last executing test programs: 54.622709405s ago: executing program 2 (id=3): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000002880)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) read$FUSE(r0, &(0x7f0000000100)={0x2020, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000002200)={0x50, 0x0, r1, {0x7, 0x27, 0x0, 0x100018, 0x0, 0x0, 0x37d8}}, 0x50) setxattr$system_posix_acl(&(0x7f0000002540)='./file0\x00', &(0x7f0000002580)='system.posix_acl_default\x00', &(0x7f0000002140)={{}, {}, [{0x2, 0x1, r2}], {}, [], {0x10, 0x1}}, 0x2c, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000480)={0x0, 0x0}, &(0x7f00000000c0)=0x839352b8218490eb) setreuid(r5, 0xffffffffffffffff) quotactl_fd$Q_GETFMT(r3, 0xffffffff80000401, r5, &(0x7f0000000000)) r6 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001540)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0xd}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x4, 0x1, {0x0, 0xb, 0x1}}}}]}, 0x40}}, 0x0) r8 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x5a280, 0x0) close(r8) ioctl$KVM_CHECK_EXTENSION(r9, 0xae01, 0x1) socket$inet_udp(0x2, 0x2, 0x0) r10 = syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00') read$FUSE(r10, &(0x7f0000000280)={0x2020}, 0x2020) socket$key(0xf, 0x3, 0x2) r11 = socket$packet(0x11, 0x3, 0x300) syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)={{0x12, 0x1, 0x50, 0xa6, 0xc1, 0xf6, 0x40, 0xb05, 0x1790, 0x5c88, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x3, 0x1, 0xd0, 0xe0, [{{0x9, 0x4, 0x68, 0x4, 0x0, 0x62, 0x35, 0xbb, 0x7, [@uac_control={{0xa, 0x24, 0x1, 0x400, 0x3}}]}}]}}]}}, 0x0) ioctl$sock_TIOCINQ(r11, 0x541b, &(0x7f0000004640)) syz_kvm_setup_cpu$x86(r8, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000640)=[@text64={0x40, 0x0}], 0x1, 0x40, 0x0, 0x0) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r8, 0x4020aed2, &(0x7f0000000040)={0x0, 0x38d000, 0x8}) 51.34123534s ago: executing program 2 (id=16): mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r0 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) r1 = landlock_create_ruleset(&(0x7f00000000c0)={0x8120, 0x2}, 0x18, 0x0) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) ptrace$setregs(0xd, r2, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") ptrace$getregset(0x4205, r2, 0x200, &(0x7f0000000080)={&(0x7f00000000c0)=""/112, 0x70}) landlock_restrict_self(r1, 0x0) 50.624275452s ago: executing program 2 (id=18): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'team_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r3, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000e40)={0x1038, r4, 0x1, 0x5, 0x25dfdbfe, {{}, {@void, @val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_VENDOR_DATA={0x1004, 0xc5, "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"}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x9}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x99}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x2}]}, 0x1038}, 0x1, 0x0, 0x0, 0x44}, 0x41) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="2000000010000110000100000475000000000000", @ANYRES32=r1, @ANYBLOB="da"], 0x20}}, 0x0) r6 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xe7, 0xcc, 0x61, 0x20, 0x10c4, 0x818a, 0x7d8f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0xc0, 0x5, [{{0x9, 0x4, 0x23, 0x0, 0x0, 0x3}}]}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r6, 0x0, &(0x7f0000000dc0)={0x44, &(0x7f0000000bc0)={0x0, 0x15, 0x3, "c3b437"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x48, 0x0, r1, 0x22a0b}}, 0x20}}, 0x0) 50.383648598s ago: executing program 32 (id=18): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'team_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r3, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000e40)={0x1038, r4, 0x1, 0x5, 0x25dfdbfe, {{}, {@void, @val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_VENDOR_DATA={0x1004, 0xc5, "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"}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x9}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x99}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x2}]}, 0x1038}, 0x1, 0x0, 0x0, 0x44}, 0x41) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="2000000010000110000100000475000000000000", @ANYRES32=r1, @ANYBLOB="da"], 0x20}}, 0x0) r6 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xe7, 0xcc, 0x61, 0x20, 0x10c4, 0x818a, 0x7d8f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0xc0, 0x5, [{{0x9, 0x4, 0x23, 0x0, 0x0, 0x3}}]}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r6, 0x0, &(0x7f0000000dc0)={0x44, &(0x7f0000000bc0)={0x0, 0x15, 0x3, "c3b437"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x48, 0x0, r1, 0x22a0b}}, 0x20}}, 0x0) 39.592367921s ago: executing program 3 (id=62): r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x40400, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0xc00, 0x0) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r3, 0x3ba0, &(0x7f00000003c0)={0x48, 0xc, 0x0, 0x0, 0x0, 0x200000000}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000200)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_COPY(r2, 0x3b83, &(0x7f0000000240)={0x28, 0x0, 0x0, r5, 0x26c, 0x9, 0x6}) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@delqdisc={0x2c, 0x25, 0x100, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0xffe0, 0x1}, {0xb, 0xffff}, {0xfff1, 0xc}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x1}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd25, 0x5, {0x0, 0x0, 0x0, r7, {0x0, 0x1}, {}, {0x6}}, [@filter_kind_options=@f_flow={{0x9}, {0x8, 0x2, [@TCA_FLOW_EMATCHES={0x4}]}}]}, 0x38}}, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000100)={{0x1, 0x1, 0x18, r1, {0x6}}, './file0\x00'}) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') 38.440763526s ago: executing program 1 (id=70): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x5a, &(0x7f0000000100)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "ff00f5", 0x24, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x9, 0xc2, 0x0, 0x0, 0x0, {[@mptcp=@add_addr={0x1e, 0xa, 0x5, 0xa, 0x0, @remote}, @mptcp=@ack={0x1e, 0x4}]}}}}}}}}, 0x0) r2 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0xb0, 0x24, 0xf0b, 0x0, 0xfffffffc, {0x0, 0x0, 0x12, r3, {}, {0xffff, 0xffff}, {0x1, 0x8}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x80, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [], 0x0, [0x8, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81], [0x0, 0x8, 0x4, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x24, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}]}, {0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x7ffffffe}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0xdea}]}]}]}}]}, 0xb0}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000000000000b2000040"]) syz_usb_connect(0x5, 0x5e, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000c291492099042a102d850102030109024c0001000010000904000b2402010302057ff49bfd052406000105240000080624037f000109050602ff"], 0x0) 38.409024281s ago: executing program 3 (id=71): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010009000000401904000600000000000109022400010000000009040000010300000009210000000111050009058103", @ANYRES8], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0xffffffffffffff37, 0x0, 0x0, &(0x7f0000000280)={0x0, 0x22, 0xb}, 0x0}, 0x0) 37.796219271s ago: executing program 5 (id=19): r0 = syz_clone(0x88200, 0x0, 0x0, 0x0, 0x0, 0x0) syz_pidfd_open(r0, 0x0) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000258f88)={{0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, r0}) r1 = inotify_init() inotify_add_watch(r1, &(0x7f0000000000)='.\x00', 0x400017e) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0xb) read$FUSE(r1, &(0x7f0000001fc0)={0x2020}, 0x2020) r2 = socket$nl_route(0x10, 0x3, 0x0) symlink(0x0, &(0x7f00000017c0)='./file0\x00') syz_io_uring_setup(0x109, &(0x7f0000000140)={0x0, 0x48f0, 0x0, 0x3, 0x89}, &(0x7f00000003c0), &(0x7f0000000280)) r3 = syz_open_dev$sndpcmp(&(0x7f0000000b00), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r3, 0xc2604111, &(0x7f0000000540)={0x0, [[0x223, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000], [0xfffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x3]], '\x00', [{}, {0x0, 0xffffffff, 0x0, 0x1}, {0x0, 0x200000}, {}, {}, {}, {}, {0x0, 0x1}]}) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$BTRFS_IOC_GET_FEATURES(r2, 0x80189439, &(0x7f0000000080)) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000009593d1044062180b738010203010902120001000000000904"], 0x0) r5 = socket$packet(0x11, 0x0, 0x300) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000100)=0xffffffff, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000980)={'wg2\x00', 0x0}) ioctl$VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000200)={0xd, 0xa, 0x1, "26b7c5bacabe7af984d3e5cc46077393abb5585550a29fa4174e5e93857a569c", 0x30324c4a}) sendto$packet(r5, &(0x7f0000000180)="0b031407e0ff14000200475412f6a13bb1000e06890008004803", 0x10000, 0x0, &(0x7f0000000140)={0x11, 0x0, r6}, 0x14) r7 = socket$nl_route(0x10, 0x3, 0x0) fanotify_init(0x1200, 0x0) r8 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_TSS_ADDR(r8, 0xae47, 0xd000) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000040)={'vxcan0\x00', 0x0}) r10 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r10, 0x65, 0x1, &(0x7f0000000240)=[{{0x2}, {0x2, 0x1, 0x1, 0x1}}, {{0x2, 0x0, 0x1, 0x1}, {0x1, 0x1}}, {{0x0, 0x1, 0x0, 0x1}, {0x3, 0x0, 0x0, 0x1}}], 0x18) bind$can_raw(r10, &(0x7f0000000280)={0x1d, r9}, 0x10) ioctl$EXT4_IOC_MOVE_EXT(r7, 0xc028660f, &(0x7f0000000000)={0x0, r8, 0x0, 0x100000000, 0x8, 0x5}) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=@getchain={0x24, 0x11, 0x1, 0x0, 0x2000000, {0x0, 0x0, 0x0, r9, {0x7}, {0x9}, {0x1}}}, 0x24}}, 0x40044) 37.20275084s ago: executing program 3 (id=73): r0 = socket(0x10, 0x3, 0x0) r1 = syz_open_dev$evdev(&(0x7f00000010c0), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r1, 0x80104592, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, "00207d2000000000201b14700c1e0ac74f000000001200000000000900"}) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000000c0)={0xfffffbfb, 0x0, 0x4, 0xff}, 0x10) (async) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000000c0)={0xfffffbfb, 0x0, 0x4, 0xff}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2400000012009702000000000000000007000000de"], 0x24}}, 0x4000) 37.033110554s ago: executing program 4 (id=74): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000300)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r0, &(0x7f0000000300)=[{0x84, 0x77, 0x0, 0x0, @tick, {0xfd}, {0x7}, @raw32={[0x2, 0x0, 0x8000000]}}, {0x6, 0x3, 0x9, 0x3, @tick=0x1, {0x10, 0x5}, {0xc, 0x2}, @control={0x3, 0x7, 0x7fff}}, {0x8, 0x3, 0x6, 0x4, @tick=0x9, {0xbb, 0x3}, {0xdb}, @note={0xfc, 0x10, 0x7, 0x6, 0x7}}], 0x54) writev(0xffffffffffffffff, 0x0, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, 0x0, 0xa8c01) write$sndseq(r1, &(0x7f0000000080)=[{0x1e, 0x0, 0x8, 0xfd, @tick=0x8, {}, {}, @result}], 0x1c) 36.712235123s ago: executing program 3 (id=75): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @loopback}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_connect(0x2, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0xe0, 0x4d, 0xb7, 0x20, 0x61d, 0xc150, 0xd0dd, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x5, 0x48, 0x10, 0x8, [{{0x9, 0x4, 0x90, 0x2, 0x0, 0x9c, 0xc5, 0xb9, 0x7}}]}}]}}, 0x0) setsockopt$inet_tcp_TLS_TX(r2, 0x6, 0x1, &(0x7f00000001c0)=@gcm_128={{0x303}, "d428d493b54539b9", "62714b65e42465c5518ccb9d7c403972", "2cbdb9e9"}, 0x28) 36.639862126s ago: executing program 0 (id=76): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000480), 0x10) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x448}}, 0x0) sendmmsg$inet(r0, &(0x7f0000001b00)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000080)="050000007402b8f4191db62b", 0xc}, {&(0x7f0000000180)="9f336d70bf0008000000000000e388fb2c4f7ede37e7de1f2a1cfb06b88038c6ffbf07e70873b0384d", 0x29}], 0x2}}, {{0x0, 0x0, &(0x7f0000000100)}}], 0x2, 0x0) 36.476411127s ago: executing program 4 (id=77): r0 = socket$inet(0x2, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ppoll(&(0x7f00000003c0)=[{r2, 0x2244}], 0x1, 0x0, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000f40)={&(0x7f0000000f80)=ANY=[@ANYBLOB="3400fe0b", @ANYRES16=r4, @ANYBLOB="01072bbd7000fcdbdf25340000000e0001006e657464657673696d0000000f0002006e657464657673696d300000"], 0x34}, 0x1, 0x0, 0x0, 0x2000004}, 0x0) sendmsg$DEVLINK_CMD_SB_GET(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x38, r4, 0x400, 0x70bd2d, 0x25dfdbff, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x80000001}}]}, 0x38}, 0x1, 0x0, 0x0, 0xc000}, 0x20020040) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0xaf}, [@ldst={0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x3, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@ipv4_newnexthop={0x24, 0x68, 0x109, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}, @NHA_ENCAP_TYPE={0x6, 0x7, 0x7}]}, 0x24}}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) setsockopt$sock_int(r5, 0x1, 0x4, 0x0, 0x0) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000000040)=0x7, 0x4) bind$inet(r0, &(0x7f0000000500)={0x2, 0x2, @loopback}, 0x10) r7 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r7, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0xfffffffd, @local, 0xfffffffd}}, {{0xa, 0x4e24, 0x6b4, @private1, 0x2}}}, 0x108) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) setsockopt$inet6_group_source_req(r7, 0x29, 0x2b, &(0x7f0000000680)={0x0, {{0xa, 0x4e20, 0x0, @mcast1={0xff, 0x7}, 0x9}}, {{0xa, 0x4e26, 0xffffffff, @local, 0xdc1}}}, 0x108) 36.424442938s ago: executing program 1 (id=78): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, 0x0, 0x0) 36.139840982s ago: executing program 1 (id=79): r0 = syz_open_dev$loop(&(0x7f0000000100), 0xd79, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) sendmsg$NFT_MSG_GETFLOWTABLE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="78000000170a0101000000a79d83eca4ea51a64c00000000000700000a09000200000000000900020073797a304bdb00040900020073797a300000000040000380080001400000000008000240000000092c00038014000100db657468315f746f5f7465616d000000140001007465616d5f736c00000000"], 0x78}, 