last executing test programs: 4m6.247799477s ago: executing program 1 (id=6): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r3, 0x84, 0x81, &(0x7f00000002c0)="1ae96d0103010000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r3, 0x84, 0x17, &(0x7f0000000000)=ANY=[], 0xffc9) 4m5.005705978s ago: executing program 1 (id=7): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x7) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, r1) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000800)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) mkdir(0x0, 0x5) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r2, 0x4b45, 0x0) ioctl$TIOCL_SETSEL(r2, 0x541c, &(0x7f00000000c0)={0x2, {0x2, 0x0, 0x300, 0x0, 0x8, 0x300}}) 4m4.945869606s ago: executing program 1 (id=8): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x40001e0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x1, &(0x7f00000010c0)={0x2, 0x4e23, @private=0xa010100}, 0x10) r3 = socket(0x2, 0x80805, 0x0) socket(0x2, 0x80805, 0x0) getsockopt$bt_hci(r3, 0x84, 0x3, &(0x7f0000000000)=""/4102, &(0x7f0000001080)=0x1006) 4m3.552042639s ago: executing program 1 (id=10): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x44004000) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x80, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_EXPRESSIONS={0x54, 0x4, 0x0, 0x1, [{0x50, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x40, 0x2, 0x0, 0x1, [@NFTA_TARGET_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TARGET_INFO={0x2c, 0x3, "7339f2f10455afb9fdd672bad09dfb78c7699c74e891a0c700"/40}, @NFTA_TARGET_NAME={0x8, 0x1, 'TEE\x00'}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa8}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) 4m1.69422165s ago: executing program 1 (id=13): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) creat(&(0x7f00000000c0)='./file0\x00', 0x48) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_resuseaddr={0x0}}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085"], 0x0, 0x101, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)={0x14, 0x0, 0x800, 0x70bd2b, 0x25dfdbfd}, 0x14}}, 0x804) write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) r3 = open(&(0x7f0000000300)='./file0\x00', 0x145142, 0x102) write$hidraw(r3, &(0x7f00000006c0)=':', 0x1) 3m59.468188491s ago: executing program 1 (id=16): io_uring_register$IORING_REGISTER_PBUF_RING(0xffffffffffffffff, 0x16, 0x0, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000340)="1400000023003517d25a806f8b6394f90324fc60", 0x14}], 0x1, 0x0, 0x0, 0x2000000}, 0x0) 3m43.874949087s ago: executing program 32 (id=16): io_uring_register$IORING_REGISTER_PBUF_RING(0xffffffffffffffff, 0x16, 0x0, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000340)="1400000023003517d25a806f8b6394f90324fc60", 0x14}], 0x1, 0x0, 0x0, 0x2000000}, 0x0) 2m42.248696797s ago: executing program 3 (id=142): socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000240), 0x80000, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000040)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r3, 0x3ba0, &(0x7f00000007c0)={0x48, 0x2, r4}) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f0000000100)={0x28, 0x4, r4, 0x0, &(0x7f0000c00000/0x400000)=nil, 0x400000, 0x51e}) 2m40.609798085s ago: executing program 3 (id=143): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGLED(0xffffffffffffffff, 0x40044582, 0x0) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000800)=@mpls_delroute={0x24, 0x19, 0x1, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x3, 0x0, 0x1}, [@RTA_DST={0x8, 0x1, {0x8, 0x0, 0x1}}]}, 0x24}}, 0x0) 2m39.368030532s ago: executing program 3 (id=145): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="c80000000002010400000000000000000a0000003c0001800c00028005000100000000002c0001801400030000000000000000"], 0xc8}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 2m37.909714124s ago: executing program 3 (id=147): set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) getdents64(0xffffffffffffffff, &(0x7f0000002f40)=""/4098, 0x1002) socket(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xfffffffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) setxattr$incfs_id(&(0x7f0000000000)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000140), 0x0, 0x0, 0x2) r1 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, 0x0, 0x0) connect$inet6(r1, &(0x7f00000004c0)={0xa, 0x4e1f, 0x2, @empty, 0x802}, 0x1c) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x10, &(0x7f0000000040), 0x4) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000007fc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 2m36.177838016s ago: executing program 3 (id=150): socket$packet(0x11, 0x2, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() getsockopt$inet_sctp_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, &(0x7f0000000100), &(0x7f0000000280)=0x4) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) inotify_init1(0x81800) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x114}], 0x1}, 0x0) 2m34.432949701s ago: executing program 3 (id=151): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffeda}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_route(0x10, 0x3, 0x0) sync() syz_usb_connect$cdc_ecm(0x2, 0x0, 0x0, 0x0) 2m18.155796338s ago: executing program 33 (id=151): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffeda}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_route(0x10, 0x3, 0x0) sync() syz_usb_connect$cdc_ecm(0x2, 0x0, 0x0, 0x0) 1m30.082351827s ago: executing program 0 (id=233): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x88b81, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)={0x14, 0x38, 0x701, 0x0, 0x0, {0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x48010}, 0x4000000) 1m27.033734947s ago: executing program 0 (id=235): openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) memfd_create(&(0x7f0000000280)='\x00\x00\x00\x00\x00\x00z\x9b\xb6\xe8t;\xfc\x02\x00\x00\x009\xa0\x8b\x14d\xa2\xa1\xa8!\xe8\xd1\xa0\x8a\xce0\x1c\xb7\xf1\xccm\xce\xd4\xdb\x89\xe5\x8f\xe2\xb6\xd6\x9cF\xbd\xff\x14\x05\x00\x00\x00\x00\x00\x00\x00\xf3\xdc\x91\'\x06\\8\r\xfc\xeeG\xbe\x90C\x1c)5\x98\xa3\xfa\a\xf9\x98\xbb}\xeb\x86P=\xe51\x9d,\xb7\xe6_M\xbe\x19\xea#\xff[\xd1\xc3\x9a\xa3\x1b\xf9\xe9\x1d \xce1\xc9\x9f\xb0\x14\xc2\xeb\xf9\xceE\xad\xa4\x92\f\xef\x87g\xb6\xabW\xac\rP\xf42\xb7\xc8\xaajn\xd7\n\r\x802\xd7\x1b$\x95tO*\xf4\xae\xb8\xb8m\xbf\r\xd5\xbf*\xfd\xc7\x85\x1b\x8b\xe5\x97j`c\xe0\x88?\xda\x8a#t>r\xae\xe8\xc9)', 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000340), 0x42, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x2000000000000021, 0x2, 0x10000000000002) socket$packet(0x11, 0x3, 0x300) userfaultfd(0x801) r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYRES8=r0], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000000), 0xd) 1m26.094323139s ago: executing program 0 (id=238): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) sendmsg$tipc(r3, &(0x7f00000005c0)={&(0x7f0000000000), 0x10, 0x0}, 0x0) 1m24.287562659s ago: executing program 0 (id=240): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a88000000060a010400000000000000000a0000010900010073797a31000000005c000480580001800b0001007461726765740000480002802c0003009ac420002e2eafb9fdd672bad09dfb78c7699c74e82fa0c70000000000000000000000000000000008000240000000000e00010049444c4554494d45520000000900020073797a32"], 0xb0}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) sendmsg$NL80211_CMD_SET_INTERFACE(r0, 0x0, 0x48000) 1m22.41204558s ago: executing program 0 (id=241): socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$xdp(0x2c, 0x3, 0x0) mmap(&(0x7f000000b000/0x4000)=nil, 0x4000, 0x1000005, 0x8012, r4, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r5, &(0x7f0000003240), 0x0, 0x4000800) r6 = syz_open_dev$video(&(0x7f0000000000), 0x7, 0x0) ioctl$VIDIOC_QUERYCTRL(r6, 0xc0445624, &(0x7f0000001d00)={0xbf9f, 0x23b4b4b239d825f2, "b058b584c75da73d1f7600450b8add59e9665ce1d040fef200", 0x0, 0x2}) r7 = syz_open_dev$vim2m(&(0x7f0000000100), 0x7, 0x2) r8 = syz_io_uring_setup(0x24fe, &(0x7f00000003c0)={0x0, 0x793, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) io_uring_register$IORING_REGISTER_BUFFERS(r8, 0x0, &(0x7f00000001c0)=[{&(0x7f00000004c0)=""/120, 0x78}], 0x1) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x38}}, 0x4000080) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r9, r10, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x10, 0x0, @fd_index=0x8, 0xfff, 0x0, 0x6, 0x0, 0x1}) io_uring_enter(r8, 0x2d3e, 0x2936, 0x0, 0x0, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r7, 0xc0405602, &(0x7f0000000600)={0x29, 0x1, 0x3, "ff050000007eefad00000000ffffffff000000000000000000000900", 0x32314d4e}) 1m20.936077382s ago: executing program 0 (id=243): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x102, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xffffffed, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r7, {0x0, 0xd}, {0xb, 0xb}, {0x5, 0xb}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x8, 0x2, 0xfffff001}}]}, 0x40}, 0x1, 0x0, 0x0, 0x2001c061}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 1m5.175554406s ago: executing program 34 (id=243): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x102, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xffffffed, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r7, {0x0, 0xd}, {0xb, 0xb}, {0x5, 0xb}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x8, 0x2, 0xfffff001}}]}, 0x40}, 0x1, 0x0, 0x0, 0x2001c061}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 15.404181153s ago: executing program 4 (id=317): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) r1 = getpid() sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=ANY=[@ANYBLOB="6c00000000010104000000000000000202000000240001801400018008000100e000000108000200000000000c0002800500010000000000240002800c00028005000100000000001400018008000100e00000010800020000000000080007"], 0x6c}}, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="14000000020105"], 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) 12.604072604s ago: executing program 4 (id=319): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) sched_setscheduler(0x0, 0x2, 0x0) r1 = socket(0x2a, 0x2, 0x0) getsockname$packet(r1, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x34, 0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x40000000, 0x1}) r2 = syz_io_uring_setup(0x74d, &(0x7f0000000100)={0x0, 0x59c4, 0x8, 0x1000, 0x5cc}, &(0x7f0000000300)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_ACCEPT={0xd, 0xc, 0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x81800, 0x1}) io_uring_enter(r2, 0x749f, 0x4, 0x0, 0x0, 0xfffffffffffffef5) 10.879064074s ago: executing program 4 (id=322): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r3 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x7, 