last executing test programs: 1m38.006038469s ago: executing program 4 (id=221): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="d80000001e0081054e81f782060000000000000006007c095dd2466518000e800a00142603600e1208000f0000000406a80016c00800094014000000035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791433a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad909d5e1cace81ed0bffece0b42a9eca0200e6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1}, 0x0) 1m36.135661743s ago: executing program 4 (id=222): openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xd40, 0xd2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0x2}, 0x28) ioctl$KVM_RUN(r2, 0xae80, 0x0) setrlimit(0xf, &(0x7f0000000000)={0x1, 0x5}) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) 1m32.340268281s ago: executing program 4 (id=226): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x3, 0x0, 0x0, {}, [@NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x10}}, 0x18}}, 0x11) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000016000/0x18000)=nil, &(0x7f0000000300)=[@text32={0x20, 0x0}], 0x1, 0x4e, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000180)={0x0, 0xd000}) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1m31.848618584s ago: executing program 4 (id=228): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000200)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x215}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x4}}}, @IFLA_LINK={0x8}]}, 0x3c}, 0x1, 0xba01}, 0x0) 1m31.476615656s ago: executing program 4 (id=230): ioctl$SNDCTL_DSP_GETIPTR(0xffffffffffffffff, 0x800c5011, &(0x7f0000008e80)) mount$afs(0x0, &(0x7f0000002840)='./file0\x00', 0x0, 0x700, 0x0) r0 = fanotify_init(0x0, 0x2) fanotify_mark(r0, 0x1, 0x8000039, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="1801020000000000000000004cc311ec8500000075000000a70000000800000095158587c8dc451eb2bd37cddf8a6645935bb1c3493079bd"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) pipe2$9p(0x0, 0x0) r1 = dup(0xffffffffffffffff) write$FUSE_INIT(r1, 0x0, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) socket$packet(0x11, 0x2, 0x300) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = gettid() ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000200)) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) prlimit64(r2, 0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_open_dev$MSR(&(0x7f0000000380), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) 1m21.277386366s ago: executing program 4 (id=243): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000300)={0x38, 0x0, 0x8, 0x8001, 0x0, 0x9, 0x2, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$VHOST_SET_LOG_BASE(0xffffffffffffffff, 0x4004af61, &(0x7f0000000200)=0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r2, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r3, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0x6e9c84f3}], 0x1}, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) ioctl$sock_SIOCGIFCONF(r3, 0x8912, &(0x7f00000000c0)=@buf={0xdb, &(0x7f00000007c0)="a8e2bc0fb52ce7e45518f1ed74c5c4e8d130c9c7096b3e4d77700adb2bb534bfe496b19087559bd5dac703d479f006be1aee235207a41f8d0789c67dac4665683157ac87d6993cebd3de49c7f0fbeea0fd7e512a07ef32c60c615c534408d5f70defb3b9af05516e752874de706da2f1d06307c503ad72d03c06cc840fe1a94ab6157b27ffbc76199cab2ed8c88c422fd4515490faa814e719f60ae452ca62484d67cfa5e1613271e633dce70f9697fe92e5783a0510743334acec81b9248c4d53f40f8e4750cc3023e2877e5db93d9cc71defceadc23cef0446c8"}) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r4, 0x0, 0x0, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x100, @remote, 0x1}, 0x1c) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r4, 0x84, 0xc, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000000740)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x0, 0x0, 0x2c, 0x3, 0x0, 0x0, 0x5, 0x0, @local, @private=0xa010100, {[@generic={0x7, 0x2}]}}, {{0x1, 0x80, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x0, 0x0, 0x0, 0x1000}}}}}}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, 0x0, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r5}, 0x18) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000080)={'vcan0\x00'}) bind$inet6(r6, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x1, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) 1m6.125189671s ago: executing program 32 (id=243): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000300)={0x38, 0x0, 0x8, 0x8001, 0x0, 0x9, 0x2, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$VHOST_SET_LOG_BASE(0xffffffffffffffff, 0x4004af61, &(0x7f0000000200)=0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r2, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r3, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0x6e9c84f3}], 0x1}, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) ioctl$sock_SIOCGIFCONF(r3, 0x8912, &(0x7f00000000c0)=@buf={0xdb, &(0x7f00000007c0)="a8e2bc0fb52ce7e45518f1ed74c5c4e8d130c9c7096b3e4d77700adb2bb534bfe496b19087559bd5dac703d479f006be1aee235207a41f8d0789c67dac4665683157ac87d6993cebd3de49c7f0fbeea0fd7e512a07ef32c60c615c534408d5f70defb3b9af05516e752874de706da2f1d06307c503ad72d03c06cc840fe1a94ab6157b27ffbc76199cab2ed8c88c422fd4515490faa814e719f60ae452ca62484d67cfa5e1613271e633dce70f9697fe92e5783a0510743334acec81b9248c4d53f40f8e4750cc3023e2877e5db93d9cc71defceadc23cef0446c8"}) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r4, 0x0, 0x0, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x100, @remote, 0x1}, 0x1c) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r4, 0x84, 0xc, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000000740)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x0, 0x0, 0x2c, 0x3, 0x0, 0x0, 0x5, 0x0, @local, @private=0xa010100, {[@generic={0x7, 0x2}]}}, {{0x1, 0x80, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x0, 0x0, 0x0, 0x1000}}}}}}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, 0x0, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r5}, 0x18) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000080)={'vcan0\x00'}) bind$inet6(r6, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x1, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) 16.768406583s ago: executing program 0 (id=343): r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) flock(r0, 0x2) r1 = open(&(0x7f0000000180)='.\x00', 0x10000, 0x0) flock(r1, 0x1) flock(r0, 0x1) 15.344814691s ago: executing program 0 (id=346): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000040)={0x3, 0x3, {0x0}, {}, 0x100000000, 0x1}) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'geneve0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="3400000010000300"/20, @ANYRES32=r3, @ANYBLOB="0080020000000000140012800b00010067656e657665000004000280a37a7748f55edac2db9ca1e95bd6f3fd906ca663f76921969d5a2ce71e0084ebb88b78195bcefdf72fbac5e1dc0064400a4e56e93f17639ed45586a48f14ce45b840a23f7f07fad33144c16143ef0f45bd39a15814a0e96f8ae14f4ab233f883d254eefa22e285ace79e5ca19c8ed06ed2552c16b70c8617feade633f268e236f70011a7f19cea9ae6f2eae969d6c26eea16aafd826d8f2255343ea04f3be8d2"], 0x34}, 0x1, 0x2}, 0x80) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000340)={'ip6tnl0\x00', &(0x7f00000002c0)={'ip6gre0\x00', 0x0, 0x4, 0x1, 0x5, 0x0, 0x2, @private2, @local, 0x8000, 0x1, 0x2, 0x42e}}) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r5) sendmsg$BATADV_CMD_GET_DAT_CACHE(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x1c, r7, 0x83625fc5352ba305, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}]}, 0x1c}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff}) r9 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000000380)={'vxcan0\x00', 0x0}) bind$can_j1939(r9, &(0x7f0000000100)={0x1d, r10, 0x0, {0x0, 0x0, 0x4}, 0xfe}, 0x18) r11 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="300000001d000100000000000000000007000000", @ANYRES32=r12, @ANYBLOB="000096000a000200aaaaaaaaaa0c0000060005"], 0x30}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) sendmsg$ETHTOOL_MSG_WOL_GET(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000580)={&(0x7f0000000380)={0x1d0, 0x0, 0x400, 0x70bd25, 0x25dfdbfe, {}, [@HEADER={0x4}, @HEADER={0x84, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x1d0}, 0x1, 0x0, 0x0, 0x20000000}, 0xc0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f00000007c0)=@abs={0x0, 0x0, 0x4e22}, 0x6e) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r13 = socket$phonet_pipe(0x23, 0x5, 0x2) close(r13) 13.721472947s ago: executing program 3 (id=348): socketpair$unix(0x1, 0x3, 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_emit_ethernet(0x52, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c000000100005ff04000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32], 0x3c}}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000840)={r2, @in6={{0xa, 0x4e20, 0x3ae, @empty, 0x129}}, 0x2, 0x2, 0x614, 0x1, 0xd, 0x7, 0x4}, 0x9c) ioctl$SNDCTL_DSP_SETFMT(0xffffffffffffffff, 0xc0045005, 0x0) 13.572978591s ago: executing program 2 (id=349): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc800}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000004c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x14}]}, @NFT_MSG_NEWSETELEM={0x44, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x8, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xb0}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 13.192161953s ago: executing program 2 (id=350): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0, 0x0, 0x4000000000000000}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f00000000c0)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) write$P9_RSTATu(r4, &(0x7f0000001180)={0x23d, 0x7d, 0x0, {{0x500, 0xfc, 0x0, 0xfffffffa, {}, 0x1bac0000, 0x0, 0x0, 0x0, 0x25, '\x04no\xc8f\xc9}`\x99\x06\x00\x00\x00\x00\x00\x00\x00\x90\x00\x00\x1d\xf6\xdb\x00\x00\x00\x00\x00\x00=\xd3\x00\x00\x00\x00\x00\x00', 0x38, 'pJ\x86\xce\xc6\x02\x00}\xfag>\xff\xeb\t\xb55\x1f[\xde\x05@\x00\x00\x00\x00\x18{\x82\x00\xb5\x00\x00;Y_\xcb\x14\x03CT\xb9\xfd\x9e\xf1\x96\xa5\x1c\xd5\x15z\xdc\x81\x06\xb4\x94\xe1', 0x17, '\xcf\xc2\x00\x10\x00\x00\x00\x00\x00\x00\x00\x00\x0fX\x05\x02\xb6n\x00\xf3\x13\xf6\x00', 0x55, '\xf8\xf6i\xfbqm\xcf1^\xca\xf3\x85@\x9a\xc6[\x94\bg\x8c,;\x9e\x1dR\xc3l\xde{\xa4\xa4\x00\xb4\xb0\xb4\xf1t\xa6f\xa8R\x9aE\x1b4\a\xdb\xda\xb2\x88K\xaf\x05\x00\x00\x00\x00\x00\x00\x00G\xec!\xca\xbf\xf2\x0f\x9c\x1c\xbe6\xf4\xfd\x1aL\xc2\x80\xe8\xd4\x89\xdad\x9a7\x00'}, 0x12c, 'odev-n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x11r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaa\x9at\xf5\x16\x05\x00\x00\x00\x00\x00\x00\x00\xc2g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x9d\xba?\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xcd\xf9\x18\x85I\xb1\x12]lL\x9b\x18\xc2\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xdf$NL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12Qa\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xff\x00'/300}}, 0x23d) 11.680516305s ago: executing program 2 (id=351): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0xc201}) write$tun(r0, &(0x7f0000000100)=ANY=[], 0xfdef) 11.377442875s ago: executing program 3 (id=352): syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000000000020ac0565020000000000010902"], 0x0) socket$key(0xf, 0x3, 0x2) fsopen(&(0x7f0000000000)='cgroup\x00', 0x0) eventfd2(0x1, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) landlock_create_ruleset(&(0x7f00000002c0)={0x7fee}, 0x18, 0x0) socket(0x10, 0x3, 0x0) socket(0x1e, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0xa, 0x2, 0x0) openat$iommufd(0xffffff9c, &(0x7f00000000c0), 0x220100, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) io_uring_setup(0x28fe, &(0x7f0000000080)={0x0, 0x0, 0x80}) syz_io_uring_setup(0x10d, &(0x7f00000003c0)={0x0, 0x0, 0x1}, 0x0, 0x0) socket(0x80000000000000a, 0x2, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) epoll_create1(0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="540000001000010400000000000000ffff000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e00140002800800010008000000062102000100000008000500", @ANYRES32=r1, @ANYBLOB], 0x54}}, 0x20000000) 11.339384722s ago: executing program 1 (id=353): sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x4000000) userfaultfd(0x80001) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000066000000004b64ffec850000006d000000c50000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a00)={{0x1, 0xffffffffffffffff}, &(0x7f0000000940), &(0x7f00000009c0)=r0}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=@bloom_filter={0x1e, 0x2372, 0x3, 0xd17, 0x202, r2, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1, 0x4, 0x9}, 0x50) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc}, 