0x1, 0x0, 0x0, 0x4040}, 0xc054) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00"}}) 36.047787064s ago: executing program 4 (id=80): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0xc, 0x4c831, 0xffffffffffffffff, 0x1ab93000) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x3) 35.636367691s ago: executing program 1 (id=81): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x4004040}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x2e, &(0x7f0000000740)={&(0x7f0000000500)=ANY=[@ANYBLOB="280000001d00090000766c4cf0e9d6d40f000000140001800f00"], 0x28}}, 0x4000000) sendmsg$nl_crypto(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f0000000640)=ANY=[@ANYBLOB="e80000001100000828bd7000fbdbdf25736861332d3235360000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001f2ef8f678d6ed3f0000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000002400000000000000000000000000000800010008000000"], 0xe8}, 0x1, 0x0, 0x0, 0x40010}, 0x4000091) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=ANY=[@ANYBLOB="b70000000000feff4d0000000000000040000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xb579, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x23) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') lseek(r3, 0x9, 0x0) (async) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f0000000100)={0x0, 0x0}) r5 = fcntl$getown(r2, 0x9) setpgid(r4, r5) (async) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x40c}, 0x1, 0x0, 0x0, 0x44}, 0x0) (async) r6 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r6, 0x4040ae77, &(0x7f0000000040)={0x7}) 35.526387278s ago: executing program 0 (id=82): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x141180, 0x0) ioctl$BLKZEROOUT(r1, 0x127f, &(0x7f0000000240)={0x1000000, 0x1000000}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000015c0)=ANY=[@ANYBLOB="5c0000001000010026bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="0221000000000000140003006e657464657673696d3000000000000008000a00", @ANYRES32=0x0, @ANYBLOB="200016801c00018018000c"], 0x5c}}, 0x24040800) socket$nl_route(0x10, 0x3, 0x0) (async) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x141180, 0x0) (async) ioctl$BLKZEROOUT(r1, 0x127f, &(0x7f0000000240)={0x1000000, 0x1000000}) (async) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000015c0)=ANY=[@ANYBLOB="5c0000001000010026bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="0221000000000000140003006e657464657673696d3000000000000008000a00", @ANYRES32=0x0, @ANYBLOB="200016801c00018018000c"], 0x5c}}, 0x24040800) (async) 35.305409092s ago: executing program 1 (id=83): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100), 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r0, 0x0) r1 = fsopen(&(0x7f0000000280)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000040)='source', &(0x7f0000002280)='//\xf2b\x06\b\xba\xdf/o\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b///\x00\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x97\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8DD\x9bp\x01\xcc:\xa6\xc5n\x9f\xfb\x81 \x10\x0fQ\x90}Zd\xeb\xab\xf70\x99\xef\x8b0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0xa4, 0x24, 0xf0b, 0x0, 0xfffffffc, {0x0, 0x0, 0x12, r3, {}, {0xffff, 0xffff}, {0x1, 0x8}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x74, 0x2, [@TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x7}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [], 0x0, [0x8, 0x4], [0x0, 0x8, 0x0, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0xdea}]}]}]}}]}, 0xa4}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) syz_open_dev$vim2m(&(0x7f0000000100), 0x80000000, 0x2) (async) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) (async) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000080)=0x2) (async) poll(&(0x7f00000000c0)=[{r0, 0x2300}], 0x1, 0x2) (async) socket(0x11, 0x800000003, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000840)='cubic\x00', 0x6) (async) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000600)) (async) socket$netlink(0x10, 0x3, 0x0) (async) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0xa4, 0x24, 0xf0b, 0x0, 0xfffffffc, {0x0, 0x0, 0x12, r3, {}, {0xffff, 0xffff}, {0x1, 0x8}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x74, 0x2, [@TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x7}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [], 0x0, [0x8, 0x4], [0x0, 0x8, 0x0, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0xdea}]}]}]}}]}, 0xa4}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) (async) 34.40460528s ago: executing program 4 (id=89): socket$netlink(0x10, 0x3, 0x0) syz_emit_ethernet(0x62, &(0x7f0000000100)=ANY=[@ANYBLOB="ffffffffffff8eff80ec003108004500005400000000000190780a010101ac1414aa04009078000000004e000003fffcfffd00110000ffff00000003ac141431000000028900f3ac14141900"/90], 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x290, 0x0, 0x18c, 0x203, 0x358, 0x19030000, 0x450, 0x2e0, 0x2e0, 0x450, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0xa8, 0xf0}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00'}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x14, 0x3, 0x200}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2f0) io_setup(0x0, &(0x7f0000000000)) r0 = syz_open_dev$sndpcmc(&(0x7f0000004240), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS64(r0, 0x40084146, &(0x7f0000000080)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@ipv4_getnexthop={0x20, 0x6a, 0x400, 0x70bd29, 0x25dfdbfc, {}, [@NHA_MASTER={0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x4000001) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x20000000000444a, 0x0, &(0x7f0000000180)) socket$nl_generic(0x10, 0x3, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) sysfs$2(0x2, 0x3, &(0x7f0000000000)=""/127) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0x0, 0x4}, {0x1, 0xf}, {0xe, 0x2}}, [@TCA_RATE={0x6, 0x5, {0xfe}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) 33.816323301s ago: executing program 0 (id=90): r0 = socket$igmp6(0xa, 0x3, 0x2) (async, rerun: 64) r1 = socket$pppl2tp(0x18, 0x1, 0x1) (rerun: 64) connect$pppl2tp(r1, &(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, r1, 0x0, 0x2, 0x1, 0x0, {0xa, 0x4e24, 0x9, @empty, 0x1}}}, 0x3a) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001240)={0x8, 0xf, &(0x7f00000003c0)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0920002000000045090100000003709500000000000000bf91000000000000b7020000000000008500000000000000b7000000000000009500000000000000"], &(0x7f0000000200)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={0x1, 0x58, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@ipv6_newaddr={0x20, 0x14, 0x4, 0x70bd25, 0x25dfdbfd, {0xa, 0x38, 0x80, 0xfd, r3}, [@IFA_TARGET_NETNSID={0x8, 0xa, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x200008d4}, 0x0) (async) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x2a8, 0x0, 0xffffffff, 0xffffffff, 0xc8, 0xffffffff, 0x1d8, 0xffffffff, 0xffffffff, 0x1d8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private1={0xfc, 0x1, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, [0xffffff00, 0xffffff00, 0xffffff00, 0xff], [0x0, 0x0, 0xff000000, 0xff], 'gre0\x00', '\x00', {}, {0xff}, 0x0, 0xa, 0x6, 0x4}, 0x0, 0xa8, 0xc8}, @unspec=@NOTRACK={0x20}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x4}, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0xdfacfde2e8efb79, 0xf5c5, 0x8, 0x9, 'syz1\x00', 'syz1\x00', {0x1}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x308) (async, rerun: 64) r4 = socket$inet6(0xa, 0x2, 0x0) (rerun: 64) bind$inet6(r4, &(0x7f0000002c80)={0xa, 0x14e24}, 0x1c) (async, rerun: 32) connect$inet6(r4, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) (async, rerun: 32) sendmmsg(r4, &(0x7f00000092c0), 0x4ff, 0x0) 32.43693701s ago: executing program 5 (id=91): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x4001, 0x3, 0x458, 0x300, 0xb, 0x148, 0x308, 0x148, 0x3c0, 0x230, 0x242, 0x3c0, 0x215, 0x3, 0x0, {[{{@ip={@local, @remote, 0x0, 0x0, 'batadv_slave_0\x00', 'macvtap0\x00', {}, {}, 0x73}, 0x0, 0x2d0, 0x300, 0x0, {0xff0f000000000000}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x8}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0xe, 0x0, 0x6, './file0\x00'}}]}, @common=@inet=@SET2={0x30}}, {{@uncond, 0xec010000, 0xa0, 0xc0, 0x0, {}, [@common=@ah={{0x30}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4b8) r1 = semget$private(0x0, 0x4000000009, 0x208) semop(r1, &(0x7f0000000000)=[{0x0, 0xfffb, 0x1000}, {0x2, 0x7, 0x800}], 0x2) semctl$SETALL(r1, 0x0, 0x11, &(0x7f0000000040)=[0x9]) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc0004}]}) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f0000000040)) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_PIT(r3, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x0, 0x0, 0xfe}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_PIT2(r3, 0x4070aea0, &(0x7f00000002c0)={[{0x0, 0x4, 0x0, 0x0, 0x5a, 0x2, 0x2, 0x0, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}]}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 32.436610241s ago: executing program 0 (id=92): r0 = socket$nl_generic(0x11, 0x3, 0x10) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback}}}}}}, 0x0) sendmsg(r0, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0x36}], 0x2, 0x0, 0x0, 0x11000000}, 0x0) r1 = socket(0x848000000015, 0x805, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e21, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}, 0x733}, 0x1c) r2 = syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) r3 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000340), 0x284082, 0x0) fchdir(r3) utimensat(0xffffffffffffff9c, &(0x7f00000003c0)='.\x00', 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000240)={0x53, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000380), 0x0, 0xfffffffc, 0x6, 0x3, 0x0}) socket$inet6(0xa, 0x200000000003, 0x87) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="090d2000000000f0ff000700000008000300", @ANYRES32=r6, @ANYBLOB="0800051d000000001400060076657468115f746f5f7465616d0000000400cc000800050004000000140004"], 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x0) syz_emit_ethernet(0xc6, &(0x7f00000001c0)={@local, @multicast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, '\x00', 0x90, 0x2b, 0x0, @private1, @local, {[@hopopts={0x87}], {0x4e24, 0x700, 0x88, 0x0, @gue={{0x2}, "43cc68d640011aaf32ae74dc1cf53fee0a270449ca4028fd28de2d12dd11b68c8612514acf8ac7864c226c45b76328466114cfba1b32ddd74a2f13e698614983c8a418f1e9def47829a49ea002af898577f057801dfbd07c3f15465eaff0dc2780d442ddd8e9b4eea9dd7c66f3c3874c3be05c2a39782f0d"}}}}}}}, 0x0) 29.626172879s ago: executing program 1 (id=93): r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket(0x2a, 0x2, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140), 0x24}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x8010) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r4, &(0x7f0000000340)="c9", 0x1, 0x0, &(0x7f0000000380)={0x2, 0x4e22, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000002240)=[{{&(0x7f0000000140)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x44}}, 0x10, 0x0}}], 0x1, 0x4000000) 29.625832194s ago: executing program 4 (id=94): r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket(0x2a, 0x2, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) r2 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140), 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x8010) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmmsg$inet(r0, &(0x7f0000002240)=[{{&(0x7f0000000140)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x44}}, 0x10, 0x0}}], 0x1, 0x4000000) 19.036659217s ago: executing program 33 (id=88): r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x80000000, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000080)=0x2) poll(&(0x7f00000000c0)=[{r0, 0x2300}], 0x1, 0x2) r1 = socket(0x11, 0x800000003, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000840)='cubic\x00', 0x6) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0xa4, 0x24, 0xf0b, 0x0, 0xfffffffc, {0x0, 0x0, 0x12, r3, {}, {0xffff, 0xffff}, {0x1, 0x8}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x74, 0x2, [@TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x7}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [], 0x0, [0x8, 0x4], [0x0, 0x8, 0x0, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0xdea}]}]}]}}]}, 0xa4}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) syz_open_dev$vim2m(&(0x7f0000000100), 0x80000000, 0x2) (async) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) (async) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000080)=0x2) (async) poll(&(0x7f00000000c0)=[{r0, 0x2300}], 0x1, 0x2) (async) socket(0x11, 0x800000003, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000840)='cubic\x00', 0x6) (async) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000600)) (async) socket$netlink(0x10, 0x3, 0x0) (async) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0xa4, 0x24, 0xf0b, 0x0, 0xfffffffc, {0x0, 0x0, 0x12, r3, {}, {0xffff, 0xffff}, {0x1, 0x8}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x74, 0x2, [@TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x7}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [], 0x0, [0x8, 0x4], [0x0, 0x8, 0x0, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0xdea}]}]}]}}]}, 0xa4}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) (async) 13.995964578s ago: executing program 34 (id=92): r0 = socket$nl_generic(0x11, 0x3, 0x10) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback}}}}}}, 0x0) sendmsg(r0, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0x36}], 0x2, 0x0, 0x0, 0x11000000}, 0x0) r1 = socket(0x848000000015, 0x805, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e21, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}, 0x733}, 0x1c) r2 = syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) r3 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000340), 0x284082, 0x0) fchdir(r3) utimensat(0xffffffffffffff9c, &(0x7f00000003c0)='.