last executing test programs: 20m42.720174302s ago: executing program 3 (id=731): syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{0x0, 0x114}], 0x1}, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000140), r1) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6c, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$vim2m(&(0x7f0000000100), 0x3, 0x2) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r6, 0xffffffffffffffff, 0x0) 20m40.438476229s ago: executing program 3 (id=733): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) shutdown(r0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x40000}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) capset(0x0, 0x0) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000640), 0x101300, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000380)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r5, 0x3ba0, &(0x7f0000000200)={0x48, 0x2, r6, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f00000001c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$TEST(r5, 0x3b89, &(0x7f00000002c0)={0x18, 0x3, r7, r8, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000280)}) ioctl$IOMMU_IOAS_MAP$PAGES(r5, 0x3b85, &(0x7f0000000480)={0x28, 0x4, r8, 0x0, &(0x7f00008af000/0x3000)=nil, 0x3000, 0x3}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r5, 0x3ba0, &(0x7f0000000000)={0x48, 0x2, r8}) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x3, 0x2, 0x101, 0x0, 0x0, {0x3, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x0) recvfrom(r1, 0x0, 0x0, 0x40, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x6) 20m39.224184796s ago: executing program 3 (id=734): bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x15, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="b70000000000000007000000000000009500e200000000001e5286574356940658273ad1326fc65be4b1037a74cfb5af100fc4e94d123d9b22a7561b8850821bc1f8b5b0a3e3b79b0d96ab7cc60e0e144f0f04bfffe68fe46421a161eedd1a5cee316f68f7617859f06c8efd5da6abe446649c322209b1af93c6c999058168ad0a70992124d19c7c9cc22ff9a6b1a05803"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport}, 0x94) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280), 0x0) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 20m38.673756601s ago: executing program 3 (id=737): bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r3, &(0x7f0000000040)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0102}}}, 0x14) recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f00000000c0)={0x84, @dev={0xac, 0x14, 0x14, 0xb}, 0x15, 0x3, 'wlc\x00', 0x1, 0x0, 0x4}, 0x2c) r5 = socket$kcm(0xa, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'wrr\x00', 0x23, 0x81, 0x5}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x4e23, 0x10000, 0x1cb, 0x12d61, 0x12d58}}, 0x44) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000b80)=@raw={'raw\x00', 0x3c1, 0x3, 0x350, 0x0, 0x1170, 0x1170, 0x128, 0x1170, 0x280, 0x1398, 0x1398, 0x280, 0x1398, 0x3, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @broadcast}, @private2={0xfc, 0x2, '\x00', 0x1}, [0xffffffff, 0xff000000], [0x0, 0x0, 0x0, 0xffffff00], 'veth0_vlan\x00', 'veth0_vlan\x00', {}, {}, 0x2e, 0x0, 0x0, 0x46}, 0x0, 0x108, 0x128, 0x0, {}, [@common=@inet=@socket2={{0x28}, 0x1}, @common=@unspec=@quota={{0x38}, {0x1, 0x0, 0x80000000, {0x7fff}}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0xf0, 0x158, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'syz0\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x2, 0x9, 0xf, 0xd18, 'syz0\x00', 'syz1\x00', {0x7}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b0) sendmsg$sock(r5, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) 20m36.25989247s ago: executing program 3 (id=739): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$AUTOFS_IOC_FAIL(r0, 0x4c80, 0xffffffffffffffb6) 20m30.642884724s ago: executing program 3 (id=744): openat$drirender128(0xffffffffffffff9c, &(0x7f00000001c0), 0x12000, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) r0 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = socket$kcm(0x29, 0x2, 0x0) r2 = memfd_create(&(0x7f0000000000)='e\xf4E\x88-\x00', 0x0) pwritev(r2, &(0x7f00000003c0)=[{&(0x7f0000000280)="11", 0x1}], 0x1, 0x4000001, 0x0) sendfile(r1, r2, 0x0, 0x8000fb00) syz_open_dev$dri(0x0, 0x1ff, 0x80000) 20m14.035853257s ago: executing program 32 (id=744): openat$drirender128(0xffffffffffffff9c, &(0x7f00000001c0), 0x12000, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) r0 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = socket$kcm(0x29, 0x2, 0x0) r2 = memfd_create(&(0x7f0000000000)='e\xf4E\x88-\x00', 0x0) pwritev(r2, &(0x7f00000003c0)=[{&(0x7f0000000280)="11", 0x1}], 0x1, 0x4000001, 0x0) sendfile(r1, r2, 0x0, 0x8000fb00) syz_open_dev$dri(0x0, 0x1ff, 0x80000) 18m49.379356494s ago: executing program 1 (id=914): r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000140)={'veth0\x00', &(0x7f0000000100)=@ethtool_wolinfo={0x5, 0xa, 0x4, "f8a76bfeb47b"}}) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = dup(r1) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r1, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) socket$inet_sctp(0x2, 0x5, 0x84) sched_setscheduler(0x0, 0x6, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f000001b700)=""/102392, 0x18ff8) lsm_get_self_attr(0x64, 0x0, &(0x7f0000000000), 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000080004000006000008001b"], 0x30}}, 0x0) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff}, 0x0) splice(r4, 0x0, r1, 0x0, 0x20000000000002, 0x2) 18m47.876160022s ago: executing program 5 (id=918): syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{0x0, 0x114}], 0x1}, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0, r1) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6c, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$vim2m(&(0x7f0000000100), 0x3, 0x2) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r6, 0xffffffffffffffff, 0x0) 18m46.419555379s ago: executing program 5 (id=920): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000240), 0x8) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, r3, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) rt_sigqueueinfo(r0, 0xb, &(0x7f0000000180)={0x2b, 0x6, 0x6}) add_key(&(0x7f0000000040)='rxrpc\x00', 0x0, &(0x7f0000000080)="0000000000000002ff69000000000001000000c000000006000200861fa72e5b01504104bfeacdd5a9007d167c71e3b8a93aa64d957a684161c833020a6da8881fb79e110483bfadf224a22c76ecc7a56843a85f7df51293f0eb84ef8f0f07342db3b0e5a5647b7bed1fbf069ca713670adf7d9fb6d2600fd9c1981fe9f095cfe9d2fe1e1e34f6096bf02543747b2c792890f07c0da0fa25e6101062e6c9176a70e41698814a213711764f88495994cfd8a57c1e13f6b5298e7ab3a2bfb58dde34d58536633c27882e51ced17d67999b00094461", 0x4000, 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r5) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r5, 0x0, 0x4000054) 18m46.07037893s ago: executing program 1 (id=922): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'rfc7539(ecb(compress_null-generic),blake2s-224-arm)\x00'}, 0x58) r4 = socket$alg(0x26, 0x5, 0x0) syz_open_dev$sg(0x0, 0x0, 0x8002) bind$alg(r4, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'rfc7539(ecb(compress_null-generic),blake2s-224-arm)\x00'}, 0x19) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, 0x0) r6 = fanotify_init(0xf00, 0x1000) fanotify_mark(r6, 0x105, 0x5000003a, r5, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./bus\x00', 0x42, 0x0) ioctl$SNDRV_PCM_IOCTL_HWSYNC(r7, 0x4122, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./bus\x00', 0xffffffffffffff9c, 0x0, 0x2) readv(r6, &(0x7f0000000c40)=[{&(0x7f0000000500)=""/169, 0xffffffa0}], 0x1) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) flock(r8, 0x5) r9 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r9, 0x29, 0x3b, &(0x7f00000002c0)=ANY=[], 0x8) bind$inet6(r9, &(0x7f0000f5dfe4)={0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, '\x00', 0x22}}, 0x1c) 18m44.91269114s ago: executing program 5 (id=924): prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r1 = shmget(0x1, 0x3000, 0x200, &(0x7f0000ffd000/0x3000)=nil) shmctl$SHM_STAT_ANY(r1, 0xf, &(0x7f0000000040)=""/220) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) mount$tmpfs(0x0, &(0x7f0000000540)='./cgroup\x00', &(0x7f0000000080), 0x84, &(0x7f0000000200)) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f00000008c0)={0x84, @rand_addr=0x64010102, 0x4e22, 0x1, 'lblcr\x00', 0x0, 0x10001, 0x6f}, 0x2c) setsockopt$IP_VS_SO_SET_DEL(r2, 0x0, 0x483, &(0x7f0000001280)={0x20000000000084, @private=0xa010102, 0x1ffc, 0x200000001, 'none\x00', 0x9, 0x821}, 0x2c) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x34, 0x10, 0x1, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x10b85}, [@IFLA_ADDRESS={0xa, 0x1, @multicast}, @IFLA_WEIGHT={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x90}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x30, 0x0, 0x5, 0xffffffff, 0x8, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_WIPHY_FREQ_HINT={0x8}]}, 0x30}}, 0x488c0) sendmsg$NL80211_CMD_DEL_INTERFACE(r4, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x28, r5, 0x100, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x9, 0x24}}}}, ["", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x60040000) 18m43.394291803s ago: executing program 1 (id=925): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='setgroups\x00') r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r1, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000100", 0x8) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0xc, &(0x7f0000000480)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f0000000000)={r2}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x1}, &(0x7f00000002c0)=0x8) r3 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r3, 0x84, 0x70, &(0x7f0000000400)={0x0, @in6={{0xa, 0x4e23, 0x295, @private0, 0x7}}, [0xffffffffffffffff, 0xfffffffffffffffc, 0x400, 0xaf, 0x6, 0x3, 0xfffffffffffffcd1, 0x4, 0x800, 0xfffffffffffffff9, 0x3, 0x200000004, 0x7, 0xfffffffffffffff6]}, &(0x7f0000000000)=0x100) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f0000000200)={r5, @in={{0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x3a}}}}, &(0x7f0000000300)=0x84) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x3e, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x84}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) semctl$SEM_INFO(0x0, 0x4, 0x13, 0x0) mq_open(0x0, 0x0, 0x0, &(0x7f0000000180)={0x8001}) r9 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000040)={r9, r9, r9}, &(0x7f0000001cc0)=""/194, 0xc2, &(0x7f00000000c0)={&(0x7f0000000000)={'xxhash64-generic\x00'}}) 18m41.776630037s ago: executing program 1 (id=929): bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x15, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="b70000000000000007000000000000009500e200000000001e5286574356940658273ad1326fc65be4b1037a74cfb5af100fc4e94d123d9b22a7561b8850821bc1f8b5b0a3e3b79b0d96ab7cc60e0e144f0f04bfffe68fe46421a161eedd1a5cee316f68f7617859f06c8efd5da6abe446649c322209b1af93c6c999058168ad0a70992124d19c7c9cc2"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport}, 0x94) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}], 0x2, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 18m41.770951479s ago: executing program 5 (id=930): prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r1 = shmget(0x1, 0x3000, 0x200, &(0x7f0000ffd000/0x3000)=nil) shmctl$SHM_STAT_ANY(r1, 0xf, &(0x7f0000000040)=""/220) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) mount$tmpfs(0x0, &(0x7f0000000540)='./cgroup\x00', &(0x7f0000000080), 0x84, &(0x7f0000000200)) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f00000008c0)={0x84, @rand_addr=0x64010102, 0x4e22, 0x1, 'lblcr\x00', 0x0, 0x10001, 0x6f}, 0x2c) setsockopt$IP_VS_SO_SET_DEL(r2, 0x0, 0x483, &(0x7f0000001280)={0x20000000000084, @private=0xa010102, 0x1ffc, 0x200000001, 'none\x00', 0x9, 0x821}, 0x2c) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x34, 0x10, 0x1, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x10b85}, [@IFLA_ADDRESS={0xa, 0x1, @multicast}, @IFLA_WEIGHT={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x90}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$NL80211_CMD_CONNECT(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x30, r6, 0x5, 0xffffffff, 0x8, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_WIPHY_FREQ_HINT={0x8}]}, 0x30}}, 0x488c0) sendmsg$NL80211_CMD_DEL_INTERFACE(r4, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x28, 0x0, 0x100, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x9, 0x24}}}}, ["", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x60040000) 18m38.271813191s ago: executing program 1 (id=936): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000040)) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r3}, 0x18) bind$inet(0xffffffffffffffff, 0x0, 0x0) r4 = dup(0xffffffffffffffff) r5 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000840), 0x2, 0x0) ioctl$VIDIOC_S_FMT(r5, 0xc0d05605, &(0x7f0000000880)={0x8, @pix_mp={0x5, 0xd05, 0x3447504d, 0x5, 0xc, [{0x11ef04b4, 0x5}, {0x100, 0xffffffff}, {0x6, 0x6}, {0x1, 0x4}, {0x7ff, 0x6}, {0x6, 0x1ff}, {0x718, 0x2}, {0x6dd1655b, 0x100}], 0x8, 0x89, 0x7a6cad60eeb5a3da, 0x0, 0x6}}) openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) add_key$user(&(0x7f0000000500), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000580)="bc30a939fa3a4145ec509397e20440572a4e8150e8841ef4b87fef35ad82ebfac98355", 0x23, 0xfffffffffffffffe) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r4, 0x0, 0x820) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r6, &(0x7f0000000000)="3f0000000100f4", 0x7) 18m36.967738488s ago: executing program 1 (id=937): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYRES16], 0x14}, 0x1, 0x8000000000000, 0x0, 0x4004845}, 0x8004) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000240)={0x0, 0x9}, &(0x7f0000000280)=0x8) ioctl$AUTOFS_IOC_FAIL(r0, 0x4c80, 0xffffffffffffffb6) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCXONC(r3, 0x5608, 0x3) getsockopt$inet_sctp_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, &(0x7f00000000c0), &(0x7f0000000180)=0x4) r4 = socket$inet(0xa, 0x801, 0x84) connect$inet(r4, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) 18m36.964921133s ago: executing program 5 (id=939): fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x13, &(0x7f0000000300)=0x7, 0x4) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x8}}}}}, 0x0) gettid() bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0x7, 0x0, &(0x7f0000000900)="e02742e8680d85", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) prctl$PR_SCHED_CORE(0x3e, 0x10000000001, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) r0 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) r1 = socket$inet(0x2, 0x2, 0x1) setsockopt$inet_mreqn(r1, 0x0, 0x20, 0x0, 0x300) r2 = socket$kcm(0x10, 0x2, 0x0) mmap(&(0x7f0000fa2000/0x3000)=nil, 0x3000, 0x3, 0x13, 0xffffffffffffffff, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a40), 0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="6000000002060103000000000000000000000004050001000700000013000300686173683a6e65742c696661636500000900020073797a30000000000500040000000000050005000a00000014000780050015000000000008001240"], 0x60}}, 0x0) write(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPSET_CMD_DESTROY(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)={0x1c, 0x3, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) setxattr$system_posix_acl(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='system.posix_acl_access\x00', &(0x7f0000000680)=ANY=[], 0x64, 0x2) recvmsg(r2, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x40002103) write$cgroup_subtree(r2, 0x0, 0xfe33) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000f40)=ANY=[], &(0x7f0000000100)='GPL\x00'}, 0x94) 18m34.347300636s ago: executing program 5 (id=944): bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) alarm(0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r2, &(0x7f0000000040)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0102}}}, 0x14) recvmmsg(r0, &(0x7f0000000480), 0x400034f, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f00000000c0)={0x84, @dev={0xac, 0x14, 0x14, 0xb}, 0x15, 0x3, 'wlc\x00', 0x1, 0x0, 0x4}, 0x2c) r4 = socket$kcm(0xa, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'wrr\x00', 0x23, 0x81, 0x5}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x4e23, 0x10000, 0x1cb, 0x12d61, 0x12d58}}, 0x44) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000b80)=@raw={'raw\x00', 0x3c1, 0x3, 0x350, 0x0, 0x1170, 0x1170, 0x128, 0x1170, 0x280, 0x1398, 0x1398, 0x280, 0x1398, 0x3, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @broadcast}, @private2={0xfc, 0x2, '\x00', 0x1}, [0xffffffff, 0xff000000], [0x0, 0x0, 0x0, 0xffffff00], 'veth0_vlan\x00', 'veth0_vlan\x00', {}, {}, 0x2e, 0x0, 0x0, 0x46}, 0x0, 0x108, 0x128, 0x0, {}, [@common=@inet=@socket2={{0x28}, 0x1}, @common=@unspec=@quota={{0x38}, {0x1, 0x0, 0x80000000, {0x7fff}}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0xf0, 0x158, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'syz0\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x2, 0x9, 0xf, 0xd18, 'syz0\x00', 'syz1\x00', {0x7}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b0) sendmsg$sock(r4, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) 18m21.60130534s ago: executing program 33 (id=937): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYRES16], 0x14}, 0x1, 0x8000000000000, 0x0, 0x4004845}, 0x8004) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000240)={0x0, 0x9}, &(0x7f0000000280)=0x8) ioctl$AUTOFS_IOC_FAIL(r0, 0x4c80, 0xffffffffffffffb6) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCXONC(r3, 0x5608, 0x3) getsockopt$inet_sctp_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, &(0x7f00000000c0), &(0x7f0000000180)=0x4) r4 = socket$inet(0xa, 0x801, 0x84) connect$inet(r4, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) 18m18.756134037s ago: executing program 34 (id=944): bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) alarm(0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r2, &(0x7f0000000040)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0102}}}, 0x14) recvmmsg(r0, &(0x7f0000000480), 0x400034f, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f00000000c0)={0x84, @dev={0xac, 0x14, 0x14, 0xb}, 0x15, 0x3, 'wlc\x00', 0x1, 0x0, 0x4}, 0x2c) r4 = socket$kcm(0xa, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'wrr\x00', 