0x20002f7}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000140)={'syztnl2\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x5c8c, 0x0, @empty, @mcast1, 0x80, 0x0, 0x0, 0x20000000}}) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) 8.760527644s ago: executing program 4 (id=323): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffc000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000440)='\x00'/16, 0x10) r4 = accept4(r3, 0x0, 0x0, 0x80000) r5 = accept4(r4, 0x0, 0x0, 0x0) geteuid() sendmmsg$inet6(r5, &(0x7f0000003b80)=[{{0x0, 0xd, &(0x7f00000003c0)=[{&(0x7f00000000c0)="e6", 0x1}], 0x1, 0x0, 0x0, 0x7000300}}, {{0x0, 0x500, &(0x7f0000000740)=[{&(0x7f0000000440)='&', 0x23fff}], 0x1}, 0xff03}], 0x4000070, 0x8000) 8.66574831s ago: executing program 2 (id=324): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) inotify_add_watch(0xffffffffffffffff, 0x0, 0xc0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d697400"], 0x84}, 0x1, 0x0, 0x0, 0x24008890}, 0x40) sendmsg$NFT_BATCH(r3, 0x0, 0x40) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f000001ad00)=[{{0x0, 0x0, 0x0}, 0xc}, {{0x0, 0x0, &(0x7f000001a9c0)}, 0xdf}], 0x2, 0x2, 0x0) 7.304965804s ago: executing program 4 (id=325): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8000000000000000}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r3 = mmap$KVM_VCPU(&(0x7f0000ffc000/0x2000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0) r4 = userfaultfd(0x80801) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)) r5 = syz_io_uring_setup(0xa1, &(0x7f0000000640)={0x0, 0xe8ce, 0x0, 0x20, 0x40000313}, &(0x7f00000006c0)=0x0, &(0x7f00000020c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x6007, @fd=r4, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001800)=""/211, 0xd3}], 0x1}) io_uring_enter(r5, 0x47ba, 0x0, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000002800)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x1}) syz_memcpy_off$KVM_EXIT_HYPERCALL(r3, 0x20, &(0x7f0000000000)="1eb3bf65654102f4af4d221c8bd458d1e7cbdaf3657d0f34e790c85bdba7931791f6d15c3e681411f7a496c0dace6a3c242f5b016f64b4ef8a9cedaf6bec340dee49474360b24cb8", 0x0, 0x48) 6.316516213s ago: executing program 2 (id=326): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x8000000000002) sched_setscheduler(r0, 0x2, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = socket(0x1e, 0x1, 0x0) connect$tipc(r5, &(0x7f0000000040)=@id, 0x10) shutdown(r5, 0x2) 5.013626763s ago: executing program 4 (id=327): socket(0x80000000000000a, 0x2, 0x0) socket$inet6(0xa, 0x1, 0x8010000000000084) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$FBIOGET_FSCREENINFO(0xffffffffffffffff, 0x4602, &(0x7f0000000100)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0xa0201, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) socket$netlink(0x10, 0x3, 0x0) socket(0x200000000000011, 0x2, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x85, &(0x7f0000000240)={0x0, @in={{0x2, 0x8, @rand_addr=0x64010100}}, 0xff, 0x3}, 0x90) ioctl$SNDCTL_DSP_SETFMT(r2, 0xc0045005, &(0x7f0000000640)=0x8000) 3.678252037s ago: executing program 2 (id=328): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, 0x0, 0x0}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="b400000000000000dd0a000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94) socket$inet6(0xa, 0x800000000000002, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x4000001) bpf$MAP_CREATE_TAIL_CALL(0x9, 0x0, 0xc) clock_nanosleep(0x8, 0x0, &(0x7f00000004c0)={0x0, 0x3938700}, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@my=0x0}) ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(r0, 0x7b1, 0x0) 2.840942756s ago: executing program 2 (id=329): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000440), 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000740)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) r3 = fsopen(0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000003c0)={0x1c, 0x14, 0x1, 0x0, 0x25dfdbff, "", [@nested={0x4}, @nested={0x8, 0x2, 0x0, 0x1, [@generic="ecc032c4"]}]}, 0x1c}], 0x1, 0x0, 0x0, 0x4000}, 0x0) 1.32850301s ago: executing program 2 (id=330): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x5, 0x7}, 0x50) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000040)={0x2, 0xffff, @multicast2}, 0x10, &(0x7f00000000c0)=[{0x0}], 0x1, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000007000000890b040a0101027f00000100000000001c00"/44], 0x40}, 0x20000000) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) sendmsg$tipc(r3, &(0x7f00000005c0)={&(0x7f0000000000), 0x10, &(0x7f0000000480)=[{&(0x7f0000000180)="f7", 0x101d0}], 0x1}, 0x0) 0s ago: executing program 2 (id=331): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r3 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x7, 0x20002f7}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000140)={'syztnl2\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x5c8c, 0x0, @empty, @mcast1, 0x80, 0x0, 0x0, 0x20000000}}) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.247' (ED25519) to the list of known hosts. [ 80.280879][ T5824] cgroup: Unknown subsys name 'net' [ 80.513435][ T5824] cgroup: Unknown subsys name 'cpuset' [ 80.569345][ T5824] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 82.372358][ T5824] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 85.099530][ T5852] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 85.102492][ T5852] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 85.106592][ T5852] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 85.108212][ T5852] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 85.119822][ T5852] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 85.120509][ T5852] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 85.121271][ T5852] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 85.121469][ T5852] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 85.121872][ T5852] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 85.126927][ T5856] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 85.133076][ T5856] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 85.134461][ T5852] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 85.136881][ T5852] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 85.139559][ T5852] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 85.139654][ T5856] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 85.140609][ T5856] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 85.145832][ T5856] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 85.146583][ T5856] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 85.177252][ T59] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 85.178002][ T59] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 85.179264][ T59] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 85.182190][ T5842] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 85.182915][ T5842] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 85.280129][ T5155] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 85.281008][ T5155] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 86.156630][ T5838] chnl_net:caif_netlink_parms(): no params data found [ 86.177360][ T5837] chnl_net:caif_netlink_parms(): no params data found [ 86.269884][ T5836] chnl_net:caif_netlink_parms(): no params data found [ 86.448212][ T5839] chnl_net:caif_netlink_parms(): no params data found [ 86.511020][ T5847] chnl_net:caif_netlink_parms(): no params data found [ 86.802978][ T1238] cfg80211: failed to load regulatory.db [ 87.159212][ T5838] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.159370][ T5838] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.160199][ T5838] bridge_slave_0: entered allmulticast mode [ 87.163783][ T5838] bridge_slave_0: entered promiscuous mode [ 87.177920][ T5837] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.178050][ T5837] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.178614][ T5837] bridge_slave_0: entered allmulticast mode [ 87.182047][ T5837] bridge_slave_0: entered promiscuous mode [ 87.200903][ T59] Bluetooth: hci2: command tx timeout [ 87.267691][ T5838] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.267800][ T5838] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.267921][ T5838] bridge_slave_1: entered allmulticast mode [ 87.270707][ T5838] bridge_slave_1: entered promiscuous mode [ 87.298889][ T5837] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.299121][ T5837] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.299308][ T5837] bridge_slave_1: entered allmulticast mode [ 87.302630][ T5837] bridge_slave_1: entered promiscuous mode [ 87.358859][ T59] Bluetooth: hci0: command tx timeout [ 87.358866][ T5856] Bluetooth: hci3: command tx timeout [ 87.359069][ T59] Bluetooth: hci1: command tx timeout [ 87.370166][ T5848] Bluetooth: hci4: command tx timeout [ 87.619812][ T5836] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.619936][ T5836] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.620097][ T5836] bridge_slave_0: entered allmulticast mode [ 87.621575][ T5836] bridge_slave_0: entered promiscuous mode [ 87.982346][ T5836] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.982484][ T5836] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.982677][ T5836] bridge_slave_1: entered allmulticast mode [ 87.985466][ T5836] bridge_slave_1: entered promiscuous mode [ 87.987821][ T5839] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.987942][ T5839] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.988072][ T5839] bridge_slave_0: entered allmulticast mode [ 87.992891][ T5839] bridge_slave_0: entered promiscuous mode [ 88.010999][ T5838] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.112642][ T5837] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.169695][ T5839] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.169816][ T5839] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.169936][ T5839] bridge_slave_1: entered allmulticast mode [ 88.171434][ T5839] bridge_slave_1: entered promiscuous mode [ 88.175390][ T5838] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.175606][ T5847] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.175742][ T5847] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.175850][ T5847] bridge_slave_0: entered allmulticast mode [ 88.177269][ T5847] bridge_slave_0: entered promiscuous mode [ 88.184957][ T5837] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.522540][ T5847] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.522641][ T5847] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.522756][ T5847] bridge_slave_1: entered allmulticast mode [ 88.524197][ T5847] bridge_slave_1: entered promiscuous mode [ 88.615158][ T5836] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.851914][ T5836] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.854688][ T5839] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.856887][ T5838] team0: Port device team_slave_0 added [ 88.973776][ T5837] team0: Port device team_slave_0 added [ 89.062925][ T5839] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.064862][ T5838] team0: Port device team_slave_1 added [ 89.067931][ T5847] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.080470][ T5837] team0: Port device team_slave_1 added [ 89.272075][ T5847] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.278988][ T5848] Bluetooth: hci2: command tx timeout [ 89.344924][ T5836] team0: Port device team_slave_0 added [ 89.438840][ T5848] Bluetooth: hci3: command tx timeout [ 89.448977][ T5848] Bluetooth: hci4: command tx timeout [ 89.449006][ T5848] Bluetooth: hci1: command tx timeout [ 89.449025][ T5848] Bluetooth: hci0: command tx timeout [ 89.853982][ T5836] team0: Port device team_slave_1 added [ 89.855596][ T5839] team0: Port device team_slave_0 added [ 89.856989][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.856997][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.857010][ T5838] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.943152][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.943168][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.943190][ T5837] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.022258][ T5839] team0: Port device team_slave_1 added [ 90.023553][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.023564][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.023588][ T5838] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.026956][ T5847] team0: Port device team_slave_0 added [ 90.032447][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.032459][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.032482][ T5837] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.241644][ T5847] team0: Port device team_slave_1 added [ 90.248014][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.248026][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.248043][ T5836] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.472682][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.472693][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.472705][ T5836] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.474634][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.474643][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.474656][ T5839] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.796312][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.796328][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.796351][ T5839] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.798496][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.798509][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.798530][ T5847] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.003237][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.003253][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.003284][ T5847] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.100613][ T5838] hsr_slave_0: entered promiscuous mode [ 91.101655][ T5838] hsr_slave_1: entered promiscuous mode [ 91.120670][ T5837] hsr_slave_0: entered promiscuous mode [ 91.121946][ T5837] hsr_slave_1: entered promiscuous mode [ 91.122920][ T5837] debugfs: 'hsr0' already exists in 'hsr' [ 91.123031][ T5837] Cannot create hsr debugfs directory [ 91.359022][ T5856] Bluetooth: hci2: command tx timeout [ 91.428487][ T5836] hsr_slave_0: entered promiscuous mode [ 91.430117][ T5836] hsr_slave_1: entered promiscuous mode [ 91.430937][ T5836] debugfs: 'hsr0' already exists in 'hsr' [ 91.430960][ T5836] Cannot create hsr debugfs directory [ 91.529350][ T5848] Bluetooth: hci1: command tx timeout [ 91.529377][ T5848] Bluetooth: hci4: command tx timeout [ 91.529393][ T5848] Bluetooth: hci3: command tx timeout [ 91.529528][ T5856] Bluetooth: hci0: command tx timeout [ 91.707307][ T5839] hsr_slave_0: entered promiscuous mode [ 91.708590][ T5839] hsr_slave_1: entered promiscuous mode [ 91.721862][ T5839] debugfs: 'hsr0' already exists in 'hsr' [ 91.721886][ T5839] Cannot create hsr debugfs directory [ 92.069192][ T5847] hsr_slave_0: entered promiscuous mode [ 92.070406][ T5847] hsr_slave_1: entered promiscuous mode [ 92.071343][ T5847] debugfs: 'hsr0' already exists in 'hsr' [ 92.071364][ T5847] Cannot create hsr debugfs directory [ 93.439298][ T59] Bluetooth: hci2: command tx timeout [ 93.470901][ T5838] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 93.520529][ T5838] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 93.555806][ T5838] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 93.598827][ T5856] Bluetooth: hci3: command tx timeout [ 93.598858][ T5856] Bluetooth: hci4: command tx timeout [ 93.598878][ T5856] Bluetooth: hci1: command tx timeout [ 93.603453][ T59] Bluetooth: hci0: command tx timeout [ 93.612559][ T5838] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 93.732060][ T5836] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 93.778038][ T5836] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 93.807692][ T5836] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 93.858264][ T5836] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 93.998932][ T5837] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 94.035081][ T5837] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 94.075194][ T5837] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 94.135173][ T5837] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 94.295931][ T5839] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 94.342082][ T5839] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 94.367800][ T5839] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 94.427094][ T5839] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 94.607241][ T5847] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 94.657253][ T5847] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 94.694275][ T5838] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.695974][ T5847] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 94.736094][ T5847] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 94.858550][ T5838] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.884604][ T5836] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.914879][ T1025] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.915696][ T1025] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.974828][ T1025] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.974933][ T1025] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.017880][ T5836] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.071109][ T5837] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.075290][ T1025] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.075845][ T1025] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.132370][ T988] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.132540][ T988] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.228166][ T5837] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.249240][ T5839] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.285471][ T1494] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.285601][ T1494] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.331894][ T988] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.332040][ T988] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.428395][ T5839] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.496267][ T5847] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.515260][ T988] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.515423][ T988] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.615300][ T988] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.615449][ T988] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.739088][ T5847] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.806089][ T988] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.808902][ T988] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.877019][ T988] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.877164][ T988] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.920517][ T5838] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.142336][ T5836] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.325789][ T5838] veth0_vlan: entered promiscuous mode [ 96.434330][ T5837] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.444851][ T5838] veth1_vlan: entered promiscuous mode [ 96.551339][ T5836] veth0_vlan: entered promiscuous mode [ 96.573505][ T5839] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.629713][ T5836] veth1_vlan: entered promiscuous mode [ 96.789687][ T5838] veth0_macvtap: entered promiscuous mode [ 96.843435][ T5838] veth1_macvtap: entered promiscuous mode [ 96.936640][ T5836] veth0_macvtap: entered promiscuous mode [ 96.988887][ T5847] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.991808][ T5836] veth1_macvtap: entered promiscuous mode [ 96.997964][ T5839] veth0_vlan: entered promiscuous mode [ 97.030987][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.077846][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.100620][ T5839] veth1_vlan: entered promiscuous mode [ 97.131360][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.139879][ T3627] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.166467][ T3627] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.184367][ T3627] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.200107][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.204160][ T3627] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.293641][ T988] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.310542][ T988] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.354478][ T988] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.371148][ T988] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.515054][ T5837] veth0_vlan: entered promiscuous mode [ 97.517144][ T5847] veth0_vlan: entered promiscuous mode [ 97.600224][ T5839] veth0_macvtap: entered promiscuous mode [ 97.653373][ T5837] veth1_vlan: entered promiscuous mode [ 97.655207][ T3627] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.655230][ T3627] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.657975][ T5839] veth1_macvtap: entered promiscuous mode [ 97.711029][ T5847] veth1_vlan: entered promiscuous mode [ 97.839896][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.839914][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.856664][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.940734][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.963959][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.963977][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.039654][ T1025] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.041114][ T5837] veth0_macvtap: entered promiscuous mode [ 98.082091][ T1025] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.110692][ T1025] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.130762][ T1025] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.131395][ T5837] veth1_macvtap: entered promiscuous mode [ 98.136285][ T5847] veth0_macvtap: entered promiscuous mode [ 98.168821][ T1025] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.168840][ T1025] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.245857][ T5847] veth1_macvtap: entered promiscuous mode [ 98.351771][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.166324][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.274618][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.350094][ T1176] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.355846][ T1176] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.355961][ T3648] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.355974][ T3648] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.539245][ T1176] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.567587][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.597150][ T57] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.980403][ T57] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.562306][ T57] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.566492][ T3627] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.566511][ T3627] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.792909][ T57] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.898989][ T57] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.216737][ T1025] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.216756][ T1025] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.249237][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 104.249394][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 104.249459][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 104.249528][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 104.249912][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 104.249977][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 104.250040][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 104.321457][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 104.432459][ T1025] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.432478][ T1025] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.678878][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 104.679239][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 105.085839][ T3648] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.085857][ T3648] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.247772][ T43] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.247792][ T43] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.455228][ T6006] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 111.319485][ T6034] tipc: Failed to remove unknown binding: 66,1,1/0:2921296611/2921296613 [ 111.321435][ T6034] tipc: Failed to remove unknown binding: 66,1,1/0:2921296611/2921296613 [ 111.321473][ T6034] tipc: Failed to remove unknown binding: 66,1,1/0:2921296611/2921296613 [ 113.579915][ T6049] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 122.348898][ T6111] ======================================================= [ 122.348898][ T6111] WARNING: The mand mount option has been deprecated and [ 122.348898][ T6111] and is ignored by this kernel. Remove the mand [ 122.348898][ T6111] option from the mount to silence this warning. [ 122.348898][ T6111] ======================================================= [ 124.502721][ T6129] 9pnet: p9_errstr2errno: server reported unknown error 184467440737095 [ 124.532010][ T6120] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 124.631402][ T5848] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 124.634121][ T5848] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 124.658892][ T5848] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 124.680072][ T5848] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 124.689272][ T5848] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 124.799612][ T6120] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 124.799649][ T6120] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.799668][ T6120] usb 1-1: Product: syz [ 124.799681][ T6120] usb 1-1: Manufacturer: syz [ 124.799694][ T6120] usb 1-1: SerialNumber: syz [ 124.868806][ T6120] usb 1-1: config 0 descriptor?? [ 125.129013][ T6120] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 125.950503][ T6138] lo speed is unknown, defaulting to 1000 [ 125.950887][ T6138] lo speed is unknown, defaulting to 1000 [ 125.954268][ T6138] lo speed is unknown, defaulting to 1000 [ 125.961997][ T6138] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 125.974932][ T6138] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 126.219681][ T6138] lo speed is unknown, defaulting to 1000 [ 126.222943][ T6138] lo speed is unknown, defaulting to 1000 [ 126.226113][ T6138] lo speed is unknown, defaulting to 1000 [ 126.228983][ T6138] lo speed is unknown, defaulting to 1000 [ 126.231857][ T6138] lo speed is unknown, defaulting to 1000 [ 126.234782][ T6138] lo speed is unknown, defaulting to 1000 [ 126.776331][ T5848] Bluetooth: hci5: command tx timeout [ 127.648964][ T6157] Set syz0 is full, maxelem 0 reached [ 127.794133][ T6130] chnl_net:caif_netlink_parms(): no params data found [ 128.739546][ T6120] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 128.771122][ T6120] usb 1-1: USB disconnect, device number 2 [ 128.905068][ T5848] Bluetooth: hci5: command tx timeout [ 130.998795][ T5848] Bluetooth: hci5: command tx timeout [ 131.525591][ T6186] sctp: [Deprecated]: syz.4.58 (pid 6186) Use of struct sctp_assoc_value in delayed_ack socket option. [ 131.525591][ T6186] Use struct sctp_sack_info instead [ 132.842731][ T6130] bridge0: port 1(bridge_slave_0) entered blocking state [ 132.842870][ T6130] bridge0: port 1(bridge_slave_0) entered disabled state [ 132.843106][ T6130] bridge_slave_0: entered allmulticast mode [ 132.847154][ T6130] bridge_slave_0: entered promiscuous mode [ 132.900101][ T1324] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.900195][ T1324] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.038761][ T5848] Bluetooth: hci5: command tx timeout [ 133.956271][ T6130] bridge0: port 2(bridge_slave_1) entered blocking state [ 133.956349][ T6130] bridge0: port 2(bridge_slave_1) entered disabled state [ 133.956513][ T6130] bridge_slave_1: entered allmulticast mode [ 134.012257][ T6130] bridge_slave_1: entered promiscuous mode [ 135.535897][ T37] audit: type=1107 audit(1758986117.017:2): pid=6201 uid=0 auid=4294967295 ses=4294967295 subj=_ msg='' [ 136.482552][ T6130] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 136.486748][ T6130] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 136.820902][ T6214] ptrace attach of "./syz-executor exec"[5836] was attempted by " [ 138.830303][ T6130] team0: Port device team_slave_0 added [ 138.833783][ T6130] team0: Port device team_slave_1 added [ 140.490669][ T6130] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 140.490685][ T6130] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 140.490706][ T6130] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 140.549240][ T6130] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 140.549255][ T6130] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 140.549278][ T6130] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 141.145444][ T6130] hsr_slave_0: entered promiscuous mode [ 141.146795][ T6130] hsr_slave_1: entered promiscuous mode [ 141.147622][ T6130] debugfs: 'hsr0' already exists in 'hsr' [ 141.147644][ T6130] Cannot create hsr debugfs directory [ 146.635436][ T6289] netlink: 12 bytes leftover after parsing attributes in process `syz.2.85'. [ 148.712755][ T6130] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 150.158380][ T6130] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 151.067082][ T6130] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 151.131236][ T6130] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 154.284522][ T6130] 8021q: adding VLAN 0 to HW filter on device bond0 [ 155.824519][ T6357] kAFS: unparsable volume name [ 156.764410][ T6130] 8021q: adding VLAN 0 to HW filter on device team0 [ 158.031225][ T1176] bridge0: port 1(bridge_slave_0) entered blocking state [ 158.032323][ T1176] bridge0: port 1(bridge_slave_0) entered forwarding state [ 158.054283][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 158.055024][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 161.467926][ T6130] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 162.225293][ T6407] F2FS-fs (loop9): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 162.225370][ T6407] F2FS-fs (loop9): Can't find valid F2FS filesystem in 1th superblock [ 162.229818][ T6407] F2FS-fs (loop9): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 162.229885][ T6407] F2FS-fs (loop9): Can't find valid F2FS filesystem in 2th superblock [ 164.783033][ T6423] process 'syz.2.115' launched '/dev/fd/10' with NULL argv: empty string added [ 164.928885][ T6120] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 164.990444][ T5923] libceph: connect (1)[c::]:6789 error -101 [ 165.042973][ T5923] libceph: mon0 (1)[c::]:6789 connect error [ 165.074730][ T6420] ceph: No mds server is up or the cluster is laggy [ 165.090031][ T5923] libceph: connect (1)[c::]:6789 error -101 [ 165.090656][ T5923] libceph: mon0 (1)[c::]:6789 connect error [ 165.110588][ T6120] usb 4-1: Using ep0 maxpacket: 16 [ 165.112373][ T6120] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 165.115586][ T6120] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 165.115602][ T6120] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.115612][ T6120] usb 4-1: Product: syz [ 165.115619][ T6120] usb 4-1: Manufacturer: syz [ 165.115626][ T6120] usb 4-1: SerialNumber: syz [ 165.118592][ T6120] usb 4-1: config 0 descriptor?? [ 165.518285][ T6130] veth0_vlan: entered promiscuous mode [ 165.641721][ T6130] veth1_vlan: entered promiscuous mode [ 167.743635][ T6130] veth0_macvtap: entered promiscuous mode [ 167.762750][ T6130] veth1_macvtap: entered promiscuous mode [ 167.926323][ C1] vkms_vblank_simulate: vblank timer overrun [ 167.945631][ T5909] usb 4-1: USB disconnect, device number 2 [ 168.870937][ C1] vkms_vblank_simulate: vblank timer overrun [ 168.976727][ C1] vkms_vblank_simulate: vblank timer overrun [ 169.162372][ T6130] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 169.279676][ T6130] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 170.432891][ C1] vkms_vblank_simulate: vblank timer overrun [ 170.520019][ C1] vkms_vblank_simulate: vblank timer overrun [ 170.617515][ T6454] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 170.769902][ C1] vkms_vblank_simulate: vblank timer overrun [ 171.160872][ T1176] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.161122][ T1176] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.161703][ T1176] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.162944][ T1176] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.554957][ C1] vkms_vblank_simulate: vblank timer overrun [ 171.892573][ C1] vkms_vblank_simulate: vblank timer overrun [ 172.690979][ C1] vkms_vblank_simulate: vblank timer overrun [ 173.820768][ T5909] libceph: connect (1)[c::]:6789 error -101 [ 173.820992][ T5909] libceph: mon0 (1)[c::]:6789 connect error [ 173.849376][ T5909] libceph: connect (1)[c::]:6789 error -101 [ 173.849594][ T5909] libceph: mon0 (1)[c::]:6789 connect error [ 174.110999][ T5909] libceph: connect (1)[c::]:6789 error -101 [ 174.111189][ T5909] libceph: mon0 (1)[c::]:6789 connect error [ 174.173106][ T6474] ceph: No mds server is up or the cluster is laggy [ 175.158296][ T31] libceph: connect (1)[c::]:6789 error -101 [ 175.158521][ T31] libceph: mon0 (1)[c::]:6789 connect error [ 175.849530][ T6470] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 175.849543][ T6470] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 176.058179][ T43] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 176.058198][ T43] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 180.924866][ T6513] Zero length message leads to an empty skb [ 184.887076][ T6538] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 187.112790][ T6555] netlink: 120 bytes leftover after parsing attributes in process `syz.3.145'. [ 187.861932][ T59] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 187.866910][ T59] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 187.868500][ T59] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 187.871346][ T59] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 187.872402][ T59] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 188.019020][ T6558] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 188.627339][ T6556] lo speed is unknown, defaulting to 1000 [ 190.093928][ T6579] netlink: 'syz.3.150': attribute type 1 has an invalid length. [ 190.093975][ T6579] netlink: 224 bytes leftover after parsing attributes in process `syz.3.150'. [ 190.264470][ T6580] openvswitch: netlink: IP tunnel dst address not specified [ 190.688687][ T5848] Bluetooth: hci6: command tx timeout [ 192.667533][ T6116] IPVS: starting estimator thread 0... [ 192.807290][ T5848] Bluetooth: hci6: command tx timeout [ 192.879058][ T6592] IPVS: using max 7 ests per chain, 16800 per kthread [ 194.803245][ T1324] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.803319][ T1324] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.926769][ T5848] Bluetooth: hci6: command tx timeout [ 195.537303][ T6602] binder: BINDER_SET_CONTEXT_MGR already set [ 195.537313][ T6602] binder: 6601:6602 ioctl 4018620d 200000004a80 returned -16 [ 197.956874][ T5848] Bluetooth: hci6: command tx timeout [ 199.807331][ C0] vkms_vblank_simulate: vblank timer overrun [ 200.923543][ C0] vkms_vblank_simulate: vblank timer overrun [ 201.425053][ C0] vkms_vblank_simulate: vblank timer overrun [ 201.613168][ T1025] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.796093][ C0] vkms_vblank_simulate: vblank timer overrun [ 203.221843][ C0] vkms_vblank_simulate: vblank timer overrun [ 203.423708][ C0] vkms_vblank_simulate: vblank timer overrun [ 203.522650][ C0] vkms_vblank_simulate: vblank timer overrun [ 203.794821][ C0] vkms_vblank_simulate: vblank timer overrun [ 204.195773][ C0] vkms_vblank_simulate: vblank timer overrun [ 204.339272][ C0] vkms_vblank_simulate: vblank timer overrun [ 204.529558][ T1025] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.685014][ T5923] libceph: connect (1)[c::]:6789 error -101 [ 204.685209][ T5923] libceph: mon0 (1)[c::]:6789 connect error [ 205.070959][ T6641] ceph: No mds server is up or the cluster is laggy [ 205.882402][ T1025] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.961048][ T37] audit: type=1800 audit(1758986191.507:3): pid=6686 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.0.178" name="/" dev="9p" ino=2 res=0 errno=0 [ 210.347537][ T1025] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.321244][ T5857] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 211.345267][ T5857] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 211.346947][ T5857] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 211.348161][ T5857] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 211.363658][ T5857] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 211.675186][ T6690] lo speed is unknown, defaulting to 1000 [ 212.434565][ T5859] Bluetooth: hci4: command 0x0406 tx timeout [ 212.434707][ T5859] Bluetooth: hci2: command 0x0406 tx timeout [ 212.434732][ T5859] Bluetooth: hci1: command 0x0406 tx timeout [ 212.434756][ T5859] Bluetooth: hci3: command 0x0406 tx timeout [ 212.434780][ T5859] Bluetooth: hci0: command 0x0406 tx timeout [ 213.919736][ T5842] Bluetooth: hci5: command tx timeout [ 214.190404][ T6556] chnl_net:caif_netlink_parms(): no params data found [ 215.737615][ C1] vkms_vblank_simulate: vblank timer overrun [ 216.170822][ C1] vkms_vblank_simulate: vblank timer overrun [ 216.228764][ T5842] Bluetooth: hci5: command tx timeout [ 216.879182][ C1] vkms_vblank_simulate: vblank timer overrun [ 217.245927][ C1] vkms_vblank_simulate: vblank timer overrun [ 217.329521][ C1] vkms_vblank_simulate: vblank timer overrun [ 217.650364][ C1] vkms_vblank_simulate: vblank timer overrun [ 218.190945][ C1] vkms_vblank_simulate: vblank timer overrun [ 218.239193][ T5842] Bluetooth: hci5: command tx timeout [ 218.730393][ C1] vkms_vblank_simulate: vblank timer overrun [ 218.881908][ C1] vkms_vblank_simulate: vblank timer overrun [ 220.332140][ T5842] Bluetooth: hci5: command tx timeout [ 223.374606][ T6556] bridge0: port 1(bridge_slave_0) entered blocking state [ 223.374745][ T6556] bridge0: port 1(bridge_slave_0) entered disabled state [ 223.375033][ T6556] bridge_slave_0: entered allmulticast mode [ 223.418494][ T6556] bridge_slave_0: entered promiscuous mode [ 224.119005][ T6556] bridge0: port 2(bridge_slave_1) entered blocking state [ 224.119160][ T6556] bridge0: port 2(bridge_slave_1) entered disabled state [ 224.119402][ T6556] bridge_slave_1: entered allmulticast mode [ 224.136801][ T6556] bridge_slave_1: entered promiscuous mode [ 224.454808][ T982] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 224.601161][ T1025] bridge_slave_1: left allmulticast mode [ 224.628877][ T1025] bridge_slave_1: left promiscuous mode [ 224.637318][ T1025] bridge0: port 2(bridge_slave_1) entered disabled state [ 224.686870][ T982] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 224.686898][ T982] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 224.686916][ T982] usb 5-1: Product: syz [ 224.686929][ T982] usb 5-1: Manufacturer: syz [ 224.686943][ T982] usb 5-1: SerialNumber: syz [ 225.483884][ T982] usb 5-1: config 0 descriptor?? [ 225.587319][ T1025] bridge_slave_0: left allmulticast mode [ 225.587351][ T1025] bridge_slave_0: left promiscuous mode [ 225.587715][ T1025] bridge0: port 1(bridge_slave_0) entered disabled state [ 225.691569][ T982] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 229.072629][ T982] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 229.087609][ T982] usb 5-1: USB disconnect, device number 2 [ 231.334810][ T6832] capability: warning: `syz.2.206' uses deprecated v2 capabilities in a way that may be insecure [ 233.221050][ T6851] kvm: kvm [6850]: vcpu0, guest rIP: 0x9c Unhandled WRMSR(0x11e) = 0xbe702911 [ 233.223220][ T6851] kvm: kvm [6850]: vcpu0, guest rIP: 0x9c Unhandled WRMSR(0x186) = 0x800 [ 233.223416][ T6851] kvm: kvm [6850]: vcpu0, guest rIP: 0x9c Unhandled WRMSR(0x187) = 0x800 [ 241.299600][ T6883] netlink: 4 bytes leftover after parsing attributes in process `syz.2.216'. [ 241.304162][ T6882] netlink: 4 bytes leftover after parsing attributes in process `syz.2.216'. [ 242.169981][ C0] vkms_vblank_simulate: vblank timer overrun [ 242.990386][ C0] vkms_vblank_simulate: vblank timer overrun [ 243.026619][ T1025] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 243.270836][ T1025] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 243.321996][ T1025] bond0 (unregistering): Released all slaves [ 243.779129][ T6556] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 244.479777][ C0] vkms_vblank_simulate: vblank timer overrun [ 244.558560][ T6556] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 247.437987][ T5155] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 247.451853][ T5155] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 247.490432][ T5155] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 247.496636][ T5155] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 247.497235][ T5155] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 247.698755][ T6908] tipc: Started in network mode [ 247.698789][ T6908] tipc: Node identity fe6c3eaa189, cluster identity 4711 [ 247.699678][ T6908] tipc: Enabled bearer , priority 0 [ 247.703972][ T6911] syzkaller0: entered promiscuous mode [ 247.703999][ T6911] syzkaller0: entered allmulticast mode [ 247.730512][ T6919] tipc: Resetting bearer [ 247.909061][ T6904] tipc: Resetting bearer [ 248.139940][ T6904] tipc: Disabling bearer [ 248.758906][ T6520] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 248.918831][ T6520] usb 5-1: Using ep0 maxpacket: 32 [ 248.934919][ T6520] usb 5-1: config 1 has an invalid descriptor of length 102, skipping remainder of the config [ 248.934943][ T6520] usb 5-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 249.827994][ T6520] usb 5-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 249.828024][ T6520] usb 5-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 249.828045][ T6520] usb 5-1: Product: syz [ 249.828059][ T6520] usb 5-1: Manufacturer: syz [ 249.828073][ T6520] usb 5-1: SerialNumber: syz [ 249.912593][ T6927] syzkaller0: entered promiscuous mode [ 249.912622][ T6927] syzkaller0: entered allmulticast mode [ 250.017716][ T5842] Bluetooth: hci7: command tx timeout [ 251.478836][ T6116] usb 5-1: USB disconnect, device number 3 [ 252.349154][ T5842] Bluetooth: hci7: command tx timeout [ 254.514738][ T5842] Bluetooth: hci7: command tx timeout [ 254.636094][ T6690] chnl_net:caif_netlink_parms(): no params data found [ 255.774182][ T1324] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.774256][ T1324] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.484984][ T5842] Bluetooth: hci7: command tx timeout [ 258.401344][ T1025] hsr_slave_0: left promiscuous mode [ 259.377091][ T6989] Bluetooth: MGMT ver 1.23 [ 259.398896][ T6989] Bluetooth: hci0: invalid length 0, exp 2 for type 12 [ 259.562003][ T1025] hsr_slave_1: left promiscuous mode [ 259.565854][ T1025] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 