\x00', 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000240)={0x53, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000380), 0x0, 0xfffffffc, 0x6, 0x3, 0x0}) socket$inet6(0xa, 0x200000000003, 0x87) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="090d2000000000f0ff000700000008000300", @ANYRES32=r6, @ANYBLOB="0800051d000000001400060076657468115f746f5f7465616d0000000400cc000800050004000000140004"], 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x0) syz_emit_ethernet(0xc6, &(0x7f00000001c0)={@local, @multicast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, '\x00', 0x90, 0x2b, 0x0, @private1, @local, {[@hopopts={0x87}], {0x4e24, 0x700, 0x88, 0x0, @gue={{0x2}, "43cc68d640011aaf32ae74dc1cf53fee0a270449ca4028fd28de2d12dd11b68c8612514acf8ac7864c226c45b76328466114cfba1b32ddd74a2f13e698614983c8a418f1e9def47829a49ea002af898577f057801dfbd07c3f15465eaff0dc2780d442ddd8e9b4eea9dd7c66f3c3874c3be05c2a39782f0d"}}}}}}}, 0x0) 7.632352533s ago: executing program 35 (id=93): r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket(0x2a, 0x2, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140), 0x24}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x8010) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r4, &(0x7f0000000340)="c9", 0x1, 0x0, &(0x7f0000000380)={0x2, 0x4e22, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000002240)=[{{&(0x7f0000000140)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x44}}, 0x10, 0x0}}], 0x1, 0x4000000) 178.797µs ago: executing program 36 (id=91): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x4001, 0x3, 0x458, 0x300, 0xb, 0x148, 0x308, 0x148, 0x3c0, 0x230, 0x242, 0x3c0, 0x215, 0x3, 0x0, {[{{@ip={@local, @remote, 0x0, 0x0, 'batadv_slave_0\x00', 'macvtap0\x00', {}, {}, 0x73}, 0x0, 0x2d0, 0x300, 0x0, {0xff0f000000000000}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x8}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0xe, 0x0, 0x6, './file0\x00'}}]}, @common=@inet=@SET2={0x30}}, {{@uncond, 0xec010000, 0xa0, 0xc0, 0x0, {}, [@common=@ah={{0x30}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4b8) r1 = semget$private(0x0, 0x4000000009, 0x208) semop(r1, &(0x7f0000000000)=[{0x0, 0xfffb, 0x1000}, {0x2, 0x7, 0x800}], 0x2) semctl$SETALL(r1, 0x0, 0x11, &(0x7f0000000040)=[0x9]) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc0004}]}) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f0000000040)) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_PIT(r3, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x0, 0x0, 0xfe}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_PIT2(r3, 0x4070aea0, &(0x7f00000002c0)={[{0x0, 0x4, 0x0, 0x0, 0x5a, 0x2, 0x2, 0x0, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}]}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 0s ago: executing program 37 (id=94): r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket(0x2a, 0x2, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) r2 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140), 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x8010) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmmsg$inet(r0, &(0x7f0000002240)=[{{&(0x7f0000000140)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x44}}, 0x10, 0x0}}], 0x1, 0x4000000) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.226' (ED25519) to the list of known hosts. [ 70.854517][ T5822] cgroup: Unknown subsys name 'net' [ 70.984809][ T5822] cgroup: Unknown subsys name 'cpuset' [ 70.992999][ T5822] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 71.644229][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.650896][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.606132][ T5822] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 74.973755][ T5837] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 74.983298][ T5837] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 74.992026][ T5837] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 75.000913][ T5837] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 75.008997][ T5837] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 75.017671][ T5837] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 75.025133][ T5837] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 75.033600][ T5837] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 75.039083][ T5844] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 75.041455][ T5837] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 75.055519][ T5837] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 75.067415][ T5845] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 75.075951][ T5837] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 75.076571][ T5845] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 75.091827][ T5837] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 75.091919][ T5845] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 75.107015][ T5845] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 75.115516][ T5845] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 75.118815][ T5143] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 75.122926][ T5845] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 75.130885][ T5143] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 75.138953][ T5845] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 75.150793][ T5837] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 75.151203][ T5845] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 75.165218][ T5837] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 75.174289][ T5143] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 75.184299][ T5834] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 75.191722][ T5143] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 75.208838][ T5845] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 75.225073][ T5845] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 75.612777][ T5851] chnl_net:caif_netlink_parms(): no params data found [ 75.734717][ T5850] chnl_net:caif_netlink_parms(): no params data found [ 75.862372][ T5851] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.869983][ T5851] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.878814][ T5851] bridge_slave_0: entered allmulticast mode [ 75.886059][ T5851] bridge_slave_0: entered promiscuous mode [ 75.894980][ T5848] chnl_net:caif_netlink_parms(): no params data found [ 75.904570][ T5852] chnl_net:caif_netlink_parms(): no params data found [ 75.914171][ T5849] chnl_net:caif_netlink_parms(): no params data found [ 75.928530][ T5851] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.935818][ T5851] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.943246][ T5851] bridge_slave_1: entered allmulticast mode [ 75.950394][ T5851] bridge_slave_1: entered promiscuous mode [ 76.018871][ T5851] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.082909][ T5851] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.116052][ T5850] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.123944][ T5850] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.132420][ T5850] bridge_slave_0: entered allmulticast mode [ 76.139216][ T5850] bridge_slave_0: entered promiscuous mode [ 76.195122][ T5850] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.202625][ T5850] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.209831][ T5850] bridge_slave_1: entered allmulticast mode [ 76.217405][ T5850] bridge_slave_1: entered promiscuous mode [ 76.230523][ T5851] team0: Port device team_slave_0 added [ 76.285337][ T5851] team0: Port device team_slave_1 added [ 76.334440][ T5848] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.341695][ T5848] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.349250][ T5848] bridge_slave_0: entered allmulticast mode [ 76.356729][ T5848] bridge_slave_0: entered promiscuous mode [ 76.382009][ T5852] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.389163][ T5852] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.396750][ T5852] bridge_slave_0: entered allmulticast mode [ 76.404083][ T5852] bridge_slave_0: entered promiscuous mode [ 76.411948][ T5852] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.419090][ T5852] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.426545][ T5852] bridge_slave_1: entered allmulticast mode [ 76.433829][ T5852] bridge_slave_1: entered promiscuous mode [ 76.443966][ T5850] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.455836][ T5850] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.466019][ T5848] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.475634][ T5848] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.483126][ T5848] bridge_slave_1: entered allmulticast mode [ 76.490114][ T5848] bridge_slave_1: entered promiscuous mode [ 76.507695][ T5851] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.514852][ T5851] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.541398][ T5851] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.553916][ T5849] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.561386][ T5849] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.568617][ T5849] bridge_slave_0: entered allmulticast mode [ 76.575926][ T5849] bridge_slave_0: entered promiscuous mode [ 76.584242][ T5849] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.591436][ T5849] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.598635][ T5849] bridge_slave_1: entered allmulticast mode [ 76.605542][ T5849] bridge_slave_1: entered promiscuous mode [ 76.646636][ T5851] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.653839][ T5851] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.680015][ T5851] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.723402][ T5850] team0: Port device team_slave_0 added [ 76.731761][ T5848] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.743491][ T5848] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.771207][ T5852] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.784722][ T5850] team0: Port device team_slave_1 added [ 76.809493][ T5849] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.821900][ T5852] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.868587][ T5849] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.895894][ T5850] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.903241][ T5850] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.929273][ T5850] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.949644][ T5848] team0: Port device team_slave_0 added [ 76.959496][ T5851] hsr_slave_0: entered promiscuous mode [ 76.966914][ T5851] hsr_slave_1: entered promiscuous mode [ 76.995735][ T5852] team0: Port device team_slave_0 added [ 77.004821][ T5852] team0: Port device team_slave_1 added [ 77.012028][ T5850] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.019049][ T5850] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.045401][ T5850] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.063951][ T5848] team0: Port device team_slave_1 added [ 77.082197][ T5849] team0: Port device team_slave_0 added [ 77.127788][ T5849] team0: Port device team_slave_1 added [ 77.143767][ T5852] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.151300][ T5852] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.177336][ T5852] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.188173][ T5845] Bluetooth: hci1: command tx timeout [ 77.196605][ T5852] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.204248][ T5852] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.230747][ T5852] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.241616][ T5845] Bluetooth: hci3: command tx timeout [ 77.247554][ T5845] Bluetooth: hci0: command tx timeout [ 77.252761][ T5143] Bluetooth: hci2: command tx timeout [ 77.270744][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.277754][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.304143][ T5848] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.324067][ T5143] Bluetooth: hci4: command tx timeout [ 77.340282][ T5850] hsr_slave_0: entered promiscuous mode [ 77.347302][ T5850] hsr_slave_1: entered promiscuous mode [ 77.354831][ T5850] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 77.363253][ T5850] Cannot create hsr debugfs directory [ 77.369405][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.376578][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.403603][ T5848] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.419469][ T5849] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.426853][ T5849] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.453725][ T5849] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.503472][ T5852] hsr_slave_0: entered promiscuous mode [ 77.509851][ T5852] hsr_slave_1: entered promiscuous mode [ 77.519876][ T5852] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 77.527744][ T5852] Cannot create hsr debugfs directory [ 77.535778][ T5849] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.542928][ T5849] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.569031][ T5849] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.682098][ T5849] hsr_slave_0: entered promiscuous mode [ 77.688619][ T5849] hsr_slave_1: entered promiscuous mode [ 77.697189][ T5849] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 77.704913][ T5849] Cannot create hsr debugfs directory [ 77.728725][ T5848] hsr_slave_0: entered promiscuous mode [ 77.736989][ T5848] hsr_slave_1: entered promiscuous mode [ 77.743469][ T5848] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 77.751611][ T5848] Cannot create hsr debugfs directory [ 78.065999][ T5851] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 78.079157][ T5851] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 78.098381][ T5851] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 78.119979][ T5851] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 78.156033][ T5850] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 78.173591][ T5850] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 78.184709][ T5850] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 78.196255][ T5850] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 78.254050][ T5852] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 78.282395][ T5852] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 78.293192][ T5852] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 78.303387][ T5852] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 78.377633][ T5849] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 78.404047][ T5849] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 78.429299][ T5849] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 