last executing test programs: 2m56.432144589s ago: executing program 2 (id=171): socket$inet6(0xa, 0x8000000000080001, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) dup(0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000740)=@filter={'filter\x00', 0x42, 0x4, 0x328, 0xffffffff, 0x0, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x290, 0x290, 0x290, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0xb0, 0x0, {0x100000000000000}}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x0, 0x9}}}, {{@ip={@broadcast, @rand_addr, 0x0, 0x0, 'pimreg\x00', 'syz_tun\x00'}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@inet=@socket3={{0x28, 'socket\x00', 0x2}, 0x6}, @common=@unspec=@devgroup={{0x38}}]}, @REJECT={0x28}}, {{@ip={@remote, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'wlan1\x00', 'pim6reg1\x00'}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@icmp={{0x28}, {0x0, "aae9"}}, @common=@ttl={{0x28}}]}, @REJECT={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x388) 2m55.294263584s ago: executing program 2 (id=175): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x143082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r0, &(0x7f0000000d00)=[{&(0x7f0000000100)="89e7ee2c7cdad9b4b47380c988ca", 0x280}], 0x1) 2m45.522880458s ago: executing program 2 (id=205): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x280000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(r0) syz_clone(0xd000, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETOWNER(r0, 0xff07, 0x0) 2m44.371705535s ago: executing program 2 (id=208): r0 = socket$inet(0x2, 0x2, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000000)="2ac3c2d5fa4423c5ad1ddee97879c38bf8", 0x11}], 0x1}, 0x840) writev(r2, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) r3 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'macvtap0\x00'}) setsockopt$inet_msfilter(r3, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a010100000004"], 0x57) setsockopt$inet_mreqsrc(r1, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000440)={@multicast2, @loopback, @private=0xa010100}, 0xc) 2m42.902933262s ago: executing program 2 (id=211): syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x8aba, 0x0, 0x200004, 0x804, 0x4, 0x401, 0x120000, 0x7f, 0x0, 0x7, 0x8000000000000001, 0xfffffffffffffffc, 0x0, 0x101, 0x4000000000000006, 0x1], 0xffff1000, 0x141200}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r3, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000080}, 0x80) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x3, 0x20, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2m40.100840457s ago: executing program 2 (id=219): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000280)='kmem_cache_free\x00', r1}, 0x10) sync() mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002540)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002380)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000020000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f0000000200)={0x2020, 0x0, 0x0}, 0x20e6) llistxattr(&(0x7f0000002280)='./file0\x00', 0x0, 0x8c) write$FUSE_INIT(r2, &(0x7f00000024c0)={0x50, 0x0, r3, {0x7, 0x9, 0x6, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0x8e9}}, 0x50) read$FUSE(r2, &(0x7f0000004580)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_GETXATTR(r2, &(0x7f0000002400)={0x18, 0x0, r4}, 0x18) 2m28.425046025s ago: executing program 0 (id=244): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x280}) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040055}, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 2m27.287773256s ago: executing program 0 (id=250): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(0xffffffffffffffff, 0x7, 0x0, 0x1) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(0xffffffffffffffff, 0x7, 0x0, 0x1) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=@updpolicy={0xb8, 0x14, 0xfd3649826d894c67, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x4e20, 0x0, 0xa}, {}, {}, 0x8000}}, 0xb8}}, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) 2m26.111300007s ago: executing program 0 (id=254): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x280000, 0x0) close(r3) syz_clone(0xb00b000, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETNOCSUM(r3, 0xff03, 0x0) 2m24.590817826s ago: executing program 32 (id=219): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000280)='kmem_cache_free\x00', r1}, 0x10) sync() mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002540)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002380)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000020000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f0000000200)={0x2020, 0x0, 0x0}, 0x20e6) llistxattr(&(0x7f0000002280)='./file0\x00', 0x0, 0x8c) write$FUSE_INIT(r2, &(0x7f00000024c0)={0x50, 0x0, r3, {0x7, 0x9, 0x6, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0x8e9}}, 0x50) read$FUSE(r2, &(0x7f0000004580)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_GETXATTR(r2, &(0x7f0000002400)={0x18, 0x0, r4}, 0x18) 2m24.284322973s ago: executing program 0 (id=260): rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8) ioctl$VIDIOC_DV_TIMINGS_CAP(0xffffffffffffffff, 0xc0905664, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f0000000300), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = dup(0xffffffffffffffff) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000940)=@raw={'raw\x00', 0xe501, 0x3, 0x208, 0x0, 0xa, 0x1000000, 0xb8, 0x0, 0x170, 0x230, 0x230, 0x170, 0x223, 0x3, 0x0, {[{{@ip={@dev={0xac, 0x14, 0x14, 0x22}, @empty, 0xffffff00, 0xffffff00, 'veth0_to_hsr\x00', 'batadv0\x00', {0xff}, {0xff}, 0x6c, 0x1, 0x41}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x8, 'syz0\x00'}}}, {{@uncond, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x20c499, 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x268) preadv(0xffffffffffffffff, 0x0, 0x0, 0x8a3, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x8400, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40186f40, &(0x7f0000000440)=0x1f) 2m20.426138458s ago: executing program 0 (id=269): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x6a, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0x33}}, &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000d40)={r1, 0x0, 0x0}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r2, &(0x7f00000003c0), 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x10012, r2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r3, 0x400448ca, 0x0) 2m18.852164424s ago: executing program 0 (id=273): socket$inet(0xa, 0x801, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mknod(&(0x7f0000000540)='./file1\x00', 0x0, 0x0) mount(&(0x7f0000000140)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000640)='./file1\x00', &(0x7f00000002c0)='qnx6\x00', 0x2008000, 0x0) 2m3.026987181s ago: executing program 33 (id=273): socket$inet(0xa, 0x801, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mknod(&(0x7f0000000540)='./file1\x00', 0x0, 0x0) mount(&(0x7f0000000140)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000640)='./file1\x00', &(0x7f00000002c0)='qnx6\x00', 0x2008000, 0x0) 1m15.441899668s ago: executing program 4 (id=390): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000002d80)={0x2020}, 0xcf9) r2 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r2, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6(0xa, 0x6, 0x0) ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, &(0x7f0000000140)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000c68000/0x3000)=nil, 0x7fffffff, 0x0, 0x0, 0x6, 0x0, 0x2}) openat$audio1(0xffffffffffffff9c, 0x0, 0x68000, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) socket$xdp(0x2c, 0x3, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) socket$netlink(0x10, 0x3, 0x0) 1m3.780389081s ago: executing program 4 (id=406): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) preadv(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1, 0x4, 0x5) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000000340)={@initdev}, &(0x7f0000000400)=0x14) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = socket(0x2, 0x80805, 0x0) socket$kcm(0x2c, 0x3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000001080)=0x8) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000000)={r3, 0xfffffffe}, 0x0) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000040)={r3, 0x8}, &(0x7f0000000200)=0x8) 1m1.843785586s ago: executing program 4 (id=412): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x0, 0x0, 0x50) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmmsg(r2, 0x0, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x1000, 0x7, @loopback, 0x3ff}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000040)=@gcm_256={{0x303}, "fdb87942485c70d0", "e9f894f1bea76fae88e137bbe22c560e6c1bd363aba53c9e1899fae620c670d9", '\x00\x00\x00T', "9f7501f055e67379"}, 0x38) sendto$inet6(r0, &(0x7f00000001c0), 0xfffffffffffffede, 0x0, 0x0, 0x3000137) 58.946206922s ago: executing program 4 (id=418): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbee6, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/pids.max\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000000), 0x12) r4 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$int_in(r4, 0x40000000af01, 0x0) 57.796292796s ago: executing program 4 (id=420): mount(&(0x7f0000000040)=@sg0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) r1 = socket(0x40000000015, 0x5, 0x0) r2 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040)='c:::\x00', 0x0) r3 = gettid() fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) tkill(r3, 0xb) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) socket(0x10, 0x803, 0x0) sendmsg$xdp(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x80) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x42, &(0x7f0000000000)={0x77359400}, 0x10) 47.783287139s ago: executing program 4 (id=436): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB], 0xa8}}, 0x0) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x8400, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40186f40, &(0x7f0000000440)=0x1f) socket$inet6(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x30000, 0x20) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x4, 0x1000085}, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x2) pipe2(0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='fd/4\x00') sched_setaffinity(0x0, 0x8, &(0x7f0000000340)=0x2) read$msr(r1, &(0x7f0000019680)=""/102384, 0x18ff0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x149802, 0x0) r3 = dup(r2) sendfile(r2, r3, 0x0, 0x80006) 24.727552986s ago: executing program 3 (id=473): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff00000000000000", @ANYBLOB, @ANYBLOB], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x10) socket$inet6(0xa, 0x80002, 0x0) prlimit64(r0, 0x3, 0x0, 0x0) mkdir(&(0x7f00000003c0)='./file0\x00', 0x12c) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) r5 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000840)='./file0\x00', &(0x7f0000000080), 0x18) utimensat(r5, 0x0, &(0x7f0000000880)={{0x0, 0xea60}, {0x0, 0x3ffffffe}}, 0x0) 23.324882342s ago: executing program 3 (id=474): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2) syz_emit_ethernet(0x86, 0x0, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000500)={[0x5]}, 0x8) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000400)={0x980929, 0x3}) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000180)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x2008, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = syz_open_dev$video4linux(&(0x7f0000000000), 0x101, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r5, 0xc0e85667, &(0x7f0000000200)={0x409a090a, 0x101, "eb38845cf6f2e168f59e5c708b4cddb9f54e0bd29a8afaea3096d9061a2df0c1", 0x10001, 0x1, 0x1000000, 0x0, 0x1000, 0xc, 0x400009, 0x8, [0x5, 0x2, 0x4, 0xe]}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x29, 0x9, 0x4, 0x0, 0x2, @remote, @private1, 0x8, 0x20, 0x81, 0x2}}) 16.671555328s ago: executing program 3 (id=482): socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xe, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) read$eventfd(0xffffffffffffffff, 0x0, 0x0) socket$unix(0x1, 0x2, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_opts(r3, 0x0, 0x4, &(0x7f0000000080)="441f0801000000e8c94ef56491ee54be0e1c2074ed27c1c6fe76cef3e2", 0x1d) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/partitions\x00', 0x0, 0x0) preadv(r4, 0x0, 0x0, 0x203, 0x0) 12.741931663s ago: executing program 3 (id=488): r0 = socket(0x840000000002, 0x3, 0xfa) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @remote}, 0x10) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {r0}}, './file0\x00'}) write$cgroup_freezer_state(r1, &(0x7f00000000c0)='FROZEN\x00', 0x7) r2 = syz_open_dev$media(&(0x7f0000000f40), 0x0, 0x0) ioctl$MEDIA_IOC_DEVICE_INFO(r2, 0xc1007c00, &(0x7f0000000f80)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r1, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_init_net_socket$ax25(0x3, 0x5, 0x0) r6 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r6, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)=ANY=[@ANYBLOB="05000000030000000020000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="000000000200000000feffffff00010050769f0000000000"], 0x48}}, 0x0) 12.244397815s ago: executing program 1 (id=489): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000fcffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000540)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$pptp(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) bind$netlink(0xffffffffffffffff, 0x0, 0x0) r5 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r5, &(0x7f0000000480), 0x2e9, 0x0) 11.023156203s ago: executing program 1 (id=490): r0 = timerfd_create(0x0, 0x800) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x5, 0x2, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x48) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f00000000c0), 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000200)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=ANY=[@ANYBLOB="6c00000010000304002000003c0e77897399f655", @ANYRES32=0x0, @ANYBLOB="15020000000000003c0012800b00010067726574617000002c00028006000f000700000006000f0000800000060011004e220000080007007f000001050013000000000008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r7, @ANYBLOB], 0x6c}, 0x1, 0xba01}, 0x0) read(r0, 0x0, 0x0) 11.015995744s ago: executing program 3 (id=491): openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/timers\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@ipv6_getroute={0x1c, 0x1a, 0x1}, 0x1c}}, 0x0) 10.884354683s ago: executing program 5 (id=492): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket(0x10, 0x2, 0x0) write(r4, &(0x7f0000000040), 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, 0x0, 0x4000000) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000400)={0x1d}) open(&(0x7f0000000200)='./file0\x00', 0x141afd, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) sched_getaffinity(r1, 0x8, &(0x7f0000000000)) 9.883553629s ago: executing program 1 (id=493): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18090000002300810000000000000000850000007b000000"], &(0x7f0000000100)='syzkaller\x00', 0x10001, 0x0, 0x0, 0x40f00, 0x42, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) fstat(r0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r2, 0x400, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r3, 0x0, 0x0}, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x0, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) fsetxattr$trusted_overlay_redirect(r2, &(0x7f0000000040), 0x0, 0x0, 0x0) truncate(&(0x7f0000000080)='./file1\x00', 0x8) 9.659429071s ago: executing program 6 (id=494): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x18, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000008000000000000000000000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='contention_end\x00', r0}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) pipe2(0x0, 