259.565926][ T1025] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 259.630884][ T1025] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 259.630915][ T1025] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 260.024897][ T6044] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 260.866535][ T1025] veth1_macvtap: left promiscuous mode [ 260.870034][ T1025] veth0_macvtap: left promiscuous mode [ 260.874793][ T1025] veth1_vlan: left promiscuous mode [ 260.882407][ T1025] veth0_vlan: left promiscuous mode [ 261.121885][ T6044] usb 5-1: Using ep0 maxpacket: 16 [ 261.126558][ T6044] usb 5-1: config 0 has an invalid interface number: 251 but max is 0 [ 261.126584][ T6044] usb 5-1: config 0 has no interface number 0 [ 261.126633][ T6044] usb 5-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 261.126658][ T6044] usb 5-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 261.127759][ T7001] binder: 7000:7001 ioctl 4018620d 0 returned -22 [ 261.183456][ T6044] usb 5-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 261.183485][ T6044] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 261.183504][ T6044] usb 5-1: Product: syz [ 261.183518][ T6044] usb 5-1: Manufacturer: syz [ 261.183532][ T6044] usb 5-1: SerialNumber: syz [ 261.234987][ T6044] usb 5-1: config 0 descriptor?? [ 261.250953][ T6991] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 261.251348][ T6991] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 261.596391][ T6991] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 261.596665][ T6991] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 261.799013][ T6044] asix 5-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 261.799043][ T6044] asix 5-1:0.251 (unnamed net_device) (uninitialized): Failed to read MAC address: -32 [ 261.799676][ T6044] asix 5-1:0.251: probe with driver asix failed with error -5 [ 262.783755][ T7007] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 262.784370][ T7007] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 263.189873][ T6120] usb 5-1: USB disconnect, device number 4 [ 267.014971][ T7047] 9pnet_fd: Insufficient options for proto=fd [ 268.710725][ T6116] libceph: connect (1)[c::]:6789 error -101 [ 268.710929][ T6116] libceph: mon0 (1)[c::]:6789 connect error [ 268.853810][ T7058] ceph: No mds server is up or the cluster is laggy [ 269.244737][ T6116] libceph: connect (1)[c::]:6789 error -101 [ 269.259439][ T6116] libceph: mon0 (1)[c::]:6789 connect error [ 269.664021][ T5155] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 269.683402][ T5155] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 269.684605][ T5155] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 269.685755][ T5155] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 269.686520][ T5155] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 271.766664][ T5842] Bluetooth: hci6: command tx timeout [ 273.040688][ T7078] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 273.861986][ T5155] Bluetooth: hci6: command tx timeout [ 276.187581][ T5155] Bluetooth: hci6: command tx timeout [ 278.321559][ T5155] Bluetooth: hci6: command tx timeout [ 280.656048][ T1025] team0 (unregistering): Port device team_slave_1 removed [ 281.592291][ T1025] team0 (unregistering): Port device team_slave_0 removed [ 282.013989][ T5842] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 282.026316][ T5842] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 282.051117][ T5842] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 282.052660][ T5842] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 282.053492][ T5842] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 283.618409][ T7030] tipc: Enabling of bearer rejected, failed to enable media [ 283.780901][ T6922] lo speed is unknown, defaulting to 1000 [ 284.078939][ T5155] Bluetooth: hci8: command tx timeout [ 284.450836][ T7063] lo speed is unknown, defaulting to 1000 [ 285.408750][ T6120] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 285.603199][ T6120] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 285.603256][ T6120] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 285.603279][ T6120] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 285.640262][ T7124] lo speed is unknown, defaulting to 1000 [ 285.681060][ T6120] usb 3-1: config 0 descriptor?? [ 285.733210][ T6120] pwc: Askey VC010 type 2 USB webcam detected. [ 286.128712][ T6120] pwc: recv_control_msg error -32 req 02 val 2b00 [ 286.130444][ T6120] pwc: recv_control_msg error -32 req 02 val 2700 [ 286.132222][ T6120] pwc: recv_control_msg error -32 req 02 val 2c00 [ 286.132999][ T6120] pwc: recv_control_msg error -32 req 04 val 1000 [ 286.133670][ T6120] pwc: recv_control_msg error -32 req 04 val 1300 [ 286.134346][ T6120] pwc: recv_control_msg error -32 req 04 val 1400 [ 286.136118][ T6120] pwc: recv_control_msg error -32 req 02 val 2000 [ 286.142884][ T6120] pwc: recv_control_msg error -32 req 02 val 2100 [ 286.145136][ T6120] pwc: recv_control_msg error -32 req 04 val 1500 [ 286.145873][ T6120] pwc: recv_control_msg error -32 req 02 val 2500 [ 286.146609][ T6120] pwc: recv_control_msg error -32 req 02 val 2400 [ 286.147341][ T6120] pwc: recv_control_msg error -32 req 02 val 2600 [ 286.148050][ T6120] pwc: recv_control_msg error -32 req 02 val 2900 [ 286.158954][ T5155] Bluetooth: hci8: command tx timeout [ 286.159225][ T6120] pwc: recv_control_msg error -32 req 02 val 2800 [ 286.385931][ T6120] pwc: recv_control_msg error -71 req 04 val 1200 [ 286.464373][ T6120] pwc: Registered as video103. [ 286.534532][ T6120] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input5 [ 286.600192][ T6120] usb 3-1: USB disconnect, device number 2 [ 288.420804][ T5155] Bluetooth: hci8: command tx timeout [ 290.478824][ T5155] Bluetooth: hci8: command tx timeout [ 295.028376][ T7216] overlayfs: failed to resolve './file0': -2 [ 295.032219][ T6922] chnl_net:caif_netlink_parms(): no params data found [ 301.379192][ T7124] chnl_net:caif_netlink_parms(): no params data found [ 301.387580][ T7063] chnl_net:caif_netlink_parms(): no params data found [ 301.472664][ T7226] syz.4.279: vmalloc error: size 6291456, failed to allocated page array size 12288, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 301.472901][ T7226] CPU: 1 UID: 0 PID: 7226 Comm: syz.4.279 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 301.472914][ T7226] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 301.472926][ T7226] Call Trace: [ 301.472930][ T7226] [ 301.472935][ T7226] dump_stack_lvl+0x189/0x250 [ 301.472964][ T7226] ? __pfx_dump_stack_lvl+0x10/0x10 [ 301.472979][ T7226] ? __pfx__printk+0x10/0x10 [ 301.472990][ T7226] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 301.473002][ T7226] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 301.473017][ T7226] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 301.473029][ T7226] warn_alloc+0x22e/0x3b0 [ 301.473044][ T7226] ? __pfx_warn_alloc+0x10/0x10 [ 301.473058][ T7226] ? __get_vm_area_node+0x2bc/0x350 [ 301.473073][ T7226] ? hash_ipport4_resize+0x1ec/0x1a80 [ 301.473091][ T7226] __vmalloc_node_range_noprof+0x67e/0x12f0 [ 301.473121][ T7226] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 301.473138][ T7226] ? rcu_is_watching+0x15/0xb0 [ 301.473155][ T7226] __kvmalloc_node_noprof+0x330/0x550 [ 301.473169][ T7226] ? hash_ipport4_resize+0x1ec/0x1a80 [ 301.473182][ T7226] ? hash_ipport4_resize+0x1ec/0x1a80 [ 301.473199][ T7226] hash_ipport4_resize+0x1ec/0x1a80 [ 301.473218][ T7226] ? __pfx_hash_ipport4_add+0x10/0x10 [ 301.473234][ T7226] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 301.473255][ T7226] ? call_ad+0x102/0x9c0 [ 301.473270][ T7226] call_ad+0x3c8/0x9c0 [ 301.473286][ T7226] ? __pfx_call_ad+0x10/0x10 [ 301.473306][ T7226] ? __nla_parse+0x40/0x60 [ 301.473319][ T7226] ip_set_ad+0x797/0x940 [ 301.473339][ T7226] ? __pfx_ip_set_ad+0x10/0x10 [ 301.473349][ T7226] ? do_raw_spin_lock+0x121/0x290 [ 301.473382][ T7226] nfnetlink_rcv_msg+0xb66/0x1150 [ 301.473394][ T7226] ? __lock_acquire+0xab9/0xd20 [ 301.473407][ T7226] ? nfnetlink_rcv_msg+0x212/0x1150 [ 301.473429][ T7226] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 301.473455][ T7226] ? __pfx_migrate_enable+0x10/0x10 [ 301.473468][ T7226] ? __pfx_migrate_enable+0x10/0x10 [ 301.473489][ T7226] netlink_rcv_skb+0x205/0x470 [ 301.473504][ T7226] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 301.473516][ T7226] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 301.473536][ T7226] ? bpf_lsm_capable+0x9/0x20 [ 301.473548][ T7226] ? security_capable+0x7e/0x2e0 [ 301.473566][ T7226] nfnetlink_rcv+0x26a/0x2530 [ 301.473580][ T7226] ? __dev_queue_xmit+0x1d3d/0x3b70 [ 301.473596][ T7226] ? __dev_queue_xmit+0x26f/0x3b70 [ 301.473614][ T7226] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 301.473626][ T7226] ? __pfx___dev_queue_xmit+0x10/0x10 [ 301.473644][ T7226] ? ref_tracker_free+0x61e/0x7c0 [ 301.473659][ T7226] ? __asan_memcpy+0x40/0x70 [ 301.473670][ T7226] ? __pfx_ref_tracker_free+0x10/0x10 [ 301.473683][ T7226] ? __skb_clone+0x63/0x7a0 [ 301.473696][ T7226] ? __skb_clone+0x483/0x7a0 [ 301.473710][ T7226] ? skb_clone+0x246/0x3a0 [ 301.473722][ T7226] ? __netlink_deliver_tap+0x807/0x850 [ 301.473735][ T7226] ? netlink_deliver_tap+0x2e/0x1b0 [ 301.473752][ T7226] ? netlink_deliver_tap+0x2e/0x1b0 [ 301.473770][ T7226] netlink_unicast+0x843/0xa10 [ 301.473787][ T7226] ? __pfx_netlink_unicast+0x10/0x10 [ 301.473800][ T7226] ? netlink_sendmsg+0x642/0xb30 [ 301.473812][ T7226] ? skb_put+0x11b/0x210 [ 301.473828][ T7226] netlink_sendmsg+0x805/0xb30 [ 301.473847][ T7226] ? __pfx_netlink_sendmsg+0x10/0x10 [ 301.473865][ T7226] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 301.473875][ T7226] ? __pfx_netlink_sendmsg+0x10/0x10 [ 301.473888][ T7226] __sock_sendmsg+0x21c/0x270 [ 301.473903][ T7226] ____sys_sendmsg+0x508/0x820 [ 301.473916][ T7226] ? __pfx_____sys_sendmsg+0x10/0x10 [ 301.473931][ T7226] ? import_iovec+0x74/0xa0 [ 301.473946][ T7226] ___sys_sendmsg+0x21f/0x2a0 [ 301.473961][ T7226] ? __pfx____sys_sendmsg+0x10/0x10 [ 301.473990][ T7226] ? __fget_files+0x2a/0x420 [ 301.474005][ T7226] ? __fget_files+0x3a6/0x420 [ 301.474024][ T7226] __x64_sys_sendmsg+0x1a1/0x260 [ 301.474035][ T7226] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 301.474051][ T7226] ? rcu_is_watching+0x15/0xb0 [ 301.474069][ T7226] ? do_syscall_64+0xbe/0x3b0 [ 301.474081][ T7226] do_syscall_64+0xfa/0x3b0 [ 301.474090][ T7226] ? lockdep_hardirqs_on+0x9c/0x150 [ 301.474104][ T7226] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 301.474114][ T7226] ? clear_bhb_loop+0x60/0xb0 [ 301.474126][ T7226] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 301.474136][ T7226] RIP: 0033:0x7f1bafe2eec9 [ 301.474149][ T7226] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 301.474158][ T7226] RSP: 002b:00007f1bae096038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 