78.461740][ T5848] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 78.472174][ T5848] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 78.482582][ T5849] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 78.502494][ T5848] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 78.512606][ T5848] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 78.593672][ T5851] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.625760][ T5851] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.655329][ T5850] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.698288][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.705718][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.720426][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.727632][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.749054][ T5850] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.765185][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.772379][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.794605][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.801784][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.826191][ T5852] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.904783][ T5852] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.947748][ T5848] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.964592][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.971778][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.982641][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.989765][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.049229][ T5848] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.066922][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.074751][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.103038][ T5849] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.138974][ T5849] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.150184][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.157372][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.183563][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.190736][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.206084][ T5851] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.219829][ T5850] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.229535][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.236769][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.252655][ T5143] Bluetooth: hci1: command tx timeout [ 79.308946][ T5852] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.321645][ T5143] Bluetooth: hci2: command tx timeout [ 79.327125][ T5843] Bluetooth: hci3: command tx timeout [ 79.333813][ T5143] Bluetooth: hci0: command tx timeout [ 79.379176][ T5851] veth0_vlan: entered promiscuous mode [ 79.401277][ T5843] Bluetooth: hci4: command tx timeout [ 79.404047][ T5851] veth1_vlan: entered promiscuous mode [ 79.444950][ T5852] veth0_vlan: entered promiscuous mode [ 79.469630][ T5849] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.497187][ T5850] veth0_vlan: entered promiscuous mode [ 79.508440][ T5852] veth1_vlan: entered promiscuous mode [ 79.546785][ T5851] veth0_macvtap: entered promiscuous mode [ 79.559268][ T5850] veth1_vlan: entered promiscuous mode [ 79.574108][ T5851] veth1_macvtap: entered promiscuous mode [ 79.599596][ T5848] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.626347][ T5852] veth0_macvtap: entered promiscuous mode [ 79.639775][ T5849] veth0_vlan: entered promiscuous mode [ 79.666181][ T5852] veth1_macvtap: entered promiscuous mode [ 79.677896][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.688305][ T5849] veth1_vlan: entered promiscuous mode [ 79.710518][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.739941][ T5852] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.753885][ T5852] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.765486][ T5852] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.787292][ T5851] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.796652][ T5851] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.806868][ T5851] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.815678][ T5851] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.832870][ T5848] veth0_vlan: entered promiscuous mode [ 79.843141][ T5852] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.854634][ T5852] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.866938][ T5852] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.879729][ T5850] veth0_macvtap: entered promiscuous mode [ 79.896432][ T5850] veth1_macvtap: entered promiscuous mode [ 79.916396][ T5852] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.925776][ T5852] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.935060][ T5852] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.945937][ T5852] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.969790][ T5850] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.980845][ T5850] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.992755][ T5850] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.003488][ T5850] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.015722][ T5850] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.026195][ T5848] veth1_vlan: entered promiscuous mode [ 80.065036][ T5850] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.076000][ T5850] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.089258][ T5850] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.099802][ T5850] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.111538][ T5850] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.127151][ T5850] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.136083][ T5850] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.146138][ T5850] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.155018][ T5850] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.169162][ T5849] veth0_macvtap: entered promiscuous mode [ 80.193920][ T5849] veth1_macvtap: entered promiscuous mode [ 80.255004][ T5848] veth0_macvtap: entered promiscuous mode [ 80.288789][ T5849] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.301571][ T5849] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.311758][ T5849] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.322267][ T5849] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.332372][ T5849] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.343762][ T5849] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.355570][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.374386][ T5848] veth1_macvtap: entered promiscuous mode [ 80.410219][ T5849] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.410521][ T248] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.427490][ T5849] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.428876][ T248] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.438754][ T5849] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.457520][ T5849] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.467594][ T5849] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.478234][ T5849] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.489723][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.527553][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.535698][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.538318][ T5848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.555360][ T5848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.567230][ T5848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.577800][ T5848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.588083][ T5848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.598767][ T5848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.613874][ T5848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.624790][ T5848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.636095][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.645473][ T5849] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.655558][ T5849] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.664692][ T5849] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.674886][ T5849] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.702907][ T5848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.716384][ T5848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.726772][ T5848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.739326][ T5848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.749513][ T5848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.761320][ T5848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.771242][ T5848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.781988][ T5848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.792999][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.806746][ T5848] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.815747][ T5848] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.825569][ T5848] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.834446][ T5848] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.857648][ T248] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.865728][ T248] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.942170][ T248] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.950293][ T248] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.989364][ T5071] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.002883][ T5071] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.025706][ T1312] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.037827][ T1312] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.075613][ T5071] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.099899][ T5071] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.143805][ T248] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.156311][ T248] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.207341][ T5851] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 81.225971][ T248] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.234005][ T248] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.245800][ T248] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.253795][ T248] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.358052][ T5843] Bluetooth: hci1: command tx timeout [ 81.401626][ T5843] Bluetooth: hci3: command tx timeout [ 81.407190][ T5843] Bluetooth: hci0: command tx timeout [ 81.412744][ T5843] Bluetooth: hci2: command tx timeout [ 81.475961][ T5892] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 81.481012][ T5845] Bluetooth: hci4: command tx timeout [ 81.729050][ T5901] syz.3.4 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 81.817403][ T29] audit: type=1326 audit(1737105904.977:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5895 comm="syz.1.2" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f96b6985d29 code=0x0 [ 82.020992][ T5889] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 82.083352][ T5911] trusted_key: encrypted key: instantiation of keys using provided decrypted data is disabled since CONFIG_USER_DECRYPTED_DATA is set to false [ 82.161032][ T5889] usb 4-1: device descriptor read/64, error -71 [ 82.178830][ T5911] trusted_key: encrypted_key: keyword 'Þf@äð°efault' not recognized [ 82.390754][ T9] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 82.410699][ T5889] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 82.441348][ T5915] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 82.551076][ T5889] usb 4-1: device descriptor read/64, error -71 [ 82.571080][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 82.603631][ T9] usb 3-1: config 3 has an invalid interface number: 104 but max is 0 [ 82.612637][ T9] usb 3-1: config 3 has an invalid descriptor of length 10, skipping remainder of the config [ 82.623095][ T9] usb 3-1: config 3 has no interface number 0 [ 82.629365][ T9] usb 3-1: config 3 interface 104 has no altsetting 0 [ 82.644298][ T9] usb 3-1: New USB device found, idVendor=0b05, idProduct=1790, bcdDevice=5c.88 [ 82.653907][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 82.662768][ T5889] usb usb4-port1: attempt power cycle [ 82.670991][ T9] usb 3-1: Product: syz [ 82.678443][ T9] usb 3-1: Manufacturer: syz [ 82.683370][ T9] usb 3-1: SerialNumber: syz [ 82.710510][ T5915] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 82.723465][ T5915] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 82.733517][ T5915] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 82.780449][ T5915] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 82.812811][ T5915] usb 2-1: New USB device found, idVendor=0bfd, idProduct=010c, bcdDevice=2d.16 [ 82.823485][ T5915] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 82.841571][ T5915] usb 2-1: Product: syz [ 82.848272][ T5915] usb 2-1: Manufacturer: syz [ 82.866226][ T5915] usb 2-1: SerialNumber: syz [ 82.894881][ T5915] usb 2-1: config 0 descriptor?? [ 82.919388][ T5915] kvaser_usb 2-1:0.0: error -ENODEV: Cannot get usb endpoint(s) [ 83.030856][ T5889] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 83.064375][ T5889] usb 4-1: device descriptor read/8, error -71 [ 83.311197][ T5889] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 83.391666][ T5889] usb 4-1: device descriptor read/8, error -71 [ 83.401097][ T5845] Bluetooth: hci1: command tx timeout [ 83.481657][ T5843] Bluetooth: hci0: command tx timeout [ 83.481697][ T5143] Bluetooth: hci3: command tx timeout [ 83.492662][ T5845] Bluetooth: hci2: command tx timeout [ 83.502643][ T5889] usb usb4-port1: unable to enumerate USB device [ 83.539921][ T5934] binder: 5929:5934 ioctl c018620c 20000100 returned -22 [ 83.561500][ T5845] Bluetooth: hci4: command tx timeout [ 83.846519][ T5938] xt_bpf: check failed: parse error [ 84.018817][ T29] audit: type=1326 audit(1737105907.177:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5937 comm="syz.0.12" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feddef85d29 code=0x7ffc0000 [ 84.074046][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 84.091011][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 84.099598][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 84.146780][ T29] audit: type=1326 audit(1737105907.207:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5937 