0x23, 0x81, 0x5}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x4e23, 0x10000, 0x1cb, 0x12d61, 0x12d58}}, 0x44) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000b80)=@raw={'raw\x00', 0x3c1, 0x3, 0x350, 0x0, 0x1170, 0x1170, 0x128, 0x1170, 0x280, 0x1398, 0x1398, 0x280, 0x1398, 0x3, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @broadcast}, @private2={0xfc, 0x2, '\x00', 0x1}, [0xffffffff, 0xff000000], [0x0, 0x0, 0x0, 0xffffff00], 'veth0_vlan\x00', 'veth0_vlan\x00', {}, {}, 0x2e, 0x0, 0x0, 0x46}, 0x0, 0x108, 0x128, 0x0, {}, [@common=@inet=@socket2={{0x28}, 0x1}, @common=@unspec=@quota={{0x38}, {0x1, 0x0, 0x80000000, {0x7fff}}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0xf0, 0x158, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'syz0\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x2, 0x9, 0xf, 0xd18, 'syz0\x00', 'syz1\x00', {0x7}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b0) sendmsg$sock(r4, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) 8m16.489658635s ago: executing program 0 (id=1917): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) setsockopt$bt_BT_SECURITY(0xffffffffffffffff, 0x112, 0x4, &(0x7f00000000c0)={0x0, 0xfb}, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket(0x15, 0x5, 0x0) mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000400)='./cgroup\x00', &(0x7f00000003c0)='hfsplus\x00', 0x8000, 0x0) 8m15.411422688s ago: executing program 0 (id=1919): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$uhid(0xffffffffffffff9c, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000004640)={0x0}}, 0x0) r2 = syz_io_uring_setup(0x10f, &(0x7f00000000c0)={0x0, 0x211a, 0x80, 0x40204, 0x39}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000040)=0xefefffd7, 0x0, 0x4) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x38}}, 0x80) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r5, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r5, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x8, 0x1, 0xffffffffffffffff, 0x0}) io_uring_enter(r2, 0x3516, 0xc2de, 0x8, 0x0, 0x0) 8m11.768423992s ago: executing program 0 (id=1925): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000002980)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000640)="985e44efeabe001cabcf3d8673c3a254a9a2d3197970cb347b70a243bf77139a94bc3ae91684aaf7b7dff691deb8f8aef2d915fb3a0794a9a9b431a819bca6122c350637808dde804a048fd8696e524b2934126c443ce93d82e931eb9918e6c0827686e59209d2e02c9210fd8048", 0x6e}], 0x1}}, {{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000800)="cc5a4dbac0affd0a979c63ea8352d608a51fc8625318716ddf62b7752be4540c4ac7d344c53a3ad28313abc2437b60b03c0e587cafcf9a435bf90c61ff51f70a828238fdf90bc5d36c7d614b82552649954e0185662defd28f78449f073bad544f586136c5076a6f0f1b6fc9adf80557eb44db1b41824e9ef104c95e999766bbf27d74ad5d8fa63210cde65d384dd3e87c3fedaec3144d1ee66a0eb0750363e346cb930dae6109df6b9955bf8af119b5c9a86622af4ff8b5949fb90f8edbde416d046d61512fe4c453bb601a780e1bbc00dbedc5e50d3cd9bc92", 0xda}], 0x1}}], 0x2, 0x480e0) socket$unix(0x1, 0x5, 0x0) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 8m11.579068679s ago: executing program 0 (id=1926): shutdown(0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) capset(0x0, 0x0) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000640), 0x101300, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000380)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r3, 0x3ba0, &(0x7f0000000200)={0x48, 0x2, r4, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000001c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$TEST(r3, 0x3b89, &(0x7f00000002c0)={0x18, 0x3, r5, r6, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000280)}) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f0000000480)={0x28, 0x4, r6, 0x0, &(0x7f00008af000/0x3000)=nil, 0x3000, 0x3}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r3, 0x3ba0, &(0x7f0000000000)={0x48, 0x2, r6}) 8m10.464880094s ago: executing program 0 (id=1927): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) socket$alg(0x26, 0x5, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) syz_open_dev$sg(0x0, 0x0, 0x8002) bind$alg(r3, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'rfc7539(ecb(compress_null-generic),blake2s-224-arm)\x00'}, 0x19) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, 0x0) r5 = fanotify_init(0xf00, 0x1000) fanotify_mark(r5, 0x105, 0x5000003a, r4, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./bus\x00', 0x42, 0x0) ioctl$SNDRV_PCM_IOCTL_HWSYNC(r6, 0x4122, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./bus\x00', 0xffffffffffffff9c, 0x0, 0x2) readv(r5, &(0x7f0000000c40)=[{&(0x7f0000000500)=""/169, 0xffffffa0}], 0x1) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) flock(r7, 0x5) r8 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r8, 0x29, 0x3b, &(0x7f00000002c0)=ANY=[], 0x8) bind$inet6(r8, &(0x7f0000f5dfe4)={0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, '\x00', 0x22}}, 0x1c) recvmmsg(r8, &(0x7f0000006c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000006bc0)}, 0x9}], 0x1, 0x2b, 0x0) 8m8.934364251s ago: executing program 0 (id=1928): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x3, 0x1}, 0x50) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x9}, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket$kcm(0x2, 0xa, 0x2) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$pppoe(0x18, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x5, 0x400, 0x1000}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000800)='/proc/keys\x00', 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$smc(&(0x7f00000033c0), 0xffffffffffffffff) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x34, r2, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'ip6erspan0\x00'}]}, 0x34}}, 0x800) 7m53.700215118s ago: executing program 35 (id=1928): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x3, 0x1}, 0x50) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x9}, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket$kcm(0x2, 0xa, 0x2) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$pppoe(0x18, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x5, 0x400, 0x1000}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000800)='/proc/keys\x00', 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$smc(&(0x7f00000033c0), 0xffffffffffffffff) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x34, r2, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'ip6erspan0\x00'}]}, 0x34}}, 0x800) 6.923288455s ago: executing program 2 (id=2606): syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo\x00') write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000240)=ANY=[@ANYRESOCT], 0x27) openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89101) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000200)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2407000005000000000000000c240000e9fffff5ffffffff09", @ANYRES8=r0, @ANYBLOB="05"], 0x0) 6.916707176s ago: executing program 4 (id=2607): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast6-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292", 0xc) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}], 0x1}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) 5.805017436s ago: executing program 4 (id=2608): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000002c0)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r0, 0x0, 0x8}, 0x18) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)={0x18, 0x0, 0x3141e0b2751b0f9b, 0x70bd2a, 0x25dfdbff, {}, [@ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x60c5}, 0x80) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = syz_io_uring_setup(0x235, &(0x7f0000000480)={0x0, 0x3a03, 0x0, 0x2, 0x1c2}, &(0x7f0000000440)=0x0, &(0x7f0000000600)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xffffffff, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000000c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x6, 0x3, 0x0, 0x9276, 0x0, 0x1, {0x1}}) io_uring_enter(r5, 0x47b8, 0x3bf6, 0x2, 0x0, 0x0) 4.877453989s ago: executing program 2 (id=2609): socket$kcm(0x10, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{0x0, 0x114}], 0x1}, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000140), r0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6c, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = syz_open_dev$vim2m(&(0x7f0000000100), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f00000002c0)={0x800, 0x1, 0x4}) ioctl$vim2m_VIDIOC_QBUF(r5, 0xc058560f, &(0x7f0000000200)=@mmap={0x1, 0x1, 0x4, 0x1, 0x6, {0x77359400}, {0x1, 0x0, 0x5, 0x9, 0x64, 0xe, "7cf93be8"}, 0xfffffff7, 0x1, {}, 0x2}) 3.795988752s ago: executing program 2 (id=2610): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r5 = accept4(r4, 0x0, 0x0, 0x80000) sendmsg$TIPC_NL_LINK_SET(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB], 0xb90}, 0x1, 0x0, 0x0, 0x400c010}, 0x20004000) recvmsg(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000001680)=""/4084, 0xff4}], 0x1}, 0x12041) 3.716102212s ago: executing program 4 (id=2611): creat(&(0x7f0000000000)='./file0\x00', 0x108) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006340)={0x2020}, 0x2020) write$FUSE_INIT(r0, 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0) syz_fuse_handle_req(r0, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0xa4901, 0x28) write$tcp_congestion(r1, &(0x7f00000000c0)='lp\x00', 0xfffffdef) dup2(r1, r0) 2.769582254s ago: executing program 2 (id=2612): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000040000000000000000000000850000002c000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b0000000"], &(0x7f00000001c0)='GPL\x00', 0x5, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002300)={r0, 0x18000000000002a0, 0xdc0, 0x0, &(0x7f00000000c0)="b9ff0300600d698cff9e14f086dd", 0x0, 0xe00, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.683913725s ago: executing program 2 (id=2613): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f00000008c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x0, 0x5, 0x8, &(0x7f0000000080)="0000ffffff", &(0x7f0000000300)=""/8, 0x7d, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$NL802154_CMD_GET_SEC_KEY(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000801}, 0x2c000084) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x2, 0x0) sendfile(r7, r6, 0x0, 0x6) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'tunl0\x00'}) sendmsg$nl_route_sched(r1, 0x0, 0x4000010) socketpair$tipc(0x1e, 0x2, 0x0, 0x0) connect$qrtr(0xffffffffffffffff, &(0x7f0000000140)={0x2a, 0x3, 0x7fff}, 0xc) ioctl$KVM_GET_STATS_FD_cpu(0xffffffffffffffff, 0xaece) r8 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x18, 0x140f, 0x1, 0x70bd27, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x8, 0x45, 'srp\x00'}]}, 0x18}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) 2.646732475s ago: executing program 4 (id=2614): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002d00)=@delchain={0x24, 0x65, 0x200, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xd, 0xb}, {0xd, 0x7}, {0xfff1, 0xd}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0xc050) recvmsg$can_bcm(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000003c0)=""/233, 0xe9}], 0x1}, 0x20) 2.559452461s ago: executing program 4 (id=2615): socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x14, 0x6c}, [@ldst={0x7}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x48) 105.463258ms ago: executing program 2 (id=2616): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x8000000000000, 0x0, 0x4004845}, 0x8004) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000240)={0x0, 0x9}, 0x0) ioctl$AUTOFS_IOC_FAIL(r0, 0x4c80, 0xffffffffffffffb6) 0s ago: executing program 4 (id=2617): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, 0x0) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000500)={0x9, 0xa96, &(0x7f0000000580)="b055f266b48585a276c34c209ff93ff3bdacdb80365ffceeb93ed02c1b5f486a790860ff6ce1d314e1f622bc073d2a86aa1ed82cdca45102208feee0e0a16f8ac269ce4745c679a4e734ce571c22e31a9bb2f4c185b6ea688fd3f061392110054c1000ce1f8608060691cf8375b7acd6670200eeadf5ace96b0b0d949baaad90a167fce1ec80e334c1ddfb102a433c0c039e4080108940b7ba33", &(0x7f0000000640)="2153019cec4d8489f69ce996a15230841b6ac47067750795279fb09fcb1dcc804b717d933f4074919c93767ac477f1e0f6aea4cbcf289a40bcc6f80b0fecdbbcdf591fc7cf76b9f4cba4a133dbc6c3c30fe31b13717a4e", 0x9a, 0x57}) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0x1ac81b, 0x0, 0x0, 0x0, 0x1000000}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x66, 0x8, 0x0, 0x0, 0x1010000}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00', 0x2}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xb, 0xff, 0x4932, 0x7f, 0x1, 0x1}, 0x50) socket(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00'}) r6 = syz_open_procfs$pagemap(0x0, &(0x7f0000000140)) ioctl$PAGEMAP_SCAN(r6, 0xc0606610, &(0x7f00000001c0)={0x60, 0x0, &(0x7f000014e000/0x1000)=nil, &(0x7f0000e18000/0x3000)=nil, 0x0, &(0x7f00000002c0)=[{0x7, 0x0, 0x3}, {0x2, 0x5, 0x5}], 0x2, 0xf2, 0x42, 0x0, 0x0, 0x18}) kernel console output (not intermixed with test programs): ed [ 1183.694431][ T8858] Bluetooth: hci1: command tx timeout [ 1184.016470][T12562] team0 (unregistering): Port device team_slave_0 removed [ 1185.195636][ T8858] Bluetooth: hci2: command tx timeout [ 1185.564507][T11486] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1185.606026][T11486] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1185.616781][T11486] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1185.624056][T11486] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1185.635885][T11486] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1185.774101][T11486] Bluetooth: hci1: command tx timeout [ 1187.677027][T11486] Bluetooth: hci2: command tx timeout [ 1187.688112][T11486] Bluetooth: hci5: command tx timeout [ 1187.862940][ T8858] Bluetooth: hci1: command tx timeout [ 1189.744278][ C1] vkms_vblank_simulate: vblank timer overrun [ 1189.756485][ T8858] Bluetooth: hci5: command tx timeout [ 1189.756517][ T8858] Bluetooth: hci2: command tx timeout [ 1189.852208][ C1] vkms_vblank_simulate: vblank timer overrun [ 1189.979731][T13819] chnl_net:caif_netlink_parms(): no params data found [ 1190.565466][ C1] vkms_vblank_simulate: vblank timer overrun [ 1190.745761][ C1] vkms_vblank_simulate: vblank timer overrun [ 1190.907986][T13805] chnl_net:caif_netlink_parms(): no params data found [ 1190.986653][T13855] chnl_net:caif_netlink_parms(): no params data found [ 1191.497567][ C1] vkms_vblank_simulate: vblank timer overrun [ 1191.838213][ T8858] Bluetooth: hci5: command tx timeout [ 1191.838615][T11486] Bluetooth: hci2: command tx timeout [ 1192.112506][ C1] vkms_vblank_simulate: vblank timer overrun [ 1192.520561][T13819] bridge0: port 1(bridge_slave_0) entered blocking state [ 1192.520834][T13819] bridge0: port 1(bridge_slave_0) entered disabled state [ 1192.521107][T13819] bridge_slave_0: entered allmulticast mode [ 1192.522907][T13819] bridge_slave_0: entered promiscuous mode [ 1192.582720][T13819] bridge0: port 2(bridge_slave_1) entered blocking state [ 1192.582869][T13819] bridge0: port 2(bridge_slave_1) entered disabled state [ 1192.583098][T13819] bridge_slave_1: entered allmulticast mode [ 1192.588343][T13819] bridge_slave_1: entered promiscuous mode [ 1193.288036][ C1] vkms_vblank_simulate: vblank timer overrun [ 1193.689443][ C1] vkms_vblank_simulate: vblank timer overrun [ 1194.286944][T11486] Bluetooth: hci5: command tx timeout [ 1194.304171][ C1] vkms_vblank_simulate: vblank timer overrun [ 1194.419551][ C1] vkms_vblank_simulate: vblank timer overrun [ 1194.714656][ C1] vkms_vblank_simulate: vblank timer overrun [ 1195.719156][T13805] bridge0: port 1(bridge_slave_0) entered blocking state [ 1195.719287][T13805] bridge0: port 1(bridge_slave_0) entered disabled state [ 1195.719470][T13805] bridge_slave_0: entered allmulticast mode [ 1195.730274][T13805] bridge_slave_0: entered promiscuous mode [ 1195.786498][T13933] could not allocate digest TFM handle cryptd(blake2b-160) [ 1196.022711][T13819] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1196.977169][T13805] bridge0: port 2(bridge_slave_1) entered blocking state [ 1196.977302][T13805] bridge0: port 2(bridge_slave_1) entered disabled state [ 1196.977542][T13805] bridge_slave_1: entered allmulticast mode [ 1196.980285][T13805] bridge_slave_1: entered promiscuous mode [ 1197.086045][T13819] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1197.306685][T13855] bridge0: port 1(bridge_slave_0) entered blocking state [ 1197.306836][T13855] bridge0: port 1(bridge_slave_0) entered disabled state [ 1197.306965][T13855] bridge_slave_0: entered allmulticast mode [ 1197.308765][T13855] bridge_slave_0: entered promiscuous mode [ 1198.193455][ C0] vkms_vblank_simulate: vblank timer overrun [ 1199.186524][ C0] vkms_vblank_simulate: vblank timer overrun [ 1200.134415][ C0] vkms_vblank_simulate: vblank timer overrun [ 1200.337774][ C0] vkms_vblank_simulate: vblank timer overrun [ 1200.659379][T12562] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1200.765150][ C0] vkms_vblank_simulate: vblank timer overrun [ 1201.749656][T13855] bridge0: port 2(bridge_slave_1) entered blocking state [ 1201.749808][T13855] bridge0: port 2(bridge_slave_1) entered disabled state [ 1201.750029][T13855] bridge_slave_1: entered allmulticast mode [ 1201.752714][T13855] bridge_slave_1: entered promiscuous mode [ 1201.768149][ C0] vkms_vblank_simulate: vblank timer overrun [ 1202.747074][ C0] vkms_vblank_simulate: vblank timer overrun [ 1202.921953][T13805] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1203.009455][T13819] team0: Port device team_slave_0 added [ 1203.297249][ C0] vkms_vblank_simulate: vblank timer overrun [ 1203.341560][ C0] vkms_vblank_simulate: vblank timer overrun [ 1204.564486][T12562] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1204.613674][T13805] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1204.760878][T13819] team0: Port device team_slave_1 added [ 1204.873754][T13855] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1205.110417][T12562] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1205.303960][T13855] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1205.421819][T13805] team0: Port device team_slave_0 added [ 