave_1: entered promiscuous mode [ 203.842845][ T6448] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 203.871885][ T6448] Cannot create hsr debugfs directory [ 205.577580][ T6452] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 205.625545][ T6452] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 205.653544][ T6452] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 205.789019][ T6452] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 205.909864][ T6444] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 206.027358][ T6444] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 206.070582][ T6444] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 206.162528][ T6444] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 206.279025][ T6446] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 206.368842][ T6446] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 206.401977][ T6446] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 206.576435][ T6446] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 206.879828][ T6451] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 206.984367][ T6451] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 207.120895][ T6451] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 207.178573][ T6451] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 207.250689][ T6452] 8021q: adding VLAN 0 to HW filter on device bond0 [ 207.543244][ T6452] 8021q: adding VLAN 0 to HW filter on device team0 [ 207.564004][ T6444] 8021q: adding VLAN 0 to HW filter on device bond0 [ 207.624607][ T6448] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 207.709881][ T6413] bridge0: port 1(bridge_slave_0) entered blocking state [ 207.717166][ T6413] bridge0: port 1(bridge_slave_0) entered forwarding state [ 207.749330][ T6413] bridge0: port 2(bridge_slave_1) entered blocking state [ 207.756707][ T6413] bridge0: port 2(bridge_slave_1) entered forwarding state [ 207.818136][ T6448] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 207.883344][ T6444] 8021q: adding VLAN 0 to HW filter on device team0 [ 207.954369][ T6446] 8021q: adding VLAN 0 to HW filter on device bond0 [ 207.994472][ T6448] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 208.085376][ T1105] bridge0: port 1(bridge_slave_0) entered blocking state [ 208.092594][ T1105] bridge0: port 1(bridge_slave_0) entered forwarding state [ 208.113505][ T6448] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 208.221937][ T6446] 8021q: adding VLAN 0 to HW filter on device team0 [ 208.279752][ T1105] bridge0: port 2(bridge_slave_1) entered blocking state [ 208.287001][ T1105] bridge0: port 2(bridge_slave_1) entered forwarding state [ 208.429588][ T78] bridge0: port 1(bridge_slave_0) entered blocking state [ 208.436944][ T78] bridge0: port 1(bridge_slave_0) entered forwarding state [ 208.733343][ T78] bridge0: port 2(bridge_slave_1) entered blocking state [ 208.741192][ T78] bridge0: port 2(bridge_slave_1) entered forwarding state [ 208.948409][ T6451] 8021q: adding VLAN 0 to HW filter on device bond0 [ 209.503153][ T6444] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 209.560742][ T6451] 8021q: adding VLAN 0 to HW filter on device team0 [ 209.865845][ T6452] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 209.916302][ T6413] bridge0: port 1(bridge_slave_0) entered blocking state [ 209.923606][ T6413] bridge0: port 1(bridge_slave_0) entered forwarding state [ 209.952803][ T6413] bridge0: port 2(bridge_slave_1) entered blocking state [ 209.960087][ T6413] bridge0: port 2(bridge_slave_1) entered forwarding state [ 210.162769][ T6446] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 210.213146][ T6444] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 210.303357][ T6444] veth0_vlan: entered promiscuous mode [ 210.313497][ T6448] 8021q: adding VLAN 0 to HW filter on device bond0 [ 210.528342][ T6448] 8021q: adding VLAN 0 to HW filter on device team0 [ 210.537119][ T6444] veth1_vlan: entered promiscuous mode [ 210.773175][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 210.780508][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 210.842392][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 210.849661][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 210.919040][ T6452] veth0_vlan: entered promiscuous mode [ 210.959407][ T6446] veth0_vlan: entered promiscuous mode [ 211.032344][ T6452] veth1_vlan: entered promiscuous mode [ 211.173458][ T6451] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 211.270094][ T6446] veth1_vlan: entered promiscuous mode [ 211.744821][ T6448] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 211.889846][ T6452] veth0_macvtap: entered promiscuous mode [ 212.139516][ T6452] veth1_macvtap: entered promiscuous mode [ 212.605204][ T6451] veth0_vlan: entered promiscuous mode [ 212.613054][ T5840] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 212.631337][ T5840] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 212.645654][ T5840] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 212.670104][ T5840] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 212.698415][ T5840] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 212.772425][ T6451] veth1_vlan: entered promiscuous mode [ 212.901576][ T6452] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 213.035043][ T6452] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.095377][ T6452] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 213.162647][ T6452] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.223860][ T6452] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 213.312002][ T6452] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.365305][ T6452] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 213.415659][ T6452] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.481460][ T6452] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 213.999276][ T5840] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 214.008600][ T5840] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 214.017945][ T5840] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 214.026507][ T5840] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 214.038689][ T5840] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 214.228015][ T6452] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 214.282300][ T6452] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.325312][ T6452] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 214.350245][ T6452] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.399867][ T6452] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 214.435068][ T6452] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.471473][ T6452] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 214.506728][ T6448] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 214.654040][ T6452] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.695628][ T6452] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.725272][ T6452] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.734051][ T6452] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.855615][ T5151] Bluetooth: hci5: command tx timeout [ 214.950306][ T6451] veth0_macvtap: entered promiscuous mode [ 215.169561][ T6451] veth1_macvtap: entered