comm="syz.0.12" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feddef85d29 code=0x7ffc0000 [ 84.210207][ T29] audit: type=1326 audit(1737105907.207:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5937 comm="syz.0.12" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7feddef85d29 code=0x7ffc0000 [ 84.273156][ T29] audit: type=1326 audit(1737105907.227:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5937 comm="syz.0.12" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feddef85d29 code=0x7ffc0000 [ 84.353876][ T29] audit: type=1326 audit(1737105907.227:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5937 comm="syz.0.12" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feddef85d29 code=0x7ffc0000 [ 84.400219][ T29] audit: type=1326 audit(1737105907.227:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5937 comm="syz.0.12" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7feddef85d29 code=0x7ffc0000 [ 84.428238][ T29] audit: type=1326 audit(1737105907.277:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5937 comm="syz.0.12" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feddef85d29 code=0x7ffc0000 [ 84.453667][ T29] audit: type=1326 audit(1737105907.277:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5937 comm="syz.0.12" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7feddef85d29 code=0x7ffc0000 [ 84.476407][ T29] audit: type=1326 audit(1737105907.277:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5937 comm="syz.0.12" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feddef85d29 code=0x7ffc0000 [ 84.500622][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 84.550883][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 84.574879][ T5945] process 'syz.4.13' launched '/dev/fd/3' with NULL argv: empty string added [ 84.620608][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 84.901979][ T9] usb 3-1: USB disconnect, device number 2 [ 85.130884][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 85.396028][ T5955] xt_bpf: check failed: parse error [ 85.607131][ T5890] usb 2-1: USB disconnect, device number 2 [ 85.641568][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 86.015089][ T5964] xt_bpf: check failed: parse error [ 86.073987][ T248] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.264650][ T248] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.396826][ T248] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.402220][ T5843] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 86.423598][ T5843] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 86.431028][ T5890] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 86.456828][ T5843] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 86.476271][ T5843] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 86.485231][ T5843] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 86.498585][ T5843] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 86.568097][ T248] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.610682][ T5890] usb 4-1: Using ep0 maxpacket: 16 [ 86.619215][ T5890] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 86.631029][ T5890] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 86.641276][ T5890] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 86.654695][ T5890] usb 4-1: New USB device found, idVendor=056a, idProduct=0022, bcdDevice= 0.00 [ 86.692192][ T5890] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.718136][ T5890] usb 4-1: config 0 descriptor?? [ 86.944900][ T5980] fuse: Bad value for 'fd' [ 87.010185][ T25] cfg80211: failed to load regulatory.db [ 87.022665][ T5973] chnl_net:caif_netlink_parms(): no params data found [ 87.219124][ T5890] wacom 0003:056A:0022.0001: Unknown device_type for 'HID 056a:0022'. Assuming pen. [ 87.242123][ T248] bridge_slave_1: left allmulticast mode [ 87.250940][ T248] bridge_slave_1: left promiscuous mode [ 87.262159][ T5890] wacom 0003:056A:0022.0001: hidraw0: USB HID v0.00 Device [HID 056a:0022] on usb-dummy_hcd.3-1/input0 [ 87.277865][ T248] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.290510][ T5890] input: Wacom Intuos 9x12 Pen as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:056A:0022.0001/input/input5 [ 87.371634][ T248] bridge_slave_0: left allmulticast mode [ 87.377359][ T248] bridge_slave_0: left promiscuous mode [ 87.419025][ T248] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.460821][ T25] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 87.569483][ T29] kauditd_printk_skb: 65 callbacks suppressed [ 87.569501][ T29] audit: type=1326 audit(1737105910.727:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5992 comm="syz.0.27" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feddef85d29 code=0x7ffc0000 [ 87.630708][ T25] usb 2-1: Using ep0 maxpacket: 16 [ 87.651319][ T25] usb 2-1: config index 0 descriptor too short (expected 17170, got 18) [ 87.668107][ T29] audit: type=1326 audit(1737105910.747:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5992 comm="syz.0.27" exe="/root/syz-executor" sig=0 arch=c000003e syscall=262 compat=0 ip=0x7feddef85d29 code=0x7ffc0000 [ 87.686545][ T25] usb 2-1: config 0 has too many interfaces: 63, using maximum allowed: 32 [ 87.756500][ T29] audit: type=1326 audit(1737105910.747:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5992 comm="syz.0.27" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feddef85d29 code=0x7ffc0000 [ 87.758777][ T25] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 63 [ 87.836962][ T29] audit: type=1326 audit(1737105910.747:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5992 comm="syz.0.27" exe="/root/syz-executor" sig=0 arch=c000003e syscall=48 compat=0 ip=0x7feddef85d29 code=0x7ffc0000 [ 87.893548][ T29] audit: type=1326 audit(1737105910.747:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5992 comm="syz.0.27" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feddef85d29 code=0x7ffc0000 [ 87.906129][ T25] usb 2-1: New USB device found, idVendor=07ab, idProduct=fc01, bcdDevice=8d.90 [ 87.970783][ T25] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 87.971004][ T9] usb 4-1: USB disconnect, device number 6 [ 87.978906][ T25] usb 2-1: Product: syz [ 87.978928][ T25] usb 2-1: Manufacturer: syz [ 87.978947][ T25] usb 2-1: SerialNumber: syz [ 88.020396][ T29] audit: type=1326 audit(1737105910.747:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5992 comm="syz.0.27" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7feddef85d29 code=0x7ffc0000 [ 88.030176][ T25] usb 2-1: config 0 descriptor?? [ 88.071834][ T25] ums-freecom 2-1:0.0: USB Mass Storage device detected [ 88.144034][ T29] audit: type=1326 audit(1737105910.747:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5992 comm="syz.0.27" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feddef85d29 code=0x7ffc0000 [ 88.200952][ T29] audit: type=1326 audit(1737105910.747:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5992 comm="syz.0.27" exe="/root/syz-executor" sig=0 arch=c000003e syscall=325 compat=0 ip=0x7feddef85d29 code=0x7ffc0000 [ 88.250665][ T29] audit: type=1326 audit(1737105910.747:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5992 comm="syz.0.27" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feddef85d29 code=0x7ffc0000 [ 88.290634][ T29] audit: type=1326 audit(1737105910.757:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5992 comm="syz.0.27" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7feddef85d29 code=0x7ffc0000 [ 88.552337][ T5843] Bluetooth: hci2: command tx timeout [ 88.743587][ T25] usb 2-1: USB disconnect, device number 3 [ 89.004060][ T6021] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 89.434512][ T248] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 89.477396][ T248] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 89.584594][ T248] bond0 (unregistering): Released all slaves [ 90.052062][ T6044] netlink: 'syz.4.37': attribute type 10 has an invalid length. [ 90.158005][ T5973] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.181597][ T5973] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.224515][ T5973] bridge_slave_0: entered allmulticast mode [ 90.244462][ T5973] bridge_slave_0: entered promiscuous mode [ 90.300750][ T6044] syz_tun: entered promiscuous mode [ 90.350466][ T6044] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 90.394544][ T5973] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.421560][ T25] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 90.421967][ T5973] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.490490][ T5973] bridge_slave_1: entered allmulticast mode [ 90.498776][ T5973] bridge_slave_1: entered promiscuous mode [ 90.519178][ T6055] team0: Device gtp0 is of different type [ 90.600895][ T5843] Bluetooth: hci2: command tx timeout [ 90.606592][ T25] usb 1-1: Using ep0 maxpacket: 16 [ 90.615159][ T25] usb 1-1: config 0 has an invalid interface number: 255 but max is 0 [ 90.623659][ T25] usb 1-1: config 0 has no interface number 0 [ 90.629850][ T25] usb 1-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 90.642678][ T25] usb 1-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 90.656363][ T25] usb 1-1: config 0 interface 255 has no altsetting 0 [ 90.664518][ T25] usb 1-1: config 0 has an invalid interface number: 255 but max is 0 [ 90.679792][ T25] usb 1-1: config 0 has no interface number 0 [ 90.687872][ T25] usb 1-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 90.708690][ T5885] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 90.729825][ T25] usb 1-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 90.751458][ T25] usb 1-1: config 0 interface 255 has no altsetting 0 [ 90.771438][ T1204] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 90.800211][ T25] usb 1-1: config 0 has an invalid interface number: 255 but max is 0 [ 90.809083][ T25] usb 1-1: config 0 has no interface number 0 [ 90.820709][ T25] usb 1-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 90.868351][ T25] usb 1-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 90.882187][ T5885] usb 2-1: Using ep0 maxpacket: 32 [ 90.905330][ T5973] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.916308][ T5885] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 90.930641][ T25] usb 1-1: config 0 interface 255 has no altsetting 0 [ 90.937577][ T5885] usb 2-1: config 0 has no interface number 0 [ 90.943916][ T1204] usb 4-1: Using ep0 maxpacket: 32 [ 90.946481][ T5973] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.952175][ T1204] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 90.983365][ T5885] usb 2-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 90.997902][ T5885] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.001651][ T5890] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 91.007003][ T1204] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 91.036073][ T25] usb 1-1: New USB device found, idVendor=046d, idProduct=08b5, bcdDevice=d7.01 [ 91.045383][ T5885] usb 2-1: Product: syz [ 91.049677][ T5885] usb 2-1: Manufacturer: syz [ 91.054545][ T25] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.054592][ T248] hsr_slave_0: left promiscuous mode [ 91.062707][ T5885] usb 2-1: SerialNumber: syz [ 91.082380][ T5885] usb 2-1: config 0 descriptor?? [ 91.087524][ T25] usb 1-1: Product: syz [ 91.091844][ T1204] usb 4-1: New USB device found, idVendor=056a, idProduct=00e6, bcdDevice= 0.00 [ 91.108303][ T25] usb 1-1: Manufacturer: syz [ 91.113224][ T25] usb 1-1: SerialNumber: syz [ 91.118019][ T248] hsr_slave_1: left promiscuous mode [ 91.123177][ T5885] usb 2-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 91.132588][ T1204] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.132663][ T248] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 91.140987][ T5885] usb 2-1: selecting invalid altsetting 1 [ 91.141014][ T5885] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 91.146575][ T5885] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 91.177138][ T25] usb 1-1: config 0 descriptor?? [ 91.178835][ T248] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 91.183969][ T1204] usb 4-1: config 0 descriptor?? [ 91.204672][ T5885] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 91.215992][ T5885] usb 2-1: media controller created [ 91.235799][ T248] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 91.243943][ T5890] usb 5-1: Using ep0 maxpacket: 8 [ 91.244099][ T5885] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 91.268623][ T5890] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 91.280759][ T5890] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.288795][ T5890] usb 5-1: Product: syz [ 91.299994][ T248] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 91.338382][ T5890] usb 5-1: Manufacturer: syz [ 91.352012][ T5890] usb 5-1: SerialNumber: syz [ 91.379944][ T5890] usb 5-1: config 0 descriptor?? [ 91.390362][ T248] veth1_macvtap: left promiscuous mode [ 91.412895][ T248] veth0_macvtap: left promiscuous mode [ 91.418621][ T248] veth1_vlan: left promiscuous mode [ 91.446033][ T248] veth0_vlan: left promiscuous mode [ 91.514377][ T25] usb 1-1: USB disconnect, device number 2 [ 91.571422][ T5885] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 91.599502][ T5890] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 91.617535][ T1204] wacom 0003:056A:00E6.0002: unknown main item tag 0x0 [ 91.653532][ T1204] wacom 0003:056A:00E6.0002: unknown main item tag 0x0 [ 91.688263][ T1204] wacom 0003:056A:00E6.0002: hidraw0: USB HID vff.fe Device [HID 056a:00e6] on usb-dummy_hcd.3-1/input0 [ 91.740361][ T5885] usb 2-1: USB disconnect, device number 4 [ 91.822548][ T5889] usb 4-1: USB disconnect, device number 7 [ 92.297148][ T6080] netlink: 4 bytes leftover after parsing attributes in process `syz.0.43'. [ 92.332161][ T6080] libceph: resolve '0.' (ret=-3): failed [ 92.680875][ T5843] Bluetooth: hci2: command tx timeout [ 92.738515][ T248] team0 (unregistering): Port device team_slave_1 removed [ 92.830735][ T1204] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 92.857395][ T248] team0 (unregistering): Port device team_slave_0 removed [ 93.002245][ T1204] usb 2-1: unable to get BOS descriptor or descriptor too short [ 93.021991][ T1204] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 93.036332][ T1204] usb 2-1: can't read configurations, error -71 [ 93.059814][ T5890] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 93.093244][ T5890] usb 5-1: USB disconnect, device number 2 [ 93.693378][ T6098] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 93.792048][ T6095] workqueue: name exceeds WQ_NAME_LEN. Truncating to: ¯HcUØîÑË•‚Ž¹+ÕuµŽê!