1205.544159][T13819] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1205.544178][T13819] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1205.544204][T13819] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1205.786861][T12562] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1205.830951][T13805] team0: Port device team_slave_1 added [ 1205.969953][T13819] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1205.969977][T13819] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1205.970003][T13819] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1207.097554][T13855] team0: Port device team_slave_0 added [ 1207.669478][T13855] team0: Port device team_slave_1 added [ 1207.686077][T13805] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1207.686094][T13805] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1207.686119][T13805] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1207.864988][T14009] ptrace attach of "./syz-executor exec"[14010] was attempted by "./syz-executor exec"[14009] [ 1207.892646][T13805] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1207.892660][T13805] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1207.892683][T13805] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1208.269993][T14018] delete_channel: no stack [ 1210.427678][T13855] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1210.427693][T13855] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1210.427712][T13855] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1211.392235][T13819] hsr_slave_0: entered promiscuous mode [ 1211.393620][T13819] hsr_slave_1: entered promiscuous mode [ 1211.416712][T13855] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1211.416728][T13855] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1211.416754][T13855] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1213.115829][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 1213.277722][T13805] hsr_slave_0: entered promiscuous mode [ 1213.279116][T13805] hsr_slave_1: entered promiscuous mode [ 1213.280045][T13805] debugfs: 'hsr0' already exists in 'hsr' [ 1213.280067][T13805] Cannot create hsr debugfs directory [ 1215.048174][T14059] delete_channel: no stack [ 1217.051170][T13855] hsr_slave_0: entered promiscuous mode [ 1217.052537][T13855] hsr_slave_1: entered promiscuous mode [ 1217.053493][T13855] debugfs: 'hsr0' already exists in 'hsr' [ 1217.053515][T13855] Cannot create hsr debugfs directory [ 1222.017325][T12562] bridge_slave_1: left allmulticast mode [ 1222.017352][T12562] bridge_slave_1: left promiscuous mode [ 1222.017606][T12562] bridge0: port 2(bridge_slave_1) entered disabled state [ 1222.458258][T14085] ptrace attach of ""[14086] was attempted by "./syz-executor exec"[14085] [ 1223.263077][T12562] bridge_slave_0: left allmulticast mode [ 1223.263200][T12562] bridge_slave_0: left promiscuous mode [ 1223.269564][T12562] bridge0: port 1(bridge_slave_0) entered disabled state [ 1223.511505][T12562] bridge_slave_1: left allmulticast mode [ 1223.511585][T12562] bridge_slave_1: left promiscuous mode [ 1223.512457][T12562] bridge0: port 2(bridge_slave_1) entered disabled state [ 1224.548380][T12562] bridge_slave_0: left allmulticast mode [ 1224.548409][T12562] bridge_slave_0: left promiscuous mode [ 1224.548652][T12562] bridge0: port 1(bridge_slave_0) entered disabled state [ 1224.680035][T12562] bridge_slave_1: left allmulticast mode [ 1224.680064][T12562] bridge_slave_1: left promiscuous mode [ 1224.680299][T12562] bridge0: port 2(bridge_slave_1) entered disabled state [ 1224.777031][T12562] bridge_slave_0: left allmulticast mode [ 1224.777059][T12562] bridge_slave_0: left promiscuous mode [ 1224.777326][T12562] bridge0: port 1(bridge_slave_0) entered disabled state [ 1225.913699][T14090] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(10) [ 1225.913729][T14090] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1225.914056][T14090] vhci_hcd vhci_hcd.0: Device attached [ 1226.336573][ T5881] usb 37-1: new low-speed USB device number 4 using vhci_hcd [ 1227.108869][T14098] vhci_hcd: connection reset by peer [ 1227.112234][ T86] vhci_hcd: stop threads [ 1227.112254][ T86] vhci_hcd: release socket [ 1227.112330][ T86] vhci_hcd: disconnect device [ 1230.880289][ T8858] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1230.905707][ T8858] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1230.909709][ T8858] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1230.910891][ T8858] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1230.912121][ T8858] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1232.905583][ T5881] vhci_hcd: vhci_device speed not set [ 1232.955586][ T8858] Bluetooth: hci3: command tx timeout [ 1233.595750][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1233.776471][T12562] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1233.876033][T12562] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1233.898033][T12562] bond0 (unregistering): Released all slaves [ 1234.049226][T12562] bond0 (unregistering): Released all slaves [ 1235.109431][ T8858] Bluetooth: hci3: command tx timeout [ 1235.190150][T11486] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1235.205751][ T5881] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 1235.213990][T11486] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1235.217137][T11486] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1235.220567][T11486] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1235.221303][T11486] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1235.475671][ T5881] usb 3-1: Using ep0 maxpacket: 16 [ 1235.478153][ T5881] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1235.481257][ T5881] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1235.481286][ T5881] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1235.481306][ T5881] usb 3-1: Product: syz [ 1235.481321][ T5881] usb 3-1: Manufacturer: syz [ 1235.481335][ T5881] usb 3-1: SerialNumber: syz [ 1235.488308][ T5881] usb 3-1: config 0 descriptor?? [ 1235.494337][ T5881] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1235.494373][ T5881] em28xx 3-1:0.0: DVB interface 0 found: bulk [ 1236.697012][T12562] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1236.796447][T12562] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1236.874381][T12562] bond0 (unregistering): Released all slaves [ 1236.948163][ T5881] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 1237.116317][T11486] Bluetooth: hci3: command tx timeout [ 1237.275959][T11486] Bluetooth: hci6: command tx timeout [ 1237.523733][ T5881] em28xx 3-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 1237.523765][ T5881] em28xx 3-1:0.0: board has no eeprom [ 1237.615596][ T5881] em28xx 3-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 1237.615624][ T5881] em28xx 3-1:0.0: dvb set to bulk mode. [ 1237.623260][ T5874] em28xx 3-1:0.0: Binding DVB extension [ 1237.670398][ T5881] usb 3-1: USB disconnect, device number 17 [ 1237.690365][ T5881] em28xx 3-1:0.0: Disconnecting em28xx [ 1237.788967][ T5874] em28xx 3-1:0.0: Registering input extension [ 1237.789646][ T5881] em28xx 3-1:0.0: Closing input extension [ 1237.865872][ T5881] em28xx 3-1:0.0: Freeing device [ 1239.125646][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 1239.125711][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 1239.329559][T11486] Bluetooth: hci3: command tx timeout [ 1239.360969][T11486] Bluetooth: hci6: command tx timeout [ 1241.441070][ T8858] Bluetooth: hci6: command tx timeout [ 1242.955874][ T8858] Bluetooth: hci1: command 0x1003 tx timeout [ 1242.958618][T11486] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 1243.927371][T11486] Bluetooth: hci6: command tx timeout [ 1247.729029][ T8858] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1247.739406][ T8858] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1247.740706][ T8858] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1247.742308][ T8858] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1247.743080][ T8858] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1248.775814][T12562] hsr_slave_0: left promiscuous mode [ 1248.799004][T12562] hsr_slave_1: left promiscuous mode [ 1248.801083][T12562] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1248.801109][T12562] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1248.838000][T12562] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1248.838027][T12562] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1248.916291][T12562] hsr_slave_0: left promiscuous mode [ 1248.955813][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1248.956831][T12562] hsr_slave_1: left promiscuous mode [ 1248.958035][T12562] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1249.016525][T12562] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1249.378209][T12562] veth1_macvtap: left promiscuous mode [ 1249.378318][T12562] veth0_macvtap: left promiscuous mode [ 1249.378553][T12562] veth1_vlan: left promiscuous mode [ 1249.378699][T12562] veth0_vlan: left promiscuous mode [ 1250.317060][T11486] Bluetooth: hci1: command tx timeout [ 1252.395644][T11486] Bluetooth: hci1: command tx timeout [ 1254.076230][T12562] team0 (unregistering): Port device team_slave_1 removed [ 1254.316138][T12562] team0 (unregistering): Port device team_slave_0 removed [ 1254.475863][T11486] Bluetooth: hci1: command tx timeout [ 1256.561724][T11486] Bluetooth: hci1: command tx timeout [ 1257.546250][T12562] team0 (unregistering): Port device team_slave_1 removed [ 1257.676304][T12562] team0 (unregistering): Port device team_slave_0 removed [ 1258.862472][T14260] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2030'. [ 1259.284718][T14121] chnl_net:caif_netlink_parms(): no params data found [ 1260.439272][T14149] chnl_net:caif_netlink_parms(): no params data found [ 1261.496873][T14121] bridge0: port 1(bridge_slave_0) entered blocking state [ 1261.497005][T14121] bridge0: port 1(bridge_slave_0) entered disabled state [ 1261.497205][T14121] bridge_slave_0: entered allmulticast mode [ 1261.498841][T14121] bridge_slave_0: entered promiscuous mode [ 1261.539749][T14121] bridge0: port 2(bridge_slave_1) entered blocking state [ 1261.539952][T14121] bridge0: port 2(bridge_slave_1) entered disabled state [ 1261.540155][T14121] bridge_slave_1: entered allmulticast mode [ 1261.543025][T14121] bridge_slave_1: entered promiscuous mode [ 1262.116354][T14121] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1262.279301][T14121] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1262.279539][T14149] bridge0: port 1(bridge_slave_0) entered blocking state [ 1262.279672][T14149] bridge0: port 1(bridge_slave_0) entered disabled state [ 1262.279868][T14149] bridge_slave_0: entered allmulticast mode [ 1262.282595][T14149] bridge_slave_0: entered promiscuous mode [ 1264.013034][T14149] bridge0: port 2(bridge_slave_1) entered blocking state [ 1264.013237][T14149] bridge0: port 2(bridge_slave_1) entered disabled state [ 1264.013443][T14149] bridge_slave_1: entered allmulticast mode [ 1264.036792][T14149] bridge_slave_1: entered promiscuous mode [ 1268.389755][T14121] team0: Port device team_slave_0 added [ 1269.542911][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 1269.571349][T14121] team0: Port device team_slave_1 added [ 1269.599468][T14149] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1269.789087][T14233] chnl_net:caif_netlink_parms(): no params data found [ 1269.802309][T14149] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1270.751629][T14121] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1270.751646][T14121] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1270.751671][T14121] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1271.802504][T14121] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1271.802521][T14121] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1271.802543][T14121] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1271.995374][T14149] team0: Port device team_slave_0 added [ 1272.082051][T14149] team0: Port device team_slave_1 added [ 1272.630134][T14149] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1272.630152][T14149] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1272.630177][T14149] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1272.904705][T14354] delete_channel: no stack [ 1273.977352][T14149] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1273.977370][T14149] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1273.977396][T14149] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1273.982645][T12562] IPVS: stop unused estimator thread 0... [ 1273.995904][T14121] hsr_slave_0: entered promiscuous mode [ 1273.997221][T14121] hsr_slave_1: entered promiscuous mode [ 1273.998114][T14121] debugfs: 'hsr0' already exists in 'hsr' [ 1273.998137][T14121] Cannot create hsr debugfs directory [ 1274.007979][T14233] bridge0: port 1(bridge_slave_0) entered blocking state [ 1274.008149][T14233] bridge0: port 1(bridge_slave_0) entered disabled state [ 1274.008336][T14233] bridge_slave_0: entered allmulticast mode [ 1274.010928][T14233] bridge_slave_0: entered promiscuous mode [ 1274.106168][ T37] audit: type=1326 audit(1761087508.235:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14357 comm="syz.2.2052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0198adefc9 code=0x7ffc0000 [ 1274.108243][ T37] audit: type=1326 audit(1761087508.235:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14357 comm="syz.2.2052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0198adefc9 code=0x7ffc0000 [ 1274.111076][ T37] audit: type=1326 audit(1761087508.245:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14357 comm="syz.2.2052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f0198adefc9 code=0x7ffc0000 [ 1274.112834][ T37] audit: type=1326 audit(1761087508.245:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14357 comm="syz.2.2052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0198adefc9 code=0x7ffc0000 [ 1274.113339][ T37] audit: type=1326 audit(1761087508.245:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14357 comm="syz.2.2052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0198adefc9 code=0x7ffc0000 [ 1274.114375][ T37] audit: type=1326 audit(1761087508.245:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14357 comm="syz.2.2052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7f0198adefc9 code=0x7ffc0000 [ 1274.114829][ T37] audit: type=1326 audit(1761087508.245:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14357 comm="syz.2.2052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0198adefc9 code=0x7ffc0000 [ 1274.117122][ T37] audit: type=1326 audit(1761087508.245:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14357 comm="syz.2.2052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f0198adefc9 code=0x7ffc0000 [ 1274.119002][ T37] audit: type=1326 audit(1761087508.245:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14357 comm="syz.2.2052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0198adefc9 code=0x7ffc0000 [ 1274.119972][ T37] audit: type=1326 audit(1761087508.245:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14357 comm="syz.2.2052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f0198add810 code=0x7ffc0000 [ 1274.527988][T14233] bridge0: port 2(bridge_slave_1) entered blocking state [ 1274.528062][T14233] bridge0: port 2(bridge_slave_1) entered disabled state [ 1274.528175][T14233] bridge_slave_1: entered allmulticast mode [ 1274.529791][T14233] bridge_slave_1: entered promiscuous mode [ 1275.194636][T14149] hsr_slave_0: entered promiscuous mode [ 1275.253317][T14149] hsr_slave_1: entered promiscuous mode [ 1275.254445][T14149] debugfs: 'hsr0' already exists in 'hsr' [ 1275.254469][T14149] Cannot create hsr debugfs directory [ 1275.519072][T14233] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1275.577765][T14233] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1276.844015][T14371] macvlan2: entered promiscuous mode [ 1276.844031][T14371] bridge0: entered promiscuous mode [ 1278.434746][ C1] vkms_vblank_simulate: vblank timer overrun [ 1278.639708][ C1] vkms_vblank_simulate: vblank timer overrun [ 1278.782281][ C1] vkms_vblank_simulate: vblank timer overrun [ 1279.415589][ C1] vkms_vblank_simulate: vblank timer overrun [ 1279.464397][ C1] vkms_vblank_simulate: vblank timer overrun [ 1279.513617][ C1] vkms_vblank_simulate: vblank timer overrun [ 1279.709499][T14399] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2063'. [ 1279.730519][ C1] vkms_vblank_simulate: vblank timer overrun [ 1279.861015][T14403] delete_channel: no stack [ 1279.870678][ C1] vkms_vblank_simulate: vblank timer overrun [ 1280.508492][ C1] vkms_vblank_simulate: vblank timer overrun [ 1280.687171][T14233] team0: Port device team_slave_0 added [ 1280.708435][T14402] overlayfs: failed to clone upperpath [ 1280.924975][ C1] vkms_vblank_simulate: vblank timer overrun [ 1281.009542][T14233] team0: Port device team_slave_1 added [ 1281.343229][ C1] vkms_vblank_simulate: vblank timer overrun [ 1281.919539][ C1] vkms_vblank_simulate: vblank timer overrun [ 1282.065103][ C1] vkms_vblank_simulate: vblank timer overrun [ 1282.526829][ C1] vkms_vblank_simulate: vblank timer overrun [ 1282.998173][ C1] vkms_vblank_simulate: vblank timer overrun [ 1283.313236][ C1] vkms_vblank_simulate: vblank timer overrun [ 1283.696730][ C1] vkms_vblank_simulate: vblank timer overrun [ 1283.858280][T14233] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1283.858292][T14233] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1283.858306][T14233] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1284.033016][T14233] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1284.033028][T14233] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1284.033049][T14233] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1284.219399][ C1] vkms_vblank_simulate: vblank timer overrun [ 1284.346553][T14430] delete_channel: no stack [ 1288.482521][T14233] hsr_slave_0: entered promiscuous mode [ 1288.512670][T14233] hsr_slave_1: entered promiscuous mode [ 1288.513757][T14233] debugfs: 'hsr0' already exists in 'hsr' [ 1288.513783][T14233] Cannot create hsr debugfs directory [ 1290.222154][T12562] bridge_slave_1: left allmulticast mode [ 1290.222180][T12562] bridge_slave_1: left promiscuous mode [ 1290.222458][T12562] bridge0: port 2(bridge_slave_1) entered disabled state [ 1290.286849][T12562] bridge_slave_0: left allmulticast mode [ 1290.286878][T12562] bridge_slave_0: left promiscuous mode [ 1290.287146][T12562] bridge0: port 1(bridge_slave_0) entered disabled state [ 1290.391523][T12562] bridge_slave_1: left allmulticast mode [ 1290.391554][T12562] bridge_slave_1: left promiscuous mode [ 1290.391799][T12562] bridge0: port 2(bridge_slave_1) entered disabled state [ 1290.466665][T12562] bridge_slave_0: left allmulticast mode [ 1290.466686][T12562] bridge_slave_0: left promiscuous mode [ 1290.466842][T12562] bridge0: port 1(bridge_slave_0) entered disabled state [ 1290.560248][T12562] bridge_slave_1: left allmulticast mode [ 1290.560279][T12562] bridge_slave_1: left promiscuous mode [ 1290.560518][T12562] bridge0: port 2(bridge_slave_1) entered disabled state [ 1290.646618][T12562] bridge_slave_0: left allmulticast mode [ 1290.646639][T12562] bridge_slave_0: left promiscuous mode [ 1290.646816][T12562] bridge0: port 1(bridge_slave_0) entered disabled state [ 1291.277211][T14459] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1292.231774][T14460] 9pnet_virtio: no channels available for device syz [ 1293.188236][ T8858] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1293.192581][ T8858] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1293.213003][ T8858] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1293.214967][ T8858] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1293.232017][ T8858] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1293.280338][T12562] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1293.496793][T12562] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1294.383246][T12562] bond0 (unregistering): Released all slaves [ 1295.540912][T14473] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1295.543796][T11486] Bluetooth: hci2: command tx timeout [ 1295.606365][T12562] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1295.690308][T12562] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1295.728827][T12562] bond0 (unregistering): Released all slaves [ 1295.829259][ T8858] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1295.833860][ T8858] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1295.835012][ T8858] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1295.840397][ T8858] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1295.847860][ T8858] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1295.966191][T12562] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1296.066332][T12562] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1296.107748][T12562] bond0 (unregistering): Released all slaves [ 1296.211767][T14472] macvlan3: entered promiscuous mode [ 1297.447442][ T44] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 1297.674204][ T8858] Bluetooth: hci2: command tx timeout [ 1297.766496][ T44] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1297.766529][ T44] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1297.772926][ T44] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1297.772945][ T44] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1297.772956][ T44] usb 3-1: SerialNumber: syz [ 1297.919302][ T8858] Bluetooth: hci3: command tx timeout [ 1299.101786][ T44] usb 3-1: 0:2 : does not exist [ 1299.101941][ T44] usb 3-1: unit 55 not found! [ 1299.135020][ T44] usb 3-1: USB disconnect, device number 18 [ 1300.005597][ T8858] Bluetooth: hci2: command tx timeout [ 1300.005634][ T8858] Bluetooth: hci3: command tx timeout [ 1300.161789][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.161889][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 1300.481865][T12562] hsr_slave_0: left promiscuous mode [ 1300.565545][T12562] hsr_slave_1: left promiscuous mode [ 1300.566190][T12562] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1300.606172][T12562] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1301.009395][T12562] hsr_slave_0: left promiscuous mode [ 1301.045698][T12562] hsr_slave_1: left promiscuous mode [ 1301.047025][T12562] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1301.068770][T12562] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1301.145762][T12562] hsr_slave_0: left promiscuous mode [ 1301.229321][T12562] hsr_slave_1: left promiscuous mode [ 1301.230562][T12562] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1301.283538][T12562] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1302.080864][ T8858] Bluetooth: hci2: command tx timeout [ 1302.082057][T11486] Bluetooth: hci3: command tx timeout [ 1304.863301][T11486] Bluetooth: hci3: command tx timeout [ 1305.206679][T12562] team0 (unregistering): Port device team_slave_1 removed [ 1305.366560][T12562] team0 (unregistering): Port device team_slave_0 removed [ 1306.277258][ T8858] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1306.281020][ T8858] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1306.282314][ T8858] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1306.284933][ T8858] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1306.287354][ T8858] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1306.665002][T12562] team0 (unregistering): Port device team_slave_1 removed [ 1306.826782][T12562] team0 (unregistering): Port device team_slave_0 removed [ 1308.196111][T12562] team0 (unregistering): Port device team_slave_1 removed [ 1308.315679][ T8858] Bluetooth: hci5: command tx timeout [ 1308.336414][T12562] team0 (unregistering): Port device team_slave_0 removed [ 1310.396592][ T8858] Bluetooth: hci5: command tx timeout [ 1310.996903][T14463] chnl_net:caif_netlink_parms(): no params data found [ 1311.430888][T14475] chnl_net:caif_netlink_parms(): no params data found [ 1312.935599][ T8858] Bluetooth: hci5: command tx timeout [ 1314.956994][ T8858] Bluetooth: hci5: command tx timeout [ 1316.057312][ C1] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 1316.111915][T14463] bridge0: port 1(bridge_slave_0) entered blocking state [ 1316.112151][T14463] bridge0: port 1(bridge_slave_0) entered disabled state [ 1316.112412][T14463] bridge_slave_0: entered allmulticast mode [ 1316.139438][T14463] bridge_slave_0: entered promiscuous mode [ 1316.260879][T14475] bridge0: port 1(bridge_slave_0) entered blocking state [ 1316.260955][T14475] bridge0: port 1(bridge_slave_0) entered disabled state [ 1316.261127][T14475] bridge_slave_0: entered allmulticast mode [ 1316.295896][T14475] bridge_slave_0: entered promiscuous mode [ 1316.298613][T14463] bridge0: port 2(bridge_slave_1) entered blocking state [ 1316.298751][T14463] bridge0: port 2(bridge_slave_1) entered disabled state [ 1316.298941][T14463] bridge_slave_1: entered allmulticast mode [ 1316.301848][T14463] bridge_slave_1: entered promiscuous mode [ 1316.303593][T14533] chnl_net:caif_netlink_parms(): no params data found [ 1316.626760][T14475] bridge0: port 2(bridge_slave_1) entered blocking state [ 1316.626911][T14475] bridge0: port 2(bridge_slave_1) entered disabled state [ 1316.627171][T14475] bridge_slave_1: entered allmulticast mode [ 1316.629982][T14475] bridge_slave_1: entered promiscuous mode [ 1317.831582][T14463] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1318.276515][T14463] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1318.462833][T14475] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1318.628874][T14629] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(11) [ 1318.628903][T14629] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1318.650476][T14629] vhci_hcd vhci_hcd.0: Device attached [ 1318.742937][T14475] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1318.951646][T14630] vhci_hcd: connection closed [ 1318.955306][ T999] vhci_hcd: stop threads [ 1318.955327][ T999] vhci_hcd: release socket [ 1318.956213][ T999] vhci_hcd: disconnect device [ 1318.965579][ T31] usb 37-1: new low-speed USB device number 5 using vhci_hcd [ 1318.965666][ T31] usb 37-1: enqueue for inactive port 0 [ 1319.356214][ T31] vhci_hcd: vhci_device speed not set [ 1320.248166][T14463] team0: Port device team_slave_0 added [ 1320.346598][T14647] 9pnet_virtio: no channels available for device syz [ 1321.327959][T14463] team0: Port device team_slave_1 added [ 1322.239236][T14475] team0: Port device team_slave_0 added [ 1322.741376][T14662] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1323.476343][T14657] overlayfs: failed to clone upperpath [ 1323.622257][T14475] team0: Port device team_slave_1 added [ 1324.802397][T14533] bridge0: port 1(bridge_slave_0) entered blocking state [ 1324.802517][T14533] bridge0: port 1(bridge_slave_0) entered disabled state [ 1324.802702][T14533] bridge_slave_0: entered allmulticast mode [ 1324.827584][T14533] bridge_slave_0: entered promiscuous mode [ 1325.059885][T14463] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1325.059904][T14463] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1325.059930][T14463] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1325.060877][T14533] bridge0: port 2(bridge_slave_1) entered blocking state [ 1325.061004][T14533] bridge0: port 2(bridge_slave_1) entered disabled state [ 1325.061199][T14533] bridge_slave_1: entered allmulticast mode [ 1325.133365][T14533] bridge_slave_1: entered promiscuous mode [ 1325.247613][T14463] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1325.247630][T14463] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1325.247654][T14463] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1325.407744][T14475] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1325.407760][T14475] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1325.407786][T14475] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1325.555706][ T31] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 1325.566079][T14475] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1325.566095][T14475] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1325.566120][T14475] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1325.575178][T14533] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1325.693156][T14533] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1325.710975][ T31] usb 3-1: too many configurations: 151, using maximum allowed: 8 [ 1325.728091][ T31] usb 3-1: New USB device found, idVendor=04d8, idProduct=0082, bcdDevice=ce.b7 [ 1325.728122][ T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=130 [ 1325.728142][ T31] usb 3-1: Product: syz [ 1325.728156][ T31] usb 3-1: Manufacturer: syz [ 1325.728168][ T31] usb 3-1: SerialNumber: syz [ 1325.741813][ T31] usb 3-1: config 0 descriptor?? [ 1325.999417][ T31] usb 3-1: USB disconnect, device number 19 [ 1326.968750][T14682] macvlan2: entered promiscuous mode [ 1326.968765][T14682] bridge0: entered promiscuous mode [ 1326.979849][T14463] hsr_slave_0: entered promiscuous mode [ 1326.981500][T14463] hsr_slave_1: entered promiscuous mode [ 1330.344475][T14533] team0: Port device team_slave_0 added [ 1330.623425][T14533] team0: Port device team_slave_1 added [ 1332.580283][T14475] hsr_slave_0: entered promiscuous mode [ 1332.581763][T14475] hsr_slave_1: entered promiscuous mode [ 1332.596870][T14475] debugfs: 'hsr0' already exists in 'hsr' [ 1332.596898][T14475] Cannot create hsr debugfs directory [ 1336.889090][T14533] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1336.889109][T14533] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1336.889134][T14533] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1337.770654][T14533] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1337.770672][T14533] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1337.770696][T14533] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1337.984684][T14740] overlayfs: failed to clone upperpath [ 1340.275609][ T31] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 1341.320054][ T31] usb 3-1: too many configurations: 151, using maximum allowed: 8 [ 1341.336408][ T31] usb 3-1: New USB device found, idVendor=04d8, idProduct=0082, bcdDevice=ce.b7 [ 1341.336436][ T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=130 [ 1341.336457][ T31] usb 3-1: Product: syz [ 1341.336470][ T31] usb 3-1: Manufacturer: syz [ 1341.336483][ T31] usb 3-1: SerialNumber: syz [ 1341.352932][ T31] usb 3-1: config 0 descriptor?? [ 1342.437218][ T9] usb 3-1: USB disconnect, device number 20 [ 1342.502854][T14533] hsr_slave_0: entered promiscuous mode [ 1342.503730][T14533] hsr_slave_1: entered promiscuous mode [ 1342.504304][T14533] debugfs: 'hsr0' already exists in 'hsr' [ 1342.504322][T14533] Cannot create hsr debugfs directory [ 1342.920027][T14773] 9pnet_virtio: no channels available for device syz [ 1346.308738][T14463] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1346.955591][T14463] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1347.072027][T14463] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1347.126967][T14463] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1347.369553][T12562] bridge_slave_1: left allmulticast mode [ 1347.369581][T12562] bridge_slave_1: left promiscuous mode [ 1347.369799][T12562] bridge0: port 2(bridge_slave_1) entered disabled state [ 1347.375673][ T9] usb 3-1: new full-speed USB device number 21 using dummy_hcd [ 1347.467625][T12562] bridge_slave_0: left allmulticast mode [ 1347.467645][T12562] bridge_slave_0: left promiscuous mode [ 1347.467811][T12562] bridge0: port 1(bridge_slave_0) entered disabled state [ 1347.530450][ T9] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1347.530480][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1347.530490][ T9] usb 3-1: Product: syz [ 1347.530498][ T9] usb 3-1: Manufacturer: syz [ 1347.530505][ T9] usb 3-1: SerialNumber: syz [ 1347.533806][ T9] usb 3-1: config 0 descriptor?? [ 1347.590343][T12562] bridge_slave_1: left allmulticast mode [ 1347.590367][T12562] bridge_slave_1: left promiscuous mode [ 1347.590582][T12562] bridge0: port 2(bridge_slave_1) entered disabled state [ 1347.658495][T12562] bridge_slave_0: left allmulticast mode [ 1347.658516][T12562] bridge_slave_0: left promiscuous mode [ 1347.658742][T12562] bridge0: port 1(bridge_slave_0) entered disabled state [ 1347.719932][T12562] bridge_slave_1: left allmulticast mode [ 1347.719961][T12562] bridge_slave_1: left promiscuous mode [ 1347.720181][T12562] bridge0: port 2(bridge_slave_1) entered disabled state [ 1347.745247][ T9] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1347.777932][T12562] bridge_slave_0: left allmulticast mode [ 1347.777955][T12562] bridge_slave_0: left promiscuous mode [ 1347.778257][T12562] bridge0: port 1(bridge_slave_0) entered disabled state [ 1348.216188][T12562] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1348.464660][ T9] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 1349.267483][T12562] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1349.457381][T12562] bond0 (unregistering): Released all slaves [ 1349.746461][T12562] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1349.839148][T12562] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1349.894228][T12562] bond0 (unregistering): Released all slaves [ 1350.170899][T12562] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1350.174662][ T5789] usb 3-1: USB disconnect, device number 21 [ 1350.266418][T12562] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1350.351907][T12562] bond0 (unregistering): Released all slaves [ 1350.787379][ T5889] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 1350.841979][T14463] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1350.959498][ T5889] usb 3-1: too many configurations: 151, using maximum allowed: 8 [ 1350.991980][ T5889] usb 3-1: New USB device found, idVendor=04d8, idProduct=0082, bcdDevice=ce.b7 [ 1350.992010][ T5889] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=130 [ 1350.992030][ T5889] usb 3-1: Product: syz [ 1350.992044][ T5889] usb 3-1: Manufacturer: syz [ 1350.992057][ T5889] usb 3-1: SerialNumber: syz [ 1351.027196][ T5889] usb 3-1: config 0 descriptor?? [ 1351.250552][ T5889] usb 3-1: USB disconnect, device number 22 [ 1351.255670][T12562] hsr_slave_0: left promiscuous mode [ 1351.294915][T12562] hsr_slave_1: left promiscuous mode [ 1351.296323][T12562] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1351.357025][T12562] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1351.545612][T12562] hsr_slave_0: left promiscuous mode [ 1351.575807][T12562] hsr_slave_1: left promiscuous mode [ 1351.576772][T12562] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1351.626196][T12562] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1351.775642][T12562] hsr_slave_0: left promiscuous mode [ 1351.815722][T12562] hsr_slave_1: left promiscuous mode [ 1351.816383][T12562] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1351.848164][T12562] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1353.823709][T11486] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1353.840535][T11486] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1353.859033][T11486] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1353.861301][T11486] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1353.862106][T11486] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1354.186326][T12562] team0 (unregistering): Port device team_slave_1 removed [ 1354.301140][T12562] team0 (unregistering): Port device team_slave_0 removed [ 1355.915632][T11486] Bluetooth: hci1: command tx timeout [ 1356.426269][T12562] team0 (unregistering): Port device team_slave_1 removed [ 1356.556507][T12562] team0 (unregistering): Port device team_slave_0 removed [ 1357.410196][ T8858] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1357.414303][ T8858] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1357.418700][ T8858] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1357.420252][ T8858] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1357.421443][ T8858] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1358.081990][T11486] Bluetooth: hci1: command tx timeout [ 1359.435860][T11486] Bluetooth: hci2: command tx timeout [ 1359.680636][T12562] team0 (unregistering): Port device team_slave_1 removed [ 1360.310075][T11486] Bluetooth: hci1: command tx timeout [ 1360.527203][T12562] team0 (unregistering): Port device team_slave_0 removed [ 1361.515562][T11486] Bluetooth: hci2: command tx timeout [ 1361.614878][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 1361.615902][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 1362.315685][T11486] Bluetooth: hci1: command tx timeout [ 1362.912643][T14877] 9pnet_virtio: no channels available for device syz [ 1363.725621][T11486] Bluetooth: hci2: command tx timeout [ 