last executing test programs: 2m23.203458255s ago: executing program 2 (id=38): syz_open_dev$swradio(&(0x7f00000046c0), 0x1, 0x2) prlimit64(0x0, 0xe, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = mq_open(&(0x7f0000000000)='!selinu\xff\x7f\x00\x00inux\x00T\x8b\xb5\xf3\xcb\xdd\xe3\xbf2\x86\x01\x84\xdd\x8a\x8f_l\xa1L\xb1\xef\xb2\xc9\xf7+C\xb2\x8e9\xb8\xec\x1a\xe5\xaeq\x8fZ\xff\xbcY+\xaf0<\xa3\xb8\"Zm\x1c\x18\x11\x93\xb5z \xc2\x8b\xa9\xc5\x9es\t\xfe\x002\xa0-\xaf\xcdP\x9f\xe5Iv\xce*\xa8\xa3\x14i\x05\x8f\x9b\x1eB\x9f\x9d#E\x19\xdc\xfe\xc7\xeb\xb5\xcd\xc8\xe2U\xce\x00\x00', 0x6e93ebbbcc0884f2, 0x2c, &(0x7f0000000300)={0x2, 0x1, 0x5}) mq_timedsend(r2, 0x0, 0x0, 0x5f8, 0x0) mq_timedsend(r2, 0x0, 0x0, 0xa, 0x0) mq_timedreceive(r2, &(0x7f0000000340)=""/200, 0xc8, 0x0, 0x0) 2m21.67315888s ago: executing program 2 (id=42): readv(0xffffffffffffffff, &(0x7f0000000540)=[{0x0}], 0x1) r0 = mq_open(&(0x7f0000000040)='!\x7f\x00\xca\x00\x00\x00\f\x00\x00\x01E!Tnux\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000000)={0x0, 0x1, 0x8}) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x28, 0x24, 0x109, 0x70bd2e, 0x25dfdbfb, {0x2, 0x7c}, [@nested={0x14, 0x1, 0x0, 0x1, [@typed={0x8, 0x2, 0x0, 0x0, @u32=0x3}, @typed={0x8, 0x5, 0x0, 0x0, @fd}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4048011}, 0x0) mq_timedreceive(r0, 0x0, 0xfffffffffffffee3, 0x1, 0x0) mq_timedreceive(r0, &(0x7f0000000440)=""/30, 0x1e, 0x80000000, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@gettaction={0x1c, 0x5a, 0xc6b747b6bf1c6b95, 0x0, 0x0, {}, [@action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8}]}, 0x1c}}, 0x0) r3 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, 0x0}], 0x1, 0x40800) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) timer_settime(r4, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) 2m19.685762431s ago: executing program 2 (id=46): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r3 = syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0) readv(r3, &(0x7f0000000100)=[{&(0x7f0000000080)=""/80, 0x50}], 0x1) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x124411, 0x0) 2m18.65820075s ago: executing program 2 (id=52): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da070000000000010902240001000000000904000009030000000921000000012222000905810308"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x22, 0x1d, {[@global=@item_4={0x3, 0x1, 0x9, "ef1e62b8"}, @global=@item_012={0x2, 0x1, 0x0, "e53f"}, @global=@item_012={0x0, 0x1, 0x6}, @global=@item_4={0x3, 0x1, 0x0, "0900be00"}, @main=@item_4={0x3, 0x0, 0x8, "c99555d4"}, @local=@item_4={0x3, 0x2, 0x0, "09007a15"}, @local=@item_4={0x3, 0x2, 0x0, "1d8c3dd8"}]}}, 0x0}, 0x0) 2m16.19650832s ago: executing program 2 (id=61): syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) syz_open_dev$tty1(0xc, 0x4, 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) r4 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, &(0x7f0000000000)={{0x84, @broadcast, 0x4e21, 0x3, 'fo\x00', 0x11, 0x3240, 0x3a}, {@loopback, 0x4e23, 0x4, 0xc3, 0x12d5c, 0x12d5c}}, 0x44) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(r3, 0x0, 0x488, &(0x7f0000000280)={{0x84, @empty, 0x4e20, 0x3, 'lblc\x00', 0x1d, 0x2, 0x2a}, {@loopback, 0x4e23, 0x10000, 0xc24, 0x9, 0xfffffffb}}, 0x44) r6 = accept$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_MCAST_LEAVE_GROUP(r6, 0x29, 0x2d, &(0x7f0000000340)={0x5, {{0xa, 0x4e22, 0xb, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0xa}}}, 0x88) r7 = syz_open_dev$video4linux(&(0x7f0000000100), 0xa, 0x2) ioctl$VIDIOC_ENUMSTD(r7, 0xc0485619, &(0x7f0000000180)={0x9, 0xc000c, "c1b1991f8691d750115cb05cc56007f9c2a704ac1609a0ad", {0xffffffff, 0x4}, 0x5}) 2m12.604372865s ago: executing program 2 (id=64): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r0) recvmmsg(r0, &(0x7f0000008bc0)=[{{0x0, 0x0, 0x0}, 0x7fffffff}], 0x3fffffffffffde9, 0x10002, 0x0) 1m57.197683214s ago: executing program 32 (id=64): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r0) recvmmsg(r0, &(0x7f0000008bc0)=[{{0x0, 0x0, 0x0}, 0x7fffffff}], 0x3fffffffffffde9, 0x10002, 0x0) 11.52225061s ago: executing program 4 (id=294): socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x44, 0x30, 0x1, 0x0, 0x0, {}, [{0x30, 0x1, [@m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000040), 0x21041, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x15) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(0xffffffffffffffff, 0x400455c8, 0x400000009) kexec_load(0xd0ffbf, 0x2, &(0x7f00000002c0)=[{0x0, 0x0, 0xbfffd000, 0x10000}, {0x0, 0x0, 0x3e0000}], 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000003c0), 0x280449d, &(0x7f0000000300)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB="2c726f6f746d6f64653d30303030303030303030303030303030303034303030302c757365725f69643d31eea03ddc3caa801dd0569e3e261e9510d7b300b4a83e6b7e8c6c93750a6778986716d7b5d676d04331a198d374fb2ab25512a8407ee7a763372418fc0d3bc2", @ANYRESDEC=0x0, @ANYBLOB, @ANYRESDEC=0x0, @ANYBLOB=',\x00']) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000001b00)={0x18, 0x2e, 0x1, 0xf0bd26, 0x25dfdbfc, {0x4}, [@nested={0x4, 0xd}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) read$FUSE(0xffffffffffffffff, &(0x7f00000093c0)={0x2020}, 0x2020) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'veth1_to_bridge\x00', 0x0}) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet6_SIOCSIFADDR(r6, 0x8916, &(0x7f0000000100)={@local, 0x0, r5}) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r7, &(0x7f0000000080)={0xa, 0x0, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}}, 0x1c) 10.400510994s ago: executing program 4 (id=296): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000083667d1040206402d14e010203010902"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f00000006c0)={0x34, &(0x7f0000000480)={0x40, 0xc}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000b80)={0x44, &(0x7f00000008c0)={0x40, 0xc}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 10.03355445s ago: executing program 0 (id=297): openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$KVM_X86_SETUP_MCE(r0, 0x4008ae9c, &(0x7f00000000c0)={0x19, 0x1, 0x32}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000019000/0x18000)=nil, &(0x7f0000000980)=[@text64={0x40, 0x0}], 0x1, 0x79, &(0x7f00000001c0)=[@cr4={0x1, 0x8045}], 0x1) ioctl$KVM_X86_SET_MCE(r0, 0x4040ae9e, &(0x7f00000004c0)={0xea00000000000000, 0xeeee0000, 0x8000009, 0x8, 0xc}) ioctl$KVM_X86_SET_MCE(r0, 0x4040ae9e, &(0x7f0000000140)={0xe200000000000000, 0x3000, 0xfffffffffffffffd, 0x2, 0x2}) 9.783145924s ago: executing program 0 (id=298): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000000140)="f4", 0x1, 0x0, &(0x7f0000000240)={0xa, 0x4e21, 0x0, @rand_addr=' \x01\x00'}, 0x1c) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000000)={0x0, 0x0, 0x2ce9}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000200)={0x0, 0x9, 0x2ce8}, 0x8) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) unshare(0x10000100) socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$AUTOFS_IOC_ASKUMOUNT(0xffffffffffffffff, 0x80049370, &(0x7f0000000100)) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r2) sendmsg$MPTCP_PM_CMD_GET_ADDR(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000003c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="ffff2bbd7000fbdbdf2503"], 0x14}, 0x1, 0x0, 0x0, 0x408c9}, 0x4800) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r2) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000200)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd308", 0x14, 0x6, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10, 0x2}}}}}}}, 0x0) write$cgroup_devices(r4, 0x0, 0xffdd) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 9.008116932s ago: executing program 1 (id=300): getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r0, 0xc01064d1, &(0x7f0000000040)={0x1, 0x0, &(0x7f0000000100)=[0x0]}) 8.776054442s ago: executing program 1 (id=302): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x60140, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x6) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc02c5625, &(0x7f0000000180)={0x8003, 0xc5fb, @name="c5c58b53ad0390e6ee0b42ab5e3428d6c880e979ab8ee6b681d9519507b31e3a"}) r4 = add_key$user(0x0, &(0x7f0000000440), &(0x7f00000000c0), 0x0, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={0x0, r4}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_TSC_KHZ_vm(r5, 0xaea2, 0x4) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$netlink(r6, &(0x7f0000001f80)={0x0, 0x0, &(0x7f0000001f00)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="1c0000002700010000000000000000000c000080080023"], 0x1c}], 0x1}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc800) r8 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000080)={0x0, &(0x7f0000000000)=[@nested_amd_invlpga={0x17d, 0x20, {0x100000, 0x8072}}], 0x20}) ioctl$KVM_KVMCLOCK_CTRL(r8, 0xaead) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, 0x0) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f00000000c0)={"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"}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000006c0)=@newchain={0x24, 0x64, 0x200, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x3, 0x9}, {0x8, 0x7}, {0xfff2, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x24000040) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=@newtaction={0x64, 0x30, 0x1, 0x0, 0x25dfdbfc, {}, [{0x50, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x7}, 0x29}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmmsg(r9, &(0x7f00000002c0), 0x40000000000009f, 0x0) 8.477329s ago: executing program 0 (id=303): socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x44, 0x30, 0x1, 0x0, 0x0, {}, [{0x30, 0x1, [@m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000040), 0x21041, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x15) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r4, 0x400455c8, 0x400000009) kexec_load(0xd0ffbf, 0x2, &(0x7f00000002c0)=[{0x0, 0x0, 0xbfffd000, 0x10000}, {0x0, 0x0, 0x3e0000}], 0x0) ioctl$TIOCVHANGUP(r4, 0x5437, 0x0) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000003c0), 0x280449d, &(0x7f0000000300)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB="2c726f6f746d6f64653d30303030303030303030303030303030303034303030302c757365725f69643d31eea03ddc3caa801dd0569e3e261e9510d7b300b4a83e6b7e8c6c93750a6778986716d7b5d676d04331a198d374fb2ab25512a8407ee7a763372418fc0d3bc2", @ANYRESDEC=0x0, @ANYBLOB, @ANYRESDEC=0x0, @ANYBLOB=',\x00']) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={0x0}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) read$FUSE(0xffffffffffffffff, &(0x7f00000093c0)={0x2020}, 0x2020) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000200)={'veth1_to_bridge\x00', 0x0}) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet6_SIOCSIFADDR(r7, 0x8916, &(0x7f0000000100)={@local, 0x0, r6}) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r8, &(0x7f0000000080)={0xa, 0x0, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}}, 0x1c) 8.475376584s ago: executing program 4 (id=304): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a20000000000a01080000000000000000010000000900010073797a310000000054000000030a01020000000000000000010000000900030073797a320000000028000480080002400000"], 