301.474168][ T7226] RAX: ffffffffffffffda RBX: 00007f1bb0085fa0 RCX: 00007f1bafe2eec9 [ 301.474176][ T7226] RDX: 0000000000000080 RSI: 00002000000002c0 RDI: 0000000000000004 [ 301.474183][ T7226] RBP: 00007f1bafeb1f91 R08: 0000000000000000 R09: 0000000000000000 [ 301.474189][ T7226] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 301.474195][ T7226] R13: 00007f1bb0086038 R14: 00007f1bb0085fa0 R15: 00007ffe742476c8 [ 301.474211][ T7226] [ 301.474299][ T7226] Mem-Info: [ 301.475345][ T7226] active_anon:261 inactive_anon:11905 isolated_anon:0 [ 301.475345][ T7226] active_file:5644 inactive_file:37722 isolated_file:0 [ 301.475345][ T7226] unevictable:768 dirty:121 writeback:0 [ 301.475345][ T7226] slab_reclaimable:12030 slab_unreclaimable:106962 [ 301.475345][ T7226] mapped:46329 shmem:7100 pagetables:1180 [ 301.475345][ T7226] sec_pagetables:0 bounce:0 [ 301.475345][ T7226] kernel_misc_reclaimable:0 [ 301.475345][ T7226] free:1292889 free_pcp:5662 free_cma:0 [ 301.477466][ T7226] Node 0 active_anon:1044kB inactive_anon:47620kB active_file:22376kB inactive_file:150888kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:185316kB dirty:484kB writeback:0kB shmem:26864kB kernel_stack:13712kB pagetables:4568kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 301.477816][ T7226] Node 1 active_anon:0kB inactive_anon:0kB active_file:200kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB kernel_stack:48kB pagetables:152kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 301.477840][ T7226] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 301.477877][ T7226] lowmem_reserve[]: 0 2511 2513 2513 2513 [ 301.477895][ T7226] Node 0 DMA32 free:1251812kB boost:0kB min:3940kB low:6484kB high:9028kB reserved_highatomic:0KB free_highatomic:0KB active_anon:1040kB inactive_anon:47580kB active_file:21364kB inactive_file:150820kB unevictable:1536kB writepending:480kB present:3129332kB managed:2572276kB mlocked:0kB bounce:0kB free_pcp:22636kB local_pcp:20800kB free_cma:0kB [ 301.477926][ T7226] lowmem_reserve[]: 0 0 1 1 1 [ 301.477942][ T7226] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:4kB inactive_anon:40kB active_file:1012kB inactive_file:68kB unevictable:0kB writepending:4kB present:1048580kB managed:1132kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 301.477975][ T7226] lowmem_reserve[]: 0 0 0 0 0 [ 301.477992][ T7226] Node 1 Normal free:3904384kB boost:0kB min:6364kB low:10472kB high:14580kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:200kB inactive_file:0kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 301.478021][ T7226] lowmem_reserve[]: 0 0 0 0 0 [ 301.478037][ T7226] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 301.478097][ T7226] Node 0 DMA32: 1267*4kB (U) 511*8kB (UE) 129*16kB (UE) 272*32kB (UM) 242*64kB (UME) 165*128kB (UME) 93*256kB (UME) 32*512kB (UME) 18*1024kB (UM) 3*2048kB (UM) 276*4096kB (M) = 1251796kB [ 301.478176][ T7226] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 301.478228][ T7226] Node 1 Normal: 232*4kB (UE) 60*8kB (UME) 34*16kB (UME) 215*32kB (UME) 102*64kB (UME) 35*128kB (UME) 12*256kB (UM) 3*512kB (UM) 5*1024kB (UME) 2*2048kB (UE) 945*4096kB (M) = 3904384kB [ 301.478311][ T7226] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 301.478320][ T7226] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 301.478328][ T7226] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 301.478336][ T7226] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 301.478344][ T7226] 50464 total pagecache pages [ 301.478350][ T7226] 0 pages in swap cache [ 301.478354][ T7226] Free swap = 124996kB [ 301.478358][ T7226] Total swap = 124996kB [ 301.478362][ T7226] 2097051 pages RAM [ 301.478365][ T7226] 0 pages HighMem/MovableOnly [ 301.478369][ T7226] 422084 pages reserved [ 301.478372][ T7226] 0 pages cma reserved [ 305.391420][ T1025] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 305.834243][ T6922] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wg2": -EINTR [ 308.005407][ T5155] Bluetooth: hci0: unexpected event for opcode 0x1408 [ 311.183715][ T5842] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 311.190959][ T5842] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 311.194773][ T5842] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 311.203924][ T5842] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 311.204833][ T5842] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 311.265684][ T1025] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.954859][ T1025] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.099786][ T5842] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 312.111381][ T5842] Bluetooth: hci0: Injecting HCI hardware error event [ 312.113450][ T5842] Bluetooth: hci0: hardware error 0x00 [ 313.280127][ T5155] Bluetooth: hci4: command tx timeout [ 314.239919][ T5842] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 314.520390][ T7328] libceph: resolve 'c9' (ret=-3): failed [ 315.358812][ T5842] Bluetooth: hci4: command tx timeout [ 316.638528][ T1025] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 316.814966][ T7063] bridge0: port 1(bridge_slave_0) entered blocking state [ 316.815145][ T7063] bridge0: port 1(bridge_slave_0) entered disabled state [ 316.815382][ T7063] bridge_slave_0: entered allmulticast mode [ 316.817219][ T7063] bridge_slave_0: entered promiscuous mode [ 317.477377][ T1324] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.477455][ T1324] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.481723][ T5155] Bluetooth: hci4: command tx timeout [ 317.482238][ T7124] bridge0: port 1(bridge_slave_0) entered blocking state [ 317.482384][ T7124] bridge0: port 1(bridge_slave_0) entered disabled state [ 317.482640][ T7124] bridge_slave_0: entered allmulticast mode [ 317.485281][ T7124] bridge_slave_0: entered promiscuous mode [ 318.808629][ T7063] bridge0: port 2(bridge_slave_1) entered blocking state [ 318.808771][ T7063] bridge0: port 2(bridge_slave_1) entered disabled state [ 318.809032][ T7063] bridge_slave_1: entered allmulticast mode [ 318.817524][ T7063] bridge_slave_1: entered promiscuous mode [ 318.820766][ T7124] bridge0: port 2(bridge_slave_1) entered blocking state [ 318.820894][ T7124] bridge0: port 2(bridge_slave_1) entered disabled state [ 318.821093][ T7124] bridge_slave_1: entered allmulticast mode [ 319.082147][ T7124] bridge_slave_1: entered promiscuous mode [ 319.905394][ T5842] Bluetooth: hci4: command tx timeout [ 323.077811][ T7063] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 323.103846][ T7303] lo speed is unknown, defaulting to 1000 [ 323.129562][ T7124] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 323.203405][ T7063] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 323.207222][ T7124] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 324.218175][ T7373] kvm: kvm [7372]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x1000a0000 [ 324.222181][ T7373] kvm: kvm [7372]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x187) = 0xa0000 [ 327.373716][ T7063] team0: Port device team_slave_0 added [ 327.382930][ T7124] team0: Port device team_slave_0 added [ 327.582988][ T7063] team0: Port device team_slave_1 added [ 327.585522][ T7124] team0: Port device team_slave_1 added [ 330.226629][ T37] audit: type=1326 audit(1758986567.157:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7410 comm="syz.4.315" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1bafe2eec9 code=0x0 [ 331.056613][ T7426] netlink: 8 bytes leftover after parsing attributes in process `syz.4.317'. [ 333.562469][ T7432] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 333.990016][ T7124] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 333.990031][ T7124] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 333.990055][ T7124] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 334.577068][ T7124] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 334.577083][ T7124] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 334.577107][ T7124] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 334.578372][ T1025] bridge_slave_1: left allmulticast mode [ 334.578501][ T1025] bridge_slave_1: left promiscuous mode [ 334.578981][ T1025] bridge0: port 2(bridge_slave_1) entered disabled state [ 334.932255][ T5155] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 334.941345][ T5155] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 334.942519][ T5155] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 334.943624][ T5155] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 334.944391][ T5155] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 335.451833][ T1025] bridge_slave_0: left allmulticast mode [ 335.451855][ T1025] bridge_slave_0: left promiscuous mode [ 335.452015][ T1025] bridge0: port 1(bridge_slave_0) entered disabled state [ 337.048896][ T5842] Bluetooth: hci5: command tx timeout [ 337.128009][ T1025] bridge_slave_1: left allmulticast mode [ 337.128044][ T1025] bridge_slave_1: left promiscuous mode [ 337.128290][ T1025] bridge0: port 2(bridge_slave_1) entered disabled state [ 338.283844][ T7454] netlink: 12 bytes leftover after parsing attributes in process `syz.2.324'. [ 339.265018][ T5155] Bluetooth: hci5: command tx timeout [ 339.327832][ T1025] bridge_slave_0: left allmulticast mode [ 339.327863][ T1025] bridge_slave_0: left promiscuous mode [ 339.330811][ T1025] bridge0: port 1(bridge_slave_0) entered disabled state [ 341.959931][ T5155] Bluetooth: hci5: command tx timeout [ 343.029798][ T5842] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 343.034172][ T5842] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 343.035897][ T5842] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 343.047104][ T5842] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 343.047838][ T5842] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 344.368966][ T5842] Bluetooth: hci5: command tx timeout [ 345.649610][ T5842] Bluetooth: hci6: command tx timeout [ 346.648698][ T38] INFO: task syz.3.151:6582 blocked for more than 143 seconds. [ 346.648721][ T38] Not tainted syzkaller #0 [ 346.648743][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 346.648764][ T38] task:syz.3.151 state:D stack:25992 pid:6582 tgid:6581 ppid:5839 task_flags:0x400140 flags:0x00004004 [ 346.648932][ T38] Call Trace: [ 346.648939][ T38] [ 346.648952][ T38] __schedule+0x16f3/0x4c20 [ 346.648996][ T38] ? update_load_avg+0xfb3/0x1880 [ 346.649026][ T38] ? __pfx___schedule+0x10/0x10 [ 346.649074][ T38] rt_mutex_schedule+0x77/0xf0 [ 346.649091][ T38] ? __rt_mutex_slowlock_locked+0x1a7/0x25e0 [ 346.649112][ T38] __rt_mutex_slowlock_locked+0x1e04/0x25e0 [ 346.649144][ T38] ? __rt_mutex_slowlock_locked+0x1a7/0x25e0 [ 346.649173][ T38] ? __pfx___rt_mutex_slowlock_locked+0x10/0x10 [ 346.649205][ T38] ? __pfx__raw_spin_lock_irq+0x10/0x10 [ 346.649233][ T38] ? rcu_is_watching+0x15/0xb0 [ 346.649261][ T38] __rwbase_read_lock+0xbc/0x180 [ 346.649281][ T38] ? __pfx___rwbase_read_lock+0x10/0x10 [ 346.649311][ T38] down_read+0x127/0x1f0 [ 346.649330][ T38] ? __pfx_down_read+0x10/0x10 [ 346.649359][ T38] super_lock+0x2a9/0x3b0 [ 346.649383][ T38] ? __pfx_super_lock+0x10/0x10 [ 346.649403][ T38] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 346.649431][ T38] ? rt_spin_unlock+0x65/0x80 [ 346.649458][ T38] __iterate_supers+0x126/0x290 [ 346.649478][ T38] ? __pfx_sync_inodes_one_sb+0x10/0x10 [ 346.649507][ T38] ksys_sync+0x94/0x150 [ 346.649530][ T38] ? __pfx_ksys_sync+0x10/0x10 [ 346.649550][ T38] ? rcu_is_watching+0x15/0xb0 [ 346.649580][ T38] ? do_syscall_64+0xbe/0x3b0 [ 346.649601][ T38] __ia32_sys_sync+0xe/0x20 [ 346.649623][ T38] do_syscall_64+0xfa/0x3b0 [ 346.649642][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 346.649659][ T38] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 346.649676][ T38] ? clear_bhb_loop+0x60/0xb0 [ 346.649698][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 346.649715][ T38] RIP: 0033:0x7f881924eec9 [ 346.649731][ T38] RSP: 002b:00007f88174ae038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a2 [ 346.649749][ T38] RAX: ffffffffffffffda RBX: 00007f88194a5fa0 RCX: 00007f881924eec9 [ 346.649763][ T38] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 346.649774][ T38] RBP: 00007f88194a5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 346.649785][ T38] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 346.649804][ T38] R13: 00007f88194a6038 R14: 00007f88194a5fa0 R15: 00007ffce0e94838 [ 346.649835][ T38] [ 346.649863][ T38] [ 346.649863][ T38] Showing all locks held in the system: [ 346.649875][ T38] 1 lock held by khungtaskd/38: [ 346.649885][ T38] #0: ffffffff8d9a8dc0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 346.649937][ T38] 4 locks held by kworker/u8:6/1025: [ 346.649952][ T38] 3 locks held by kworker/u8:9/1475: [ 346.649962][ T38] #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 346.650009][ T38] #1: ffffc9000556fbc0 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 346.650053][ T38] #2: ffffffff8ecd38b8 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 346.650106][ T38] 2 locks held by kworker/u8:12/3648: [ 346.650118][ T38] 2 locks held by dhcpcd/5501: [ 346.650128][ T38] #0: ffff888060b9c910 (nlk_cb_mutex-ROUTE){+.+.}-{4:4}, at: netlink_dump+0xbd/0xe90 [ 346.650173][ T38] #1: ffffffff8ecd38b8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_dumpit+0x92/0x200 [ 346.650219][ T38] 2 locks held by getty/5597: [ 346.650229][ T38] #0: ffff88823bf3c8a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 346.650270][ T38] #1: ffffc90003e8b2e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x444/0x1410 [ 346.650315][ T38] 1 lock held by syz-executor/5838: [ 346.650325][ T38] #0: ffff888031bda0d0 (&type->s_umount_key#51){++++}-{4:4}, at: deactivate_super+0xa9/0xe0 [ 346.650378][ T38] 5 locks held by kworker/u8:13/5982: [ 346.650389][ T38] 3 locks held by kworker/1:7/6044: [ 346.650399][ T38] #0: ffff888019898538 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 346.650444][ T38] #1: ffffc9000549fbc0 (deferred_process_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 346.650488][ T38] #2: ffffffff8ecd38b8 (rtnl_mutex){+.+.}-{4:4}, at: switchdev_deferred_process_work+0xe/0x20 [ 346.650533][ T38] 1 lock held by syz.3.151/6582: [ 346.650543][ T38] #0: ffff888031bda0d0 (&type->s_umount_key#51){++++}-{4:4}, at: super_lock+0x2a9/0x3b0 [ 346.650586][ T38] 1 lock held by syz-executor/7063: [ 346.650595][ T38] #0: ffffffff8ecd38b8 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x41/0x1c0 [ 346.650642][ T38] 2 locks held by syz-executor/7124: [ 346.650652][ T38] #0: ffffffff8f1efb10 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 346.650703][ T38] #1: ffffffff8ecd38b8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8db/0x1c70 [ 346.650748][ T38] 1 lock held by syz-executor/7303: [ 346.650758][ T38] #0: ffffffff8ecd38b8 (rtnl_mutex){+.+.}-{4:4}, at: __tun_chr_ioctl+0x37d/0x1df0 [ 346.650805][ T38] 1 lock held by syz-executor/7436: [ 346.650815][ T38] #0: ffffffff8ecd38b8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 346.650858][ T38] 1 lock held by syz-executor/7474: [ 346.650868][ T38] #0: ffffffff8ecd38b8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 346.650910][ T38] 2 locks held by syz.2.331/7486: [ 346.650921][ T38] [ 346.650925][ T38] ============================================= [ 346.650925][ T38] [ 346.650942][ T38] NMI backtrace for cpu 0 [ 346.650955][ T38] CPU: 0 UID: 0 PID: 38 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 346.650975][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 346.650984][ T38] Call Trace: [ 346.650991][ T38] [ 346.650998][ T38] dump_stack_lvl+0x189/0x250 [ 346.651025][ T38] ? __pfx_dump_stack_lvl+0x10/0x10 [ 346.651048][ T38] ? __pfx__printk+0x10/0x10 [ 346.651079][ T38] nmi_cpu_backtrace+0x39e/0x3d0 [ 346.651103][ T38] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 346.651127][ T38] ? __pfx__printk+0x10/0x10 [ 346.651150][ T38] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 346.651173][ T38] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 346.651198][ T38] watchdog+0xf93/0xfe0 [ 346.651224][ T38] ? watchdog+0x1de/0xfe0 [ 346.651251][ T38] kthread+0x711/0x8a0 [ 346.651277][ T38] ? __pfx_watchdog+0x10/0x10 [ 346.651297][ T38] ? __pfx_kthread+0x10/0x10 [ 346.651325][ T38] ? __pfx_kthread+0x10/0x10 [ 346.651349][ T38] ret_from_fork+0x436/0x7d0 [ 346.651372][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 346.651399][ T38] ? __switch_to_asm+0x39/0x70 [ 346.651415][ T38] ? __switch_to_asm+0x33/0x70 [ 346.651430][ T38] ? __pfx_kthread+0x10/0x10 [ 346.651454][ T38] ret_from_fork_asm+0x1a/0x30 [ 346.651486][ T38] [ 346.651492][ T38] Sending NMI from CPU 0 to CPUs 1: [ 346.651517][ C1] NMI backtrace for cpu 1 [ 346.651530][ C1] CPU: 1 UID: 0 PID: 7486 Comm: syz.2.331 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 346.651552][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 346.651560][ C1] RIP: 0010:rcu_is_watching+0x6/0xb0 [ 346.651582][ C1] Code: e8 ff 47 4a 03 eb cc 66 66 66 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 41 57 <41> 56 53 65 ff 05 00 2b 51 10 e8 ab 35 52 09 89 c3 83 f8 08 73 65 [ 346.651594][ C1] RSP: 0018:ffffc90003fe75d8 EFLAGS: 00000057 [ 346.651607][ C1] RAX: 0000000000000001 RBX: 0000000000000001 RCX: ffffffff81c61308 [ 346.651617][ C1] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffff8f1d6230 [ 346.651627][ C1] RBP: ffffc90003fe7680 R08: ffffffff8f1d6237 R09: 1ffffffff1e3ac46 [ 346.651638][ C1] R10: dffffc0000000000 R11: fffffbfff1e3ac47 R12: dffffc0000000000 [ 346.651649][ C1] R13: dffffc0000000000 R14: 0000000000000a06 R15: 1ffff920007fcec0 [ 346.651660][ C1] FS: 00007fd455a5d6c0(0000) GS:ffff8881269bc000(0000) knlGS:0000000000000000 [ 346.651674][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 346.651685][ C1] CR2: 000000110c370cd6 CR3: 000000002308e000 CR4: 00000000003526f0 [ 346.651698][ C1] Call Trace: [ 346.651704][ C1] [ 346.651710][ C1] trace_irq_disable+0x37/0x110 [ 346.651728][ C1] _raw_spin_lock_irqsave+0x82/0xf0 [ 346.651747][ C1] ? __pfx__raw_spin_lock_irqsave+0x10/0x10 [ 346.651765][ C1] ? rt_mutex_slowunlock+0x1be/0x2e0 [ 346.651782][ C1] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 346.651801][ C1] ? __unix_dgram_recvmsg+0x1e1/0xd60 [ 346.651816][ C1] mutex_lock_nested+0xe4/0x1d0 [ 346.651831][ C1] ? __unix_dgram_recvmsg+0x1e1/0xd60 [ 346.651848][ C1] __unix_dgram_recvmsg+0x1e1/0xd60 [ 346.651869][ C1] ? __pfx___unix_dgram_recvmsg+0x10/0x10 [ 346.651883][ C1] ? irqentry_exit+0x74/0x90 [ 346.651904][ C1] ? unix_dgram_recvmsg+0xb1/0xd0 [ 346.651920][ C1] ? __pfx_unix_dgram_recvmsg+0x10/0x10 [ 346.651937][ C1] sock_recvmsg_nosec+0x186/0x1c0 [ 346.651957][ C1] ____sys_recvmsg+0x3ab/0x470 [ 346.651976][ C1] ? __pfx_____sys_recvmsg+0x10/0x10 [ 346.651998][ C1] ? import_iovec+0x74/0xa0 [ 346.652017][ C1] ___sys_recvmsg+0x1b5/0x510 [ 346.652034][ C1] ? __pfx____sys_recvmsg+0x10/0x10 [ 346.652063][ C1] ? __might_fault+0xb0/0x130 [ 346.652084][ C1] do_recvmmsg+0x30d/0x770 [ 346.652103][ C1] ? __pfx_do_recvmmsg+0x10/0x10 [ 346.652123][ C1] ? __pfx_do_futex+0x10/0x10 [ 346.652146][ C1] __x64_sys_recvmmsg+0x190/0x240 [ 346.652162][ C1] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 346.652176][ C1] ? rcu_is_watching+0x15/0xb0 [ 346.652197][ C1] ? do_syscall_64+0xbe/0x3b0 [ 346.652213][ C1] do_syscall_64+0xfa/0x3b0 [ 346.652226][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 346.652244][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 346.652258][ C1] ? clear_bhb_loop+0x60/0xb0 [ 346.652274][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 346.652288][ C1] RIP: 0033:0x7fd45781eec9 [ 346.652300][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 346.652312][ C1] RSP: 002b:00007fd455a5d038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 346.652326][ C1] RAX: ffffffffffffffda RBX: 00007fd457a76090 RCX: 00007fd45781eec9 [ 346.652337][ C1] RDX: 0000000000010106 RSI: 00002000000000c0 RDI: 0000000000000003 [ 346.652347][ C1] RBP: 00007fd4578a1f91 R08: 0000000000000000 R09: 0000000000000000 [ 346.652356][ C1] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 346.652365][ C1] R13: 00007fd457a76128 R14: 00007fd457a76090 R15: 00007ffc5bc85ef8 [ 346.652384][ C1] [ 346.652516][ T38] Kernel panic - not syncing: hung_task: blocked tasks [ 346.652529][ T38] CPU: 0 UID: 0 PID: 38 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 346.652548][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 346.652558][ T38] Call Trace: [ 346.652565][ T38] [ 346.652572][ T38] dump_stack_lvl+0x99/0x250 [ 346.652595][ T38] ? __asan_memcpy+0x40/0x70 [ 346.652614][ T38] ? __pfx_dump_stack_lvl+0x10/0x10 [ 346.652637][ T38] ? __pfx__printk+0x10/0x10 [ 346.652668][ T38] vpanic+0x281/0x750 [ 346.652694][ T38] ? __pfx_vpanic+0x10/0x10 [ 346.652714][ T38] ? __x2apic_send_IPI_mask+0x1e4/0x260 [ 346.652733][ T38] ? lockdep_hardirqs_on+0x9c/0x150 [ 346.652766][ T38] panic+0xb9/0xc0 [ 346.652788][ T38] ? __pfx_panic+0x10/0x10 [ 346.652819][ T38] ? irq_work_queue+0xc3/0x140 [ 346.652844][ T38] ? nmi_trigger_cpumask_backtrace+0x234/0x300 [ 346.652869][ T38] watchdog+0xfd2/0xfe0 [ 346.652894][ T38] ? watchdog+0x1de/0xfe0 [ 346.652920][ T38] kthread+0x711/0x8a0 [ 346.652946][ T38] ? __pfx_watchdog+0x10/0x10 [ 346.652966][ T38] ? __pfx_kthread+0x10/0x10 [ 346.652993][ T38] ? __pfx_kthread+0x10/0x10 [ 346.653018][ T38] ret_from_fork+0x436/0x7d0 [ 346.653041][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 346.653069][ T38] ? __switch_to_asm+0x39/0x70 [ 346.653084][ T38] ? __switch_to_asm+0x33/0x70 [ 346.653100][ T38] ? __pfx_kthread+0x10/0x10 [ 346.653125][ T38] ret_from_fork_asm+0x1a/0x30 [ 346.653157][ T38] [ 346.653449][ T38] Kernel Offset: disabled