last executing test programs: 2m31.356674225s ago: executing program 3 (id=10): socket(0x2, 0x80805, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) r0 = socket(0x2b, 0x80801, 0x1) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback, 0x10000}, 0x1c) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@volatile={0x0, 0x0, 0x0, 0x9, 0x3}]}}, 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000000cc0), 0x0, 0x48094) connect$llc(0xffffffffffffffff, &(0x7f00000004c0)={0x1a, 0x302, 0x4a, 0xe3, 0xb, 0x24, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x22}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000240)) ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000000), 0xffffff6a) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffff000) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000"], 0x48) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x1) setsockopt$EBT_SO_SET_COUNTERS(r0, 0x0, 0x81, 0x0, 0x11e) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, 0x0, 0x0) 2m31.258293963s ago: executing program 3 (id=11): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) tgkill(r0, r0, 0x0) 2m30.851693503s ago: executing program 3 (id=14): ioctl$IOMMU_TEST_OP_CREATE_ACCESS(0xffffffffffffffff, 0x3ba0, 0x0) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="040706000019"], 0x7) 2m30.660855465s ago: executing program 3 (id=17): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f00000002c0)=[@mss={0x2, 0xfffffff3}, @mss, @mss={0x2, 0x8}, @window, @timestamp, @timestamp, @mss={0x2, 0x9}, @timestamp], 0x401) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[], 0x440) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f00000004c0)="3ce2de4d8d957a8de4e490b6cd03b988d4edef164bd3377aa381b5f50b7ca414516489f78cd7208982e9bde22b2b7c1c7606d565477f3db9d2b077283644c0f27ab52a863a42863e06944e40a0b3c5d21c8cbe102e7f726263f28a", 0x5b, 0x805, 0x0, 0x0) 2m30.548252616s ago: executing program 3 (id=19): r0 = syz_open_dev$vim2m(&(0x7f0000000580), 0x0, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000000)={0x2, @pix={0x80000000, 0x1, 0x3432564e, 0x0, 0x0, 0x0, 0x1, 0x37c2, 0x0, 0x8, 0x2, 0x4}}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x400, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = dup(r2) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$PPPIOCGL2TPSTATS(0xffffffffffffffff, 0x80487436, &(0x7f0000000000)="6941c43b78eeda4918160798ef967cb9254c327158c51dc69eeda809ba0f") syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000dc0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) 2m29.352579829s ago: executing program 3 (id=22): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000000)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) write$FUSE_GETXATTR(r2, &(0x7f00000000c0)={0x18}, 0x18) write$FUSE_INIT(r2, &(0x7f0000000200)={0x50, 0x0, 0x0, {0x7, 0x29, 0x20200}}, 0x50) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) r3 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) read$FUSE(r3, &(0x7f0000000440)={0x2020}, 0x2020) 2m14.20590912s ago: executing program 32 (id=22): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000000)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) write$FUSE_GETXATTR(r2, &(0x7f00000000c0)={0x18}, 0x18) write$FUSE_INIT(r2, &(0x7f0000000200)={0x50, 0x0, 0x0, {0x7, 0x29, 0x20200}}, 0x50) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) r3 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) read$FUSE(r3, &(0x7f0000000440)={0x2020}, 0x2020) 10.043550151s ago: executing program 2 (id=442): bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x80042, 0x0) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$NONE(r4, 0x3b89, &(0x7f0000000180)={0x28, 0x1, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x0}) close_range(r3, 0xffffffffffffffff, 0x0) 8.6931055s ago: executing program 1 (id=446): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @multicast2}, 0x10) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) socket(0x40000000015, 0x5, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180), 0x8001, 0x0) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="280000000104038a0000000000000000000000000a000200000000000200000005000100"], 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x20}}, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x20002) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r3}, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) r5 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r5, 0xab00, r6) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, r4, 0x1, 0x70bd2b, 0x8, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x20000004) 8.263809026s ago: executing program 2 (id=447): openat$vimc0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000380), r3) sendmsg$DEVLINK_CMD_RATE_GET(r3, 0x0, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mkdirat(0xffffffffffffffff, &(0x7f0000000140)='./file1\x00', 0x65) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file4/file6\x00', 0x1c0) r4 = landlock_create_ruleset(&(0x7f00000002c0)={0x2041}, 0x18, 0x0) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r4, 0x1, &(0x7f0000000340)={0x2000, r5}, 0x0) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x2, 0x5, 0x0, 0x9, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}, @sadb_sa={0x2}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}]}, 0x70}}, 0x0) ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, 0x0) ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, &(0x7f0000000000)={0x1, 0x1, {0x20, 0x0, 0x8000000, 0x10, 0x4000000b, 0x10084, 0x0, 0xf7}}) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={0x0, r7}, 0x18) socket$inet6(0xa, 0x3, 0x7) 8.170143783s ago: executing program 1 (id=448): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x6) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) 7.453702557s ago: executing program 4 (id=450): openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='mounts\x00') r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/4\x00') mount$9p_fd(0x0, &(0x7f0000000180)='.\x00', 0x0, 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 7.051836749s ago: executing program 2 (id=451): socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet6_tcp(0xa, 0x1, 0x0) lstat(0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r2 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f0000000040)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETFB2(r2, 0xc06864ce, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, [], [], [0x0, 0x0, 0x2], [0xffffffffffffffff, 0xfffffffefefffffc]}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000800)) 6.992770388s ago: executing program 0 (id=452): socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) socket$inet6(0xa, 0x2, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='map_files\x00') socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) socket(0x2, 0x3, 0x67) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000500)=ANY=[@ANYRES32, @ANYRES32, @ANYRES64=r0, @ANYRES64=0x0, @ANYRESHEX], 0x20) 6.982112932s ago: executing program 5 (id=453): socket$nl_netfilter(0x10, 0x3, 0xc) pipe(&(0x7f0000000380)) socket$inet_tcp(0x2, 0x1, 0x0) pipe2$9p(&(0x7f00000001c0), 0x0) r0 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="90000000", @ANYRES16=r0, @ANYBLOB="01000000000000000000010000000c00050000000000000000000c0002000000000000000000040007800c000800000000000000000008000100000000004c00078008000100", @ANYRES32, @ANYBLOB="38000100", @ANYRES32=r1, @ANYBLOB="64800400", @ANYRES32, @ANYBLOB="08000100", @ANYBLOB="06"], 0x90}}, 0x0) 6.945316961s ago: executing program 4 (id=454): sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x8}, 0x18) r3 = syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r3, 0xc06864b8, &(0x7f0000000580)={0x0, 0x2000, 0x80, 0x3231564e, 0x3, [0x2], [0x2000], [], [0x400000000000001]}) sched_setaffinity(0x0, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000040)=0x1008, 0x4) r4 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000001a00), 0x2, 0x0) write$6lowpan_control(r4, &(0x7f0000001a40)='connect aa:aa:aa:aa:aa:10 2', 0x1b) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x4) mount$9p_rdma(&(0x7f00000004c0), &(0x7f0000000500)='./file0\x00', &(0x7f0000000540), 0x200000, &(0x7f0000000580)={'trans=rdma,', {'port', 0x3d, 0x4e22}}) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r5 = socket(0x1e, 0x5, 0x0) setsockopt$TIPC_IMPORTANCE(r5, 0x10f, 0x7f, &(0x7f0000000e80)=0xffffff68, 0x4) sendmsg$nl_route_sched(r5, &(0x7f0000000400)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f0000000240)=@gettaction={0x114, 0x32, 0x300, 0x70bd27, 0x25dfdbfd, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}, @action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x11, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0xc, 0x15, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}]}, @action_gd=@TCA_ACT_TAB={0x6c, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0x14, 0x2, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0x10, 0x20, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0x10, 0x2, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0x10, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0xc, 0x3, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}]}, @action_gd=@TCA_ACT_TAB={0x30, 0x1, [{0x10, 0x13, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0x10, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0xc, 0x16, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}]}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x8ec1}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1, 0x1}}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0xca5}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x7}]}, 0x114}, 0x1, 0x0, 0x0, 0x8810}, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) 6.880631431s ago: executing program 5 (id=455): r0 = socket$netlink(0x10, 0x3, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x1) r2 = syz_open_dev$usbfs(0x0, 0x206, 0x8341) read$msr(r1, &(0x7f0000019680)=""/102360, 0x18fd8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$USBDEVFS_ALLOW_SUSPEND(r2, 0x5522) syz_open_dev$usbfs(0x0, 0x8, 0x0) bind$netlink(r0, &(0x7f0000000380)={0x10, 0x0, 0x25dfdbff, 0x80000}, 0xffffffffffffff67) r3 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) listen(r3, 0x101) r4 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r4, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) r5 = getpid() sched_setscheduler(r5, 0x2, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) connect$inet(r4, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmmsg$inet(r4, &(0x7f0000003040)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000740)}}], 0x2, 0x800) 6.363484702s ago: executing program 0 (id=456): r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) bpf$PROG_LOAD(0x5, 0x0, 0x0) listen(r0, 0x101) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8b18, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r1, 0x10d, 0x800000000d, 0x0, 0x0) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r2 = accept4(r0, 0x0, 0x0, 0x800) sendmsg$NFT_BATCH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000d00)=ANY=[], 0x3ce0}, 0x1, 0x0, 0x0, 0x4024011}, 0x40084) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[], 0x2c}}, 0x440d4) 6.296223103s ago: executing program 2 (id=457): bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x80042, 0x0) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$NONE(r4, 0x3b89, &(0x7f0000000180)={0x28, 0x1, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x0}) close_range(r3, 0xffffffffffffffff, 0x0) 6.295615208s ago: executing program 5 (id=458): r0 = socket$netlink(0x10, 0x3, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x1) r2 = syz_open_dev$usbfs(0x0, 0x206, 0x8341) read$msr(r1, &(0x7f0000019680)=""/102360, 0x18fd8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$USBDEVFS_ALLOW_SUSPEND(r2, 0x5522) syz_open_dev$usbfs(0x0, 0x8, 0x0) bind$netlink(r0, &(0x7f0000000380)={0x10, 0x0, 0x25dfdbff, 0x80000}, 0xffffffffffffff67) r3 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) listen(r3, 0x101) r4 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r4, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) r5 = getpid() sched_setscheduler(r5, 0x2, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) connect$inet(r4, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmmsg$inet(r4, &(0x7f0000003040)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000740)}}], 0x2, 0x800) openat$audio1(0xffffffffffffff9c, &(0x7f00000000c0), 0x8000, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0xfe, 0x0, 0x7ffffffe}]}) clock_getres(0x9, 0x0) 5.180717641s ago: executing program 2 (id=459): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x1) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_COPY(r2, 0x8010aa01, &(0x7f0000000400)={&(0x7f0000272000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x4000}) 5.007435439s ago: executing program 0 (id=460): msgsnd(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="f909f60479997e92b9cc63ef3d25bcb67b0498c04aab917fd4c8596aaba217823f2fe94af25b97c7ab5a09011fd2bf2f3ddbc2569ed807d959281f3cbae9aa3395e9789bc89f932500dd8cc384d05bd0e49ed656725aaec0fbacd31f9fcf6eb523c5dac80a47bfb63cde54d0d85798a9e4"], 0x8, 0x0) msgsnd(0x0, 0x0, 0x0, 0x0) r0 = msgget$private(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) msgctl$MSG_STAT_ANY(r0, 0xd, 0x0) 4.957969931s ago: executing program 1 (id=461): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xb, &(0x7f0000000040)=0x9, 0x4) bind$inet6(0xffffffffffffffff, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(0xffffffffffffffff, &(0x7f0000006380)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0x2, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x46, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x42, &(0x7f0000000340)=0x1e76, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00'}, 0x10) r3 = socket(0x1e, 0x4, 0x0) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000180)=@req3={0x1ff, 0x3, 0x4, 0x0, 0x9, 0x0, 0xeb}, 0x1c) sendmmsg(r3, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) r5 = socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000000)={0x8, 0x0, 0x2, 0x959a}, 0x10) write(r5, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) recvmmsg(r5, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/timers\x00', 0x0, 0x0) 4.243483029s ago: executing program 0 (id=462): openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bca) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000800)=ANY=[@ANYRES32=0x0, @ANYBLOB="0000000000000000340012800e0001"], 0x5c}}, 0x0) pidfd_send_signal(0xffffffffffffffff, 0x0, 0x0, 0x3) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="4000000000000000000000000000000000f30f6e", @ANYRES32, @ANYBLOB="400001000000000020001280080001007674690014000280080003000100000008000400e0000001"], 0x40}}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) lsm_get_self_attr(0x9025a27164544f94, 0xffffffffffffffff, 0x0, 0x1) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000040)='vegas\x00', 0x6) syz_usb_connect(0x0, 0x3f, 0x0, 0x0) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) mknodat$loop(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x0, 0x1) renameat2(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x5) write$binfmt_script(r1, &(0x7f0000000200), 0xfffffd9d) sendmsg$802154_raw(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) pwritev2(r2, &(0x7f00000003c0)=[{&(0x7f0000000200)="51611d72", 0x4}, {0x0}], 0x2, 0x6, 0x80, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000140)="e4b0fa4ee10d28cf0b2f1a55c9bb", 0x5}, 0x38) 3.463682285s ago: executing program 1 (id=463): pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') r2 = memfd_create(&(0x7f0000000340)='D\xa3\xd5Wj\x00\x00x0\xc1\xac\x1a\x1a\vG\xa9~vB\xbc\t\x00\x00\x00VoA\xaa\xbc\xee[\xe1\xa2\xe0\xff\x04\x00\x00\x00\\i\xcf\t\xb0\xa9 +H/\x1a\xe7\x95\xce\"\"\xbd\xf9!\xfd\xa4\xcaN\x84\xadS\x8bqE\x99\x01t\xb1\x1f|\x99PL\x92\x8f\xc2\xf9\xcd\x8cj\x03X\x05\x17mwI\xf0\x01\xe5z\xcdJ)\xc7\xfa)\xaa}\xef\xbb\xf5\xcd\xb1o5\x18\xd6\v\x85q\x98\x9bB\xb9\xea\xe7\xff\x7f\x00\x00T\xc0\xd2\t?\bpBl\xf4*8\xc6\xe5\x06P\xc11\f^\x7f\x8e\xc1\xd1Wra\x19)\xe3\x8f\xd9\x9f\x15\x1e\xf2\x18\r\xad\b\xe0\x96NH\x85\r+\xfc\xb3\xdd\xddhg \x03\xa7\x92\xff\x00+h\xb7@#K\x9cMY\xd3\x9b\b-G\xb1\xdaS\x81\xb2\x93\xb83\x8a\x94*\x8d\\\b\xff/\xa1\xc0\xf9&\xd3M\xf6\n\xff\x83k\xe6\rDa\x16\xbd\x1a\xb2w\b', 0x0) write(r2, &(0x7f00000000c0)="6963e64243ea486da3a74e3deec6fc5bb9650b5de56946c568f95d22467190ba406d59a5958d6f156c9c8a2ac4677b0000", 0x31) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r2, 0x0) r3 = dup3(r1, r0, 0x0) fchdir(r3) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) 3.463068728s ago: executing program 5 (id=464): setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], 0x0, 0xcec7, 0xb3, &(0x7f0000000140)=""/179, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9, @void, @value}, 0x94) ioctl$FUSE_DEV_IOC_CLONE(0xffffffffffffffff, 0x8004e500, &(0x7f0000000080)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f0000002540)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) r3 = shmget$private(0x0, 0x9000, 0x0, &(0x7f0000ff7000/0x9000)=nil) shmat(r3, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(r3, &(0x7f0000ff9000/0x1000)=nil, 0x5000) mremap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000fff000/0x1000)=nil) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000440)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) 3.208770475s ago: executing program 4 (id=465): openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='mounts\x00') r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/4\x00') mount$9p_fd(0x0, &(0x7f0000000180)='.\x00', 0x0, 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 2.646761088s ago: executing program 1 (id=466): socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) socket$inet6(0xa, 0x2, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='map_files\x00') socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) socket(0x2, 0x3, 0x67) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000500)=ANY=[@ANYRES32, @ANYRES32, @ANYRES64=r0, @ANYRES64=0x0, @ANYRESHEX], 0x20) 2.625712591s ago: executing program 4 (id=467): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f00000000c0)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xab, 0x4, 0x0, 0x0, 0x40000000}, {0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x8}, {0x3fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040084}, 0x0) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x4004004) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="66ba4300b006ee0f01c40f009b27000000b9800000c00f3235008000000f30b80e0000000f23d80f21f835800000a00f23f8c9b9490300000f60b932c00a000000328fe858b660002fb90d090000b800680000ba000000000f30", 0x5a}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.428657097s ago: executing program 1 (id=468): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100"/13], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000880), 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x1c, r4, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) 2.364077621s ago: executing program 5 (id=469): bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x80042, 0x0) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$NONE(r4, 0x3b89, &(0x7f0000000180)={0x28, 0x1, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x0}) close_range(r3, 0xffffffffffffffff, 0x0) 1.948764949s ago: executing program 4 (id=470): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x11, 0x3, 0x0, &(0x7f0000000440)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x101, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='contention_end\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), r1) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x14, r2, 0x3e8c4ddb697c9f8f, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) 1.130368963s ago: executing program 0 (id=471): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r1}, &(0x7f0000000000), &(0x7f00000005c0)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0x7005, 0x0) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@newlink={0x2c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x42004}, [@IFLA_XDP={0x4}, @IFLA_GROUP={0x8}]}, 0x2c}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x13, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {0x85, 0x0, 0x0, 0x8}}, {{0x6, 0x0, 0xb, 0x9, 0x0, 0x4}, {0x65, 0x0, 0x6, 0x9}}, [@printk={@ld, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0x2, 0xa, 0x9}, {0x4, 0x0, 0x3, 0x9}, {}, {}, {0x15}}], {{0x5, 0x1, 0x3, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.128852391s ago: executing program 5 (id=472): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) rseq(&(0x7f0000000040), 0x20, 0x0, 0x0) rseq(&(0x7f0000000040), 0x20, 0x1, 0x0) 1.094149825s ago: executing program 4 (id=473): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x4e20, @local}]}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000180)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x989, 0x0, 0x10}, 0x9c) 865.490445ms ago: executing program 2 (id=474): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xb, &(0x7f0000000040)=0x9, 0x4) bind$inet6(0xffffffffffffffff, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(0xffffffffffffffff, &(0x7f0000006380)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0x2, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x46, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x42, &(0x7f0000000340)=0x1e76, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00'}, 