0xfc}}, 0x0) 6.120853278s ago: executing program 1 (id=305): socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x44, 0x30, 0x1, 0x0, 0x0, {}, [{0x30, 0x1, [@m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000040), 0x21041, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x15) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(0xffffffffffffffff, 0x400455c8, 0x400000009) kexec_load(0xd0ffbf, 0x2, &(0x7f00000002c0)=[{0x0, 0x0, 0xbfffd000, 0x10000}, {0x0, 0x0, 0x3e0000}], 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000003c0), 0x280449d, &(0x7f0000000300)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB="2c726f6f746d6f64653d30303030303030303030303030303030303034303030302c757365725f69643d31eea03ddc3caa801dd0569e3e261e9510d7b300b4a83e6b7e8c6c93750a6778986716d7b5d676d04331a198d374fb2ab25512a8407ee7a763372418fc0d3bc2", @ANYRESDEC=0x0, @ANYBLOB, @ANYRESDEC=0x0, @ANYBLOB=',\x00']) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000001b00)={0x18, 0x2e, 0x1, 0xf0bd26, 0x25dfdbfc, {0x4}, [@nested={0x4, 0xd}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) read$FUSE(0xffffffffffffffff, &(0x7f00000093c0)={0x2020}, 0x2020) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'veth1_to_bridge\x00', 0x0}) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet6_SIOCSIFADDR(r6, 0x8916, &(0x7f0000000100)={@local, 0x0, r5}) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r7, &(0x7f0000000080)={0xa, 0x0, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}}, 0x1c) 5.983033052s ago: executing program 4 (id=306): unshare(0x6020400) r0 = socket$tipc(0x1e, 0x5, 0x0) syz_open_dev$mouse(&(0x7f0000001680), 0x0, 0x80041) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) waitid(0x0, 0x0, &(0x7f0000000380), 0x8, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) bind$tipc(r0, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x0, 0x20000003}, 0xffffffff}}, 0x10) socket$can_j1939(0x1d, 0x2, 0x7) socket$inet_udp(0x2, 0x2, 0x0) syz_usb_connect$hid(0x6, 0x36, &(0x7f0000000140)=ANY=[], 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x101100, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24040045) r1 = io_uring_setup(0x1191, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x1, 0xce}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) ioctl$int_in(r2, 0x5452, &(0x7f0000000000)=0x7) socket(0x400000000010, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r6, &(0x7f00000005c0)="bad330fbc9b55400040000ea0756", 0xe, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r5, 0x1, 0xd8, 0x6, @multicast}, 0x14) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}, {&(0x7f0000000100)}], 0x2) io_uring_enter(r1, 0x5ed9, 0xcf74, 0x6, 0x0, 0x0) bind$can_raw(0xffffffffffffffff, &(0x7f0000000000), 0x10) 4.312047699s ago: executing program 0 (id=307): socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$video4linux(&(0x7f0000003e80), 0x7, 0x8000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1c6c, &(0x7f0000000040)={0x0, 0xaebb, 0xd000, 0x20000a, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x800, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0xfff2}, {0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 3.958748355s ago: executing program 0 (id=309): socket(0x11, 0x3, 0x8) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket(0x2b, 0x1, 0x1) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) socket$kcm(0x11, 0x2, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) sendmmsg(r0, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r2}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) 3.637001227s ago: executing program 0 (id=310): socket$nl_route(0x10, 0x3, 0x0) r0 = fsopen(&(0x7f0000000040)='fuseblk\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000004c0)='j\x95\'\x8aC\x16\xca\\', &(0x7f0000000c40)='\xe6usek\v\xf6u%\x9b\x00\x00\xad\xeb\x00\x00\x00\x00\x01\x80\x00\x00\xcf\x9b\x9f\b\xb6\xfe\xc8\xda~-\x83w\xf9Z\xd2\xcb\xcdF\xd0#N7\x17\xfc\x1e\xf1\x97\xffxi\xe0KE}]\x8e\xca\xe3+\xc8\x98\x03\x91\x88(\bn\x7f\x0e\x85\xa5\xb4\n?^\xc9\xef\xe0Q\x01\xb6\xa5\x81t\x06\xda\x95\x935\xf1\x18\xac\x00\xf0\xff\xff\x80\x1a\xa1\x06\xfd\x01\x00\x00\x00\x0f\xf8\xe3\x8a\x1f\x9c\xf3\xc5\x1f\xf9\xbf?\xc1\rv\xd3j\r6\x7f\x00'/141, 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000140)='{:\'@-\x00', &(0x7f0000000180)='%*.\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, 0x0, &(0x7f0000000400)='(!\xef(.(\\-]\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, &(0x7f00000001c0)='\xe6\xd2=(L\x9f\x1c&\xda\xfa\xf3}\x18\xdckL<\xa5-#\xc8\xb7\x98\f\x87\xcf', &(0x7f0000000540)="82", 0x1) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000b80)='\xe0\"\xef\xb1\xea\xe6\x9c\xe6\xc8M\xdb\x86\xb3\x8b\xbe\xd5\xbdB\x92\xa0\x19-+a\x13qQ\xd5f39hSr\xafbB\xe2\xe8\xcd\x1bf\x18\x7f\xf27E#\"\xab\x99\xec\x88\x8d\xd8C\x0f\x95\xff\xfeG\xf9t\xb1 \xcc\xc5\xbb\x88\xb6\xd2\xf2Jwq\xf8oG0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000001c0)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000240)=[0x0, 0x0, 0x0], &(0x7f0000000040), 0x3, r2}) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000045006962"], 0x1c}}, 0x0) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000580)={0x401, 0x1, &(0x7f0000000180)=[r2], &(0x7f00000000c0), 0x0, &(0x7f0000000340), 0x0, 0xffffffffffffffff}) 2.891762963s ago: executing program 4 (id=315): mbind(&(0x7f0000789000/0x2000)=nil, 0x2000, 0x1, &(0x7f0000000280)=0x1800000000, 0x56, 0x2) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$UHID_INPUT(r0, &(0x7f0000000280)={0x8, {"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", 0x1000}}, 0x1006) r1 = socket$nl_generic(0x10, 0x3, 0x10) fgetxattr(r1, &(0x7f0000000080)=@known='system.posix_acl_default\x00', &(0x7f0000000740)=""/4096, 0x1000) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) syz_usb_connect(0x0, 0x3b, &(0x7f0000000080)=ANY=[@ANYBLOB="120100001b3ebd40d80483009c0001020301090229000100000000090400000002020100050200000005"], 0x0) inotify_init1(0x800) openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x2}) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@RTM_NEWMDB={0x38, 0x54, 0x1e5, 0x0, 0xfffffffd, {0x7, r6}, [@MDBA_SET_ENTRY={0x20, 0x1, {r8, 0x1, 0x1, 0x1, {@ip4=@broadcast, 0x86dd}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x30, 0x10, 0x801, 0x0, 0x200000, {0x0, 0x0, 0x0, 0x0, 0x90, 0x800}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x4000880) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, &(0x7f0000001400)={0x1}) unshare(0x2040400) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x80001d00c0d1) connect$inet(r0, &(0x7f0000001440)={0x2, 0x4e21, @broadcast}, 0x10) syz_open_dev$loop(&(0x7f0000000000), 0xffffffff, 0x400000) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r10 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0xa0000, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r10, 0xc0184800, &(0x7f0000000100)={0x4004, r9, 0x2}) syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo/4\x00') 2.71485124s ago: executing program 3 (id=316): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a20000000000a01080000000000000000010000000900010073797a310000000054000000030a01020000000000000000010000000900030073797a320000000028000480080002400000000008000140000000051400030076657468315f6d6163767461700000000900010073797a31000000004c00000005"], 0xfc}}, 0x0) 2.509662342s ago: executing program 3 (id=317): openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x60140, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc02c5625, &(0x7f0000000180)={0x8003, 0xc5fb, @name="c5c58b53ad0390e6ee0b42ab5e3428d6c880e979ab8ee6b681d9519507b31e3a"}) r3 = add_key$user(&(0x7f0000000000), &(0x7f00000001c0)={'syz', 0x0}, &(0x7f0000000540)="bc3009bb66682c9d4233b0cc644f5fdae5b9d17f7ada03bc77aea173022c18232e1fb162caf50d08fda4", 0x2a, 0xfffffffffffffffe) r4 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r3, r4, r3}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) ioctl$KVM_SET_TSC_KHZ_vm(0xffffffffffffffff, 0xaea2, 0x4) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$netlink(r5, &(0x7f0000001f80)={0x0, 0x0, 0x0}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000080)={0x0, &(0x7f0000000000)=[@nested_amd_invlpga={0x17d, 0x20, {0x100000, 0x8072}}], 0x20}) ioctl$KVM_KVMCLOCK_CTRL(r6, 0xaead) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, 0x0) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f00000000c0)={"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"}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000006c0)=@newchain={0x24, 0x64, 0x200, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x3, 0x9}, {0x8, 0x7}, {0xfff2, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x24000040) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=@newtaction={0x64, 0x30, 0x1, 0x0, 0x25dfdbfc, {}, [{0x50, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x7}, 0x29}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2.358346943s ago: executing program 1 (id=318): openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0x6, 0x9, &(0x7f00000014c0)=ANY=[@ANYRES32], &(0x7f0000001540)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x2}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r3, 0x5, &(0x7f00000005c0)='fd', 0x0, r2) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x2) r5 = getpid() r6 = syz_pidfd_open(r5, 0x0) open_by_handle_at(r6, &(0x7f00000000c0)=ANY=[@ANYBLOB="0c0000001d01000003000000000000009fc48411efcb9c012ed00f000000000000"], 0x0) mkdirat(r4, &(0x7f0000000040)='./file0\x00', 0x0) r7 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r7, r7) fchdir(r4) chdir(&(0x7f0000000100)='./file0\x00') mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r1, 0x40045402, &(0x7f0000000140)=0x1) 1.157123505s ago: executing program 3 (id=319): socket(0x11, 0x3, 0x8) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket(0x2b, 0x1, 0x1) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) socket$kcm(0x11, 0x2, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) sendmmsg(r0, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r2}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) 769.96057ms ago: executing program 1 (id=320): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x3938700}}, 0x0) prctl$PR_SET_IO_FLUSHER(0x39, 0x1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) futex(&(0x7f0000000200)=0x1, 0x6, 0x0, &(0x7f0000000240)={0x77359400}, 0x0, 0x1) socket$inet_sctp(0x2, 0x5, 0x84) 690.953031ms ago: executing program 3 (id=321): r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, 0x0, &(0x7f0000001480)) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r1, 0xc01064d1, &(0x7f0000000040)={0x1, 0x0, &(0x7f0000000100)=[0x0]}) 227.103483ms ago: executing program 3 (id=322): r0 = syz_open_dev$video4linux(0x0, 0x3b12, 0x40) ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585605, &(0x7f0000000080)={0x1, 0x0, {0x0, 0x0, 0x1004, 0x10040000, 0xa, 0x410}}) 0s ago: executing program 3 (id=323): socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x44, 0x30, 0x1, 0x0, 0x0, {}, [{0x30, 0x1, [@m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000040), 