Þ÷œ8¦ [ 93.814463][ T5973] team0: Port device team_slave_0 added [ 93.843596][ T5973] team0: Port device team_slave_1 added [ 94.007856][ T5973] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.027818][ T5973] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.127867][ T5973] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.163524][ T5973] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.170682][ T25] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 94.178646][ T5973] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.210659][ T5973] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.348733][ T25] usb 4-1: Using ep0 maxpacket: 32 [ 94.364568][ T25] usb 4-1: config 0 has an invalid interface number: 239 but max is 0 [ 94.377288][ T25] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 94.397989][ T25] usb 4-1: config 0 has no interface number 0 [ 94.404983][ T25] usb 4-1: config 0 interface 239 altsetting 4 bulk endpoint 0x2 has invalid maxpacket 8 [ 94.421833][ T25] usb 4-1: config 0 interface 239 altsetting 4 endpoint 0x8 has invalid maxpacket 1023, setting to 64 [ 94.452504][ T25] usb 4-1: config 0 interface 239 altsetting 4 has an endpoint descriptor with address 0xA9, changing to 0x89 [ 94.462024][ T5973] hsr_slave_0: entered promiscuous mode [ 94.485542][ T25] usb 4-1: config 0 interface 239 altsetting 4 endpoint 0x89 has invalid maxpacket 28648, setting to 1024 [ 94.491429][ T5973] hsr_slave_1: entered promiscuous mode [ 94.507489][ T25] usb 4-1: config 0 interface 239 altsetting 4 bulk endpoint 0x89 has invalid maxpacket 1024 [ 94.527056][ T5973] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 94.530766][ T25] usb 4-1: config 0 interface 239 altsetting 4 has an endpoint descriptor with address 0xD5, changing to 0x85 [ 94.545155][ T5973] Cannot create hsr debugfs directory [ 94.592682][ T25] usb 4-1: config 0 interface 239 altsetting 4 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 94.603908][ T25] usb 4-1: config 0 interface 239 altsetting 4 endpoint 0x85 has invalid wMaxPacketSize 0 [ 94.613935][ T25] usb 4-1: config 0 interface 239 has no altsetting 0 [ 94.623058][ T25] usb 4-1: New USB device found, idVendor=105b, idProduct=1799, bcdDevice=36.e9 [ 94.633441][ T25] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.641949][ T25] usb 4-1: Product: syz [ 94.646153][ T25] usb 4-1: Manufacturer: syz [ 94.675854][ T25] usb 4-1: SerialNumber: syz [ 94.699344][ T25] usb 4-1: config 0 descriptor?? [ 94.752402][ T6110] loop9: detected capacity change from 0 to 7 [ 94.761769][ T5843] Bluetooth: hci2: command tx timeout [ 94.770828][ T6104] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 94.778622][ T6104] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 94.806354][ T6110] Dev loop9: unable to read RDB block 7 [ 94.820834][ T6110] loop9: unable to read partition table [ 94.826705][ T6110] loop9: partition table beyond EOD, truncated [ 94.856378][ T6110] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 94.959707][ T5843] Bluetooth: hci5: urb ffff88814633ad00 submission failed (90) [ 95.028328][ T6114] xt_bpf: check failed: parse error [ 95.113986][ T6115] xt_NFQUEUE: number of total queues is 0 [ 95.133719][ T6104] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 95.175301][ T6104] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 95.217416][ T29] kauditd_printk_skb: 6 callbacks suppressed [ 95.217434][ T29] audit: type=1326 audit(1737105918.377:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6113 comm="syz.1.53" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96b6985d29 code=0x7ffc0000 [ 95.245808][ C0] vkms_vblank_simulate: vblank timer overrun [ 95.259173][ T5890] usb 4-1: USB disconnect, device number 8 [ 95.360630][ T29] audit: type=1326 audit(1737105918.377:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6113 comm="syz.1.53" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f96b6985d29 code=0x7ffc0000 [ 95.382556][ C0] vkms_vblank_simulate: vblank timer overrun [ 95.432372][ T29] audit: type=1326 audit(1737105918.387:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6113 comm="syz.1.53" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96b6985d29 code=0x7ffc0000 [ 95.437383][ T5973] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 95.505903][ T5973] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 95.522019][ T29] audit: type=1326 audit(1737105918.387:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6113 comm="syz.1.53" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f96b6985d29 code=0x7ffc0000 [ 95.557225][ T5973] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 95.588623][ T29] audit: type=1326 audit(1737105918.477:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6113 comm="syz.1.53" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96b6985d29 code=0x7ffc0000 [ 95.625172][ T29] audit: type=1326 audit(1737105918.477:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6113 comm="syz.1.53" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96b6985d29 code=0x7ffc0000 [ 95.650218][ T5973] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 95.732055][ T29] audit: type=1326 audit(1737105918.487:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6113 comm="syz.1.53" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f96b6985d29 code=0x7ffc0000 [ 95.842732][ T29] audit: type=1326 audit(1737105918.497:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6113 comm="syz.1.53" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96b6985d29 code=0x7ffc0000 [ 95.911739][ T5973] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.956890][ T29] audit: type=1326 audit(1737105918.497:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6113 comm="syz.1.53" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96b6985d29 code=0x7ffc0000 [ 95.981073][ T29] audit: type=1326 audit(1737105918.497:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6113 comm="syz.1.53" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f96b6985d29 code=0x7ffc0000 [ 96.049426][ T5973] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.061019][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.068208][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.077115][ T6146] netlink: 8 bytes leftover after parsing attributes in process `syz.3.59'. [ 96.088284][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.095526][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.103219][ T6146] netlink: 'syz.3.59': attribute type 30 has an invalid length. [ 96.157596][ T6146] netlink: 12 bytes leftover after parsing attributes in process `syz.3.59'. [ 96.230727][ T25] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 96.275853][ T5973] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.339351][ T5973] veth0_vlan: entered promiscuous mode [ 96.385163][ T25] usb 5-1: unable to get BOS descriptor or descriptor too short [ 96.395538][ T25] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 96.419259][ T25] usb 5-1: can't read configurations, error -71 [ 96.427302][ T5973] veth1_vlan: entered promiscuous mode [ 96.518394][ T5973] veth0_macvtap: entered promiscuous mode [ 96.541384][ T5973] veth1_macvtap: entered promiscuous mode [ 96.592785][ T5973] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 96.634505][ T5973] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.688820][ T5973] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 96.740785][ T5973] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.763390][ T6161] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 96.787648][ T5973] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 96.818650][ T5973] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.848630][ T5973] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 96.918780][ T5973] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.940448][ T5973] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.975549][ T5973] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 97.033373][ T5973] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.084476][ T5973] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 97.105568][ T5973] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.125932][ T5973] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 97.157088][ T5973] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.197134][ T5973] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 97.219697][ T5973] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.266708][ T5973] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.305150][ T6178] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 97.314867][ T6178] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 97.323897][ T6178] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 97.332682][ T6178] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 97.454720][ T5973] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.489820][ T5973] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.549426][ T5973] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.570719][ T5973] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.921524][ T5890] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 98.092350][ T5890] usb 1-1: Using ep0 maxpacket: 16 [ 98.107621][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.117125][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.129004][ T5890] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 98.168397][ T5890] usb 1-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 7.79 [ 98.177806][ T5890] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.220799][ T5889] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 98.228474][ T5890] usb 1-1: Product: syz [ 98.232802][ T9] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 98.240470][ T5890] usb 1-1: Manufacturer: syz [ 98.251547][ T5890] usb 1-1: SerialNumber: syz [ 98.274059][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.284216][ T5890] usb 1-1: config 0 descriptor?? [ 98.308291][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.390983][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 98.404162][ T5889] usb 4-1: unable to get BOS descriptor or descriptor too short [ 98.414040][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 98.434774][ T5889] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 98.444544][ T9] usb 2-1: too many endpoints for config 0 interface 0 altsetting 11: 36, using maximum allowed: 30 [ 98.461223][ T5889] usb 4-1: can't read configurations, error -71 [ 98.488475][ T9] usb 2-1: config 0 interface 0 altsetting 11 bulk endpoint 0x6 has invalid maxpacket 255 [ 98.502370][ T5890] usb 1-1: Cannot retrieve CPort count: 0 [ 98.508177][ T5890] usb 1-1: Cannot retrieve CPort count: -5 [ 98.536982][ T9] usb 2-1: config 0 interface 0 altsetting 11 has 1 endpoint descriptor, different from the interface descriptor's value: 36 [ 98.560393][ T5890] es2_ap_driver 1-1:0.0: probe with driver es2_ap_driver failed with error -5 [ 98.586449][ T9] usb 2-1: config 0 interface 0 has no altsetting 0 [ 98.603725][ T9] usb 2-1: New USB device found, idVendor=0499, idProduct=102a, bcdDevice=85.2d [ 98.633275][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.646727][ T9] usb 2-1: Product: syz [ 98.653662][ T9] usb 2-1: Manufacturer: syz [ 98.660770][ T9] usb 2-1: SerialNumber: syz [ 98.679665][ T9] usb 2-1: config 0 descriptor?? [ 98.691282][ T6195] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 98.729703][ T6188] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 98.739449][ T6188] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 98.765838][ T5890] usb 1-1: USB disconnect, device number 3 [ 98.998381][ T9] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 99.040989][ T25] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 99.135272][ T9] usb 2-1: USB disconnect, device number 7 [ 99.502862][ T5842] udevd[5842]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 100.121241][ T2150] usb 4-1: new full-speed USB device number 11 using dummy_hcd [ 100.311124][ T2150] usb 4-1: unable to get BOS descriptor or descriptor too short [ 100.358269][ T2150] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 100.368069][ T2150] usb 4-1: can't read configurations, error -71 [ 100.870717][ T25] usb 6-1: Using ep0 maxpacket: 16 [ 100.879447][ T25] usb 6-1: New USB device found, idVendor=0644, idProduct=8021, bcdDevice=38.b7 [ 100.888737][ T25] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.900644][ T25] usb 6-1: Product: syz [ 100.904861][ T25] usb 6-1: Manufacturer: syz [ 100.926642][ T25] usb 6-1: SerialNumber: syz [ 100.950902][ T25] usb 6-1: config 0 descriptor?? [ 100.957500][ T25] hub 6-1:0.0: bad descriptor, ignoring hub [ 100.963821][ T25] hub 6-1:0.0: probe with driver hub failed with error -5 [ 100.991431][ T6259] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 101.035451][ T6259] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 101.148574][ T6268] netlink: 'syz.3.84': attribute type 10 has an invalid length. [ 101.179937][ T6208] netlink: 4 bytes leftover after parsing attributes in process `syz.5.19'. [ 101.340780][ T9] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 101.469215][ T6268] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 101.524525][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 101.575457][ T9] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 101.597881][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.602204][ T5885] usb 6-1: USB disconnect, device number 2 [ 101.612827][ T9] usb 2-1: config 0 descriptor?? [ 101.626015][ T9] pwc: Askey VC010 type 2 USB webcam detected. [ 101.823878][ T9] pwc: send_video_command error -71 [ 101.844708][ T9] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 101.886984][ C1] hrtimer: interrupt took 5533215 ns [ 101.893245][ T9] Philips webcam 2-1:0.0: probe with driver Philips webcam failed with error -71 [ 101.954104][ T9] usb 2-1: USB disconnect, device number 8 [ 102.691761][ T9] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 102.967527][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 102.989095][ T9] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 103.061861][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.101459][ T6308] netlink: 'syz.0.92': attribute type 11 has an invalid length. [ 103.123081][ T9] usb 2-1: config 0 descriptor?? [ 103.146886][ T9] pwc: Askey VC010 type 2 USB webcam detected. [ 103.532314][ T9] pwc: recv_control_msg error -32 req 02 val 2b00 [ 103.540102][ T9] pwc: recv_control_msg error -32 req 02 val 2700 [ 103.562487][ T9] pwc: recv_control_msg error -32 req 02 val 2c00 [ 103.587319][ T9] pwc: recv_control_msg error -32 req 04 val 1000 [ 103.612265][ T9] pwc: recv_control_msg error -32 req 04 val 1300 [ 103.644223][ T9] pwc: recv_control_msg error -32 req 04 val 1400 [ 103.654118][ T9] pwc: recv_control_msg error -32 req 02 val 2000 [ 103.667084][ T9] pwc: recv_control_msg error -32 req 02 val 2100 [ 103.682294][ T9] pwc: recv_control_msg error -32 req 04 val 1500 [ 103.701617][ T9] pwc: recv_control_msg error -32 req 02 val 2500 [ 103.725525][ T9] pwc: recv_control_msg error -71 req 02 val 2400 [ 103.753692][ T9] pwc: recv_control_msg error -71 req 02 val 2600 [ 103.781187][ T9] pwc: recv_control_msg error -71 req 02 val 2900 [ 103.812254][ T9] pwc: recv_control_msg error -71 req 02 val 2800 [ 103.832293][ T9] pwc: recv_control_msg error -71 req 04 val 1100 [ 103.857424][ T9] pwc: recv_control_msg error -71 req 04 val 1200 [ 103.875947][ T9] pwc: Registered as video103. [ 103.892806][ T9] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input11 [ 106.236284][ T6314] xt_bpf: check failed: parse error [ 106.390067][ T6317] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 106.495447][ T9] usb 2-1: USB disconnect, device number 9 [ 122.230627][ T5845] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 127.900681][ T5845] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 128.325650][ T5845] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 128.401578][ T5839] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 128.626045][ T5839] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 128.658738][ T5143] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 128.690749][ T54] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 128.700906][ T54] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 128.840652][ T5143] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 129.070672][ T5143] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 129.143972][ T54] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 129.231228][ T5834] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 129.320691][ T54] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 129.327827][ T54] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 129.348601][ T54] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 129.374003][ T5837] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 129.383466][ T54] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 129.390639][ T54] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 129.408401][ T5837] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 129.417007][ T5837] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 129.427033][ T54] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 129.435947][ T5843] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 129.465150][ T5843] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 129.501808][ T5843] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 129.508933][ T5843] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 129.540717][ T5845] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 129.580773][ T54] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 129.607556][ T54] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 129.615752][ T5839] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 129.648633][ T54] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 136.284427][ T5834] Bluetooth: hci5: command tx timeout [ 136.290513][ T5834] Bluetooth: hci6: command tx timeout [ 136.296552][ T5834] Bluetooth: hci7: command tx timeout [ 136.303469][ T5834] Bluetooth: hci8: command tx timeout [ 136.309322][ T5834] Bluetooth: hci9: command tx timeout [ 136.341004][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 136.347399][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 145.598406][ T5143] Bluetooth: hci9: command tx timeout [ 145.604300][ T5143] Bluetooth: hci8: command tx timeout [ 145.609723][ T5143] Bluetooth: hci7: command tx timeout [ 145.615197][ T5143] Bluetooth: hci6: command tx timeout [ 145.620663][ T5143] Bluetooth: hci5: command tx timeout [ 155.820619][ T5834] Bluetooth: hci5: command tx timeout [ 155.826098][ T5834] Bluetooth: hci6: command tx timeout [ 155.831580][ T5834] Bluetooth: hci7: command tx timeout [ 155.837003][ T5834] Bluetooth: hci8: command tx timeout [ 155.842522][ T5834] Bluetooth: hci9: command tx timeout [ 166.777933][ T5143] Bluetooth: hci9: command tx timeout [ 166.783494][ T5143] Bluetooth: hci8: command tx timeout [ 166.788915][ T5143] Bluetooth: hci7: command tx timeout [ 166.794390][ T5143] Bluetooth: hci6: command tx timeout [ 166.799809][ T5143] Bluetooth: hci5: command tx timeout [ 206.021129][ T5143] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 206.143794][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 206.150137][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 206.551671][ T5837] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 206.560063][ T5837] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 221.337163][ T5837] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 221.344888][ T5837] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 221.352995][ T5837] Bluetooth: hci4: command 0x0406 tx timeout [ 221.359102][ T5837] Bluetooth: hci0: command 0x0406 tx timeout [ 221.366227][ T5837] Bluetooth: hci3: command 0x0406 tx timeout [ 221.442232][ T5843] Bluetooth: hci12: Opcode 0x0c03 failed: -110 [ 221.565440][ T5844] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 221.950600][ T5837] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 222.409551][ T5837] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 222.444648][ T5844] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 222.463257][ T5843] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 222.726203][ T5844] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 222.733756][ T5844] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 222.752542][ T5843] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 222.761724][ T5847] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 222.768981][ T5847] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 222.776696][ T5847] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 222.804095][ T5843] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 222.811678][ T5843] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 222.821489][ T5843] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3 [ 222.828681][ T5843] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 222.836173][ T5843] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 222.843366][ T5843] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 238.932759][ T5843] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 238.942617][ T5843] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 239.021931][ T5843] Bluetooth: hci12: unexpected cc 0x0c25 length: 249 > 3 [ 239.181825][ T5843] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 257.890546][ T6356] Bluetooth: hci10: Opcode 0x0c1a failed: -110 [ 257.910816][ T5834] Bluetooth: hci10: command 0x0c1a tx timeout [ 257.917599][ T5834] Bluetooth: hci14: command 0x0c23 tx timeout [ 257.924254][ T5834] Bluetooth: hci13: command 0x0c25 tx timeout [ 257.946940][ T5834] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 257.954491][ T5834] Bluetooth: hci13: unexpected cc 0x0c25 length: 249 > 3 [ 257.963345][ T5837] Bluetooth: hci13: Opcode 0x0c25 failed: -110 [ 257.969968][ T5844] Bluetooth: hci14: Opcode 0x0c23 failed: -110 [ 258.198193][ T6319] Zero length message leads to an empty skb [ 258.520848][ T5846] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 258.624903][ T5847] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 258.651003][ T5846] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 258.677013][ T5847] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 258.701298][ T5846] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 258.774220][ T5847] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 258.800953][ T5846] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 258.825021][ T5847] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 258.845826][ T5846] Bluetooth: hci13: unexpected cc 0x0c25 length: 249 > 3 [ 278.237692][ T5847] Bluetooth: hci11: command 0x0c39 tx timeout [ 278.244591][ T5847] Bluetooth: hci5: command 0x0406 tx timeout [ 278.250756][ T5847] Bluetooth: hci6: command 0x0406 tx timeout [ 278.256843][ T5847] Bluetooth: hci7: command 0x0406 tx timeout [ 278.263184][ T5847] Bluetooth: hci8: command 0x0406 tx timeout [ 278.269255][ T5847] Bluetooth: hci9: command 0x0406 tx timeout [ 278.275378][ T5847] Bluetooth: hci12: command tx timeout [ 278.281601][ T5847] Bluetooth: hci14: command 0x0c25 tx timeout [ 278.289096][ T5847] Bluetooth: hci14: unexpected cc 0x0c25 length: 249 > 3 [ 278.320812][ T6373] Bluetooth: hci14: Opcode 0x0c25 failed: -110 [ 278.361004][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 278.367352][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 278.542870][ T5847] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 278.880851][ T30] INFO: task jbd2/sda1-8:5167 blocked for more than 142 seconds. [ 278.888863][ T30] Not tainted 6.13.0-rc7-syzkaller-00102-gce69b4019001 #0 [ 278.941774][ T5845] Bluetooth: hci11: Opcode 0x0c39 failed: -110 [ 278.948314][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 278.980615][ T30] task:jbd2/sda1-8 state:D stack:24176 pid:5167 tgid:5167 ppid:2 flags:0x00004000 [ 279.010680][ T30] Call Trace: [ 279.014023][ T30] [ 279.016987][ T30] __schedule+0x1850/0x4c30 [ 279.030705][ T30] ? __pfx___schedule+0x10/0x10 [ 279.035639][ T30] ? __pfx_lock_release+0x10/0x10 [ 279.050515][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 279.056578][ T30] ? schedule+0x90/0x320 [ 279.070569][ T30] schedule+0x14b/0x320 [ 279.074830][ T30] io_schedule+0x8d/0x110 [ 279.079228][ T30] bit_wait_io+0x12/0xd0 [ 279.111754][ T30] __wait_on_bit+0xb0/0x2f0 [ 279.116350][ T30] ? __pfx_bit_wait_io+0x10/0x10 [ 279.121381][ T30] out_of_line_wait_on_bit+0x1d5/0x260 [ 279.127322][ T30] ? __pfx_bit_wait_io+0x10/0x10 [ 279.132606][ T30] ? __pfx_out_of_line_wait_on_bit+0x10/0x10 [ 279.138638][ T30] ? __pfx_wake_bit_function+0x10/0x10 [ 279.144178][ T30] jbd2_journal_commit_transaction+0x3d09/0x6560 [ 279.150673][ T30] ? __pfx_jbd2_journal_commit_transaction+0x10/0x10 [ 279.157407][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 279.162717][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 279.168684][ T30] ? __try_to_del_timer_sync+0x2ad/0x340 [ 279.174561][ T6358] Bluetooth: hci11: Opcode 0x0c03 failed: -4 [ 279.181152][ T30] ? __pfx___timer_delete_sync+0x10/0x10 [ 279.186853][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 279.192865][ T30] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 279.199251][ T30] ? prepare_to_wait+0x186/0x210 [ 279.204787][ T30] ? finish_wait+0xd4/0x1e0 [ 279.209339][ T30] kjournald2+0x41c/0x7b0 [ 279.214334][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 279.220876][ T30] ? __pfx_kjournald2+0x10/0x10 [ 279.225763][ T30] ? __pfx_autoremove_wake_function+0x10/0x10 [ 279.232247][ T30] ? __kthread_parkme+0x169/0x1d0 [ 279.237315][ T30] ? __pfx_kjournald2+0x10/0x10 [ 279.242228][ T30] kthread+0x2f0/0x390 [ 279.246341][ T30] ? __pfx_kjournald2+0x10/0x10 [ 279.251268][ T30] ? __pfx_kthread+0x10/0x10 [ 279.255894][ T30] ret_from_fork+0x4b/0x80 [ 279.260341][ T30] ? __pfx_kthread+0x10/0x10 [ 279.265011][ T30] ret_from_fork_asm+0x1a/0x30 [ 279.269819][ T30] [ 279.272943][ T30] [ 279.272943][ T30] Showing all locks held in the system: [ 279.280762][ T30] 3 locks held by kworker/0:1/9: [ 279.285725][ T30] 3 locks held by kworker/1:0/25: [ 279.291545][ T30] #0: ffff88801ac81948 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1840 [ 279.320242][ T6387] chnl_net:caif_netlink_parms(): no params data found [ 279.327135][ T30] #1: ffffc900001f7d00 ((reg_check_chans).work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1840 [ 279.360543][ T30] #2: ffffffff8fcb2f48 (rtnl_mutex){+.+.}-{4:4}, at: reg_check_chans_work+0x99/0xfb0 [ 279.370298][ T30] 1 lock held by khungtaskd/30: [ 279.390540][ T30] #0: ffffffff8e937ae0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x55/0x2a0 [ 279.401998][ T30] 3 locks held by kworker/u8:2/35: [ 279.407163][ T30] #0: ffff8880309a2148 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1840 [ 279.419450][ T30] #1: ffffc90000ab7d00 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1840 [ 279.433918][ T30] #2: ffffffff8fcb2f48 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_verify_work+0x19/0x30 [ 279.443881][ T30] 3 locks held by kworker/u8:3/52: [ 279.449030][ T30] #0: ffff88801baed948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1840 [ 279.460035][ T30] #1: ffffc90000bc7d00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1840 [ 279.470734][ T30] #2: ffffffff8fca6a90 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0x16a/0xd50 [ 279.480226][ T30] 4 locks held by kworker/u9:0/54: [ 279.485410][ T30] #0: ffff88804f3bc148 ((wq_completion)hci6){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1840 [ 279.496315][ T30] #1: ffffc90000be7d00 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1840 [ 279.509065][ T30] #2: ffff888012180d80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1ec/0x400 [ 279.519564][ T30] #3: ffff888012180078 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0x1e4/0x11f0 [ 279.530332][ T30] 4 locks held by kworker/u8:5/248: [ 279.535596][ T30] #0: ffff88801ac89148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1840 [ 279.548161][ T30] #1: ffffc90003037d00 ((work_completion)(&(&kfence_timer)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1840 [ 279.580523][ T30] #2: ffffffff8e7d2ed0 (cpu_hotplug_lock){++++}-{0:0}, at: static_key_enable+0x12/0x20 [ 279.590388][ T30] #3: ffffffff8e9eee08 (jump_label_mutex){+.