promiscuous mode [ 215.627691][ T6451] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 215.677238][ T6451] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.708645][ T6451] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 215.755324][ T6451] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.804978][ T6451] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 215.845115][ T6451] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.875364][ T6451] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 215.925319][ T6451] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.951109][ T6451] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 215.992871][ T6451] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 216.075203][ T6451] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 216.143061][ T5151] Bluetooth: hci1: command tx timeout [ 216.166630][ T1158] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 216.174518][ T1158] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 216.258832][ T6451] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 216.297033][ T6451] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 216.330477][ T6451] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 216.380832][ T6451] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 216.415400][ T6451] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 216.452386][ T6451] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 216.505046][ T6451] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 216.533797][ T6451] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 216.605733][ T6451] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 216.771320][ T6451] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.808724][ T6451] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.851567][ T6451] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.892796][ T6451] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.935555][ T5151] Bluetooth: hci5: command tx timeout [ 217.071407][ T6448] veth0_vlan: entered promiscuous mode [ 217.191899][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 217.225354][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 217.489998][ T6448] veth1_vlan: entered promiscuous mode [ 218.043330][ T6591] chnl_net:caif_netlink_parms(): no params data found [ 218.215143][ T5151] Bluetooth: hci1: command tx timeout [ 218.228487][ T34] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 218.273065][ T6624] loop6: detected capacity change from 0 to 524287999 [ 218.302250][ T34] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 218.316317][ T6598] chnl_net:caif_netlink_parms(): no params data found [ 218.348882][ T6624] netlink: 8 bytes leftover after parsing attributes in process `syz.7.168'. [ 218.808805][ T78] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 218.871912][ T78] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 218.934073][ T6448] veth0_macvtap: entered promiscuous mode [ 219.016076][ T5151] Bluetooth: hci5: command tx timeout [ 219.347012][ T6629] mac80211_hwsim hwsim12 wlan0: entered promiscuous mode [ 219.406317][ T6629] macsec1: entered promiscuous mode [ 219.458215][ T6629] macsec1: entered allmulticast mode [ 219.463694][ T6629] mac80211_hwsim hwsim12 wlan0: entered allmulticast mode [ 219.506183][ T6591] bridge0: port 1(bridge_slave_0) entered blocking state [ 219.514353][ T6591] bridge0: port 1(bridge_slave_0) entered disabled state [ 219.545206][ T6591] bridge_slave_0: entered allmulticast mode [ 219.553429][ T6591] bridge_slave_0: entered promiscuous mode [ 219.567617][ T6591] bridge0: port 2(bridge_slave_1) entered blocking state [ 219.615234][ T6591] bridge0: port 2(bridge_slave_1) entered disabled state [ 219.622594][ T6591] bridge_slave_1: entered allmulticast mode [ 219.689969][ T6591] bridge_slave_1: entered promiscuous mode [ 219.767805][ T6448] veth1_macvtap: entered promiscuous mode [ 220.297175][ T5151] Bluetooth: hci1: command tx timeout [ 220.889263][ T6591] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 220.919236][ T6656] program syz.9.174 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 220.970071][ T6591] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 221.095616][ T5151] Bluetooth: hci5: command tx timeout [ 221.149674][ T6448] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 221.246316][ T6448] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.298166][ T6448] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 221.331868][ T6448] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.370510][ T6448] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 221.400436][ T6448] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.427375][ T6448] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 221.448602][ T6448] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.470991][ T6448] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 221.493337][ T6448] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.530066][ T6448] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 221.553645][ T6448] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.579179][ T6448] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 222.378314][ T5151] Bluetooth: hci1: command tx timeout [ 224.942624][ T6598] bridge0: port 1(bridge_slave_0) entered blocking state [ 224.983251][ T6598] bridge0: port 1(bridge_slave_0) entered disabled state [ 225.006252][ T6598] bridge_slave_0: entered allmulticast mode [ 225.060729][ T6598] bridge_slave_0: entered promiscuous mode [ 225.104657][ T6598] bridge0: port 2(bridge_slave_1) entered blocking state [ 225.137494][ T6598] bridge0: port 2(bridge_slave_1) entered disabled state [ 225.201636][ T6598] bridge_slave_1: entered allmulticast mode [ 225.231079][ T6598] bridge_slave_1: entered promiscuous mode [ 225.343986][ T6448] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 225.411570][ T6448] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.443809][ T6448] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 225.481427][ T6448] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.540501][ T6448] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 225.564390][ T6448] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.584751][ T6448] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 225.616203][ T6448] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.666856][ T6448] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 225.708555][ T6448] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.725019][ T1223] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 225.793671][ T6448] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 225.927410][ T1223] usb 8-1: Using ep0 maxpacket: 16 [ 225.945622][ T6671] loop2: detected capacity change from 0 to 7 [ 225.987191][ T1223] usb 8-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 226.026476][ T6671] Dev loop2: unable to read RDB block 7 [ 226.032411][ T1223] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 226.061389][ T6671] loop2: unable to read partition table [ 226.084472][ T1223] usb 8-1: Product: syz [ 226.096635][ T6671] loop2: partition table beyond EOD, truncated [ 226.105860][ T1223] usb 8-1: Manufacturer: syz [ 226.121418][ T6671] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 226.144494][ T1223] usb 8-1: SerialNumber: syz [ 226.179510][ T6591] team0: Port device team_slave_0 added [ 226.189349][ T1223] usb 8-1: config 0 descriptor?? [ 226.252552][ T6591] team0: Port device team_slave_1 added [ 226.259660][ T1223] ssu100 8-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 226.369297][ T6598] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 226.450360][ T1223] ssu100 8-1:0.0: probe with driver ssu100 failed with error -5 [ 226.506812][ T6598] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 226.729634][ T5151] Bluetooth: Unexpected continuation frame (len 18) [ 226.929679][ T6448] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.975258][ T6448] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.037774][ T6448] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.112055][ T6448] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.476630][ T6591] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 227.524451][ T6591] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 227.646826][ T6591] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 227.776689][ T6598] team0: Port device team_slave_0 added [ 227.828891][ T6598] team0: Port device team_slave_1 added [ 228.104129][ T6591] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 228.136351][ T6591] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 228.327253][ T6591] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 228.774501][ T6698] usb usb8: usbfs: process 6698 (syz.7.182) did not claim interface 0 before use [ 229.730990][ T6598] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 229.816736][ T5894] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 230.170546][ T6598] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 233.020892][ T6598] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 238.856098][ T6598] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 238.863136][ T6598] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 239.115229][ T5894] usb 10-1: device descriptor read/64, error -110 [ 239.400428][ T6598] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 239.465185][ T5894] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 240.407383][ T5894] usb 10-1: device descriptor read/64, error -32 [ 243.337428][ T5894] usb usb10-port1: attempt power cycle [ 246.085072][ T5894] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 246.205062][ T5894] usb 10-1: device descriptor read/8, error -32 [ 246.286707][ T6591] hsr_slave_0: entered promiscuous mode [ 246.380571][ T6591] hsr_slave_1: entered promiscuous mode [ 261.032677][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 271.055218][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 272.076831][ T5894] raw-gadget.1 gadget.9: failed to queue resume event [ 378.244864][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 378.251904][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P13/1:b..l P6451/1:b..l P6680/1:b..l P78/1:b..l P2/1:b..l P6707/1:b..l P1158/1:b..l P5827/1:b..l [ 378.267799][ C1] rcu: (detected by 1, t=10502 jiffies, g=19125, q=534 ncpus=2) [ 378.275607][ C1] task:syz-executor state:R running task stack:20944 pid:5827 tgid:5827 ppid:5825 task_flags:0x400100 flags:0x00004002 [ 378.290108][ C1] Call Trace: [ 378.293513][ C1] [ 378.296481][ C1] __schedule+0x1b88/0x5240 [ 378.301056][ C1] ? preempt_schedule_irq+0xfe/0x1c0 [ 378.306391][ C1] ? __pfx___schedule+0x10/0x10 [ 378.311313][ C1] ? rcu_preempt_deferred_qs_irqrestore+0x8c6/0xcb0 [ 378.317995][ C1] ? preempt_schedule_irq+0xf3/0x1c0 [ 378.323352][ C1] preempt_schedule_irq+0xfe/0x1c0 [ 378.328519][ C1] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 378.334311][ C1] irqentry_exit+0x5e/0x90 [ 378.338772][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 378.344796][ C1] RIP: 0010:lock_acquire+0x167/0x2f0 [ 378.350147][ C1] Code: c7 44 24 10 00 00 00 00 9c 8f 44 24 10 f7 44 24 10 00 02 00 00 0f 85 fd 00 00 00 41 f7 c6 00 02 00 00 74 01 fb 65 48 8b 45 00 <48> 3b 44 24 38 0f 85 72 01 00 00 48 83 c4 40 5b 41 5c 41 5d 41 5e [ 378.369798][ C1] RSP: 0018:ffffc90003fef5c8 EFLAGS: 00000206 [ 378.375913][ C1] RAX: 74c1110940233600 RBX: ffffffff8ed3dfe0 RCX: 74c1110940233600 [ 378.383924][ C1] RDX: 0000000000000000 RSI: ffffffff8e4fd53d RDI: ffffffff8ca1b6a0 [ 378.391935][ C1] RBP: ffffffff9368a020 R08: 0000000000000000 R09: 0000000000000000 [ 378.399948][ C1] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 378.408043][ C1] R13: 0000000000000002 R14: 0000000000000246 R15: 0000000000000000 [ 378.416089][ C1] ? unwind_next_frame+0xb8/0x23b0 [ 378.421259][ C1] ? qlist_free_all+0x9a/0x140 [ 378.426071][ C1] ? unwind_next_frame+0xb8/0x23b0 [ 378.431232][ C1] unwind_next_frame+0xd5/0x23b0 [ 378.436209][ C1] ? unwind_next_frame+0xb8/0x23b0 [ 378.441368][ C1] ? unwind_next_frame+0xb8/0x23b0 [ 378.446543][ C1] ? qlist_free_all+0x9a/0x140 [ 378.451347][ C1] ? qlist_free_all+0x9a/0x140 [ 378.456154][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 378.462364][ C1] arch_stack_walk+0x11e/0x150 [ 378.467178][ C1] ? qlist_free_all+0x9a/0x140 [ 378.471991][ C1] stack_trace_save+0x11a/0x1d0 [ 378.476889][ C1] ? _raw_spin_unlock_irqrestore+0x90/0x140 [ 378.482819][ C1] ? lockdep_hardirqs_on+0x9d/0x150 [ 378.488063][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 378.493489][ C1] ? _raw_spin_unlock_irqrestore+0xde/0x140 [ 378.499433][ C1] ? __lock_acquire+0xad5/0xd80 [ 378.504334][ C1] save_stack+0xfc/0x1f0 [ 378.508657][ C1] ? __pfx_save_stack+0x10/0x10 [ 378.513549][ C1] ? __free_frozen_pages+0xde8/0x10a0 [ 378.518971][ C1] ? __put_partials+0x160/0x1c0 [ 378.523889][ C1] ? put_cpu_partial+0x17e/0x250 [ 378.528867][ C1] ? __slab_free+0x294/0x390 [ 378.533592][ C1] ? qlist_free_all+0x9a/0x140 [ 378.538407][ C1] ? page_ext_put+0x97/0xc0 [ 378.542971][ C1] __reset_page_owner+0x76/0x1e0 [ 378.547969][ C1] __free_frozen_pages+0xde8/0x10a0 [ 378.553217][ C1] __put_partials+0x160/0x1c0 [ 378.557932][ C1] ? put_cpu_partial+0x14e/0x250 [ 378.562915][ C1] put_cpu_partial+0x17e/0x250 [ 378.567894][ C1] ? put_cpu_partial+0x72/0x250 [ 378.572791][ C1] __slab_free+0x294/0x390 [ 378.577253][ C1] ? __phys_addr+0xba/0x170 [ 378.581816][ C1] qlist_free_all+0x9a/0x140 [ 378.586464][ C1] kasan_quarantine_reduce+0x14f/0x170 [ 378.591977][ C1] __kasan_slab_alloc+0x23/0x80 [ 378.596878][ C1] kmem_cache_alloc_noprof+0x1e1/0x390 [ 378.602385][ C1] ? security_file_alloc+0x32/0x310 [ 378.607640][ C1] security_file_alloc+0x32/0x310 [ 378.612714][ C1] init_file+0x90/0x300 [ 378.616915][ C1] alloc_empty_file+0x70/0x1d0 [ 378.621740][ C1] alloc_file_clone+0x58/0xe0 [ 378.626469][ C1] create_pipe_files+0x3e1/0x7d0 [ 378.631471][ C1] __do_pipe_flags+0x48/0x2d0 [ 378.636202][ C1] do_pipe2+0xd6/0x310 [ 378.640320][ C1] ? __pfx_do_pipe2+0x10/0x10 [ 378.645060][ C1] __x64_sys_pipe2+0x5a/0x70 [ 378.649721][ C1] do_syscall_64+0xf3/0x230 [ 378.654283][ C1] ? clear_bhb_loop+0x45/0xa0 [ 378.659460][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 378.665410][ C1] RIP: 0033:0x7f429e38be89 [ 378.669870][ C1] RSP: 002b:00007ffddbd63098 EFLAGS: 00000246 ORIG_RAX: 0000000000000125 [ 378.678339][ C1] RAX: ffffffffffffffda RBX: 000055557866ff20 RCX: 00007f429e38be89 [ 378.686398][ C1] RDX: 0000000000000003 RSI: 0000000000000000 RDI: 00007ffddbd630a8 [ 378.694409][ C1] RBP: 00007ffddbd63460 R08: 0000000000000007 R09: 000055557866f630 [ 378.702463][ C1] R10: 0d909235c7df7d43 R11: 0000000000000246 R12: 000055557866fdb0 [ 378.710484][ C1] R13: 00005555786743b0 R14: 00007ffddbd631e0 R15: 0000555578679708 [ 378.718530][ C1] [ 378.721585][ C1] task:kworker/u8:7 state:R running task stack:21384 pid:1158 tgid:1158 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 378.735220][ C1] Workqueue: events_unbound cfg80211_wiphy_work [ 378.741529][ C1] Call Trace: [ 378.744839][ C1] [ 378.747810][ C1] __schedule+0x1b88/0x5240 [ 378.752365][ C1] ? unwind_next_frame+0xb8/0x23b0 [ 378.757529][ C1] ? unwind_next_frame+0xb8/0x23b0 [ 378.762746][ C1] ? preempt_schedule_irq+0xfe/0x1c0 [ 378.768093][ C1] ? __pfx___schedule+0x10/0x10 [ 378.773006][ C1] ? __lock_acquire+0xad5/0xd80 [ 378.778451][ C1] ? preempt_schedule_irq+0xf3/0x1c0 [ 378.785645][ C1] preempt_schedule_irq+0xfe/0x1c0 [ 378.790909][ C1] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 378.796702][ C1] irqentry_exit+0x5e/0x90 [ 378.801161][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 378.807184][ C1] RIP: 0010:lock_release+0x244/0x3e0 [ 378.812515][ C1] Code: 48 c7 44 24 20 00 00 00 00 9c 8f 44 24 20 f7 44 24 20 00 02 00 00 0f 85 c3 00 00 00 41 f7 c6 00 02 00 00 74 01 fb 65 48 8b 03 <48> 3b 44 24 28 0f 85 82 01 00 00 48 83 c4 30 5b 41 5c 41 5d 41 5e [ 378.832166][ C1] RSP: 0018:ffffc90003f5e960 EFLAGS: 00000206 [ 378.838291][ C1] RAX: 155931a4948f1700 RBX: ffffffff9368a020 RCX: 0000000000000003 [ 378.846311][ C1] RDX: dffffc0000000000 RSI: ffffffff8e4fd53d RDI: ffffffff8ca1b6a0 [ 378.854324][ C1] RBP: ffff8880272fa968 R08: ffffc90003f5ff20 R09: 0000000000000000 [ 378.862335][ C1] R10: ffffc90003f5eaf0 R11: fffff520007ebd60 R12: 0000000000000003 [ 378.870398][ C1] R13: ffff8880272f9e00 R14: 0000000000000206 R15: ffffffff8ed3dfe0 [ 378.878442][ C1] ? unwind_next_frame+0xb8/0x23b0 [ 378.883612][ C1] ? unwind_next_frame+0xb8/0x23b0 [ 378.888784][ C1] unwind_next_frame+0x1a9f/0x23b0 [ 378.893953][ C1] ? unwind_next_frame+0xb8/0x23b0 [ 378.899115][ C1] ? kthread+0x7b7/0x940 [ 378.903413][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 378.909618][ C1] arch_stack_walk+0x11e/0x150 [ 378.914436][ C1] ? ret_from_fork+0x4b/0x80 [ 378.919080][ C1] stack_trace_save+0x11a/0x1d0 [ 378.923977][ C1] ? process_scheduled_works+0xac3/0x18e0 [ 378.929771][ C1] ? worker_thread+0x870/0xd50 [ 378.934582][ C1] ? kthread+0x7b7/0x940 [ 378.938880][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 378.944321][ C1] kasan_save_track+0x3f/0x80 [ 378.949036][ C1] ? kasan_save_track+0x3f/0x80 [ 378.953922][ C1] ? __kasan_kmalloc+0x9d/0xb0 [ 378.958723][ C1] ? __kmalloc_noprof+0x28e/0x4d0 [ 378.963790][ C1] ? cfg80211_inform_single_bss_data+0xb46/0x1ed0 [ 378.970241][ C1] ? cfg80211_inform_bss_data+0x3c5/0x5860 [ 378.976083][ C1] ? cfg80211_inform_bss_frame_data+0x3c5/0x720 [ 378.982377][ C1] ? ieee80211_bss_info_update+0x8ac/0xbc0 [ 378.988227][ C1] ? ieee80211_ibss_rx_queued_mgmt+0x19ce/0x2e20 [ 378.994593][ C1] ? ieee80211_iface_work+0x933/0x1100 [ 379.000094][ C1] ? cfg80211_wiphy_work+0x2f0/0x490 [ 379.005450][ C1] ? process_scheduled_works+0xac3/0x18e0 [ 379.011209][ C1] ? worker_thread+0x870/0xd50 [ 379.016015][ C1] ? kthread+0x7b7/0x940 [ 379.020352][ C1] __kasan_kmalloc+0x9d/0xb0 [ 379.024996][ C1] __kmalloc_noprof+0x28e/0x4d0 [ 379.029896][ C1] ? cfg80211_inform_single_bss_data+0xb46/0x1ed0 [ 379.036360][ C1] cfg80211_inform_single_bss_data+0xb46/0x1ed0 [ 379.042652][ C1] ? __lock_acquire+0xad5/0xd80 [ 379.047551][ C1] ? __pfx_cfg80211_inform_single_bss_data+0x10/0x10 [ 379.054298][ C1] ? unwind_next_frame+0xb8/0x23b0 [ 379.059456][ C1] ? cfg80211_inform_bss_data+0x3ad/0x5860 [ 379.065403][ C1] cfg80211_inform_bss_data+0x3c5/0x5860 [ 379.071139][ C1] ? __pfx_cfg80211_inform_bss_data+0x10/0x10 [ 379.077273][ C1] ? __pfx__ieee802_11_parse_elems_full+0x10/0x10 [ 379.083741][ C1] ? rcu_is_watching+0x15/0xb0 [ 379.088546][ C1] ? cfg80211_find_elem_match+0x1af/0x1f0 [ 379.094307][ C1] ? cfg80211_defragment_element+0xbc/0x320 [ 379.100262][ C1] cfg80211_inform_bss_frame_data+0x3c5/0x720 [ 379.106385][ C1] ? ieee80211_bss_info_update+0x3db/0xbc0 [ 379.112250][ C1] ieee80211_bss_info_update+0x8ac/0xbc0 [ 379.117929][ C1] ? __pfx_ieee80211_bss_info_update+0x10/0x10 [ 379.124219][ C1] ? ieee80211_ibss_rx_queued_mgmt+0xffd/0x2e20 [ 379.130507][ C1] ieee80211_ibss_rx_queued_mgmt+0x19ce/0x2e20 [ 379.136723][ C1] ? ieee80211_ibss_rx_queued_mgmt+0xffd/0x2e20 [ 379.143002][ C1] ? __lock_acquire+0xad5/0xd80 [ 379.147891][ C1] ? __pfx_ieee80211_ibss_rx_queued_mgmt+0x10/0x10 [ 379.154444][ C1] ? do_raw_spin_lock+0x151/0x370 [ 379.159516][ C1] ? __lock_acquire+0xad5/0xd80 [ 379.164440][ C1] ? do_raw_spin_lock+0x151/0x370 [ 379.169535][ C1] ieee80211_iface_work+0x933/0x1100 [ 379.174872][ C1] cfg80211_wiphy_work+0x2f0/0x490 [ 379.180033][ C1] ? process_scheduled_works+0x9cb/0x18e0 [ 379.185874][ C1] process_scheduled_works+0xac3/0x18e0 [ 379.191486][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 379.197515][ C1] ? assign_work+0x367/0x3d0 [ 379.202157][ C1] worker_thread+0x870/0xd50 [ 379.206805][ C1] ? __kthread_parkme+0x1a8/0x200 [ 379.211882][ C1] ? __pfx_worker_thread+0x10/0x10 [ 379.217035][ C1] kthread+0x7b7/0x940 [ 379.221145][ C1] ? __pfx_worker_thread+0x10/0x10 [ 379.226293][ C1] ? __pfx_kthread+0x10/0x10 [ 379.230919][ C1] ? __pfx_kthread+0x10/0x10 [ 379.235547][ C1] ? __pfx_kthread+0x10/0x10 [ 379.240180][ C1] ? __pfx_kthread+0x10/0x10 [ 379.244809][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 379.250037][ C1] ? lockdep_hardirqs_on+0x9d/0x150 [ 379.255284][ C1] ? __pfx_kthread+0x10/0x10 [ 379.259918][ C1] ret_from_fork+0x4b/0x80 [ 379.264391][ C1] ? __pfx_kthread+0x10/0x10 [ 379.269028][ C1] ret_from_fork_asm+0x1a/0x30 [ 379.273842][ C1] [ 379.276892][ C1] task:syz-executor state:R running task stack:23624 pid:6707 tgid:6707 ppid:5827 task_flags:0x400000 flags:0x00000000 [ 379.290433][ C1] Call Trace: [ 379.293737][ C1] [ 379.296702][ C1] __schedule+0x1b88/0x5240 [ 379.301261][ C1] ? preempt_schedule_notrace+0x103/0x140 [ 379.307021][ C1] ? __pfx___schedule+0x10/0x10 [ 379.311907][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 379.318107][ C1] ? kernel_text_address+0xa7/0xe0 [ 379.323249][ C1] ? __kernel_text_address+0xd/0x40 [ 379.328500][ C1] ? arch_stack_walk+0xff/0x150 [ 379.333406][ C1] preempt_schedule_notrace+0x103/0x140 [ 379.338994][ C1] ? __pfx_preempt_schedule_notrace+0x10/0x10 [ 379.345095][ C1] ? lockdep_hardirqs_on+0x9d/0x150 [ 379.350345][ C1] preempt_schedule_notrace_thunk+0x16/0x30 [ 379.356292][ C1] ? unwind_next_frame+0xb8/0x23b0 [ 379.361437][ C1] rcu_is_watching+0x7e/0xb0 [ 379.366084][ C1] lock_release+0x4e/0x3e0 [ 379.370537][ C1] ? deref_stack_reg+0x17c/0x210 [ 379.375524][ C1] ? unwind_next_frame+0xb8/0x23b0 [ 379.380670][ C1] unwind_next_frame+0x1a9f/0x23b0 [ 379.385911][ C1] ? unwind_next_frame+0xb8/0x23b0 [ 379.391063][ C1] ? do_sys_openat2+0x12b/0x1d0 [ 379.395958][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 379.402152][ C1] arch_stack_walk+0x11e/0x150 [ 379.406962][ C1] ? __x64_sys_openat+0x249/0x2a0 [ 379.412035][ C1] stack_trace_save+0x11a/0x1d0 [ 379.417190][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 379.422610][ C1] ? _raw_spin_unlock_irqrestore+0xde/0x140 [ 379.428639][ C1] save_stack+0xfc/0x1f0 [ 379.432923][ C1] ? __pfx_save_stack+0x10/0x10 [ 379.437813][ C1] ? __free_frozen_pages+0xde8/0x10a0 [ 379.443212][ C1] ? __put_partials+0x160/0x1c0 [ 379.448092][ C1] ? put_cpu_partial+0x17e/0x250 [ 379.453057][ C1] ? __slab_free+0x294/0x390 [ 379.457765][ C1] ? qlist_free_all+0x9a/0x140 [ 379.462559][ C1] ? kasan_quarantine_reduce+0x14f/0x170 [ 379.468222][ C1] ? __kasan_slab_alloc+0x23/0x80 [ 379.473280][ C1] ? kmem_cache_alloc_noprof+0x1e1/0x390 [ 379.478956][ C1] ? alloc_empty_file+0x56/0x1d0 [ 379.483938][ C1] ? path_openat+0x10d/0x35d0 [ 379.488648][ C1] ? do_filp_open+0x284/0x4e0 [ 379.493367][ C1] ? do_sys_openat2+0x12b/0x1d0 [ 379.498268][ C1] ? page_ext_put+0x97/0xc0 [ 379.502913][ C1] __reset_page_owner+0x76/0x1e0 [ 379.508615][ C1] __free_frozen_pages+0xde8/0x10a0 [ 379.513952][ C1] __put_partials+0x160/0x1c0 [ 379.520679][ C1] ? put_cpu_partial+0x14e/0x250 [ 379.525753][ C1] put_cpu_partial+0x17e/0x250 [ 379.531072][ C1] ? put_cpu_partial+0x72/0x250 [ 379.536061][ C1] __slab_free+0x294/0x390 [ 379.540533][ C1] ? __phys_addr+0xba/0x170 [ 379.545329][ C1] qlist_free_all+0x9a/0x140 [ 379.549994][ C1] kasan_quarantine_reduce+0x14f/0x170 [ 379.555509][ C1] __kasan_slab_alloc+0x23/0x80 [ 379.560409][ C1] kmem_cache_alloc_noprof+0x1e1/0x390 [ 379.565914][ C1] ? alloc_empty_file+0x56/0x1d0 [ 379.570992][ C1] alloc_empty_file+0x56/0x1d0 [ 379.575802][ C1] path_openat+0x10d/0x35d0 [ 379.580347][ C1] ? stack_trace_save+0x11a/0x1d0 [ 379.585414][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 379.590858][ C1] ? stack_depot_save_flags+0x44/0x940 [ 379.596353][ C1] ? __lock_acquire+0xad5/0xd80 [ 379.601252][ C1] ? kasan_save_track+0x51/0x80 [ 379.606152][ C1] ? kasan_save_track+0x3f/0x80 [ 379.611042][ C1] ? __kasan_slab_alloc+0x66/0x80 [ 379.616117][ C1] ? kmem_cache_alloc_noprof+0x1e1/0x390 [ 379.621807][ C1] ? getname_flags+0xb6/0x530 [ 379.626555][ C1] ? __pfx_path_openat+0x10/0x10 [ 379.631540][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 379.637761][ C1] do_filp_open+0x284/0x4e0 [ 379.642313][ C1] ? __pfx_do_filp_open+0x10/0x10 [ 379.647379][ C1] ? do_raw_spin_lock+0x151/0x370 [ 379.652719][ C1] do_sys_openat2+0x12b/0x1d0 [ 379.658077][ C1] ? __pfx_do_sys_openat2+0x10/0x10 [ 379.663801][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 379.669132][ C1] ? blkcg_maybe_throttle_current+0x1ad/0xbb0 [ 379.675267][ C1] __x64_sys_openat+0x249/0x2a0 [ 379.680189][ C1] ? __pfx___x64_sys_openat+0x10/0x10 [ 379.685623][ C1] ? do_syscall_64+0xb6/0x230 [ 379.690350][ C1] do_syscall_64+0xf3/0x230 [ 379.694997][ C1] ? clear_bhb_loop+0x45/0xa0 [ 379.699722][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 379.705672][ C1] RIP: 0033:0x7f182978ba51 [ 379.710128][ C1] RSP: 002b:00007ffc83c60e70 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 379.718591][ C1] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f182978ba51 [ 379.726621][ C1] RDX: 0000000000000002 RSI: 00007f182980e345 RDI: 00000000ffffff9c [ 379.734889][ C1] RBP: 00007f182980e345 R08: 00000000000000da R09: 0000000000000000 [ 379.742904][ C1] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 379.750916][ C1] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000000 [ 379.759128][ C1] [ 379.762183][ C1] task:kthreadd state:R running task stack:25832 pid:2 tgid:2 ppid:0 task_flags:0x208040 flags:0x00004000 [ 379.775904][ C1] Call Trace: [ 379.779307][ C1] [ 379.782309][ C1] __schedule+0x1b88/0x5240 [ 379.786972][ C1] ? preempt_schedule_irq+0xfe/0x1c0 [ 379.792304][ C1] ? __pfx___schedule+0x10/0x10 [ 379.797209][ C1] ? __lock_acquire+0xad5/0xd80 [ 379.802296][ C1] ? preempt_schedule_irq+0xf3/0x1c0 [ 379.807635][ C1] preempt_schedule_irq+0xfe/0x1c0 [ 379.812878][ C1] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 379.818653][ C1] irqentry_exit+0x5e/0x90 [ 379.823108][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 379.829144][ C1] RIP: 0010:lock_release+0x5/0x3e0 [ 379.834480][ C1] Code: 8b 7c 24 18 e9 92 f9 ff ff 66 66 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 55 <41> 57 41 56 41 55 41 54 53 48 83 ec 30 48 89 f5 49 89 ff 48 c7 c3 [ 379.854131][ C1] RSP: 0018:ffffc90000077298 EFLAGS: 00000202 [ 379.860293][ C1] RAX: 0000000000000001 RBX: ffffc90000077380 RCX: ffff88801c681e00 [ 379.868334][ C1] RDX: dffffc0000000000 RSI: ffffffff816dfbc8 RDI: ffffffff8ed3dfe0 [ 379.876371][ C1] RBP: dffffc0000000001 R08: ffffc900000778a0 R09: 0000000000000000 [ 379.884379][ C1] R10: ffffc900000773d0 R11: fffff5200000ee7c R12: ffffc90000077390 [ 379.892385][ C1] R13: dffffc0000000000 R14: ffffc900000778b0 R15: ffffffff816dfbc8 [ 379.900394][ C1] ? unwind_next_frame+0xb8/0x23b0 [ 379.905598][ C1] ? unwind_next_frame+0xb8/0x23b0 [ 379.910754][ C1] unwind_next_frame+0x1a9f/0x23b0 [ 379.915914][ C1] ? unwind_next_frame+0xb8/0x23b0 [ 379.921066][ C1] ? kasan_quarantine_reduce+0x14f/0x170 [ 379.926751][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 379.932974][ C1] arch_stack_walk+0x11e/0x150 [ 379.937802][ C1] ? __kasan_slab_alloc+0x23/0x80 [ 379.942901][ C1] stack_trace_save+0x11a/0x1d0 [ 379.947804][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 379.953231][ C1] ? _raw_spin_unlock_irqrestore+0xde/0x140 [ 379.959175][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 379.965558][ C1] save_stack+0xfc/0x1f0 [ 379.969874][ C1] ? __pfx_save_stack+0x10/0x10 [ 379.974763][ C1] ? __free_frozen_pages+0xde8/0x10a0 [ 379.980176][ C1] ? __put_partials+0x160/0x1c0 [ 379.985065][ C1] ? put_cpu_partial+0x17e/0x250 [ 379.990039][ C1] ? __slab_free+0x294/0x390 [ 379.994674][ C1] ? qlist_free_all+0x9a/0x140 [ 379.999479][ C1] ? kasan_quarantine_reduce+0x14f/0x170 [ 380.005184][ C1] ? page_ext_put+0x97/0xc0 [ 380.009779][ C1] __reset_page_owner+0x76/0x1e0 [ 380.014770][ C1] __free_frozen_pages+0xde8/0x10a0 [ 380.020042][ C1] __put_partials+0x160/0x1c0 [ 380.024763][ C1] put_cpu_partial+0x17e/0x250 [ 380.029563][ C1] ? put_cpu_partial+0x72/0x250 [ 380.034492][ C1] __slab_free+0x294/0x390 [ 380.038973][ C1] ? __phys_addr+0xba/0x170 [ 380.043579][ C1] qlist_free_all+0x9a/0x140 [ 380.048231][ C1] kasan_quarantine_reduce+0x14f/0x170 [ 380.053802][ C1] __kasan_slab_alloc+0x23/0x80 [ 380.058718][ C1] __kmalloc_noprof+0x238/0x4d0 [ 380.063799][ C1] ? security_task_alloc+0x4a/0x340 [ 380.069139][ C1] security_task_alloc+0x4a/0x340 [ 380.074210][ C1] copy_process+0x1605/0x3d10 [ 380.078942][ C1] ? copy_process+0xa07/0x3d10 [ 380.083752][ C1] ? __pfx_copy_process+0x10/0x10 [ 380.088822][ C1] ? finish_task_switch+0x1e5/0x870 [ 380.094063][ C1] kernel_clone+0x242/0x930 [ 380.098609][ C1] ? trace_sched_exit_tp+0x3c/0x120 [ 380.103933][ C1] ? __pfx_kernel_clone+0x10/0x10 [ 380.109054][ C1] kernel_thread+0x1c2/0x250 [ 380.113717][ C1] ? __pfx_kthread+0x10/0x10 [ 380.118355][ C1] ? __pfx_kernel_thread+0x10/0x10 [ 380.123521][ C1] ? __pfx_kthread+0x10/0x10 [ 380.128169][ C1] ? do_raw_spin_unlock+0x13c/0x8b0 [ 380.133422][ C1] kthreadd+0x621/0x850 [ 380.137676][ C1] ? kthreadd+0x3ac/0x850 [ 380.142064][ C1] ? __pfx_kthreadd+0x10/0x10 [ 380.146796][ C1] ? __pfx_kthreadd+0x10/0x10 [ 380.151522][ C1] ? __pfx_kthreadd+0x10/0x10 [ 380.156252][ C1] ? __pfx_kthreadd+0x10/0x10 [ 380.160971][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 380.166204][ C1] ? lockdep_hardirqs_on+0x9d/0x150 [ 380.171448][ C1] ? __pfx_kthreadd+0x10/0x10 [ 380.176180][ C1] ret_from_fork+0x4b/0x80 [ 380.180631][ C1] ? __pfx_kthreadd+0x10/0x10 [ 380.185350][ C1] ret_from_fork_asm+0x1a/0x30 [ 380.190175][ C1] [ 380.193227][ C1] task:kworker/u8:4 state:R running task stack:23656 pid:78 tgid:78 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 380.207038][ C1] Workqueue: events_unbound cfg80211_wiphy_work [ 380.213344][ C1] Call Trace: [ 380.216661][ C1] [ 380.219625][ C1] __schedule+0x1b88/0x5240 [ 380.224186][ C1] ? preempt_schedule_irq+0xfe/0x1c0 [ 380.229516][ C1] ? __pfx___schedule+0x10/0x10 [ 380.234418][ C1] ? __local_bh_enable_ip+0x168/0x200 [ 380.239830][ C1] ? lockdep_hardirqs_on+0x9d/0x150 [ 380.245085][ C1] ? preempt_schedule_irq+0xf3/0x1c0 [ 380.250420][ C1] preempt_schedule_irq+0xfe/0x1c0 [ 380.255586][ C1] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 380.261365][ C1] irqentry_exit+0x5e/0x90 [ 380.265823][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 380.271845][ C1] RIP: 0010:unwind_next_frame+0x1ad/0x23b0 [ 380.277702][ C1] Code: 0f b6 44 2d 00 84 c0 0f 85 7d 1a 00 00 4d 0f be 26 48 8b 44 24 38 42 80 3c 28 00 48 8b 5c 24 10 74 08 48 89 df e8 c3 80 bf 00 <4c> 03 23 49 ff cc 4c 89 7c 24 48 4c 89 74 24 08 48 89 6c 24 20 0f [ 380.297358][ C1] RSP: 0018:ffffc90001597008 EFLAGS: 00000246 [ 380.303561][ C1] RAX: 1ffff920002b2e25 RBX: ffffc90001597128 RCX: ffff88801cbe3c00 [ 380.311573][ C1] RDX: 0000000000000000 RSI: ffffffff8ca1b680 RDI: ffffffff8ca1b640 [ 380.319606][ C1] RBP: 1ffff920002b2e22 R08: 0000000000000000 R09: 0000000000000000 [ 380.327642][ C1] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 380.335653][ C1] R13: dffffc0000000000 R14: ffffc90001597115 R15: ffffffff816dfbc8 [ 380.343665][ C1] ? unwind_next_frame+0xb8/0x23b0 [ 380.348851][ C1] ? unwind_next_frame+0xe7/0x23b0 [ 380.354014][ C1] ? unwind_next_frame+0xb8/0x23b0 [ 380.359181][ C1] ? ieee802_11_parse_elems_full+0x16d/0x2f10 [ 380.365420][ C1] ? ieee802_11_parse_elems_full+0x16d/0x2f10 [ 380.371544][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 380.377749][ C1] arch_stack_walk+0x11e/0x150 [ 380.382564][ C1] ? ieee802_11_parse_elems_full+0x16d/0x2f10 [ 380.388685][ C1] stack_trace_save+0x11a/0x1d0 [ 380.393590][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 380.399021][ C1] ? unwind_next_frame+0xb8/0x23b0 [ 380.404183][ C1] kasan_save_track+0x3f/0x80 [ 380.408903][ C1] ? kasan_save_track+0x3f/0x80 [ 380.413791][ C1] ? __kasan_kmalloc+0x9d/0xb0 [ 380.418595][ C1] ? __kmalloc_noprof+0x28e/0x4d0 [ 380.423875][ C1] ? ieee802_11_parse_elems_full+0x16d/0x2f10 [ 380.430063][ C1] __kasan_kmalloc+0x9d/0xb0 [ 380.434702][ C1] __kmalloc_noprof+0x28e/0x4d0 [ 380.439611][ C1] ? ieee802_11_parse_elems_full+0x16d/0x2f10 [ 380.445733][ C1] ieee802_11_parse_elems_full+0x16d/0x2f10 [ 380.451720][ C1] ? do_raw_spin_lock+0x151/0x370 [ 380.456818][ C1] ? _raw_spin_unlock_irqrestore+0xde/0x140 [ 380.462757][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 380.469136][ C1] ? __pfx_ieee802_11_parse_elems_full+0x10/0x10 [ 380.475531][ C1] ? _raw_spin_unlock_irqrestore+0x90/0x140 [ 380.481462][ C1] ? lockdep_hardirqs_on+0x9d/0x150 [ 380.486755][ C1] ieee80211_ibss_rx_queued_mgmt+0x4e6/0x2e20 [ 380.492887][ C1] ? __lock_acquire+0xad5/0xd80 [ 380.497777][ C1] ? __pfx_ieee80211_ibss_rx_queued_mgmt+0x10/0x10 [ 380.504337][ C1] ? do_raw_spin_lock+0x151/0x370 [ 380.509507][ C1] ? __lock_acquire+0xad5/0xd80 [ 380.514579][ C1] ? do_raw_spin_lock+0x151/0x370 [ 380.519712][ C1] ieee80211_iface_work+0x933/0x1100 [ 380.525051][ C1] cfg80211_wiphy_work+0x2f0/0x490 [ 380.530212][ C1] ? process_scheduled_works+0x9cb/0x18e0 [ 380.535967][ C1] process_scheduled_works+0xac3/0x18e0 [ 380.541596][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 380.547632][ C1] ? assign_work+0x367/0x3d0 [ 380.552271][ C1] worker_thread+0x870/0xd50 [ 380.556953][ C1] ? __kthread_parkme+0x1a8/0x200 [ 380.562024][ C1] ? __pfx_worker_thread+0x10/0x10 [ 380.567189][ C1] kthread+0x7b7/0x940 [ 380.571307][ C1] ? __pfx_worker_thread+0x10/0x10 [ 380.576896][ C1] ? __pfx_kthread+0x10/0x10 [ 380.581543][ C1] ? __pfx_kthread+0x10/0x10 [ 380.586191][ C1] ? __pfx_kthread+0x10/0x10 [ 380.590827][ C1] ? __pfx_kthread+0x10/0x10 [ 380.595466][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 380.600729][ C1] ? lockdep_hardirqs_on+0x9d/0x150 [ 380.605962][ C1] ? __pfx_kthread+0x10/0x10 [ 380.610626][ C1] ret_from_fork+0x4b/0x80 [ 380.615080][ C1] ? __pfx_kthread+0x10/0x10 [ 380.619723][ C1] ret_from_fork_asm+0x1a/0x30 [ 380.624548][ C1] [ 380.627598][ C1] task:syz.7.178 state:R running task stack:21568 pid:6680 tgid:6680 ppid:6452 task_flags:0x40064c flags:0x00004006 [ 380.641316][ C1] Call Trace: [ 380.644633][ C1] [ 380.647771][ C1] __schedule+0x1b88/0x5240 [ 380.652354][ C1] ? __pfx_cgroup_rstat_updated+0x10/0x10 [ 380.658115][ C1] ? preempt_schedule_common+0x84/0xd0 [ 380.663619][ C1] ? __pfx___schedule+0x10/0x10 [ 380.668517][ C1] ? do_raw_spin_lock+0x151/0x370 [ 380.673612][ C1] ? preempt_schedule+0xe4/0xf0 [ 380.678682][ C1] preempt_schedule_common+0x84/0xd0 [ 380.684290][ C1] preempt_schedule+0xe4/0xf0 [ 380.689018][ C1] ? __pfx_preempt_schedule+0x10/0x10 [ 380.694428][ C1] ? _raw_spin_unlock_irqrestore+0xde/0x140 [ 380.700409][ C1] preempt_schedule_thunk+0x16/0x30 [ 380.705657][ C1] _raw_spin_unlock+0x3e/0x50 [ 380.710370][ C1] unmap_page_range+0x39c5/0x44d0 [ 380.715491][ C1] ? __pfx_unmap_page_range+0x10/0x10 [ 380.720909][ C1] ? _raw_spin_unlock_irqrestore+0x90/0x140 [ 380.726877][ C1] ? lockdep_hardirqs_on+0x9d/0x150 [ 380.732129][ C1] ? __lock_acquire+0xad5/0xd80 [ 380.737028][ C1] ? uprobe_munmap+0x180/0x460 [ 380.741842][ C1] ? unmap_single_vma+0x1ba/0x2a0 [ 380.746947][ C1] unmap_vmas+0x3ce/0x5f0 [ 380.751328][ C1] ? __pfx_unmap_vmas+0x10/0x10 [ 380.756242][ C1] ? tlb_gather_mmu_fullmm+0x160/0x210 [ 380.761760][ C1] exit_mmap+0x2bc/0xde0 [ 380.766062][ C1] ? uprobe_clear_state+0x20e/0x290 [ 380.771324][ C1] ? __pfx_exit_mmap+0x10/0x10 [ 380.776142][ C1] ? __pfx_exit_aio+0x10/0x10 [ 380.780886][ C1] ? uprobe_clear_state+0x271/0x290 [ 380.786129][ C1] ? mm_update_next_owner+0xa4/0x810 [ 380.791473][ C1] __mmput+0x115/0x420 [ 380.795583][ C1] exit_mm+0x221/0x310 [ 380.799698][ C1] ? __pfx_exit_mm+0x10/0x10 [ 380.804328][ C1] ? taskstats_exit+0x326/0xa60 [ 380.809226][ C1] do_exit+0x994/0x27f0 [ 380.813443][ C1] ? __pfx_do_exit+0x10/0x10 [ 380.818080][ C1] ? proc_coredump_connector+0x1fe/0x6a0 [ 380.823769][ C1] do_group_exit+0x207/0x2c0 [ 380.828403][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 380.833655][ C1] ? lockdep_hardirqs_on+0x9d/0x150 [ 380.838904][ C1] get_signal+0x1696/0x1730 [ 380.843475][ C1] ? __pfx_get_signal+0x10/0x10 [ 380.848373][ C1] arch_do_signal_or_restart+0x98/0x840 [ 380.853974][ C1] ? rcu_is_watching+0x15/0xb0 [ 380.858788][ C1] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 380.865007][ C1] ? __bad_area_nosemaphore+0x451/0x770 [ 380.870637][ C1] ? irqentry_exit_to_user_mode+0x53/0x250 [ 380.876499][ C1] irqentry_exit_to_user_mode+0x7e/0x250 [ 380.882184][ C1] exc_page_fault+0x5f8/0x920 [ 380.886930][ C1] asm_exc_page_fault+0x26/0x30 [ 380.891832][ C1] RIP: 0033:0x7f71fd58d171 [ 380.896289][ C1] RSP: 002b:00000000fffffeb0 EFLAGS: 00010217 [ 380.902410][ C1] RAX: 0000000000000000 RBX: 00007f71fd7a5fa0 RCX: 00007f71fd58d169 [ 380.910453][ C1] RDX: 0000000000000000 RSI: 00000000fffffeb0 RDI: 0000000002000400 [ 380.918465][ C1] RBP: 00007f71fd60e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 380.926472][ C1] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 380.934506][ C1] R13: 0000000000000000 R14: 00007f71fd7a5fa0 R15: 00007f71fd8cfa28 [ 380.942547][ C1] [ 380.945600][ C1] task:syz-executor state:R running task stack:20872 pid:6451 tgid:6451 ppid:1 task_flags:0x40054c flags:0x00004004 [ 380.959270][ C1] Call Trace: [ 380.962589][ C1] [ 380.965602][ C1] __schedule+0x1b88/0x5240 [ 380.970174][ C1] ? preempt_schedule_irq+0xfe/0x1c0 [ 380.975551][ C1] ? __pfx___schedule+0x10/0x10 [ 380.980447][ C1] ? __lock_acquire+0xad5/0xd80 [ 380.985344][ C1] ? preempt_schedule_irq+0xf3/0x1c0 [ 380.990684][ C1] preempt_schedule_irq+0xfe/0x1c0 [ 380.995843][ C1] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 381.001653][ C1] irqentry_exit+0x5e/0x90 [ 381.006107][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 381.012127][ C1] RIP: 0010:lock_release+0x244/0x3e0 [ 381.017479][ C1] Code: 48 c7 44 24 20 00 00 00 00 9c 8f 44 24 20 f7 44 24 20 00 02 00 00 0f 85 c3 00 00 00 41 f7 c6 00 02 00 00 74 01 fb 65 48 8b 03 <48> 3b 44 24 28 0f 85 82 01 00 00 48 83 c4 30 5b 41 5c 41 5d 41 5e [ 381.037132][ C1] RSP: 0018:ffffc9000404f1e0 EFLAGS: 00000206 [ 381.043247][ C1] RAX: 801101d82d95fa00 RBX: ffffffff9368a020 RCX: 0000000000000001 [ 381.051280][ C1] RDX: dffffc0000000000 RSI: ffffffff8e4fd53d RDI: ffffffff8ca1b6a0 [ 381.059292][ C1] RBP: ffff8880262e2918 R08: ffffc9000404fdb0 R09: 0000000000000000 [ 381.067397][ C1] R10: ffffc9000404f370 R11: fffff52000809e70 R12: 0000000000000001 [ 381.075409][ C1] R13: ffff8880262e1e00 R14: 0000000000000206 R15: ffffffff8ed3dfe0 [ 381.083453][ C1] ? unwind_next_frame+0xb8/0x23b0 [ 381.088654][ C1] ? unwind_next_frame+0xb8/0x23b0 [ 381.093823][ C1] unwind_next_frame+0x1a9f/0x23b0 [ 381.098988][ C1] ? unwind_next_frame+0xb8/0x23b0 [ 381.104147][ C1] ? get_signal+0x1696/0x1730 [ 381.108882][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 381.115086][ C1] arch_stack_walk+0x11e/0x150 [ 381.119902][ C1] ? arch_do_signal_or_restart+0x98/0x840 [ 381.125688][ C1] stack_trace_save+0x11a/0x1d0 [ 381.130599][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 381.136025][ C1] ? do_raw_spin_lock+0x151/0x370 [ 381.141124][ C1] kasan_save_track+0x3f/0x80 [ 381.145842][ C1] ? kasan_save_track+0x3f/0x80 [ 381.150755][ C1] ? kasan_save_free_info+0x40/0x50 [ 381.155990][ C1] ? __kasan_slab_free+0x59/0x70 [ 381.160974][ C1] ? kfree+0x198/0x430 [ 381.165087][ C1] ? vm_area_free+0x78/0x140 [ 381.169724][ C1] ? exit_mmap+0x73e/0xde0 [ 381.174187][ C1] ? __mmput+0x115/0x420 [ 381.178460][ C1] ? exit_mm+0x221/0x310 [ 381.182784][ C1] ? do_exit+0x994/0x27f0 [ 381.187150][ C1] ? do_group_exit+0x207/0x2c0 [ 381.191952][ C1] ? get_signal+0x1696/0x1730 [ 381.196736][ C1] kasan_save_free_info+0x40/0x50 [ 381.201815][ C1] __kasan_slab_free+0x59/0x70 [ 381.206620][ C1] kfree+0x198/0x430 [ 381.210650][ C1] ? vm_area_free+0x78/0x140 [ 381.215286][ C1] ? mas_find+0x950/0xbb0 [ 381.219670][ C1] vm_area_free+0x78/0x140 [ 381.224134][ C1] exit_mmap+0x73e/0xde0 [ 381.228425][ C1] ? __pfx_exit_mmap+0x10/0x10 [ 381.233237][ C1] ? __pfx_exit_aio+0x10/0x10 [ 381.237970][ C1] ? uprobe_clear_state+0x271/0x290 [ 381.243223][ C1] ? mm_update_next_owner+0xa4/0x810 [ 381.248558][ C1] __mmput+0x115/0x420 [ 381.252674][ C1] exit_mm+0x221/0x310 [ 381.256800][ C1] ? __pfx_exit_mm+0x10/0x10 [ 381.261433][ C1] ? taskstats_exit+0x326/0xa60 [ 381.266331][ C1] do_exit+0x994/0x27f0 [ 381.270547][ C1] ? do_raw_spin_lock+0x151/0x370 [ 381.275620][ C1] ? __pfx_do_exit+0x10/0x10 [ 381.280265][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 381.285705][ C1] do_group_exit+0x207/0x2c0 [ 381.290340][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 381.295574][ C1] ? lockdep_hardirqs_on+0x9d/0x150 [ 381.300814][ C1] get_signal+0x1696/0x1730 [ 381.305368][ C1] ? __pfx_call_rcu+0x10/0x10 [ 381.310087][ C1] ? __pfx_get_signal+0x10/0x10 [ 381.314983][ C1] arch_do_signal_or_restart+0x98/0x840 [ 381.320603][ C1] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 381.326870][ C1] ? syscall_exit_to_user_mode+0xa3/0x340 [ 381.332647][ C1] syscall_exit_to_user_mode+0xce/0x340 [ 381.338251][ C1] do_syscall_64+0x100/0x230 [ 381.342892][ C1] ? clear_bhb_loop+0x45/0xa0 [ 381.347615][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 381.353545][ C1] RIP: 0033:0x7f2c2df833d7 [ 381.357994][ C1] RSP: 002b:00007f2c2e2cfd80 EFLAGS: 00000293 ORIG_RAX: 000000000000003d [ 381.366449][ C1] RAX: fffffffffffffe00 RBX: 0000000000000011 RCX: 00007f2c2df833d7 [ 381.374454][ C1] RDX: 0000000040000000 RSI: 00007f2c2e2cfdec RDI: 00000000ffffffff [ 381.382464][ C1] RBP: 00007f2c2e2cfdec R08: 0000000000000000 R09: 0000000000000000 [ 381.390474][ C1] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000006 [ 381.398511][ C1] R13: 0000555562971590 R14: 0000000000038114 R15: 00007f2c2e2cfe40 [ 381.406539][ C1] [ 381.409586][ C1] task:kworker/u8:1 state:R running task stack:22216 pid:13 tgid:13 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 381.423230][ C1] Workqueue: events_unbound cfg80211_wiphy_work [ 381.429535][ C1] Call Trace: [ 381.432849][ C1] [ 381.435815][ C1] __schedule+0x1b88/0x5240 [ 381.440395][ C1] ? __lock_acquire+0xad5/0xd80 [ 381.445316][ C1] ? preempt_schedule_irq+0xfe/0x1c0 [ 381.450652][ C1] ? __pfx___schedule+0x10/0x10 [ 381.455538][ C1] ? unwind_next_frame+0xb8/0x23b0 [ 381.460698][ C1] ? unwind_next_frame+0xb8/0x23b0 [ 381.465852][ C1] ? unwind_next_frame+0x1aa4/0x23b0 [ 381.471190][ C1] ? preempt_schedule_irq+0xf3/0x1c0 [ 381.476518][ C1] preempt_schedule_irq+0xfe/0x1c0 [ 381.481666][ C1] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 381.487421][ C1] ? __lock_acquire+0xad5/0xd80 [ 381.492325][ C1] irqentry_exit+0x5e/0x90 [ 381.496778][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 381.502794][ C1] RIP: 0010:lock_acquire+0x167/0x2f0 [ 381.508151][ C1] Code: c7 44 24 10 00 00 00 00 9c 8f 44 24 10 f7 44 24 10 00 02 00 00 0f 85 fd 00 00 00 41 f7 c6 00 02 00 00 74 01 fb 65 48 8b 45 00 <48> 3b 44 24 38 0f 85 72 01 00 00 48 83 c4 40 5b 41 5c 41 5d 41 5e [ 381.527805][ C1] RSP: 0018:ffffc900001274a8 EFLAGS: 00000206 [ 381.533919][ C1] RAX: 2e7ace614bc1d600 RBX: ffffffff8ed3dfe0 RCX: 2e7ace614bc1d600 [ 381.541933][ C1] RDX: 0000000000000000 RSI: ffffffff8e4fd53d RDI: ffffffff8ca1b6a0 [ 381.549947][ C1] RBP: ffffffff9368a020 R08: 0000000000000000 R09: 0000000000000000 [ 381.557959][ C1] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 381.565966][ C1] R13: 0000000000000002 R14: 0000000000000246 R15: 0000000000000000 [ 381.574001][ C1] ? unwind_next_frame+0xb8/0x23b0 [ 381.579165][ C1] ? ret_from_fork_asm+0x1a/0x30 [ 381.584142][ C1] ? unwind_next_frame+0xb8/0x23b0 [ 381.589298][ C1] unwind_next_frame+0xd5/0x23b0 [ 381.594277][ C1] ? unwind_next_frame+0xb8/0x23b0 [ 381.599441][ C1] ? unwind_next_frame+0xb8/0x23b0 [ 381.604599][ C1] ? ret_from_fork_asm+0x1a/0x30 [ 381.609576][ C1] ? ret_from_fork_asm+0x1a/0x30 [ 381.614586][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 381.620793][ C1] arch_stack_walk+0x11e/0x150 [ 381.625613][ C1] ? ret_from_fork_asm+0x1a/0x30 [ 381.630591][ C1] stack_trace_save+0x11a/0x1d0 [ 381.635493][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 381.640906][ C1] ? __lock_acquire+0xad5/0xd80 [ 381.645798][ C1] ? do_raw_spin_lock+0x151/0x370 [ 381.650877][ C1] kasan_save_track+0x3f/0x80 [ 381.655596][ C1] ? kasan_save_track+0x3f/0x80 [ 381.660496][ C1] ? kasan_save_free_info+0x40/0x50 [ 381.665770][ C1] ? __kasan_slab_free+0x59/0x70 [ 381.670743][ C1] ? kmem_cache_free+0x197/0x410 [ 381.675722][ C1] ? ieee80211_iface_work+0x28b/0x1100 [ 381.681218][ C1] ? cfg80211_wiphy_work+0x2f0/0x490 [ 381.686545][ C1] ? process_scheduled_works+0xac3/0x18e0 [ 381.692299][ C1] ? worker_thread+0x870/0xd50 [ 381.697108][ C1] ? kthread+0x7b7/0x940 [ 381.701390][ C1] ? ret_from_fork+0x4b/0x80 [ 381.706014][ C1] ? ret_from_fork_asm+0x1a/0x30 [ 381.711035][ C1] kasan_save_free_info+0x40/0x50 [ 381.716108][ C1] __kasan_slab_free+0x59/0x70 [ 381.720922][ C1] ? ieee80211_iface_work+0x28b/0x1100 [ 381.726433][ C1] kmem_cache_free+0x197/0x410 [ 381.731247][ C1] ? ieee80211_iface_work+0x28b/0x1100 [ 381.736754][ C1] ieee80211_iface_work+0x28b/0x1100 [ 381.742101][ C1] cfg80211_wiphy_work+0x2f0/0x490 [ 381.747273][ C1] ? process_scheduled_works+0x9cb/0x18e0 [ 381.753037][ C1] process_scheduled_works+0xac3/0x18e0 [ 381.758664][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 381.764707][ C1] ? assign_work+0x367/0x3d0 [ 381.769378][ C1] worker_thread+0x870/0xd50 [ 381.774027][ C1] ? __kthread_parkme+0x1a8/0x200 [ 381.779117][ C1] ? __pfx_worker_thread+0x10/0x10 [ 381.784275][ C1] kthread+0x7b7/0x940 [ 381.788393][ C1] ? __pfx_worker_thread+0x10/0x10 [ 381.793550][ C1] ? __pfx_kthread+0x10/0x10 [ 381.798182][ C1] ? __pfx_kthread+0x10/0x10 [ 381.802814][ C1] ? __pfx_kthread+0x10/0x10 [ 381.807454][ C1] ? __pfx_kthread+0x10/0x10 [ 381.812092][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 381.817336][ C1] ? lockdep_hardirqs_on+0x9d/0x150 [ 381.822570][ C1] ? __pfx_kthread+0x10/0x10 [ 381.827213][ C1] ret_from_fork+0x4b/0x80 [ 381.831669][ C1] ? __pfx_kthread+0x10/0x10 [ 381.836334][ C1] ret_from_fork_asm+0x1a/0x30 [ 381.841146][ C1] [ 381.844197][ C1] rcu: rcu_preempt kthread starved for 10781 jiffies! g19125 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 381.855426][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 381.865431][ C1] rcu: RCU grace-period kthread stack dump: [ 381.871350][ C1] task:rcu_preempt state:R running task stack:26952 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00004000 [ 381.884985][ C1] Call Trace: [ 381.888299][ C1] [ 381.891266][ C1] __schedule+0x1b88/0x5240 [ 381.895842][ C1] ? schedule+0x163/0x360 [ 381.900309][ C1] ? __pfx___schedule+0x10/0x10 [ 381.905220][ C1] ? schedule+0x90/0x360 [ 381.909615][ C1] ? schedule+0x90/0x360 [ 381.913890][ C1] schedule+0x163/0x360 [ 381.918095][ C1] schedule_timeout+0x15b/0x2b0 [ 381.922991][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 381.928423][ C1] ? __pfx_process_timeout+0x10/0x10 [ 381.933759][ C1] ? prepare_to_swait_event+0x1e5/0x340 [ 381.939347][ C1] ? prepare_to_swait_event+0x308/0x340 [ 381.944952][ C1] rcu_gp_fqs_loop+0x2e1/0x1340 [ 381.949855][ C1] ? __pfx_rcu_watching_snap_recheck+0x10/0x10 [ 381.956050][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 381.961372][ C1] ? _raw_spin_unlock_irqrestore+0xde/0x140 [ 381.967315][ C1] ? finish_swait+0xdb/0x200 [ 381.971950][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 381.977183][ C1] rcu_gp_kthread+0xa7/0x3b0 [ 381.981811][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 381.987064][ C1] ? __kthread_parkme+0x1a8/0x200 [ 381.992129][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 381.997363][ C1] kthread+0x7b7/0x940 [ 382.001485][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 382.006730][ C1] ? __pfx_kthread+0x10/0x10 [ 382.011363][ C1] ? __pfx_kthread+0x10/0x10 [ 382.016001][ C1] ? __pfx_kthread+0x10/0x10 [ 382.020630][ C1] ? __pfx_kthread+0x10/0x10 [ 382.025265][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 382.030493][ C1] ? lockdep_hardirqs_on+0x9d/0x150 [ 382.035727][ C1] ? __pfx_kthread+0x10/0x10 [ 382.040361][ C1] ret_from_fork+0x4b/0x80 [ 382.044813][ C1] ? __pfx_kthread+0x10/0x10 [ 382.049441][ C1] ret_from_fork_asm+0x1a/0x30 [ 382.054250][ C1] [ 382.057296][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 382.063657][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted 6.15.0-rc1-syzkaller-00025-gbec7dcbc242c #0 PREEMPT(full) [ 382.075342][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 382.085434][ C1] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 382.091204][ C1] Code: cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 13 a1 17 00 f3 0f 1e fa fb f4 cc cc cc cc 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 [ 382.110853][ C1] RSP: 0018:ffffc90000197dc0 EFLAGS: 000002c6 [ 382.116964][ C1] RAX: 8275aad067318300 RBX: ffffffff8197af7e RCX: ffffffff8c30995c [ 382.124969][ C1] RDX: 0000000000000001 RSI: ffffffff8e69c6c2 RDI: ffffffff8ca1b6a0 [ 382.132976][ C1] RBP: ffffc90000197f20 R08: ffff8880b8732b5b R09: 1ffff110170e656b [ 382.140984][ C1] R10: dffffc0000000000 R11: ffffed10170e656c R12: 1ffff92000032fd2 [ 382.148988][ C1] R13: 1ffff11003addb40 R14: 0000000000000001 R15: dffffc0000000000 [ 382.156991][ C1] FS: 0000000000000000(0000) GS:ffff888125096000(0000) knlGS:0000000000000000 [ 382.166046][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 382.172676][ C1] CR2: 0000200000268030 CR3: 0000000020f9a000 CR4: 00000000003526f0 [ 382.180688][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 382.188692][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 382.196707][ C1] Call Trace: [ 382.200016][ C1] [ 382.202972][ C1] default_idle+0x13/0x20 [ 382.207343][ C1] default_idle_call+0x74/0xb0 [ 382.212157][ C1] do_idle+0x22e/0x5d0 [ 382.216273][ C1] ? __pfx_do_idle+0x10/0x10 [ 382.220918][ C1] ? do_idle+0x5a8/0x5d0 [ 382.225231][ C1] cpu_startup_entry+0x42/0x60 [ 382.230036][ C1] start_secondary+0xfe/0x100 [ 382.234746][ C1] common_startup_64+0x13e/0x147 [ 382.239740][ C1] [ 382.985842][ T5894] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 383.120260][ C1] raw-gadget.1 gadget.9: ignoring, device is not running [ 383.127659][ T5894] usb 10-1: device descriptor read/8, error -32 [ 383.256037][ T5894] raw-gadget.1 gadget.9: failed to queue suspend event [ 383.263222][ T5894] usb usb10-port1: unable to enumerate USB device [ 383.911167][ T5894] usb 8-1: USB disconnect, device number 2 [ 384.775959][ T6591] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 384.783688][ T6591] Cannot create hsr debugfs directory [ 385.489438][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 386.445104][ T5852] Bluetooth: hci4: command 0x0406 tx timeout [ 386.451201][ T5852] Bluetooth: hci1: command 0x0406 tx timeout [ 386.466005][ T5852] Bluetooth: hci0: command 0x0406 tx timeout [ 386.472141][ T5852] Bluetooth: hci5: command 0x0406 tx timeout