1365.567464][T14533] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1365.770393][T11486] Bluetooth: hci2: command tx timeout [ 1365.837626][T14533] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1366.100228][T14533] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1366.438930][T14895] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(11) [ 1366.443605][T14895] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1366.448023][T14895] vhci_hcd vhci_hcd.0: Device attached [ 1366.775614][ T990] usb 37-1: new low-speed USB device number 6 using vhci_hcd [ 1366.839242][T14906] vhci_hcd: connection reset by peer [ 1366.845860][ T9226] vhci_hcd: stop threads [ 1366.845879][ T9226] vhci_hcd: release socket [ 1366.848502][ T9226] vhci_hcd: disconnect device [ 1367.030406][T14533] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1367.120402][ T8858] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1367.140549][ T8858] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1367.144398][ T8858] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1367.160516][ T8858] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1367.162162][ T8858] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1367.270040][T14837] chnl_net:caif_netlink_parms(): no params data found [ 1367.324024][T14863] chnl_net:caif_netlink_parms(): no params data found [ 1369.828727][ T8858] Bluetooth: hci3: command tx timeout [ 1371.915781][ T990] vhci_hcd: vhci_device speed not set [ 1372.068485][ T8858] Bluetooth: hci3: command tx timeout [ 1374.082069][ T8858] Bluetooth: hci3: command tx timeout [ 1374.796397][T14837] bridge0: port 1(bridge_slave_0) entered blocking state [ 1374.796518][T14837] bridge0: port 1(bridge_slave_0) entered disabled state [ 1374.796765][T14837] bridge_slave_0: entered allmulticast mode [ 1374.799322][T14837] bridge_slave_0: entered promiscuous mode [ 1374.846948][T14863] bridge0: port 1(bridge_slave_0) entered blocking state [ 1374.847054][T14863] bridge0: port 1(bridge_slave_0) entered disabled state [ 1374.847234][T14863] bridge_slave_0: entered allmulticast mode [ 1374.849443][T14863] bridge_slave_0: entered promiscuous mode [ 1374.894266][T14837] bridge0: port 2(bridge_slave_1) entered blocking state [ 1374.894340][T14837] bridge0: port 2(bridge_slave_1) entered disabled state [ 1374.894470][T14837] bridge_slave_1: entered allmulticast mode [ 1374.916231][T14837] bridge_slave_1: entered promiscuous mode [ 1374.917522][T14863] bridge0: port 2(bridge_slave_1) entered blocking state [ 1374.917595][T14863] bridge0: port 2(bridge_slave_1) entered disabled state [ 1374.917734][T14863] bridge_slave_1: entered allmulticast mode [ 1374.919287][T14863] bridge_slave_1: entered promiscuous mode [ 1375.598092][T14837] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1375.600217][T14863] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1375.614680][T14863] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1376.485621][ T8858] Bluetooth: hci3: command tx timeout [ 1376.572111][T14837] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1378.342662][T14863] team0: Port device team_slave_0 added [ 1378.355286][T14837] team0: Port device team_slave_0 added [ 1378.376108][T14863] team0: Port device team_slave_1 added [ 1378.380243][T14837] team0: Port device team_slave_1 added [ 1378.778416][T14863] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1378.778431][T14863] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1378.778455][T14863] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1378.955900][T14837] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1378.955917][T14837] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1378.955942][T14837] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1378.995935][T14863] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1378.995953][T14863] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1378.995979][T14863] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1379.326613][T14837] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1379.326629][T14837] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1379.326654][T14837] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1380.342065][T15009] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1380.379349][T15009] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 1384.603564][T14863] hsr_slave_0: entered promiscuous mode [ 1384.606549][T14863] hsr_slave_1: entered promiscuous mode [ 1384.607493][T14863] debugfs: 'hsr0' already exists in 'hsr' [ 1384.607516][T14863] Cannot create hsr debugfs directory [ 1384.646680][T14837] hsr_slave_0: entered promiscuous mode [ 1384.648185][T14837] hsr_slave_1: entered promiscuous mode [ 1384.649182][T14837] debugfs: 'hsr0' already exists in 'hsr' [ 1384.649206][T14837] Cannot create hsr debugfs directory [ 1384.649793][T14911] chnl_net:caif_netlink_parms(): no params data found [ 1385.177193][T15049] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1385.210083][T15049] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 1387.851175][T14911] bridge0: port 1(bridge_slave_0) entered blocking state [ 1387.851325][T14911] bridge0: port 1(bridge_slave_0) entered disabled state [ 1387.851511][T14911] bridge_slave_0: entered allmulticast mode [ 1387.854247][T14911] bridge_slave_0: entered promiscuous mode [ 1388.097619][T14911] bridge0: port 2(bridge_slave_1) entered blocking state [ 1388.097748][T14911] bridge0: port 2(bridge_slave_1) entered disabled state [ 1388.097890][T14911] bridge_slave_1: entered allmulticast mode [ 1388.100873][T14911] bridge_slave_1: entered promiscuous mode [ 1388.648267][T11486] Bluetooth: hci5: command 0x1003 tx timeout [ 1388.786140][ T8858] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 1389.745652][T15078] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1389.751957][T15078] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1390.991157][T15081] macvlan3: entered promiscuous mode [ 1392.050870][T14911] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1392.121734][T14911] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1392.821918][T14911] team0: Port device team_slave_0 added [ 1393.173261][T14911] team0: Port device team_slave_1 added [ 1393.767088][T14911] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1393.767104][T14911] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1393.767125][T14911] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1393.772329][T14911] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1393.772346][T14911] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1393.772369][T14911] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1394.750807][T14911] hsr_slave_0: entered promiscuous mode [ 1394.751649][T14911] hsr_slave_1: entered promiscuous mode [ 1394.752253][T14911] debugfs: 'hsr0' already exists in 'hsr' [ 1394.752268][T14911] Cannot create hsr debugfs directory [ 1395.347241][T12562] bridge_slave_1: left allmulticast mode [ 1395.347269][T12562] bridge_slave_1: left promiscuous mode [ 1395.347438][T12562] bridge0: port 2(bridge_slave_1) entered disabled state [ 1395.480655][T12562] bridge_slave_0: left allmulticast mode [ 1395.480684][T12562] bridge_slave_0: left promiscuous mode [ 1395.480980][T12562] bridge0: port 1(bridge_slave_0) entered disabled state [ 1395.597705][ T8858] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 1398.748731][T12562] bridge_slave_1: left allmulticast mode [ 1398.748762][T12562] bridge_slave_1: left promiscuous mode [ 1398.749032][T12562] bridge0: port 2(bridge_slave_1) entered disabled state [ 1399.157118][T12562] bridge_slave_0: left allmulticast mode [ 1399.157146][T12562] bridge_slave_0: left promiscuous mode [ 1399.157406][T12562] bridge0: port 1(bridge_slave_0) entered disabled state [ 1399.251950][T12562] bridge_slave_1: left allmulticast mode [ 1399.251981][T12562] bridge_slave_1: left promiscuous mode [ 1399.252223][T12562] bridge0: port 2(bridge_slave_1) entered disabled state [ 1399.317234][T12562] bridge_slave_0: left allmulticast mode [ 1399.317262][T12562] bridge_slave_0: left promiscuous mode [ 1399.317656][T12562] bridge0: port 1(bridge_slave_0) entered disabled state [ 1401.796348][T12562] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1402.036147][T12562] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1402.157670][T12562] bond0 (unregistering): Released all slaves [ 1403.776199][T12562] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1404.009088][T15150] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1404.013857][T15150] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 1405.307914][T12562] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1405.377704][T12562] bond0 (unregistering): Released all slaves [ 1409.326884][T12562] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1409.418248][T12562] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1409.511900][T12562] bond0 (unregistering): Released all slaves [ 1410.413896][T14863] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1410.431722][ C0] vkms_vblank_simulate: vblank timer overrun [ 1411.347700][ C0] vkms_vblank_simulate: vblank timer overrun [ 1411.412088][T14863] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1411.417683][ T9] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 1411.531751][T14863] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1411.568217][ T9] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1411.568244][ T9] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1411.569770][ T9] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1411.569796][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1411.569814][ T9] usb 3-1: SerialNumber: syz [ 1411.801277][ C0] vkms_vblank_simulate: vblank timer overrun [ 1411.841263][ T9] usb 3-1: 0:2 : does not exist [ 1411.841545][ T9] usb 3-1: unit 5 not found! [ 1411.960604][ T9] usb 3-1: USB disconnect, device number 23 [ 1412.492591][T14863] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1412.538338][ C0] vkms_vblank_simulate: vblank timer overrun [ 1412.599820][ C0] vkms_vblank_simulate: vblank timer overrun [ 1412.805730][T12562] hsr_slave_0: left promiscuous mode [ 1412.845812][T12562] hsr_slave_1: left promiscuous mode [ 1412.847152][T12562] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1412.868660][T12562] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1413.025817][T12562] hsr_slave_0: left promiscuous mode [ 1413.049348][T12562] hsr_slave_1: left promiscuous mode [ 1413.050052][T12562] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1413.087323][T12562] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1413.245743][T12562] hsr_slave_0: left promiscuous mode [ 1413.267305][T12562] hsr_slave_1: left promiscuous mode [ 1413.267961][T12562] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1413.316733][T12562] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1413.939072][ C0] vkms_vblank_simulate: vblank timer overrun [ 1413.984715][ C0] vkms_vblank_simulate: vblank timer overrun [ 1414.065129][T12562] team0 (unregistering): Port device team_slave_1 removed [ 1414.122960][ C0] vkms_vblank_simulate: vblank timer overrun [ 1414.259036][ C0] vkms_vblank_simulate: vblank timer overrun [ 1414.619157][T12562] team0 (unregistering): Port device team_slave_0 removed [ 1414.966650][ C0] vkms_vblank_simulate: vblank timer overrun [ 1415.089328][T11486] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1415.109041][T11486] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1415.145761][T11486] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1415.154569][T11486] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1415.156313][T11486] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1416.566755][T12562] team0 (unregistering): Port device team_slave_1 removed [ 1416.776390][T12562] team0 (unregistering): Port device team_slave_0 removed [ 1417.195625][T11486] Bluetooth: hci5: command tx timeout [ 1417.856166][T12562] team0 (unregistering): Port device team_slave_1 removed [ 1418.008512][T12562] team0 (unregistering): Port device team_slave_0 removed [ 1419.419250][T11486] Bluetooth: hci5: command tx timeout [ 1421.585529][T11486] Bluetooth: hci5: command tx timeout [ 1422.934428][ T8858] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1422.946730][ T8858] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1422.948213][ T8858] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1422.949515][ T8858] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1422.956625][ T8858] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1423.066131][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 1423.066204][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 1423.809584][ T8858] Bluetooth: hci5: command tx timeout [ 1426.093486][ T8858] Bluetooth: hci1: command tx timeout [ 1426.433808][ C1] vkms_vblank_simulate: vblank timer overrun [ 1426.928786][ C1] vkms_vblank_simulate: vblank timer overrun [ 1427.051194][ C1] vkms_vblank_simulate: vblank timer overrun [ 1427.116129][ C1] vkms_vblank_simulate: vblank timer overrun [ 1427.176532][T15212] chnl_net:caif_netlink_parms(): no params data found [ 1427.264645][ C1] vkms_vblank_simulate: vblank timer overrun [ 1427.333359][ C1] vkms_vblank_simulate: vblank timer overrun [ 1427.584590][ C1] vkms_vblank_simulate: vblank timer overrun [ 1427.647000][ C1] vkms_vblank_simulate: vblank timer overrun [ 1427.878003][ C1] vkms_vblank_simulate: vblank timer overrun [ 1427.934954][ C1] vkms_vblank_simulate: vblank timer overrun [ 1427.991777][T15212] bridge0: port 1(bridge_slave_0) entered blocking state [ 1427.991914][T15212] bridge0: port 1(bridge_slave_0) entered disabled state [ 1427.992276][T15212] bridge_slave_0: entered allmulticast mode [ 1427.999021][T15212] bridge_slave_0: entered promiscuous mode [ 1428.030013][T15212] bridge0: port 2(bridge_slave_1) entered blocking state [ 1428.030140][T15212] bridge0: port 2(bridge_slave_1) entered disabled state [ 1428.030409][T15212] bridge_slave_1: entered allmulticast mode [ 1428.037740][T15212] bridge_slave_1: entered promiscuous mode [ 1428.165692][ T8858] Bluetooth: hci1: command tx timeout [ 1428.316639][T11486] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1428.339716][T11486] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1428.344865][T11486] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1428.383767][ C1] vkms_vblank_simulate: vblank timer overrun [ 1428.391773][T11486] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1428.394603][T11486] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1428.560918][ C1] vkms_vblank_simulate: vblank timer overrun [ 1429.584439][ C1] vkms_vblank_simulate: vblank timer overrun [ 1429.698507][ C1] vkms_vblank_simulate: vblank timer overrun [ 1429.780264][T15212] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1429.796962][T15212] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1430.093038][ C1] vkms_vblank_simulate: vblank timer overrun [ 1430.133804][ C1] vkms_vblank_simulate: vblank timer overrun [ 1430.181909][ C1] vkms_vblank_simulate: vblank timer overrun [ 1430.651195][ C1] vkms_vblank_simulate: vblank timer overrun [ 1430.665605][ T8858] Bluetooth: hci1: command tx timeout [ 1430.668460][ T8858] Bluetooth: hci2: command tx timeout [ 1430.825895][ C1] vkms_vblank_simulate: vblank timer overrun [ 1431.016396][ C1] vkms_vblank_simulate: vblank timer overrun [ 1431.044885][T15212] team0: Port device team_slave_0 added [ 1431.047092][T15242] chnl_net:caif_netlink_parms(): no params data found [ 1431.320949][T15212] team0: Port device team_slave_1 added [ 1432.227032][T15212] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1432.227044][T15212] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1432.227059][T15212] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1432.301757][T15212] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1432.301784][T15212] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1432.301807][T15212] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1432.725816][ T8858] Bluetooth: hci1: command tx timeout [ 1432.725839][ T8858] Bluetooth: hci2: command tx timeout [ 1432.733718][T15242] bridge0: port 1(bridge_slave_0) entered blocking state [ 1432.733801][T15242] bridge0: port 1(bridge_slave_0) entered disabled state [ 1432.733927][T15242] bridge_slave_0: entered allmulticast mode [ 1432.739240][T15242] bridge_slave_0: entered promiscuous mode [ 1432.810473][T15316] overlayfs: failed to clone upperpath [ 1432.849015][T15242] bridge0: port 2(bridge_slave_1) entered blocking state [ 1432.849092][T15242] bridge0: port 2(bridge_slave_1) entered disabled state [ 1432.849235][T15242] bridge_slave_1: entered allmulticast mode [ 1432.852244][T15242] bridge_slave_1: entered promiscuous mode [ 1432.873077][T15212] hsr_slave_0: entered promiscuous mode [ 1432.874428][T15212] hsr_slave_1: entered promiscuous mode [ 1434.409504][T15242] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1434.542643][T15242] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1434.795815][T11486] Bluetooth: hci2: command tx timeout [ 1435.375584][T15242] team0: Port device team_slave_0 added [ 1435.537492][T15242] team0: Port device team_slave_1 added [ 1436.913377][T11486] Bluetooth: hci2: command tx timeout [ 1439.743638][T15242] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1439.743654][T15242] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1439.743680][T15242] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1439.985705][T15242] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1439.985722][T15242] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1439.985748][T15242] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1440.366709][T15282] chnl_net:caif_netlink_parms(): no params data found [ 1440.821872][T15242] hsr_slave_0: entered promiscuous mode [ 1440.823258][T15242] hsr_slave_1: entered promiscuous mode [ 1440.824281][T15242] debugfs: 'hsr0' already exists in 'hsr' [ 1440.824305][T15242] Cannot create hsr debugfs directory [ 1442.657274][T15282] bridge0: port 1(bridge_slave_0) entered blocking state [ 1442.657843][T15282] bridge0: port 1(bridge_slave_0) entered disabled state [ 1442.658086][T15282] bridge_slave_0: entered allmulticast mode [ 1442.661063][T15282] bridge_slave_0: entered promiscuous mode [ 1442.791131][T15282] bridge0: port 2(bridge_slave_1) entered blocking state [ 1442.791494][T15282] bridge0: port 2(bridge_slave_1) entered disabled state [ 