0x4080) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x400000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = dup(r2) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f000000a000/0x18000)=nil, &(0x7f0000000300)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) msgsnd(0x0, 0x0, 0x8, 0x800) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$KVM_RUN(r4, 0xae80, 0x0) 8.801152256s ago: executing program 5 (id=495): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, 0x0, 0x0) socket(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000300)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='nfsd\x00', 0xd, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000c80)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x0, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmmsg$inet6(r3, &(0x7f0000001540)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=ANY=[], 0x2e8}}], 0x1, 0x80) recvfrom$inet6(r3, 0x0, 0x0, 0x12020, 0x0, 0x0) 7.712752089s ago: executing program 1 (id=496): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r2 = syz_open_dev$midi(0x0, 0x2, 0x200) ioctl$SNDRV_RAWMIDI_IOCTL_DROP(r2, 0x40045730, &(0x7f0000003080)=0x3ff) r3 = socket(0x10, 0x803, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000090000008500000011000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, @void, @value}, 0x94) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r0}, 0x10) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r5 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r5, 0xc0184800, &(0x7f0000000080)={0x10001, r4, 0x2}) syz_emit_ethernet(0x3e, &(0x7f0000000040)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x7, 0x4, 0x0, 0x20, 0x30, 0x0, 0x0, 0x3, 0x6, 0x0, @private=0xa010100, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@cipso={0x86, 0x6}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x64f4606db648fb34}}}}}}, 0x0) r6 = syz_open_dev$vim2m(&(0x7f0000000180), 0xfffffffffffffe9c, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r6, 0xc0405602, &(0x7f0000000080)={0x51, 0x2, 0x3, "110101e0abd4034b7c15000000861f00", 0x3234564e}) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x20000000, @private2={0xfc, 0x2, '\x00', 0x1}, 0x9}, 0x1c) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_async', 0x242, 0x2c9) write$tun(r7, &(0x7f0000000040)=ANY=[], 0x38) sendmmsg(0xffffffffffffffff, &(0x7f0000000480), 0x2e9, 0x0) 7.652426724s ago: executing program 5 (id=497): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0x401c5504, &(0x7f0000000800)={0x0, {0xfffffff7, 0x0, 0x3, 0x9, 0x2, 0x5e3}}) fcntl$getownex(r0, 0x10, &(0x7f0000000080)) setsockopt$inet6_udp_encap(0xffffffffffffffff, 0x11, 0x64, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_open_dev$sndctrl(0x0, 0x0, 0x0) getpid() r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xb, 0x8, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000ac0)={&(0x7f0000000a80)='mm_page_free\x00', r5}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x15, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x44}, [@initr0]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 5.732863522s ago: executing program 5 (id=498): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, 0x0, 0x8, 0x0) mbind(&(0x7f00005f7000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0) mlock2(&(0x7f00004ad000/0x3000)=nil, 0x3000, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, 0x0, 0x8, 0x1) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r0, 0x0, 0x20000000) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000140)={0x1, @pix={0x935b, 0x6, 0x34524742, 0x7, 0x7, 0xfff, 0xa, 0xc, 0x0, 0x1, 0x0, 0x6}}) sendmsg$nl_crypto(0xffffffffffffffff, 0x0, 0x4000000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x80800) sendmmsg$alg(r4, &(0x7f0000000040), 0x318be6f32d13af7, 0x20048044) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x4, 0x3, 0x6, 0xfffa}, 0x9d, [0x8000, 0x9, 0xf, 0x9, 0x80, 0x2, 0x3, 0x7f, 0x6, 0x4d, 0x39cc191a, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x4, 0x7, 0x9, 0x3c5b, 0x1, 0x24, 0x809, 0x1, 0x1f461e2c, 0x2, 0xe661, 0x4, 0x7e6b, 0xfc80, 0x7fff, 0x4c74, 0x80000000, 0x242, 0x3, 0xe, 0x4, 0x71, 0x7, 0x7, 0x0, 0x7, 0x5, 0x3e, 0x8f, 0x6, 0x8, 0x0, 0x5, 0x4, 0x8, 0x0, 0x80, 0x0, 0x5, 0x9, 0x8, 0x4, 0x3, 0x40], [0x10000007, 0xffff, 0x8000012f, 0x8000, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf5, 0xd, 0x2bf, 0x6c9, 0x9, 0xfffffffc, 0x3, 0x0, 0x7, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x4, 0x8000, 0x9, 0x400, 0x401, 0x6, 0x1, 0xe9aa, 0x5, 0x5, 0x5f31, 0x0, 0x0, 0x2, 0x2, 0x9, 0x4, 0x9, 0x8, 0x9, 0x6, 0x7, 0x0, 0x1, 0xfe000000, 0xffff, 0x2, 0x7f, 0x9, 0x3, 0x3, 0x9, 0x1, 0x7, 0x3, 0x9, 0x48c93690, 0x42, 0x2], [0x7, 0x2, 0xfffffffd, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0x81, 0x4, 0x5, 0x5, 0x0, 0x1ec, 0x5, 0x8, 0x86, 0x3, 0x9, 0x3e7, 0x9, 0x5, 0x2, 0x2, 0xb, 0x8, 0x4, 0x6d01, 0x5, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x5, 0x5, 0x5, 0x6, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0xfffffff9, 0x0, 0x1, 0xffff, 0xfffffffd, 0x6, 0x1c, 0x120000, 0x3, 0x6, 0x80000001, 0x1000004, 0x25], [0x9, 0xbb31, 0x7, 0xb, 0x5, 0x938, 0x3, 0x6, 0x0, 0x5, 0xce7, 0x4001ff, 0x2, 0x7, 0x5, 0x2, 0x101, 0x10000, 0x6, 0x7fff, 0x7754, 0xa620, 0x2, 0x5, 0x1, 0x5, 0x14c, 0xd7, 0x6, 0x6, 0xffffffff, 0x80000000, 0x2, 0x8, 0xc8, 0xee1, 0x2, 0x1ffff, 0x3, 0x7e, 0x100, 0x9602, 0x7, 0x2, 0x4, 0x6, 0x1, 0x10080, 0x5, 0x8, 0x30b1d693, 0x0, 0xc, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0x1, 0x200, 0xbd46, 0xfff]}, 0x45c) 5.641709834s ago: executing program 6 (id=499): socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) listen(0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='&\x00\x00\x00\a'], 0x50) write(0xffffffffffffffff, &(0x7f0000000000)='\"', 0x1) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r3, &(0x7f0000000000), 0xd) 5.552979539s ago: executing program 1 (id=500): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, 0x0, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000000c0)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r4 = userfaultfd(0x80001) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x60}) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) readv(r4, &(0x7f0000000240)=[{&(0x7f0000000140)=""/201, 0x20}], 0x6) mremap(&(0x7f0000638000/0x1000)=nil, 0x6aa000, 0x2000, 0x3, &(0x7f00005c0000/0x2000)=nil) 5.316254708s ago: executing program 5 (id=501): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r3, @ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_EXPBUF(r5, 0xc0405610, &(0x7f0000000040)={0x2, 0x0, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r6, 0x40086200, &(0x7f0000000480)=0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001c80)={{r3}, &(0x7f0000001c00), &(0x7f0000001c40)=r4}, 0x20) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x15, 0x3, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc3, &(0x7f00000002c0)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_attach_bpf(r7, 0x1, 0x34, 0x0, 0x0) 4.052657019s ago: executing program 6 (id=502): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000180)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='attr/exec\x00') read$eventfd(r4, 0x0, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000340)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) dup(0xffffffffffffffff) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x8, 0x0, 0x0, 0x0, {}, 0x1}) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r5, 0x4008af00, &(0x7f0000000080)=0x200000000) 4.009148101s ago: executing program 5 (id=503): timer_create(0x3, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESOCT], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r0, 0x0, 0x0) fdatasync(r0) close(0x3) r1 = socket(0x15, 0x5, 0x0) connect$can_j1939(r1, 0x0, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSBRKP(r2, 0x5425, 0x0) ppoll(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_TOL(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x51}, 0x40) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={0x0, 0x28}, 0x1, 0x0, 0x0, 0x8}, 0x20000000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0) r3 = syz_io_uring_setup(0xd2, &(0x7f0000000480)={0x0, 0x0, 0x800}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r3, 0x47ba, 0x1000000, 0x0, 0x0, 0x0) 3.908032971s ago: executing program 3 (id=504): setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x4, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0xfffffdca, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) openat$rfkill(0xffffffffffffff9c, 0x0, 0x80201, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000002d00)={0x0, 0x0, 0x0}, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x101581, 0x100) memfd_create(0x0, 0x6) mount$tmpfs(0x0, 0x0, 0x0, 0x20c800, 0x0) chdir(0x0) r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) fchmodat(0xffffffffffffffff, 0x0, 0x183) acct(&(0x7f0000000140)='./file0\x00') writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x0, 0x0) 2.870378678s ago: executing program 6 (id=505): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x10, 0x0, &(0x7f0000001880)) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xffd}, 0x2a, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r3 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) syz_open_dev$vcsa(0x0, 0x1, 0x42200) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0x5ba8, 0xfffffffffffffffd) keyctl$read(0xb, r3, &(0x7f0000000240)=""/112, 0x349b7f55) 2.342098642s ago: executing program 1 (id=506): syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x800) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x8000}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) recvmmsg(r3, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) 1.39281269s ago: executing program 6 (id=507): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f00000039c0)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x7, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) semtimedop(0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) r5 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x89e0, &(0x7f0000000180)={r0, r1}) sendmsg$rds(r5, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002800)=[{&(0x7f0000002980)=""/4112, 0xfffffe09}], 0x1}, 0x0) write(r5, 0x0, 0x0) 0s ago: executing program 6 (id=508): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sched_setscheduler(0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x17, 0x4, &(0x7f0000000480)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x1}]}, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mount(&(0x7f0000000040)=@nullb, &(0x7f00000001c0)='.\x00', &(0x7f0000000080)='adfs\x00', 0x1008406, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000e00)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) openat$fb0(0xffffffffffffff9c, &(0x7f0000001400), 0x0, 0x0) r3 = semget$private(0x0, 0x6, 0x0) semtimedop(r3, &(0x7f0000000040)=[{0x0, 0x1}], 0x1, 0x0) r4 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x40f02, 0x0) ioctl$SNDCTL_DSP_SPEED(r4, 0xc0045002, &(0x7f0000000040)) ioctl$SNDCTL_DSP_CHANNELS(r4, 0xc0045006, &(0x7f00000000c0)=0x40) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.175' (ED25519) to the list of known hosts. [ 58.370291][ T5810] cgroup: Unknown subsys name 'net' [ 58.535091][ T5810] cgroup: Unknown subsys name 'cpuset' [ 58.542972][ T5810] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 59.847482][ T5810] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 63.610841][ T5823] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 63.623410][ T5823] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 63.633982][ T5823] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 63.657059][ T5830] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 63.667068][ T5834] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 63.674587][ T5834] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 63.683065][ T5834] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 63.692230][ T5834] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 63.700179][ T5834] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 63.709154][ T5834] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 63.716483][ T5834] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 63.716750][ T5837] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 63.724482][ T5834] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 63.731997][ T5839] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 63.738336][ T5834] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 63.752029][ T5839] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 63.752121][ T5834] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 63.759978][ T5839] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 63.768294][ T5834] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 63.774000][ T5839] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 63.781499][ T5834] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 63.788698][ T5839] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 63.833981][ T5834] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 63.841343][ T5834] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 63.861982][ T5834] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 63.869693][ T5834] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 63.877537][ T5834] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 63.888221][ T5137] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 63.909300][ T5137] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 63.916883][ T5137] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 64.133198][ T5826] chnl_net:caif_netlink_parms(): no params data found [ 64.256457][ T5829] chnl_net:caif_netlink_parms(): no params data found [ 64.384161][ T5826] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.391495][ T5826] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.398895][ T5826] bridge_slave_0: entered allmulticast mode [ 64.405901][ T5826] bridge_slave_0: entered promiscuous mode [ 64.414269][ T5824] chnl_net:caif_netlink_parms(): no params data found [ 64.460330][ T5826] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.467728][ T5826] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.475389][ T5826] bridge_slave_1: entered allmulticast mode [ 64.483068][ T5826] bridge_slave_1: entered promiscuous mode [ 64.499632][ T5829] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.507626][ T5829] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.514824][ T5829] bridge_slave_0: entered allmulticast mode [ 64.521452][ T5829] bridge_slave_0: entered promiscuous mode [ 64.529728][ T5829] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.537421][ T5829] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.545665][ T5829] bridge_slave_1: entered allmulticast mode [ 64.552377][ T5829] bridge_slave_1: entered promiscuous mode [ 64.610736][ T5829] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.634772][ T5820] chnl_net:caif_netlink_parms(): no params data found [ 64.652452][ T5829] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.671234][ T5826] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.692832][ T5826] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.713446][ T5824] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.720598][ T5824] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.727815][ T5824] bridge_slave_0: entered allmulticast mode [ 64.734767][ T5824] bridge_slave_0: entered promiscuous mode [ 64.775504][ T5824] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.782944][ T5824] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.790096][ T5824] bridge_slave_1: entered allmulticast mode [ 64.797143][ T5824] bridge_slave_1: entered promiscuous mode [ 64.806430][ T5829] team0: Port device team_slave_0 added [ 64.814183][ T5829] team0: Port device team_slave_1 added [ 64.822825][ T5826] team0: Port device team_slave_0 added [ 64.853646][ T5826] team0: Port device team_slave_1 added [ 64.889579][ T5835] chnl_net:caif_netlink_parms(): no params data found [ 64.912833][ T5824] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.924843][ T5824] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.934819][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.941967][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.968213][ T5829] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 65.018451][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 65.025609][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.052438][ T5829] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 65.064554][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 65.071748][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.098670][ T5826] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 65.118841][ T5820] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.126342][ T5820] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.133595][ T5820] bridge_slave_0: entered allmulticast mode [ 65.140086][ T5820] bridge_slave_0: entered promiscuous mode [ 65.149902][ T5824] team0: Port device team_slave_0 added [ 65.168996][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 65.176120][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.202546][ T5826] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 65.230783][ T5820] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.237883][ T5820] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.245046][ T5820] bridge_slave_1: entered allmulticast mode [ 65.251939][ T5820] bridge_slave_1: entered promiscuous mode [ 65.267993][ T5824] team0: Port device team_slave_1 added [ 65.319583][ T5820] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.330979][ T5820] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.342266][ T5824] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 65.349229][ T5824] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.375306][ T5824] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 65.387357][ T5824] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 65.394364][ T5824] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.420311][ T5824] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 65.479014][ T5820] team0: Port device team_slave_0 added [ 65.487212][ T5820] team0: Port device team_slave_1 added [ 65.518651][ T5829] hsr_slave_0: entered promiscuous mode [ 65.525532][ T5829] hsr_slave_1: entered promiscuous mode [ 65.544696][ T5826] hsr_slave_0: entered promiscuous mode [ 65.550694][ T5826] hsr_slave_1: entered promiscuous mode [ 65.556930][ T5826] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 65.564785][ T5826] Cannot create hsr debugfs directory [ 65.570434][ T5835] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.577992][ T5835] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.585272][ T5835] bridge_slave_0: entered allmulticast mode [ 65.592394][ T5835] bridge_slave_0: entered promiscuous mode [ 65.623001][ T5835] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.630544][ T5835] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.638045][ T5835] bridge_slave_1: entered allmulticast mode [ 65.644891][ T5835] bridge_slave_1: entered promiscuous mode [ 65.664381][ T5824] hsr_slave_0: entered promiscuous mode [ 65.670624][ T5824] hsr_slave_1: entered promiscuous mode [ 65.676985][ T5824] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 65.684750][ T5824] Cannot create hsr debugfs directory [ 65.690660][ T5820] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 65.697779][ T5820] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.723754][ T5820] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 65.758682][ T5820] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 65.765871][ T5820] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.792094][ T5820] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 65.812323][ T5137] Bluetooth: hci1: command tx timeout [ 65.829234][ T5835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.874990][ T5835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.891447][ T5137] Bluetooth: hci2: command tx timeout [ 65.902278][ T5137] Bluetooth: hci4: command tx timeout [ 65.968404][ T5835] team0: Port device team_slave_0 added [ 65.974261][ T5137] Bluetooth: hci3: command tx timeout [ 65.974271][ T5828] Bluetooth: hci0: command tx timeout [ 65.982465][ T5835] team0: Port device team_slave_1 added [ 65.995033][ T5820] hsr_slave_0: entered promiscuous mode [ 66.001108][ T5820] hsr_slave_1: entered promiscuous mode [ 66.007320][ T5820] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 66.015129][ T5820] Cannot create hsr debugfs directory [ 66.055966][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.063049][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.089335][ T5835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.123765][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.130744][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.157107][ T5835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.268379][ T5835] hsr_slave_0: entered promiscuous mode [ 66.274739][ T5835] hsr_slave_1: entered promiscuous mode [ 66.280623][ T5835] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 66.288311][ T5835] Cannot create hsr debugfs directory [ 66.400540][ T5826] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 66.433559][ T5826] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 66.455008][ T5826] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 66.472845][ T5826] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 66.523933][ T5829] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 66.535357][ T5829] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 66.550417][ T5829] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 66.562378][ T5829] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 66.612961][ T5824] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 66.641234][ T5824] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 66.653887][ T5824] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 66.681794][ T5824] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 66.696788][ T5820] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 66.717238][ T5820] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 66.726963][ T5820] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 66.739928][ T5820] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 66.807278][ T5835] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 66.818910][ T5835] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 66.828995][ T5835] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 66.843437][ T5835] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 66.888677][ T5826] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.955563][ T5826] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.991227][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.998511][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.025288][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.032435][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.065197][ T5820] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.098623][ T5824] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.114608][ T5829] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.137241][ T5820] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.169844][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.176936][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.190437][ T5824] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.212220][ T2938] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.219562][ T2938] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.233871][ T2938] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.240967][ T2938] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.254845][ T5829] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.281707][ T2938] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.288819][ T2938] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.324724][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.331878][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.348381][ T2955] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.356043][ T2955] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.379909][ T5835] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.455446][ T5835] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.485322][ T5829] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 67.496643][ T5829] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 67.510016][ T5824] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 67.552851][ T2938] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.559986][ T2938] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.584673][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.591821][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.663284][ T5826] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.807349][ T5826] veth0_vlan: entered promiscuous mode [ 67.822506][ T5829] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.836416][ T5826] veth1_vlan: entered promiscuous mode [ 67.903920][ T5828] Bluetooth: hci1: command tx timeout [ 67.960789][ T5826] veth0_macvtap: entered promiscuous mode [ 67.979886][ T5820] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.986894][ T5828] Bluetooth: hci4: command tx timeout [ 67.986949][ T5828] Bluetooth: hci2: command tx timeout [ 68.010954][ T5824] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.044193][ T5835] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.053538][ T5137] Bluetooth: hci0: command tx timeout [ 68.053546][ T5828] Bluetooth: hci3: command tx timeout [ 68.073230][ T5826] veth1_macvtap: entered promiscuous mode [ 68.088653][ T5829] veth0_vlan: entered promiscuous mode [ 68.134011][ T5829] veth1_vlan: entered promiscuous mode [ 68.168049][ T5835] veth0_vlan: entered promiscuous mode [ 68.179448][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.209201][ T5824] veth0_vlan: entered promiscuous mode [ 68.234129][ T5835] veth1_vlan: entered promiscuous mode [ 68.243480][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.269722][ T5826] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.280336][ T5826] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.290525][ T5826] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.300924][ T5826] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.318737][ T5829] veth0_macvtap: entered promiscuous mode [ 68.334017][ T5824] veth1_vlan: entered promiscuous mode [ 68.345614][ T5829] veth1_macvtap: entered promiscuous mode [ 68.376450][ T5829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.393287][ T5829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.405326][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.439998][ T5835] veth0_macvtap: entered promiscuous mode [ 68.461124][ T5829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.477851][ T5829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.488771][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.517105][ T5835] veth1_macvtap: entered promiscuous mode [ 68.541063][ T5829] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.550974][ T5829] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.561207][ T5829] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.570722][ T5829] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.587817][ T5824] veth0_macvtap: entered promiscuous mode [ 68.599209][ T5820] veth0_vlan: entered promiscuous mode [ 68.618748][ T63] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.630581][ T63] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.654320][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.665641][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.675648][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.686462][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.700373][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.709855][ T5824] veth1_macvtap: entered promiscuous mode [ 68.722985][ T5820] veth1_vlan: entered promiscuous mode [ 68.740107][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.750716][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.760976][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.772328][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.783481][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.809965][ T5835] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.824161][ T5835] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.833315][ T5835] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.843154][ T5835] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.860495][ T5824] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.872109][ T5824] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.882252][ T5824] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.892909][ T5824] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.902811][ T5824] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.913340][ T5824] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.924872][ T5824] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.949079][ T5824] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.960673][ T5824] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.970950][ T5824] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.981793][ T5824] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.991673][ T5824] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.002416][ T5824] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.014515][ T5824] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.031078][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.040907][ T3528] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.049937][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.056254][ T3528] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.099247][ T5824] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.108541][ T5824] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.118527][ T5824] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.127363][ T5824] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.186560][ T5820] veth0_macvtap: entered promiscuous mode [ 69.199770][ T5820] veth1_macvtap: entered promiscuous mode [ 69.208119][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.229746][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.229996][ T5826] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 69.253034][ T63] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.260869][ T63] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.290023][ T5820] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.310924][ T5820] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.321035][ T5820] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.331770][ T5820] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.342011][ T5820] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.352509][ T5820] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.362602][ T5820] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.373576][ T5820] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.385110][ T5820] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.420874][ T5820] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.451443][ T5820] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.471465][ T5820] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.488471][ T5820] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.509861][ T5820] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.520543][ T5820] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.530619][ T5820] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.541191][ T5820] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.552720][ T5820] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.567187][ T5820] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.578708][ T5820] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.588029][ T5820] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.597146][ T5820] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.659509][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.690181][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.705301][ T5908] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 69.714433][ T5908] batadv_slave_1: entered promiscuous mode [ 69.803611][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.814665][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.898641][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.937768][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.970840][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.972880][ T5912] syz.3.6 uses obsolete (PF_INET,SOCK_PACKET) [ 69.979546][ T5828] Bluetooth: hci1: command tx timeout [ 69.999850][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.051623][ T5828] Bluetooth: hci2: command tx timeout [ 70.052499][ T5137] Bluetooth: hci4: command tx timeout [ 70.133374][ T5137] Bluetooth: hci3: command tx timeout [ 70.133422][ T5828] Bluetooth: hci0: command tx timeout [ 70.156065][ T3528] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.169255][ T3528] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.342082][ T9] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 70.369125][ T5924] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1'. [ 70.414068][ T5928] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 70.522447][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 70.530852][ T9] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 70.551076][ T9] usb 2-1: config 0 has no interface number 0 [ 70.557867][ T9] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 70.571154][ T5928] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 70.660667][ T9] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 70.702530][ T5934] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5'. [ 70.901529][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 70.967240][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 71.207327][ T9] usb 2-1: config 0 descriptor?? [ 71.242104][ T9] iowarrior 2-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 71.445046][ T5939] serio: Serial port ptm0 [ 71.575510][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.589276][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.601880][ T9] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 71.681418][ T5825] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 71.785920][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 86, changing to 10 [ 71.797331][ T9] usb 1-1: New USB device found, idVendor=056a, idProduct=0333, bcdDevice= 0.00 [ 71.807139][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 71.819556][ T9] usb 1-1: config 0 descriptor?? [ 71.844356][ T5825] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 71.854602][ T5948] infiniband syz0: set active [ 71.855841][ T5825] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 71.860950][ T5948] infiniband syz0: added syz_tun [ 71.870213][ T5825] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 71.888297][ T5825] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 71.897620][ T5825] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 71.908737][ T5825] usb 4-1: config 0 descriptor?? [ 71.941257][ T5948] RDS/IB: syz0: added [ 71.941490][ T977] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 71.946519][ T5948] smc: adding ib device syz0 with port count 1 [ 71.960534][ T5948] smc: ib device syz0 port 1 has pnetid [ 72.051818][ T5828] Bluetooth: hci1: command tx timeout [ 72.111473][ T977] usb 3-1: Using ep0 maxpacket: 8 [ 72.124533][ T977] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 72.137678][ T5828] Bluetooth: hci2: command tx timeout [ 72.142170][ T5137] Bluetooth: hci4: command tx timeout [ 72.143453][ T977] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 72.158982][ T977] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 72.169311][ T977] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 72.201161][ T977] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 72.210757][ T977] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 72.220160][ T5137] Bluetooth: hci0: command tx timeout [ 72.226902][ T5828] Bluetooth: hci3: command tx timeout [ 72.266191][ T9] wacom 0003:056A:0333.0001: hidraw0: USB HID v0.00 Device [HID 056a:0333] on usb-dummy_hcd.0-1/input0 [ 72.348738][ T5825] plantronics 0003:047F:FFFF.0002: No inputs registered, leaving [ 72.441937][ T977] usb 3-1: usb_control_msg returned -32 [ 72.449361][ T977] usbtmc 3-1:16.0: can't read capabilities [ 72.467026][ T5914] usb 1-1: USB disconnect, device number 2 [ 72.497735][ T5825] plantronics 0003:047F:FFFF.0002: hiddev1,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 72.501021][ T5910] usb 2-1: USB disconnect, device number 2 [ 72.561923][ T5825] usb 4-1: USB disconnect, device number 2 [ 73.151039][ T5961] netlink: 4 bytes leftover after parsing attributes in process `syz.0.18'. [ 73.208312][ T5961] mac80211_hwsim hwsim10 wlan1: entered promiscuous mode [ 73.244519][ T5961] macvtap1: entered promiscuous mode [ 73.256556][ T5964] program syz.0.18 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 73.331609][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 73.351742][ T5961] mac80211_hwsim hwsim10 wlan1: left promiscuous mode [ 73.358595][ T5910] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 73.475820][ T5969] bridge_slave_0: left allmulticast mode [ 73.481972][ T5969] bridge_slave_0: left promiscuous mode [ 73.488355][ T5969] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.505606][ T5969] bridge_slave_1: left allmulticast mode [ 73.532955][ T5969] bridge_slave_1: left promiscuous mode [ 73.538754][ T5969] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.552120][ T5910] usb 5-1: Using ep0 maxpacket: 32 [ 73.567230][ T5910] usb 5-1: config index 0 descriptor too short (expected 156, got 27) [ 73.594193][ T5910] usb 5-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 73.618144][ T5910] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 73.631208][ T5969] bond0: (slave bond_slave_0): Releasing backup interface [ 73.740105][ T5969] bond0: (slave bond_slave_1): Releasing backup interface [ 73.763411][ T5910] usb 5-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 73.795424][ T5910] usb 5-1: config 0 interface 0 has no altsetting 0 [ 73.839023][ T5910] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 73.852796][ T5910] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 73.863662][ T5910] usb 5-1: Product: syz [ 73.867912][ T5910] usb 5-1: Manufacturer: syz [ 73.871138][ T5969] team0: Port device team_slave_0 removed [ 73.872686][ T5910] usb 5-1: SerialNumber: syz [ 73.961953][ T5910] usb 5-1: config 0 descriptor?? [ 73.963008][ T5969] team0: Port device team_slave_1 removed [ 73.973684][ T5910] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 73.980184][ T5969] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 73.995889][ T5969] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 73.998892][ T5910] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 74.011527][ T5873] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 74.044336][ T5969] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 74.331727][ T5873] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 74.369366][ T5873] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 74.410414][ T5873] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 74.424382][ T5977] netlink: 4 bytes leftover after parsing attributes in process `syz.1.24'. [ 74.429794][ T5969] syz.3.21 (5969) used greatest stack depth: 18072 bytes left [ 74.440713][ T5873] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 74.450194][ T5873] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 74.471941][ T5873] usb 1-1: config 0 descriptor?? [ 74.738480][ T5871] usb 3-1: USB disconnect, device number 2 [ 74.821494][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 74.871741][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 74.915768][ T5873] plantronics 0003:047F:FFFF.0003: unknown main item tag 0xd [ 74.932815][ T5873] plantronics 0003:047F:FFFF.0003: No inputs registered, leaving [ 74.954840][ T5873] plantronics 0003:047F:FFFF.0003: hiddev1,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 74.992722][ T5873] usb 5-1: USB disconnect, device number 2 [ 75.017358][ T5873] ldusb 5-1:0.0: LD USB Device #0 now disconnected [ 75.124630][ T58] usb 1-1: USB disconnect, device number 3 [ 75.172873][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 75.211525][ T5871] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 75.283944][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 75.381393][ T5871] usb 3-1: Using ep0 maxpacket: 8 [ 75.389817][ T5871] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 75.400388][ T5871] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 75.408804][ T5871] usb 3-1: Product: syz [ 75.417264][ T5871] usb 3-1: Manufacturer: syz [ 75.422243][ T5871] usb 3-1: SerialNumber: syz [ 75.429535][ T5871] usb 3-1: config 0 descriptor?? [ 75.492813][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 75.653172][ T5984] overlayfs: failed to verify upper root origin [ 75.660554][ T5871] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 75.929385][ T5988] rdma_rxe: rxe_newlink: failed to add syz_tun [ 76.091526][ T5873] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 76.253039][ T5873] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 76.273269][ T5873] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 76.343767][ T5873] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 76.353091][ T5873] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 76.361129][ T5873] usb 4-1: Product: syz [ 76.365463][ T5873] usb 4-1: Manufacturer: syz [ 76.370158][ T5873] usb 4-1: SerialNumber: syz [ 76.519255][ T6005] Zero length message leads to an empty skb [ 76.641737][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c2!!! [ 76.649967][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c2!!! [ 76.844932][ T8] cfg80211: failed to load regulatory.db [ 76.869249][ T5993] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 76.878928][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 76.889822][ T5871] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 77.501159][ T977] usb 3-1: USB disconnect, device number 3 [ 77.695923][ T5993] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 77.915383][ T5873] cdc_mbim 4-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 77.943689][ T5873] cdc_mbim 4-1:1.0: setting rx_max = 16384 [ 78.108890][ T9] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 78.119588][ T5873] cdc_mbim 4-1:1.0: setting tx_max = 40 [ 78.137878][ T5873] cdc_mbim 4-1:1.0: cdc-wdm0: USB WDM device [ 78.156030][ T9] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz1] on syz0 [ 78.176545][ T5873] wwan wwan0: port wwan0mbim0 attached [ 78.214318][ T5873] cdc_mbim 4-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.3-1, CDC MBIM, 42:42:42:42:42:42 [ 78.274783][ T5873] usb 4-1: USB disconnect, device number 3 [ 78.312226][ T5873] cdc_mbim 4-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.3-1, CDC MBIM [ 78.335933][ T6029] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.362808][ T5871] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 78.409320][ T6029] bond0: (slave rose0): Enslaving as an active interface with an up link [ 78.581452][ T5871] usb 1-1: Using ep0 maxpacket: 16 [ 78.589403][ T5871] usb 1-1: config 0 has no interfaces? [ 78.605123][ T5871] usb 1-1: New USB device found, idVendor=056a, idProduct=0029, bcdDevice= 0.00 [ 78.622010][ T5871] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 78.661133][ T5871] usb 1-1: config 0 descriptor?? [ 78.722465][ T6043] loop5: detected capacity change from 0 to 8 [ 78.739334][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 78.748736][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 78.762454][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 78.771691][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 78.796065][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 78.805297][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 78.827427][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 78.836649][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 78.846009][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 78.855217][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 78.866702][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 78.875910][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 78.890968][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 78.900190][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 78.909409][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 78.918602][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 78.931784][ T6043] ldm_validate_partition_table(): Disk read failed. [ 78.957576][ T5871] usb 1-1: USB disconnect, device number 4 [ 78.966404][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 78.975616][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 78.983745][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 78.992966][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 79.001813][ T6043] Dev loop5: unable to read RDB block 0 [ 79.009606][ T6043] loop5: unable to read partition table [ 79.016631][ T6043] loop5: partition table beyond EOD, truncated [ 79.027221][ T6043] loop_reread_partitions: partition scan of loop5 (3Ÿ ¾‚³˜) failed (rc=-5) [ 79.838752][ T5873] wwan wwan0: port wwan0mbim0 disconnected [ 81.824502][ T6102] bridge_slave_0: left allmulticast mode [ 81.865927][ T6102] bridge_slave_0: left promiscuous mode [ 81.893139][ T6102] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.927915][ T6102] bridge_slave_1: left allmulticast mode [ 81.956630][ T6102] bridge_slave_1: left promiscuous mode [ 82.022101][ T6102] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.052875][ T6102] bond0: (slave bond_slave_0): Releasing backup interface [ 82.094099][ T6102] bond0: (slave bond_slave_1): Releasing backup interface [ 82.098231][ T6115] fuse: root generation should be zero [ 82.249445][ T6102] team0: Port device team_slave_0 removed [ 82.310861][ T6102] team0: Port device team_slave_1 removed [ 82.359140][ T6102] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 82.367638][ T6102] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 82.425143][ T6102] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 82.534096][ T6102] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 83.861460][ T5871] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 84.048540][ T5871] usb 5-1: Using ep0 maxpacket: 32 [ 84.069893][ T5871] usb 5-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 84.080336][ T5871] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 84.128151][ T5871] usb 5-1: Product: syz [ 84.134753][ T5871] usb 5-1: Manufacturer: syz [ 84.139866][ T5871] usb 5-1: SerialNumber: syz [ 84.193611][ T5871] usb 5-1: config 0 descriptor?? [ 84.224129][ T5871] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 84.319253][ T6158] netlink: 28 bytes leftover after parsing attributes in process `syz.0.70'. [ 84.329703][ T6158] netlink: 28 bytes leftover after parsing attributes in process `syz.0.70'. [ 84.366511][ T6158] syz_tun: entered promiscuous mode [ 84.401004][ T6158] erspan0: entered promiscuous mode [ 84.604979][ T6160] kvm: emulating exchange as write [ 84.981431][ T9] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 85.161760][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 