0x48) r5 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xd, 0x0, &(0x7f0000000040)) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000480)={0x0, 0x9}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x0, 0x0, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'ipvlan0\x00'}) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000411}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x4) 11.289487175s ago: executing program 0 (id=354): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000016000/0x18000)=nil, &(0x7f0000000300)=[@text32={0x20, 0x0}], 0x1, 0x4e, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000180)={0x0, 0xd000}) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0f"], 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 9.937763787s ago: executing program 2 (id=355): openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) setsockopt$inet_int(r2, 0x0, 0x1, 0x0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) r3 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2}}) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_encrypt_change={{0x8, 0x4}, {0xc, 0xc8, 0xfa}}}, 0x7) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, &(0x7f0000001780)={&(0x7f0000001540), &(0x7f0000001580)=[{}, {}], &(0x7f0000001680)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000016c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x2, 0x5}) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x25dfdbff, {0x60, 0x0, 0x0, r6, {0x0, 0xc}, {0xffff, 0xffff}, {0x2, 0x7}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x10, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x5}]}}]}, 0x40}}, 0x40440c0) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000003980)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a300000000074000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021380011800a0001006c696d6974000000280002800c00024000000000000000030c00014000000000000001010c0001400000000000000101b81700000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000008c1703800c0000800800034000000002"], 0x1874}, 0x1, 0x0, 0x0, 0x8010}, 0x0) 9.656341236s ago: executing program 1 (id=356): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mq_unlink(0x0) mkdir(0x0, 0xa0) r3 = socket$netlink(0x10, 0x3, 0x0) syz_genetlink_get_family_id$net_dm(0x0, 0xffffffffffffffff) socket$vsock_stream(0x28, 0x1, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000070000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r6, 0x5760, 0x14) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x48, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r5}, @IFLA_ADDRESS={0xa}]}, 0x48}, 0x1, 0x0, 0x0, 0x45844}, 0x0) 9.40237087s ago: executing program 0 (id=357): sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x4000000) userfaultfd(0x80001) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000066000000004b64ffec850000006d000000c50000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a00)={{0x1, 0xffffffffffffffff}, &(0x7f0000000940), &(0x7f00000009c0)=r0}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=@bloom_filter={0x1e, 0x2372, 0x3, 0xd17, 0x202, r2, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1, 0x4, 0x9}, 0x50) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc}, 0x48) 7.857761857s ago: executing program 3 (id=358): ioctl$SNDCTL_DSP_GETIPTR(0xffffffffffffffff, 0x800c5011, &(0x7f0000008e80)) mount$afs(0x0, &(0x7f0000002840)='./file0\x00', 0x0, 0x700, 0x0) r0 = fanotify_init(0x0, 0x2) fanotify_mark(r0, 0x1, 0x8000039, 0xffffffffffffffff, 0x0) r1 = dup(0xffffffffffffffff) write$FUSE_INIT(r1, 0x0, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) socket$packet(0x11, 0x2, 0x300) r2 = gettid() r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x1, 0x7fff0000}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f0000000200)) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = syz_open_dev$MSR(&(0x7f0000000380), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) 7.72065024s ago: executing program 1 (id=359): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=@newtfilter={0x48, 0x2c, 0xd3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x4, 0xfff3}, {}, {0xffe0, 0x300}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_KEY_IPV6_DST={0x14, 0x10, @private1={0xfc, 0x1, '\x00', 0x1}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010027bd7000fcdbdf25440000000800", @ANYRES32, @ANYBLOB="0a001800030303030303000004005a8020005a8018000080"], 0x4c}}, 0x4040810) 7.441208512s ago: executing program 1 (id=360): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=0000000000000000004000', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000180)={0x50, 0x0, r1, {0x7, 0x29, 0x0, 0xffffffff85000014, 0x5, 0x7, 0x0, 0x8001, 0x0, 0x0, 0x1}}, 0x50) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x60800, 0x4b) syz_fuse_handle_req(r0, &(0x7f00000042c0), 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x8}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f00000067c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001b00", 0x2000, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="780000000000000002000000000000040000000000000000000000000000000004"], 0x0, 0x0, 0x0, 0x0}) getdents(r2, &(0x7f0000000700)=""/90, 0x20000) 6.541492263s ago: executing program 1 (id=361): r0 = socket$rxrpc(0x21, 0x2, 0x2) listen(r0, 0x0) listen(r0, 0x100000) 6.398714921s ago: executing program 3 (id=362): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001140)='net\x00') statx(r0, &(0x7f0000000680)='.\x00', 0x0, 0x0, &(0x7f0000000080)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs={0x0, 0x0, 0x2000000}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000100)={'wlan0\x00', &(0x7f00000000c0)=@ethtool_stats}) mlockall(0x2) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000100ffff0000000000000000850000002a00000085000000d000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f00000006c0)='rpcb_unregister\x00', 0xffffffffffffffff, 0x0, 0xffffeffffffffff0}, 0x18) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000000000)) clock_gettime(0x0, 0x0) ioctl$SNDCTL_DSP_SYNC(0xffffffffffffffff, 0x5001, 0x0) write$dsp(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000fcffffff000000000000000018510000020005a2e1"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) 6.216791493s ago: executing program 1 (id=363): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000040)={0x3, 0x3, {0x0}, {}, 0x100000000, 0x1}) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'geneve0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="3400000010000300"/20, @ANYRES32=r3, @ANYBLOB="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"], 0x34}, 0x1, 0x2}, 0x80) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000340)={'ip6tnl0\x00', &(0x7f00000002c0)={'ip6gre0\x00', 0x0, 0x4, 0x1, 0x5, 0x0, 0x2, @private2, @local, 0x8000, 0x1, 0x2, 0x42e}}) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r5) sendmsg$BATADV_CMD_GET_DAT_CACHE(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x1c, r7, 0x83625fc5352ba305, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}]}, 0x1c}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff}) r9 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000000380)={'vxcan0\x00', 0x0}) bind$can_j1939(r9, &(0x7f0000000100)={0x1d, r10, 0x0, {0x0, 0x0, 0x4}, 0xfe}, 0x18) r11 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="300000001d000100000000000000000007000000", @ANYRES32=r12, @ANYBLOB="000096000a000200aaaaaaaaaa0c0000060005"], 0x30}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) sendmsg$ETHTOOL_MSG_WOL_GET(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000580)={&(0x7f0000000380)={0x1d0, 0x0, 0x400, 0x70bd25, 0x25dfdbfe, {}, [@HEADER={0x4}, @HEADER={0x84, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x1d0}, 0x1, 0x0, 0x0, 0x20000000}, 0xc0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f00000007c0)=@abs={0x0, 0x0, 0x4e22}, 0x6e) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r13 = socket$phonet_pipe(0x23, 0x5, 0x2) close(r13) 5.09998654s ago: executing program 2 (id=364): memfd_create(&(0x7f00000005c0)=' \xc76\xbe\x91\x8d\x182)!\x9a%\xa2\xd28\xd6\x06\a\x0e\xfc\xfe\x12\x8f&\x13\xae%@T\xa3\xb0>\\\xec\xa9\xf9Q@6A\x10\x8cn|\x00\x00\x00\x00\x00\x00\x00\x00r\xbb\xdd\xe8\x87\x05=\xfb\x8b}\xfc\x1d\x03\xe1\xfcm\x9b\xf7fo\"i\xa1hk\x1f\xf5z\xc1\x7f\xa4\\]\xc4\xbe3\xf9\xa8\t?:\xd8\xda\x84\xeepI[\x1c\x00\x00\x00\x00\xf9v\x00\x00\x00\x00\x00T\xb6\xbe\x0f~\xc0\x92\xe9O{\xa8\x81(\x01\x14\xfc\x83\xf9\xfb\x05\x94T\x81@Lq]\xf9\x15zj\x87\xc4\x8e\xe8/\xb9-&R\x8e\xb2\xb3bBx\x1e1\x18\x8f\x19\xf7]#\xed,\xc7\x11\tp\xf4\xa3\xee\x00\x00\x00\x00\'}\x18\xe8O\xa8#K\xb6\xe4U\x92\xd2\x9d\xb8?2\xc8\xe7kovd\xa4\x1bl+\x14\x17\x14\x17C2! U\x04:\xd93F\xb9\xfc\x1b\xfd}\x05\xf9\x11\xf3)>q\x10\xd3\xf0\xaf>\xf8t(bX\xe3g\x05\xfe\b\xbcy\x95*\xca\a\xaf\xbb\xf9\xc3Y\xa2\x91\x90.\xc8\xbe\xb0\xa6\xbd\xbd\xfd\xfaf*\xb2&\x82\xa0\x17\xe7)\xf5\xa2\xccv\n\x1b\xd4\xf4\x11*\xc9\xc6*\xa4.\x94[$\xb8\xb3Q\xde\xd8A\xa4~c,`\x02\xb8\x01r\x89\x82\x13\xd0}C7\xfb\xf2\tM\x1e\xe9\xa5\v\xc5\xba(\x89\xb0l\x92H\x1cR\x1f>\xc4ie\xe0B\xf0[\xe2\xe1\x12\x1d\x8fR&\xd1\xa6#\xda.\x0f\xd7\xd7\xa4\x90\x14\x92I\xf82&\x16<\xf2RR\xc2\x02.Q\xef\x85\xef\xf9\xe5\x00\xe9\xca\xb1\x8c\x11\x11l\x9f\xc8\b\xf7A\xa6\x81\xad\xdc\x95\xc8\xef\x102\xa8\x87\x01\x00\\\xfee \n0F\xbc\x85\xc5C\xd0\x99\xe4\t\xab`\'t\xc2\xe9\x13\xcag\xea\xb3\xb5\x92\x00J\xc6y\x05\xcc\xde\xa0\xf6\xb9 \xe5\xdd\f\x18\xfc\xe0\xc3(\xd8\xeb\x1a6\xe6\xfa\x93\xc07R\x0f-\x9e\xf3\x87E\xa3\xd5o\x1bA\x88L/\xe7>45Q?\be\x7f\xa9\x9a\xcae\xd8Y\xdf]\x1bS\x825\xcb\x00\xa4}\x97\x84T\xad\x9b\x1e!\x8a\xbc\x02+#Q\xa9 \xe9\x05r\xe1\xec\x0f\xa7\xe6Of\x95\x02{', 0x4) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = syz_io_uring_setup(0x24fd, &(0x7f0000000b80)={0x0, 0xfffffffd, 0x10100, 0xfffffffc, 0x33a}, &(0x7f0000000100)=0x0, &(0x7f0000000040)=0x0) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='8'], 0x38}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SPLICE={0x1e, 0x21, 0x0, @fd=r3, 0xe5, {}, 0x1, 0x4, 0x1}) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 5.093721448s ago: executing program 3 (id=365): sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x4000000) userfaultfd(0x80001) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000066000000004b64ffec850000006d000000c50000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a00)={{0x1, 0xffffffffffffffff}, &(0x7f0000000940), &(0x7f00000009c0)=r0}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=@bloom_filter={0x1e, 0x2372, 0x3, 0xd17, 0x202, r2, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1, 0x4, 0x9}, 0x50) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc}, 0x48) r5 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xd, 0x0, &(0x7f0000000040)) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000480)={0x0, 0x9}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x0, 0x0, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'ipvlan0\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[], 0x4c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000411}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x4) 5.069657124s ago: executing program 0 (id=366): sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x4000000) userfaultfd(0x80001) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000066000000004b64ffec850000006d000000c50000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a00)={{0x1, 0xffffffffffffffff}, &(0x7f0000000940), &(0x7f00000009c0)=r0}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=@bloom_filter={0x1e, 0x2372, 0x3, 0xd17, 0x202, r2, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1, 0x4, 0x9}, 0x50) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc}, 0x48) 4.5331815s ago: executing program 2 (id=367): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d00000085"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x6}, {0x66, 0x0, 0x0, 0x80ffffff}}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x6, 0x1, 0x5, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {}, {0x56}}], {{0x4, 0x1, 0x2, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 57.226223ms ago: executing program 0 (id=368): openat$sw_sync_info(0xffffffffffffff9c, 0x0, 0x200, 0x0) socket(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) io_setup(0x1ff, 0xfffffffffffffffd) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$igmp(0x2, 0x3, 0x2) bpf$BPF_MAP_FREEZE(0x16, 0x0, 0x0) setsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, 0x0, 0x0) io_submit(0x0, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000680)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x5, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}}, 0xb8}}, 0x0) 0s ago: executing program 3 (id=369): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=@newtfilter={0x48, 0x2c, 0xd3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x4, 0xfff3}, {}, {0xffe0, 0x300}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_KEY_IPV6_DST={0x14, 0x10, @private1={0xfc, 0x1, '\x00', 0x1}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010027bd7000fcdbdf25440000000800", @ANYRES32, @ANYBLOB="0a001800030303030303000004005a8020005a8018000080"], 0x4c}}, 0x4040810) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.201' (ED25519) to the list of known hosts. [ 81.426977][ T5824] cgroup: Unknown subsys name 'net' [ 81.706430][ T5824] cgroup: Unknown subsys name 'cpuset' [ 81.759784][ T5824] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 83.419700][ T5824] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 86.055424][ T5838] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 86.061229][ T5838] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 86.062791][ T5838] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 86.063490][ T5838] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 86.067696][ T5838] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 86.068458][ T5838] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 86.104191][ T5838] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 86.105554][ T5842] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 86.106285][ T5842] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 86.108269][ T5842] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 86.129214][ T5842] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 86.157793][ T5838] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 86.161028][ T5838] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 86.162172][ T5838] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 86.162903][ T5838] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 86.282852][ T59] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 86.284376][ T59] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 86.285366][ T59] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 86.287164][ T59] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 86.287931][ T59] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 86.352899][ T5838] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 86.356994][ T5838] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 86.357774][ T5838] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 86.388259][ T5838] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 86.397105][ T5838] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 86.801371][ T990] cfg80211: failed to load regulatory.db [ 87.244274][ T5839] chnl_net:caif_netlink_parms(): no params data found [ 87.272239][ T5843] chnl_net:caif_netlink_parms(): no params data found [ 87.294730][ T5847] chnl_net:caif_netlink_parms(): no params data found [ 87.335011][ T5835] chnl_net:caif_netlink_parms(): no params data found [ 87.458803][ T5850] chnl_net:caif_netlink_parms(): no params data found [ 88.150296][ T5838] Bluetooth: hci0: command tx timeout [ 88.229907][ T5838] Bluetooth: hci1: command tx timeout [ 88.302176][ T5839] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.303463][ T5839] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.304016][ T5839] bridge_slave_0: entered allmulticast mode [ 88.305702][ T5839] bridge_slave_0: entered promiscuous mode [ 88.310550][ T5838] Bluetooth: hci2: command tx timeout [ 88.390107][ T5838] Bluetooth: hci3: command tx timeout [ 88.469245][ T5838] Bluetooth: hci4: command tx timeout [ 88.486409][ T5843] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.486485][ T5843] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.486642][ T5843] bridge_slave_0: entered allmulticast mode [ 88.488164][ T5843] bridge_slave_0: entered promiscuous mode [ 88.503289][ T5839] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.503430][ T5839] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.503917][ T5839] bridge_slave_1: entered allmulticast mode [ 88.506518][ T5839] bridge_slave_1: entered promiscuous mode [ 88.508128][ T5847] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.508264][ T5847] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.508728][ T5847] bridge_slave_0: entered allmulticast mode [ 88.520834][ T5847] bridge_slave_0: entered promiscuous mode [ 88.700533][ T5843] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.700691][ T5843] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.700863][ T5843] bridge_slave_1: entered allmulticast mode [ 88.703611][ T5843] bridge_slave_1: entered promiscuous mode [ 88.791334][ T5847] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.791468][ T5847] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.791601][ T5847] bridge_slave_1: entered allmulticast mode [ 88.793258][ T5847] bridge_slave_1: entered promiscuous mode [ 88.794526][ T5835] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.794599][ T5835] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.794717][ T5835] bridge_slave_0: entered allmulticast mode [ 88.796176][ T5835] bridge_slave_0: entered promiscuous mode [ 89.120135][ T5835] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.120253][ T5835] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.120372][ T5835] bridge_slave_1: entered allmulticast mode [ 89.121854][ T5835] bridge_slave_1: entered promiscuous mode [ 89.123861][ T5850] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.123991][ T5850] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.124281][ T5850] bridge_slave_0: entered allmulticast mode [ 89.125761][ T5850] bridge_slave_0: entered promiscuous mode [ 89.205174][ T5839] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.360350][ T5850] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.360564][ T5850] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.360734][ T5850] bridge_slave_1: entered allmulticast mode [ 89.364546][ T5850] bridge_slave_1: entered promiscuous mode [ 89.389989][ T5843] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.395569][ T5839] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.512721][ T5847] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.685611][ T5843] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.742256][ T5847] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.744983][ T5835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.104051][ T5835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.107635][ T5850] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.183877][ T5839] team0: Port device team_slave_0 added [ 90.230694][ T5838] Bluetooth: hci0: command tx timeout [ 90.309251][ T5838] Bluetooth: hci1: command tx timeout [ 90.373508][ T5850] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.376698][ T5843] team0: Port device team_slave_0 added [ 90.388102][ T5839] team0: Port device team_slave_1 added [ 90.398318][ T5838] Bluetooth: hci2: command tx timeout [ 90.412262][ T5847] team0: Port device team_slave_0 added [ 90.469235][ T5838] Bluetooth: hci3: command tx timeout [ 90.549210][ T5838] Bluetooth: hci4: command tx timeout [ 90.584054][ T5843] team0: Port device team_slave_1 added [ 90.643417][ T5847] team0: Port device team_slave_1 added [ 90.934487][ T5835] team0: Port device team_slave_0 added [ 91.135590][ T5850] team0: Port device team_slave_0 added [ 91.137557][ T5835] team0: Port device team_slave_1 added [ 91.212588][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.212605][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.212630][ T5839] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.313106][ T5850] team0: Port device team_slave_1 added [ 91.401261][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.401278][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.401302][ T5843] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.402600][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.402614][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.402637][ T5839] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.403774][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.403785][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.403798][ T5847] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.602085][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.602100][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.602125][ T5843] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.621718][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.621735][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.621759][ T5847] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.711847][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.711864][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.711887][ T5835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.783954][ T5850] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.783971][ T5850] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.783996][ T5850] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.785452][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.785464][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.785488][ T5835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.837026][ T5850] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.837043][ T5850] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.837066][ T5850] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.185394][ T5839] hsr_slave_0: entered promiscuous mode [ 92.186435][ T5839] hsr_slave_1: entered promiscuous mode [ 92.309243][ T5838] Bluetooth: hci0: command tx timeout [ 92.399384][ T5838] Bluetooth: hci1: command tx timeout [ 92.427236][ T5847] hsr_slave_0: entered promiscuous mode [ 92.428119][ T5847] hsr_slave_1: entered promiscuous mode [ 92.430581][ T5847] debugfs: 'hsr0' already exists in 'hsr' [ 92.430704][ T5847] Cannot create hsr debugfs directory [ 92.469538][ T5838] Bluetooth: hci2: command tx timeout [ 92.549202][ T5838] Bluetooth: hci3: command tx timeout [ 92.588743][ T5843] hsr_slave_0: entered promiscuous mode [ 92.590490][ T5843] hsr_slave_1: entered promiscuous mode [ 92.591358][ T5843] debugfs: 'hsr0' already exists in 'hsr' [ 92.591380][ T5843] Cannot create hsr debugfs directory [ 92.604387][ T5835] hsr_slave_0: entered promiscuous mode [ 92.605643][ T5835] hsr_slave_1: entered promiscuous mode [ 92.606524][ T5835] debugfs: 'hsr0' already exists in 'hsr' [ 92.606547][ T5835] Cannot create hsr debugfs directory [ 92.629147][ T5838] Bluetooth: hci4: command tx timeout [ 92.753667][ T5850] hsr_slave_0: entered promiscuous mode [ 92.754502][ T5850] hsr_slave_1: entered promiscuous mode [ 92.755085][ T5850] debugfs: 'hsr0' already exists in 'hsr' [ 92.755104][ T5850] Cannot create hsr debugfs directory [ 94.389290][ T5838] Bluetooth: hci0: command tx timeout [ 94.469308][ T5838] Bluetooth: hci1: command tx timeout [ 94.549308][ T5838] Bluetooth: hci2: command tx timeout [ 94.611499][ T5839] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 94.629355][ T5838] Bluetooth: hci3: command tx timeout [ 94.656491][ T5839] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 94.676985][ T5839] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 94.710435][ T5838] Bluetooth: hci4: command tx timeout [ 94.743656][ T5839] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 94.870829][ T5847] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 94.935975][ T5847] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 94.975215][ T5847] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 95.024121][ T5847] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 95.168723][ T5843] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 95.211977][ T5843] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 95.252859][ T5843] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 95.304464][ T5843] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 95.488304][ T5835] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 95.538724][ T5835] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 95.573338][ T5835] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 95.623743][ T5835] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 95.813557][ T5850] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 95.855436][ T5850] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 95.895749][ T5839] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.896296][ T5850] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 95.940414][ T5850] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 96.085682][ T5839] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.097546][ T5847] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.145623][ T93] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.146665][ T93] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.206474][ T1536] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.206702][ T1536] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.255221][ T5847] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.296793][ T5843] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.314181][ T3641] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.314398][ T3641] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.363540][ T3641] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.363684][ T3641] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.434734][ T5843] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.485689][ T1554] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.485884][ T1554] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.514222][ T5835] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.551240][ T1554] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.551380][ T1554] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.673520][ T5835] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.735103][ T1554] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.735309][ T1554] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.767352][ T5850] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.835536][ T1351] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.836223][ T1351] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.981662][ T5850] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.072898][ T1554] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.073053][ T1554] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.148844][ T1351] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.149167][ T1351] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.267090][ T5839] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.303487][ T5847] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.622448][ T5843] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.741627][ T5839] veth0_vlan: entered promiscuous mode [ 97.825027][ T5839] veth1_vlan: entered promiscuous mode [ 97.950344][ T5843] veth0_vlan: entered promiscuous mode [ 98.003133][ T5843] veth1_vlan: entered promiscuous mode [ 98.022279][ T5835] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.080618][ T5839] veth0_macvtap: entered promiscuous mode [ 98.142512][ T5839] veth1_macvtap: entered promiscuous mode [ 98.208464][ T5843] veth0_macvtap: entered promiscuous mode [ 98.268653][ T5850] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.275739][ T5843] veth1_macvtap: entered promiscuous mode [ 98.286060][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.332619][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.375235][ T5847] veth0_vlan: entered promiscuous mode [ 98.398883][ T5835] veth0_vlan: entered promiscuous mode [ 98.411776][ T1554] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.420470][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.423061][ T1554] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.445087][ T3641] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.456923][ T3641] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.468245][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.476037][ T5847] veth1_vlan: entered promiscuous mode [ 98.544075][ T5835] veth1_vlan: entered promiscuous mode [ 98.572397][ T1351] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.624490][ T1351] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.650596][ T1351] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.660704][ T1351] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.882092][ T5850] veth0_vlan: entered promiscuous mode [ 98.991755][ T3641] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.991779][ T3641] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.034962][ T5850] veth1_vlan: entered promiscuous mode [ 99.061379][ T5847] veth0_macvtap: entered promiscuous mode [ 99.067879][ T5835] veth0_macvtap: entered promiscuous mode [ 99.120149][ T3641] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.120168][ T3641] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.124216][ T5835] veth1_macvtap: entered promiscuous mode [ 99.156960][ T5847] veth1_macvtap: entered promiscuous mode [ 99.208697][ T1554] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.208716][ T1554] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.332114][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.332134][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.338127][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.351477][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.394550][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.408412][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.432084][ T5850] veth0_macvtap: entered promiscuous mode [ 99.457463][ T1554] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.474701][ T5850] veth1_macvtap: entered promiscuous mode [ 99.487223][ T1554] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.502029][ T1554] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.514690][ T1554] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.536023][ T1554] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.554225][ T1554] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.600688][ T1554] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.900207][ T1554] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.088287][ T5850] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 100.499384][ T5850] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 101.241407][ T5961] Driver unsupported XDP return value 0 on prog (id 5) dev N/A, expect packet loss! [ 101.598099][ T1554] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.645292][ T43] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.645381][ T43] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.645394][ T43] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.685617][ T43] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.711949][ T43] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.676128][ T3641] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.676150][ T3641] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.860809][ T67] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.860829][ T67] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.054139][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.054159][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.210433][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.210455][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.356624][ T5971] Zero length message leads to an empty skb [ 103.459396][ T5971] netlink: 'syz.0.7': attribute type 1 has an invalid length. [ 103.459490][ T5971] netlink: 224 bytes leftover after parsing attributes in process `syz.0.7'. [ 103.522120][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.522140][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.568851][ T5976] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 105.376067][ T5979] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.399340][ T5979] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.209293][ T1231] usb 4-1: new low-speed USB device number 2 using dummy_hcd [ 106.391460][ T1231] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 106.391519][ T1231] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 106.391547][ T1231] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 106.391572][ T1231] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 106.391599][ T1231] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 106.394134][ T1231] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 106.394187][ T1231] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 106.394214][ T1231] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 106.394240][ T1231] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 106.394265][ T1231] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 106.397853][ T1231] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 106.397908][ T1231] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 106.397934][ T1231] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 106.397956][ T1231] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 106.397981][ T1231] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 106.494892][ T1231] usb 4-1: string descriptor 0 read error: -22 [ 106.495061][ T1231] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 106.495085][ T1231] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.671496][ T1231] adutux 4-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 106.861685][ T1231] usb 4-1: USB disconnect, device number 2 [ 106.970803][ T5979] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 107.027367][ T5979] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 107.816171][ T6014] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 107.817446][ T6014] netlink: 4 bytes leftover after parsing attributes in process `syz.0.15'. [ 108.486663][ T67] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.681920][ T6021] netlink: 16 bytes leftover after parsing attributes in process `syz.4.18'. [ 109.053649][ T67] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.153621][ T67] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.279097][ T67] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.328994][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 109.340011][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 110.019065][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 110.079021][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 110.109029][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 110.209015][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 110.269073][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 110.659461][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 111.379017][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 111.438999][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 117.361927][ T6090] Bluetooth: MGMT ver 1.23 [ 118.731869][ T37] audit: type=1326 audit(1757379362.756:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6092 comm="syz.2.34" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37bc23ebe9 code=0x7ffc0000 [ 118.731933][ T37] audit: type=1326 audit(1757379362.756:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6092 comm="syz.2.34" exe="/root/syz-executor" sig=0 arch=c000003e syscall=444 compat=0 ip=0x7f37bc23ebe9 code=0x7ffc0000 [ 118.731974][ T37] audit: type=1326 audit(1757379362.756:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6092 comm="syz.2.34" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37bc23ebe9 code=0x7ffc0000 [ 118.732015][ T37] audit: type=1326 audit(1757379362.756:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6092 comm="syz.2.34" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37bc23ebe9 code=0x7ffc0000 [ 118.732056][ T37] audit: type=1326 audit(1757379362.756:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6092 comm="syz.2.34" exe="/root/syz-executor" sig=0 arch=c000003e syscall=445 compat=0 ip=0x7f37bc23ebe9 code=0x7ffc0000 [ 118.732116][ T37] audit: type=1326 audit(1757379362.766:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6092 comm="syz.2.34" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37bc23ebe9 code=0x7ffc0000 [ 118.732157][ T37] audit: type=1326 audit(1757379362.766:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6092 comm="syz.2.34" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f37bc23ebe9 code=0x7ffc0000 [ 118.732198][ T37] audit: type=1326 audit(1757379362.766:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6092 comm="syz.2.34" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37bc23ebe9 code=0x7ffc0000 [ 118.732238][ T37] audit: type=1326 audit(1757379362.766:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6092 comm="syz.2.34" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37bc23ebe9 code=0x7ffc0000 [ 118.732279][ T37] audit: type=1326 audit(1757379362.766:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6092 comm="syz.2.34" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f37bc23ebe9 code=0x7ffc0000 [ 120.305315][ T6118] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 120.790696][ T6118] tty tty2: ldisc open failed (-12), clearing slot 1 [ 120.931912][ T6122] netlink: 32 bytes leftover after parsing attributes in process `syz.1.39'. [ 121.771794][ T6130] netlink: 'syz.1.41': attribute type 1 has an invalid length. [ 121.771814][ T6130] netlink: 224 bytes leftover after parsing attributes in process `syz.1.41'. [ 124.779192][ T5826] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 125.956601][ T5826] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 125.956633][ T5826] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 125.956659][ T5826] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 125.956681][ T5826] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 125.956721][ T5826] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 125.956743][ T5826] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.048445][ T5826] usb 1-1: config 0 descriptor?? [ 126.528858][ T5826] usbhid 1-1:0.0: can't add hid device: -71 [ 126.530174][ T5826] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 126.611008][ T5826] usb 1-1: USB disconnect, device number 2 [ 126.858432][ T6165] kvm: kvm [6164]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc1) = 0x4000 [ 126.893990][ T6165] kvm: kvm [6164]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc1) = 0x4000 [ 126.912560][ T6165] kvm: kvm [6164]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc1) = 0x4000 [ 126.914148][ T6165] kvm: kvm [6164]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc1) = 0x4000 [ 126.915642][ T6165] kvm: kvm [6164]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc1) = 0x4000 [ 126.917189][ T6165] kvm: kvm [6164]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc1) = 0x4000 [ 126.918692][ T6165] kvm: kvm [6164]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc1) = 0x4000 [ 126.994255][ T6165] kvm: kvm [6164]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc1) = 0x4000 [ 127.019661][ T6165] kvm: kvm [6164]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc1) = 0x4000 [ 127.039274][ T6165] kvm: kvm [6164]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc1) = 0x4000 [ 132.121883][ T37] kauditd_printk_skb: 20 callbacks suppressed [ 132.121901][ T37] audit: type=1326 audit(1757379376.248:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6187 comm="syz.2.56" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37bc23ebe9 code=0x7ffc0000 [ 132.121944][ T37] audit: type=1326 audit(1757379376.258:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6187 comm="syz.2.56" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37bc23ebe9 code=0x7ffc0000 [ 132.183602][ T37] audit: type=1326 audit(1757379376.318:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6187 comm="syz.2.56" exe="/root/syz-executor" sig=0 arch=c000003e syscall=444 compat=0 ip=0x7f37bc23ebe9 code=0x7ffc0000 [ 132.183650][ T37] audit: type=1326 audit(1757379376.318:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6187 comm="syz.2.56" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37bc23ebe9 code=0x7ffc0000 [ 132.184492][ T37] audit: type=1326 audit(1757379376.318:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6187 comm="syz.2.56" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37bc23ebe9 code=0x7ffc0000 [ 132.184528][ T37] audit: type=1326 audit(1757379376.318:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6187 comm="syz.2.56" exe="/root/syz-executor" sig=0 arch=c000003e syscall=445 compat=0 ip=0x7f37bc23ebe9 code=0x7ffc0000 [ 132.184549][ T37] audit: type=1326 audit(1757379376.318:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6187 comm="syz.2.56" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37bc23ebe9 code=0x7ffc0000 [ 132.184570][ T37] audit: type=1326 audit(1757379376.318:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6187 comm="syz.2.56" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37bc23ebe9 code=0x7ffc0000 [ 132.184592][ T37] audit: type=1326 audit(1757379376.318:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6187 comm="syz.2.56" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f37bc23ebe9 code=0x7ffc0000 [ 132.184614][ T37] audit: type=1326 audit(1757379376.318:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6187 comm="syz.2.56" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37bc23ebe9 code=0x7ffc0000 [ 132.922114][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.922180][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 137.147933][ T6253] netlink: 'syz.2.71': attribute type 6 has an invalid length. [ 137.213352][ T10] usb 1-1: new low-speed USB device number 3 using dummy_hcd [ 137.372235][ T10] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 137.372284][ T10] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 137.372299][ T10] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 137.372312][ T10] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 137.372326][ T10] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 137.373274][ T10] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 137.373305][ T10] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 137.373319][ T10] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 137.373332][ T10] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 137.373345][ T10] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 137.374248][ T10] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 137.374278][ T10] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 137.374292][ T10] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 137.374305][ T10] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 137.374318][ T10] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 137.377205][ T10] usb 1-1: string descriptor 0 read error: -22 [ 137.377288][ T10] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 137.377301][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.744992][ T10] adutux 1-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 137.962938][ T31] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 137.996143][ T5903] usb 1-1: USB disconnect, device number 3 [ 138.073679][ T31] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 140.277416][ T5838] Bluetooth: hci2: link tx timeout [ 140.279169][ T5838] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 141.529969][ T6294] netlink: 'syz.0.82': attribute type 6 has an invalid length. [ 142.322678][ T5838] Bluetooth: hci2: command 0x0406 tx timeout [ 146.417431][ T6341] syz.0.94 (6341) used obsolete PPPIOCDETACH ioctl [ 146.423743][ T6342] netlink: 'syz.3.95': attribute type 6 has an invalid length. [ 152.541442][ T5903] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 152.572414][ T5903] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 152.959084][ T5903] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 153.109191][ T5903] usb 2-1: Using ep0 maxpacket: 8 [ 153.115787][ T5903] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 153.115816][ T5903] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.115837][ T5903] usb 2-1: Product: syz [ 153.115851][ T5903] usb 2-1: Manufacturer: syz [ 153.115863][ T5903] usb 2-1: SerialNumber: syz [ 153.153445][ T5903] usb 2-1: config 0 descriptor?? [ 153.377706][ T5903] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 154.070246][ T6388] netlink: 'syz.4.108': attribute type 6 has an invalid length. [ 155.276784][ T5903] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 156.081144][ T5937] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 157.800650][ T5903] usb 2-1: USB disconnect, device number 2 [ 157.941928][ T5937] usb 4-1: Using ep0 maxpacket: 32 [ 158.067575][ T5937] usb 4-1: device descriptor read/all, error -71 [ 159.581964][ T10] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 159.637980][ T10] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 160.244781][ T6435] netlink: 'syz.4.120': attribute type 6 has an invalid length. [ 160.833486][ T5903] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 160.990590][ T5903] usb 3-1: Using ep0 maxpacket: 32 [ 160.992212][ T5903] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 160.992251][ T5903] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 160.992276][ T5903] usb 3-1: config 1 interface 1 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 160.992287][ T5903] usb 3-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 160.994935][ T5903] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 160.994960][ T5903] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.994978][ T5903] usb 3-1: Product: syz [ 160.994992][ T5903] usb 3-1: Manufacturer: syz [ 160.995006][ T5903] usb 3-1: SerialNumber: syz [ 162.586770][ T6456] overlayfs: missing 'lowerdir' [ 162.613547][ T6456] overlayfs: failed to resolve './file1/file0': -2 [ 162.921269][ T37] kauditd_printk_skb: 13 callbacks suppressed [ 162.921281][ T37] audit: type=1326 audit(1757379407.058:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6445 comm="syz.4.122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2f32febe9 code=0x7ffc0000 [ 162.922069][ T37] audit: type=1326 audit(1757379407.058:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6445 comm="syz.4.122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2f32febe9 code=0x7ffc0000 [ 162.922753][ T37] audit: type=1326 audit(1757379407.058:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6445 comm="syz.4.122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=444 compat=0 ip=0x7fe2f32febe9 code=0x7ffc0000 [ 162.923346][ T37] audit: type=1326 audit(1757379407.058:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6445 comm="syz.4.122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2f32febe9 code=0x7ffc0000 [ 162.923840][ T37] audit: type=1326 audit(1757379407.058:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6445 comm="syz.4.122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2f32febe9 code=0x7ffc0000 [ 162.924067][ T37] audit: type=1326 audit(1757379407.058:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6445 comm="syz.4.122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=445 compat=0 ip=0x7fe2f32febe9 code=0x7ffc0000 [ 162.924428][ T37] audit: type=1326 audit(1757379407.058:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6445 comm="syz.4.122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2f32febe9 code=0x7ffc0000 [ 162.925205][ T37] audit: type=1326 audit(1757379407.058:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6445 comm="syz.4.122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7fe2f32febe9 code=0x7ffc0000 [ 162.925591][ T37] audit: type=1326 audit(1757379407.058:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6445 comm="syz.4.122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2f32febe9 code=0x7ffc0000 [ 162.927380][ T37] audit: type=1326 audit(1757379407.058:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6445 comm="syz.4.122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2f32febe9 code=0x7ffc0000 [ 163.078593][ T5903] cdc_ncm 3-1:1.0: bind() failure [ 163.144828][ T5903] cdc_ncm 3-1:1.1: probe with driver cdc_ncm failed with error -71 [ 163.164447][ T5903] cdc_mbim 3-1:1.1: probe with driver cdc_mbim failed with error -71 [ 163.222726][ T5903] usbtest 3-1:1.1: probe with driver usbtest failed with error -71 [ 163.245917][ T5903] usb 3-1: USB disconnect, device number 2 [ 166.107664][ T6486] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 166.373528][ T6487] netlink: 'syz.2.132': attribute type 6 has an invalid length. [ 167.178672][ T31] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 167.202287][ T31] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz1] on syz0 [ 167.709060][ T990] usb 3-1: new low-speed USB device number 3 using dummy_hcd [ 167.936575][ T990] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 167.937558][ T990] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 167.937639][ T990] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 167.937691][ T990] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 167.937742][ T990] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 168.055004][ T990] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 168.055121][ T990] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 168.055175][ T990] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 168.055225][ T990] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 168.055277][ T990] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 168.320603][ T990] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 168.321189][ T990] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 168.321320][ T990] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 168.321373][ T990] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 168.321426][ T990] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 168.453859][ T990] usb 3-1: string descriptor 0 read error: -22 [ 168.454735][ T990] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 168.454815][ T990] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 168.831853][ T990] adutux 3-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 169.956564][ T5903] usb 3-1: USB disconnect, device number 3 [ 171.653176][ T37] kauditd_printk_skb: 15 callbacks suppressed [ 171.653189][ T37] audit: type=1326 audit(1757379415.704:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6512 comm="syz.3.140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50ead1ebe9 code=0x7ffc0000 [ 171.653216][ T37] audit: type=1326 audit(1757379415.704:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6512 comm="syz.3.140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50ead1ebe9 code=0x7ffc0000 [ 171.653238][ T37] audit: type=1326 audit(1757379415.704:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6512 comm="syz.3.140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=444 compat=0 ip=0x7f50ead1ebe9 code=0x7ffc0000 [ 171.653260][ T37] audit: type=1326 audit(1757379415.704:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6512 comm="syz.3.140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50ead1ebe9 code=0x7ffc0000 [ 171.653281][ T37] audit: type=1326 audit(1757379415.704:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6512 comm="syz.3.140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50ead1ebe9 code=0x7ffc0000 [ 171.653303][ T37] audit: type=1326 audit(1757379415.704:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6512 comm="syz.3.140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=445 compat=0 ip=0x7f50ead1ebe9 code=0x7ffc0000 [ 171.653330][ T37] audit: type=1326 audit(1757379415.704:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6512 comm="syz.3.140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50ead1ebe9 code=0x7ffc0000 [ 171.653355][ T37] audit: type=1326 audit(1757379415.704:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6512 comm="syz.3.140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50ead1ebe9 code=0x7ffc0000 [ 171.653377][ T37] audit: type=1326 audit(1757379415.704:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6512 comm="syz.3.140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f50ead1ebe9 code=0x7ffc0000 [ 171.653399][ T37] audit: type=1326 audit(1757379415.704:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6512 comm="syz.3.140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50ead1ebe9 code=0x7ffc0000 [ 173.715073][ T5927] usb 3-1: new low-speed USB device number 4 using dummy_hcd [ 173.976134][ T5927] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 173.976171][ T5927] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 173.976185][ T5927] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 173.976199][ T5927] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 173.976212][ T5927] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 173.977204][ T5927] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 173.977234][ T5927] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 173.977249][ T5927] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 173.977262][ T5927] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 173.977276][ T5927] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 173.978294][ T5927] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 173.978327][ T5927] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 173.978341][ T5927] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 173.978357][ T5927] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 173.978370][ T5927] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 173.984383][ T5927] usb 3-1: string descriptor 0 read error: -22 [ 173.984527][ T5927] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 173.984607][ T5927] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 174.323077][ T5927] adutux 3-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 174.586703][ T31] usb 3-1: USB disconnect, device number 4 [ 176.143841][ T5927] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 176.299116][ T5927] usb 1-1: Using ep0 maxpacket: 16 [ 176.301773][ T5927] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 176.301798][ T5927] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 176.305065][ T5927] usb 1-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 176.305093][ T5927] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 176.305113][ T5927] usb 1-1: Product: syz [ 176.305127][ T5927] usb 1-1: Manufacturer: syz [ 176.305141][ T5927] usb 1-1: SerialNumber: syz [ 176.367215][ T5927] usb 1-1: config 0 descriptor?? [ 176.628890][ T31] usb 1-1: USB disconnect, device number 4 [ 177.689026][ T37] kauditd_printk_skb: 19 callbacks suppressed [ 177.689040][ T37] audit: type=1326 audit(1757379421.804:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6585 comm="syz.3.159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50ead1ebe9 code=0x7ffc0000 [ 177.689068][ T37] audit: type=1326 audit(1757379421.804:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6585 comm="syz.3.159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50ead1ebe9 code=0x7ffc0000 [ 177.689091][ T37] audit: type=1326 audit(1757379421.804:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6585 comm="syz.3.159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=444 compat=0 ip=0x7f50ead1ebe9 code=0x7ffc0000 [ 177.689113][ T37] audit: type=1326 audit(1757379421.804:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6585 comm="syz.3.159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50ead1ebe9 code=0x7ffc0000 [ 177.689135][ T37] audit: type=1326 audit(1757379421.804:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6585 comm="syz.3.159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50ead1ebe9 code=0x7ffc0000 [ 177.689156][ T37] audit: type=1326 audit(1757379421.804:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6585 comm="syz.3.159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=445 compat=0 ip=0x7f50ead1ebe9 code=0x7ffc0000 [ 177.689177][ T37] audit: type=1326 audit(1757379421.814:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6585 comm="syz.3.159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50ead1ebe9 code=0x7ffc0000 [ 177.689199][ T37] audit: type=1326 audit(1757379421.814:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6585 comm="syz.3.159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50ead1ebe9 code=0x7ffc0000 [ 177.689221][ T37] audit: type=1326 audit(1757379421.814:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6585 comm="syz.3.159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f50ead1ebe9 code=0x7ffc0000 [ 177.689243][ T37] audit: type=1326 audit(1757379421.814:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6585 comm="syz.3.159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50ead1ebe9 code=0x7ffc0000 [ 177.819035][ T5925] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 177.968999][ T5925] usb 1-1: Using ep0 maxpacket: 32 [ 177.971334][ T5925] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 177.971401][ T5925] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 177.971444][ T5925] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 177.971466][ T5925] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 177.971489][ T5925] usb 1-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 177.980388][ T5925] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 177.980416][ T5925] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 177.980436][ T5925] usb 1-1: Product: syz [ 177.980450][ T5925] usb 1-1: Manufacturer: syz [ 177.980464][ T5925] usb 1-1: SerialNumber: syz [ 178.336567][ C1] vkms_vblank_simulate: vblank timer overrun [ 179.060391][ C1] vkms_vblank_simulate: vblank timer overrun [ 179.601563][ C1] vkms_vblank_simulate: vblank timer overrun [ 179.702007][ C1] vkms_vblank_simulate: vblank timer overrun [ 180.008285][ T5925] cdc_ncm 1-1:1.0: bind() failure [ 180.065154][ T5925] cdc_ncm 1-1:1.1: probe with driver cdc_ncm failed with error -71 [ 180.078139][ T5925] cdc_mbim 1-1:1.1: probe with driver cdc_mbim failed with error -71 [ 180.093648][ T5925] usbtest 1-1:1.1: probe with driver usbtest failed with error -71 [ 180.119319][ T5925] usb 1-1: USB disconnect, device number 5 [ 180.730520][ C1] vkms_vblank_simulate: vblank timer overrun [ 181.681351][ C1] vkms_vblank_simulate: vblank timer overrun [ 181.866238][ C1] vkms_vblank_simulate: vblank timer overrun [ 182.238802][ C1] vkms_vblank_simulate: vblank timer overrun [ 189.379120][ T5927] usb 5-1: new low-speed USB device number 2 using dummy_hcd [ 189.538087][ T5927] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 189.542134][ T5927] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 189.542168][ T5927] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 189.542193][ T5927] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 189.542219][ T5927] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 189.543649][ T5927] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 189.543698][ T5927] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 189.543724][ T5927] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 189.543749][ T5927] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 189.543774][ T5927] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 189.545187][ T5927] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 189.545249][ T5927] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 189.545274][ T5927] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 189.545299][ T5927] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 189.545324][ T5927] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 189.556411][ T5927] usb 5-1: string descriptor 0 read error: -22 [ 189.556561][ T5927] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 189.556583][ T5927] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 189.688568][ T5927] adutux 5-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 191.943232][ T5926] usb 5-1: USB disconnect, device number 2 [ 194.342053][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.342130][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 204.146717][ T6776] netlink: 156 bytes leftover after parsing attributes in process `syz.3.204'. [ 207.548862][ T5918] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 207.810714][ T5918] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 207.810735][ T5918] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 207.810749][ T5918] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 207.810761][ T5918] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 207.810784][ T5918] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 207.810796][ T5918] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 208.003428][ T5918] usb 4-1: config 0 descriptor?? [ 208.596388][ T5918] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 208.773431][ T1231] usb 4-1: USB disconnect, device number 5 [ 209.159174][ T6815] fido_id[6815]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 211.849041][ T5826] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 212.039072][ T5826] usb 1-1: Using ep0 maxpacket: 16 [ 212.041742][ T5826] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 212.046612][ T5826] usb 1-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 212.046642][ T5826] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 212.046662][ T5826] usb 1-1: Product: syz [ 212.046676][ T5826] usb 1-1: Manufacturer: syz [ 212.046690][ T5826] usb 1-1: SerialNumber: syz [ 212.056324][ T5826] usb 1-1: config 0 descriptor?? [ 212.073204][ T5155] Bluetooth: hci2: command 0x0406 tx timeout [ 212.073240][ T5155] Bluetooth: hci1: command 0x0406 tx timeout [ 212.073264][ T5155] Bluetooth: hci4: command 0x0406 tx timeout [ 212.073286][ T5155] Bluetooth: hci3: command 0x0406 tx timeout [ 212.146226][ T6841] netlink: 48 bytes leftover after parsing attributes in process `syz.4.219'. [ 212.300954][ T1231] usb 1-1: USB disconnect, device number 6 [ 213.784239][ T6851] netlink: 156 bytes leftover after parsing attributes in process `syz.4.221'. [ 218.359034][ T1231] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 218.479835][ T6872] fuse: Bad value for 'user_id' [ 218.479854][ T6872] fuse: Bad value for 'user_id' [ 218.521164][ T1231] usb 2-1: Using ep0 maxpacket: 8 [ 218.525584][ T1231] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 218.525601][ T1231] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 218.525612][ T1231] usb 2-1: Product: syz [ 218.525619][ T1231] usb 2-1: Manufacturer: syz [ 218.525627][ T1231] usb 2-1: SerialNumber: syz [ 218.592622][ T1231] usb 2-1: config 0 descriptor?? [ 218.889234][ T1231] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 219.397422][ T6880] netlink: 156 bytes leftover after