0x21041, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x15) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r4, 0x400455c8, 0x400000009) kexec_load(0xd0ffbf, 0x2, &(0x7f00000002c0)=[{0x0, 0x0, 0xbfffd000, 0x10000}, {0x0, 0x0, 0x3e0000}], 0x0) ioctl$TIOCVHANGUP(r4, 0x5437, 0x0) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000003c0), 0x280449d, &(0x7f0000000300)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB="2c726f6f746d6f64653d30303030303030303030303030303030303034303030302c757365725f69643d31eea03ddc3caa801dd0569e3e261e9510d7b300b4a83e6b7e8c6c93750a6778986716d7b5d676d04331a198d374fb2ab25512a8407ee7a763372418fc0d3bc2", @ANYRESDEC=0x0, @ANYBLOB, @ANYRESDEC=0x0, @ANYBLOB=',\x00']) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000001b00)={0x18, 0x2e, 0x1, 0xf0bd26, 0x25dfdbfc, {0x4}, [@nested={0x4, 0xd}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) read$FUSE(0xffffffffffffffff, &(0x7f00000093c0)={0x2020}, 0x2020) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000200)={'veth1_to_bridge\x00', 0x0}) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet6_SIOCSIFADDR(r7, 0x8916, &(0x7f0000000100)={@local, 0x0, r6}) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r8, &(0x7f0000000080)={0xa, 0x0, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}}, 0x1c) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.229' (ED25519) to the list of known hosts. [ 73.642246][ T5603] cgroup: Unknown subsys name 'net' [ 73.884450][ T5603] cgroup: Unknown subsys name 'cpuset' [ 73.939378][ T5603] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 75.583362][ T5603] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 79.198652][ T5624] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 79.254002][ T5630] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 79.255638][ T5630] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 79.270157][ T5630] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 79.298475][ T5635] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 79.298581][ T5630] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 79.317318][ T5630] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 79.321518][ T5635] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 79.321902][ T5630] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 79.322147][ T5630] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 79.322690][ T5630] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 79.328482][ T5635] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 79.332051][ T5635] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 79.332771][ T5635] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 79.334041][ T5635] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 79.345743][ T5635] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 79.345927][ T5631] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 79.347486][ T5635] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 79.358668][ T5624] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 79.362110][ T5628] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 79.362915][ T5628] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 79.365268][ T5628] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 79.372357][ T61] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 79.379101][ T5626] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 79.399500][ T5635] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 81.460851][ T4932] Bluetooth: hci3: command tx timeout [ 81.461027][ T5635] Bluetooth: hci4: command tx timeout [ 81.530175][ T5635] Bluetooth: hci0: command tx timeout [ 81.530200][ T4932] Bluetooth: hci1: command tx timeout [ 81.530319][ T5635] Bluetooth: hci2: command tx timeout [ 81.880754][ T5620] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.881718][ T5620] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.881907][ T5620] bridge_slave_0: entered allmulticast mode [ 81.883836][ T5620] bridge_slave_0: entered promiscuous mode [ 81.894095][ T5617] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.894379][ T5617] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.894605][ T5617] bridge_slave_0: entered allmulticast mode [ 81.899709][ T5617] bridge_slave_0: entered promiscuous mode [ 81.951594][ T5620] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.951770][ T5620] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.951921][ T5620] bridge_slave_1: entered allmulticast mode [ 81.955080][ T5620] bridge_slave_1: entered promiscuous mode [ 81.956739][ T5617] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.956896][ T5617] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.957031][ T5617] bridge_slave_1: entered allmulticast mode [ 81.958796][ T5617] bridge_slave_1: entered promiscuous mode [ 82.085784][ T5616] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.085977][ T5616] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.086129][ T5616] bridge_slave_0: entered allmulticast mode [ 82.087887][ T5616] bridge_slave_0: entered promiscuous mode [ 82.167551][ T5616] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.167750][ T5616] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.167896][ T5616] bridge_slave_1: entered allmulticast mode [ 82.171326][ T5616] bridge_slave_1: entered promiscuous mode [ 82.196254][ T5619] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.196440][ T5619] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.196630][ T5619] bridge_slave_0: entered allmulticast mode [ 82.198462][ T5619] bridge_slave_0: entered promiscuous mode [ 82.212404][ T5620] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.224570][ T5617] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.272319][ T5619] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.272500][ T5619] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.272648][ T5619] bridge_slave_1: entered allmulticast mode [ 82.274659][ T5619] bridge_slave_1: entered promiscuous mode [ 82.278405][ T5620] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.288258][ T5617] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.289442][ T5618] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.289715][ T5618] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.289950][ T5618] bridge_slave_0: entered allmulticast mode [ 82.293819][ T5618] bridge_slave_0: entered promiscuous mode [ 82.382899][ T5618] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.383087][ T5618] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.383446][ T5618] bridge_slave_1: entered allmulticast mode [ 82.385298][ T5618] bridge_slave_1: entered promiscuous mode [ 82.393878][ T5616] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.467823][ T5616] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.473847][ T5619] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.483208][ T5620] team0: Port device team_slave_0 added [ 82.492871][ T5617] team0: Port device team_slave_0 added [ 82.538746][ T5619] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.545761][ T5620] team0: Port device team_slave_1 added [ 82.553027][ T5617] team0: Port device team_slave_1 added [ 82.560121][ T5618] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.621579][ T5618] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.624094][ T5616] team0: Port device team_slave_0 added [ 82.688553][ T5616] team0: Port device team_slave_1 added [ 82.691703][ T5620] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.691718][ T5620] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.691741][ T5620] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.698250][ T5617] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.698263][ T5617] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.698285][ T5617] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.705488][ T5619] team0: Port device team_slave_0 added [ 82.753419][ T5620] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.753434][ T5620] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.753458][ T5620] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.756910][ T5617] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.756922][ T5617] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.756945][ T5617] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.771421][ T5619] team0: Port device team_slave_1 added [ 82.782803][ T5618] team0: Port device team_slave_0 added [ 82.882532][ T5618] team0: Port device team_slave_1 added [ 82.884626][ T5616] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.884639][ T5616] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.884662][ T5616] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.945339][ T5616] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.945349][ T5616] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.945364][ T5616] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.969971][ T5619] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.969987][ T5619] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.970011][ T5619] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.063197][ T5619] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.063207][ T5619] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.063221][ T5619] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.064707][ T5618] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.064719][ T5618] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.064732][ T5618] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.145317][ T5618] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.145333][ T5618] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.145356][ T5618] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.159405][ T5620] hsr_slave_0: entered promiscuous mode [ 83.161728][ T5620] hsr_slave_1: entered promiscuous mode [ 83.176166][ T5617] hsr_slave_0: entered promiscuous mode [ 83.178167][ T5617] hsr_slave_1: entered promiscuous mode [ 83.180438][ T5617] debugfs: 'hsr0' already exists in 'hsr' [ 83.180535][ T5617] Cannot create hsr debugfs directory [ 83.539873][ T5635] Bluetooth: hci4: command tx timeout [ 83.539905][ T5635] Bluetooth: hci3: command tx timeout [ 83.609028][ T5626] Bluetooth: hci1: command tx timeout [ 83.609050][ T5635] Bluetooth: hci2: command tx timeout [ 83.609060][ T5626] Bluetooth: hci0: command tx timeout [ 83.761924][ T5616] hsr_slave_0: entered promiscuous mode [ 83.763128][ T5616] hsr_slave_1: entered promiscuous mode [ 83.764057][ T5616] debugfs: 'hsr0' already exists in 'hsr' [ 83.764079][ T5616] Cannot create hsr debugfs directory [ 83.851707][ T5619] hsr_slave_0: entered promiscuous mode [ 83.852915][ T5619] hsr_slave_1: entered promiscuous mode [ 83.853883][ T5619] debugfs: 'hsr0' already exists in 'hsr' [ 83.853906][ T5619] Cannot create hsr debugfs directory [ 83.930254][ T5618] hsr_slave_0: entered promiscuous mode [ 83.931584][ T5618] hsr_slave_1: entered promiscuous mode [ 83.932778][ T5618] debugfs: 'hsr0' already exists in 'hsr' [ 83.932801][ T5618] Cannot create hsr debugfs directory [ 84.797399][ T5620] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 84.831296][ T5620] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 84.847132][ T5620] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 84.890043][ T5620] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 