85.178919][ T9] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 85.193370][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 85.209102][ T9] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 85.219129][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.227296][ T9] usb 3-1: Product: syz [ 85.232068][ T9] usb 3-1: Manufacturer: syz [ 85.236763][ T9] usb 3-1: SerialNumber: syz [ 85.245781][ T6171] warning: `syz.3.76' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 85.247760][ T9] usb 3-1: config 0 descriptor?? [ 85.270228][ T9] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 85.279710][ T9] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 85.657178][ T5871] gspca_ov534_9: sccb_write failed [ 85.696569][ T6181] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 85.729192][ T6181] kvm: requested 93028 ns i8254 timer period limited to 200000 ns [ 85.751385][ T6181] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 85.761349][ T6181] kvm: requested 5028 ns i8254 timer period limited to 200000 ns [ 85.761496][ T977] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 85.777424][ T6181] kvm: requested 3352 ns i8254 timer period limited to 200000 ns [ 85.788982][ T6181] kvm: requested 2514 ns i8254 timer period limited to 200000 ns [ 85.798010][ T6181] kvm: requested 3352 ns i8254 timer period limited to 200000 ns [ 85.879920][ T5871] gspca_ov534_9: reg_w failed -71 [ 85.907204][ T9] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 85.917597][ T9] em28xx 3-1:0.0: Config register raw data: 0xfffffffb [ 85.921401][ T977] usb 1-1: Using ep0 maxpacket: 8 [ 85.943475][ T977] usb 1-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 85.954911][ T977] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 85.968245][ T977] usb 1-1: config 0 descriptor?? [ 86.052924][ T5828] Bluetooth: hci5: command 0x1003 tx timeout [ 86.060231][ T5137] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 86.200351][ T977] asix 1-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 86.321456][ T5871] gspca_ov534_9: Unknown sensor 0000 [ 86.321565][ T5871] ov534_9 5-1:0.0: probe with driver ov534_9 failed with error -22 [ 86.346968][ T5871] usb 5-1: USB disconnect, device number 3 [ 86.918661][ T9] em28xx 3-1:0.0: Unknown AC97 audio processor detected! [ 86.958530][ T9] em28xx 3-1:0.0: couldn't setup AC97 register 2 [ 87.031738][ T9] em28xx 3-1:0.0: couldn't setup AC97 register 4 [ 87.091887][ T9] em28xx 3-1:0.0: couldn't setup AC97 register 6 [ 87.141912][ T9] em28xx 3-1:0.0: couldn't setup AC97 register 54 [ 87.158797][ T9] em28xx 3-1:0.0: couldn't setup AC97 register 56 [ 87.192610][ T9] usb 3-1: USB disconnect, device number 4 [ 87.492502][ T977] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 87.523959][ T977] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 87.557376][ T977] asix 1-1:0.0: probe with driver asix failed with error -71 [ 87.591644][ T977] usb 1-1: USB disconnect, device number 5 [ 88.028669][ T6210] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 88.047025][ T6210] netlink: 4 bytes leftover after parsing attributes in process `syz.4.89'. [ 88.056102][ T6210] bridge_slave_1: left allmulticast mode [ 88.062706][ T6210] bridge_slave_1: left promiscuous mode [ 88.069080][ T6210] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.071413][ T977] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 88.150716][ T6210] bridge_slave_0: left allmulticast mode [ 88.175087][ T6210] bridge_slave_0: left promiscuous mode [ 88.209178][ T6210] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.244237][ T977] usb 3-1: Using ep0 maxpacket: 16 [ 88.270980][ T977] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 88.345134][ T977] usb 3-1: config 0 has no interfaces? [ 88.370662][ T977] usb 3-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.88 [ 88.391453][ T977] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 88.426893][ T977] usb 3-1: Product: syz [ 88.440354][ T977] usb 3-1: Manufacturer: syz [ 88.447712][ T977] usb 3-1: SerialNumber: syz [ 88.492072][ T977] usb 3-1: config 0 descriptor?? [ 89.081467][ T5910] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 89.281910][ T5910] usb 4-1: Using ep0 maxpacket: 32 [ 89.319316][ T5910] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 32 [ 89.365461][ T5910] usb 4-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 89.399550][ T5910] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 89.427820][ T5910] usb 4-1: Product: syz [ 89.443541][ T5910] usb 4-1: Manufacturer: syz [ 89.448363][ T5910] usb 4-1: SerialNumber: syz [ 89.495374][ T5910] usb 4-1: config 0 descriptor?? [ 89.559284][ T6221] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 89.587101][ T5910] hub 4-1:0.0: bad descriptor, ignoring hub [ 89.596225][ T5910] hub 4-1:0.0: probe with driver hub failed with error -5 [ 89.619006][ T5910] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input8 [ 90.309205][ T8] usb 4-1: USB disconnect, device number 4 [ 90.309205][ C1] usbtouchscreen 4-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 90.755082][ T5910] usb 3-1: USB disconnect, device number 5 [ 91.156448][ T6248] vcan0: tx drop: invalid da for name 0x0000000000000003 [ 93.116285][ T6278] xt_bpf: check failed: parse error [ 93.412020][ T5137] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:201' [ 93.422862][ T5137] CPU: 0 UID: 0 PID: 5137 Comm: kworker/u9:1 Not tainted 6.14.0-rc3-syzkaller-00166-g334426094588 #0 [ 93.422887][ T5137] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 93.422898][ T5137] Workqueue: hci4 hci_rx_work [ 93.422938][ T5137] Call Trace: [ 93.422947][ T5137] [ 93.422955][ T5137] dump_stack_lvl+0x241/0x360 [ 93.422980][ T5137] ? __pfx_dump_stack_lvl+0x10/0x10 [ 93.422999][ T5137] ? __pfx__printk+0x10/0x10 [ 93.423028][ T5137] ? __kmalloc_cache_noprof+0x243/0x390 [ 93.423045][ T5137] ? sysfs_create_dir_ns+0x28a/0x3a0 [ 93.423073][ T5137] sysfs_create_dir_ns+0x2ce/0x3a0 [ 93.423098][ T5137] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 93.423131][ T5137] kobject_add_internal+0x435/0x8d0 [ 93.423160][ T5137] kobject_add+0x152/0x220 [ 93.423181][ T5137] ? do_raw_spin_unlock+0x13c/0x8b0 [ 93.423201][ T5137] ? device_add+0x3e7/0xbf0 [ 93.423225][ T5137] ? __pfx_kobject_add+0x10/0x10 [ 93.423248][ T5137] ? _raw_spin_unlock+0x28/0x50 [ 93.423271][ T5137] ? get_device_parent+0x165/0x410 [ 93.423298][ T5137] device_add+0x4e5/0xbf0 [ 93.423328][ T5137] hci_conn_add_sysfs+0xe8/0x200 [ 93.423354][ T5137] le_conn_complete_evt+0xd1a/0x1360 [ 93.423388][ T5137] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 93.423407][ T5137] ? __mutex_unlock_slowpath+0x227/0x800 [ 93.423432][ T5137] ? __skb_clone+0x5c/0x6c0 [ 93.423458][ T5137] ? skb_pull_data+0x112/0x230 [ 93.423483][ T5137] hci_le_conn_complete_evt+0x18c/0x420 [ 93.423510][ T5137] hci_event_packet+0xa54/0x1540 [ 93.423539][ T5137] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 93.423588][ T5137] ? __pfx_hci_event_packet+0x10/0x10 [ 93.423612][ T5137] ? do_raw_spin_unlock+0x13c/0x8b0 [ 93.423636][ T5137] ? kcov_remote_start+0x3c0/0x7d0 [ 93.423658][ T5137] ? insn_decode+0x490/0x4e0 [ 93.423683][ T5137] ? hci_send_to_monitor+0xdc/0x530 [ 93.423707][ T5137] hci_rx_work+0x3f3/0xdb0 [ 93.423742][ T5137] ? process_scheduled_works+0x9c6/0x18e0 [ 93.423762][ T5137] process_scheduled_works+0xabe/0x18e0 [ 93.423810][ T5137] ? __pfx_process_scheduled_works+0x10/0x10 [ 93.423840][ T5137] ? assign_work+0x364/0x3d0 [ 93.423865][ T5137] worker_thread+0x870/0xd30 [ 93.423894][ T5137] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 93.423918][ T5137] ? __kthread_parkme+0x169/0x1d0 [ 93.423942][ T5137] ? __pfx_worker_thread+0x10/0x10 [ 93.423963][ T5137] kthread+0x7a9/0x920 [ 93.423983][ T5137] ? __pfx_kthread+0x10/0x10 [ 93.424006][ T5137] ? __pfx_worker_thread+0x10/0x10 [ 93.424027][ T5137] ? __pfx_kthread+0x10/0x10 [ 93.424046][ T5137] ? __pfx_kthread+0x10/0x10 [ 93.424072][ T5137] ? __pfx_kthread+0x10/0x10 [ 93.424092][ T5137] ? _raw_spin_unlock_irq+0x23/0x50 [ 93.424109][ T5137] ? lockdep_hardirqs_on+0x99/0x150 [ 93.424128][ T5137] ? __pfx_kthread+0x10/0x10 [ 93.424152][ T5137] ret_from_fork+0x4b/0x80 [ 93.424170][ T5137] ? __pfx_kthread+0x10/0x10 [ 93.424193][ T5137] ret_from_fork_asm+0x1a/0x30 [ 93.424227][ T5137] [ 93.424250][ T5137] kobject: kobject_add_internal failed for hci4:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 93.727659][ T5137] Bluetooth: hci4: failed to register connection device [ 93.791461][ T5872] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 93.954426][ T5872] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 93.972384][ T5872] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 93.985518][ T5872] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 93.994848][ T5872] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 94.004664][ T5872] usb 1-1: SerialNumber: syz [ 94.061504][ T977] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 94.091557][ T5910] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 94.240942][ T5872] usb 1-1: 0:2 : does not exist [ 94.248220][ T977] usb 4-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 94.264306][ T5872] usb 1-1: unit 5: unexpected type 0x0a [ 94.280175][ T5910] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 94.297655][ T977] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.316525][ T5910] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 94.337033][ T977] usb 4-1: config 0 descriptor?? [ 94.362694][ T5872] usb 1-1: USB disconnect, device number 6 [ 94.371026][ T5910] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 94.409553][ T5910] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 94.422605][ T5910] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.424253][ T5871] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 94.449224][ T5910] usb 5-1: config 0 descriptor?? [ 94.601627][ T6290] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 94.602663][ T5871] usb 2-1: Using ep0 maxpacket: 8 [ 94.635788][ T5821] udevd[5821]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 94.668852][ T5871] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 94.691255][ T5871] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 94.960530][ T5871] usb 2-1: New USB device found, idVendor=056a, idProduct=00b9, bcdDevice= 0.00 [ 94.999178][ T5910] plantronics 0003:047F:FFFF.0005: No inputs registered, leaving [ 95.086645][ T977] elan 0003:04F3:0755.0006: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.3-1/input0 [ 95.095633][ T5871] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.145081][ T5910] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 95.243322][ T977] usb 4-1: USB disconnect, device number 5 [ 95.367074][ T5910] usb 5-1: USB disconnect, device number 4 [ 95.431366][ T5871] usb 2-1: config 0 descriptor?? [ 96.190829][ T5871] wacom 0003:056A:00B9.0007: ignoring exceeding usage max [ 96.250321][ T5871] wacom 0003:056A:00B9.0007: Unknown device_type for 'HID 056a:00b9'. Assuming pen. [ 96.299866][ T5871] wacom 0003:056A:00B9.0007: hidraw0: USB HID v0.00 Device [HID 056a:00b9] on usb-dummy_hcd.1-1/input0 [ 96.428436][ T5871] input: Wacom Intuos4 6x9 Pen as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:056A:00B9.0007/input/input9 [ 96.577649][ T5871] usb 2-1: USB disconnect, device number 3 [ 96.641538][ T5910] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 96.825114][ T5910] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 96.950100][ T5910] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 97.120602][ T5910] usb 1-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 97.321529][ T9] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 97.396689][ T5910] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.432302][ T5910] usb 1-1: config 0 descriptor?? [ 97.492309][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 97.502547][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 97.519663][ T9] usb 5-1: config 0 has no interfaces? [ 97.550694][ T9] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 97.578101][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.612044][ T9] usb 5-1: Product: syz [ 97.616245][ T9] usb 5-1: Manufacturer: syz [ 97.620851][ T9] usb 5-1: SerialNumber: syz [ 97.665679][ T9] usb 5-1: config 0 descriptor?? [ 97.690298][ T977] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 97.713529][ T977] hid-generic 0000:0000:0000.0008: hidraw0: HID v0.00 Device [syz1] on syz0 [ 97.935259][ T58] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 98.000481][ T977] usb 5-1: USB disconnect, device number 5 [ 98.052977][ T5910] Bluetooth: Can't get version to change to load ram patch err [ 98.085251][ T5910] Bluetooth: Loading sysconfig file failed [ 98.111478][ T58] usb 4-1: Using ep0 maxpacket: 16 [ 98.126380][ T5910] ath3k 1-1:0.0: probe with driver ath3k failed with error -71 [ 98.160286][ T58] usb 4-1: config 0 has no interfaces? [ 98.218142][ T58] usb 4-1: New USB device found, idVendor=056a, idProduct=0029, bcdDevice= 0.00 [ 98.270884][ T5910] usb 1-1: USB disconnect, device number 7 [ 98.386548][ T58] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.569922][ T58] usb 4-1: config 0 descriptor?? [ 98.878540][ T8] usb 4-1: USB disconnect, device number 6 [ 99.226538][ T6356] gfs2: gfs2 mount does not exist [ 99.821588][ T6365] IPVS: length: 24 != 3576 [ 100.024942][ T5872] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 100.061381][ T58] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 100.091479][ T5910] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 100.173982][ T6375] process 'syz.2.143' launched './file0' with NULL argv: empty string added [ 100.204868][ T5872] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 100.237439][ T58] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 100.251411][ T5872] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 100.266140][ T5910] usb 5-1: Using ep0 maxpacket: 8 [ 100.271339][ T58] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 100.280879][ T5872] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 100.302582][ T58] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 100.324220][ T5910] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 100.341997][ T58] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 100.350210][ T5872] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 100.360217][ T5910] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.388921][ T58] usb 2-1: SerialNumber: syz [ 100.395566][ T5872] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.412356][ T5910] usb 5-1: Product: syz [ 100.417774][ T5910] usb 5-1: Manufacturer: syz [ 100.436781][ T5872] usb 1-1: config 0 descriptor?? [ 100.441404][ T5910] usb 5-1: SerialNumber: syz [ 100.467770][ T5910] usb 5-1: config 0 descriptor?? [ 100.531799][ T5828] Bluetooth: hci4: command 0x0406 tx timeout [ 100.565663][ T6378] syzkaller0: entered promiscuous mode [ 100.571354][ T6378] syzkaller0: entered allmulticast mode [ 100.637795][ T58] usb 2-1: 0:2 : does not exist [ 100.674387][ T58] usb 2-1: USB disconnect, device number 4 [ 100.699031][ T5910] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 100.872248][ T5872] plantronics 0003:047F:FFFF.0009: No inputs registered, leaving [ 100.888375][ T5821] udevd[5821]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 100.913717][ T5872] plantronics 0003:047F:FFFF.0009: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 101.671692][ T8] usb 1-1: USB disconnect, device number 8 [ 102.122122][ T9] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 102.291867][ T9] usb 4-1: too many configurations: 13, using maximum allowed: 8 [ 102.321890][ T9] usb 4-1: config 0 has no interfaces? [ 102.339465][ T9] usb 4-1: config 0 has no interfaces? [ 102.366917][ T9] usb 4-1: config 0 has no interfaces? [ 102.385794][ T9] usb 4-1: config 0 has no interfaces? [ 102.406530][ T9] usb 4-1: config 0 has no interfaces? [ 102.462066][ T9] usb 