parsing attributes in process `syz.3.229'. [ 222.052608][ T1231] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 222.811442][ T1231] usb 2-1: USB disconnect, device number 3 [ 224.577860][ T6904] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 227.278038][ T6920] fuse: Bad value for 'user_id' [ 227.278058][ T6920] fuse: Bad value for 'user_id' [ 236.099075][ T31] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 239.709720][ T6965] fuse: Bad value for 'fd' [ 243.691611][ T6989] netlink: 32 bytes leftover after parsing attributes in process `syz.2.256'. [ 248.204167][ T7014] fuse: Bad value for 'fd' [ 249.763280][ T59] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 249.770114][ T59] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 249.785221][ T59] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 249.955216][ T59] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 249.956074][ T59] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 252.275641][ T59] Bluetooth: hci5: command tx timeout [ 253.231959][ T7050] netlink: 32 bytes leftover after parsing attributes in process `syz.0.271'. [ 253.827737][ T990] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 253.993473][ T990] usb 2-1: config index 0 descriptor too short (expected 19492, got 36) [ 253.993502][ T990] usb 2-1: config 0 has too many interfaces: 36, using maximum allowed: 32 [ 253.993524][ T990] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 36 [ 253.993577][ T990] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 253.993604][ T990] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 253.993627][ T990] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 253.993670][ T990] usb 2-1: New USB device found, idVendor=046d, idProduct=c225, bcdDevice= 0.00 [ 253.993693][ T990] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 254.186098][ T990] usb 2-1: config 0 descriptor?? [ 255.350641][ T5845] Bluetooth: hci5: command tx timeout [ 255.630046][ T990] usbhid 2-1:0.0: can't add hid device: -71 [ 255.630173][ T990] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 255.635158][ T990] usb 2-1: USB disconnect, device number 4 [ 255.761807][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.761878][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.066265][ T7078] netlink: 'syz.3.280': attribute type 1 has an invalid length. [ 257.191946][ T7078] 8021q: adding VLAN 0 to HW filter on device bond1 [ 257.247497][ T7082] vlan2: entered allmulticast mode [ 257.247519][ T7082] veth1: entered allmulticast mode [ 257.286529][ T7082] bond1: (slave vlan2): making interface the new active one [ 257.293749][ T7082] bond1: (slave vlan2): Enslaving as an active interface with an up link [ 257.429920][ T5845] Bluetooth: hci5: command tx timeout [ 257.449122][ T5918] usb 1-1: new full-speed USB device number 7 using dummy_hcd [ 257.617093][ T5918] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 257.617116][ T5918] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 257.617142][ T5918] usb 1-1: New USB device found, idVendor=054c, idProduct=0ba0, bcdDevice= 0.00 [ 257.617154][ T5918] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 257.688469][ T5918] usb 1-1: config 0 descriptor?? [ 257.698830][ T7085] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 257.789078][ T990] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 257.980259][ T990] usb 4-1: config index 0 descriptor too short (expected 19492, got 36) [ 257.981068][ T990] usb 4-1: config 0 has too many interfaces: 36, using maximum allowed: 32 [ 257.981099][ T990] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 36 [ 257.982719][ T990] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 257.983377][ T990] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 257.983401][ T990] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 257.983668][ T990] usb 4-1: New USB device found, idVendor=046d, idProduct=c225, bcdDevice= 0.00 [ 257.983692][ T990] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 258.121412][ T990] usb 4-1: config 0 descriptor?? [ 258.143153][ T5918] usbhid 1-1:0.0: can't add hid device: -71 [ 258.143241][ T5918] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 258.168845][ T5918] usb 1-1: USB disconnect, device number 7 [ 258.254377][ T7095] netlink: 28 bytes leftover after parsing attributes in process `syz.1.284'. [ 258.604816][ T990] usbhid 4-1:0.0: can't add hid device: -71 [ 258.604941][ T990] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 258.632535][ T990] usb 4-1: USB disconnect, device number 7 [ 258.812272][ T7020] chnl_net:caif_netlink_parms(): no params data found [ 259.509008][ T5845] Bluetooth: hci5: command tx timeout [ 260.769385][ T1231] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 261.100343][ T1231] usb 1-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 261.100387][ T1231] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 261.100407][ T1231] usb 1-1: Product: syz [ 261.100420][ T1231] usb 1-1: Manufacturer: syz [ 261.100433][ T1231] usb 1-1: SerialNumber: syz [ 261.976820][ T1231] usb 1-1: config 0 descriptor?? [ 262.205989][ T1231] usb-storage 1-1:0.0: USB Mass Storage device detected [ 262.309286][ T7020] bridge0: port 1(bridge_slave_0) entered blocking state [ 262.314364][ T7020] bridge0: port 1(bridge_slave_0) entered disabled state [ 262.316914][ T7020] bridge_slave_0: entered allmulticast mode [ 262.380104][ T7020] bridge_slave_0: entered promiscuous mode [ 263.669242][ T1231] usb 1-1: USB disconnect, device number 8 [ 264.193737][ T7020] bridge0: port 2(bridge_slave_1) entered blocking state [ 264.193884][ T7020] bridge0: port 2(bridge_slave_1) entered disabled state [ 264.198236][ T7020] bridge_slave_1: entered allmulticast mode [ 264.231387][ T7020] bridge_slave_1: entered promiscuous mode [ 266.749106][ T93] bridge_slave_1: left allmulticast mode [ 266.749271][ T93] bridge_slave_1: left promiscuous mode [ 266.749863][ T93] bridge0: port 2(bridge_slave_1) entered disabled state [ 266.935683][ T93] bridge_slave_0: left allmulticast mode [ 266.935716][ T93] bridge_slave_0: left promiscuous mode [ 266.935989][ T93] bridge0: port 1(bridge_slave_0) entered disabled state [ 267.107493][ T7159] mmap: syz.3.300 (7159) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 270.649934][ T93] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 270.709657][ T93] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 270.734252][ T93] bond0 (unregistering): Released all slaves [ 271.219711][ T7020] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 271.663057][ C0] vkms_vblank_simulate: vblank timer overrun [ 272.076656][ C0] vkms_vblank_simulate: vblank timer overrun [ 272.529502][ C0] vkms_vblank_simulate: vblank timer overrun [ 272.606299][ C0] vkms_vblank_simulate: vblank timer overrun [ 273.196937][ T7020] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 273.575579][ C0] vkms_vblank_simulate: vblank timer overrun [ 274.342812][ C0] vkms_vblank_simulate: vblank timer overrun [ 274.705767][ C0] vkms_vblank_simulate: vblank timer overrun [ 275.013759][ C0] vkms_vblank_simulate: vblank timer overrun [ 276.594135][ T7020] team0: Port device team_slave_0 added [ 276.621264][ T7020] team0: Port device team_slave_1 added [ 276.909071][ T5925] usb 1-1: new full-speed USB device number 9 using dummy_hcd [ 277.060673][ T5925] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 277.060695][ T5925] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 277.060718][ T5925] usb 1-1: New USB device found, idVendor=054c, idProduct=0ba0, bcdDevice= 0.00 [ 277.060730][ T5925] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 277.066013][ T5925] usb 1-1: config 0 descriptor?? [ 277.066695][ T7211] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 277.258990][ T93] hsr_slave_0: left promiscuous mode [ 277.299246][ T93] hsr_slave_1: left promiscuous mode [ 277.304018][ T93] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 277.398056][ T93] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 277.512302][ T5925] usbhid 1-1:0.0: can't add hid device: -71 [ 277.512426][ T5925] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 277.565973][ T5925] usb 1-1: USB disconnect, device number 9 [ 280.609075][ T5937] usb 1-1: new full-speed USB device number 10 using dummy_hcd [ 280.762993][ T5937] usb 1-1: config index 0 descriptor too short (expected 19492, got 36) [ 280.763024][ T5937] usb 1-1: config 0 has too many interfaces: 36, using maximum allowed: 32 [ 280.763043][ T5937] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 36 [ 280.763099][ T5937] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 280.763128][ T5937] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 280.763151][ T5937] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 280.763193][ T5937] usb 1-1: New USB device found, idVendor=046d, idProduct=c225, bcdDevice= 0.00 [ 280.763215][ T5937] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 280.770414][ T5937] usb 1-1: config 0 descriptor?? [ 281.212318][ T5925] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 281.218564][ T5937] usbhid 1-1:0.0: can't add hid device: -71 [ 281.218687][ T5937] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 281.246846][ T5937] usb 1-1: USB disconnect, device number 10 [ 281.359110][ T5925] usb 4-1: Using ep0 maxpacket: 32 [ 281.361283][ T5925] usb 4-1: config 0 has no interfaces? [ 281.361318][ T5925] usb 4-1: New USB device found, idVendor=05ac, idProduct=0265, bcdDevice= 0.00 [ 281.361341][ T5925] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 281.399445][ T5925] usb 4-1: config 0 descriptor?? [ 281.610809][ T7239] netlink: 8 bytes leftover after parsing attributes in process `syz.3.322'. [ 281.610834][ T7239] netlink: 8 bytes leftover after parsing attributes in process `syz.3.322'. [ 281.984909][ T93] team0 (unregistering): Port device team_slave_1 removed [ 282.199486][ T93] team0 (unregistering): Port device team_slave_0 removed [ 284.453845][ T7020] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 284.453857][ T7020] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 284.453872][ T7020] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 284.564843][ T7020] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 284.564859][ T7020] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 284.564886][ T7020] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 284.678626][ T5918] usb 4-1: USB disconnect, device number 8 [ 285.116323][ T5937] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 286.171642][ T5937] usb 1-1: config 0 interface 0 altsetting 251 has an invalid descriptor for endpoint zero, skipping [ 286.171671][ T5937] usb 1-1: config 0 interface 0 has no altsetting 0 [ 286.176418][ T5937] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 286.176449][ T5937] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 286.176469][ T5937] usb 1-1: Product: syz [ 286.176483][ T5937] usb 1-1: Manufacturer: syz [ 286.176498][ T5937] usb 1-1: SerialNumber: syz [ 286.280946][ T5937] usb 1-1: config 0 descriptor?? [ 287.003434][ T7266] trusted_key: encrypted_key: key user:syz not found [ 288.522726][ T7020] hsr_slave_0: entered promiscuous mode [ 288.524165][ T7020] hsr_slave_1: entered promiscuous mode [ 288.529069][ T7020] debugfs: 'hsr0' already exists in 'hsr' [ 288.529095][ T7020] Cannot create hsr debugfs directory [ 288.639047][ T5918] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 289.075037][ T7276] trusted_key: encrypted_key: key user:syz not found [ 289.722879][ T5918] usb 4-1: Using ep0 maxpacket: 8 [ 289.915295][ T5918] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 289.915321][ T5918] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 289.915337][ T5918] usb 4-1: Product: syz [ 289.915349][ T5918] usb 4-1: Manufacturer: syz [ 289.915362][ T5918] usb 4-1: SerialNumber: syz [ 289.955790][ T5918] usb 4-1: config 0 descriptor?? [ 289.960191][ T5937] snd-usb-audio 1-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 290.001389][ T5937] usb 1-1: USB disconnect, device number 11 [ 290.115879][ T6126] udevd[6126]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 290.261441][ T5918] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 291.240885][ T31] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 292.539010][ T31] usb 1-1: Using ep0 maxpacket: 32 [ 292.542896][ T31] usb 1-1: config 0 has no interfaces? [ 292.542931][ T31] usb 1-1: New USB device found, idVendor=05ac, idProduct=0265, bcdDevice= 0.00 [ 292.542954][ T31] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 292.566983][ T31] usb 1-1: config 0 descriptor?? [ 292.644797][ T5918] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 292.664453][ T5918] usb 4-1: USB disconnect, device number 9 [ 292.797469][ T7294] netlink: 8 bytes leftover after parsing attributes in process `syz.0.336'. [ 292.797496][ T7294] netlink: 8 bytes leftover after parsing attributes in process `syz.0.336'. [ 292.958459][ T5926] usb 1-1: USB disconnect, device number 12 [ 293.496885][ T7320] netlink: 36 bytes leftover after parsing attributes in process `syz.1.342'. [ 295.245078][ T7020] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 296.609266][ T7020] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 296.709324][ T7020] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 296.771491][ T7020] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 299.175985][ T7020] 8021q: adding VLAN 0 to HW filter on device bond0 [ 299.213336][ T7020] 8021q: adding VLAN 0 to HW filter on device team0 [ 299.243552][ T67] bridge0: port 1(bridge_slave_0) entered blocking state [ 299.243789][ T67] bridge0: port 1(bridge_slave_0) entered forwarding state [ 299.285314][ T67] bridge0: port 2(bridge_slave_1) entered blocking state [ 299.285561][ T67] bridge0: port 2(bridge_slave_1) entered forwarding state [ 299.440238][ T5826] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 300.639021][ T5826] usb 4-1: Using ep0 maxpacket: 32 [ 300.641459][ T5826] usb 4-1: config 0 has no interfaces? [ 300.641494][ T5826] usb 4-1: New USB device found, idVendor=05ac, idProduct=0265, bcdDevice= 0.00 [ 300.641518][ T5826] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 300.673016][ T5826] usb 4-1: config 0 descriptor?? [ 300.901383][ T7374] netlink: 8 bytes leftover after parsing attributes in process `syz.3.352'. [ 300.901411][ T7374] netlink: 8 bytes leftover after parsing attributes in process `syz.3.352'. [ 302.294468][ T5826] usb 4-1: USB disconnect, device number 10 [ 302.794147][ T7406] netlink: 'syz.1.359': attribute type 16 has an invalid length. [ 302.794172][ T7406] netlink: 4 bytes leftover after parsing attributes in process `syz.1.359'. [ 303.586095][ T7413] fuse: Bad value for 'rootmode' [ 303.851586][ T7020] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 310.481361][ T7448] [ 310.481373][ T7448] ===================================== [ 310.481379][ T7448] WARNING: bad unlock balance detected! [ 310.481399][ T7448] syzkaller #0 Not tainted [ 310.481409][ T7448] ------------------------------------- [ 310.481415][ T7448] syz.2.367/7448 is trying to release lock (&sighand->siglock) at: [ 310.481443][ T7448] [] copy_process+0x2697/0x3ae0 [ 310.481479][ T7448] but there are no more locks to release! [ 310.481485][ T7448] [ 310.481485][ T7448] other info that might help us debug this: [ 310.481492][ T7448] 1 lock held by syz.2.367/7448: [ 310.481502][ T7448] #0: ffffffff8d9e0a30 (cgroup_threadgroup_rwsem){++++}-{0:0}, at: copy_process+0x2034/0x3ae0 [ 310.481549][ T7448] [ 310.481549][ T7448] stack backtrace: [ 310.481569][ T7448] CPU: 0 UID: 0 PID: 7448 Comm: syz.2.367 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 310.481590][ T7448] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 310.481609][ T7448] Call Trace: [ 310.481615][ T7448] [ 310.481623][ T7448] dump_stack_lvl+0x189/0x250 [ 310.481650][ T7448] ? __pfx_dump_stack_lvl+0x10/0x10 [ 310.481675][ T7448] ? __pfx__printk+0x10/0x10 [ 310.481697][ T7448] ? copy_process+0x2697/0x3ae0 [ 310.481720][ T7448] print_unlock_imbalance_bug+0xdc/0xf0 [ 310.481748][ T7448] lock_release+0x269/0x3e0 [ 310.481770][ T7448] ? copy_process+0x2697/0x3ae0 [ 310.481793][ T7448] rt_spin_unlock+0x16/0x80 [ 310.481815][ T7448] copy_process+0x2697/0x3ae0 [ 310.481842][ T7448] ? copy_process+0x979/0x3ae0 [ 310.481869][ T7448] ? __pfx_copy_process+0x10/0x10 [ 310.481893][ T7448] ? __asan_memset+0x22/0x50 [ 310.481914][ T7448] kernel_clone+0x224/0x7c0 [ 310.481939][ T7448] ? __pfx_kernel_clone+0x10/0x10 [ 310.481965][ T7448] ? __lock_acquire+0xab9/0xd20 [ 310.481991][ T7448] __se_sys_clone3+0x256/0x2d0 [ 310.482015][ T7448] ? __might_fault+0xb0/0x130 [ 310.482041][ T7448] ? __pfx___se_sys_clone3+0x10/0x10 [ 310.482072][ T7448] ? _copy_to_user+0x8a/0xb0 [ 310.482099][ T7448] ? do_user_addr_fault+0xc8a/0x1390 [ 310.482122][ T7448] ? do_syscall_64+0xbe/0x3b0 [ 310.482139][ T7448] do_syscall_64+0xfa/0x3b0 [ 310.482154][ T7448] ? lockdep_hardirqs_on+0x9c/0x150 [ 310.482178][ T7448] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 310.482195][ T7448] ? clear_bhb_loop+0x60/0xb0 [ 310.482215][ T7448] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 310.482232][ T7448] RIP: 0033:0x7f37bc273449 [ 310.482252][ T7448] Code: d7 08 00 48 8d 3d fc d7 08 00 e8 e2 28 f6 ff 66 90 b8 ea ff ff ff 48 85 ff 74 2c 48 85 d2 74 27 49 89 c8 b8 b3 01 00 00 0f 05 <48> 85 c0 7c 18 74 01 c3 31 ed 48 83 e4 f0 4c 89 c7 ff d2 48 89 c7 [ 310.482266][ T7448] RSP: 002b:00007fff5bf5d9b8 EFLAGS: 00000206 ORIG_RAX: 00000000000001b3 [ 310.482284][ T7448] RAX: ffffffffffffffda RBX: 00007f37bc1f5830 RCX: 00007f37bc273449 [ 310.482298][ T7448] RDX: 00007f37bc1f5830 RSI: 0000000000000058 RDI: 00007fff5bf5da00 [ 310.482310][ T7448] RBP: 00007f37ba4a66c0 R08: 00007f37ba4a66c0 R09: 00007fff5bf5dae7 [ 310.482324][ T7448] R10: 0000000000000008 R11: 0000000000000206 R12: ffffffffffffffa8 [ 310.482336][ T7448] R13: 000000000000000b R14: 00007fff5bf5da00 R15: 00007fff5bf5dae8 [ 310.482355][ T7448] [ 310.482467][ T7448] ------------[ cut here ]------------ [ 310.482477][ T7448] WARNING: CPU: 0 PID: 7448 at kernel/sched/core.c:2418 migrate_enable+0x30e/0x3c0 [ 310.482506][ T7448] Modules linked in: [ 310.482519][ T7448] CPU: 0 UID: 0 PID: 7448 Comm: syz.2.367 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 310.482539][ T7448] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 310.482549][ T7448] RIP: 0010:migrate_enable+0x30e/0x3c0 [ 310.482571][ T7448] Code: 00 00 00 65 48 8b 05 01 f2 65 10 48 3b 84 24 a0 00 00 00 75 46 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc 90 <0f> 0b 90 49 bc 00 00 00 00 00 fc ff df eb af 89 d1 80 e1 07 fe c1 [ 310.482585][ T7448] RSP: 0018:ffffc90003b4f8a0 EFLAGS: 00010246 [ 310.482600][ T7448] RAX: 0000000000000000 RBX: 1ffff110054fdbb0 RCX: dffffc0000000000 [ 310.482613][ T7448] RDX: ffff88802a7edd80 RSI: ffffffff8d21a336 RDI: ffffffff8b621000 [ 310.482627][ T7448] RBP: ffffc90003b4f9a0 R08: 0000000000000000 R09: 0000000000000000 [ 310.482638][ T7448] R10: dffffc0000000000 R11: fffffbfff1b10884 R12: ffff88802a7edd70 [ 310.482652][ T7448] R13: 1ffff92000769f1c R14: ffff88802a7ed940 R15: 0000000000000000 [ 310.482665][ T7448] FS: 000055555d102500(0000) GS:ffff8881268bf000(0000) knlGS:0000000000000000 [ 310.482681][ T7448] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 310.482694][ T7448] CR2: 00007f80dd0356c0 CR3: 000000003fa50000 CR4: 00000000003526f0 [ 310.482710][ T7448] Call Trace: [ 310.482716][ T7448] [ 310.482726][ T7448] ? __pfx_migrate_enable+0x10/0x10 [ 310.482751][ T7448] ? copy_process+0x2697/0x3ae0 [ 310.482775][ T7448] rt_spin_unlock+0x1b/0x80 [ 310.482795][ T7448] copy_process+0x2697/0x3ae0 [ 310.482822][ T7448] ? copy_process+0x979/0x3ae0 [ 310.482849][ T7448] ? __pfx_copy_process+0x10/0x10 [ 310.482872][ T7448] ? __asan_memset+0x22/0x50 [ 310.482892][ T7448] kernel_clone+0x224/0x7c0 [ 310.482917][ T7448] ? __pfx_kernel_clone+0x10/0x10 [ 310.482944][ T7448] ? __lock_acquire+0xab9/0xd20 [ 310.482969][ T7448] __se_sys_clone3+0x256/0x2d0 [ 310.482994][ T7448] ? __might_fault+0xb0/0x130 [ 310.483019][ T7448] ? __pfx___se_sys_clone3+0x10/0x10 [ 310.483050][ T7448] ? _copy_to_user+0x8a/0xb0 [ 310.483076][ T7448] ? do_user_addr_fault+0xc8a/0x1390 [ 310.483098][ T7448] ? do_syscall_64+0xbe/0x3b0 [ 310.483116][ T7448] do_syscall_64+0xfa/0x3b0 [ 310.483131][ T7448] ? lockdep_hardirqs_on+0x9c/0x150 [ 310.483155][ T7448] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 310.483172][ T7448] ? clear_bhb_loop+0x60/0xb0 [ 310.483192][ T7448] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 310.483210][ T7448] RIP: 0033:0x7f37bc273449 [ 310.483223][ T7448] Code: d7 08 00 48 8d 3d fc d7 08 00 e8 e2 28 f6 ff 66 90 b8 ea ff ff ff 48 85 ff 74 2c 48 85 d2 74 27 49 89 c8 b8 b3 01 00 00 0f 05 <48> 85 c0 7c 18 74 01 c3 31 ed 48 83 e4 f0 4c 89 c7 ff d2 48 89 c7 [ 310.483237][ T7448] RSP: 002b:00007fff5bf5d9b8 EFLAGS: 00000206 ORIG_RAX: 00000000000001b3 [ 310.483254][ T7448] RAX: ffffffffffffffda RBX: 00007f37bc1f5830 RCX: 00007f37bc273449 [ 310.483268][ T7448] RDX: 00007f37bc1f5830 RSI: 0000000000000058 RDI: 00007fff5bf5da00 [ 310.483280][ T7448] RBP: 00007f37ba4a66c0 R08: 00007f37ba4a66c0 R09: 00007fff5bf5dae7 [ 310.483293][ T7448] R10: 0000000000000008 R11: 0000000000000206 R12: ffffffffffffffa8 [ 310.483305][ T7448] R13: 000000000000000b R14: 00007fff5bf5da00 R15: 00007fff5bf5dae8 [ 310.483324][ T7448] [ 310.483338][ T7448] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 310.483351][ T7448] CPU: 0 UID: 0 PID: 7448 Comm: syz.2.367 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 310.483372][ T7448] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 310.483382][ T7448] Call Trace: [ 310.483388][ T7448] [ 310.483401][ T7448] dump_stack_lvl+0x99/0x250 [ 310.483426][ T7448] ? __asan_memcpy+0x40/0x70 [ 310.483444][ T7448] ? __pfx_dump_stack_lvl+0x10/0x10 [ 310.483469][ T7448] ? __pfx__printk+0x10/0x10 [ 310.483492][ T7448] vpanic+0x281/0x750 [ 310.483517][ T7448] ? __pfx__printk+0x10/0x10 [ 310.483534][ T7448] ? __pfx_vpanic+0x10/0x10 [ 310.483559][ T7448] ? is_bpf_text_address+0x26/0x2b0 [ 310.483587][ T7448] panic+0xb9/0xc0 [ 310.483611][ T7448] ? __pfx_panic+0x10/0x10 [ 310.483640][ T7448] __warn+0x31b/0x4b0 [ 310.483664][ T7448] ? migrate_enable+0x30e/0x3c0 [ 310.483686][ T7448] ? migrate_enable+0x30e/0x3c0 [ 310.483706][ T7448] report_bug+0x2be/0x4f0 [ 310.483730][ T7448] ? migrate_enable+0x30e/0x3c0 [ 310.483751][ T7448] ? migrate_enable+0x30e/0x3c0 [ 310.483772][ T7448] ? migrate_enable+0x310/0x3c0 [ 310.483792][ T7448] handle_bug+0x84/0x160 [ 310.483810][ T7448] exc_invalid_op+0x1a/0x50 [ 310.483828][ T7448] asm_exc_invalid_op+0x1a/0x20 [ 310.483844][ T7448] RIP: 0010:migrate_enable+0x30e/0x3c0 [ 310.483866][ T7448] Code: 00 00 00 65 48 8b 05 01 f2 65 10 48 3b 84 24 a0 00 00 00 75 46 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc 90 <0f> 0b 90 49 bc 00 00 00 00 00 fc ff df eb af 89 d1 80 e1 07 fe c1 [ 310.483880][ T7448] RSP: 0018:ffffc90003b4f8a0 EFLAGS: 00010246 [ 310.483895][ T7448] RAX: 0000000000000000 RBX: 1ffff110054fdbb0 RCX: dffffc0000000000 [ 310.483908][ T7448] RDX: ffff88802a7edd80 RSI: ffffffff8d21a336 RDI: ffffffff8b621000 [ 310.483922][ T7448] RBP: ffffc90003b4f9a0 R08: 0000000000000000 R09: 0000000000000000 [ 310.483934][ T7448] R10: dffffc0000000000 R11: fffffbfff1b10884 R12: ffff88802a7edd70 [ 310.483948][ T7448] R13: 1ffff92000769f1c R14: ffff88802a7ed940 R15: 0000000000000000 [ 310.483971][ T7448] ? __pfx_migrate_enable+0x10/0x10 [ 310.483996][ T7448] ? copy_process+0x2697/0x3ae0 [ 310.484020][ T7448] rt_spin_unlock+0x1b/0x80 [ 310.484041][ T7448] copy_process+0x2697/0x3ae0 [ 310.484068][ T7448] ? copy_process+0x979/0x3ae0 [ 310.484095][ T7448] ? __pfx_copy_process+0x10/0x10 [ 310.484119][ T7448] ? __asan_memset+0x22/0x50 [ 310.484139][ T7448] kernel_clone+0x224/0x7c0 [ 310.484164][ T7448] ? __pfx_kernel_clone+0x10/0x10 [ 310.484191][ T7448] ? __lock_acquire+0xab9/0xd20 [ 310.484217][ T7448] __se_sys_clone3+0x256/0x2d0 [ 310.484241][ T7448] ? __might_fault+0xb0/0x130 [ 310.484266][ T7448] ? __pfx___se_sys_clone3+0x10/0x10 [ 310.484297][ T7448] ? _copy_to_user+0x8a/0xb0 [ 310.484324][ T7448] ? do_user_addr_fault+0xc8a/0x1390 [ 310.484347][ T7448] ? do_syscall_64+0xbe/0x3b0 [ 310.484365][ T7448] do_syscall_64+0xfa/0x3b0 [ 310.484380][ T7448] ? lockdep_hardirqs_on+0x9c/0x150 [ 310.484410][ T7448] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 310.484428][ T7448] ? clear_bhb_loop+0x60/0xb0 [ 310.484447][ T7448] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 310.484465][ T7448] RIP: 0033:0x7f37bc273449 [ 310.484478][ T7448] Code: d7 08 00 48 8d 3d fc d7 08 00 e8 e2 28 f6 ff 66 90 b8 ea ff ff ff 48 85 ff 74 2c 48 85 d2 74 27 49 89 c8 b8 b3 01 00 00 0f 05 <48> 85 c0 7c 18 74 01 c3 31 ed 48 83 e4 f0 4c 89 c7 ff d2 48 89 c7 [ 310.484493][ T7448] RSP: 002b:00007fff5bf5d9b8 EFLAGS: 00000206 ORIG_RAX: 00000000000001b3 [ 310.484510][ T7448] RAX: ffffffffffffffda RBX: 00007f37bc1f5830 RCX: 00007f37bc273449 [ 310.484524][ T7448] RDX: 00007f37bc1f5830 RSI: 0000000000000058 RDI: 00007fff5bf5da00 [ 310.484536][ T7448] RBP: 00007f37ba4a66c0 R08: 00007f37ba4a66c0 R09: 00007fff5bf5dae7 [ 310.484550][ T7448] R10: 0000000000000008 R11: 0000000000000206 R12: ffffffffffffffa8 [ 310.484562][ T7448] R13: 000000000000000b R14: 00007fff5bf5da00 R15: 00007fff5bf5dae8 [ 310.484581][ T7448] [ 310.484727][ T7448] Kernel Offset: disabled