0x10) r3 = socket(0x1e, 0x4, 0x0) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000180)=@req3={0x1ff, 0x3, 0x4, 0x0, 0x9, 0x0, 0xeb}, 0x1c) sendmmsg(r3, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) r5 = socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000000)={0x8, 0x0, 0x2, 0x959a}, 0x10) write(r5, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) recvmmsg(r5, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/timers\x00', 0x0, 0x0) 0s ago: executing program 0 (id=475): sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x8}, 0x18) r3 = syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r3, 0xc06864b8, &(0x7f0000000580)={0x0, 0x2000, 0x80, 0x3231564e, 0x3, [0x2], [0x2000], [], [0x400000000000001]}) sched_setaffinity(0x0, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000040)=0x1008, 0x4) r4 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000001a00), 0x2, 0x0) write$6lowpan_control(r4, &(0x7f0000001a40)='connect aa:aa:aa:aa:aa:10 2', 0x1b) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x4) mount$9p_rdma(&(0x7f00000004c0), &(0x7f0000000500)='./file0\x00', &(0x7f0000000540), 0x200000, &(0x7f0000000580)={'trans=rdma,', {'port', 0x3d, 0x4e22}}) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r5 = socket(0x1e, 0x5, 0x0) setsockopt$TIPC_IMPORTANCE(r5, 0x10f, 0x7f, &(0x7f0000000e80)=0xffffff68, 0x4) sendmsg$nl_route_sched(r5, &(0x7f0000000400)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f0000000240)=@gettaction={0x114, 0x32, 0x300, 0x70bd27, 0x25dfdbfd, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}, @action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x11, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0xc, 0x15, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}]}, @action_gd=@TCA_ACT_TAB={0x6c, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0x14, 0x2, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0x10, 0x20, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0x10, 0x2, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0x10, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0xc, 0x3, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}]}, @action_gd=@TCA_ACT_TAB={0x30, 0x1, [{0x10, 0x13, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0x10, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0xc, 0x16, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}]}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x8ec1}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1, 0x1}}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0xca5}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x7}]}, 0x114}, 0x1, 0x0, 0x0, 0x8810}, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.63' (ED25519) to the list of known hosts. [ 57.746589][ T5818] cgroup: Unknown subsys name 'net' [ 57.871943][ T5818] cgroup: Unknown subsys name 'cpuset' [ 57.880536][ T5818] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 59.201229][ T5818] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 61.503272][ T5833] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 61.513837][ T5835] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 61.539686][ T5835] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 61.547832][ T5835] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 61.556865][ T5835] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 61.563252][ T5838] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 61.572038][ T5838] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 61.572470][ T5835] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 61.582167][ T5838] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 61.587449][ T5840] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 61.603223][ T5840] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 61.604312][ T5842] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 61.622132][ T5838] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 61.631090][ T5842] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 61.639574][ T5842] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 61.647233][ T5842] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 61.655756][ T5842] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 61.663552][ T5838] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 61.674506][ T5144] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 61.681947][ T5144] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 61.688718][ T54] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 61.698451][ T5144] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 61.707060][ T5144] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 61.715214][ T54] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 61.773666][ T5835] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 61.782215][ T5835] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 61.790578][ T5835] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 61.807425][ T5835] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 61.815406][ T5835] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 61.822824][ T5835] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 62.055178][ T5829] chnl_net:caif_netlink_parms(): no params data found [ 62.202525][ T5836] chnl_net:caif_netlink_parms(): no params data found [ 62.279943][ T5841] chnl_net:caif_netlink_parms(): no params data found [ 62.320714][ T5829] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.327902][ T5829] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.336834][ T5829] bridge_slave_0: entered allmulticast mode [ 62.344286][ T5829] bridge_slave_0: entered promiscuous mode [ 62.373613][ T5829] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.383951][ T5829] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.391258][ T5829] bridge_slave_1: entered allmulticast mode [ 62.397833][ T5829] bridge_slave_1: entered promiscuous mode [ 62.433884][ T5828] chnl_net:caif_netlink_parms(): no params data found [ 62.483399][ T5829] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.495787][ T5829] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.510124][ T5846] chnl_net:caif_netlink_parms(): no params data found [ 62.603053][ T5836] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.610318][ T5836] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.617473][ T5836] bridge_slave_0: entered allmulticast mode [ 62.624646][ T5836] bridge_slave_0: entered promiscuous mode [ 62.636438][ T5836] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.644021][ T5836] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.651320][ T5836] bridge_slave_1: entered allmulticast mode [ 62.658077][ T5836] bridge_slave_1: entered promiscuous mode [ 62.664705][ T5841] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.672654][ T5841] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.680214][ T5841] bridge_slave_0: entered allmulticast mode [ 62.686855][ T5841] bridge_slave_0: entered promiscuous mode [ 62.702000][ T5829] team0: Port device team_slave_0 added [ 62.710269][ T5829] team0: Port device team_slave_1 added [ 62.745689][ T5841] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.755381][ T5841] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.764776][ T5841] bridge_slave_1: entered allmulticast mode [ 62.774023][ T5841] bridge_slave_1: entered promiscuous mode [ 62.809709][ T5836] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.826192][ T5828] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.833596][ T5828] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.841005][ T5828] bridge_slave_0: entered allmulticast mode [ 62.847567][ T5828] bridge_slave_0: entered promiscuous mode [ 62.855436][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.863159][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.893144][ T5829] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.924841][ T5836] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.952261][ T5828] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.959534][ T5828] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.966681][ T5828] bridge_slave_1: entered allmulticast mode [ 62.974006][ T5828] bridge_slave_1: entered promiscuous mode [ 62.981161][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.988832][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.015843][ T5829] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.049099][ T5841] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.091998][ T5836] team0: Port device team_slave_0 added [ 63.098870][ T5846] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.106033][ T5846] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.113731][ T5846] bridge_slave_0: entered allmulticast mode [ 63.123546][ T5846] bridge_slave_0: entered promiscuous mode [ 63.133661][ T5841] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.154260][ T5828] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.174058][ T5829] hsr_slave_0: entered promiscuous mode [ 63.181184][ T5829] hsr_slave_1: entered promiscuous mode [ 63.189940][ T5836] team0: Port device team_slave_1 added [ 63.196279][ T5846] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.204002][ T5846] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.211349][ T5846] bridge_slave_1: entered allmulticast mode [ 63.218602][ T5846] bridge_slave_1: entered promiscuous mode [ 63.235231][ T5828] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.299774][ T5828] team0: Port device team_slave_0 added [ 63.308797][ T5828] team0: Port device team_slave_1 added [ 63.334263][ T5841] team0: Port device team_slave_0 added [ 63.363226][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.370385][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.396698][ T5836] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.411419][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.418493][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.444478][ T5836] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.457469][ T5846] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.469311][ T5846] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.480128][ T5841] team0: Port device team_slave_1 added [ 63.495038][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.502061][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.528285][ T5828] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.541323][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.548425][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.574826][ T5828] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.638569][ T5835] Bluetooth: hci1: command tx timeout [ 63.639606][ T5846] team0: Port device team_slave_0 added [ 63.653930][ T5846] team0: Port device team_slave_1 added [ 63.667961][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.675164][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.702163][ T5841] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.718741][ T5144] Bluetooth: hci2: command tx timeout [ 63.723363][ T5835] Bluetooth: hci0: command tx timeout [ 63.754102][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.763110][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.789888][ T5841] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.800899][ T5835] Bluetooth: hci3: command tx timeout [ 63.814349][ T5836] hsr_slave_0: entered promiscuous mode [ 63.821788][ T5836] hsr_slave_1: entered promiscuous mode [ 63.827936][ T5836] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 63.836319][ T5836] Cannot create hsr debugfs directory [ 63.878149][ T5835] Bluetooth: hci4: command tx timeout [ 63.886624][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.894930][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.921750][ T5846] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.936185][ T5828] hsr_slave_0: entered promiscuous mode [ 63.943020][ T5828] hsr_slave_1: entered promiscuous mode [ 63.949279][ T5828] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 63.956844][ T5828] Cannot create hsr debugfs directory [ 63.984980][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.992148][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.018191][ T5846] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.046068][ T5841] hsr_slave_0: entered promiscuous mode [ 64.052728][ T5841] hsr_slave_1: entered promiscuous mode [ 64.059476][ T5841] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 64.067089][ T5841] Cannot create hsr debugfs directory [ 64.205729][ T5846] hsr_slave_0: entered promiscuous mode [ 64.212684][ T5846] hsr_slave_1: entered promiscuous mode [ 64.219802][ T5846] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 64.227396][ T5846] Cannot create hsr debugfs directory [ 64.358450][ T5829] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 64.398671][ T5829] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 64.420162][ T5829] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 64.435460][ T5829] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 64.507097][ T5836] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 64.516702][ T5836] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 64.552898][ T5836] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 64.578641][ T5836] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 64.624488][ T5841] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 64.650335][ T5841] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 64.661799][ T5841] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 64.672871][ T5841] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 64.776326][ T5828] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 64.793201][ T5829] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.811876][ T5828] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 64.822510][ T5828] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 64.851812][ T5828] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 64.893918][ T5846] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 64.907953][ T5846] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 64.924200][ T5836] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.948156][ T5846] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 64.959822][ T5829] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.966650][ T5846] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 64.994915][ T5836] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.010569][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.017840][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.029114][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.036208][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.061410][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.068561][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.094677][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.101820][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.254057][ T5841] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.345761][ T5828] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.375184][ T5841] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.391322][ T5846] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.419297][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.426410][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.437568][ T5828] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.467449][ T5846] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.486091][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.493284][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.521511][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.528700][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.543621][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.550841][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.566153][ T5836] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.586194][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.593414][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.624364][ T5829] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.647558][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.654756][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.720338][ T5835] Bluetooth: hci1: command tx timeout [ 65.794893][ T5829] veth0_vlan: entered promiscuous mode [ 65.811725][ T5835] Bluetooth: hci0: command tx timeout [ 65.812105][ T5144] Bluetooth: hci2: command tx timeout [ 65.878433][ T5144] Bluetooth: hci3: command tx timeout [ 65.892383][ T5829] veth1_vlan: entered promiscuous mode [ 65.958299][ T5144] Bluetooth: hci4: command tx timeout [ 66.034114][ T5829] veth0_macvtap: entered promiscuous mode [ 66.104619][ T5829] veth1_macvtap: entered promiscuous mode [ 66.137505][ T5836] veth0_vlan: entered promiscuous mode [ 66.172322][ T5836] veth1_vlan: entered promiscuous mode [ 66.191344][ T5828] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.206340][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.218927][ T5846] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.236803][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.249620][ T5841] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.262775][ T5829] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.271983][ T5829] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.281824][ T5829] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.290730][ T5829] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.367919][ T5846] veth0_vlan: entered promiscuous mode [ 66.398819][ T5836] veth0_macvtap: entered promiscuous mode [ 66.427771][ T5836] veth1_macvtap: entered promiscuous mode [ 66.481010][ T5846] veth1_vlan: entered promiscuous mode [ 66.495335][ T1161] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.499701][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.514158][ T1161] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.514747][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.535009][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.553866][ T5828] veth0_vlan: entered promiscuous mode [ 66.571800][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.582741][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.594516][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.603345][ T5841] veth0_vlan: entered promiscuous mode [ 66.627332][ T5828] veth1_vlan: entered promiscuous mode [ 66.652048][ T5841] veth1_vlan: entered promiscuous mode [ 66.666180][ T5836] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.675222][ T5836] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.684797][ T5836] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.693814][ T5836] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.712547][ T81] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.724648][ T81] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.789314][ T5841] veth0_macvtap: entered promiscuous mode [ 66.819331][ T5841] veth1_macvtap: entered promiscuous mode [ 66.841171][ T5846] veth0_macvtap: entered promiscuous mode [ 66.844088][ T5829] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 66.866782][ T5846] veth1_macvtap: entered promiscuous mode [ 66.892893][ T5828] veth0_macvtap: entered promiscuous mode [ 66.933592][ T3507] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.939936][ T5828] veth1_macvtap: entered promiscuous mode [ 66.950446][ T3507] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.985497][ T5846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.009583][ T5846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.019906][ T5846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.031297][ T5846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.042998][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.176145][ T5841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.194635][ T5841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.205908][ T5841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.228876][ T5841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.247159][ T5841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.257961][ T5841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.269732][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.284429][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.296080][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.306380][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.386802][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.529995][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.603644][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.666177][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.746018][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.799161][ T5144] Bluetooth: hci1: command tx timeout [ 67.850173][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.878225][ T5144] Bluetooth: hci0: command tx timeout [ 67.884898][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.890402][ T5144] Bluetooth: hci2: command tx timeout [ 67.900521][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.912701][ T5846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.923809][ T5846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.934863][ T5846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.946274][ T5846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.957337][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.965134][ T5144] Bluetooth: hci3: command tx timeout [ 67.967957][ T5846] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.980176][ T5846] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.989556][ T5846] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.998340][ T5846] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.034629][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.065184][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.081510][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.094856][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.108632][ T5144] Bluetooth: hci4: command tx timeout [ 68.123470][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.150699][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.175557][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.187393][ T5916] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 68.215147][ T5841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.238379][ T5841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.249313][ T5841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.260024][ T5841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.270112][ T5841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.281168][ T5841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.291209][ T5841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.302495][ T5841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.314395][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.415050][ T5841] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.424416][ T5841] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.433965][ T5841] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.443346][ T5841] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.522734][ T5828] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.531695][ T5828] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.540541][ T5828] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.550923][ T5828] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.608334][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 68.765767][ T55] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.777975][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.787524][ T55] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.795259][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.850607][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.862339][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.021103][ T150] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.050616][ T5927] loop2: detected capacity change from 0 to 7 [ 69.055932][ T150] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.063974][ T5927] Dev loop2: unable to read RDB block 7 [ 69.070455][ T5927] loop2: unable to read partition table [ 69.076224][ T5927] loop2: partition table beyond EOD, truncated [ 69.082930][ T5927] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 69.114499][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.123937][ T1161] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.132311][ T1161] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.143613][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.308496][ T5206] Dev loop2: unable to read RDB block 7 [ 69.317915][ T5206] loop2: unable to read partition table [ 69.341168][ T5935] netlink: 96 bytes leftover after parsing attributes in process `syz.1.2'. [ 69.351555][ T5206] loop2: partition table beyond EOD, truncated [ 69.437507][ T5938] syz.2.3 uses obsolete (PF_INET,SOCK_PACKET) [ 69.753881][ T5942] tipc: Started in network mode [ 69.759242][ T5942] tipc: Node identity ac14140f, cluster identity 4711 [ 69.766544][ T5942] tipc: New replicast peer: 10.1.1.2 [ 69.774672][ T5942] tipc: Enabled bearer , priority 10 [ 69.885916][ T5144] Bluetooth: hci1: command tx timeout [ 69.923837][ T5144] Bluetooth: hci1: unexpected event 0x07 length: 4 < 255 [ 69.959507][ T5144] Bluetooth: hci2: command tx timeout [ 69.959714][ T5835] Bluetooth: hci0: command tx timeout [ 70.037491][ T5954] netlink: 168 bytes leftover after parsing attributes in process `syz.4.15'. [ 70.060214][ T5835] Bluetooth: hci3: command tx timeout [ 70.118651][ T5835] Bluetooth: hci4: command tx timeout [ 70.171845][ T5962] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 70.198290][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 70.199102][ T5964] Zero length message leads to an empty skb [ 70.206851][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 70.283690][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 70.359293][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 70.548879][ T5965] 9pnet_fd: Insufficient options for proto=fd [ 70.864727][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 70.889451][ T5879] tipc: Node number set to 2886997007 [ 71.213549][ T5880] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 71.403746][ T5879] kernel write not supported for file /i2c-0 (pid: 5879 comm: kworker/1:4) [ 71.588893][ T5880] usb 5-1: Using ep0 maxpacket: 16 [ 71.622553][ T5880] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 71.667179][ T5880] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 71.705085][ T5880] usb 5-1: Product: syz [ 71.715871][ T5880] usb 5-1: Manufacturer: syz [ 71.726960][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.733962][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.756026][ T5880] usb 5-1: SerialNumber: syz [ 71.782047][ T5880] r8152-cfgselector 5-1: Unknown version 0x0000 [ 71.795536][ T5880] r8152-cfgselector 5-1: config 0 descriptor?? [ 73.286144][ T5917] r8152-cfgselector 5-1: USB disconnect, device number 2 [ 73.482865][ T5996] loop1: detected capacity change from 0 to 16 [ 73.726211][ T5996] erofs (device loop1): mounted with root inode @ nid 36. [ 75.326373][ T6008] binder: 6007:6008 ioctl c018620c 0 returned -14 [ 75.536507][ T5924] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 75.678350][ T5924] usb 5-1: device descriptor read/64, error -71 [ 76.370030][ T6019] block nbd2: NBD_DISCONNECT [ 76.376925][ T6019] block nbd2: Disconnected due to user request. [ 76.389419][ T6019] block nbd2: shutting down sockets [ 80.508178][ T5917] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 80.638171][ T5917] usb 5-1: device descriptor read/64, error -71 [ 81.584555][ T6074] loop2: detected capacity change from 0 to 16 [ 81.598945][ T5917] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 81.728191][ T5917] usb 5-1: device descriptor read/64, error -71 [ 81.786019][ T6074] erofs (device loop2): mounted with root inode @ nid 36. [ 82.036768][ T5917] usb usb5-port1: attempt power cycle [ 82.045956][ T25] cfg80211: failed to load regulatory.db [ 83.138112][ T5917] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 83.158916][ T5917] usb 5-1: device descriptor read/8, error -71 [ 85.216451][ T6097] xt_hashlimit: max too large, truncated to 1048576 [ 85.348221][ T6097] Cannot find set identified by id 0 to match [ 86.588579][ T5880] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 86.641419][ T6118] netlink: 28 bytes leftover after parsing attributes in process `syz.2.62'. [ 86.760688][ T5880] usb 2-1: Using ep0 maxpacket: 16 [ 86.785057][ T5880] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 86.812372][ T5880] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 86.843087][ T5880] usb 2-1: config 0 has no interface number 0 [ 86.856776][ T5880] usb 2-1: config 0 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 86.900225][ T5880] usb 2-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 86.920116][ T5880] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.947503][ T5880] usb 2-1: config 0 descriptor?? [ 86.966572][ T5880] usbhid 2-1:0.1: couldn't find an input interrupt endpoint [ 87.343985][ T5144] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 87.353469][ T5144] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 87.396140][ T5144] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 87.416263][ T5144] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 87.552707][ T5144] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 87.563841][ T5144] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 89.577903][ T25] usb 2-1: USB disconnect, device number 2 [ 89.660587][ T6125] chnl_net:caif_netlink_parms(): no params data found [ 89.780716][ T5144] Bluetooth: hci5: command tx timeout [ 90.538906][ T6158] loop2: detected capacity change from 0 to 16 [ 90.626732][ T6158] erofs (device loop2): mounted with root inode @ nid 36. [ 90.872142][ T6125] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.915185][ T6125] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.958271][ T6125] bridge_slave_0: entered allmulticast mode [ 90.991736][ T6125] bridge_slave_0: entered promiscuous mode [ 91.013451][ T6125] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.066022][ T6125] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.108337][ T6125] bridge_slave_1: entered allmulticast mode [ 91.146654][ T6125] bridge_slave_1: entered promiscuous mode [ 91.833272][ T5144] Bluetooth: hci5: command tx timeout [ 92.108849][ T6125] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.447060][ T6125] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.972856][ T5144] Bluetooth: hci5: command tx timeout [ 94.279367][ T6125] team0: Port device team_slave_0 added [ 94.288908][ T6125] team0: Port device team_slave_1 added [ 94.331379][ T6125] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.338684][ T6125] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.377933][ T6187] netlink: 12 bytes leftover after parsing attributes in process `syz.0.77'. [ 94.388286][ T6125] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.440708][ T6125] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.447746][ T6125] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.483142][ T6125] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.498742][ T5880] usb 2-1: new low-speed USB device number 3 using dummy_hcd [ 94.609479][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 94.654431][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 94.772619][ T5880] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 94.783264][ T5880] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 94.818345][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 94.961665][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 95.197955][ T5880] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 95.235422][ T5880] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 95.252718][ T5880] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.299252][ T5880] hub 2-1:1.0: bad descriptor, ignoring hub [ 95.337989][ T5880] hub 2-1:1.0: probe with driver hub failed with error -5 [ 95.346392][ T5880] cdc_wdm 2-1:1.0: skipping garbage [ 95.447920][ T5880] cdc_wdm 2-1:1.0: skipping garbage [ 95.454106][ T5880] cdc_wdm 2-1:1.0: probe with driver cdc_wdm failed with error -22 [ 95.530727][ T5880] usb 2-1: USB disconnect, device number 3 [ 95.968168][ T6125] hsr_slave_0: entered promiscuous mode [ 96.078131][ T5144] Bluetooth: hci5: command tx timeout [ 96.298528][ T6125] hsr_slave_1: entered promiscuous mode [ 96.304933][ T6125] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 96.339774][ T6125] Cannot create hsr debugfs directory [ 99.242786][ T6125] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 99.364018][ T6125] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 99.418365][ T6125] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 99.553810][ T6125] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 100.242914][ T6125] 8021q: adding VLAN 0 to HW filter on device bond0 [ 100.257509][ T6248] netlink: 12 bytes leftover after parsing attributes in process `syz.1.94'. [ 100.274387][ T6125] 8021q: adding VLAN 0 to HW filter on device team0 [ 100.320631][ T3507] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.327824][ T3507] bridge0: port 1(bridge_slave_0) entered forwarding state [ 100.381653][ T6053] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.388847][ T6053] bridge0: port 2(bridge_slave_1) entered forwarding state [ 100.998883][ T5144] block nbd4: Receive control failed (result -32) [ 101.036374][ T6246] block nbd4: shutting down sockets [ 101.067445][ T6125] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 104.950157][ T6125] veth0_vlan: entered promiscuous mode [ 105.031783][ T6125] veth1_vlan: entered promiscuous mode [ 105.174488][ T6125] veth0_macvtap: entered promiscuous mode [ 105.251719][ T6125] veth1_macvtap: entered promiscuous mode [ 105.305458][ T6125] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 105.358340][ T6125] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.398538][ T6125] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 105.398669][ T6305] tipc: Trying to set illegal importance in message [ 105.429657][ T6125] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.456185][ T6125] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 105.520168][ T6125] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.628135][ T6125] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 105.647957][ T6125] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.685254][ T6125] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 105.785568][ T6125] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.854045][ T6125] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 105.944447][ T6125] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 106.084491][ T6125] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.159504][ T6125] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 106.206146][ T6125] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.245387][ T6125] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 106.286684][ T6125] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.336040][ T6125] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 106.374800][ T6125] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.788301][ T6125] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 106.800856][ T6125] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.969513][ T6125] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 107.391930][ T6374] syz.4.107 (6374) used greatest stack depth: 17584 bytes left [ 107.392134][ T6378] syz.4.107 (6378): drop_caches: 2 [ 107.918555][ T6376] syz.4.107 (6376) used greatest stack depth: 16920 bytes left [ 108.258819][ T6125] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.267588][ T6125] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.318414][ T6125] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.327269][ T6125] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.415175][ T6360] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.430130][ T6360] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.493205][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.516544][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.779707][ T6394] block nbd5: not configured, cannot reconfigure [ 110.020702][ T6404] netlink: 4 bytes leftover after parsing attributes in process `syz.5.115'. [ 110.422342][ T6409] netlink: 36 bytes leftover after parsing attributes in process `syz.4.116'. [ 110.432703][ T6409] netlink: 16 bytes leftover after parsing attributes in process `syz.4.116'. [ 110.443848][ T6409] netlink: 36 bytes leftover after parsing attributes in process `syz.4.116'. [ 110.453368][ T6409] netlink: 36 bytes leftover after parsing attributes in process `syz.4.116'. [ 113.419154][ T6437] bond1: (slave veth3): Enslaving as an active interface with an up link [ 113.528794][ T6437] bond1: (slave veth5): Enslaving as an active interface with an up link [ 116.746691][ T6471] block nbd2: shutting down sockets [ 116.905368][ T6482] bond1: (slave veth3): Enslaving as an active interface with an up link [ 117.053432][ T6482] bond1: (slave veth5): Enslaving as an active interface with an up link [ 117.699861][ T6506] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 117.709532][ T6506] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 118.828146][ T6522] netlink: 28 bytes leftover after parsing attributes in process `syz.4.152'. [ 118.840342][ T6522] netlink: 28 bytes leftover after parsing attributes in process `syz.4.152'. [ 118.950768][ T6525] netlink: 4 bytes leftover after parsing attributes in process `syz.0.151'. [ 119.807184][ T6538] dccp_close: ABORT with 15628 bytes unread [ 120.610491][ T6549] binder: 6547:6549 ioctl c018620c 0 returned -14 [ 123.775134][ T6575] netlink: 28 bytes leftover after parsing attributes in process `syz.4.169'. [ 126.717044][ T6603] ALSA: mixer_oss: invalid OSS volume '' [ 127.883397][ T6634] netlink: 4 bytes leftover after parsing attributes in process `syz.1.185'. [ 128.784202][ T6633] netlink: 'syz.2.186': attribute type 3 has an invalid length. [ 128.792214][ T6633] netlink: 3 bytes leftover after parsing attributes in process `syz.2.186'. [ 128.892705][ T6620] netlink: 40 bytes leftover after parsing attributes in process `syz.0.181'. [ 129.278337][ T5880] usb 6-1: new low-speed USB device number 2 using dummy_hcd [ 129.463555][ T5880] usb 6-1: No LPM exit latency info found, disabling LPM. [ 129.525683][ T5880] usb 6-1: config 0 has no interfaces? [ 129.567064][ T5880] usb 6-1: string descriptor 0 read error: -22 [ 129.586215][ T5880] usb 6-1: New USB device found, idVendor=056a, idProduct=00ba, bcdDevice= 0.40 [ 129.606231][ T5880] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.627673][ T5880] usb 6-1: config 0 descriptor?? [ 129.751765][ T6654] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 130.609856][ T6662] capability: warning: `syz.4.194' uses deprecated v2 capabilities in a way that may be insecure [ 131.616225][ T25] usb 6-1: USB disconnect, device number 2 [ 133.283418][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.478721][ T6685] process 'syz.5.200' launched './file0' with NULL argv: empty string added [ 134.093781][ T6692] netlink: 'syz.4.199': attribute type 3 has an invalid length. [ 134.101799][ T6692] netlink: 3 bytes leftover after parsing attributes in process `syz.4.199'. [ 134.718173][ T5880] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 134.849905][ T6698] binder: 6695:6698 ioctl c018620c 0 returned -14 [ 135.818260][ T5880] usb 6-1: Using ep0 maxpacket: 32 [ 136.924331][ T5880] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 137.089424][ T6713] binder: 6711:6713 ioctl c018620c 0 returned -14 [ 137.131067][ T5880] usb 6-1: can't read configurations, error -71 [ 139.841431][ T5878] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 140.029196][ T5878] usb 2-1: Using ep0 maxpacket: 16 [ 140.086744][ T5878] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 140.108345][ T5878] usb 2-1: config 0 has no interface number 0 [ 140.114511][ T5878] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 140.137637][ T5878] usb 2-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 140.160783][ T5878] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.214226][ T5878] usb 2-1: config 0 descriptor?? [ 140.231304][ T5878] usb 2-1: can't set config #0, error -71 [ 140.252069][ T5878] usb 2-1: USB disconnect, device number 4 [ 141.988840][ T5878] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 142.670247][ T6763] 8021q: adding VLAN 0 to HW filter on device bond2 [ 142.683107][ T6763] team0: Port device bond2 added [ 143.402266][ T5878] usb 2-1: device descriptor read/64, error -71 [ 146.186183][ T6771] netlink: 40 bytes leftover after parsing attributes in process `syz.0.226'. [ 146.454296][ T6797] binder: 6795:6797 ioctl c018620c 0 returned -14 [ 147.561547][ T6812] block nbd0: NBD_DISCONNECT [ 147.614447][ T6811] binder: 6810:6811 ioctl c018620c 0 returned -14 [ 148.818152][ T5909] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 149.868213][ T5909] usb 2-1: device descriptor read/64, error -71 [ 150.075168][ T25] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 150.133892][ T5909] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 150.298502][ T25] usb 5-1: Using ep0 maxpacket: 32 [ 150.626180][ T5909] usb 2-1: device descriptor read/64, error -71 [ 150.888510][ T25] usb 5-1: config 0 has an invalid interface number: 132 but max is 0 [ 150.907151][ T25] usb 5-1: config 0 has no interface number 0 [ 150.927459][ T25] usb 5-1: config 0 interface 132 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 150.966765][ T25] usb 5-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 150.987228][ T25] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.049476][ T25] usb 5-1: Product: syz [ 151.054096][ T25] usb 5-1: Manufacturer: syz [ 151.061934][ T5909] usb usb2-port1: attempt power cycle [ 151.089767][ T25] usb 5-1: SerialNumber: syz [ 151.109407][ T25] usb 5-1: config 0 descriptor?? [ 151.453237][ T6826] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 151.479431][ T25] em28xx 5-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 151.489974][ T25] em28xx 5-1:0.132: Video interface 132 found: bulk [ 151.957400][ T25] em28xx 5-1:0.132: chip ID is em2710 [ 152.470194][ T25] em28xx 5-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 152.816282][ T25] em28xx 5-1:0.132: board has no eeprom [ 152.934435][ T25] em28xx 5-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 152.977364][ T25] em28xx 5-1:0.132: analog set to bulk mode. [ 153.207815][ T5917] em28xx 5-1:0.132: Registering V4L2 extension [ 153.375342][ T6871] netlink: 'syz.5.254': attribute type 1 has an invalid length. [ 153.459149][ T25] usb 5-1: USB disconnect, device number 9 [ 153.508969][ T25] em28xx 5-1:0.132: Disconnecting