84.896552][ T5620] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 84.926512][ T5620] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 84.943658][ T5620] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 84.976173][ T5620] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 85.076386][ T5617] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 85.113158][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 85.127898][ T5617] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 85.154436][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 85.170397][ T5617] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 85.203076][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 85.230782][ T5617] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 85.262339][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 85.386724][ T5616] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 85.431208][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 85.440652][ T5616] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 85.487109][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 85.499190][ T5616] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 85.544912][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 85.571296][ T5616] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 85.603867][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 85.609547][ T5635] Bluetooth: hci3: command tx timeout [ 85.609572][ T5635] Bluetooth: hci4: command tx timeout [ 85.690225][ T5635] Bluetooth: hci0: command tx timeout [ 85.690257][ T5635] Bluetooth: hci1: command tx timeout [ 85.691045][ T4932] Bluetooth: hci2: command tx timeout [ 85.806740][ T5619] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 85.844207][ T5619] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 85.861732][ T5619] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 85.892740][ T5619] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 85.898431][ T5619] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 85.944766][ T5619] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 85.974343][ T5619] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 86.014618][ T5619] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 86.140454][ T5620] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.164107][ T5618] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 86.192974][ T5618] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 86.204537][ T5618] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 86.235616][ T5618] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 86.252657][ T5618] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 86.285246][ T5618] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 86.300463][ T5618] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 86.342407][ T5618] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 86.406114][ T5620] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.479781][ T5617] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.486784][ T1182] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.487113][ T1182] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.566181][ T1187] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.566271][ T1187] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.673995][ T5617] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.715716][ T5616] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.753458][ T1182] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.761475][ T1182] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.762527][ T37] cfg80211: failed to load regulatory.db [ 86.839816][ T1182] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.840010][ T1182] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.924057][ T5616] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.981493][ T5619] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.983254][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.983342][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.057745][ T1187] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.057964][ T1187] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.202711][ T5619] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.264835][ T5618] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.296629][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.296772][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.373962][ T1187] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.374410][ T1187] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.470095][ T5618] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.585695][ T2345] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.585855][ T2345] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.681418][ T92] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.681579][ T92] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.690364][ T4932] Bluetooth: hci3: command tx timeout [ 87.690405][ T5635] Bluetooth: hci4: command tx timeout [ 87.770593][ T4932] Bluetooth: hci1: command tx timeout [ 87.770622][ T4932] Bluetooth: hci0: command tx timeout [ 87.770674][ T5635] Bluetooth: hci2: command tx timeout [ 88.184352][ T5620] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.546116][ T5617] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.793379][ T5620] veth0_vlan: entered promiscuous mode [ 88.820725][ T5616] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.986779][ T5620] veth1_vlan: entered promiscuous mode [ 89.057017][ T5619] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.117509][ T5617] veth0_vlan: entered promiscuous mode [ 89.196995][ T5617] veth1_vlan: entered promiscuous mode [ 89.327096][ T5620] veth0_macvtap: entered promiscuous mode [ 89.386804][ T5616] veth0_vlan: entered promiscuous mode [ 89.394830][ T5620] veth1_macvtap: entered promiscuous mode [ 89.432649][ T5618] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.481104][ T5616] veth1_vlan: entered promiscuous mode [ 89.528638][ T5617] veth0_macvtap: entered promiscuous mode [ 89.553498][ T5620] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.584054][ T5617] veth1_macvtap: entered promiscuous mode [ 89.607535][ T5620] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.658378][ T92] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.684635][ T92] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.702372][ T92] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.707072][ T92] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.717290][ T5617] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.831430][ T5617] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.837749][ T5616] veth0_macvtap: entered promiscuous mode [ 89.972216][ T5618] veth0_vlan: entered promiscuous mode [ 89.987228][ T5616] veth1_macvtap: entered promiscuous mode [ 89.998446][ T1060] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.029785][ T1060] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.127756][ T1060] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.171464][ T1060] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.246385][ T5618] veth1_vlan: entered promiscuous mode [ 90.288903][ T5619] veth0_vlan: entered promiscuous mode [ 90.393909][ T5616] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.442965][ T1174] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.442992][ T1174] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.532803][ T5619] veth1_vlan: entered promiscuous mode [ 90.547110][ T5616] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.668302][ T1174] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.674151][ T4376] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.674168][ T4376] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.696769][ T1174] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.710174][ T1174] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.737203][ T1174] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.926824][ T4376] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.926843][ T4376] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.969698][ T5618] veth0_macvtap: entered promiscuous mode [ 91.169813][ T5618] veth1_macvtap: entered promiscuous mode [ 91.259832][ T5817] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3'. [ 91.507008][ T5619] veth0_macvtap: entered promiscuous mode [ 91.568188][ T1174] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.568206][ T1174] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.650553][ T5619] veth1_macvtap: entered promiscuous mode [ 91.671456][ T5816] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3'. [ 91.764343][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.764362][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.791500][ T5618] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.913265][ T5618] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.068070][ T5619] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.118084][ T4376] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.122829][ T1060] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.122849][ T1060] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.127679][ T4376] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.141520][ T4376] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.165923][ T5619] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.166006][ T4376] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.337655][ T4376] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.410781][ T4376] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.493119][ T1182] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.626733][ T1182] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.748655][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.748668][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.945527][ T4376] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.945546][ T4376] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.148181][ T68] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.148200][ T68] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.793012][ T1187] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.793030][ T1187] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.907074][ T5850] netlink: 24 bytes leftover after parsing attributes in process `syz.3.12'. [ 99.191370][ T5850] netlink: 20 bytes leftover after parsing attributes in process `syz.3.12'. [ 99.235418][ T10] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 100.341808][ T5859] IPVS: rr: FWM 3 0x00000003 - no destination available [ 100.356017][ T822] IPVS: starting estimator thread 0... [ 100.607116][ T5861] IPVS: using max 10 ests per chain, 24000 per kthread [ 101.485810][ T5635] Bluetooth: hci1: Malformed MSFT vendor event: 0x02 [ 101.845812][ T1339] tipc: Subscription rejected, illegal request [ 103.659820][ T5884] netlink: 24 bytes leftover after parsing attributes in process `syz.4.21'. [ 103.996945][ T5887] netlink: 20 bytes leftover after parsing attributes in process `syz.4.21'. [ 104.139319][ T5736] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 104.423459][ T5736] usb 4-1: Using ep0 maxpacket: 32 [ 104.564876][ T5736] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 104.564949][ T5736] usb 4-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 104.564973][ T5736] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.630321][ T10] usb 2-1: device descriptor read/64, error -110 [ 104.844651][ T5892] netlink: 24 bytes leftover after parsing attributes in process `syz.0.23'. [ 105.788780][ T5736] usb 4-1: config 0 descriptor?? [ 105.985890][ T5897] netlink: 20 bytes leftover after parsing attributes in process `syz.0.23'. [ 106.271631][ T5904] netlink: 'syz.4.24': attribute type 1 has an invalid length. [ 106.271660][ T5904] netlink: 'syz.4.24': attribute type 2 has an invalid length. [ 106.424459][ T5904] process 'syz.4.24' launched './file0' with NULL argv: empty string added [ 107.470113][ T5635] Bluetooth: hci5: Entering manufacturer mode failed (-110) [ 109.135082][ T169] tipc: Subscription rejected, illegal request [ 111.934395][ T5928] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 112.446351][ T5889] usb 4-1: USB disconnect, device number 2 [ 113.400709][ T822] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 113.581460][ T822] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 113.581486][ T822] usb 2-1: config 0 has no interface number 0 [ 113.611468][ T822] usb 2-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54 [ 113.611498][ T822] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.611517][ T822] usb 2-1: Product: syz [ 113.611530][ T822] usb 2-1: Manufacturer: syz [ 113.611544][ T822] usb 2-1: SerialNumber: syz [ 113.884350][ T822] usb 2-1: config 0 descriptor?? [ 113.981407][ T5743] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 114.081497][ T5944] netlink: 24 bytes leftover after parsing attributes in process `syz.3.36'. [ 114.174252][ T5743] usb 1-1: Using ep0 maxpacket: 16 [ 114.181937][ T5743] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 114.181969][ T5743] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 114.182009][ T5743] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 114.182031][ T5743] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.199845][ T5934] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 114.200423][ T5934] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 114.223929][ T822] usb 2-1: selecting invalid altsetting 1 [ 114.227664][ T5934] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 114.228264][ T5934] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 114.280437][ T822] dvb_ttusb_budget: ttusb_init_controller: error [ 114.280580][ T822] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 114.415070][ T5743] usb 1-1: config 0 descriptor?? [ 114.527898][ T5946] netlink: 20 bytes leftover after parsing attributes in process `syz.3.36'. [ 115.231099][ T5743] usbhid 1-1:0.0: can't add hid device: -71 [ 115.231205][ T5743] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 115.365836][ T5743] usb 1-1: USB disconnect, device number 2 [ 116.252999][ T37] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 116.752736][ T37] usb 4-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 116.752763][ T37] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 116.762464][ T37] usb 4-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice= 0.9c [ 116.762491][ T37] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.762511][ T37] usb 4-1: Product: syz [ 116.762524][ T37] usb 4-1: Manufacturer: syz [ 116.762537][ T37] usb 4-1: SerialNumber: syz [ 116.916077][ T37] usb 4-1: config 0 descriptor?? [ 116.960542][ T5974] netlink: 'syz.2.42': attribute type 2 has an invalid length. [ 116.960562][ T5974] netlink: 'syz.2.42': attribute type 5 has an invalid length. [ 116.960591][ T5974] netlink: 'syz.2.42': attribute type 2 has an invalid length. [ 116.960603][ T5974] netlink: 'syz.2.42': attribute type 5 has an invalid length. [ 116.998596][ T822] DVB: Unable to find symbol stv0299_attach() [ 117.114773][ T37] ims_pcu 4-1:0.0: Missing CDC union descriptor [ 117.114827][ T37] ims_pcu 4-1:0.0: probe with driver ims_pcu failed with error -22 [ 117.342998][ T822] DVB: Unable to find symbol tda8083_attach() [ 117.343013][ T822] dvb_ttusb_budget: no frontend driver found for device [0b48:1003] [ 117.356425][ T822] usb 2-1: USB disconnect, device number 4 [ 117.475546][ T5955] bridge_slave_0: left allmulticast mode [ 117.475582][ T5955] bridge_slave_0: left promiscuous mode [ 117.506995][ T5955] bridge0: port 1(bridge_slave_0) entered disabled state [ 118.758715][ T5955] bridge_slave_1: left allmulticast mode [ 118.758747][ T5955] bridge_slave_1: left promiscuous mode [ 118.762304][ T5955] bridge0: port 2(bridge_slave_1) entered disabled state [ 119.152320][ T5955] bond0: (slave bond_slave_0): Releasing backup interface [ 119.249884][ T5955] bond0: (slave bond_slave_1): Releasing backup interface [ 119.314312][ T5997] netlink: 24 bytes leftover after parsing attributes in process `syz.4.47'. [ 119.441303][ T5955] team0: Port device team_slave_0 removed [ 119.490365][ T6000] netlink: 20 bytes leftover after parsing attributes in process `syz.4.47'. [ 119.519952][ T5955] team0: Port device team_slave_1 removed [ 119.521275][ T5955] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 119.521300][ T5955] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 119.568555][ T5955] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 119.568571][ T5955] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 119.612944][ T5955] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 119.918959][ T5732] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 120.030797][ T822] usb 4-1: USB disconnect, device number 3 [ 120.104498][ T5732] usb 2-1: Using ep0 maxpacket: 32 [ 120.136424][ T5743] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 120.136576][ T5732] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 120.136614][ T5732] usb 2-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 120.136635][ T5732] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.185970][ T5732] usb 2-1: config 0 descriptor?? [ 120.278995][ T5743] usb 3-1: Using ep0 maxpacket: 16 [ 120.290560][ T5743] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 120.290591][ T5743] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 120.290633][ T5743] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 120.290656][ T5743] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.293788][ T6021] netlink: 'syz.4.56': attribute type 2 has an invalid length. [ 120.293923][ T6021] netlink: 'syz.4.56': attribute type 5 has an invalid length. [ 120.293938][ T6021] netlink: 'syz.4.56': attribute type 2 has an invalid length. [ 120.293950][ T6021] netlink: 'syz.4.56': attribute type 5 has an invalid length. [ 120.295566][ T5743] usb 3-1: config 0 descriptor?? [ 120.906282][ T5743] usbhid 3-1:0.0: can't add hid device: -71 [ 120.906398][ T5743] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 120.939834][ T5743] usb 3-1: USB disconnect, device number 2 [ 123.418852][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 123.438846][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 123.448860][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 123.458852][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 123.468865][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 123.478848][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 123.488843][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 123.498849][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 123.508852][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 123.518850][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 125.907399][ T37] usb 2-1: USB disconnect, device number 5 [ 126.805571][ T6061] netlink: 'syz.0.72': attribute type 2 has an invalid length. [ 126.805592][ T6061] netlink: 'syz.0.72': attribute type 5 has an invalid length. [ 126.805608][ T6061] netlink: 'syz.0.72': attribute type 2 has an invalid length. [ 126.805621][ T6061] netlink: 'syz.0.72': attribute type 5 has an invalid length. [ 129.535702][ T5756] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 129.699734][ T5756] usb 4-1: Using ep0 maxpacket: 16 [ 129.702392][ T5756] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 129.702423][ T5756] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 129.702464][ T5756] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 129.702488][ T5756] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.776968][ T5756] usb 4-1: config 0 descriptor?? [ 130.531026][ T5756] usbhid 4-1:0.0: can't add hid device: -71 [ 130.531150][ T5756] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 130.615778][ T5756] usb 4-1: USB disconnect, device number 4 [ 132.820325][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.830718][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.042770][ T6094] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 141.075066][ T6150] netlink: 24 bytes leftover after parsing attributes in process `syz.3.99'. [ 141.405797][ T6152] netlink: 20 bytes leftover after parsing attributes in process `syz.3.99'. [ 142.520283][ T6154] syz.3.99 (6154) used greatest stack depth: 18944 bytes left [ 142.722280][ T5626] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 142.759164][ T5626] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 142.761368][ T5626] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 142.783444][ T5626] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 142.784043][ T5626] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 144.399574][ T10] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 145.397048][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 145.408029][ T5635] Bluetooth: hci5: command tx timeout [ 145.469960][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 145.470009][ T10] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 145.470032][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.497792][ T10] usb 5-1: config 0 descriptor?? [ 146.774415][ T5735] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 146.936362][ T5735] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 146.936390][ T5735] usb 1-1: config 0 has no interface number 0 [ 146.950105][ T5735] usb 1-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54 [ 146.950133][ T5735] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.950207][ T5735] usb 1-1: Product: syz [ 146.950221][ T5735] usb 1-1: Manufacturer: syz [ 146.950235][ T5735] usb 1-1: SerialNumber: syz [ 147.228083][ T5735] usb 1-1: config 0 descriptor?? [ 147.328225][ T5735] usb 1-1: selecting invalid altsetting 1 [ 147.375032][ T5735] dvb_ttusb_budget: ttusb_init_controller: error [ 147.375050][ T5735] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 147.449371][ T5635] Bluetooth: hci5: command tx timeout [ 147.489492][ T6189] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 147.552966][ T6189] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 147.669118][ T6189] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 147.732248][ T6189] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 148.367369][ T5735] DVB: Unable to find symbol stv0299_attach() [ 148.940130][ T5735] DVB: Unable to find symbol tda8083_attach() [ 148.940196][ T5735] dvb_ttusb_budget: no