1442.791906][T15282] bridge_slave_1: entered allmulticast mode [ 1442.795339][T15282] bridge_slave_1: entered promiscuous mode [ 1443.166298][T15282] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1443.297536][T15282] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1444.114855][T15282] team0: Port device team_slave_0 added [ 1445.567566][T15282] team0: Port device team_slave_1 added [ 1447.240312][ C0] vkms_vblank_simulate: vblank timer overrun [ 1448.090969][T15282] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1448.090988][T15282] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1448.091014][T15282] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1448.192848][T15282] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1448.192865][T15282] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1448.192891][T15282] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1448.323709][ C0] vkms_vblank_simulate: vblank timer overrun [ 1448.710454][ C0] vkms_vblank_simulate: vblank timer overrun [ 1449.399860][ C0] vkms_vblank_simulate: vblank timer overrun [ 1449.668134][T15212] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1449.846348][ C0] vkms_vblank_simulate: vblank timer overrun [ 1449.869895][T15282] hsr_slave_0: entered promiscuous mode [ 1449.871474][T15282] hsr_slave_1: entered promiscuous mode [ 1449.872687][T15282] debugfs: 'hsr0' already exists in 'hsr' [ 1449.872704][T15282] Cannot create hsr debugfs directory [ 1449.873239][T15212] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1450.399920][ C0] vkms_vblank_simulate: vblank timer overrun [ 1450.724426][ C0] vkms_vblank_simulate: vblank timer overrun [ 1450.769150][T15212] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1452.000868][T15212] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1452.723379][T12562] bridge_slave_1: left allmulticast mode [ 1452.723398][T12562] bridge_slave_1: left promiscuous mode [ 1452.723563][T12562] bridge0: port 2(bridge_slave_1) entered disabled state [ 1452.776734][T12562] bridge_slave_0: left allmulticast mode [ 1452.776753][T12562] bridge_slave_0: left promiscuous mode [ 1452.776940][T12562] bridge0: port 1(bridge_slave_0) entered disabled state [ 1452.838563][T12562] bridge_slave_1: left allmulticast mode [ 1452.838584][T12562] bridge_slave_1: left promiscuous mode [ 1452.838781][T12562] bridge0: port 2(bridge_slave_1) entered disabled state [ 1452.906896][T12562] bridge_slave_0: left allmulticast mode [ 1452.906916][T12562] bridge_slave_0: left promiscuous mode [ 1452.907099][T12562] bridge0: port 1(bridge_slave_0) entered disabled state [ 1452.968680][T12562] bridge_slave_1: left allmulticast mode [ 1452.968701][T12562] bridge_slave_1: left promiscuous mode [ 1452.968861][T12562] bridge0: port 2(bridge_slave_1) entered disabled state [ 1453.044247][T12562] bridge_slave_0: left allmulticast mode [ 1453.044278][T12562] bridge_slave_0: left promiscuous mode [ 1453.044517][T12562] bridge0: port 1(bridge_slave_0) entered disabled state [ 1454.192299][T12562] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1454.466212][T12562] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1454.484690][T15427] snd_dummy snd_dummy.0: control 5:65279:0:syz0:0 is already present [ 1454.527768][T12562] bond0 (unregistering): Released all slaves [ 1454.836414][T12562] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1454.916170][T12562] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1454.977468][T12562] bond0 (unregistering): Released all slaves [ 1455.257140][T12562] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1455.668625][T12562] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1456.467734][T12562] bond0 (unregistering): Released all slaves [ 1458.566627][T12562] hsr_slave_0: left promiscuous mode [ 1458.677393][T12562] hsr_slave_1: left promiscuous mode [ 1458.678085][T12562] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1458.778781][T12562] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1460.160731][T12562] hsr_slave_0: left promiscuous mode [ 1460.201441][T12562] hsr_slave_1: left promiscuous mode [ 1460.202115][T12562] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1460.246219][T12562] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1460.366745][T12562] hsr_slave_0: left promiscuous mode [ 1460.405809][T12562] hsr_slave_1: left promiscuous mode [ 1460.407832][T12562] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1460.436350][T12562] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1463.696302][T12562] team0 (unregistering): Port device team_slave_1 removed [ 1465.048857][T12562] team0 (unregistering): Port device team_slave_0 removed [ 1471.771554][T12562] team0 (unregistering): Port device team_slave_1 removed [ 1471.968783][T12562] team0 (unregistering): Port device team_slave_0 removed [ 1475.121108][T12562] team0 (unregistering): Port device team_slave_1 removed [ 1475.256932][T12562] team0 (unregistering): Port device team_slave_0 removed [ 1477.484989][ T8858] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1477.497422][ T8858] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1477.499164][ T8858] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1477.501194][ T8858] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1477.502011][ T8858] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1479.595702][ T8858] Bluetooth: hci3: command tx timeout [ 1480.914570][T15538] chnl_net:caif_netlink_parms(): no params data found [ 1481.675532][ T8858] Bluetooth: hci3: command tx timeout [ 1483.096891][ C1] vkms_vblank_simulate: vblank timer overrun [ 1483.251323][ C1] vkms_vblank_simulate: vblank timer overrun [ 1483.392897][T15538] bridge0: port 1(bridge_slave_0) entered blocking state [ 1483.393019][T15538] bridge0: port 1(bridge_slave_0) entered disabled state [ 1483.393470][T15538] bridge_slave_0: entered allmulticast mode [ 1483.409261][T15538] bridge_slave_0: entered promiscuous mode [ 1483.496133][T15538] bridge0: port 2(bridge_slave_1) entered blocking state [ 1483.496262][T15538] bridge0: port 2(bridge_slave_1) entered disabled state [ 1483.496518][T15538] bridge_slave_1: entered allmulticast mode [ 1483.502348][T15538] bridge_slave_1: entered promiscuous mode [ 1483.564004][T11486] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1483.579883][T11486] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1483.581165][T11486] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1483.582759][T11486] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1483.583469][T11486] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1483.755601][ T8858] Bluetooth: hci3: command tx timeout [ 1484.113694][T15538] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1484.171733][T15538] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1484.491478][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 1484.491546][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 1484.932442][ C1] vkms_vblank_simulate: vblank timer overrun [ 1485.349371][T15538] team0: Port device team_slave_0 added [ 1485.392646][T15538] team0: Port device team_slave_1 added [ 1485.488551][T15282] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1485.624926][T15282] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1485.639196][T15538] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1485.639211][T15538] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1485.639224][T15538] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1485.648427][T15282] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1485.685556][ T8858] Bluetooth: hci5: command tx timeout [ 1485.720057][T15538] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1485.720073][T15538] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1485.720087][T15538] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1485.725272][T15282] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1485.755620][ T5972] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 1485.835849][ T8858] Bluetooth: hci3: command tx timeout [ 1485.905635][ T5972] usb 3-1: Using ep0 maxpacket: 16 [ 1485.907722][ T5972] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1485.910804][ T5972] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1485.910840][ T5972] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1485.910854][ T5972] usb 3-1: Product: syz [ 1485.910861][ T5972] usb 3-1: Manufacturer: syz [ 1485.910869][ T5972] usb 3-1: SerialNumber: syz [ 1485.914055][ T5972] usb 3-1: config 0 descriptor?? [ 1485.923654][ T5972] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1485.923686][ T5972] em28xx 3-1:0.0: DVB interface 0 found: bulk [ 1486.386219][T15538] hsr_slave_0: entered promiscuous mode [ 1486.388932][T15538] hsr_slave_1: entered promiscuous mode [ 1486.389996][T15538] debugfs: 'hsr0' already exists in 'hsr' [ 1486.390020][T15538] Cannot create hsr debugfs directory [ 1486.530669][ T5972] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 1486.973023][ T5972] em28xx 3-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 1486.973053][ T5972] em28xx 3-1:0.0: board has no eeprom [ 1487.057957][ T5972] em28xx 3-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 1487.057984][ T5972] em28xx 3-1:0.0: dvb set to bulk mode. [ 1487.060028][ T9] em28xx 3-1:0.0: Binding DVB extension [ 1487.073729][ T5972] usb 3-1: USB disconnect, device number 24 [ 1487.076083][ T5972] em28xx 3-1:0.0: Disconnecting em28xx [ 1487.169923][ T9] em28xx 3-1:0.0: Registering input extension [ 1487.170187][ T5972] em28xx 3-1:0.0: Closing input extension [ 1487.219834][ T5972] em28xx 3-1:0.0: Freeing device [ 1487.389001][T15573] chnl_net:caif_netlink_parms(): no params data found [ 1487.755626][ T8858] Bluetooth: hci5: command tx timeout [ 1487.825593][ T5972] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 1488.038977][ C1] vkms_vblank_simulate: vblank timer overrun [ 1488.048854][ T5972] usb 3-1: too many configurations: 151, using maximum allowed: 8 [ 1488.074329][ T5972] usb 3-1: New USB device found, idVendor=04d8, idProduct=0082, bcdDevice=ce.b7 [ 1488.074364][ T5972] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=130 [ 1488.074383][ T5972] usb 3-1: Product: syz [ 1488.074396][ T5972] usb 3-1: Manufacturer: syz [ 1488.074410][ T5972] usb 3-1: SerialNumber: syz [ 1488.080164][ T5972] usb 3-1: config 0 descriptor?? [ 1488.971948][ T5874] usb 3-1: USB disconnect, device number 25 [ 1489.328523][T15573] bridge0: port 1(bridge_slave_0) entered blocking state [ 1489.328710][T15573] bridge0: port 1(bridge_slave_0) entered disabled state [ 1489.328967][T15573] bridge_slave_0: entered allmulticast mode [ 1489.331744][T15573] bridge_slave_0: entered promiscuous mode [ 1489.364502][T15573] bridge0: port 2(bridge_slave_1) entered blocking state [ 1489.364695][T15573] bridge0: port 2(bridge_slave_1) entered disabled state [ 1489.364889][T15573] bridge_slave_1: entered allmulticast mode [ 1489.386931][T15573] bridge_slave_1: entered promiscuous mode [ 1489.999936][ T8858] Bluetooth: hci5: command tx timeout [ 1490.422278][T11486] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1490.433285][T11486] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1490.434736][T11486] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1490.437202][T11486] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1490.438548][T11486] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1490.625905][T15573] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1490.666201][T15573] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1491.324953][T15573] team0: Port device team_slave_0 added [ 1491.336939][T15573] team0: Port device team_slave_1 added [ 1491.604957][T12562] bridge_slave_1: left allmulticast mode [ 1491.604983][T12562] bridge_slave_1: left promiscuous mode [ 1491.605214][T12562] bridge0: port 2(bridge_slave_1) entered disabled state [ 1492.077844][ T8858] Bluetooth: hci5: command tx timeout [ 1492.196088][T12562] bridge_slave_0: left allmulticast mode [ 1492.196114][T12562] bridge_slave_0: left promiscuous mode [ 1492.196354][T12562] bridge0: port 1(bridge_slave_0) entered disabled state [ 1492.497277][ T8858] Bluetooth: hci1: command tx timeout [ 1492.547638][T12562] bridge_slave_1: left allmulticast mode [ 1492.547668][T12562] bridge_slave_1: left promiscuous mode [ 1492.547923][T12562] bridge0: port 2(bridge_slave_1) entered disabled state [ 1492.607999][T12562] bridge_slave_0: left allmulticast mode [ 1492.608027][T12562] bridge_slave_0: left promiscuous mode [ 1492.608284][T12562] bridge0: port 1(bridge_slave_0) entered disabled state [ 1494.106387][T12562] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1494.196261][T12562] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1494.260727][T12562] bond0 (unregistering): Released all slaves [ 1494.735304][ T8858] Bluetooth: hci1: command tx timeout [ 1496.227127][T12562] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1496.899904][ T8858] Bluetooth: hci1: command tx timeout [ 1498.626262][T12562] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1498.714438][T12562] bond0 (unregistering): Released all slaves [ 1498.956583][ T8858] Bluetooth: hci1: command tx timeout [ 1499.071351][T15573] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1499.071364][T15573] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1499.071378][T15573] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1499.391885][T15573] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1499.391911][T15573] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1499.392048][T15573] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1500.865625][T12562] hsr_slave_0: left promiscuous mode [ 1500.886668][T12562] hsr_slave_1: left promiscuous mode [ 1500.887624][T12562] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1500.928333][T12562] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1501.265607][T12562] hsr_slave_0: left promiscuous mode [ 1502.236058][T12562] hsr_slave_1: left promiscuous mode [ 1502.237827][T12562] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1502.350125][T12562] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1502.865705][T15702] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2384'. [ 1504.096100][T12562] team0 (unregistering): Port device team_slave_1 removed [ 1504.247861][T12562] team0 (unregistering): Port device team_slave_0 removed [ 1505.246321][T12562] team0 (unregistering): Port device team_slave_1 removed [ 1505.397831][T12562] team0 (unregistering): Port device team_slave_0 removed [ 1508.480352][T15713] macvlan4: entered promiscuous mode [ 1509.226107][T15573] hsr_slave_0: entered promiscuous mode [ 1509.227722][T15573] hsr_slave_1: entered promiscuous mode [ 1509.486828][T15538] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1509.613610][T15538] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1509.818282][T15538] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1510.045565][T15538] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1514.202098][T15622] chnl_net:caif_netlink_parms(): no params data found [ 1515.496001][ T9] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 1516.512640][ T9] usb 3-1: too many configurations: 151, using maximum allowed: 8 [ 1517.161175][ T9] usb 3-1: New USB device found, idVendor=04d8, idProduct=0082, bcdDevice=ce.b7 [ 1517.161237][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=130 [ 1517.161299][ T9] usb 3-1: Product: syz [ 1517.161343][ T9] usb 3-1: Manufacturer: syz [ 1517.161357][ T9] usb 3-1: SerialNumber: syz [ 1517.451140][ T9] usb 3-1: config 0 descriptor?? [ 1519.103480][ T5881] usb 3-1: USB disconnect, device number 26 [ 1519.130386][T15622] bridge0: port 1(bridge_slave_0) entered blocking state [ 1519.130588][T15622] bridge0: port 1(bridge_slave_0) entered disabled state [ 1519.132233][T15622] bridge_slave_0: entered allmulticast mode [ 1519.164081][T15622] bridge_slave_0: entered promiscuous mode [ 1519.417100][T15622] bridge0: port 2(bridge_slave_1) entered blocking state [ 1519.417260][T15622] bridge0: port 2(bridge_slave_1) entered disabled state [ 1519.417526][T15622] bridge_slave_1: entered allmulticast mode [ 1519.420439][T15622] bridge_slave_1: entered promiscuous mode [ 1520.421218][T15538] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1522.209524][T15786] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1523.635801][T15622] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1523.658998][T15622] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1523.801677][ T9] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 1523.846806][T15622] team0: Port device team_slave_0 added [ 1523.850756][T15622] team0: Port device team_slave_1 added [ 1523.853957][T15538] 8021q: adding VLAN 0 to HW filter on device team0 [ 1523.965681][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 1523.969859][ T9] usb 3-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 1523.969888][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1523.969901][ T9] usb 3-1: Product: syz [ 1523.969908][ T9] usb 3-1: Manufacturer: syz [ 1523.969915][ T9] usb 3-1: SerialNumber: syz [ 1523.973104][ T9] usb 3-1: config 0 descriptor?? [ 1524.194528][T15622] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1524.194545][T15622] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1524.194568][T15622] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1524.432658][ T9] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 1524.466694][ T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1524.467999][ T9] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 1524.468098][ T9] usb 3-1: media controller created [ 1524.620769][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1524.651194][T15798] dtv5100: wlen = 0, aborting. [ 1524.798855][ T9] zl10353_read_register: readreg error (reg=127, ret==0) [ 1524.798952][ T9] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 1524.798982][ T9] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 1524.800982][ T9] usb 3-1: USB disconnect, device number 27 [ 1524.846100][ T9] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 1524.910686][ T1519] bridge0: port 1(bridge_slave_0) entered blocking state [ 1524.910910][ T1519] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1524.913005][T15622] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1524.913018][T15622] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1524.913043][T15622] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1525.232527][ T160] bridge0: port 2(bridge_slave_1) entered blocking state [ 1525.232745][ T160] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1527.316270][T15827] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(11) [ 1527.316297][T15827] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1527.319680][T15827] vhci_hcd vhci_hcd.0: Device attached [ 1527.379163][T15829] vhci_hcd: connection closed [ 1527.379542][ T86] vhci_hcd: stop threads [ 1527.379553][ T86] vhci_hcd: release socket [ 1527.379584][ T86] vhci_hcd: disconnect device [ 1527.600481][T15622] hsr_slave_0: entered promiscuous mode [ 1527.601823][T15622] hsr_slave_1: entered promiscuous mode [ 1527.602817][T15622] debugfs: 'hsr0' already exists in 'hsr' [ 1527.602842][T15622] Cannot create hsr debugfs directory [ 1528.927938][T15573] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1528.960375][T15573] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1529.084429][T15573] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1529.152480][T15573] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1530.582183][T12562] bridge_slave_1: left allmulticast mode [ 1530.582212][T12562] bridge_slave_1: left promiscuous mode [ 1530.582447][T12562] bridge0: port 2(bridge_slave_1) entered disabled state [ 1530.656686][T12562] bridge_slave_0: left allmulticast mode [ 1530.656707][T12562] bridge_slave_0: left promiscuous mode [ 1530.656893][T12562] bridge0: port 1(bridge_slave_0) entered disabled state [ 1532.086444][T12562] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1532.166305][T12562] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1532.232629][T12562] bond0 (unregistering): Released all slaves [ 1532.605565][T12562] hsr_slave_0: left promiscuous mode [ 1533.536593][T12562] hsr_slave_1: left promiscuous mode [ 1533.537635][T12562] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1533.586403][T12562] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1534.094101][T11486] Bluetooth: hci2: command 0x1003 tx timeout [ 1534.094109][ T8858] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 1535.314663][T12562] team0 (unregistering): Port device team_slave_1 removed [ 1535.567782][T12562] team0 (unregistering): Port device team_slave_0 removed [ 1536.484167][T15538] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1536.617999][T15573] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1536.753446][T15573] 8021q: adding VLAN 0 to HW filter on device team0 [ 1536.782723][ T1443] bridge0: port 1(bridge_slave_0) entered blocking state [ 1536.783825][ T1443] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1536.838969][ T999] bridge0: port 2(bridge_slave_1) entered blocking state [ 1536.839115][ T999] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1537.519525][ T8858] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 1537.667583][T15622] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1537.712186][T15622] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1537.751921][T15622] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1538.035917][T15622] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1538.136223][T15573] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1541.454915][T11486] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1541.473449][T11486] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1541.474931][T11486] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1541.491241][T11486] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1541.491735][T11486] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1541.917582][ C1] vkms_vblank_simulate: vblank timer overrun [ 1542.244291][ C1] vkms_vblank_simulate: vblank timer overrun [ 1542.275888][ C1] vkms_vblank_simulate: vblank timer overrun [ 1542.323563][ C1] vkms_vblank_simulate: vblank timer overrun [ 1542.641222][T15622] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1542.698249][T15622] 8021q: adding VLAN 0 to HW filter on device team0 [ 1542.707636][ T999] bridge0: port 1(bridge_slave_0) entered blocking state [ 1542.707840][ T999] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1542.758469][ T999] bridge0: port 2(bridge_slave_1) entered blocking state [ 1542.758598][ T999] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1542.917422][T15925] chnl_net:caif_netlink_parms(): no params data found [ 1542.950295][T12562] bridge_slave_1: left allmulticast mode [ 1542.950314][T12562] bridge_slave_1: left promiscuous mode [ 1542.950463][T12562] bridge0: port 2(bridge_slave_1) entered disabled state [ 1543.026593][T12562] bridge_slave_0: left allmulticast mode [ 1543.026614][T12562] bridge_slave_0: left promiscuous mode [ 1543.026787][T12562] bridge0: port 1(bridge_slave_0) entered disabled state [ 1543.320887][ C1] vkms_vblank_simulate: vblank timer overrun [ 1543.446023][ C1] vkms_vblank_simulate: vblank timer overrun [ 1543.502807][ T8858] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1543.523066][ T8858] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1543.535369][ T8858] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1543.537928][ T8858] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1543.540129][ T8858] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1543.747167][T11486] Bluetooth: hci2: command tx timeout [ 1544.049602][ C1] vkms_vblank_simulate: vblank timer overrun [ 1544.676532][ C1] vkms_vblank_simulate: vblank timer overrun [ 1544.850783][ C1] vkms_vblank_simulate: vblank timer overrun [ 1544.979845][ C1] vkms_vblank_simulate: vblank timer overrun [ 1545.460107][ C1] vkms_vblank_simulate: vblank timer overrun [ 1545.576020][ C1] vkms_vblank_simulate: vblank timer overrun [ 1545.595588][T11486] Bluetooth: hci3: command tx timeout [ 1545.715832][ C1] vkms_vblank_simulate: vblank timer overrun [ 1545.768555][T11486] Bluetooth: hci2: command tx timeout [ 1545.768582][ C1] vkms_vblank_simulate: vblank timer overrun [ 1545.847652][ C1] vkms_vblank_simulate: vblank timer overrun [ 1545.893370][ C1] vkms_vblank_simulate: vblank timer overrun [ 1545.923482][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 1545.923552][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 1545.999291][ C1] vkms_vblank_simulate: vblank timer overrun [ 1546.056822][ C1] vkms_vblank_simulate: vblank timer overrun [ 1546.119969][ C1] vkms_vblank_simulate: vblank timer overrun [ 1547.006327][T12562] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1547.046096][T12562] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1547.069238][T12562] bond0 (unregistering): Released all slaves [ 1547.102757][T15943] macvlan5: entered promiscuous mode [ 1547.766270][T11486] Bluetooth: hci3: command tx timeout [ 1548.615614][T11486] Bluetooth: hci2: command tx timeout [ 1549.845577][ T8858] Bluetooth: hci3: command tx timeout [ 1549.985648][T12562] hsr_slave_0: left promiscuous mode [ 1550.025678][T12562] hsr_slave_1: left promiscuous mode [ 1550.026421][T12562] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1550.086401][T12562] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1550.721666][ T8858] Bluetooth: hci2: command tx timeout [ 1550.925044][T11486] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1550.944542][T11486] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1550.953109][T11486] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1550.968831][T11486] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1550.969695][T11486] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1552.043782][T11486] Bluetooth: hci3: command tx timeout [ 1553.035594][T11486] Bluetooth: hci1: command tx timeout [ 1554.135585][T13873] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 1554.285583][T13873] usb 3-1: Using ep0 maxpacket: 16 [ 1554.301781][T13873] usb 3-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 1554.301810][T13873] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1554.301830][T13873] usb 3-1: Product: syz [ 1554.301844][T13873] usb 3-1: Manufacturer: syz [ 1554.301859][T13873] usb 3-1: SerialNumber: syz [ 1554.344169][T13873] usb 3-1: config 0 descriptor?? [ 1555.233610][T11486] Bluetooth: hci1: command tx timeout [ 1555.247798][T13873] dvb_usb_dtv5100 3-1:0.0: probe with driver dvb_usb_dtv5100 failed with error -110 [ 1555.596232][T12562] team0 (unregistering): Port device team_slave_1 removed [ 1555.866238][T12562] team0 (unregistering): Port device team_slave_0 removed [ 1557.685272][T11486] Bluetooth: hci1: command tx timeout [ 1557.790192][T13873] usb 3-1: USB disconnect, device number 28 [ 1559.838684][T11486] Bluetooth: hci1: command tx timeout [ 1565.736669][T15925] bridge0: port 1(bridge_slave_0) entered blocking state [ 1565.744563][T15925] bridge0: port 1(bridge_slave_0) entered disabled state [ 1565.744750][T15925] bridge_slave_0: entered allmulticast mode [ 1565.747339][T15925] bridge_slave_0: entered promiscuous mode [ 1565.815813][T15925] bridge0: port 2(bridge_slave_1) entered blocking state [ 1565.824310][T15925] bridge0: port 2(bridge_slave_1) entered disabled state [ 1565.956421][T15925] bridge_slave_1: entered allmulticast mode [ 1566.191674][T15925] bridge_slave_1: entered promiscuous mode [ 1566.945571][T13873] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 1567.056030][T15925] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1567.068376][T15925] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1567.128431][T13873] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1567.128457][T13873] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1567.129641][T13873] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1567.129657][T13873] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1567.129668][T13873] usb 3-1: SerialNumber: syz [ 1567.341793][T13873] usb 3-1: skipping empty audio interface (v1) [ 1567.407252][T13873] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1567.410748][T13873] usb 3-1: USB disconnect, device number 29 [ 1567.425096][T15925] team0: Port device team_slave_0 added [ 1567.482655][T15925] team0: Port device team_slave_1 added [ 1567.828020][T15925] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1567.828035][T15925] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1567.828054][T15925] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1567.890286][T15925] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1567.890302][T15925] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1567.890328][T15925] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1571.817750][ C0] vkms_vblank_simulate: vblank timer overrun [ 1572.383659][ C0] vkms_vblank_simulate: vblank timer overrun [ 1572.579667][T15925] hsr_slave_0: entered promiscuous mode [ 1572.581134][T15925] hsr_slave_1: entered promiscuous mode [ 1572.582202][T15925] debugfs: 'hsr0' already exists in 'hsr' [ 1572.582225][T15925] Cannot create hsr debugfs directory [ 1572.640944][ C0] vkms_vblank_simulate: vblank timer overrun [ 1573.801768][ C0] vkms_vblank_simulate: vblank timer overrun [ 1573.866204][ C0] vkms_vblank_simulate: vblank timer overrun [ 1574.147482][T15937] chnl_net:caif_netlink_parms(): no params data found [ 1574.367108][ C0] vkms_vblank_simulate: vblank timer overrun [ 1574.905990][ C0] vkms_vblank_simulate: vblank timer overrun [ 1575.387314][ C0] vkms_vblank_simulate: vblank timer overrun [ 1576.048358][ T8858] Bluetooth: hci5: command 0x1003 tx timeout [ 1576.076616][T11486] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 1576.209904][ C0] vkms_vblank_simulate: vblank timer overrun [ 1578.858770][T15937] bridge0: port 1(bridge_slave_0) entered blocking state [ 1578.858982][T15937] bridge0: port 1(bridge_slave_0) entered disabled state [ 1578.859195][T15937] bridge_slave_0: entered allmulticast mode [ 1578.862025][T15937] bridge_slave_0: entered promiscuous mode [ 1578.885353][T15978] chnl_net:caif_netlink_parms(): no params data found [ 1580.168258][ C1] vkms_vblank_simulate: vblank timer overrun [ 1580.180799][T15937] bridge0: port 2(bridge_slave_1) entered blocking state [ 1580.180945][T15937] bridge0: port 2(bridge_slave_1) entered disabled state [ 1580.181198][T15937] bridge_slave_1: entered allmulticast mode [ 1580.186041][T15937] bridge_slave_1: entered promiscuous mode [ 1580.310080][ C1] vkms_vblank_simulate: vblank timer overrun [ 1581.375571][ T9] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 1581.525562][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 1581.529665][ T9] usb 3-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 1581.529688][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1581.529698][ T9] usb 3-1: Product: syz [ 1581.529706][ T9] usb 3-1: Manufacturer: syz [ 1581.529713][ T9] usb 3-1: SerialNumber: syz [ 1581.532920][ T9] usb 3-1: config 0 descriptor?? [ 1581.655294][T15937] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1581.761751][T15937] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1581.938658][ T9] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 1581.941790][ T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1581.942464][ T9] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 1581.942512][ T9] usb 3-1: media controller created [ 1581.964059][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1582.269135][ C1] vkms_vblank_simulate: vblank timer overrun [ 1582.836222][ C1] vkms_vblank_simulate: vblank timer overrun [ 1583.004291][ C1] vkms_vblank_simulate: vblank timer overrun [ 1583.036770][ T9] zl10353_read_register: readreg error (reg=127, ret==0) [ 1583.036834][ T9] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 1583.036847][ T9] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 1583.037497][T16179] dtv5100: wlen = 0, aborting. [ 1583.042734][ T9] usb 3-1: USB disconnect, device number 30 [ 1583.054083][ C1] vkms_vblank_simulate: vblank timer overrun [ 1583.143680][T16189] macvlan6: entered promiscuous mode [ 1583.171044][ T9] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 1583.226635][T15937] team0: Port device team_slave_0 added [ 1583.272502][ C1] vkms_vblank_simulate: vblank timer overrun [ 1583.459447][ C1] vkms_vblank_simulate: vblank timer overrun [ 1584.187180][ C1] vkms_vblank_simulate: vblank timer overrun [ 1584.355347][T15937] team0: Port device team_slave_1 added [ 1584.373962][T15978] bridge0: port 1(bridge_slave_0) entered blocking state [ 1584.374397][T15978] bridge0: port 1(bridge_slave_0) entered disabled state [ 1584.374686][T15978] bridge_slave_0: entered allmulticast mode [ 1584.384463][T15978] bridge_slave_0: entered promiscuous mode [ 1584.663032][ C1] vkms_vblank_simulate: vblank timer overrun [ 1586.806099][T15978] bridge0: port 2(bridge_slave_1) entered blocking state [ 1586.806397][T15978] bridge0: port 2(bridge_slave_1) entered disabled state [ 1586.807711][T15978] bridge_slave_1: entered allmulticast mode [ 1586.820420][T15978] bridge_slave_1: entered promiscuous mode [ 1587.911292][T15937] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1587.911308][T15937] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1587.911331][T15937] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1588.027336][T15937] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1588.027351][T15937] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1588.027375][T15937] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1588.044534][T15978] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1588.107646][T15978] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1589.177955][T15978] team0: Port device team_slave_0 added [ 1590.421631][T15978] team0: Port device team_slave_1 added [ 1590.441194][T15937] hsr_slave_0: entered promiscuous mode [ 1590.442797][T15937] hsr_slave_1: entered promiscuous mode [ 1590.444009][T15937] debugfs: 'hsr0' already exists in 'hsr' [ 1590.444033][T15937] Cannot create hsr debugfs directory [ 1591.973192][T15978] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1591.973207][T15978] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1591.973228][T15978] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1592.267584][T15978] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1592.267598][T15978] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1592.267618][T15978] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1596.768110][T15925] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1596.842753][T15978] hsr_slave_0: entered promiscuous mode [ 1596.844221][T15978] hsr_slave_1: entered promiscuous mode [ 1596.845263][T15978] debugfs: 'hsr0' already exists in 'hsr' [ 1596.845286][T15978] Cannot create hsr debugfs directory [ 1596.868656][T15925] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1596.980505][ C1] vkms_vblank_simulate: vblank timer overrun [ 1597.034449][T15925] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1597.768506][ C1] vkms_vblank_simulate: vblank timer overrun [ 1598.057979][T15925] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1598.252439][ C1] vkms_vblank_simulate: vblank timer overrun [ 1599.086725][T12562] bridge_slave_1: left allmulticast mode [ 1599.086810][T12562] bridge_slave_1: left promiscuous mode [ 1599.087052][T12562] bridge0: port 2(bridge_slave_1) entered disabled state [ 1599.177251][T12562] bridge_slave_0: left allmulticast mode [ 1599.177280][T12562] bridge_slave_0: left promiscuous mode [ 1599.177609][T12562] bridge0: port 1(bridge_slave_0) entered disabled state [ 1599.254124][T12562] bridge_slave_1: left allmulticast mode [ 1599.254155][T12562] bridge_slave_1: left promiscuous mode [ 1599.254397][T12562] bridge0: port 2(bridge_slave_1) entered disabled state [ 1599.358334][T12562] bridge_slave_0: left allmulticast mode [ 1599.358363][T12562] bridge_slave_0: left promiscuous mode [ 1599.358608][T12562] bridge0: port 1(bridge_slave_0) entered disabled state [ 1599.617148][ C1] vkms_vblank_simulate: vblank timer overrun [ 1599.831329][ C1] vkms_vblank_simulate: vblank timer overrun [ 1600.011058][ C1] vkms_vblank_simulate: vblank timer overrun [ 1600.078897][ C1] vkms_vblank_simulate: vblank timer overrun [ 1600.258366][ C1] vkms_vblank_simulate: vblank timer overrun [ 1600.492499][ C1] vkms_vblank_simulate: vblank timer overrun [ 1600.573761][ C1] vkms_vblank_simulate: vblank timer overrun [ 1600.625410][ C1] vkms_vblank_simulate: vblank timer overrun [ 1600.683552][ C1] vkms_vblank_simulate: vblank timer overrun [ 1600.918991][ C1] vkms_vblank_simulate: vblank timer overrun [ 1601.032970][ C1] vkms_vblank_simulate: vblank timer overrun [ 1601.073101][ C1] vkms_vblank_simulate: vblank timer overrun [ 1601.270176][ C1] vkms_vblank_simulate: vblank timer overrun [ 1601.854492][ T8858] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1601.903411][ T8858] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1601.913270][ T8858] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1601.924585][ T8858] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1601.925486][ T8858] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1602.406922][T12562] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1602.466982][T12562] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1602.488864][T12562] bond0 (unregistering): Released all slaves [ 1604.117863][T11486] Bluetooth: hci2: command tx timeout [ 1605.566323][T12562] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1605.627089][T12562] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1605.668373][T12562] bond0 (unregistering): Released all slaves [ 1606.155508][T11486] Bluetooth: hci2: command tx timeout [ 1606.489738][ T8858] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1606.519135][ T8858] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1606.522500][ T8858] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1606.524244][ T8858] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1606.525226][ T8858] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1606.785763][T12562] hsr_slave_0: left promiscuous mode [ 1606.997572][T12562] hsr_slave_1: left promiscuous mode [ 1606.999522][T12562] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1607.836122][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 1607.836204][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 1607.847383][T12562] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1608.357725][T11486] Bluetooth: hci2: command tx timeout [ 1608.651533][T11486] Bluetooth: hci5: command tx timeout [ 1609.010465][T12562] hsr_slave_0: left promiscuous mode [ 1609.065829][T12562] hsr_slave_1: left promiscuous mode [ 1609.066505][T12562] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1609.137434][T12562] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1610.467845][T11486] Bluetooth: hci2: command tx timeout [ 1611.028828][T11486] Bluetooth: hci5: command tx timeout [ 1611.488059][T12562] team0 (unregistering): Port device team_slave_1 removed [ 1611.756928][T12562] team0 (unregistering): Port device team_slave_0 removed [ 1612.645604][T16345] 9pnet_virtio: no channels available for device syz [ 1613.077568][T11486] Bluetooth: hci5: command tx timeout [ 1613.152707][ T8858] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1613.166476][ T8858] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1613.167985][ T8858] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1613.170119][ T8858] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1613.171111][ T8858] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1615.467723][ T8858] Bluetooth: hci5: command tx timeout [ 1615.467802][ T8858] Bluetooth: hci6: command tx timeout [ 1617.525519][T11486] Bluetooth: hci6: command tx timeout [ 1619.603247][T11486] Bluetooth: hci6: command tx timeout [ 1621.676431][T11486] Bluetooth: hci6: command tx timeout [ 1622.736541][T12562] team0 (unregistering): Port device team_slave_1 removed [ 1625.368072][T12562] team0 (unregistering): Port device team_slave_0 removed [ 1631.420280][ C0] vkms_vblank_simulate: vblank timer overrun [ 1631.490283][ C0] vkms_vblank_simulate: vblank timer overrun [ 1631.754140][ C0] vkms_vblank_simulate: vblank timer overrun [ 1632.110404][ C0] vkms_vblank_simulate: vblank timer overrun [ 1632.175195][ C0] vkms_vblank_simulate: vblank timer overrun [ 1632.376167][ C0] vkms_vblank_simulate: vblank timer overrun [ 1632.793811][ C0] vkms_vblank_simulate: vblank timer overrun [ 1633.099440][ C0] vkms_vblank_simulate: vblank timer overrun [ 1634.125953][ C0] vkms_vblank_simulate: vblank timer overrun [ 1634.658524][ C0] vkms_vblank_simulate: vblank timer overrun [ 1634.876427][ C0] vkms_vblank_simulate: vblank timer overrun [ 1635.100053][T16320] chnl_net:caif_netlink_parms(): no params data found [ 1635.117304][T16297] chnl_net:caif_netlink_parms(): no params data found [ 1635.358225][ C0] vkms_vblank_simulate: vblank timer overrun [ 1635.543552][ C0] vkms_vblank_simulate: vblank timer overrun [ 1635.681691][ C0] vkms_vblank_simulate: vblank timer overrun [ 1637.915985][T16352] chnl_net:caif_netlink_parms(): no params data found [ 1638.008691][ C1] vkms_vblank_simulate: vblank timer overrun [ 1638.228147][T16520] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(10) [ 1638.228191][T16520] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1638.228379][T16520] vhci_hcd vhci_hcd.0: Device attached [ 1638.825590][ T5972] usb 37-1: new low-speed USB device number 7 using vhci_hcd [ 1638.849113][ C1] vkms_vblank_simulate: vblank timer overrun [ 1638.866896][T16521] vhci_hcd: connection reset by peer [ 1638.867373][ T5948] vhci_hcd: stop threads [ 1638.867387][ T5948] vhci_hcd: release socket [ 1638.867466][ T5948] vhci_hcd: disconnect device [ 1639.156922][T16320] bridge0: port 1(bridge_slave_0) entered blocking state [ 1639.157054][T16320] bridge0: port 1(bridge_slave_0) entered disabled state [ 1639.157208][T16320] bridge_slave_0: entered allmulticast mode [ 1639.158877][T16320] bridge_slave_0: entered promiscuous mode [ 1639.160548][T16297] bridge0: port 1(bridge_slave_0) entered blocking state [ 1639.161805][T16297] bridge0: port 1(bridge_slave_0) entered disabled state [ 1639.162006][T16297] bridge_slave_0: entered allmulticast mode [ 1639.163873][T16297] bridge_slave_0: entered promiscuous mode [ 1639.276718][T16320] bridge0: port 2(bridge_slave_1) entered blocking state [ 1639.276816][T16320] bridge0: port 2(bridge_slave_1) entered disabled state [ 1639.276956][T16320] bridge_slave_1: entered allmulticast mode [ 1639.278590][T16320] bridge_slave_1: entered promiscuous mode [ 1639.280025][T16297] bridge0: port 2(bridge_slave_1) entered blocking state [ 1639.280147][T16297] bridge0: port 2(bridge_slave_1) entered disabled state [ 1639.280337][T16297] bridge_slave_1: entered allmulticast mode [ 1639.283117][T16297] bridge_slave_1: entered promiscuous mode [ 1639.707679][ C1] vkms_vblank_simulate: vblank timer overrun [ 1640.546560][ C1] vkms_vblank_simulate: vblank timer overrun [ 1640.627324][T16320] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1640.669851][T16297] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1640.832856][T16320] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1640.884477][T16297] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1641.470062][T16352] bridge0: port 1(bridge_slave_0) entered blocking state [ 1641.470264][T16352] bridge0: port 1(bridge_slave_0) entered disabled state [ 1641.470523][T16352] bridge_slave_0: entered allmulticast mode [ 1641.472450][T16352] bridge_slave_0: entered promiscuous mode [ 1641.596461][ T9] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 1641.749486][ T9] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1641.749513][ T9] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1641.752441][ T9] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1641.752469][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1641.752489][ T9] usb 3-1: SerialNumber: syz [ 1641.805971][T16352] bridge0: port 2(bridge_slave_1) entered blocking state [ 1641.806328][T16352] bridge0: port 2(bridge_slave_1) entered disabled state [ 1641.806698][T16352] bridge_slave_1: entered allmulticast mode [ 1641.811055][T16352] bridge_slave_1: entered promiscuous mode [ 1641.843904][T16320] team0: Port device team_slave_0 added [ 1641.856640][T16297] team0: Port device team_slave_0 added [ 1641.972703][ T9] usb 3-1: skipping empty audio interface (v1) [ 1642.013585][ T9] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1642.033646][ T9] usb 3-1: USB disconnect, device number 31 [ 1642.101526][T16320] team0: Port device team_slave_1 added [ 1642.104669][T16297] team0: Port device team_slave_1 added [ 1642.698043][T16352] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1642.847149][T16549] snd_dummy snd_dummy.0: control 5:65279:0:syz0:0 is already present [ 1642.882402][T16352] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1642.883646][T16320] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1642.883658][T16320] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1642.883684][T16320] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1642.886566][T16297] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1642.886580][T16297] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1642.886604][T16297] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1643.159410][T16320] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1643.159420][T16320] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1643.159435][T16320] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1643.160491][T16297] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1643.160499][T16297] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1643.160513][T16297] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1643.601334][T16352] team0: Port device team_slave_0 added [ 1643.825493][T16352] team0: Port device team_slave_1 added [ 1643.915650][ T5972] vhci_hcd: vhci_device speed not set [ 1645.167797][T16320] hsr_slave_0: entered promiscuous mode [ 1645.186074][T16320] hsr_slave_1: entered promiscuous mode [ 1645.191667][T16352] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1645.191678][T16352] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1645.191692][T16352] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1645.251118][T16297] hsr_slave_0: entered promiscuous mode [ 1645.253247][T16297] hsr_slave_1: entered promiscuous mode [ 1645.254109][T16297] debugfs: 'hsr0' already exists in 'hsr' [ 1645.254130][T16297] Cannot create hsr debugfs directory [ 1645.255189][T16352] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1645.255199][T16352] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1645.255218][T16352] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1646.431923][T16352] hsr_slave_0: entered promiscuous mode [ 1646.433847][T16352] hsr_slave_1: entered promiscuous mode [ 1646.435122][T16352] debugfs: 'hsr0' already exists in 'hsr' [ 1646.435140][T16352] Cannot create hsr debugfs directory [ 1648.049595][T12562] bridge_slave_1: left allmulticast mode [ 1648.049622][T12562] bridge_slave_1: left promiscuous mode [ 1648.049854][T12562] bridge0: port 2(bridge_slave_1) entered disabled state [ 1648.137611][T12562] bridge_slave_0: left allmulticast mode [ 1648.137641][T12562] bridge_slave_0: left promiscuous mode [ 1648.137913][T12562] bridge0: port 1(bridge_slave_0) entered disabled state [ 1648.221892][T12562] bridge_slave_1: left allmulticast mode [ 1648.221923][T12562] bridge_slave_1: left promiscuous mode [ 1648.222161][T12562] bridge0: port 2(bridge_slave_1) entered disabled state [ 1648.277316][T12562] bridge_slave_0: left allmulticast mode [ 1648.277346][T12562] bridge_slave_0: left promiscuous mode [ 1648.277594][T12562] bridge0: port 1(bridge_slave_0) entered disabled state [ 1648.350542][T12562] bridge_slave_1: left allmulticast mode [ 1648.350571][T12562] bridge_slave_1: left promiscuous mode [ 1648.350888][T12562] bridge0: port 2(bridge_slave_1) entered disabled state [ 1648.417577][T12562] bridge_slave_0: left allmulticast mode [ 1648.417607][T12562] bridge_slave_0: left promiscuous mode [ 1648.417846][T12562] bridge0: port 1(bridge_slave_0) entered disabled state [ 1648.816692][T12562] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1648.936354][T12562] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1649.227907][T12562] bond0 (unregistering): Released all slaves [ 1650.710576][T12562] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1650.816432][T12562] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1650.918375][T12562] bond0 (unregistering): Released all slaves [ 1652.085769][ T5889] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 1652.866442][ T5889] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1652.866470][ T5889] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1652.866508][ T5889] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1652.868031][ T5889] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1652.868056][ T5889] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1652.868076][ T5889] usb 3-1: SerialNumber: syz [ 1652.977011][T12562] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1653.086630][T12562] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1653.097301][ T5889] usb 3-1: 0:2 : does not exist [ 1653.117847][ T5889] usb 3-1: USB disconnect, device number 32 [ 1653.178505][T12562] bond0 (unregistering): Released all slaves [ 1653.435690][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 1654.915628][T12562] hsr_slave_0: left promiscuous mode [ 1654.959609][T12562] hsr_slave_1: left promiscuous mode [ 1654.964391][T12562] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1655.886337][T12562] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1656.368761][T12562] hsr_slave_0: left promiscuous mode [ 1658.787449][T12562] hsr_slave_1: left promiscuous mode [ 1658.788449][T12562] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1659.776388][T12562] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1659.935579][T12562] hsr_slave_0: left promiscuous mode [ 1659.975615][T12562] hsr_slave_1: left promiscuous mode [ 1659.976651][T12562] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1659.996594][T12562] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1660.891345][ T23] ================================================================== [ 1660.891439][ T23] BUG: KASAN: vmalloc-out-of-bounds in run_irq_workd+0x116/0x190 [ 1660.891568][ T23] Read of size 8 at addr ffffc9001c821090 by task irq_work/0/23 [ 1660.891582][ T23] [ 1660.891602][ T23] CPU: 0 UID: 0 PID: 23 Comm: irq_work/0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1660.891622][ T23] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1660.891640][ T23] Call Trace: [ 1660.891651][ T23] [ 1660.891658][ T23] dump_stack_lvl+0x189/0x250 [ 1660.891695][ T23] ? run_irq_workd+0x116/0x190 [ 1660.891717][ T23] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1660.891734][ T23] ? __pfx__printk+0x10/0x10 [ 1660.891760][ T23] ? __virt_addr_valid+0xdc/0x5c0 [ 1660.891793][ T23] ? __virt_addr_valid+0xdc/0x5c0 [ 1660.891812][ T23] print_report+0xca/0x240 [ 1660.891833][ T23] ? run_irq_workd+0x116/0x190 [ 1660.891848][ T23] kasan_report+0x118/0x150 [ 1660.891894][ T23] ? run_irq_workd+0x116/0x190 [ 1660.891913][ T23] run_irq_workd+0x116/0x190 [ 1660.891929][ T23] ? __pfx_run_irq_workd+0x10/0x10 [ 1660.891946][ T23] ? schedule+0x91/0x360 [ 1660.892059][ T23] ? smpboot_thread_fn+0x4d/0xa60 [ 1660.892084][ T23] ? smpboot_thread_fn+0x4d/0xa60 [ 1660.892099][ T23] smpboot_thread_fn+0x542/0xa60 [ 1660.892114][ T23] ? smpboot_thread_fn+0x4d/0xa60 [ 1660.892133][ T23] kthread+0x711/0x8a0 [ 1660.892154][ T23] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 1660.892169][ T23] ? __pfx_kthread+0x10/0x10 [ 1660.892185][ T23] ? rt_spin_unlock+0x150/0x200 [ 1660.892204][ T23] ? rt_spin_unlock+0x161/0x200 [ 1660.892219][ T23] ? __pfx_kthread+0x10/0x10 [ 1660.892236][ T23] ret_from_fork+0x4bc/0x870 [ 1660.892268][ T23] ? __pfx_ret_from_fork+0x10/0x10 [ 1660.892293][ T23] ? __switch_to_asm+0x39/0x70 [ 1660.892314][ T23] ? __switch_to_asm+0x33/0x70 [ 1660.892333][ T23] ? __pfx_kthread+0x10/0x10 [ 1660.892352][ T23] ret_from_fork_asm+0x1a/0x30 [ 1660.892380][ T23] [ 1660.892387][ T23] [ 1660.892392][ T23] The buggy address belongs to a vmalloc virtual mapping [ 1660.892418][ T23] Memory state around the buggy address: [ 1660.892428][ T23] ffffc9001c820f80: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 1660.892440][ T23] ffffc9001c821000: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 1660.892453][ T23] >ffffc9001c821080: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 1660.892462][ T23] ^ [ 1660.892470][ T23] ffffc9001c821100: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 1660.892486][ T23] ffffc9001c821180: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 1660.892496][ T23] ================================================================== [ 1660.892515][ T23] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1660.892529][ T23] CPU: 0 UID: 0 PID: 23 Comm: irq_work/0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1660.892547][ T23] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1660.892556][ T23] Call Trace: [ 1660.892562][ T23] [ 1660.892569][ T23] dump_stack_lvl+0x99/0x250 [ 1660.892587][ T23] ? __asan_memcpy+0x40/0x70 [ 1660.892609][ T23] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1660.892626][ T23] ? __pfx__printk+0x10/0x10 [ 1660.892651][ T23] vpanic+0x237/0x6d0 [ 1660.892674][ T23] ? __pfx_vpanic+0x10/0x10 [ 1660.892694][ T23] panic+0xb9/0xc0 [ 1660.892709][ T23] ? __pfx_panic+0x10/0x10 [ 1660.892723][ T23] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 1660.892774][ T23] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 1660.892803][ T23] ? run_irq_workd+0x116/0x190 [ 1660.892821][ T23] check_panic_on_warn+0x89/0xb0 [ 1660.892843][ T23] ? run_irq_workd+0x116/0x190 [ 1660.892860][ T23] end_report+0x78/0x160 [ 1660.892877][ T23] kasan_report+0x129/0x150 [ 1660.892896][ T23] ? run_irq_workd+0x116/0x190 [ 1660.892917][ T23] run_irq_workd+0x116/0x190 [ 1660.892935][ T23] ? __pfx_run_irq_workd+0x10/0x10 [ 1660.892952][ T23] ? schedule+0x91/0x360 [ 1660.892971][ T23] ? smpboot_thread_fn+0x4d/0xa60 [ 1660.892988][ T23] ? smpboot_thread_fn+0x4d/0xa60 [ 1660.893004][ T23] smpboot_thread_fn+0x542/0xa60 [ 1660.893021][ T23] ? smpboot_thread_fn+0x4d/0xa60 [ 1660.893041][ T23] kthread+0x711/0x8a0 [ 1660.893061][ T23] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 1660.893078][ T23] ? __pfx_kthread+0x10/0x10 [ 1660.893094][ T23] ? rt_spin_unlock+0x150/0x200 [ 1660.893113][ T23] ? rt_spin_unlock+0x161/0x200 [ 1660.893130][ T23] ? __pfx_kthread+0x10/0x10 [ 1660.893148][ T23] ret_from_fork+0x4bc/0x870 [ 1660.893170][ T23] ? __pfx_ret_from_fork+0x10/0x10 [ 1660.893195][ T23] ? __switch_to_asm+0x39/0x70 [ 1660.893215][ T23] ? __switch_to_asm+0x33/0x70 [ 1660.893234][ T23] ? __pfx_kthread+0x10/0x10 [ 1660.893253][ T23] ret_from_fork_asm+0x1a/0x30 [ 1660.893281][ T23] [ 1660.893547][ T23] Kernel Offset: disabled