+.}-{4:4}, at: static_key_enable_cpuslocked+0xd7/0x260 [ 279.630562][ T30] 4 locks held by kworker/u9:1/5143: [ 279.635915][ T30] #0: ffff888024f06148 ((wq_completion)hci5){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1840 [ 279.660651][ T30] #1: ffffc900103cfd00 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1840 [ 279.680521][ T30] #2: ffff888012184d80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1ec/0x400 [ 279.700527][ T30] #3: ffff888012184078 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0x1e4/0x11f0 [ 279.710408][ T30] 2 locks held by dhcpcd/5500: [ 279.740521][ T30] #0: ffff8880621496c8 (nlk_cb_mutex-ROUTE){+.+.}-{4:4}, at: __netlink_dump_start+0x119/0x790 [ 279.761074][ T30] #1: ffffffff8fcb2f48 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_dumpit+0x99/0x200 [ 279.769990][ T30] 2 locks held by getty/5597: [ 279.780508][ T30] #0: ffff888034d290a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 279.790384][ T30] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x6a6/0x1e00 [ 279.830528][ T30] 5 locks held by kworker/u9:2/5834: [ 279.835874][ T30] #0: ffff88806d663948 ((wq_completion)hci9){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1840 [ 279.860720][ T30] #1: ffffc90003ca7d00 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1840 [ 279.880512][ T30] #2: ffff88803037cd80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1ec/0x400 [ 279.890449][ T30] #3: ffff88803037c078 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0x1e4/0x11f0 [ 279.920546][ T30] #4: ffffffff8e93cff8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x451/0x830 [ 279.960716][ T30] 4 locks held by kworker/u9:4/5839: [ 279.966073][ T30] #0: ffff88804c600948 ((wq_completion)hci7){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1840 [ 279.985728][ T30] #1: ffffc90003e1fd00 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1840 [ 279.998512][ T30] #2: ffff88807bec4d80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1ec/0x400 [ 280.008471][ T30] #3: ffff88807bec4078 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0x1e4/0x11f0 [ 280.018706][ T30] 4 locks held by kworker/u9:5/5843: [ 280.024595][ T30] #0: ffff888030f29948 ((wq_completion)hci8){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1840 [ 280.036124][ T30] #1: ffffc90003e4fd00 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1840 [ 280.048782][ T30] #2: ffff88807bec0d80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1ec/0x400 [ 280.058730][ T30] #3: ffff88807bec0078 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0x1e4/0x11f0 [ 280.068668][ T30] 3 locks held by kworker/1:5/5885: [ 280.073927][ T30] 2 locks held by kworker/0:5/5889: [ 280.079317][ T30] #0: ffff88801ac80948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1840 [ 280.090386][ T30] #1: ffffc900041afd00 (free_ipc_work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1840 [ 280.100792][ T30] 3 locks held by syz.0.6/5924: [ 280.105664][ T30] 1 lock held by syz.3.88/6284: [ 280.110694][ T30] #0: ffffffff8fcb2f48 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3b/0x1b0 [ 280.119763][ T30] 1 lock held by vivid-000-vid-o/6286: [ 280.125326][ T30] 1 lock held by syz.5.91/6324: [ 280.130877][ T30] #0: ffffffff8fcb2f48 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3b/0x1b0 [ 280.139941][ T30] 3 locks held by syz.1.93/6317: [ 280.145498][ T30] #0: ffff8880335c4d80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x203/0x510 [ 280.155641][ T30] #1: ffff8880335c4078 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x5c8/0x11c0 [ 280.165631][ T30] #2: ffffffff8e93cff8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x451/0x830 [ 280.176634][ T30] 2 locks held by syz.4.94/6319: [ 280.181625][ T30] #0: ffff888059090d80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x203/0x510 [ 280.191738][ T30] #1: ffff888059090078 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x5c8/0x11c0 [ 280.201587][ T30] 2 locks held by syz-executor/6338: [ 280.206981][ T30] #0: ffffffff8fca6a90 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x328/0x570 [ 280.216560][ T30] #1: ffffffff8fcb2f48 (rtnl_mutex){+.+.}-{4:4}, at: wg_netns_pre_exit+0x1f/0x1e0 [ 280.226012][ T30] 1 lock held by syz-executor/6339: [ 280.231829][ T30] #0: ffffffff8fca6a90 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x328/0x570 [ 280.241866][ T30] 1 lock held by syz-executor/6340: [ 280.247094][ T30] #0: ffffffff8fca6a90 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x328/0x570 [ 280.256623][ T30] 1 lock held by syz-executor/6341: [ 280.261950][ T30] #0: ffffffff8fca6a90 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x328/0x570 [ 280.271472][ T30] 1 lock held by syz-executor/6342: [ 280.276691][ T30] #0: ffffffff8fca6a90 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x328/0x570 [ 280.286210][ T30] 1 lock held by syz-executor/6364: [ 280.291469][ T30] #0: ffff888027fd0d80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_dev_open+0x1f4/0x300 [ 280.301125][ T30] 2 locks held by dhcpcd/6365: [ 280.305927][ T30] #0: ffff888027190258 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: sk_setsockopt+0xf0f/0x3440 [ 280.315984][ T30] #1: ffffffff8e7e7e28 (text_mutex){+.+.}-{4:4}, at: text_poke_copy+0x29/0xd0 [ 280.325086][ T30] 2 locks held by dhcpcd/6366: [ 280.329871][ T30] #0: ffff888012cc6258 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: sk_setsockopt+0xf0f/0x3440 [ 280.340329][ T30] #1: ffffffff8e7e7e28 (text_mutex){+.+.}-{4:4}, at: text_poke_copy+0x29/0xd0 [ 280.350018][ T30] 2 locks held by syz-executor/6387: [ 280.355376][ T30] #0: ffffffff8f45c540 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x22/0x250 [ 280.365208][ T30] #1: ffffffff8fcb2f48 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0xce2/0x2210 [ 280.374390][ T30] [ 280.376737][ T30] ============================================= [ 280.376737][ T30] [ 280.385225][ T30] NMI backtrace for cpu 0 [ 280.389585][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.13.0-rc7-syzkaller-00102-gce69b4019001 #0 [ 280.400120][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 280.410203][ T30] Call Trace: [ 280.413525][ T30] [ 280.416494][ T30] dump_stack_lvl+0x241/0x360 [ 280.421243][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 280.426487][ T30] ? __pfx__printk+0x10/0x10 [ 280.431126][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 280.436107][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 280.441599][ T30] ? _printk+0xd5/0x120 [ 280.445789][ T30] ? __pfx__printk+0x10/0x10 [ 280.450408][ T30] ? __wake_up_klogd+0xcc/0x110 [ 280.455306][ T30] ? __pfx__printk+0x10/0x10 [ 280.459937][ T30] ? __rcu_read_unlock+0xa1/0x110 [ 280.464993][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 280.471001][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 280.477105][ T30] watchdog+0xff6/0x1040 [ 280.481389][ T30] ? watchdog+0x1ea/0x1040 [ 280.485845][ T30] ? __pfx_watchdog+0x10/0x10 [ 280.490638][ T30] kthread+0x2f0/0x390 [ 280.494735][ T30] ? __pfx_watchdog+0x10/0x10 [ 280.499452][ T30] ? __pfx_kthread+0x10/0x10 [ 280.504112][ T30] ret_from_fork+0x4b/0x80 [ 280.508570][ T30] ? __pfx_kthread+0x10/0x10 [ 280.513202][ T30] ret_from_fork_asm+0x1a/0x30 [ 280.518014][ T30] [ 280.521626][ T30] Sending NMI from CPU 0 to CPUs 1: [ 280.526875][ C1] NMI backtrace for cpu 1 [ 280.526893][ C1] CPU: 1 UID: 0 PID: 6286 Comm: vivid-000-vid-o Not tainted 6.13.0-rc7-syzkaller-00102-gce69b4019001 #0 [ 280.526915][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 280.526925][ C1] RIP: 0010:validate_chain+0x126/0x5920 [ 280.526954][ C1] Code: 04 00 00 81 e3 ff 1f 00 00 48 89 d8 48 c1 e8 06 48 8d 3c c5 80 58 2a 94 be 08 00 00 00 e8 f2 75 8a 00 48 0f a3 1d 4a df ae 12 <72> 66 48 c7 c0 c0 c9 3a 9a 48 c1 e8 03 42 0f b6 04 20 84 c0 0f 85 [ 280.526968][ C1] RSP: 0018:ffffc90000a18700 EFLAGS: 00000057 [ 280.526985][ C1] RAX: 0000000000000001 RBX: 0000000000000a63 RCX: ffffffff817b792e [ 280.526997][ C1] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffff942a59c8 [ 280.527008][ C1] RBP: ffffc90000a18a00 R08: ffffffff942a59cf R09: 1ffffffff2854b39 [ 280.527022][ C1] R10: dffffc0000000000 R11: fffffbfff2854b3a R12: dffffc0000000000 [ 280.527035][ C1] R13: ffff88803029a900 R14: 1283669080e07d2c R15: 0000000000000001 [ 280.527047][ C1] FS: 0000000000000000(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 280.527062][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 280.527074][ C1] CR2: 000055557f3ac808 CR3: 000000000e736000 CR4: 00000000003526f0 [ 280.527090][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 280.527100][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 280.527111][ C1] Call Trace: [ 280.527117][ C1] [ 280.527125][ C1] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 280.527147][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 280.527174][ C1] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 280.527206][ C1] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 280.527224][ C1] ? nmi_handle+0x14f/0x5a0 [ 280.527245][ C1] ? nmi_handle+0x2a/0x5a0 [ 280.527266][ C1] ? validate_chain+0x126/0x5920 [ 280.527288][ C1] ? default_do_nmi+0x63/0x160 [ 280.527309][ C1] ? exc_nmi+0x123/0x1f0 [ 280.527327][ C1] ? end_repeat_nmi+0xf/0x53 [ 280.527347][ C1] ? validate_chain+0x11e/0x5920 [ 280.527389][ C1] ? validate_chain+0x126/0x5920 [ 280.527413][ C1] ? validate_chain+0x126/0x5920 [ 280.527438][ C1] ? validate_chain+0x126/0x5920 [ 280.527462][ C1] [ 280.527467][ C1] [ 280.527473][ C1] ? ret_from_fork_asm+0x1a/0x30 [ 280.527491][ C1] ? __pfx_validate_chain+0x10/0x10 [ 280.527514][ C1] ? validate_chain+0x11e/0x5920 [ 280.527540][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 280.527561][ C1] ? __pfx_validate_chain+0x10/0x10 [ 280.527586][ C1] ? __pfx_validate_chain+0x10/0x10 [ 280.527611][ C1] ? mark_lock+0x9a/0x360 [ 280.527634][ C1] ? mark_lock+0x9a/0x360 [ 280.527657][ C1] ? __lock_acquire+0x1397/0x2100 [ 280.527681][ C1] ? mark_lock+0x9a/0x360 [ 280.527704][ C1] __lock_acquire+0x1397/0x2100 [ 280.527731][ C1] lock_acquire+0x1ed/0x550 [ 280.527750][ C1] ? advance_sched+0xab/0xca0 [ 280.527775][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 280.527795][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 280.527820][ C1] ? __hrtimer_run_queues+0x477/0xd30 [ 280.527845][ C1] ? __pfx_lock_release+0x10/0x10 [ 280.527868][ C1] ? __pfx_advance_sched+0x10/0x10 [ 280.527888][ C1] _raw_spin_lock+0x2e/0x40 [ 280.527909][ C1] ? advance_sched+0xab/0xca0 [ 280.527931][ C1] advance_sched+0xab/0xca0 [ 280.527952][ C1] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 280.527976][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 280.528002][ C1] ? __pfx_advance_sched+0x10/0x10 [ 280.528023][ C1] __hrtimer_run_queues+0x59b/0xd30 [ 280.528054][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 280.528081][ C1] ? rcu_is_watching+0x15/0xb0 [ 280.528107][ C1] hrtimer_interrupt+0x403/0xa40 [ 280.528140][ C1] __sysvec_apic_timer_interrupt+0x110/0x420 [ 280.528173][ C1] sysvec_apic_timer_interrupt+0xa1/0xc0 [ 280.528198][ C1] [ 280.528204][ C1] [ 280.528211][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 280.528229][ C1] RIP: 0010:raw_spin_rq_unlock_irq+0x19/0x90 [ 280.528254][ C1] Code: 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 41 57 41 56 53 48 89 fb 66 90 48 89 df e8 fe 02 5c 0a e8 79 73 37 00 fb 5b <41> 5e 41 5f c3 cc cc cc cc f3 0f 1e fa 49 bf 00 00 00 00 00 fc ff [ 280.528268][ C1] RSP: 0018:ffffc900047e7ac8 EFLAGS: 00000282 [ 280.528283][ C1] RAX: e47447cc2cb80700 RBX: ffff8880b873e8c0 RCX: ffffffff9a3ac903 [ 280.528297][ C1] RDX: dffffc0000000000 RSI: ffffffff8c0a98e0 RDI: ffffffff8c5fb220 [ 280.528310][ C1] RBP: ffffc900047e7cf8 R08: ffffffff901983b7 R09: 1ffffffff2033076 [ 280.528324][ C1] R10: dffffc0000000000 R11: fffffbfff2033077 R12: ffffc900047e7c70 [ 280.528337][ C1] R13: 1ffff110170e7ed9 R14: ffff888030299e00 R15: ffff88803029a570 [ 280.528358][ C1] __schedule+0x1a09/0x4c30 [ 280.528385][ C1] ? vivid_thread_vid_out+0x1051/0x1940 [ 280.528417][ C1] ? __pfx___schedule+0x10/0x10 [ 280.528441][ C1] ? __mutex_unlock_slowpath+0x21e/0x790 [ 280.528467][ C1] ? vivid_thread_vid_out+0xb4c/0x1940 [ 280.528497][ C1] ? do_raw_spin_unlock+0x13c/0x8b0 [ 280.528515][ C1] schedule+0x14b/0x320 [ 280.528539][ C1] vivid_thread_vid_out+0x1143/0x1940 [ 280.528578][ C1] ? __pfx_vivid_thread_vid_out+0x10/0x10 [ 280.528604][ C1] kthread+0x2f0/0x390 [ 280.528625][ C1] ? __pfx_vivid_thread_vid_out+0x10/0x10 [ 280.528650][ C1] ? __pfx_kthread+0x10/0x10 [ 280.528672][ C1] ret_from_fork+0x4b/0x80 [ 280.528689][ C1] ? __pfx_kthread+0x10/0x10 [ 280.528710][ C1] ret_from_fork_asm+0x1a/0x30 [ 280.528732][ C1] [ 280.528884][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 281.066430][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.13.0-rc7-syzkaller-00102-gce69b4019001 #0 [ 281.076960][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 281.087040][ T30] Call Trace: [ 281.090345][ T30] [ 281.093297][ T30] dump_stack_lvl+0x241/0x360 [ 281.098017][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 281.103247][ T30] ? __pfx__printk+0x10/0x10 [ 281.107868][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 281.113918][ T30] ? vscnprintf+0x5d/0x90 [ 281.118280][ T30] panic+0x349/0x880 [ 281.122217][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 281.128403][ T30] ? __pfx_panic+0x10/0x10 [ 281.132952][ T30] ? tick_nohz_tick_stopped+0x82/0xb0 [ 281.138393][ T30] ? __irq_work_queue_local+0x137/0x410 [ 281.143982][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 281.149401][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 281.155599][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 281.161809][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 281.168021][ T30] watchdog+0x1035/0x1040 [ 281.172396][ T30] ? watchdog+0x1ea/0x1040 [ 281.176939][ T30] ? __pfx_watchdog+0x10/0x10 [ 281.181646][ T30] kthread+0x2f0/0x390 [ 281.185745][ T30] ? __pfx_watchdog+0x10/0x10 [ 281.190463][ T30] ? __pfx_kthread+0x10/0x10 [ 281.195085][ T30] ret_from_fork+0x4b/0x80 [ 281.199547][ T30] ? __pfx_kthread+0x10/0x10 [ 281.204185][ T30] ret_from_fork_asm+0x1a/0x30 [ 281.208993][ T30] [ 282.372385][ T30] Shutting down cpus with NMI [ 282.377533][ T30] Kernel Offset: disabled [ 282.381871][ T30] Rebooting in 86400 seconds..