frontend driver found for device [0b48:1003] [ 149.028925][ T5735] usb 1-1: USB disconnect, device number 3 [ 149.536241][ T5635] Bluetooth: hci5: command tx timeout [ 150.756562][ T10] usb 5-1: can't set config #0, error -110 [ 150.948969][ T6204] Zero length message leads to an empty skb [ 151.061696][ T6224] netlink: 24 bytes leftover after parsing attributes in process `syz.1.115'. [ 151.515078][ T6227] netlink: 20 bytes leftover after parsing attributes in process `syz.1.115'. [ 151.618182][ T5635] Bluetooth: hci5: command tx timeout [ 152.090925][ T10] usb 5-1: USB disconnect, device number 2 [ 152.198938][ T5889] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 155.209598][ T5743] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 155.392000][ T5743] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 155.392025][ T5743] usb 2-1: config 0 has no interface number 0 [ 155.396142][ T5743] usb 2-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54 [ 155.396160][ T5743] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.396177][ T5743] usb 2-1: Product: syz [ 155.396191][ T5743] usb 2-1: Manufacturer: syz [ 155.396205][ T5743] usb 2-1: SerialNumber: syz [ 155.489674][ T5743] usb 2-1: config 0 descriptor?? [ 155.535571][ T5743] usb 2-1: selecting invalid altsetting 1 [ 155.535740][ T5743] dvb_ttusb_budget: ttusb_init_controller: error [ 155.535753][ T5743] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 155.647280][ T5743] DVB: Unable to find symbol stv0299_attach() [ 155.728845][ T5743] DVB: Unable to find symbol tda8083_attach() [ 155.728860][ T5743] dvb_ttusb_budget: no frontend driver found for device [0b48:1003] [ 155.771817][ T6241] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 155.774434][ T6241] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 155.805571][ T6241] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 155.821415][ T6241] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 155.977211][ T5736] usb 2-1: USB disconnect, device number 6 [ 157.125228][ T92] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.388999][ T5889] usb 1-1: device descriptor read/64, error -110 [ 157.628988][ T5889] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 158.105418][ T92] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.388208][ T6165] bridge0: port 1(bridge_slave_0) entered blocking state [ 158.399128][ T6165] bridge0: port 1(bridge_slave_0) entered disabled state [ 158.399445][ T6165] bridge_slave_0: entered allmulticast mode [ 158.418119][ T6165] bridge_slave_0: entered promiscuous mode [ 158.633922][ T6276] netlink: 24 bytes leftover after parsing attributes in process `syz.1.130'. [ 158.952427][ T6279] netlink: 20 bytes leftover after parsing attributes in process `syz.1.130'. [ 159.432050][ T5736] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 160.533702][ T5736] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 160.533727][ T5736] usb 1-1: config 0 has no interfaces? [ 160.537583][ T5736] usb 1-1: New USB device found, idVendor=06f8, idProduct=301b, bcdDevice=bb.39 [ 160.537618][ T5736] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.537637][ T5736] usb 1-1: Product: syz [ 160.537649][ T5736] usb 1-1: Manufacturer: syz [ 160.537663][ T5736] usb 1-1: SerialNumber: syz [ 160.654638][ T5736] usb 1-1: config 0 descriptor?? [ 160.678959][ T5756] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 160.838960][ T5756] usb 4-1: Using ep0 maxpacket: 16 [ 160.870162][ T5756] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 160.870212][ T5756] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 160.870235][ T5756] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.921654][ T92] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.949231][ T5736] usb 1-1: USB disconnect, device number 6 [ 161.004227][ T5756] usb 4-1: config 0 descriptor?? [ 161.176554][ T6165] bridge0: port 2(bridge_slave_1) entered blocking state [ 161.180395][ T6165] bridge0: port 2(bridge_slave_1) entered disabled state [ 161.184029][ T6165] bridge_slave_1: entered allmulticast mode [ 161.196849][ T6165] bridge_slave_1: entered promiscuous mode [ 162.433883][ T92] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.666866][ T6165] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 162.759800][ T6165] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 163.923584][ T6165] team0: Port device team_slave_0 added [ 163.967406][ T6165] team0: Port device team_slave_1 added [ 164.063940][ T6296] netlink: 8 bytes leftover after parsing attributes in process `syz.4.136'. [ 164.280083][ T6165] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 164.280099][ T6165] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 164.280123][ T6165] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 164.350121][ T6165] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 164.350136][ T6165] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 164.350161][ T6165] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 166.175556][ T5756] usbhid 4-1:0.0: can't add hid device: -32 [ 166.175632][ T5756] usbhid 4-1:0.0: probe with driver usbhid failed with error -32 [ 166.519098][ T6165] hsr_slave_0: entered promiscuous mode [ 166.528577][ T6165] hsr_slave_1: entered promiscuous mode [ 166.532487][ T6165] debugfs: 'hsr0' already exists in 'hsr' [ 166.532547][ T6165] Cannot create hsr debugfs directory [ 167.831278][ T92] bridge_slave_1: left allmulticast mode [ 167.831413][ T92] bridge_slave_1: left promiscuous mode [ 167.881518][ T92] bridge0: port 2(bridge_slave_1) entered disabled state [ 168.028425][ T5889] usb 4-1: USB disconnect, device number 5 [ 168.055381][ T6318] netlink: 24 bytes leftover after parsing attributes in process `syz.1.142'. [ 168.127912][ T92] bridge_slave_0: left allmulticast mode [ 168.127944][ T92] bridge_slave_0: left promiscuous mode [ 168.128220][ T92] bridge0: port 1(bridge_slave_0) entered disabled state [ 168.359496][ T6321] netlink: 20 bytes leftover after parsing attributes in process `syz.1.142'. [ 169.790476][ T6335] netlink: 4 bytes leftover after parsing attributes in process `syz.3.146'. [ 169.879763][ T5845] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 170.088991][ T5845] usb 5-1: Using ep0 maxpacket: 16 [ 170.091561][ T5845] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 170.122410][ T5845] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 170.122440][ T5845] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 170.122460][ T5845] usb 5-1: Product: syz [ 170.122474][ T5845] usb 5-1: Manufacturer: syz [ 170.122488][ T5845] usb 5-1: SerialNumber: syz [ 170.324489][ T5845] usb 5-1: config 0 descriptor?? [ 170.347631][ T5845] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 170.347671][ T5845] em28xx 5-1:0.0: DVB interface 0 found: bulk [ 171.301746][ T5845] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 172.684945][ T5845] em28xx 5-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 172.684966][ T5845] em28xx 5-1:0.0: board has no eeprom [ 172.692965][ T92] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 172.750226][ T92] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 172.789046][ T5845] em28xx 5-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 172.789082][ T5845] em28xx 5-1:0.0: dvb set to bulk mode. [ 172.789332][ T5743] em28xx 5-1:0.0: Binding DVB extension [ 172.796893][ T92] bond0 (unregistering): Released all slaves [ 172.848969][ T5845] usb 5-1: USB disconnect, device number 3 [ 172.851348][ T5845] em28xx 5-1:0.0: Disconnecting em28xx [ 173.059150][ T5743] em28xx 5-1:0.0: Registering input extension [ 173.061268][ T5845] em28xx 5-1:0.0: Closing input extension [ 173.369975][ T5845] em28xx 5-1:0.0: Freeing device [ 176.489924][ T5635] Bluetooth: hci4: Entering manufacturer mode failed (-110) [ 176.492600][ T5626] Bluetooth: hci4: command 0xfc11 tx timeout [ 177.676263][ T5277] 8021q: adding VLAN 0 to HW filter on device eth1 [ 179.338993][ T32] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 179.488968][ T32] usb 4-1: device descriptor read/64, error -71 [ 179.509302][ T6390] bridge0: port 2(bridge_slave_1) entered disabled state [ 180.616088][ T6390] bridge0: port 1(bridge_slave_0) entered disabled state [ 180.683537][ T6390] bridge0: entered allmulticast mode [ 180.779061][ T32] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 180.912735][ T32] usb 4-1: device descriptor read/64, error -71 [ 181.023214][ T32] usb usb4-port1: attempt power cycle [ 181.600703][ T6412] netlink: 'syz.0.163': attribute type 2 has an invalid length. [ 181.600722][ T6412] netlink: 'syz.0.163': attribute type 5 has an invalid length. [ 181.600736][ T6412] netlink: 'syz.0.163': attribute type 2 has an invalid length. [ 181.600748][ T6412] netlink: 'syz.0.163': attribute type 5 has an invalid length. [ 183.286453][ T6429] netlink: 4 bytes leftover after parsing attributes in process `syz.3.162'. [ 184.048483][ T92] hsr_slave_0: left promiscuous mode [ 184.844855][ T92] hsr_slave_1: left promiscuous mode [ 184.846252][ T92] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 184.846420][ T92] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 185.313447][ T92] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 185.313465][ T92] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 186.740387][ T92] veth1_macvtap: left promiscuous mode [ 186.740616][ T92] veth0_macvtap: left promiscuous mode [ 186.741633][ T92] veth1_vlan: left promiscuous mode [ 186.741892][ T92] veth0_vlan: left promiscuous mode [ 186.937377][ T6455] netlink: 'syz.3.173': attribute type 2 has an invalid length. [ 186.937398][ T6455] netlink: 'syz.3.173': attribute type 5 has an invalid length. [ 186.937413][ T6455] netlink: 'syz.3.173': attribute type 2 has an invalid length. [ 186.937425][ T6455] netlink: 'syz.3.173': attribute type 5 has an invalid length. [ 188.448703][ T6457] Mount JFS Failure: -5 [ 190.334599][ T6480] netlink: 4 bytes leftover after parsing attributes in process `syz.3.176'. [ 190.502110][ T92] team0 (unregistering): Port device team_slave_1 removed [ 190.554822][ T92] team0 (unregistering): Port device team_slave_0 removed [ 191.181329][ T5277] 8021q: adding VLAN 0 to HW filter on device eth2 [ 192.763543][ T5635] Bluetooth: hci4: Entering manufacturer mode failed (-110) [ 192.763981][ T5626] Bluetooth: hci4: command 0xfc11 tx timeout [ 194.252310][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.252416][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.358301][ T6165] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 194.693513][ T6165] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 194.887641][ T6165] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 195.140444][ T6165] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 195.152945][ T6165] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 195.427818][ T6165] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 195.437899][ T6165] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 196.010212][ T6165] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 199.049141][ T5626] Bluetooth: hci4: command 0xfc11 tx timeout [ 199.081310][ T5635] Bluetooth: hci4: Entering manufacturer mode failed (-110) [ 199.641189][ T6558] MINIX-fs: unable to read superblock [ 200.377499][ T6165] 8021q: adding VLAN 0 to HW filter on device bond0 [ 200.462917][ T6165] 8021q: adding VLAN 0 to HW filter on device team0 [ 200.485415][ T169] bridge0: port 1(bridge_slave_0) entered blocking state [ 200.485505][ T169] bridge0: port 1(bridge_slave_0) entered forwarding state [ 200.526417][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 200.541865][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 203.142074][ T5626] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 203.170326][ T5626] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 203.176018][ T5626] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 203.182369][ T5626] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 204.040203][ T5626] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 204.124729][ T5277] 8021q: adding VLAN 0 to HW filter on device eth3 [ 204.436449][ T6589] netlink: 'syz.3.200': attribute type 2 has an invalid length. [ 204.436470][ T6589] netlink: 'syz.3.200': attribute type 5 has an invalid length. [ 204.436485][ T6589] netlink: 'syz.3.200': attribute type 2 has an invalid length. [ 204.436498][ T6589] netlink: 'syz.3.200': attribute type 5 has an invalid length. [ 205.857244][ T6613] netlink: 4 bytes leftover after parsing attributes in process `syz.3.201'. [ 206.249193][ T5626] Bluetooth: hci4: command tx timeout [ 206.576923][ T5626] Bluetooth: hci0: command 0x0406 tx timeout [ 206.577105][ T5624] Bluetooth: hci3: command 0x0406 tx timeout [ 206.577870][ T5626] Bluetooth: hci2: command 0x0406 tx timeout [ 206.577883][ T5624] Bluetooth: hci1: command 0x0406 tx timeout [ 208.286417][ T5277] 8021q: adding VLAN 0 to HW filter on device eth4 [ 208.399921][ T5635] Bluetooth: hci4: command tx timeout [ 210.363541][ T6654] netlink: 'syz.3.210': attribute type 2 has an invalid length. [ 210.363562][ T6654] netlink: 'syz.3.210': attribute type 5 has an invalid length. [ 210.363577][ T6654] netlink: 'syz.3.210': attribute type 2 has an invalid length. [ 210.363588][ T6654] netlink: 'syz.3.210': attribute type 5 has an invalid length. [ 210.410634][ T5635] Bluetooth: hci4: command tx timeout [ 212.488902][ T5635] Bluetooth: hci4: command tx timeout [ 220.693795][ T6735] syz.0.231 (6735) used greatest stack depth: 17624 bytes left [ 221.285931][ T6579] bridge0: port 1(bridge_slave_0) entered blocking state [ 221.286283][ T6579] bridge0: port 1(bridge_slave_0) entered disabled state [ 221.286574][ T6579] bridge_slave_0: entered allmulticast mode [ 221.374667][ T6579] bridge_slave_0: entered promiscuous mode [ 221.530383][ T6579] bridge0: port 2(bridge_slave_1) entered blocking state [ 221.530748][ T6579] bridge0: port 2(bridge_slave_1) entered disabled state [ 221.531021][ T6579] bridge_slave_1: entered allmulticast mode [ 221.536581][ T6579] bridge_slave_1: entered promiscuous mode [ 221.908346][ T6579] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 222.100036][ T6579] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 223.591427][ T6579] team0: Port device team_slave_0 added [ 223.615986][ T6579] team0: Port device team_slave_1 added [ 225.309361][ T1174] bridge_slave_1: left allmulticast mode [ 225.309401][ T1174] bridge_slave_1: left promiscuous mode [ 225.309646][ T1174] bridge0: port 2(bridge_slave_1) entered disabled state [ 225.375113][ T1174] bridge_slave_0: left allmulticast mode [ 225.375147][ T1174] bridge_slave_0: left promiscuous mode [ 225.375605][ T1174] bridge0: port 1(bridge_slave_0) entered disabled state [ 227.122005][ T1174] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 227.219732][ T1174] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 227.280690][ T1174] bond0 (unregistering): Released all slaves [ 227.449770][ T6579] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 227.449786][ T6579] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 227.449807][ T6579] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 227.525406][ T6579] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 227.525421][ T6579] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 227.525444][ T6579] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 229.112412][ T1174] hsr_slave_0: left promiscuous mode [ 229.182161][ T1174] hsr_slave_1: left promiscuous mode [ 229.183269][ T1174] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 229.236702][ T1174] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 229.887984][ T1174] team0 (unregistering): Port device team_slave_1 removed [ 229.939970][ T1174] team0 (unregistering): Port device team_slave_0 removed [ 230.294298][ T6579] hsr_slave_0: entered promiscuous mode [ 230.547640][ T6579] hsr_slave_1: entered promiscuous mode [ 231.641170][ T5277] 8021q: adding VLAN 0 to HW filter on device eth5 [ 232.184737][ T6836] netlink: 24 bytes leftover after parsing attributes in process `syz.3.257'. [ 232.827942][ T6836] netlink: 20 bytes leftover after parsing attributes in process `syz.3.257'. [ 234.899214][ T5732] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 235.032602][ T5732] usb 1-1: device descriptor read/64, error -71 [ 235.299119][ T5732] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 236.289861][ T5732] usb 1-1: device descriptor read/64, error -71 [ 236.401116][ T5732] usb usb1-port1: attempt power cycle [ 236.809163][ T5732] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 236.830084][ T5732] usb 1-1: device descriptor read/8, error -71 [ 238.099012][ T5732] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 238.161930][ T5732] usb 1-1: device descriptor read/8, error -71 [ 238.271210][ T5732] usb usb1-port1: unable to enumerate USB device [ 238.614113][ T6888] netlink: 24 bytes leftover after parsing attributes in process `syz.3.270'. [ 239.000274][ T6894] netlink: 20 bytes leftover after parsing attributes in process `syz.3.270'. [ 241.174006][ T5736] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 241.809959][ T5736] usb 2-1: Using ep0 maxpacket: 16 [ 241.817857][ T5736] usb 2-1: config 0 has no interfaces? [ 241.889549][ T5736] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 241.889579][ T5736] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 241.889598][ T5736] usb 2-1: Product: syz [ 241.889611][ T5736] usb 2-1: Manufacturer: syz [ 241.889625][ T5736] usb 2-1: SerialNumber: syz [ 241.950176][ T5736] usb 2-1: config 0 descriptor?? [ 242.220480][ T6937] netlink: 12 bytes leftover after parsing attributes in process `syz.0.282'. [ 242.473263][ T6942] netlink: 24 bytes leftover after parsing attributes in process `syz.0.284'. [ 242.549014][ T5889] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 242.693339][ T6579] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 242.880803][ T6947] netlink: 20 bytes leftover after parsing attributes in process `syz.0.284'. [ 242.969861][ T5889] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 242.969887][ T5889] usb 5-1: config 0 has no interface number 0 [ 243.196289][ T5889] usb 5-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54 [ 243.196320][ T5889] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 243.196340][ T5889] usb 5-1: Product: syz [ 243.196354][ T5889] usb 5-1: Manufacturer: syz [ 243.196368][ T5889] usb 5-1: SerialNumber: syz [ 243.409581][ T5889] usb 5-1: config 0 descriptor?? [ 243.425801][ T6579] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 243.458688][ T6579] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 243.485141][ T5889] usb 5-1: selecting invalid altsetting 1 [ 243.485295][ T5889] dvb_ttusb_budget: ttusb_init_controller: error [ 243.485308][ T5889] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 243.501563][ T5736] usb 2-1: USB disconnect, device number 7 [ 243.678194][ T6579] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 243.700323][ T6579] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 243.831395][ T6939] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 243.834753][ T6939] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 243.921757][ T6939] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 243.925131][ T6939] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 243.932325][ T6579] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 243.959703][ T5732] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 243.962182][ T6579] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 244.108194][ T6579] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 244.128855][ T5732] usb 4-1: Using ep0 maxpacket: 16 [ 244.145442][ T5732] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 244.145487][ T5732] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 244.145507][ T5732] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 244.191398][ T5889] DVB: Unable to find symbol stv0299_attach() [ 244.359689][ T5732] usb 4-1: config 0 descriptor?? [ 245.772275][ T5889] DVB: Unable to find symbol tda8083_attach() [ 245.772289][ T5889] dvb_ttusb_budget: no frontend driver found for device [0b48:1003] [ 246.045153][ T5889] usb 5-1: USB disconnect, device number 4 [ 246.593710][ T6998] netlink: 12 bytes leftover after parsing attributes in process `syz.1.293'. [ 248.348043][ T6579] 8021q: adding VLAN 0 to HW filter on device bond0 [ 248.553266][ T5756] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 248.624824][ T6579] 8021q: adding VLAN 0 to HW filter on device team0 [ 248.680525][ T1182] bridge0: port 1(bridge_slave_0) entered blocking state [ 248.682540][ T1182] bridge0: port 1(bridge_slave_0) entered forwarding state [ 248.709582][ T5756] usb 5-1: Using ep0 maxpacket: 16 [ 248.712465][ T5756] usb 5-1: config 0 has no interfaces? [ 248.741434][ T5756] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 248.741463][ T5756] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 248.741489][ T5756] usb 5-1: Product: syz [ 248.741502][ T5756] usb 5-1: Manufacturer: syz [ 248.741516][ T5756] usb 5-1: SerialNumber: syz [ 248.782057][ T5756] usb 5-1: config 0 descriptor?? [ 248.963135][ T1174] bridge0: port 2(bridge_slave_1) entered blocking state [ 248.963272][ T1174] bridge0: port 2(bridge_slave_1) entered forwarding state [ 249.469191][ T5732] usbhid 4-1:0.0: can't add hid device: -71 [ 249.469297][ T5732] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 249.577729][ T5732] usb 4-1: USB disconnect, device number 9 [ 249.934707][ T5735] usb 5-1: USB disconnect, device number 5 [ 250.041538][ T5732] usb 4-1: new full-speed USB device number 10 using dummy_hcd [ 250.982357][ T5732] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 250.982383][ T5732] usb 4-1: config 0 has no interface number 0 [ 250.986243][ T5732] usb 4-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54 [ 250.986270][ T5732] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 250.986288][ T5732] usb 4-1: Product: syz [ 250.986306][ T5732] usb 4-1: Manufacturer: syz [ 250.986320][ T5732] usb 4-1: SerialNumber: syz [ 251.054454][ T5732] usb 4-1: config 0 descriptor?? [ 251.088622][ T7058] netlink: 12 bytes leftover after parsing attributes in process `syz.4.304'. [ 251.221747][ T5732] usb 4-1: selecting invalid altsetting 1 [ 251.221914][ T5732] dvb_ttusb_budget: ttusb_init_controller: error [ 251.221926][ T5732] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 