em28xx [ 153.764920][ T6871] bond1: (slave veth3): Enslaving as an active interface with an up link [ 154.002431][ T6871] bond1: (slave veth5): Enslaving as an active interface with an up link [ 154.028285][ T5917] em28xx 5-1:0.132: Config register raw data: 0xffffffed [ 154.035671][ T5917] em28xx 5-1:0.132: AC97 chip type couldn't be determined [ 154.042957][ T5917] em28xx 5-1:0.132: No AC97 audio processor [ 154.090123][ T5917] usb 5-1: Decoder not found [ 154.094782][ T5917] em28xx 5-1:0.132: failed to create media graph [ 154.108101][ T5917] em28xx 5-1:0.132: V4L2 device video103 deregistered [ 154.130569][ T5917] em28xx 5-1:0.132: Remote control support is not available for this card. [ 154.195646][ T25] em28xx 5-1:0.132: Closing input extension [ 154.241072][ T25] em28xx 5-1:0.132: Freeing device [ 154.380580][ T5880] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 154.548246][ T5880] usb 3-1: Using ep0 maxpacket: 32 [ 154.573454][ T5880] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=a6.13 [ 154.729412][ T5880] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.855268][ T5880] usb 3-1: Product: syz [ 155.009259][ T5880] usb 3-1: Manufacturer: syz [ 155.132737][ T5880] usb 3-1: SerialNumber: syz [ 155.219123][ T25] usb 5-1: new full-speed USB device number 10 using dummy_hcd [ 155.220761][ T5880] usb 3-1: config 0 descriptor?? [ 155.246983][ T5880] pvrusb2: Hardware description: Terratec Grabster AV400 [ 155.273685][ T5880] pvrusb2: ********** [ 155.296726][ T5880] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 155.339300][ T5880] pvrusb2: Important functionality might not be entirely working. [ 155.361738][ T5880] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 155.368427][ T25] usb 5-1: device descriptor read/64, error -71 [ 155.439503][ T5880] pvrusb2: ********** [ 155.493622][ T2337] pvrusb2: Invalid write control endpoint [ 155.502995][ T5880] usb 3-1: USB disconnect, device number 2 [ 155.630144][ T25] usb 5-1: new full-speed USB device number 11 using dummy_hcd [ 155.676554][ T2337] pvrusb2: Invalid write control endpoint [ 155.705082][ T2337] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 155.728436][ T2337] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 155.737351][ T2337] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 155.758368][ T2337] pvrusb2: Device being rendered inoperable [ 155.778119][ T2337] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 155.786490][ T2337] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 155.841814][ T2337] pvrusb2: Attached sub-driver cx25840 [ 155.847476][ T2337] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 155.908787][ T2337] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 156.178127][ T25] usb 5-1: device descriptor read/64, error -71 [ 156.409081][ T25] usb usb5-port1: attempt power cycle [ 157.666062][ T25] usb 5-1: new full-speed USB device number 12 using dummy_hcd [ 157.918348][ T25] usb 5-1: device not accepting address 12, error -71 [ 158.748371][ T29] audit: type=1804 audit(1733817800.865:2): pid=6941 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.275" name="/newroot/61/bus/bus" dev="overlay" ino=340 res=1 errno=0 [ 159.267411][ T6950] bond0: entered promiscuous mode [ 159.277877][ T6950] bond_slave_0: entered promiscuous mode [ 159.297838][ T6948] block nbd1: NBD_DISCONNECT [ 159.304610][ T29] audit: type=1800 audit(1733817801.445:3): pid=6940 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=set_data cause=unavailable-hash-algorithm comm="syz.4.275" name="/bus" dev="overlay" ino=340 res=0 errno=0 [ 159.326152][ T6941] Invalid ELF header magic: != ELF [ 159.338369][ T6950] bond_slave_1: entered promiscuous mode [ 159.528997][ T6953] tipc: Started in network mode [ 159.533923][ T6953] tipc: Node identity ac14140f, cluster identity 4711 [ 159.541138][ T6953] tipc: New replicast peer: 10.1.1.2 [ 159.547553][ T6953] tipc: Enabled bearer , priority 10 [ 160.109500][ T6966] block nbd4: NBD_DISCONNECT [ 160.117931][ T6966] block nbd4: Disconnected due to user request. [ 160.139424][ T6966] block nbd4: shutting down sockets [ 160.268201][ T5909] usb 2-1: new full-speed USB device number 10 using dummy_hcd [ 161.020119][ T5909] usb 2-1: device descriptor read/64, error -71 [ 161.149246][ T8] tipc: Node number set to 2886997007 [ 162.488159][ T5909] usb 2-1: new full-speed USB device number 11 using dummy_hcd [ 162.649237][ T5909] usb 2-1: device descriptor read/64, error -71 [ 162.762874][ T5909] usb usb2-port1: attempt power cycle [ 163.235609][ T7009] netlink: 4 bytes leftover after parsing attributes in process `syz.1.297'. [ 163.268671][ T8] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 163.285883][ T7009] netlink: 32 bytes leftover after parsing attributes in process `syz.1.297'. [ 163.353011][ T5144] block nbd0: Receive control failed (result -107) [ 163.359430][ T7014] 9pnet_fd: Insufficient options for proto=fd [ 163.459238][ T8] usb 6-1: Using ep0 maxpacket: 16 [ 163.472672][ T8] usb 6-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 163.496372][ T8] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.528583][ T8] usb 6-1: Product: syz [ 163.532815][ T8] usb 6-1: Manufacturer: syz [ 163.537434][ T8] usb 6-1: SerialNumber: syz [ 163.564967][ T8] r8152-cfgselector 6-1: Unknown version 0x0000 [ 163.577756][ T8] r8152-cfgselector 6-1: config 0 descriptor?? [ 164.138255][ T25] r8152-cfgselector 6-1: USB disconnect, device number 5 [ 168.258699][ T7072] netlink: 'syz.2.317': attribute type 3 has an invalid length. [ 168.266547][ T7072] netlink: 3 bytes leftover after parsing attributes in process `syz.2.317'. [ 170.124343][ T7086] warning: `syz.2.320' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 171.643586][ T7097] libceph: resolve '0.0' (ret=-3): failed [ 173.047991][ T7110] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 173.081140][ T7110] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 174.218162][ T7120] binder: 7119:7120 ioctl c018620c 0 returned -14 [ 179.927519][ T7180] nbd: nbd0 already in use [ 183.748270][ T7225] 9pnet_fd: Insufficient options for proto=fd [ 185.950677][ T7258] overlayfs: failed to resolve './file0': -2 [ 186.785201][ T5144] Bluetooth: hci2: command 0x0406 tx timeout [ 186.792929][ T5144] Bluetooth: hci0: command 0x0406 tx timeout [ 186.809044][ T5833] Bluetooth: hci1: command 0x0406 tx timeout [ 186.825685][ T5833] Bluetooth: hci3: command 0x0406 tx timeout [ 186.834654][ T5835] Bluetooth: hci4: command 0x0406 tx timeout [ 187.392638][ T7266] 9pnet_fd: Insufficient options for proto=fd [ 189.088229][ T7280] nbd: nbd0 already in use [ 190.717310][ T7303] 9pnet_fd: Insufficient options for proto=fd [ 190.966203][ T7314] block nbd5: NBD_DISCONNECT [ 190.996723][ T7314] block nbd5: Disconnected due to user request. [ 191.496774][ T7314] block nbd5: shutting down sockets [ 192.249886][ T7329] nbd: nbd0 already in use [ 194.864642][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 198.609184][ T7388] netlink: 'syz.2.410': attribute type 1 has an invalid length. [ 203.808217][ T5909] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 204.908839][ T5909] usb 2-1: Using ep0 maxpacket: 32 [ 204.962630][ T5909] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=a6.13 [ 205.738083][ T5909] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 205.746231][ T5909] usb 2-1: Product: syz [ 205.757223][ T5909] usb 2-1: Manufacturer: syz [ 205.762596][ T5909] usb 2-1: SerialNumber: syz [ 206.243577][ T5909] usb 2-1: config 0 descriptor?? [ 206.339700][ T5909] usb 2-1: can't set config #0, error -71 [ 206.346728][ T5909] usb 2-1: USB disconnect, device number 13 [ 206.491353][ T7448] gretap1: entered allmulticast mode [ 206.696167][ T7450] bridge_slave_0: left allmulticast mode [ 206.715880][ T7450] bridge_slave_0: left promiscuous mode [ 206.737817][ T7450] bridge0: port 1(bridge_slave_0) entered disabled state [ 206.867876][ T7450] bridge_slave_1: left allmulticast mode [ 206.903801][ T7450] bridge_slave_1: left promiscuous mode [ 207.660542][ T7450] bridge0: port 2(bridge_slave_1) entered disabled state [ 208.027330][ T7450] bond0: (slave bond_slave_0): Releasing backup interface [ 208.542852][ T7462] block nbd0: Cannot use ioctl interface on a netlink controlled device. [ 208.555492][ T7462] block nbd0: NBD_DISCONNECT [ 208.560504][ T7462] block nbd0: Send disconnect failed -32 [ 208.573286][ T7462] block nbd0: shutting down sockets [ 208.731515][ T7450] bond0: (slave bond_slave_1): Releasing backup interface [ 209.357295][ T7450] team0: Port device team_slave_0 removed [ 209.420803][ T7450] team0: Port device team_slave_1 removed [ 209.427901][ T7450] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 209.457969][ T7450] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 209.518419][ T7450] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 209.533253][ T7450] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 211.792253][ T7507] dccp_close: ABORT with 15628 bytes unread [ 212.192227][ T5835] Bluetooth: hci5: command 0x0406 tx timeout [ 212.256940][ T7516] block nbd1: NBD_DISCONNECT [ 212.262134][ T7516] block nbd1: Disconnected due to user request. [ 212.269012][ T7516] block nbd1: shutting down sockets [ 218.397070][ T7588] block nbd1: not configured, cannot reconfigure [ 221.613246][ T30] INFO: task syz.3.22:5981 blocked for more than 143 seconds. [ 221.628086][ T30] Not tainted 6.13.0-rc1-next-20241205-syzkaller #0 [ 221.636052][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 221.699040][ T30] task:syz.3.22 state:D stack:22776 pid:5981 tgid:5980 ppid:5829 flags:0x00000004 [ 221.709546][ T30] Call Trace: [ 221.713085][ T30] [ 221.716171][ T30] __schedule+0x189f/0x4c80 [ 221.721318][ T30] ? __pfx___schedule+0x10/0x10 [ 221.726374][ T30] ? __pfx_lock_release+0x10/0x10 [ 221.731733][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 221.737457][ T30] ? schedule+0x90/0x320 [ 221.742544][ T30] schedule+0x14b/0x320 [ 221.746939][ T30] bit_wait+0x12/0xd0 [ 221.751190][ T30] __wait_on_bit+0xb0/0x2f0 [ 221.755838][ T30] ? __pfx_bit_wait+0x10/0x10 [ 221.760709][ T30] out_of_line_wait_on_bit+0x1d5/0x260 [ 221.766296][ T30] ? __pfx_bit_wait+0x10/0x10 [ 221.771931][ T30] ? __pfx_out_of_line_wait_on_bit+0x10/0x10 [ 221.778118][ T30] ? __pfx_wake_bit_function+0x10/0x10 [ 221.783849][ T30] ? iov_iter_bvec_advance+0x220/0x240 [ 221.789751][ T30] netfs_unbuffered_read_iter_locked+0xd83/0x1540 [ 221.797338][ T30] netfs_unbuffered_read_iter+0xbf/0xe0 [ 221.830637][ T30] vfs_read+0x991/0xb70 [ 221.835913][ T30] ? __pfx_vfs_read+0x10/0x10 [ 221.840700][ T30] ? __fget_files+0x2a/0x410 [ 221.845324][ T30] ? __fget_files+0x2a/0x410 [ 221.849988][ T30] ksys_read+0x18f/0x2b0 [ 221.854252][ T30] ? __pfx_ksys_read+0x10/0x10 [ 221.859131][ T30] ? do_syscall_64+0x100/0x230 [ 221.863921][ T30] ? do_syscall_64+0xb6/0x230 [ 221.868666][ T30] do_syscall_64+0xf3/0x230 [ 221.873186][ T30] ? clear_bhb_loop+0x35/0x90 [ 221.877970][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 221.883944][ T30] RIP: 0033:0x7f7e9d77ff19 [ 221.888516][ T30] RSP: 002b:00007f7e9e5bf058 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 221.896955][ T30] RAX: ffffffffffffffda RBX: 00007f7e9d945fa0 RCX: 00007f7e9d77ff19 [ 221.905009][ T30] RDX: 0000000000002020 RSI: 0000000020000440 RDI: 0000000000000006 [ 221.913066][ T30] RBP: 00007f7e9d7f3cc8 R08: 0000000000000000 R09: 0000000000000000 [ 221.921199][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 221.929233][ T30] R13: 0000000000000000 R14: 00007f7e9d945fa0 R15: 00007ffcad396e18 [ 221.938159][ T30] [ 221.941259][ T30] [ 221.941259][ T30] Showing all locks held in the system: [ 221.949609][ T30] 2 locks held by kworker/u8:1/12: [ 221.954733][ T30] 1 lock held by khungtaskd/30: [ 221.959701][ T30] #0: ffffffff8e9374a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x55/0x2a0 [ 221.969717][ T30] 2 locks held by getty/5583: [ 221.974408][ T30] #0: ffff888031d1b0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 221.984325][ T30] #1: ffffc90002fde2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x6a6/0x1e00 [ 221.994638][ T30] 2 locks held by syz.3.22/5981: [ 221.999631][ T30] #0: ffff888033d967f8 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x254/0x320 [ 222.008794][ T30] #1: ffff88805be20148 (&sb->s_type->i_mutex_key#21){++++}-{4:4}, at: netfs_start_io_direct+0x1d4/0x210 [ 222.020138][ T30] 3 locks held by kworker/u8:23/6320: [ 222.025537][ T30] #0: ffff88801ac89148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1840 [ 222.037337][ T30] #1: ffffc9000cb0fd00 ((work_completion)(&map->work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1840 [ 222.049611][ T30] #2: ffffffff8e93c880 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530 [ 222.060110][ T30] 5 locks held by kworker/u8:27/6324: [ 222.065522][ T30] 1 lock held by syz.4.473/7596: [ 222.070577][ T30] 2 locks held by syz.2.474/7602: [ 222.075620][ T30] #0: ffffffff8e7f2b68 (sched_core_mutex){+.+.}-{4:4}, at: sched_core_get+0x51/0x180 [ 222.085351][ T30] #1: ffffffff8e93c9b8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x451/0x830 [ 222.096350][ T30] 6 locks held by syz-executor/7606: [ 222.101704][ T30] [ 222.104051][ T30] ============================================= [ 222.104051][ T30] [ 222.112550][ T30] NMI backtrace for cpu 1 [ 222.116922][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.13.0-rc1-next-20241205-syzkaller #0 [ 222.126930][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 222.137016][ T30] Call Trace: [ 222.140320][ T30] [ 222.143285][ T30] dump_stack_lvl+0x241/0x360 [ 222.147988][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 222.153195][ T30] ? __pfx__printk+0x10/0x10 [ 222.157789][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 222.162725][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 222.168195][ T30] ? _printk+0xd5/0x120 [ 222.172357][ T30] ? __pfx__printk+0x10/0x10 [ 222.176966][ T30] ? __wake_up_klogd+0xcc/0x110 [ 222.181820][ T30] ? __pfx__printk+0x10/0x10 [ 222.186405][ T30] ? __rcu_read_unlock+0xa1/0x110 [ 222.191425][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 222.197408][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 222.203409][ T30] watchdog+0xff6/0x1040 [ 222.207651][ T30] ? watchdog+0x1ea/0x1040 [ 222.212066][ T30] ? __pfx_watchdog+0x10/0x10 [ 222.216737][ T30] kthread+0x2f0/0x390 [ 222.220803][ T30] ? __pfx_watchdog+0x10/0x10 [ 222.225475][ T30] ? __pfx_kthread+0x10/0x10 [ 222.230059][ T30] ret_from_fork+0x4b/0x80 [ 222.234466][ T30] ? __pfx_kthread+0x10/0x10 [ 222.239049][ T30] ret_from_fork_asm+0x1a/0x30 [ 222.243812][ T30] [ 222.247641][ T30] Sending NMI from CPU 1 to CPUs 0: [ 222.253665][ C0] NMI backtrace for cpu 0 [ 222.253678][ C0] CPU: 0 UID: 0 PID: 7602 Comm: syz.2.474 Not tainted 6.13.0-rc1-next-20241205-syzkaller #0 [ 222.253698][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 222.253707][ C0] RIP: 0010:kasan_check_range+0x9/0x290 [ 222.253732][ C0] Code: e8 1c 76 e3 ff 90 0f 0b 66 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 66 0f 1f 00 55 41 57 41 56 <41> 54 53 b0 01 48 85 f6 0f 84 a0 01 00 00 4c 8d 04 37 49 39 f8 0f [ 222.253746][ C0] RSP: 0018:ffffc9000d666f70 EFLAGS: 00000046 [ 222.253761][ C0] RAX: 0000000000000000 RBX: 0000000000000019 RCX: ffffffff817a9e47 [ 222.253772][ C0] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffff942b2840 [ 222.253782][ C0] RBP: 0000000000000002 R08: ffffffff942b2847 R09: 1ffffffff2856508 [ 222.253794][ C0] R10: dffffc0000000000 R11: fffffbfff2856509 R12: ffff88802b7246cc [ 222.253806][ C0] R13: 000000000000000f R14: 1ffff110056e48f0 R15: ffff88802b724780 [ 222.253818][ C0] FS: 0000000000000000(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 222.253832][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 222.253843][ C0] CR2: 000000110c409ba2 CR3: 0000000033c70000 CR4: 00000000003526f0 [ 222.253858][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 222.253868][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 222.253878][ C0] Call Trace: [ 222.253884][ C0] [ 222.253891][ C0] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 222.253907][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 222.253926][ C0] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 222.253955][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 222.253971][ C0] ? nmi_handle+0x14f/0x5a0 [ 222.253990][ C0] ? nmi_handle+0x2a/0x5a0 [ 222.254009][ C0] ? kasan_check_range+0x9/0x290 [ 222.254026][ C0] ? default_do_nmi+0x63/0x160 [ 222.254049][ C0] ? exc_nmi+0x123/0x1f0 [ 222.254070][ C0] ? end_repeat_nmi+0xf/0x53 [ 222.254093][ C0] ? __lock_acquire+0x5b7/0x2100 [ 222.254110][ C0] ? kasan_check_range+0x9/0x290 [ 222.254128][ C0] ? kasan_check_range+0x9/0x290 [ 222.254146][ C0] ? kasan_check_range+0x9/0x290 [ 222.254164][ C0] [ 222.254169][ C0] [ 222.254175][ C0] __lock_acquire+0x5b7/0x2100 [ 222.254197][ C0] lock_acquire+0x1ed/0x550 [ 222.254213][ C0] ? pfn_valid+0xf6/0x450 [ 222.254234][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 222.254253][ C0] ? page_ext_put+0x97/0xc0 [ 222.254269][ C0] ? __pte_offset_map_lock+0x273/0x300 [ 222.254291][ C0] ? __pfx_lock_release+0x10/0x10 [ 222.254313][ C0] ? pfn_valid+0xf6/0x450 [ 222.254330][ C0] pfn_valid+0x113/0x450 [ 222.254346][ C0] ? pfn_valid+0xf6/0x450 [ 222.254364][ C0] page_table_check_clear+0x1e/0x550 [ 222.254384][ C0] unmap_page_range+0x376d/0x48d0 [ 222.254415][ C0] ? validate_chain+0x11e/0x5920 [ 222.254442][ C0] ? __pfx_unmap_page_range+0x10/0x10 [ 222.254460][ C0] ? mas_next_node+0xb99/0xe00 [ 222.254486][ C0] ? mas_next_slot+0xdc6/0xea0 [ 222.254505][ C0] ? uprobe_munmap+0x183/0x460 [ 222.254523][ C0] ? unmap_single_vma+0x1bd/0x2b0 [ 222.254543][ C0] unmap_vmas+0x3cc/0x5f0 [ 222.254565][ C0] ? __pfx_unmap_vmas+0x10/0x10 [ 222.254589][ C0] ? tlb_gather_mmu_fullmm+0x160/0x210 [ 222.254608][ C0] exit_mmap+0x288/0xd50 [ 222.254633][ C0] ? __pfx_exit_mmap+0x10/0x10 [ 222.254660][ C0] ? __pfx_exit_aio+0x10/0x10 [ 222.254678][ C0] ? uprobe_clear_state+0x271/0x290 [ 222.254694][ C0] ? mm_update_next_owner+0xa4/0x810 [ 222.254711][ C0] ? do_raw_spin_unlock+0x13c/0x8b0 [ 222.254733][ C0] __mmput+0x115/0x3c0 [ 222.254754][ C0] exit_mm+0x220/0x310 [ 222.254771][ C0] ? __pfx_exit_mm+0x10/0x10 [ 222.254787][ C0] ? taskstats_exit+0x326/0xa60 [ 222.254805][ C0] do_exit+0x9b2/0x28e0 [ 222.254824][ C0] ? __pfx_do_exit+0x10/0x10 [ 222.254840][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 222.254863][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 222.254880][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 222.254897][ C0] ? _raw_spin_lock_irq+0xdf/0x120 [ 222.254914][ C0] do_group_exit+0x207/0x2c0 [ 222.254930][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 222.254945][ C0] ? lockdep_hardirqs_on+0x99/0x150 [ 222.254964][ C0] get_signal+0x16b2/0x1750 [ 222.254990][ C0] ? __pfx_get_signal+0x10/0x10 [ 222.255012][ C0] arch_do_signal_or_restart+0x96/0x860 [ 222.255037][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 222.255060][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 222.255081][ C0] ? syscall_exit_to_user_mode+0xa3/0x340 [ 222.255100][ C0] syscall_exit_to_user_mode+0xce/0x340 [ 222.255120][ C0] do_syscall_64+0x100/0x230 [ 222.255139][ C0] ? clear_bhb_loop+0x35/0x90 [ 222.255159][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 222.255179][ C0] RIP: 0033:0x7f281d57ff19 [ 222.255192][ C0] Code: Unable to access opcode bytes at 0x7f281d57feef. [ 222.255200][ C0] RSP: 002b:00007f281e2f5058 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 222.255216][ C0] RAX: 0000000000000000 RBX: 00007f281d745fa0 RCX: 00007f281d57ff19 [ 222.255227][ C0] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 000000000000003e [ 222.255236][ C0] RBP: 00007f281d5f3cc8 R08: 0000000000000000 R09: 0000000000000000 [ 222.255247][ C0] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 222.255256][ C0] R13: 0000000000000000 R14: 00007f281d745fa0 R15: 00007ffccd368fe8 [ 222.255273][ C0] [ 222.377883][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 222.377903][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.13.0-rc1-next-20241205-syzkaller #0 [ 222.377925][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 222.377936][ T30] Call Trace: [ 222.377944][ T30] [ 222.377953][ T30] dump_stack_lvl+0x241/0x360 [ 222.377984][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 222.378011][ T30] ? __pfx__printk+0x10/0x10 [ 222.378032][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 222.378057][ T30] ? vscnprintf+0x5d/0x90 [ 222.378077][ T30] panic+0x349/0x880 [ 222.378100][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 222.378125][ T30] ? __pfx_panic+0x10/0x10 [ 222.378151][ T30] ? tick_nohz_tick_stopped+0x82/0xb0 [ 222.378175][ T30] ? __irq_work_queue_local+0x137/0x410 [ 222.378195][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 222.378215][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 222.378239][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 222.378265][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 222.378293][ T30] watchdog+0x1035/0x1040 [ 222.378313][ T30] ? watchdog+0x1ea/0x1040 [ 222.378336][ T30] ? __pfx_watchdog+0x10/0x10 [ 222.378355][ T30] kthread+0x2f0/0x390 [ 222.378374][ T30] ? __pfx_watchdog+0x10/0x10 [ 222.378391][ T30] ? __pfx_kthread+0x10/0x10 [ 222.378410][ T30] ret_from_fork+0x4b/0x80 [ 222.378428][ T30] ? __pfx_kthread+0x10/0x10 [ 222.378447][ T30] ret_from_fork_asm+0x1a/0x30 [ 222.378474][ T30] [ 222.932829][ T30] Kernel Offset: disabled [ 222.937167][ T30] Rebooting in 86400 seconds..