4-1: config 0 has no interfaces? [ 102.476663][ T9] usb 4-1: config 0 has no interfaces? [ 102.483467][ T9] usb 4-1: config 0 has no interfaces? [ 102.491148][ T9] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 102.506173][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.563784][ T6404] netlink: 'syz.1.149': attribute type 3 has an invalid length. [ 102.571918][ T6404] netlink: 'syz.1.149': attribute type 3 has an invalid length. [ 102.586132][ T6404] netlink: 16 bytes leftover after parsing attributes in process `syz.1.149'. [ 102.656281][ T5910] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 102.896669][ T5910] usb 5-1: USB disconnect, device number 6 [ 103.168002][ T9] usb 4-1: Product: syz [ 103.172293][ T9] usb 4-1: Manufacturer: syz [ 103.176912][ T9] usb 4-1: SerialNumber: syz [ 103.194705][ T9] usb 4-1: config 0 descriptor?? [ 103.760326][ T5910] usb 4-1: USB disconnect, device number 7 [ 104.641647][ T5910] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 104.648191][ T6419] netlink: 'syz.1.153': attribute type 4 has an invalid length. [ 104.808048][ T5910] usb 4-1: Using ep0 maxpacket: 32 [ 104.824154][ T5910] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 104.871036][ T5910] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 104.907264][ T5910] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 104.930689][ T5910] usb 4-1: Product: syz [ 104.937084][ T5910] usb 4-1: Manufacturer: syz [ 104.978378][ T5910] usb 4-1: SerialNumber: syz [ 104.995649][ T5910] usb 4-1: config 0 descriptor?? [ 105.007217][ T6390] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 105.265258][ T5910] usb 4-1: USB disconnect, device number 8 [ 106.829750][ T6434] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 107.181526][ T5914] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 107.359382][ T5914] usb 5-1: config 0 has no interfaces? [ 107.367717][ T5914] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 107.473386][ T5914] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.664332][ T5914] usb 5-1: config 0 descriptor?? [ 107.820905][ T5828] Bluetooth: hci4: Malformed LE Event: 0x0d [ 108.404583][ T6448] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 108.512167][ T6448] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 109.025906][ T5828] Bluetooth: hci2: unexpected event 0x03 length: 17 > 11 [ 109.183441][ T6448] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 109.211685][ T6448] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 109.753182][ T6448] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 109.814948][ T6448] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 109.851467][ T5914] usb 5-1: USB disconnect, device number 7 [ 109.936698][ T6477] xt_socket: unknown flags 0x4 [ 110.575750][ T6487] tipc: Started in network mode [ 110.580738][ T6487] tipc: Node identity 12c88e9cbdb3, cluster identity 4711 [ 110.611617][ T5914] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 110.621747][ T6487] tipc: Enabled bearer , priority 0 [ 110.770841][ T6490] syzkaller0: entered promiscuous mode [ 110.788443][ T6490] syzkaller0: entered allmulticast mode [ 110.831435][ T5914] usb 5-1: Using ep0 maxpacket: 32 [ 110.843696][ T5914] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 110.855573][ T5914] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 110.876624][ T5914] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 110.928030][ T6490] tipc: Resetting bearer [ 110.955524][ T5914] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 110.967198][ T5914] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.078191][ T5914] usb 5-1: Product: syz [ 111.086238][ T6486] tipc: Resetting bearer [ 111.095944][ T5828] Bluetooth: hci2: command tx timeout [ 111.102227][ T5914] usb 5-1: Manufacturer: syz [ 111.113125][ T5914] usb 5-1: SerialNumber: syz [ 111.373227][ T5914] usb 5-1: 0:2 : does not exist [ 111.405663][ T5914] usb 5-1: USB disconnect, device number 8 [ 111.692325][ T5821] udevd[5821]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 111.746742][ T9] tipc: Node number set to 2944110236 [ 112.505579][ T6518] netlink: 8 bytes leftover after parsing attributes in process `syz.0.184'. [ 112.519595][ T6518] netlink: 4 bytes leftover after parsing attributes in process `syz.0.184'. [ 112.542058][ T6518] netlink: 32 bytes leftover after parsing attributes in process `syz.0.184'. [ 112.631968][ T6518] nbd0: detected capacity change from 0 to 256 [ 112.648900][ T5828] block nbd0: Receive control failed (result -104) [ 112.954033][ T6526] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 113.171780][ T5828] Bluetooth: hci2: command tx timeout [ 114.552691][ T5873] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 114.749635][ T5873] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 114.761125][ T5873] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 114.778123][ T5873] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.812123][ T5873] usb 2-1: config 0 descriptor?? [ 114.885665][ T5873] pwc: Askey VC010 type 2 USB webcam detected. [ 115.304383][ T5873] pwc: recv_control_msg error -32 req 02 val 2b00 [ 115.451023][ T5871] kernel write not supported for file /cpu/0/msr (pid: 5871 comm: kworker/0:4) [ 115.606813][ T5873] pwc: recv_control_msg error -32 req 02 val 2c00 [ 116.034010][ T5873] pwc: recv_control_msg error -71 req 04 val 1300 [ 116.099680][ T5873] pwc: recv_control_msg error -71 req 04 val 1400 [ 116.129229][ T5873] pwc: recv_control_msg error -71 req 02 val 2000 [ 116.154001][ T5873] pwc: recv_control_msg error -71 req 02 val 2100 [ 116.186117][ T5873] pwc: recv_control_msg error -71 req 04 val 1500 [ 116.201655][ T5873] pwc: recv_control_msg error -71 req 02 val 2500 [ 116.212873][ T5873] pwc: recv_control_msg error -71 req 02 val 2400 [ 116.237350][ T5873] pwc: recv_control_msg error -71 req 02 val 2600 [ 116.281158][ T5873] pwc: recv_control_msg error -71 req 02 val 2900 [ 116.307660][ T5873] pwc: recv_control_msg error -71 req 02 val 2800 [ 116.338481][ T5873] pwc: recv_control_msg error -71 req 04 val 1100 [ 116.372955][ T5873] pwc: recv_control_msg error -71 req 04 val 1200 [ 116.422605][ T5873] pwc: Registered as video103. [ 116.428545][ T5873] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input12 [ 117.342511][ T5873] usb 2-1: USB disconnect, device number 5 [ 118.125357][ T6575] netlink: 4 bytes leftover after parsing attributes in process `syz.1.199'. [ 118.894098][ T6585] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 120.098477][ T6486] tipc: Disabling bearer [ 121.752350][ T6606] netlink: 'syz.2.208': attribute type 4 has an invalid length. [ 121.916340][ T6606] netlink: 'syz.2.208': attribute type 4 has an invalid length. [ 122.936906][ T6606] syz.2.208 (6606) used greatest stack depth: 18032 bytes left [ 130.814236][ T6674] netlink: 64 bytes leftover after parsing attributes in process `syz.4.228'. [ 133.122517][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.122646][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.631544][ T5873] usb 4-1: new full-speed USB device number 9 using dummy_hcd [ 134.630690][ T5873] usb 4-1: config 0 has an invalid interface number: 189 but max is 0 [ 134.665059][ T5873] usb 4-1: config 0 has no interface number 0 [ 134.706784][ T5873] usb 4-1: New USB device found, idVendor=07b4, idProduct=010a, bcdDevice= 1.02 [ 134.726246][ T5873] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.753040][ T5873] usb 4-1: Product: syz [ 135.064408][ T5873] usb 4-1: Manufacturer: syz [ 135.135048][ T5873] usb 4-1: SerialNumber: syz [ 135.222530][ T5873] usb 4-1: config 0 descriptor?? [ 135.245261][ T5873] ums-alauda 4-1:0.189: USB Mass Storage device detected [ 137.207811][ T5873] usb 4-1: USB disconnect, device number 9 [ 137.257462][ T29] audit: type=1326 audit(1740161358.217:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6723 comm="syz.1.242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5ad18d0a9 code=0x7ffc0000 [ 137.309278][ T29] audit: type=1326 audit(1740161358.217:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6723 comm="syz.1.242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7ff5ad18d0a9 code=0x7ffc0000 [ 137.338548][ T29] audit: type=1326 audit(1740161358.217:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6723 comm="syz.1.242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5ad18d0a9 code=0x7ffc0000 [ 137.376091][ T29] audit: type=1326 audit(1740161358.237:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6723 comm="syz.1.242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff5ad18d0a9 code=0x7ffc0000 [ 137.415876][ T29] audit: type=1326 audit(1740161358.237:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6723 comm="syz.1.242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5ad18d0a9 code=0x7ffc0000 [ 137.437102][ C1] vkms_vblank_simulate: vblank timer overrun [ 137.446776][ T29] audit: type=1326 audit(1740161358.237:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6723 comm="syz.1.242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7ff5ad18d0a9 code=0x7ffc0000 [ 137.469788][ T29] audit: type=1326 audit(1740161358.247:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6723 comm="syz.1.242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5ad18d0a9 code=0x7ffc0000 [ 137.530841][ T29] audit: type=1326 audit(1740161358.267:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6723 comm="syz.1.242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=290 compat=0 ip=0x7ff5ad18d0a9 code=0x7ffc0000 [ 137.669722][ T29] audit: type=1326 audit(1740161358.267:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6723 comm="syz.1.242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5ad18d0a9 code=0x7ffc0000 [ 137.743557][ T6734] netlink: 48 bytes leftover after parsing attributes in process `syz.3.245'. [ 137.751185][ T29] audit: type=1326 audit(1740161358.267:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6723 comm="syz.1.242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5ad18d0a9 code=0x7ffc0000 [ 141.505783][ T6777] netlink: 28 bytes leftover after parsing attributes in process `syz.3.258'. [ 141.656191][ T6782] ubi31: attaching mtd0 [ 141.667874][ T6782] ubi31: scanning is finished [ 141.673086][ T6782] ubi31: empty MTD device detected [ 142.362017][ T6777] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 142.899546][ T6787] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 143.099293][ T6782] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 143.223810][ T6793] netlink: 228 bytes leftover after parsing attributes in process `syz.1.264'. [ 143.364026][ T41] block nbd0: Possible stuck request ffff888025f00000: control (read@0,4096B). Runtime 30 seconds [ 143.424473][ T6782] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 143.644649][ T6782] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 144.145192][ T6782] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 145.003146][ T6782] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 145.041522][ T6782] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 145.067744][ T6782] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 1020369198 [ 145.091829][ T6782] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 145.116244][ T6788] ubi31: background thread "ubi_bgt31d" started, PID 6788 [ 145.391186][ T5137] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 145.423532][ T5137] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 145.449108][ T5137] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 145.521654][ T5137] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 145.534267][ T5137] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 145.545274][ T5137] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 146.869517][ T6819] IPVS: length: 121 != 24 [ 147.902071][ T5137] Bluetooth: hci5: command tx timeout [ 147.985517][ T6829] netlink: 8 bytes leftover after parsing attributes in process `syz.3.274'. [ 148.003964][ T6803] chnl_net:caif_netlink_parms(): no params data found [ 149.972740][ T5137] Bluetooth: hci5: command tx timeout [ 150.333214][ T6803] bridge0: port 1(bridge_slave_0) entered blocking state [ 150.341969][ T6803] bridge0: port 1(bridge_slave_0) entered disabled state [ 150.342120][ T6803] bridge_slave_0: entered allmulticast mode [ 150.513182][ T6803] bridge_slave_0: entered promiscuous mode [ 150.629343][ T6803] bridge0: port 2(bridge_slave_1) entered blocking state [ 150.681382][ T6803] bridge0: port 2(bridge_slave_1) entered disabled state [ 150.871029][ T6803] bridge_slave_1: entered allmulticast mode [ 151.076204][ T6803] bridge_slave_1: entered promiscuous mode [ 151.139146][ T6803] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 151.155459][ T6803] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 151.235378][ T6803] team0: Port device team_slave_0 added [ 151.251180][ T6803] team0: Port device team_slave_1 added [ 151.354342][ T6852] kvm: pic: non byte write [ 151.365706][ T6803] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 151.381689][ T6803] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 151.549763][ T6803] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 151.562675][ T6803] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 151.569924][ T6803] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 152.061825][ T5137] Bluetooth: hci5: command tx timeout [ 152.476296][ T6803] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 152.647846][ T6803] hsr_slave_0: entered promiscuous mode [ 152.659654][ T6803] hsr_slave_1: entered promiscuous mode [ 152.676397][ T6803] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 152.690772][ T6803] Cannot create hsr debugfs directory [ 153.030402][ T6803] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 153.054623][ T6803] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 153.071054][ T6803] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 153.093719][ T6803] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 153.300977][ T6803] 8021q: adding VLAN 0 to HW filter on device bond0 [ 153.329319][ T6803] 8021q: adding VLAN 0 to HW filter on device team0 [ 153.348933][ T63] bridge0: port 1(bridge_slave_0) entered blocking state [ 153.356074][ T63] bridge0: port 1(bridge_slave_0) entered forwarding state [ 154.072394][ T63] bridge0: port 2(bridge_slave_1) entered blocking state [ 154.079488][ T63] bridge0: port 2(bridge_slave_1) entered forwarding state [ 154.205394][ T5137] Bluetooth: hci5: command tx timeout [ 155.971931][ T6899] sp0: Synchronizing with TNC [ 156.474130][ T6903] netlink: 'syz.3.291': attribute type 10 has an invalid length. [ 156.704639][ T6903] veth1_vlan: entered allmulticast mode [ 156.734959][ T6903] team0: Device veth1_vlan failed to register rx_handler [ 156.964486][ T6803] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 156.981188][ T6905] netlink: 4 bytes leftover after parsing attributes in process `syz.4.292'. [ 157.104245][ T6905] netlink: 4 bytes leftover after parsing attributes in process `syz.4.292'. [ 157.935320][ T6803] veth0_vlan: entered promiscuous mode [ 157.959817][ T6803] veth1_vlan: entered promiscuous mode [ 158.091564][ T6803] veth0_macvtap: entered promiscuous mode [ 158.104679][ T6803] veth1_macvtap: entered promiscuous mode [ 158.122157][ T6803] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 158.132901][ T6803] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.143212][ T6803] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 158.154803][ T6803] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.165288][ T6803] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 158.176002][ T6803] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.215639][ T6930] ptrace attach of "./syz-executor exec"[5820] was attempted by "./syz-executor exec"[6930] [ 158.882665][ T6803] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 159.494079][ T6803] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 