251.391254][ T7046] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 251.391823][ T7046] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 251.393602][ T7044] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 251.394145][ T7044] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 252.539250][ T5732] DVB: Unable to find symbol stv0299_attach() [ 252.668959][ T7073] tipc: Can't bind to reserved service type 0 [ 252.717340][ T7073] syzkaller0: entered promiscuous mode [ 252.717364][ T7073] syzkaller0: entered allmulticast mode [ 252.772700][ T5732] DVB: Unable to find symbol tda8083_attach() [ 252.772717][ T5732] dvb_ttusb_budget: no frontend driver found for device [0b48:1003] [ 252.820438][ T5732] usb 4-1: USB disconnect, device number 10 [ 253.929595][ T5635] Bluetooth: hci5: Entering manufacturer mode failed (-110) [ 255.642304][ T5889] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 255.697347][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.697439][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.735214][ T6579] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 255.841579][ T5889] usb 1-1: Using ep0 maxpacket: 16 [ 255.873484][ T5889] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 255.873534][ T5889] usb 1-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 255.873558][ T5889] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 256.016692][ T5889] usb 1-1: config 0 descriptor?? [ 256.180199][ T5732] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 257.363936][ T5732] usb 5-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 257.363961][ T5732] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 257.393351][ T5732] usb 5-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice= 0.9c [ 257.393380][ T5732] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 257.393454][ T5732] usb 5-1: Product: syz [ 257.393469][ T5732] usb 5-1: Manufacturer: syz [ 257.393490][ T5732] usb 5-1: SerialNumber: syz [ 257.516391][ T5732] usb 5-1: config 0 descriptor?? [ 257.681121][ T5732] ims_pcu 5-1:0.0: Missing CDC union descriptor [ 257.681741][ T5732] ims_pcu 5-1:0.0: probe with driver ims_pcu failed with error -22 [ 258.599041][ T7155] ------------[ cut here ]------------ [ 258.599055][ T7155] debug_locks && !(!get_current()->pi_blocked_on) [ 258.599070][ T7155] WARNING: kernel/locking/spinlock_rt.c:40 at rt_spin_lock+0x31c/0x400, CPU#1: syz.1.320/7155 [ 258.599120][ T7155] Modules linked in: [ 258.599163][ T7155] CPU: 1 UID: 0 PID: 7155 Comm: syz.1.320 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 258.599195][ T7155] Tainted: [L]=SOFTLOCKUP [ 258.599203][ T7155] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 258.599221][ T7155] RIP: 0010:rt_spin_lock+0x31c/0x400 [ 258.599253][ T7155] Code: 48 3b 44 24 60 0f 85 98 00 00 00 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 2a 70 08 f6 e9 ac fe ff ff 90 <0f> 0b 90 e9 f6 fd ff ff 90 0f 0b 90 e9 3f ff ff ff e8 0e 70 08 f6 [ 258.599280][ T7155] RSP: 0018:ffffc90003a875a0 EFLAGS: 00010282 [ 258.599298][ T7155] RAX: 1ffff11007541917 RBX: 1ffff92000750eb8 RCX: 0000000000000046 [ 258.599313][ T7155] RDX: 0000000000000000 RSI: ffffffff8d88874d RDI: ffffffff8ba85b60 [ 258.599328][ T7155] RBP: ffffc90003a87650 R08: ffffffff8223d484 R09: ffff88813fe34758 [ 258.599344][ T7155] R10: dffffc0000000000 R11: fffffbfff1f1597f R12: ffff88803aa0c8b8 [ 258.599360][ T7155] R13: dffffc0000000000 R14: ffff88813fe34700 R15: ffffc90003a875e0 [ 258.599376][ T7155] FS: 00007f71a09366c0(0000) GS:ffff88812601f000(0000) knlGS:0000000000000000 [ 258.599393][ T7155] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 258.599406][ T7155] CR2: 00007fb70a458910 CR3: 000000001eb18000 CR4: 00000000003526f0 [ 258.599424][ T7155] Call Trace: [ 258.599432][ T7155] [ 258.599445][ T7155] ? __pfx_rt_spin_lock+0x10/0x10 [ 258.599500][ T7155] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 258.599525][ T7155] ? lockdep_hardirqs_on+0x7a/0x110 [ 258.599550][ T7155] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 258.599578][ T7155] get_from_partial_node+0x54/0x480 [ 258.599608][ T7155] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 258.599646][ T7155] ___slab_alloc+0xc2/0x930 [ 258.599670][ T7155] ? __migrate_enable+0x58/0xa0 [ 258.599693][ T7155] ? fill_pool+0x156/0x580 [ 258.599720][ T7155] kmem_cache_alloc_noprof+0xea/0x680 [ 258.599749][ T7155] ? fill_pool+0x156/0x580 [ 258.599776][ T7155] fill_pool+0x156/0x580 [ 258.599804][ T7155] ? __pfx_fill_pool+0x10/0x10 [ 258.599832][ T7155] ? debug_objects_fill_pool+0x6f/0xd0 [ 258.599854][ T7155] ? debug_objects_fill_pool+0x6f/0xd0 [ 258.599880][ T7155] debug_objects_fill_pool+0x97/0xd0 [ 258.599902][ T7155] debug_object_assert_init+0x65/0x300 [ 258.599935][ T7155] hrtimer_start_range_ns_user+0x3b/0x4b0 [ 258.599969][ T7155] hrtimer_sleeper_start_expires+0x8a/0x150 [ 258.600001][ T7155] futex_lock_pi+0x8df/0xb10 [ 258.600039][ T7155] ? __pfx_futex_lock_pi+0x10/0x10 [ 258.600072][ T7155] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 258.600101][ T7155] ? __lock_acquire+0x6b5/0x2d10 [ 258.600145][ T7155] ? __pfx_futex_wake_mark+0x10/0x10 [ 258.600195][ T7155] do_futex+0x292/0x420 [ 258.600225][ T7155] ? __pfx_do_futex+0x10/0x10 [ 258.600259][ T7155] __se_sys_futex+0x3a8/0x450 [ 258.600299][ T7155] ? __pfx___se_sys_futex+0x10/0x10 [ 258.600327][ T7155] ? __task_pid_nr_ns+0x28/0x470 [ 258.600357][ T7155] ? __x64_sys_futex+0x21/0xf0 [ 258.600382][ T7155] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 258.600405][ T7155] do_syscall_64+0x15f/0xf80 [ 258.600431][ T7155] ? clear_bhb_loop+0x40/0x90 [ 258.600456][ T7155] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 258.600476][ T7155] RIP: 0033:0x7f71a26dce59 [ 258.600508][ T7155] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 258.600525][ T7155] RSP: 002b:00007f71a0936028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 258.600546][ T7155] RAX: ffffffffffffffda RBX: 00007f71a2955fa0 RCX: 00007f71a26dce59 [ 258.600561][ T7155] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000200000000200 [ 258.600574][ T7155] RBP: 00007f71a2772d6f R08: 0000000000000000 R09: 0000000000000001 [ 258.600587][ T7155] R10: 0000200000000240 R11: 0000000000000246 R12: 0000000000000000 [ 258.600600][ T7155] R13: 00007f71a2956038 R14: 00007f71a2955fa0 R15: 00007fff266a8358 [ 258.600635][ T7155] [ 258.600651][ T7155] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 258.600673][ T7155] CPU: 1 UID: 0 PID: 7155 Comm: syz.1.320 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 258.600701][ T7155] Tainted: [L]=SOFTLOCKUP [ 258.600708][ T7155] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 258.600719][ T7155] Call Trace: [ 258.600727][ T7155] [ 258.600735][ T7155] vpanic+0x56c/0xa60 [ 258.600765][ T7155] ? __pfx__printk+0x10/0x10 [ 258.600785][ T7155] ? __pfx_vpanic+0x10/0x10 [ 258.600810][ T7155] ? is_bpf_text_address+0x292/0x2b0 [ 258.600833][ T7155] ? is_bpf_text_address+0x26/0x2b0 [ 258.600862][ T7155] panic+0xc5/0xd0 [ 258.600888][ T7155] ? __pfx_panic+0x10/0x10 [ 258.600932][ T7155] __warn+0x315/0x4c0 [ 258.600958][ T7155] ? rt_spin_lock+0x31c/0x400 [ 258.600991][ T7155] ? rt_spin_lock+0x31c/0x400 [ 258.601022][ T7155] __report_bug+0x29a/0x540 [ 258.601054][ T7155] ? rt_spin_lock+0x31c/0x400 [ 258.601085][ T7155] ? __pfx___report_bug+0x10/0x10 [ 258.601111][ T7155] ? __lock_acquire+0x6b5/0x2d10 [ 258.601145][ T7155] ? __lock_acquire+0x6b5/0x2d10 [ 258.601176][ T7155] ? rt_spin_lock+0x31c/0x400 [ 258.601206][ T7155] report_bug+0x16a/0x220 [ 258.601232][ T7155] ? rt_spin_lock+0x31c/0x400 [ 258.601259][ T7155] ? rt_spin_lock+0x31e/0x400 [ 258.601296][ T7155] handle_bug+0x9c/0x200 [ 258.601323][ T7155] exc_invalid_op+0x1a/0x50 [ 258.601348][ T7155] asm_exc_invalid_op+0x1a/0x20 [ 258.601367][ T7155] RIP: 0010:rt_spin_lock+0x31c/0x400 [ 258.601402][ T7155] Code: 48 3b 44 24 60 0f 85 98 00 00 00 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 2a 70 08 f6 e9 ac fe ff ff 90 <0f> 0b 90 e9 f6 fd ff ff 90 0f 0b 90 e9 3f ff ff ff e8 0e 70 08 f6 [ 258.601420][ T7155] RSP: 0018:ffffc90003a875a0 EFLAGS: 00010282 [ 258.601439][ T7155] RAX: 1ffff11007541917 RBX: 1ffff92000750eb8 RCX: 0000000000000046 [ 258.601455][ T7155] RDX: 0000000000000000 RSI: ffffffff8d88874d RDI: ffffffff8ba85b60 [ 258.601469][ T7155] RBP: ffffc90003a87650 R08: ffffffff8223d484 R09: ffff88813fe34758 [ 258.601485][ T7155] R10: dffffc0000000000 R11: fffffbfff1f1597f R12: ffff88803aa0c8b8 [ 258.601501][ T7155] R13: dffffc0000000000 R14: ffff88813fe34700 R15: ffffc90003a875e0 [ 258.601523][ T7155] ? get_from_partial_node+0x54/0x480 [ 258.601560][ T7155] ? __pfx_rt_spin_lock+0x10/0x10 [ 258.601592][ T7155] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 258.601617][ T7155] ? lockdep_hardirqs_on+0x7a/0x110 [ 258.601641][ T7155] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 258.601669][ T7155] get_from_partial_node+0x54/0x480 [ 258.601699][ T7155] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 258.601739][ T7155] ___slab_alloc+0xc2/0x930 [ 258.601764][ T7155] ? __migrate_enable+0x58/0xa0 [ 258.601788][ T7155] ? fill_pool+0x156/0x580 [ 258.601816][ T7155] kmem_cache_alloc_noprof+0xea/0x680 [ 258.601845][ T7155] ? fill_pool+0x156/0x580 [ 258.601872][ T7155] fill_pool+0x156/0x580 [ 258.601898][ T7155] ? __pfx_fill_pool+0x10/0x10 [ 258.601925][ T7155] ? debug_objects_fill_pool+0x6f/0xd0 [ 258.601945][ T7155] ? debug_objects_fill_pool+0x6f/0xd0 [ 258.601969][ T7155] debug_objects_fill_pool+0x97/0xd0 [ 258.601991][ T7155] debug_object_assert_init+0x65/0x300 [ 258.602024][ T7155] hrtimer_start_range_ns_user+0x3b/0x4b0 [ 258.602055][ T7155] hrtimer_sleeper_start_expires+0x8a/0x150 [ 258.602085][ T7155] futex_lock_pi+0x8df/0xb10 [ 258.602124][ T7155] ? __pfx_futex_lock_pi+0x10/0x10 [ 258.602176][ T7155] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 258.602205][ T7155] ? __lock_acquire+0x6b5/0x2d10 [ 258.602247][ T7155] ? __pfx_futex_wake_mark+0x10/0x10 [ 258.602310][ T7155] do_futex+0x292/0x420 [ 258.602341][ T7155] ? __pfx_do_futex+0x10/0x10 [ 258.602375][ T7155] __se_sys_futex+0x3a8/0x450 [ 258.602406][ T7155] ? __pfx___se_sys_futex+0x10/0x10 [ 258.602431][ T7155] ? __task_pid_nr_ns+0x28/0x470 [ 258.602458][ T7155] ? __x64_sys_futex+0x21/0xf0 [ 258.602482][ T7155] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 258.602505][ T7155] do_syscall_64+0x15f/0xf80 [ 258.602530][ T7155] ? clear_bhb_loop+0x40/0x90 [ 258.602557][ T7155] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 258.602578][ T7155] RIP: 0033:0x7f71a26dce59 [ 258.602596][ T7155] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 258.602614][ T7155] RSP: 002b:00007f71a0936028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 258.602635][ T7155] RAX: ffffffffffffffda RBX: 00007f71a2955fa0 RCX: 00007f71a26dce59 [ 258.602650][ T7155] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000200000000200 [ 258.602664][ T7155] RBP: 00007f71a2772d6f R08: 0000000000000000 R09: 0000000000000001 [ 258.602677][ T7155] R10: 0000200000000240 R11: 0000000000000246 R12: 0000000000000000 [ 258.602690][ T7155] R13: 00007f71a2956038 R14: 00007f71a2955fa0 R15: 00007fff266a8358 [ 258.602722][ T7155] [ 258.603005][ T7155] Kernel Offset: disabled