159.526718][ T6803] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.538372][ T6803] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 159.561408][ T6803] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.571646][ T6803] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 159.592879][ T6803] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.619262][ T6803] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 160.073874][ T6803] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.094811][ T6803] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.111873][ T6803] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.245618][ T6803] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.391972][ T6808] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 161.391997][ T6808] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 161.394141][ T6808] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 161.394159][ T6808] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 161.498717][ T6953] overlay: ./file0\ is not a directory [ 164.005112][ T6963] (syz.1.307,6963,1):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 164.013831][ T6963] (syz.1.307,6963,1):ocfs2_fill_super:1177 ERROR: status = -22 [ 165.631410][ T5873] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 165.865328][ T6987] block nbd1: NBD_DISCONNECT [ 165.877656][ T6987] block nbd1: Disconnected due to user request. [ 165.890883][ T6987] block nbd1: shutting down sockets [ 166.602760][ T5873] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 166.741677][ T5873] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 166.806738][ T5873] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 166.826258][ T5873] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 166.849040][ T5873] usb 5-1: SerialNumber: syz [ 166.862910][ T5828] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 166.872689][ T5828] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 166.882627][ T5828] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 166.890626][ T5828] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 166.898370][ T5828] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 166.905783][ T5828] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 167.677331][ T5873] usb 5-1: 0:2 : does not exist [ 167.795027][ T5873] usb 5-1: USB disconnect, device number 9 [ 168.201018][ T5831] udevd[5831]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 169.033243][ T5137] Bluetooth: hci6: command tx timeout [ 169.394734][ T6995] chnl_net:caif_netlink_parms(): no params data found [ 171.103111][ T5137] Bluetooth: hci6: command tx timeout [ 171.904167][ T7032] Bluetooth: MGMT ver 1.23 [ 173.231406][ T5137] Bluetooth: hci6: command tx timeout [ 173.972523][ T41] block nbd0: Possible stuck request ffff888025f00000: control (read@0,4096B). Runtime 60 seconds [ 174.002696][ T6995] bridge0: port 1(bridge_slave_0) entered blocking state [ 174.009893][ T6995] bridge0: port 1(bridge_slave_0) entered disabled state [ 174.037402][ T6995] bridge_slave_0: entered allmulticast mode [ 174.068566][ T6995] bridge_slave_0: entered promiscuous mode [ 174.504045][ T6995] bridge0: port 2(bridge_slave_1) entered blocking state [ 174.577682][ T6995] bridge0: port 2(bridge_slave_1) entered disabled state [ 174.592190][ T6995] bridge_slave_1: entered allmulticast mode [ 174.672536][ T6995] bridge_slave_1: entered promiscuous mode [ 174.850289][ T6995] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 175.106284][ T6995] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 176.086912][ T5137] Bluetooth: hci6: command tx timeout [ 176.550369][ T6995] team0: Port device team_slave_0 added [ 176.859157][ T6995] team0: Port device team_slave_1 added [ 177.035926][ T6995] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 177.281750][ T7055] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 178.026312][ T6995] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 178.068622][ T6995] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 179.107974][ T6995] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 179.116992][ T6995] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 179.142947][ C0] vkms_vblank_simulate: vblank timer overrun [ 179.150387][ T6995] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 181.198177][ T6995] hsr_slave_0: entered promiscuous mode [ 181.204961][ T6995] hsr_slave_1: entered promiscuous mode [ 181.221402][ T6995] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 181.228960][ T6995] Cannot create hsr debugfs directory [ 182.189227][ T6995] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 182.415073][ T6995] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 182.443627][ T6995] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 182.470176][ T6995] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 182.736008][ T6995] 8021q: adding VLAN 0 to HW filter on device bond0 [ 182.765710][ T6995] 8021q: adding VLAN 0 to HW filter on device team0 [ 182.786151][ T6460] bridge0: port 1(bridge_slave_0) entered blocking state [ 182.793318][ T6460] bridge0: port 1(bridge_slave_0) entered forwarding state [ 183.290632][ T6460] bridge0: port 2(bridge_slave_1) entered blocking state [ 183.297819][ T6460] bridge0: port 2(bridge_slave_1) entered forwarding state [ 183.436345][ T7107] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 185.816882][ T7130] : entered promiscuous mode [ 186.236831][ T6995] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 186.294355][ T5823] Bluetooth: hci1: command 0x0406 tx timeout [ 186.300452][ T5823] Bluetooth: hci2: command 0x0406 tx timeout [ 186.305337][ T5839] Bluetooth: hci3: command 0x0406 tx timeout [ 186.308586][ T5823] Bluetooth: hci4: command 0x0406 tx timeout [ 188.259335][ T7154] netlink: 'syz.3.355': attribute type 1 has an invalid length. [ 188.653245][ T7164] syz.3.355: attempt to access beyond end of device [ 188.653245][ T7164] nbd3: rw=0, sector=0, nr_sectors = 1 limit=0 [ 188.668929][ T7164] (syz.3.355,7164,0):ocfs2_get_sector:1714 ERROR: status = -5 [ 188.676485][ T7164] (syz.3.355,7164,0):ocfs2_sb_probe:753 ERROR: status = -5 [ 188.683724][ T7164] (syz.3.355,7164,0):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 188.692696][ T7164] (syz.3.355,7164,0):ocfs2_fill_super:1177 ERROR: status = -5 [ 189.893349][ T6995] veth0_vlan: entered promiscuous mode [ 189.905882][ T6995] veth1_vlan: entered promiscuous mode [ 189.928108][ T6995] veth0_macvtap: entered promiscuous mode [ 190.435792][ T7175] netlink: 4 bytes leftover after parsing attributes in process `syz.5.357'. [ 190.448008][ T7160] team0: No ports can be present during mode change [ 191.190758][ T7168] vlan0: entered promiscuous mode [ 191.386234][ T7179] netlink: 44 bytes leftover after parsing attributes in process `syz.1.360'. [ 191.853249][ T7168] team0: Port device vlan0 added [ 191.867153][ T6995] veth1_macvtap: entered promiscuous mode [ 193.252607][ T7187] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 194.416969][ T7175] team0 (unregistering): Port device team_slave_0 removed [ 194.457811][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.478172][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.882382][ T7175] team0 (unregistering): Port device team_slave_1 removed [ 194.934347][ T7175] team0 (unregistering): Port device vlan0 removed [ 196.126161][ T6995] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 196.281258][ T6995] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 196.298525][ T6995] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 196.309701][ T6995] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 196.319981][ T6995] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 197.014320][ T6995] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 197.068152][ T6995] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 197.146576][ T6995] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 197.201203][ T6995] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 198.167013][ T6995] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 198.177614][ T6995] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 198.208124][ T6995] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 198.691463][ T6995] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 198.731351][ T6995] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 198.764772][ T6995] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 198.807397][ T6995] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 198.844613][ T6995] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 198.917752][ T6995] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 198.959980][ T6995] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.019864][ T6995] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.218979][ T6995] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.975016][ T6995] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.884486][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 201.050352][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 201.375921][ T6460] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 201.413609][ T6460] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 204.402944][ T41] block nbd0: Possible stuck request ffff888025f00000: control (read@0,4096B). Runtime 90 seconds [ 210.308475][ T7290] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 213.641499][ T7318] netlink: 'syz.5.394': attribute type 1 has an invalid length. [ 213.801611][ T5872] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 214.180605][ T5872] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 214.519564][ T5872] usb 7-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 214.648819][ T5872] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 214.659263][ T5872] usb 7-1: config 0 descriptor?? [ 214.700526][ T5872] pwc: Askey VC010 type 2 USB webcam detected. [ 215.763097][ T5872] pwc: recv_control_msg error -32 req 02 val 2b00 [ 217.171420][ T5872] pwc: recv_control_msg error -32 req 02 val 2700 [ 217.492355][ T5872] pwc: recv_control_msg error -71 req 02 val 2c00 [ 217.530698][ T5872] pwc: recv_control_msg error -71 req 04 val 1000 [ 217.589236][ T5872] pwc: recv_control_msg error -71 req 04 val 1300 [ 217.840746][ T5872] pwc: recv_control_msg error -71 req 04 val 1400 [ 218.589253][ T5872] pwc: recv_control_msg error -71 req 02 val 2000 [ 218.596831][ T5872] pwc: recv_control_msg error -71 req 02 val 2100 [ 218.603651][ T5872] pwc: recv_control_msg error -71 req 04 val 1500 [ 218.610463][ T5872] pwc: recv_control_msg error -71 req 02 val 2500 [ 218.617507][ T5872] pwc: recv_control_msg error -71 req 02 val 2400 [ 218.624322][ T5872] pwc: recv_control_msg error -71 req 02 val 2600 [ 218.631088][ T5872] pwc: recv_control_msg error -71 req 02 val 2900 [ 219.220097][ T5872] pwc: recv_control_msg error -71 req 02 val 2800 [ 219.231403][ T5872] pwc: recv_control_msg error -71 req 04 val 1100 [ 219.321679][ T5872] pwc: recv_control_msg error -71 req 04 val 1200 [ 219.335040][ T5872] pwc: Registered as video103. [ 219.347699][ T5872] input: PWC snapshot button as /devices/platform/dummy_hcd.6/usb7/7-1/input/input13 [ 219.724518][ T5872] usb 7-1: USB disconnect, device number 2 [ 227.096363][ T7406] cgroup: fork rejected by pids controller in /syz4 [ 228.084281][ T7412] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 230.703451][ T52] smc: removing ib device syz2 [ 232.183841][ T7438] Cannot find add_set index 0 as target [ 234.359402][ T7456] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 235.474366][ T41] block nbd0: Possible stuck request ffff888025f00000: control (read@0,4096B). Runtime 120 seconds [ 237.203782][ T7476] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 239.360600][ T63] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.682075][ T7495] netlink: 20 bytes leftover after parsing attributes in process `syz.1.440'. [ 241.389559][ T63] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.612641][ T63] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.974053][ T63] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.180512][ T7511] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 243.193376][ T7511] Cannot find set identified by id 0 to match [ 244.147390][ T5137] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 244.231561][ T5137] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 244.239825][ T5137] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 244.271961][ T5137] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 244.284539][ T5137] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 244.292450][ T5137] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 246.558265][ T5137] Bluetooth: hci0: command tx timeout [ 248.611469][ T5137] Bluetooth: hci0: command tx timeout [ 250.692049][ T5137] Bluetooth: hci0: command tx timeout [ 252.326793][ T63] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 252.414353][ T63] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 252.435809][ T63] bond0 (unregistering): Released all slaves [ 252.850754][ T5137] Bluetooth: hci0: command tx timeout [ 254.297487][ T7581] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 254.824702][ T7582] netlink: 12 bytes leftover after parsing attributes in process `syz.1.461'. [ 255.474825][ T7510] chnl_net:caif_netlink_parms(): no params data found [ 255.899041][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.905416][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.220122][ T63] hsr_slave_0: left promiscuous mode [ 257.325632][ T63] hsr_slave_1: left promiscuous mode [ 257.355211][ T63] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 257.474043][ T63] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 257.700925][ T63] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 257.921574][ T63] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 258.144583][ T63] veth1_macvtap: left promiscuous mode [ 258.150482][ T63] veth0_macvtap: left promiscuous mode [ 258.971747][ T63] veth1_vlan: left promiscuous mode [ 258.978688][ T63] veth0_vlan: left promiscuous mode [ 259.244936][ T7624] netlink: 4 bytes leftover after parsing attributes in process `syz.6.469'. [ 259.423454][ T7625] tmpfs: Bad value for 'huge' [ 260.689217][ T7629] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048) [ 265.606402][ T5198] udevd[5198]: worker [5821] /devices/virtual/block/nbd0 is taking a long time [ 265.967733][ T41] block nbd0: Possible stuck request ffff888025f00000: control (read@0,4096B). Runtime 150 seconds [ 266.064870][ T63] team0 (unregistering): Port device team_slave_1 removed [ 266.164395][ T63] team0 (unregistering): Port device team_slave_0 removed [ 266.310051][ T7658] sctp: [Deprecated]: syz.6.478 (pid 7658) Use of int in max_burst socket option. [ 266.310051][ T7658] Use struct sctp_assoc_value instead [ 268.252683][ T5137] Bluetooth: hci5: command 0x0406 tx timeout [ 270.802603][ T7510] bridge0: port 1(bridge_slave_0) entered blocking state [ 270.810598][ T7510] bridge0: port 1(bridge_slave_0) entered disabled state [ 271.778028][ T7510] bridge_slave_0: entered allmulticast mode [ 271.785271][ T7510] bridge_slave_0: entered promiscuous mode [ 271.794623][ T7510] bridge0: port 2(bridge_slave_1) entered blocking state [ 271.801856][ T7510] bridge0: port 2(bridge_slave_1) entered disabled state [ 271.809017][ T7510] bridge_slave_1: entered allmulticast mode [ 272.757271][ T7510] bridge_slave_1: entered promiscuous mode [ 273.224400][ T7510] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 273.455223][ T7510] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 274.525148][ T7693] openvswitch: netlink: Mixed IPv4 and IPv6 tunnel attributes [ 274.719812][ T7510] team0: Port device team_slave_0 added [ 274.797993][ T7510] team0: Port device team_slave_1 added [ 275.155280][ T7714] gretap1: entered allmulticast mode [ 275.165276][ T7714] bridge0: port 3(gretap1) entered blocking state [ 275.172545][ T7714] bridge0: port 3(gretap1) entered disabled state [ 275.185922][ T7714] gretap1: entered promiscuous mode [ 275.193192][ T7714] bridge0: port 3(gretap1) entered blocking state [ 275.200784][ T7714] bridge0: port 3(gretap1) entered forwarding state [ 275.838015][ T7510] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 276.069673][ T7510] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 276.772373][ T7510] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 276.835079][ T7510] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 276.867328][ T7510] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 277.266081][ T7510] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 278.153920][ T7510] hsr_slave_0: entered promiscuous mode [ 278.160269][ T7510] hsr_slave_1: entered promiscuous mode [ 278.350678][ T7510] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 279.371341][ T7510] Cannot create hsr debugfs directory [ 280.545132][ T7758] Bluetooth: MGMT ver 1.23 [ 282.650043][ T5871] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 283.042525][ T5871] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 283.161452][ T5871] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 283.191322][ T5871] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 283.228834][ T5871] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 283.257636][ T5871] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 284.326896][ T5871] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 284.356175][ T5871] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 284.373616][ T5871] usb 6-1: Product: syz [ 284.381434][ T5871] usb 6-1: Manufacturer: syz [ 284.405108][ T5871] cdc_wdm 6-1:1.0: skipping garbage [ 284.419757][ T5871] cdc_wdm 6-1:1.0: skipping garbage [ 284.449486][ T5871] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 284.621398][ T5871] cdc_wdm 6-1:1.0: Unknown control protocol [ 285.645300][ T30] INFO: task syz.2.219:6639 blocked for more than 144 seconds. [ 285.675119][ T5871] usb 6-1: USB disconnect, device number 2 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 286.521489][ T30] Not tainted 6.14.0-rc3-syzkaller-00166-g334426094588 #0 [ 286.529188][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 286.539448][ T30] task:syz.2.219 state:D stack:23416 pid:6639 tgid:6638 ppid:5835 task_flags:0x400140 flags:0x00004004 [ 286.556740][ T30] Call Trace: [ 286.562078][ T30] [ 286.565811][ T30] __schedule+0x18bc/0x4c40 [ 286.570348][ T30] ? __pfx___schedule+0x10/0x10 [ 286.575341][ T30] ? __pfx_lock_release+0x10/0x10 [ 286.580390][ T30] ? _raw_spin_unlock_irqrestore+0x8f/0x140 [ 286.586364][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 286.592317][ T30] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 286.598641][ T30] ? schedule+0x90/0x320 [ 286.602934][ T30] schedule+0x14b/0x320 [ 286.607101][ T30] schedule_preempt_disabled+0x13/0x30 [ 286.613869][ T30] __mutex_lock+0x817/0x1010 [ 286.618493][ T30] ? __mutex_lock+0x602/0x1010 [ 286.623544][ T30] ? sync_bdevs+0x1ae/0x340 [ 286.628074][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 286.633269][ T30] ? do_raw_spin_lock+0x14f/0x370 [ 286.640322][ T30] ? __pfx_lock_release+0x10/0x10 [ 286.646087][ T30] ? _atomic_dec_and_lock+0x9a/0x130 [ 286.652109][ T30] ? iput+0x3be/0xa50 [ 286.656108][ T30] sync_bdevs+0x1ae/0x340 [ 286.660435][ T30] ksys_sync+0xe2/0x1c0 [ 286.665471][ T30] ? __pfx_ksys_sync+0x10/0x10 [ 286.670254][ T30] ? do_syscall_64+0x100/0x230 [ 286.679974][ T7774] syz.3.504 (7774): drop_caches: 2 [ 286.681589][ T30] ? do_syscall_64+0xb6/0x230 [ 286.751513][ T30] __do_sys_sync+0xe/0x20 [ 286.755907][ T30] do_syscall_64+0xf3/0x230 [ 286.760442][ T30] ? clear_bhb_loop+0x35/0x90 [ 286.813689][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 286.843642][ T30] RIP: 0033:0x7f72ee78d0a9 [ 286.848115][ T30] RSP: 002b:00007f72ef6c5038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a2 [ 286.884649][ T30] RAX: ffffffffffffffda RBX: 00007f72ee9a5fa0 RCX: 00007f72ee78d0a9 [ 286.911831][ T30] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 286.930642][ T30] RBP: 00007f72ee9a5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 286.959301][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 286.998612][ T30] R13: 0000000000000000 R14: 00007f72ee9a5fa0 R15: 00007fff80ee02a8 [ 287.031926][ T30] [ 287.043372][ T30] [ 287.043372][ T30] Showing all locks held in the system: [ 287.051130][ T30] 1 lock held by khungtaskd/30: [ 287.129269][ T30] #0: ffffffff8eb38f60 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x55/0x2a0 [ 287.191562][ T30] 2 locks held by kworker/1:1/51: [ 287.196631][ T30] #0: ffff88801b080d48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x98b/0x18e0 [ 287.251383][ T30] #1: ffffc90000bb7c60 (free_ipc_work){+.+.}-{0:0}, at: process_scheduled_works+0x9c6/0x18e0 [ 287.291592][ T30] 3 locks held by kworker/1:2/58: [ 287.296650][ T30] 2 locks held by kworker/u8:4/63: [ 287.316196][ T30] 3 locks held by kworker/u8:8/3528: [ 287.332933][ T30] #0: ffff88801b089148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x98b/0x18e0 [ 287.361335][ T30] #1: ffffc9000ced7c60 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x9c6/0x18e0 [ 287.391470][ T30] #2: ffffffff8fec2b08 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 287.400946][ T30] 2 locks held by getty/5577: [ 287.411387][ T30] #0: ffff88814d3170a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 287.450758][ T30] #1: ffffc900032fb2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x616/0x1770 [ 287.479257][ T30] 1 lock held by syz-executor/5816: [ 287.491482][ T30] 1 lock held by udevd/5821: [ 287.496106][ T30] #0: ffff888143b4e4c8 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xf0/0xc50 [ 287.509582][ T30] 3 locks held by syz-executor/5826: [ 287.514998][ T30] #0: ffff88802a4d8d80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x203/0x510 [ 287.525172][ T30] #1: ffff88802a4d8078 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x60d/0x1260 [ 287.543730][ T30] #2: ffff88814e2ebb38 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x71/0x690 [ 287.561497][ T30] 3 locks held by kworker/0:4/5871: [ 287.566717][ T30] 4 locks held by syz.3.145/6382: [ 287.571906][ T30] #0: ffff888079f50d80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x203/0x510 [ 287.581912][ T30] #1: ffff888079f50078 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x60d/0x1260 [ 287.592162][ T30] #2: ffff888027add338 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x71/0x690 [ 287.601597][ T30] #3: ffffffff8eb3e438 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x451/0x820 [ 287.612559][ T30] 1 lock held by syz.2.219/6639: [ 287.617497][ T30] #0: ffff888143b4e4c8 (&disk->open_mutex){+.+.}-{4:4}, at: sync_bdevs+0x1ae/0x340 [ 287.627000][ T30] 2 locks held by syz.0.273/6834: [ 287.632086][ T30] #0: ffff8880349a80e0 (&type->s_umount_key#78/1){+.+.}-{4:4}, at: alloc_super+0x221/0x9d0 [ 287.642277][ T30] #1: ffff888143b4e4c8 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xf0/0xc50 [ 287.651863][ T30] 2 locks held by kworker/u8:11/6978: [ 287.657272][ T30] #0: ffff88801b089148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x98b/0x18e0 [ 287.669090][ T30] #1: ffffc9000ba4fc60 ((work_completion)(&(&kfence_timer)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9c6/0x18e0 [ 287.682027][ T30] 8 locks held by syz-executor/7510: [ 287.687763][ T30] #0: ffff888031364420 (sb_writers#8){.+.+}-{0:0}, at: vfs_write+0x225/0xd10 [ 287.696772][ T30] #1: ffff88805301bc88 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1ea/0x500 [ 287.707805][ T30] #2: ffff8881443f43c8 (kn->active#49){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x20e/0x500 [ 287.717948][ T30] #3: ffffffff8f769248 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xfc/0x480 [ 287.728313][ T30] #4: ffff888022fdd0e8 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xce/0x7c0 [ 287.739051][ T30] #5: ffff888022fde250 (&devlink->lock_key#4){+.+.}-{4:4}, at: nsim_drv_remove+0x50/0x160 [ 287.749234][ T30] #6: ffffffff8fec2b08 (rtnl_mutex){+.+.}-{4:4}, at: nsim_destroy+0xa4/0x620 [ 287.758142][ T30] #7: ffffffff8eb3e438 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x451/0x820 [ 287.769080][ T30] 3 locks held by syz.5.503/7765: [ 287.774150][ T30] #0: ffff888029fecd80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x203/0x510 [ 287.784161][ T30] #1: ffff888029fec078 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x60d/0x1260 [ 287.794468][ T30] #2: ffff88802949fb38 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x71/0x690 [ 287.803921][ T30] 3 locks held by syz.6.508/7795: [ 287.808941][ T30] #0: ffff88805cbc4d80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x203/0x510 [ 287.818953][ T30] #1: ffff88805cbc4078 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x60d/0x1260 [ 287.828732][ T30] #2: ffff88807d74a338 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x71/0x690 [ 287.841460][ T30] [ 287.843860][ T30] ============================================= [ 287.843860][ T30] [ 287.852671][ T30] NMI backtrace for cpu 1 [ 287.852689][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.14.0-rc3-syzkaller-00166-g334426094588 #0 [ 287.852707][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 287.852717][ T30] Call Trace: [ 287.852722][ T30] [ 287.852729][ T30] dump_stack_lvl+0x241/0x360 [ 287.852752][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 287.852769][ T30] ? __pfx__printk+0x10/0x10 [ 287.852802][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 287.852826][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 287.852841][ T30] ? _printk+0xd5/0x120 [ 287.852861][ T30] ? __pfx__printk+0x10/0x10 [ 287.852889][ T30] ? __wake_up_klogd+0xcc/0x110 [ 287.852909][ T30] ? __pfx__printk+0x10/0x10 [ 287.852932][ T30] ? __rcu_read_unlock+0xa1/0x110 [ 287.852954][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 287.852974][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 287.852995][ T30] watchdog+0x1058/0x10a0 [ 287.853017][ T30] ? watchdog+0x1ea/0x10a0 [ 287.853043][ T30] ? __pfx_watchdog+0x10/0x10 [ 287.853063][ T30] kthread+0x7a9/0x920 [ 287.853083][ T30] ? __pfx_kthread+0x10/0x10 [ 287.853106][ T30] ? __pfx_watchdog+0x10/0x10 [ 287.853126][ T30] ? __pfx_kthread+0x10/0x10 [ 287.853145][ T30] ? __pfx_kthread+0x10/0x10 [ 287.853169][ T30] ? __pfx_kthread+0x10/0x10 [ 287.853188][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 287.853205][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 287.853223][ T30] ? __pfx_kthread+0x10/0x10 [ 287.853245][ T30] ret_from_fork+0x4b/0x80 [ 287.853263][ T30] ? __pfx_kthread+0x10/0x10 [ 287.853285][ T30] ret_from_fork_asm+0x1a/0x30 [ 287.853315][ T30] [ 287.853321][ T30] Sending NMI from CPU 1 to CPUs 0: [ 288.027706][ C0] NMI backtrace for cpu 0 [ 288.027719][ C0] CPU: 0 UID: 0 PID: 2938 Comm: kworker/u8:6 Not tainted 6.14.0-rc3-syzkaller-00166-g334426094588 #0 [ 288.027735][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 288.027743][ C0] Workqueue: bat_events batadv_nc_worker [ 288.027768][ C0] RIP: 0010:__rcu_read_unlock+0x28/0x110 [ 288.027788][ C0] Code: 90 90 f3 0f 1e fa 55 41 57 41 56 41 55 41 54 53 49 bc 00 00 00 00 00 fc ff df 65 4c 8b 34 25 00 d5 03 00 4d 8d ae 44 04 00 00 <4c> 89 eb 48 c1 eb 03 42 0f b6 04 23 84 c0 75 6b 41 8b 6d 00 ff cd [ 288.027799][ C0] RSP: 0018:ffffc9000bde7a80 EFLAGS: 00000246 [ 288.027810][ C0] RAX: 87db6447e2a28700 RBX: ffffffff8bcbc5fb RCX: ffffc9000bde7a03 [ 288.027821][ C0] RDX: 0000000000000002 RSI: ffffffff8c2ab6a0 RDI: ffffffff8c801a40 [ 288.027830][ C0] RBP: 0000000000000000 R08: ffffffff903bbf77 R09: 1ffffffff20777ee [ 288.027839][ C0] R10: dffffc0000000000 R11: fffffbfff20777ef R12: dffffc0000000000 [ 288.027849][ C0] R13: ffff88803091c044 R14: ffff88803091bc00 R15: dffffc0000000000 [ 288.027860][ C0] FS: 0000000000000000(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 288.027871][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 288.027881][ C0] CR2: 000055b298d5d131 CR3: 000000000e938000 CR4: 00000000003526f0 [ 288.027893][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 288.027901][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 288.027910][ C0] Call Trace: [ 288.027915][ C0] [ 288.027921][ C0] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 288.027936][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 288.027955][ C0] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 288.027968][ C0] ? nmi_handle+0x2a/0x5a0 [ 288.027992][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 288.028008][ C0] ? nmi_handle+0x14f/0x5a0 [ 288.028025][ C0] ? nmi_handle+0x2a/0x5a0 [ 288.028042][ C0] ? __rcu_read_unlock+0x28/0x110 [ 288.028058][ C0] ? default_do_nmi+0x63/0x160 [ 288.028077][ C0] ? exc_nmi+0x123/0x1f0 [ 288.028095][ C0] ? end_repeat_nmi+0xf/0x53 [ 288.028120][ C0] ? batadv_nc_worker+0xcb/0x610 [ 288.028139][ C0] ? __rcu_read_unlock+0x28/0x110 [ 288.028156][ C0] ? __rcu_read_unlock+0x28/0x110 [ 288.028173][ C0] ? __rcu_read_unlock+0x28/0x110 [ 288.028189][ C0] [ 288.028194][ C0] [ 288.028199][ C0] ? batadv_nc_worker+0xcb/0x610 [ 288.028216][ C0] batadv_nc_worker+0x290/0x610 [ 288.028234][ C0] ? batadv_nc_worker+0xcb/0x610 [ 288.028252][ C0] ? process_scheduled_works+0x9c6/0x18e0 [ 288.028268][ C0] process_scheduled_works+0xabe/0x18e0 [ 288.028295][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 288.028314][ C0] ? assign_work+0x364/0x3d0 [ 288.028331][ C0] worker_thread+0x870/0xd30 [ 288.028353][ C0] ? __kthread_parkme+0x169/0x1d0 [ 288.028370][ C0] ? __pfx_worker_thread+0x10/0x10 [ 288.028386][ C0] kthread+0x7a9/0x920 [ 288.028402][ C0] ? __pfx_kthread+0x10/0x10 [ 288.028420][ C0] ? __pfx_worker_thread+0x10/0x10 [ 288.028435][ C0] ? __pfx_kthread+0x10/0x10 [ 288.028451][ C0] ? __pfx_kthread+0x10/0x10 [ 288.028469][ C0] ? __pfx_kthread+0x10/0x10 [ 288.028485][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 288.028499][ C0] ? lockdep_hardirqs_on+0x99/0x150 [ 288.028514][ C0] ? __pfx_kthread+0x10/0x10 [ 288.028531][ C0] ret_from_fork+0x4b/0x80 [ 288.028546][ C0] ? __pfx_kthread+0x10/0x10 [ 288.028563][ C0] ret_from_fork_asm+0x1a/0x30 [ 288.028584][ C0] [ 288.029434][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 288.371999][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.14.0-rc3-syzkaller-00166-g334426094588 #0 [ 288.382491][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 288.392537][ T30] Call Trace: [ 288.395807][ T30] [ 288.398729][ T30] dump_stack_lvl+0x241/0x360 [ 288.403401][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 288.408589][ T30] ? __pfx__printk+0x10/0x10 [ 288.413177][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 288.419156][ T30] ? vscnprintf+0x5d/0x90 [ 288.423496][ T30] panic+0x349/0x880 [ 288.427405][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 288.433558][ T30] ? __pfx_panic+0x10/0x10 [ 288.437979][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 288.443348][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 288.449494][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 288.455639][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 288.461787][ T30] watchdog+0x1097/0x10a0 [ 288.466113][ T30] ? watchdog+0x1ea/0x10a0 [ 288.470523][ T30] ? __pfx_watchdog+0x10/0x10 [ 288.475199][ T30] kthread+0x7a9/0x920 [ 288.479261][ T30] ? __pfx_kthread+0x10/0x10 [ 288.483846][ T30] ? __pfx_watchdog+0x10/0x10 [ 288.488518][ T30] ? __pfx_kthread+0x10/0x10 [ 288.493097][ T30] ? __pfx_kthread+0x10/0x10 [ 288.497684][ T30] ? __pfx_kthread+0x10/0x10 [ 288.502266][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 288.507460][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 288.512652][ T30] ? __pfx_kthread+0x10/0x10 [ 288.517238][ T30] ret_from_fork+0x4b/0x80 [ 288.521644][ T30] ? __pfx_kthread+0x10/0x10 [ 288.526232][ T30] ret_from_fork_asm+0x1a/0x30 [ 288.530994][ T30] [ 288.534249][ T30] Kernel Offset: disabled [ 288.538579][ T30] Rebooting in 86400 seconds..